Matthias J. Sax created KAFKA-8117: -------------------------------------- Summary: Flaky Test DelegationTokenEndToEndAuthorizationTest#testNoProduceWithDescribeAcl Key: KAFKA-8117 URL: https://issues.apache.org/jira/browse/KAFKA-8117 Project: Kafka Issue Type: Bug Components: core, unit tests Affects Versions: 2.3.0 Reporter: Matthias J. Sax Fix For: 2.3.0
[https://builds.apache.org/blue/organizations/jenkins/kafka-trunk-jdk8/detail/kafka-trunk-jdk8/3470/tests] {quote}java.util.concurrent.ExecutionException: org.apache.kafka.common.errors.SaslAuthenticationException: Authentication failed during authentication due to invalid credentials with SASL mechanism SCRAM-SHA-256 at org.apache.kafka.common.internals.KafkaFutureImpl.wrapAndThrow(KafkaFutureImpl.java:45) at org.apache.kafka.common.internals.KafkaFutureImpl.access$000(KafkaFutureImpl.java:32) at org.apache.kafka.common.internals.KafkaFutureImpl$SingleWaiter.await(KafkaFutureImpl.java:89) at org.apache.kafka.common.internals.KafkaFutureImpl.get(KafkaFutureImpl.java:260) at kafka.api.DelegationTokenEndToEndAuthorizationTest.createDelegationToken(DelegationTokenEndToEndAuthorizationTest.scala:88) at kafka.api.DelegationTokenEndToEndAuthorizationTest.configureSecurityAfterServersStart(DelegationTokenEndToEndAuthorizationTest.scala:63) at kafka.integration.KafkaServerTestHarness.setUp(KafkaServerTestHarness.scala:107) at kafka.api.IntegrationTestHarness.doSetup(IntegrationTestHarness.scala:81) at kafka.api.IntegrationTestHarness.setUp(IntegrationTestHarness.scala:73) at kafka.api.EndToEndAuthorizationTest.setUp(EndToEndAuthorizationTest.scala:183) at kafka.api.DelegationTokenEndToEndAuthorizationTest.setUp(DelegationTokenEndToEndAuthorizationTest.scala:74){quote} STDOUT {quote}Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Adding ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Completed Updating config for entity: user-principal 'scram-admin'. Completed Updating config for entity: user-principal 'scram-user'. Adding ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Current ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Adding ACLs for resource `Group:LITERAL:group`: User:scram-user has Allow permission for operations: Read from hosts: * Current ACLs for resource `Group:LITERAL:group`: User:scram-user has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * Current ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Create from hosts: * [2019-03-16 03:39:08,540] WARN Unable to read additional data from client sessionid 0x1045892126e0013, likely client has closed socket (org.apache.zookeeper.server.NIOServerCnxn:376) [2019-03-16 03:39:08,634] ERROR [Consumer clientId=consumer-21, groupId=group] Topic authorization failed for topics [e2etopic] (org.apache.kafka.clients.Metadata:297) Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Adding ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Completed Updating config for entity: user-principal 'scram-admin'. Completed Updating config for entity: user-principal 'scram-user'. Adding ACLs for resource `Topic:PREFIXED:e2e`: User:scram-user has Allow permission for operations: Read from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * Adding ACLs for resource `Group:PREFIXED:gr`: User:scram-user has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:PREFIXED:e2e`: User:scram-user has Allow permission for operations: Read from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * Current ACLs for resource `Group:PREFIXED:gr`: User:scram-user has Allow permission for operations: Read from hosts: * Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Adding ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Completed Updating config for entity: user-principal 'scram-admin'. Completed Updating config for entity: user-principal 'scram-user'. Adding ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Current ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Adding ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Read from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Adding ACLs for resource `Group:LITERAL:group`: User:scram-user has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * User:scram-user has Allow permission for operations: Read from hosts: * Current ACLs for resource `Group:LITERAL:group`: User:scram-user has Allow permission for operations: Read from hosts: * Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Adding ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Completed Updating config for entity: user-principal 'scram-admin'. Completed Updating config for entity: user-principal 'scram-user'. Adding ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Current ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Adding ACLs for resource `Group:LITERAL:group`: User:scram-user has Allow permission for operations: Read from hosts: * Current ACLs for resource `Group:LITERAL:group`: User:scram-user has Allow permission for operations: Read from hosts: * Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Adding ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Completed Updating config for entity: user-principal 'scram-admin'. Completed Updating config for entity: user-principal 'scram-user'. Adding ACLs for resource `Topic:LITERAL:topic2`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Current ACLs for resource `Topic:LITERAL:topic2`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Adding ACLs for resource `Topic:LITERAL:topic2`: User:scram-user has Allow permission for operations: Read from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Adding ACLs for resource `Group:LITERAL:group`: User:scram-user has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:topic2`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * User:scram-user