Cannot browse Kafka Connect Connectors #983

hamedsaadat · 2025-03-24T13:43:40Z

hamedsaadat
Mar 24, 2025

Hello,

I can browser the broker and schema regirstry in Kafbat GUI.
But I cannot browser the connectors in Kafka Connect

here is the Kafbat config file:

[root@s3tlakfk03std ~]# cat kafka-ui.yaml kafka: clusters: - name: hamedcluster bootstrapServers: S3TLAKFK03STD.testgroup.com:9093 properties: ssl.keystore.location: /var/ssl/private/kafka_broker.keystore.jks ssl.keystore.password: XXXX ssl.key.password: XXXX ssl.truststore.location: /var/ssl/private/kafka_broker.truststore.jks ssl.truststore.password: XXXXX security.protocol: SSL ssl.keystore.type: PKCS12 ssl.truststore.type: PKCS12 schemaRegistry: https://S1TLAKFK02STD.testgroup.com:8081 schemaRegistryAuth: username: fa_askfk_reg password: XXXXX schemaRegistryProperties: basic.auth.credentials.source: USER_INFO kafkaConnect: - name: connect-cluster address: https://S1TLAKFK02STD.testgroup.com:8083 basicAuth: username: fa_askfk_reg password: XXXX properties: basic.auth.credentials.source: USER_INFO

Here is the the Kafka Connect Properties:

auth.ssl.principal.mapping.rules = DEFAULT bootstrap.servers = S3TLAKFK03STD.testgroup.com:9092 config.providers = secret,securepass config.providers.secret.class = io.confluent.connect.secretregistry.rbac.config.provider.InternalSecretConfigProvider config.providers.secret.param.kafkastore.bootstrap.servers = S3TLAKFK03STD.testgroup.com:9092 config.providers.secret.param.kafkastore.sasl.jaas.config = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/config.providers.secret.param.kafkastore.sasl.jaas.config} config.providers.secret.param.kafkastore.sasl.login.callback.handler.class = io.confluent.kafka.clients.plugins.auth.token.TokenUserLoginCallbackHandler config.providers.secret.param.kafkastore.sasl.mechanism = OAUTHBEARER config.providers.secret.param.kafkastore.security.protocol = SASL_SSL config.providers.secret.param.kafkastore.ssl.truststore.location = /var/ssl/private/kafka_connect.truststore.jks config.providers.secret.param.kafkastore.ssl.truststore.password = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/config.providers.secret.param.kafkastore.ssl.truststore.password} config.providers.secret.param.kafkastore.topic = _confluent-secrets config.providers.secret.param.kafkastore.topic.replication.factor = 1 config.providers.secret.param.master.encryption.key = 39ff95832750c0090d84ddf5344583832efe91ef config.providers.secret.param.secret.registry.group.id = secret-registry config.storage.replication.factor = 1 config.storage.topic = connect-cluster-configs confluent.license = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/confluent.license} confluent.license.topic = _confluent-command confluent.metadata.basic.auth.user.info = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/confluent.metadata.basic.auth.user.info} confluent.metadata.bootstrap.server.urls = https://S3TLAKFK03STD.testgroup.com:8090 confluent.metadata.http.auth.credentials.provider = BASIC confluent.metadata.ssl.endpoint.identification.algorithm = HTTPS confluent.metadata.ssl.truststore.location = /var/ssl/private/kafka_connect.truststore.jks confluent.metadata.ssl.truststore.password = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/confluent.metadata.ssl.truststore.password} connector.client.config.override.policy = All consumer.bootstrap.servers = S3TLAKFK03STD.testgroup.com:9092 consumer.sasl.jaas.config = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/consumer.sasl.jaas.config} consumer.sasl.login.callback.handler.class = io.confluent.kafka.clients.plugins.auth.token.TokenUserLoginCallbackHandler consumer.sasl.mechanism = OAUTHBEARER consumer.security.protocol = SASL_SSL consumer.ssl.truststore.location = /var/ssl/private/kafka_connect.truststore.jks consumer.ssl.truststore.password = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/consumer.ssl.truststore.password} group.id = connect-cluster internal.key.converter = org.apache.kafka.connect.json.JsonConverter internal.key.converter.schemas.enable = false internal.value.converter = org.apache.kafka.connect.json.JsonConverter internal.value.converter.schemas.enable = false key.converter = io.confluent.connect.avro.AvroConverter key.converter.schema.registry.ssl.key.password = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/key.converter.schema.registry.ssl.key.password} key.converter.schema.registry.ssl.keystore.location = /var/ssl/private/kafka_connect.keystore.jks key.converter.schema.registry.ssl.keystore.password = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/key.converter.schema.registry.ssl.keystore.password} key.converter.schema.registry.ssl.truststore.location = /var/ssl/private/kafka_connect.truststore.jks key.converter.schema.registry.ssl.truststore.password = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/key.converter.schema.registry.ssl.truststore.password} key.converter.schema.registry.url = https://S1TLAKFK02STD.testgroup.com:8081 listeners = https://0.0.0.0:8083 listeners.https.ssl.key.password = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/listeners.https.ssl.key.password} listeners.https.ssl.keystore.location = /var/ssl/private/kafka_connect.keystore.jks listeners.https.ssl.keystore.password = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/listeners.https.ssl.keystore.password} listeners.https.ssl.truststore.location = /var/ssl/private/kafka_connect.truststore.jks listeners.https.ssl.truststore.password = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/listeners.https.ssl.truststore.password} offset.flush.interval.ms = 10000 offset.storage.replication.factor = 1 offset.storage.topic = connect-cluster-offsets plugin.path = /opt/kfk/confluent-7.8.0/share,/opt/kfk/conn-plugins,/usr/share/java/connect_plugins producer.bootstrap.servers = S3TLAKFK03STD.testgroup.com:9092 producer.sasl.jaas.config = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/producer.sasl.jaas.config} producer.sasl.login.callback.handler.class = io.confluent.kafka.clients.plugins.auth.token.TokenUserLoginCallbackHandler producer.sasl.mechanism = OAUTHBEARER producer.security.protocol = SASL_SSL producer.ssl.truststore.location = /var/ssl/private/kafka_connect.truststore.jks producer.ssl.truststore.password = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/producer.ssl.truststore.password} public.key.path = /var/ssl/private/public.pem rest.advertised.host.name = S1TLAKFK02STD.testgroup.com rest.advertised.listener = https rest.advertised.port = 8083 rest.extension.classes = io.confluent.connect.secretregistry.ConnectSecretRegistryExtension,io.confluent.connect.security.ConnectSecurityExtension rest.port = 8083 rest.servlet.initializor.classes = io.confluent.common.security.jetty.initializer.AuthenticationHandler sasl.jaas.config = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/sasl.jaas.config} sasl.login.callback.handler.class = io.confluent.kafka.clients.plugins.auth.token.TokenUserLoginCallbackHandler sasl.mechanism = OAUTHBEARER security.protocol = SASL_SSL ssl.truststore.location = /var/ssl/private/kafka_connect.truststore.jks ssl.truststore.password = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/ssl.truststore.password} status.storage.replication.factor = 1 status.storage.topic = connect-cluster-status value.converter = io.confluent.connect.avro.AvroConverter value.converter.schema.registry.ssl.key.password = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/value.converter.schema.registry.ssl.key.password} value.converter.schema.registry.ssl.keystore.location = /var/ssl/private/kafka_connect.keystore.jks value.converter.schema.registry.ssl.keystore.password = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/value.converter.schema.registry.ssl.keystore.password} value.converter.schema.registry.ssl.truststore.location = /var/ssl/private/kafka_connect.truststore.jks value.converter.schema.registry.ssl.truststore.password = ${securepass:/var/ssl/private/kafka-connect-security.properties:connect-distributed.properties/value.converter.schema.registry.ssl.truststore.password} value.converter.schema.registry.url = https://S1TLAKFK02STD.testgroup.com:8081 config.providers.securepass.class = io.confluent.kafka.security.config.provider.SecurePassConfigProvide

Here is the Kafbat log:

`[root@s3tlakfk03std ~]# java --add-opens java.rmi/javax.rmi.ssl=ALL-UNNAMED -Dspring.config.additional-location=/home/TBESAHL/kafka-ui.yaml -jar /tmp/api-v1.2.0.jar

| | | |_ | / |_ _ _ /\ _ __ __ _ | | ___ | |/ /_ _ / | |____
| || || | | / _ | '| / _ | '_ / / _| ' \/ -_) | ' </ _ | | / / `|
_/|| || ___|| // _| .___,_|||___| ||__,|| |__,|
|_|

