Cloud KMS: compatibility per operation

v0.1.0 (what you install)

16 of 35 RPCs Verified

main (next release)

19 of 38 RPCs Verified

Cloud KMS: what the emulator serves → What the statuses mean All services

v0.1.0 (what you install)

Tests link to cloudburrow/cloudburrow at 63e11c6.

Search Cloud KMS methods

Showing 35 of 35

Method	Status	Tests
`google.cloud.kms.v1.KeyManagementService/AsymmetricDecrypt`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/AsymmetricSign`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/CreateCryptoKey`	Verified	`TestKMSResources` Error cases not yet verified (5) `INVALID_ARGUMENT`a malformed parent · `TestMalformedNamesAreInvalidArgument` `INVALID_ARGUMENT`an unknown field in the JSON body · `TestKMSCreatesOverREST` `INVALID_ARGUMENT`destroy_scheduled_duration out of range, negative or fractional · `TestDestroyScheduledDurationRange` `INVALID_ARGUMENT`purpose CRYPTO_KEY_PURPOSE_UNSPECIFIED · `TestKMSCreateCryptoKeyFields` `NOT_FOUND`a well-formed parent that does not exist · `TestMalformedNamesAreInvalidArgument`
`google.cloud.kms.v1.KeyManagementService/CreateCryptoKeyVersion`	Verified	`TestKMSVersionCanStartDisabled` `TestKMSResources` Error cases not yet verified (3) `INVALID_ARGUMENT`a malformed parent · `TestMalformedNamesAreInvalidArgument` `INVALID_ARGUMENT`an initial state other than ENABLED or DISABLED · `TestCreateVersionRefusesOtherInitialStates` `NOT_FOUND`a well-formed parent that does not exist · `TestMalformedNamesAreInvalidArgument`
`google.cloud.kms.v1.KeyManagementService/CreateImportJob`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/CreateKeyRing`	Verified	`TestKMSResources` Error cases not yet verified (1) `INVALID_ARGUMENT`a malformed parent · `TestMalformedNamesAreInvalidArgument`
`google.cloud.kms.v1.KeyManagementService/Decapsulate`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/Decrypt`	Verified	`TestKMSDecrypt` `TestKMSDecryptFollowsTheVersionLifecycle` Error cases not yet verified (4) `FAILED_PRECONDITION`a DESTROYED version · `TestDecryptIsRefusedOnceDestroyed` `FAILED_PRECONDITION`a DISABLED or DESTROY_SCHEDULED version · `TestKMSDecryptFollowsTheVersionLifecycle` `INVALID_ARGUMENT`a CryptoKeyVersion name, or an empty ciphertext · `TestKMSDecrypt` `INVALID_ARGUMENT`a wrong AAD, a tampered ciphertext, or another key's ciphertext · `TestKMSDecrypt`
`google.cloud.kms.v1.KeyManagementService/DeleteCryptoKey`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/DeleteCryptoKeyVersion`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/DestroyCryptoKeyVersion`	Verified	`TestKMSDestroyCryptoKeyVersion` Error cases not yet verified (3) `FAILED_PRECONDITION`a DESTROYED version · `TestDestroyFromEachState` `FAILED_PRECONDITION`a version already DESTROY_SCHEDULED · `TestKMSDestroyCryptoKeyVersion` `FAILED_PRECONDITION`a version whose destroy_time has passed · `TestAScheduledVersionIsDestroyedAtItsDestroyTime`
`google.cloud.kms.v1.KeyManagementService/Encrypt`	Verified	`TestKMSEncrypt` Error cases not yet verified (5) `FAILED_PRECONDITION`a DESTROY_SCHEDULED named version · `TestKMSDecryptFollowsTheVersionLifecycle` `FAILED_PRECONDITION`a DISABLED primary, a DISABLED named version, or a key with no primary · `TestKMSEncrypt` `INVALID_ARGUMENT`a malformed name · `TestKMSEncrypt` `INVALID_ARGUMENT`empty plaintext, or plaintext or AAD over 64KiB · `TestKMSEncrypt` `NOT_FOUND`a key that does not exist · `TestKMSEncrypt`
`google.cloud.kms.v1.KeyManagementService/ExportTrustedKeyWrappedCryptoKeyVersion`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/GenerateRandomBytes`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/GetCryptoKey`	Verified	`TestKMSNamesAreValidatedBeforeLookup` `TestKMSVersionCanStartDisabled` `TestKMSResources` Error cases not yet verified (4) `INVALID_ARGUMENT`a malformed name (wrong collection) · `TestKMSNamesAreValidatedBeforeLookup` `INVALID_ARGUMENT`a malformed name · `TestMalformedNamesAreInvalidArgument` `NOT_FOUND`a well-formed name that does not exist · `TestMalformedNamesAreInvalidArgument` `NOT_FOUND`a well-formed name that does not exist · `TestKMSNamesAreValidatedBeforeLookup`
`google.cloud.kms.v1.KeyManagementService/GetCryptoKeyVersion`	Verified	`TestKMSGetCryptoKeyVersion` `TestKMSVersionCanStartDisabled` Error cases not yet verified (4) `INVALID_ARGUMENT`a malformed name, including version IDs 0, -1, 01 and abc · `TestMalformedNamesAreInvalidArgument` `INVALID_ARGUMENT`a malformed version ID (01) · `TestKMSReadsAgreeOverREST` `NOT_FOUND`a version number the key does not have · `TestKMSGetCryptoKeyVersion` `NOT_FOUND`a well-formed name that does not exist · `TestMalformedNamesAreInvalidArgument`
`google.cloud.kms.v1.KeyManagementService/GetImportJob`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/GetKeyRing`	Verified	`TestKMSResources` Error cases not yet verified (5) `INVALID_ARGUMENT`a malformed name · `TestMalformedNamesAreInvalidArgument` `NOT_FOUND`a key ring removed by /admin/reset · `TestKMSResources` `NOT_FOUND`a key ring removed by a project-scoped /admin/reset · `TestKMSProjectResetClearsOnlyThatProject` `NOT_FOUND`a well-formed name that does not exist · `TestMalformedNamesAreInvalidArgument` `NOT_FOUND`a well-formed name that does not exist · `TestKMSReadsAgreeOverREST`
`google.cloud.kms.v1.KeyManagementService/GetPublicKey`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/GetRetiredResource`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/ImportCryptoKeyVersion`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/ImportTrustedKeyWrappedCryptoKeyVersion`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/ListCryptoKeyVersions`	Verified	`TestKMSVersionCanStartDisabled` `TestKMSResources` `TestKMSFullViewAddsNothingForSoftwareKeys` Error cases not yet verified (4) `INVALID_ARGUMENT`a filter that does not parse · `TestVersionStateFilter` `INVALID_ARGUMENT`a malformed parent · `TestMalformedNamesAreInvalidArgument` `INVALID_ARGUMENT`a view that is not a CryptoKeyVersionView · `TestAnUndefinedViewIsRefused` `NOT_FOUND`a well-formed parent that does not exist · `TestMalformedNamesAreInvalidArgument`
`google.cloud.kms.v1.KeyManagementService/ListCryptoKeys`	Verified	`TestKMSResources` `TestKMSFullViewAddsNothingForSoftwareKeys` Error cases not yet verified (4) `INVALID_ARGUMENT`a filter that does not parse · `TestNameAndLabelFilters` `INVALID_ARGUMENT`a malformed parent · `TestMalformedNamesAreInvalidArgument` `INVALID_ARGUMENT`a version_view that is not a CryptoKeyVersionView · `TestAnUndefinedViewIsRefused` `NOT_FOUND`a well-formed parent that does not exist · `TestMalformedNamesAreInvalidArgument`
`google.cloud.kms.v1.KeyManagementService/ListImportJobs`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/ListKeyRings`	Verified	`TestKMSResources` Error cases not yet verified (3) `INVALID_ARGUMENT`a malformed parent · `TestMalformedNamesAreInvalidArgument` `INVALID_ARGUMENT`an order_by other than name or name desc, or a page token from another order · `TestOrderByAndItsPageTokens` `INVALID_ARGUMENT`an unknown query parameter over REST · `TestKMSReadsAgreeOverREST`
`google.cloud.kms.v1.KeyManagementService/ListRetiredResources`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/MacSign`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/MacVerify`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/RawDecrypt`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/RawEncrypt`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/RestoreCryptoKeyVersion`	Verified	`TestKMSRestoreCryptoKeyVersion` Error cases not yet verified (2) `FAILED_PRECONDITION`a version whose destroy_time has passed · `TestRestoreBeforeAndAfterDestroyTime` `FAILED_PRECONDITION`an ENABLED version · `TestKMSRestoreCryptoKeyVersion`
`google.cloud.kms.v1.KeyManagementService/UpdateCryptoKey`	Verified	`TestKMSUpdateCryptoKey` Error cases not yet verified (4) `INVALID_ARGUMENT`an empty mask, an immutable, output-only or unknown path, or an invalid label · `TestUpdateCryptoKeyMask` `INVALID_ARGUMENT`an unknown field in the JSON body · `TestKMSLifecycleOverRESTWire` `INVALID_ARGUMENT`the immutable destroy_scheduled_duration in the mask · `TestKMSUpdateCryptoKey` `NOT_FOUND`a well-formed key that does not exist · `TestUpdateCryptoKeyMask`
`google.cloud.kms.v1.KeyManagementService/UpdateCryptoKeyPrimaryVersion`	Verified	`TestKMSPrimaryMustBeEnabled` `TestKMSResources` Error cases not yet verified (4) `FAILED_PRECONDITION`a DESTROY_SCHEDULED target version · `TestPrimaryRefusesADestroyScheduledVersion` `FAILED_PRECONDITION`a DISABLED target version · `TestKMSPrimaryMustBeEnabled` `INVALID_ARGUMENT`a malformed name or crypto_key_version_id · `TestMalformedNamesAreInvalidArgument` `NOT_FOUND`a well-formed name that does not exist · `TestMalformedNamesAreInvalidArgument`
`google.cloud.kms.v1.KeyManagementService/UpdateCryptoKeyVersion`	Verified	`TestKMSUpdateCryptoKeyVersion` Error cases not yet verified (6) `FAILED_PRECONDITION`a DESTROY_SCHEDULED or DESTROYED version · `TestUpdateVersionRefusesADestroyScheduledVersion` `FAILED_PRECONDITION`a version whose destroy_time has passed · `TestAScheduledVersionIsDestroyedAtItsDestroyTime` `INVALID_ARGUMENT`a malformed version name · `TestUpdateVersionNames` `INVALID_ARGUMENT`a target state of DESTROYED · `TestKMSUpdateCryptoKeyVersion` `INVALID_ARGUMENT`an update_mask without state · `TestKMSUpdateCryptoKeyVersion` `NOT_FOUND`a well-formed version that does not exist · `TestUpdateVersionNames`

