operationsv1

type CreateKeyRequest struct {
	Config    *v1.KeystoreInstanceConfig `protobuf:"bytes,1,opt,name=config,proto3" json:"config,omitempty"`
	Algorithm KeyAlgorithm               `protobuf:"varint,2,opt,name=algorithm,proto3,enum=plugin.keystore.operations.v1.KeyAlgorithm" json:"algorithm,omitempty"`
	Id        *string                    `protobuf:"bytes,3,opt,name=id,proto3,oneof" json:"id,omitempty"`   // Optional predefined key ID
	Region    string                     `protobuf:"bytes,4,opt,name=region,proto3" json:"region,omitempty"` // The region in which to create the key
	KeyType   KeyType                    ``                                                                  // Key type (system-managed or BYOK)
	/* 126-byte string literal not displayed */
	// contains filtered or unexported fields
}

type CreateKeyResponse struct {
	KeyId  string `protobuf:"bytes,1,opt,name=key_id,json=keyId,proto3" json:"key_id,omitempty"` // The ID of the created key
	Status string `protobuf:"bytes,2,opt,name=status,proto3" json:"status,omitempty"`            // The current status of the key (e.g., enabled, disabled)
	// contains filtered or unexported fields
}

type DeleteKeyRequest struct {
	Parameters *RequestParameters `protobuf:"bytes,1,opt,name=parameters,proto3" json:"parameters,omitempty"`
	Window     *int32             `protobuf:"varint,2,opt,name=window,proto3,oneof" json:"window,omitempty"` // Optional deletion window in days
	// contains filtered or unexported fields
}

type DeleteKeyResponse struct {
	// contains filtered or unexported fields
}

type DisableKeyRequest struct {
	Parameters *RequestParameters `protobuf:"bytes,1,opt,name=parameters,proto3" json:"parameters,omitempty"`
	// contains filtered or unexported fields
}

type DisableKeyResponse struct {
	// contains filtered or unexported fields
}

type EnableKeyRequest struct {
	Parameters *RequestParameters `protobuf:"bytes,1,opt,name=parameters,proto3" json:"parameters,omitempty"`
	// contains filtered or unexported fields
}

type EnableKeyResponse struct {
	// contains filtered or unexported fields
}

type ExtractKeyRegionRequest struct {
	NativeKeyId          string           `protobuf:"bytes,1,opt,name=native_key_id,json=nativeKeyId,proto3" json:"native_key_id,omitempty"`                            // The region can be derived from the native key ID
	ManagementAccessData *structpb.Struct `protobuf:"bytes,2,opt,name=management_access_data,json=managementAccessData,proto3" json:"management_access_data,omitempty"` // Or the access details of the management role
	// contains filtered or unexported fields
}

type ExtractKeyRegionResponse struct {
	Region string `protobuf:"bytes,1,opt,name=region,proto3" json:"region,omitempty"` // The extracted region from the key attributes
	// contains filtered or unexported fields
}

type GetImportParametersRequest struct {
	Parameters *RequestParameters `protobuf:"bytes,1,opt,name=parameters,proto3" json:"parameters,omitempty"`
	Algorithm  KeyAlgorithm       `protobuf:"varint,2,opt,name=algorithm,proto3,enum=plugin.keystore.operations.v1.KeyAlgorithm" json:"algorithm,omitempty"`
	// contains filtered or unexported fields
}

type GetImportParametersResponse struct {
	KeyId            string           `protobuf:"bytes,1,opt,name=key_id,json=keyId,proto3" json:"key_id,omitempty"`
	ImportParameters *structpb.Struct `protobuf:"bytes,2,opt,name=import_parameters,json=importParameters,proto3" json:"import_parameters,omitempty"` // The parameters needed for importing key material
	// contains filtered or unexported fields
}

type GetKeyRequest struct {
	Parameters *RequestParameters `protobuf:"bytes,1,opt,name=parameters,proto3" json:"parameters,omitempty"`
	// contains filtered or unexported fields
}

type GetKeyResponse struct {
	KeyId              string                 `protobuf:"bytes,1,opt,name=key_id,json=keyId,proto3" json:"key_id,omitempty"`                                                // The ID of the retrieved key
	Algorithm          KeyAlgorithm           `protobuf:"varint,2,opt,name=algorithm,proto3,enum=plugin.keystore.operations.v1.KeyAlgorithm" json:"algorithm,omitempty"`    // The algorithm used for the key
	Status             string                 `protobuf:"bytes,3,opt,name=status,proto3" json:"status,omitempty"`                                                           // The current status of the key (e.g., enabled, disabled)
	Usage              string                 `protobuf:"bytes,4,opt,name=usage,proto3" json:"usage,omitempty"`                                                             // The intended usage of the key (e.g., encryption, signing)
	LatestKeyVersionId string                 `protobuf:"bytes,5,opt,name=latest_key_version_id,json=latestKeyVersionId,proto3" json:"latest_key_version_id,omitempty"`     // The ID of the latest key version
	LatestRotationTime *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=latest_rotation_time,json=latestRotationTime,proto3,oneof" json:"latest_rotation_time,omitempty"` // The timestamp of the latest key rotation
	// contains filtered or unexported fields
}

type ImportKeyMaterialRequest struct {
	Parameters           *RequestParameters `protobuf:"bytes,1,opt,name=parameters,proto3" json:"parameters,omitempty"`
	ImportParameters     *structpb.Struct   `protobuf:"bytes,2,opt,name=import_parameters,json=importParameters,proto3" json:"import_parameters,omitempty"`               // The parameters needed for importing key material
	EncryptedKeyMaterial string             `protobuf:"bytes,3,opt,name=encrypted_key_material,json=encryptedKeyMaterial,proto3" json:"encrypted_key_material,omitempty"` // The encrypted key material to be imported
	// contains filtered or unexported fields
}

type ImportKeyMaterialResponse struct {
	// contains filtered or unexported fields
}

type KeyAlgorithm int32

type KeyType int32

type KeystoreInstanceKeyOperationClient interface {
	// GetKey retrieves the details of a key by its ID
	// * Returns error "code = InvalidArgument desc = failed to authenticate with the keystore provider"
	// if the provided access data is invalid
	// * Returns error "code = NotFound desc = key not found in the keystore provider"
	// if the key does not exist
	GetKey(ctx context.Context, in *GetKeyRequest, opts ...grpc.CallOption) (*GetKeyResponse, error)
	// CreateKey generates a new key with the specified algorithm
	CreateKey(ctx context.Context, in *CreateKeyRequest, opts ...grpc.CallOption) (*CreateKeyResponse, error)
	// DeleteKey removes a key, optionally with a deletion window
	DeleteKey(ctx context.Context, in *DeleteKeyRequest, opts ...grpc.CallOption) (*DeleteKeyResponse, error)
	// EnableKey activates a previously disabled key
	EnableKey(ctx context.Context, in *EnableKeyRequest, opts ...grpc.CallOption) (*EnableKeyResponse, error)
	// DisableKey deactivates a key while maintaining its existence
	DisableKey(ctx context.Context, in *DisableKeyRequest, opts ...grpc.CallOption) (*DisableKeyResponse, error)
	// Gets the parameters needed for importing key material
	GetImportParameters(ctx context.Context, in *GetImportParametersRequest, opts ...grpc.CallOption) (*GetImportParametersResponse, error)
	// Imports key material into a KMS key
	ImportKeyMaterial(ctx context.Context, in *ImportKeyMaterialRequest, opts ...grpc.CallOption) (*ImportKeyMaterialResponse, error)
	// Validate the key attributes against the plugin's requirements
	ValidateKey(ctx context.Context, in *ValidateKeyRequest, opts ...grpc.CallOption) (*ValidateKeyResponse, error)
	// ValidateKeyAccessData checks the access data for key management and crypto operations
	ValidateKeyAccessData(ctx context.Context, in *ValidateKeyAccessDataRequest, opts ...grpc.CallOption) (*ValidateKeyAccessDataResponse, error)
	// TransformCryptoAccessData transforms the JSON-stored crypto access data into protobuf wire format for a given key
	TransformCryptoAccessData(ctx context.Context, in *TransformCryptoAccessDataRequest, opts ...grpc.CallOption) (*TransformCryptoAccessDataResponse, error)
	// ExtractKeyRegion extracts the region from key attributes
	ExtractKeyRegion(ctx context.Context, in *ExtractKeyRegionRequest, opts ...grpc.CallOption) (*ExtractKeyRegionResponse, error)
}

type KeystoreInstanceKeyOperationPluginClient struct {
	KeystoreInstanceKeyOperationClient
}

