KIP-38 — ZooKeeper Authentication

Accepted Security

Adds SASL-based ZooKeeper authentication to Kafka brokers so that the metadata stored in ZooKeeper is only accessible to authenticated clients, using ZooKeeper ACLs to restrict write access. ZooKeeper metadata is currently world-readable and world-writable, allowing any client with ZooKeeper ensemble access to corrupt cluster metadata.

Details