accessgraphv1alpha

type AccessGraphServiceClient interface {
	// Query queries the access graph.
	// Currently only used by WebUI.
	Query(ctx context.Context, in *QueryRequest, opts ...grpc.CallOption) (*QueryResponse, error)
	// GetFile gets a static UI file from the access graph container.
	GetFile(ctx context.Context, in *GetFileRequest, opts ...grpc.CallOption) (*GetFileResponse, error)
	// EventsStream is a stream of commands to the access graph service.
	// Teleport Auth server creates a stream to the access graph service
	// and pushes all resources and following events to it.
	// This stream is used to sync the access graph with the Teleport database state.
	// Once Teleport finishes syncing the current state, it sends a sync command
	// to the access graph service and resumes sending events.
	EventsStream(ctx context.Context, opts ...grpc.CallOption) (AccessGraphService_EventsStreamClient, error)
}

type AccessGraphServiceServer interface {
	// Query queries the access graph.
	// Currently only used by WebUI.
	Query(context.Context, *QueryRequest) (*QueryResponse, error)
	// GetFile gets a static UI file from the access graph container.
	GetFile(context.Context, *GetFileRequest) (*GetFileResponse, error)
	// EventsStream is a stream of commands to the access graph service.
	// Teleport Auth server creates a stream to the access graph service
	// and pushes all resources and following events to it.
	// This stream is used to sync the access graph with the Teleport database state.
	// Once Teleport finishes syncing the current state, it sends a sync command
	// to the access graph service and resumes sending events.
	EventsStream(AccessGraphService_EventsStreamServer) error
	// contains filtered or unexported methods
}

type AccessGraphService_EventsStreamClient interface {
	Send(*EventsStreamRequest) error
	CloseAndRecv() (*EventsStreamResponse, error)
	grpc.ClientStream
}

type AccessGraphService_EventsStreamServer interface {
	SendAndClose(*EventsStreamResponse) error
	Recv() (*EventsStreamRequest, error)
	grpc.ServerStream
}

type AccessListsMembers struct {

	// members is the list of members to add to access lists.
	Members []*v1.Member `protobuf:"bytes,1,rep,name=members,proto3" json:"members,omitempty"`
	// contains filtered or unexported fields
}

type Edge struct {

	// from is the ID of the node the edge is from.
	From string `protobuf:"bytes,1,opt,name=from,proto3" json:"from,omitempty"`
	// to is the ID of the node the edge is to.
	To string `protobuf:"bytes,2,opt,name=to,proto3" json:"to,omitempty"`
	// edge_type is the type of the edge, e.g. "member_of", "belongs_to", etc.
	EdgeType string `protobuf:"bytes,3,opt,name=edge_type,json=edgeType,proto3" json:"edge_type,omitempty"`
	// contains filtered or unexported fields
}

type EventsStreamRequest struct {

	// operation contains the desired operation
	//
	// Types that are assignable to Operation:
	//
	//	*EventsStreamRequest_Sync
	//	*EventsStreamRequest_Upsert
	//	*EventsStreamRequest_Delete
	//	*EventsStreamRequest_AccessListsMembers
	//	*EventsStreamRequest_ExcludeAccessListMembers
	Operation isEventsStreamRequest_Operation `protobuf_oneof:"operation"`
	// contains filtered or unexported fields
}

type EventsStreamRequest_AccessListsMembers struct {
	// access_lists_members is a command to upsert access lists members.
	// It's issued when a user is added to an access list or when their membership is updated.
	// It's also issued when a user membership expires but the user remains in the access list.
	// In that case, the state of the user reflects the expiration reason.
	AccessListsMembers *AccessListsMembers `protobuf:"bytes,4,opt,name=access_lists_members,json=accessListsMembers,proto3,oneof"`
}

type EventsStreamRequest_Delete struct {
	// delete is a command to delete a resource from the access graph when it's deleted from Teleport.
	Delete *ResourceHeaderList `protobuf:"bytes,3,opt,name=delete,proto3,oneof"`
}

type EventsStreamRequest_ExcludeAccessListMembers struct {
	// exclude_access_list_members is a command to exclude access lists members
	// when they are manually removed from the access list.
	// If their membership remains but it's expired, they are not excluded
	// from the access list but they don't receive any access - in that case,
	// the request is [access_lists_members].
	ExcludeAccessListMembers *ExcludeAccessListsMembers `protobuf:"bytes,5,opt,name=exclude_access_list_members,json=excludeAccessListMembers,proto3,oneof"`
}

type EventsStreamRequest_Sync struct {
	// sync is a command to sync the access graph with the Teleport database state.
	// it's issued once Teleport finishes syncing all resources with the database.
	Sync *SyncOperation `protobuf:"bytes,1,opt,name=sync,proto3,oneof"`
}

type EventsStreamRequest_Upsert struct {
	// upsert is a command to put a resource into the access graph or update it.
	Upsert *ResourceList `protobuf:"bytes,2,opt,name=upsert,proto3,oneof"`
}

type EventsStreamResponse struct {
	// contains filtered or unexported fields
}

type ExcludeAccessListMember struct {
	AccessList string `protobuf:"bytes,1,opt,name=access_list,json=accessList,proto3" json:"access_list,omitempty"`
	Username   string `protobuf:"bytes,2,opt,name=username,proto3" json:"username,omitempty"`
	// contains filtered or unexported fields
}

