trustv1

type DeleteCertAuthorityRequest struct {

	// Type of certificate authority.
	Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	// The domain for the certificate authority.
	Domain string `protobuf:"bytes,2,opt,name=domain,proto3" json:"domain,omitempty"`
	// contains filtered or unexported fields
}

type GenerateHostCertRequest struct {

	// key is the SSH public key that the certificate should include.
	Key []byte `protobuf:"bytes,1,opt,name=key,proto3" json:"key,omitempty"`
	// host_id is the ID of the host the certificate should include.
	HostId string `protobuf:"bytes,2,opt,name=host_id,json=hostId,proto3" json:"host_id,omitempty"`
	// node_name is the name of the node the certificate should include.
	NodeName string `protobuf:"bytes,3,opt,name=node_name,json=nodeName,proto3" json:"node_name,omitempty"`
	// principals is a list of principals that the certificate should include.
	Principals []string `protobuf:"bytes,4,rep,name=principals,proto3" json:"principals,omitempty"`
	// cluster_name is a list of principals that the certificate should include.
	ClusterName string `protobuf:"bytes,5,opt,name=cluster_name,json=clusterName,proto3" json:"cluster_name,omitempty"`
	// role is a system role assigned to the host that will be included on the certificate.
	Role string `protobuf:"bytes,6,opt,name=role,proto3" json:"role,omitempty"`
	// ttl is the duration the certificate will be valid for. This may be zero for indefinite.
	Ttl *durationpb.Duration `protobuf:"bytes,7,opt,name=ttl,proto3" json:"ttl,omitempty"`
	// contains filtered or unexported fields
}

type GenerateHostCertResponse struct {

	// ssh_certificate is the encoded bytes of the SSH certificate generated by the RPC.
	SshCertificate []byte `protobuf:"bytes,1,opt,name=ssh_certificate,json=sshCertificate,proto3" json:"ssh_certificate,omitempty"`
	// contains filtered or unexported fields
}

type GetCertAuthoritiesRequest struct {

	// Type of certificate authority.
	Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	// Whether the private key should be included in the response.
	IncludeKey bool `protobuf:"varint,2,opt,name=include_key,json=includeKey,proto3" json:"include_key,omitempty"`
	// contains filtered or unexported fields
}

type GetCertAuthoritiesResponse struct {

	// The matching certificate authorities.
	CertAuthoritiesV2 []*types.CertAuthorityV2 `protobuf:"bytes,1,rep,name=cert_authorities_v2,json=certAuthoritiesV2,proto3" json:"cert_authorities_v2,omitempty"`
	// contains filtered or unexported fields
}

type GetCertAuthorityRequest struct {

	// Type of certificate authority.
	Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	// The domain for the certificate authority.
	Domain string `protobuf:"bytes,2,opt,name=domain,proto3" json:"domain,omitempty"`
	// Whether the private key should be included in the response.
	IncludeKey bool `protobuf:"varint,3,opt,name=include_key,json=includeKey,proto3" json:"include_key,omitempty"`
	// contains filtered or unexported fields
}

type RotateCertAuthorityRequest struct {

	// Type is a certificate authority type, if omitted, both user and host CA
	// will be rotated.
	Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	// GracePeriod is used to generate cert rotation schedule that defines
	// times at which different rotation phases will be applied by the auth server
	// in auto mode. It is not used in manual rotation mode.
	// If omitted, default value is set, if 0 is supplied, it is interpreted as
	// forcing rotation of all certificate authorities with no grace period,
	// all existing users and hosts will have to re-login and re-added
	// into the cluster.
	GracePeriod *durationpb.Duration `protobuf:"bytes,2,opt,name=grace_period,json=gracePeriod,proto3" json:"grace_period,omitempty"`
	// TargetPhase sets desired rotation phase to move to, if not set
	// will be set automatically, it is a required argument
	// for manual rotation.
	TargetPhase string `protobuf:"bytes,3,opt,name=target_phase,json=targetPhase,proto3" json:"target_phase,omitempty"`
	// Mode sets manual or auto rotation mode.
	Mode string `protobuf:"bytes,4,opt,name=mode,proto3" json:"mode,omitempty"`
	// Schedule is an optional rotation schedule,
	// autogenerated based on GracePeriod parameter if not set.
	Schedule *RotationSchedule `protobuf:"bytes,5,opt,name=schedule,proto3" json:"schedule,omitempty"`
	// contains filtered or unexported fields
}

type RotateCertAuthorityResponse struct {
	// contains filtered or unexported fields
}

