192 lines
5.4 KiB
PHP
192 lines
5.4 KiB
PHP
<?php
|
|
/*
|
|
* Copyright 2014 Google Inc.
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License"); you may not
|
|
* use this file except in compliance with the License. You may obtain a copy of
|
|
* the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
* License for the specific language governing permissions and limitations under
|
|
* the License.
|
|
*/
|
|
|
|
namespace Google\Service\CloudKMS;
|
|
|
|
class EkmConnection extends \Google\Collection
|
|
{
|
|
/**
|
|
* Not specified.
|
|
*/
|
|
public const KEY_MANAGEMENT_MODE_KEY_MANAGEMENT_MODE_UNSPECIFIED = 'KEY_MANAGEMENT_MODE_UNSPECIFIED';
|
|
/**
|
|
* EKM-side key management operations on CryptoKeys created with this
|
|
* EkmConnection must be initiated from the EKM directly and cannot be
|
|
* performed from Cloud KMS. This means that: * When creating a
|
|
* CryptoKeyVersion associated with this EkmConnection, the caller must supply
|
|
* the key path of pre-existing external key material that will be linked to
|
|
* the CryptoKeyVersion. * Destruction of external key material cannot be
|
|
* requested via the Cloud KMS API and must be performed directly in the EKM.
|
|
* * Automatic rotation of key material is not supported.
|
|
*/
|
|
public const KEY_MANAGEMENT_MODE_MANUAL = 'MANUAL';
|
|
/**
|
|
* All CryptoKeys created with this EkmConnection use EKM-side key management
|
|
* operations initiated from Cloud KMS. This means that: * When a
|
|
* CryptoKeyVersion associated with this EkmConnection is created, the EKM
|
|
* automatically generates new key material and a new key path. The caller
|
|
* cannot supply the key path of pre-existing external key material. *
|
|
* Destruction of external key material associated with this EkmConnection can
|
|
* be requested by calling DestroyCryptoKeyVersion. * Automatic rotation of
|
|
* key material is supported.
|
|
*/
|
|
public const KEY_MANAGEMENT_MODE_CLOUD_KMS = 'CLOUD_KMS';
|
|
protected $collection_key = 'serviceResolvers';
|
|
/**
|
|
* Output only. The time at which the EkmConnection was created.
|
|
*
|
|
* @var string
|
|
*/
|
|
public $createTime;
|
|
/**
|
|
* Optional. Identifies the EKM Crypto Space that this EkmConnection maps to.
|
|
* Note: This field is required if KeyManagementMode is CLOUD_KMS.
|
|
*
|
|
* @var string
|
|
*/
|
|
public $cryptoSpacePath;
|
|
/**
|
|
* Optional. Etag of the currently stored EkmConnection.
|
|
*
|
|
* @var string
|
|
*/
|
|
public $etag;
|
|
/**
|
|
* Optional. Describes who can perform control plane operations on the EKM. If
|
|
* unset, this defaults to MANUAL.
|
|
*
|
|
* @var string
|
|
*/
|
|
public $keyManagementMode;
|
|
/**
|
|
* Output only. The resource name for the EkmConnection in the format
|
|
* `projects/locations/ekmConnections`.
|
|
*
|
|
* @var string
|
|
*/
|
|
public $name;
|
|
protected $serviceResolversType = ServiceResolver::class;
|
|
protected $serviceResolversDataType = 'array';
|
|
|
|
/**
|
|
* Output only. The time at which the EkmConnection was created.
|
|
*
|
|
* @param string $createTime
|
|
*/
|
|
public function setCreateTime($createTime)
|
|
{
|
|
$this->createTime = $createTime;
|
|
}
|
|
/**
|
|
* @return string
|
|
*/
|
|
public function getCreateTime()
|
|
{
|
|
return $this->createTime;
|
|
}
|
|
/**
|
|
* Optional. Identifies the EKM Crypto Space that this EkmConnection maps to.
|
|
* Note: This field is required if KeyManagementMode is CLOUD_KMS.
|
|
*
|
|
* @param string $cryptoSpacePath
|
|
*/
|
|
public function setCryptoSpacePath($cryptoSpacePath)
|
|
{
|
|
$this->cryptoSpacePath = $cryptoSpacePath;
|
|
}
|
|
/**
|
|
* @return string
|
|
*/
|
|
public function getCryptoSpacePath()
|
|
{
|
|
return $this->cryptoSpacePath;
|
|
}
|
|
/**
|
|
* Optional. Etag of the currently stored EkmConnection.
|
|
*
|
|
* @param string $etag
|
|
*/
|
|
public function setEtag($etag)
|
|
{
|
|
$this->etag = $etag;
|
|
}
|
|
/**
|
|
* @return string
|
|
*/
|
|
public function getEtag()
|
|
{
|
|
return $this->etag;
|
|
}
|
|
/**
|
|
* Optional. Describes who can perform control plane operations on the EKM. If
|
|
* unset, this defaults to MANUAL.
|
|
*
|
|
* Accepted values: KEY_MANAGEMENT_MODE_UNSPECIFIED, MANUAL, CLOUD_KMS
|
|
*
|
|
* @param self::KEY_MANAGEMENT_MODE_* $keyManagementMode
|
|
*/
|
|
public function setKeyManagementMode($keyManagementMode)
|
|
{
|
|
$this->keyManagementMode = $keyManagementMode;
|
|
}
|
|
/**
|
|
* @return self::KEY_MANAGEMENT_MODE_*
|
|
*/
|
|
public function getKeyManagementMode()
|
|
{
|
|
return $this->keyManagementMode;
|
|
}
|
|
/**
|
|
* Output only. The resource name for the EkmConnection in the format
|
|
* `projects/locations/ekmConnections`.
|
|
*
|
|
* @param string $name
|
|
*/
|
|
public function setName($name)
|
|
{
|
|
$this->name = $name;
|
|
}
|
|
/**
|
|
* @return string
|
|
*/
|
|
public function getName()
|
|
{
|
|
return $this->name;
|
|
}
|
|
/**
|
|
* Optional. A list of ServiceResolvers where the EKM can be reached. There
|
|
* should be one ServiceResolver per EKM replica. Currently, only a single
|
|
* ServiceResolver is supported.
|
|
*
|
|
* @param ServiceResolver[] $serviceResolvers
|
|
*/
|
|
public function setServiceResolvers($serviceResolvers)
|
|
{
|
|
$this->serviceResolvers = $serviceResolvers;
|
|
}
|
|
/**
|
|
* @return ServiceResolver[]
|
|
*/
|
|
public function getServiceResolvers()
|
|
{
|
|
return $this->serviceResolvers;
|
|
}
|
|
}
|
|
|
|
// Adding a class alias for backwards compatibility with the previous class name.
|
|
class_alias(EkmConnection::class, 'Google_Service_CloudKMS_EkmConnection');
|