AclCommand¶

AclCommand is an administration command-line utility to manage ACLs in a Kafka cluster.

AclCommand can be executed as kafka-acls shell script.

SecurityDisabledException¶

kafka-acls.sh requires Authorizer to be configured on a broker (when executed with --bootstrap-server option) or throws a SecurityDisabledException.

$ ./bin/kafka-acls.sh --list --bootstrap-server :9092
SecurityDisabledException: No Authorizer is configured on the broker

Executing Command¶

main selects the AclCommandService:

• AdminClientService when --bootstrap-server option is used
• AuthorizerService with AclAuthorizer otherwise

In the end, main executes the operation:

• add to add ACLs
• remove to remove ACLs
• list to list ACLs for --topic, --group or --cluster resource types