kafka connect No authorization

[chanvoyage]

i was enabled authorization type:simple ,During kafka cluster restart for apply config that Kafka connect cluster No authorization to topic

1).Do you have any suggestion for fix kafka connect authorization topic or any document guide

2). About kafk user after enable authorization type:simple i found something confused .

first time i config authorization to user "A" can not read topic "A" , it work ! After that i config again to user "A" can read topic "A"
and test again found log error tel me user "A" No authorization Topic "A"

[scholzj]

The picture with the log is too small to read. Please stop including screenshots and paste the logs as a code / text. Our security exampels use authorizaion and should give you an idea what right Connect might need: https://github.com/strimzi/strimzi-kafka-operator/tree/main/examples

[chanvoyage]

Did you mean this one ?

apiVersion: kafka.strimzi.io/v1beta2
kind: Kafka
metadata:
name: kafka-cluster
namespace: kafka
spec:
kafka:
version: 2.8.0
replicas: 3
listeners:
- name: plain
port: 9092
type: internal
tls: false
- name: tls
port: 9093
type: internal
tls: true
- name: external
port: 9094
type: ingress
tls: true
configuration:
bootstrap:
host: kafka-bootstrap.chaiyapon.com
brokers:
- broker: 0
host: kafka-broker-0.chaiyapon.com
- broker: 1
host: kafka-broker-1.chaiyapon.com
- broker: 2
host: kafka-broker-2.chaiyapon.com
authentication:
type: tls
authorization:
type: simple
config:
offsets.topic.replication.factor: 3
transaction.state.log.replication.factor: 3
transaction.state.log.min.isr: 2
log.message.format.version: "2.8"
inter.broker.protocol.version: "2.8"

[scholzj]

Can you please format it as code? Without the formatting it is not possible to read the YAML structure.

[chanvoyage]

Is is ok
kafka.txt

[scholzj]

Well, if you learn how to include it in the connect as a code, that will be the best way. Because nobody will need to download the file etc. I think you have the authentication badly aligned and configured only for one listener. So that is something to look into.

[chanvoyage]

I didn't know before I'm sorry scholzi

i have successfully about enabled tls , kafka connect talk to kafka cluster by port 9093 and i need to config that

thank you very much