Allow kms purpose "downstream-worker-auth" (#3299)

3 years ago · 8980143278
parent 74e8491f85
commit 8980143278
2 changed files with 2 additions and 1 deletions
--- a/internal/cmd/base/server_test.go
+++ b/internal/cmd/base/server_test.go
@ -63,7 +63,7 @@ func TestServer_SetupKMSes_Purposes(t *testing.T) {
 		{
 			name: "multi purpose",
 			purposes: []string{
-				globals.KmsPurposeRoot, globals.KmsPurposeRecovery, globals.KmsPurposeWorkerAuth,
+				globals.KmsPurposeRoot, globals.KmsPurposeRecovery, globals.KmsPurposeWorkerAuth, globals.KmsPurposeDownstreamWorkerAuth,
 				globals.KmsPurposeWorkerAuthStorage, globals.KmsPurposeConfig, globals.KmsPurposeBsr,
 			},
 		},
--- a/internal/cmd/base/servers.go
+++ b/internal/cmd/base/servers.go
@ -569,6 +569,7 @@ func (b *Server) SetupKMSes(ctx context.Context, ui cli.Ui, config *config.Confi
 				globals.KmsPurposePreviousRoot,
 				globals.KmsPurposeConfig,
 				globals.KmsPurposeWorkerAuth,
+				globals.KmsPurposeDownstreamWorkerAuth,
 				globals.KmsPurposeWorkerAuthStorage,
 				globals.KmsPurposeBsr:
 			case globals.KmsPurposeRecovery: