@distilled.cloud/stackit 0.0.0-stage → 1.0.0-rc.13

package/src/services/kms.ts

@@ -0,0 +1,1638 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-stackit). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as API from "@distilled.cloud/core/api";
+import * as C from "@distilled.cloud/core/category";
+import * as T from "../traits.ts";
+import {
+  StackitProtocol,
+  type StackitOpError,
+  type StackitOpContext,
+} from "../protocol.ts";
+import { UnknownStackitError } from "../errors.ts";
+import * as Retry from "../retry.ts";
+
+export type { StackitOpError, StackitOpContext };
+
+export class BadRequest
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<BadRequest>()("BadRequest", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withBadRequestError),
+    [{ status: 400 }],
+  ) {}
+
+export class Conflict
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<Conflict>()("Conflict", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withConflictError),
+    [{ status: 409 }],
+  ) {}
+
+export class Forbidden
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<Forbidden>()("Forbidden", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withAuthError),
+    [{ status: 403 }],
+  ) {}
+
+export class NotFound
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<NotFound>()("NotFound", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withBadRequestError),
+    [{ status: 404 }],
+  ) {}
+
+export type CreateKeyRequestRegionId = "eu01";
+export const CreateKeyRequestRegionId = /*@__PURE__*/ S.String;
+
+/** The access scope of the key. */
+export type AccessScope = "PUBLIC" | "SNA";
+export const AccessScope = /*@__PURE__*/ S.String;
+
+/** The algorithm the key material uses. */
+export type Algorithm =
+  | "aes_256_gcm"
+  | "rsa_2048_oaep_sha256"
+  | "rsa_3072_oaep_sha256"
+  | "rsa_4096_oaep_sha256"
+  | "rsa_4096_oaep_sha512"
+  | "hmac_sha256"
+  | "hmac_sha384"
+  | "hmac_sha512"
+  | "ecdsa_p256_sha256"
+  | "ecdsa_p384_sha384"
+  | "ecdsa_p521_sha512";
+export const Algorithm = /*@__PURE__*/ S.String;
+
+/** The purpose of the key. */
+export type Purpose =
+  | "symmetric_encrypt_decrypt"
+  | "asymmetric_encrypt_decrypt"
+  | "message_authentication_code"
+  | "asymmetric_sign_verify";
+export const Purpose = /*@__PURE__*/ S.String;
+
+export interface CreateKeyRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: CreateKeyRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  access_scope?: AccessScope | (string & {});
+  algorithm: Algorithm | (string & {});
+  /** A user chosen description to distinguish multiple keys. */
+  description?: string;
+  /** The display name to distinguish multiple keys. Valid characters: letters, digits, underscores and hyphens. */
+  displayName: string;
+  /** States whether versions can be created or only imported. */
+  importOnly?: boolean;
+  protection: string;
+  purpose: Purpose | (string & {});
+}
+export const CreateKeyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: CreateKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    access_scope: S.optional(AccessScope),
+    algorithm: Algorithm,
+    description: S.optional(S.String),
+    displayName: S.String,
+    importOnly: S.optional(S.Boolean),
+    protection: S.String,
+    purpose: Purpose,
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "CreateKeyRequest",
+}) as any as S.Schema<CreateKeyRequest>;
+
+/** The current state of the key. */
+export type KeyState =
+  | "active"
+  | "deleted"
+  | "not_available"
+  | "errors_exist"
+  | "creating"
+  | "no_version";
+export const KeyState = /*@__PURE__*/ S.String;
+
+export interface Key {
+  access_scope: AccessScope;
+  algorithm: Algorithm;
+  /** The date and time the creation of the key was triggered. */
+  createdAt: string;
+  /** This date is set when a key is pending deletion and refers to the scheduled date of deletion */
+  deletionDate?: string;
+  /** A user chosen description to distinguish multiple keys. */
+  description?: string;
+  /** The display name to distinguish multiple keys. */
+  displayName: string;
+  /** A auto generated unique id which identifies the keys. */
+  id: string;
+  /** States whether versions can be created or only imported. */
+  importOnly: boolean;
+  /** The unique id of the key ring this key is assigned to. */
+  keyRingId: string;
+  protection: string;
+  purpose: Purpose;
+  /** The current state of the key. */
+  state: KeyState;
+}
+export const Key = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    access_scope: AccessScope,
+    algorithm: Algorithm,
+    createdAt: S.String,
+    deletionDate: S.optional(S.String),
+    description: S.optional(S.String),
+    displayName: S.String,
+    id: S.String,
+    importOnly: S.Boolean,
+    keyRingId: S.String,
+    protection: S.String,
+    purpose: Purpose,
+    state: KeyState,
+  }),
+).annotate({ identifier: "Key" }) as any as S.Schema<Key>;
+
+export type CreateKeyRingRequestRegionId = "eu01";
+export const CreateKeyRingRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface CreateKeyRingRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: CreateKeyRingRequestRegionId | (string & {});
+  /** A user chosen description to distinguish multiple key rings. */
+  description?: string;
+  /** The display name to distinguish multiple key rings. Valid characters: letters, digits, underscores and hyphens. */
+  displayName: string;
+}
+export const CreateKeyRingRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: CreateKeyRingRequestRegionId.pipe(T.Label()),
+    description: S.optional(S.String),
+    displayName: S.String,
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "CreateKeyRingRequest",
+}) as any as S.Schema<CreateKeyRingRequest>;
+
+/** The current state of the key ring. */
+export type KeyRingState = "creating" | "active" | "deleted";
+export const KeyRingState = /*@__PURE__*/ S.String;
+
+export interface KeyRing {
+  /** The date and time the creation of the key ring was triggered. */
+  createdAt: string;
+  /** A user chosen description to distinguish multiple key rings. */
+  description?: string;
+  /** The display name to distinguish multiple key rings. */
+  displayName: string;
+  /** A auto generated unique id which identifies the key ring. */
+  id: string;
+  /** The current state of the key ring. */
+  state: KeyRingState;
+}
+export const KeyRing = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    createdAt: S.String,
+    description: S.optional(S.String),
+    displayName: S.String,
+    id: S.String,
+    state: KeyRingState,
+  }),
+).annotate({ identifier: "KeyRing" }) as any as S.Schema<KeyRing>;
+
+export type CreateWrappingKeyRequestRegionId = "eu01";
+export const CreateWrappingKeyRequestRegionId = /*@__PURE__*/ S.String;
+
+/** The wrapping algorithm used to wrap the key to import. */
+export type WrappingAlgorithm =
+  | "rsa_2048_oaep_sha256"
+  | "rsa_3072_oaep_sha256"
+  | "rsa_4096_oaep_sha256"
+  | "rsa_4096_oaep_sha512"
+  | "rsa_2048_oaep_sha256_aes_256_key_wrap"
+  | "rsa_3072_oaep_sha256_aes_256_key_wrap"
+  | "rsa_4096_oaep_sha256_aes_256_key_wrap"
+  | "rsa_4096_oaep_sha512_aes_256_key_wrap";
+export const WrappingAlgorithm = /*@__PURE__*/ S.String;
+
+/** The wrapping purpose for the wrapping key. */
+export type WrappingPurpose = "wrap_symmetric_key" | "wrap_asymmetric_key";
+export const WrappingPurpose = /*@__PURE__*/ S.String;
+
+export interface CreateWrappingKeyRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: CreateWrappingKeyRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  access_scope?: AccessScope | (string & {});
+  algorithm: WrappingAlgorithm | (string & {});
+  /** A user chosen description to distinguish multiple wrapping keys. */
+  description?: string;
+  /** The display name to distinguish multiple wrapping keys. Valid characters: letters, digits, underscores and hyphens. */
+  displayName: string;
+  protection: string;
+  purpose: WrappingPurpose | (string & {});
+}
+export const CreateWrappingKeyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: CreateWrappingKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    access_scope: S.optional(AccessScope),
+    algorithm: WrappingAlgorithm,
+    description: S.optional(S.String),
+    displayName: S.String,
+    protection: S.String,
+    purpose: WrappingPurpose,
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/wrappingkeys",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "CreateWrappingKeyRequest",
+}) as any as S.Schema<CreateWrappingKeyRequest>;
+
+/** The current state of the wrapping key. */
+export type WrappingKeyState =
+  | "active"
+  | "creating"
+  | "expired"
+  | "deleted"
+  | "key_material_unavailable";
+export const WrappingKeyState = /*@__PURE__*/ S.String;
+
+export interface WrappingKey {
+  access_scope: AccessScope;
+  algorithm: WrappingAlgorithm;
+  /** The date and time the creation of the wrapping key was triggered. */
+  createdAt: string;
+  /** A user chosen description to distinguish multiple wrapping keys. */
+  description?: string;
+  /** The display name to distinguish multiple wrapping keys. */
+  displayName: string;
+  /** The date and time the wrapping key will expire. */
+  expiresAt: string;
+  /** A auto generated unique id which identifies the wrapping keys. */
+  id: string;
+  /** The unique id of the key ring this wrapping key is assigned to. */
+  keyRingId: string;
+  protection: string;
+  /** The public key of the wrapping key. */
+  publicKey?: string;
+  purpose: WrappingPurpose;
+  /** The current state of the wrapping key. */
+  state: WrappingKeyState;
+}
+export const WrappingKey = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    access_scope: AccessScope,
+    algorithm: WrappingAlgorithm,
+    createdAt: S.String,
+    description: S.optional(S.String),
+    displayName: S.String,
+    expiresAt: S.String,
+    id: S.String,
+    keyRingId: S.String,
+    protection: S.String,
+    publicKey: S.optional(S.String),
+    purpose: WrappingPurpose,
+    state: WrappingKeyState,
+  }),
+).annotate({ identifier: "WrappingKey" }) as any as S.Schema<WrappingKey>;
+
+export type DecryptRequestRegionId = "eu01";
+export const DecryptRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface DecryptRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: DecryptRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The key UUID. */
+  keyId: string;
+  /** The version number. */
+  versionNumber: number;
+  /** The data that has to be decrypted. Encoded in base64. */
+  data: string;
+}
+export const DecryptRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: DecryptRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+    data: S.String,
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}/decrypt",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({ identifier: "DecryptRequest" }) as any as S.Schema<DecryptRequest>;
+
+export interface DecryptedData {
+  /** The decrypted data. Encoded in base64. */
+  data: string;
+}
+export const DecryptedData = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    data: S.String,
+  }),
+).annotate({ identifier: "DecryptedData" }) as any as S.Schema<DecryptedData>;
+
+export type DeleteKeyRequestRegionId = "eu01";
+export const DeleteKeyRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface DeleteKeyRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: DeleteKeyRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The key UUID. */
+  keyId: string;
+}
+export const DeleteKeyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: DeleteKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DeleteKeyRequest",
+}) as any as S.Schema<DeleteKeyRequest>;
+
+export interface DeleteKeyResponse {}
+export const DeleteKeyResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DeleteKeyResponse",
+}) as any as S.Schema<DeleteKeyResponse>;
+
+export type DeleteKeyRingRequestRegionId = "eu01";
+export const DeleteKeyRingRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface DeleteKeyRingRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: DeleteKeyRingRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+}
+export const DeleteKeyRingRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: DeleteKeyRingRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DeleteKeyRingRequest",
+}) as any as S.Schema<DeleteKeyRingRequest>;
+
+export interface DeleteKeyRingResponse {}
+export const DeleteKeyRingResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DeleteKeyRingResponse",
+}) as any as S.Schema<DeleteKeyRingResponse>;
+
+export type DeleteWrappingKeyRequestRegionId = "eu01";
+export const DeleteWrappingKeyRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface DeleteWrappingKeyRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: DeleteWrappingKeyRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The wrapping key UUID. */
+  wrappingKeyId: string;
+}
+export const DeleteWrappingKeyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: DeleteWrappingKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    wrappingKeyId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/wrappingkeys/{wrappingKeyId}",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DeleteWrappingKeyRequest",
+}) as any as S.Schema<DeleteWrappingKeyRequest>;
+
+export interface DeleteWrappingKeyResponse {}
+export const DeleteWrappingKeyResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DeleteWrappingKeyResponse",
+}) as any as S.Schema<DeleteWrappingKeyResponse>;
+
+export type DestroyVersionRequestRegionId = "eu01";
+export const DestroyVersionRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface DestroyVersionRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: DestroyVersionRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The key UUID. */
+  keyId: string;
+  /** The version number. */
+  versionNumber: number;
+}
+export const DestroyVersionRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: DestroyVersionRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}/destroy",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DestroyVersionRequest",
+}) as any as S.Schema<DestroyVersionRequest>;
+
+export interface DestroyVersionResponse {}
+export const DestroyVersionResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DestroyVersionResponse",
+}) as any as S.Schema<DestroyVersionResponse>;
+
+export type DisableVersionRequestRegionId = "eu01";
+export const DisableVersionRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface DisableVersionRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: DisableVersionRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The key UUID. */
+  keyId: string;
+  /** The version number. */
+  versionNumber: number;
+}
+export const DisableVersionRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: DisableVersionRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}/disable",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DisableVersionRequest",
+}) as any as S.Schema<DisableVersionRequest>;
+
+export interface DisableVersionResponse {}
+export const DisableVersionResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "DisableVersionResponse",
+}) as any as S.Schema<DisableVersionResponse>;
+
