Package io.confluent.kafka.schemaregistry.encryption.gcp

Class GcpKmsDriver

java.lang.Object

io.confluent.kafka.schemaregistry.encryption.gcp.GcpKmsDriver

All Implemented Interfaces:

KmsDriver

public class GcpKmsDriver
extends Object
implements KmsDriver

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ACCOUNT_TYPE
static final String	CLIENT_EMAIL
static final String	CLIENT_ID
static final String	PRIVATE_KEY
static final String	PRIVATE_KEY_ID

Fields inherited from interface io.confluent.kafka.schemaregistry.encryption.tink.KmsDriver

KMS_TYPE_SUFFIX, TEST_CLIENT

Constructor Summary

Constructors

Constructor	Description
GcpKmsDriver()

Method Summary

Modifier and Type	Method	Description
String	getKeyUrlPrefix()
com.google.crypto.tink.KmsClient	newKmsClient(Map<String,?> configs, Optional<String> kekUrl)
protected static com.google.crypto.tink.KmsClient	newKmsClientWithCloudKms(Optional<String> keyUri, Optional<com.google.auth.oauth2.GoogleCredentials> credentials, com.google.api.services.cloudkms.v1.CloudKMS cloudKms)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface io.confluent.kafka.schemaregistry.encryption.tink.KmsDriver

doesSupport, getKmsClient, getTestClient, registerKmsClient

Field Details

ACCOUNT_TYPE

public static final String ACCOUNT_TYPE

See Also:

• Constant Field Values

CLIENT_ID

public static final String CLIENT_ID

See Also:

• Constant Field Values

CLIENT_EMAIL

public static final String CLIENT_EMAIL

See Also:

• Constant Field Values

PRIVATE_KEY_ID

public static final String PRIVATE_KEY_ID

See Also:

• Constant Field Values

PRIVATE_KEY

public static final String PRIVATE_KEY

See Also:

• Constant Field Values

Constructor Details

GcpKmsDriver

public GcpKmsDriver()

Method Details

getKeyUrlPrefix

public String getKeyUrlPrefix()

Specified by:

getKeyUrlPrefix in interface KmsDriver

newKmsClient

public com.google.crypto.tink.KmsClient newKmsClient(Map<String,?> configs,
 Optional<String> kekUrl)
                                              throws GeneralSecurityException

Specified by:

newKmsClient in interface KmsDriver

Throws:

GeneralSecurityException

newKmsClientWithCloudKms

protected static com.google.crypto.tink.KmsClient newKmsClientWithCloudKms(Optional<String> keyUri,
 Optional<com.google.auth.oauth2.GoogleCredentials> credentials,
 com.google.api.services.cloudkms.v1.CloudKMS cloudKms)
                                                                    throws GeneralSecurityException

Throws:

GeneralSecurityException