inbound

type Authn struct {

	// Types that are assignable to Permit:
	//
	//	*Authn_Unauthenticated
	//	*Authn_MeshTLS
	Permit isAuthn_Permit `protobuf_oneof:"permit"`
	// contains filtered or unexported fields
}

type Authn_MeshTLS struct {
	// If set, requires that the connection is transported over mesh TLS.
	MeshTLS *Authn_PermitMeshTLS `protobuf:"bytes,2,opt,name=meshTLS,proto3,oneof"`
}

type Authn_PermitMeshTLS struct {

	// Types that are assignable to Clients:
	//
	//	*Authn_PermitMeshTLS_Unauthenticated
	//	*Authn_PermitMeshTLS_Identities
	Clients isAuthn_PermitMeshTLS_Clients `protobuf_oneof:"clients"`
	// contains filtered or unexported fields
}

type Authn_PermitMeshTLS_Identities struct {
	// Indicates that mutually-authenticated connections are permitted from
	// clients with matching identities.
	Identities *Authn_PermitMeshTLS_PermitClientIdentities `protobuf:"bytes,2,opt,name=identities,proto3,oneof"`
}

type Authn_PermitMeshTLS_PermitClientIdentities struct {

	// A list of literal identities.
	Identities []*Identity `protobuf:"bytes,1,rep,name=identities,proto3" json:"identities,omitempty"`
	// A list of identity suffixes.
	//
	// If this contains an empty suffix, all identities are matched.
	Suffixes []*IdentitySuffix `protobuf:"bytes,2,rep,name=suffixes,proto3" json:"suffixes,omitempty"`
	// contains filtered or unexported fields
}

type Authn_PermitMeshTLS_Unauthenticated struct {
	// Indicates that client identities are not required.
	Unauthenticated *Authn_PermitUnauthenticated `protobuf:"bytes,1,opt,name=unauthenticated,proto3,oneof"`
}

type Authn_PermitUnauthenticated struct {
	// contains filtered or unexported fields
}

type Authn_Unauthenticated struct {
	Unauthenticated *Authn_PermitUnauthenticated `protobuf:"bytes,1,opt,name=unauthenticated,proto3,oneof"`
}

type Authz struct {

	// Limits this authorization to client addresses in the provided networks.
	//
	// Must have at least one network, otherwise the authorization must be
	// ignored. An authorization matches all clients by including an explicit
	// match on, i.e., `[0.0.0.0/0, 0::/0]“.
	Networks []*Network `protobuf:"bytes,1,rep,name=networks,proto3" json:"networks,omitempty"`
	// Must be set.
	Authentication *Authn `protobuf:"bytes,2,opt,name=authentication,proto3" json:"authentication,omitempty"`
	// Descriptive labels to be added to metrics, etc.
	//
	// A control plane SHOULD return the same keys in all authorizations. That is,
	// we do NOT want to return arbitrary pod labels in this field.
	//
	// `labels` should be considered deprecated. `metadata` is preferred. However,
	// controllers should continue to set `labels` for compatibility with older
	// proxies.
	Labels map[string]string `` /* 153-byte string literal not displayed */
	// If set, describes an Authorization configuration. Replaces the free-from
	// `labels` field.
	Metadata *meta.Metadata `protobuf:"bytes,4,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// contains filtered or unexported fields
}

type GrpcRoute struct {
	Metadata *meta.Metadata `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// If empty, the host value is ignored.
	Hosts []*http_route.HostMatch `protobuf:"bytes,2,rep,name=hosts,proto3" json:"hosts,omitempty"`
	// The server MUST return at least one authorization, otherwise all requests
	// to this route will fail with an unauthorized response.
	Authorizations []*Authz `protobuf:"bytes,3,rep,name=authorizations,proto3" json:"authorizations,omitempty"`
	// Must have at least one rule.
	Rules []*GrpcRoute_Rule `protobuf:"bytes,4,rep,name=rules,proto3" json:"rules,omitempty"`
	// contains filtered or unexported fields
}

type GrpcRoute_Filter struct {

	// Types that are assignable to Kind:
	//
	//	*GrpcRoute_Filter_FailureInjector
	//	*GrpcRoute_Filter_RequestHeaderModifier
	Kind isGrpcRoute_Filter_Kind `protobuf_oneof:"kind"`
	// contains filtered or unexported fields
}

type GrpcRoute_Filter_FailureInjector struct {
	FailureInjector *grpc_route.GrpcFailureInjector `protobuf:"bytes,1,opt,name=failure_injector,json=failureInjector,proto3,oneof"`
}

type GrpcRoute_Filter_RequestHeaderModifier struct {
	RequestHeaderModifier *http_route.RequestHeaderModifier `protobuf:"bytes,2,opt,name=request_header_modifier,json=requestHeaderModifier,proto3,oneof"`
}

type GrpcRoute_Rule struct {
	Matches []*grpc_route.GrpcRouteMatch `protobuf:"bytes,1,rep,name=matches,proto3" json:"matches,omitempty"`
	Filters []*GrpcRoute_Filter          `protobuf:"bytes,2,rep,name=filters,proto3" json:"filters,omitempty"`
	// contains filtered or unexported fields
}

type HttpRoute struct {
	Metadata *meta.Metadata `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// If empty, the host value is ignored.
	Hosts []*http_route.HostMatch `protobuf:"bytes,2,rep,name=hosts,proto3" json:"hosts,omitempty"`
	// Extends the list of authorizations on the `Server` with authorizations
	// specific to this route.
	Authorizations []*Authz `protobuf:"bytes,3,rep,name=authorizations,proto3" json:"authorizations,omitempty"`
	// Must have at least one rule.
	Rules []*HttpRoute_Rule `protobuf:"bytes,4,rep,name=rules,proto3" json:"rules,omitempty"`
	// contains filtered or unexported fields
}

type HttpRoute_Filter struct {

	// Types that are assignable to Kind:
	//
	//	*HttpRoute_Filter_FailureInjector
	//	*HttpRoute_Filter_RequestHeaderModifier
	//	*HttpRoute_Filter_Redirect
	Kind isHttpRoute_Filter_Kind `protobuf_oneof:"kind"`
	// contains filtered or unexported fields
}

type HttpRoute_Filter_FailureInjector struct {
	FailureInjector *http_route.HttpFailureInjector `protobuf:"bytes,1,opt,name=failure_injector,json=failureInjector,proto3,oneof"`
}

type HttpRoute_Filter_Redirect struct {
	Redirect *http_route.RequestRedirect `protobuf:"bytes,3,opt,name=redirect,proto3,oneof"`
}

type HttpRoute_Filter_RequestHeaderModifier struct {
	RequestHeaderModifier *http_route.RequestHeaderModifier `protobuf:"bytes,2,opt,name=request_header_modifier,json=requestHeaderModifier,proto3,oneof"`
}

type HttpRoute_Rule struct {
	Matches []*http_route.HttpRouteMatch `protobuf:"bytes,1,rep,name=matches,proto3" json:"matches,omitempty"`
	Filters []*HttpRoute_Filter          `protobuf:"bytes,2,rep,name=filters,proto3" json:"filters,omitempty"`
	// contains filtered or unexported fields
}

type Identity struct {
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type IdentitySuffix struct {
	Parts []string `protobuf:"bytes,1,rep,name=parts,proto3" json:"parts,omitempty"`
	// contains filtered or unexported fields
}

type InboundServerPoliciesClient interface {
	// / Gets the inbound server policy for a given workload port.
	GetPort(ctx context.Context, in *PortSpec, opts ...grpc.CallOption) (*Server, error)
	// / Watches the inbound server policy for a given workload port.
	WatchPort(ctx context.Context, in *PortSpec, opts ...grpc.CallOption) (InboundServerPolicies_WatchPortClient, error)
}

type InboundServerPoliciesServer interface {
	// / Gets the inbound server policy for a given workload port.
	GetPort(context.Context, *PortSpec) (*Server, error)
	// / Watches the inbound server policy for a given workload port.
	WatchPort(*PortSpec, InboundServerPolicies_WatchPortServer) error
	// contains filtered or unexported methods
}

type InboundServerPolicies_WatchPortClient interface {
	Recv() (*Server, error)
	grpc.ClientStream
}

type InboundServerPolicies_WatchPortServer interface {
	Send(*Server) error
	grpc.ServerStream
}

type Network struct {
	Net    *net.IPNetwork   `protobuf:"bytes,1,opt,name=net,proto3" json:"net,omitempty"`
	Except []*net.IPNetwork `protobuf:"bytes,2,rep,name=except,proto3" json:"except,omitempty"`
	// contains filtered or unexported fields
}

type PortSpec struct {

	// Identifies a proxy workload (e.g., pod name).
	Workload string `protobuf:"bytes,1,opt,name=workload,proto3" json:"workload,omitempty"`
	// An inbound port on _workload_.
	Port uint32 `protobuf:"varint,2,opt,name=port,proto3" json:"port,omitempty"`
	// contains filtered or unexported fields
}

type ProxyProtocol struct {

	// Types that are assignable to Kind:
	//
	//	*ProxyProtocol_Detect_
	//	*ProxyProtocol_Opaque_
	//	*ProxyProtocol_Tls_
	//	*ProxyProtocol_Http1_
	//	*ProxyProtocol_Http2_
	//	*ProxyProtocol_Grpc_
	Kind isProxyProtocol_Kind `protobuf_oneof:"kind"`
	// contains filtered or unexported fields
}

type ProxyProtocol_Detect struct {
	Timeout *duration.Duration `protobuf:"bytes,1,opt,name=timeout,proto3" json:"timeout,omitempty"`
	// If the protocol detected as HTTP, a list of HTTP routes that should be
	// matched.
	HttpRoutes []*HttpRoute `protobuf:"bytes,3,rep,name=http_routes,json=httpRoutes,proto3" json:"http_routes,omitempty"`
	// contains filtered or unexported fields
}

type ProxyProtocol_Detect_ struct {
	Detect *ProxyProtocol_Detect `protobuf:"bytes,1,opt,name=detect,proto3,oneof"`
}

type ProxyProtocol_Grpc struct {
	Routes []*GrpcRoute `protobuf:"bytes,2,rep,name=routes,proto3" json:"routes,omitempty"`
	// contains filtered or unexported fields
}

type ProxyProtocol_Grpc_ struct {
	Grpc *ProxyProtocol_Grpc `protobuf:"bytes,6,opt,name=grpc,proto3,oneof"`
}

type ProxyProtocol_Http1 struct {
	Routes []*HttpRoute `protobuf:"bytes,2,rep,name=routes,proto3" json:"routes,omitempty"`
	// contains filtered or unexported fields
}

type ProxyProtocol_Http1_ struct {
	Http1 *ProxyProtocol_Http1 `protobuf:"bytes,4,opt,name=http1,proto3,oneof"`
}

type ProxyProtocol_Http2 struct {
	Routes []*HttpRoute `protobuf:"bytes,2,rep,name=routes,proto3" json:"routes,omitempty"`
	// contains filtered or unexported fields
}

type ProxyProtocol_Http2_ struct {
	Http2 *ProxyProtocol_Http2 `protobuf:"bytes,5,opt,name=http2,proto3,oneof"`
}

type ProxyProtocol_Opaque struct {
	// contains filtered or unexported fields
}

type ProxyProtocol_Opaque_ struct {
	Opaque *ProxyProtocol_Opaque `protobuf:"bytes,2,opt,name=opaque,proto3,oneof"`
}

type ProxyProtocol_Tls struct {
	// contains filtered or unexported fields
}

type ProxyProtocol_Tls_ struct {
	Tls *ProxyProtocol_Tls `protobuf:"bytes,3,opt,name=tls,proto3,oneof"`
}

type Server struct {

	// If set, indicates how the proxy should proxy connections on the specified
	// port.
	Protocol *ProxyProtocol `protobuf:"bytes,1,opt,name=protocol,proto3" json:"protocol,omitempty"`
	// Indicates the IP addresses on which the proxy may receive connections.
	// Connections targetting other IP addresses will be dropped.
	ServerIps []*net.IPAddress `protobuf:"bytes,2,rep,name=server_ips,json=serverIps,proto3" json:"server_ips,omitempty"`
	// Configures a proxy to allow connections from the specified clients.
	//
	// If unset, no connections are permitted.
	Authorizations []*Authz `protobuf:"bytes,3,rep,name=authorizations,proto3" json:"authorizations,omitempty"`
	// Descriptive labels to be added to metrics, etc.
	//
	// A control plane SHOULD return the same keys in all policies. That is, we do
	// NOT want to return arbitrary pod labels in this field.
	Labels map[string]string `` /* 153-byte string literal not displayed */
	// contains filtered or unexported fields
}

type UnimplementedInboundServerPoliciesServer struct {
}

type UnsafeInboundServerPoliciesServer interface {
	// contains filtered or unexported methods
}