이 콘텐츠는 선택한 언어로 제공되지 않습니다.
Chapter 4. Configuring the Authorization filter
This procedure describes how to set up the Authorization filter by configuring it in Streams for Apache Kafka Proxy.
Prerequisites
- An instance of Streams for Apache Kafka Proxy. For information on deploying Streams for Apache Kafka Proxy, see the Deploying and Managing Streams for Apache Kafka Proxy on OpenShift guide.
Procedure
Configure an
Authorizationtype filter.-
In an OpenShift deployment using a
KafkaProtocolFilterresource. See Section 4.1, “ExampleKafkaProtocolFilterresource”
-
In an OpenShift deployment using a
Configure the ACL rules.
-
In an OpenShift deployment use a
ConfigMapresource. See Section 4.2, “Example ACL Rules”
-
In an OpenShift deployment use a
4.1. Example KafkaProtocolFilter resource 링크 복사링크가 클립보드에 복사되었습니다!
If your instance of Streams for Apache Kafka Proxy runs on OpenShift, you must use a KafkaProtocolFilter resource to contain the filter configuration.
Here’s a complete example of a KafkaProtocolFilter resource configured for authorization:
-
authorizeris the name of the authorizer service implementation. Currently, this must beAclAuthorizerService. -
aclFileis the reference file containing the ACL rules. You can use an interpolation reference to reference rules stored within a KubernetesConfigMaporSecretresource.
4.2. Example ACL Rules 링크 복사링크가 클립보드에 복사되었습니다!
If your instance of Streams for Apache Kafka Proxy runs on OpenShift, you must use a ConfigMap resource to contain the ACL rules.
Here’s a complete example of a ConfigMap resource configured for authorization:
Example ConfigMap resource containing the ACL rules