Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rpk: move acl / acl user to /security #17664

Merged
merged 2 commits into from
Apr 5, 2024

Conversation

r-vasquez
Copy link
Contributor

@r-vasquez r-vasquez commented Apr 4, 2024

This movement is a soft deprecation to the previous command. The old command will work as intended
but print a WARN message (only visible with -v)
showing that the command is deprecated.

Backports Required

  • none - not a bug fix
  • none - this is a backport
  • none - issue does not exist in previous branches
  • none - papercut/not impactful enough to backport
  • v23.3.x
  • v23.2.x

Release Notes

Improvements

  • rpk acl has been moved to rpk security acl. Old command is soft deprecated.
  • rpk acl user has been moved to rpk security security. Old command is soft deprecated.

This movement is a soft deprecation to the previous
command. The old command will work as intended
but print a WARN message (only visible with -v)
showing that the command is deprecated.
This is done in _some_ commands, not all.

We want to make sure that both (old and new) still
work.
@piyushredpanda piyushredpanda added this to the v24.1-rc1 milestone Apr 4, 2024
@r-vasquez r-vasquez marked this pull request as ready for review April 4, 2024 22:22
gene-redpanda
gene-redpanda previously approved these changes Apr 4, 2024
@vbotbuildovich
Copy link
Collaborator

vbotbuildovich commented Apr 5, 2024

When you create a role, you must bind or associate ACLs to it before it can be
used. You can create / delete / list ACLs for that role with "<name>" in the
--allow-role and --deny-role flags. Note that the wildcard role name '*' is not
permitted here. For example 'rpk acl create --allow-role '*' ...' will produce
Copy link
Member

@bojand bojand Apr 5, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this should say 'rpk security acl create --allow-role '*' ...' ?


Check --help-operations to see which operations are required for which
requests. In flag form to set up a general producing/consuming client, you can
invoke 'rpk acl create' three times with the following (including your
Copy link
Member

@bojand bojand Apr 5, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

similarly here 'rpk security acl create' ?

@piyushredpanda
Copy link
Contributor

Because we want to tag rc-1, I'll go ahead with the merge and the minor nits above could come in a follow-up PR.

@piyushredpanda piyushredpanda merged commit 1eebcf2 into redpanda-data:dev Apr 5, 2024
23 checks passed
@r-vasquez
Copy link
Contributor Author

PR #17689 includes the pending comments from @bojand

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

5 participants