Skip to content
This repository was archived by the owner on Mar 26, 2025. It is now read-only.
This repository was archived by the owner on Mar 26, 2025. It is now read-only.

Implement access control to Kafka consumer groups #1083

@MilkyWay-core

Description

@MilkyWay-core

Problem Statement

In many large and fully managed systems are important to control access to the consumer groups. This simplifies the work for SRE and the information security department.

Proposed Solution

Extend the srd and implement the corresponding api call in kafka from the operator


              groupGrants:
                items:
                  description: ConsumerGroupGrant is the desired permissions for the KafkaUser
                  properties:
                    accessType:
                      description: KafkaAccessType hold info about Kafka ACL
                      enum:
                      - read
                      - write
                      type: string
                    patternType:
                      description: KafkaPatternType hold the Resource Pattern Type of kafka ACL
                      enum:
                      - literal                     
                      - match                     
                      - prefixed                     
                      - any                   
                      type: string
                    topicName:
                      type: string

Alternatives Considered

At the moment, we have to refuse to control access to consumer groups, or manage it manually, which is not possible in installations with dozens of clusters

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions