Creation of KafkaUser is not creating the secret

[adcoder007]

I am creating a kafka user using below yaml which was suppose to create a secret in Kubernetes. But I can see the KafkaUser got created but not the secret

apiVersion: kafka.strimzi.io/v1beta2
kind: KafkaUser
metadata:
  namespace: kafka
  name: kafka-user
  labels:
    strimzi.io/cluster: kafka-cluster
spec:
  authentication:
    type: tls
  authorization:
    type: simple
    acls:
      - resource:
          type: topic
          name: "*"
          patternType: literal
        operation: All
      - resource:
          type: group
          name: "*"
          patternType: literal
        operation: All
      - resource:
          type: cluster
          name: "*"
          patternType: literal
        operation: All
      - resource:
          type: transactionalId
          name: "*"
          patternType: literal
        operation: All

[scholzj]

You will have to provide logs and a full resource from Kubernetes including its status (kubectl get kafkauser -o yaml). Without that, nobody can tell you what is or isn't wrong.

[adcoder007]

apiVersion: kafka.strimzi.io/v1beta2
kind: KafkaUser
metadata:
  annotations:
    kubectl.kubernetes.io/last-applied-configuration: |
      {"apiVersion":"kafka.strimzi.io/v1beta2","kind":"KafkaUser","metadata":{"annotations":{},"labels":{"strimzi.io/cluster":"kafka-cluster"},"name":"kafka-user","namespace":"kafka"},"spec":{"authentication":{"type":"tls"},"authorization":{"acls":[{"operation":"All","resource":{"name":"*","patternType":"literal","type":"topic"}},{"operation":"All","resource":{"name":"*","patternType":"literal","type":"group"}},{"operation":"All","resource":{"name":"*","patternType":"literal","type":"cluster"}},{"operation":"All","resource":{"name":"*","patternType":"literal","type":"transactionalId"}}],"type":"simple"}}}
  creationTimestamp: "2023-03-21T10:25:03Z"
  generation: 1
  labels:
    strimzi.io/cluster: kafka-cluster
  name: kafka-user
  namespace: kafka
  resourceVersion: "156143825"
  uid: 26ef6e7e-9a57-4ec2-94f4-5a60a8f6da89
spec:
  authentication:
    type: tls
  authorization:
    acls:
    - operation: All
      resource:
        name: '*'
        patternType: literal
        type: topic
    - operation: All
      resource:
        name: '*'
        patternType: literal
        type: group
    - operation: All
      resource:
        name: '*'
        patternType: literal
        type: cluster
    - operation: All
      resource:
        name: '*'
        patternType: literal
        type: transactionalId
    type: simple
status:
  conditions:
  - lastTransitionTime: "2023-03-21T10:25:03.483745744Z"
    message: 'io.strimzi.operator.common.ReconciliationException: io.strimzi.operator.cluster.model.InvalidResourceException:
      Simple authorization ACL rules are configured but not supported in the Kafka
      cluster configuration.'
    reason: ExecutionException
    status: "True"
    type: NotReady
  - lastTransitionTime: "2023-03-21T10:25:03.482323349Z"
    message: In API version kafka.strimzi.io/v1beta2 the operation property at path
      spec.authorization.acls.operation has been deprecated, and should now be configured
      using spec.authorization.acls[*].operations.
    reason: DeprecatedFields
    status: "True"
    type: Warning
  - lastTransitionTime: "2023-03-21T10:25:03.482323349Z"
    message: 'Contains object at path spec.authorization.acls.resource with unknown
      properties: name, patternType'
    reason: UnknownFields
    status: "True"
    type: Warning
  observedGeneration: 1

[adcoder007]

After using the format for v1beta2 https://github.com/strimzi/strimzi-kafka-operator/blob/main/examples/user/kafka-user.yaml now getting the below error

apiVersion: kafka.strimzi.io/v1beta2
kind: KafkaUser
metadata:
  annotations:
    kubectl.kubernetes.io/last-applied-configuration: |
      {"apiVersion":"kafka.strimzi.io/v1beta2","kind":"KafkaUser","metadata":{"annotations":{},"labels":{"strimzi.io/cluster":"kafka-cluster"},"name":"dev-cdc-user","namespace":"kafka"},"spec":{"authentication":{"type":"tls"},"authorization":{"acls":[{"host":"*","operations":["Describe","Read"],"resource":{"name":"*","patternType":"literal","type":"topic"}},{"host":"*","operations":["Read"],"resource":{"name":"*","patternType":"literal","type":"group"}},{"host":"*","operations":["Create","Describe","Write"],"resource":{"name":"*","patternType":"literal","type":"topic"}}],"type":"simple"}}}
  creationTimestamp: "2023-03-21T11:16:00Z"
  generation: 1
  labels:
    strimzi.io/cluster: kafka-cluster
  name: dev-cdc-user
  namespace: kafka
  resourceVersion: "156168396"
  uid: 63c6c372-ee36-4e13-8ddd-551d257c705c
spec:
  authentication:
    type: tls
  authorization:
    acls:
    - host: '*'
      operations:
      - Describe
      - Read
      resource:
        name: '*'
        patternType: literal
        type: topic
    - host: '*'
      operations:
      - Read
      resource:
        name: '*'
        patternType: literal
        type: group
    - host: '*'
      operations:
      - Create
      - Describe
      - Write
      resource:
        name: '*'
        patternType: literal
        type: topic
    type: simple
status:
  conditions:
  - lastTransitionTime: "2023-03-21T11:16:00.133381266Z"
    message: 'io.strimzi.operator.common.ReconciliationException: io.strimzi.operator.cluster.model.InvalidResourceException:
      Simple authorization ACL rules are configured but not supported in the Kafka
      cluster configuration.'
    reason: ExecutionException
    status: "True"
    type: NotReady
  observedGeneration: 1

[scholzj]

Well, have you read the status section and what the error is? You try to configure some ACLs, but did not enabled them in your Kafka cluster. So you need to either not use them in the user or enable authorization in Kafka.