Function main

kms/createKeyForImport.js:17–65

(
  projectId = 'my-project',
  locationId = 'us-east1',
  keyRingId = 'my-key-ring',
  id = 'my-imported-key'
)

'use strict';

async function main(
  projectId = 'my-project',
  locationId = 'us-east1',
  keyRingId = 'my-key-ring',
  id = 'my-imported-key'
) {
  // [START kms_create_key_for_import]
  //
  // TODO(developer): Uncomment these variables before running the sample.
  //
  // const projectId = 'my-project';
  // const locationId = 'us-east1';
  // const keyRingId = 'my-key-ring';
  // const id = 'my-imported-key';

  // Imports the Cloud KMS library
  const {KeyManagementServiceClient} = require('@google-cloud/kms');

  // Instantiates a client
  const client = new KeyManagementServiceClient();

  // Build the parent key ring name
  const keyRingName = client.keyRingPath(projectId, locationId, keyRingId);

  async function createKeyForImport() {
    const [key] = await client.createCryptoKey({
      parent: keyRingName,
      cryptoKeyId: id,
      cryptoKey: {
        purpose: 'ENCRYPT_DECRYPT',
        versionTemplate: {
          algorithm: 'GOOGLE_SYMMETRIC_ENCRYPTION',
          protectionLevel: 'HSM',
        },
        // Optional: ensure that only imported versions may be added to this
        // key.
        importOnly: true,
      },
      // Do not allow KMS to generate an initial version of this key.
      skipInitialVersionCreation: true,
    });

    console.log(`Created key for import: ${key.name}`);
    return key;
  }

  return createKeyForImport();
  // [END kms_create_key_for_import]
}
module.exports.main = main;

/* c8 ignore next 10 */