monedula-acl-rbac delete-acls

Generate the source-ACL deletion script. Usage and flags for monedula-acl-rbac delete-acls.

Reference 11 of 29

Reference for monedula-acl-rbac-converter v0.10.0

Updated 2 October 2026

usage

monedula-acl-rbac delete-acls [flags]

Remove the source ACLs that 'apply' converted, once 'verify' has confirmed every one of them is EFFECTIVE_OK. Destructive.

Emits a 'kafka-acls --remove' bash script in the run directory plus a symmetric rollback.sh; you inspect, then run them by hand. The tool never executes the deletion itself - every destructive change goes through a reviewable script.

Guardrails (all enforced): - 'verify' must be present (--verify) - every source ACL must be EFFECTIVE_OK in verify.json - --principal (or --principal-file) restricts the deletion scope - --confirm AND --i-understand-this-is-destructive required either way

Example: monedula-acl-rbac delete-acls \ --plan runs/.../plan.json --verify runs/.../verify.json \ --bootstrap-server kafka.example.com:9093 \ --command-config admin.properties \ --principal User:alice --principal User:bob \ --confirm --i-understand-this-is-destructive

Outputs: delete-acls.sh (the deletion script), deleted-acls.json, rollback.sh, delete.log.

Emits a script; does not delete anything itself.

Read-only: this command does not change the cluster.

Flags

Flag	Type	Description
`--plan`	string	Path to plan.json
`--verify`	string	Path to verify.json
`--principal`	stringSlice	Principal filter (repeatable; alias: --principal-filter)
`--principal-filter`	stringSlice	Alias for --principal (same semantics; matches extract / mds list-bindings)
`--principal-file`	string	Path to a file with one principal per line (alternative or supplement to --principal)
`--confirm`	bool	Confirm the operation
`--i-understand-this-is-destructive`	bool	Required acknowledgement
`--bootstrap-server`	string	Kafka bootstrap server(s) (comma-separated)
`--bootstrap`	string	Alias for --bootstrap-server
`--command-config`	string	Path to a Kafka client properties file
`--run-dir`	string	Explicit run directory
`--out`	string	Output path; parent dir becomes the run dir

Global flags

Flag	Type	Default	Description
`--log-format`	string	`text`	Log output format (text\|json); set MONEDULA_ACL_RBAC_LOG_FORMAT to override the default.
`--log-level`	string	`info`	Log level (debug\|info\|warn\|error); set MONEDULA_ACL_RBAC_LOG_LEVEL to override the default.

Examples

examples

monedula-acl-rbac delete-acls --plan runs/2026-05-21T10-00-00Z/plan.json --verify runs/2026-05-21T10-00-00Z/verify.json --bootstrap-server kafka.example.com:9093 --command-config admin.properties --principal User:alice --principal User:bob --confirm --i-understand-this-is-destructive

Exit codes

Code	Meaning
`0`	Success.
`1`	Usage error: missing required flag, malformed argument, or unknown subcommand.
`2`	Input error: unparseable ACLs or missing/malformed config (rules, principals, scopes, or vars files).
`4`	Any other error: failures the CLI does not classify (for example no ACLs are eligible for deletion given verify.json / --principal, or a missing --bootstrap-server) fall back to exit code 4.
`5`	Destructive operation refused by a guardrail, or a guardrail check reports unhealthy state.