io.confluent.kafka.schemaregistry.encryption.hcvault

Class HcVaultKmsDriver

java.lang.Object

io.confluent.kafka.schemaregistry.encryption.hcvault.HcVaultKmsDriver

All Implemented Interfaces:

KmsDriver

public class HcVaultKmsDriver
extends Object
implements KmsDriver

Field Summary

Fields

Modifier and Type	Field and Description
static String	APPROLE_ROLE_ID
static String	APPROLE_SECRET_ID
static String	NAMESPACE
static String	SSL_KEYSTORE_LOCATION
static String	SSL_KEYSTORE_PASSWORD
static String	SSL_TRUSTSTORE_LOCATION
static String	TOKEN_ID
static String	VAULT_APPROLE_ROLE_ID
static String	VAULT_APPROLE_SECRET_ID
static String	VAULT_NAMESPACE
static String	VAULT_SSL_KEYSTORE_LOCATION
static String	VAULT_SSL_KEYSTORE_PASSWORD
static String	VAULT_SSL_TRUSTSTORE_LOCATION

Fields inherited from interface io.confluent.kafka.schemaregistry.encryption.tink.KmsDriver

KMS_TYPE_SUFFIX, TEST_CLIENT

Constructor Summary

Constructors

Constructor and Description
HcVaultKmsDriver()

Method Summary

Modifier and Type	Method and Description
String	getKeyUrlPrefix()
protected static io.github.jopenlibs.vault.SslConfig	getSslConfig(String keystore, String keystorePassword, String truststore)
com.google.crypto.tink.KmsClient	newKmsClient(Map<String,?> configs, Optional<String> kekUrl)
protected static com.google.crypto.tink.KmsClient	newKmsClientWithHcVaultKms(Optional<String> keyUri, io.github.jopenlibs.vault.SslConfig sslConfig, Optional<String> credentials, Optional<String> namespace, io.github.jopenlibs.vault.api.Logical vault)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface io.confluent.kafka.schemaregistry.encryption.tink.KmsDriver

doesSupport, getKmsClient, getTestClient, registerKmsClient

Field Detail

TOKEN_ID

public static final String TOKEN_ID

See Also:

Constant Field Values

NAMESPACE

public static final String NAMESPACE

See Also:

Constant Field Values

APPROLE_ROLE_ID

public static final String APPROLE_ROLE_ID

See Also:

Constant Field Values

APPROLE_SECRET_ID

public static final String APPROLE_SECRET_ID

See Also:

Constant Field Values

SSL_KEYSTORE_LOCATION

public static final String SSL_KEYSTORE_LOCATION

See Also:

Constant Field Values

SSL_KEYSTORE_PASSWORD

public static final String SSL_KEYSTORE_PASSWORD

See Also:

Constant Field Values

SSL_TRUSTSTORE_LOCATION

public static final String SSL_TRUSTSTORE_LOCATION

See Also:

Constant Field Values

VAULT_NAMESPACE

public static final String VAULT_NAMESPACE

See Also:

Constant Field Values

VAULT_SSL_KEYSTORE_LOCATION

public static final String VAULT_SSL_KEYSTORE_LOCATION

See Also:

Constant Field Values

VAULT_SSL_KEYSTORE_PASSWORD

public static final String VAULT_SSL_KEYSTORE_PASSWORD

See Also:

Constant Field Values

VAULT_SSL_TRUSTSTORE_LOCATION

public static final String VAULT_SSL_TRUSTSTORE_LOCATION

See Also:

Constant Field Values

VAULT_APPROLE_ROLE_ID

public static final String VAULT_APPROLE_ROLE_ID

See Also:

Constant Field Values

VAULT_APPROLE_SECRET_ID

public static final String VAULT_APPROLE_SECRET_ID

See Also:

Constant Field Values

Constructor Detail

HcVaultKmsDriver

public HcVaultKmsDriver()

Method Detail

getKeyUrlPrefix

public String getKeyUrlPrefix()

Specified by:

getKeyUrlPrefix in interface KmsDriver

getSslConfig

protected static io.github.jopenlibs.vault.SslConfig getSslConfig(String keystore,
                                                                  String keystorePassword,
                                                                  String truststore)
                                                           throws GeneralSecurityException

Throws:

GeneralSecurityException

newKmsClient

public com.google.crypto.tink.KmsClient newKmsClient(Map<String,?> configs,
                                                     Optional<String> kekUrl)
                                              throws GeneralSecurityException

Specified by:

newKmsClient in interface KmsDriver

Throws:

GeneralSecurityException

newKmsClientWithHcVaultKms

protected static com.google.crypto.tink.KmsClient newKmsClientWithHcVaultKms(Optional<String> keyUri,
                                                                             io.github.jopenlibs.vault.SslConfig sslConfig,
                                                                             Optional<String> credentials,
                                                                             Optional<String> namespace,
                                                                             io.github.jopenlibs.vault.api.Logical vault)
                                                                      throws GeneralSecurityException

Throws:

GeneralSecurityException