Managing Apicurio Registry content using the Maven plug-in

When developing client applications, you can use the Apicurio Registry Maven plug-in to manage schema and API artifacts stored in Apicurio Registry.

Prerequisites

  • Apicurio Registry is installed and running in your environment.

  • Apache Maven is installed and configured in your environment.

Adding schema and API artifacts using the Maven plug-in

The most common use case for the Maven plug-in is adding artifacts during a build of your client application. You can accomplish this by using the register execution goal.

Prerequisites
Procedure

  1. Update your Maven pom.xml file to use the apicurio-registry-maven-plugin to register an artifact. The following example shows registering Apache Avro and GraphQL schemas:

    <plugin>
  <groupId>io.apicurio</groupId>
  <artifactId>apicurio-registry-maven-plugin</artifactId>
  <version>${apicurio.version}</version>
  <executions>
      <execution>
        <phase>generate-sources</phase>
        <goals>
            <goal>register</goal>
        </goals>
        <configuration>
            <registryUrl>MY-REGISTRY-URL/apis/registry/v3</registryUrl>
            <authServerUrl>MY-AUTH-SERVER</authServerUrl>
            <clientId>MY-CLIENT-ID</clientId>
            <clientSecret>MY-CLIENT-SECRET</clientSecret>
            <clientScope>MY-CLIENT-SCOPE</clientScope>
            <artifacts>
                <artifact>
                    <groupId>TestGroup</groupId>
                    <artifactId>FullNameRecord</artifactId>
                    <file>${project.basedir}/src/main/resources/schemas/record.avsc</file>
                    <ifExists>FAIL</ifExists>
                </artifact>
                <artifact>
                    <groupId>TestGroup</groupId>
                    <artifactId>ExampleAPI</artifactId>
                    <artifactType>GRAPHQL</artifactType>
                    <file>${project.basedir}/src/main/resources/apis/example.graphql</file>
                    <ifExists>FIND_OR_CREATE_VERSION</ifExists>
                    <canonicalize>true</canonicalize>
                </artifact>
            </artifacts>
        </configuration>
    </execution>
  </executions>
 </plugin>
    goal

    Specify register as the execution goal to upload the schema artifact to Apicurio Registry.

    registryUrl

    Specify the Apicurio Registry URL with the ../apis/registry/v3 endpoint.

    clientSecret

    If authentication is required, you can specify your authentication server and client credentials.

    groupId (first artifact)

    Specify the Apicurio Registry artifact group ID. You can specify the default group if you do not want to use a unique group ID.

    artifactId (second artifact)

    You can register multiple artifacts using the specified group ID, artifact ID, and location.

  2. Build your Maven project, for example, by using the mvn package command.

    You can also run the register goal directly from the command line without a Maven project by passing the artifact configuration as system properties. Use the same field names that you would use in the Maven plug-in configuration:

    mvn io.apicurio:apicurio-registry-maven-plugin:${apicurio.version}:register \
  -Dapicurio.url=MY-REGISTRY-URL/apis/registry/v3 \
  -Dartifacts.groupId=TestGroup \
  -Dartifacts.artifactId=FullNameRecord \
  -Dartifacts.artifactType=AVRO \
  -Dartifacts.file=./src/main/resources/schemas/record.avsc \
  -Dartifacts.ifExists=FAIL

    Use artifacts.<field> when registering a single artifact, or artifacts.<index>.<field> such as artifacts.0.groupId and artifacts.1.groupId when registering multiple artifacts.

    For OpenAPI and AsyncAPI artifacts, you can set versionStrategy to API_INFO_VERSION to derive the version from the info.version field in the API document when version is not explicitly configured.

    • If the derived version ends with -SNAPSHOT, the Maven plug-in strips the suffix before registration and registers the version as a draft.

    • When the API document later uses the same version without the -SNAPSHOT suffix, the Maven plug-in updates the existing draft content and promotes that version to ENABLED.

    • For other artifact types, API_INFO_VERSION is ignored.

      To update draft content or promote a draft created in this way, artifact version mutability must be enabled on the server. For more details, see the artifact version mutability configuration reference in the additional resources.

      For list properties, use an additional numeric index. The following formats are supported:

    • artifacts.<index>.references.<index>.<field>

    • artifacts.<index>.existingReferences.<index>.<field>

    • artifacts.<index>.protoPaths.<index>

      When registering a single artifact, you can omit the artifact index and use artifacts.references.0.name, artifacts.existingReferences.0.resourceName, or artifacts.protoPaths.0.

      mvn io.apicurio:apicurio-registry-maven-plugin:${apicurio.version}:register \
  -Dapicurio.url=MY-REGISTRY-URL/apis/registry/v3 \
  -Dartifacts.0.groupId=TestGroup \
  -Dartifacts.0.artifactId=ExampleAPI \
  -Dartifacts.0.artifactType=ASYNCAPI \
  -Dartifacts.0.file=./src/main/resources/apis/example.yaml \
  -Dartifacts.0.references.0.name=SharedRecord \
  -Dartifacts.0.existingReferences.0.resourceName=./avro/shared.avsc \
  -Dartifacts.0.existingReferences.0.groupId=TestGroup \
  -Dartifacts.0.existingReferences.0.artifactId=shared-avro \
  -Dartifacts.0.existingReferences.0.version=1 \
  -Dartifacts.0.protoPaths.0=./src/main/proto \
  -Dartifacts.0.protoPaths.1=./src/main/proto/common

      The following example derives the artifact version from an AsyncAPI or OpenAPI document:

      mvn io.apicurio:apicurio-registry-maven-plugin:${apicurio.version}:register \
  -Dapicurio.url=MY-REGISTRY-URL/apis/registry/v3 \
  -Dartifacts.groupId=TestGroup \
  -Dartifacts.artifactId=ExampleAPI \
  -Dartifacts.artifactType=ASYNCAPI \
  -Dartifacts.file=./src/main/resources/apis/example.yaml \
  -Dartifacts.versionStrategy=API_INFO_VERSION
Additional resources

Downloading schema and API artifacts using the Maven plug-in

You can use the Maven plug-in to download artifacts from Apicurio Registry. This is often useful, for example, when generating code from a registered schema.

Prerequisites
Procedure

  1. Update your Maven pom.xml file to use the apicurio-registry-maven-plugin to download an artifact. The following example shows downloading Apache Avro and GraphQL schemas.

    <plugin>
  <groupId>io.apicurio</groupId>
  <artifactId>apicurio-registry-maven-plugin</artifactId>
  <version>${apicurio.version}</version>
  <executions>
    <execution>
      <phase>generate-sources</phase>
      <goals>
        <goal>download</goal>
      </goals>
      <configuration>
          <registryUrl>MY-REGISTRY-URL/apis/registry/v3</registryUrl>
          <authServerUrl>MY-AUTH-SERVER</authServerUrl>
          <clientId>MY-CLIENT-ID</clientId>
          <clientSecret>MY-CLIENT-SECRET</clientSecret>
          <clientScope>MY-CLIENT-SCOPE</clientScope>
          <artifacts>
              <artifact>
                  <groupId>TestGroup</groupId>
                  <artifactId>FullNameRecord</artifactId>
                  <file>${project.build.directory}/classes/record.avsc</file>
                  <overwrite>true</overwrite>
              </artifact>
              <artifact>
                  <groupId>TestGroup</groupId>
                  <artifactId>ExampleAPI</artifactId>
                  <version>1</version>
                  <file>${project.build.directory}/classes/example.graphql</file>
                  <overwrite>true</overwrite>
              </artifact>
          </artifacts>
      </configuration>
    </execution>
  </executions>
</plugin>
    goal

    Specify download as the execution goal.

    registryUrl

    Specify the Apicurio Registry URL with the ../apis/registry/v3 endpoint.

    clientSecret

    If authentication is required, you can specify your authentication server and client credentials.

    groupId (first artifact)

    Specify the Apicurio Registry artifact group ID. You can specify the default group if you do not want to use a unique group.

    artifactId (second artifact)

    You can download multiple artifacts to a specified directory using the artifact ID.

  2. Build your Maven project, for example, by using the mvn package command.

Additional resources

Testing schema and API artifacts using the Maven plug-in

You might want to verify that an artifact can be registered without actually making any changes. This is often useful when rules are configured in Apicurio Registry. Testing the artifact results in a failure if the artifact content violates any of the configured rules.

When testing artifacts using the Maven plug-in, even if the artifact passes the test, no content is added to Apicurio Registry.
Prerequisites
Procedure

  1. Update your Maven pom.xml file to use the apicurio-registry-maven-plugin to test an artifact. The following example shows testing an Apache Avro schema:

    <plugin>
  <groupId>io.apicurio</groupId>
  <artifactId>apicurio-registry-maven-plugin</artifactId>
  <version>${apicurio.version}</version>
  <executions>
      <execution>
        <phase>generate-sources</phase>
        <goals>
            <goal>test-update</goal>
        </goals>
        <configuration>
            <registryUrl>MY-REGISTRY-URL/apis/registry/v3</registryUrl>
            <authServerUrl>MY-AUTH-SERVER</authServerUrl>
            <clientId>MY-CLIENT-ID</clientId>
            <clientSecret>MY-CLIENT-SECRET</clientSecret>
            <clientScope>MY-CLIENT-SCOPE</clientScope>
            <artifacts>
                <artifact>
                    <groupId>TestGroup</groupId>
                    <artifactId>FullNameRecord</artifactId>
                    <file>${project.basedir}/src/main/resources/schemas/record.avsc</file>
                </artifact>
            </artifacts>
        </configuration>
    </execution>
  </executions>
 </plugin>
    goal

    Specify test-update as the execution goal to test the schema artifact.

    registryUrl

    Specify the Apicurio Registry URL with the ../apis/registry/v3 endpoint.

    clientSecret

    If authentication is required, you can specify your authentication server and client credentials.

    groupId

    Specify the Apicurio Registry artifact group ID. You can specify the default group if you do not want to use a unique group.

    file

    You can test multiple artifacts from a specified directory using the artifact ID.

  2. Build your Maven project, for example, by using the mvn package command.

Additional resources

Adding artifact references manually using the Apicurio Registry Maven plug-in

Some Apicurio Registry artifact types can include artifact references from one artifact file to another. You can create efficiencies by defining reusable schema or API artifacts, and then referencing them from multiple locations in artifact references.

The following artifact types support artifact references:

  • Apache Avro

  • Google Protobuf

  • JSON Schema

  • OpenAPI

  • AsyncAPI

This section shows a simple example of using the Apicurio Registry Maven plug-in to manually register an artifact reference to a simple Avro schema artifact stored in Apicurio Registry. This example assumes that the following Exchange schema artifact has already been created in Apicurio Registry:

The following example shows the Exchange schema:

{
  "namespace": "com.kubetrade.schema.common",
  "type": "enum",
  "name": "Exchange",
  "symbols" : ["GEMINI"]
}

This example then creates a TradeKey schema artifact, which includes a reference to the nested Exchange schema artifact:

The following TradeKey schema contains a nested reference to the Exchange schema:

{
  "namespace": "com.kubetrade.schema.trade",
  "type": "record",
  "name": "TradeKey",
  "fields": [
    {
      "name": "exchange",
      "type": "com.kubetrade.schema.common.Exchange"
    },
    {
      "name": "key",
      "type": "string"
    }
  ]
}
Prerequisites

  • You have created a Maven project for your client application. For more details, see the Apache Maven documentation.

  • The referenced Exchange schema artifact is already created in Apicurio Registry.

Procedure

  1. Update your Maven pom.xml file to use the apicurio-registry-maven-plugin to register the TradeKey schema, which includes a nested reference to the Exchange schema as follows:

    <plugin>
    <groupId>io.apicurio</groupId>
    <artifactId>apicurio-registry-maven-plugin</artifactId>
    <version>${apicurio-registry.version}</version>
    <executions>
        <execution>
            <phase>generate-sources</phase>
            <goals>
                <goal>register</goal>
            </goals>
            <configuration>
                <registryUrl>MY-REGISTRY-URL/apis/registry/v3</registryUrl>
                <authServerUrl>MY-AUTH-SERVER</authServerUrl>
                <clientId>MY-CLIENT-ID</clientId>
                <clientSecret>MY-CLIENT-SECRET</clientSecret>
                <clientScope>MY-CLIENT-SCOPE</clientScope>
                <artifacts>
                    <artifact>
                        <groupId>test-group</groupId>
                        <artifactId>TradeKey</artifactId>
                        <version>2.0</version>
                        <artifactType>AVRO</artifactType>
                        <file>
                            ${project.basedir}/src/main/resources/schemas/TradeKey.avsc
                        </file>
                        <ifExists>FIND_OR_CREATE_VERSION</ifExists>
                        <canonicalize>true</canonicalize>
                        <references>
                            <reference>
                                <name>com.kubetrade.schema.common.Exchange</name>
                                <groupId>test-group</groupId>
                                <artifactId>Exchange</artifactId>
                                <version>2.0</version>
                                <artifactType>AVRO</artifactType>
                                <file>
                                    ${project.basedir}/src/main/resources/schemas/Exchange.avsc
                                </file>
                                <ifExists>FIND_OR_CREATE_VERSION</ifExists>
                                <canonicalize>true</canonicalize>
                            </reference>
                        </references>
                    </artifact>
                </artifacts>
            </configuration>
        </execution>
    </executions>
</plugin>
    goal

    Specify register as the execution goal to upload the schema artifacts to Apicurio Registry.

    registryUrl

    Specify the Apicurio Registry URL by using the ../apis/registry/v3 endpoint.

    clientSecret

    If authentication is required, you can specify your authentication server and client credentials.

    groupId

    Specify the Apicurio Registry artifact group ID. You can specify the default group if you do not want to use a unique group ID.

    reference

    Specify the Apicurio Registry artifact reference using its group ID, artifact ID, version, type, and location. You can register multiple artifact references in this way.

  2. Build your Maven project, for example, by using the mvn package command.

Additional resources

Adding artifact references automatically using the Apicurio Registry Maven plug-in

Some Apicurio Registry artifact types can include artifact references from one artifact file to another. You can create efficiencies by defining reusable schema or API artifacts, and then referencing them from multiple locations in artifact references.

The following artifact types support artifact references:

  • Apache Avro

  • Google Protobuf

  • JSON Schema

  • OpenAPI

  • AsyncAPI

You can specify a single artifact and configure the Apicurio Registry Maven plugin to automatically detect all references to artifacts located in the same directory, and to automatically register those references. This is a Technology Preview feature.

Technology Preview features are not supported with RedHat production service level agreements (SLAs) and might not be functionally complete. RedHat does not recommend using them in production. These features provide early access to upcoming product features, enabling customers to test functionality and provide feedback during the development process.

For more information about the support scope of RedHat Technology Preview features, see Technology Preview Features Support Scope.

This section shows a simple example of using the Maven plug-in to register an Avro schema and automatically detect and register an artifact reference to a simple schema artifact. This example assumes that the parent TradeKey artifact and the nested Exchange schema artifact are both available in the same directory:

The following TradeKey schema contains a nested reference to the Exchange schema:

{
  "namespace": "com.kubetrade.schema.trade",
  "type": "record",
  "name": "TradeKey",
  "fields": [
    {
      "name": "exchange",
      "type": "com.kubetrade.schema.common.Exchange"
    },
    {
      "name": "key",
      "type": "string"
    }
  ]
}

The following example shows the Exchange schema:

{
  "namespace": "com.kubetrade.schema.common",
  "type": "enum",
  "name": "Exchange",
  "symbols" : ["GEMINI"]
}
Prerequisites

  • You have created a Maven project for your client application. For more details, see the Apache Maven documentation.

  • The TradeKey schema artifact and the nested Exchange schema artifact files are both located in the same directory.

Procedure

  1. Update your Maven pom.xml file to use the apicurio-registry-maven-plugin to register the TradeKey schema, which includes a nested reference to the Exchange schema as follows:

    <plugin>
    <groupId>io.apicurio</groupId>
    <artifactId>apicurio-registry-maven-plugin</artifactId>
    <version>${apicurio-registry.version}</version>
    <executions>
        <execution>
            <phase>generate-sources</phase>
            <goals>
                <goal>register</goal>
            </goals>
            <configuration>
                <registryUrl>MY-REGISTRY-URL/apis/registry/v3</registryUrl>
                <authServerUrl>MY-AUTH-SERVER</authServerUrl>
                <clientId>MY-CLIENT-ID</clientId>
                <clientSecret>MY-CLIENT-SECRET</clientSecret>
                <clientScope>MY-CLIENT-SCOPE</clientScope>
                <artifacts>
                    <artifact>
                        <groupId>test-group</groupId>
                        <artifactId>TradeKey</artifactId>
                        <version>2.0</version>
                        <artifactType>AVRO</artifactType>
                        <file>
                            ${project.basedir}/src/main/resources/schemas/TradeKey.avsc
                        </file>
                        <ifExists>FIND_OR_CREATE_VERSION</ifExists>
                        <canonicalize>true</canonicalize>
                        <autoRefs>true</autoRefs>
                    </artifact>
                </artifacts>
            </configuration>
        </execution>
    </executions>
</plugin>
    goal

    Specify register as the execution goal to upload the schema artifacts to Apicurio Registry.

    registryUrl

    Specify the Apicurio Registry URL by using the ../apis/registry/v3 endpoint.

    clientSecret

    If authentication is required, you can specify your authentication server and client credentials.

    groupId

    Specify the parent artifact group ID that contains the references. You can specify the default group if you do not want to use a unique group ID.

    file

    Specify the location of the parent artifact file. All referenced artifacts must also be located in the same directory.

    autoRefs

    Set the <autoRefs> option to true to automatically detect and register all references to artifacts in the same directory. You can register multiple artifact references in this way.

  2. Build your Maven project, for example, by using the mvn package command.

Additional resources

TLS configuration options for the Maven plug-in

When connecting to a TLS-enabled Apicurio Registry instance, you can configure the Maven plug-in to use SSL/TLS for secure communication. The plug-in supports various trust store and key store formats, as well as multiple authentication methods.

The following tables describe the TLS-related configuration options available in the Maven plug-in.

Table 1. Trust store configuration
Parameter Description

trustStorePath

Path to the trust store file containing the CA certificate(s) to trust. Supports JKS, PKCS12, and PEM formats. The format is auto-detected from the file extension (.jks, .p12/.pfx, .pem/.crt/.cer) unless explicitly specified.

trustStorePassword

Password for the trust store. Required for JKS and PKCS12 formats.

trustStoreType

Explicit trust store type: JKS, PKCS12, or PEM. If not specified, the type is auto-detected from the file extension.
Table 2. Key store configuration for mutual TLS (mTLS)
Parameter Description

keyStorePath

Path to the key store file containing the client certificate for mTLS authentication. Supports JKS, PKCS12, and PEM formats.

keyStorePassword

Password for the key store. Required for JKS and PKCS12 formats.

keyStoreType

Explicit key store type: JKS, PKCS12, or PEM. If not specified, the type is auto-detected from the file extension.

keyStorePemKeyPath

Path to the PEM private key file. Required when using PEM format for mTLS, where keyStorePath points to the certificate file.
Table 3. Additional SSL options
Parameter Default Description

trustAll

false

If set to true, trust all SSL/TLS certificates without validation. WARNING: This should only be used for development or testing purposes.

verifyHostname

true

If set to false, disable hostname verification in SSL/TLS connections. WARNING: Disabling this reduces security and should only be used for development or testing.
Additional resources

TLS and authentication configuration examples for the Maven plug-in

These examples show how to combine TLS configuration options with different authentication methods when connecting the Maven plug-in to a TLS-enabled Apicurio Registry instance.

TLS with PKCS12 trust store. The following example shows how to configure the Maven plug-in to connect to a TLS-enabled Apicurio Registry using a PKCS12 trust store:

<plugin>
  <groupId>io.apicurio</groupId>
  <artifactId>apicurio-registry-maven-plugin</artifactId>
  <version>${apicurio.version}</version>
  <executions>
    <execution>
      <phase>generate-sources</phase>
      <goals>
        <goal>register</goal>
      </goals>
      <configuration>
          <registryUrl>https://registry.example.com:8443/apis/registry/v3</registryUrl>
          <trustStorePath>${project.basedir}/certs/truststore.p12</trustStorePath>
          <trustStorePassword>${env.TRUSTSTORE_PASSWORD}</trustStorePassword>
          <artifacts>
              <artifact>
                  <groupId>default</groupId>
                  <artifactId>MySchema</artifactId>
                  <file>${project.basedir}/src/main/resources/schemas/schema.avsc</file>
              </artifact>
          </artifacts>
      </configuration>
    </execution>
  </executions>
</plugin>
registryUrl

Use https:// for the registry URL when connecting with TLS.

trustStorePath

Specify the path to your PKCS12 trust store containing the CA certificate(s).

trustStorePassword

Use environment variables for passwords to avoid storing secrets in your pom.xml.

TLS with basic authentication. The following example shows how to combine TLS with basic authentication:

<plugin>
  <groupId>io.apicurio</groupId>
  <artifactId>apicurio-registry-maven-plugin</artifactId>
  <version>${apicurio.version}</version>
  <executions>
    <execution>
      <phase>generate-sources</phase>
      <goals>
        <goal>register</goal>
      </goals>
      <configuration>
          <registryUrl>https://registry.example.com:8443/apis/registry/v3</registryUrl>
          <trustStorePath>${project.basedir}/certs/truststore.p12</trustStorePath>
          <trustStorePassword>${env.TRUSTSTORE_PASSWORD}</trustStorePassword>
          <username>${env.REGISTRY_USERNAME}</username>
          <password>${env.REGISTRY_PASSWORD}</password>
          <artifacts>
              <artifact>
                  <groupId>default</groupId>
                  <artifactId>MySchema</artifactId>
                  <file>${project.basedir}/src/main/resources/schemas/schema.avsc</file>
              </artifact>
          </artifacts>
      </configuration>
    </execution>
  </executions>
</plugin>
username, password

Combine TLS configuration with basic authentication credentials.

TLS with OAuth2 authentication. The following example shows how to configure TLS with OAuth2/OIDC client credentials authentication:

<plugin>
  <groupId>io.apicurio</groupId>
  <artifactId>apicurio-registry-maven-plugin</artifactId>
  <version>${apicurio.version}</version>
  <executions>
    <execution>
      <phase>generate-sources</phase>
      <goals>
        <goal>register</goal>
      </goals>
      <configuration>
          <registryUrl>https://registry.example.com:8443/apis/registry/v3</registryUrl>
          <trustStorePath>${project.basedir}/certs/truststore.p12</trustStorePath>
          <trustStorePassword>${env.TRUSTSTORE_PASSWORD}</trustStorePassword>
          <authServerUrl>https://keycloak.example.com/realms/registry/protocol/openid-connect/token</authServerUrl>
          <clientId>${env.CLIENT_ID}</clientId>
          <clientSecret>${env.CLIENT_SECRET}</clientSecret>
          <clientScope>openid</clientScope>
          <artifacts>
              <artifact>
                  <groupId>default</groupId>
                  <artifactId>MySchema</artifactId>
                  <file>${project.basedir}/src/main/resources/schemas/schema.avsc</file>
              </artifact>
          </artifacts>
      </configuration>
    </execution>
  </executions>
</plugin>
authServerUrl

Specify the OAuth2/OIDC token endpoint URL for authentication.

