From 793bfaac73b68fa39ebc6affcfba5df7ef0e48e1 Mon Sep 17 00:00:00 2001
From: Brett Randall <brett.randall@confluent.io>
Date: Fri, 9 Sep 2022 23:09:03 +1000
Subject: [PATCH] Upgraded librdkafka version to 1.9.2.

Added OAUTHBEARER OIDC authentication example.
---
 CHANGELOG.md | 2 ++
 README.md    | 5 +++++
 bootstrap.sh | 2 +-
 3 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3845099d..a5a720d0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,7 @@
 # kcat v1.8.0
 
+ * The edenhill/kcat image has been updated to librdkafka v1.9.2.
+ * kcat now supports `OAUTHBEARER` authentication for OIDC/OAuth2.
  * Added new mock cluster mode
    `kcat -M <broker-cnt>` spins up a mock cluster that applications
    can produce to and consume from.
diff --git a/README.md b/README.md
index e9ca9de8..9523006e 100644
--- a/README.md
+++ b/README.md
@@ -234,6 +234,11 @@ Connect to cluster using SSL and SASL PLAIN authentication:
     $ kcat -b mybroker -X security.protocol=SASL_SSL -X sasl.mechanism=PLAIN -X sasl.username=myapikey -X sasl.password=myapisecret ...
 
 
+Connect to cluster using SSL and SASL OAUTHBEARER OIDC authentication:
+
+    $ kcat -b mybroker -X security.protocol=SASL_SSL -X sasl.mechanism=OAUTHBEARER -X sasl.oauthbearer.method=OIDC -X sasl.oauthbearer.scope=myscope -X sasl.oauthbearer.token.endpoint.url=https://auth.server/path/to/token/endpoint -X sasl.oauthbearer.client.id=clientid  -X sasl.oauthbearer.client.secret=clientsecret -X sasl.oauthbearer.extensions="key1=value1,key2=value2" ...
+
+
 Metadata listing:
 
 ```
diff --git a/bootstrap.sh b/bootstrap.sh
index 6c04dd4e..20e2afb3 100755
--- a/bootstrap.sh
+++ b/bootstrap.sh
@@ -11,7 +11,7 @@
 
 set -o errexit -o nounset -o pipefail
 
-: "${LIBRDKAFKA_VERSION:=v1.8.2}"
+: "${LIBRDKAFKA_VERSION:=v1.9.2}"
 
 lrk_install_deps="--install-deps"
 lrk_static="--enable-static"