added audit trial / readme to standard RBAC

osodevops · Nov 8, 2021 · 98de010 · 98de010
1 parent 87de990
commit 98de010
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/examples/rbac/README.md b/examples/rbac/README.md
@@ -0,0 +1 @@
+# Best practice secure production setup 
diff --git a/examples/rbac/confluent/kafka.yaml b/examples/rbac/confluent/kafka.yaml
@@ -10,6 +10,8 @@ spec:
       - listener.name.internal.plain.sasl.server.callback.handler.class=io.confluent.security.auth.provider.ldap.LdapAuthenticateCallbackHandler
       - listener.name.external.plain.sasl.server.callback.handler.class=io.confluent.security.auth.provider.ldap.LdapAuthenticateCallbackHandler
       - listener.name.replication.plain.sasl.server.callback.handler.class=io.confluent.security.auth.provider.ldap.LdapAuthenticateCallbackHandler
+      - authorizer.class.name=io.confluent.kafka.security.authorizer.ConfluentServerAuthorizer
+      - confluent.authorizer.access.rule.providers=ZK_ACL,CONFLUENT
     log4j:
       - log4j.logger.io.confluent.security.auth.provider.ldap.LdapGroupManager=DEBUG
   tls: