can't create topics/acls for dedicated clusters

[confluentinc]

can't create topics/acls for dedicated clusters

[ConfluentSpencer]

Work to improve Topic and ACL Resources for Private Link clusters is underway.

[linouk23]

@tatianameleshko

I followed up with our Networking team and I would like to confirm topic / ACLs creation only works for dedicated clusters on public network (i.e., not Private Link) at the moment.

We are aware of the issue and we're going to address it in our next releases.

[igwejk]

@linouk23 thanks for looking into this issue. Do you have a timeline for when the fix can be released?

[linouk23]

@igwejk can't promise anything but we're hoping to release it in Q2.

[linouk23]

Thanks for creating an issue @tatianameleshko!

That's definitely a bit surprising to see since we did test topic creation for dedicated clusters on public network but not for VPC peering, AWS Transit Gateway, AWS PrivateLink, and Azure PrivateLink yet.

Could you share any debug logs with us and reference this issue such that our team will take a look at it?

[linouk23]

@igwejk, @tatianameleshko we're very excited to let you know we've just published a new version of TF Provider that includes a fix for this issue (adding PrivateLink support) among other very exciting improvements: it enables fully automated provisioning of our key Kafka workflows (see the demo) with no more manual intervention and makes it our biggest and most impactful release.

The only gotcha we've renamed it from confluentinc/confluentcloud to confluentinc/confluent but we published a migration guide so it should be fairly straightforward. The existing confluentinc/confluentcloud will be deprecated soon so we'd recommend switching as soon as possible.

New confluentinc/confluent provider also includes a lot of sample configurations so you won't need to write them from scratch. You can find them here, find a full list of changes here.

To be more specific, here's the example of a setup Dedicated Kafka cluster on AWS that is accessible via PrivateLink connections with authorization using RBAC: https://github.com/confluentinc/terraform-provider-confluent/tree/master/examples/configurations/dedicated-privatelink-aws-kafka-rbac