karafka 2.5.4 → 2.5.6

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ce5da71c556a6f4cdca5f9dcaa124e428837565e9997b77877978e4b8237ce01
-  data.tar.gz: 91c10f4248d3c649645917ed0080bf2f65cfdfecfa94c0d23bbecd5c827990e3
+  metadata.gz: 11edff86c8615652130786431e179d242dcc33130e5aabbbf5e0f5ed6d4138fe
+  data.tar.gz: 69244021709283a153da19907a424c230a3597832beec6acbb39dbc02e738256
 SHA512:
-  metadata.gz: 6d986753c4b6bbe548ea8b0c25e72a8ecae2a338ee54d0baa04d1c52bbc8d03cd09b9266143f1ac8c4333031e45e9350c2d95648a83d36b12c7b8a0f4b25ca18
-  data.tar.gz: b699df0cf61cadc6b48b893f07cae7d96399a9a83ca6604b5550734ab7e7a42d3688c0016ccf189ef88fb695e45754998449fae5186d0c8a840f2394517bfd96
+  metadata.gz: 843548637c77ace03cde5c1f4150226c244b1b3343c6acd17d16c19cdc798c6d770611522eed7ebef76830f3e551c75afa176f2937c1fd63045e66ccb6276701
+  data.tar.gz: a0696c28b998c8e13d4b0e0d3f4252245f27e6f93e0d75d2153a93cc1dcc53b45fbe8416ba0a9e6025753ec5d107088d578f03d0a4cada3bb5ed2eb4e5341518

data/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Karafka Framework Changelog
 
+## 2.5.6 (2026-02-28)
+- **[Feature]** Add `karafka topics health` command to check Kafka topics for replication and durability issues, detecting no redundancy (RF=1), zero fault tolerance (RF≤min.insync), and low durability (min.insync=1) configurations with color-coded severity grouping and actionable recommendations (Pro).
+- [Enhancement] Optimize license loading process by reading license files directly from the gem directory instead of requiring the entire gem, reducing initialization overhead and adding support for user-defined License modules.
+- [Change] Migrate Admin `AbstractHandle#wait` calls from deprecated `max_wait_timeout` (seconds) to `max_wait_timeout_ms` (milliseconds) to align with `karafka-rdkafka` `0.24.0`.
+- [Change] Require `karafka-rdkafka` `>=` `0.24.0` to support the new `max_wait_timeout_ms` API.
+- [Fix] Fix LRJ partition freeze when filter returns `applied? true` with `action :skip`, causing partition to remain paused for ~31,709 years instead of resuming after processing.
+
+## 2.5.5 (2026-01-24)
+- [Feature] Add multi-cluster Admin support via `Karafka::Admin.new(kafka: { ... })` allowing operations against different Kafka clusters while maintaining backward compatibility with existing class-method API.
+
 ## 2.5.4 (2025-12-28)
 - [Enhancement] Align Datadog logger listener error handling with the main logger listener by adding missing error types and replacing `UnsupportedCaseError` with generic error logging to support dynamic errors reporting.
 - [Enhancement] Align Appsignal metrics listener `USER_CONSUMER_ERROR_TYPES` with all consumer error types for complete error tracking.

data/LICENSE-COMM

@@ -12,6 +12,10 @@ In order to use the Software under this Agreement, you must either: (a) receive
 
 1.1 General Use. This Agreement grants you a non-exclusive, non-transferable, limited license to the use rights for the Software, without the right to grant sublicenses, subject to the terms and conditions in this Agreement. The Software is licensed, not sold.
 
