conduktor.io ↗

KIP-801 — Implement an Authorizer that stores metadata in __cluster_metadata

Accepted Kafka 3.2 SecurityKRaft

Introduces `StandardAuthorizer`, a new built-in KRaft-native authorizer that stores ACLs in the `__cluster_metadata` topic instead of ZooKeeper. In KRaft mode the existing `AclAuthorizer` still required a ZooKeeper instance, which defeated the goal of removing ZooKeeper entirely.

Protocol Impact

Envelope

Details

AuthorColin McCabe
StatusAccepted
Kafka Version3.2
JIRAKAFKA-13646
WikiView on Apache Wiki
Created2021-11-23
Last Modified2022-02-04
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.