cadonna opened a new pull request, #19352:
URL: https://github.com/apache/kafka/pull/19352

   With the new Streams rebalance protocol, the Streams client sends the 
topology with the used topics to the broker for initialization. For the 
initialization the broker needs to describe the topics in the topology and 
consequently the Streams application needs to be authorized to describe the 
topics.
   
   The broker checks the authorization by filtering the topics in the topology 
by authorization. This filtering implicitly deduplicates the topics of the 
topology if they appear multiple times in the topology send to the brokers. 
After that the broker compares the size of the authorized topics with the 
topics in the topology. If the authorized topics are less than the topics in 
the topology a TOPIC_AUTHORIZATION_FAILED error is returned.
   
   In Streams a topology that is sent to the brokers likely has duplicate 
topics because a repartition topic appears as a sink for one subtopology and as 
a source for another subtopology.
   
   This commit deduplicates the topics of a topology before the verification of 
the authorization.
   
   Delete this text and replace it with a detailed description of your change. 
The 
   PR title and body will become the squashed commit message.
   
   If you would like to tag individuals, add some commentary, upload images, or
   include other supplemental information that should not be part of the 
eventual
   commit message, please use a separate comment.
   
   If applicable, please include a summary of the testing strategy (including 
   rationale) for the proposed change. Unit and/or integration tests are 
expected
   for any behavior change and system tests should be considered for larger
   changes.
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: jira-unsubscr...@kafka.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to