+export type EnableVersionRequestRegionId = "eu01";
+export const EnableVersionRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface EnableVersionRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: EnableVersionRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The key UUID. */
+  keyId: string;
+  /** The version number. */
+  versionNumber: number;
+}
+export const EnableVersionRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: EnableVersionRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}/enable",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "EnableVersionRequest",
+}) as any as S.Schema<EnableVersionRequest>;
+
+export interface EnableVersionResponse {}
+export const EnableVersionResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "EnableVersionResponse",
+}) as any as S.Schema<EnableVersionResponse>;
+
+export type EncryptRequestRegionId = "eu01";
+export const EncryptRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface EncryptRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: EncryptRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The key UUID. */
+  keyId: string;
+  /** The version number. */
+  versionNumber: number;
+  /** The data that has to be encrypted. Encoded in base64. */
+  data: string;
+}
+export const EncryptRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: EncryptRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+    data: S.String,
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}/encrypt",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({ identifier: "EncryptRequest" }) as any as S.Schema<EncryptRequest>;
+
+export interface EncryptedData {
+  /** The encrypted data. Encoded in base64. */
+  data: string;
+}
+export const EncryptedData = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    data: S.String,
+  }),
+).annotate({ identifier: "EncryptedData" }) as any as S.Schema<EncryptedData>;
+
+export type GetKeyRequestRegionId = "eu01";
+export const GetKeyRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface GetKeyRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: GetKeyRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The key UUID. */
+  keyId: string;
+}
+export const GetKeyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: GetKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({ identifier: "GetKeyRequest" }) as any as S.Schema<GetKeyRequest>;
+
+export type GetKeyRingRequestRegionId = "eu01";
+export const GetKeyRingRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface GetKeyRingRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: GetKeyRingRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+}
+export const GetKeyRingRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: GetKeyRingRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "GetKeyRingRequest",
+}) as any as S.Schema<GetKeyRingRequest>;
+
+export type GetVersionRequestRegionId = "eu01";
+export const GetVersionRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface GetVersionRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: GetVersionRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The key UUID. */
+  keyId: string;
+  /** The version number. */
+  versionNumber: number;
+}
+export const GetVersionRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: GetVersionRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "GetVersionRequest",
+}) as any as S.Schema<GetVersionRequest>;
+
+/** The current state of the key. */
+export type VersionState =
+  | "active"
+  | "creating"
+  | "key_material_invalid"
+  | "key_material_unavailable"
+  | "disabled"
+  | "destroyed";
+export const VersionState = /*@__PURE__*/ S.String;
+
+export interface Version {
+  /** The date and time the creation of the key was triggered. */
+  createdAt: string;
+  /** The scheduled date when a version's key material will be erased completely from the backend */
+  destroyDate?: string;
+  /** States whether versions is enabled or disabled. */
+  disabled: boolean;
+  /** The unique id of the key this version is assigned to. */
+  keyId: string;
+  /** The unique id of the key ring the key of this version is assigned to. */
+  keyRingId: string;
+  /** A sequential number which identifies the key versions. */
+  number: number;
+  /** The public key of the key version. Only present in asymmetric keys. */
+  publicKey?: string;
+  /** The current state of the key. */
+  state: VersionState;
+}
+export const Version = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    createdAt: S.String,
+    destroyDate: S.optional(S.String),
+    disabled: S.Boolean,
+    keyId: S.String,
+    keyRingId: S.String,
+    number: S.Number,
+    publicKey: S.optional(S.String),
+    state: VersionState,
+  }),
+).annotate({ identifier: "Version" }) as any as S.Schema<Version>;
+
+export type GetWrappingKeyRequestRegionId = "eu01";
+export const GetWrappingKeyRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface GetWrappingKeyRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: GetWrappingKeyRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The wrapping key UUID. */
+  wrappingKeyId: string;
+}
+export const GetWrappingKeyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: GetWrappingKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    wrappingKeyId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/wrappingkeys/{wrappingKeyId}",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "GetWrappingKeyRequest",
+}) as any as S.Schema<GetWrappingKeyRequest>;
+
+export type ImportKeyRequestRegionId = "eu01";
+export const ImportKeyRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface ImportKeyRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: ImportKeyRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The key UUID. */
+  keyId: string;
+  /** The wrapped key material that has to be imported. Encoded in base64. */
+  wrappedKey: string;
+  /** The unique id of the wrapping key the key material has been wrapped with. */
+  wrappingKeyId: string;
+}
+export const ImportKeyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: ImportKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    wrappedKey: S.String,
+    wrappingKeyId: S.String,
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/import",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ImportKeyRequest",
+}) as any as S.Schema<ImportKeyRequest>;
+
+export type ListKeyRingsRequestRegionId = "eu01";
+export const ListKeyRingsRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface ListKeyRingsRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: ListKeyRingsRequestRegionId | (string & {});
+}
+export const ListKeyRingsRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: ListKeyRingsRequestRegionId.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListKeyRingsRequest",
+}) as any as S.Schema<ListKeyRingsRequest>;
+
+export type KeyRingListKeyRingsList = Array<KeyRing>;
+export const KeyRingListKeyRingsList = /*@__PURE__*/ S.Array(
+  KeyRing,
+) as any as S.Schema<KeyRingListKeyRingsList>;
+
+export interface KeyRingList {
+  keyRings: KeyRingListKeyRingsList;
+}
+export const KeyRingList = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    keyRings: KeyRingListKeyRingsList,
+  }),
+).annotate({ identifier: "KeyRingList" }) as any as S.Schema<KeyRingList>;
+
+export type ListKeysRequestRegionId = "eu01";
+export const ListKeysRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface ListKeysRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: ListKeysRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+}
+export const ListKeysRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: ListKeysRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListKeysRequest",
+}) as any as S.Schema<ListKeysRequest>;
+
+export type KeyListKeysList = Array<Key>;
+export const KeyListKeysList = /*@__PURE__*/ S.Array(
+  Key,
+) as any as S.Schema<KeyListKeysList>;
+
+export interface KeyList {
+  keys: KeyListKeysList;
+}
+export const KeyList = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    keys: KeyListKeysList,
+  }),
+).annotate({ identifier: "KeyList" }) as any as S.Schema<KeyList>;
+
+export type ListVersionsRequestRegionId = "eu01";
+export const ListVersionsRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface ListVersionsRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: ListVersionsRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The key UUID. */
+  keyId: string;
+}
+export const ListVersionsRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: ListVersionsRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListVersionsRequest",
+}) as any as S.Schema<ListVersionsRequest>;
+
+export type VersionListVersionsList = Array<Version>;
+export const VersionListVersionsList = /*@__PURE__*/ S.Array(
+  Version,
+) as any as S.Schema<VersionListVersionsList>;
+
+export interface VersionList {
+  versions: VersionListVersionsList;
+}
+export const VersionList = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    versions: VersionListVersionsList,
+  }),
+).annotate({ identifier: "VersionList" }) as any as S.Schema<VersionList>;
+
+export type ListWrappingKeysRequestRegionId = "eu01";
+export const ListWrappingKeysRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface ListWrappingKeysRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: ListWrappingKeysRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+}
+export const ListWrappingKeysRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: ListWrappingKeysRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/wrappingkeys",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListWrappingKeysRequest",
+}) as any as S.Schema<ListWrappingKeysRequest>;
+
+export type WrappingKeyListWrappingKeysList = Array<WrappingKey>;
+export const WrappingKeyListWrappingKeysList = /*@__PURE__*/ S.Array(
+  WrappingKey,
+) as any as S.Schema<WrappingKeyListWrappingKeysList>;
+
+export interface WrappingKeyList {
+  wrappingKeys: WrappingKeyListWrappingKeysList;
+}
+export const WrappingKeyList = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    wrappingKeys: WrappingKeyListWrappingKeysList,
+  }),
+).annotate({
+  identifier: "WrappingKeyList",
+}) as any as S.Schema<WrappingKeyList>;
+
+export type RestoreKeyRequestRegionId = "eu01";
+export const RestoreKeyRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface RestoreKeyRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: RestoreKeyRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The key UUID. */
+  keyId: string;
+}
+export const RestoreKeyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: RestoreKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/restore",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "RestoreKeyRequest",
+}) as any as S.Schema<RestoreKeyRequest>;
+
+export interface RestoreKeyResponse {}
+export const RestoreKeyResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "RestoreKeyResponse",
+}) as any as S.Schema<RestoreKeyResponse>;
+
+export type RestoreVersionRequestRegionId = "eu01";
+export const RestoreVersionRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface RestoreVersionRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: RestoreVersionRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The key UUID. */
+  keyId: string;
+  /** The version number. */
+  versionNumber: number;
+}
+export const RestoreVersionRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: RestoreVersionRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}/restore",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "RestoreVersionRequest",
+}) as any as S.Schema<RestoreVersionRequest>;
+
+export interface RestoreVersionResponse {}
+export const RestoreVersionResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({}),
+).annotate({
+  identifier: "RestoreVersionResponse",
+}) as any as S.Schema<RestoreVersionResponse>;
+
+export type RotateKeyRequestRegionId = "eu01";
+export const RotateKeyRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface RotateKeyRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: RotateKeyRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The key UUID. */
+  keyId: string;
+}
+export const RotateKeyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: RotateKeyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/rotate",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "RotateKeyRequest",
+}) as any as S.Schema<RotateKeyRequest>;
+
+export type SignRequestRegionId = "eu01";
+export const SignRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface SignRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: SignRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The key UUID. */
+  keyId: string;
+  /** The version number. */
+  versionNumber: number;
+  /** The data that has to be signed. Encoded in base64. */
+  data: string;
+}
+export const SignRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: SignRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+    data: S.String,
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}/sign",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({ identifier: "SignRequest" }) as any as S.Schema<SignRequest>;
+
+export interface SignedData {
+  /** The data that was signed. Encoded in base64. */
+  data: string;
+  /** The signature of the data. Encoded in base64. */
+  signature: string;
+}
+export const SignedData = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    data: S.String,
+    signature: S.String,
+  }),
+).annotate({ identifier: "SignedData" }) as any as S.Schema<SignedData>;
+
+export type VerifyRequestRegionId = "eu01";
+export const VerifyRequestRegionId = /*@__PURE__*/ S.String;
+
+export interface VerifyRequest {
+  /** The STACKIT portal project UUID the key ring is part of. */
+  projectId: string;
+  /** The STACKIT region name the key ring is located in. */
+  regionId: VerifyRequestRegionId | (string & {});
+  /** The key ring UUID. */
+  keyRingId: string;
+  /** The key UUID. */
+  keyId: string;
+  /** The version number. */
+  versionNumber: number;
+  /** The data to be verified. Encoded in base64. */
+  data: string;
+  /** The signature of the data. Encoded in base64. */
+  signature: string;
+}
+export const VerifyRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    regionId: VerifyRequestRegionId.pipe(T.Label()),
+    keyRingId: S.String.pipe(T.Label()),
+    keyId: S.String.pipe(T.Label()),
+    versionNumber: S.Number.pipe(T.Label()),
+    data: S.String,
+    signature: S.String,
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v1/projects/{projectId}/regions/{regionId}/keyrings/{keyRingId}/keys/{keyId}/versions/{versionNumber}/verify",
+      code: 200,
+      baseUrl: "https://kms.api.stackit.cloud",
+    }),
+  ),
+).annotate({ identifier: "VerifyRequest" }) as any as S.Schema<VerifyRequest>;
+
+export interface VerifiedData {
+  /** Whether or not the data has a valid signature. */
+  valid: boolean;
+}
+export const VerifiedData = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    valid: S.Boolean,
+  }),
+).annotate({ identifier: "VerifiedData" }) as any as S.Schema<VerifiedData>;
+
+export type CreateKeyError = BadRequest | NotFound | StackitOpError;
+/** Create key Creates a new key for the given key ring. */
+export const createKey: API.OperationMethod<
+  CreateKeyRequest,
+  Key,
+  CreateKeyError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: CreateKeyRequest,
+  output: Key,
+  errors: [BadRequest, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type CreateKeyRingError = BadRequest | StackitOpError;
+/** Create key ring Creates a new key ring within the project. */
+export const createKeyRing: API.OperationMethod<
+  CreateKeyRingRequest,
+  KeyRing,
+  CreateKeyRingError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: CreateKeyRingRequest,
+  output: KeyRing,
+  errors: [BadRequest, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type CreateWrappingKeyError = BadRequest | NotFound | StackitOpError;
+/** Create wrapping key Creates a new wrapping key for the given key ring. */
+export const createWrappingKey: API.OperationMethod<
+  CreateWrappingKeyRequest,
+  WrappingKey,
+  CreateWrappingKeyError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: CreateWrappingKeyRequest,
+  output: WrappingKey,
+  errors: [BadRequest, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DecryptError = BadRequest | NotFound | Conflict | StackitOpError;
+/** Decrypt Decrypts data using the given key version. */
+export const decrypt: API.OperationMethod<
+  DecryptRequest,
+  DecryptedData,
+  DecryptError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DecryptRequest,
+  output: DecryptedData,
+  errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DeleteKeyError = BadRequest | NotFound | Conflict | StackitOpError;
+/** Delete key Schedules the deletion of the given key */
+export const deleteKey: API.OperationMethod<
+  DeleteKeyRequest,
+  DeleteKeyResponse,
+  DeleteKeyError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DeleteKeyRequest,
+  output: DeleteKeyResponse,
+  errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DeleteKeyRingError =
+  | BadRequest
+  | NotFound
+  | Conflict
+  | StackitOpError;
+/** Delete keyring Deletes the given key ring if it is empty */
+export const deleteKeyRing: API.OperationMethod<
+  DeleteKeyRingRequest,
+  DeleteKeyRingResponse,
+  DeleteKeyRingError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DeleteKeyRingRequest,
+  output: DeleteKeyRingResponse,
+  errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DeleteWrappingKeyError =
+  | BadRequest
+  | NotFound
+  | Conflict
+  | StackitOpError;
+/** Delete wrapping key Deletes the given wrapping key */
+export const deleteWrappingKey: API.OperationMethod<
+  DeleteWrappingKeyRequest,
+  DeleteWrappingKeyResponse,
+  DeleteWrappingKeyError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DeleteWrappingKeyRequest,
+  output: DeleteWrappingKeyResponse,
+  errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DestroyVersionError =
+  | BadRequest
+  | NotFound
+  | Conflict
+  | StackitOpError;
+/** Destroy version Removes the key material of a version permanently. */
+export const destroyVersion: API.OperationMethod<
+  DestroyVersionRequest,
+  DestroyVersionResponse,
+  DestroyVersionError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DestroyVersionRequest,
+  output: DestroyVersionResponse,
+  errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DisableVersionError =
+  | BadRequest
+  | NotFound
+  | Conflict
+  | StackitOpError;
+/** Disable version Disables the given version. */
+export const disableVersion: API.OperationMethod<
+  DisableVersionRequest,
+  DisableVersionResponse,
+  DisableVersionError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DisableVersionRequest,
+  output: DisableVersionResponse,
+  errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type EnableVersionError =
+  | BadRequest
+  | NotFound
+  | Conflict
+  | StackitOpError;
+/** Enable version Enables the given version. */
+export const enableVersion: API.OperationMethod<
+  EnableVersionRequest,
+  EnableVersionResponse,
+  EnableVersionError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: EnableVersionRequest,
+  output: EnableVersionResponse,
+  errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type EncryptError = BadRequest | NotFound | Conflict | StackitOpError;
+/** Encrypt Encrypts data using the given key version. */
+export const encrypt: API.OperationMethod<
+  EncryptRequest,
+  EncryptedData,
+  EncryptError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: EncryptRequest,
+  output: EncryptedData,
+  errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetKeyError = BadRequest | NotFound | StackitOpError;
+/** Get key Returns the details for the given key. */
+export const getKey: API.OperationMethod<
+  GetKeyRequest,
+  Key,
+  GetKeyError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetKeyRequest,
+  output: Key,
+  errors: [BadRequest, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetKeyRingError = BadRequest | NotFound | StackitOpError;
+/** Get key ring Returns the details for the given key ring. */
+export const getKeyRing: API.OperationMethod<
+  GetKeyRingRequest,
