Skip to content

Adding KMIP IAM rights #7837

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
May 12, 2025
Merged

Adding KMIP IAM rights #7837

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
c4d8091
Adding KMIP IAM rights
gbarideau May 9, 2025
6810e7c
Proofreading & date update
Y0Coss May 12, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
31 changes: 30 additions & 1 deletion pages/manage_and_operate/kms/kms-kmip/guide.de-de.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "How to connect a compatible product using KMIP protocol"
excerpt: "How to communicate with the OVHcloud KMS using KMIP protocol"
updated: 2025-03-03
updated: 2025-05-12
---

## Objective
Expand Down Expand Up @@ -49,6 +49,35 @@ Then it's possible to exchange KMIP messages such as defined in the standard. De

You can use as well our SDK for Go: <https://github.com/ovh/kmip-go>

### IAM Rights

KMIP operations with IAM users need specific authorisations as described below:

| KMIP Operation | Description | Action |
| -------------- | ----------- | ------ |
| Create | Create managed object | okms:kmip:create |
| Get | Get managed object | okms:kmip:get |
| Register | Register managed object| okms:kmip:register |
| Activate | Activate managed object | okms:kmip:activate |
| Revoke | Revoke managed object | okms:kmip:revoke |
| Destroy | Destroy managed object | okms:kmip:destroy |
| CreateKeyPair | Create key pair | okms:kmip:createKeyPair |
| AddAttribute | Add managed object attribute | okms:kmip:addAttribute |
| GetAttributes | Get one or more of managed object attributes | okms:kmip:getAttributes |
| GetAttributeList | Get list of the attribute names | okms:kmip:getAttributeList |
| ModifyAttribute | Modify managed object attribute | okms:kmip:modifyAttribute |
| DeleteAttribute | Delete managed object attribute | okms:kmip:deleteAttribute |
| Locate | Locate managed object | okms:kmip:locate |
| Archive | Archive managed object | okms:kmip:archive |
| Recover | Recover managed object | okms:kmip:recover |
| ReKey | Rekey managed object | okms:kmip:rekey |
| ObtainLease | Obtain lease on managed object | okms:kmip:obtainLease |
| GetUsageAllocation | Get Usage Allocation of managed object | okms:kmip:getUsageAllocation |
| Encrypt | Encrypt with managed object | okms:kmip:encrypt |
| Decrypt | Decrypt with managed object | okms:kmip:decrypt |
| Sign | Sign with managed object | okms:kmip:sign |
| Signature Verify | Verify with managed object | okms:kmip:signatureVerify |

### KMIP coverage

The OVHcloud KMS covers a part of 1.0 to 1.4 versions of the KMIP standard.
Expand Down
31 changes: 30 additions & 1 deletion pages/manage_and_operate/kms/kms-kmip/guide.en-asia.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "How to connect a compatible product using KMIP protocol"
excerpt: "How to communicate with the OVHcloud KMS using KMIP protocol"
updated: 2025-03-03
updated: 2025-05-12
---

## Objective
Expand Down Expand Up @@ -49,6 +49,35 @@ Then it's possible to exchange KMIP messages such as defined in the standard. De

You can use as well our SDK for Go: <https://github.com/ovh/kmip-go>

### IAM Rights

KMIP operations with IAM users need specific authorisations as described below:

