Stream data from Kafka

1. Create a service account

   If you already have a service account for Tiger Cloud, you can reuse it. To create a new service account:

   1. Log in to Confluent Cloud.

   2. Click the burger menu at the top-right of the pane, then press Access control > Service accounts >Add service account.

   3. Enter the following details:

      • Name: tigercloud-access
      • Description: Service account for the Tiger Cloud source connector

   4. Add the service account owner role, then click Next.

   5. Select a role assignment, then click Add

   6. Click Next, then click Create service account.

2. Create API keys

   1. In Confluent Cloud, click Home > Environments > Select your environment > Select your cluster.
   2. Under Cluster overview in the left sidebar, select API Keys.
   3. Click Add key, choose Service Account and click Next.
   4. Select tigercloud-access, then click Next.
   5. For your cluster, choose the Operation and select the following Permissions, then click Next:
      • Resource type: Cluster
      • Operation: DESCRIBE
      • Permission: ALLOW
   6. Click Download and continue, then securely store the ACL.
   7. Use the same procedure to add the following keys:
      • ACL 2: Topic access
        • Resource type: Topic
        • Topic name: Select the topics that Tiger Cloud should read
        • Pattern type: LITERAL
        • Operation: READ
        • Permission: ALLOW
      • ACL 3: Consumer group access
        • Resource type: Consumer group
        • Consumer group ID: tigercloud-kafka/<tiger_cloud_project_id>. See Find your connection details for where to find your project ID
        • Pattern type: PREFIXED
        • Operation: READ
        • Permission: ALLOW You need these to configure your Kafka source connector in Tiger Cloud.

1. Navigate to Schema Registry

   In Confluent Cloud, click Environments and select your environment, then click Stream Governance.

2. Create a Schema Registry API key

   1. Click API Keys, then click Add API Key.

   2. Choose Service Account, select tigercloud-access, then click Next.

   3. Under Resource scope, choose Schema Registry, select the default environment, then click Next.

   4. In Create API Key, add the following, then click Create API Key :

      • Name: tigercloud-schema-registry-access
      • Description: API key for Tiger Cloud schema registry access

   5. Click Download API Key and securely store the API key and secret, then click Complete.

3. Assign roles for Schema Registry

   1. Click the burger menu at the top-right of the pane, then press Access control > Accounts & access > Service accounts.

   2. Select the tigercloud-access service account.

   3. In the Access tab, add the following role assignments for All schema subjects:

      • ResourceOwner on the service account.
      • DeveloperRead on schema subjects. Choose All schema subjects or restrict to specific subjects as required.

   4. Save the role assignments.

Your Confluent Cloud Schema Registry is now accessible to Tiger Cloud using the API key and secret.

1. In Console, select your service

2. Go to Connectors > Source connectors. Click New Connector, then select Kafka

3. Click the pencil icon, then set the connector name

4. Set up Kafka authentication

   Enter the name of your cluster in Confluent Cloud and the information from the first api-key-*.txt that you downloaded, then click Authenticate.

5. Set up the Schema Registry

   Enter the Service account ID and the information from the second api-key-*.txt that you downloaded, then click Authenticate.

6. Select topics to sync

   Add the schema and table, map the columns in the table, and click Create connector.

Your Kafka connector is configured and ready to stream events.