misc: migrated KMIP PKI to be scoped at the org level

frontend/src/hooks/api/kmip/mutation.ts

@@ -5,9 +5,12 @@ import { apiRequest } from "@app/config/request";
 import { kmipKeys } from "./queries";
 import {
   KmipClientCertificate,
+  OrgKmipServerCert,
   TCreateKmipClient,
   TDeleteKmipClient,
   TGenerateKmipClientCertificate,
+  TGenerateOrgKmipServerCertDTO,
+  TSetupOrgKmipDTO,
   TUpdateKmipClient
 } from "./types";
 
@@ -75,3 +78,23 @@ export const useGenerateKmipClientCertificate = () => {
     }
   });
 };
+
+export const useSetupOrgKmip = (orgId: string) => {
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: async (payload: TSetupOrgKmipDTO) => {
+      await apiRequest.post("/api/v1/kmip", payload);
+    },
+    onSuccess: () => {
+      queryClient.invalidateQueries({ queryKey: kmipKeys.getOrgKmip(orgId) });
+    }
+  });
+};
+
+export const useGenerateOrgKmipServerCert = () => {
+  return useMutation({
+    mutationFn: async (payload: TGenerateOrgKmipServerCertDTO) => {
+      return apiRequest.post<OrgKmipServerCert>("/api/v1/kmip/server-certificates", payload);
+    }
+  });
+};

frontend/src/hooks/api/kmip/queries.tsx

@@ -3,11 +3,17 @@ import { useQuery, UseQueryOptions } from "@tanstack/react-query";
 import { apiRequest } from "@app/config/request";
 
 import { OrderByDirection } from "../generic/types";
-import { KmipClientOrderBy, TListProjectKmipClientsDTO, TProjectKmipClientList } from "./types";
+import {
+  KmipClientOrderBy,
+  OrgKmipConfig,
+  TListProjectKmipClientsDTO,
+  TProjectKmipClientList
+} from "./types";
 
 export const kmipKeys = {
   getKmipClientsByProjectId: ({ projectId, ...filters }: TListProjectKmipClientsDTO) =>
-    [projectId, filters] as const
+    [projectId, filters] as const,
+  getOrgKmip: (orgId: string) => [{ orgId }, "org-kmip-config"] as const
 };
 
 export const useGetKmipClientsByProjectId = (
@@ -50,3 +56,14 @@ export const useGetKmipClientsByProjectId = (
     ...options
   });
 };
+
+export const useGetOrgKmipConfig = (orgId: string) => {
+  return useQuery({
+    queryKey: kmipKeys.getOrgKmip(orgId),
+    queryFn: async () => {
+      const { data } = await apiRequest.get<OrgKmipConfig>("/api/v1/kmip");
+
+      return data;
+    }
+  });
+};

frontend/src/hooks/api/kmip/types.ts

@@ -63,3 +63,26 @@ export type TListProjectKmipClientsDTO = {
 export enum KmipClientOrderBy {
   Name = "name"
 }
+
+export type OrgKmipConfig = {
+  serverCertificateChain: string;
+  clientCertificateChain: string;
+};
+
+export type TSetupOrgKmipDTO = {
+  caKeyAlgorithm: CertKeyAlgorithm;
+};
+
+export type TGenerateOrgKmipServerCertDTO = {
+  commonName: string;
+  keyAlgorithm: CertKeyAlgorithm;
+  altNames: string;
+  ttl: string;
+};
+
+export type OrgKmipServerCert = {
+  serialNumber: string;
+  certificate: string;
+  certificateChain: string;
+  privateKey: string;
+};