User operator - unknown properties: name, patternType

[kreuzj]

Hello,
I'm trying to secure Kafka cluster using User operator. I took kafka-user.yaml from examples folder from installation package (running Strimzi version 0.25.0) and updated values with respective values of our kafka cluster/topic. Also configured authentization/authorization section in kafka-cluster.yaml as described in the documentation. When I checked the log of User operator there are following warnings:

2021-10-04 12:09:50 INFO  UserOperator:66 - Triggering periodic reconciliation for namespace kafka                                                                                                           2021-10-04 12:09:50 WARN  AbstractOperator:141 - Reconciliation #15(timer) KafkaUser(kafka/ish-user): Contains object at path spec.authorization.acls.resource with unknown properties: name, patternType 
2021-10-04 12:09:50 WARN  AbstractOperator:141 - Reconciliation #15(timer) KafkaUser(kafka/ish-user): Contains object at path spec.authorization.acls.resource with unknown properties: name, patternType
2021-10-04 12:09:50 INFO  AbstractOperator:219 - Reconciliation #15(timer) KafkaUser(kafka/ish-user): KafkaUser ish-user will be checked for creation or modification
2021-10-04 12:09:50 INFO  AbstractOperator:466 - Reconciliation #15(timer) KafkaUser(kafka/ish-user): reconciled                                    

... and it seems that the user is not authorized to perform desired operations on the cluster. Here is how my kafka-user.yaml looks:

apiVersion: kafka.strimzi.io/v1beta2
kind: KafkaUser
metadata:
  name: ish-user
  labels:
    strimzi.io/cluster: ish-kafka-cluster
spec:
  authentication:
    type: scram-sha-512
  authorization:
    type: simple
    acls:
      - resource:
          type: cluster
          name: ish-kafka-cluster
          patternType: literal
        operation: All
        host: "*"
      - resource:
          type: topic
          name: ish.asterix.cat062.v0
          patternType: literal
        operation: Describe
        host: "*"

Can you pls. help to resolve the issue. Not sure what am I doing wrong...

Thanks
Jan

[scholzj]

I don't think that the resource of type: cluster supports name and patternType. There is always only one cluster in the Kafka cluster. So these fields do not make sense there.

[kreuzj]

@scholzj Hello Jakub, thanks for prompt answer. I removed those two properties from type: cluster and warnings from user operator log disappeared. Thanks for your help