kafka 权限控制_kafka-acls.sh

禁止所有权限:

cat deny_all_acl.sh

#/bin/sh
if [ $# -lt 1 ]; then 
    echo "please input like sh deny_all_acl.sh   hostip "
    exit -1
fi
basedir=$(cd `dirname $0`;pwd)
zk=$(sed -n 's/^zookeeper.connect=//p' ${basedir}/../config/server.properties)
sh ${basedir}/../bin/kafka-acls.sh --authorizer-properties zookeeper.connect=${zk} --add  --deny-principal User:* --deny-host $1 --topic=* --group=* --cluster

允许所有权限:

more add_all_acl.sh

#/bin/sh
if [ $# -lt 1 ]; then 
    echo "please input like sh add_all_acl.sh   hostip [user=test]"
    exit -1
fi
user=test
if [ $# -gt 1 ];then
    ${user}=$2
fi
   
basedir=$(cd `dirname $0`;pwd)
zk=$(sed -n 's/^zookeeper.connect=//p' ${basedir}/../config/server.properties)
sh ${basedir}/../bin/kafka-acls.sh --authorizer-properties zookeeper.connect=${zk} --add  --allow-principal User:${user} --allow-host $1 --topic=* --group=* --cluster

增加消费权限:

cat add_consumer_acl.sh

#!/bin/sh
if [ $# -lt 2 ]; then 
    echo "please input like sh add_consumer_acl.sh topic grou