Hi, Wondering if it’s possible to use Role Based Access Control to authenticate REST Proxy users to Confluent Cloud clusters. Documentation describes how to connect it to self-managed clusters with MDS enabled, but not how to use this approach with Confluent Cloud clusters. Is it even possible?

hi @beegor to have a proper understanding of your use case: you’d like to connect your on prem REST proxy to CC and use RBAC to authenticate towards Rest Proxy right? Best, Michael

Hi @mmuehlbeyer , Exactly, that is what I want. We would like users to use basic http authentication to REST Proxy using their CC access keys and propagate that credentials to Kafka Clusters in order to have proper authorization (ACLs) I 'm aware of Principal Propagation feature of REST Proxy, how…

Hi @mmuehlbeyer , The problem with Confluent Cloud REST API is that it only supports produce but not consume. We need both. BR, Igor

I see not sure whether it works nor tested but what about secrets protection?

You mean to use secrets protection with Principal Propagation approach?

yes just came to my mind not tested but maybe worth to try

I’ve only seen RBAC with REST Proxy on self-managed clusters using MDS, never directly with Confluent Cloud. From what I’ve tested, Confluent Cloud relies on API keys for auth, so RBAC there isn’t exposed the same way.

Connect Kafka REST Proxy to Confluent Cloud cluster using RBAC

Clients REST Proxy

mmuehlbeyer 13 September 2024 11:27 4

Hi @beegor

what about using the rest endpoint on CC directly?
https://docs.confluent.io/cloud/current/api-overview.html

best,
michael

Topic		Replies	Views
The Confluent REST Proxy REST Proxy	0	4005	5 November 2020
How can I configure REST Proxy to a kafka which need mutual authentication? Can I configure this with community licensed Confluent install(on window with docker)? REST Proxy	0	3620	12 July 2021
Confluent REST Proxy API Reference — Confluent Documentation 6.0.0 REST Proxy	0	3699	17 November 2020
Rest Proxy API Endpoint for Consuming Messages REST Proxy	12	5148	18 August 2022
RBAC on Confluent Kafka Cloud Free Trial Confluent Cloud	1	3333	27 October 2021

Connect Kafka REST Proxy to Confluent Cloud cluster using RBAC

Related topics