Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for ACL host #570

Open
qzhang1995 opened this issue Jun 15, 2023 · 0 comments
Open

Support for ACL host #570

qzhang1995 opened this issue Jun 15, 2023 · 0 comments
Labels
bug Something isn't working

Comments

@qzhang1995
Copy link

I am trying to set up ACL for host using custom JulieRoles (suggested by issue #519),
Current ACLs for resource ResourcePattern(resourceType=TOPIC, name=test-topic, patternType=LITERAL):
(principal=User:ANONYMOUS, host=100.64.1.2, operation=WRITE, permissionType=ALLOW)

  1. In the roles.yaml , i set up the custom role, we are using confluent platform.

roles:

  • name: "hostACL"
    acls:
    • resourceType: "Topic"
      resourceName: "test-topic"
      patternType: "LITERAL"
      host: "100.64.1.2"
      role: "DeveloperWrite"
  1. Assign the custom role in topology.yaml

projects:

  • name: "Atest"
    hostACL:
    • principal: "User:ANONYMOUS"
  1. But in the julie ACL execution log and it has wildcard value "host" : "".
    {
    "Operation" : "com.purbon.kafka.topology.actions.access.CreateBindings",
    "Bindings" : [ {
    "resourceType" : "TOPIC",
    "resourceName" : "test-topic",
    "host" : "
    ",
    "operation" : "DeveloperWrite",
    "principal" : "User:ANONYMOUS",
    "pattern" : "LITERAL",
    "scope" : {
    "clusters" : {
    "kafka-cluster" : "***"
    },
    "resources" : [ {
    "name" : "test-topic",
    "patternType" : "LITERAL",
    "resourceType" : "Topic"
    } ]
    }
    } ]
    }

this is in the ACL list in the end of the julieOps execution log
'TOPIC', 'test-topic', '*', 'DeveloperWrite', 'User:ANONYMOUS', 'LITERAL'

Is it possible to set up ACL for Hosts? thanks.

@qzhang1995 qzhang1995 added the bug Something isn't working label Jun 15, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant