feat(policy): adds new public keys table

[strantalis]

Proposed Changes

Implements the following ADR as discussed here #1485.

• Adds new public_keys table along with mappings pivot tables for attribute values, definitions and namespaces.
  • On create key if there is a previous key with the same alg it will make previous key inactive while mapping the the new key to the same namespaces, attribute definitions and values.
  • On first mapping public key field was_mapped gets set to true
• Adds new CRUD RPC's to manage public keys and their associations
  • Updates only allow metadata to be updated considering public keys immutable
• Returns public keys on GetAttributeValueByFQN rpc
• Adds new ENUM values
  • KAS_PUBLIC_KEY_ALG_ENUM_RSA_4096
  • KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP384R1
  • KAS_PUBLIC_KEY_ALG_ENUM_EC_SECP521R1

erDiagram

    key_access_server {
        uuid       id                PK
        varchar    uri               UK
        varchar    name              UK "new optional name column"
        jsonb      public_key
        jsonb      metadata
    }

    public_keys {
        uuid        id                      PK 
        boolean     is_active         
        boolean     was_used          
        uuid        key_access_server_id    FK
        varchar(36) key_id
        varchar(50) alg                     "algorithm"
        constraint  unique_key              UK  "enforces unique key_id and algorithm per KAS (key_access_server_id, key_id, alg)"
        constraint  unique_active_key       UK  "enforce only one active key per KAS per algorithm"
        text        public_key
        jsonb       metadata
    }

    attribute_namespace_public_key_map {
        uuid namespace_id  FK
        uuid public_key_id FK
    }

    attribute_definition_public_key_map {
        uuid attribute_definition_id FK
        uuid public_key_id           FK
    }

    attribute_value_public_key_map {
        uuid attribute_value_id FK
        uuid public_key_id      FK
    }

    key_access_server 1 -- 1+ public_keys : "has"
    public_keys 1 -- 1+ attribute_namespace_public_key_map : "maps"
    public_keys 1 -- 1+ attribute_definition_public_key_map : "maps"
    public_keys 1 -- 1+ attribute_value_public_key_map : "maps"

Loading

Checklist

• I have added or updated unit tests
• I have added or updated integration tests (if appropriate)
• I have added or updated documentation

Testing Instructions

[jakedoublev]

This is a lot of work. Thanks for tackling this @strantalis.

[jakedoublev]

I am comfortable approving this now but would like to give others a chance to review as well.