Schema Registry with mTLS & ACLs

[sergeiwaigant]

Hi all,

does the UI support mTLS protected Schema Registries?
We are running a Schema Registry where the "clients" are authenticating using a PKI infrastructure, means the public keys of the clients are in the truststore of the SR HTTPS endpoint.
Furthermore we are using Confluent Security Plugin to check authorisations.
The ACLs are based on the distinguished name / subject of the client and only have "filtered" permissions on kind of namespace specific topics and schemas.

I am thinking of serving a "pod template" which our tenants of the platform can run in their kubernetes namespace with their client IDs to browse their schemas, leveraging the already implemented security related measures.

Any idea?

Regards
-Sergei