Control Center Security on Confluent Platform

Configuring security for Control Center requires planning and needs to be done carefully. You can secure Control Center as a server, meaning you can require users to login when they access Control Center in their browser, and you can secure its communication with the browser.

Because Control Center relies on Kafka Connect, Apache Kafka® brokers, Kafka Streams, interceptors, and metrics reporters to work properly, you can also secure Control Center as a proxy server to each of these components, if the component is secured.

After you secure a Confluent Platform component, it can’t communicate with other non-secured components. For instance, if you have a secured Kafka broker and a secured Control Center, but you have not secured Connect, Control Center acts erratically when you attempt to use it. Be sure to secure all components in your environment.

Version support

Control Center supports TLS and HTTP Basic authentication with Confluent Platform 7.5.x and later.
Control Center supports mutual TLS (mTLS) authentication with Confluent Platform 7.9.1 and later.

General security configuration

Manage and view RBAC roles

SSO for Control Center