main (next release)

Tests link to cloudburrow/cloudburrow at 82a2eb9.

Search Cloud KMS methods

Showing 38 of 38

Method	Status	Tests
`google.cloud.kms.v1.KeyManagementService/AsymmetricDecrypt`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/AsymmetricSign`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/CreateCryptoKey`	Verified	`TestKMSRotationSchedule` `TestKMSResources` Error cases not yet verified (7) `INVALID_ARGUMENT`a malformed parent · `TestMalformedNamesAreInvalidArgument` `INVALID_ARGUMENT`a rotation_period below 24h (message wording) · `TestKMSRotationSchedule` `INVALID_ARGUMENT`a rotation_period below 24h or above 876,000h, or without next_rotation_time (message wording) · `TestKMSRotationScheduleValidation` `INVALID_ARGUMENT`an unknown field in the JSON body · `TestKMSCreatesOverREST` `INVALID_ARGUMENT`destroy_scheduled_duration out of range, negative or fractional · `TestDestroyScheduledDurationRange` `INVALID_ARGUMENT`purpose CRYPTO_KEY_PURPOSE_UNSPECIFIED · `TestKMSCreateCryptoKeyFields` `NOT_FOUND`a well-formed parent that does not exist · `TestMalformedNamesAreInvalidArgument`
`google.cloud.kms.v1.KeyManagementService/CreateCryptoKeyVersion`	Verified	`TestKMSVersionCanStartDisabled` `TestKMSResources` Error cases not yet verified (3) `INVALID_ARGUMENT`a malformed parent · `TestMalformedNamesAreInvalidArgument` `INVALID_ARGUMENT`an initial state other than ENABLED or DISABLED · `TestCreateVersionRefusesOtherInitialStates` `NOT_FOUND`a well-formed parent that does not exist · `TestMalformedNamesAreInvalidArgument`
`google.cloud.kms.v1.KeyManagementService/CreateImportJob`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/CreateKeyRing`	Verified	`TestKMSResources` Error cases not yet verified (1) `INVALID_ARGUMENT`a malformed parent · `TestMalformedNamesAreInvalidArgument`
`google.cloud.kms.v1.KeyManagementService/Decapsulate`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/Decrypt`	Verified	`TestKMSDecrypt` `TestKMSDecryptFollowsTheVersionLifecycle` Error cases not yet verified (6) `FAILED_PRECONDITION`a DESTROYED version · `TestDecryptIsRefusedOnceDestroyed` `FAILED_PRECONDITION`a DISABLED or DESTROY_SCHEDULED version · `TestGcloudKMSEncryptDecrypt` `FAILED_PRECONDITION`a DISABLED or DESTROY_SCHEDULED version · `TestKMSDecryptFollowsTheVersionLifecycle` `INVALID_ARGUMENT`a CryptoKeyVersion name, or an empty ciphertext · `TestKMSDecrypt` `INVALID_ARGUMENT`a wrong AAD, a tampered ciphertext, or another key's ciphertext · `TestGcloudKMSEncryptDecrypt` `INVALID_ARGUMENT`a wrong AAD, a tampered ciphertext, or another key's ciphertext · `TestKMSDecrypt`
`google.cloud.kms.v1.KeyManagementService/DeleteCryptoKey`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/DeleteCryptoKeyVersion`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/DestroyCryptoKeyVersion`	Verified	`TestKMSDestroyCryptoKeyVersion` Error cases not yet verified (3) `FAILED_PRECONDITION`a DESTROYED version · `TestDestroyFromEachState` `FAILED_PRECONDITION`a version already DESTROY_SCHEDULED · `TestKMSDestroyCryptoKeyVersion` `FAILED_PRECONDITION`a version whose destroy_time has passed · `TestAScheduledVersionIsDestroyedAtItsDestroyTime`
`google.cloud.kms.v1.KeyManagementService/Encrypt`	Verified	`TestKMSEncrypt` Error cases not yet verified (6) `FAILED_PRECONDITION`a DESTROY_SCHEDULED named version · `TestKMSDecryptFollowsTheVersionLifecycle` `FAILED_PRECONDITION`a DISABLED primary, a DISABLED named version, or a key with no primary · `TestGcloudKMSEncryptDecrypt` `FAILED_PRECONDITION`a DISABLED primary, a DISABLED named version, or a key with no primary · `TestKMSEncrypt` `INVALID_ARGUMENT`a malformed name · `TestKMSEncrypt` `INVALID_ARGUMENT`empty plaintext, or plaintext or AAD over 64KiB · `TestKMSEncrypt` `NOT_FOUND`a key that does not exist · `TestKMSEncrypt`
`google.cloud.kms.v1.KeyManagementService/ExportTrustedKeyWrappedCryptoKeyVersion`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/GenerateRandomBytes`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/GetCryptoKey`	Verified	`TestKMSRotationSchedule` `TestKMSNamesAreValidatedBeforeLookup` `TestKMSVersionCanStartDisabled` `TestKMSResources` Error cases not yet verified (4) `INVALID_ARGUMENT`a malformed name (wrong collection) · `TestKMSNamesAreValidatedBeforeLookup` `INVALID_ARGUMENT`a malformed name · `TestMalformedNamesAreInvalidArgument` `NOT_FOUND`a well-formed name that does not exist · `TestMalformedNamesAreInvalidArgument` `NOT_FOUND`a well-formed name that does not exist · `TestKMSNamesAreValidatedBeforeLookup`
`google.cloud.kms.v1.KeyManagementService/GetCryptoKeyVersion`	Verified	`TestKMSGetCryptoKeyVersion` `TestKMSVersionCanStartDisabled` Error cases not yet verified (4) `INVALID_ARGUMENT`a malformed name, including version IDs 0, -1, 01 and abc · `TestMalformedNamesAreInvalidArgument` `INVALID_ARGUMENT`a malformed version ID (01) · `TestKMSReadsAgreeOverREST` `NOT_FOUND`a version number the key does not have · `TestKMSGetCryptoKeyVersion` `NOT_FOUND`a well-formed name that does not exist · `TestMalformedNamesAreInvalidArgument`
`google.cloud.kms.v1.KeyManagementService/GetImportJob`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/GetKeyRing`	Verified	`TestKMSResources` Error cases not yet verified (6) `INVALID_ARGUMENT`a malformed name · `TestMalformedNamesAreInvalidArgument` `NOT_FOUND`a key ring removed by /admin/reset · `TestKMSResources` `NOT_FOUND`a key ring removed by a project-scoped /admin/reset · `TestKMSProjectResetClearsOnlyThatProject` `NOT_FOUND`a key ring that did not survive an ephemeral restart · `TestKMSAcrossRestart` `NOT_FOUND`a well-formed name that does not exist · `TestMalformedNamesAreInvalidArgument` `NOT_FOUND`a well-formed name that does not exist · `TestKMSReadsAgreeOverREST`
`google.cloud.kms.v1.KeyManagementService/GetPublicKey`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/GetRetiredResource`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/ImportCryptoKeyVersion`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/ImportTrustedKeyWrappedCryptoKeyVersion`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/ListCryptoKeyVersions`	Verified	`TestKMSVersionCanStartDisabled` `TestKMSResources` `TestKMSFullViewAddsNothingForSoftwareKeys` Error cases not yet verified (4) `INVALID_ARGUMENT`a filter that does not parse · `TestVersionStateFilter` `INVALID_ARGUMENT`a malformed parent · `TestMalformedNamesAreInvalidArgument` `INVALID_ARGUMENT`a view that is not a CryptoKeyVersionView · `TestAnUndefinedViewIsRefused` `NOT_FOUND`a well-formed parent that does not exist · `TestMalformedNamesAreInvalidArgument`
`google.cloud.kms.v1.KeyManagementService/ListCryptoKeys`	Verified	`TestKMSResources` `TestKMSFullViewAddsNothingForSoftwareKeys` Error cases not yet verified (4) `INVALID_ARGUMENT`a filter that does not parse · `TestNameAndLabelFilters` `INVALID_ARGUMENT`a malformed parent · `TestMalformedNamesAreInvalidArgument` `INVALID_ARGUMENT`a version_view that is not a CryptoKeyVersionView · `TestAnUndefinedViewIsRefused` `NOT_FOUND`a well-formed parent that does not exist · `TestMalformedNamesAreInvalidArgument`
