io.confluent.security.auth.store.kafka

Class KafkaAuthStore

java.lang.Object

io.confluent.security.auth.store.kafka.KafkaAuthStore

All Implemented Interfaces:

io.confluent.security.auth.metadata.AuthStore, ConsumerListener<io.confluent.security.auth.store.data.AuthKey,io.confluent.security.auth.store.data.AuthValue>, Closeable, AutoCloseable, org.apache.kafka.common.Configurable

public class KafkaAuthStore
extends Object
implements io.confluent.security.auth.metadata.AuthStore, ConsumerListener<io.confluent.security.auth.store.data.AuthKey,io.confluent.security.auth.store.data.AuthValue>

Field Summary

Fields

Modifier and Type	Field and Description
static String	AUTH_TOPIC
static String	METRIC_GROUP

Fields inherited from interface io.confluent.security.auth.metadata.AuthStore

INSTANCES

Constructor Summary

Constructors

Constructor and Description
KafkaAuthStore(boolean isConfluentCloud, io.confluent.security.authorizer.Scope scope, org.apache.kafka.server.authorizer.internals.ConfluentAuthorizerServerInfo serverInfo)
KafkaAuthStore(io.confluent.security.rbac.RbacRoles rbacRoles, org.apache.kafka.common.utils.Time time, io.confluent.security.authorizer.Scope scope, org.apache.kafka.server.authorizer.internals.ConfluentAuthorizerServerInfo serverInfo, int numAuthTopicPartitions)

Method Summary

Modifier and Type	Method and Description
Collection<URL>	activeNodeUrls(String protocol)
DefaultAuthCache	authCache()
void	close()
void	close(Duration closeTimeout)
void	configure(Map<String,?> configs)
protected org.apache.kafka.clients.admin.AdminClient	createAdminClient(Map<String,Object> configs)
protected org.apache.kafka.clients.consumer.Consumer<io.confluent.security.auth.store.data.AuthKey,io.confluent.security.auth.store.data.AuthValue>	createConsumer(Map<String,Object> configs)
protected MetadataNodeManager	createNodeManager(Collection<URL> nodeUrls, KafkaStoreConfig config, KafkaAuthWriter writer, org.apache.kafka.common.utils.Time time)
protected org.apache.kafka.clients.producer.Producer<io.confluent.security.auth.store.data.AuthKey,io.confluent.security.auth.store.data.AuthValue>	createProducer(Map<String,Object> configs)
protected KafkaAuthWriter	createWriter(int numPartitions, KafkaStoreConfig clientConfig, DefaultAuthCache authCache, StatusListener statusListener, org.apache.kafka.common.utils.Time time)
boolean	isMasterWriter()
Integer	masterWriterId()
URL	masterWriterUrl(String protocol)
protected org.apache.kafka.common.metrics.Metrics	metrics()
void	onConsumerRecord(org.apache.kafka.clients.consumer.ConsumerRecord<io.confluent.security.auth.store.data.AuthKey,io.confluent.security.auth.store.data.AuthValue> record, io.confluent.security.auth.store.data.AuthValue oldValue) Notification of new record consumed by local reader
CompletionStage<Void>	startReader()
CompletionStage<Void>	startService(Collection<URL> nodeUrls)
DefaultAuthCache	trustCache()
KafkaAuthWriter	writer()

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface io.confluent.security.auth.metadata.AuthStore

addInstance, getInstance, removeInstance

Field Detail

AUTH_TOPIC

public static final String AUTH_TOPIC

See Also:

Constant Field Values

METRIC_GROUP

public static final String METRIC_GROUP

See Also:

Constant Field Values

Constructor Detail

KafkaAuthStore

public KafkaAuthStore(boolean isConfluentCloud,
                      io.confluent.security.authorizer.Scope scope,
                      org.apache.kafka.server.authorizer.internals.ConfluentAuthorizerServerInfo serverInfo)

KafkaAuthStore

public KafkaAuthStore(io.confluent.security.rbac.RbacRoles rbacRoles,
                      org.apache.kafka.common.utils.Time time,
                      io.confluent.security.authorizer.Scope scope,
                      org.apache.kafka.server.authorizer.internals.ConfluentAuthorizerServerInfo serverInfo,
                      int numAuthTopicPartitions)

Method Detail

configure

public void configure(Map<String,?> configs)

Specified by:

configure in interface org.apache.kafka.common.Configurable

authCache

public DefaultAuthCache authCache()

Specified by:

authCache in interface io.confluent.security.auth.metadata.AuthStore

trustCache

public DefaultAuthCache trustCache()

Specified by:

trustCache in interface io.confluent.security.auth.metadata.AuthStore

startReader

public CompletionStage<Void> startReader()

Specified by:

startReader in interface io.confluent.security.auth.metadata.AuthStore

startService

public CompletionStage<Void> startService(Collection<URL> nodeUrls)

Specified by:

startService in interface io.confluent.security.auth.metadata.AuthStore

writer

public KafkaAuthWriter writer()

Specified by:

writer in interface io.confluent.security.auth.metadata.AuthStore

isMasterWriter

public boolean isMasterWriter()

Specified by:

isMasterWriter in interface io.confluent.security.auth.metadata.AuthStore

masterWriterUrl

public URL masterWriterUrl(String protocol)

Specified by:

masterWriterUrl in interface io.confluent.security.auth.metadata.AuthStore

masterWriterId

public Integer masterWriterId()

Specified by:

masterWriterId in interface io.confluent.security.auth.metadata.AuthStore

activeNodeUrls

public Collection<URL> activeNodeUrls(String protocol)

Specified by:

activeNodeUrls in interface io.confluent.security.auth.metadata.AuthStore

close

public void close()

Specified by:

close in interface Closeable

Specified by:

close in interface AutoCloseable

close

public void close(Duration closeTimeout)

onConsumerRecord

public void onConsumerRecord(org.apache.kafka.clients.consumer.ConsumerRecord<io.confluent.security.auth.store.data.AuthKey,io.confluent.security.auth.store.data.AuthValue> record,
                             io.confluent.security.auth.store.data.AuthValue oldValue)

Description copied from interface: ConsumerListener

Notification of new record consumed by local reader

Specified by:

onConsumerRecord in interface ConsumerListener<io.confluent.security.auth.store.data.AuthKey,io.confluent.security.auth.store.data.AuthValue>

Parameters:

record - the record from consumer

oldValue - old value corresponding to record key from local cache

createConsumer

protected org.apache.kafka.clients.consumer.Consumer<io.confluent.security.auth.store.data.AuthKey,io.confluent.security.auth.store.data.AuthValue> createConsumer(Map<String,Object> configs)

createProducer

protected org.apache.kafka.clients.producer.Producer<io.confluent.security.auth.store.data.AuthKey,io.confluent.security.auth.store.data.AuthValue> createProducer(Map<String,Object> configs)

createAdminClient

protected org.apache.kafka.clients.admin.AdminClient createAdminClient(Map<String,Object> configs)

createNodeManager

protected MetadataNodeManager createNodeManager(Collection<URL> nodeUrls,
                                                KafkaStoreConfig config,
                                                KafkaAuthWriter writer,
                                                org.apache.kafka.common.utils.Time time)

createWriter

protected KafkaAuthWriter createWriter(int numPartitions,
                                       KafkaStoreConfig clientConfig,
                                       DefaultAuthCache authCache,
                                       StatusListener statusListener,
                                       org.apache.kafka.common.utils.Time time)

metrics

protected org.apache.kafka.common.metrics.Metrics metrics()