Topic Authorization failing for consumers -- fixed.

[bj9306]

Team,
We are getting topic authorization failure with consumer. Please see below message.

kafka/bin/kafka-console-consumer.sh --consumer.config client-ssl.properties --topic fc-telemetry-prod --bootstrap-server kafka.dataflow.iot.att.com:9094 --max-messages 1
[2021-05-26 17:25:58,225] WARN [Consumer clientId=consumer-attdebug-1, groupId=attdebug] Error while fetching metadata with correlation id 2 : {fc-telemetry-prod=TOPIC_AUTHORIZATION_FAILED} (org.apache.kafka.clients.NetworkClient)
[2021-05-26 17:25:58,226] ERROR [Consumer clientId=consumer-attdebug-1, groupId=attdebug] Topic authorization failed for topics [fc-telemetry-prod] (org.apache.kafka.clients.Metadata)
[2021-05-26 17:25:58,228] ERROR Error processing message, terminating consumer process: (kafka.tools.ConsoleConsumer$)
org.apache.kafka.common.errors.TopicAuthorizationException: Not authorized to access topics: [fc-telemetry-prod]
Processed a total of 0 messages

Please find below access details for topic and group. Please let me know if we are missing anything

sh-4.2$ bin/kafka-acls.sh --authorizer-properties zookeeper.connect=localhost:21810 --list --topic fc-telemetry-prod
OpenJDK 64-Bit Server VM warning: If the number of processors is expected to increase from one, then you should configure the number of parallel GC threads appropriately using -XX:ParallelGCThreads=N
Current ACLs for resource Topic:LITERAL:fc-telemetry-prod:
User:CN=watchtower-kafka-client.att.com,OU=,O="AT&T Services, Inc.",L=Dallas,ST=Texas,C=US has Allow permission for operations: Read from hosts: *
User:CN=Complete Innovations Inc.,OU=RnD,O=Complete Innovations Inc.,L=Toronto,ST=Ontario,C=CA has Allow permission for operations: Read from hosts: *
User:C=US,ST=Minnesota,L=Minneapolis,O=Utilimarc Inc,OU=Engineering,CN=ext-kaf.utilimarc.tools has Allow permission for operations: Describe from hosts: *
User:CN=watchtower-kafka-client.att.com,OU=,O="AT&T Services, Inc.",L=Dallas,ST=Texas,C=US has Allow permission for operations: Read from hosts: *
User:CN=watchtower-kafka-client.att.com,O="AT&T Services, Inc.",L=Dallas,ST=Texas,C=US has Allow permission for operations: Read from hosts: *
User:CN=ext-kaf.utilimarc.tools has Allow permission for operations: All from hosts: *
User:CN=watchtower-kafka-client.att.com,O="AT&T Services, Inc.",L=Dallas,ST=Texas,C=US has Allow permission for operations: Describe from hosts: *
User:CN=watchtower-kafka-client.att.com,OU=,O="AT&T Services, Inc.",L=Dallas,ST=Texas,C=US has Allow permission for operations: Describe from hosts: *
User:CN=watchtower-kafka-client.att.com,OU=,O="AT&T Services, Inc.",L=Dallas,ST=Texas,C=US has Allow permission for operations: Describe from hosts: *
User:C=US,ST=Minnesota,L=Minneapolis,O=Utilimarc Inc,OU=Engineering,CN=ext-kaf.utilimarc.tools has Allow permission for operations: Read from hosts: *
User:CN=watchtower-kafka-client.att.com,O="AT&T Services, Inc.",L=Dallas,ST=Texas,C=US has Allow permission for operations: Read from hosts: *
User:CN=fc-telemetry-prod-write-user has Allow permission for operations: Write from hosts: *
User:CN=watchtower-kafka-client.att.com,O="AT&T Services, Inc.",L=Dallas,ST=Texas,C=US has Allow permission for operations: Describe from hosts: *

sh-4.2$ bin/kafka-acls.sh --authorizer-properties zookeeper.connect=localhost:21810 --list --group attdebug
OpenJDK 64-Bit Server VM warning: If the number of processors is expected to increase from one, then you should configure the number of parallel GC threads appropriately using -XX:ParallelGCThreads=N
Current ACLs for resource Group:LITERAL:attdebug:
User:CN=watchtower-kafka-client.att.com,O="AT&T Services, Inc.",L=Dallas,ST=Texas,C=US has Allow permission for operations: Read from hosts: *
User:CN=watchtower-kafka-client.att.com,O="AT&T Services, Inc.",L=Dallas,ST=Texas,C=US has Allow permission for operations: Read from hosts: *
User:CN=watchtower-kafka-client.att.com,OU=,O="AT&T Services, Inc.",L=Dallas,ST=Texas,C=US has Allow permission for operations: Read from hosts: *
User:CN=watchtower-kafka-client.att.com,OU=,O="AT&T Services, Inc.",L=Dallas,ST=Texas,C=US has Allow permission for operations: Read from hosts: *

[bj9306]

Issue fixed