protobuf

type AddClusterNodeRequest struct {
	Host string `protobuf:"bytes,1,opt,name=Host,json=host,proto3" json:"Host,omitempty"`
	// contains filtered or unexported fields
}

type AssignPolicyRequest struct {

	// Identity is the identity to which the policy should apply.
	Identity string `protobuf:"bytes,1,opt,name=Identity,json=identity,proto3" json:"Identity,omitempty"`
	Policy   string `protobuf:"bytes,2,opt,name=Policy,json=policy,proto3" json:"Policy,omitempty"`
	// contains filtered or unexported fields
}

type ClusterStatusRequest struct {
	// contains filtered or unexported fields
}

type ClusterStatusResponse struct {
	NodesUp   map[uint32]*ServerStatusResponse `` /* 170-byte string literal not displayed */
	NodesDown map[uint32]string                `` /* 176-byte string literal not displayed */
	// contains filtered or unexported fields
}

type CreateEnclaveRequest struct {
	Name string `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	// contains filtered or unexported fields
}

type CreateIdentityRequest struct {
	Identity string `protobuf:"bytes,1,opt,name=Identity,json=identity,proto3" json:"Identity,omitempty"`
	// Privilege is the privilege the identity has. Either, "SysAdmin", "Admin" or
	// "User".
	Privilege string `protobuf:"bytes,2,opt,name=Privilege,json=privilege,proto3" json:"Privilege,omitempty"`
	// IsServiceAccount indicates whether the identity is a service account.
	IsServiceAccount bool `protobuf:"varint,3,opt,name=IsServiceAccount,json=service_account,proto3" json:"IsServiceAccount,omitempty"`
	// contains filtered or unexported fields
}

type CreateKeyRequest struct {
	Name string `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	// Type is the type of the created key. If not set, the KMS server picks
	// a key type.
	Type string `protobuf:"bytes,2,opt,name=Type,json=type,proto3" json:"Type,omitempty"`
	// AddVersion indicates whether a new key version is created.
	AddVersion bool `protobuf:"varint,3,opt,name=AddVersion,json=add_version,proto3" json:"AddVersion,omitempty"`
	// contains filtered or unexported fields
}

type CreatePolicyRequest struct {
	Name  string              `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	Allow map[string]*RuleSet `` /* 162-byte string literal not displayed */
	Deny  map[string]*RuleSet `` /* 159-byte string literal not displayed */
	// contains filtered or unexported fields
}

type DecryptRequest struct {
	Name string `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	// Version identifies the key version within the key ring that should be
	// used to decrypt the ciphertext. Must not be zero.
	Version uint32 `protobuf:"varint,2,opt,name=Version,json=version,proto3" json:"Version,omitempty"`
	// Ciphertext is the encrypted message that gets decrypted.
	Ciphertext []byte `protobuf:"bytes,3,opt,name=Ciphertext,json=ciphertext,proto3" json:"Ciphertext,omitempty"`
	// AssociatedData is additional data that has been crypto. bound to the
	// ciphertext.
	AssociatedData []byte `protobuf:"bytes,4,opt,name=AssociatedData,json=associated_data,proto3" json:"AssociatedData,omitempty"`
	// contains filtered or unexported fields
}

type DecryptResponse struct {

	// Plaintext is the decrypted message.
	Plaintext []byte `protobuf:"bytes,1,opt,name=Plaintext,json=plaintext,proto3" json:"Plaintext,omitempty"`
	// contains filtered or unexported fields
}

type DeleteEnclaveRequest struct {
	Name string `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	// contains filtered or unexported fields
}

type DeleteIdentityRequest struct {
	Identity string `protobuf:"bytes,1,opt,name=Identity,json=identity,proto3" json:"Identity,omitempty"`
	// contains filtered or unexported fields
}

type DeleteKeyRequest struct {
	Name string `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	// Version identifies the key version within the key ring to remove.
	// If zero, the latest key version is removed.
	Version uint32 `protobuf:"varint,2,opt,name=Version,json=version,proto3" json:"Version,omitempty"`
	// AllVersions indicates whether all key versions should be removed.
	AllVersions bool `protobuf:"varint,3,opt,name=AllVersions,json=all_versions,proto3" json:"AllVersions,omitempty"`
	// contains filtered or unexported fields
}

type DeletePolicyRequest struct {
	Name string `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	// contains filtered or unexported fields
}

type EditClusterRequest struct {
	Host string `protobuf:"bytes,1,opt,name=Host,json=host,proto3" json:"Host,omitempty"`
	// RemoveIDs is a list of KMS server IDs that are removed from
	// the cluster definition of the KMS server that receives the
	// request.
	RemoveIDs []uint32 `protobuf:"varint,2,rep,packed,name=RemoveIDs,json=remove,proto3" json:"RemoveIDs,omitempty"`
	// contains filtered or unexported fields
}

type EnclaveStatusRequest struct {
	Name string `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	// contains filtered or unexported fields
}

type EnclaveStatusResponse struct {

	// Name is the name of the enclave.
	Name string `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	// CreatedAt is the point in time when this enclave got created.
	CreatedAt *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=CreatedAt,json=created_at,proto3" json:"CreatedAt,omitempty"`
	// CreatedBy is the identity that created this enclave.
	CreatedBy string `protobuf:"bytes,3,opt,name=CreatedBy,json=created_by,proto3" json:"CreatedBy,omitempty"`
	// contains filtered or unexported fields
}

type EncryptRequest struct {
	Name string `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	// Version identifies the key version within the key ring used to encrypt
	// the plaintext. If zero, the latest key version is used.
	Version uint32 `protobuf:"varint,2,opt,name=Version,json=version,proto3" json:"Version,omitempty"`
	// Plaintext is the plain message that is encrypted.
	Plaintext []byte `protobuf:"bytes,3,opt,name=Plaintext,json=plaintext,proto3" json:"Plaintext,omitempty"`
	// AssociatedData is additional data that is not encrypted but crypto. bound
	// to the ciphertext. The same associated data must be provided when decrypting
	// the ciphertext.
	//
	// Associated data should describe the context of the plaintext data. For example,
	// the name of the file that gets encrypted.
	AssociatedData []byte `protobuf:"bytes,4,opt,name=AssociatedData,json=associated_data,proto3" json:"AssociatedData,omitempty"`
	// contains filtered or unexported fields
}

type EncryptResponse struct {

	// Version identifies the particular key within a key ring used to encrypt
	// the message.
	Version uint32 `protobuf:"varint,1,opt,name=Version,json=version,proto3" json:"Version,omitempty"`
	// Ciphertext is the encrypted message.
	Ciphertext []byte `protobuf:"bytes,2,opt,name=Ciphertext,json=ciphertext,proto3" json:"Ciphertext,omitempty"`
	// contains filtered or unexported fields
}

type ErrResponse struct {
	Message string `protobuf:"bytes,1,opt,name=Message,json=message,proto3" json:"Message,omitempty"`
	// contains filtered or unexported fields
}

type GenerateKeyRequest struct {
	Name string `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	// Version identifies the key version within the key ring used to generate
	// the data encryption key. If zero, the latest key version is used.
	Version uint32 `protobuf:"varint,2,opt,name=Version,json=version,proto3" json:"Version,omitempty"`
	// AssociatedData is additional data that is not encrypted but crypto. bound
	// to the ciphertext of the data encryption key. The same associated data must
	// be provided when decrypting the ciphertext.
	//
	// Associated data should describe the context within the data encryption key
	// is used. For example, the name of the file that gets encrypted with the
	// data encryption key.
	AssociatedData []byte `protobuf:"bytes,3,opt,name=AssociatedData,json=associated_data,proto3" json:"AssociatedData,omitempty"`
	// Length is the length of the generated plaintext data encryption key in bytes.
	// At most 1024 (8192 bits). If zero, defaults to 32 (256 bits).
	Length uint32 `protobuf:"varint,4,opt,name=Length,json=length,proto3" json:"Length,omitempty"`
	// contains filtered or unexported fields
}

type GenerateKeyResponse struct {

	// Version identifies the particular key within a key ring used to generate
	// and encrypt this data encryption key.
	Version uint32 `protobuf:"varint,1,opt,name=Version,json=version,proto3" json:"Version,omitempty"`
	// Plaintext is the plain data encryption key. It may be used by clients to
	// perform crypto. operations.
	Plaintext []byte `protobuf:"bytes,2,opt,name=Plaintext,json=plaintext,proto3" json:"Plaintext,omitempty"`
	// Ciphertext is the encrypted data encryption key. Clients should store it
	// to obtain the plain data encryption key in the future again.
	Ciphertext []byte `protobuf:"bytes,3,opt,name=Ciphertext,json=ciphertext,proto3" json:"Ciphertext,omitempty"`
	// contains filtered or unexported fields
}

type IdentityRequest struct {
	Identity string `protobuf:"bytes,1,opt,name=Identity,json=identity,proto3" json:"Identity,omitempty"`
	// contains filtered or unexported fields
}

type IdentityResponse struct {
	Identity  string `protobuf:"bytes,1,opt,name=Identity,json=identity,proto3" json:"Identity,omitempty"`
	Privilege uint32 `protobuf:"varint,2,opt,name=Privilege,json=privilege,proto3" json:"Privilege,omitempty"`
	Policy    string `protobuf:"bytes,3,opt,name=Policy,json=policy,proto3" json:"Policy,omitempty"`
	// CreatedAt is the point in time when this identity got created.
	CreatedAt *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=CreatedAt,json=created_at,proto3" json:"CreatedAt,omitempty"`
	// CreatedBy is the identity that created this identity.
	CreatedBy        string   `protobuf:"bytes,5,opt,name=CreatedBy,json=created_by,proto3" json:"CreatedBy,omitempty"`
	IsServiceAccount bool     `protobuf:"varint,6,opt,name=IsServiceAccount,json=is_service_account,proto3" json:"IsServiceAccount,omitempty"`
	ServiceAccounts  []string `protobuf:"bytes,7,rep,name=ServiceAccounts,json=service_accounts,proto3" json:"ServiceAccounts,omitempty"`
	// contains filtered or unexported fields
}

type ImportKeyRequest struct {
	Name string `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	// Type is the type of the created key. If not set, the KMS server picks
	// a key type.
	Type string `protobuf:"bytes,2,opt,name=Type,json=type,proto3" json:"Type,omitempty"`
	Key  []byte `protobuf:"bytes,3,opt,name=Key,json=key,proto3" json:"Key,omitempty"`
	// contains filtered or unexported fields
}

type KeyStatusRequest struct {
	Name string `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	// Version identifies the key version within the key ring.
	// If zero, refers to the latest, most recent, key version.
	Version uint32 `protobuf:"varint,2,opt,name=Version,json=version,proto3" json:"Version,omitempty"`
	// contains filtered or unexported fields
}

type KeyStatusResponse struct {

	// Name is the name of the key.
	Name string `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	// Version is the this key's version within the key ring.
	Version uint32 `protobuf:"varint,2,opt,name=Version,json=version,proto3" json:"Version,omitempty"`
	// The is the key type. For example, "AES256".
	Type string `protobuf:"bytes,3,opt,name=Type,json=type,proto3" json:"Type,omitempty"`
	// CreatedAt is the point in time when this key version got created.
	CreatedAt *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=CreatedAt,json=created_at,proto3" json:"CreatedAt,omitempty"`
	// CreatedBy is the identity that created the key version.
	CreatedBy string `protobuf:"bytes,5,opt,name=CreatedBy,json=created_by,proto3" json:"CreatedBy,omitempty"`
	// contains filtered or unexported fields
}

type ListEnclavesResponse struct {
	Enclaves   []*EnclaveStatusResponse `protobuf:"bytes,1,rep,name=Enclaves,json=enclaves,proto3" json:"Enclaves,omitempty"`
	ContinueAt string                   `protobuf:"bytes,2,opt,name=ContinueAt,json=continue_at,proto3" json:"ContinueAt,omitempty"`
	// contains filtered or unexported fields
}

type ListIdentitiesResponse struct {
	Identities []*IdentityResponse `protobuf:"bytes,1,rep,name=Identities,json=identities,proto3" json:"Identities,omitempty"`
	ContinueAt string              `protobuf:"bytes,2,opt,name=ContinueAt,json=continue_at,proto3" json:"ContinueAt,omitempty"`
	// contains filtered or unexported fields
}

type ListKeysResponse struct {
	Keys       []*KeyStatusResponse `protobuf:"bytes,1,rep,name=Keys,json=keys,proto3" json:"Keys,omitempty"`
	ContinueAt string               `protobuf:"bytes,2,opt,name=ContinueAt,json=continue_at,proto3" json:"ContinueAt,omitempty"`
	// contains filtered or unexported fields
}

type ListPoliciesResponse struct {
	Policies   []*PolicyStatusResponse `protobuf:"bytes,1,rep,name=Policies,json=policies,proto3" json:"Policies,omitempty"`
	ContinueAt string                  `protobuf:"bytes,2,opt,name=ContinueAt,json=continue_at,proto3" json:"ContinueAt,omitempty"`
	// contains filtered or unexported fields
}

type ListRequest struct {

	// Prefix is an optional prefix to start the listing from.
	// For example, an application may want to list all keys
	// starting with "foo", like "foo-1" and "foobar".
	//
	// Only elements with a name that match this prefix are
	// returned by list operations. An empty prefix matches
	// any name.
	Prefix string `protobuf:"bytes,1,opt,name=Prefix,json=prefix,proto3" json:"Prefix,omitempty"`
	// ContinueAt specifies an element name from where to
	// continue a list operation. When listing a lot of
	// elements, not all may fit into a single ListResponse.
	// Applications can paginate through a long list of
	// elements by setting a ContinueAt value.
	//
	// ContinueAt must match an element's name exactly.
	// Using a ContinueAt value that does not start with
	// the Prefix will lead to an empty listing result.
	ContinueAt string `protobuf:"bytes,2,opt,name=ContinueAt,json=continue_at,proto3" json:"ContinueAt,omitempty"`
	// Limit limits the number of elements returned by
	// a list operation. If <= 0, no limit is specified
	// and the server limits listing results to a
	// reasonable max. size.
	Limit uint32 `protobuf:"varint,3,opt,name=Limit,json=limit,proto3" json:"Limit,omitempty"`
	// contains filtered or unexported fields
}

type Marshaler[T proto.Message] interface {
	MarshalPB(T) error
}

type Pointer[M any] interface {
	proto.Message
	*M // Anything implementing Pointer must also be a pointer type of M
}

type PolicyRequest struct {
	Name string `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	// contains filtered or unexported fields
}

type PolicyResponse struct {

	// Name is the name of the policy.
	Name string `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	// Allow contains a set of API path patterns and corresponding policy rules.
	// Requests that match at least one path, but not any deny pattern, and
	// pass the corresponding policy rule are accepted by the server.
	Allow map[string]*RuleSet `` /* 162-byte string literal not displayed */
	// Deny contains a set of API path patterns and corresponding policy rules.
	// Requests that match at least one path and pass the corresponding policy
	// rule are rejected by the server.
	Deny map[string]*RuleSet `` /* 159-byte string literal not displayed */
	// CreatedAt is the point in time when this policy got created.
	CreatedAt *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=CreatedAt,json=created_at,proto3" json:"CreatedAt,omitempty"`
	// CreatedBy is the identity that created the policy.
	CreatedBy string `protobuf:"bytes,5,opt,name=CreatedBy,json=created_by,proto3" json:"CreatedBy,omitempty"`
	// contains filtered or unexported fields
}

type PolicyStatusResponse struct {

	// Name is the name of the policy.
	Name string `protobuf:"bytes,1,opt,name=Name,json=name,proto3" json:"Name,omitempty"`
	// CreatedAt is the point in time when this policy got created.
	CreatedAt *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=CreatedAt,json=created_at,proto3" json:"CreatedAt,omitempty"`
	// CreatedBy is the identity that created the policy.
	CreatedBy string `protobuf:"bytes,5,opt,name=CreatedBy,json=created_by,proto3" json:"CreatedBy,omitempty"`
	// contains filtered or unexported fields
}

type RemoveClusterNodeRequest struct {
	Host string `protobuf:"bytes,1,opt,name=Host,json=host,proto3" json:"Host,omitempty"`
	// contains filtered or unexported fields
}

type Rule struct {
	// contains filtered or unexported fields
}

type RuleSet struct {
	Rules map[string]*Rule `` /* 162-byte string literal not displayed */
	// contains filtered or unexported fields
}

