auth:
  type: LDAP 

spring:
  ldap:
    urls: ldap://xxx
    base: "xxx"
    admin-user: "xxx"
    admin-password: "xxx"
    user-filter-search-base: "xxx"
    user-filter-search-filter: "xxx"
    group-filter-search-base: "xxx"
    group-filter-search-filter: "xxx"

oauth2:
  ldap:
    activeDirectory: false
    aсtiveDirectory.domain: xxx.com

kafka:
  clusters:
  - bootstrapServers: 192.168.10.116:9013
    kafkaConnect: []
    masking: []
    metrics:
      port: 9793
      type: JMX
    name: local
    properties: {}
    readOnly: false
    serde: []
  - bootstrapServers: 192.168.10.116:9013
    kafkaConnect: []
    masking: []
    metrics:
      port: 9992
      type: PROMETHEUS
    name: kafka
    properties: {}
    readOnly: false
    serde: []
    ssl:
      verifySsl: true
  - bootstrapServers: 192.168.12.133:9092
    kafkaConnect: []
    masking: []
    name: kafka-old
    properties: {}
    readOnly: false
    serde: []
rbac:
  roles:
  - clusters:
    - local
    name: memelords
    permissions:
    - actions:
      - ALL
      resource: APPLICATIONCONFIG
    - actions:
      - ALL
      resource: CLUSTERCONFIG
    - actions:
      - ALL
      resource: TOPIC
      value: .*
    - actions:
      - ALL
      resource: CONSUMER
      value: .*
    - actions:
      - ALL
      resource: SCHEMA
      value: .*
    - actions:
      - ALL
      resource: CONNECT
      value: .*
    - actions:
      - ALL
      resource: KSQL
    - actions:
      - ALL
      resource: ACL
    - actions:
      - ALL
      resource: AUDIT
    subjects:
    - provider: OAUTH_GOOGLE
      type: domain
      value: kafbat.dev
    - provider: OAUTH_GOOGLE
      type: user
      value: name@kafbat.dev
    - provider: OAUTH_GITHUB
      type: organization
      value: kafbat
    - provider: OAUTH_GITHUB
      type: user
      value: memelord
    - provider: OAUTH_COGNITO
      type: user
      value: username
    - provider: OAUTH_COGNITO
      type: group
      value: memelords
    - provider: LDAP
      type: group
      value: admin_staff
webclient: {}