public class ConfluentServerAuthorizer
extends io.confluent.security.authorizer.EmbeddedAuthorizer
implements org.apache.kafka.server.authorizer.Authorizer, org.apache.kafka.common.Reconfigurable, org.apache.kafka.metadata.authorizer.ClusterMetadataAuthorizer
Constructor and Description |
---|
ConfluentServerAuthorizer() |
Modifier and Type | Method and Description |
---|---|
int |
aclCount() |
org.apache.kafka.metadata.authorizer.AclMutator |
aclMutatorOrException() |
Iterable<org.apache.kafka.common.acl.AclBinding> |
acls(org.apache.kafka.common.acl.AclBindingFilter filter) |
Iterable<org.apache.kafka.common.acl.AclBinding> |
acls(org.apache.kafka.common.acl.AclBindingFilter filter,
org.apache.kafka.common.acl.AclState aclState) |
void |
addAcl(org.apache.kafka.common.Uuid id,
org.apache.kafka.metadata.authorizer.ConfluentStandardAcl acl) |
List<org.apache.kafka.server.authorizer.AuthorizationResult> |
authorize(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext,
List<org.apache.kafka.server.authorizer.Action> actions) |
org.apache.kafka.server.authorizer.AuthorizationResult |
authorizeByResourceType(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext,
org.apache.kafka.common.acl.AclOperation op,
org.apache.kafka.common.resource.ResourceType resourceType) |
io.confluent.security.authorizer.Action |
buildAction(org.apache.kafka.server.authorizer.Action kafkaAction,
org.apache.kafka.common.resource.ResourcePattern kafkaResourcePattern,
org.apache.kafka.common.security.auth.KafkaPrincipal principal,
io.confluent.security.authorizer.Scope scope) |
void |
completeInitialLoad() |
void |
completeInitialLoad(Exception e) |
void |
configure(Map<String,?> configs) |
void |
configureServerInfo(org.apache.kafka.server.authorizer.internals.ConfluentAuthorizerServerInfo serverInfo) |
List<? extends CompletionStage<org.apache.kafka.server.authorizer.AclCreateResult>> |
createAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext,
List<org.apache.kafka.common.acl.AclBinding> aclBindings) |
List<? extends CompletionStage<org.apache.kafka.server.authorizer.AclCreateResult>> |
createAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext,
List<org.apache.kafka.common.acl.AclBinding> aclBindings,
Optional<String> clusterId) |
List<? extends CompletionStage<org.apache.kafka.server.authorizer.AclDeleteResult>> |
deleteAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext,
List<org.apache.kafka.common.acl.AclBindingFilter> aclBindingFilters) |
List<? extends CompletionStage<org.apache.kafka.server.authorizer.AclDeleteResult>> |
deleteAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext,
List<org.apache.kafka.common.acl.AclBindingFilter> aclBindingFilters,
Optional<String> clusterId,
org.apache.kafka.common.acl.AclState aclState) |
void |
loadSnapshot(Map<org.apache.kafka.common.Uuid,org.apache.kafka.metadata.authorizer.ConfluentStandardAcl> acls) |
Set<String> |
reconfigurableConfigs() |
void |
reconfigure(Map<String,?> configs) |
void |
removeAcl(org.apache.kafka.common.Uuid id) |
void |
setAclMutator(org.apache.kafka.metadata.authorizer.AclMutator aclMutator) |
Map<org.apache.kafka.common.Endpoint,? extends CompletionStage<Void>> |
start(org.apache.kafka.server.authorizer.AuthorizerServerInfo serverInfo) |
void |
validateReconfiguration(Map<String,?> configs) |
accessRuleProvider, accessRuleProviders, auditLogProvider, authorize, clearAuthorizerProvidersMap, close, groupProvider, metadataProvider, removeFromAuthorizerProvidersMap, start
equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait
public void configure(Map<String,?> configs)
configure
in interface org.apache.kafka.common.Configurable
configure
in class io.confluent.security.authorizer.EmbeddedAuthorizer
public Set<String> reconfigurableConfigs()
reconfigurableConfigs
in interface org.apache.kafka.common.Reconfigurable
public void validateReconfiguration(Map<String,?> configs) throws org.apache.kafka.common.config.ConfigException
validateReconfiguration
in interface org.apache.kafka.common.Reconfigurable
org.apache.kafka.common.config.ConfigException
public void reconfigure(Map<String,?> configs)
reconfigure
in interface org.apache.kafka.common.Reconfigurable
public void configureServerInfo(org.apache.kafka.server.authorizer.internals.ConfluentAuthorizerServerInfo serverInfo)
configureServerInfo
in class io.confluent.security.authorizer.EmbeddedAuthorizer
public Map<org.apache.kafka.common.Endpoint,? extends CompletionStage<Void>> start(org.apache.kafka.server.authorizer.AuthorizerServerInfo serverInfo)
public List<org.apache.kafka.server.authorizer.AuthorizationResult> authorize(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext, List<org.apache.kafka.server.authorizer.Action> actions)
public org.apache.kafka.server.authorizer.AuthorizationResult authorizeByResourceType(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext, org.apache.kafka.common.acl.AclOperation op, org.apache.kafka.common.resource.ResourceType resourceType)
public void setAclMutator(org.apache.kafka.metadata.authorizer.AclMutator aclMutator)
setAclMutator
in interface org.apache.kafka.metadata.authorizer.ClusterMetadataAuthorizer
public org.apache.kafka.metadata.authorizer.AclMutator aclMutatorOrException()
aclMutatorOrException
in interface org.apache.kafka.metadata.authorizer.ClusterMetadataAuthorizer
public void completeInitialLoad()
completeInitialLoad
in interface org.apache.kafka.metadata.authorizer.ClusterMetadataAuthorizer
public void completeInitialLoad(Exception e)
completeInitialLoad
in interface org.apache.kafka.metadata.authorizer.ClusterMetadataAuthorizer
public void loadSnapshot(Map<org.apache.kafka.common.Uuid,org.apache.kafka.metadata.authorizer.ConfluentStandardAcl> acls)
loadSnapshot
in interface org.apache.kafka.metadata.authorizer.ClusterMetadataAuthorizer
public void addAcl(org.apache.kafka.common.Uuid id, org.apache.kafka.metadata.authorizer.ConfluentStandardAcl acl)
addAcl
in interface org.apache.kafka.metadata.authorizer.ClusterMetadataAuthorizer
public void removeAcl(org.apache.kafka.common.Uuid id)
removeAcl
in interface org.apache.kafka.metadata.authorizer.ClusterMetadataAuthorizer
public List<? extends CompletionStage<org.apache.kafka.server.authorizer.AclCreateResult>> createAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext, List<org.apache.kafka.common.acl.AclBinding> aclBindings)
createAcls
in interface org.apache.kafka.metadata.authorizer.ClusterMetadataAuthorizer
public List<? extends CompletionStage<org.apache.kafka.server.authorizer.AclCreateResult>> createAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext, List<org.apache.kafka.common.acl.AclBinding> aclBindings, Optional<String> clusterId)
public List<? extends CompletionStage<org.apache.kafka.server.authorizer.AclDeleteResult>> deleteAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext, List<org.apache.kafka.common.acl.AclBindingFilter> aclBindingFilters)
deleteAcls
in interface org.apache.kafka.metadata.authorizer.ClusterMetadataAuthorizer
public List<? extends CompletionStage<org.apache.kafka.server.authorizer.AclDeleteResult>> deleteAcls(org.apache.kafka.server.authorizer.AuthorizableRequestContext requestContext, List<org.apache.kafka.common.acl.AclBindingFilter> aclBindingFilters, Optional<String> clusterId, org.apache.kafka.common.acl.AclState aclState)
public Iterable<org.apache.kafka.common.acl.AclBinding> acls(org.apache.kafka.common.acl.AclBindingFilter filter)
public Iterable<org.apache.kafka.common.acl.AclBinding> acls(org.apache.kafka.common.acl.AclBindingFilter filter, org.apache.kafka.common.acl.AclState aclState)
public int aclCount()
public io.confluent.security.authorizer.Action buildAction(org.apache.kafka.server.authorizer.Action kafkaAction, org.apache.kafka.common.resource.ResourcePattern kafkaResourcePattern, org.apache.kafka.common.security.auth.KafkaPrincipal principal, io.confluent.security.authorizer.Scope scope)