Search code examples
restapache-kafkaaclkafka-consumer-api

Consumer group ACL of kafka rest

Does consumer group ACL will be checked when using kafka rest to consumer messages? I configure kafka-rest with:

zookeeper.connect=localhost:2181
bootstrap.servers=SASL_PLAINTEXT://localhost:9093
client.security.protocol=SASL_PLAINTEXT
client.sasl.mechanism=PLAIN

But the consumer group ACL doesn't be checked. Since the message in kafka broker is read as ANONYMOUS. This is used by PLAINTEXT, but I've configured with SASL_PLAINTEXT.

Solution

  • With the Kafka rest proxy, the ACL that will be checked is for the user running the rest proxy. Not the user submitting the request to the rest proxy unless you do some code changes or use the confluent security plugins.