io.confluent.kafka.schemaregistry.encryption.tink

Interface KmsDriver

public interface KmsDriver

Field Summary

Fields

Modifier and Type	Field and Description
static String	KMS_TYPE_SUFFIX
static String	TEST_CLIENT

Method Summary

Modifier and Type	Method and Description
default boolean	doesSupport(String keyUri)
String	getKeyUrlPrefix()
default com.google.crypto.tink.KmsClient	getKmsClient(String kekUrl)
default Object	getTestClient(Map<String,?> configs)
com.google.crypto.tink.KmsClient	newKmsClient(Map<String,?> configs, Optional<String> kekUrl)
default com.google.crypto.tink.KmsClient	registerKmsClient(Map<String,?> configs, Optional<String> kekUrl)

Field Detail

KMS_TYPE_SUFFIX

static final String KMS_TYPE_SUFFIX

See Also:

Constant Field Values

TEST_CLIENT

static final String TEST_CLIENT

See Also:

Constant Field Values

Method Detail

getKeyUrlPrefix

String getKeyUrlPrefix()

newKmsClient

com.google.crypto.tink.KmsClient newKmsClient(Map<String,?> configs,
                                              Optional<String> kekUrl)
                                       throws GeneralSecurityException

Throws:

GeneralSecurityException

doesSupport

default boolean doesSupport(String keyUri)

Returns:

true if this client does support keyUri

getKmsClient

default com.google.crypto.tink.KmsClient getKmsClient(String kekUrl)
                                               throws GeneralSecurityException

Throws:

GeneralSecurityException

registerKmsClient

default com.google.crypto.tink.KmsClient registerKmsClient(Map<String,?> configs,
                                                           Optional<String> kekUrl)
                                                    throws GeneralSecurityException

Throws:

GeneralSecurityException

getTestClient

default Object getTestClient(Map<String,?> configs)