kafka-ops / julie

A solution to help you build automation and gitops in your Apache Kafka deployments. The Kafka gitops!

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

RBAC - Optimize ACLs should add PREFIXED bindings for schema registry

damien-malescot opened this issue · comments

Is your feature request related to a problem? Please describe.
When optimize acls is set in configure file like this :
topology.acls.optimized=true

Schema registry bindings are are not using this property.

Describe the solution you'd like
With optimize ACL and this topology file :

context: "DEV"
source: "test"
projects:
  - name: "project"
    schemas:
      - principal: "Group:CONSUMER_READ"
        role: DeveloperRead

JulieOps should create schema registry's bindings like this :
DEV.test.project.* / PREFIXED / Group:CONSUMER_READ / DeveloperRead

In fact, in optimize mode it seem consistent that principal would access to all schemas under the prefix.
Otherwise it's very boring to declare each schemas in "schemas" section.

Thanks

Closed with d222e83