io.confluent.kafka.schemaregistry.encryption.gcp

Class GcpKmsDriver

java.lang.Object

io.confluent.kafka.schemaregistry.encryption.gcp.GcpKmsDriver

All Implemented Interfaces:

KmsDriver

public class GcpKmsDriver
extends Object
implements KmsDriver

Field Summary

Fields

Modifier and Type	Field and Description
static String	ACCOUNT_TYPE
static String	CLIENT_EMAIL
static String	CLIENT_ID
static String	PRIVATE_KEY
static String	PRIVATE_KEY_ID

Fields inherited from interface io.confluent.kafka.schemaregistry.encryption.tink.KmsDriver

KMS_TYPE_SUFFIX, TEST_CLIENT

Constructor Summary

Constructors

Constructor and Description
GcpKmsDriver()

Method Summary

Modifier and Type	Method and Description
String	getKeyUrlPrefix()
com.google.crypto.tink.KmsClient	newKmsClient(Map<String,?> configs, Optional<String> kekUrl)
protected static com.google.crypto.tink.KmsClient	newKmsClientWithCloudKms(Optional<String> keyUri, Optional<com.google.auth.oauth2.GoogleCredentials> credentials, com.google.api.services.cloudkms.v1.CloudKMS cloudKms)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface io.confluent.kafka.schemaregistry.encryption.tink.KmsDriver

doesSupport, getKmsClient, getTestClient, registerKmsClient

Field Detail

ACCOUNT_TYPE

public static final String ACCOUNT_TYPE

See Also:

Constant Field Values

CLIENT_ID

public static final String CLIENT_ID

See Also:

Constant Field Values

CLIENT_EMAIL

public static final String CLIENT_EMAIL

See Also:

Constant Field Values

PRIVATE_KEY_ID

public static final String PRIVATE_KEY_ID

See Also:

Constant Field Values

PRIVATE_KEY

public static final String PRIVATE_KEY

See Also:

Constant Field Values

Constructor Detail

GcpKmsDriver

public GcpKmsDriver()

Method Detail

getKeyUrlPrefix

public String getKeyUrlPrefix()

Specified by:

getKeyUrlPrefix in interface KmsDriver

newKmsClient

public com.google.crypto.tink.KmsClient newKmsClient(Map<String,?> configs,
                                                     Optional<String> kekUrl)
                                              throws GeneralSecurityException

Specified by:

newKmsClient in interface KmsDriver

Throws:

GeneralSecurityException

newKmsClientWithCloudKms

protected static com.google.crypto.tink.KmsClient newKmsClientWithCloudKms(Optional<String> keyUri,
                                                                           Optional<com.google.auth.oauth2.GoogleCredentials> credentials,
                                                                           com.google.api.services.cloudkms.v1.CloudKMS cloudKms)
                                                                    throws GeneralSecurityException

Throws:

GeneralSecurityException