DGS-21268 Add support for full payload encryption

[rayokota]

What

Add support for full payload encryption

Checklist

• [Y] Contains customer facing changes? Including API/behavior changes
• [Y] Did you add sufficient unit test and/or integration test coverage for this PR?
  • If not, please explain why it is not required

References

JIRA:

Test & Review

Open questions / Follow-ups

[Copilot]

Pull Request Overview

Adds full payload encryption support by introducing rule phases, integrating ExecuteRulesWithPhase into serializers/deserializers, and expanding test coverage for Protobuf, JSON Schema, and Avro payload encryption.

• Introduce RulePhase enum and extend RuleSet.HasRules for migration, domain, and encoding phases
• Update serializers and deserializers to call ExecuteRulesWithPhase before writing/after reading payloads
• Add end-to-end tests for payload encryption in Protobuf, JSON Schema, and Avro

Reviewed Changes

Copilot reviewed 11 out of 11 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
schemaregistry/serde/serde.go	Added ExecuteRulesWithPhase and rule-phase logic
schemaregistry/serde/protobuf/protobuf.go	Wrapped payload in encryption rules before serializing
schemaregistry/serde/protobuf/protobuf_test.go	New test for Protobuf payload encryption
schemaregistry/serde/jsonschema/json_schema.go	Wrapped payload in encryption rules before serializing
schemaregistry/serde/jsonschema/json_schema_test.go	New test for JSON Schema payload encryption
schemaregistry/serde/avrov2/avro.go	Wrapped payload in encryption rules before serializing
schemaregistry/serde/avrov2/avro_test.go	New test for Avro payload encryption
schemaregistry/schemaregistry_client.go	Added RulePhase constants and EncodingRules in RuleSet
schemaregistry/rules/encryption/*	Refactored and added payload encryption executors and tests

Comments suppressed due to low confidence (3)

schemaregistry/serde/protobuf/protobuf.go:251

• The variable subject is undefined in this scope; it should be topic or the appropriate subject string to avoid compilation errors.

msg, err = s.ExecuteRulesWithPhase(subject, topic, 

schemaregistry/serde/jsonschema/json_schema.go:151

• The variable subject is undefined here; replace with topic or the correct subject identifier to fix the compilation error.

msg, err = s.ExecuteRulesWithPhase(subject, topic, 

schemaregistry/serde/avrov2/avro.go:146

• Undefined variable subject used; substitute with topic, or correctly compute the subject, to resolve compilation errors.

msg, err = s.ExecuteRulesWithPhase(subject, topic, 

[sonarqube-confluent]

• 44.60% Coverage on New Code (is less than 80.00%)

Analysis Details

48 Issues

• 0 Bugs
• 0 Vulnerabilities
• 48 Code Smells

Coverage and Duplications

• 44.60% Coverage (55.40% Estimated after merge)
• No duplication information (0.50% Estimated after merge)

Project ID: confluent-kafka-go

View in SonarQube

[Claimundefine]

LGTM