var (
    RBAC_EnforcementType_name = map[int32]string{
        0:  "ONE_TIME_ON_FIRST_BYTE",
        1:  "CONTINUOUS",
    }
    RBAC_EnforcementType_value = map[string]int32{
        "ONE_TIME_ON_FIRST_BYTE": 0,
        "CONTINUOUS":             1,
    }
)

var File_envoy_extensions_filters_network_rbac_v3_rbac_proto protoreflect.FileDescriptor

type RBAC struct {

    // Specify the RBAC rules to be applied globally.
    // If absent, no enforcing RBAC policy will be applied.
    Rules *v3.RBAC `protobuf:"bytes,1,opt,name=rules,proto3" json:"rules,omitempty"`
    // Shadow rules are not enforced by the filter but will emit stats and logs
    // and can be used for rule testing.
    // If absent, no shadow RBAC policy will be applied.
    ShadowRules *v3.RBAC `protobuf:"bytes,2,opt,name=shadow_rules,json=shadowRules,proto3" json:"shadow_rules,omitempty"`
    // The prefix to use when emitting statistics.
    StatPrefix string `protobuf:"bytes,3,opt,name=stat_prefix,json=statPrefix,proto3" json:"stat_prefix,omitempty"`
    // RBAC enforcement strategy. By default RBAC will be enforced only once
    // when the first byte of data arrives from the downstream. When used in
    // conjunction with filters that emit dynamic metadata after decoding
    // every payload (e.g., Mongo, MySQL, Kafka) set the enforcement type to
    // CONTINUOUS to enforce RBAC policies on every message boundary.
    EnforcementType RBAC_EnforcementType `protobuf:"varint,4,opt,name=enforcement_type,json=enforcementType,proto3,enum=envoy.extensions.filters.network.rbac.v3.RBAC_EnforcementType" json:"enforcement_type,omitempty"`
    // contains filtered or unexported fields
}

type RBACValidationError struct {
    // contains filtered or unexported fields
}

type RBAC_EnforcementType int32

const (
    // Apply RBAC policies when the first byte of data arrives on the connection.
    RBAC_ONE_TIME_ON_FIRST_BYTE RBAC_EnforcementType = 0
    // Continuously apply RBAC policies as data arrives. Use this mode when
    // using RBAC with message oriented protocols such as Mongo, MySQL, Kafka,
    // etc. when the protocol decoders emit dynamic metadata such as the
    // resources being accessed and the operations on the resources.
    RBAC_CONTINUOUS RBAC_EnforcementType = 1
)