| KMIP Operation | Description | Action |
| -------------- | ----------- | ------ |
| Create | Create managed object | okms:kmip:create |
| Get | Get managed object | okms:kmip:get |
| Register | Register managed object| okms:kmip:register |
| Activate | Activate managed object | okms:kmip:activate |
| Revoke | Revoke managed object | okms:kmip:revoke |
| Destroy | Destroy managed object | okms:kmip:destroy |
| CreateKeyPair | Create key pair | okms:kmip:createKeyPair |
| AddAttribute | Add managed object attribute | okms:kmip:addAttribute |
| GetAttributes | Get one or more of managed object attributes | okms:kmip:getAttributes |
| GetAttributeList | Get list of the attribute names | okms:kmip:getAttributeList |
| ModifyAttribute | Modify managed object attribute | okms:kmip:modifyAttribute |
| DeleteAttribute | Delete managed object attribute | okms:kmip:deleteAttribute |
| Locate | Locate managed object | okms:kmip:locate |
| Archive | Archive managed object | okms:kmip:archive |
| Recover | Recover managed object | okms:kmip:recover |
| ReKey | Rekey managed object | okms:kmip:rekey |
| ObtainLease | Obtain lease on managed object | okms:kmip:obtainLease |
| GetUsageAllocation | Get Usage Allocation of managed object | okms:kmip:getUsageAllocation |
| Encrypt | Encrypt with managed object | okms:kmip:encrypt |
| Decrypt | Decrypt with managed object | okms:kmip:decrypt |
| Sign | Sign with managed object | okms:kmip:sign |
| Signature Verify | Verify with managed object | okms:kmip:signatureVerify |

### KMIP coverage

The OVHcloud KMS covers a part of 1.0 to 1.4 versions of the KMIP standard.
Expand Down
31 changes: 30 additions & 1 deletion pages/manage_and_operate/kms/kms-kmip/guide.en-au.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "How to connect a compatible product using KMIP protocol"
excerpt: "How to communicate with the OVHcloud KMS using KMIP protocol"
updated: 2025-03-03
updated: 2025-05-12
---

## Objective
Expand Down Expand Up @@ -49,6 +49,35 @@ Then it's possible to exchange KMIP messages such as defined in the standard. De

You can use as well our SDK for Go: <https://github.com/ovh/kmip-go>

### IAM Rights

KMIP operations with IAM users need specific authorisations as described below:

| KMIP Operation | Description | Action |
| -------------- | ----------- | ------ |
| Create | Create managed object | okms:kmip:create |
| Get | Get managed object | okms:kmip:get |
| Register | Register managed object| okms:kmip:register |
| Activate | Activate managed object | okms:kmip:activate |
| Revoke | Revoke managed object | okms:kmip:revoke |
| Destroy | Destroy managed object | okms:kmip:destroy |
| CreateKeyPair | Create key pair | okms:kmip:createKeyPair |
| AddAttribute | Add managed object attribute | okms:kmip:addAttribute |
| GetAttributes | Get one or more of managed object attributes | okms:kmip:getAttributes |
| GetAttributeList | Get list of the attribute names | okms:kmip:getAttributeList |
| ModifyAttribute | Modify managed object attribute | okms:kmip:modifyAttribute |
| DeleteAttribute | Delete managed object attribute | okms:kmip:deleteAttribute |
| Locate | Locate managed object | okms:kmip:locate |
| Archive | Archive managed object | okms:kmip:archive |
| Recover | Recover managed object | okms:kmip:recover |
| ReKey | Rekey managed object | okms:kmip:rekey |
| ObtainLease | Obtain lease on managed object | okms:kmip:obtainLease |
| GetUsageAllocation | Get Usage Allocation of managed object | okms:kmip:getUsageAllocation |
| Encrypt | Encrypt with managed object | okms:kmip:encrypt |
| Decrypt | Decrypt with managed object | okms:kmip:decrypt |
| Sign | Sign with managed object | okms:kmip:sign |
| Signature Verify | Verify with managed object | okms:kmip:signatureVerify |

### KMIP coverage

The OVHcloud KMS covers a part of 1.0 to 1.4 versions of the KMIP standard.
Expand Down
31 changes: 30 additions & 1 deletion pages/manage_and_operate/kms/kms-kmip/guide.en-ca.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "How to connect a compatible product using KMIP protocol"
excerpt: "How to communicate with the OVHcloud KMS using KMIP protocol"
updated: 2025-03-03
updated: 2025-05-12
---

## Objective
Expand Down Expand Up @@ -49,6 +49,35 @@ Then it's possible to exchange KMIP messages such as defined in the standard. De

You can use as well our SDK for Go: <https://github.com/ovh/kmip-go>

### IAM Rights

KMIP operations with IAM users need specific authorisations as described below:

| KMIP Operation | Description | Action |
| -------------- | ----------- | ------ |
| Create | Create managed object | okms:kmip:create |
| Get | Get managed object | okms:kmip:get |
| Register | Register managed object| okms:kmip:register |
| Activate | Activate managed object | okms:kmip:activate |
| Revoke | Revoke managed object | okms:kmip:revoke |
| Destroy | Destroy managed object | okms:kmip:destroy |
| CreateKeyPair | Create key pair | okms:kmip:createKeyPair |
| AddAttribute | Add managed object attribute | okms:kmip:addAttribute |
| GetAttributes | Get one or more of managed object attributes | okms:kmip:getAttributes |
| GetAttributeList | Get list of the attribute names | okms:kmip:getAttributeList |
| ModifyAttribute | Modify managed object attribute | okms:kmip:modifyAttribute |
| DeleteAttribute | Delete managed object attribute | okms:kmip:deleteAttribute |
| Locate | Locate managed object | okms:kmip:locate |
| Archive | Archive managed object | okms:kmip:archive |
| Recover | Recover managed object | okms:kmip:recover |
| ReKey | Rekey managed object | okms:kmip:rekey |
| ObtainLease | Obtain lease on managed object | okms:kmip:obtainLease |
| GetUsageAllocation | Get Usage Allocation of managed object | okms:kmip:getUsageAllocation |
| Encrypt | Encrypt with managed object | okms:kmip:encrypt |
| Decrypt | Decrypt with managed object | okms:kmip:decrypt |
| Sign | Sign with managed object | okms:kmip:sign |
| Signature Verify | Verify with managed object | okms:kmip:signatureVerify |

### KMIP coverage

The OVHcloud KMS covers a part of 1.0 to 1.4 versions of the KMIP standard.
Expand Down
31 changes: 30 additions & 1 deletion pages/manage_and_operate/kms/kms-kmip/guide.en-gb.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "How to connect a compatible product using KMIP protocol"
excerpt: "How to communicate with the OVHcloud KMS using KMIP protocol"
updated: 2025-03-03
updated: 2025-05-12
---

## Objective
Expand Down Expand Up @@ -49,6 +49,35 @@ Then it's possible to exchange KMIP messages such as defined in the standard. De

You can use as well our SDK for Go: <https://github.com/ovh/kmip-go>

### IAM Rights

KMIP operations with IAM users need specific authorisations as described below:

| KMIP Operation | Description | Action |
| -------------- | ----------- | ------ |
| Create | Create managed object | okms:kmip:create |
| Get | Get managed object | okms:kmip:get |
| Register | Register managed object| okms:kmip:register |
| Activate | Activate managed object | okms:kmip:activate |
| Revoke | Revoke managed object | okms:kmip:revoke |
| Destroy | Destroy managed object | okms:kmip:destroy |
| CreateKeyPair | Create key pair | okms:kmip:createKeyPair |
| AddAttribute | Add managed object attribute | okms:kmip:addAttribute |
| GetAttributes | Get one or more of managed object attributes | okms:kmip:getAttributes |
| GetAttributeList | Get list of the attribute names | okms:kmip:getAttributeList |
| ModifyAttribute | Modify managed object attribute | okms:kmip:modifyAttribute |
| DeleteAttribute | Delete managed object attribute | okms:kmip:deleteAttribute |
| Locate | Locate managed object | okms:kmip:locate |
| Archive | Archive managed object | okms:kmip:archive |
| Recover | Recover managed object | okms:kmip:recover |
| ReKey | Rekey managed object | okms:kmip:rekey |
| ObtainLease | Obtain lease on managed object | okms:kmip:obtainLease |
| GetUsageAllocation | Get Usage Allocation of managed object | okms:kmip:getUsageAllocation |
| Encrypt | Encrypt with managed object | okms:kmip:encrypt |
| Decrypt | Decrypt with managed object | okms:kmip:decrypt |
| Sign | Sign with managed object | okms:kmip:sign |
| Signature Verify | Verify with managed object | okms:kmip:signatureVerify |

