"confluent.basic.auth.credentials.source"
"Specify how to pick the credentials for Basic Auth header. The supported values are URL, USER_INFO and SASL_INHERIT"
"confluent.bearer.auth.cache.expiry.buffer.seconds"
"The amount of buffer time between expiration times of the OAuth Token and corresponding cache which hold the token. Ideally we would want to get a new token before the current one expires. Legal values are between 0 and 3600 (1 hour); a default value of 300 (5 minutes) is used if no value is specified. This value is ignored if it exceeds the remaining lifetime of a token from the moment it is retrieved into schema registry."
"confluent.bearer.auth.client.id"
"Client Id used to obtain Client Credentials Grant from OAuth/OIDC identity provider <a href=\"rfc-editor.org/rfc/rfc6749.html#section-4.4\"> "
"confluent.bearer.auth.client.secret"
"Client secret used to obtain Client Credentials Grant from OAuth/OIDC identity provider <a href=\"rfc-editor.org/rfc/rfc6749.html#section-4.4\"> "
"confluent.bearer.auth.credentials.source"
"Specify how to pick the credentials for Bearer Auth header. "
"confluent.bearer.auth.identity.pool.id"
"Additional property which can added in Request header to Schema Registry. This maybe used as Principal Id for Authorization"
"confluent.bearer.auth.issuer.endpoint.url"
"The HTTP(S)-based URL for the OAuth/OIDC identity provider which issues access token"
"confluent.bearer.auth.logical.cluster"
"Additional property which can added in Request header to Schema Registry"
"confluent.bearer.auth.scope"
"confluent.bearer.auth.scope.claim.name"
"The OAuth claim for the scope is often named \"scope\", but this (optional) setting can provide a different name to use for the scope included in the JWT payload\'s claims if the OAuth/OIDC provider uses a different name for that claim."
"Access Token Scope used to obtain Client Credentials Grant OAuth/OIDC identity provider <a href=\"rfc-editor.org/rfc/rfc6749.html#section-3.3\"> "
"confluent.bearer.auth.sub.claim.name"
"The OAuth claim for the subject is often named \"sub\", but this (optional) setting can provide a different name to use for the subject included in the JWT payload\'s claims if the OAuth/OIDC provider uses a different name for that claim."
"confluent.bearer.auth.token"
"Specify the Bearer token to be used for authentication"
"scope"
"sub"
"confluent.schema.validation.guid.enable"
"Feature flag for schema validation using guid in record header."
"confluent.key.schema.validation"
"True if schema validation at record key is enabled for this topic."
"confluent.key.subject.name.strategy"
"Determines how to construct the subject name under which the key schema is registered with the schema registry. By default, TopicNameStrategy is used"
"confluent.schema.registry.max.cache.size"
public static final int
10000
"Maximum size of each LRU cache used to cache responses from the schema registry. There is one cache to hold the ID to schema mappings and another to hold the schemas that are registered to a subject."
"confluent.schema.registry.max.retries"
public static final int
1
"Maximum number of times to retry schema registry read operations."
"confluent.missing.id.cache.ttl.sec"
public static final long
60L
"The TTL in seconds for caching missing schema IDs"
"confluent.missing.id.query.range"
public static final int
20000
"The range above max schema ID to make calls to Schema Registry"
public static final long
60L
"The TTL in seconds for caching missing schemas"
"confluent.missing.schema.cache.ttl.sec"
"confluent.schema.registry.retries.wait.ms"
public static final int
0
"Time in milliseconds to wait before each retry."
"confluent.schema.validator.samples.per.min"
"Number of error samples that will be printed per minute during schema validation"
"confluent.schema.registry.url"
"Comma-separated list of URLs for schema registry instances that can be used to look up schemas."
"confluent.schema.validation.context.name"
"The context that will be searched when validating schema existence. If not set, the default context will be searched."
"confluent.ssl.key.password"
"The password of the private key in the key store file. This is optional for client."
"confluent.ssl.keystore.location"
"The location of the key store file. This is optional for client and can be used for two-way authentication for client."
"confluent.ssl.keystore.password"
"The store password for the key store file. This is optional for client and only needed if ssl.keystore.location is configured. "
"confluent.ssl.keystore.type"
"The file format of the key store file. This is optional for client."
"confluent.ssl.protocol"
"The SSL protocol used to generate the SSLContext. Default setting is TLSv1.2, which is fine for most cases. Allowed values in recent JVMs are TLSv1.2 and TLSv1.3. TLS, TLSv1.1, SSL, SSLv2 and SSLv3 may be supported in older JVMs, but their usage is discouraged due to known security vulnerabilities."
"confluent.ssl.truststore.location"
"The location of the trust store file. "
"confluent.ssl.truststore.password"
"The password for the trust store file. If a password is not set access to the truststore is still available, but integrity checking is disabled."
"confluent.ssl.truststore.type"
"The file format of the trust store file."
"confluent.basic.auth.user.info"
"Specify the user info for Basic Auth in the form of {username}:{password}"
"confluent.value.schema.validation"
"True if schema validation at record value is enabled for this topic."
"confluent.value.subject.name.strategy"
"Determines how to construct the subject name under which the value schema is registered with the schema registry. By default, TopicNameStrategy is used"