0

Enable or update the CMEK spec for a cluster

by
Published Oct 17, 2025

Can be used by the following roles assigned at the organization, folder or cluster scope: - CLUSTER_ADMIN - CLUSTER_OPERATOR_WRITER

Script cockroachdb Verified

The script

Submitted by hugo697 Bun
Verified 235 days ago
1
//native
2
type Cockroachdb = {
3
  token: string;
4
};
5
/**
6
 * Enable or update the CMEK spec for a cluster
7
 * Can be used by the following roles assigned at the organization, folder or cluster scope:
8
- CLUSTER_ADMIN
9
- CLUSTER_OPERATOR_WRITER
10

11
 */
12
export async function main(
13
  auth: Cockroachdb,
14
  cluster_id: string,
15
  body: {
16
    region_specs: {
17
      key_spec?: {
18
        auth_principal?: string;
19
        type?: "AWS_KMS" | "GCP_CLOUD_KMS" | "NULL_KMS";
20
        uri?: string;
21
      };
22
      region?: string;
23
    }[];
24
  },
25
) {
26
  const url = new URL(
27
    `https://cockroachlabs.cloud/api/v1/clusters/${cluster_id}/cmek`,
28
  );
29

30
  const response = await fetch(url, {
31
    method: "PUT",
32
    headers: {
33
      "Content-Type": "application/json",
34
      Authorization: "Bearer " + auth.token,
35
    },
36
    body: JSON.stringify(body),
37
  });
38
  if (!response.ok) {
39
    const text = await response.text();
40
    throw new Error(`${response.status} ${text}`);
41
  }
42
  return await response.json();
43
}
44