A B C D E F G H I J K L M N O P R S T U V W

A

AclBindingKey - Class in io.confluent.security.auth.store.data

AclBindingKey(ResourcePattern, Scope) - Constructor for class io.confluent.security.auth.store.data.AclBindingKey

aclBindings(Scope, AclBindingFilter, Predicate<ResourcePattern>) - Method in interface io.confluent.security.auth.metadata.AuthCache

Returns ACL bindings which match the provided filter.

AclBindingValue - Class in io.confluent.security.auth.store.data

AclBindingValue(Collection<AclRule>) - Constructor for class io.confluent.security.auth.store.data.AclBindingValue

aclRules(Scope) - Method in interface io.confluent.security.auth.metadata.AuthCache

Returns the ACL rules for all resources of given scope

aclRules() - Method in class io.confluent.security.auth.store.data.AclBindingValue

activeNodeUrls(String) - Method in interface io.confluent.security.auth.metadata.AuthStore

Returns the collection of URLS of currently active nodes.

addClusterRoleBinding(Optional<KafkaPrincipal>, KafkaPrincipal, String, Scope, String) - Method in interface io.confluent.security.auth.metadata.AuthWriter

Adds a new cluster-level role binding without any resources.

addClusterRoleBinding(KafkaPrincipal, String, Scope) - Method in interface io.confluent.security.auth.metadata.AuthWriter

addInstance(String, AuthStore, Logger) - Static method in interface io.confluent.security.auth.metadata.AuthStore

addMatchingRules(ResourceAuthorizeRules, KafkaPrincipal, Set<KafkaPrincipal>, String, Operation, Scope, ResourceType) - Method in interface io.confluent.security.auth.metadata.AuthCache

Adds RBAC or ACL rules for the specified principals that match the provided parameters to `matchingRules`.

addResourceRoleBinding(Optional<KafkaPrincipal>, KafkaPrincipal, String, Scope, Collection<ResourcePattern>, String) - Method in interface io.confluent.security.auth.metadata.AuthWriter

Adds resources to a role binding.

addResourceRoleBinding(KafkaPrincipal, String, Scope, Collection<ResourcePattern>) - Method in interface io.confluent.security.auth.metadata.AuthWriter

app() - Method in class io.confluent.security.auth.store.data.LatencyRecordKey

AuthCache - Interface in io.confluent.security.auth.metadata

Cache containing authorization and authentication metadata.

authCache() - Method in interface io.confluent.security.auth.metadata.AuthStore

Returns a cache that stores all data read from the auth topic.

AuthCache.Result - Class in io.confluent.security.auth.metadata

The result of a health check call.

AuthEntryType - Enum in io.confluent.security.auth.store.data

AuthKey - Class in io.confluent.security.auth.store.data

AuthKey() - Constructor for class io.confluent.security.auth.store.data.AuthKey

AUTHNZ_AUTH_TOPIC - Static variable in class io.confluent.kafka.multitenant.config.AuthnzConfig

AUTHNZ_ID - Static variable in class io.confluent.kafka.multitenant.config.AuthnzConfig

AUTHNZ_SESSION_UUID - Static variable in class io.confluent.kafka.multitenant.config.AuthnzConfig

AuthnzConfig - Class in io.confluent.kafka.multitenant.config

AuthStore - Interface in io.confluent.security.auth.metadata

Store containing authorization and authentication metadata.

AuthUtils - Class in io.confluent.kafka.multitenant.utils

AuthUtils() - Constructor for class io.confluent.kafka.multitenant.utils.AuthUtils

AuthValue - Class in io.confluent.security.auth.store.data

AuthValue() - Constructor for class io.confluent.security.auth.store.data.AuthValue

AuthWriter - Interface in io.confluent.security.auth.metadata

Writer interface used by Metadata Server to update role bindings.

B

BaseMultiTenantSaslSecretsStore - Class in io.confluent.kafka.server.plugins.auth

This class loads SASL secrets from the topic _confluent-apikey.

BaseMultiTenantSaslSecretsStore(Map<String, Object>, Metrics) - Constructor for class io.confluent.kafka.server.plugins.auth.BaseMultiTenantSaslSecretsStore

BaseMultiTenantSaslSecretsStore.State - Enum in io.confluent.kafka.server.plugins.auth

The SecretsStore state.

BasePhysicalClusterMetadata<LCMType extends org.apache.kafka.server.multitenant.LogicalClusterMetadata> - Class in io.confluent.kafka.multitenant

Base class for the PhysicalClusterMetadata plugins, interfacing with other confluent plugins

BasePhysicalClusterMetadata() - Constructor for class io.confluent.kafka.multitenant.BasePhysicalClusterMetadata

C

CaCertCrlKey - Class in io.confluent.security.auth.store.data

CaCertCrlKey(String, String) - Constructor for class io.confluent.security.auth.store.data.CaCertCrlKey

CaCertCrlValue - Class in io.confluent.security.auth.store.data

CaCertCrlValue(String) - Constructor for class io.confluent.security.auth.store.data.CaCertCrlValue

CaCertificatesKey - Class in io.confluent.security.auth.store.data

CaCertificatesKey(String, String) - Constructor for class io.confluent.security.auth.store.data.CaCertificatesKey

CaCertificatesValue - Class in io.confluent.security.auth.store.data

CaCertificatesValue(String) - Constructor for class io.confluent.security.auth.store.data.CaCertificatesValue

cacheKey(JwtIssuerKey.Version) - Method in class io.confluent.security.auth.store.data.JwtIssuerKey

cacheKey(String, String) - Static method in class io.confluent.security.auth.store.data.RefreshTokenInfoKey

cacheKey() - Method in class io.confluent.security.auth.store.data.RefreshTokenInfoKey

cacheKeyV1(String, String) - Static method in class io.confluent.security.auth.store.data.JwtIssuerKey

Util method for use by outside modules.

cacheKeyV2(String, String) - Static method in class io.confluent.security.auth.store.data.JwtIssuerKey

Util method for use by outside modules.

CDC_LC_METADATA_TOPIC_CONFIG - Static variable in class io.confluent.kafka.multitenant.config.AuthnzConfig

CertIdentityPool - Class in io.confluent.security.auth.mtls

CertIdentityPool(String, String, String, String, String) - Constructor for class io.confluent.security.auth.mtls.CertIdentityPool

CertIdentityPoolExternalIdentifier - Enum in io.confluent.security.auth.mtls

Enum for Certificate Identity Pool External Ids, defined in https://confluentinc.atlassian.net/wiki/x/8YVhz

CertIdentityPoolKey - Class in io.confluent.security.auth.store.data

CertIdentityPoolKey(String, String) - Constructor for class io.confluent.security.auth.store.data.CertIdentityPoolKey

CertIdentityPoolValue - Class in io.confluent.security.auth.store.data

CertIdentityPoolValue(String, String, String, String, String) - Constructor for class io.confluent.security.auth.store.data.CertIdentityPoolValue

certificates() - Method in class io.confluent.security.auth.store.data.CaCertificatesValue

close(String) - Method in class io.confluent.kafka.multitenant.CommonTopicBasedPhysicalClusterMetadata

close() - Method in class io.confluent.kafka.server.plugins.auth.BaseMultiTenantSaslSecretsStore

cluster() - Method in class io.confluent.security.auth.store.data.LatencyRecordKey

CommonTopicBasedPhysicalClusterMetadata<LCMType extends org.apache.kafka.server.multitenant.LogicalClusterMetadata> - Class in io.confluent.kafka.multitenant

CommonTopicBasedPhysicalClusterMetadata(Metrics) - Constructor for class io.confluent.kafka.multitenant.CommonTopicBasedPhysicalClusterMetadata

CommonTopicBasedPhysicalClusterMetadata(Metrics, Time) - Constructor for class io.confluent.kafka.multitenant.CommonTopicBasedPhysicalClusterMetadata

CommonTopicBasedPhysicalClusterMetadata.State - Enum in io.confluent.kafka.multitenant

configure(Map<String, ?>) - Method in class io.confluent.kafka.multitenant.CommonTopicBasedPhysicalClusterMetadata

Creates a consumer for the LC metadata topic (named in the ConfluentConfigs.CDC_LC_METADATA_TOPIC_CONFIG config.) Adds the instance for the given broker session UUID, specified in KafkaConfig.BrokerSessionUuidProp to the static instance map.

configure(Map<String, ?>) - Method in class io.confluent.kafka.server.plugins.auth.BaseMultiTenantSaslSecretsStore

CONFLUENT_CDC_LC_METADATA_PREFIX - Static variable in class io.confluent.kafka.multitenant.config.AuthnzConfig

CONFLUENT_PREFIX - Static variable in class io.confluent.kafka.multitenant.config.AuthnzConfig

consume(ConsumerRecord<String, byte[]>) - Method in class io.confluent.kafka.multitenant.CommonTopicBasedPhysicalClusterMetadata

createAcls(Optional<KafkaPrincipal>, Scope, AclBinding) - Method in interface io.confluent.security.auth.metadata.AuthWriter

Creates ACL rules for a given AclBinding.

createAcls(Scope, AclBinding) - Method in interface io.confluent.security.auth.metadata.AuthWriter

createAcls(Optional<KafkaPrincipal>, Scope, List<AclBinding>) - Method in interface io.confluent.security.auth.metadata.AuthWriter

Creates ACLs for the specified scope using the minimal number of batched updates.

createAcls(Scope, List<AclBinding>) - Method in interface io.confluent.security.auth.metadata.AuthWriter

crl() - Method in class io.confluent.security.auth.store.data.CaCertCrlValue

D

deleteAcls(Optional<KafkaPrincipal>, Scope, AclBindingFilter, Predicate<ResourcePattern>) - Method in interface io.confluent.security.auth.metadata.AuthWriter

Deletes all ACL rules that match the provided filters.

deleteAcls(Scope, AclBindingFilter, Predicate<ResourcePattern>) - Method in interface io.confluent.security.auth.metadata.AuthWriter

deleteAcls(Optional<KafkaPrincipal>, Scope, List<AclBindingFilter>, Predicate<ResourcePattern>) - Method in interface io.confluent.security.auth.metadata.AuthWriter

Deletes ACLs that match any of the provided filters using batched update.

deleteAcls(Scope, List<AclBindingFilter>, Predicate<ResourcePattern>) - Method in interface io.confluent.security.auth.metadata.AuthWriter

deletedCredentials(MultiTenantSaslSecrets) - Method in class io.confluent.kafka.server.plugins.auth.MultiTenantSaslSecrets

E

encryptedRefreshToken() - Method in class io.confluent.security.auth.store.data.RefreshTokenInfoValue

entries() - Method in class io.confluent.kafka.server.plugins.auth.MultiTenantSaslSecrets

entryType() - Method in class io.confluent.security.auth.store.data.AclBindingKey

entryType() - Method in class io.confluent.security.auth.store.data.AclBindingValue

entryType() - Method in class io.confluent.security.auth.store.data.AuthKey

entryType() - Method in class io.confluent.security.auth.store.data.AuthValue

entryType() - Method in class io.confluent.security.auth.store.data.CaCertCrlKey

entryType() - Method in class io.confluent.security.auth.store.data.CaCertCrlValue

entryType() - Method in class io.confluent.security.auth.store.data.CaCertificatesKey

entryType() - Method in class io.confluent.security.auth.store.data.CaCertificatesValue

entryType() - Method in class io.confluent.security.auth.store.data.CertIdentityPoolKey

entryType() - Method in class io.confluent.security.auth.store.data.CertIdentityPoolValue

entryType() - Method in class io.confluent.security.auth.store.data.IdentityPoolKey

entryType() - Method in class io.confluent.security.auth.store.data.IdentityPoolValue

entryType() - Method in class io.confluent.security.auth.store.data.JwtIssuerKey

entryType() - Method in class io.confluent.security.auth.store.data.JwtIssuerValue

entryType() - Method in class io.confluent.security.auth.store.data.LatencyRecordKey

entryType() - Method in class io.confluent.security.auth.store.data.LatencyRecordValue

entryType() - Method in class io.confluent.security.auth.store.data.RefreshTokenInfoKey

entryType() - Method in class io.confluent.security.auth.store.data.RefreshTokenInfoValue

entryType() - Method in class io.confluent.security.auth.store.data.RoleBindingKey

entryType() - Method in class io.confluent.security.auth.store.data.RoleBindingValue

entryType() - Method in class io.confluent.security.auth.store.data.StatusKey

entryType() - Method in class io.confluent.security.auth.store.data.StatusValue

entryType() - Method in class io.confluent.security.auth.store.data.UserKey

entryType() - Method in class io.confluent.security.auth.store.data.UserValue

equals(Object) - Method in class io.confluent.security.auth.mtls.CertIdentityPool

equals(Object) - Method in class io.confluent.security.auth.store.data.AclBindingKey

equals(Object) - Method in class io.confluent.security.auth.store.data.AclBindingValue

equals(Object) - Method in class io.confluent.security.auth.store.data.AuthKey

equals(Object) - Method in class io.confluent.security.auth.store.data.AuthValue

equals(Object) - Method in class io.confluent.security.auth.store.data.CaCertCrlKey

equals(Object) - Method in class io.confluent.security.auth.store.data.CaCertCrlValue

equals(Object) - Method in class io.confluent.security.auth.store.data.CaCertificatesKey

equals(Object) - Method in class io.confluent.security.auth.store.data.CaCertificatesValue

equals(Object) - Method in class io.confluent.security.auth.store.data.CertIdentityPoolKey

equals(Object) - Method in class io.confluent.security.auth.store.data.CertIdentityPoolValue

equals(Object) - Method in class io.confluent.security.auth.store.data.IdentityPoolKey

equals(Object) - Method in class io.confluent.security.auth.store.data.IdentityPoolValue

equals(Object) - Method in class io.confluent.security.auth.store.data.JwtIssuerKey

equals(Object) - Method in class io.confluent.security.auth.store.data.JwtIssuerValue

equals(Object) - Method in class io.confluent.security.auth.store.data.LatencyRecordKey

equals(Object) - Method in class io.confluent.security.auth.store.data.LatencyRecordValue

equals(Object) - Method in class io.confluent.security.auth.store.data.RefreshTokenInfoKey

equals(Object) - Method in class io.confluent.security.auth.store.data.RefreshTokenInfoValue

equals(Object) - Method in class io.confluent.security.auth.store.data.RoleBindingKey

equals(Object) - Method in class io.confluent.security.auth.store.data.RoleBindingValue

equals(Object) - Method in class io.confluent.security.auth.store.data.StatusKey

equals(Object) - Method in class io.confluent.security.auth.store.data.StatusValue

equals(Object) - Method in class io.confluent.security.auth.store.data.UserKey

equals(Object) - Method in class io.confluent.security.auth.store.data.UserValue

errorMessage() - Method in class io.confluent.security.auth.store.data.StatusValue

EVENTS_METADATA_HEADER_KEY - Static variable in class io.confluent.kafka.multitenant.utils.AuthUtils

externalId() - Method in class io.confluent.security.auth.store.data.CertIdentityPoolValue

externalIdentifier() - Method in class io.confluent.security.auth.mtls.CertIdentityPool

F

fail(int, String) - Method in interface io.confluent.security.store.KeyValueStore

Sets local error for the store with the specified error message.

filter() - Method in class io.confluent.security.auth.mtls.CertIdentityPool

filter() - Method in class io.confluent.security.auth.store.data.CertIdentityPoolValue

findCertIdentityPools(X509Certificate, String, String) - Method in interface io.confluent.security.auth.metadata.AuthCache

Return the cert identity pools that match the given certificate metadata and organization id.

findCertIdentityPools(Map<String, String>, String, String) - Method in interface io.confluent.security.auth.metadata.AuthCache

Return the cert identity pools that match the given certificate metadata and organization id.

findCertIdentityProviders(Certificate[], String) - Method in interface io.confluent.security.auth.metadata.AuthCache

Return the collections of identity providers that match the provided certificate chain.

findExternalIdentifierFromIdentityPools(Collection<CertIdentityPool>) - Static method in enum io.confluent.security.auth.mtls.CertIdentityPoolExternalIdentifier

Determine the externalIdentifier with the highest priority from a collection of identity pools.

findRule(KafkaPrincipal, Set<KafkaPrincipal>, String, Action) - Method in interface io.confluent.security.auth.metadata.AuthCache

Returns RBAC or ACL rule that matches the specified action.

G

generationId() - Method in class io.confluent.security.auth.store.data.StatusValue

get(K) - Method in interface io.confluent.security.store.KeyValueStore

Returns the current value associated with key if it exists or null otherwise.

getBrokerSessionUuid(Map<String, ?>) - Static method in class io.confluent.kafka.multitenant.utils.AuthUtils

getCertChain(Certificate[], String) - Method in interface io.confluent.security.auth.metadata.AuthCache

Given a partial cert chain and organization id, return the complete certificate chain for the org if applicable.

getDescription() - Method in enum io.confluent.security.auth.mtls.CertIdentityPoolExternalIdentifier

getInstance(String) - Static method in class io.confluent.kafka.multitenant.BasePhysicalClusterMetadata

getInstance(String) - Static method in class io.confluent.kafka.server.plugins.auth.BaseMultiTenantSaslSecretsStore

getInstance(String) - Static method in interface io.confluent.security.auth.metadata.AuthStore

getLastSequenceId() - Method in class io.confluent.kafka.server.plugins.auth.BaseMultiTenantSaslSecretsStore

getMessage() - Method in class io.confluent.security.auth.metadata.AuthCache.Result

Any message provided as part of the check

getPriority() - Method in enum io.confluent.security.auth.mtls.CertIdentityPoolExternalIdentifier

getValue() - Method in enum io.confluent.security.auth.mtls.CertIdentityPoolExternalIdentifier

groups(KafkaPrincipal) - Method in interface io.confluent.security.auth.metadata.AuthCache

Returns the groups of the provided session principal.

groups() - Method in class io.confluent.security.auth.store.data.UserValue

H

hashCode() - Method in class io.confluent.security.auth.mtls.CertIdentityPool

hashCode() - Method in class io.confluent.security.auth.store.data.AclBindingKey

hashCode() - Method in class io.confluent.security.auth.store.data.AclBindingValue

hashCode() - Method in class io.confluent.security.auth.store.data.AuthKey

Using entryType().name() to compute hashCode, so that hashCode() is constant across executions.

hashCode() - Method in class io.confluent.security.auth.store.data.AuthValue

hashCode() - Method in class io.confluent.security.auth.store.data.CaCertCrlKey

hashCode() - Method in class io.confluent.security.auth.store.data.CaCertCrlValue

hashCode() - Method in class io.confluent.security.auth.store.data.CaCertificatesKey

hashCode() - Method in class io.confluent.security.auth.store.data.CaCertificatesValue

hashCode() - Method in class io.confluent.security.auth.store.data.CertIdentityPoolKey

hashCode() - Method in class io.confluent.security.auth.store.data.CertIdentityPoolValue

hashCode() - Method in class io.confluent.security.auth.store.data.IdentityPoolKey

hashCode() - Method in class io.confluent.security.auth.store.data.IdentityPoolValue

hashCode() - Method in class io.confluent.security.auth.store.data.JwtIssuerKey

hashCode() - Method in class io.confluent.security.auth.store.data.JwtIssuerValue

hashCode() - Method in class io.confluent.security.auth.store.data.LatencyRecordKey

hashCode() - Method in class io.confluent.security.auth.store.data.LatencyRecordValue

hashCode() - Method in class io.confluent.security.auth.store.data.RefreshTokenInfoKey

hashCode() - Method in class io.confluent.security.auth.store.data.RefreshTokenInfoValue

hashCode() - Method in class io.confluent.security.auth.store.data.RoleBindingKey

hashCode() - Method in class io.confluent.security.auth.store.data.RoleBindingValue

hashCode() - Method in class io.confluent.security.auth.store.data.StatusKey

hashCode() - Method in class io.confluent.security.auth.store.data.StatusValue

hashCode() - Method in class io.confluent.security.auth.store.data.UserKey

hashCode() - Method in class io.confluent.security.auth.store.data.UserValue

hashedSecret() - Method in class io.confluent.kafka.server.plugins.auth.MultiTenantSaslConfigEntry

hashFunction() - Method in class io.confluent.kafka.server.plugins.auth.MultiTenantSaslConfigEntry

healthcheck() - Method in interface io.confluent.security.auth.metadata.AuthCache

health check method which returns the health of the underlying auth store

healthy() - Static method in class io.confluent.security.auth.metadata.AuthCache.Result

healthy(String) - Static method in class io.confluent.security.auth.metadata.AuthCache.Result

I

IdentityPoolKey - Class in io.confluent.security.auth.store.data

IdentityPoolKey(String) - Constructor for class io.confluent.security.auth.store.data.IdentityPoolKey

IdentityPoolValue - Class in io.confluent.security.auth.store.data

IdentityPoolValue(long, String, String, String, String, String, String, String, String, String) - Constructor for class io.confluent.security.auth.store.data.IdentityPoolValue

IdentityPoolValue(long, String, String, String, String, String, String, String) - Constructor for class io.confluent.security.auth.store.data.IdentityPoolValue

IdentityPoolValue(long, String, String, String, String, String) - Constructor for class io.confluent.security.auth.store.data.IdentityPoolValue

IdentityPoolValue(long, String, String, String, String, String, String, String, String) - Constructor for class io.confluent.security.auth.store.data.IdentityPoolValue

IdentityPoolValue(IdentityPool) - Constructor for class io.confluent.security.auth.store.data.IdentityPoolValue

INSTANCES - Static variable in interface io.confluent.security.auth.metadata.AuthStore

io.confluent.kafka.multitenant - package io.confluent.kafka.multitenant

io.confluent.kafka.multitenant.config - package io.confluent.kafka.multitenant.config

io.confluent.kafka.multitenant.utils - package io.confluent.kafka.multitenant.utils

io.confluent.kafka.server.plugins.auth - package io.confluent.kafka.server.plugins.auth

io.confluent.security.auth.metadata - package io.confluent.security.auth.metadata

io.confluent.security.auth.mtls - package io.confluent.security.auth.mtls

io.confluent.security.auth.store.data - package io.confluent.security.auth.store.data

io.confluent.security.auth.store.data.exceptions - package io.confluent.security.auth.store.data.exceptions

io.confluent.security.store - package io.confluent.security.store

isCompleteCertChain(Certificate[], String) - Method in interface io.confluent.security.auth.metadata.AuthCache

Check if the certificate chain is complete, which means: - all certificates in the chain must form a valid chain, i.e., each certificate in the chain is signed by the next certificate - the last certificate in the chain must be present in the trust store, i.e., there exists a cert identity provider that has the last certificate in the chain.

isHealthy() - Method in class io.confluent.security.auth.metadata.AuthCache.Result

isMasterWriter() - Method in interface io.confluent.security.auth.metadata.AuthStore

Returns true if this node is currently the master writer.

isRevoked(X509Certificate, String, String) - Method in interface io.confluent.security.auth.metadata.AuthCache

Return whether the certificate is revoked.

isRevoked(Certificate[], String, String) - Method in interface io.confluent.security.auth.metadata.AuthCache

Given a chain of certificates from leaf up to root, return whether any cert in the chain is revoked.

issuedAt() - Method in class io.confluent.security.auth.store.data.RefreshTokenInfoValue

issuer() - Method in class io.confluent.security.auth.store.data.IdentityPoolValue

issuer() - Method in class io.confluent.security.auth.store.data.JwtIssuerKey

issuer() - Method in class io.confluent.security.auth.store.data.RefreshTokenInfoKey

issuer() - Method in class io.confluent.security.auth.store.data.RefreshTokenInfoValue

J

jwksEndpoint() - Method in class io.confluent.security.auth.store.data.IdentityPoolValue

jwksEndpoint() - Method in class io.confluent.security.auth.store.data.JwtIssuerKey

JwtIssuerKey - Class in io.confluent.security.auth.store.data

JwtIssuerKey(String, String, String) - Constructor for class io.confluent.security.auth.store.data.JwtIssuerKey

JwtIssuerKey(String) - Constructor for class io.confluent.security.auth.store.data.JwtIssuerKey

JwtIssuerKey.Version - Enum in io.confluent.security.auth.store.data

JwtIssuerValue - Class in io.confluent.security.auth.store.data

JwtIssuerValue(JsonWebKeySet) - Constructor for class io.confluent.security.auth.store.data.JwtIssuerValue

K

keys() - Method in class io.confluent.security.auth.store.data.JwtIssuerValue

KeyValueStore<K,V> - Interface in io.confluent.security.store

Key value store implemented by in-memory cache backed with data from a potentially partitioned source like a Kafka topic.

knownScopes() - Method in interface io.confluent.security.auth.metadata.AuthCache

Returns all Scopes known by the backend, regardless of whether or not they actually exist.

L

LatencyRecordKey - Class in io.confluent.security.auth.store.data

LatencyRecordKey(String, String) - Constructor for class io.confluent.security.auth.store.data.LatencyRecordKey

LatencyRecordValue - Class in io.confluent.security.auth.store.data

LatencyRecordValue(long) - Constructor for class io.confluent.security.auth.store.data.LatencyRecordValue

load() - Method in class io.confluent.kafka.server.plugins.auth.BaseMultiTenantSaslSecretsStore

The underlying secrets entries returned by this method may be concurrently modified on API key updates.

logicalClusterId() - Method in class io.confluent.kafka.server.plugins.auth.MultiTenantSaslConfigEntry

logicalClusterIds() - Method in class io.confluent.kafka.multitenant.CommonTopicBasedPhysicalClusterMetadata

logicalClusterIdsIncludingStale() - Method in class io.confluent.kafka.multitenant.BasePhysicalClusterMetadata

Returns all active logical clusters hosted by this physical cluster, including logical clusters with stale/invalid metadata

logicalClusterIdsIncludingStale() - Method in class io.confluent.kafka.multitenant.CommonTopicBasedPhysicalClusterMetadata

M

map(String) - Method in interface io.confluent.security.store.KeyValueStore

masterWriterId() - Method in interface io.confluent.security.auth.metadata.AuthStore

Returns the broker id of the master writer.

masterWriterUrl(String) - Method in interface io.confluent.security.auth.metadata.AuthStore

Returns the URL of the master writer node for the specified protocol.

metadata(String) - Method in class io.confluent.kafka.multitenant.BasePhysicalClusterMetadata

Returns metadata LCMType of a given logical cluster ID

metadata(String) - Method in class io.confluent.kafka.multitenant.CommonTopicBasedPhysicalClusterMetadata

MetadataStoreStatus - Enum in io.confluent.security.store

METRICS_GROUP - Static variable in class io.confluent.kafka.server.plugins.auth.BaseMultiTenantSaslSecretsStore

MissingJwksEndpointException - Exception in io.confluent.security.auth.store.data.exceptions

MissingJwksEndpointException(String) - Constructor for exception io.confluent.security.auth.store.data.exceptions.MissingJwksEndpointException

MultiTenantSaslConfigEntry - Class in io.confluent.kafka.server.plugins.auth

MultiTenantSaslConfigEntry(String, String, String, String, String, boolean, String) - Constructor for class io.confluent.kafka.server.plugins.auth.MultiTenantSaslConfigEntry

MultiTenantSaslSecrets - Class in io.confluent.kafka.server.plugins.auth

MultiTenantSaslSecrets(Map<String, MultiTenantSaslConfigEntry>) - Constructor for class io.confluent.kafka.server.plugins.auth.MultiTenantSaslSecrets

N

NUMBER_OF_NON_HC_TENANTS_METRIC_NAME - Static variable in class io.confluent.kafka.multitenant.CommonTopicBasedPhysicalClusterMetadata

NUMBER_OF_TENANTS_METRIC_NAME - Static variable in class io.confluent.kafka.multitenant.CommonTopicBasedPhysicalClusterMetadata

O

organizationId() - Method in class io.confluent.security.auth.mtls.CertIdentityPool

organizationId() - Method in class io.confluent.security.auth.store.data.CaCertCrlKey

organizationId() - Method in class io.confluent.security.auth.store.data.CaCertificatesKey

organizationId() - Method in class io.confluent.security.auth.store.data.CertIdentityPoolKey

organizationId() - Method in class io.confluent.security.auth.store.data.CertIdentityPoolValue

orgId() - Method in class io.confluent.security.auth.store.data.IdentityPoolValue

P

partition() - Method in class io.confluent.security.auth.store.data.StatusKey

policy() - Method in class io.confluent.security.auth.store.data.IdentityPoolValue

poolId() - Method in class io.confluent.security.auth.mtls.CertIdentityPool

poolId() - Method in class io.confluent.security.auth.store.data.CertIdentityPoolKey

poolId() - Method in class io.confluent.security.auth.store.data.CertIdentityPoolValue

poolId() - Method in class io.confluent.security.auth.store.data.IdentityPoolKey

principal() - Method in class io.confluent.security.auth.store.data.RoleBindingKey

principal() - Method in class io.confluent.security.auth.store.data.UserKey

providerId() - Method in class io.confluent.security.auth.mtls.CertIdentityPool

providerId() - Method in class io.confluent.security.auth.store.data.CaCertCrlKey

providerId() - Method in class io.confluent.security.auth.store.data.CaCertificatesKey

providerId() - Method in class io.confluent.security.auth.store.data.CertIdentityPoolValue

providerId() - Method in class io.confluent.security.auth.store.data.IdentityPoolValue

providerId() - Method in class io.confluent.security.auth.store.data.JwtIssuerKey

put(K, V) - Method in interface io.confluent.security.store.KeyValueStore

Updates the entry for key with the specified value.

R

rbacRoleBindings(Scope) - Method in interface io.confluent.security.auth.metadata.AuthCache

Returns the role bindings at the specified scope.

rbacRoleBindings(Set<Scope>) - Method in interface io.confluent.security.auth.metadata.AuthCache

Returns all the role bindings from a set of scopes.

rbacRoleBindings(RoleBindingFilter) - Method in interface io.confluent.security.auth.metadata.AuthCache

Returns role bindings that match the specified filter.

rbacRoleBindings(KafkaPrincipal) - Method in interface io.confluent.security.auth.metadata.AuthCache

Returns role bindings for the given principal and the principals groups across all known scopes.

rbacRoleBindings(KafkaPrincipal, Set<Scope>) - Method in interface io.confluent.security.auth.metadata.AuthCache

Returns role bindings for the given principal and the principals groups limited to the defined set of Scopes.

rbacRoles() - Method in interface io.confluent.security.auth.metadata.AuthCache

Returns the RBAC role definitions associated with this cache.

reconfigurableConfigs() - Method in class io.confluent.kafka.multitenant.BasePhysicalClusterMetadata

reconfigure(Map<String, ?>) - Method in class io.confluent.kafka.multitenant.BasePhysicalClusterMetadata

RefreshTokenInfoKey - Class in io.confluent.security.auth.store.data

RefreshTokenInfoKey(String, String) - Constructor for class io.confluent.security.auth.store.data.RefreshTokenInfoKey

RefreshTokenInfoValue - Class in io.confluent.security.auth.store.data

RefreshTokenInfoValue(RefreshTokenInfo) - Constructor for class io.confluent.security.auth.store.data.RefreshTokenInfoValue

remove(K) - Method in interface io.confluent.security.store.KeyValueStore

Removes the entry corresponding to the key if it is present in the store.

removeInstance(String, AuthStore, Logger) - Static method in interface io.confluent.security.auth.metadata.AuthStore

removeResourceRoleBinding(Optional<KafkaPrincipal>, KafkaPrincipal, String, Scope, Collection<ResourcePatternFilter>, String) - Method in interface io.confluent.security.auth.metadata.AuthWriter

Removes resources from an existing role binding.

removeResourceRoleBinding(KafkaPrincipal, String, Scope, Collection<ResourcePatternFilter>) - Method in interface io.confluent.security.auth.metadata.AuthWriter

removeRoleBinding(Optional<KafkaPrincipal>, KafkaPrincipal, String, Scope, String) - Method in interface io.confluent.security.auth.metadata.AuthWriter

Removes a role binding.

removeRoleBinding(KafkaPrincipal, String, Scope) - Method in interface io.confluent.security.auth.metadata.AuthWriter

replaceResourceRoleBinding(Optional<KafkaPrincipal>, KafkaPrincipal, String, Scope, Collection<ResourcePattern>, String) - Method in interface io.confluent.security.auth.metadata.AuthWriter

Sets resources for an existing role binding.

replaceResourceRoleBinding(KafkaPrincipal, String, Scope, Collection<ResourcePattern>) - Method in interface io.confluent.security.auth.metadata.AuthWriter

requireNonNull(String, String) - Static method in exception io.confluent.security.auth.store.data.exceptions.MissingJwksEndpointException

resourcePattern() - Method in class io.confluent.security.auth.store.data.AclBindingKey

resources() - Method in class io.confluent.security.auth.store.data.RoleBindingValue

role() - Method in class io.confluent.security.auth.store.data.RoleBindingKey

RoleBindingKey - Class in io.confluent.security.auth.store.data

RoleBindingKey(KafkaPrincipal, String, Scope) - Constructor for class io.confluent.security.auth.store.data.RoleBindingKey

RoleBindingValue - Class in io.confluent.security.auth.store.data

RoleBindingValue(Collection<ResourcePattern>) - Constructor for class io.confluent.security.auth.store.data.RoleBindingValue

rootScope() - Method in interface io.confluent.security.auth.metadata.AuthCache

Returns the root scope of this cache.

S

saslMechanism() - Method in class io.confluent.kafka.server.plugins.auth.MultiTenantSaslConfigEntry

scope() - Method in class io.confluent.security.auth.store.data.AclBindingKey

scope() - Method in class io.confluent.security.auth.store.data.RoleBindingKey

SEQUENCE_ID_STRING_HEADER_KEY - Static variable in class io.confluent.kafka.multitenant.utils.AuthUtils

serviceAccount() - Method in class io.confluent.kafka.server.plugins.auth.MultiTenantSaslConfigEntry

serviceAccount() - Method in class io.confluent.security.auth.store.data.IdentityPoolValue

sessionId() - Method in class io.confluent.security.auth.store.data.RefreshTokenInfoValue

start(Map<String, Object>) - Method in class io.confluent.kafka.multitenant.CommonTopicBasedPhysicalClusterMetadata

start(Collection<Endpoint>) - Method in class io.confluent.kafka.server.plugins.auth.BaseMultiTenantSaslSecretsStore

startReader() - Method in interface io.confluent.security.auth.metadata.AuthStore

Starts the metadata reader and returns a completion stage that is completed when existing metadata from the store has been loaded into the cache.

startService(Collection<URL>) - Method in interface io.confluent.security.auth.metadata.AuthStore

Starts the metadata coordinator and writer.

status() - Method in class io.confluent.security.auth.store.data.StatusValue

status(int) - Method in interface io.confluent.security.store.KeyValueStore

Status of the metadata store for the specified partition

StatusKey - Class in io.confluent.security.auth.store.data

StatusKey(int) - Constructor for class io.confluent.security.auth.store.data.StatusKey

StatusValue - Class in io.confluent.security.auth.store.data

StatusValue(MetadataStoreStatus, int, Integer, String) - Constructor for class io.confluent.security.auth.store.data.StatusValue

subClaim() - Method in class io.confluent.security.auth.store.data.RefreshTokenInfoKey

subClaim() - Method in class io.confluent.security.auth.store.data.RefreshTokenInfoValue

subjectClaim() - Method in class io.confluent.security.auth.store.data.IdentityPoolValue

T

timestamp() - Method in class io.confluent.security.auth.store.data.LatencyRecordValue

toString() - Method in class io.confluent.security.auth.metadata.AuthCache.Result

toString() - Method in class io.confluent.security.auth.store.data.AclBindingKey

toString() - Method in class io.confluent.security.auth.store.data.AclBindingValue

toString() - Method in class io.confluent.security.auth.store.data.CaCertCrlKey

toString() - Method in class io.confluent.security.auth.store.data.CaCertCrlValue

toString() - Method in class io.confluent.security.auth.store.data.CaCertificatesKey

toString() - Method in class io.confluent.security.auth.store.data.CaCertificatesValue

toString() - Method in class io.confluent.security.auth.store.data.CertIdentityPoolKey

toString() - Method in class io.confluent.security.auth.store.data.CertIdentityPoolValue

toString() - Method in class io.confluent.security.auth.store.data.IdentityPoolKey

toString() - Method in class io.confluent.security.auth.store.data.IdentityPoolValue

toString() - Method in class io.confluent.security.auth.store.data.JwtIssuerKey

toString() - Method in class io.confluent.security.auth.store.data.JwtIssuerValue

toString() - Method in class io.confluent.security.auth.store.data.LatencyRecordKey

toString() - Method in class io.confluent.security.auth.store.data.LatencyRecordValue

toString() - Method in class io.confluent.security.auth.store.data.RefreshTokenInfoKey

toString() - Method in class io.confluent.security.auth.store.data.RefreshTokenInfoValue

toString() - Method in class io.confluent.security.auth.store.data.RoleBindingKey

toString() - Method in class io.confluent.security.auth.store.data.RoleBindingValue

toString() - Method in class io.confluent.security.auth.store.data.StatusKey

toString() - Method in class io.confluent.security.auth.store.data.StatusValue

toString() - Method in class io.confluent.security.auth.store.data.UserKey

toString() - Method in class io.confluent.security.auth.store.data.UserValue

trustCache() - Method in interface io.confluent.security.auth.metadata.AuthStore

Returns a trust cache that stores all OAuth related metadata from the auth topic.

tryParseEventsSequenceId(ConsumerRecord) - Static method in class io.confluent.kafka.multitenant.utils.AuthUtils

Reads the header of a message produced by the events pipeline, and returns the sequence id embedded in it.

U

unhealthy(String) - Static method in class io.confluent.security.auth.metadata.AuthCache.Result

unknownField(String, Object) - Method in class io.confluent.kafka.server.plugins.auth.MultiTenantSaslConfigEntry

updateSecrets(ConsumerRecord<String, String>, long) - Method in class io.confluent.kafka.server.plugins.auth.BaseMultiTenantSaslSecretsStore

userId() - Method in class io.confluent.kafka.server.plugins.auth.MultiTenantSaslConfigEntry

UserKey - Class in io.confluent.security.auth.store.data

UserKey(KafkaPrincipal) - Constructor for class io.confluent.security.auth.store.data.UserKey

userMetadata(KafkaPrincipal) - Method in interface io.confluent.security.auth.metadata.AuthCache

Returns metadata for the specified user principal if available or null if user is not known.

userResourceId() - Method in class io.confluent.kafka.server.plugins.auth.MultiTenantSaslConfigEntry

users() - Method in interface io.confluent.security.auth.metadata.AuthCache

Returns user metadata for all users.

UserValue - Class in io.confluent.security.auth.store.data

UserValue(Collection<KafkaPrincipal>) - Constructor for class io.confluent.security.auth.store.data.UserValue

V

validateReconfiguration(Map<String, ?>) - Method in class io.confluent.kafka.multitenant.BasePhysicalClusterMetadata

value() - Method in enum io.confluent.kafka.server.plugins.auth.BaseMultiTenantSaslSecretsStore.State

valueOf(String) - Static method in enum io.confluent.kafka.multitenant.CommonTopicBasedPhysicalClusterMetadata.State

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum io.confluent.kafka.server.plugins.auth.BaseMultiTenantSaslSecretsStore.State

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum io.confluent.security.auth.mtls.CertIdentityPoolExternalIdentifier

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum io.confluent.security.auth.store.data.AuthEntryType

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum io.confluent.security.auth.store.data.JwtIssuerKey.Version

Returns the enum constant of this type with the specified name.

valueOf(String) - Static method in enum io.confluent.security.store.MetadataStoreStatus

Returns the enum constant of this type with the specified name.

values() - Static method in enum io.confluent.kafka.multitenant.CommonTopicBasedPhysicalClusterMetadata.State

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum io.confluent.kafka.server.plugins.auth.BaseMultiTenantSaslSecretsStore.State

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum io.confluent.security.auth.mtls.CertIdentityPoolExternalIdentifier

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum io.confluent.security.auth.store.data.AuthEntryType

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum io.confluent.security.auth.store.data.JwtIssuerKey.Version

Returns an array containing the constants of this enum type, in the order they are declared.

values() - Static method in enum io.confluent.security.store.MetadataStoreStatus

Returns an array containing the constants of this enum type, in the order they are declared.

version() - Method in class io.confluent.security.auth.store.data.IdentityPoolValue

W

writer() - Method in interface io.confluent.security.auth.metadata.AuthStore

Returns a writer instance that can be used to update this store.

writerBrokerId() - Method in class io.confluent.security.auth.store.data.StatusValue

A B C D E F G H I J K L M N O P R S T U V W