Skip to content

Conversation

@k-wall
Copy link
Member

@k-wall k-wall commented Nov 28, 2025

This post announces the release of Kroxylicious 0.18.0, highlighting new features and improvements, including Filter API enhancements and a new Authorizer Filter.

This post announces the release of Kroxylicious 0.18.0, highlighting new features and improvements, including Filter API enhancements and a new Authorizer Filter.

Signed-off-by: Keith Wall <kwall@apache.org>
@k-wall k-wall requested a review from a team as a code owner November 28, 2025 10:10
k-wall and others added 3 commits November 28, 2025 10:26
Signed-off-by: Keith Wall <kwall@apache.org>
Signed-off-by: Sam Barker <sam@quadrocket.co.uk>
No change in this release.

Signed-off-by: Sam Barker <sam@quadrocket.co.uk>
Copy link
Member

@robobario robobario left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Copy link
Member

@gracegrimwood gracegrimwood left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Some nits, otherwise looks good

Comment on lines 21 to 28
* Filters now have a convenient mechanism to convert from topic
ids [KIP-516](https://cwiki.apache.org/confluence/display/KAFKA/KIP-516%3A+Topic+Identifiers) to topic names. This is
based
on [design proposal#008](https://github.com/kroxylicious/design/blob/main/proposals/008-topic-name-lookup-facility.md)
* For authenticated use-cases, filters now have access to a Subject API that provides convenient access to the authenticated principals established by the channel. This is a building block
for filters that need to enforce authorization checks or want to write an audit trail of Kafka actions. Full context
on where our thinking goes and what could/should be possible is outlined
in [design proposal#009](https://github.com/kroxylicious/design/blob/main/proposals/009-authorizer.md)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

A couple nits on this:

  1. Extra spaces and line breaks (the latter makes it a little harder to read the raw markdown, and also to tell whether Jekyll will format it correctly).
  2. "to topic names. This is based on" <- This can be one sentence.
  3. I don't think specifying "For authenticated use-cases" is necessary (it's mostly re-stated later in the sentence anyway) and it reads a little awkwardly.
  4. "Full context on where our thinking goes and what could/should be possible is outlined in ..." <- Don't need to have so many words here. I think something like "For further context, see ..." works a bit better.
Suggested change
* Filters now have a convenient mechanism to convert from topic
ids [KIP-516](https://cwiki.apache.org/confluence/display/KAFKA/KIP-516%3A+Topic+Identifiers) to topic names. This is
based
on [design proposal#008](https://github.com/kroxylicious/design/blob/main/proposals/008-topic-name-lookup-facility.md)
* For authenticated use-cases, filters now have access to a Subject API that provides convenient access to the authenticated principals established by the channel. This is a building block
for filters that need to enforce authorization checks or want to write an audit trail of Kafka actions. Full context
on where our thinking goes and what could/should be possible is outlined
in [design proposal#009](https://github.com/kroxylicious/design/blob/main/proposals/009-authorizer.md)
* Filters now have a convenient mechanism to convert from topic ids [KIP-516](https://cwiki.apache.org/confluence/display/KAFKA/KIP-516%3A+Topic+Identifiers) to topic names, based on [design proposal#008](https://github.com/kroxylicious/design/blob/main/proposals/008-topic-name-lookup-facility.md)
* Filters now have access to a Subject API that provides convenient access to the authenticated principals established by the channel. This is a building block for filters that need to enforce authorization checks or want to write an audit trail of Kafka actions. For further context, see [design proposal#009](https://github.com/kroxylicious/design/blob/main/proposals/009-authorizer.md)

Revert hard wrap at 120 chars.

Signed-off-by: Sam Barker <sam@quadrocket.co.uk>
@SamBarker SamBarker enabled auto-merge December 3, 2025 03:09
@SamBarker SamBarker merged commit c4e07b0 into main Dec 3, 2025
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants