Complete preliminary docs for pki subscribers

backend/src/db/migrations/20250504145538_pki-v2.ts

@@ -18,13 +18,29 @@ export async function up(knex: Knex): Promise<void> {
       t.string("ttl").notNullable();
       t.specificType("keyUsages", "text[]").notNullable();
       t.specificType("extendedKeyUsages", "text[]").notNullable();
+      t.string("status").notNullable(); // active / disabled
       t.unique(["projectId", "name"]);
     });
     await createOnUpdateTrigger(knex, TableName.PkiSubscriber);
   }
+
+  const hasSubscriberCol = await knex.schema.hasColumn(TableName.Certificate, "pkiSubscriberId");
+  if (!hasSubscriberCol) {
+    await knex.schema.alterTable(TableName.Certificate, (t) => {
+      t.uuid("pkiSubscriberId").nullable();
+      t.foreign("pkiSubscriberId").references("id").inTable(TableName.PkiSubscriber).onDelete("SET NULL");
+    });
+  }
 }
 
 export async function down(knex: Knex): Promise<void> {
+  const hasSubscriberCol = await knex.schema.hasColumn(TableName.Certificate, "pkiSubscriberId");
+  if (hasSubscriberCol) {
+    await knex.schema.alterTable(TableName.Certificate, (t) => {
+      t.dropColumn("pkiSubscriberId");
+    });
+  }
+
   await knex.schema.dropTableIfExists(TableName.PkiSubscriber);
   await dropOnUpdateTrigger(knex, TableName.PkiSubscriber);
 }

backend/src/db/schemas/certificates.ts

@@ -24,7 +24,8 @@ export const CertificatesSchema = z.object({
   caCertId: z.string().uuid(),
   certificateTemplateId: z.string().uuid().nullable().optional(),
   keyUsages: z.string().array().nullable().optional(),
-  extendedKeyUsages: z.string().array().nullable().optional()
+  extendedKeyUsages: z.string().array().nullable().optional(),
+  pkiSubscriberId: z.string().uuid().nullable().optional()
 });
 
 export type TCertificates = z.infer<typeof CertificatesSchema>;

backend/src/db/schemas/pki-subscribers.ts

@@ -18,7 +18,8 @@ export const PkiSubscribersSchema = z.object({
   subjectAlternativeNames: z.string().array(),
   ttl: z.string(),
   keyUsages: z.string().array(),
-  extendedKeyUsages: z.string().array()
+  extendedKeyUsages: z.string().array(),
+  status: z.string()
 });
 
 export type TPkiSubscribers = z.infer<typeof PkiSubscribersSchema>;