How to fetch username and password from kubernetes secrets while building kafkaConnect with plugins

[Mounika-Reddy206]

Hi,

I need to pass authentication to download the artifact from given url. I also don't want to specify the username and password directly, would like to fetch them from kubernates secrets. Please help me to download the plugin from given url by passing required authentication.

For example, I need myuser and mypassword to be fetched from kubernetes secrets. Also, please suggest if any other way to pass authentication to download the plugins.

apiVersion: kafka.strimzi.io/v1beta2
kind: KafkaConnect
metadata:
name: my-connect-cluster
spec:
version: 3.8.0
replicas: 1
bootstrapServers: my-cluster-kafka-bootstrap:9093
tls:
trustedCertificates:
- secretName: my-cluster-cluster-ca-cert
pattern: "*.crt"
config:
group.id: connect-cluster
offset.storage.topic: connect-cluster-offsets
config.storage.topic: connect-cluster-configs
status.storage.topic: connect-cluster-status
# -1 means it will use the default replication factor configured in the broker
config.storage.replication.factor: -1
offset.storage.replication.factor: -1
status.storage.replication.factor: -1
build:
output:
type: docker
# This image will last only for 24 hours and might be overwritten by other users
# Strimzi will use this tag to push the image. But it will use the digest to pull
# the container image to make sure it pulls exactly the image we just built. So
# it should not happen that you pull someone else's container image. However, we
# recommend changing this to your own container registry or using a different
# image name for any other than demo purposes.
image: ttl.sh/strimzi-connect-example-3.8.0:24h
plugins:
- name: kafka-connect-jdbc
artifacts:
- type: jar
url: "https://myuser:mypassword@my.company.net/artifactory/io/confluent/kafka-connect-jdbc/10.6.1/kafka-connect-jdbc-10.6.1.jar"

[scholzj]

That is not supported. You have to use a Dockerfile and build the image on your own.