[ https://issues.apache.org/jira/browse/KAFKA-9187?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16986016#comment-16986016 ]
Bruno Cadonna commented on KAFKA-9187: -------------------------------------- https://builds.apache.org/job/kafka-pr-jdk11-scala2.12/9656/testReport/junit/kafka.api/SaslPlainSslEndToEndAuthorizationTest/testNoDescribeProduceOrConsumeWithoutTopicDescribeAcl/ > kafka.api.SaslGssapiSslEndToEndAuthorizationTest.testNoDescribeProduceOrConsumeWithoutTopicDescribeAcl > ------------------------------------------------------------------------------------------------------ > > Key: KAFKA-9187 > URL: https://issues.apache.org/jira/browse/KAFKA-9187 > Project: Kafka > Issue Type: Test > Components: core > Reporter: Bill Bejeck > Priority: Major > Labels: flaky-test > > Failed in [https://builds.apache.org/job/kafka-pr-jdk8-scala2.11/26593/] > > {noformat} > Error Messageorg.scalatest.exceptions.TestFailedException: Consumed 0 records > before timeout instead of the expected 1 > recordsStacktraceorg.scalatest.exceptions.TestFailedException: Consumed 0 > records before timeout instead of the expected 1 records > at > org.scalatest.Assertions$class.newAssertionFailedException(Assertions.scala:530) > at > org.scalatest.Assertions$.newAssertionFailedException(Assertions.scala:1389) > at org.scalatest.Assertions$class.fail(Assertions.scala:1091) > at org.scalatest.Assertions$.fail(Assertions.scala:1389) > at kafka.utils.TestUtils$.waitUntilTrue(TestUtils.scala:842) > at kafka.utils.TestUtils$.pollRecordsUntilTrue(TestUtils.scala:793) > at > kafka.utils.TestUtils$.pollUntilAtLeastNumRecords(TestUtils.scala:1334) > at kafka.utils.TestUtils$.consumeRecords(TestUtils.scala:1343) > at > kafka.api.EndToEndAuthorizationTest.consumeRecords(EndToEndAuthorizationTest.scala:530) > at > kafka.api.EndToEndAuthorizationTest.testNoDescribeProduceOrConsumeWithoutTopicDescribeAcl(EndToEndAuthorizationTest.scala:369) > at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) > at > sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62) > at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) > at java.lang.reflect.Method.invoke(Method.java:498) > at > org.junit.runners.model.FrameworkMethod$1.runReflectiveCall(FrameworkMethod.java:59) > at > org.junit.internal.runners.model.ReflectiveCallable.run(ReflectiveCallable.java:12) > at > org.junit.runners.model.FrameworkMethod.invokeExplosively(FrameworkMethod.java:56) > at > org.junit.internal.runners.statements.InvokeMethod.evaluate(InvokeMethod.java:17) > at > org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26) > at > org.junit.internal.runners.statements.RunAfters.evaluate(RunAfters.java:27) > at org.junit.runners.ParentRunner$3.evaluate(ParentRunner.java:305) > at > org.junit.runners.BlockJUnit4ClassRunner$1.evaluate(BlockJUnit4ClassRunner.java:100) > at org.junit.runners.ParentRunner.runLeaf(ParentRunner.java:365) > at > org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:103) > at > org.junit.runners.BlockJUnit4ClassRunner.runChild(BlockJUnit4ClassRunner.java:63) > at org.junit.runners.ParentRunner$4.run(ParentRunner.java:330) > at org.junit.runners.ParentRunner$1.schedule(ParentRunner.java:78) > at org.junit.runners.ParentRunner.runChildren(ParentRunner.java:328) > at org.junit.runners.ParentRunner.access$100(ParentRunner.java:65) > at org.junit.runners.ParentRunner$2.evaluate(ParentRunner.java:292) > at > org.junit.internal.runners.statements.RunBefores.evaluate(RunBefores.java:26) > at > org.junit.internal.runners.statements.RunAfters.evaluate(RunAfters.java:27) > at org.junit.runners.ParentRunner$3.evaluate(ParentRunner.java:305) > at org.junit.runners.ParentRunner.run(ParentRunner.java:412) > at > org.gradle.api.internal.tasks.testing.junit.JUnitTestClassExecutor.runTestClass(JUnitTestClassExecutor.java:110) > at > org.gradle.api.internal.tasks.testing.junit.JUnitTestClassExecutor.execute(JUnitTestClassExecutor.java:58) > at > org.gradle.api.internal.tasks.testing.junit.JUnitTestClassExecutor.execute(JUnitTestClassExecutor.java:38) > at > org.gradle.api.internal.tasks.testing.junit.AbstractJUnitTestClassProcessor.processTestClass(AbstractJUnitTestClassProcessor.java:62) > at > org.gradle.api.internal.tasks.testing.SuiteTestClassProcessor.processTestClass(SuiteTestClassProcessor.java:51) > at sun.reflect.GeneratedMethodAccessor12.invoke(Unknown Source) > at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) > at java.lang.reflect.Method.invoke(Method.java:498) > at > org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:36) > at > org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:24) > at > org.gradle.internal.dispatch.ContextClassLoaderDispatch.dispatch(ContextClassLoaderDispatch.java:33) > at > org.gradle.internal.dispatch.ProxyDispatchAdapter$DispatchingInvocationHandler.invoke(ProxyDispatchAdapter.java:94) > at com.sun.proxy.$Proxy2.processTestClass(Unknown Source) > at > org.gradle.api.internal.tasks.testing.worker.TestWorker.processTestClass(TestWorker.java:118) > at sun.reflect.GeneratedMethodAccessor11.invoke(Unknown Source) > at > sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) > at java.lang.reflect.Method.invoke(Method.java:498) > at > org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:36) > at > org.gradle.internal.dispatch.ReflectionDispatch.dispatch(ReflectionDispatch.java:24) > at > org.gradle.internal.remote.internal.hub.MessageHubBackedObjectConnection$DispatchWrapper.dispatch(MessageHubBackedObjectConnection.java:182) > at > org.gradle.internal.remote.internal.hub.MessageHubBackedObjectConnection$DispatchWrapper.dispatch(MessageHubBackedObjectConnection.java:164) > at > org.gradle.internal.remote.internal.hub.MessageHub$Handler.run(MessageHub.java:412) > at > org.gradle.internal.concurrent.ExecutorPolicy$CatchAndRecordFailures.onExecute(ExecutorPolicy.java:64) > at > org.gradle.internal.concurrent.ManagedExecutorImpl$1.run(ManagedExecutorImpl.java:48) > at > java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) > at > java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) > at > org.gradle.internal.concurrent.ThreadFactoryImpl$ManagedThreadRunnable.run(ThreadFactoryImpl.java:56) > at java.lang.Thread.run(Thread.java:748) > Standard OutputAdding ACLs for resource > `ResourcePattern(resourceType=CLUSTER, name=kafka-cluster, > patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=CLUSTER_ACTION, > permissionType=ALLOW) > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:kafka has Allow permission for operations: ClusterAction from > hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, > patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:*`: > User:kafka has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka6956053092858073839.tmp refreshKrb5Config is false principal is > kafka/localh...@example.com tryFirstPass is false useFirstPass is false > storePass is false clearPass is false > principal is kafka/localh...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) > (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Read from hosts: * > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Current ACLs for resource `Group:LITERAL:group`: > User:client has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka7544779694857809493.tmp refreshKrb5Config is false principal is > cli...@example.com tryFirstPass is false useFirstPass is false storePass is > false clearPass is false > principal is cli...@example.com > Will use keytab > Commit Succeeded > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka7544779694857809493.tmp refreshKrb5Config is false principal is > clie...@example.com tryFirstPass is false useFirstPass is false storePass is > false clearPass is false > principal is clie...@example.com > Will use keytab > Commit Succeeded > [2019-11-14 00:05:16,760] ERROR [Consumer clientId=consumer-group-64, > groupId=group] Topic authorization failed for topics [e2etopic] > (org.apache.kafka.clients.Metadata:283) > Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, > name=kafka-cluster, patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=CLUSTER_ACTION, > permissionType=ALLOW) > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:kafka has Allow permission for operations: ClusterAction from > hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, > patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:*`: > User:kafka has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka1164866442124187878.tmp refreshKrb5Config is false principal is > kafka/localh...@example.com tryFirstPass is false useFirstPass is false > storePass is false clearPass is false > principal is kafka/localh...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) > (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Group:LITERAL:group`: > User:client has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka5859610215295612432.tmp refreshKrb5Config is false principal is > cli...@example.com tryFirstPass is false useFirstPass is false storePass is > false clearPass is false > principal is cli...@example.com > Will use keytab > Commit Succeeded > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Create from hosts: * > [2019-11-14 00:05:27,930] ERROR [Consumer clientId=consumer-group-65, > groupId=group] Topic authorization failed for topics [e2etopic] > (org.apache.kafka.clients.Metadata:283) > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) > (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Read from hosts: * > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Current ACLs for resource `Group:LITERAL:group`: > User:client has Allow permission for operations: Read from hosts: * > [2019-11-14 00:05:28,437] ERROR [Consumer clientId=consumer-group-65, > groupId=group] Topic authorization failed for topics [topic2] > (org.apache.kafka.clients.Metadata:283) > [2019-11-14 00:05:28,440] ERROR [Consumer clientId=consumer-group-65, > groupId=group] Topic authorization failed for topics [topic2] > (org.apache.kafka.clients.Metadata:283) > Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, > name=kafka-cluster, patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=CLUSTER_ACTION, > permissionType=ALLOW) > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:kafka has Allow permission for operations: ClusterAction from > hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, > patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:*`: > User:kafka has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka8747414312546582585.tmp refreshKrb5Config is false principal is > kafka/localh...