"confluent.metadata.basic.auth.credentials.path"
"confluent.metadata.basic.auth.credentials.provider"
"confluent.metadata.basic.auth.user.info"
"confluent.metadata.bootstrap.server.urls"
"confluent.metadata."
public static final long
10000L
public static final long
100L
"confluent.metadata.enable.server.urls.refresh"
"enables periodic refresh of metadata server urls."
"confluent.metadata.http.auth.credentials.provider"
"confluent.metadata.http.request.timeout.ms"
"The configuration controls the maximum amount of time the client will wait for the response of a http request. If the response is not received before the timeout elapses the client will resend the request if necessary or fail the request if all urls are exhausted. This value should less than or equal to confluent.metadata.request.timeout.ms config"
"When set to true, the client will fail immediately on receipt of 401 when trying to refresh metadata server urls. This might be useful if repeated 401 cause issues in the backing LDAP server."
"confluent.metadata.server.urls.fail.on.401"
"The period of time in milliseconds after which we force a refresh of metadata server urls."
"confluent.metadata.server.urls.max.age.ms"
"The number of retries to force a refresh of metadata server urls."
"confluent.metadata.server.urls.max.retries"
"confluent.metadata.oauthbearer.assertion.claim.aud"
"The value to be added to the Audience claim \"aud\" which will be included in the client assertion created locally"
"confluent.metadata.oauthbearer.assertion.claim.exp.minutes"
"The (Optional) expiration time for the client assertion in minutesThe default value is 5 minutes"
"confluent.metadata.oauthbearer.assertion.template.file"
"The location for the JSON file which contains additional header and payload claims to be included in the client assertion"
"confluent.metadata.oauthbearer.assertion.claim.jti.include"
"The (optional) setting for specifying whether to include jti claim or not"
"confluent.metadata.oauthbearer.assertion.claim.nbf.include"
"The (optional) setting for specifying whether to include nbf claim or notIf set to true, nbf claim with (current time - 1 minute) will be included in the client assertion"
"confluent.metadata.oauthbearer.assertion.claim.iss"
"The value to be added to the Issuer claim \"iss\" which will be included in the client assertion created locally"
"confluent.metadata.oauthbearer.assertion.file"
"The location/path on disc at which a signed client assertion is presentThis will be passed directly to the token endpoint."
"confluent.metadata.oauthbearer.assertion.private.key.file"
"The location for the private key to be used for signing client assertion in PEM formatRequired for local client assertion creation"
"confluent.metadata.oauthbearer.assertion.private.key.passphrase"
"The passphrase required for decrypting the private key (in case of PKCS#8 format pem file) "
"confluent.metadata.oauthbearer.assertion.claim.sub"
"The value to be added to the Subject claim \"sub\" which will be included in the client assertion created locally"
"confluent.metadata.oauthbearer."
"confluent.metadata.oauthbearer.header.urlencode"
"The (optional) setting to enable the OAuth client to URL-encode the client_id and client_secret in the authorization header in accordance with RFC6749, see <a href=\"https://datatracker.ietf.org/doc/html/rfc6749#section-2.3.1\">here</a> for more details. The default value is set to \'false\' for backward compatibility"
"confluent.metadata.oauthbearer.login.client.id"
"The OAuth/OIDC identity provider-issued client ID to uniquely identify the service account to use for authentication for this client. The value must be paired with a corresponding confluent.metadata.oauthbearer.login.client.secret value and is provided to the OAuth provider using the OAuth clientcredentials grant type."
"confluent.metadata.oauthbearer.login.oauth.scope"
"The (optional) HTTP/HTTPS login request to the token endpoint (confluent.metadata.oauthbearer.token.endpoint.url) may need to specify an OAuth \"scope\". If so, the confluent.metadata.oauthbearer.login.oauth.scope is used to provide the value to include with the login request."
"confluent.metadata.oauthbearer.login.client.secret"
"The OAuth/OIDC identity provider-issued client secret serves a similar function as a password to the confluent.metadata.oauthbearer.login.client.id account and identifies the service account to use for authentication for this client. The value must be paired with a corresponding confluent.metadata.oauthbearer.login.client.id value and is provided to the OAuth provider using the OAuth clientcredentials grant type."
"confluent.metadata.oauthbearer.login.connect.timeout.ms"
"The (optional) value in milliseconds for the external authentication provider connection timeout."
"confluent.metadata.oauthbearer.login.read.timeout.ms"
"The (optional) value in milliseconds for the external authentication provider read timeout."
"confluent.metadata.oauthbearer.login.retry.backoff.max.ms"
"The (optional) value in milliseconds for the maximum wait between login attempts to the external authentication provider.Oauth/OIDC Login uses an exponential backoff algorithm with an initial wait based on the confluent.metadata.oauthbearer.login.retry.backoff.ms setting and will double in wait length between attempts up to a maximum wait length specified by the confluent.metadata.oauthbearer.sasl.login.retry.backoff.max.ms setting."
"confluent.metadata.oauthbearer.login.retry.backoff.ms"
"The (optional) value in milliseconds for the initial wait between login attempts to the external authentication provider.Oauth/OIDC Login uses an exponential backoff algorithm with an initial wait based on the confluent.metadata.oauthbearer.login.retry.backoff.ms setting and will double in wait length between attempts up to a maximum wait length specified by the confluent.metadata.oauthbearer.sasl.login.retry.backoff.max.ms setting."
"confluent.metadata.oauthbearer.token.endpoint.url"
"The URL for the OAuth/OIDC identity provider. If the URL is HTTP(S)-based, it is the issuer\'s token endpoint URL to which requests will be made to login with the specified confluent.metadata.ssl configs."
"confluent.metadata.request.timeout.ms"
"The configuration controls the maximum amount of time the client will wait for the response of a each authorizer request."
"confluent.metadata.token.auth.credential"