Dedup consumer groups?

[zihaoyu]

Summary

There are duplicate groups from ACL plugin, if I put more than one consumer in the same group.

Is it possible to dedup the groups, and group consumers by their ACL groups? Furthermore, is it possible to treat groups as a first-class resource in the ACL plugin, like /acls/groups endpoint? Because groups are used to whitelist/blacklist in service/route ACLs, I think they deserve more attention.

Steps To Reproduce

1. Create consumer-1.

$ http POST http://localhost:8001/consumers username=consumer-1

2. Create consumer-2.

$ http POST http://localhost:8001/consumers username=consumer-2

3. Create ACL on consumer-1. Put it in group-1.

$ http POST http://localhost:8001/consumers/consumer-1/acls group=group-1

4. Create ACL on consumer-2. Put it in group-1 as well.

$ http POST http://localhost:8001/consumers/consumer-2/acls group=group-1

5. Get ACLs. Will see two group-1 entries.

$ http GET http://localhost:8001/acls

{
    "data": [
        {
            "consumer": {
                "id": "0c12e29e-2318-498f-ae40-2c231dafbc45"
            },
            "created_at": 1568313570,
            "group": "group-1",
            "id": "1d9a087e-4dce-493d-b5fd-004d7c28dde7"
        },
        {
            "consumer": {
                "id": "50c92175-a5c9-436c-9e7c-71a3a1949ee7"
            },
            "created_at": 1568313563,
            "group": "group-1",
            "id": "be8585b4-95a1-4158-8acf-2ac17cc0dfa8"
        }
    ],
    "next": null
}

Additional Details & Logs

• Kong version ($ kong version): 1.3.0
• Kong debug-level startup logs ($ kong start --vv)
• Kong error logs (<KONG_PREFIX>/logs/error.log)
• Kong configuration (the output of a GET request to Kong's Admin port - see
  https://docs.konghq.com/latest/admin-api/#retrieve-node-information)
• Operating system