2025-03-24 14:21:21,273 INFO [main] i.k.u.KafkaUiApplication: Starting KafkaUiApplication vv1.2.0 using Java 21.0.6 with PID 1365930 (/tmp/api-v1.2.0.jar started by root in /root)
2025-03-24 14:21:21,276 DEBUG [main] i.k.u.KafkaUiApplication: Running with Spring Boot v3.4.3, Spring v6.2.3
2025-03-24 14:21:21,277 INFO [main] i.k.u.KafkaUiApplication: No active profile set, falling back to 1 default profile: "default"
2025-03-24 14:21:23,785 DEBUG [main] i.k.u.s.SerdesInitializer: Configuring serdes for cluster hamedcluster
2025-03-24 14:21:23,823 INFO [main] i.c.k.s.KafkaAvroDeserializerConfig: KafkaAvroDeserializerConfig values:
auto.register.schemas = true
avro.reflection.allow.null = false
avro.use.logical.type.converters = true
basic.auth.credentials.source = URL
basic.auth.user.info = [hidden]
bearer.auth.cache.expiry.buffer.seconds = 300
bearer.auth.client.id = null
bearer.auth.client.secret = null
bearer.auth.credentials.source = STATIC_TOKEN
bearer.auth.custom.provider.class = null
bearer.auth.identity.pool.id = null
bearer.auth.issuer.endpoint.url = null
bearer.auth.logical.cluster = null
bearer.auth.scope = null
bearer.auth.scope.claim.name = scope
bearer.auth.sub.claim.name = sub
bearer.auth.token = [hidden]
context.name.strategy = class io.confluent.kafka.serializers.context.NullContextNameStrategy
http.connect.timeout.ms = 60000
http.read.timeout.ms = 60000
id.compatibility.strict = true
key.subject.name.strategy = class io.confluent.kafka.serializers.subject.TopicNameStrategy
latest.cache.size = 1000
latest.cache.ttl.sec = -1
latest.compatibility.strict = true
max.retries = 3
max.schemas.per.subject = 1000
normalize.schemas = false
propagate.schema.tags = false
proxy.host =
proxy.port = -1
retries.max.wait.ms = 20000
retries.wait.ms = 1000
rule.actions = []
rule.executors = []
rule.service.loader.enable = true
schema.format = null
schema.reflection = false
schema.registry.basic.auth.user.info = [hidden]
schema.registry.ssl.cipher.suites = null
schema.registry.ssl.enabled.protocols = [TLSv1.2, TLSv1.3]
schema.registry.ssl.endpoint.identification.algorithm = https
schema.registry.ssl.engine.factory.class = null
schema.registry.ssl.key.password = null
schema.registry.ssl.keymanager.algorithm = SunX509
schema.registry.ssl.keystore.certificate.chain = null
schema.registry.ssl.keystore.key = null
schema.registry.ssl.keystore.location = null
schema.registry.ssl.keystore.password = null
schema.registry.ssl.keystore.type = JKS
schema.registry.ssl.protocol = TLSv1.3
schema.registry.ssl.provider = null
schema.registry.ssl.secure.random.implementation = null
schema.registry.ssl.trustmanager.algorithm = PKIX
schema.registry.ssl.truststore.certificates = null
schema.registry.ssl.truststore.location = null
schema.registry.ssl.truststore.password = null
schema.registry.ssl.truststore.type = JKS
schema.registry.url = [wontbeused]
specific.avro.key.type = null
specific.avro.reader = false
specific.avro.value.type = null
use.latest.version = false
use.latest.with.metadata = null
use.schema.id = -1
value.subject.name.strategy = class io.confluent.kafka.serializers.subject.TopicNameStrategy

