lianetm commented on PR #18989: URL: https://github.com/apache/kafka/pull/18989#issuecomment-2679027223
I'm taking a closer look at the changes, but regarding the test failures, they show the consumer getting more than one TopicAuth after the ACLs are added (before this change it expected at most 1 more TopicAuth [here](https://github.com/apache/kafka/blob/48527a1e7fe82a9833fc496b84191ef6f01241aa/core/src/test/scala/integration/kafka/api/EndToEndAuthorizationTest.scala#L433)). I wonder if that expectation is to strict now, that we send the error via HBs continuously on the interval, even if it fails with error (vs before we would only get the auth error from the Metadata path). The consumer should recover, but I don't think we can guarantee that it will only get 1 TopicAuth after the ACLs are added. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: jira-unsubscr...@kafka.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org