Hey. Appreciate for the review of these PRs and PIPs if possible: github.com/apache/pulsar/pull/26021 with lists.apache.org/thread/18clc2l50nrkoyhgo0pddw80y9zyd7sp github.com/apache/pulsar-client-go/pull/1507 github.com/apache/pulsar-client-go/issues/1508 github.com/apache/pulsar-client-go/issues/1510 github.com/apache/pulsar-client-go/issues/1496 github.com/apache/pulsar/issues/25978 github.com/apache/pulsar/issues/25898 github.com/apache/pulsar/pull/25925 Thanks!

I have provided feedback on the PIP, apache/pulsar repo PRs/issues. Please ping active maintainers of apache/pulsar-client-go repo for feedback.

Thanks! I'll ping again

yes. minor details can be adjusted later.

1. Reusing Kafka's rule grammar verbatim vs. a Pulsar-native syntax.

The design and implementation in Kafka is definitely a good reference while adapting it to the Pulsar authorization architecture. btw. It's unrelated to this PIP, but there's a thread about "Public CA clientAuth EKU sunset" (dev list thread). It impacts users reusing public CA issued server certs for client authentication. (this doesn't need to be mentioned in the PIP in any way, just something to be aware of)

Thanks for the info! I dug into it and agree - it's separate from this PIP. Will send today a VOTE's email