kms

type Creator func(provider Provider) (KeyManager, error)

type KeyManager interface {
	// Create a new key/keyset/key handle for the type kt
	Create(kt string) (string, interface{}, error)
	// Get key handle for the given keyID
	Get(keyID string) (interface{}, error)
	// Rotate a key referenced by keyID and return a new handle of a keyset including old key and
	// new key with type kt. It also returns the updated keyID as the first return value
	Rotate(kt, keyID string) (string, interface{}, error)
}

type Provider interface {
	StorageProvider() storage.Provider
	SecretLock() secretlock.Service
}