You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, only topic black-listing is supported, which works great for centralized ACL management.
However, it makes decentralized topic management difficult. We have multiple teams managing their own kafka topics on the same cluster. They currently need to blacklist each of the other teams' prefix. Whenever we onboard new teams, the blacklist needs updating - a very error-prone process, because, you know, people.
How should this work?
It would be an exact inversion of the current blacklisting:
settings:
whitelist:
prefixed:
- only.my.topics.
..would only manage topics with the above prefix - this also means that any topics declared in the state file NOT matching this prefix are ignored (or perhaps throw an error).
The two mechanisms would be expected to be mutually exclusive.
settings:
whitelist: {...}blacklist: {...} # Specifying both types raises a validation error
The text was updated successfully, but these errors were encountered:
joschi
added a commit
to joschi/kafka-gitops
that referenced
this issue
Nov 11, 2022
Currently, only topic black-listing is supported, which works great for centralized ACL management.
However, it makes decentralized topic management difficult. We have multiple teams managing their own kafka topics on the same cluster. They currently need to blacklist each of the other teams' prefix. Whenever we onboard new teams, the blacklist needs updating - a very error-prone process, because, you know, people.
How should this work?
It would be an exact inversion of the current blacklisting:
..would only manage topics with the above prefix - this also means that any topics declared in the state file NOT matching this prefix are ignored (or perhaps throw an error).
The two mechanisms would be expected to be mutually exclusive.
The text was updated successfully, but these errors were encountered: