[jira] [Created] (KAFKA-21254) Rework regex subscription ACLS

["Dongnuo Lyu (Jira)" <ji...@apache.org>]

Dongnuo Lyu created KAFKA-21254:
-----------------------------------

             Summary: Rework regex subscription ACLS
                 Key: KAFKA-21254
                 URL: https://issues.apache.org/jira/browse/KAFKA-21254
             Project: Kafka
          Issue Type: Task
            Reporter: Dongnuo Lyu
            Assignee: Dongnuo Lyu


The bug is that when a regex is resolved by the group coordinator, its uses the ACLs of the member that triggered the refresh. This causes an issue when the ACLs within the consumer group are not homogenous as other members could be assigned topics that they are not supposed to see. In practice, it only disclose the topic ids to those and they cannot do anything (e.g. fetching, describing) about it.

The coordinator also does not filter internal topics when resolving a regex, so the consumer config exclude.internal.topics has no effect with broker side regex (see KAFKA-21244).

Resolving it requires a KIP because we basically need to completely change the internal architecture of the regexes handling.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)