ACL Implemetation on Topic Level

[sejalgoy]

Hi Everyone,

I have a Kafka cluster on strimzi. I want to implement ACL/Authorization on Topic level. I have read about Simple, Keycloak and OPA..
Not able to figure out if Keycloak or OPA which one is better.
Could you please help me in this?

[scholzj]

WDYM with ACLs on a topic level?

[sejalgoy]

May i know what is WDYM?

[scholzj]

Ahh, sorry ... WDYM means what do you mean ;-).

All the authorization types allow you to define different rules for different topics. So I wonder if you have some specific features you need or what exactly do you mean with Topic Level authorization.

Apart from that ... it is about what do you use. Keycloak authorization requires you to use Keycloak and OAuth authentication. OPA can do anything. But you actually need to write the policies.

[sejalgoy]

In our organization, we are not allowed to use Keycloak server, can we implement Authentication and OAUTH authorization with Azure Authorization?

[scholzj]

AFAIK, OAuth itself does not offer any proper solution for authorization which would be usable with Kafka. The Keycloak authorization support is using some Keycloak specific features (Keycloak Authorization Services). If Azure has something similar, it is likely not compatible with the Keycloak feature. So no, I don't think you can use that.

[sejalgoy]

Thank you!