debezium-encrypt-demo-debezium-config.json

debezium-config.json

{
  "name": "debezium",
  "config": {
    "connector.class": "io.debezium.connector.mysql.MySqlConnector",
    "database.hostname": "mysql",
    "database.port": "3306",
    "database.user": "root",
    "database.password": "pass",
    "database.server.id": "100",
    "database.server.name": "db",
    "database.whitelist": "test",
    "database.history.kafka.bootstrap.servers": "kafka:29092",
    "database.history.kafka.topic": "dbhistory.local",
    "decimal.handling.mode": "string",
    "schemas.enable": false,

    "transforms": "encrypt_users,encrypt_addresses",

    "transforms.encrypt_users.type": "com.github.rerorero.kafka.connect.transform.encrypt.Transform$Value",
    "transforms.encrypt_users.service": "vault",
    "transforms.encrypt_users.mode": "encrypt",
    "transforms.encrypt_users.condition.field": "$.source.table",
    "transforms.encrypt_users.condition.equals": "users",
    "transforms.encrypt_users.fields": "$.before.name,$.after.name",
    "transforms.encrypt_users.vault.url": "http://vault:8200",
    "transforms.encrypt_users.vault.key_name": "mykey",

    "transforms.encrypt_addresses.type": "com.github.rerorero.kafka.connect.transform.encrypt.Transform$Value",
    "transforms.encrypt_addresses.service": "vault",
    "transforms.encrypt_addresses.mode": "encrypt",
    "transforms.encrypt_addresses.condition.field": "$.source.table",
    "transforms.encrypt_addresses.condition.equals": "addresses",
    "transforms.encrypt_addresses.fields": "$.before.address,$.before.phone_number,$.after.address,$.after.phone_number",
    "transforms.encrypt_addresses.vault.url": "http://vault:8200",
    "transforms.encrypt_addresses.vault.key_name": "mykey"
  }
}