Uploaded image for project: 'Kafka'
  1. Kafka
  2. KAFKA-16693

Kafka Users are created with ACL entries and during performing operations allowed by ACL we see Denied Operation

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Blocker
    • Resolution: Unresolved
    • 3.5.1
    • None
    • core
    • None

    Description

      Hi

      We have created 2 KafkaUsers from Strimzi operator for 2 different cluster with ACL entries. we have observed that the ACL entries in teh Kafka Cluster will not be present for approximately 4 minutes  and the ACL entries will be available after that. The clients which are using KafkaUser to perform operations not be able to perform operations till the ACL is available in KafkaCLuster.

      We see in the Kafka Logs below are the mesages the user and cluster details in messages are not added since it is proprietery

       

      Processing notification(s) to /config/change

      Processing override for entityPath

      Removing PRODUCE quota for user

      Removing FETCH quota for user

      Removing REQUEST quota for user

      Removing CONTROLLER_MUTATION quota for user

      Processing notification(s) to /kafka-acl-changes

      Processing Acl change notification for

      Processing notification(s) to /config/changes

      Processing notification(s) to /kafka-acl-changes

      Processing Acl change notification for ResourcePattern(resourceType=GROU

       

      The same behavior is observed even if we create a single KafkaUser , same behavior is observed

       

       

      Even if we try to add a ACL manually from kafka cluster the same behavior is seen. After some time the ACL is getting deleted

       

       

      kafka-acls --add --allow-host '*' --allow-principal User:'CN=jana-2' --operation Describe --resource-pattern-type LITERAL --topic my-new-topic --bootstrap-server eric-data-message-bus-kf-9-kafka-bootstrap:9091 -command-config /tmp/kafka_ssl_config.properties 
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

       

      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:24:53 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:24:58 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:25:02 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:25:06 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:25:10 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:25:15 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:25:19 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:25:24 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:25:28 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:25:32 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:25:36 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:25:40 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:25:45 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:25:49 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:25:53 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:25:58 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:26:02 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:26:06 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:26:10 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:26:15 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:26:19 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:26:23 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:26:28 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:26:32 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Current ACLs for resource `ResourcePattern(resourceType=TOPIC, name=my-new-topic, patternType=LITERAL)`: 
           (principal=User:CN=jana-2, host=*, operation=DESCRIBE, permissionType=ALLOW) 

      Mon May 13 14:26:36 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Mon May 13 14:26:40 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Mon May 13 14:26:45 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      ^CMon May 13 14:26:48 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'
      Mon May 13 14:26:52 UTC 2024
      ERROR StatusLogger Reconfiguration failed: No configuration found for '2cdf8d8a' at 'null' in 'null'

       

      Attachments

        Activity

          People

            Unassigned Unassigned
            janardhanag Janardhana Gopalachar
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: