acls_acl_entry

Creates, updates, deletes, gets or lists an acls_acl_entry resource.

Overview

Name	acls_acl_entry
Type	Resource
Id	google.managedkafka.acls_acl_entry

Fields

The following fields are returned by SELECT queries:

SELECT not supported for this resource, use SHOW METHODS to view available operations for the resource.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
add_acl_entry	insert	projectsId, locationsId, clustersId, aclsId		Incremental update: Adds an acl entry to an acl. Creates the acl if it does not exist yet.
remove_acl_entry	delete	projectsId, locationsId, clustersId, aclsId		Incremental update: Removes an acl entry from an acl. Deletes the acl if its acl entries become empty (i.e. if the removed entry was the last one in the acl).

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
aclsId	string
clustersId	string
locationsId	string
projectsId	string

INSERT examples

add_acl_entry

Incremental update: Adds an acl entry to an acl. Creates the acl if it does not exist yet.

INSERT INTO google.managedkafka.acls_acl_entry (
data__principal,
data__permissionType,
data__operation,
data__host,
projectsId,
locationsId,
clustersId,
aclsId
)
SELECT 
'{{ principal }}',
'{{ permissionType }}',
'{{ operation }}',
'{{ host }}',
'{{ projectsId }}',
'{{ locationsId }}',
'{{ clustersId }}',
'{{ aclsId }}'
RETURNING
acl,
aclCreated
;

Manifest

# Description fields are for documentation purposes
- name: acls_acl_entry
  props:
    - name: projectsId
      value: string
      description: Required parameter for the acls_acl_entry resource.
    - name: locationsId
      value: string
      description: Required parameter for the acls_acl_entry resource.
    - name: clustersId
      value: string
      description: Required parameter for the acls_acl_entry resource.
    - name: aclsId
      value: string
      description: Required parameter for the acls_acl_entry resource.
    - name: principal
      value: string
      description: >
        Required. The principal. Specified as Google Cloud account, with the Kafka StandardAuthorizer prefix "User:". For example: "User:test-kafka-client@test-project.iam.gserviceaccount.com". Can be the wildcard "User:*" to refer to all users.
        
    - name: permissionType
      value: string
      description: >
        Required. The permission type. Accepted values are (case insensitive): ALLOW, DENY.
        
    - name: operation
      value: string
      description: >
        Required. The operation type. Allowed values are (case insensitive): ALL, READ, WRITE, CREATE, DELETE, ALTER, DESCRIBE, CLUSTER_ACTION, DESCRIBE_CONFIGS, ALTER_CONFIGS, and IDEMPOTENT_WRITE. See https://kafka.apache.org/documentation/#operations_resources_and_protocols for valid combinations of resource_type and operation for different Kafka API requests.
        
    - name: host
      value: string
      description: >
        Required. The host. Must be set to "*" for Managed Service for Apache Kafka.
        

DELETE examples

remove_acl_entry

Incremental update: Removes an acl entry from an acl. Deletes the acl if its acl entries become empty (i.e. if the removed entry was the last one in the acl).

DELETE FROM google.managedkafka.acls_acl_entry
WHERE projectsId = '{{ projectsId }}' --required
AND locationsId = '{{ locationsId }}' --required
AND clustersId = '{{ clustersId }}' --required
AND aclsId = '{{ aclsId }}' --required;