Proper way to configure Leaf Nodes to only export some subjects

[humphd]

I'm trying to connect a bunch of nats instances in our cluster back to a global nats using Leaf Nodes. However, I only want to send a subset of messages (e.g., define a single pattern to sync, ignore the rest) going to the leaf node instances back to the global nats.

In the docs I see mention of deny_exports and deny_imports, but I can't really find any examples of people using this how I intend. My goal would be to do something where I default to exclude everything, then add an exception for one pattern.

Is this possible? If not, are there better ways to achieve this approach?

[derekcollison]

Soliciting leafnodes should provide authentication information for when they connect to the hub. Just put permissions on that user from the hub side the restricts what that user (the one that was used to form the leafnode connection) can and can not do.

[humphd]

@derekcollison fantastic, this is working for me. I appreciate you taking the time to help me with this.