fix: add describe acl for kafka connect (#743)

utilitywarehouse · Dec 20, 2024 · d7a2f07 · d7a2f07
1 parent 3e73a20
commit d7a2f07
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/dev-aws/kafka-shared-msk/dev-enablement/kafka-connect.tf b/dev-aws/kafka-shared-msk/dev-enablement/kafka-connect.tf
@@ -45,4 +45,22 @@ module "kafka_connect_full_internal_topics" {
   produce_topics   = ["dev-enablement.connect-configs", "dev-enablement.connect-offsets", "dev-enablement.connect-status"]
   consume_groups   = ["dev-enablement.kafka-connect-group"]
   cert_common_name = "dev-enablement/kafka-connect"
+}
+
+resource "kafka_acl" "kafka_connect_describe_topic_all" {
+  resource_name       = "*"
+  resource_type       = "Topic"
+  acl_principal       = "User:CN=dev-enablement/kafka-connect"
+  acl_host            = "*"
+  acl_operation       = "Describe"
+  acl_permission_type = "Allow"
+}
+
+resource "kafka_acl" "kafka_connect_describe_group_all" {
+  resource_name       = "*"
+  resource_type       = "Group"
+  acl_principal       = "User:CN=dev-enablement/kafka-connect"
+  acl_host            = "*"
+  acl_operation       = "Describe"
+  acl_permission_type = "Allow"
 }