[KAFKA-13909] Restart Kafka in KRaft mode with ACLs ends in a RuntimeException

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Duplicate
• Affects Version/s: 3.2.0
• Component/s: kraft
• Environment: Running Kafka in a Docker container
• Assignee: Luke Chen
• Reporter: Florian Blumenstein
• Created: 17/May/22 08:44
• Updated: 28/Aug/22 03:21
• Resolved: 25/May/22 19:28

Description

Running Kafka in KRaft mode works for the initial startup. When restarting Kafka it ends in a RuntimeException:
[2022-05-17 08:26:40,959] ERROR [BrokerServer id=1] Fatal error during broker startup. Prepare to shutdown (kafka.server.BrokerServer)
java.util.concurrent.ExecutionException: java.lang.RuntimeException: An ACL with ID toAvM0TbTfWRmS1kjknRaA already exists.
        at java.base/java.util.concurrent.CompletableFuture.reportGet(Unknown Source)
        at java.base/java.util.concurrent.CompletableFuture.get(Unknown Source)
        at kafka.server.BrokerServer.startup(BrokerServer.scala:426)
        at kafka.server.KafkaRaftServer.$anonfun$startup$2(KafkaRaftServer.scala:114)
        at kafka.server.KafkaRaftServer.$anonfun$startup$2$adapted(KafkaRaftServer.scala:114)
        at scala.Option.foreach(Option.scala:437)
        at kafka.server.KafkaRaftServer.startup(KafkaRaftServer.scala:114)
        at kafka.Kafka$.main(Kafka.scala:109)
        at kafka.Kafka.main(Kafka.scala)
Caused by: java.lang.RuntimeException: An ACL with ID toAvM0TbTfWRmS1kjknRaA already exists.
        at org.apache.kafka.metadata.authorizer.StandardAuthorizerData.addAcl(StandardAuthorizerData.java:169)
        at org.apache.kafka.metadata.authorizer.StandardAuthorizer.addAcl(StandardAuthorizer.java:83)
        at kafka.server.metadata.BrokerMetadataPublisher.$anonfun$publish$19(BrokerMetadataPublisher.scala:234)
        at java.base/java.util.LinkedHashMap$LinkedEntrySet.forEach(Unknown Source)
        at kafka.server.metadata.BrokerMetadataPublisher.$anonfun$publish$18(BrokerMetadataPublisher.scala:232)
        at kafka.server.metadata.BrokerMetadataPublisher.$anonfun$publish$18$adapted(BrokerMetadataPublisher.scala:221)
        at scala.Option.foreach(Option.scala:437)
        at kafka.server.metadata.BrokerMetadataPublisher.publish(BrokerMetadataPublisher.scala:221)
        at kafka.server.metadata.BrokerMetadataListener.kafka$server$metadata$BrokerMetadataListener$$publish(BrokerMetadataListener.scala:258)
        at kafka.server.metadata.BrokerMetadataListener$StartPublishingEvent.run(BrokerMetadataListener.scala:241)
        at org.apache.kafka.queue.KafkaEventQueue$EventContext.run(KafkaEventQueue.java:121)
        at org.apache.kafka.queue.KafkaEventQueue$EventHandler.handleEvents(KafkaEventQueue.java:200)
        at org.apache.kafka.queue.KafkaEventQueue$EventHandler.run(KafkaEventQueue.java:173)
        at java.base/java.lang.Thread.run(Unknown Source)

Issue Links

• duplicates: KAFKA-13649 StandardAuthorizer should not finish loading until it is ready