Klaw: Apache Kafka® governance toolkit
Streamline your Apache Kafka ecosystem, secure your data & simplify governance
Go to docsQuickstart: Get up and running with Klaw in no time!
- Windows & Mac
- Linux
docker run -d -t -i \
-e KLAW_CLUSTERAPI_ACCESS_BASE64_SECRET="dGhpcyBpcyBhIHNlY3JldCB0byBhY2Nlc3MgY2x1c3RlcmFwaQ==" \
-p 9343:9343 \
--name klaw-cluster-api aivenoy/klaw-cluster-api:latest --add-host host.docker.internal:host-gateway \
&& docker run -d -t -i \
-e KLAW_UIAPI_SERVERS=http://host.docker.internal:9097 -e KLAW_CLUSTERAPI_ACCESS_BASE64_SECRET="dGhpcyBpcyBhIHNlY3JldCB0byBhY2Nlc3MgY2x1c3RlcmFwaQ==" \
-e KLAW_QUICKSTART_ENABLED=true \
-e SPRING_DATASOURCE_URL="jdbc:h2:file:/klaw/klawprodb;DB_CLOSE_ON_EXIT=FALSE;DB_CLOSE_DELAY=-1;MODE=MySQL;CASE_INSENSITIVE_IDENTIFIERS=TRUE;" \
-p 9097:9097 --name klaw-core aivenoy/klaw-core:latest \
&& docker run -d -t -i -p 2181:2181 --add-host host.docker.internal:host-gateway \
-e ALLOW_ANONYMOUS_LOGIN=yes --name klaw-zookeeper bitnami/zookeeper:3.8 \
&& docker run -d -t -i -p 9092:9092 --add-host host.docker.internal:host-gateway \
-e KAFKA_CFG_ZOOKEEPER_CONNECT=host.docker.internal:2181 -e ALLOW_PLAINTEXT_LISTENER=yes \
-e KAFKA_ADVERTISED_LISTENERS=PLAINTEXT://host.docker.internal:9092 \
--name klaw-kafka bitnami/kafka:3.3 \
&& docker run -d -t -i -p 8081:8081 --add-host host.docker.internal:host-gateway \
-e SCHEMA_REGISTRY_KAFKA_BROKERS=PLAINTEXT://host.docker.internal:9092 \
--name klaw-schema-registry bitnami/schema-registry:latest
Klaw will be running at http://localhost:9097 on your machine. Learn about other options and next steps in the quickstart guide.
docker run -d -t -i --network=host \
-e KLAW_CLUSTERAPI_ACCESS_BASE64_SECRET="dGhpcyBpcyBhIHNlY3JldCB0byBhY2Nlc3MgY2x1c3RlcmFwaQ==" \
--name klaw-cluster-api aivenoy/klaw-cluster-api:latest --add-host localhost:host-gateway \
&& docker run -d -t -i --network=host \
-e KLAW_UIAPI_SERVERS=http://localhost:9097 -e KLAW_CLUSTERAPI_ACCESS_BASE64_SECRET="dGhpcyBpcyBhIHNlY3JldCB0byBhY2Nlc3MgY2x1c3RlcmFwaQ==" \
-e KLAW_QUICKSTART_ENABLED=true \
-e SPRING_DATASOURCE_URL="jdbc:h2:file:/klaw/klawprodb;DB_CLOSE_ON_EXIT=FALSE;DB_CLOSE_DELAY=-1;MODE=MySQL;CASE_INSENSITIVE_IDENTIFIERS=TRUE;" \
--name klaw-core aivenoy/klaw-core:latest \
&& docker run -d -t -i --network=host --add-host localhost:host-gateway \
-e ALLOW_ANONYMOUS_LOGIN=yes --name klaw-zookeeper bitnami/zookeeper:3.8 \
&& docker run -d -t -i --network=host --add-host localhost:host-gateway \
-e KAFKA_CFG_ZOOKEEPER_CONNECT=localhost:2181 -e ALLOW_PLAINTEXT_LISTENER=yes \
-e KAFKA_ADVERTISED_LISTENERS=PLAINTEXT://localhost:9092 \
--name klaw-kafka bitnami/kafka:3.3 \
&& docker run -d -t -i --network=host --add-host localhost:host-gateway \
-e SCHEMA_REGISTRY_KAFKA_BROKERS=PLAINTEXT://localhost:9092 \
--name klaw-schema-registry bitnami/schema-registry:latest
Klaw will be running at http://localhost:9097 on your machine. Learn about other options and next steps in the quickstart guide.
Key Features
Data governance
Create, modify, subscribe and promote Apache Kafka® topics, schemas as well as manage users/acls via the web based UI.
Security
Fine grained permissions to access resources, combined with the "Four Eyes" approval principal ensure that your kafka cluster is protected from incorrect or malicious changes.
User management
Easily authenticate and authorize users with assigned roles and teams. Ability to Integrate directly with AD/SSO/third party providers like Google/Microsoft.
Use cases
Make better decisions
With the right governance in place, you can make consistent, confident business decisions based on the trustworthy metadata for all your Apache Kafka® environments.
Enhanced regulatory compliance and audit
Apache Kafka® moves critical data throughout your organizations. Using proper user management and policy with Klaw, you can avoid risks associated with noncompliance while proactively anticipating new requirements.
Developer self-service
Klaw provides an intuitive and easy to use web UI to manage Apache Kafka topics and connectors, allowing developers to maintain velocity without needing to know kafka specific knowledge while conforming to an organizations governance standards.
Support
Kafka Flavors
- Apache Kafka
- Aiven for Apache Kafka
- Confluent
- Confluent Cloud
Authentication
- Windows Active directory
- Azure Active directory (AAD)
- Third party providers (ex: Github)
- Database
Protocols
- PLAINTEXT
- SSL
- SASL-PLAIN
- SASL-SSL/PLAIN
- SASL-SSL/GSSAPI/SCRAM