Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

oauth-keycloak-authorizer doesn't support kraft cluster #178

Open
gengweifeng opened this issue Dec 29, 2022 · 4 comments
Open

oauth-keycloak-authorizer doesn't support kraft cluster #178

gengweifeng opened this issue Dec 29, 2022 · 4 comments

Comments

@gengweifeng
Copy link

The kafka cluster has two mode: zk-based, kraft.
The KeycloakRBACAuthorizer class extends AclAuthorizer, but AclAuthorizer is a zk-based cluster implement, which store acl state info zk. When we use it in a zk-based cluster, there is nothing wrong. If we use it in a kraft cluster, there will be a NPE when the cluster starts up, because there has no zk.
According kafka's official document and the source code, there seem to be a default implement class, which store acl state into cluster metadata log for kraft cluster, called StandardAuthorizer. A pr about it is in apache/kafka#11649
is there any plain for supporting kraft cluster, because the kraft cluster is all ready for production since 3.3, zk-based cluster will be marked deprecation since 3.4, and there is a plain which removes zk-based cluster since 4.0
Thanks

@mstruk
Copy link
Contributor

mstruk commented Dec 29, 2022

Thank you for reporting this issue. We'll look into it.

@gengweifeng
Copy link
Author

best wishes !

@mstruk mstruk mentioned this issue Jan 26, 2023
@emaciejm
Copy link

emaciejm commented Mar 6, 2023

hey, i would like to ask what's next on this issue?

@mstruk
Copy link
Contributor

mstruk commented Mar 7, 2023

See: #188

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants