Package io.confluent.kafka.schemaregistry.encryption.hcvault

Class HcVaultKmsDriver

java.lang.Object

io.confluent.kafka.schemaregistry.encryption.hcvault.HcVaultKmsDriver

All Implemented Interfaces:

KmsDriver

public class HcVaultKmsDriver
extends Object
implements KmsDriver

Field Summary

Fields

Modifier and Type	Field	Description
static final String	APPROLE_ROLE_ID
static final String	APPROLE_SECRET_ID
static final String	NAMESPACE
static final String	SSL_KEYSTORE_LOCATION
static final String	SSL_KEYSTORE_PASSWORD
static final String	SSL_TRUSTSTORE_LOCATION
static final String	TOKEN_ID
static final String	VAULT_APPROLE_ROLE_ID
static final String	VAULT_APPROLE_SECRET_ID
static final String	VAULT_NAMESPACE
static final String	VAULT_SSL_KEYSTORE_LOCATION
static final String	VAULT_SSL_KEYSTORE_PASSWORD
static final String	VAULT_SSL_TRUSTSTORE_LOCATION

Fields inherited from interface io.confluent.kafka.schemaregistry.encryption.tink.KmsDriver

KMS_TYPE_SUFFIX, TEST_CLIENT

Constructor Summary

Constructors

Constructor	Description
HcVaultKmsDriver()

Method Summary

Modifier and Type	Method	Description
String	getKeyUrlPrefix()
protected static io.github.jopenlibs.vault.SslConfig	getSslConfig(String keystore, String keystorePassword, String truststore)
com.google.crypto.tink.KmsClient	newKmsClient(Map<String,?> configs, Optional<String> kekUrl)
protected static com.google.crypto.tink.KmsClient	newKmsClientWithHcVaultKms(Optional<String> keyUri, io.github.jopenlibs.vault.SslConfig sslConfig, Optional<String> credentials, Optional<String> namespace, io.github.jopenlibs.vault.api.Logical vault)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface io.confluent.kafka.schemaregistry.encryption.tink.KmsDriver

doesSupport, getKmsClient, getTestClient, registerKmsClient

Field Details

TOKEN_ID

public static final String TOKEN_ID

See Also:

• Constant Field Values

NAMESPACE

public static final String NAMESPACE

See Also:

• Constant Field Values

APPROLE_ROLE_ID

public static final String APPROLE_ROLE_ID

See Also:

• Constant Field Values

APPROLE_SECRET_ID

public static final String APPROLE_SECRET_ID

See Also:

• Constant Field Values

SSL_KEYSTORE_LOCATION

public static final String SSL_KEYSTORE_LOCATION

See Also:

• Constant Field Values

SSL_KEYSTORE_PASSWORD

public static final String SSL_KEYSTORE_PASSWORD

See Also:

• Constant Field Values

SSL_TRUSTSTORE_LOCATION

public static final String SSL_TRUSTSTORE_LOCATION

See Also:

• Constant Field Values

VAULT_NAMESPACE

public static final String VAULT_NAMESPACE

See Also:

• Constant Field Values

VAULT_SSL_KEYSTORE_LOCATION

public static final String VAULT_SSL_KEYSTORE_LOCATION

See Also:

• Constant Field Values

VAULT_SSL_KEYSTORE_PASSWORD

public static final String VAULT_SSL_KEYSTORE_PASSWORD

See Also:

• Constant Field Values

VAULT_SSL_TRUSTSTORE_LOCATION

public static final String VAULT_SSL_TRUSTSTORE_LOCATION

See Also:

• Constant Field Values

VAULT_APPROLE_ROLE_ID

public static final String VAULT_APPROLE_ROLE_ID

See Also:

• Constant Field Values

VAULT_APPROLE_SECRET_ID

public static final String VAULT_APPROLE_SECRET_ID

See Also:

• Constant Field Values

Constructor Details

HcVaultKmsDriver

public HcVaultKmsDriver()

Method Details

getKeyUrlPrefix

public String getKeyUrlPrefix()

Specified by:

getKeyUrlPrefix in interface KmsDriver

getSslConfig

protected static io.github.jopenlibs.vault.SslConfig getSslConfig(String keystore,
 String keystorePassword,
 String truststore)
                                                           throws GeneralSecurityException

Throws:

GeneralSecurityException

newKmsClient

public com.google.crypto.tink.KmsClient newKmsClient(Map<String,?> configs,
 Optional<String> kekUrl)
                                              throws GeneralSecurityException

Specified by:

newKmsClient in interface KmsDriver

Throws:

GeneralSecurityException

newKmsClientWithHcVaultKms

protected static com.google.crypto.tink.KmsClient newKmsClientWithHcVaultKms(Optional<String> keyUri,
 io.github.jopenlibs.vault.SslConfig sslConfig,
 Optional<String> credentials,
 Optional<String> namespace,
 io.github.jopenlibs.vault.api.Logical vault)
                                                                      throws GeneralSecurityException

Throws:

GeneralSecurityException