+1.1.1 Entity Definition. Where you have purchased or otherwise acquired the Software as or for an entity, "you" and "your" refer exclusively to the single legal entity (such as a corporation, limited liability company, partnership, or other legally recognized organization) that is the named licensee. This license does not extend to any parent company, subsidiary, affiliate, related entity, or other member of a corporate group, regardless of ownership structure or control relationships. Each separate legal entity requires its own license.
+
+1.1.2 Mergers, Acquisitions, and Change of Control. In the event of a merger, acquisition, consolidation, or other change of control affecting the licensee entity: (a) if the licensee entity ceases to exist as a separate legal entity, this license terminates and the surviving or acquiring entity must purchase a new license or obtain prior written consent from Maciej Mensfeld to continue use of the Software; (b) if the licensee entity continues to exist as a separate legal entity (including as a wholly owned subsidiary), this license remains valid solely for that entity and does not extend to the parent, acquirer, or any affiliated entities unless explicitly agreed in writing by Maciej Mensfeld.
+
 1.2 Pro License. If you purchased a Pro License (included with the Karafka Pro Software), you may install the Software on an unlimited number of Hosts. "Host" means any physical or virtual machine which is controlled by you. You may also run an unlimited number of Workers. "Worker" means a thread within a Karafka server process which executes jobs. You may concurrently run the software on an unlimited number of Hosts, with each host running an unlimited number of Workers.
 
 1.3 Archive Copies. You are entitled to make a reasonable amount of copies of the Software for archival purposes. Each copy must reproduce all copyright and other proprietary rights notices on or in the Software Product.
@@ -22,10 +26,12 @@ In order to use the Software under this Agreement, you must either: (a) receive
 
 3. Restricted Uses.
 
-3.1 You shall not (and shall not allow any third party to): (a) decompile, disassemble, or otherwise reverse engineer the Software or attempt to reconstruct or discover any source code, underlying ideas, algorithms, file formats or programming interfaces of the Software by any means whatsoever (except and only to the extent that applicable law prohibits or restricts reverse engineering restrictions); (b) distribute, sell, sublicense, rent, lease or use the Software for time sharing, hosting, service provider or like purposes, except as expressly permitted under this Agreement; (c) redistribute the Software or Modifications other than by including the Software or a portion thereof within your own product, which must have substantially different functionality than the Software or Modifications and must not allow any third party to use the Software or Modifications, or any portions thereof, for software development or application development purposes; (d) redistribute the Software as part of a product, "appliance" or "virtual server"; (e) redistribute the Software on any server which is not directly under your control; (f) remove any product identification, proprietary, copyright or other notices contained in the Software; (g) modify any part of the Software, create a derivative work of any part of the Software (except as permitted in Section 2), or incorporate the Software, except to the extent expressly authorized in writing by Maciej Mensfeld; (h) publicly disseminate performance information or analysis (including, without limitation, benchmarks) from any source relating to the Software; (i) utilize any equipment, device, software, or other means designed to circumvent or remove any form of Source URL or copy protection used by Maciej Mensfeld in connection with the Software, or use the Software together with any authorization code, Source URL, serial number, or other copy protection device not supplied by Maciej Mensfeld; (j) use the Software to develop a product which is competitive with any Maciej Mensfeld product offerings; or (k) use unauthorized Source URLS or keycode(s) or distribute or publish Source URLs or keycode(s), except as may be expressly permitted by Maciej Mensfeld in writing. If your unique Source URL or the offline license is ever published, Maciej Mensfeld reserves the right to terminate your access without notice.
+3.1 You shall not (and shall not allow any third party to): (a) decompile, disassemble, or otherwise reverse engineer the Software or attempt to reconstruct or discover any source code, underlying ideas, algorithms, file formats or programming interfaces of the Software by any means whatsoever (except and only to the extent that applicable law prohibits or restricts reverse engineering restrictions); (b) distribute, sell, sublicense, rent, lease or use the Software for time sharing, hosting, service provider or like purposes, except as expressly permitted under this Agreement; (c) redistribute the Software or Modifications other than by including the Software or a portion thereof within your own product, which must have substantially different functionality than the Software or Modifications and must not allow any third party to use the Software or Modifications, or any portions thereof, for software development or application development purposes; (d) redistribute the Software as part of a product, "appliance" or "virtual server"; (e) redistribute the Software on any server which is not directly under your control; (f) remove any product identification, proprietary, copyright or other notices contained in the Software; (g) modify any part of the Software, create a derivative work of any part of the Software (except as permitted in Section 2), or incorporate the Software, except to the extent expressly authorized in writing by Maciej Mensfeld; (h) publicly disseminate performance information or analysis (including, without limitation, benchmarks) from any source relating to the Software; (i) utilize any equipment, device, software, or other means designed to circumvent or remove any form of Source URL or copy protection used by Maciej Mensfeld in connection with the Software, or use the Software together with any authorization code, Source URL, serial number, or other copy protection device not supplied by Maciej Mensfeld; (j) use the Software to develop a product which is competitive with any Maciej Mensfeld product offerings; (k) use unauthorized Source URLS or keycode(s) or distribute or publish Source URLs or keycode(s), except as may be expressly permitted by Maciej Mensfeld in writing. If your unique Source URL or the offline license is ever published, Maciej Mensfeld reserves the right to terminate your access without notice; (l) use the Software, its source code, documentation, or any portion thereof as training data, input, or reference material for any machine learning system, artificial intelligence model, neural network, large language model, code generation tool, or similar automated system, whether for commercial or non-commercial purposes; (m) include the Software, its source code, or any portion thereof in any dataset, corpus, or collection intended for machine learning, artificial intelligence training, or automated code analysis, regardless of whether such dataset is publicly distributed or used internally; (n) use automated tools, scripts, crawlers, or similar technologies to systematically access, scrape, copy, or collect the Software or its source code, except for the limited purpose of cloning the repository for licensed use; or (o) create, distribute, or commercialize any product, service, or tool that was developed using knowledge, patterns, or code derived from the Software through machine learning or artificial intelligence systems.
 
 3.2 UNDER NO CIRCUMSTANCES MAY YOU USE THE SOFTWARE AS PART OF A PRODUCT OR SERVICE THAT PROVIDES SIMILAR FUNCTIONALITY TO THE SOFTWARE ITSELF.
 
+3.3 ARTIFICIAL INTELLIGENCE AND MACHINE LEARNING PROHIBITION. WITHOUT LIMITING THE GENERALITY OF SECTION 3.1, THE SOFTWARE AND ITS SOURCE CODE MAY NOT BE USED IN ANY MANNER TO TRAIN, DEVELOP, IMPROVE, OR VALIDATE ANY ARTIFICIAL INTELLIGENCE OR MACHINE LEARNING SYSTEM. THIS PROHIBITION APPLIES REGARDLESS OF WHETHER THE SOFTWARE IS ACCESSED DIRECTLY, THROUGH AUTOMATED MEANS, OR VIA THIRD-PARTY DATASETS OR SERVICES. ANY SUCH USE CONSTITUTES A MATERIAL BREACH OF THIS AGREEMENT AND MAY RESULT IN IMMEDIATE TERMINATION OF YOUR LICENSE AND PURSUIT OF ALL AVAILABLE LEGAL REMEDIES. For clarity, this prohibition applies to the training and development of AI systems, and does not restrict licensed users from utilizing AI-powered development tools in the ordinary course of developing software that integrates with the Software.
+
 The Open Source version of the Software ("LGPL Version") is licensed under the terms of the GNU Lesser General Public License version 3.0 ("LGPL") and not under this EULA.
 
 4. Ownership. Notwithstanding anything to the contrary contained herein, except for the limited license rights expressly provided herein, Maciej Mensfeld and its suppliers have and will retain all rights, title and interest (including, without limitation, all patent, copyright, trademark, trade secret and other intellectual property rights) in and to the Software and all copies, modifications and derivative works thereof (including any changes which incorporate any of your ideas, feedback or suggestions). You acknowledge that you are obtaining only a limited license right to the Software, and that irrespective of any use of the words "purchase", "sale" or like terms hereunder no ownership rights are being conveyed to you under this Agreement or otherwise.
@@ -36,7 +42,7 @@ The Open Source version of the Software ("LGPL Version") is licensed under the t
 
 7. Term of Agreement.
 
-7.1 Term. This Agreement is effective as of the Delivery of the Software and expires at such time as all license and service subscriptions hereunder have expired in accordance with their own terms (the "Term"). For clarification, the term of your license under this Agreement may be perpetual, limited for Evaluation Version, or designated as a fixed-term license in the Invoice, and shall be specified at your time of purchase. Either party may terminate this Agreement (including all related Invoices) if the other party: (a) fails to cure any material breach of this Agreement within thirty (30) days after written notice of such breach, provided that Maciej Mensfeld may terminate this Agreement immediately upon any breach of Section 3 or if you exceed any other restrictions contained in Section 1, unless otherwise specified in this agreement; (b) ceases operation without a successor; or (c) seeks protection under any bankruptcy, receivership, trust deed, creditors arrangement, composition or comparable proceeding, or if any such proceeding is instituted against such party (and not dismissed within sixty (60) days)). Termination is not an exclusive remedy and the exercise by either party of any remedy under this Agreement will be without prejudice to any other remedies it may have under this Agreement, by law, or otherwise.
+7.1 Term. This Agreement is effective as of the Delivery of the Software and expires at such time as all license and service subscriptions hereunder have expired in accordance with their own terms (the "Term"). For clarification, the term of your license under this Agreement may be perpetual, limited for Evaluation Version, or designated as a fixed-term license in the Invoice, and shall be specified at your time of purchase. Either party may terminate this Agreement (including all related Invoices) if the other party: (a) fails to cure any material breach of this Agreement within thirty (30) days after written notice of such breach, provided that Maciej Mensfeld may terminate this Agreement immediately upon any breach of Section 3 (including, without limitation, any use of the Software for artificial intelligence or machine learning purposes as described in Section 3.3) or if you exceed any other restrictions contained in Section 1, unless otherwise specified in this agreement; (b) ceases operation without a successor; or (c) seeks protection under any bankruptcy, receivership, trust deed, creditors arrangement, composition or comparable proceeding, or if any such proceeding is instituted against such party (and not dismissed within sixty (60) days)). Termination is not an exclusive remedy and the exercise by either party of any remedy under this Agreement will be without prejudice to any other remedies it may have under this Agreement, by law, or otherwise.
 
 7.2 Termination. Upon any termination of this Agreement, you shall cease any and all use of any Software and destroy all copies thereof.
 

data/README.md

@@ -1,4 +1,4 @@
-![karafka logo](https://cdn.karafka.io/assets/misc/logo/karafka_logotype_transparent2.png)
+![karafka logo](https://karafka.io/assets/misc/logo/karafka_logotype_transparent2.png)
 
 [![Build Status](https://github.com/karafka/karafka/actions/workflows/ci_linux_ubuntu_x86_64_gnu.yml/badge.svg)](https://github.com/karafka/karafka/actions/workflows/ci_linux_ubuntu_x86_64_gnu.yml)
 [![Gem Version](https://badge.fury.io/rb/karafka.svg)](http://badge.fury.io/rb/karafka)
@@ -39,7 +39,7 @@ Karafka **uses** threads to handle many messages simultaneously in the same proc
 
 ## Getting started
 
-![karafka web ui](https://cdn.karafka.io/assets/misc/printscreens/web-ui.png)
+![karafka web ui](https://karafka.io/assets/misc/printscreens/web-ui.png)
 
 If you're entirely new to the subject, you can start with our "Kafka on Rails" articles series, which will get you up and running with the terminology and basic ideas behind using Kafka:
 

data/certs/expired.txt

@@ -0,0 +1,2 @@
+# Expired/revoked license checksums (SHA256 of license token)
+# One checksum per line, lines starting with # are comments

data/karafka.gemspec

@@ -1,19 +1,19 @@
 # frozen_string_literal: true
 
-lib = File.expand_path('lib', __dir__)
+lib = File.expand_path("lib", __dir__)
 $LOAD_PATH.unshift(lib) unless $LOAD_PATH.include?(lib)
 
-require 'karafka/version'
+require "karafka/version"
 
