You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@kafka.apache.org by Edoardo Comar <EC...@uk.ibm.com> on 2018/04/25 09:45:24 UTC

[VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Hi,

The discuss thread on KIP-277 ( 
https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html ) 
seems to have been fruitful and concerns have been addressed, please allow 
me start a vote on it:

https://cwiki.apache.org/confluence/display/KAFKA/KIP-277+-+Fine+Grained+ACL+for+CreateTopics+API

I will update the small PR to the latest KIP semantics if the vote passes 
(as I hope :-).

cheers
Edo
--------------------------------------------------

Edoardo Comar

IBM Message Hub

IBM UK Ltd, Hursley Park, SO21 2JN
Unless stated otherwise above:
IBM United Kingdom Limited - Registered in England and Wales with number 
741598. 
Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Edoardo Comar <EC...@uk.ibm.com>.
Hi Guozhang,

I am not sure we want to ensure that 'create' should implies 'read' and 
'write'
as I can imagine an administrative role with authoprity to create/delete 
but not to read (or write) topic data.

I would agree that 'create' should imply 'describe' though, as one such 
admin should be able to know whether a topic exists.

Edoardo
--------------------------------------------------

Edoardo Comar

IBM Message Hub

IBM UK Ltd, Hursley Park, SO21 2JN



From:   Guozhang Wang <wa...@gmail.com>
To:     dev@kafka.apache.org
Date:   27/06/2018 19:42
Subject:        Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API



Hello guys,

Sorry for being late on this KIP, but while incorporating the docs of 277
and 290 I'm wondering if we should be extending the authorization with
create topics on other operations with these two KIPs:

Previously, in SimpleAclAuthorizer, "read, write, delete, or alter implies
allowing describe", but not "create" as it can only be applied on
"CLUSTER". It means that users need to specify additional rules for those
topics even if they are created by themselves.

One example of this is Kafka Streams' internal topics, before 2.0, users
need to add "create CLUSTER" plus "read / write TOPIC_NAME_LITERAL" with a
secured cluster, and I've seen some common scenarios where they forgot to
add the latter and was thinking that the created topics will be
auto-granted with read/write permissions.

Would it be natural to allow:

1. prefix wildcard "create" to imply prefix wildcard "read / write /
describe" (debatable whether we want to add "delete" and "alter" as well).
2. cluster "create" to imply "read / write / describe" on topics created 
by
the same user.



Guozhang




On Fri, May 25, 2018 at 5:55 AM, Edoardo Comar <ed...@gmail.com> wrote:

> Thanks Ismael, noted on the KIP
>
> On 21 May 2018 at 18:29, Ismael Juma <is...@juma.me.uk> wrote:
> > Thanks for the KIP, +1 (binding). Can you also please describe the
> > compatibility impact of changing the error code from
> > CLUSTER_AUTHORIZATION_FAILED to TOPIC_AUTHORIZATION_FAILED?
> >
> > Ismael
> >
> > On Wed, Apr 25, 2018 at 2:45 AM Edoardo Comar <EC...@uk.ibm.com> 
wrote:
> >
> >> Hi,
> >>
> >> The discuss thread on KIP-277 (
> >> 
https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html 
)
> >> seems to have been fruitful and concerns have been addressed, please
> allow
> >> me start a vote on it:
> >>
> >>
> >> 
https://cwiki.apache.org/confluence/display/KAFKA/KIP-

> 277+-+Fine+Grained+ACL+for+CreateTopics+API
> >>
> >> I will update the small PR to the latest KIP semantics if the vote
> passes
> >> (as I hope :-).
> >>
> >> cheers
> >> Edo
> >> --------------------------------------------------
> >>
> >> Edoardo Comar
> >>
> >> IBM Message Hub
> >>
> >> IBM UK Ltd, Hursley Park, SO21 2JN
> >> Unless stated otherwise above:
> >> IBM United Kingdom Limited - Registered in England and Wales with 
number
> >> 741598.
> >> Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire 
PO6
> 3AU
> >>
>
>
>
> --
> "When the people fear their government, there is tyranny; when the
> government fears the people, there is liberty." [Thomas Jefferson]
>



-- 
-- Guozhang



Unless stated otherwise above:
IBM United Kingdom Limited - Registered in England and Wales with number 
741598. 
Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Guozhang Wang <wa...@gmail.com>.
Hello guys,

Sorry for being late on this KIP, but while incorporating the docs of 277
and 290 I'm wondering if we should be extending the authorization with
create topics on other operations with these two KIPs:

Previously, in SimpleAclAuthorizer, "read, write, delete, or alter implies
allowing describe", but not "create" as it can only be applied on
"CLUSTER". It means that users need to specify additional rules for those
topics even if they are created by themselves.

One example of this is Kafka Streams' internal topics, before 2.0, users
need to add "create CLUSTER" plus "read / write TOPIC_NAME_LITERAL" with a
secured cluster, and I've seen some common scenarios where they forgot to
add the latter and was thinking that the created topics will be
auto-granted with read/write permissions.

Would it be natural to allow:

1. prefix wildcard "create" to imply prefix wildcard "read / write /
describe" (debatable whether we want to add "delete" and "alter" as well).
2. cluster "create" to imply "read / write / describe" on topics created by
the same user.



Guozhang




On Fri, May 25, 2018 at 5:55 AM, Edoardo Comar <ed...@gmail.com> wrote:

> Thanks Ismael, noted on the KIP
>
> On 21 May 2018 at 18:29, Ismael Juma <is...@juma.me.uk> wrote:
> > Thanks for the KIP, +1 (binding). Can you also please describe the
> > compatibility impact of changing the error code from
> > CLUSTER_AUTHORIZATION_FAILED to TOPIC_AUTHORIZATION_FAILED?
> >
> > Ismael
> >
> > On Wed, Apr 25, 2018 at 2:45 AM Edoardo Comar <EC...@uk.ibm.com> wrote:
> >
> >> Hi,
> >>
> >> The discuss thread on KIP-277 (
> >> https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html )
> >> seems to have been fruitful and concerns have been addressed, please
> allow
> >> me start a vote on it:
> >>
> >>
> >> https://cwiki.apache.org/confluence/display/KAFKA/KIP-
> 277+-+Fine+Grained+ACL+for+CreateTopics+API
> >>
> >> I will update the small PR to the latest KIP semantics if the vote
> passes
> >> (as I hope :-).
> >>
> >> cheers
> >> Edo
> >> --------------------------------------------------
> >>
> >> Edoardo Comar
> >>
> >> IBM Message Hub
> >>
> >> IBM UK Ltd, Hursley Park, SO21 2JN
> >> Unless stated otherwise above:
> >> IBM United Kingdom Limited - Registered in England and Wales with number
> >> 741598.
> >> Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6
> 3AU
> >>
>
>
>
> --
> "When the people fear their government, there is tyranny; when the
> government fears the people, there is liberty." [Thomas Jefferson]
>



-- 
-- Guozhang

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Edoardo Comar <ed...@gmail.com>.
Thanks Ismael, noted on the KIP

On 21 May 2018 at 18:29, Ismael Juma <is...@juma.me.uk> wrote:
> Thanks for the KIP, +1 (binding). Can you also please describe the
> compatibility impact of changing the error code from
> CLUSTER_AUTHORIZATION_FAILED to TOPIC_AUTHORIZATION_FAILED?
>
> Ismael
>
> On Wed, Apr 25, 2018 at 2:45 AM Edoardo Comar <EC...@uk.ibm.com> wrote:
>
>> Hi,
>>
>> The discuss thread on KIP-277 (
>> https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html )
>> seems to have been fruitful and concerns have been addressed, please allow
>> me start a vote on it:
>>
>>
>> https://cwiki.apache.org/confluence/display/KAFKA/KIP-277+-+Fine+Grained+ACL+for+CreateTopics+API
>>
>> I will update the small PR to the latest KIP semantics if the vote passes
>> (as I hope :-).
>>
>> cheers
>> Edo
>> --------------------------------------------------
>>
>> Edoardo Comar
>>
>> IBM Message Hub
>>
>> IBM UK Ltd, Hursley Park, SO21 2JN
>> Unless stated otherwise above:
>> IBM United Kingdom Limited - Registered in England and Wales with number
>> 741598.
>> Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU
>>



-- 
"When the people fear their government, there is tyranny; when the
government fears the people, there is liberty." [Thomas Jefferson]

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Ismael Juma <is...@juma.me.uk>.
Thanks for the KIP, +1 (binding). Can you also please describe the
compatibility impact of changing the error code from
CLUSTER_AUTHORIZATION_FAILED to TOPIC_AUTHORIZATION_FAILED?

Ismael

On Wed, Apr 25, 2018 at 2:45 AM Edoardo Comar <EC...@uk.ibm.com> wrote:

> Hi,
>
> The discuss thread on KIP-277 (
> https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html )
> seems to have been fruitful and concerns have been addressed, please allow
> me start a vote on it:
>
>
> https://cwiki.apache.org/confluence/display/KAFKA/KIP-277+-+Fine+Grained+ACL+for+CreateTopics+API
>
> I will update the small PR to the latest KIP semantics if the vote passes
> (as I hope :-).
>
> cheers
> Edo
> --------------------------------------------------
>
> Edoardo Comar
>
> IBM Message Hub
>
> IBM UK Ltd, Hursley Park, SO21 2JN
> Unless stated otherwise above:
> IBM United Kingdom Limited - Registered in England and Wales with number
> 741598.
> Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU
>

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Edoardo Comar <ed...@gmail.com>.
Hi All

I think I can close the vote as KIP-277  is approved with the
following +1 votes (and no -1s)

binding: Guozhang, Rajini, Damian
non-binding: Ted, Stephane, Vahid, Colin, Manikumar, Matt

Thanks to everyone who reviewed and voted on the KIP.


On 21 May 2018 at 13:12, Damian Guy <da...@gmail.com> wrote:
> +1 (binding)
>
> Thanks
>
> On Mon, 21 May 2018 at 11:26 Edoardo Comar <ed...@gmail.com> wrote:
>
>> Hi, KIP freeze is tomorrow. Anyone else would like to cast their vote ?
>>
>> voting so far :
>> binding: Guozhang, Rajini
>> non-binding: Ted, Stephane, Vahid, Colin, Manikumar, Matt
>>
>> On 18 May 2018 at 09:38, Edoardo Comar <ed...@gmail.com> wrote:
>> > bumping again as this KIP is still missing one binding vote ...
>> >
>> > voting so far :
>> > binding: Guozhang, Rajini
>> > non-binding: Ted, Stephane, Vahid, Colin, Manikumar, Matt
>> >
>> > Edo
>> >
>> > On 17 May 2018 at 03:15, Matt Farmer <ma...@frmr.me> wrote:
>> >> +1 (non-binding)
>> >>
>> >> On Tue, May 15, 2018 at 4:26 AM, Edoardo Comar <ed...@gmail.com>
>> wrote:
>> >>
>> >>> Hi,
>> >>> bumping the thread as the current vote count for this KIP is
>> >>> 2 binding +1
>> >>> 5 non-binding +1
>> >>>
>> >>> thanks, Edo
>> >>>
>> >>> On 8 May 2018 at 16:14, Edoardo Comar <ed...@gmail.com> wrote:
>> >>> > Hi,
>> >>> > bumping the thread as the current vote count for this KIP is
>> >>> > 2 binding +1
>> >>> > 5 non-binding +1
>> >>> >
>> >>> > so still missing a binding vote please
>> >>> >
>> >>> > thanks,
>> >>> > Edo
>> >>> >
>> >>> >
>> >>> > On 30 April 2018 at 12:49, Manikumar <ma...@gmail.com>
>> wrote:
>> >>> >>
>> >>> >> +1 (non-binding)
>> >>> >>
>> >>> >> Thanks
>> >>> >>
>> >>> >> On Thu, Apr 26, 2018 at 9:59 PM, Colin McCabe <cm...@apache.org>
>> >>> wrote:
>> >>> >>
>> >>> >> > +1 (non-binding)
>> >>> >> >
>> >>> >> > best,
>> >>> >> > Colin
>> >>> >> >
>> >>> >> >
>> >>> >> > On Wed, Apr 25, 2018, at 02:45, Edoardo Comar wrote:
>> >>> >> > > Hi,
>> >>> >> > >
>> >>> >> > > The discuss thread on KIP-277 (
>> >>> >> > > https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html
>> )
>> >>> >> > > seems to have been fruitful and concerns have been addressed,
>> please
>> >>> >> > allow
>> >>> >> > > me start a vote on it:
>> >>> >> > >
>> >>> >> > > https://cwiki.apache.org/confluence/display/KAFKA/KIP-
>> >>> >> > 277+-+Fine+Grained+ACL+for+CreateTopics+API
>> >>> >> > >
>> >>> >> > > I will update the small PR to the latest KIP semantics if the
>> vote
>> >>> >> > passes
>> >>> >> > > (as I hope :-).
>> >>> >> > >
>> >>> >> > > cheers
>> >>> >> > > Edo
>> >>> >> > > --------------------------------------------------
>> >>> >> > >
>> >>> >> > > Edoardo Comar
>> >>> >> > >
>> >>> >> > > IBM Message Hub
>> >>> >> > >
>> >>> >> > > IBM UK Ltd, Hursley Park, SO21 2JN
>> >>> >> > > Unless stated otherwise above:
>> >>> >> > > IBM United Kingdom Limited - Registered in England and Wales
>> with
>> >>> >> > > number
>> >>> >> > > 741598.
>> >>> >> > > Registered office: PO Box 41, North Harbour, Portsmouth,
>> Hampshire
>> >>> PO6
>> >>> >> > 3AU
>> >>> >> >
>> >>> >
>> >>> >
>> >>> >
>> >>> >
>> >>> > --
>> >>> > "When the people fear their government, there is tyranny; when the
>> >>> > government fears the people, there is liberty." [Thomas Jefferson]
>> >>> >
>> >>>
>> >>>
>> >>>
>> >>> --
>> >>> "When the people fear their government, there is tyranny; when the
>> >>> government fears the people, there is liberty." [Thomas Jefferson]
>> >>>
>> >
>> >
>> >
>> > --
>> > "When the people fear their government, there is tyranny; when the
>> > government fears the people, there is liberty." [Thomas Jefferson]
>>
>>
>>
>> --
>> "When the people fear their government, there is tyranny; when the
>> government fears the people, there is liberty." [Thomas Jefferson]
>>



-- 
"When the people fear their government, there is tyranny; when the
government fears the people, there is liberty." [Thomas Jefferson]

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Damian Guy <da...@gmail.com>.
+1 (binding)

Thanks

On Mon, 21 May 2018 at 11:26 Edoardo Comar <ed...@gmail.com> wrote:

> Hi, KIP freeze is tomorrow. Anyone else would like to cast their vote ?
>
> voting so far :
> binding: Guozhang, Rajini
> non-binding: Ted, Stephane, Vahid, Colin, Manikumar, Matt
>
> On 18 May 2018 at 09:38, Edoardo Comar <ed...@gmail.com> wrote:
> > bumping again as this KIP is still missing one binding vote ...
> >
> > voting so far :
> > binding: Guozhang, Rajini
> > non-binding: Ted, Stephane, Vahid, Colin, Manikumar, Matt
> >
> > Edo
> >
> > On 17 May 2018 at 03:15, Matt Farmer <ma...@frmr.me> wrote:
> >> +1 (non-binding)
> >>
> >> On Tue, May 15, 2018 at 4:26 AM, Edoardo Comar <ed...@gmail.com>
> wrote:
> >>
> >>> Hi,
> >>> bumping the thread as the current vote count for this KIP is
> >>> 2 binding +1
> >>> 5 non-binding +1
> >>>
> >>> thanks, Edo
> >>>
> >>> On 8 May 2018 at 16:14, Edoardo Comar <ed...@gmail.com> wrote:
> >>> > Hi,
> >>> > bumping the thread as the current vote count for this KIP is
> >>> > 2 binding +1
> >>> > 5 non-binding +1
> >>> >
> >>> > so still missing a binding vote please
> >>> >
> >>> > thanks,
> >>> > Edo
> >>> >
> >>> >
> >>> > On 30 April 2018 at 12:49, Manikumar <ma...@gmail.com>
> wrote:
> >>> >>
> >>> >> +1 (non-binding)
> >>> >>
> >>> >> Thanks
> >>> >>
> >>> >> On Thu, Apr 26, 2018 at 9:59 PM, Colin McCabe <cm...@apache.org>
> >>> wrote:
> >>> >>
> >>> >> > +1 (non-binding)
> >>> >> >
> >>> >> > best,
> >>> >> > Colin
> >>> >> >
> >>> >> >
> >>> >> > On Wed, Apr 25, 2018, at 02:45, Edoardo Comar wrote:
> >>> >> > > Hi,
> >>> >> > >
> >>> >> > > The discuss thread on KIP-277 (
> >>> >> > > https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html
> )
> >>> >> > > seems to have been fruitful and concerns have been addressed,
> please
> >>> >> > allow
> >>> >> > > me start a vote on it:
> >>> >> > >
> >>> >> > > https://cwiki.apache.org/confluence/display/KAFKA/KIP-
> >>> >> > 277+-+Fine+Grained+ACL+for+CreateTopics+API
> >>> >> > >
> >>> >> > > I will update the small PR to the latest KIP semantics if the
> vote
> >>> >> > passes
> >>> >> > > (as I hope :-).
> >>> >> > >
> >>> >> > > cheers
> >>> >> > > Edo
> >>> >> > > --------------------------------------------------
> >>> >> > >
> >>> >> > > Edoardo Comar
> >>> >> > >
> >>> >> > > IBM Message Hub
> >>> >> > >
> >>> >> > > IBM UK Ltd, Hursley Park, SO21 2JN
> >>> >> > > Unless stated otherwise above:
> >>> >> > > IBM United Kingdom Limited - Registered in England and Wales
> with
> >>> >> > > number
> >>> >> > > 741598.
> >>> >> > > Registered office: PO Box 41, North Harbour, Portsmouth,
> Hampshire
> >>> PO6
> >>> >> > 3AU
> >>> >> >
> >>> >
> >>> >
> >>> >
> >>> >
> >>> > --
> >>> > "When the people fear their government, there is tyranny; when the
> >>> > government fears the people, there is liberty." [Thomas Jefferson]
> >>> >
> >>>
> >>>
> >>>
> >>> --
> >>> "When the people fear their government, there is tyranny; when the
> >>> government fears the people, there is liberty." [Thomas Jefferson]
> >>>
> >
> >
> >
> > --
> > "When the people fear their government, there is tyranny; when the
> > government fears the people, there is liberty." [Thomas Jefferson]
>
>
>
> --
> "When the people fear their government, there is tyranny; when the
> government fears the people, there is liberty." [Thomas Jefferson]
>

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Edoardo Comar <ed...@gmail.com>.
Hi, KIP freeze is tomorrow. Anyone else would like to cast their vote ?

voting so far :
binding: Guozhang, Rajini
non-binding: Ted, Stephane, Vahid, Colin, Manikumar, Matt

On 18 May 2018 at 09:38, Edoardo Comar <ed...@gmail.com> wrote:
> bumping again as this KIP is still missing one binding vote ...
>
> voting so far :
> binding: Guozhang, Rajini
> non-binding: Ted, Stephane, Vahid, Colin, Manikumar, Matt
>
> Edo
>
> On 17 May 2018 at 03:15, Matt Farmer <ma...@frmr.me> wrote:
>> +1 (non-binding)
>>
>> On Tue, May 15, 2018 at 4:26 AM, Edoardo Comar <ed...@gmail.com> wrote:
>>
>>> Hi,
>>> bumping the thread as the current vote count for this KIP is
>>> 2 binding +1
>>> 5 non-binding +1
>>>
>>> thanks, Edo
>>>
>>> On 8 May 2018 at 16:14, Edoardo Comar <ed...@gmail.com> wrote:
>>> > Hi,
>>> > bumping the thread as the current vote count for this KIP is
>>> > 2 binding +1
>>> > 5 non-binding +1
>>> >
>>> > so still missing a binding vote please
>>> >
>>> > thanks,
>>> > Edo
>>> >
>>> >
>>> > On 30 April 2018 at 12:49, Manikumar <ma...@gmail.com> wrote:
>>> >>
>>> >> +1 (non-binding)
>>> >>
>>> >> Thanks
>>> >>
>>> >> On Thu, Apr 26, 2018 at 9:59 PM, Colin McCabe <cm...@apache.org>
>>> wrote:
>>> >>
>>> >> > +1 (non-binding)
>>> >> >
>>> >> > best,
>>> >> > Colin
>>> >> >
>>> >> >
>>> >> > On Wed, Apr 25, 2018, at 02:45, Edoardo Comar wrote:
>>> >> > > Hi,
>>> >> > >
>>> >> > > The discuss thread on KIP-277 (
>>> >> > > https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html )
>>> >> > > seems to have been fruitful and concerns have been addressed, please
>>> >> > allow
>>> >> > > me start a vote on it:
>>> >> > >
>>> >> > > https://cwiki.apache.org/confluence/display/KAFKA/KIP-
>>> >> > 277+-+Fine+Grained+ACL+for+CreateTopics+API
>>> >> > >
>>> >> > > I will update the small PR to the latest KIP semantics if the vote
>>> >> > passes
>>> >> > > (as I hope :-).
>>> >> > >
>>> >> > > cheers
>>> >> > > Edo
>>> >> > > --------------------------------------------------
>>> >> > >
>>> >> > > Edoardo Comar
>>> >> > >
>>> >> > > IBM Message Hub
>>> >> > >
>>> >> > > IBM UK Ltd, Hursley Park, SO21 2JN
>>> >> > > Unless stated otherwise above:
>>> >> > > IBM United Kingdom Limited - Registered in England and Wales with
>>> >> > > number
>>> >> > > 741598.
>>> >> > > Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire
>>> PO6
>>> >> > 3AU
>>> >> >
>>> >
>>> >
>>> >
>>> >
>>> > --
>>> > "When the people fear their government, there is tyranny; when the
>>> > government fears the people, there is liberty." [Thomas Jefferson]
>>> >
>>>
>>>
>>>
>>> --
>>> "When the people fear their government, there is tyranny; when the
>>> government fears the people, there is liberty." [Thomas Jefferson]
>>>
>
>
>
> --
> "When the people fear their government, there is tyranny; when the
> government fears the people, there is liberty." [Thomas Jefferson]



