FROM confluentinc/cp-kafka-connect-base:7.3.1

USER root

# Run updates
RUN dnf -y upgrade && dnf clean all

# Update and install find for determing SSL configuration in entrypoint
RUN dnf -y install findutils jq

# Install awscli to get secrets from AWS secrets manager.
RUN dnf -y module install python39
RUN python -m pip install --upgrade pip
RUN python -m pip install awscli==1.19.58

# Install Plugin

# Install Google Sheets Stream
ENV GSHEETS_CONNECTOR_VERSION='0.9.0'
RUN wget -O /usr/share/java/camel-google-sheets-stream-kafka-connector-${GSHEETS_CONNECTOR_VERSION}-package.tar.gz https://repo1.maven.org/maven2/org/apache/camel/kafkaconnector/camel-google-sheets-stream-kafka-connector/${GSHEETS_CONNECTOR_VERSION}/camel-google-sheets-stream-kafka-connector-${GSHEETS_CONNECTOR_VERSION}-package.tar.gz &&    tar -C /usr/share/java -zxvf /usr/share/java/camel-google-sheets-stream-kafka-connector-${GSHEETS_CONNECTOR_VERSION}-package.tar.gz

# Install Secret Provider
ENV SECRET_PROVIDER_VERSION='0.1.2'
RUN confluent-hub install --no-prompt jcustenborder/kafka-config-provider-aws:${SECRET_PROVIDER_VERSION}

COPY entry_point.sh /usr/local/bin/entry_point.sh
RUN chmod +x /usr/local/bin/entry_point.sh


USER appuser

ENV CONNECT_REST_PORT=8083

# Left empty to fail if not set
ENV CONNECT_GROUP_ID=

ENV CONNECT_KEY_CONVERTER='org.apache.kafka.connect.json.JsonConverter'
ENV CONNECT_VALUE_CONVERTER='org.apache.kafka.connect.json.JsonConverter'

ENV CONNECT_PLUGIN_PATH='/usr/share/java,/usr/share/confluent-hub-components/'
ENV CONNECT_SECURITY_PROTOCOL=SSL
ENV CONNECT_CONFIG_PROVIDERS_FILE_CLASS='org.apache.kafka.common.config.provider.FileConfigProvider'
ENV CONNECT_CONSUMER_SECURITY_PROTOCOL=SSL
ENV CONNECT_PRODUCER_SECURITY_PROTOCOL=SSL
ENV CONNECT_CONSUMER_REQUEST_TIMEOUT_MS=20000
ENV CONNECT_CONSUMER_RETRY_BACKOFF_MS=500
ENV Environment=dev
ENV MAX_TASKS=1
ENV AWS_REGION=us-east-1

# Mitigate CVE-2021-44228
# https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44228-apache-log4j2/
ENV LOG4J_FORMAT_MSG_NO_LOOKUPS=true

# Configure default log levels
ENV CONNECT_LOG4J_ROOT_LOGLEVEL=ERROR
ENV CONNECT_LOG4J_LOGGERS='org.I0Itec.zkclient=ERROR,org.reflections=ERROR,org.eclipse.jetty=ERROR,kafka=ERROR,org.apache.kafka=ERROR,org.apache.zookeeper=ERROR,org.apache.kafka.connect.runtime.WorkerSourceTask=ERROR'

EXPOSE ${CONNECT_REST_PORT}

ENTRYPOINT  ["/usr/local/bin/entry_point.sh"]