Skip to content

DOC-1646 RBAC in DP not supported for Serverless #403

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Aug 28, 2025
Merged

DOC-1646 RBAC in DP not supported for Serverless #403

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions modules/get-started/pages/cloud-overview.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -172,6 +172,7 @@ Consider BYOC or Dedicated if you need more control over the deployment or if yo
* Private networking
* Multiple availability zones (AZs). A multi-AZ cluster provides higher resiliency in the event of a failure in one of the zones.
* Ability to export Redpanda metrics to a third-party monitoring system
* Role-based access control (RBAC) in the data plane
* Kafka Connect
* Higher limits and quotas. See xref:reference:tiers/byoc-tiers.adoc[BYOC usage tiers] and xref:reference:tiers/dedicated-tiers.adoc[Dedicated usage tiers] compared to xref:get-started:cluster-types/serverless.adoc#serverless-usage-limits[Serverless limits].

Expand Down
2 changes: 1 addition & 1 deletion modules/get-started/pages/cluster-types/serverless.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -92,10 +92,10 @@ Not all features included in BYOC clusters are available in Serverless. For exam

* HTTP Proxy API
* Ability to export metrics to a third-party monitoring system
* Kafka Connect
* Private networking (VPC peering or AWS PrivateLink)
* Multiple availability zones (AZs)
* RBAC in the data plane and mTLS authentication for Kafka API clients
* Kafka Connect

== Next steps

Expand Down
2 changes: 2 additions & 0 deletions modules/security/pages/authorization/rbac/rbac_dp.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,4 +3,6 @@

Use role-based access control (RBAC) in the glossterm:data plane[] to configure cluster-level permissions for provisioned users at scale. RBAC works in conjunction with all supported authentication methods.

RBAC in the data plane is available for BYOC and Dedicated clusters.

Comment on lines +6 to +7
Copy link
Contributor

@coderabbitai coderabbitai bot Aug 28, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🛠️ Refactor suggestion

Clarify Serverless non-support inline and add a cross-reference.

Add an explicit “not supported for Serverless” mention here to remove ambiguity and point readers to the Serverless page. Also remove the trailing space at the end of Line 6.

Apply:

-RBAC in the data plane is available for BYOC and Dedicated clusters. 
+RBAC in the data plane is available for BYOC and Dedicated clusters. It is not available for Serverless clusters.
+
+For feature comparisons, see xref:get-started:cloud-overview.adoc#serverless-vs-byoc-dedicated[Serverless vs BYOC/Dedicated].
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
RBAC in the data plane is available for BYOC and Dedicated clusters.
RBAC in the data plane is available for BYOC and Dedicated clusters. It is not available for Serverless clusters.
For feature comparisons, see xref:get-started:cloud-overview.adoc#serverless-vs-byoc-dedicated[Serverless vs BYOC/Dedicated].

include::ROOT:manage:partial$rbac-dp.adoc[tag=single-source]