429247f407
* [COMPLIANCE] Update Copyright and License Headers * chore: make gen to generate files with copyright headers * chore: update missed copyright headers --------- Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com> Co-authored-by: Justin Nguyen <justin.nguyen@hashicorp.com>
55 lines
2.0 KiB
PL/PgSQL
55 lines
2.0 KiB
PL/PgSQL
-- Copyright IBM Corp. 2020, 2025
|
|
-- SPDX-License-Identifier: BUSL-1.1
|
|
|
|
begin;
|
|
|
|
-- kms_oidc_key entries are DEKs for encrypting oidc entries.
|
|
create table kms_oidc_key (
|
|
private_id wt_private_id primary key,
|
|
root_key_id wt_private_id not null unique -- there can be only one oidc dek per root key
|
|
references kms_root_key(private_id)
|
|
on delete cascade
|
|
on update cascade,
|
|
create_time wt_timestamp
|
|
);
|
|
|
|
-- define the immutable fields for kms_oidc_key (all of them)
|
|
create trigger immutable_columns before update on kms_oidc_key
|
|
for each row execute procedure immutable_columns('private_id', 'root_key_id', 'create_time');
|
|
|
|
-- define the value of kms_oidc_key's create_time
|
|
create trigger default_create_time_column before insert on kms_oidc_key
|
|
for each row execute procedure default_create_time();
|
|
|
|
-- kms_oidc_key_version entries are version of DEK keys used to encrypt oidc
|
|
-- entries.
|
|
create table kms_oidc_key_version (
|
|
private_id wt_private_id primary key,
|
|
oidc_key_id wt_private_id not null
|
|
references kms_oidc_key(private_id)
|
|
on delete cascade
|
|
on update cascade,
|
|
root_key_version_id wt_private_id not null
|
|
references kms_root_key_version(private_id)
|
|
on delete cascade
|
|
on update cascade,
|
|
version wt_version,
|
|
key bytea not null,
|
|
create_time wt_timestamp,
|
|
unique(oidc_key_id, version)
|
|
);
|
|
|
|
-- define the immutable fields for kms_oidc_key_version (all of them)
|
|
create trigger immutable_columns before update on kms_oidc_key_version
|
|
for each row execute procedure immutable_columns('private_id', 'oidc_key_id', 'root_key_version_id', 'version', 'key', 'create_time');
|
|
|
|
-- define the value of kms_oidc_key_version's create_time
|
|
create trigger default_create_time_column before insert on kms_oidc_key_version
|
|
for each row execute procedure default_create_time();
|
|
|
|
-- define the value of kms_oidc_key_version's version column
|
|
create trigger kms_version_column before insert on kms_oidc_key_version
|
|
for each row execute procedure kms_version_column('oidc_key_id');
|
|
|
|
commit;
|