plan.v1.json

JSON Schema reference for plan.v1.json: Role binding plan (monedula-acl-rbac). Every field, its type and constraints.

Reference 26 of 29

Reference for monedula-acl-rbac-converter v0.10.0

Updated 2 October 2026

On this page

Role binding plan (monedula-acl-rbac). JSON Schema draft 2020-12, as published in the repository's schemas/ folder.

Fields

schema_version 1 required

generated_at string required

format: date-time

acls_sha256 string

bindings array<object> required

bindings[].id string required

pattern: ^rb-[0-9a-f]{12}$

bindings[].action string required

One of: CREATE, SKIP_EXISTS

bindings[].principal string required

min length: 1

bindings[].role string required

min length: 1

bindings[].scope object required

bindings[].scope.organization string

bindings[].scope.environment string

bindings[].scope.kafka_cluster string

bindings[].scope.schema_registry_cluster string

bindings[].scope.ksql_cluster string

bindings[].scope.connect_cluster string

bindings[].resource_patterns array<object> required

bindings[].resource_patterns[].resource_type string required

One of: Cluster, Topic, Group, TransactionalId, DelegationToken, Subject

bindings[].resource_patterns[].name string required

min length: 1

bindings[].resource_patterns[].pattern_type string required

One of: LITERAL, PREFIXED

bindings[].source_acl_ids array<integer> required

unmapped array<object> required

unmapped[].source_acl_ids array<integer> required

unmapped[].reason string required

unmapped[].detail string

rejected array<object> required

rejected[].source_acl_ids array<integer> required

rejected[].reason string required

rejected[].detail string

warnings array<object> required

warnings[].code string required

warnings[].detail string required

deny_analysis array<object> required

deny_analysis[].source_acl_id integer required

min: 1

deny_analysis[].status string required

One of: SAFE_TO_REMOVE, WOULD_GRANT_ACCESS, UNKNOWN

deny_analysis[].covering_rule string