 Gem::Specification.new do |spec|
-  spec.name        = 'karafka'
-  spec.version     = Karafka::VERSION
-  spec.platform    = Gem::Platform::RUBY
-  spec.authors     = ['Maciej Mensfeld']
-  spec.email       = %w[contact@karafka.io]
-  spec.homepage    = 'https://karafka.io'
-  spec.licenses    = %w[LGPL-3.0-only Commercial]
-  spec.summary     = 'Karafka is Ruby and Rails efficient Kafka processing framework.'
+  spec.name = "karafka"
+  spec.version = Karafka::VERSION
+  spec.platform = Gem::Platform::RUBY
+  spec.authors = ["Maciej Mensfeld"]
+  spec.email = %w[contact@karafka.io]
+  spec.homepage = "https://karafka.io"
+  spec.licenses = %w[LGPL-3.0-only Commercial]
+  spec.summary = "Karafka is Ruby and Rails efficient Kafka processing framework."
   spec.description = <<-DESC
     Karafka is Ruby and Rails efficient Kafka processing framework.
 
@@ -21,12 +21,12 @@ Gem::Specification.new do |spec|
     without having to focus on things that are not your business domain.
   DESC
 
-  spec.add_dependency 'karafka-core', '>= 2.5.6', '< 2.6.0'
-  spec.add_dependency 'karafka-rdkafka', '>= 0.23.1'
-  spec.add_dependency 'waterdrop', '>= 2.8.14', '< 3.0.0'
-  spec.add_dependency 'zeitwerk', '~> 2.3'
+  spec.add_dependency "karafka-core", ">= 2.5.6", "< 2.6.0"
+  spec.add_dependency "karafka-rdkafka", ">= 0.24.0"
+  spec.add_dependency "waterdrop", ">= 2.8.14", "< 3.0.0"
+  spec.add_dependency "zeitwerk", "~> 2.3"
 
-  spec.required_ruby_version = '>= 3.2.0'
+  spec.required_ruby_version = ">= 3.2.0"
 
   gem_files = %w[
     lib/**/*
@@ -41,16 +41,16 @@ Gem::Specification.new do |spec|
 
   spec.files = Dir.glob(gem_files) & `git ls-files -z`.split("\x0")
 
-  spec.executables   = %w[karafka]
+  spec.executables = %w[karafka]
   spec.require_paths = %w[lib]
 
   spec.metadata = {
-    'funding_uri' => 'https://karafka.io/#become-pro',
-    'homepage_uri' => 'https://karafka.io',
-    'changelog_uri' => 'https://karafka.io/docs/Changelog-Karafka',
-    'bug_tracker_uri' => 'https://github.com/karafka/karafka/issues',
-    'source_code_uri' => 'https://github.com/karafka/karafka',
-    'documentation_uri' => 'https://karafka.io/docs',
-    'rubygems_mfa_required' => 'true'
+    "funding_uri" => "https://karafka.io/#become-pro",
+    "homepage_uri" => "https://karafka.io",
+    "changelog_uri" => "https://karafka.io/docs/Changelog-Karafka",
+    "bug_tracker_uri" => "https://github.com/karafka/karafka/issues",
+    "source_code_uri" => "https://github.com/karafka/karafka",
+    "documentation_uri" => "https://karafka.io/docs",
+    "rubygems_mfa_required" => "true"
   }
 end

data/lib/active_job/karafka.rb

@@ -2,9 +2,9 @@
 
 begin
   # Do not load active job if already loaded
-  require 'active_job' unless Object.const_defined?('ActiveJob')
+  require "active_job" unless Object.const_defined?("ActiveJob")
 
-  require_relative 'queue_adapters/karafka_adapter'
+  require_relative "queue_adapters/karafka_adapter"
 
   module ActiveJob
     # Namespace for usage simplification outside of Rails where Railtie will not kick in.

data/lib/active_job/queue_adapters/karafka_adapter.rb

@@ -22,11 +22,11 @@ module ActiveJob
     #
     # @see https://github.com/sidekiq/sidekiq/issues/6746 Similar issue in Sidekiq
     base = if defined?(Rails::VERSION)
-             (Rails::VERSION::MAJOR == 7 && Rails::VERSION::MINOR < 2 ? Object : AbstractAdapter)
-           else
-             # Fallback when Rails is not loaded
-             Object
-           end
+      ((Rails::VERSION::MAJOR == 7 && Rails::VERSION::MINOR < 2) ? Object : AbstractAdapter)
+    else
+      # Fallback when Rails is not loaded
+      Object
+    end
 
     # Karafka adapter for enqueuing jobs
     # This is here for ease of integration with ActiveJob.

data/lib/karafka/active_job/consumer.rb

@@ -29,13 +29,13 @@ module Karafka
       # @param job_message [Karafka::Messages::Message] message with active job
       def consume_job(job_message)
         with_deserialized_job(job_message) do |job|
-          tags.add(:job_class, job['job_class'])
+          tags.add(:job_class, job["job_class"])
 
           payload = { caller: self, job: job, message: job_message }
 
           # We publish both to make it consistent with `consumer.x` events
-          Karafka.monitor.instrument('active_job.consume', payload)
-          Karafka.monitor.instrument('active_job.consumed', payload) do
+          Karafka.monitor.instrument("active_job.consume", payload)
+          Karafka.monitor.instrument("active_job.consumed", payload) do
             ::ActiveJob::Base.execute(job)
           end
         end

data/lib/karafka/active_job/current_attributes.rb

@@ -1,9 +1,9 @@
 # frozen_string_literal: true
 
-require 'active_support/current_attributes'
-require_relative 'current_attributes/job_wrapper'
-require_relative 'current_attributes/loading'
-require_relative 'current_attributes/persistence'
+require "active_support/current_attributes"
+require_relative "current_attributes/job_wrapper"
+require_relative "current_attributes/loading"
+require_relative "current_attributes/persistence"
 
 # This code is based on Sidekiqs approach to persisting current attributes
 # @see https://github.com/sidekiq/sidekiq/blob/main/lib/sidekiq/middleware/current_attributes.rb

data/lib/karafka/active_job/job_options_contract.rb

@@ -9,8 +9,8 @@ module Karafka
     class JobOptionsContract < Contracts::Base
       configure do |config|
         config.error_messages = YAML.safe_load_file(
-          File.join(Karafka.gem_root, 'config', 'locales', 'errors.yml')
-        ).fetch('en').fetch('validations').fetch('job_options')
+          File.join(Karafka.gem_root, "config", "locales", "errors.yml")
+        ).fetch("en").fetch("validations").fetch("job_options")
       end
 
       optional(:dispatch_method) do |val|

data/lib/karafka/admin/acl.rb

@@ -106,89 +106,84 @@ module Karafka
       # Class level APIs that operate on Acl instances and/or return Acl instances.
       # @note For the sake of consistency all methods from this API return array of Acls
       class << self
-        # Creates (unless already present) a given ACL rule in Kafka
-        # @param acl [Acl]
-        # @return [Array<Acl>] created acls
+        # @param acl [Acl] ACL rule to create
+        # @see #create
         def create(acl)
-          with_admin_wait do |admin|
-            admin.create_acl(**acl.to_native_hash)
-          end
-
-          [acl]
+          new.create(acl)
         end
 
-        # Removes acls matching provide acl pattern.
-        # @param acl [Acl]
-        # @return [Array<Acl>] deleted acls
-        # @note More than one Acl may be removed if rules match that way
+        # @param acl [Acl] ACL pattern to match for deletion
+        # @see #delete
         def delete(acl)
-          result = with_admin_wait do |admin|
-            admin.delete_acl(**acl.to_native_hash)
-          end
-
-          result.deleted_acls.map do |result_acl|
-            from_rdkafka(result_acl)
-          end
+          new.delete(acl)
         end
 
-        # Takes an Acl definition and describes all existing Acls matching its criteria
-        # @param acl [Acl]
-        # @return [Array<Acl>] described acls
+        # @param acl [Acl] ACL pattern to describe
+        # @see #describe
         def describe(acl)
-          result = with_admin_wait do |admin|
-            admin.describe_acl(**acl.to_native_hash)
-          end
-
-          result.acls.map do |result_acl|
-            from_rdkafka(result_acl)
-          end
+          new.describe(acl)
         end
 
-        # Returns all acls on a cluster level
-        # @return [Array<Acl>] all acls
+        # @see #all
         def all
-          describe(
-            new(
-              resource_type: :any,
-              resource_name: nil,
-              resource_pattern_type: :any,
-              principal: nil,
-              operation: :any,
-              permission_type: :any,
-              host: '*'
-            )
-          )
+          new.all
+        end
+      end
+
+      # Creates (unless already present) a given ACL rule in Kafka
+      # @param acl [Acl]
+      # @return [Array<Acl>] created acls
+      def create(acl)
+        with_admin_wait do |admin|
+          admin.create_acl(**acl.to_native_hash)
         end
 
-        private
+        [acl]
+      end
 
-        # Yields admin instance, allows to run Acl operations and awaits on the final result
-        # Makes sure that admin is closed afterwards.
-        def with_admin_wait
-          with_admin do |admin|
-            yield(admin).wait(max_wait_timeout: max_wait_time)
-          end
+      # Removes acls matching provide acl pattern.
+      # @param acl [Acl]
+      # @return [Array<Acl>] deleted acls
+      # @note More than one Acl may be removed if rules match that way
+      def delete(acl)
+        result = with_admin_wait do |admin|
+          admin.delete_acl(**acl.to_native_hash)
         end
 
-        # Takes a rdkafka Acl result and converts it into our local Acl representation. Since the
-        # rdkafka Acl object is an integer based on on types, etc we remap it into our "more" Ruby
-        # form.
-        #
-        # @param rdkafka_acl [Rdkafka::Admin::AclBindingResult]
-        # return [Acl] mapped acl
-        def from_rdkafka(rdkafka_acl)
-          new(
-            resource_type: rdkafka_acl.matching_acl_resource_type,
-            resource_name: rdkafka_acl.matching_acl_resource_name,
-            resource_pattern_type: rdkafka_acl.matching_acl_pattern_type,
-            principal: rdkafka_acl.matching_acl_principal,
-            host: rdkafka_acl.matching_acl_host,
-            operation: rdkafka_acl.matching_acl_operation,
-            permission_type: rdkafka_acl.matching_acl_permission_type
-          )
+        result.deleted_acls.map do |result_acl|
+          from_rdkafka(result_acl)
+        end
+      end
+
+      # Takes an Acl definition and describes all existing Acls matching its criteria
+      # @param acl [Acl]
+      # @return [Array<Acl>] described acls
+      def describe(acl)
+        result = with_admin_wait do |admin|
+          admin.describe_acl(**acl.to_native_hash)
+        end
+
+        result.acls.map do |result_acl|
+          from_rdkafka(result_acl)
         end
       end
 
+      # Returns all acls on a cluster level
+      # @return [Array<Acl>] all acls
+      def all
+        describe(
+          self.class.new(
+            resource_type: :any,
+            resource_name: nil,
+            resource_pattern_type: :any,
+            principal: nil,
+            operation: :any,
+            permission_type: :any,
+            host: "*"
+          )
+        )
+      end
+
       attr_reader(
         :resource_type, :resource_name, :resource_pattern_type, :principal, :host, :operation,
         :permission_type
@@ -196,6 +191,11 @@ module Karafka
 
