From 205a02edc06bc236a31bec9d2b1ab3ad63ef715e Mon Sep 17 00:00:00 2001 From: Keith Wall Date: Fri, 28 Nov 2025 10:10:12 +0000 Subject: [PATCH 1/5] Add blog post for Kroxylicious 0.18.0 This post announces the release of Kroxylicious 0.18.0, highlighting new features and improvements, including Filter API enhancements and a new Authorizer Filter. Signed-off-by: Keith Wall --- _posts/2025-11-28-release-0_18_0.md | 34 +++++++++++++++++++++++++++++ 1 file changed, 34 insertions(+) create mode 100644 _posts/2025-11-28-release-0_18_0.md diff --git a/_posts/2025-11-28-release-0_18_0.md b/_posts/2025-11-28-release-0_18_0.md new file mode 100644 index 0000000..8750a1c --- /dev/null +++ b/_posts/2025-11-28-release-0_18_0.md @@ -0,0 +1,34 @@ +--- +layout: post +title: "Kroxylicious release 0.18.0" +date: 2025-11-28 00:00:00 +0000 +author: "Keith Wall" +author_url: "https://github.com/k-wall" +# noinspection YAMLSchemaValidation +categories: blog kroxylicious-proxy kroxylicious-operator releases +tags: [ "releases", "kroxylicious-proxy", "kroxylicious-operator" ] +--- + +The Kroxylicious project is very pleased to announce the release +of [Kroxylicious 0.18.0](https://github.com/kroxylicious/kroxylicious/releases/tag/v0.18.0). See +the [Changelog](https://github.com/kroxylicious/kroxylicious/blob/main/CHANGELOG.md#0180) for a list of changes and +summary of Deprecations, Changes and Removals. + +The main highlights of this release are: + +### Filter API Improvements + +* Filters now have a convenient mechanism to convert from topic ids [KIP-516](https://cwiki.apache.org/confluence/display/KAFKA/KIP-516%3A+Topic+Identifiers) to topic names. +* For authenticated use-cases, filters now have access to a Subject API that provides convenient access to the authenticated principals established by the channel. This is a building block + for filters that need to enforce authorization checks or want to write an audit trail of Kafka actions. + +### Authorizer Filter + +We've added a new Authorizer Filter that can authorize Topic operations using the same semantics as Kafka own Authorization API. This allows you to enforce authorizations rules at the proxy. + +### Feedback + +Please let us know if you find the project interesting or helpful, and especially if +you have deployed it in production. +You can reach us through [Slack](https://kroxylicious.slack.com), [GitHub](https://github.com/kroxylicious/kroxylicious/issues) or +even [bsky](https://bsky.app/profile/kroxylicious.io)). From afc0b4a51be72e2991ed39b228e42c316622705a Mon Sep 17 00:00:00 2001 From: Keith Wall Date: Fri, 28 Nov 2025 10:26:07 +0000 Subject: [PATCH 2/5] Update 2025-11-28-release-0_18_0.md Signed-off-by: Keith Wall --- _posts/2025-11-28-release-0_18_0.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/_posts/2025-11-28-release-0_18_0.md b/_posts/2025-11-28-release-0_18_0.md index 8750a1c..9cb2246 100644 --- a/_posts/2025-11-28-release-0_18_0.md +++ b/_posts/2025-11-28-release-0_18_0.md @@ -26,6 +26,10 @@ The main highlights of this release are: We've added a new Authorizer Filter that can authorize Topic operations using the same semantics as Kafka own Authorization API. This allows you to enforce authorizations rules at the proxy. +### Azure KMS integration for Record Encryption + +With this release, Record Encryption now has the capability to use Azure Vault for storage of the key material used to encrypt Kafka records. + ### Feedback Please let us know if you find the project interesting or helpful, and especially if From 1c0b58a238a44479385573fe4a59e36f126cea92 Mon Sep 17 00:00:00 2001 From: Sam Barker Date: Wed, 3 Dec 2025 15:01:20 +1300 Subject: [PATCH 3/5] Add links to design proposals. Signed-off-by: Sam Barker --- _posts/2025-11-28-release-0_18_0.md | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/_posts/2025-11-28-release-0_18_0.md b/_posts/2025-11-28-release-0_18_0.md index 9cb2246..5da37b8 100644 --- a/_posts/2025-11-28-release-0_18_0.md +++ b/_posts/2025-11-28-release-0_18_0.md @@ -18,13 +18,19 @@ The main highlights of this release are: ### Filter API Improvements -* Filters now have a convenient mechanism to convert from topic ids [KIP-516](https://cwiki.apache.org/confluence/display/KAFKA/KIP-516%3A+Topic+Identifiers) to topic names. +* Filters now have a convenient mechanism to convert from topic + ids [KIP-516](https://cwiki.apache.org/confluence/display/KAFKA/KIP-516%3A+Topic+Identifiers) to topic names. This is + based + on [design proposal#008](https://github.com/kroxylicious/design/blob/main/proposals/008-topic-name-lookup-facility.md) * For authenticated use-cases, filters now have access to a Subject API that provides convenient access to the authenticated principals established by the channel. This is a building block - for filters that need to enforce authorization checks or want to write an audit trail of Kafka actions. + for filters that need to enforce authorization checks or want to write an audit trail of Kafka actions. Full context + on where our thinking goes and what could/should be possible is outlined + in [design proposal#009](https://github.com/kroxylicious/design/blob/main/proposals/009-authorizer.md) ### Authorizer Filter -We've added a new Authorizer Filter that can authorize Topic operations using the same semantics as Kafka own Authorization API. This allows you to enforce authorizations rules at the proxy. +We've added a new Authorizer Filter that can authorize Topic operations using the same semantics as Kafka own +Authorization API. This allows you to enforce authorizations rules at the proxy. ### Azure KMS integration for Record Encryption From 2ea4343d9510cd152c9028acd6b2eae7f1154d35 Mon Sep 17 00:00:00 2001 From: Sam Barker Date: Wed, 3 Dec 2025 15:02:51 +1300 Subject: [PATCH 4/5] remove operator tag/category No change in this release. Signed-off-by: Sam Barker --- _posts/2025-11-28-release-0_18_0.