[
https://issues.apache.org/jira/browse/KAFKA-21254?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Lianet Magrans updated KAFKA-21254:
-----------------------------------
Labels: needs-kip (was: )
> Rework regex subscription ACLS
> ------------------------------
>
> Key: KAFKA-21254
> URL: https://issues.apache.org/jira/browse/KAFKA-21254
> Project: Kafka
> Issue Type: Task
> Components: group-coordinator
> Reporter: Dongnuo Lyu
> Assignee: Dongnuo Lyu
> Priority: Major
> Labels: needs-kip
>
> The bug is that when a regex is resolved by the group coordinator, its uses
> the ACLs of the member that triggered the refresh. This causes an issue when
> the ACLs within the consumer group are not homogenous as other members could
> be assigned topics that they are not supposed to see. In practice, it only
> disclose the topic ids to those and they cannot do anything (e.g. fetching,
> describing) about it.
> The coordinator also does not filter internal topics when resolving a regex,
> so the consumer config exclude.internal.topics has no effect with broker side
> regex (see KAFKA-21244).
> Resolving it requires a KIP because we basically need to completely change
> the internal architecture of the regexes handling.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
