为kafka主题配置ACL

Question

I have a unsecured kafka instance with 2 brokers everything was running fine until I decided to configure ACL for topics, after ACL configuration my consumers stopped polling data from Kafka and I keep getting warning Error while fetching metadata with correlation id , my broker properties looks like below:-

listeners=PLAINTEXT://localhost:9092
advertised.listeners=PLAINTEXT://localhost:9092
authorizer.class.name=kafka.security.auth.SimpleAclAuthorizer
allow.everyone.if.no.acl.found=true

And my client configuration looks like below:-

bootstrap.servers=localhost:9092
topic.name=topic-name
group.id=topic-group

I've used below command to configure ACL

bin\windows\kafka-acls.bat  --authorizer-properties zookeeper.connect=localhost:2181 --add --allow-principal User:* Read --allow-host localhost  --consumer --topic topic-name --group topic-group

After having all above configuration when I start consumer it stopped receiving messages. Can someone point where I'm mistaking. Thanks in advance.

Answer 1

We are using ACLs successfully, but not with PLAINTEXT protocol. IMHO you shall use SSL protocol and instead of localhost use the real machine name.