Fix protection level for host keys in cloudkms script.

Fixes #460
This commit is contained in:
Mariano Cano 2021-01-29 16:11:25 -08:00
parent 7f9d7eadc9
commit 51ac28656e

View file

@ -234,7 +234,7 @@ func createSSH(c *cloudkms.CloudKMS, project, location, keyRing string, protecti
resp, err = c.CreateKey(&apiv1.CreateKeyRequest{
Name: parent + "/ssh-host-key",
SignatureAlgorithm: apiv1.ECDSAWithSHA256,
ProtectionLevel: apiv1.Software,
ProtectionLevel: protectionLevel,
})
if err != nil {
return err