Kafka Configs Kafka Protocol Wire Format API Versions KIPs Errors Kafka Upgrade Config Advisor Flink SQL
conduktor.io ↗

Kafka DescribeAcls Request Wire Format v1 — Binary Protocol Layout

What is DescribeAcls?

Shows access control entries via kafka-acls.sh --list. Supports filter matching by resource type, principal, or operation, which helps when debugging AUTHORIZATION_FAILED errors or auditing write access to sensitive topics.

Wire Diagram

Request Header
message_size int32 · 4B
api_key int16 · 2B
api_version int16 · 2B
correlation_id int32 · 4B
client_id string
DescribeAclsRequest v1
ResourceTypeFilter int8 · 1B
ResourceNameFilter? string
PatternTypeFilter int8 · 1B
PrincipalFilter? string
HostFilter? string
Operation int8 · 1B
PermissionType int8 · 1B

Schema & Example

Schema
{
  "ResourceTypeFilter": int8,
  "ResourceNameFilter": string?,
  "PatternTypeFilter": int8,
  "PrincipalFilter": string?,
  "HostFilter": string?,
  "Operation": int8,
  "PermissionType": int8
}
Example
{
  "ResourceTypeFilter": 2,
  "ResourceNameFilter": "match-pattern",
  "PatternTypeFilter": 1,
  "PrincipalFilter": null,
  "HostFilter": "match-pattern",
  "Operation": 2,
  "PermissionType": 3
}