How do I enable Kafka authorization?

Purpose

This procedure describes how to enable Kafka authorization rules in an NSP deployment. Kafka authorization is disabled by default.

Steps
 

Open a terminal session.


Log in as the root or NSP admin user on the NSP deployer VM.


Stop the NSP cluster; see How do I stop an NSP cluster?.


Open the following file using a plain-text editor such as vi:

/opt/nsp/NSP-CN-DEP-release-ID/NSP-CN-release-ID/config/nsp-config.yml


Go to the Kafka Configuration section and uncomment the enableAcls parameter line by removing the leading # character.

You must preserve the leading spaces in the line.


Change the parameter value from false to true.


Save and close the nsp-config.yml file.


Enter the following to start the NSP cluster:

Note: If the NSP cluster VMs do not have the required SSH key, you must include the --ask-pass argument in the nspdeployerctl command, as shown in the following example, and are subsequently prompted for the root password of each cluster member:

nspdeployerctl --ask-pass install --config --deploy

./nspdeployerctl install --config --deploy ↵

The NSP cluster starts, and the configuration update is put into effect.

End of steps