2025-03-24 14:21:23,823 INFO [main] i.c.k.s.KafkaAvroDeserializerConfig: KafkaAvroDeserializerConfig values:
auto.register.schemas = true
avro.reflection.allow.null = false
avro.use.logical.type.converters = true
basic.auth.credentials.source = URL
basic.auth.user.info = [hidden]
bearer.auth.cache.expiry.buffer.seconds = 300
bearer.auth.client.id = null
bearer.auth.client.secret = null
bearer.auth.credentials.source = STATIC_TOKEN
bearer.auth.custom.provider.class = null
bearer.auth.identity.pool.id = null
bearer.auth.issuer.endpoint.url = null
bearer.auth.logical.cluster = null
bearer.auth.scope = null
bearer.auth.scope.claim.name = scope
bearer.auth.sub.claim.name = sub
bearer.auth.token = [hidden]
context.name.strategy = class io.confluent.kafka.serializers.context.NullContextNameStrategy
http.connect.timeout.ms = 60000
http.read.timeout.ms = 60000
id.compatibility.strict = true
key.subject.name.strategy = class io.confluent.kafka.serializers.subject.TopicNameStrategy
latest.cache.size = 1000
latest.cache.ttl.sec = -1
latest.compatibility.strict = true
max.retries = 3
max.schemas.per.subject = 1000
normalize.schemas = false
propagate.schema.tags = false
proxy.host =
proxy.port = -1
retries.max.wait.ms = 20000
retries.wait.ms = 1000
rule.actions = []
rule.executors = []
rule.service.loader.enable = true
schema.format = null
schema.reflection = false
schema.registry.basic.auth.user.info = [hidden]
schema.registry.ssl.cipher.suites = null
schema.registry.ssl.enabled.protocols = [TLSv1.2, TLSv1.3]
schema.registry.ssl.endpoint.identification.algorithm = https
schema.registry.ssl.engine.factory.class = null
schema.registry.ssl.key.password = null
schema.registry.ssl.keymanager.algorithm = SunX509
schema.registry.ssl.keystore.certificate.chain = null
schema.registry.ssl.keystore.key = null
schema.registry.ssl.keystore.location = null
schema.registry.ssl.keystore.password = null
schema.registry.ssl.keystore.type = JKS
schema.registry.ssl.protocol = TLSv1.3
schema.registry.ssl.provider = null
schema.registry.ssl.secure.random.implementation = null
schema.registry.ssl.trustmanager.algorithm = PKIX
schema.registry.ssl.truststore.certificates = null
schema.registry.ssl.truststore.location = null
schema.registry.ssl.truststore.password = null
schema.registry.ssl.truststore.type = JKS
schema.registry.url = [wontbeused]
specific.avro.key.type = null
specific.avro.reader = false
specific.avro.value.type = null
use.latest.version = false
use.latest.with.metadata = null
use.schema.id = -1
value.subject.name.strategy = class io.confluent.kafka.serializers.subject.TopicNameStrategy
`

Answered by fallen-up

Mar 24, 2025

recheck https://ui.docs.kafbat.io/configuration/misc-configuration-properties
i don't see basicAuth properties. must be:

      kafkaConnect:
        - name: connect-cluster
          address: https://S1TLAKFK02STD.com:8083
          username: fa_askfk_reg
          password: XXXXX

View full answer

hamedsaadat · 2025-03-24T13:49:48Z

hamedsaadat
Mar 24, 2025
Author

0 replies

fallen-up · 2025-03-24T14:28:44Z

fallen-up
Mar 24, 2025

@hamedsaadat

you can disable ssl signature verification (it's global setting, works for kafka-connect too), by special parameter:
verifySSL: false
full example:

kafka:
  clusters:
    - name: "demo.test.env"
      readonly: false
      ssl:
        verifySSL: false
        truststoreLocation: "/ssl/demo-ca.p12"
      bootstrapServers: "demo1.test.env:9093,demo2.test.env:9093,demo3.test.env:9093"
      properties:
        security:
          protocol: "SSL"
        ssl:
          keystoreLocation: "/ssl/demo-user.p12"
          endpointIdentificationAlgorithm: "https"
      kafkaConnect:
        - name: "demo-kafka-connect.test.env"
          address: "demo-kafka-connect.test.env"

or add your root-certs to global java-cacerts
in helm chart it will be:

volumeMounts:
  - name: trust-data
    mountPath: /usr/lib/jvm/zulu21-ca/lib/security

volumes:
  - name: trust-data
    emptyDir: {}
  - name: root-tls
    secret:
      secretName: root-tls

initContainers:
  - name: root-ca
    image: ghcr.io/kafbat/kafka-ui:v1.2.0
    command: ["sh", "-c", "--"]
    args:
      - "cp /usr/lib/jvm/zulu21-ca/lib/security/* /tmp/ca-trust/; keytool -import -trustcacerts -alias my-root-ca -file /tmp/cert/my1.crt -keystore /tmp/ca-trust/cacerts -storepass changeit -noprompt; keytool -import -trustcacerts -alias my-root-ca2 -file /tmp/cert/my.crt -keystore /tmp/ca-trust/cacerts -storepass changeit -noprompt;"
    volumeMounts:
      - name: trust-data
        mountPath: /tmp/ca-trust
      - name: root-tls
        mountPath: /tmp/cert
    securityContext:
      capabilities:
        drop:
          - ALL
      readOnlyRootFilesystem: true
      allowPrivilegeEscalation: false
      runAsNonRoot: true
      runAsUser: 2001
    resources:
      limits:
        cpu: "250m"
        memory: 256Mi
      requests:
        cpu: "250m"
        memory: 256Mi

