Migrating from an Old KACLS to a New KACLS
Use the POST /v1/cckm/GoogleWorkspaceCSE/endpoints/{id}/rewrap API to migrate from an old KACLS (KACLS1) to a new KACLS (KACLS2). It takes a DEK wrapped with KACLS1’s wrap API and returns a DEK wrapped with KACLS2’s wrap API.
Request Parameters
| Parameter | Type | Description |
|---|---|---|
| original_kacls_url | string | URL of the current wrapped_key's KACLS. |
| authorization | string | A JWT issued by the Google service account for this rewrap request. |
| reason | string | Additional information about the operation. |
| wrapped_key | string | The base64 binary object returned by the wrap call. |
Example Request
{
original_kacls_url: <Old Endpoint URL>,
authorization: <Authz-JWT>,
reason: "",
wrapped_key: "eyJ3cmFwcGVkX2tleSI6IkozSnZCTEdVOFlWeWlocGpsWXpyd..."
}
Example Response
{
wrapped_key: "eyJ3cmFwcGVkX2tleSI6IkozSnZCTEdVOFlWeWlocGpsWXpyd...",
resource_key_hash: "SXOyPekBAUI95zuZSuJzsBlK4nO5SuJK4nNCPem5SuI="
}
Response Codes
| Response Code | Description |
|---|---|
| 2xx | Success |
| 4xx | Client errors |
Refer to HTTP status codes for details.