-- 
"When the people fear their government, there is tyranny; when the
government fears the people, there is liberty." [Thomas Jefferson]

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Edoardo Comar <ed...@gmail.com>.
bumping again as this KIP is still missing one binding vote ...

voting so far :
binding: Guozhang, Rajini
non-binding: Ted, Stephane, Vahid, Colin, Manikumar, Matt

Edo

On 17 May 2018 at 03:15, Matt Farmer <ma...@frmr.me> wrote:
> +1 (non-binding)
>
> On Tue, May 15, 2018 at 4:26 AM, Edoardo Comar <ed...@gmail.com> wrote:
>
>> Hi,
>> bumping the thread as the current vote count for this KIP is
>> 2 binding +1
>> 5 non-binding +1
>>
>> thanks, Edo
>>
>> On 8 May 2018 at 16:14, Edoardo Comar <ed...@gmail.com> wrote:
>> > Hi,
>> > bumping the thread as the current vote count for this KIP is
>> > 2 binding +1
>> > 5 non-binding +1
>> >
>> > so still missing a binding vote please
>> >
>> > thanks,
>> > Edo
>> >
>> >
>> > On 30 April 2018 at 12:49, Manikumar <ma...@gmail.com> wrote:
>> >>
>> >> +1 (non-binding)
>> >>
>> >> Thanks
>> >>
>> >> On Thu, Apr 26, 2018 at 9:59 PM, Colin McCabe <cm...@apache.org>
>> wrote:
>> >>
>> >> > +1 (non-binding)
>> >> >
>> >> > best,
>> >> > Colin
>> >> >
>> >> >
>> >> > On Wed, Apr 25, 2018, at 02:45, Edoardo Comar wrote:
>> >> > > Hi,
>> >> > >
>> >> > > The discuss thread on KIP-277 (
>> >> > > https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html )
>> >> > > seems to have been fruitful and concerns have been addressed, please
>> >> > allow
>> >> > > me start a vote on it:
>> >> > >
>> >> > > https://cwiki.apache.org/confluence/display/KAFKA/KIP-
>> >> > 277+-+Fine+Grained+ACL+for+CreateTopics+API
>> >> > >
>> >> > > I will update the small PR to the latest KIP semantics if the vote
>> >> > passes
>> >> > > (as I hope :-).
>> >> > >
>> >> > > cheers
>> >> > > Edo
>> >> > > --------------------------------------------------
>> >> > >
>> >> > > Edoardo Comar
>> >> > >
>> >> > > IBM Message Hub
>> >> > >
>> >> > > IBM UK Ltd, Hursley Park, SO21 2JN
>> >> > > Unless stated otherwise above:
>> >> > > IBM United Kingdom Limited - Registered in England and Wales with
>> >> > > number
>> >> > > 741598.
>> >> > > Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire
>> PO6
>> >> > 3AU
>> >> >
>> >
>> >
>> >
>> >
>> > --
>> > "When the people fear their government, there is tyranny; when the
>> > government fears the people, there is liberty." [Thomas Jefferson]
>> >
>>
>>
>>
>> --
>> "When the people fear their government, there is tyranny; when the
>> government fears the people, there is liberty." [Thomas Jefferson]
>>



-- 
"When the people fear their government, there is tyranny; when the
government fears the people, there is liberty." [Thomas Jefferson]

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Matt Farmer <ma...@frmr.me>.
+1 (non-binding)

On Tue, May 15, 2018 at 4:26 AM, Edoardo Comar <ed...@gmail.com> wrote:

