瀏覽代碼

GitBook: [#7] Update ACLs info

Roman Zabaluev 2 年之前
父節點
當前提交
ba6a98c237
共有 4 個文件被更改,包括 31 次插入15 次删除
  1. 1 0
      SUMMARY.md
  2. 29 0
      configuration/configuration/required-acls.md
  3. 1 1
      faq/common-problems.md
  4. 0 14
      faq/faq.md

+ 1 - 0
SUMMARY.md

@@ -24,6 +24,7 @@
 ## 👷♂ Configuration
 
 * [Configuration](configuration/configuration/README.md)
+  * [Required ACLs](configuration/configuration/required-acls.md)
   * [Complex configuration examples](configuration/configuration/complex-configuration-examples/README.md)
     * [Kraft mode + multiple brokers](configuration/configuration/complex-configuration-examples/kraft-mode-+-multiple-brokers.md)
 * [SSL](configuration/ssl.md)

+ 29 - 0
configuration/configuration/required-acls.md

@@ -0,0 +1,29 @@
+---
+description: ACLs required to run the app
+---
+
+# Required ACLs
+
+## Standalone kafka
+
+This list is enough to run the app in r/o mode
+
+```
+ Permission |    Operation     | ResourceType | ResourceName  | PatternType
+------------+------------------+--------------+---------------+--------------
+ ALLOW      | READ             | TOPIC        | *             | LITERAL
+ ALLOW      | DESCRIBE_CONFIGS | TOPIC        | *             | LITERAL
+ ALLOW      | DESCRIBE         | GROUP        | *             | LITERAL
+ ALLOW      | DESCRIBE         | CLUSTER      | kafka-cluster | LITERAL
+ ALLOW      | DESCRIBE_CONFIGS | CLUSTER      | kafka-cluster | LITERAL
+```
+
+## MSK
+
+```
+      "kafka-cluster:Connect",
+      "kafka-cluster:Describe*",
+      "kafka-cluster:CreateTopic",
+      "kafka-cluster:AlterGroup",
+      "kafka-cluster:ReadData"
+```

+ 1 - 1
faq/common-problems.md

@@ -10,7 +10,7 @@ Good resource for what properties are needed here: https://gist.github.com/rmoff
 
 ## Cluster authorization failed
 
-Check [required permissions](https://github.com/provectus/kafka-ui/wiki/FAQ#required-aclmsk-permissions).
+Check the [required permissions](../configuration/configuration/required-acls.md).
 
 ## Confluent cloud errors
 

+ 0 - 14
faq/faq.md

@@ -30,20 +30,6 @@ See [this](https://github.com/provectus/kafka-ui/blob/master/documentation/compo
 
 Planned, see [#478](https://github.com/provectus/kafka-ui/issues/478)
 
-### Required ACL/MSK permissions
-
-ACL: todo
-
-MSK:
-
-```
-      "kafka-cluster:Connect",
-      "kafka-cluster:Describe*",
-      "kafka-cluster:CreateTopic",
-      "kafka-cluster:AlterGroup",
-      "kafka-cluster:ReadData"
-```
-
 ### Smart filters syntax
 
 **Variables bound to groovy context**: partition, timestampMs, keyAsText, valueAsText, header, key (json if possible), value (json if possible).