Module: Google::Cloud::Kms::V1

Defined in:
lib/google/cloud/kms/v1.rb,
lib/google/cloud/kms/v1/credentials.rb,
lib/google/cloud/kms/v1/doc/overview.rb,
lib/google/cloud/kms/v1/key_management_service_client.rb,
lib/google/cloud/kms/v1/doc/google/cloud/kms/v1/service.rb,
lib/google/cloud/kms/v1/doc/google/cloud/kms/v1/resources.rb

Overview

Ruby Client for Google Cloud Key Management Service (KMS) API (Alpha)

Google Cloud Key Management Service (KMS) API: Manages encryption for your cloud services the same way you do on-premises. You can generate, use, rotate, and destroy AES256 encryption keys.

Quick Start

In order to use this library, you first need to go through the following steps:

  1. Select or create a Cloud Platform project.
  2. Enable billing for your project.
  3. Enable the Google Cloud Key Management Service (KMS) API.
  4. Setup Authentication.

Next Steps

Enabling Logging

To enable logging for this library, set the logger for the underlying gRPC library. The logger that you set may be a Ruby stdlib Logger as shown below, or a Google::Cloud::Logging::Logger that will write logs to Stackdriver Logging. See grpc/logconfig.rb and the gRPC spec_helper.rb for additional information.

Configuring a Ruby stdlib logger:

require "logger"

module MyLogger
  LOGGER = Logger.new $stderr, level: Logger::WARN
  def logger
    LOGGER
  end
end

# Define a gRPC module-level logger method before grpc/logconfig.rb loads.
module GRPC
  extend MyLogger
end

Defined Under Namespace

Classes: CreateCryptoKeyRequest, CreateCryptoKeyVersionRequest, CreateKeyRingRequest, Credentials, CryptoKey, CryptoKeyVersion, DecryptRequest, DecryptResponse, DestroyCryptoKeyVersionRequest, EncryptRequest, EncryptResponse, GetCryptoKeyRequest, GetCryptoKeyVersionRequest, GetKeyRingRequest, KeyManagementServiceClient, KeyRing, ListCryptoKeyVersionsRequest, ListCryptoKeyVersionsResponse, ListCryptoKeysRequest, ListCryptoKeysResponse, ListKeyRingsRequest, ListKeyRingsResponse, RestoreCryptoKeyVersionRequest, UpdateCryptoKeyPrimaryVersionRequest, UpdateCryptoKeyRequest, UpdateCryptoKeyVersionRequest

Class Method Summary collapse

Class Method Details

.new(credentials: nil, scopes: nil, client_config: nil, timeout: nil, metadata: nil, exception_transformer: nil, lib_name: nil, lib_version: nil) ⇒ Object

Google Cloud Key Management Service

Manages cryptographic keys and operations using those keys. Implements a REST model with the following objects:

Parameters:

  • credentials (Google::Auth::Credentials, String, Hash, GRPC::Core::Channel, GRPC::Core::ChannelCredentials, Proc) —

    Provides the means for authenticating requests made by the client. This parameter can be many types. A Google::Auth::Credentials uses a the properties of its represented keyfile for authenticating requests made by this client. A String will be treated as the path to the keyfile to be used for the construction of credentials for this client. A Hash will be treated as the contents of a keyfile to be used for the construction of credentials for this client. A GRPC::Core::Channel will be used to make calls through. A GRPC::Core::ChannelCredentials for the setting up the RPC client. The channel credentials should already be composed with a GRPC::Core::CallCredentials object. A Proc will be used as an updater_proc for the Grpc channel. The proc transforms the metadata for requests, generally, to give OAuth credentials.

  • scopes (Array<String>) —

    The OAuth scopes for this service. This parameter is ignored if an updater_proc is supplied.

  • client_config (Hash) —

    A Hash for call options for each method. See Google::Gax#construct_settings for the structure of this data. Falls back to the default config if not specified or the specified config is missing data points.

  • timeout (Numeric) —

    The default timeout, in seconds, for calls made through this client.

  • metadata (Hash) —

    Default metadata to be sent with each request. This can be overridden on a per call basis.

  • exception_transformer (Proc) —

    An optional proc that intercepts any exceptions raised during an API call to inject custom error handling.



115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
 
# File 'lib/google/cloud/kms/v1.rb', line 115

def self.new \
    credentials: nil,
    scopes: nil,
    client_config: nil,
    timeout: nil,
    metadata: nil,
    exception_transformer: nil,
    lib_name: nil,
    lib_version: nil
  kwargs = {
    credentials: credentials,
    scopes: scopes,
    client_config: client_config,
    timeout: timeout,
    metadata: metadata,
    exception_transformer: exception_transformer,
    lib_name: lib_name,
    lib_version: lib_version
  }.select { |_, v| v != nil }
  Google::Cloud::Kms::V1::KeyManagementServiceClient.new(**kwargs)
end