|
1754 | 1754 | "description": { |
1755 | 1755 | "$ref": "#/components/schemas/Description" |
1756 | 1756 | }, |
| 1757 | + "encrypted": { |
| 1758 | + "allOf": [ |
| 1759 | + { |
| 1760 | + "$ref": "#/components/schemas/VolumeEncryption" |
| 1761 | + } |
| 1762 | + ], |
| 1763 | + "readOnly": true |
| 1764 | + }, |
| 1765 | + "encryptionParameters": { |
| 1766 | + "$ref": "#/components/schemas/VolumeEncryptionParameter" |
| 1767 | + }, |
1757 | 1768 | "id": { |
1758 | 1769 | "allOf": [ |
1759 | 1770 | { |
|
2320 | 2331 | "pattern": "^[A-Za-z0-9@._-]*$", |
2321 | 2332 | "type": "string" |
2322 | 2333 | }, |
| 2334 | + "KeyPayload": { |
| 2335 | + "description": "base64 encoded secret.", |
| 2336 | + "example": "VGhpcy1pcy1hLXNlY3JldCE=", |
| 2337 | + "format": "byte", |
| 2338 | + "type": "string" |
| 2339 | + }, |
| 2340 | + "KeyVersion": { |
| 2341 | + "description": "Version of a key within the STACKIT-KMS.", |
| 2342 | + "example": 1, |
| 2343 | + "format": "int64", |
| 2344 | + "type": "integer" |
| 2345 | + }, |
2323 | 2346 | "Keypair": { |
2324 | 2347 | "description": "Object that represents the public key of an SSH keypair and its name.", |
2325 | 2348 | "properties": { |
|
4447 | 4470 | "description": { |
4448 | 4471 | "$ref": "#/components/schemas/Description" |
4449 | 4472 | }, |
| 4473 | + "encrypted": { |
| 4474 | + "allOf": [ |
| 4475 | + { |
| 4476 | + "$ref": "#/components/schemas/VolumeEncryption" |
| 4477 | + } |
| 4478 | + ], |
| 4479 | + "readOnly": true |
| 4480 | + }, |
| 4481 | + "encryptionParameters": { |
| 4482 | + "$ref": "#/components/schemas/VolumeEncryptionParameter" |
| 4483 | + }, |
4450 | 4484 | "id": { |
4451 | 4485 | "allOf": [ |
4452 | 4486 | { |
|
4557 | 4591 | "example": true, |
4558 | 4592 | "type": "boolean" |
4559 | 4593 | }, |
| 4594 | + "VolumeEncryption": { |
| 4595 | + "description": "Indicates if a volume is encrypted.", |
| 4596 | + "example": false, |
| 4597 | + "type": "boolean" |
| 4598 | + }, |
| 4599 | + "VolumeEncryptionParameter": { |
| 4600 | + "description": "Parameter to connect to a key-encryption-key within the STACKIT-KMS to create encrypted volumes. If no key_payload is set, a random passphrase is generated, which will be encrypted against the STACKIT-KMS. These parameter never leave the backend again. So these parameters are not in the responses.", |
| 4601 | + "properties": { |
| 4602 | + "kekKeyId": { |
| 4603 | + "allOf": [ |
| 4604 | + { |
| 4605 | + "$ref": "#/components/schemas/UUID" |
| 4606 | + } |
| 4607 | + ], |
| 4608 | + "description": "UUID of the Key within the STACKIT-KMS to use for the encryption." |
| 4609 | + }, |
| 4610 | + "kekKeyVersion": { |
| 4611 | + "allOf": [ |
| 4612 | + { |
| 4613 | + "$ref": "#/components/schemas/KeyVersion" |
| 4614 | + } |
| 4615 | + ], |
| 4616 | + "description": "Version of the key within the STACKIT-KMS to use for the encryption." |
| 4617 | + }, |
| 4618 | + "kekKeyringId": { |
| 4619 | + "allOf": [ |
| 4620 | + { |
| 4621 | + "$ref": "#/components/schemas/UUID" |
| 4622 | + } |
| 4623 | + ], |
| 4624 | + "description": "UUID of the keyring where the key is located within the STACKTI-KMS." |
| 4625 | + }, |
| 4626 | + "kekProjectId": { |
| 4627 | + "allOf": [ |
| 4628 | + { |
| 4629 | + "$ref": "#/components/schemas/UUID" |
| 4630 | + } |
| 4631 | + ], |
| 4632 | + "description": "Id of the project, where the key in the STACKIT-KMS belongs to, in case the key is located in a different project. By default the same project ID is used, like for the volume itself. Defining a key in a different project is only allowed for privileged internal projects." |
| 4633 | + }, |
| 4634 | + "keyPayload": { |
| 4635 | + "allOf": [ |
| 4636 | + { |
| 4637 | + "$ref": "#/components/schemas/KeyPayload" |
| 4638 | + } |
| 4639 | + ], |
| 4640 | + "description": "Optional predefined secret, which will be encrypted against the key-encryption-key within the STACKIT-KMS. If not defined, a random secret will be generated by the API and encrypted against the STACKIT-KMS. If a key-payload is provided here, it must be base64 encoded." |
| 4641 | + }, |
| 4642 | + "serviceAccount": { |
| 4643 | + "allOf": [ |
| 4644 | + { |
| 4645 | + "$ref": "#/components/schemas/ServiceAccountMail" |
| 4646 | + } |
| 4647 | + ], |
| 4648 | + "description": "Service-Account linked to the Key within the STACKIT-KMS." |
| 4649 | + } |
| 4650 | + }, |
| 4651 | + "required": [ |
| 4652 | + "serviceAccount", |
| 4653 | + "kekKeyringId", |
| 4654 | + "kekKeyId", |
| 4655 | + "kekKeyVersion" |
| 4656 | + ], |
| 4657 | + "type": "object" |
| 4658 | + }, |
4560 | 4659 | "VolumeList": { |
4561 | 4660 | "description": "A list containing volume objects.", |
4562 | 4661 | "items": { |
|
0 commit comments