add example acl

segmentio · Nov 16, 2023 · d749523 · d749523
1 parent b1b5f21
commit d749523
Showing 1 changed file with 31 additions and 0 deletions.
diff --git a/examples/auth/acls/acl-default.yaml b/examples/auth/acls/acl-default.yaml
@@ -0,0 +1,31 @@
+meta:
+  name: acl-default
+  cluster: local-cluster-auth
+  environment: local-env
+  region: local-region
+  description: |
+    This is a default ACL for the local cluster.
+    It grants read and describe access to the topic `my-topic` and read access to the group `my-group`
+    to the user `default`.
+
+spec:
+  acls:
+    - resource:
+        type: topic
+        name: my-topic
+        patternType: literal
+        principal: 'User:default'
+        host: '*'
+        permission: allow
+      operations:
+        - Read
+        - Describe
+    - resource:
+        type: group
+        name: my-group
+        patternType: prefixed
+        principal: 'User:default'
+        host: '*'
+        permission: allow
+      operations:
+        - Read