Interface AutokeyAdminGrpc.AsyncService (2.90.0) 

public static interface AutokeyAdminGrpc.AsyncService

Provides interfaces for managing Cloud KMS Autokey folder-level or project-level configurations. A configuration is inherited by all descendent folders and projects. A configuration at a folder or project overrides any other configurations in its ancestry. Setting a configuration on a folder is a prerequisite for Cloud KMS Autokey, so that users working in a descendant project can request provisioned CryptoKeys, ready for Customer Managed Encryption Key (CMEK) use, on-demand when using the dedicated key project mode. This is not required when using the delegated key management mode for same-project keys.

Methods

getAutokeyConfig(GetAutokeyConfigRequest request, StreamObserver<AutokeyConfig> responseObserver)

public default void getAutokeyConfig(GetAutokeyConfigRequest request, StreamObserver<AutokeyConfig> responseObserver)

Returns the AutokeyConfig for a folder or project.

Parameters
Name Description
request GetAutokeyConfigRequest
responseObserver io.grpc.stub.StreamObserver<AutokeyConfig>

showEffectiveAutokeyConfig(ShowEffectiveAutokeyConfigRequest request, StreamObserver<ShowEffectiveAutokeyConfigResponse> responseObserver)

public default void showEffectiveAutokeyConfig(ShowEffectiveAutokeyConfigRequest request, StreamObserver<ShowEffectiveAutokeyConfigResponse> responseObserver)

Returns the effective Cloud KMS Autokey configuration for a given project.

Parameters
Name Description
request ShowEffectiveAutokeyConfigRequest
responseObserver io.grpc.stub.StreamObserver<ShowEffectiveAutokeyConfigResponse>

updateAutokeyConfig(UpdateAutokeyConfigRequest request, StreamObserver<AutokeyConfig> responseObserver)

public default void updateAutokeyConfig(UpdateAutokeyConfigRequest request, StreamObserver<AutokeyConfig> responseObserver)

Updates the AutokeyConfig for a folder or a project. The caller must have both cloudkms.autokeyConfigs.update permission on the parent folder and cloudkms.cryptoKeys.setIamPolicy permission on the provided key project. A KeyHandle creation in the folder's descendant projects will use this configuration to determine where to create the resulting CryptoKey.

Parameters
Name Description
request UpdateAutokeyConfigRequest
responseObserver io.grpc.stub.StreamObserver<AutokeyConfig>