0 replies

hamedsaadat · 2025-03-24T15:30:23Z

hamedsaadat
Mar 24, 2025
Author

it made no difference

[root@s3tlakfk03std ~]# cat /home/TBESAHL/kafka-ui.yaml
kafka:
clusters:
- name: hamedcluster
ssl:
verifySSL: false
bootstrapServers: S3TLAKFK03STD.testgroup.com:9093
properties:
ssl.keystore.location: /var/ssl/private/kafka_broker.keystore.jks
ssl.keystore.password: XXXX
ssl.key.password: XXXXXX
ssl.truststore.location: /var/ssl/private/kafka_broker.truststore.jks
ssl.truststore.password: XXXX
security.protocol: SSL
ssl.keystore.type: PKCS12
ssl.truststore.type: PKCS12
schemaRegistry: https://S1TLAKFK02STD.testgroup.com:8081
schemaRegistryAuth:
username: fa_askfk_reg
password: XXXXXXX
schemaRegistryProperties:
basic.auth.credentials.source: USER_INFO
kafkaConnect:
- name: connect-cluster
address: https://S1TLAKFK02STD.testgroup.com:8083
basicAuth:
username: fa_askfk_reg
password: XXXX
properties:
basic.auth.credentials.source: USER_INFO
yamlApplicationConfig:
logging:
level:
io.kafbat: debug

`[root@s3tlakfk03std ~]# java --add-opens java.rmi/javax.rmi.ssl=ALL-UNNAMED -Dspring.config.additional-location=/home/TBESAHL/kafka-ui.yaml -jar /tmp/api-v1.2.0.jar

| | | |_ | / |_ _ _ /\ _ __ __ _ | | ___ | |/ /_ _ / | |____
| || || | | / _ | '| / _ | '_ / / _| ' \/ -_) | ' </ _ | | / / `|
_/|| || ___|| // _| .___,_|||___| ||__,|| |__,|
|_|

2025-03-24 16:25:24,008 INFO [main] i.k.u.KafkaUiApplication: Starting KafkaUiApplication vv1.2.0 using Java 21.0.6 with PID 1651974 (/tmp/api-v1.2.0.jar started by root in /root)
2025-03-24 16:25:24,010 DEBUG [main] i.k.u.KafkaUiApplication: Running with Spring Boot v3.4.3, Spring v6.2.3
2025-03-24 16:25:24,011 INFO [main] i.k.u.KafkaUiApplication: No active profile set, falling back to 1 default profile: "default"
2025-03-24 16:25:26,459 DEBUG [main] i.k.u.s.SerdesInitializer: Configuring serdes for cluster hamedcluster
2025-03-24 16:25:26,495 INFO [main] i.c.k.s.KafkaAvroDeserializerConfig: KafkaAvroDeserializerConfig values:
auto.register.schemas = true
avro.reflection.allow.null = false
avro.use.logical.type.converters = true
basic.auth.credentials.source = URL
basic.auth.user.info = [hidden]
bearer.auth.cache.expiry.buffer.seconds = 300
bearer.auth.client.id = null
bearer.auth.client.secret = null
bearer.auth.credentials.source = STATIC_TOKEN
bearer.auth.custom.provider.class = null
bearer.auth.identity.pool.id = null
bearer.auth.issuer.endpoint.url = null
bearer.auth.logical.cluster = null
bearer.auth.scope = null
bearer.auth.scope.claim.name = scope
bearer.auth.sub.claim.name = sub
bearer.auth.token = [hidden]
context.name.strategy = class io.confluent.kafka.serializers.context.NullContextNameStrategy
http.connect.timeout.ms = 60000
http.read.timeout.ms = 60000
id.compatibility.strict = true
key.subject.name.strategy = class io.confluent.kafka.serializers.subject.TopicNameStrategy
latest.cache.size = 1000
latest.cache.ttl.sec = -1
latest.compatibility.strict = true
max.retries = 3
max.schemas.per.subject = 1000
normalize.schemas = false
propagate.schema.tags = false
proxy.host =
proxy.port = -1
retries.max.wait.ms = 20000
retries.wait.ms = 1000
rule.actions = []
rule.executors = []
rule.service.loader.enable = true
schema.format = null
schema.reflection = false
schema.registry.basic.auth.user.info = [hidden]
schema.registry.ssl.cipher.suites = null
schema.registry.ssl.enabled.protocols = [TLSv1.2, TLSv1.3]
schema.registry.ssl.endpoint.identification.algorithm = https
schema.registry.ssl.engine.factory.class = null
schema.registry.ssl.key.password = null
schema.registry.ssl.keymanager.algorithm = SunX509
schema.registry.ssl.keystore.certificate.chain = null
schema.registry.ssl.keystore.key = null
schema.registry.ssl.keystore.location = null
schema.registry.ssl.keystore.password = null
schema.registry.ssl.keystore.type = JKS
schema.registry.ssl.protocol = TLSv1.3
schema.registry.ssl.provider = null
schema.registry.ssl.secure.random.implementation = null
schema.registry.ssl.trustmanager.algorithm = PKIX
schema.registry.ssl.truststore.certificates = null
schema.registry.ssl.truststore.location = null
schema.registry.ssl.truststore.password = null
schema.registry.ssl.truststore.type = JKS
schema.registry.url = [wontbeused]
specific.avro.key.type = null
specific.avro.reader = false
specific.avro.value.type = null
use.latest.version = false
use.latest.with.metadata = null
use.schema.id = -1
value.subject.name.strategy = class io.confluent.kafka.serializers.subject.TopicNameStrategy

