Instaclustr provides both a User Management UI and User Management API for Kafka clusters to help you with managing users. The User Management UI and API provide four functions:
Change User Passwords
All Kafka users created or listed in the Users list will have read and write access to all topics in the cluster. There are details below on how to change this in Kafka ACL Management. If you require any other configuration, please submit a support request.
All Kafka clusters will have an ickafka user automatically created as a convenience, which can be deleted. If the ickafka user is deleted or has the password changed the new password will not be stored and the credentials will disappear from the cluster’s Connection Info page. Because changed passwords and new user passwords will not be stored, ensure you make a note of the passwords to user accounts.
For Kafka Schema Registry and Kafka Rest Proxy services, the user password can be updated from the dashboard Kafka user management UI. We do not support user deletion or creation for these services. Make sure you take into account that the services will be restarted when actioning a password change.
User Management UI
These examples show how to use the features of the Instaclustr console’s User Management UI.
To list available Kafka users, navigate to the Users tab of your Kafka cluster.
The Users page will list all Kafka users on the cluster. If you have enabled Kafka Schema Registry and/or Kafka Rest Proxy, you will be able to see the default users for those services by clicking on the relevant tabs at the top of the page.
To add a new Kafka user, first, navigate to the Users page of your Kafka cluster. From the Users page, click the Add New User button. You will be redirected to the form for adding a new user.
Enter the desired username and password for the new Kafka user, the desired level of initial permissions, and a user authentication mechanism. The initial permissions setting can be one of three things:
Standard – The new user will be able to read and write to all topics
Read-only – The new user will be able to read from all topics, but not write
None – The new user will have no initial permissions
Once you’ve entered the required information, click the Add User button. This will create the new user and redirect you to the Users page, where the new user will be shown in the list of users.
Change User Password
To change the password of an existing Kafka user, first, navigate to the Users page of your Kafka cluster. From the Users page, click the Change Password button of the user whose password you want to change. You will be redirected to the form for changing your password.
Enter a new password for the user and a user authentication mechanism. Once you’ve entered the required information, click the Change Password button.
To delete an existing Kafka user, first, navigate to the Users page of your Kafka cluster. From the Users page, click the Delete button for the user that you want to delete.
Click on the Delete User button to confirm the deletion of the user.
User Management API
These examples show how to use the features of the Instaclustr User Management API.
Please note that we currently do not support Kafka schema registry and Kafka rest proxy with add user and delete user functions.
To provide customers with a high level of security, the Kafka User API endpoint will not store or allow customers to retrieve passwords for Kafka users. For each endpoint listed below, all requests must include basic authentication details:
To delete a Kafka user, make a DELETE request to: https://api.instaclustr.com/provisioning/v1/<cluster_id>/kafka/users A request body should be included, specifying the username and password to use. E.g.:
2. The API should respond with a 200 status code and a short message. E.g.