Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Implement access control to Kafka consumer groups #1083

Open
MilkyWay-core opened this issue May 7, 2024 · 0 comments
Open

Implement access control to Kafka consumer groups #1083

MilkyWay-core opened this issue May 7, 2024 · 0 comments

Comments

@MilkyWay-core
Copy link

MilkyWay-core commented May 7, 2024

Problem Statement

In many large and fully managed systems are important to control access to the consumer groups. This simplifies the work for SRE and the information security department.

Proposed Solution

Extend the srd and implement the corresponding api call in kafka from the operator


              groupGrants:
                items:
                  description: ConsumerGroupGrant is the desired permissions for the KafkaUser
                  properties:
                    accessType:
                      description: KafkaAccessType hold info about Kafka ACL
                      enum:
                      - read
                      - write
                      type: string
                    patternType:
                      description: KafkaPatternType hold the Resource Pattern Type of kafka ACL
                      enum:
                      - literal                     
                      - match                     
                      - prefixed                     
                      - any                   
                      type: string
                    topicName:
                      type: string

Alternatives Considered

At the moment, we have to refuse to control access to consumer groups, or manage it manually, which is not possible in installations with dozens of clusters

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant