Page History

...

• Changes to command line tool class https://github.com/apache/kafka/blob/trunk/core/src/main/scala/kafka/admin/AclCommand.scala
  • To expose the above new API (if we go that route).
  • Expose a '--wildcard-suffix-resource' flag which is "false" by default to maintain backwards compatibility (though "true" is more user friendly going forward)
    • bin/kafka-acls.sh --authorizer-properties zookeeper.connect=localhost:2181
      --add --allow-principal User:Bob --allow-principal User:Alice --allow-host
      198.51.100.0 --allow-host 198.51.100.1 --operation Read --group my-app-* –wildcard-suffix-resource true
• Add new field 'ResourceNameType' to Resource and ResourceFilter classes, which would define if the resource name is a literal or wildcard-suffix (ResourceNameType is an enum to support more types in the future)
• Changes to AdminClient
  • Add a new method that will allow users to escape resource names for using special characters (@, #, $, %, ^, &, *, /, +)
• (Question) Should we deprecate older getAcls(resource) method? Not at this point?
• Update the public documentation with the details of the new feature.

...