public class DataplaneAuthWriter extends Object implements io.confluent.security.auth.metadata.AuthWriter, io.confluent.security.trustservice.store.TrustWriter, Writer, Closeable
Constructor and Description |
---|
DataplaneAuthWriter() |
Modifier and Type | Method and Description |
---|---|
CompletionStage<Void> |
addClusterRoleBinding(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal,
org.apache.kafka.common.security.auth.KafkaPrincipal targetPrincipal,
String role,
io.confluent.security.authorizer.Scope scope,
String reason) |
CompletionStage<Void> |
addIdentityPool(Optional<Principal> requesterPrincipal,
String poolId,
int version,
String issuer,
String jwksEndpoint,
String subjectClaim,
String serviceAccount,
String policy,
String orgId,
String reason) |
CompletionStage<Void> |
addJwks(Optional<Principal> requesterPrincipal,
String jwtIssuer,
String jwksEndpoint,
org.jose4j.jwk.JsonWebKeySet jwks,
String reason) |
CompletionStage<Void> |
addRefreshTokenInfo(Optional<Principal> requesterPrincipal,
String issuer,
String encryptedRefreshToken,
long issuedAt,
String subClaim,
String sessionId) |
CompletionStage<Void> |
addResourceRoleBinding(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal,
org.apache.kafka.common.security.auth.KafkaPrincipal targetPrincipal,
String role,
io.confluent.security.authorizer.Scope scope,
Collection<io.confluent.security.authorizer.ResourcePattern> resources,
String reason) |
void |
close() |
CompletionStage<Void> |
createAcls(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal,
io.confluent.security.authorizer.Scope scope,
org.apache.kafka.common.acl.AclBinding aclBinding) |
Map<org.apache.kafka.common.acl.AclBinding,CompletionStage<org.apache.kafka.server.authorizer.AclCreateResult>> |
createAcls(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal,
io.confluent.security.authorizer.Scope scope,
List<org.apache.kafka.common.acl.AclBinding> aclBindings) |
CompletionStage<Collection<org.apache.kafka.common.acl.AclBinding>> |
deleteAcls(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal,
io.confluent.security.authorizer.Scope scope,
org.apache.kafka.common.acl.AclBindingFilter aclBindingFilter,
Predicate<io.confluent.security.authorizer.ResourcePattern> resourceAccess) |
Map<org.apache.kafka.common.acl.AclBindingFilter,CompletionStage<org.apache.kafka.server.authorizer.AclDeleteResult>> |
deleteAcls(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal,
io.confluent.security.authorizer.Scope scope,
List<org.apache.kafka.common.acl.AclBindingFilter> aclBindingFilters,
Predicate<io.confluent.security.authorizer.ResourcePattern> resourceAccess) |
boolean |
ready()
Returns true if this is the master writer and is ready to process requests
|
CompletionStage<Void> |
removeIdentityPool(Optional<Principal> requesterPrincipal,
String poolId,
String reason) |
CompletionStage<Void> |
removeJwks(Optional<Principal> requesterPrincipal,
String jwtIssuer,
String jwksEndpoint,
String reason) |
CompletionStage<Void> |
removeRefreshTokenInfo(Optional<Principal> requesterPrincipal,
String issuer,
String subClaim) |
CompletionStage<Void> |
removeResourceRoleBinding(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal,
org.apache.kafka.common.security.auth.KafkaPrincipal targetPrincipal,
String role,
io.confluent.security.authorizer.Scope scope,
Collection<io.confluent.security.authorizer.ResourcePatternFilter> patternFilters,
String reason) |
CompletionStage<Void> |
removeRoleBinding(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal,
org.apache.kafka.common.security.auth.KafkaPrincipal targetPrincipal,
String role,
io.confluent.security.authorizer.Scope scope,
String reason) |
CompletionStage<Void> |
replaceIdentityPool(Optional<Principal> requesterPrincipal,
String poolId,
int version,
String issuer,
String jwksEndpoint,
String subjectClaim,
String serviceAccount,
String policy,
String orgId,
String reason) |
CompletionStage<Void> |
replaceJwks(Optional<Principal> requesterPrincipal,
String jwtIssuer,
String jwksEndpoint,
org.jose4j.jwk.JsonWebKeySet jwks,
String reason) |
CompletionStage<Void> |
replaceRefreshTokenInfo(Optional<Principal> requesterPrincipal,
String issuer,
String encryptedRefreshToken,
long issuedAt,
String subClaim,
String sessionId) |
CompletionStage<Void> |
replaceResourceRoleBinding(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal,
org.apache.kafka.common.security.auth.KafkaPrincipal targetPrincipal,
String role,
io.confluent.security.authorizer.Scope scope,
Collection<io.confluent.security.authorizer.ResourcePattern> resources,
String reason) |
void |
startWriter(int i)
Starts master writer with the specified generation id.
|
void |
stopWriter(Integer integer)
Stops this writer because a new master writer was elected.
|
equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
public CompletionStage<Void> addClusterRoleBinding(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal, org.apache.kafka.common.security.auth.KafkaPrincipal targetPrincipal, String role, io.confluent.security.authorizer.Scope scope, String reason)
addClusterRoleBinding
in interface io.confluent.security.auth.metadata.AuthWriter
public CompletionStage<Void> removeRoleBinding(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal, org.apache.kafka.common.security.auth.KafkaPrincipal targetPrincipal, String role, io.confluent.security.authorizer.Scope scope, String reason)
removeRoleBinding
in interface io.confluent.security.auth.metadata.AuthWriter
public CompletionStage<Void> addResourceRoleBinding(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal, org.apache.kafka.common.security.auth.KafkaPrincipal targetPrincipal, String role, io.confluent.security.authorizer.Scope scope, Collection<io.confluent.security.authorizer.ResourcePattern> resources, String reason)
addResourceRoleBinding
in interface io.confluent.security.auth.metadata.AuthWriter
public CompletionStage<Void> removeResourceRoleBinding(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal, org.apache.kafka.common.security.auth.KafkaPrincipal targetPrincipal, String role, io.confluent.security.authorizer.Scope scope, Collection<io.confluent.security.authorizer.ResourcePatternFilter> patternFilters, String reason)
removeResourceRoleBinding
in interface io.confluent.security.auth.metadata.AuthWriter
public CompletionStage<Void> replaceResourceRoleBinding(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal, org.apache.kafka.common.security.auth.KafkaPrincipal targetPrincipal, String role, io.confluent.security.authorizer.Scope scope, Collection<io.confluent.security.authorizer.ResourcePattern> resources, String reason)
replaceResourceRoleBinding
in interface io.confluent.security.auth.metadata.AuthWriter
public CompletionStage<Void> addJwks(Optional<Principal> requesterPrincipal, String jwtIssuer, String jwksEndpoint, org.jose4j.jwk.JsonWebKeySet jwks, String reason)
addJwks
in interface io.confluent.security.trustservice.store.TrustWriter
public CompletionStage<Void> removeJwks(Optional<Principal> requesterPrincipal, String jwtIssuer, String jwksEndpoint, String reason)
removeJwks
in interface io.confluent.security.trustservice.store.TrustWriter
public CompletionStage<Void> replaceJwks(Optional<Principal> requesterPrincipal, String jwtIssuer, String jwksEndpoint, org.jose4j.jwk.JsonWebKeySet jwks, String reason)
replaceJwks
in interface io.confluent.security.trustservice.store.TrustWriter
public CompletionStage<Void> addIdentityPool(Optional<Principal> requesterPrincipal, String poolId, int version, String issuer, String jwksEndpoint, String subjectClaim, String serviceAccount, String policy, String orgId, String reason)
addIdentityPool
in interface io.confluent.security.trustservice.store.TrustWriter
public CompletionStage<Void> removeIdentityPool(Optional<Principal> requesterPrincipal, String poolId, String reason)
removeIdentityPool
in interface io.confluent.security.trustservice.store.TrustWriter
public CompletionStage<Void> replaceIdentityPool(Optional<Principal> requesterPrincipal, String poolId, int version, String issuer, String jwksEndpoint, String subjectClaim, String serviceAccount, String policy, String orgId, String reason)
replaceIdentityPool
in interface io.confluent.security.trustservice.store.TrustWriter
public CompletionStage<Void> addRefreshTokenInfo(Optional<Principal> requesterPrincipal, String issuer, String encryptedRefreshToken, long issuedAt, String subClaim, String sessionId)
addRefreshTokenInfo
in interface io.confluent.security.trustservice.store.TrustWriter
public CompletionStage<Void> removeRefreshTokenInfo(Optional<Principal> requesterPrincipal, String issuer, String subClaim)
removeRefreshTokenInfo
in interface io.confluent.security.trustservice.store.TrustWriter
public CompletionStage<Void> replaceRefreshTokenInfo(Optional<Principal> requesterPrincipal, String issuer, String encryptedRefreshToken, long issuedAt, String subClaim, String sessionId)
replaceRefreshTokenInfo
in interface io.confluent.security.trustservice.store.TrustWriter
public CompletionStage<Void> createAcls(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal, io.confluent.security.authorizer.Scope scope, org.apache.kafka.common.acl.AclBinding aclBinding)
createAcls
in interface io.confluent.security.auth.metadata.AuthWriter
public Map<org.apache.kafka.common.acl.AclBinding,CompletionStage<org.apache.kafka.server.authorizer.AclCreateResult>> createAcls(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal, io.confluent.security.authorizer.Scope scope, List<org.apache.kafka.common.acl.AclBinding> aclBindings)
createAcls
in interface io.confluent.security.auth.metadata.AuthWriter
public CompletionStage<Collection<org.apache.kafka.common.acl.AclBinding>> deleteAcls(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal, io.confluent.security.authorizer.Scope scope, org.apache.kafka.common.acl.AclBindingFilter aclBindingFilter, Predicate<io.confluent.security.authorizer.ResourcePattern> resourceAccess)
deleteAcls
in interface io.confluent.security.auth.metadata.AuthWriter
public Map<org.apache.kafka.common.acl.AclBindingFilter,CompletionStage<org.apache.kafka.server.authorizer.AclDeleteResult>> deleteAcls(Optional<org.apache.kafka.common.security.auth.KafkaPrincipal> callingPrincipal, io.confluent.security.authorizer.Scope scope, List<org.apache.kafka.common.acl.AclBindingFilter> aclBindingFilters, Predicate<io.confluent.security.authorizer.ResourcePattern> resourceAccess)
deleteAcls
in interface io.confluent.security.auth.metadata.AuthWriter
public void startWriter(int i)
Writer
MetadataServiceCoordinator
during writer election.startWriter
in interface Writer
i
- Generation id of writerpublic void stopWriter(Integer integer)
Writer
stopWriter
in interface Writer
integer
- Generation id of writer being stopped or null to stop regardless of
current writer generationpublic boolean ready()
Writer
public void close()
close
in interface Closeable
close
in interface AutoCloseable