> Hi,
> bumping the thread as the current vote count for this KIP is
> 2 binding +1
> 5 non-binding +1
>
> thanks, Edo
>
> On 8 May 2018 at 16:14, Edoardo Comar <ed...@gmail.com> wrote:
> > Hi,
> > bumping the thread as the current vote count for this KIP is
> > 2 binding +1
> > 5 non-binding +1
> >
> > so still missing a binding vote please
> >
> > thanks,
> > Edo
> >
> >
> > On 30 April 2018 at 12:49, Manikumar <ma...@gmail.com> wrote:
> >>
> >> +1 (non-binding)
> >>
> >> Thanks
> >>
> >> On Thu, Apr 26, 2018 at 9:59 PM, Colin McCabe <cm...@apache.org>
> wrote:
> >>
> >> > +1 (non-binding)
> >> >
> >> > best,
> >> > Colin
> >> >
> >> >
> >> > On Wed, Apr 25, 2018, at 02:45, Edoardo Comar wrote:
> >> > > Hi,
> >> > >
> >> > > The discuss thread on KIP-277 (
> >> > > https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html )
> >> > > seems to have been fruitful and concerns have been addressed, please
> >> > allow
> >> > > me start a vote on it:
> >> > >
> >> > > https://cwiki.apache.org/confluence/display/KAFKA/KIP-
> >> > 277+-+Fine+Grained+ACL+for+CreateTopics+API
> >> > >
> >> > > I will update the small PR to the latest KIP semantics if the vote
> >> > passes
> >> > > (as I hope :-).
> >> > >
> >> > > cheers
> >> > > Edo
> >> > > --------------------------------------------------
> >> > >
> >> > > Edoardo Comar
> >> > >
> >> > > IBM Message Hub
> >> > >
> >> > > IBM UK Ltd, Hursley Park, SO21 2JN
> >> > > Unless stated otherwise above:
> >> > > IBM United Kingdom Limited - Registered in England and Wales with
> >> > > number
> >> > > 741598.
> >> > > Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire
> PO6
> >> > 3AU
> >> >
> >
> >
> >
> >
> > --
> > "When the people fear their government, there is tyranny; when the
> > government fears the people, there is liberty." [Thomas Jefferson]
> >
>
>
>
> --
> "When the people fear their government, there is tyranny; when the
> government fears the people, there is liberty." [Thomas Jefferson]
>

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Edoardo Comar <ed...@gmail.com>.
Hi,
bumping the thread as the current vote count for this KIP is
2 binding +1
5 non-binding +1

thanks, Edo

On 8 May 2018 at 16:14, Edoardo Comar <ed...@gmail.com> wrote:
> Hi,
> bumping the thread as the current vote count for this KIP is
> 2 binding +1
> 5 non-binding +1
>
> so still missing a binding vote please
>
> thanks,
> Edo
>
>
> On 30 April 2018 at 12:49, Manikumar <ma...@gmail.com> wrote:
>>
>> +1 (non-binding)
>>
>> Thanks
>>
>> On Thu, Apr 26, 2018 at 9:59 PM, Colin McCabe <cm...@apache.org> wrote:
>>
>> > +1 (non-binding)
>> >
>> > best,
>> > Colin
>> >
>> >
>> > On Wed, Apr 25, 2018, at 02:45, Edoardo Comar wrote:
>> > > Hi,
>> > >
>> > > The discuss thread on KIP-277 (
>> > > https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html )
>> > > seems to have been fruitful and concerns have been addressed, please
>> > allow
>> > > me start a vote on it:
>> > >
>> > > https://cwiki.apache.org/confluence/display/KAFKA/KIP-
>> > 277+-+Fine+Grained+ACL+for+CreateTopics+API
>> > >
>> > > I will update the small PR to the latest KIP semantics if the vote
>> > passes
>> > > (as I hope :-).
>> > >
>> > > cheers
>> > > Edo
>> > > --------------------------------------------------
>> > >
>> > > Edoardo Comar
>> > >
>> > > IBM Message Hub
>> > >
>> > > IBM UK Ltd, Hursley Park, SO21 2JN
>> > > Unless stated otherwise above:
>> > > IBM United Kingdom Limited - Registered in England and Wales with
>> > > number
>> > > 741598.
>> > > Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6
>> > 3AU
>> >
>
>
>
>
> --
> "When the people fear their government, there is tyranny; when the
> government fears the people, there is liberty." [Thomas Jefferson]
>



-- 
"When the people fear their government, there is tyranny; when the
government fears the people, there is liberty." [Thomas Jefferson]

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Edoardo Comar <ed...@gmail.com>.
Hi,
bumping the thread as the current vote count for this KIP is
2 binding +1
5 non-binding +1

so still missing a binding vote please

thanks,
Edo


On 30 April 2018 at 12:49, Manikumar <ma...@gmail.com> wrote:

> +1 (non-binding)
>
> Thanks
>
> On Thu, Apr 26, 2018 at 9:59 PM, Colin McCabe <cm...@apache.org> wrote:
>
> > +1 (non-binding)
> >
> > best,
> > Colin
> >
> >
> > On Wed, Apr 25, 2018, at 02:45, Edoardo Comar wrote:
> > > Hi,
> > >
> > > The discuss thread on KIP-277 (
> > > https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html )
> > > seems to have been fruitful and concerns have been addressed, please
> > allow
> > > me start a vote on it:
> > >
> > > https://cwiki.apache.org/confluence/display/KAFKA/KIP-
> > 277+-+Fine+Grained+ACL+for+CreateTopics+API
> > >
> > > I will update the small PR to the latest KIP semantics if the vote
> > passes
> > > (as I hope :-).
> > >
> > > cheers
> > > Edo
> > > --------------------------------------------------
> > >
> > > Edoardo Comar
> > >
> > > IBM Message Hub
> > >
> > > IBM UK Ltd, Hursley Park, SO21 2JN
> > > Unless stated otherwise above:
> > > IBM United Kingdom Limited - Registered in England and Wales with
> number
> > > 741598.
> > > Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6
> > 3AU
> >
>



-- 
"When the people fear their government, there is tyranny; when the
government fears the people, there is liberty." [Thomas Jefferson]

