ACLs

The ACL (Access Control List) policy manages authorization for your virtual cluster by defining which actions authenticated principals can perform on specific resources.

By default, when ACLs are enabled, principals have no access. You must explicitly define access rules through ACL policies.

Common use cases for the ACLs policy:

This policy runs in the cluster phase.

1. A Kafka client produces a message and sends it to Event Gateway.
2. Event Gateway checks the client’s action against the configured ACL.
   • If the action is allowed, it passes the message onward.
   • If the action isn’t allowed, the message is dropped.

 
sequenceDiagram
  autonumber
  participant client as Client
  participant egw as Event Gateway
  participant broker as Event broker

  client->>egw: message
  egw->>egw: check action against ACL
  
  alt allowed action

  egw->>broker: send message

  else blocked action
  egw -x client: forbidden
  end