Skip to main content

Enable Apache Kafka® REST proxy authorization

REST proxy authorization applies Apache Kafka Access Control Lists (ACLs) to requests made through the Karapace REST proxy.

When authorization is enabled, Karapace forwards HTTP basic authentication credentials to Apache Kafka®. Apache Kafka authenticates the user and authorizes operations based on the ACLs defined for the service.

When authorization is disabled, the REST proxy bypasses Apache Kafka ACLs, so REST API calls are not restricted by those rules.

REST proxy authorization is disabled by default.

Prerequisites​

Enable REST proxy authorization​

warning

Enabling REST proxy authorization can disrupt access if Kafka ACLs are not configured to allow the operations your clients need. Configure Access Control Lists before you enable authorization.

  1. In the Aiven Console, select your project and choose your Aiven for Apache Kafka® service.
  2. Click Service settings.
  3. In Advanced configuration, click Configure.
  4. Click Add configuration options.
  5. Find kafka_rest_authorization and set it to Enabled.
  6. Click Save configuration.

Related pages