A C D E G I N P T W

A

AzureKmsAead - Class in io.confluent.kafka.schemaregistry.encryption.azure

A Aead that forwards encryption/decryption requests to a key in AZURE KMS.

AzureKmsAead(CryptographyClient, EncryptionAlgorithm) - Constructor for class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsAead

Constructor

AzureKmsAead(CryptographyClient, EncryptionAlgorithm, Supplier<Map.Entry<CryptographyClient, String>>, Function<String, CryptographyClient>) - Constructor for class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsAead

AzureKmsClient - Class in io.confluent.kafka.schemaregistry.encryption.azure

An implementation of KmsClient for Azure KMS.

AzureKmsClient() - Constructor for class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient

AzureKmsClient(String) - Constructor for class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient

Constructs a specific AzureKmsClient that is bound to a single key identified by uri.

AzureKmsClient(String, EncryptionAlgorithm) - Constructor for class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient

Constructs a specific AzureKmsClient that is bound to a single key identified by uri and specified EncryptionAlgorithm.

AzureKmsDriver - Class in io.confluent.kafka.schemaregistry.encryption.azure

AzureKmsDriver() - Constructor for class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver

C

CLIENT_ID - Static variable in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver

CLIENT_SECRET - Static variable in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver

D

decrypt(byte[], byte[]) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsAead

doesSupport(String) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient

E

encrypt(byte[], byte[]) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsAead

ENCRYPT_AZURE_KEY_VERSION_SAVE - Static variable in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver

Enables making a DEK's encryptedKeyMaterial self-describing with respect to which exact Azure Key Vault key version wrapped it (see AzureKmsAead), matching the same self-description property AWS KMS and GCP KMS ciphertext already provide natively.

G

getAead(String) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient

Returns AzureKmsAead for the url provided.

getKeyUrlPrefix() - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver

getVersionedKeyId(Map<String, ?>, String) - Static method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver

Resolves a possibly-versionless Azure Key Vault key identifier (e.g.

I

io.confluent.kafka.schemaregistry.encryption.azure - package io.confluent.kafka.schemaregistry.encryption.azure

isVersionless(String) - Static method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver

Returns true if kmsKeyId has no explicit version segment.

N

newKmsClient(Map<String, ?>, Optional<String>) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver

newKmsClientWithAzureKms(Map<String, ?>, Optional<String>, Optional<TokenCredential>, CryptographyClient) - Static method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver

P

PREFIX - Static variable in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient

T

TENANT_ID - Static variable in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver

TEST_KEY_CLIENT - Static variable in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver

W

withConfigs(Map<String, ?>) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient

Associates this client with the configs it was created with, so that getAead(java.lang.String) can consult AzureKmsDriver.ENCRYPT_AZURE_KEY_VERSION_SAVE and resolve a versionless key id before building a CryptographyClient.

withCredentials(String) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient

Loads Azure credentials from a properties file.

withCredentialsProvider(TokenCredential) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient

loads credentials using provided TokenCredential

withCryptographyClient(CryptographyClient) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient

Specifies the CryptographyClient object to be used.

withDefaultCredentials() - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient

Loads credentials using DefaultAzureCredentialBuilder Creates default DefaultAzureCredential instance.

withVersion(String, String) - Static method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver

Combines kmsKeyId (versionless or versioned; only the vault and key name are used) with an explicit version, returning the full versioned key identifier.

A C D E G I N P T W