gcloud beta managed-kafka acls add-acl-entry - add an acl entry to a Managed Service for Apache Kafka acl

gcloud beta managed-kafka acls add-acl-entry(ACL :--cluster=CLUSTER--location=LOCATION)--operation=OPERATION--principal=PRINCIPAL[--host=HOST; default="*"][--permission-type=PERMISSION_TYPE; default="ALLOW"][GCLOUD_WIDE_FLAG …]

Acl resource - Identifies the acl that this command updates.

The structure of the acl ID defines the Resource Pattern for which the aclentries apply in the Kafka cluster. The acl ID must be structured like one ofthe following:

Foraclsonthecluster:cluster

Foraclsonasingleresourcewithinthecluster:topic/{resource_name}consumerGroup/{resource_name}transactionalId/{resource_name}

Foraclsonallresourcesthatmatchaprefix:topicPrefixed/{resource_name}consumerGroupPrefixed/{resource_name}transactionalIdPrefixed/{resource_name}

Foraclsonallresourcesofagiventype(i.e.thewildcardliteral"*"):allTopics(representstopic/*)allConsumerGroups(representsconsumerGroup/*)allTransactionalIds(representstransactionalId/*)Theargumentsinthisgroupcanbeusedtospecifytheattributesofthisresource.(NOTE)Someattributesarenotgivenargumentsinthisgroupbutcanbesetinotherways.

To set theproject attribute:

• provide the argumentacl on the command line with a fully specifiedname;
• provide the argument--project on the command line;
• set the propertycore/project.

This must be specified.

ACL

ID of the acl or fully qualified identifier for the acl.

To set theacl attribute:

• provide the argumentacl on the command line.

This positional argument must be specified if any of the other arguments in thisgroup are specified.

--cluster=CLUSTER

The cluster name.To set thecluster attribute:

• provide the argumentacl on the command line with a fully specifiedname;
• provide the argument--cluster on the command line.

--location=LOCATION

ID of the location of the Managed Service for Apache Kafka resource. Seehttps://cloud.google.com/managed-service-for-apache-kafka/docs/locationsfor a list of supported locations.To set thelocation attribute:

• provide the argumentacl on the command line with a fully specifiedname;
• provide the argument--location on the command line.

--operation=OPERATION

The operation type. Allowed values are: ALL, READ, WRITE, CREATE, DELETE, ALTER,DESCRIBE, CLUSTER_ACTION, DESCRIBE_CONFIGS, ALTER_CONFIGS, IDEMPOTENT_WRITE.

Seehttps://kafka.apache.org/documentation/#operations_resources_and_protocolsfor the mapping of operations to Kafka protocols.

--principal=PRINCIPAL

The principal. Specified as Google Cloud account, with the KafkaStandardAuthorizer prefix "User:". For example:"User:admin@project.iam.gserviceaccount.com". Can be the wildcard"User:*" to refer to all users.

--host=HOST; default="*"

The host. Must be set to "*" for Managed Service for Apache Kafka.

--permission-type=PERMISSION_TYPE; default="ALLOW"

The permission type. Allowed values are: ALLOW, DENY.

Run$gcloud help for details.