NerdGraph 튜토리얼: 비밀 관리 서비스

mutation {
  secretsManagementCreateSecret(
    description: "ZXY"
    key: "Test2"
    scope: { id: 1, type: ACCOUNT }
    value: "1990@123"
    namespace: "Namespace1"
  )
}

{
  "data": {
    "secretsManagementCreateSecret": {
      "description": "ZXY",
      "key": "Test2",
      "latestVersion": 0,
      "scope": {
        "id": "1",
        "type": "ACCOUNT"
      }
    }
  }

mutation {
  secretsManagementCreateShareableSecret(
    scope: { type: ACCOUNT, id: 1 }
    key: "prod-api-key"
    value: "sk_live_abc123xyz"
    namespace: "production"
    description: "Private API key for production"
    tags: [{ key: "environment", value: "production" }]
  ) {
    scope {
      type
      id
    }
    key
    namespace
    latestVersion
    description
    tags {
      key
      value
    }
    metadata {
      createdAt
      updatedAt
    }
  }
}

{
  "data": {
    "secretsManagementCreateShareableSecret": {
      "scope": {
        "type": "ACCOUNT",
        "id": "1"
      },
      "key": "prod-api-key",
      "namespace": "production",
      "latestVersion": 0,
      "description": "Private API key for production",
      "tags": [
        {
          "key": "environment",
          "value": "production"
        }
      ],
      "metadata": {
        "createdAt": "2025-10-30T12:34:56.789Z",
        "updatedAt": "2025-10-30T12:34:56.789Z"
      }
    }
  }
}

{
  customerAdministration {
    secret(key: "Test2", scope: { id: 1, type: ACCOUNT }, unlock: true)
  }
}

{
  "data": {
    "customerAdministration": {
      "secret": {
        "description": "ZXY",
        "isSharable": false,
        "key": "Test2",
        "namespace": null,
        "retrievedValue": {
          "value": "1995@123",
          "version": 1
        },
        "scope": {
          "id": "1",
          "type": "ACCOUNT"
        }
      }
    }
  }
}

mutation {
  secretsManagementUpdateSecret(
    key: "Test2"
    scope: { id: 1, type: ACCOUNT }
    value: "1995@123"
  )
}

{
  "data": {
    "secretsManagementUpdateSecret": {
      "description": "ZXY",
      "key": "Test2",
      "latestVersion": 1,
      "scope": {
        "id": "1",
        "type": "ACCOUNT"
      }
    }
  }
}

{
  customerAdministration {
    secretVersions(
      fetchDeleted: true
      key: "Test2"
      scope: { id: 1, type: ACCOUNT }
    )
  }
}

{
  "data": {
    "customerAdministration": {
      "secretVersions": {
        "key": "Test2",
        "latestVersion": 1,
        "namespace": null,
        "scope": {
          "id": "1",
          "type": "ACCOUNT"
        },
        "secretVersions": [
          {
            "createdAt": "2025-05-26T07:52:23.920250Z",
            "isDeleted": false,
            "version": 1
          },
          {
            "createdAt": "2025-05-26T07:45:19.395796Z",
            "isDeleted": false,
            "version": 0
          }
        ]
      }
    }
  }
}

mutation {
  secretsManagementDeleteSecret(
    key: "Test1"
    scope: { id: 1, type: ACCOUNT }
    purge: false
  )
}

{
  "data": {
    "secretsManagementDeleteSecret": {
      "key": "Test1",
      "namespace": null,
      "scope": {
        "id": "1",
        "type": "ACCOUNT"
      }
    }
  }
}

mutation {
  secretsManagementRecoverSecret(key: "Test1", scope: { id: 1, type: ACCOUNT })
}

{
  "data": {
    "secretsManagementRecoverSecret": {
      "key": "Test1",
      "latestVersion": 1,
      "namespace": null,
      "scope": {
        "id": "1",
        "type": "ACCOUNT"
      }
    }
  }
}

mutation {
  secretsManagementDeleteSecretVersion(
    key: "Test2"
    purge: false
    scope: { id: 1, type: ACCOUNT }
    version: 0
  )
}

{
  "data": {
    "secretsManagementDeleteSecretVersion": {
      "key": "Test2",
      "latestVersion": 1,
      "scope": {
        "id": "1"
      }
    }
  }
}

mutation {
  secretsManagementRecoverSecretVersion(
    key: "Test2"
    scope: { id: 1, type: ACCOUNT }
    version: 0
  )
}

{
  "data": {
    "secretsManagementRecoverSecretVersion": {
      "key": "Test2",
      "latestVersion": 1,
      "namespace": null,
      "scope": {
        "id": "1",
        "type": "ACCOUNT"
      }
    }
  }
}

{
  customerAdministration {
    secrets(
      filter: {
        deleted: { eq: false }
        scope: { eq: { id: 1, type: ACCOUNT } }
      }
      cursor: ""
      sort: { direction: DESC, key: CREATED_AT }
    )
  }
}

{
  "data": {
    "customerAdministration": {
      "secrets": {
        "nextCursor": "AAAADJ_Fqig86wFIH6c3ehxxpoFy0vdW2eA4pTkQFYDztd_UIeL91kCElQaCG0iORpmDdDT6KeZAVkByh4ogENST8yjxeZ5tI6vPYnyMW5rhtGwXlgt9zQRGYj1HcdpUHdfUcTC-CSsdQDLexy52XA==",
        "scope": {
          "id": "1",
          "type": "ACCOUNT"
        },
        "secrets": [
          {
            "description": "ZXY",
            "isDeleted": false,
            "isSharable": false,
            "key": "test2",
            "latestVersion": 1,
            "metadata": {
              "createdAt": "2025-05-26T07:45:19.395796Z",
              "updatedAt": "2025-05-26T08:08:49.130724Z"
            },
            "namespace": null,
            "tags": null
          },
          {
            "description": "XYZ",
            "isDeleted": false,
            "isSharable": false,
            "key": "test2",
            "latestVersion": 0,
            "metadata": {
              "createdAt": "2025-05-26T07:26:32.114987Z",
              "updatedAt": "2025-05-26T07:26:32.114987Z"
            },
            "namespace": null,
            "tags": null
          },
          {
            "description": "CBA",
            "isDeleted": false,
            "isSharable": false,
            "key": "test1",
            "latestVersion": 1,
            "metadata": {
              "createdAt": "2025-05-26T07:15:08.987252Z",
              "updatedAt": "2025-05-26T08:05:17.051658Z"
            },
            "namespace": null,
            "tags": null
          }
        ],
        "totalCount": 3
      }
    }
  }
}

mutation {
  authorizationManagementGrantAccess(
    grantAccessOptions: {
      entityAccessGrants: {
        entity: { id: "production::account-1::prod-api-key", type: "secret" }
        roleId: "role-id-for-secret-reader"
      }
      grantee: { id: "system-identity-id-abc123", type: SYSTEM_IDENTITY }
    }
  ) {
    roles {
      id
      roleId
    }
  }
}

{
  "data": {
    "authorizationManagementGrantAccess": {
      "roles": [
        {
          "id": "grant-id-xyz789",
          "roleId": "role-id-for-secret-reader"
        }
      ]
    }
  }
}

mutation {
  authorizationManagementRevokeAccess(
    grantAccessOptions: {
      entityAccessGrants: {
        entity: {
          id: "production::account-12345::prod-api-key"
          type: "secret"
        }
        roleId: "role-id-for-secret-reader"
      }
      grantee: { id: "system-identity-id-abc123", type: SYSTEM_IDENTITY }
    }
  ) {
    roles {
      id
      roleId
    }
  }
}

{
  "data": {
    "authorizationManagementRevokeAccess": {
      "roles": [
        {
          "id": "grant-id-xyz789",
          "roleId": "role-id-for-secret-reader"
        }
      ]
    }
  }
}

{
  customerAdministration {
    entityGrants(
      filter: {
        iamParent: { id: { eq: "12345" }, scope: { eq: ACCOUNT } }
        entity: {
          id: { eq: "production::account-12345::prod-api-key" }
          type: { eq: "secret" }
        }
      }
      cursor: ""
    ) {
      items {
        targetEntity {
          id
        }
        member {
          memberId
          memberType
        }
        id
        role {
          name
          id
        }
      }
      nextCursor
    }
  }
}

{
  "data": {
    "customerAdministration": {
      "entityGrants": {
        "items": [
          {
            "targetEntity": {
              "id": "production::account-12345::prod-api-key"
            },
            "member": {
              "memberId": "system-identity-id-abc123",
              "memberType": "SYSTEM_IDENTITY"
            },
            "id": "grant-id-xyz789",
            "role": {
              "name": "Secret Reader",
              "id": "role-id-for-secret-reader"
            }
          }
        ],
        "nextCursor": null
      }
    }
  }
}