Uploaded image for project: 'Kafka'
  1. Kafka
  2. KAFKA-9392

Document and add test for deleteAcls that match single/multiple resources

    XMLWordPrintableJSON

    Details

    • Type: Task
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 2.6.0
    • Component/s: security
    • Labels:
      None

      Description

      From PR review of https://github.com/apache/kafka/pull/7911:

      If you do Admin.createAcls() followed by Admin.deleteAcls(), if you specify the ACL in both cases, you are guaranteed to delete the ACL regardless of which broker handles the request. If you use a matching filter that doesn't specify the resource pattern for deleteAcls, then we don't provide that guarantee.

      We should document this and add a deterministic test for the guaranteed behaviour to ensure we don't regress.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                rsivaram Rajini Sivaram
                Reporter:
                rsivaram Rajini Sivaram
                Reviewer:
                Manikumar
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: