Add gssapi as a dependency

.azure-pipelines/scripts/kafka_consumer/linux/32_install_kerberos.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+
+set -ex
+
+sudo apt-get update
+sudo apt install build-essential
+sudo apt-get install -y --no-install-recommends libkrb5-dev
+
+set +ex

LICENSE-3rdparty.csv

@@ -31,6 +31,7 @@ flup-py3,Vendor,BSD-3-Clause,Allan Saddi
 foundationdb,PyPI,Apache-2.0,FoundationDB
 futures,PyPI,PSF,Brian Quinlan
 gearman,PyPI,Apache-2.0,Matthew Tai
+gssapi,PyPI,ISC,The Python GSSAPI Team
 immutables,PyPI,Apache-2.0,MagicStack Inc
 in-toto,PyPI,Apache-2.0,New York University: Secure Systems Lab
 ipaddress,PyPI,PSF,Philipp Hagemeister

datadog_checks_base/datadog_checks/base/data/agent_requirements.in

@@ -27,6 +27,8 @@ enum34==1.1.10; python_version < '3.0'
 foundationdb==6.3.24; python_version > '3.0'
 futures==3.3.0; python_version < '3.0'
 gearman==2.0.2; sys_platform != 'win32' and python_version < '3.0'
+gssapi==1.6.1; python_version < '3.0'
+gssapi==1.7.3; python_version > '3.0'
 immutables==0.16; python_version > '3.0'
 in-toto==1.0.1
 ipaddress==1.0.23; python_version < '3.0'

datadog_checks_dev/datadog_checks/dev/tooling/commands/validate/licenses.py

@@ -24,6 +24,8 @@
     'adodbapi': ['LGPL-2.1-only'],
     # https://github.com/rthalley/dnspython/blob/master/LICENSE
     'dnspython': ['ISC'],
+    # https://github.com/pythongssapi/python-gssapi/blob/main/LICENSE.txt
+    'gssapi': ['ISC'],
     # https://github.com/cannatag/ldap3/blob/dev/COPYING.txt
     'ldap3': ['LGPL-3.0-only'],
     # https://github.com/paramiko/paramiko/blob/master/LICENSE

kafka_consumer/pyproject.toml

@@ -37,6 +37,8 @@ dynamic = [
 
 [project.optional-dependencies]
 deps = [
+    "gssapi==1.6.1; python_version < '3.0'",
+    "gssapi==1.7.3; python_version > '3.0'",
     "kafka-python==2.0.2",
     "kazoo==2.8.0",
 ]

kafka_consumer/tests/conftest.py

@@ -56,7 +56,16 @@ def dd_environment(mock_local_kafka_hosts_dns, e2e_instance):
             'KAFKA_HOST': HOST_IP
         },
     ):
-        yield e2e_instance, {'custom_hosts': [('kafka1', '127.0.0.1'), ('kafka2', '127.0.0.1')]}
+        yield e2e_instance, E2E_METADATA
+
+
+E2E_METADATA = {
+    'custom_hosts': [('kafka1', '127.0.0.1'), ('kafka2', '127.0.0.1')],
+    'start_commands': [
+        'apt-get update',
+        'apt-get install -y build-essential',
+    ],
+}
 
 
 @pytest.fixture(scope='session')

kafka_consumer/tests/test_kafka_consumer.py

@@ -43,6 +43,20 @@ def test_uses_new_implementation_when_new_version_specified(kafka_instance):
     assert isinstance(kafka_consumer_check.sub_check, NewKafkaConsumerCheck)
 
 
+@pytest.mark.unit
+def test_gssapi(kafka_instance, dd_run_check):
+    instance = copy.deepcopy(kafka_instance)
+    instance['kafka_client_api_version'] = '0.10.2'
+    instance['sasl_mechanism'] = 'GSSAPI'
+    instance['security_protocol'] = 'SASL_PLAINTEXT'
+    instance['sasl_kerberos_service_name'] = 'kafka'
+    kafka_consumer_check = KafkaCheck('kafka_consumer', {}, [instance])
+    # assert the check doesn't fail with:
+    # Exception: Could not find main GSSAPI shared library.
+    with pytest.raises(Exception, match='check_version'):
+        dd_run_check(kafka_consumer_check)
+
+
 @pytest.mark.unit
 def test_tls_config_ok(kafka_instance_tls):
     with mock.patch('datadog_checks.base.utils.tls.ssl') as ssl:

kafka_consumer/tox.ini

@@ -21,7 +21,7 @@ passenv =
     COMPOSE*
 extras = deps
 deps =
-    -e../datadog_checks_base[deps]
+    -e../datadog_checks_base[deps,http]
     -rrequirements-dev.txt
     -e../datadog_checks_tests_helper
 commands =