<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=utf-8"><meta name=Generator content="Microsoft Word 15 (filtered medium)"><!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;}
span.EmailStyle19
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Hi Jakub,<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Thank you for the information. I will try your suggestions.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Best Regards<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'>Debdeep<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal style='margin-bottom:3.0pt'><b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#444444'>Debdeep Das</span></b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#444444'> | Lead Engineer | Communication Products - InTC<o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:3.0pt'><span style='font-size:9.0pt;font-family:"Calibri",sans-serif;color:#444444'>Unisys | +91 9980101186 | </span><span style='font-size:9.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><a href="mailto:debdeep.das@in.unisys.com">debdeep.das@in.unisys.com</a></span><span style='font-size:9.0pt;font-family:"Calibri",sans-serif;color:#444444'> <o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:3.0pt'><span style='font-size:8.0pt;font-family:"Calibri",sans-serif;color:#2072BC'><o:p> </o:p></span></p><p class=MsoNormal style='margin-bottom:3.0pt'><a href="http://www.unisys.com/"><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D;text-decoration:none'><img border=0 width=194 height=30 id="Picture_x0020_49" src="cid:image001.png@01D542E1.30CACE90" alt="unisys_logo"></span></a><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:3.0pt'><span style='font-size:8.0pt;font-family:"Calibri",sans-serif;color:#999999'><o:p> </o:p></span></p><p class=MsoNormal style='margin-bottom:3.0pt'><span style='font-size:7.5pt;font-family:"Calibri",sans-serif;color:#999999'>THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all devices.<o:p></o:p></span></p><p class=MsoNormal style='margin-bottom:3.0pt'><a href="http://www.linkedin.com/company/unisys"><span style='font-size:7.5pt;font-family:"Calibri",sans-serif;color:#999999;text-decoration:none'><img border=0 width=16 height=16 id="Picture_x0020_13" src="cid:image002.jpg@01D542E1.30CACE90" alt="Grey_LI"></span></a><span style='font-size:7.5pt;font-family:"Calibri",sans-serif;color:#999999'> </span><a href="http://twitter.com/unisyscorp"><span style='font-size:7.5pt;font-family:"Calibri",sans-serif;color:#999999;text-decoration:none'><img border=0 width=16 height=16 id="Picture_x0020_12" src="cid:image003.jpg@01D542E1.30CACE90" alt="Grey_TW"></span></a><span style='font-size:7.5pt;font-family:"Calibri",sans-serif;color:#999999'> </span><a href="http://www.youtube.com/theunisyschannel"><span style='font-size:7.5pt;font-family:"Calibri",sans-serif;color:#999999;text-decoration:none'><img border=0 width=16 height=16 id="Picture_x0020_10" src="cid:image004.jpg@01D542E1.30CACE90" alt="Grey_YT"></span></a><a href="http://www.facebook.com/unisyscorp"><span style='font-size:7.5pt;font-family:"Calibri",sans-serif;color:#999999;text-decoration:none'><img border=0 width=16 height=16 id="Picture_x0020_9" src="cid:image005.jpg@01D542E1.30CACE90" alt="Grey_FB"></span></a><a href="https://vimeo.com/unisys"><span style='font-size:7.5pt;font-family:"Calibri",sans-serif;color:#999999;text-decoration:none'><img border=0 width=16 height=16 id="Picture_x0020_6" src="cid:image006.jpg@01D542E1.30CACE90" alt="Grey_Vimeo"></span></a><a href="http://blogs.unisys.com/"><span style='font-size:7.5pt;font-family:"Calibri",sans-serif;color:#999999;text-decoration:none'><img border=0 width=16 height=16 id="Picture_x0020_8" src="cid:image007.jpg@01D542E1.30CACE90" alt="Grey_UB"></span></a><span style='font-size:7.5pt;font-family:"Calibri",sans-serif;color:#999999'><o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri",sans-serif;color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'>From:</span></b><span style='font-size:11.0pt;font-family:"Calibri",sans-serif'> Jakub Scholz [mailto:jakub@scholz.cz] <br><b>Sent:</b> Wednesday, July 24, 2019 11:31 PM<br><b>To:</b> Das, Debdeep <debdeep.das@in.unisys.com><br><b>Cc:</b> strimzi@redhat.com<br><b>Subject:</b> Re: [Strimzi] KafkaUser operator<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><div><p class=MsoNormal>Hi Debdeep,<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>The User Operator supports management of ACL rules for the SimpleAclAutohizer plugin which is part of Kafka. You can enable it in your Kafka