kafka topic 权限控制

kafka topic 权限控制kafka官网配置设置权限#查看权限./kafka-acls.sh --authorizer-properties zookeeper.connect=test01:2181,test02:2181,test03:2181 --list#添加权限./kafka-acls.sh --authorizer-properties zookeeper.co...

jzy3711

287678人浏览 · 2020-04-20 12:42:05

jzy3711 · 2020-04-20 12:42:05 发布

kafka topic 权限控制

kafka官网

配置

authorizer.class.name= kafka.security.auth.SimpleAclAuthorizer
allow.everyone.if.no.acl.found=true;super.users=User:admin;User:streaming;User:carbon;User:flink

设置权限

#查看权限
./kafka-acls.sh --authorizer-properties zookeeper.connect=test01:2181,test02:2181,test03:2181 --list
#添加权限
./kafka-acls.sh --authorizer-properties zookeeper.connect=test01:2181,test02:2181,test03:2181 -add --allow-principal User:streaming --allow-host 10.10.151.* --producer --topic carbon_file_test
./kafka-acls.sh --authorizer-properties zookeeper.connect=test01:2181,test02:2181,test03:2181 -add --allow-principal User:streaming --allow-host 10.10.151.* --producer --topic eve_agg_file
./kafka-acls.sh --authorizer-properties zookeeper.connect=test01:2181,test02:2181,test03:2181 -add --allow-principal User:streaming --allow-host 10.10.151.* --producer --topic flink_test_producer
./kafka-acls.sh --authorizer-properties zookeeper.connect=test01:2181,test02:2181,test03:2181 -add --allow-principal User:streaming --allow-host 10.10.151.* --consumer --topic flink_test_producer
./kafka-acls.sh --authorizer-properties zookeeper.connect=test01:2181,test02:2181,test03:2181 -add --allow-principal User:streaming --allow-host 10.10.151.* --consumer --group=*  --topic flink_test_producer
./kafka-acls.sh --authorizer-properties zookeeper.connect=test01:2181,test02:2181,test03:2181 -add --allow-principal User:carbon --allow-host 10.10.151.* --consumer --group=*  --topic carbon_file_test
./kafka-acls.sh --authorizer-properties zookeeper.connect=test01:2181,test02:2181,test03:2181 -add --allow-principal User:carbon --allow-host 10.10.151.* --consumer --group=*  --topic eve_agg_file

删除权限

./kafka-acls.sh --authorizer-properties zookeeper.connect=test01:2181,test02:2181,test03:2181 -remove --allow-principal User:streaming --allow-host 10.10.151.* --producer --topic carbon_file_test --force
./kafka-acls.sh --authorizer-properties zookeeper.connect=test01:2181,test02:2181,test03:2181 -remove --allow-principal User:streaming --allow-host 10.10.151.* --producer --topic eve_agg_file --force
./kafka-acls.sh --authorizer-properties zookeeper.connect=test01:2181,test02:2181,test03:2181 -remove --allow-principal User:streaming --allow-host 10.10.151.* --producer --topic flink_test_producer --force
./kafka-acls.sh --authorizer-properties zookeeper.connect=test01:2181,test02:2181,test03:2181 -remove --allow-principal User:streaming --allow-host 10.10.151.* --consumer --topic flink_test_producer --force
./kafka-acls.sh --authorizer-properties zookeeper.connect=test01:2181,test02:2181,test03:2181 -remove --allow-principal User:streaming --allow-host 10.10.151.* --consumer --group=*  --topic flink_test_producer --force
./kafka-acls.sh --authorizer-properties zookeeper.connect=test01:2181,test02:2181,test03:2181 -remove --allow-principal User:carbon --allow-host 10.10.151.* --consumer --group=*  --topic carbon_file_test --force
./kafka-acls.sh --authorizer-properties zookeeper.connect=test01:2181,test02:2181,test03:2181 -remove --allow-principal User:carbon --allow-host 10.10.151.* --consumer --group=*  --topic eve_agg_file --force