Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • As additional safeguard when deletion of internal topics is requested, even when a requester is authorized (i.e. has an ACL allowing to deleted).
    • A policy would be useful to avoid the deletion in this case, e.g. deleting Kafka internal topics  __consumer_offsets or application internal topics like Connect internal topics.
    • Authorizer implementations tend to prefer coarse grained permissions to reduce the number of ACLs (e.g. Confluent RBAC which includes Delete as  part of ResourceOwner) which includes both permissions to create and  delete, making it harder to rely only on the Authorizer.
  • To validate against a registry when a topic is deleted, e.g. for cross domain usage.
  • To implement retry-based or flag-based mechanisms to safeguard topic deletion.


There has been related KIPs that included this proposal:

...