[KAFKA-13983] Fail the creation with "/" in resource name in zk ACL

• Type: Bug
• Status: Resolved
• Priority: Minor
• Resolution: Fixed
• Fix Version/s: 3.3.0
• Component/s: core
• Assignee: Aman Singh
• Reporter: Aman Singh
• Reviewer: Manikumar
• Created: 13/Jun/22 11:08
• Updated: 08/Jul/22 11:17
• Resolved: 08/Jul/22 10:21

Description

Currently, resource names in ACLS can contain any special characters, but resource names with some special characters are not a valid zookeeper path entry.

For example resource name test/true is not a valid zookeeper path entry.

Zookeeper will create a child node, name as true inside the test node.

This will create two problems:-

1. If there is one  ACL with a resource name test it can't be deleted because if there is only one, Kafka tries to delete the node as well by thinking it will be empty which is not true it has the child node true.
2. When broker restarts ACL cache(which is used for ACL operations like describe, authorization etc) update from zookeeper and Kafka only looks for  ACLs that are direct child nodes of resource type in the ACL tree. 

 

Issue Links

• links to: GitHub Pull Request #12359