KIP-965 — Support disaster recovery between clusters by MirrorMaker
Discussion MirrorMakerSecurity
Adds sync.full.acl.enabled to MirrorMaker2 configuration, enabling full replication of topic read/write ACLs, consumer group ACLs, and user SCRAM credentials to the target cluster for disaster recovery standby scenarios. By default MM2 downgrades ALLOW ALL ACLs to ALLOW READ to prevent writes to the mirror, which breaks transparent failover when the target cluster needs to become the active cluster.
Details
| Author | hudeqi |
| Status | Discussion |
| JIRA | KAFKA-15172 |
| Wiki | View on Apache Wiki |
| Created | 2023-08-08 |
| Last Modified | 2023-08-09 |
Explore how this KIP affects the Kafka protocol in the Protocol Explorer, or see the full KIP database.