       # Initializes a new Acl instance with specified attributes.
       #
+      # This class serves dual purposes:
+      # 1. As an ACL rule definition when called with resource_type and other ACL parameters
+      # 2. As an admin operations instance when called with only kafka: parameter
+      #
+      # @param kafka [Hash] custom kafka configuration for admin operations (optional)
       # @param resource_type [Symbol, Integer] Specifies the type of Kafka resource
       #   (like :topic, :consumer_group).
       #   Accepts either a symbol from RESOURCE_TYPES_MAP or a direct rdkafka numerical type.
@@ -215,24 +215,45 @@ module Karafka
       #
       # Each parameter is mapped to its corresponding value in the respective *_MAP constant,
       # allowing usage of more descriptive Ruby symbols instead of numerical types.
+      #
+      # @example Create an ACL rule
+      #   acl = Karafka::Admin::Acl.new(
+      #     resource_type: :topic,
+      #     resource_name: 'my-topic',
+      #     resource_pattern_type: :literal,
+      #     principal: 'User:my-user',
+      #     operation: :read,
+      #     permission_type: :allow
+      #   )
+      #
+      # @example Create an admin instance for a different cluster
+      #   admin = Karafka::Admin::Acl.new(kafka: { 'bootstrap.servers': 'other:9092' })
+      #   admin.do_create(acl)
       def initialize(
-        resource_type:,
-        resource_name:,
-        resource_pattern_type:,
-        principal:,
-        host: '*',
-        operation:,
-        permission_type:
+        kafka: nil,
+        resource_type: nil,
+        resource_name: nil,
+        resource_pattern_type: nil,
+        principal: nil,
+        host: "*",
+        operation: nil,
+        permission_type: nil
       )
-        @resource_type = map(resource_type, RESOURCE_TYPES_MAP)
-        @resource_name = resource_name
-        @resource_pattern_type = map(resource_pattern_type, RESOURCE_PATTERNS_TYPE_MAP)
-        @principal = principal
-        @host = host
-        @operation = map(operation, OPERATIONS_MAP)
-        @permission_type = map(permission_type, PERMISSION_TYPES_MAP)
-        super()
-        freeze
+        # If resource_type is provided, this is an ACL rule definition
+        if resource_type
+          @resource_type = map(resource_type, RESOURCE_TYPES_MAP)
+          @resource_name = resource_name
+          @resource_pattern_type = map(resource_pattern_type, RESOURCE_PATTERNS_TYPE_MAP)
+          @principal = principal
+          @host = host
+          @operation = map(operation, OPERATIONS_MAP)
+          @permission_type = map(permission_type, PERMISSION_TYPES_MAP)
+          super(kafka: kafka || {})
+          freeze
+        else
+          # This is an admin operations instance
+          super(kafka: kafka || {})
+        end
       end
 
       # Converts the Acl into a hash with native rdkafka types
@@ -251,6 +272,32 @@ module Karafka
 
       private
 
+      # Yields admin instance, allows to run Acl operations and awaits on the final result
+      # Makes sure that admin is closed afterwards.
+      def with_admin_wait
+        with_admin do |admin|
+          yield(admin).wait(max_wait_timeout_ms: self.class.max_wait_time)
+        end
+      end
+
+      # Takes a rdkafka Acl result and converts it into our local Acl representation. Since the
+      # rdkafka Acl object is an integer based on on types, etc we remap it into our "more" Ruby
+      # form.
+      #
+      # @param rdkafka_acl [Rdkafka::Admin::AclBindingResult]
+      # return [Acl] mapped acl
+      def from_rdkafka(rdkafka_acl)
+        self.class.new(
+          resource_type: rdkafka_acl.matching_acl_resource_type,
+          resource_name: rdkafka_acl.matching_acl_resource_name,
+          resource_pattern_type: rdkafka_acl.matching_acl_pattern_type,
+          principal: rdkafka_acl.matching_acl_principal,
+          host: rdkafka_acl.matching_acl_host,
+          operation: rdkafka_acl.matching_acl_operation,
+          permission_type: rdkafka_acl.matching_acl_permission_type
+        )
+      end
+
       # Maps the provided attribute based on the mapping hash and if not found returns the
       # attribute itself. Useful when converting from Acl symbol based representation to the
       # rdkafka one.

data/lib/karafka/admin/configs/resource.rb

@@ -45,7 +45,7 @@ module Karafka
           #   def set(name, value)
           #     @operations[0] << Config.new(name: name, value: value.to_s)
           #   end
-          default_value = op_name == :delete ? ' = nil' : ''
+          default_value = (op_name == :delete) ? " = nil" : ""
           class_eval <<~RUBY, __FILE__, __LINE__ + 1
             # @param name [String] name of the config to alter
             # @param value [String] value of the config