Mutual TLS (mTLS). The following example shows how to configure mutual TLS where both the client and server authenticate each other using certificates:

<plugin>
  <groupId>io.apicurio</groupId>
  <artifactId>apicurio-registry-maven-plugin</artifactId>
  <version>${apicurio.version}</version>
  <executions>
    <execution>
      <phase>generate-sources</phase>
      <goals>
        <goal>register</goal>
      </goals>
      <configuration>
          <registryUrl>https://registry.example.com:8443/apis/registry/v3</registryUrl>
          <trustStorePath>${project.basedir}/certs/truststore.p12</trustStorePath>
          <trustStorePassword>${env.TRUSTSTORE_PASSWORD}</trustStorePassword>
          <keyStorePath>${project.basedir}/certs/client-keystore.p12</keyStorePath>
          <keyStorePassword>${env.KEYSTORE_PASSWORD}</keyStorePassword>
          <artifacts>
              <artifact>
                  <groupId>default</groupId>
                  <artifactId>MySchema</artifactId>
                  <file>${project.basedir}/src/main/resources/schemas/schema.avsc</file>
              </artifact>
          </artifacts>
      </configuration>
    </execution>
  </executions>
</plugin>
trustStorePath

Trust store to verify the server’s certificate.

keyStorePath

Key store containing the client certificate for authentication.

TLS with PEM certificates. The following example shows how to use PEM-formatted certificates:

<plugin>
  <groupId>io.apicurio</groupId>
  <artifactId>apicurio-registry-maven-plugin</artifactId>
  <version>${apicurio.version}</version>
  <executions>
    <execution>
      <phase>generate-sources</phase>
      <goals>
        <goal>register</goal>
      </goals>
      <configuration>
          <registryUrl>https://registry.example.com:8443/apis/registry/v3</registryUrl>
          <trustStorePath>${project.basedir}/certs/ca-cert.pem</trustStorePath>
          <trustStoreType>PEM</trustStoreType>
          <artifacts>
              <artifact>
                  <groupId>default</groupId>
                  <artifactId>MySchema</artifactId>
                  <file>${project.basedir}/src/main/resources/schemas/schema.avsc</file>
              </artifact>
          </artifacts>
      </configuration>
    </execution>
  </executions>
</plugin>
trustStorePath

PEM certificate files do not require a password.

mTLS with PEM certificates. The following example shows mTLS configuration using PEM-formatted certificate and key files:

<plugin>
  <groupId>io.apicurio</groupId>
  <artifactId>apicurio-registry-maven-plugin</artifactId>
  <version>${apicurio.version}</version>
  <executions>
    <execution>
      <phase>generate-sources</phase>
      <goals>
        <goal>register</goal>
      </goals>
      <configuration>
          <registryUrl>https://registry.example.com:8443/apis/registry/v3</registryUrl>
          <trustStorePath>${project.basedir}/certs/ca-cert.pem</trustStorePath>
          <trustStoreType>PEM</trustStoreType>
          <keyStorePath>${project.basedir}/certs/client-cert.pem</keyStorePath>
          <keyStorePemKeyPath>${project.basedir}/certs/client-key.pem</keyStorePemKeyPath>
          <keyStoreType>PEM</keyStoreType>
          <artifacts>
              <artifact>
                  <groupId>default</groupId>
                  <artifactId>MySchema</artifactId>
                  <file>${project.basedir}/src/main/resources/schemas/schema.avsc</file>
              </artifact>
          </artifacts>
      </configuration>
    </execution>
  </executions>
</plugin>
keyStorePath

Path to the client certificate PEM file.

keyStorePemKeyPath

Path to the client private key PEM file. Required when using PEM format for mTLS.

Additional resources