io.confluent.security.audit.telemetry.exporter.config.remote.polling.kubernetes

Class KubernetesConfigMapRemoteConfigurationSource<T>

java.lang.Object

io.confluent.security.audit.telemetry.exporter.config.remote.polling.PollingRemoteConfigurationSource<T>

io.confluent.security.audit.telemetry.exporter.config.remote.polling.kubernetes.KubernetesConfigMapRemoteConfigurationSource<T>

All Implemented Interfaces:

RemoteConfigurationSource<T>, org.apache.kafka.common.security.oauthbearer.internals.secured.Retryable<T>

public class KubernetesConfigMapRemoteConfigurationSource<T>
extends PollingRemoteConfigurationSource<T>
implements org.apache.kafka.common.security.oauthbearer.internals.secured.Retryable<T>

This RemoteConfigurationSource will continuously poll the Kubernetes API for a ConfigMap containing the RemoteConfiguration object. It will do this by first querying for a ConfigMap with the same name as the cluster. If that ConfigMap does not exist, then it will use the one configured by CONFIG_MAP_NAME_CONFIG. We do this in break glass scenarios (incident remediation) where we need to remotely configure a single cluster

Constructor Summary

Constructors

Constructor and Description
KubernetesConfigMapRemoteConfigurationSource(KubernetesConfigMapRemoteConfigurationConfig config, Optional<String> physicalClusterId, Consumer<T> callback, Class<T> typeParameterClass)

Method Summary

Modifier and Type	Method and Description
T	call()
static String	createDefaultEndpointFromEnv(KubernetesConfigMapRemoteConfigurationConfig config)
static String	createEndpointFromEnv(KubernetesConfigMapRemoteConfigurationConfig config, String configMapName)

Methods inherited from class io.confluent.security.audit.telemetry.exporter.config.remote.polling.PollingRemoteConfigurationSource

getConfig, setConfigurationChangeCallback, start, stop

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

KubernetesConfigMapRemoteConfigurationSource

public KubernetesConfigMapRemoteConfigurationSource(KubernetesConfigMapRemoteConfigurationConfig config,
                                                    Optional<String> physicalClusterId,
                                                    Consumer<T> callback,
                                                    Class<T> typeParameterClass)
                                             throws CertificateException,
                                                    NoSuchAlgorithmException,
                                                    KeyStoreException,
                                                    IOException,
                                                    KeyManagementException

Throws:

CertificateException

NoSuchAlgorithmException

KeyStoreException

IOException

KeyManagementException

Method Detail

call

public T call()
       throws ExecutionException,
              org.apache.kafka.common.security.oauthbearer.internals.secured.UnretryableException

Specified by:

call in interface org.apache.kafka.common.security.oauthbearer.internals.secured.Retryable<T>

Throws:

ExecutionException

org.apache.kafka.common.security.oauthbearer.internals.secured.UnretryableException

createEndpointFromEnv

public static String createEndpointFromEnv(KubernetesConfigMapRemoteConfigurationConfig config,
                                           String configMapName)

createDefaultEndpointFromEnv

public static String createDefaultEndpointFromEnv(KubernetesConfigMapRemoteConfigurationConfig config)