计算管理/虚拟机相关接口/密钥提供程序相关接口
PUTKey Provider APIs起始版本 5.0.0同步需要认证
对指定密钥重新加密
对指定密钥重新加密
调试可用性
在线调试
使用当前认证信息和示例参数提交 Mock 请求。
路径参数
请求参数
路径参数
providerUuidString必填密钥提供程序UUID
请求体字段
rekeykeyproviderrefsObject必填rekeykeyproviderrefs 请求体结构
refIdsList需要重加密的密钥引用ID列表
resourceUuidsList关联资源UUID列表,与resourceType配对使用
resourceTypeString关联资源类型,与resourceUuids配对使用
rekeyAllboolean是否执行全量重加密;为true时不能再指定refIds或resourceType/resourceUuids
systemTagsList系统标签
userTagsList用户标签
响应状态
请求地址
PUT/zstack/v1/key-providers/{providerUuid}/rekey
/zstack/v1/key-providers/{providerUuid}/rekey
请求示例
curl -X PUT 'http://{host}/zstack/v1/key-providers/{providerUuid}/rekey' -H 'Authorization: OAuth {sessionUuid}' -H 'Content-Type: application/json;charset=UTF-8' -d '{"rekeykeyproviderrefs":{"refIds":["<refIds>"],"resourceUuids":["<resourceUuids>"],"resourceType":"<resourceType>","rekeyAll":true},"systemTags":["<systemTags>"],"userTags":["<userTags>"]}'
响应示例
200{ "totalCount": 3, "successCount": 1, "skippedCount": 1, "failedCount": 1, "providerResults": [ { "providerUuid": "provider-uuid-1", "providerName": "provider-1", "totalRefCount": 3, "successRefCount": 1, "skippedRefCount": 1, "failedRefCount": 1, "skippedResources": [ { "keyRefId": 11, "resourceType": "TpmVO", "resourceUuid": "ff00de2d3ab43127b1abdac68f1e7f00", "reason": "encrypted resource key ref[id:11, resourceType:TpmVO, resourceUuid:ff00de2d3ab43127b1abdac68f1e7f00] has empty secret ref" } ], "failedResources": [ { "keyRefId": 12, "resourceType": "TpmVO", "resourceUuid": "ff00de2d3ab43127b1abdac68f1e7f00", "reason": "key-tool rekey failed: failed to decrypt wrapper DEK with KEK" } ] } ] }变更历史
此 API 暂无变更历史记录。
