Package io.confluent.kafka.schemaregistry.encryption.azure

Class AzureKmsDriver

java.lang.Object

io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver

All Implemented Interfaces:

KmsDriver

public class AzureKmsDriver
extends Object
implements KmsDriver

Field Summary

Fields

Modifier and Type	Field	Description
static final String	CLIENT_ID
static final String	CLIENT_SECRET
static final String	TENANT_ID

Fields inherited from interface io.confluent.kafka.schemaregistry.encryption.tink.KmsDriver

KMS_TYPE_SUFFIX, TEST_CLIENT

Constructor Summary

Constructors

Constructor	Description
AzureKmsDriver()

Method Summary

Modifier and Type	Method	Description
String	getKeyUrlPrefix()
com.google.crypto.tink.KmsClient	newKmsClient(Map<String,?> configs, Optional<String> kekUrl)
protected static com.google.crypto.tink.KmsClient	newKmsClientWithAzureKms(Optional<String> keyUri, Optional<com.azure.core.credential.TokenCredential> credentials, com.azure.security.keyvault.keys.cryptography.CryptographyClient cryptographyClient)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface io.confluent.kafka.schemaregistry.encryption.tink.KmsDriver

doesSupport, getKmsClient, getTestClient, registerKmsClient

Field Details

TENANT_ID

public static final String TENANT_ID

See Also:

• Constant Field Values

CLIENT_ID

public static final String CLIENT_ID

See Also:

• Constant Field Values

CLIENT_SECRET

public static final String CLIENT_SECRET

See Also:

• Constant Field Values

Constructor Details

AzureKmsDriver

public AzureKmsDriver()

Method Details

getKeyUrlPrefix

public String getKeyUrlPrefix()

Specified by:

getKeyUrlPrefix in interface KmsDriver

newKmsClient

public com.google.crypto.tink.KmsClient newKmsClient(Map<String,?> configs,
 Optional<String> kekUrl)
                                              throws GeneralSecurityException

Specified by:

newKmsClient in interface KmsDriver

Throws:

GeneralSecurityException

newKmsClientWithAzureKms

protected static com.google.crypto.tink.KmsClient newKmsClientWithAzureKms(Optional<String> keyUri,
 Optional<com.azure.core.credential.TokenCredential> credentials,
 com.azure.security.keyvault.keys.cryptography.CryptographyClient cryptographyClient)
                                                                    throws GeneralSecurityException

Throws:

GeneralSecurityException