redpanda-operator icon indicating copy to clipboard operation
redpanda-operator copied to clipboard

Feature Request: Add support for provisioning users

Open brokenjacobs opened this issue 1 year ago • 2 comments
trafficstars

Similar to strimzi, it would be extremely useful to be able to provision users (both TLS and SCRAM-SHA-512), including RBAC via crds that the operator processes. I'm sure something similar is achievable with Kubernetes Jobs and scripts, but that kind of defeats the purpose of using the operator?

Some examples from strimzi: https://github.com/strimzi/strimzi-kafka-operator/blob/main/examples/user/kafka-user.yaml https://strimzi.io/docs/operators/latest/configuring.html#type-KafkaUser-reference

I have a use case that deploys kafka to 87 single node instances in an identical fashion. At a minimum I need to deploy a user on each one for use with mirrormaker2. I'd live to use redpanda over kafka for a lower footprint on these devices, but to date I haven't pursued it because of this user provisioning issue.

JIRA Link: K8S-191

brokenjacobs avatar Jan 19 '24 14:01 brokenjacobs

This was tracked by https://github.com/redpanda-data/redpanda-operator/issues/64 but can probably be moved here @chrisseto

mattschumpert avatar Jan 22 '24 22:01 mattschumpert

Ah yes missed that. I would add the RBAC requirements in with this.

brokenjacobs avatar Jan 23 '24 02:01 brokenjacobs

Will close as this is now available here: https://docs.redpanda.com/current/manage/kubernetes/security/authentication/k-user-controller/

david-yu avatar Nov 22 '24 21:11 david-yu