Get the version of the GCP KMS key required to decrypt secret file about sops HOT 4 CLOSED

Looking at the code, I'm not sure we are able to do this, since it's basically the package cloud.google.com/go/kms/apiv1 that handles all this (and potentially just hands it over to some API endpoint which takes care of it).

The error message you are quoting mentions .../cryptoKeyVersions/156, so maybe the version of the key you need is 156? I have no idea how GCP KMS identifies versions (I've never used it before), but maybe this helps :)

from sops.

Hi @felixfontein, thanks a lot for answering and for looking at the code.

Yeah the error message was just there to illustrate my question. The "156" was indeed the version used to encrypt the data, and we forced a re-encryption on the latest version.

So, it's a magic Google library, dully noted.

Best regards.

from sops.

/europe-west1/keyRings/sops/cryptoKeys/KEY_NAME but no information about the version.

If I disable all the old keys, sops give me the following error message:
How did you do this ?
Thank you

from sops.

@pierinho13 : sorry, how did I do what ?
Disable all the old keys ?

By hand, in the console, unfortunately.

from sops.