BE: RBAC: Implement instance-wide default role

[seono]

I’ve opened a draft PR. If this approach looks okay, I’ll follow up with tests and documentation.

• Breaking change? (if so, please describe the impact and migration path for existing application instances)

What changes did you make? (Give an overview)
Implement default role
Resolves #344

Is there anything you'd like reviewers to focus on?
I updated each extractor’s extract method to return the defaultRole if it’s present, but I’m not sure if this aligns with the original intention of how extract is supposed to be used.

I tested it using the configuration below

rbac: default-role: name: defaultRole permissions: - resource: clusterconfig actions: [ view ] - resource: topic value: ".*" actions: - VIEW - MESSAGES_READ - resource: consumer value: ".*" actions: [ view ] - resource: schema value: ".*" actions: [ view ] - resource: connect value: ".*" actions: [ view ] - resource: acl actions: [ view ] roles: []

How Has This Been Tested? (put an "x" (case-sensitive!) next to an item)

• No need to
• Manually (please, describe, if necessary)
• Unit checks
• Integration checks
• Covered by existing automation

Checklist (put an "x" (case-sensitive!) next to all the items, otherwise the build will fail)

• I have performed a self-review of my own code
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation (e.g. ENVIRONMENT VARIABLES)
• My changes generate no new warnings (e.g. Sonar is happy)
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes
• Any dependent changes have been merged

Check out Contributing and Code of Conduct

A picture of a cute animal (not mandatory but encouraged)

[github-actions]

Hi seono! 👋

Welcome, and thank you for opening your first PR in the repo!

Please wait for triaging by our maintainers.

Please take a look at our contributing guide.

[germanosin]

Hi, thanks for PR!
Please check my comments.

[seono]

@germanosin
Thanks for the review.
I applied the following updates:

• use jakarta
• remove changes from extractors
• add DefaultRole class.
• let DefaultRole need cluster definition

I updated the code to work with the RBAC definition below.

... rbac: default-role: name: read-only clusters: - dev-cluster permissions: - resource: clusterconfig actions: [ "view" ] - resource: topic value: ".*" actions: - VIEW - MESSAGES_READ - resource: consumer value: ".*" actions: [ view ] - resource: schema value: ".*" actions: [ view ] - resource: connect value: ".*" actions: [ view ] - resource: acl actions: [ view ] roles: - name: admin clusters: - dev-cluster - prod-cluster subjects: - provider: oauth_github type: user value: "seono" ...

[Haarolean]

@seono, thanks for your first contribution to Kafbat UI!