dekaf: decrypt endpoint config when validating

estuary · Jan 6, 2025 · b91302b · b91302b
1 parent 75cddd3
commit b91302b
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/crates/dekaf/src/connector.rs b/crates/dekaf/src/connector.rs
@@ -103,7 +103,13 @@ pub async fn unary_materialize(
                 .context("validating dekaf config")?;
 
         let _parsed_inner_config = serde_json::from_value::<DekafConfig>(
-            parsed_outer_config.config.to_value(),
+            unseal::decrypt_sops(&parsed_outer_config.config)
+                .await
+                .context(format!(
+                    "decrypting dekaf endpoint config for variant {}",
+                    parsed_outer_config.variant
+                ))?
+                .to_value(),
         )
         .context(format!(
             "validating dekaf endpoint config for variant {}",