@example.com tryFirstPass is false useFirstPass is false > storePass is false clearPass is false > principal is kafka/localh...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2e, > patternType=PREFIXED)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) > (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW) > Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=gr, > patternType=PREFIXED)`: > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:PREFIXED:e2e`: > User:client has Allow permission for operations: Read from hosts: * > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Current ACLs for resource `Group:PREFIXED:gr`: > User:client has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka9087269612476946936.tmp refreshKrb5Config is false principal is > cli...@example.com tryFirstPass is false useFirstPass is false storePass is > false clearPass is false > principal is cli...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, > name=kafka-cluster, patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=CLUSTER_ACTION, > permissionType=ALLOW) > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:kafka has Allow permission for operations: ClusterAction from > hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, > patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:*`: > User:kafka has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka8309184149332187367.tmp refreshKrb5Config is false principal is > kafka/localh...@example.com tryFirstPass is false useFirstPass is false > storePass is false clearPass is false > principal is kafka/localh...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) > (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Read from hosts: * > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Current ACLs for resource `Group:LITERAL:group`: > User:client has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka1141175465808765899.tmp refreshKrb5Config is false principal is > cli...@example.com tryFirstPass is false useFirstPass is false storePass is > false clearPass is false > principal is cli...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, > name=kafka-cluster, patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=CLUSTER_ACTION, > permissionType=ALLOW) > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:kafka has Allow permission for operations: ClusterAction from > hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, > patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:*`: > User:kafka has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka4492820688667369631.tmp refreshKrb5Config is false principal is > kafka/localh...@example.com tryFirstPass is false useFirstPass is false > storePass is false clearPass is false > principal is kafka/localh...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) > (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Group:LITERAL:group`: > User:client has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka7127417062223263778.tmp refreshKrb5Config is false principal is > cli...@example.com tryFirstPass is false useFirstPass is false storePass is > false clearPass is false > principal is cli...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, > name=kafka-cluster, patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=CLUSTER_ACTION, > permissionType=ALLOW) > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:kafka has Allow permission for operations: ClusterAction from > hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, > patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:*`: > User:kafka has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka4842878770720273118.tmp refreshKrb5Config is false principal is > kafka/localh...@example.com tryFirstPass is false useFirstPass is false > storePass is false clearPass is false > principal is kafka/localh...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=topic2, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) > (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:topic2`: > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=topic2, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:topic2`: > User:client has Allow permission for operations: Read from hosts: * > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Current ACLs for resource `Group:LITERAL:group`: > User:client has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka5625345472493495489.tmp refreshKrb5Config is false principal is > cli...@example.com tryFirstPass is false useFirstPass is false storePass is > false clearPass is false > principal is cli...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, > name=kafka-cluster, patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=CLUSTER_ACTION, > permissionType=ALLOW) > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:kafka has Allow permission for operations: ClusterAction from > hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, > patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:*`: > User:kafka has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka5120046464615928618.tmp refreshKrb5Config is false principal is > kafka/localh...