DGS-22404 Add AppRole auth for HC Vault

[rayokota]

What

Checklist

• Contains customer facing changes? Including API/behavior changes
• Did you add sufficient unit test and/or integration test coverage for this PR?
  • If not, please explain why it is not required

References

JIRA:

Test & Review

Open questions / Follow-ups

[Copilot]

Pull Request Overview

Adds AppRole authentication support to the HashiCorp Vault KMS driver, providing an alternative to token-based authentication for improved security and credential management.

• Enhanced authentication options with AppRole support alongside existing token authentication
• Added new configuration parameters for AppRole credentials (role ID and secret ID)
• Refactored the HcVaultKmsClient constructor to accept generic authentication methods

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

File	Description
HcVaultKmsDriver.cs	Added AppRole configuration parameters and authentication logic with fallback to environment variables
HcVaultKmsClient.cs	Refactored constructor to accept IAuthMethodInfo instead of token string, maintaining backward compatibility

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[sonarqube-confluent]

• 0.00% Coverage on New Code (is less than 80.00%)

Analysis Details

0 Issues

• 0 Bugs
• 0 Vulnerabilities
• 0 Code Smells

Coverage and Duplications

• 0.00% Coverage (77.20% Estimated after merge)
• No duplication information (0.00% Estimated after merge)

Project ID: confluent-kafka-dotnet

View in SonarQube