mirror of
https://github.com/apache/kafka.git
synced 2026-11-04 13:49:30 +00:00
#24010 also started treating a rule that produces an empty name as not matching. That changes the principal for common rules: for example, with RULE:^.*[Cc][Nn]=([a-zA-Z0-9.]*).*$/$1/L from the docs, a certificate with CN=_svc used to map to an empty name and now maps to the next rule (or fails authentication without DEFAULT). Revert that part so these rules behave as before. Add a 4.5.0 upgrade note for the change in how rules that are not anchored with both ^ and $, or that use alternation, build the principal name. Reviewers: Manikumar Reddy <manikumar@confluent.io>