Class S2SGrantRule

java.lang.Object
io.confluent.security.authorizer.AccessRule
io.confluent.security.auth.s2s.S2SGrantRule
All Implemented Interfaces:
io.confluent.security.authorizer.AuthorizePolicy
public class S2SGrantRule extends io.confluent.security.authorizer.AccessRule
ALLOW-only rule carrying the system-LAT sub SPIFFE-ID that earned the grant. Used by the L3b VERDICT (S2SServiceLevelAuthZProvider) on a Cedar permit. Mirrors S2SDenyRule (the DENY-only rule) but with PermissionType.ALLOW / AuthorizePolicy.PolicyType.ALLOW_S2S.

  • Nested Class Summary

    Nested classes/interfaces inherited from interface io.confluent.security.authorizer.AuthorizePolicy

    io.confluent.security.authorizer.AuthorizePolicy.BrokerTypeTopicUser, io.confluent.security.authorizer.AuthorizePolicy.BrokerUser, io.confluent.security.authorizer.AuthorizePolicy.NoMatchingRule, io.confluent.security.authorizer.AuthorizePolicy.PolicyType, io.confluent.security.authorizer.AuthorizePolicy.SuperUser

  • Field Summary

    Fields inherited from class io.confluent.security.authorizer.AccessRule

    ALL_HOSTS, GROUP_PRINCIPAL_TYPE, WILDCARD_GROUP_PRINCIPAL, WILDCARD_USER_PRINCIPAL

    Fields inherited from interface io.confluent.security.authorizer.AuthorizePolicy

    ALLOW_ON_NO_RULE, DENY_ON_NO_RULE, NO_MATCHING_RULE

  • Constructor Summary

    Constructors
    Constructor
    Description
    S2SGrantRule(String spiffeId, io.confluent.security.authorizer.Action action)
     

  • Method Summary

    Modifier and Type
    Method
    Description
    io.confluent.security.authorizer.Action
    action()
     
    String
    spiffeId()
     
    String
    toString()
     

    Methods inherited from class io.confluent.security.authorizer.AccessRule

    asBaseKafkaPrincipal, clusterLinkIds, equals, hashCode, host, matches, matches, matches, matches, matchingPrincipals, operation, permissionType, policyType, principal, resourcePattern

    Methods inherited from class Object

    getClass, notify, notifyAll, wait, wait, wait

  • Constructor Details

    • S2SGrantRule

      public S2SGrantRule(String spiffeId, io.confluent.security.authorizer.Action action)

  • Method Details

    • spiffeId

      public String spiffeId()

    • action

      public io.confluent.security.authorizer.Action action()

    • toString

      public String toString()
      Overrides:
      toString in class io.confluent.security.authorizer.AccessRule