2025-03-24 16:25:26,496 INFO [main] i.c.k.s.KafkaAvroDeserializerConfig: KafkaAvroDeserializerConfig values:
auto.register.schemas = true
avro.reflection.allow.null = false
avro.use.logical.type.converters = true
basic.auth.credentials.source = URL
basic.auth.user.info = [hidden]
bearer.auth.cache.expiry.buffer.seconds = 300
bearer.auth.client.id = null
bearer.auth.client.secret = null
bearer.auth.credentials.source = STATIC_TOKEN
bearer.auth.custom.provider.class = null
bearer.auth.identity.pool.id = null
bearer.auth.issuer.endpoint.url = null
bearer.auth.logical.cluster = null
bearer.auth.scope = null
bearer.auth.scope.claim.name = scope
bearer.auth.sub.claim.name = sub
bearer.auth.token = [hidden]
context.name.strategy = class io.confluent.kafka.serializers.context.NullContextNameStrategy
http.connect.timeout.ms = 60000
http.read.timeout.ms = 60000
id.compatibility.strict = true
key.subject.name.strategy = class io.confluent.kafka.serializers.subject.TopicNameStrategy
latest.cache.size = 1000
latest.cache.ttl.sec = -1
latest.compatibility.strict = true
max.retries = 3
max.schemas.per.subject = 1000
normalize.schemas = false
propagate.schema.tags = false
proxy.host =
proxy.port = -1
retries.max.wait.ms = 20000
retries.wait.ms = 1000
rule.actions = []
rule.executors = []
rule.service.loader.enable = true
schema.format = null
schema.reflection = false
schema.registry.basic.auth.user.info = [hidden]
schema.registry.ssl.cipher.suites = null
schema.registry.ssl.enabled.protocols = [TLSv1.2, TLSv1.3]
schema.registry.ssl.endpoint.identification.algorithm = https
schema.registry.ssl.engine.factory.class = null
schema.registry.ssl.key.password = null
schema.registry.ssl.keymanager.algorithm = SunX509
schema.registry.ssl.keystore.certificate.chain = null
schema.registry.ssl.keystore.key = null
schema.registry.ssl.keystore.location = null
schema.registry.ssl.keystore.password = null
schema.registry.ssl.keystore.type = JKS
schema.registry.ssl.protocol = TLSv1.3
schema.registry.ssl.provider = null
schema.registry.ssl.secure.random.implementation = null
schema.registry.ssl.trustmanager.algorithm = PKIX
schema.registry.ssl.truststore.certificates = null
schema.registry.ssl.truststore.location = null
schema.registry.ssl.truststore.password = null
schema.registry.ssl.truststore.type = JKS
schema.registry.url = [wontbeused]
specific.avro.key.type = null
specific.avro.reader = false
specific.avro.value.type = null
use.latest.version = false
use.latest.with.metadata = null
use.schema.id = -1
value.subject.name.strategy = class io.confluent.kafka.serializers.subject.TopicNameStrategy

