Fix wrong resource patterns in AKHQ claim v3 API #632
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.



This PR attempts to fix the issue #631:
The issue
When the namespace has one LITERAL ACL and one PREFIXED ACL on the same resource
myTopic, if the ns4kafka name of the LITERAL ACL comes first in alphanumerical order, then the PREFIXED ACL is removed when computing the regex patterns given to AKHQ in the AKHQ claim V3 API/akhq-claim/v3.The fix
acl.forEachiterations in the methodgenerateClaimV3, I added the pattern type (PREFIXEDorLITERAL) to the key inbindingsso that both ACLs on the same resource are added to the Map and taken into account in the regex patterns (^\\QmyTopic\\E$and^\\QmyTopic\\E.*$).optimizeAclwhich should remove already covered ACLs from the ACLs list, I removed the resource name filter!accessControlEntryOther.getSpec().getResource().equals(accessControlEntry.getSpec().getResource())and added a filter on the ns4kafka ACL name:Any of the 2 points would have fixed the issue, I implemented both to make sure there is no more issue regarding same resource ACLs in AKHQ claims.
Additional changes
stream().filter().map().anyMatch()bystream().anyMatch()for readability inoptimizeAclaccessControlEntrytoacl, andaccessControlEntryOthertoaclOtherfor readability inoptimizeAclmetadata.namefield in all AKHQ claim unit tests, since it is now used in theoptimizeAclmethod