Install and configure RBAC

Ops
1

I have a cluster running Confluent platform on a remote server. I need to manage users: some users can create a topic, other can subscribe to a topic, etc.
I see there is a RBAC system…but it seems to use it, it is necessary to migrate to confluent server:

https://docs.confluent.io/platform/current/installation/migrate-confluent-server.html

but my cluster doesn’t run confluent kafka: if I try with:

sudo systemctl stop confluent-kafka
Failed to stop confluent-kafka.service: Unit confluent-kafka.service not loaded.

Confluent server is not a free component? I need to buy it?
If I need to configure RBAC throught API

(Configure RBAC using the REST API | Confluent Documentation)

what are:

<path-to-your-cacert> --key <path-to-your-private-key> --cert <path-to-your-cert>

Someone can help me to understand how install and configure RBAC on Confluent platform?
Thanks.

2

Hi @GiuseppeR ,

maybe we should first of all clarify your environment.

Do you know how the Kafka environment has been installed?
Just guessing but maybe it was installed with tarballs and not with rpm packages.

Could you check if there is a file like /etc/kafka/server.properties ?

And also whether there is binary called confluent
(I would try with which or locate)

HTH,
Michael

3

Hi @mmuehlbeyer thank you for your reply.
Confluent Platform is installed on an Ubuntu server.
I installed Confluent Platform throught the zip file (confluent-6.1.0.zip).
Yes there is a server.properties.
With the command:

locale confluent.bin

no result.
Hoping this can help to give me some suggestion.
Thanks.
g

4

Hi,

as you‘ve installed via zip file there is no systems service by the default (afaik)

Did you start the confluent platform/kafka manually or not yet?

If you would keep the zip installation path you could download the confluent entrrprise zip and extract to a new location and then proceed.

Best,
Michael

5

Yes I start manually Confluent platform with the command:

confluent local services start/stop

I try to find Confluent enterprise on the download page:

https://www.confluent.io/installation

but there is not any enterprise version!
It seems there is an older version…any other suggestion?
Thanks.
g

6

ok I see

the enterprise edition is not named “enterprise” explicitly.
the community edition is named explicitly, e.g https://packages.confluent.io/archive/7.0/confluent-community-7.0.0.tar.gz

therefore I guess you’re already running the correct binaries.

for configuring rbac please have a look at

https://docs.confluent.io/platform/current/security/rbac/enable-rbac-running-cluster.html#enable-rbac-in-a-running-cluster

https://docs.confluent.io/platform/current/kafka/incremental-security-upgrade.html#kafka-adding-security

Best,
Michael

7

Hi @mmuehlbeyer It seems confluent server is a commercial component…so I need to open source software…
So I need to secure communication with clients-broker…I read this tutorial:

https://docs.confluent.io/platform/current/security/security_tutorial.html#security-tutorial

but It is not clear how configure the clients, for example common configuration what do they refer to? where do they take place?
My cluster have 1 broker, 1 producer and 3 consumers…I need the communication with producer-kafka and kafka-consumer uses a secure protocol.
Hoping in your help.
Thanks.

8

Hi @GiuseppeR

talking about producer and consumers

which kind of consumers are you using? java, pyhthon,…?

9

I’m sorry…I’m using python.
g

10

ok I see

I’m not that deep in dev topics but there is quite nice blog about python and ssl