2025-03-24 16:25:26,964 INFO [main] o.s.b.a.e.w.EndpointLinksResolver: Exposing 3 endpoints beneath base path '/actuator'
2025-03-24 16:25:27,067 WARN [main] i.k.u.c.a.DisabledAuthSecurityConfig: Authentication is disabled. Access will be unrestricted.
2025-03-24 16:25:27,436 INFO [main] i.n.u.i.NativeLibraryLoader: /tmp/libnetty_transport_native_epoll_x86_647405565196854798319.so exists but cannot be executed even when execute permissions set; check volume for "noexec" flag; use -Dio.netty.native.workdir=[path] to set native working directory separately.
2025-03-24 16:25:27,518 INFO [main] o.s.b.w.e.n.NettyWebServer: Netty started on port 8080 (http)
2025-03-24 16:25:27,534 INFO [main] i.k.u.KafkaUiApplication: Started KafkaUiApplication in 4.117 seconds (process running for 4.64)
2025-03-24 16:25:27,677 DEBUG [parallel-2] i.k.u.s.ClustersStatisticsScheduler: Start getting metrics for kafkaCluster: hamedcluster
2025-03-24 16:25:27,688 INFO [boundedElastic-1] o.a.k.c.a.AdminClientConfig: AdminClientConfig values:
auto.include.jmx.reporter = true
bootstrap.controllers = []
bootstrap.servers = [S3TLAKFK03STD.testgroup.com:9093]
client.dns.lookup = use_all_dns_ips
client.id = kafbat-ui-admin-1742829927-1
connections.max.idle.ms = 300000
default.api.timeout.ms = 60000
enable.metrics.push = true
metadata.max.age.ms = 300000
metadata.recovery.strategy = none
metric.reporters = []
metrics.num.samples = 2
metrics.recording.level = INFO
metrics.sample.window.ms = 30000
receive.buffer.bytes = 65536
reconnect.backoff.max.ms = 1000
reconnect.backoff.ms = 50
request.timeout.ms = 30000
retries = 2147483647
retry.backoff.max.ms = 1000
retry.backoff.ms = 100
sasl.client.callback.handler.class = null
sasl.jaas.config = null
sasl.kerberos.kinit.cmd = /usr/bin/kinit
sasl.kerberos.min.time.before.relogin = 60000
sasl.kerberos.service.name = null
sasl.kerberos.ticket.renew.jitter = 0.05
sasl.kerberos.ticket.renew.window.factor = 0.8
sasl.login.callback.handler.class = null
sasl.login.class = null
sasl.login.connect.timeout.ms = null
sasl.login.read.timeout.ms = null
sasl.login.refresh.buffer.seconds = 300
sasl.login.refresh.min.period.seconds = 60
sasl.login.refresh.window.factor = 0.8
sasl.login.refresh.window.jitter = 0.05
sasl.login.retry.backoff.max.ms = 10000
sasl.login.retry.backoff.ms = 100
sasl.mechanism = GSSAPI
sasl.oauthbearer.clock.skew.seconds = 30
sasl.oauthbearer.expected.audience = null
sasl.oauthbearer.expected.issuer = null
sasl.oauthbearer.header.urlencode = false
sasl.oauthbearer.jwks.endpoint.refresh.ms = 3600000
sasl.oauthbearer.jwks.endpoint.retry.backoff.max.ms = 10000
sasl.oauthbearer.jwks.endpoint.retry.backoff.ms = 100
sasl.oauthbearer.jwks.endpoint.url = null
sasl.oauthbearer.scope.claim.name = scope
sasl.oauthbearer.sub.claim.name = sub
sasl.oauthbearer.token.endpoint.url = null
security.protocol = SSL
security.providers = null
send.buffer.bytes = 131072
socket.connection.setup.timeout.max.ms = 30000
socket.connection.setup.timeout.ms = 10000
ssl.cipher.suites = null
ssl.enabled.protocols = [TLSv1.2, TLSv1.3]
ssl.endpoint.identification.algorithm =
ssl.engine.factory.class = null
ssl.key.password = [hidden]
ssl.keymanager.algorithm = SunX509
ssl.keystore.certificate.chain = null
ssl.keystore.key = null
ssl.keystore.location = /var/ssl/private/kafka_broker.keystore.jks
ssl.keystore.password = [hidden]
ssl.keystore.type = PKCS12
ssl.protocol = TLSv1.3
ssl.provider = null
ssl.secure.random.implementation = null
ssl.trustmanager.algorithm = PKIX
ssl.truststore.certificates = null
ssl.truststore.location = /var/ssl/private/kafka_broker.truststore.jks
ssl.truststore.password = [hidden]
ssl.truststore.type = PKCS12

