msk data backup: add write access to consumer group (#1085)

sbuliarca · web-flow · commit 7fb1d256ce53 · 2025-12-04T18:39:48.000+02:00
diff --git a/dev-aws/kafka-shared-msk/pubsub/kafka-data-keep-backup.tf b/dev-aws/kafka-shared-msk/pubsub/kafka-data-keep-backup.tf
@@ -16,6 +16,12 @@ resource "kafka_acl" "msk_data_keep_describe_group_all" {
   acl_permission_type = "Allow"
 }
 
+module "msk_data_keep_group_write" {
+  source           = "../../../modules/tls-app"
+  consume_groups   = ["pubsub.msk-backup-kafka-connect"]
+  cert_common_name = "pubsub/msk-data-keep"
+}
+
 # Enable only when we need to restore
 #
 # resource "kafka_acl" "msk_data_keep_write_topic_all" {

Original file line number	Diff line number	Diff line change
`@@ -16,6 +16,12 @@ resource "kafka_acl" "msk_data_keep_describe_group_all" {`
`16`	`16`	`acl_permission_type = "Allow"`
`17`	`17`	`}`
`18`	`18`
	`19`	`+module "msk_data_keep_group_write" {`
	`20`	`+ source = "../../../modules/tls-app"`
	`21`	`+ consume_groups = ["pubsub.msk-backup-kafka-connect"]`
	`22`	`+ cert_common_name = "pubsub/msk-data-keep"`
	`23`	`+}`
	`24`	`+`
`19`	`25`	`# Enable only when we need to restore`
`20`	`26`	`#`
`21`	`27`	`# resource "kafka_acl" "msk_data_keep_write_topic_all" {`