Support Questions

Find answers, ask questions, and share your expertise
Announcements
Celebrating as our community reaches 100,000 members! Thank you!

What does the Ranger plugin for Kerberized kafka currently support ?

avatar
Expert Contributor

It doesn't support creation and deletion of topics. I assume that adding a user to Ranger for kafka will provide producer and consumer authorization for kafka. If that is not case, I need to be enable native acls.

1 ACCEPTED SOLUTION

avatar
Rising Star

In Kafka, topic creation and deletion is still done directly at the ZooKeeper level and doesn't go through Broker. If you are using HDP, then OOTB, only principal "kafka" has permission to do these operations.

In future releases, Kafka community will support creation of Topics via Broker. Till that time, there is not much option, but to manage the creation/delete permissions using ZooKeeper ACLs

View solution in original post

2 REPLIES 2

avatar
Rising Star

In Kafka, topic creation and deletion is still done directly at the ZooKeeper level and doesn't go through Broker. If you are using HDP, then OOTB, only principal "kafka" has permission to do these operations.

In future releases, Kafka community will support creation of Topics via Broker. Till that time, there is not much option, but to manage the creation/delete permissions using ZooKeeper ACLs

avatar
Master Mentor

@nbalaji-elangovan has this been resolved? Please accept best answer or provide your own solution.