Module users 

KafkaUser admin RPCs.

Five admin operations the KafkaUser reconciler drives: AlterUserScramCredentials (upsert + delete in a single call), CreateAcls, DeleteAcls, DescribeAcls.

Wire i8 discriminants stay private to this module. Callers use the typed Rust enums below. crates/client-admin depends on krabka-metadata for shared image types such as DelegationToken, but it stays free of krabka-broker, so out-of-process clients can use the crate. Unit tests cover the wire round-trip of the local enum copies.

Structs

AclEntry

A concrete, non-filter, ACL entry with every field populated. It matches the shape the broker stores in its metadata image.

AclEntryFilter

Filter for DescribeAcls / DeleteAcls. Each None axis matches anything.

AclEntryFilterBuilder

Use builder syntax to set the inputs and finish with build().

CreateAclOutcome

DeleteAclFilterOutcome

ScramDeletion

ScramIterations

Broker-valid PBKDF2 iteration count for a SCRAM credential.

ScramUpsertion

ScramUserOutcome

UserScramCredential

UserScramCredentials

Enums

AclOperation

PatternType

PermissionType

ResourceType

Constants

DEFAULT_SCRAM_ITERATIONS

Default PBKDF2 iteration count for new Kafka SCRAM credentials.

MAX_SCRAM_ITERATIONS

Maximum PBKDF2 iteration count accepted by the broker.

MIN_SCRAM_ITERATIONS

Minimum PBKDF2 iteration count accepted by the broker.