broker.id=0
num.network.threads=3
num.io.threads=8
socket.send.buffer.bytes=102400
socket.receive.buffer.bytes=102400
socket.request.max.bytes=104857600
log.dirs=/home/alice/tmp/mds-0
num.partitions=1
num.recovery.threads.per.data.dir=1
offsets.topic.replication.factor=1
transaction.state.log.replication.factor=1
transaction.state.log.min.isr=1
log.retention.hours=168
log.segment.bytes=1073741824
log.retention.check.interval.ms=300000
confluent.telemetry.enabled=false
confluent.telemetry.exporter._local.topic.replicas=1

zookeeper.connect=localhost:2181/mds
zookeeper.connection.timeout.ms=18000

confluent.support.metrics.enable=false
confluent.support.customer.id=anonymous
group.initial.rebalance.delay.ms=0
confluent.license.topic.replication.factor=1
confluent.metadata.topic.replication.factor=1

listeners=INTERNAL://:9093,EXTERNAL://:9092
advertised.listeners=INTERNAL://127.0.0.1:9093,EXTERNAL://127.0.0.1:9092
inter.broker.listener.name=INTERNAL
authorizer.class.name=io.confluent.kafka.security.authorizer.ConfluentServerAuthorizer
listener.security.protocol.map=INTERNAL:SASL_PLAINTEXT,EXTERNAL:SASL_PLAINTEXT
confluent.metadata.security.protocol=SASL_PLAINTEXT
super.users=User:admin;User:mds
sasl.mechanism.inter.broker.protocol=PLAIN
listener.name.internal.sasl.enabled.mechanisms=PLAIN
listener.name.internal.plain.sasl.jaas.config = \
    org.apache.kafka.common.security.plain.PlainLoginModule required \
        username="admin" \
        password="admin-secret" \
        user_admin="admin-secret" \
        user_mds="password1";
confluent.authorizer.access.rule.providers=ZK_ACL,CONFLUENT
confluent.authorizer.group.provider=CONFLUENT
confluent.authorizer.scope=myCluster
confluent.metadata.bootstrap.servers=PLAINTEXT://127.0.0.1:9093
confluent.metadata.server.listeners=http://0.0.0.0:8090
confluent.metadata.server.advertised.listeners=http://127.0.0.1:8090
ldap.java.naming.provider.url=ldap://localhost:8389/dc=example,dc=com
ldap.java.naming.security.principal=uid=mds,ou=users,dc=example,dc=com
ldap.java.naming.security.credentials=password1
ldap.java.naming.security.authentication=simple
ldap.group.member.attribute.pattern=uid=(.*),ou=users,dc=example,dc=com
ldap.group.name.attribute=cn
ldap.java.naming.factory.initial=com.sun.jndi.ldap.LdapCtxFactory
ldap.refresh.interval.ms=10
confluent.metadata.server.token.auth.enable=true
confluent.metadata.server.token.max.lifetime.ms=3600000
confluent.metadata.server.token.key.path=/home/alice/testkeys/tokenKeyPair.pem
confluent.metadata.server.public.key.path=/home/alice/testkeys/tokenPublicKey.pem
confluent.metadata.server.token.signature.algorithm=RS256
confluent.metadata.server.authentication.method=BEARER
listener.name.external.sasl.enabled.mechanisms=OAUTHBEARER
listener.name.external.oauthbearer.sasl.jaas.config= \
    org.apache.kafka.common.security.oauthbearer.OAuthBearerLoginModule required \
        publicKeyPath="/home/alice/testkeys/tokenPublicKey.pem";
listener.name.external.oauthbearer.sasl.server.callback.handler.class=io.confluent.kafka.server.plugins.auth.token.TokenBearerValidatorCallbackHandler
listener.name.external.oauthbearer.sasl.login.callback.handler.class=io.confluent.kafka.server.plugins.auth.token.TokenBearerServerLoginCallbackHandler
confluent.security.event.logger.enable=true
confluent.security.event.logger.exporter.kafka.bootstrap.servers=localhost:9093
confluent.security.event.logger.exporter.kafka.topic.partitions=1
confluent.security.event.logger.exporter.kafka.topic.replicas=1
confluent.security.event.logger.destination.admin.bootstrap.servers=localhost:9093
confluent.security.event.logger.destination.admin.security.protocol=SASL_PLAINTEXT
confluent.security.event.logger.destination.admin.sasl.mechanism=PLAIN
confluent.security.event.logger.destination.admin.sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginModule required \
  username="admin" \
  password="admin-secret";
confluent.security.event.router.config={"destinations":{"bootstrap_servers":["audit.example.com:9092"],"topics":{"confluent-audit-log-events_payroll":{"retention_ms":50},"confluent-audit-log-events":{"retention_ms":500}}},"default_topics":{"allowed":"confluent-audit-log-events","denied":"confluent-audit-log-events"},"routes":{"crn://mds1.example.com/kafka=*/topic=payroll-*":{"produce":{"allowed":"confluent-audit-log-events_payroll","denied":"confluent-audit-log-events_payroll"},"consume":{"allowed":"confluent-audit-log-events_payroll","denied":"confluent-audit-log-events_payroll"}},"crn://some-authority/kafka=clusterX":{"other":{"allowed":"confluent-audit-log-events_payroll","denied":"confluent-audit-log-events_payroll"}}},"excluded_principals":["User:Alice"]}
confluent.metadata.server.cluster.registry.clusters=[]
confluent.metadata.server.openapi.enable=false