2025-03-24 16:25:27,856 INFO [boundedElastic-1] o.a.k.c.u.AppInfoParser: Kafka version: 7.9.0-ccs
2025-03-24 16:25:27,856 INFO [boundedElastic-1] o.a.k.c.u.AppInfoParser: Kafka commitId: ebe6df624d6bc758
2025-03-24 16:25:27,856 INFO [boundedElastic-1] o.a.k.c.u.AppInfoParser: Kafka startTimeMs: 1742829927855
2025-03-24 16:25:28,380 DEBUG [parallel-1] i.k.u.s.ClustersStatisticsScheduler: Metrics updated for cluster: hamedcluster`

1 reply

fallen-up Mar 24, 2025

put your config in yml format.
it's not understandable

hamedsaadat · 2025-03-24T15:47:16Z

hamedsaadat
Mar 24, 2025
Author

kafka:
  clusters:
    - name: hamedcluster
      ssl:
        verifySSL: false
      bootstrapServers: S3TLAKFK03STD.testgroup.com:9093
      properties:
        ssl.keystore.location: /var/ssl/private/kafka_broker.keystore.jks
        ssl.keystore.password: XXXXXX
        ssl.key.password: XXXXXXX
        ssl.truststore.location: /var/ssl/private/kafka_broker.truststore.jks
        ssl.truststore.password: XXXXX
        security.protocol: SSL
        ssl.keystore.type: PKCS12
        ssl.truststore.type: PKCS12
      schemaRegistry: https://S1TLAKFK02STD.testgroup.com:8081
      schemaRegistryAuth:
        username: fa_askfk_reg
        password: lXXXXXX
      schemaRegistryProperties:
        basic.auth.credentials.source: USER_INFO
      kafkaConnect:
        - name: connect-cluster
          address: https://S1TLAKFK02STD.com:8083
          basicAuth:
            username: fa_askfk_reg
            password: XXXXX
          properties:
            basic.auth.credentials.source: USER_INFO
      yamlApplicationConfig:
        logging:
          level:
            io.kafbat: debug

0 replies

fallen-up · 2025-03-24T15:53:42Z

fallen-up
Mar 24, 2025

let's try
verifySsl: false
do you have kafka-connectors in you kafka-connect?
check: https://S1TLAKFK02STD.com:8083/connectors

1 reply

hamedsaadat Mar 24, 2025
Author

Still made no difference.

hamedsaadat · 2025-03-24T15:58:27Z

hamedsaadat
Mar 24, 2025
Author

curl -k -u "fa_askfk_reg:lzW>n4s5jbH" https://S1TLAKFK02STD:8083/connectors | jq .
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 19 100 19 0 0 30 0 --:--:-- --:--:-- --:--:-- 30
[
"filestream-sink"
]

0 replies

fallen-up · 2025-03-24T17:55:41Z

fallen-up
Mar 24, 2025

recheck https://ui.docs.kafbat.io/configuration/misc-configuration-properties
i don't see basicAuth properties. must be:

      kafkaConnect:
        - name: connect-cluster
          address: https://S1TLAKFK02STD.com:8083
          username: fa_askfk_reg
          password: XXXXX

2 replies

hamedsaadat Mar 24, 2025
Author

Thanks. it worked!

Haarolean Mar 25, 2025
Maintainer

@fallen-up thanks :)

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Cannot browse Kafka Connect Connectors #983

{{title}}

{{editor}}'s edit

{{editor}}'s edit

Replies: 7 comments 4 replies

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{editor}}'s edit

{{editor}}'s edit

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

{{title}}

Select a reply

Cannot browse Kafka Connect Connectors #983

hamedsaadat Mar 24, 2025

Replies: 7 comments · 4 replies

hamedsaadat Mar 24, 2025 Author

fallen-up Mar 24, 2025

hamedsaadat Mar 24, 2025 Author

fallen-up Mar 24, 2025

hamedsaadat Mar 24, 2025 Author

fallen-up Mar 24, 2025

hamedsaadat Mar 24, 2025 Author

hamedsaadat Mar 24, 2025 Author

fallen-up Mar 24, 2025

hamedsaadat Mar 24, 2025 Author

Haarolean Mar 25, 2025 Maintainer

hamedsaadat
Mar 24, 2025

Replies: 7 comments 4 replies

hamedsaadat
Mar 24, 2025
Author

fallen-up
Mar 24, 2025

hamedsaadat
Mar 24, 2025
Author

hamedsaadat
Mar 24, 2025
Author

fallen-up
Mar 24, 2025

hamedsaadat Mar 24, 2025
Author

hamedsaadat
Mar 24, 2025
Author

fallen-up
Mar 24, 2025

hamedsaadat Mar 24, 2025
Author

Haarolean Mar 25, 2025
Maintainer