Kafka Ldap and Rbac
I Want to Set up Authorization and Role Models Using Ldap and Rbac for Kafka. for Example I Have Following Role Bindings: Role1: Read/Write for Topic1, Topic2...
I want to set up authorization and Role models using LDAP and RBAC for Kafka.
For example i have following role bindings:
role1: read/write for topic1, topic2 if the user is a member of a LDAP group1
role2: read/write for topic3, topic4 if the user is a member of a LDAP group2
LDAP:
user1 (group1), user2 (group1), user3(group1)
user4 (group2), user5 (group2), user6(group2)
I create bindings:
confluent iam rolebinding create --principal Group:group1 --role role1 --resource Topic:topic1 --kafka-cluster-id $KAFKA_CLUSTER_ID
confluent iam rolebinding create --principal Group:group1 --role role1 --resource Topic:topic2 --kafka-cluster-id $KAFKA_CLUSTER_ID
confluent iam rolebinding create --principal Group:group2 --role role2 --resource Topic:topic3 --kafka-cluster-id $KAFKA_CLUSTER_ID
confluent iam rolebinding create --principal Group:group2 --role role2 --resource Topic:topic4--kafka-cluster-id $KAFKA_CLUSTER_ID
it doesn't work. Is there a correct way to do what I want?
1 Answer
At this time, confluent does not support custom roles. A predefined list can be found at
For brevity, the list is here:
SysAdmin UserAdmin SecurityAdmin ClusterAdmin DeveloperManage DeveloperWrite DeveloperRead ResourceOwner AuditAdmin Operator
David Miller brings 15 years of experience in global economics, personal finance strategy, and market dynamics. He specializes in turning complex economic trends into actionable insights for everyday readers.
