Uploaded image for project: 'Kafka'
  1. Kafka
  2. KAFKA-3069

Fix recursion in ZkSecurityMigrator

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 0.9.0.0
    • Fix Version/s: 0.10.0.0
    • Component/s: security
    • Labels:
      None

      Description

      The zk migrator tool recursively sets ACLs starting with the root, which we initially assumed was either the root of a dedicated ensemble or a chroot. However, there are at least two reasons for not doing it this way. First, shared ensembles might not really follow the practice of separating applications into branches, essentially creating a chroot for each. Second, there are paths we don't want to secure, like the ConsumersPath.

      To fix this, we simply need to set the root ACL separately and start the recursion on each of the persistent paths to secure.

        Attachments

          Activity

            People

            • Assignee:
              fpj Flavio Junqueira
              Reporter:
              fpj Flavio Junqueira
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: