--- Class[Profile::Kafka::Broker].orig
+++ Class[Profile::Kafka::Broker]
+ acls => ['kafka acls --add --allow-principal User:ANONYMOUS --operation Create --operation DescribeConfigs --operation IdempotentWrite --operation Describe --cluster', "kafka acls --add --allow-principal User:ANONYMOUS --operation Read --operation DescribeConfigs --operation Describe --operation Write --topic '*'", "kafka acls --add --allow-principal User:ANONYMOUS --operation Read --group '*'", 'kafka acls --add --allow-principal User:ANONYMOUS --operation Read --operation Describe --host 10.64.36.130 --topic webrequest_test_text', 'kafka acls --add --allow-principal User:ANONYMOUS --operation Read --operation Describe --host 2620:0:861:106:10:64:36:130 --topic webrequest_test_text', 'kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_misc', 'kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_frontend_upload', 'kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_frontend_text', 'kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_misc_test', 'kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_canary_test', 'kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_canary', 'kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic eventlogging-client-side', 'kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_upload', 'kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_text', 'kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic atskaffa_test_webrequest_text', 'kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_frontend_errors']
File[/etc/kafka/acls.sh]
- Parameters differences:
--- File[/etc/kafka/acls.sh].orig
+++ File[/etc/kafka/acls.sh]
+ group => root
+ ensure => present
+ mode => 0555
+ owner => root
- Content differences:
--- /etc/kafka/acls.sh.orig
+++ /etc/kafka/acls.sh
@@ -0,0 +1,17 @@
+
+kafka acls --add --allow-principal User:ANONYMOUS --operation Create --operation DescribeConfigs --operation IdempotentWrite --operation Describe --cluster
+kafka acls --add --allow-principal User:ANONYMOUS --operation Read --operation DescribeConfigs --operation Describe --operation Write --topic '*'
+kafka acls --add --allow-principal User:ANONYMOUS --operation Read --group '*'
+kafka acls --add --allow-principal User:ANONYMOUS --operation Read --operation Describe --host 10.64.36.130 --topic webrequest_test_text
+kafka acls --add --allow-principal User:ANONYMOUS --operation Read --operation Describe --host 2620:0:861:106:10:64:36:130 --topic webrequest_test_text
+kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_misc
+kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_frontend_upload
+kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_frontend_text
+kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_misc_test
+kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_canary_test
+kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_canary
+kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic eventlogging-client-side
+kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_upload
+kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_text
+kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic atskaffa_test_webrequest_text
+kafka acls --add --deny-principal User:ANONYMOUS --operation Write --topic webrequest_frontend_errors
Relevant files