christophschubert / kafka-clusterstate-tools Goto Github PK

The consumer has the property prefixGroup: true.
Is the same also useful for the Producer? Or what is the reason for not having this property in the Producer?

Problem description: Service-accounts in Confluent Cloud can be referenced as principals of the form User:12345 in ACLs, where 12345 is the service account ID. Since the ID of a service account is assigned internally, we have no control about which IDs will be used.
Moreover, we might want to reuse a description in another Confluent Cloud organization. In this case, the service account IDs will also be different.

Proposed solution: support principal-aliases as follows. Add a new type Alias (besides User and Group) to the domain description. Upon calling kst, a alias map mapping alias names to principals can be provided. The alias map is used to translate the aliases in the cluster-state before the diff is performed.