Filtering Admin Events via OperationType & ResourceType

[peterhorvat]

Admin Event Filtering Configuration

Keycloak admin event filtering supports fine-grained control over which admin events are processed and sent to Kafka:

• KAFKA_ADMIN_EVENT_STRICT_TYPES: Comma-separated list of strict event type combinations in the format OPERATION__RESOURCE_TYPE (e.g., DELETE__GROUP_MEMBERSHIP).

Example usage (environment settings):

The advantage of strict event type combinations is that you can handle both resource types but for different operation types. For example:

KAFKA_ADMIN_EVENT_STRICT_TYPES: DELETE__GROUP_MEMBERSHIP, UPDATE__USER

• This configuration would process only the defined pairs of types: DELETE on GROUP_MEMBERSHIP, and UPDATE on USER.

[SnuK87]

Imo this seems a bit overengineered. Wouldn't it have been enough to just add KAFKA_ADMIN_EVENT_STRICT_TYPES?

[peterhorvat]

Imo this seems a bit overengineered. Wouldn't it have been enough to just add KAFKA_ADMIN_EVENT_STRICT_TYPES?

Yes you are right, I can remove KAFKA_ADMIN_EVENT_OPERATION_TYPES and KAFKA_ADMIN_EVENT_RESOURCE_TYPES and leave only KAFKA_ADMIN_EVENT_STRICT_TYPES to make it simpler.