has Allow permission for operations: Read from hosts: * Current ACLs for resource `Group:LITERAL:group`: User:scram-user has Allow permission for operations: Read from hosts: * Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Adding ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Completed Updating config for entity: user-principal 'scram-admin'. Completed Updating config for entity: user-principal 'scram-user'. Adding ACLs for resource `Topic:LITERAL:*`: User:scram-user has Allow permission for operations: Read from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * Adding ACLs for resource `Group:LITERAL:*`: User:scram-user has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * User:scram-user has Allow permission for operations: Read from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * User:scram-user has Allow permission for operations: Write from hosts: * Current ACLs for resource `Group:LITERAL:*`: User:scram-user has Allow permission for operations: Read from hosts: * [2019-03-16 03:39:36,082] WARN Unable to read additional data from client sessionid 0x104589279390008, likely client has closed socket (org.apache.zookeeper.server.NIOServerCnxn:376) Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Adding ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Completed Updating config for entity: user-principal 'scram-admin'. Completed Updating config for entity: user-principal 'scram-user'. Adding ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Current ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Adding ACLs for resource `Group:LITERAL:group`: User:scram-user has Allow permission for operations: Read from hosts: * Current ACLs for resource `Group:LITERAL:group`: User:scram-user has Allow permission for operations: Read from hosts: * Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Adding ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Completed Updating config for entity: user-principal 'scram-admin'. Completed Updating config for entity: user-principal 'scram-user'. Adding ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Current ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Adding ACLs for resource `Group:LITERAL:group`: User:scram-user has Allow permission for operations: Read from hosts: * Current ACLs for resource `Group:LITERAL:group`: User:scram-user has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * Current ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Create from hosts: * [2019-03-16 03:39:45,276] ERROR [Consumer clientId=consumer-28, groupId=group] Topic authorization failed for topics [e2etopic] (org.apache.kafka.clients.Metadata:297) [2019-03-16 03:39:45,832] WARN Unable to read additional data from client sessionid 0x10458929fe3000a, likely client has closed socket (org.apache.zookeeper.server.NIOServerCnxn:376) [2019-03-16 03:39:46,138] WARN Unable to read additional data from client sessionid 0x10458929fe30008, likely client has closed socket (org.apache.zookeeper.server.NIOServerCnxn:376) Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * [2019-03-16 03:39:49,798] WARN Unable to read additional data from client sessionid 0x1045892ba700001, likely client has closed socket (org.apache.zookeeper.server.NIOServerCnxn:376) Adding ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Completed Updating config for entity: user-principal 'scram-admin'. Completed Updating config for entity: user-principal 'scram-user'. Adding ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Current ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Adding ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Completed Updating config for entity: user-principal 'scram-admin'. Completed Updating config for entity: user-principal 'scram-user'. [2019-03-16 03:39:55,125] ERROR [AdminClient clientId=adminclient-31] Connection to node -1 (localhost/127.0.0.1:42973) failed authentication due to: Authentication failed during authentication due to invalid credentials with SASL mechanism SCRAM-SHA-256 (org.apache.kafka.clients.NetworkClient:714) Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Adding ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Completed Updating config for entity: user-principal 'scram-admin'. Completed Updating config for entity: user-principal 'scram-user'. Adding ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Current ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Adding ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Read from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * Adding ACLs for resource `Group:LITERAL:group`: User:scram-user has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:e2etopic`: User:scram-user has Allow permission for operations: Write from hosts: * User:scram-user has Allow permission for operations: Create from hosts: * User:scram-user has Allow permission for operations: Describe from hosts: * User:scram-user has Allow permission for operations: Read from hosts: * Current ACLs for resource `Group:LITERAL:group`: User:scram-user has Allow permission for operations: Read from hosts: * Adding ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: User:scram-admin has Allow permission for operations: ClusterAction from hosts: * Adding ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Current ACLs for resource `Topic:LITERAL:*`: User:scram-admin has Allow permission for operations: Read from hosts: * Completed Updating config for entity: user-principal 'scram-admin'. Completed Updating config for entity: user-principal 'scram-user'. [2019-03-16 03:40:04,766] ERROR [Producer clientId=producer-133] Topic authorization failed for topics [e2etopic] (org.apache.kafka.clients.Metadata:297){quote} -- This message was sent by Atlassian JIRA (v7.6.3#76005)