Skip to main content

Rotate credentials for an Apache Kafka® subscription

Rotate credentials for an Apache Kafka® subscription to replace outdated credentials and maintain secure, approved access. The request must be approved by another member of the owner group before new credentials can be downloaded.

Prerequisites​

You must be a member of the owner group of the access to rotate.

Request a credential rotation​

  1. In the Aiven Console, go to Tools > Apache Kafka governance operations.
  2. In the sidebar, click Streaming catalog > Access overview.
  3. In the Access overview page, locate the service user for which you need credentials.
  4. Click Actions > Request credential rotation.
  5. In the Request credential rotation dialog, enter a message for the approvers.
  6. Click Submit.

After you submit a rotation request:

  • The request is sent to the owner group for approval.
  • The request must be approved by another member of the owner group.
  • After approval:
    • New credentials are generated for the service user associated with the access.
    • The requester is notified when credentials are ready.
    • The requester can download the credentials from the request details.
  • Only one active rotation request is allowed per access at a time.

Approve a credential rotation​

  1. Go to Tools > Apache Kafka governance operations.
  2. In the sidebar, click Approvals.
  3. Find the request with type Rotate credentials.
  4. Click the request to view details.
  5. Click Approve or Decline.
note

Another member of the owner group must approve the request.

View and download credentials​

After your request is approved, you can download the new credentials.

  1. Open the request from the email notification or go to Tools > Apache Kafka governance operations.
  2. In the sidebar, click Streaming catalog > Access overview.
  3. Locate the service user related to your request.
  4. Click Actions > Review credentials.
  5. In the confirmation dialog, click Show credentials.
  6. In the Save service user credentials dialog:
    • Click Show next to each field to reveal the credentials.
    • Click Copy next to each field to copy credentials.
    • Click Download credentials to save them.
warning

Credentials can only be viewed once. Make sure to save them securely.

Related pages

Request access to an Apache Kafka topic