From a739d58eed14a8a5885c7ed047594ec3de2b6a93 Mon Sep 17 00:00:00 2001
From: Matt Moore <mattmoor@chainguard.dev>
Date: Sun, 21 Jan 2024 15:58:09 -0800
Subject: [PATCH] Rotate the signing key

Fixes: https://github.com/mattmoor/octo-sts/issues/7

Signed-off-by: Matt Moore <mattmoor@chainguard.dev>
---
 iac/main.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/iac/main.tf b/iac/main.tf
index 7179a4f..51e24ab 100644
--- a/iac/main.tf
+++ b/iac/main.tf
@@ -68,7 +68,7 @@ locals {
   #     --key app-signing-key \
   #     --algorithm rsa-sign-pkcs1-2048-sha256 \
   #     --target-key-file key.data
-  kms_key = "${google_kms_crypto_key.app-key.id}/cryptoKeyVersions/3"
+  kms_key = "${google_kms_crypto_key.app-key.id}/cryptoKeyVersions/1"
 }
 
 // Create a dedicated GSA for the IAM datastore service.