osodevops/kafka-backup-enterprise repository overview

⁠Kafka Backup Enterprise

Kafka disaster recovery with data, schemas and explicitly mapped permissions. Built on Kafka Backup⁠.

⁠Enterprise capabilities

• Confluent Schema Registry and Apicurio Registry v3 backup and recovery, with schema-ID rewriting during Kafka restore.
• Additive authorization recovery: Platform MDS roles, Cloud IAM roles and Kafka ACLs, with explicit mappings, reviewed plans, resumable writes and assignment verification.
• OAuth/OIDC authentication, erasure suppression during restore, and CSFLE/DEK Registry metadata backup. Encryption keys and credentials remain externally managed.
• Offline commercial licences and a fourteen-day evaluation.

Authorization recovery uses existing identities and preserves target-only permissions. Administrator bindings require explicit opt-in. Cloud recovery is qualified within one organisation for service-account principals; cross-organisation recovery, Cloud user/group/identity-pool principals, operator integration and complete cross-component recovery sets are excluded.

The container image targets Linux amd64. On ARM hosts, use Docker amd64 emulation with --platform linux/amd64, or choose the native ARM Linux binary download.

⁠Start an evaluation

docker pull --platform linux/amd64 osodevops/kafka-backup-enterprise:v0.8.0
docker volume create kafka-backup-trial
docker run --rm \
  --mount type=volume,src=kafka-backup-trial,dst=/var/lib/kafka-backup \
  osodevops/kafka-backup-enterprise:v0.8.0 \
  license activate-trial --format json

No signup or payment details are required. The evaluation lasts exactly fourteen days from first activation. Preserve the same volume across restarts and upgrades. license info inspects status without starting the evaluation. The first operational command in the Enterprise binary also activates it, including an ordinary Kafka backup, before configuration validation. Set KAFKA_BACKUP_NO_TRIAL=1 before operational checks if you do not want to start it yet.

docker run --rm \
  --mount type=volume,src=kafka-backup-trial,dst=/var/lib/kafka-backup \
  --mount type=bind,src="$PWD/config.yaml",dst=/config.yaml,readonly \
  osodevops/kafka-backup-enterprise:v0.8.0 \
  backup --config /config.yaml

Requested Enterprise operations fail when the evaluation expires or a supplied licence is invalid. OSS operations remain available. Do not discard evaluation state to restart a trial.

⁠Commercial licence

Purchase at enterprise.kafkabackup.com⁠. Mount the licence as a read-only file:

docker run --rm \
  --mount type=bind,src="$PWD/license.key",dst=/etc/kafka-backup/license.key,readonly \
  --mount type=bind,src="$PWD/config.yaml",dst=/config.yaml,readonly \
  osodevops/kafka-backup-enterprise:v0.8.0 \
  backup --config /config.yaml

Alternatively set ENTERPRISE_LICENSE_FILE to a mounted file, or supply base64 licence content through ENTERPRISE_LICENSE_KEY using your secret manager. Never commit licence files or credentials.

⁠Versions and guides

• v0.8.0: pinned release; use its digest for reproducible deployments.
• v0.8: latest patch in the 0.8 series.
• latest: latest stable release.

Documentation⁠ · Downloads⁠ · Pricing and evaluation⁠