Cruise Control user permissions on a secured Kafka Cluster
See original GitHub issueHi!
I’ve both a TLS SASL/Scram Kafka secure cluster and a TLS SASL/Digest Zookeeper secure ensemble. Additionally, Kafka is configured with zookeeper.set.acl=true
, so all znodes created by the cluster are protected.
So, in order to execute optimizations and rebalances with Cruise Control:
- Must Cruise Control Kafka user be a super user? If not, which ACL’s should Cruise Control Kafka user have?
- Must Cruise Control Zookeeper user have write permission on znodes created by the Kafka Cluster?
Thanks!
Issue Analytics
- State:
- Created 3 years ago
- Comments:5
Top Results From Across the Web
Enable security for Cruise Control ... - Cloudera Documentation
Click Cruise Control service on your Cluster. · Click the Configuration tab. · Select Category > Main. · Edit the authorization and Kafka...
Read more >Chapter 8. Cruise Control for cluster rebalancing
You can deploy Cruise Control to your AMQ Streams cluster and use it to rebalance the Kafka cluster. Cruise Control is an open...
Read more >Authorization using ACLs | Confluent Documentation
Access Control Lists (ACLs) provide important authorization controls for your enterprise's Apache Kafka® cluster data. Before attempting to create and use ...
Read more >Managed Apache Kafka Service Features – Amazon MSK ...
IAM Access Control is a no-cost security option that simplifies cluster authentication and Apache Kafka API authorization using IAM roles or user policies ......
Read more >Configuring Strimzi
Securing client access to Kafka brokers. Accessing Kafka brokers from outside the cluster. Creating topics. Creating users (clients). Controlling feature ...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Thanks a lot @Ubun1 !!! This is exactly what I need to know!!!
@marcojck my current acls list for CC user -
cruisecontrol
With this acls i’m be able to write metrics from metrics exporter on brokers, read them on cruise control and execute rebalanced and other administrative actions from CC ui.