Class S2SDenyRule

java.lang.Object
io.confluent.security.authorizer.AccessRule
io.confluent.security.auth.s2s.S2SDenyRule
All Implemented Interfaces:
io.confluent.security.authorizer.AuthorizePolicy
public class S2SDenyRule extends io.confluent.security.authorizer.AccessRule
DENY-only rule carrying the SPIFFE-ID that triggered the denial. Emitted by the L2 GATE (S2SConnectionLevelAuthZProvider) on a Cedar forbid.

  • Nested Class Summary

    Nested classes/interfaces inherited from interface io.confluent.security.authorizer.AuthorizePolicy

    io.confluent.security.authorizer.AuthorizePolicy.BrokerTypeTopicUser, io.confluent.security.authorizer.AuthorizePolicy.BrokerUser, io.confluent.security.authorizer.AuthorizePolicy.NoMatchingRule, io.confluent.security.authorizer.AuthorizePolicy.PolicyType, io.confluent.security.authorizer.AuthorizePolicy.SuperUser

  • Field Summary

    Fields inherited from class io.confluent.security.authorizer.AccessRule

    ALL_HOSTS, GROUP_PRINCIPAL_TYPE, WILDCARD_GROUP_PRINCIPAL, WILDCARD_USER_PRINCIPAL

    Fields inherited from interface io.confluent.security.authorizer.AuthorizePolicy

    ALLOW_ON_NO_RULE, DENY_ON_NO_RULE, NO_MATCHING_RULE

  • Constructor Summary

    Constructors
    Constructor
    Description
    S2SDenyRule(String spiffeId, io.confluent.security.authorizer.Action action)
     

  • Method Summary

    Modifier and Type
    Method
    Description
    io.confluent.security.authorizer.Action
    action()
     
    String
    spiffeId()
     
    String
    toString()
     

    Methods inherited from class io.confluent.security.authorizer.AccessRule

    asBaseKafkaPrincipal, clusterLinkIds, equals, hashCode, host, matches, matches, matches, matches, matchingPrincipals, operation, permissionType, policyType, principal, resourcePattern

    Methods inherited from class Object

    getClass, notify, notifyAll, wait, wait, wait

  • Constructor Details

    • S2SDenyRule

      public S2SDenyRule(String spiffeId, io.confluent.security.authorizer.Action action)

  • Method Details

    • spiffeId

      public String spiffeId()

    • action

      public io.confluent.security.authorizer.Action action()

    • toString

      public String toString()
      Overrides:
      toString in class io.confluent.security.authorizer.AccessRule