Get Proposal

cloud_kms.get_proposal
ActionGoogle Cloudconnection required

Calls cloudkms v1 GET /v1/projects/{projectsId}/locations/{locationsId}/singleTenantHsmInstances/{singleTenantHsmInstancesId}/proposals/{proposalsId}.

Returns metadata for a given SingleTenantHsmInstanceProposal.

Connection

Required
Yes — the node will not save without one
Auth type
OAuth 2.0
Providers
Google Cloud KMS
Secret shape
{"client_id", "client_secret", "refresh_token"}
Config it needs
project_id, location, key_ring
Resolved by
config.connection_id, else node.connection_id

Configuration

3 fields, 2 required. A dotted path is a nested object and name[] an array of objects — the editor renders the same tree.

FieldTypeRequiredDefaultConstraintsExample
location
Location or region; taken from the connection when unset.
stringNo———
single_tenant_hsm_instance
Single tenant hsm instance name or id.
stringYes———
proposal
Proposal name or id.
stringYes———

Output

One shape.

result

Extra keys beyond the ones listed can appear.

FieldTypeExample
addQuorumMember
object—
createTime
string—
deleteSingleTenantHsmInstance
object—
deleteTime
string—
disableSingleTenantHsmInstance
object—
enableSingleTenantHsmInstance
object—
expireTime
string—
failureReason
string—
name
string—
purgeTime
string—
quorumParameters
object—
refreshSingleTenantHsmInstance
object—
registerTwoFactorAuthKeys
object—
removeQuorumMember
object—
requiredActionQuorumParameters
object—
state
string—
ttl
string—
upgradeKeyTrust
object—
{
  "addQuorumMember": {},
  "createTime": "",
  "deleteSingleTenantHsmInstance": {},
  "deleteTime": "",
  "disableSingleTenantHsmInstance": {},
  "enableSingleTenantHsmInstance": {},
  "expireTime": "",
  "failureReason": "",
  "name": "",
  "purgeTime": "",
  "quorumParameters": {},
  "refreshSingleTenantHsmInstance": {},
  "registerTwoFactorAuthKeys": {},
  "removeQuorumMember": {},
  "requiredActionQuorumParameters": {},
  "state": "",
  "ttl": "",
  "upgradeKeyTrust": {}
}

See Get Proposal run in a workflow.

In a technical demo we add the Google Cloud KMS connection, drop the node on the canvas and let Workflow Health pre-flight it before the first real run.