misc: updated est configuration to be binded to certificate template

backend/src/db/migrations/20240819092916_certificate-template-est-configuration.ts

@@ -4,23 +4,23 @@ import { TableName } from "../schemas";
 import { createOnUpdateTrigger, dropOnUpdateTrigger } from "../utils";
 
 export async function up(knex: Knex): Promise<void> {
-  const hasEstConfigTable = await knex.schema.hasTable(TableName.CertificateAuthorityEstConfig);
+  const hasEstConfigTable = await knex.schema.hasTable(TableName.CertificateTemplateEstConfig);
   if (!hasEstConfigTable) {
-    await knex.schema.createTable(TableName.CertificateAuthorityEstConfig, (tb) => {
+    await knex.schema.createTable(TableName.CertificateTemplateEstConfig, (tb) => {
       tb.uuid("id", { primaryKey: true }).defaultTo(knex.fn.uuid());
-      tb.uuid("caId").notNullable().unique();
-      tb.foreign("caId").references("id").inTable(TableName.CertificateAuthority).onDelete("CASCADE");
+      tb.uuid("certificateTemplateId").notNullable().unique();
+      tb.foreign("certificateTemplateId").references("id").inTable(TableName.CertificateTemplate).onDelete("CASCADE");
       tb.binary("encryptedCaChain").notNullable();
       tb.string("hashedPassphrase").notNullable();
       tb.boolean("isEnabled");
       tb.timestamps(true, true, true);
     });
 
-    await createOnUpdateTrigger(knex, TableName.CertificateAuthorityEstConfig);
+    await createOnUpdateTrigger(knex, TableName.CertificateTemplateEstConfig);
   }
 }
 
 export async function down(knex: Knex): Promise<void> {
-  await knex.schema.dropTableIfExists(TableName.CertificateAuthorityEstConfig);
-  await dropOnUpdateTrigger(knex, TableName.CertificateAuthorityEstConfig);
+  await knex.schema.dropTableIfExists(TableName.CertificateTemplateEstConfig);
+  await dropOnUpdateTrigger(knex, TableName.CertificateTemplateEstConfig);
 }

backend/src/db/schemas/certificate-template-est-configs.ts

@@ -9,9 +9,9 @@ import { zodBuffer } from "@app/lib/zod";
 
 import { TImmutableDBKeys } from "./models";
 
-export const CertificateAuthorityEstConfigsSchema = z.object({
+export const CertificateTemplateEstConfigsSchema = z.object({
   id: z.string().uuid(),
-  caId: z.string().uuid(),
+  certificateTemplateId: z.string().uuid(),
   encryptedCaChain: zodBuffer,
   hashedPassphrase: z.string(),
   isEnabled: z.boolean().nullable().optional(),
@@ -19,11 +19,11 @@ export const CertificateAuthorityEstConfigsSchema = z.object({
   updatedAt: z.date()
 });
 
-export type TCertificateAuthorityEstConfigs = z.infer<typeof CertificateAuthorityEstConfigsSchema>;
-export type TCertificateAuthorityEstConfigsInsert = Omit<
-  z.input<typeof CertificateAuthorityEstConfigsSchema>,
+export type TCertificateTemplateEstConfigs = z.infer<typeof CertificateTemplateEstConfigsSchema>;
+export type TCertificateTemplateEstConfigsInsert = Omit<
+  z.input<typeof CertificateTemplateEstConfigsSchema>,
   TImmutableDBKeys
 >;
-export type TCertificateAuthorityEstConfigsUpdate = Partial<
-  Omit<z.input<typeof CertificateAuthorityEstConfigsSchema>, TImmutableDBKeys>
+export type TCertificateTemplateEstConfigsUpdate = Partial<
+  Omit<z.input<typeof CertificateTemplateEstConfigsSchema>, TImmutableDBKeys>
 >;

backend/src/db/schemas/index.ts

@@ -14,6 +14,7 @@ export * from "./certificate-authority-crl";
 export * from "./certificate-authority-secret";
 export * from "./certificate-bodies";
 export * from "./certificate-secrets";
+export * from "./certificate-template-est-configs";
 export * from "./certificate-templates";
 export * from "./certificates";
 export * from "./dynamic-secret-leases";

backend/src/db/schemas/models.ts

@@ -3,7 +3,7 @@ import { z } from "zod";
 export enum TableName {
   Users = "users",
   CertificateAuthority = "certificate_authorities",
-  CertificateAuthorityEstConfig = "certificate_authority_est_configs",
+  CertificateTemplateEstConfig = "certificate_template_est_configs",
   CertificateAuthorityCert = "certificate_authority_certs",
   CertificateAuthoritySecret = "certificate_authority_secret",
   CertificateAuthorityCrl = "certificate_authority_crl",