cluster and manage the ACL rules using the User Operator. For example to produce to a topic you can set it like this:<o:p></o:p></p></div><div><pre style='white-space:pre-wrap'><span style='color:black'>apiVersion: <a href="http://kafka.strimzi.io/v1beta1">kafka.strimzi.io/v1beta1</a><o:p></o:p></span></pre><pre><span style='color:black'>kind: KafkaUser<o:p></o:p></span></pre><pre><span style='color:black'>metadata:<o:p></o:p></span></pre><pre><span style='color:black'> name: kafka-test-apps-producer<o:p></o:p></span></pre><pre><span style='color:black'> labels:<o:p></o:p></span></pre><pre><span style='color:black'> <a href="http://strimzi.io/cluster">strimzi.io/cluster</a>: my-cluster<o:p></o:p></span></pre><pre><span style='color:black'>spec:<o:p></o:p></span></pre><pre><span style='color:black'> authentication:<o:p></o:p></span></pre><pre><span style='color:black'> type: tls<o:p></o:p></span></pre><pre><b><span style='color:black'> authorization:<o:p></o:p></span></b></pre><pre><b><span style='color:black'> type: simple<o:p></o:p></span></b></pre><pre><b><span style='color:black'> acls:<o:p></o:p></span></b></pre><pre><b><span style='color:black'> - resource:<o:p></o:p></span></b></pre><pre><b><span style='color:black'> type: topic<o:p></o:p></span></b></pre><pre><b><span style='color:black'> name: kafka-test-apps<o:p></o:p></span></b></pre><pre><b><span style='color:black'> operation: Write<o:p></o:p></span></b></pre><pre><b><span style='color:black'> - resource:<o:p></o:p></span></b></pre><pre><b><span style='color:black'> type: topic<o:p></o:p></span></b></pre><pre><b><span style='color:black'> name: kafka-test-apps<o:p></o:p></span></b></pre><pre><b><span style='color:black'> operation: Create<o:p></o:p></span></b></pre><pre><b><span style='color:black'> - resource:<o:p></o:p></span></b></pre><pre><b><span style='color:black'> type: topic<o:p></o:p></span></b></pre><pre><b><span style='color:black'> name: kafka-test-apps<o:p></o:p></span></b></pre><pre><b><span style='color:black'> operation: Describe</span></b><span style='color:black'><o:p></o:p></span></pre></div><div><p class=MsoNormal>This will let the user send messages to topic names kafka-test-apps. Or you can let it consume form a topic:<o:p></o:p></p></div><div><pre style='white-space:pre-wrap'><span style='color:black'>apiVersion: <a href="http://kafka.strimzi.io/v1beta1">kafka.strimzi.io/v1beta1</a><o:p></o:p></span></pre><pre><span style='color:black'>kind: KafkaUser<o:p></o:p></span></pre><pre><span style='color:black'>metadata:<o:p></o:p></span></pre><pre><span style='color:black'> name: kafka-test-apps-consumer<o:p></o:p></span></pre><pre><span style='color:black'> labels:<o:p></o:p></span></pre><pre><span style='color:black'> <a href="http://strimzi.io/cluster">strimzi.io/cluster</a>: my-cluster<o:p></o:p></span></pre><pre><span style='color:black'>spec:<o:p></o:p></span></pre><pre><span style='color:black'> authentication:<o:p></o:p></span></pre><pre><span style='color:black'> type: tls<o:p></o:p></span></pre><pre><b><span style='color:black'> authorization:<o:p></o:p></span></b></pre><pre><b><span style='color:black'> type: simple<o:p></o:p></span></b></pre><pre><b><span style='color:black'> acls:<o:p></o:p></span></b></pre><pre><b><span style='color:black'> - resource:<o:p></o:p></span></b></pre><pre><b><span style='color:black'> type: topic<o:p></o:p></span></b></pre><pre><b><span style='color:black'> name: kafka-test-apps<o:p></o:p></span></b></pre><pre><b><span style='color:black'> operation: Read<o:p></o:p></span></b></pre><pre><b><span style='color:black'> - resource:<o:p></o:p></span></b></pre><pre><b><span style='color:black'> type: topic<o:p></o:p></span></b></pre><pre><b><span style='color:black'> name: kafka-test-apps<o:p></o:p></span></b></pre><pre><b><span style='color:black'> operation: Describe<o:p></o:p></span></b></pre><pre><b><span style='color:black'> - resource:<o:p></o:p></span></b></pre><pre><b><span style='color:black'> type: group<o:p></o:p></span></b></pre><pre><b><span style='color:black'> name: my-kafka-consum</span></b><span style='color:black'>er<o:p></o:p></span></pre><pre><span style='color:black'> operation: Read<o:p></o:p></span></pre></div><div><p class=MsoNormal>Hope this helps.