From: Kai Moritz Date: Mon, 26 May 2025 20:20:56 +0000 (+0200) Subject: Phase 5 b: Fix - AclAuthorizer X-Git-Url: http://juplo.de/gitweb/?a=commitdiff_plain;h=cf6c959dbb2eda3711483eb7447a5cec387ca753;p=demos%2Fkafka%2Ftraining Phase 5 b: Fix - AclAuthorizer -- TODO: Wahrscheinlich von Beginn an nicht nötig. Grund: Auf die Controller wird nur von den Brokern zugegriffen und die agieren als Superuser! --- diff --git a/docker-compose.yml b/docker-compose.yml index 793d05b..eedadb3 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -11,7 +11,6 @@ services: KAFKA_INTER_BROKER_LISTENER_NAME: BROKER KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: CONTROLLER:SASL_PLAINTEXT, BROKER:SASL_PLAINTEXT KAFKA_SUPER_USERS: User:controller;User:broker - KAFKA_AUTHORIZER_CLASS_NAME: kafka.security.authorizer.AclAuthorizer KAFKA_ALLOW_EVERYONE_IF_NO_ACL_FOUND: "false" KAFKA_LISTENER_NAME_CONTROLLER_PLAIN_SASL_JAAS_CONFIG: >- org.apache.kafka.common.security.plain.PlainLoginModule required @@ -43,7 +42,6 @@ services: KAFKA_INTER_BROKER_LISTENER_NAME: BROKER KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: CONTROLLER:SASL_PLAINTEXT, BROKER:SASL_PLAINTEXT KAFKA_SUPER_USERS: User:controller;User:broker - KAFKA_AUTHORIZER_CLASS_NAME: kafka.security.authorizer.AclAuthorizer KAFKA_ALLOW_EVERYONE_IF_NO_ACL_FOUND: "false" KAFKA_LISTENER_NAME_CONTROLLER_PLAIN_SASL_JAAS_CONFIG: >- org.apache.kafka.common.security.plain.PlainLoginModule required @@ -75,7 +73,6 @@ services: KAFKA_INTER_BROKER_LISTENER_NAME: BROKER KAFKA_LISTENER_SECURITY_PROTOCOL_MAP: CONTROLLER:SASL_PLAINTEXT, BROKER:SASL_PLAINTEXT KAFKA_SUPER_USERS: User:controller;User:broker - KAFKA_AUTHORIZER_CLASS_NAME: kafka.security.authorizer.AclAuthorizer KAFKA_ALLOW_EVERYONE_IF_NO_ACL_FOUND: "false" KAFKA_LISTENER_NAME_CONTROLLER_PLAIN_SASL_JAAS_CONFIG: >- org.apache.kafka.common.security.plain.PlainLoginModule required