KafkaUser CRs similarly have many settings with which users would benefit from guidance, particularly the ACL (SimpleAuthorizer) configuration.
Crafting correct ACL sets is difficult and checking that a given set actually blocks/allows given operations is a deploy-and-see affair.
We should explore what a KafkaUser CR design UI would look like, how can we simplify the ACL creation/edit process and provide tooling for checking a given ACL configuration allows/blocks a given operation. For example:
- Does this ACL set allow user "Bob" to produce transactional messages to topics beginning with
pii-*
- Does this ACL set prevent user "Alice" from consuming messages from any topic beginning with
pii-*
KafkaUserCRs similarly have many settings with which users would benefit from guidance, particularly the ACL (SimpleAuthorizer) configuration.Crafting correct ACL sets is difficult and checking that a given set actually blocks/allows given operations is a deploy-and-see affair.
We should explore what a
KafkaUserCR design UI would look like, how can we simplify the ACL creation/edit process and provide tooling for checking a given ACL configuration allows/blocks a given operation. For example:pii-*pii-*