Closed acwest closed 1 month ago
Attention: Patch coverage is 84.10042%
with 38 lines
in your changes missing coverage. Please review.
Project coverage is 89.37%. Comparing base (
3abe81a
) to head (e4e8838
).
Files with missing lines | Patch % | Lines |
---|---|---|
internal/auth0/encryptionkeymanager/resource.go | 79.12% | 26 Missing and 12 partials :warning: |
This PR brings support of the Bring Your Own Key (BYOK) functionality in the Auth0 Management API.
π§ Changes
A new block
customer_provided_root_key
has been added to theauth0_encryption_key_manager
resource. When this block is added, this initiates the process of adding a customer provided root key to the tenant. The block will at this point be filled with attributes from the Auth0 tenantkey_id
,type
,state
,created_at
, andupdated_at
which describe the new key, as well aspublic_wrapping_key
andwrapping_algorithm
, which will be used by the customer to wrap the new key they generate in their KSM/HSM. Once the key is generated and wrapped, the Base64 encoded key is supplied by the customer in thewrapped_key
attribute. If thecustomer_provided_root_key
block is removed, the key provisioning is stopped and Auth0 reverts to using a root key generated internally.π References
Customer Managed Keys
API Docuimentation
π¬ Testing
π Checklist