### KMIP coverage

The OVHcloud KMS covers a part of 1.0 to 1.4 versions of the KMIP standard.
Expand Down
31 changes: 30 additions & 1 deletion pages/manage_and_operate/kms/kms-kmip/guide.en-ie.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "How to connect a compatible product using KMIP protocol"
excerpt: "How to communicate with the OVHcloud KMS using KMIP protocol"
updated: 2025-03-03
updated: 2025-05-12
---

## Objective
Expand Down Expand Up @@ -49,6 +49,35 @@ Then it's possible to exchange KMIP messages such as defined in the standard. De

You can use as well our SDK for Go: <https://github.com/ovh/kmip-go>

### IAM Rights

KMIP operations with IAM users need specific authorisations as described below:

| KMIP Operation | Description | Action |
| -------------- | ----------- | ------ |
| Create | Create managed object | okms:kmip:create |
| Get | Get managed object | okms:kmip:get |
| Register | Register managed object| okms:kmip:register |
| Activate | Activate managed object | okms:kmip:activate |
| Revoke | Revoke managed object | okms:kmip:revoke |
| Destroy | Destroy managed object | okms:kmip:destroy |
| CreateKeyPair | Create key pair | okms:kmip:createKeyPair |
| AddAttribute | Add managed object attribute | okms:kmip:addAttribute |
| GetAttributes | Get one or more of managed object attributes | okms:kmip:getAttributes |
| GetAttributeList | Get list of the attribute names | okms:kmip:getAttributeList |
| ModifyAttribute | Modify managed object attribute | okms:kmip:modifyAttribute |
| DeleteAttribute | Delete managed object attribute | okms:kmip:deleteAttribute |
| Locate | Locate managed object | okms:kmip:locate |
| Archive | Archive managed object | okms:kmip:archive |
| Recover | Recover managed object | okms:kmip:recover |
| ReKey | Rekey managed object | okms:kmip:rekey |
| ObtainLease | Obtain lease on managed object | okms:kmip:obtainLease |
| GetUsageAllocation | Get Usage Allocation of managed object | okms:kmip:getUsageAllocation |
| Encrypt | Encrypt with managed object | okms:kmip:encrypt |
| Decrypt | Decrypt with managed object | okms:kmip:decrypt |
| Sign | Sign with managed object | okms:kmip:sign |
| Signature Verify | Verify with managed object | okms:kmip:signatureVerify |

### KMIP coverage

The OVHcloud KMS covers a part of 1.0 to 1.4 versions of the KMIP standard.
Expand Down
31 changes: 30 additions & 1 deletion pages/manage_and_operate/kms/kms-kmip/guide.en-sg.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "How to connect a compatible product using KMIP protocol"
excerpt: "How to communicate with the OVHcloud KMS using KMIP protocol"
updated: 2025-03-03
updated: 2025-05-12
---

## Objective
Expand Down Expand Up @@ -49,6 +49,35 @@ Then it's possible to exchange KMIP messages such as defined in the standard. De

