search

redpanda-data / redpanda-operator

36 stars 9 forks source link

Feature Request: Add support for provisioning users #61

Open brokenjacobs opened 9 months ago

brokenjacobs commented 9 months ago

Similar to strimzi, it would be extremely useful to be able to provision users (both TLS and SCRAM-SHA-512), including RBAC via crds that the operator processes. I'm sure something similar is achievable with Kubernetes Jobs and scripts, but that kind of defeats the purpose of using the operator?

Some examples from strimzi: https://github.com/strimzi/strimzi-kafka-operator/blob/main/examples/user/kafka-user.yaml https://strimzi.io/docs/operators/latest/configuring.html#type-KafkaUser-reference

I have a use case that deploys kafka to 87 single node instances in an identical fashion. At a minimum I need to deploy a user on each one for use with mirrormaker2. I'd live to use redpanda over kafka for a lower footprint on these devices, but to date I haven't pursued it because of this user provisioning issue.

JIRA Link: K8S-191

mattschumpert commented 8 months ago

This was tracked by https://github.com/redpanda-data/redpanda-operator/issues/64 but can probably be moved here @chrisseto

brokenjacobs commented 8 months ago

Ah yes missed that. I would add the RBAC requirements in with this.