+  KeyRing,
+  GetKeyRingError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetKeyRingRequest,
+  output: KeyRing,
+  errors: [BadRequest, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetVersionError = BadRequest | NotFound | StackitOpError;
+/** Get version Returns the details for the given version. */
+export const getVersion: API.OperationMethod<
+  GetVersionRequest,
+  Version,
+  GetVersionError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetVersionRequest,
+  output: Version,
+  errors: [BadRequest, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetWrappingKeyError = BadRequest | NotFound | StackitOpError;
+/** Get wrapping key Returns the details for the given wrapping key. */
+export const getWrappingKey: API.OperationMethod<
+  GetWrappingKeyRequest,
+  WrappingKey,
+  GetWrappingKeyError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetWrappingKeyRequest,
+  output: WrappingKey,
+  errors: [BadRequest, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ImportKeyError = BadRequest | NotFound | Conflict | StackitOpError;
+/** Import key Imports a new version to the given key. */
+export const importKey: API.OperationMethod<
+  ImportKeyRequest,
+  Version,
+  ImportKeyError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ImportKeyRequest,
+  output: Version,
+  errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListKeyRingsError = BadRequest | StackitOpError;
+/** List key rings Returns a list of all key rings within the project. */
+export const listKeyRings: API.OperationMethod<
+  ListKeyRingsRequest,
+  KeyRingList,
+  ListKeyRingsError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListKeyRingsRequest,
+  output: KeyRingList,
+  errors: [BadRequest, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListKeysError = BadRequest | NotFound | StackitOpError;
+/** List keys Returns the keys for the given key ring. */
+export const listKeys: API.OperationMethod<
+  ListKeysRequest,
+  KeyList,
+  ListKeysError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListKeysRequest,
+  output: KeyList,
+  errors: [BadRequest, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListVersionsError = BadRequest | NotFound | StackitOpError;
+/** List versions Returns a list of all versions of a given key. */
+export const listVersions: API.OperationMethod<
+  ListVersionsRequest,
+  VersionList,
+  ListVersionsError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListVersionsRequest,
+  output: VersionList,
+  errors: [BadRequest, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListWrappingKeysError = BadRequest | NotFound | StackitOpError;
+/** List wrapping keys Returns the wrapping keys for the given key ring. */
+export const listWrappingKeys: API.OperationMethod<
+  ListWrappingKeysRequest,
+  WrappingKeyList,
+  ListWrappingKeysError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListWrappingKeysRequest,
+  output: WrappingKeyList,
+  errors: [BadRequest, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type RestoreKeyError = BadRequest | NotFound | Conflict | StackitOpError;
+/** Restore deleted key Restores the given key from being deleted. */
+export const restoreKey: API.OperationMethod<
+  RestoreKeyRequest,
+  RestoreKeyResponse,
+  RestoreKeyError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: RestoreKeyRequest,
+  output: RestoreKeyResponse,
+  errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type RestoreVersionError =
+  | BadRequest
+  | NotFound
+  | Conflict
+  | StackitOpError;
+/** Restore version Restores the given version from being destroyed */
+export const restoreVersion: API.OperationMethod<
+  RestoreVersionRequest,
+  RestoreVersionResponse,
+  RestoreVersionError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: RestoreVersionRequest,
+  output: RestoreVersionResponse,
+  errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type RotateKeyError =
+  | BadRequest
+  | Forbidden
+  | NotFound
+  | Conflict
+  | StackitOpError;
+/** Rotate key Rotates the given key. */
+export const rotateKey: API.OperationMethod<
+  RotateKeyRequest,
+  Version,
+  RotateKeyError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: RotateKeyRequest,
+  output: Version,
+  errors: [BadRequest, Forbidden, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type SignError = BadRequest | NotFound | Conflict | StackitOpError;
+/** Sign Sign data using the given key version as secret. */
+export const sign: API.OperationMethod<
+  SignRequest,
+  SignedData,
+  SignError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: SignRequest,
+  output: SignedData,
+  errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type VerifyError = BadRequest | NotFound | Conflict | StackitOpError;
+/** Verify Verify data using the given key version as secret. */
+export const verify: API.OperationMethod<
+  VerifyRequest,
+  VerifiedData,
+  VerifyError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: VerifyRequest,
+  output: VerifiedData,
+  errors: [BadRequest, NotFound, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));