Versions Compared

Old Version 6

changes.mady.by.user Flavio Junqueira

Saved on

compared with

New Version 7

changes.mady.by.user Flavio Junqueira

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Perform a rolling restart setting the JAAS login file, which enables brokers to authenticate. At the end of the rolling restart, brokers are able to manipulate znodes with strict ACLs, but they will not create znodes with those ACLs.
  2. Perform a second rolling restart of brokers, this time setting the configuration parameter {{ zookeeper.set.acl to true}}, which enables enables ZkUtils to use secure ACLs when creating znodes.
  3. Execute a tool called ZkSecurityMigrator (there is a script under under ./bin and the code is under kafka.admin). This tool traverses the corresponding sub-trees changing the ACLs of the znodes.

...