@example.com tryFirstPass is false useFirstPass is false > storePass is false clearPass is false > principal is kafka/localh...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) > (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW) > Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=*, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:*`: > User:client has Allow permission for operations: Write from hosts: * > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Read from hosts: * > User:kafka has Allow permission for operations: Read from hosts: * > User:client has Allow permission for operations: Create from hosts: * > Current ACLs for resource `Group:LITERAL:*`: > User:client has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka8065847533733093202.tmp refreshKrb5Config is false principal is > cli...@example.com tryFirstPass is false useFirstPass is false storePass is > false clearPass is false > principal is cli...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, > name=kafka-cluster, patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=CLUSTER_ACTION, > permissionType=ALLOW) > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:kafka has Allow permission for operations: ClusterAction from > hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, > patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:*`: > User:kafka has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka5718433880170346361.tmp refreshKrb5Config is false principal is > kafka/localh...@example.com tryFirstPass is false useFirstPass is false > storePass is false clearPass is false > principal is kafka/localh...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) > (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Group:LITERAL:group`: > User:client has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka2477903581865723182.tmp refreshKrb5Config is false principal is > cli...@example.com tryFirstPass is false useFirstPass is false storePass is > false clearPass is false > principal is cli...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, > name=kafka-cluster, patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=CLUSTER_ACTION, > permissionType=ALLOW) > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:kafka has Allow permission for operations: ClusterAction from > hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, > patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:*`: > User:kafka has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka2468726472607360276.tmp refreshKrb5Config is false principal is > kafka/localh...@example.com tryFirstPass is false useFirstPass is false > storePass is false clearPass is false > principal is kafka/localh...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) > (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Group:LITERAL:group`: > User:client has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka5732682815670095435.tmp refreshKrb5Config is false principal is > cli...@example.com tryFirstPass is false useFirstPass is false storePass is > false clearPass is false > principal is cli...@example.com > Will use keytab > Commit Succeeded > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Create from hosts: * > [2019-11-14 00:06:46,746] ERROR [Consumer clientId=consumer-group-72, > groupId=group] Topic authorization failed for topics [e2etopic] > (org.apache.kafka.clients.Metadata:283) > Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, > name=kafka-cluster, patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=CLUSTER_ACTION, > permissionType=ALLOW) > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:kafka has Allow permission for operations: ClusterAction from > hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, > patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:*`: > User:kafka has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka2013270490890764303.tmp refreshKrb5Config is false principal is > kafka/localh...@example.com tryFirstPass is false useFirstPass is false > storePass is false clearPass is false > principal is kafka/localh...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) > (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka2326244927512378494.tmp refreshKrb5Config is false principal is > cli...@example.com tryFirstPass is false useFirstPass is false storePass is > false clearPass is false > principal is cli...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, > name=kafka-cluster, patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=CLUSTER_ACTION, > permissionType=ALLOW) > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:kafka has Allow permission for operations: ClusterAction from > hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, > patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:*`: > User:kafka has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka8457104099673983066.tmp refreshKrb5Config is false principal is > kafka/localh...@example.com tryFirstPass is false useFirstPass is false > storePass is false clearPass is false > principal is kafka/localh...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Describe from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka2302048904671721331.tmp refreshKrb5Config is false principal is > cli...