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/_posts/2025-11-28-release-0_18_0.md b/_posts/2025-11-28-release-0_18_0.md index 5da37b8..7dc4f69 100644 --- a/_posts/2025-11-28-release-0_18_0.md +++ b/_posts/2025-11-28-release-0_18_0.md @@ -5,8 +5,8 @@ date: 2025-11-28 00:00:00 +0000 author: "Keith Wall" author_url: "https://github.com/k-wall" # noinspection YAMLSchemaValidation -categories: blog kroxylicious-proxy kroxylicious-operator releases -tags: [ "releases", "kroxylicious-proxy", "kroxylicious-operator" ] +categories: blog kroxylicious-proxy releases +tags: [ "releases", "kroxylicious-proxy" ] --- The Kroxylicious project is very pleased to announce the release From 79c11c092315d572cf498ed587c9b56e45860601 Mon Sep 17 00:00:00 2001 From: Sam Barker Date: Wed, 3 Dec 2025 16:08:15 +1300 Subject: [PATCH 5/5] PR feedback simplify wording. Revert hard wrap at 120 chars. Signed-off-by: Sam Barker --- _posts/2025-11-28-release-0_18_0.md | 20 +++++--------------- 1 file changed, 5 insertions(+), 15 deletions(-) diff --git a/_posts/2025-11-28-release-0_18_0.md b/_posts/2025-11-28-release-0_18_0.md index 7dc4f69..ef00d3a 100644 --- a/_posts/2025-11-28-release-0_18_0.md +++ b/_posts/2025-11-28-release-0_18_0.md @@ -9,28 +9,19 @@ categories: blog kroxylicious-proxy releases tags: [ "releases", "kroxylicious-proxy" ] --- -The Kroxylicious project is very pleased to announce the release -of [Kroxylicious 0.18.0](https://github.com/kroxylicious/kroxylicious/releases/tag/v0.18.0). See -the [Changelog](https://github.com/kroxylicious/kroxylicious/blob/main/CHANGELOG.md#0180) for a list of changes and -summary of Deprecations, Changes and Removals. +The Kroxylicious project is very pleased to announce the release of [Kroxylicious 0.18.0](https://github.com/kroxylicious/kroxylicious/releases/tag/v0.18.0). See the [Changelog](https://github.com/kroxylicious/kroxylicious/blob/main/CHANGELOG.md#0180) for a list of changes and summary of Deprecations, Changes and Removals. The main highlights of this release are: ### Filter API Improvements -* Filters now have a convenient mechanism to convert from topic - ids [KIP-516](https://cwiki.apache.org/confluence/display/KAFKA/KIP-516%3A+Topic+Identifiers) to topic names. This is - based - on [design proposal#008](https://github.com/kroxylicious/design/blob/main/proposals/008-topic-name-lookup-facility.md) -* For authenticated use-cases, filters now have access to a Subject API that provides convenient access to the authenticated principals established by the channel. This is a building block - for filters that need to enforce authorization checks or want to write an audit trail of Kafka actions. Full context - on where our thinking goes and what could/should be possible is outlined +* Filters now have a convenient mechanism to convert from topic ids [KIP-516](https://cwiki.apache.org/confluence/display/KAFKA/KIP-516%3A+Topic+Identifiers) to topic names this is based on [design proposal#008](https://github.com/kroxylicious/design/blob/main/proposals/008-topic-name-lookup-facility.md) +* Filters now have access to a Subject API that provides convenient access to the authenticated principals established by the channel. This is a building block for filters that need to enforce authorization checks or want to write an audit trail of Kafka actions. Further details and context can be found in [design proposal#009](https://github.com/kroxylicious/design/blob/main/proposals/009-authorizer.md) ### Authorizer Filter -We've added a new Authorizer Filter that can authorize Topic operations using the same semantics as Kafka own -Authorization API. This allows you to enforce authorizations rules at the proxy. +We've added a new Authorizer Filter that can authorize Topic operations using the same semantics as Kafka own Authorization API. This allows you to enforce authorizations rules at the proxy. ### Azure KMS integration for Record Encryption @@ -40,5 +31,4 @@ With this release, Record Encryption now has the capability to use Azure Vault f Please let us know if you find the project interesting or helpful, and especially if you have deployed it in production. -You can reach us through [Slack](https://kroxylicious.slack.com), [GitHub](https://github.com/kroxylicious/kroxylicious/issues) or -even [bsky](https://bsky.app/profile/kroxylicious.io)). +You can reach us through [Slack](https://kroxylicious.slack.com), [GitHub](https://github.com/kroxylicious/kroxylicious/issues) or even [bsky](https://bsky.app/profile/kroxylicious.io)).