This action requires the following credentials:

  • user — the username under which the action runs.
  • password — the password for that user.

DeleteKafkaACLs — deletes a set of ACLs in Kafka.

Request example

securityProtocol: SASL_PLAINTEXT
saslMechanism: PLAIN
acls:
  - topics:
      - example_1
    allow:
      - User:principal_2
      - Group:principal_3
    allow_hosts:
      - 127.0.0.1
    deny:
      - User:principal_4
      - Group:principal_5
    deny_hosts:
      - 127.0.0.1
    ops:
      - CREATE
      - READ
      - WRITE
      - DELETE
      - DESCRIBE
      - DESCRIBE_CONFIGS
      - ALTER
    pattern: LITERAL
  - any_topic: true
    any_group: true
    any_transactional_id: true
    any_allow: true
    any_allow_hosts: true
    any_deny: true
    any_deny_hosts: true
    ops:
      - ANY
    pattern: ANY
  - any_resource: true
    any_allow: true
    any_allow_hosts: true
    any_deny: true
    any_deny_hosts: true
    ops:
      - ANY
    pattern: ANY

Request specification

NameRequiredDescriptionPossible valuesDefault value
securityProtocolYesProtocol for connecting to Kafka. For more information, see the Kafka documentationPLAINTEXT, SASL_PLAINTEXT, SASL_SSL-
saslMechanismNoSASL authentication mechanism. Required when using the SASL_PLAINTEXT or SASL_SSL protocol. For more information, see the Kafka documentationPLAIN, SCRAM-SHA-256, SCRAM-SHA-512-
aclsYesSet of ACLs to delete--
acls.opsYesList of operations to which the rule to delete appliesList of possible operations-
acls.patternYesPattern typeList of possible patterns-
acls.any_resourceNoAll resources-false
acls.topicsNoList of topic names to which the rule applies--
acls.any_topicNoAll topics-false
acls.groupsNoList of group names to which the rule applies--
acls.any_groupNoAll groups-false
acls.transactional_idsNoList of transaction IDs to which the rule applies--
acls.any_transactional_idNoAny transaction-false
acls.tokensNoList of tokens to which the rule applies--
acls.any_tokenNoAll tokens-false
acls.allowNoList of principals (users or groups) allowed by the rule--
acls.any_allowNoAny principal (user or group)-false
acls.allow_hostsNoList of hosts for which the operation is allowed--
acls.any_allow_hostsNoAny host from which the operation is allowed-false
acls.denyNoList of principals (users or groups) denied by the rule--
acls.any_denyNoAny principal (user or group)-false
acls.deny_hostsNoList of hosts from which the operation is denied--
acls.any_deny_hostsNoAny host from which the operation is denied-false

List of possible patterns

  • ANY.
  • MATCH.
  • LITERAL.
  • PREFIXED.

List of possible operations

For a detailed description, see the Kafka documentation.

Topics:

  • ALL.
  • ALTER.
  • ALTER_CONFIGS.
  • CREATE.
  • DELETE.
  • DESCRIBE.
  • DESCRIBE_CONFIGS.
  • READ.
  • WRITE.

Group:

  • ALL.
  • DELETE.
  • DESCRIBE.
  • READ.

TransactionalID:

  • ALL.
  • DESCRIBE.
  • WRITE.

Token:

  • DESCRIBE.