Index
All Classes and Interfaces|All Packages|Constant Field Values
A
- AzureKmsAead - Class in io.confluent.kafka.schemaregistry.encryption.azure
-
A
Aeadthat forwards encryption/decryption requests to a key in AZURE KMS. - AzureKmsAead(CryptographyClient, EncryptionAlgorithm) - Constructor for class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsAead
-
Constructor
- AzureKmsAead(CryptographyClient, EncryptionAlgorithm, Supplier<Map.Entry<CryptographyClient, String>>, Function<String, CryptographyClient>) - Constructor for class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsAead
- AzureKmsClient - Class in io.confluent.kafka.schemaregistry.encryption.azure
-
An implementation of
KmsClientfor Azure KMS. - AzureKmsClient() - Constructor for class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient
- AzureKmsClient(String) - Constructor for class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient
-
Constructs a specific AzureKmsClient that is bound to a single key identified by
uri. - AzureKmsClient(String, EncryptionAlgorithm) - Constructor for class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient
-
Constructs a specific AzureKmsClient that is bound to a single key identified by
uriand specifiedEncryptionAlgorithm. - AzureKmsDriver - Class in io.confluent.kafka.schemaregistry.encryption.azure
- AzureKmsDriver() - Constructor for class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver
C
- CLIENT_ID - Static variable in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver
- CLIENT_SECRET - Static variable in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver
D
- decrypt(byte[], byte[]) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsAead
- doesSupport(String) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient
E
- encrypt(byte[], byte[]) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsAead
- ENCRYPT_AZURE_KEY_VERSION_SAVE - Static variable in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver
-
Enables making a DEK's encryptedKeyMaterial self-describing with respect to which exact Azure Key Vault key version wrapped it (see
AzureKmsAead), matching the same self-description property AWS KMS and GCP KMS ciphertext already provide natively.
G
- getAead(String) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient
-
Returns
AzureKmsAeadfor the url provided. - getKeyUrlPrefix() - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver
- getVersionedKeyId(Map<String, ?>, String) - Static method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver
-
Resolves a possibly-versionless Azure Key Vault key identifier (e.g.
I
- io.confluent.kafka.schemaregistry.encryption.azure - package io.confluent.kafka.schemaregistry.encryption.azure
- isAccessDeniedException(Throwable) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver
- isVersionless(String) - Static method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver
-
Returns true if
kmsKeyIdhas no explicit version segment.
N
- newKmsClient(Map<String, ?>, Optional<String>) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver
- newKmsClientWithAzureKms(Map<String, ?>, Optional<String>, Optional<TokenCredential>, CryptographyClient) - Static method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver
P
- PREFIX - Static variable in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient
T
- TENANT_ID - Static variable in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver
- TEST_KEY_CLIENT - Static variable in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver
W
- withConfigs(Map<String, ?>) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient
-
Associates this client with the configs it was created with, so that
AzureKmsClient.getAead(java.lang.String)can consultAzureKmsDriver.ENCRYPT_AZURE_KEY_VERSION_SAVEand resolve a versionless key id before building aCryptographyClient. - withCredentials(String) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient
-
Loads Azure credentials from a properties file.
- withCredentialsProvider(TokenCredential) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient
-
loads credentials using provided
TokenCredential - withCryptographyClient(CryptographyClient) - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient
-
Specifies the
CryptographyClientobject to be used. - withDefaultCredentials() - Method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsClient
-
Loads credentials using
DefaultAzureCredentialBuilderCreates default DefaultAzureCredential instance. - withVersion(String, String) - Static method in class io.confluent.kafka.schemaregistry.encryption.azure.AzureKmsDriver
-
Combines
kmsKeyId(versionless or versioned; only the vault and key name are used) with an explicitversion, returning the full versioned key identifier.
All Classes and Interfaces|All Packages|Constant Field Values