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Manikumar <ma...@gmail.com>.
+1 (non-binding)

Thanks

On Thu, Apr 26, 2018 at 9:59 PM, Colin McCabe <cm...@apache.org> wrote:

> +1 (non-binding)
>
> best,
> Colin
>
>
> On Wed, Apr 25, 2018, at 02:45, Edoardo Comar wrote:
> > Hi,
> >
> > The discuss thread on KIP-277 (
> > https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html )
> > seems to have been fruitful and concerns have been addressed, please
> allow
> > me start a vote on it:
> >
> > https://cwiki.apache.org/confluence/display/KAFKA/KIP-
> 277+-+Fine+Grained+ACL+for+CreateTopics+API
> >
> > I will update the small PR to the latest KIP semantics if the vote
> passes
> > (as I hope :-).
> >
> > cheers
> > Edo
> > --------------------------------------------------
> >
> > Edoardo Comar
> >
> > IBM Message Hub
> >
> > IBM UK Ltd, Hursley Park, SO21 2JN
> > Unless stated otherwise above:
> > IBM United Kingdom Limited - Registered in England and Wales with number
> > 741598.
> > Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6
> 3AU
>

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Colin McCabe <cm...@apache.org>.
+1 (non-binding)

best,
Colin


On Wed, Apr 25, 2018, at 02:45, Edoardo Comar wrote:
> Hi,
> 
> The discuss thread on KIP-277 ( 
> https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html ) 
> seems to have been fruitful and concerns have been addressed, please allow 
> me start a vote on it:
> 
> https://cwiki.apache.org/confluence/display/KAFKA/KIP-277+-+Fine+Grained+ACL+for+CreateTopics+API
> 
> I will update the small PR to the latest KIP semantics if the vote passes 
> (as I hope :-).
> 
> cheers
> Edo
> --------------------------------------------------
> 
> Edoardo Comar
> 
> IBM Message Hub
> 
> IBM UK Ltd, Hursley Park, SO21 2JN
> Unless stated otherwise above:
> IBM United Kingdom Limited - Registered in England and Wales with number 
> 741598. 
> Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Vahid S Hashemian <va...@us.ibm.com>.
+1 (non-binding)

Thanks Edo.
--Vahid



From:   Rajini Sivaram <ra...@gmail.com>
To:     dev <de...@kafka.apache.org>
Date:   04/26/2018 12:28 AM
Subject:        Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API



Hi Edo. Thanks for the KIP.

+1 (binding)

On Thu, Apr 26, 2018 at 2:38 AM, Stephane Maarek <
stephane@simplemachines.com.au> wrote:

> +1
>
> On Thu., 26 Apr. 2018, 4:19 am Ted Yu, <yu...@gmail.com> wrote:
>
> > +1
> >
> > On Wed, Apr 25, 2018 at 3:24 PM, Guozhang Wang <wa...@gmail.com>
> wrote:
> >
> > > Thanks Edo, +1 from me.
> > >
> > >
> > > Guozhang
> > >
> > > On Wed, Apr 25, 2018 at 2:45 AM, Edoardo Comar <EC...@uk.ibm.com>
> > wrote:
> > >
> > > > Hi,
> > > >
> > > > The discuss thread on KIP-277 (
> > > > 
https://urldefense.proofpoint.com/v2/url?u=https-3A__www.mail-2Darchive.com_dev-40kafka.apache.org_msg86540.html&d=DwIBaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Q_itwloTQj3_xUKl7Nzswo6KE4Nj-kjJc7uSVcviKUc&m=GmwYJn9TTN2vPUFd_pnI6RcJef3laSowrGqhgjskKr4&s=_cOhBrxOkOxVu-xnAyfEVSR4C2Yt30lY96rMfUkK9vQ&e= 
)
> > > > seems to have been fruitful and concerns have been addressed, 
please
> > > allow
> > > > me start a vote on it:
> > > >
> > > > 
https://urldefense.proofpoint.com/v2/url?u=https-3A__cwiki.apache.org_confluence_display_KAFKA_KIP-2D&d=DwIBaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=Q_itwloTQj3_xUKl7Nzswo6KE4Nj-kjJc7uSVcviKUc&m=GmwYJn9TTN2vPUFd_pnI6RcJef3laSowrGqhgjskKr4&s=OXqRHcveaNkSVVY4OYkqIuFlodYcsTqdGmB8Z_Xk-WQ&e=

> > > > 277+-+Fine+Grained+ACL+for+CreateTopics+API
> > > >
> > > > I will update the small PR to the latest KIP semantics if the vote
> > passes
> > > > (as I hope :-).
> > > >
> > > > cheers
> > > > Edo
> > > > --------------------------------------------------
> > > >
> > > > Edoardo Comar
> > > >
> > > > IBM Message Hub
> > > >
> > > > IBM UK Ltd, Hursley Park, SO21 2JN
> > > > Unless stated otherwise above:
> > > > IBM United Kingdom Limited - Registered in England and Wales with
> > number
> > > > 741598.
> > > > Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire
> PO6
> > > 3AU
> > > >
> > >
> > >
> > >
> > > --
> > > -- Guozhang
> > >
> >
>





Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Rajini Sivaram <ra...@gmail.com>.
Hi Edo. Thanks for the KIP.

