lensesio / schema-registry-ui

Web tool for Avro Schema Registry |
http://lenses.io/product/features
421 stars 112 forks source link

Schema Registry with mTLS & ACLs #99

Open sergeiwaigant opened 4 years ago

sergeiwaigant commented 4 years ago

Hi all,

does the UI support mTLS protected Schema Registries? We are running a Schema Registry where the "clients" are authenticating using a PKI infrastructure, means the public keys of the clients are in the truststore of the SR HTTPS endpoint. Furthermore we are using Confluent Security Plugin to check authorisations. The ACLs are based on the distinguished name / subject of the client and only have "filtered" permissions on kind of namespace specific topics and schemas.

I am thinking of serving a "pod template" which our tenants of the platform can run in their kubernetes namespace with their client IDs to browse their schemas, leveraging the already implemented security related measures.

Any idea?

Regards -Sergei