provectus / kafka-ui

Open-Source Web UI for Apache Kafka Management
Apache License 2.0
9.53k stars 1.16k forks source link

Use Kafka Topic ACLs with OAuth Identity provider #4050

Open craiglservin opened 1 year ago

craiglservin commented 1 year ago

Issue submitter TODO list

Is your proposal related to a problem?

Topic level access control needs to be set up twice once for Kafka-UI and once with kafka-acls.sh. It would be nice if Kafka-UI could somehow honor the topic ACLs.

Describe the feature you're interested in

Have Identity management happen via OAuth, but have topic level RBAC follow the ACLs set for a topic within the Kafka cluster. So use the Kafka admin api pull back the ACLs for a topic before allowing READ/WRITE access to it. This could potentially be done for other ACLs stored within Kafka, but the topic permissions are the most useful.

Describe alternatives you've considered

I've considered setting up the topic level RBAC explicitly in the configuration, but it gets unwieldy pretty quickly with a large number of users and topics.

Version you're running

56fa824

Additional context

No response

github-actions[bot] commented 1 year ago

Hello there craiglservin! 👋

Thank you and congratulations 🎉 for opening your very first issue in this project! 💖

In case you want to claim this issue, please comment down below! We will try to get back to you as soon as we can. 👀