mcdan opened a new pull request #4804: Check to see if the user can see the topic before creating it, URL: https://github.com/apache/openwhisk/pull/4804 this allows lower privilege users to be set for the controller and invoker. <!--- Provide a concise summary of your changes in the Title --> ## Description <!--- Provide a detailed description of your changes. --> <!--- Include details of what problem you are solving and how your changes are tested. --> Topics in Kafka are not part of the overall functioning of OW. In other words, there is no dynamic topic creation during the normal functioning of any OW component. Therefore there is not reason to have a credential that is powerful enough to make changes to Kafka deployed in the controller or invoker. This commit allows those pieces to function with "least privilege" under normal operation, meaning you can now set ACLs for their topics in advance and allow them only rights to read / write the topics in question. ## Related issue and scope <!--- Please include a link to a related issue if there is one. --> ## My changes affect the following components <!--- Select below all system components are affected by your change. --> <!--- Enter an `x` in all applicable boxes. --> - [ ] API - [ ] Controller - [X] Message Bus - only Kafka - [ ] Loadbalancer - [ ] Invoker - [ ] Intrinsic actions (e.g., sequences, conductors) - [ ] Data stores (e.g., CouchDB) - [ ] Tests - [ ] Deployment - [ ] CLI - [ ] General tooling - [ ] Documentation ## Types of changes <!--- What types of changes does your code introduce? Use `x` in all the boxes that apply: --> - [ ] Bug fix (generally a non-breaking change which closes an issue). - [X] Enhancement or new feature (adds new functionality). - [ ] Breaking change (a bug fix or enhancement which changes existing behavior). ## Checklist: <!--- Please review the points below which help you make sure you've covered all aspects of the change you're making. --> - [X] I signed an [Apache CLA](https://github.com/apache/openwhisk/blob/master/CONTRIBUTING.md). - [X] I reviewed the [style guides](https://github.com/apache/openwhisk/wiki/Contributing:-Git-guidelines#code-readiness) and followed the recommendations (Travis CI will check :). - [X] I added tests to cover my changes. - [X] My changes require further changes to the documentation. - [X] I updated the documentation where necessary.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected] With regards, Apache Git Services