type RotateExternalCertAuthorityRequest struct {

	// The certificate authority to rotate.
	CertAuthority *types.CertAuthorityV2 `protobuf:"bytes,1,opt,name=cert_authority,json=certAuthority,proto3" json:"cert_authority,omitempty"`
	// contains filtered or unexported fields
}

type RotateExternalCertAuthorityResponse struct {
	// contains filtered or unexported fields
}

type RotationSchedule struct {

	// UpdateClients specifies time to switch to the "Update clients" phase
	UpdateClients *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=update_clients,json=updateClients,proto3" json:"update_clients,omitempty"`
	// UpdateServers specifies time to switch to the "Update servers" phase.
	UpdateServers *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=update_servers,json=updateServers,proto3" json:"update_servers,omitempty"`
	// Standby specifies time to switch to the "Standby" phase.
	Standby *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=standby,proto3" json:"standby,omitempty"`
	// contains filtered or unexported fields
}

type TrustServiceClient interface {
	// GetCertAuthority returns a cert authority by type and domain.
	GetCertAuthority(ctx context.Context, in *GetCertAuthorityRequest, opts ...grpc.CallOption) (*types.CertAuthorityV2, error)
	// GetCertAuthorities returns all cert authorities with the specified type.
	GetCertAuthorities(ctx context.Context, in *GetCertAuthoritiesRequest, opts ...grpc.CallOption) (*GetCertAuthoritiesResponse, error)
	// DeleteCertAuthority deletes the matching cert authority.
	DeleteCertAuthority(ctx context.Context, in *DeleteCertAuthorityRequest, opts ...grpc.CallOption) (*emptypb.Empty, error)
	// UpsertCertAuthority creates or updates the provided cert authority.
	UpsertCertAuthority(ctx context.Context, in *UpsertCertAuthorityRequest, opts ...grpc.CallOption) (*types.CertAuthorityV2, error)
	// RotateCertAuthority is a request to start rotation of the certificate authority.
	RotateCertAuthority(ctx context.Context, in *RotateCertAuthorityRequest, opts ...grpc.CallOption) (*RotateCertAuthorityResponse, error)
	// RotateExternalCertAuthority rotates an external cert authority.
	RotateExternalCertAuthority(ctx context.Context, in *RotateExternalCertAuthorityRequest, opts ...grpc.CallOption) (*RotateExternalCertAuthorityResponse, error)
	// GenerateHostCert takes a public key in the OpenSSH `authorized_keys` format and returns
	// a SSH certificate signed by the Host CA.
	GenerateHostCert(ctx context.Context, in *GenerateHostCertRequest, opts ...grpc.CallOption) (*GenerateHostCertResponse, error)
}

type TrustServiceServer interface {
	// GetCertAuthority returns a cert authority by type and domain.
	GetCertAuthority(context.Context, *GetCertAuthorityRequest) (*types.CertAuthorityV2, error)
	// GetCertAuthorities returns all cert authorities with the specified type.
	GetCertAuthorities(context.Context, *GetCertAuthoritiesRequest) (*GetCertAuthoritiesResponse, error)
	// DeleteCertAuthority deletes the matching cert authority.
	DeleteCertAuthority(context.Context, *DeleteCertAuthorityRequest) (*emptypb.Empty, error)
	// UpsertCertAuthority creates or updates the provided cert authority.
	UpsertCertAuthority(context.Context, *UpsertCertAuthorityRequest) (*types.CertAuthorityV2, error)
	// RotateCertAuthority is a request to start rotation of the certificate authority.
	RotateCertAuthority(context.Context, *RotateCertAuthorityRequest) (*RotateCertAuthorityResponse, error)
	// RotateExternalCertAuthority rotates an external cert authority.
	RotateExternalCertAuthority(context.Context, *RotateExternalCertAuthorityRequest) (*RotateExternalCertAuthorityResponse, error)
	// GenerateHostCert takes a public key in the OpenSSH `authorized_keys` format and returns
	// a SSH certificate signed by the Host CA.
	GenerateHostCert(context.Context, *GenerateHostCertRequest) (*GenerateHostCertResponse, error)
	// contains filtered or unexported methods
}

type UnimplementedTrustServiceServer struct {
}

type UnsafeTrustServiceServer interface {
	// contains filtered or unexported methods
}

type UpsertCertAuthorityRequest struct {

	// The certificate authority to create or update.
	CertAuthority *types.CertAuthorityV2 `protobuf:"bytes,1,opt,name=cert_authority,json=certAuthority,proto3" json:"cert_authority,omitempty"`
	// contains filtered or unexported fields
}