[v25.3.x] Fix audit log client on upgrade#28927
Merged
michael-redpanda merged 4 commits intoredpanda-data:v25.3.xfrom Dec 16, 2025
Merged
[v25.3.x] Fix audit log client on upgrade#28927michael-redpanda merged 4 commits intoredpanda-data:v25.3.xfrom
michael-redpanda merged 4 commits intoredpanda-data:v25.3.xfrom
Conversation
When building a list of authorized operations for a metadata response, describe cluster response or a describe groups response, make the authz checks quiet so they do not clutter the log at INFO level. Signed-off-by: Michael Boquard <michael@redpanda.com> (cherry picked from commit c74f284)
Not all uses of the kafka client need metadata or describe_cluster requests to include the bitmask of authorized operations. If the authenticated principal used by the client doesn't have the appropriate level of authorization to get that information this clutters up the broker logs with failed authorization checks. This new option permits users of k/client to opt out of getting that information. Signed-off-by: Michael Boquard <michael@redpanda.com> (cherry picked from commit 5b9ff4c)
All uses of the kafka client outside of Shadow Linking do not require the authorized operations flag to be set. This change ensures that any use disables that flag. Signed-off-by: Michael Boquard <michael@redpanda.com> (cherry picked from commit 8a929cc)
Signed-off-by: Michael Boquard <michael@redpanda.com> (cherry picked from commit d7f6816)
Collaborator
Author
CI test resultstest results on build#77663
|
michael-redpanda
approved these changes
Dec 16, 2025
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Backport of PR #28852