Export a domain key
POST/v1/repositories/:id/domain-keys/export
Wraps one dedup domain's key under a passphrase, so another cloud can import it and read the backups. Every export is audited. The passphrase is never stored or returned. Send it separately from the envelope.
Operator only: needs a system-scoped token.
Request
Responses
- 200
- 400
- 401
- 403
- 404
- 409
- 413
- 415
- 422
- 503
- default
OK
Bad Request.
invalid_request: The body is not a single JSON object, names a field this operation does not take, or gives a value of the wrong type.
Unauthorized.
unauthenticated: The token is missing, expired or not valid.
Forbidden.
forbidden: The token's roles do not grant repository:register.
Not Found.
not_found: No repository has this id or name.
Conflict.
domain_key_missing: This cloud holds no key for the dedup domain in this repository. detail names the cloud that wrote it, when the repository records that.
Request Entity Too Large.
body_too_large: The body is larger than the service accepts.
Unsupported Media Type.
unsupported_media_type: The body is not sent as application/json.
Unprocessable Entity.
validation_failed: domain or passphrase is missing.
domain_not_encrypted: domain is plain, which holds unencrypted backups and has no key.
Service Unavailable.
kms_unavailable: No key manager is configured, so the domain key cannot be unwrapped.
An error, as an RFC 7807 problem document.