Skip to content

Commit 0e55bbe

Browse files
authored
DOC-1618: Single source Schema Registry Authorization for Cloud (#390)
* DOC-1618 * wip * added sr authz to what's new * Update local-antora-playbook.yml
1 parent 6d546d7 commit 0e55bbe

File tree

4 files changed

+11
-1
lines changed

4 files changed

+11
-1
lines changed

modules/ROOT/nav.adoc

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -426,6 +426,7 @@
426426
*** xref:manage:schema-reg/schema-reg-overview.adoc[]
427427
*** xref:manage:schema-reg/schema-reg-ui.adoc[]
428428
*** xref:manage:schema-reg/schema-reg-api.adoc[]
429+
*** xref:manage:schema-reg/schema-reg-authorization.adoc[Schema Registry Authorization]
429430
*** xref:manage:schema-reg/record-deserialization.adoc[Deserialization]
430431
*** xref:manage:schema-reg/programmable-push-filters.adoc[Programmable Push Filters]
431432
*** xref:manage:schema-reg/edit-topic-configuration.adoc[Edit Topic Configuration]

modules/get-started/pages/whats-new-cloud.adoc

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,11 @@ xref:manage:iceberg/about-iceberg-topics.adoc[Iceberg topics] are now generally
2929

3030
xref:get-started:cluster-types/byoc/azure/create-byoc-cluster-azure.adoc[BYOC for Azure] is now generally available (GA).
3131

32+
33+
=== Schema Registry Authorization
34+
35+
You can now use xref:manage:schema-reg/schema-reg-authorization.adoc[Schema Registry Authorization] to control access to Schema Registry subjects and operations. Schema Registry Authorization offers more granular control over who can do what with your Redpanda Schema Registry resources. ACLs used for Schema Registry access also support RBAC roles.
36+
3237
=== Kafka Connect disabled on new clusters
3338

3439
xref:develop:managed-connectors/index.adoc[Kafka Connect] is now disabled by default on all new clusters. To unlock this feature for your account, contact https://support.redpanda.com/hc/en-us/requests/new[Redpanda Support^]. If you previously enabled Kafka Connect on a cluster and want to xref:develop:managed-connectors/disable-kc.adoc[disable it], you can use the Cloud API.
Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
= Schema Registry Authorization
2+
:description: Learn how to set up and manage Schema Registry Authorization using ACL definitions that control user access to specific Schema Registry operations.
3+
4+
include::ROOT:manage:schema-reg/schema-reg-authorization.adoc[tag=single-source]

modules/reference/pages/properties/cluster-properties.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,4 +8,4 @@ NOTE: Some properties require a cluster restart for updates to take effect. This
88

99
== Cluster configuration
1010

11-
include::ROOT:reference:properties/cluster-properties.adoc[tags=audit_enabled;audit_excluded_principals;audit_excluded_topics;data_transforms_enabled;data_transforms_logging_line_max_bytes;iceberg_catalog_type;iceberg_delete;iceberg_enabled;iceberg_rest_catalog_client_id;iceberg_rest_catalog_client_secret;iceberg_rest_catalog_token;iceberg_rest_catalog_authentication_mode;iceberg_rest_catalog_base_location;iceberg_rest_catalog_endpoint;iceberg_rest_catalog_oauth2_server_uri;iceberg_rest_catalog_warehouse;iceberg_rest_catalog_request_timeout_ms;iceberg_default_partition_spec;iceberg_invalid_record_action;iceberg_target_lag_ms;iceberg_rest_catalog_trust;iceberg_rest_catalog_crl;data_transforms_per_function_memory_limit;data_transforms_binary_max_size;log_segment_ms;http_authentication;iceberg_catalog_base_location;default_topic_replications;minimum_topic_replications;oidc_discovery_url;oidc_principal_mapping;oidc_token_audience;sasl_mechanisms;tls_min_version;audit_log_num_partitions;data_transforms_per_core_memory_reservation;iceberg_disable_snapshot_tagging;enable_consumer_group_metrics]
11+
include::ROOT:reference:properties/cluster-properties.adoc[tags=audit_enabled;audit_excluded_principals;audit_excluded_topics;data_transforms_enabled;data_transforms_logging_line_max_bytes;iceberg_catalog_type;iceberg_delete;iceberg_enabled;iceberg_rest_catalog_client_id;iceberg_rest_catalog_client_secret;iceberg_rest_catalog_token;iceberg_rest_catalog_authentication_mode;iceberg_rest_catalog_base_location;iceberg_rest_catalog_endpoint;iceberg_rest_catalog_oauth2_server_uri;iceberg_rest_catalog_warehouse;iceberg_rest_catalog_request_timeout_ms;iceberg_default_partition_spec;iceberg_invalid_record_action;iceberg_target_lag_ms;iceberg_rest_catalog_trust;iceberg_rest_catalog_crl;data_transforms_per_function_memory_limit;data_transforms_binary_max_size;log_segment_ms;http_authentication;iceberg_catalog_base_location;default_topic_replications;minimum_topic_replications;oidc_discovery_url;oidc_principal_mapping;oidc_token_audience;sasl_mechanisms;tls_min_version;audit_log_num_partitions;data_transforms_per_core_memory_reservation;iceberg_disable_snapshot_tagging;enable_consumer_group_metrics;schema_registry_enable_authorization]

0 commit comments

Comments
 (0)