platform
platform copied to clipboard
Improved KAS key management tools
We currently don't support KAS key management very well
- Introduce
service keyssubcommand tootdfctl: a.init: similar to currentinit-temp-keysscript, this creates new keys b.create: Adds new key or keys of requested type c.import: Adds existing keys of the requested type - These keys update the opentdf.yaml file with the new key information.
Things to think about:
- the keys should be stored in jwk sets
- all keys must be compatible with existing clients
- should be an
opentdfsubcommand set, to simplify deployment - must work on windows
Subtasks:
- [ ] #1085
- [ ] #894
- [ ] #778
- [ ] #769
- [ ] #616
this is currently blocked by the key management adr. moving to BLOCKED until that is complete.