Neng Lu created FLINK-32938:
-------------------------------
Summary: flink-connector-pulsar should remove all `PulsarAdmin`
calls
Key: FLINK-32938
URL: https://issues.apache.org/jira/browse/FLINK-32938
Project: Flink
Issue Type: Improvement
Components: Connectors / Pulsar
Reporter: Neng Lu
The flink-connector-pulsar should not access and interact with the admin
endpoint. This could introduce potential security issues.
In a production environment, a Pulsar cluster admin will not grant the
permissions for the flink application to conduct any admin operations.
Currently, the connector does various admin calls:
```{{{}{}}}{{{}{}}}
PulsarAdmin.topics().getPartitionedTopicMetadata(topic)
PulsarAdmin.namespaces().getTopics(namespace)
PulsarAdmin.topics().getLastMessageId(topic)
PulsarAdmin.topics().getMessageIdByTimestamp(topic, timestamp)
PulsarAdmin.topics().getSubscriptions(topic)
PulsarAdmin.topics().createSubscription(topic, subscription, MessageId.earliest)
PulsarAdmin.topics().resetCursor(topic, subscription, initial, !include)
```
We need to replace these calls with consumer or client calls.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
