Create Service Account and Required Permissions

The following video is only required if your are using your own StreamNative Hosted Pulsar cluster.

The video will provide directions on:

  • creating a service account
  • creating a tenant and namespaces
  • applying required permissions for using Kafka

The following were completed in the video:

  • Create a new service account called kafkastudent
  • Download the OAuth2 json file and copy the JWT Token for kafkastudent
  • Apply the following permissions for the kafkastudent account in the public tenant:
    • add as an admin on the public tenant, this is required for using KStreams (required with or without multi-tenancy)
    • add produce and consume permissions on the tenant/namespace public/default
    • Permissions are no longer required on public/__kafka_schemaregistry as demonstrated in the video.
  • Create a new tenant called kafkastudent (optional to add kafkastudent as an admin for this tenant)
  • Create the following namespaces in kafkastudent tenant with these permissions for account kafkastudent:
    • produce and consume permissions on  kafkastudent/transactions
    • produce and consume permissions on kafkastudent/schema
    • produce and consume permissions on kafkastudent/georep

If you encounter any permissions issues, please reach out at training-help@streamnative.io.