conduktor.io ↗

KIP-565 — Using AclCommand,avoid call the global method loadcache in SimpleAclAuthorizer

Accepted SecurityAdmin

Fixes `AclCommand` (the `kafka-acls.sh` CLI) to avoid invoking `SimpleAclAuthorizer.loadCache()` when not strictly necessary for the requested operation (e.g., add/delete ACL). On clusters with 20,000+ topics, `loadCache()` reads all ACL znodes from ZooKeeper into memory, turning a simple ACL mutation into a minutes-long operation.

Details

AuthorStevenLuMT
StatusAccepted
JIRAKAFKA-9424
WikiView on Apache Wiki
Created2019-12-07
Last Modified2020-01-21
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.