@example.com tryFirstPass is false useFirstPass is false storePass is > false clearPass is false > principal is cli...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, > name=kafka-cluster, patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=CLUSTER_ACTION, > permissionType=ALLOW) > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:kafka has Allow permission for operations: ClusterAction from > hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, > patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:*`: > User:kafka has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka6086036635542397633.tmp refreshKrb5Config is false principal is > kafka/localh...@example.com tryFirstPass is false useFirstPass is false > storePass is false clearPass is false > principal is kafka/localh...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Group:LITERAL:group`: > User:client has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka8629762638726138051.tmp refreshKrb5Config is false principal is > cli...@example.com tryFirstPass is false useFirstPass is false storePass is > false clearPass is false > principal is cli...@example.com > Will use keytab > Commit Succeeded > [2019-11-14 00:07:19,447] ERROR [Producer clientId=producer-178] Topic > authorization failed for topics [e2etopic] > (org.apache.kafka.clients.Metadata:283) > [2019-11-14 00:07:19,472] ERROR [Consumer clientId=consumer-group-74, > groupId=group] Topic authorization failed for topics [e2etopic] > (org.apache.kafka.clients.Metadata:283) > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=topic2, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) > (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:topic2`: > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=topic2, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:topic2`: > User:client has Allow permission for operations: Read from hosts: * > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Current ACLs for resource `Group:LITERAL:group`: > User:client has Allow permission for operations: Read from hosts: * > [2019-11-14 00:07:20,026] ERROR [Producer clientId=producer-178] Topic > authorization failed for topics [e2etopic] > (org.apache.kafka.clients.Metadata:283) > [2019-11-14 00:07:20,128] ERROR [Producer clientId=producer-178] Topic > authorization failed for topics [e2etopic] > (org.apache.kafka.clients.Metadata:283) > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) > (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Read from hosts: * > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Current ACLs for resource `Group:LITERAL:group`: > User:client has Allow permission for operations: Read from hosts: * > [2019-11-14 00:07:21,067] ERROR [Consumer clientId=consumer-group-74, > groupId=group] Topic authorization failed for topics [e2etopic] > (org.apache.kafka.clients.Metadata:283) > Adding ACLs for resource `ResourcePattern(resourceType=CLUSTER, > name=kafka-cluster, patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=CLUSTER_ACTION, > permissionType=ALLOW) > Current ACLs for resource `Cluster:LITERAL:kafka-cluster`: > User:kafka has Allow permission for operations: ClusterAction from > hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=*, > patternType=LITERAL)`: > (principal=User:kafka, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:*`: > User:kafka has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka3830268151830041256.tmp refreshKrb5Config is false principal is > kafka/localh...@example.com tryFirstPass is false useFirstPass is false > storePass is false clearPass is false > principal is kafka/localh...@example.com > Will use keytab > Commit Succeeded > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=CREATE, permissionType=ALLOW) > (principal=User:client, host=*, operation=WRITE, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Adding ACLs for resource `ResourcePattern(resourceType=TOPIC, name=e2etopic, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=DESCRIBE, > permissionType=ALLOW) > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Adding ACLs for resource `ResourcePattern(resourceType=GROUP, name=group, > patternType=LITERAL)`: > (principal=User:client, host=*, operation=READ, permissionType=ALLOW) > Current ACLs for resource `Topic:LITERAL:e2etopic`: > User:client has Allow permission for operations: Read from hosts: * > User:client has Allow permission for operations: Describe from hosts: * > User:client has Allow permission for operations: Create from hosts: * > User:client has Allow permission for operations: Write from hosts: * > Current ACLs for resource `Group:LITERAL:group`: > User:client has Allow permission for operations: Read from hosts: * > Debug is true storeKey true useTicketCache false useKeyTab true doNotPrompt > false ticketCache is null isInitiator true KeyTab is > /tmp/kafka3967813509415878539.tmp refreshKrb5Config is false principal is > cli...@example.com tryFirstPass is false useFirstPass is false storePass is > false clearPass is false > principal is cli...@example.com > Will use keytab > Commit Succeeded {noformat} -- This message was sent by Atlassian Jira (v8.3.4#803005)