What is CreateAcls?
Grants principals access to resources via kafka-acls.sh --add. Changes take effect immediately (no restart needed), but ACL propagation across brokers is eventually consistent via ZooKeeper or KRaft metadata, leaving a short window where a new ACL might not be enforced cluster-wide.
Wire Diagram
Response Header · flexible
message_size
int32 · 4B
correlation_id
int32 · 4B
tagged
var
CreateAclsResponse v3
ThrottleTimeMs
int32 · 4B
tagged
var
ErrorCode
int16 · 2B
ErrorMessage?
string (compact)
tagged
var
Schema & Example
Schema { "ThrottleTimeMs": int32, "Results": [{ "ErrorCode": int16, "ErrorMessage": string? }] }
Example { "ThrottleTimeMs": 0, "Results": [{ "ErrorCode": 0, "ErrorMessage": "NETWORK_EXCEPTION" }] }