KIP-290 — Support for Prefixed ACLs

Accepted Kafka 2.0 Security

KIP-290 adds prefix-based ACL resource patterns to Kafka's authorization model, allowing a single ACL to grant access to all resources whose names start with a given prefix. Without prefix ACLs, granting a principal access to a namespace of topics requires creating one ACL per topic name, which is operationally expensive and requires ACL updates whenever new topics are added.

Protocol Impact

DescribeAcls · CreateAcls · DeleteAcls

Details