type ExcludeAccessListsMembers struct {
	Members []*ExcludeAccessListMember `protobuf:"bytes,1,rep,name=members,proto3" json:"members,omitempty"`
	// contains filtered or unexported fields
}

type GetFileRequest struct {

	// filepath is a path to the file.
	Filepath string `protobuf:"bytes,1,opt,name=filepath,proto3" json:"filepath,omitempty"`
	// contains filtered or unexported fields
}

type GetFileResponse struct {

	// data is a raw file content.
	Data []byte `protobuf:"bytes,1,opt,name=data,proto3" json:"data,omitempty"`
	// contains filtered or unexported fields
}

type Node struct {

	// ID is the unique ID of the node.
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// Kind is the kind of the node, ex: "user", "user_group", "resource", etc.
	Kind string `protobuf:"bytes,2,opt,name=kind,proto3" json:"kind,omitempty"`
	// SubKind is the subkind of the node, ex: "ssh", "db", "k8s", etc.
	SubKind string `protobuf:"bytes,3,opt,name=sub_kind,json=subKind,proto3" json:"sub_kind,omitempty"`
	// Name is the name of the node.
	Name string `protobuf:"bytes,4,opt,name=name,proto3" json:"name,omitempty"`
	// Labels is a set of labels for the resource.
	Labels map[string]string `` /* 153-byte string literal not displayed */
	// Hostname is the hostname of the node.
	Hostname string `protobuf:"bytes,6,opt,name=hostname,proto3" json:"hostname,omitempty"`
	// Properties is a set of properties for the resource.
	Properties map[string]string `` /* 161-byte string literal not displayed */
	// contains filtered or unexported fields
}

type QueryRequest struct {

	// query is a SQL query.
	Query string `protobuf:"bytes,1,opt,name=query,proto3" json:"query,omitempty"`
	// contains filtered or unexported fields
}

type QueryResponse struct {

	// nodes is a list of nodes returned by the query. The response may contain only nodes.
	Nodes []*Node `protobuf:"bytes,1,rep,name=nodes,proto3" json:"nodes,omitempty"`
	// edges is a list of edges returned by the query.
	Edges []*Edge `protobuf:"bytes,2,rep,name=edges,proto3" json:"edges,omitempty"`
	// contains filtered or unexported fields
}

type ResourceEntry struct {

	// Types that are assignable to Resource:
	//
	//	*ResourceEntry_User
	//	*ResourceEntry_Role
	//	*ResourceEntry_Server
	//	*ResourceEntry_AccessRequest
	//	*ResourceEntry_KubernetesServer
	//	*ResourceEntry_AppServer
	//	*ResourceEntry_DatabaseServer
	//	*ResourceEntry_WindowsDesktop
	//	*ResourceEntry_AccessList
	Resource isResourceEntry_Resource `protobuf_oneof:"resource"`
	// contains filtered or unexported fields
}

type ResourceEntry_AccessList struct {
	// access_list is a resource for access lists.
	AccessList *v1.AccessList `protobuf:"bytes,9,opt,name=access_list,json=accessList,proto3,oneof"`
}

type ResourceEntry_AccessRequest struct {
	// access_request is a resource for access requests
	AccessRequest *types.AccessRequestV3 `protobuf:"bytes,4,opt,name=access_request,json=accessRequest,proto3,oneof"`
}

type ResourceEntry_AppServer struct {
	// app_server is an application server resource
	AppServer *types.AppServerV3 `protobuf:"bytes,6,opt,name=app_server,json=appServer,proto3,oneof"`
}

type ResourceEntry_DatabaseServer struct {
	// database_server is a database server resource
	DatabaseServer *types.DatabaseServerV3 `protobuf:"bytes,7,opt,name=database_server,json=databaseServer,proto3,oneof"`
}

type ResourceEntry_KubernetesServer struct {
	// kubernetes_server is a kubernetes server resource
	KubernetesServer *types.KubernetesServerV3 `protobuf:"bytes,5,opt,name=kubernetes_server,json=kubernetesServer,proto3,oneof"`
}

type ResourceEntry_Role struct {
	// role is a role resource
	Role *types.RoleV6 `protobuf:"bytes,2,opt,name=role,proto3,oneof"`
}

type ResourceEntry_Server struct {
	// server is a node/server resource
	Server *types.ServerV2 `protobuf:"bytes,3,opt,name=server,proto3,oneof"`
}

type ResourceEntry_User struct {
	// user is a user resource
	User *types.UserV2 `protobuf:"bytes,1,opt,name=user,proto3,oneof"`
}

type ResourceEntry_WindowsDesktop struct {
	// windows_desktop is a resource for Windows desktop host.
	WindowsDesktop *types.WindowsDesktopV3 `protobuf:"bytes,8,opt,name=windows_desktop,json=windowsDesktop,proto3,oneof"`
}

type ResourceHeaderList struct {
	Resources []*types.ResourceHeader `protobuf:"bytes,1,rep,name=resources,proto3" json:"resources,omitempty"`
	// contains filtered or unexported fields
}

type ResourceList struct {
	Resources []*ResourceEntry `protobuf:"bytes,1,rep,name=resources,proto3" json:"resources,omitempty"`
	// contains filtered or unexported fields
}

type SyncOperation struct {
	// contains filtered or unexported fields
}

type UnimplementedAccessGraphServiceServer struct {
}

type UnsafeAccessGraphServiceServer interface {
	// contains filtered or unexported methods
}