Dongnuo Lyu created KAFKA-21254:
-----------------------------------
Summary: Rework regex subscription ACLS
Key: KAFKA-21254
URL: https://issues.apache.org/jira/browse/KAFKA-21254
Project: Kafka
Issue Type: Task
Reporter: Dongnuo Lyu
Assignee: Dongnuo Lyu
The bug is that when a regex is resolved by the group coordinator, its uses the
ACLs of the member that triggered the refresh. This causes an issue when the
ACLs within the consumer group are not homogenous as other members could be
assigned topics that they are not supposed to see. In practice, it only
disclose the topic ids to those and they cannot do anything (e.g. fetching,
describing) about it.
The coordinator also does not filter internal topics when resolving a regex, so
the consumer config exclude.internal.topics has no effect with broker side
regex (see KAFKA-21244).
Resolving it requires a KIP because we basically need to completely change the
internal architecture of the regexes handling.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
