[FEATURE] BTP Kafka Advertisement Support

[maikschwan]

Context
We want to be able to manage BTP Kafka Advertisements via this provider.

We were able to create a ServiceInstance for a Kafka cluster and setup the ServiceCredentialBinding with the rotation. Originally, we wanted to managed the ACL directly in the kafka cluster via the kafka-provider. We now however realized that each rotated certificate has a different subject. That means that we would need to process to keep the ACL definition in sync with the certificate subjects.

To solve this, we tested the BTP Kafka Advertisement feature, which allows to define the "role" and resource to grant access to and then using a ServiceCredentialBinding to rotate the certificate and keeping the ACL in sync.

We are not sure if the cloudfoundry provider would even be the right provider to add this functionality, but we would like to hear your thoughts on this.

Scope
Add a resource that allows to manage a Kafka Advertisement.

Out of scope

Workarounds & Alternatives
We are exploring to use the provider-http to send requests to the kafka service api

[dwlou]

@maikschwan This provider is a strict mapping to resources defined in the CF v3 API spec. So basically all the steps in kafka service api with cf cli, you can do with this CF provider, but not more.

Potentially, one could think about a new BigData provider to work with this set of APIs. Would this make sense to you?

• Kafka Advertisement REST API
• Cassandra Advertisement REST API
• Spark Advertisement REST API