How to set user ACL access only topic (deny all / read some topic)

[l0ginp]

Hi team,
How to set user ACL access only topic (deny all / read some topic)

this is my config

apiVersion: kafka.strimzi.io/v1alpha1
kind: KafkaUser
metadata:
  name: user01
  namespace: kafka
  labels:
    strimzi.io/cluster: kafka-cluster
spec:
  authentication:
    type: scram-sha-512
  authorization:
    type: simple
    acls:
      - resource:
          type: topic
          name: "test_topic"
          patternType: literal
        operation: Read

[scholzj]

That is exactly what your YAML does.

[l0ginp]

You mean this YAML is read only topic "test_topic"?
Now I can still write to another topics

[scholzj]

Well, that is what it says, isn't it? You give the user only the read operation on the topic test_topic. So if you can still do other things with the user, you should probably check:

• if you enabled authorisation in the Kafka broker => without that these rules are not used for anything
• If the user is ready (which means that the rules were processed)

[l0ginp]

I have some question. Why i can write to topic "test_topic" via "user01"?