Cassandra dynamic secrets

Updated

Needs PasswordAuthenticator and CassandraAuthorizer. Connection fields: comma-separated hosts, port (9042), admin user, password, local DC, optional keyspace.

CREATE ROLE '{{username}}' WITH PASSWORD = '{{password}}' AND LOGIN = true;
GRANT SELECT ON KEYSPACE {{database}} TO '{{username}}';

Revoke: DROP ROLE '{{username}}';

{{database}} is the keyspace name.