type KeystoreInstanceKeyOperationServer interface {
	// GetKey retrieves the details of a key by its ID
	// * Returns error "code = InvalidArgument desc = failed to authenticate with the keystore provider"
	// if the provided access data is invalid
	// * Returns error "code = NotFound desc = key not found in the keystore provider"
	// if the key does not exist
	GetKey(context.Context, *GetKeyRequest) (*GetKeyResponse, error)
	// CreateKey generates a new key with the specified algorithm
	CreateKey(context.Context, *CreateKeyRequest) (*CreateKeyResponse, error)
	// DeleteKey removes a key, optionally with a deletion window
	DeleteKey(context.Context, *DeleteKeyRequest) (*DeleteKeyResponse, error)
	// EnableKey activates a previously disabled key
	EnableKey(context.Context, *EnableKeyRequest) (*EnableKeyResponse, error)
	// DisableKey deactivates a key while maintaining its existence
	DisableKey(context.Context, *DisableKeyRequest) (*DisableKeyResponse, error)
	// Gets the parameters needed for importing key material
	GetImportParameters(context.Context, *GetImportParametersRequest) (*GetImportParametersResponse, error)
	// Imports key material into a KMS key
	ImportKeyMaterial(context.Context, *ImportKeyMaterialRequest) (*ImportKeyMaterialResponse, error)
	// Validate the key attributes against the plugin's requirements
	ValidateKey(context.Context, *ValidateKeyRequest) (*ValidateKeyResponse, error)
	// ValidateKeyAccessData checks the access data for key management and crypto operations
	ValidateKeyAccessData(context.Context, *ValidateKeyAccessDataRequest) (*ValidateKeyAccessDataResponse, error)
	// TransformCryptoAccessData transforms the JSON-stored crypto access data into protobuf wire format for a given key
	TransformCryptoAccessData(context.Context, *TransformCryptoAccessDataRequest) (*TransformCryptoAccessDataResponse, error)
	// ExtractKeyRegion extracts the region from key attributes
	ExtractKeyRegion(context.Context, *ExtractKeyRegionRequest) (*ExtractKeyRegionResponse, error)
	// contains filtered or unexported methods
}

type RequestParameters struct {
	Config *v1.KeystoreInstanceConfig `protobuf:"bytes,1,opt,name=config,proto3" json:"config,omitempty"`
	KeyId  string                     `protobuf:"bytes,2,opt,name=key_id,json=keyId,proto3" json:"key_id,omitempty"`
	// contains filtered or unexported fields
}

type TransformCryptoAccessDataRequest struct {
	NativeKeyId string `protobuf:"bytes,1,opt,name=native_key_id,json=nativeKeyId,proto3" json:"native_key_id,omitempty"` // The native key ID for which the access data is transformed
	AccessData  []byte `protobuf:"bytes,2,opt,name=access_data,json=accessData,proto3" json:"access_data,omitempty"`      // The JSON crypto access data to be transformed
	// contains filtered or unexported fields
}

type TransformCryptoAccessDataResponse struct {
	TransformedAccessData map[string][]byte `` // The transformed crypto access data in wire format
	/* 200-byte string literal not displayed */
	// contains filtered or unexported fields
}

type UnimplementedKeystoreInstanceKeyOperationServer struct{}

type UnsafeKeystoreInstanceKeyOperationServer interface {
	// contains filtered or unexported methods
}

type ValidateKeyAccessDataRequest struct {
	Management *structpb.Struct `protobuf:"bytes,1,opt,name=management,proto3" json:"management,omitempty"`
	Crypto     *structpb.Struct `protobuf:"bytes,2,opt,name=crypto,proto3" json:"crypto,omitempty"`
	// contains filtered or unexported fields
}

type ValidateKeyAccessDataResponse struct {
	IsValid bool   `protobuf:"varint,1,opt,name=is_valid,json=isValid,proto3" json:"is_valid,omitempty"` // Indicates if the key access data is valid
	Message string `protobuf:"bytes,2,opt,name=message,proto3" json:"message,omitempty"`                 // Additional information about the validation result
	// contains filtered or unexported fields
}

type ValidateKeyRequest struct {
	KeyType     KeyType      `` /* 126-byte string literal not displayed */
	Algorithm   KeyAlgorithm `protobuf:"varint,2,opt,name=algorithm,proto3,enum=plugin.keystore.operations.v1.KeyAlgorithm" json:"algorithm,omitempty"`
	Region      string       `protobuf:"bytes,3,opt,name=region,proto3" json:"region,omitempty"`                                // The region in which the key is to be validated
	NativeKeyId string       `protobuf:"bytes,4,opt,name=native_key_id,json=nativeKeyId,proto3" json:"native_key_id,omitempty"` // The native key ID if applicable
	// contains filtered or unexported fields
}

type ValidateKeyResponse struct {
	IsValid bool   `protobuf:"varint,1,opt,name=is_valid,json=isValid,proto3" json:"is_valid,omitempty"` // Indicates if the key attributes are valid
	Message string `protobuf:"bytes,2,opt,name=message,proto3" json:"message,omitempty"`                 // Additional information about the validation result
	// contains filtered or unexported fields
}