<div dir="ltr">Hi Debdeep,<div> </div><div>The User Operator supports management of ACL rules for the SimpleAclAutohizer plugin which is part of Kafka. You can enable it in your Kafka cluster and manage the ACL rules using the User Operator. For example to produce to a topic you can set it like this:</div><div><pre style="color:rgb(0,0,0);white-space:pre-wrap">apiVersion: <a href="http://kafka.strimzi.io/v1beta1">kafka.strimzi.io/v1beta1</a> kind: KafkaUser metadata: name: kafka-test-apps-producer labels: <a href="http://strimzi.io/cluster">strimzi.io/cluster</a>: my-cluster spec: authentication: type: tls authorization: type: simple acls: - resource: type: topic name: kafka-test-apps operation: Write - resource: type: topic name: kafka-test-apps operation: Create - resource: type: topic name: kafka-test-apps operation: Describe</pre></div><div>This will let the user send messages to topic names kafka-test-apps. Or you can let it consume form a topic:</div><div><pre style="color:rgb(0,0,0);white-space:pre-wrap">apiVersion: <a href="http://kafka.strimzi.io/v1beta1">kafka.strimzi.io/v1beta1</a> kind: KafkaUser metadata: name: kafka-test-apps-consumer labels: <a href="http://strimzi.io/cluster">strimzi.io/cluster</a>: my-cluster spec: authentication: type: tls authorization: type: simple acls: - resource: type: topic name: kafka-test-apps operation: Read - resource: type: topic name: kafka-test-apps operation: Describe - resource: type: group name: my-kafka-consumer operation: Read</pre></div><div>Hope this helps.</div><div> </div><div>Thanks & Regards</div><div>Jakub</div><div> </div></div> <div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Jul 24, 2019 at 5:52 PM Das, Debdeep <<a href="mailto:debdeep.das@in.unisys.com">debdeep.das@in.unisys.com</a>> wrote: </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div lang="EN-US"><div class="gmail-m_-3273541114663819230WordSection1">Hello All,I am trying to implement a use case with the Strimzi KafkaUser operator. What I am looking for is certain clients, of kafka cluster, is authorized to a produce/consume to a set of topics and another set of clients is authorized to a different set of topics. For example if I have topicA, topicB, topicC and topicD, I want a set of clients producing/consuming to topicA and TopicB, while the other set producing/consuming to topicC and topicD. Can we restrict the access of the first set of client to topicC and topicD ? I have the cluster deployed on Kubernetes. If you can help with a sample YAML, it will be helpful. RegardsDebdeep Debdeep Das | Lead Engineer | Communication Products - InTCUnisys | +91 9980101186 | <a href="mailto:debdeep.das@in.unisys.com" target="_blank">debdeep.das@in.unisys.com</a> <a href="http://www.unisys.com/" target="_blank"><img border="0" width="194" height="30" id="gmail-m_-3273541114663819230Picture_x0020_49" src="cid:16c2520e71e4cff311" alt="unisys_logo"></a> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all devices.<a href="http://www.linkedin.com/company/unisys" target="_blank"><img border="0" width="16" height="16" id="gmail-m_-3273541114663819230Picture_x0020_13" src="cid:16c2520e71e5b006a2" alt="Grey_LI"></a> <a href="http://twitter.com/unisyscorp" target="_blank"><img border="0" width="16" height="16" id="gmail-m_-3273541114663819230Picture_x0020_12" src="cid:16c2520e71e6917eb3" alt="Grey_TW"></a> <a href="http://www.youtube.com/theunisyschannel" target="_blank"><img border="0" width="16" height="16" id="gmail-m_-3273541114663819230Picture_x0020_10" src="cid:16c2520e71e772f6c4" alt="Grey_YT"></a><a href="http://www.facebook.com/unisyscorp" target="_blank"><img border="0" width="16" height="16" id="gmail-m_-3273541114663819230Picture_x0020_9" src="cid:16c2520e71f8546ed5" alt="Grey_FB"></a><a href="https://vimeo.com/unisys" target="_blank"><img border="0" width="16" height="16" id="gmail-m_-3273541114663819230Picture_x0020_6" src="cid:16c2520e71f935e6e6" alt="Grey_Vimeo"></a><a href="http://blogs.unisys.com/" target="_blank"><img border="0" width="16" height="16" id="gmail-m_-3273541114663819230Picture_x0020_8" src="cid:16c2520e71fa175ef7" alt="Grey_UB"></a> </div></div>_______________________________________________ Strimzi mailing list <a href="mailto:Strimzi@redhat.com" target="_blank">Strimzi@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/strimzi" rel="noreferrer" target="_blank">https://www.redhat.com/mailman/listinfo/strimzi</a> </blockquote></div>