`google.cloud.kms.v1.KeyManagementService/ListImportJobs`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/ListKeyRings`	Verified	`TestKMSResources` Error cases not yet verified (3) `INVALID_ARGUMENT`a malformed parent · `TestMalformedNamesAreInvalidArgument` `INVALID_ARGUMENT`an order_by other than name or name desc, or a page token from another order · `TestOrderByAndItsPageTokens` `INVALID_ARGUMENT`an unknown query parameter over REST · `TestKMSReadsAgreeOverREST`
`google.cloud.kms.v1.KeyManagementService/ListRetiredResources`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/MacSign`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/MacVerify`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/RawDecrypt`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/RawEncrypt`returns UNIMPLEMENTED (in-process check)	Returns UNIMPLEMENTED	`TestKMSUnimplementedContract`
`google.cloud.kms.v1.KeyManagementService/RestoreCryptoKeyVersion`	Verified	`TestKMSRestoreCryptoKeyVersion` Error cases not yet verified (2) `FAILED_PRECONDITION`a version whose destroy_time has passed · `TestRestoreBeforeAndAfterDestroyTime` `FAILED_PRECONDITION`an ENABLED version · `TestKMSRestoreCryptoKeyVersion`
`google.cloud.kms.v1.KeyManagementService/UpdateCryptoKey`	Verified	`TestKMSRotationSchedule` `TestKMSUpdateCryptoKey` Error cases not yet verified (6) `INVALID_ARGUMENT`a rotation_period below 24h, or a schedule left with a period and no next_rotation_time (message wording) · `TestKMSRotationScheduleValidation` `INVALID_ARGUMENT`a rotation_period below 24h, or with no next_rotation_time (message wording) · `TestKMSRotationSchedule` `INVALID_ARGUMENT`an empty mask, an immutable, output-only or unknown path, or an invalid label · `TestUpdateCryptoKeyMask` `INVALID_ARGUMENT`an unknown field in the JSON body · `TestKMSLifecycleOverRESTWire` `INVALID_ARGUMENT`the immutable destroy_scheduled_duration in the mask · `TestKMSUpdateCryptoKey` `NOT_FOUND`a well-formed key that does not exist · `TestUpdateCryptoKeyMask`
`google.cloud.kms.v1.KeyManagementService/UpdateCryptoKeyPrimaryVersion`	Verified	`TestKMSPrimaryMustBeEnabled` `TestKMSResources` Error cases not yet verified (4) `FAILED_PRECONDITION`a DESTROY_SCHEDULED target version · `TestPrimaryRefusesADestroyScheduledVersion` `FAILED_PRECONDITION`a DISABLED target version · `TestKMSPrimaryMustBeEnabled` `INVALID_ARGUMENT`a malformed name or crypto_key_version_id · `TestMalformedNamesAreInvalidArgument` `NOT_FOUND`a well-formed name that does not exist · `TestMalformedNamesAreInvalidArgument`
`google.cloud.kms.v1.KeyManagementService/UpdateCryptoKeyVersion`	Verified	`TestKMSUpdateCryptoKeyVersion` Error cases not yet verified (6) `FAILED_PRECONDITION`a DESTROY_SCHEDULED or DESTROYED version · `TestUpdateVersionRefusesADestroyScheduledVersion` `FAILED_PRECONDITION`a version whose destroy_time has passed · `TestAScheduledVersionIsDestroyedAtItsDestroyTime` `INVALID_ARGUMENT`a malformed version name · `TestUpdateVersionNames` `INVALID_ARGUMENT`a target state of DESTROYED · `TestKMSUpdateCryptoKeyVersion` `INVALID_ARGUMENT`an update_mask without state · `TestKMSUpdateCryptoKeyVersion` `NOT_FOUND`a well-formed version that does not exist · `TestUpdateVersionNames`
`google.iam.v1.IAMPolicy/GetIamPolicy`	Verified	`TestKMSIamPolicyIsStoredNotEnforced` Error cases not yet verified (2) `NOT_FOUND`a key ring that does not exist · `TestKMSIamPolicyIsStoredNotEnforced` `UNIMPLEMENTED`an import job, which CloudBurrow does not serve · `TestKMSIamPolicyIsStoredNotEnforced`
`google.iam.v1.IAMPolicy/SetIamPolicy`	Verified	`TestKMSIamPolicyIsStoredNotEnforced` Error cases not yet verified (1) `ABORTED`a stale etag · `TestKMSIamPolicyIsStoredNotEnforced`
`google.iam.v1.IAMPolicy/TestIamPermissions`	Verified	`TestKMSIamPolicyIsStoredNotEnforced`