confluent

README

Plugin for AWS Lambda to rotate Confluent Cloud API Key

Requirements

Secrets (see the types definition):

• Secret Admin shall be compliant with the type SecretAdmin
• Secret User shall be compliant with the type SecretUser

SecretUser

A map with at least two attributes is expected as the secret to rotate:

• API Key: is expected to be denoted as "user" by default; can be overwritten via env. variable ATTRIBUTE_KEY;
• API Secret: is expected to be denoted as "password" by default; can be overwritten via env. variable ATTRIBUTE_SECRET.

Find details about the Confluent Cloud API keys here .

AWS Lambda Configuration

The environment variable ADMIN_SECRET_ARN must contain the Secret Admin' s ARN.

Optionally, the environment variable DEBUG can be set to "yes", or "true" to activate debug level logs.

Documentation

Index

• func NewServiceClient(client *sdk.APIClient, apiKey, apiSecret, attributeKey, attributeSecret string) (lambda.ServiceClient, error)
• type SecretAdmin
• type SecretUser

Functions

func NewServiceClient

func NewServiceClient(
	client *sdk.APIClient, apiKey, apiSecret, attributeKey, attributeSecret string,
) (lambda.ServiceClient, error)

NewServiceClient initiates the `ServiceClient` to rotate credentials for Confluent Kafka user.

Types

type SecretAdmin

type SecretAdmin struct {
	// Confluent API Key
	APIKey string `json:"cloud_api_key"`
	// Confluent API Secret
	APISecret string `json:"cloud_api_secret"`
}

SecretAdmin defines the secret with the db admin access details.

type SecretUser

type SecretUser map[string]string

SecretUser defines the secret with db user access details. The map of attributes must include user <- API Key password <- API Secret