Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

What does the Ranger plugin for Kerberized kafka currently support ?

Solved Go to solution
Highlighted

What does the Ranger plugin for Kerberized kafka currently support ?

Rising Star

It doesn't support creation and deletion of topics. I assume that adding a user to Ranger for kafka will provide producer and consumer authorization for kafka. If that is not case, I need to be enable native acls.

1 ACCEPTED SOLUTION

Accepted Solutions

Re: What does the Ranger plugin for Kerberized kafka currently support ?

Contributor

In Kafka, topic creation and deletion is still done directly at the ZooKeeper level and doesn't go through Broker. If you are using HDP, then OOTB, only principal "kafka" has permission to do these operations.

In future releases, Kafka community will support creation of Topics via Broker. Till that time, there is not much option, but to manage the creation/delete permissions using ZooKeeper ACLs

View solution in original post

2 REPLIES 2

Re: What does the Ranger plugin for Kerberized kafka currently support ?

Contributor

In Kafka, topic creation and deletion is still done directly at the ZooKeeper level and doesn't go through Broker. If you are using HDP, then OOTB, only principal "kafka" has permission to do these operations.

In future releases, Kafka community will support creation of Topics via Broker. Till that time, there is not much option, but to manage the creation/delete permissions using ZooKeeper ACLs

View solution in original post

Highlighted

Re: What does the Ranger plugin for Kerberized kafka currently support ?

Mentor

@nbalaji-elangovan has this been resolved? Please accept best answer or provide your own solution.

Don't have an account?
Coming from Hortonworks? Activate your account here