Details
Undefined Description
[Problem]
- [DOC RHEL] 'SimpleAclAuthorizer' should be 'AclAuthorizer'
- 'SimpleAclAuthorizer' has been deprecated since AMQ Streams 1.4 (based on Kafka 2.4) (1), and 'SimpleAclAuthorizer' has been removed since AMQ Streams 2 (based on Kafka 3) (2). So the following configuration with 'SimpleAclAuthorizer' doesn't work.
- https://access.redhat.com/documentation/en-us/red_hat_amq_streams/2.6/html-single/using_amq_streams_on_rhel/index#assembly-authorization-str
- https://access.redhat.com/documentation/en-us/red_hat_amq_streams/2.5/html-single/using_amq_streams_on_rhel/index#assembly-authorization-str
- https://access.redhat.com/documentation/en-us/red_hat_amq_streams/2.4/html-single/using_amq_streams_on_rhel/index#assembly-authorization-str
- https://access.redhat.com/documentation/en-us/red_hat_amq_streams/2.3/html-single/using_amq_streams_on_rhel/index#assembly-authorization-str
- https://access.redhat.com/documentation/en-us/red_hat_amq_streams/2.2/html-single/using_amq_streams_on_rhel/index#assembly-authorization-str
- https://access.redhat.com/documentation/en-us/red_hat_amq_streams/2.1/html-single/using_amq_streams_on_rhel/index#assembly-authorization-str
- https://access.redhat.com/documentation/en-us/red_hat_amq_streams/2.0/html-single/using_amq_streams_on_rhel/index#assembly-authorization-str
- A fix related to SimpleAclAuthorizer was implemented in
ENTMQST-2290, but this fix appears to have been omitted (3). - FYI, please note that, for KRaft clusters, 'StandardAuthorizer' should be used instead of 'AclAuthorizer' (4).
(1) https://kafka.apache.org/documentation/#upgrade_240_notable
The Scala trait kafka.security.auth.Authorizer has been deprecated and replaced with a new Java API org.apache.kafka.server.authorizer.Authorizer. The authorizer implementation class kafka.security.auth.SimpleAclAuthorizer has also been deprecated and replaced with a new implementation kafka.security.authorizer.AclAuthorizer. AclAuthorizer uses features supported by the new API to improve authorization logging and is compatible with SimpleAclAuthorizer. For more details, see KIP-504.
(2) https://kafka.apache.org/documentation/#upgrade_300_notable
The Scala Authorizer, SimpleAclAuthorizer and related classes have been removed. Please use the Java Authorizer and AclAuthorizer instead.
(3) "ENTMQST-2290 [DOC] Update the RHEL doc for the simple authorizer"
https://issues.redhat.com/browse/ENTMQST-2290
(4) https://kafka.apache.org/documentation/#kraft_zk_migration
If your broker has authorization configured via the authorizer.class.name property using kafka.security.authorizer.AclAuthorizer, this is also the time to change it to use org.apache.kafka.metadata.authorizer.StandardAuthorizer instead.