feat(kafka): add SASL OAUTHBEARER method=default RFC 6749 token fetch callback

.github/workflows/remove_wip_label.yml

@@ -1,6 +1,7 @@
 name: Remove Work In Progress Label
 
 permissions:
+  issues: write
   pull-requests: write
 
 on:

benches/http.rs

@@ -63,6 +63,7 @@ fn benchmark_http(c: &mut Criterion) {
                                 request: Default::default(),
                                 tls: Default::default(),
                                 acknowledgements: Default::default(),
+                                retry_strategy: Default::default(),
                             },
                         );
 

changelog.d/10870_http_retry_strategy.feature.md

@@ -0,0 +1,7 @@
+HTTP-based sinks that use the shared retry helpers now support a `retry_strategy` configuration
+option to control which HTTP response codes are retried. The `http` sink also includes a new
+example showing how to retry only specific transient status codes.
+
+Issue: https://github.com/vectordotdev/vector/issues/10870
+
+authors: ndrsg

changelog.d/10870_http_retry_transport_errors.enhancement.md

@@ -0,0 +1,9 @@
+HTTP-based sinks using the shared retry logic now classify transport-layer failures with
+`HttpError::is_retriable`: connection and TLS connector issues may be retried, while failures
+such as invalid HTTP request construction or an invalid proxy URI are not. Setting
+`retry_strategy` to `none` disables retries for these transport errors and for request
+timeouts, in addition to status-code-based retries.
+
+Issue: https://github.com/vectordotdev/vector/issues/10870
+
+authors: ndrsg

changelog.d/25194_windows_event_log_lost_wakeup.fix.md

@@ -0,0 +1,3 @@
+The `windows_event_log` source no longer freezes after periods of inactivity.
+
+authors: tot19

changelog.d/25328_kafka_oauthbearer_default.feature.md

@@ -0,0 +1,9 @@
+Added support for `sasl.oauthbearer.method=default` in Kafka sink and source. When
+`sasl.oauthbearer.token.endpoint.url` is set in `librdkafka_options` and the method is
+not `oidc`, Vector now implements the OAUTHBEARER token refresh callback, POSTing to the
+configured endpoint per RFC 6749 §4.4 and reading `access_token` and `expires_in` from
+the response. This enables OAuth2 providers that return opaque tokens, non-standard JWT
+expiry fields, or custom grant types (e.g. `authorization_code`) that are incompatible
+with `method=oidc`.
+
+authors: dvilaverde

config/examples/http_sink_custom_retry.yaml

@@ -0,0 +1,42 @@
+# HTTP sink example with a custom retry strategy
+# ----------------------------------------------------
+# Sends demo logs to an HTTP endpoint and only retries the response codes
+# that the upstream API documents as transient.
+
+data_dir: "/var/lib/vector"
+
+sources:
+  demo_logs:
+    type: "demo_logs"
+    format: "json"
+    interval: 1
+
+sinks:
+  http_out:
+    type: "http"
+    inputs: ["demo_logs"]
+    uri: "https://example.com/ingest"
+    method: "post"
+
+    # Skip the startup probe so the example can be adapted locally.
+    healthcheck:
+      enabled: false
+
+    # Send newline-delimited JSON in the request body.
+    framing:
+      method: "newline_delimited"
+    encoding:
+      codec: "json"
+
+    # Control how many retries are made and how quickly backoff grows.
+    request:
+      timeout_secs: 60
+      retry_attempts: 8
+      retry_initial_backoff_secs: 2
+      retry_max_duration_secs: 30
+
+    # Retry only on the exact HTTP status codes that this destination
+    # treats as temporary failures.
+    retry_strategy:
+      type: "custom"
+      status_codes: [408, 425, 429, 503]

lib/vector-config/src/http.rs

@@ -2,9 +2,11 @@ use std::cell::RefCell;
 
 use http::StatusCode;
 use serde_json::Value;
+use vector_config_common::{attributes::CustomAttribute, constants};
 
 use crate::{
     Configurable, GenerateError, Metadata, ToValue,
+    num::NumberClass,
     schema::{SchemaGenerator, SchemaObject, generate_number_schema},
 };
 
@@ -27,6 +29,10 @@ impl Configurable for StatusCode {
         let mut metadata = Metadata::default();
         metadata.set_description("HTTP response status code");
         metadata.set_default_value(StatusCode::OK);
+        metadata.add_custom_attribute(CustomAttribute::kv(
+            constants::DOCS_META_NUMERIC_TYPE,
+            NumberClass::Unsigned,
+        ));
         metadata
     }