get:
  tags:
    - Managed Clients
  summary: Get encryption keys for client
  description: >-
    Get existing encryption keys from the Managed Cluster this Managed client is part of. To be used by a new VA joining an existing cluster.

    AMS Security: idn:managed-client-access-management
  operationId: getEncryptionKeys
  parameters:
    - in: path
      name: id
      schema:
        type: string
      required: true
      description: The Managed client ID
      example: aClientId
  responses:
    "200":
      description: Responds with a GetEncryptionKeysData
      content:
        application/json:
          schema:
            $ref: '../schemas/GetEncryptionKeysData.yaml'
    '400':
      $ref: '../../v3/responses/400.yaml'
    '401':
      $ref: '../../v3/responses/401.yaml'
    '403':
      $ref: '../../v3/responses/403.yaml'
    '404':
      $ref: '../../v3/responses/404.yaml'
    '429':
      $ref: '../../v3/responses/429.yaml'
    '500':
      $ref: '../../v3/responses/500.yaml'
  security:
    - UserContextAuth: [idn:managed-client-certificate:read]