From 07a4082aa11a1b8ff72a2efe7801d10d5ca16446 Mon Sep 17 00:00:00 2001 From: Danielle <29378233+DanielleMiu@users.noreply.github.com> Date: Thu, 25 Aug 2022 12:06:43 -0400 Subject: [PATCH] Add SQL Migration 05 From go-kms-wrapping (#2371) * adding sql migration 05 from go-kms-wrapping * rename file from 05 to 01 to match boundary standards * move key rewrap to folder 47 --- .../oss/postgres/47/01_key_rewrap.up.sql | 23 +++++++++++++++++++ 1 file changed, 23 insertions(+) create mode 100644 internal/db/schema/migrations/oss/postgres/47/01_key_rewrap.up.sql diff --git a/internal/db/schema/migrations/oss/postgres/47/01_key_rewrap.up.sql b/internal/db/schema/migrations/oss/postgres/47/01_key_rewrap.up.sql new file mode 100644 index 0000000000..ea30a7e19a --- /dev/null +++ b/internal/db/schema/migrations/oss/postgres/47/01_key_rewrap.up.sql @@ -0,0 +1,23 @@ +-- make the required schema changes to upgrade the dependency: +-- github.com/hashicorp/go-kms-wrapping/extras/kms/v2 +-- this migration is from: +-- https://github.com/hashicorp/go-kms-wrapping/blob/main/extras/kms/migrations/postgres/05_key_rewrap.up.sql + +begin; + +-- we need to make the key and version columns mutable in order to support +-- rewrapping the root key versions. +drop trigger kms_immutable_columns on kms_root_key_version; + +create trigger kms_immutable_columns before update on kms_root_key_version + for each row execute procedure kms_immutable_columns('private_id', 'root_key_id', 'create_time'); + + +-- we need to make the key and version columns mutable in order to support +-- rewrapping the data key version. +drop trigger kms_immutable_columns on kms_data_key_version; + +create trigger kms_immutable_columns before update on kms_data_key_version + for each row execute procedure kms_immutable_columns('private_id', 'data_key_id', 'root_key_version_id', 'create_time'); + +commit;