You can use as well our SDK for Go: <https://github.com/ovh/kmip-go>

### IAM Rights

KMIP operations with IAM users need specific authorisations as described below:

| KMIP Operation | Description | Action |
| -------------- | ----------- | ------ |
| Create | Create managed object | okms:kmip:create |
| Get | Get managed object | okms:kmip:get |
| Register | Register managed object| okms:kmip:register |
| Activate | Activate managed object | okms:kmip:activate |
| Revoke | Revoke managed object | okms:kmip:revoke |
| Destroy | Destroy managed object | okms:kmip:destroy |
| CreateKeyPair | Create key pair | okms:kmip:createKeyPair |
| AddAttribute | Add managed object attribute | okms:kmip:addAttribute |
| GetAttributes | Get one or more of managed object attributes | okms:kmip:getAttributes |
| GetAttributeList | Get list of the attribute names | okms:kmip:getAttributeList |
| ModifyAttribute | Modify managed object attribute | okms:kmip:modifyAttribute |
| DeleteAttribute | Delete managed object attribute | okms:kmip:deleteAttribute |
| Locate | Locate managed object | okms:kmip:locate |
| Archive | Archive managed object | okms:kmip:archive |
| Recover | Recover managed object | okms:kmip:recover |
| ReKey | Rekey managed object | okms:kmip:rekey |
| ObtainLease | Obtain lease on managed object | okms:kmip:obtainLease |
| GetUsageAllocation | Get Usage Allocation of managed object | okms:kmip:getUsageAllocation |
| Encrypt | Encrypt with managed object | okms:kmip:encrypt |
| Decrypt | Decrypt with managed object | okms:kmip:decrypt |
| Sign | Sign with managed object | okms:kmip:sign |
| Signature Verify | Verify with managed object | okms:kmip:signatureVerify |

### KMIP coverage

The OVHcloud KMS covers a part of 1.0 to 1.4 versions of the KMIP standard.
Expand Down
31 changes: 30 additions & 1 deletion pages/manage_and_operate/kms/kms-kmip/guide.en-us.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: "How to connect a compatible product using KMIP protocol"
excerpt: "How to communicate with the OVHcloud KMS using KMIP protocol"
updated: 2025-03-03
updated: 2025-05-12
---

## Objective
Expand Down Expand Up @@ -49,6 +49,35 @@ Then it's possible to exchange KMIP messages such as defined in the standard. De

You can use as well our SDK for Go: <https://github.com/ovh/kmip-go>

### IAM Rights

KMIP operations with IAM users need specific authorisations as described below:

| KMIP Operation | Description | Action |
| -------------- | ----------- | ------ |
| Create | Create managed object | okms:kmip:create |
| Get | Get managed object | okms:kmip:get |
| Register | Register managed object| okms:kmip:register |
| Activate | Activate managed object | okms:kmip:activate |
| Revoke | Revoke managed object | okms:kmip:revoke |
| Destroy | Destroy managed object | okms:kmip:destroy |
| CreateKeyPair | Create key pair | okms:kmip:createKeyPair |
| AddAttribute | Add managed object attribute | okms:kmip:addAttribute |
| GetAttributes | Get one or more of managed object attributes | okms:kmip:getAttributes |
| GetAttributeList | Get list of the attribute names | okms:kmip:getAttributeList |
| ModifyAttribute | Modify managed object attribute | okms:kmip:modifyAttribute |
| DeleteAttribute | Delete managed object attribute | okms:kmip:deleteAttribute |
| Locate | Locate managed object | okms:kmip:locate |
| Archive | Archive managed object | okms:kmip:archive |
| Recover | Recover managed object | okms:kmip:recover |
| ReKey | Rekey managed object | okms:kmip:rekey |
| ObtainLease | Obtain lease on managed object | okms:kmip:obtainLease |
| GetUsageAllocation | Get Usage Allocation of managed object | okms:kmip:getUsageAllocation |
| Encrypt | Encrypt with managed object | okms:kmip:encrypt |
| Decrypt | Decrypt with managed object | okms:kmip:decrypt |
| Sign | Sign with managed object | okms:kmip:sign |
| Signature Verify | Verify with managed object | okms:kmip:signatureVerify |

### KMIP coverage

The OVHcloud KMS covers a part of 1.0 to 1.4 versions of the KMIP standard.
Expand Down
Loading