(self, request: GetKmsKeyRequest)
| 408 | } |
| 409 | |
| 410 | async fn get_kms_key(self, request: GetKmsKeyRequest) -> Result<KmsKeyResponse> { |
| 411 | self.ensure_self_allowed() |
| 412 | .await |
| 413 | .context("KMS self authorization failed")?; |
| 414 | let _info = self.ensure_kms_allowed(&request.vm_config).await?; |
| 415 | Ok(KmsKeyResponse { |
| 416 | temp_ca_key: self.state.inner.temp_ca_key.clone(), |
| 417 | keys: vec![KmsKeys { |
| 418 | ca_key: self.state.inner.root_ca.key.serialize_pem(), |
| 419 | k256_key: self.state.inner.k256_key.to_bytes().to_vec(), |
| 420 | }], |
| 421 | }) |
| 422 | } |
| 423 | |
| 424 | async fn get_temp_ca_cert(self) -> Result<GetTempCaCertResponse> { |
| 425 | self.ensure_self_allowed() |
no test coverage detected