+1 (binding)

On Thu, Apr 26, 2018 at 2:38 AM, Stephane Maarek <
stephane@simplemachines.com.au> wrote:

> +1
>
> On Thu., 26 Apr. 2018, 4:19 am Ted Yu, <yu...@gmail.com> wrote:
>
> > +1
> >
> > On Wed, Apr 25, 2018 at 3:24 PM, Guozhang Wang <wa...@gmail.com>
> wrote:
> >
> > > Thanks Edo, +1 from me.
> > >
> > >
> > > Guozhang
> > >
> > > On Wed, Apr 25, 2018 at 2:45 AM, Edoardo Comar <EC...@uk.ibm.com>
> > wrote:
> > >
> > > > Hi,
> > > >
> > > > The discuss thread on KIP-277 (
> > > > https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html )
> > > > seems to have been fruitful and concerns have been addressed, please
> > > allow
> > > > me start a vote on it:
> > > >
> > > > https://cwiki.apache.org/confluence/display/KAFKA/KIP-
> > > > 277+-+Fine+Grained+ACL+for+CreateTopics+API
> > > >
> > > > I will update the small PR to the latest KIP semantics if the vote
> > passes
> > > > (as I hope :-).
> > > >
> > > > cheers
> > > > Edo
> > > > --------------------------------------------------
> > > >
> > > > Edoardo Comar
> > > >
> > > > IBM Message Hub
> > > >
> > > > IBM UK Ltd, Hursley Park, SO21 2JN
> > > > Unless stated otherwise above:
> > > > IBM United Kingdom Limited - Registered in England and Wales with
> > number
> > > > 741598.
> > > > Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire
> PO6
> > > 3AU
> > > >
> > >
> > >
> > >
> > > --
> > > -- Guozhang
> > >
> >
>

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Stephane Maarek <st...@simplemachines.com.au>.
+1

On Thu., 26 Apr. 2018, 4:19 am Ted Yu, <yu...@gmail.com> wrote:

> +1
>
> On Wed, Apr 25, 2018 at 3:24 PM, Guozhang Wang <wa...@gmail.com> wrote:
>
> > Thanks Edo, +1 from me.
> >
> >
> > Guozhang
> >
> > On Wed, Apr 25, 2018 at 2:45 AM, Edoardo Comar <EC...@uk.ibm.com>
> wrote:
> >
> > > Hi,
> > >
> > > The discuss thread on KIP-277 (
> > > https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html )
> > > seems to have been fruitful and concerns have been addressed, please
> > allow
> > > me start a vote on it:
> > >
> > > https://cwiki.apache.org/confluence/display/KAFKA/KIP-
> > > 277+-+Fine+Grained+ACL+for+CreateTopics+API
> > >
> > > I will update the small PR to the latest KIP semantics if the vote
> passes
> > > (as I hope :-).
> > >
> > > cheers
> > > Edo
> > > --------------------------------------------------
> > >
> > > Edoardo Comar
> > >
> > > IBM Message Hub
> > >
> > > IBM UK Ltd, Hursley Park, SO21 2JN
> > > Unless stated otherwise above:
> > > IBM United Kingdom Limited - Registered in England and Wales with
> number
> > > 741598.
> > > Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6
> > 3AU
> > >
> >
> >
> >
> > --
> > -- Guozhang
> >
>

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Ted Yu <yu...@gmail.com>.
+1

On Wed, Apr 25, 2018 at 3:24 PM, Guozhang Wang <wa...@gmail.com> wrote:

> Thanks Edo, +1 from me.
>
>
> Guozhang
>
> On Wed, Apr 25, 2018 at 2:45 AM, Edoardo Comar <EC...@uk.ibm.com> wrote:
>
> > Hi,
> >
> > The discuss thread on KIP-277 (
> > https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html )
> > seems to have been fruitful and concerns have been addressed, please
> allow
> > me start a vote on it:
> >
> > https://cwiki.apache.org/confluence/display/KAFKA/KIP-
> > 277+-+Fine+Grained+ACL+for+CreateTopics+API
> >
> > I will update the small PR to the latest KIP semantics if the vote passes
> > (as I hope :-).
> >
> > cheers
> > Edo
> > --------------------------------------------------
> >
> > Edoardo Comar
> >
> > IBM Message Hub
> >
> > IBM UK Ltd, Hursley Park, SO21 2JN
> > Unless stated otherwise above:
> > IBM United Kingdom Limited - Registered in England and Wales with number
> > 741598.
> > Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6
> 3AU
> >
>
>
>
> --
> -- Guozhang
>

Re: [VOTE] KIP-277 - Fine Grained ACL for CreateTopics API

Posted by Guozhang Wang <wa...@gmail.com>.
Thanks Edo, +1 from me.


Guozhang

On Wed, Apr 25, 2018 at 2:45 AM, Edoardo Comar <EC...@uk.ibm.com> wrote:

> Hi,
>
> The discuss thread on KIP-277 (
> https://www.mail-archive.com/dev@kafka.apache.org/msg86540.html )
> seems to have been fruitful and concerns have been addressed, please allow
> me start a vote on it:
>
> https://cwiki.apache.org/confluence/display/KAFKA/KIP-
> 277+-+Fine+Grained+ACL+for+CreateTopics+API
>
> I will update the small PR to the latest KIP semantics if the vote passes
> (as I hope :-).
>
> cheers
> Edo
> --------------------------------------------------
>
> Edoardo Comar
>
> IBM Message Hub
>
> IBM UK Ltd, Hursley Park, SO21 2JN
> Unless stated otherwise above:
> IBM United Kingdom Limited - Registered in England and Wales with number
> 741598.
> Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU
>



-- 
-- Guozhang