<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Thanks & Regards<o:p></o:p></p></div><div><p class=MsoNormal>Jakub<o:p></o:p></p></div><div><p class=MsoNormal><o:p> </o:p></p></div></div><p class=MsoNormal><o:p> </o:p></p><div><div><p class=MsoNormal>On Wed, Jul 24, 2019 at 5:52 PM Das, Debdeep <<a href="mailto:debdeep.das@in.unisys.com">debdeep.das@in.unisys.com</a>> wrote:<o:p></o:p></p></div><blockquote style='border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in'><div><div><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Hello All,<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>I am trying to implement a use case with the Strimzi KafkaUser operator.<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>What I am looking for is certain clients, of kafka cluster, is authorized to a produce/consume to a set of topics and another set of clients is authorized to a different set of topics.<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>For example if I have topicA, topicB, topicC and topicD, I want a set of clients producing/consuming to topicA and TopicB, while the other set producing/consuming to topicC and topicD. Can we restrict the access of the first set of client to topicC and topicD ? I have the cluster deployed on Kubernetes. If you can help with a sample YAML, it will be helpful.<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Regards<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'>Debdeep<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:3.0pt'><b><span style='color:#444444'>Debdeep Das</span></b><span style='color:#444444'> | Lead Engineer | Communication Products - InTC</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:3.0pt'><span style='font-size:9.0pt;color:#444444'>Unisys | +91 9980101186 | </span><span style='font-size:9.0pt'><a href="mailto:debdeep.das@in.unisys.com" target="_blank">debdeep.das@in.unisys.com</a><span style='color:#444444'> </span></span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:3.0pt'><span style='font-size:8.0pt;color:#2072BC'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:3.0pt'><a href="http://www.unisys.com/" target="_blank"><span style='color:windowtext;text-decoration:none'><img border=0 width=194 height=30 id="gmail-m_-3273541114663819230Picture_x0020_49" src="cid:image001.png@01D542E1.30CACE90" alt="unisys_logo"></span></a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:3.0pt'><span style='font-size:8.0pt;color:#999999'> </span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:3.0pt'><span style='font-size:7.5pt;color:#999999'>THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all devices.</span><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;margin-bottom:3.0pt'><a href="http://www.linkedin.com/company/unisys" target="_blank"><span style='font-size:7.5pt;color:#999999;text-decoration:none'><img border=0 width=16 height=16 id="gmail-m_-3273541114663819230Picture_x0020_13" src="cid:image002.jpg@01D542E1.30CACE90" alt="Grey_LI"></span></a><span style='font-size:7.5pt;color:#999999'> </span><a href="http://twitter.com/unisyscorp" target="_blank"><span style='font-size:7.5pt;color:#999999;text-decoration:none'><img border=0 width=16 height=16 id="gmail-m_-3273541114663819230Picture_x0020_12" src="cid:image003.jpg@01D542E1.30CACE90" alt="Grey_TW"></span></a><span style='font-size:7.5pt;color:#999999'> </span><a href="http://www.youtube.com/theunisyschannel" target="_blank"><span style='font-size:7.5pt;color:#999999;text-decoration:none'><img border=0 width=16 height=16 id="gmail-m_-3273541114663819230Picture_x0020_10" src="cid:image004.jpg@01D542E1.30CACE90" alt="Grey_YT"></span></a><a href="http://www.facebook.com/unisyscorp" target="_blank"><span style='font-size:7.5pt;color:#999999;text-decoration:none'><img border=0 width=16 height=16 id="gmail-m_-3273541114663819230Picture_x0020_9" src="cid:image005.jpg@01D542E1.30CACE90" alt="Grey_FB"></span></a><a href="https://vimeo.com/unisys" target="_blank"><span style='font-size:7.5pt;color:#999999;text-decoration:none'><img border=0 width=16 height=16 id="gmail-m_-3273541114663819230Picture_x0020_6" src="cid:image006.jpg@01D542E1.30CACE90" alt="Grey_Vimeo"></span></a><a href="http://blogs.unisys.com/" target="_blank"><span style='font-size:7.5pt;color:#999999;text-decoration:none'><img border=0 width=16 height=16 id="gmail-m_-3273541114663819230Picture_x0020_8" src="cid:image007.jpg@01D542E1.30CACE90" alt="Grey_UB"></span></a><o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto;mso-margin-bottom-alt:auto'> <o:p></o:p></p></div></div><p class=MsoNormal>_______________________________________________<br>Strimzi mailing list<br><a href="mailto:Strimzi@redhat.com" target="_blank">Strimzi@redhat.com</a><br><a href="https://www.redhat.com/mailman/listinfo/strimzi" target="_blank">https://www.redhat.com/mailman/listinfo/strimzi</a><o:p></o:p></p></blockquote></div></div></body></html>