Chapter 103. KafkaUserSpec schema reference

Property	Property type	Description
authentication	`KafkaUserTlsClientAuthentication`, `KafkaUserTlsExternalClientAuthentication`, `KafkaUserScramSha512ClientAuthentication`	Authentication mechanism enabled for this Kafka user. The supported authentication mechanisms are `scram-sha-512`, `tls`, and `tls-external`. `scram-sha-512` generates a secret with SASL SCRAM-SHA-512 credentials. `tls` generates a secret with user certificate for mutual TLS authentication. `tls-external` does not generate a user certificate. But prepares the user for using mutual TLS authentication using a user certificate generated outside the User Operator. ACLs and quotas set for this user are configured in the `CN=<username>` format. Authentication is optional. If authentication is not configured, no credentials are generated. ACLs and quotas set for the user are configured in the `<username>` format suitable for SASL authentication.
authorization	`KafkaUserAuthorizationSimple`	Authorization rules for this Kafka user.
quotas	`KafkaUserQuotas`	Quotas on requests to control the broker resources used by clients. Network bandwidth and request rate quotas can be enforced.Kafka documentation for Kafka User quotas can be found at http://kafka.apache.org/documentation/#design_quotas.
template	`KafkaUserTemplate`	Template to specify how Kafka User `Secrets` are generated.