[KAFKA-15172] Allow exact mirroring of ACLs between clusters

• Type: Task
• Status: In Progress
• Priority: Major
• Resolution: Unresolved
• Component/s: mirrormaker
• Labels: kip-965
• Assignee: hudeqi
• Reporter: Mickael Maison
• Created: 10/Jul/23 18:20
• Updated: 15/Aug/23 10:26

Description

When mirroring ACLs, MirrorMaker downgrades allow ALL ACLs to allow READ. The rationale to is prevent other clients to produce to remote topics.

However in disaster recovery scenarios, where the target cluster is not used and just a "hot standby", it would be preferable to have exactly the same ACLs on both clusters to speed up failover.