Vector cannot authenticate to Kafka 4.0.0 with SASL mechanism SCRAM-SHA-512 in RHOCP 4

Solution Verified - Updated -

Issue

  • Not able to log forward to Kafka as failing with a SASL authentication error

    2025-08-05T06:17:40.366938Z ERROR librdkafka: librdkafka: FAIL [thrd:sasl_ssl://kafka-kafka-external-bootstrap-e2e-test-vector-kafka]: sasl_ssl://kafka-kafka-external-bootstrap-e2e-test-vector-kafka.apps.test.openshift.com:443/bootstrap: SASL authentication error: Authentication failed during authentication due to invalid credentials with SASL mechanism SCRAM-SHA-512 (after 312ms in state AUTH_REQ, 4 identical error(s) suppressed)    
2025-08-05T06:17:40.366978Z ERROR rdkafka::client: librdkafka: Global error: Authentication (Local: Authentication failure): sasl_ssl://kafka-kafka-external-bootstrap-e2e-test-vector-kafka.apps.test.openshift.com:443/bootstrap: SASL authentication error: Authentication failed during authentication due to invalid credentials with SASL mechanism SCRAM-SHA-512 (after 312ms in state AUTH_REQ, 4 identical error(s) suppressed)

Environment

  • Red Hat OpenShift Container Platform (RHOCP)
    • 4
  • Red Hat OpenShift Logging (RHOL)
    • 6.1.7 and newer
    • 6.2.4 and newer
    • 6.3.0 and newer
  • Vector using SCRAM authentication
  • Kafka 4
  • AMQ Streams v3.0.0

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content