Apache Kafka AclDelete

Apache Kafka AclDelete
Certified
Delete Kafka ACLs matching a filter

Deletes every ACL matching the given filter using the Kafka AdminClient. This operation is destructive and cannot be undone. Unset filter fields match any value, so a filter with nothing set would match every ACL on the cluster — this task refuses to run in that case unless deleteAll is set to true.

yaml
type: io.kestra.plugin.kafka.AclDelete

Examples

Revoke every ACL granted to a decommissioned tenant service account

yaml
id: kafka_acl_delete
namespace: company.team

tasks:
  - id: delete_acls
    type: io.kestra.plugin.kafka.AclDelete
    properties:
      bootstrap.servers: localhost:9092
    principal: "User:tenant-acme-svc"

Properties

properties *object

Kafka AdminClient properties

Must include bootstrap.servers; accepts any Kafka AdminClient config. Provide base64-encoded content for ssl.keystore.location and ssl.truststore.location when using SSL.

deleteAll booleanstring

Defaultfalse

Confirm deleting every ACL on the cluster

Required opt-in when every filter field is unset (or renders empty), which would otherwise match — and delete — every ACL on the cluster. Defaults to false.

host string

Host filter

Matches any host when unset.

operation string

Possible Values

ALLREADWRITECREATEDELETEALTERDESCRIBECLUSTER_ACTIONDESCRIBE_CONFIGSALTER_CONFIGSIDEMPOTENT_WRITE

Operation filter

Matches any operation when unset.

patternType string

Possible Values

LITERALPREFIXEDMATCH

Resource pattern type filter

Matches any pattern type when unset.

permissionType string

Possible Values

ALLOWDENY

Permission type filter

Matches any permission type when unset.

pluginDefaultsRef string

Reference (ref) of the pluginDefaults to apply to this task.

principal string

Principal filter

For example User: alice. Matches any principal when unset.

resourceName string

Resource name filter

Matches any resource name when unset.

resourceType string

Possible Values

TOPICGROUPCLUSTERTRANSACTIONAL_IDDELEGATION_TOKENUSER

Resource type filter

Matches any resource type when unset.

timeout string

DefaultPT30S

AdminClient call timeout

Maximum duration to wait for each AdminClient operation to complete before failing the task. Defaults to PT30S (30 seconds).

Outputs

deletedAcls array

SubTypeobject

Deleted ACLs

Each entry contains resourceType, resourceName, patternType, principal, host, operation and permissionType.

Liquibase

Tasks that run Liquibase change management commands.

Data

PostgreSQL

Tasks that connect to PostgreSQL via JDBC to run queries and loads.

Data

Apache Kafka AclDeleteCertifiedDelete Kafka ACLs matching a filter

Apache Kafka AclDelete

More Plugins in this Category

Liquibase

PostgreSQL

Apache Kafka AclDelete
Certified
Delete Kafka ACLs matching a filter