michelin/ns4kafka

Add ACL to allow Transactional Ids when declared Stream

Closed this issue · 2 comments

In order to allow EOS mecanism for KafkaStream is it possible to automaticaly add Transactional Ids ACL for current namespace prefix

Yes, as per the Confluent documentation Required ACL setting for secure Kafka clusters
Upon looking in more details, I also see that Confluent suggest a cluster-wide rule
image
I will check with Confluent what is the preferred method.

KIP-679 renders obsolete the ACL Idempotent_Write on Cluster resource so I won't implement it in ns4kafka.
Made obsolete in 2.8.0 : https://github.com/apache/kafka/blob/2.8/core/src/main/scala/kafka/server/KafkaApis.scala#L2007-L2020