[GitHub] [kafka] akatona84 commented on pull request #13733: KAFKA-13337: fix of possible java.nio.file.AccessDeniedException during Connect plugin directory scan

["akatona84 (via GitHub)" <gi...@apache.org>]

akatona84 commented on PR #13733:
URL: https://github.com/apache/kafka/pull/13733#issuecomment-1554580666

   Without filtering out non-readable ones it fails later but getting ignored, it won't load any plugins, not just the problematic one skipped.
   around here:
   https://github.com/apache/kafka/blob/3109e9c843e33057dd5d823c50c41fb91dc1a8fc/connect/runtime/src/main/java/org/apache/kafka/connect/runtime/isolation/DelegatingClassLoader.java#L269
   
   So we should at least load the plugins what we have access to.
   
   This is the scenario:
   
   - plugins are located in /var/lib/kafka
   - also this happens to be the kafka user's home, yet it's world-readable
   - an only kafka readable directory was put there (.pki)
   - mirrormaker2 uses /var/lib/kafka too but mm2 is executed by another user than kafka
   - mm2 failed to load plugins (any) because of this unreadable .pki dir, and fails to start because its config has entries which would need (the currently not-loaded) config-providers to resolve
   
   This was the motivation to do the ticket and the PR.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscribe@kafka.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org