BE: RBAC: Ignore values for non-applicable resources

[Sahay-ohikc]

Issue submitter TODO list

• I've looked up my issue in FAQ
• I've searched for an already existing issues here
• I've tried running main-labeled docker image and the issue still persists there
• I'm running a supported version of the application which is listed here

Describe the bug (actual behavior)

I get the 500 errors while trying to get Broker configs or edit dynamic config of a cluster.
Roman Zabaluev suggested that it may be a bug with RBAC. Logs and RBAC config are in the attachment.
log-events-viewer-result.csv
rbac-qa.zip

Uploaded Files

Expected behavior

Cluster dynamic config reachable.
Broker configs tab working.

Your installation details

I'm running an image 2956664 v1.0.0 from ghcr.io/kafbat/kafka-ui:latest
I build a custom image in ECR with this simple Dockerfile:
FROM provectuslabs/kafka-ui:latest
COPY rbac-qa-test.yml /roles.yml
ENV SPRING_CONFIG_ADDITIONAL-LOCATION /roles.yml
EXPOSE 8080
It is deployed on AWS ECS with AWS IAM authorization to Cluster and Cognito authorization to Kafka-UI with RBAC enabled.
Cluster config is transferred via env variables.
rbac-qa.zip

Steps to reproduce

Use configuration to deploy KafkaUI, then click the appropriate "configure" button or broker config tab.

Screenshots

Screenshots

Logs

1711720109267,java.lang.IllegalStateException: null
1711720109267, at com.google.common.base.Preconditions.checkState(Preconditions.java:496)
1711720109267, Suppressed: reactor.core.publisher.FluxOnAssembly$OnAssemblyException:

1711720109267,Original Stack Trace:
1711720109267, at com.google.common.base.Preconditions.checkState(Preconditions.java:496)
1711720109267, at io.kafbat.ui.model.rbac.AccessContext$SingleResourceAccess.lambda$isAccessible$1(AccessContext.java:72)

log-events-viewer-result.csv

Additional context

No response

[github-actions]

Hello there Sahay-ohikc! 👋

Thank you and congratulations 🎉 for opening your very first issue in this project! 💖

In case you want to claim this issue, please comment down below! We will try to get back to you as soon as we can. 👀

[Haarolean]

Fails at io/kafbat/ui/model/rbac/AccessContext.java:72 due to the config containing non-allowed values for app and cluster configs:

        - resource: applicationconfig
#          value: ".*"
          actions: ALL
        - resource: clusterconfig
#          value: ".*"
          actions: ALL

TODO:

1. Either ignore these or make it clear in logs (upon start, ideally) that the config is not valid.

Also #275