type ServerStatusResponse struct {

	// Version is the version of the KMS server. It's the timestamp of
	// the latest commit formatted as 'yyyy-mm-ddThh-mm-ssZ'. For example,
	// "2023-12-01T16-06-52Z"
	Version string `protobuf:"bytes,1,opt,name=Version,json=version,proto3" json:"Version,omitempty"`
	// APIVersion is the API version supported by the KMS server.
	// For example, "v1".
	APIVersion string `protobuf:"bytes,2,opt,name=APIVersion,json=api_version,proto3" json:"APIVersion,omitempty"`
	// Host is the KMS server host or host:port.
	Host string `protobuf:"bytes,3,opt,name=Host,json=host,proto3" json:"Host,omitempty"`
	// UpTime is the amount of time the KMS server is up and running.
	UpTime *durationpb.Duration `protobuf:"bytes,4,opt,name=UpTime,json=uptime,proto3" json:"UpTime,omitempty"`
	// Role is the current role the KMS server node has within the cluster.
	// Either, "Leader", "Follower" or "Candidate".
	Role string `protobuf:"bytes,5,opt,name=Role,json=role,proto3" json:"Role,omitempty"`
	// Commit is the number of state changes applied to this KMS server.
	Commit uint64 `protobuf:"varint,6,opt,name=Commit,json=commit,proto3" json:"Commit,omitempty"`
	// Nodes is a list of KMS server nodes within the KMS cluster as a map
	// of node IDs to KMS server addresses of the form 'host' or 'host:port'.
	Nodes map[uint32]string `` /* 163-byte string literal not displayed */
	// ID is the node ID of this KMS server. It only changes if the node
	// joins a cluster.
	ID uint32 `protobuf:"varint,8,opt,name=ID,json=node_id,proto3" json:"ID,omitempty"`
	// LeaderID is the ID of the current cluster leader or negative if
	// the cluster has no leader.
	LeaderID int64 `protobuf:"zigzag64,9,opt,name=LeaderID,json=leader_id,proto3" json:"LeaderID,omitempty"`
	// LastHeartbeat is the duration since the KMS server has sent or received
	// a heartbeat. As long as there is a cluster leader, it should be lower
	// than the ElectionTimeout.
	LastHeartbeat *durationpb.Duration `protobuf:"bytes,10,opt,name=LastHeartbeat,json=last_heartbeat,proto3" json:"LastHeartbeat,omitempty"`
	// HeartbeatInterval defines the frequency in which this KMS server, as cluster
	// leader, sends heartbeats to its follower nodes. All nodes within a cluster
	// should use the same heartbeat interval.
	HeartbeatInterval *durationpb.Duration `protobuf:"bytes,11,opt,name=HeartbeatInterval,json=heartbeat_interval,proto3" json:"HeartbeatInterval,omitempty"`
	// ElectionTimeout defines how long a KMS server node waits for heartbeats before
	// it considers the cluster leaders as down and starts a leader election to become
	// the cluster leader itself.
	// Each cluster node should have a slightly different election timeout to avoid
	// spliting votes. Typically, base election timeout + random jitter. The average
	// or base election timeout of all cluster nodes should be balanced with the
	// HeartbeatInterval to prevent nodes from starting elections even though a leader
	// is present. A reasonable default may be ElectionTimeout = 3 * HeartbeatInterval.
	ElectionTimeout *durationpb.Duration `protobuf:"bytes,12,opt,name=ElectionTimeout,json=election_timeout,proto3" json:"ElectionTimeout,omitempty"`
	// OS identifies the operating system the KMS server is running on.
	// For example, "linux" or "darwin".
	OS string `protobuf:"bytes,13,opt,name=OS,json=sys_os,proto3" json:"OS,omitempty"`
	// Arch is the CPU architecture of the KMS server. For example, "amd64".
	Arch string `protobuf:"bytes,14,opt,name=Arch,json=sys_cpu_arch,proto3" json:"Arch,omitempty"`
	// CPUs is the number of logical CPUs that can execite the KMS server process.
	// However, the KMS server may not use all of these CPUs. It might be limited
	// to fewer CPUs.
	CPUs uint32 `protobuf:"varint,15,opt,name=CPUs,json=sys_cpu_num,proto3" json:"CPUs,omitempty"`
	// UsableCPUs is the number of CPUs actually used by the KMS server process.
	// Unless the KMS server has been limited to fewer CPUs, equal to CPUs field.
	UsableCPUs uint32 `protobuf:"varint,16,opt,name=UsableCPUs,json=sys_cpu_used,proto3" json:"UsableCPUs,omitempty"`
	// HeapMemInUse is the amount of heap memory currently occupied by the KMS server.
	// The total amount of memory used by the KMS server process is HeapMemInUse +
	// StackMemInUse.
	HeapMemInUse uint64 `protobuf:"varint,17,opt,name=HeapMemInUse,json=sys_mem_heap_used,proto3" json:"HeapMemInUse,omitempty"`
	// StackMemInUse is the amount of stack memory currently occupied by the KMS server.
	// The total amount of memory used by the KMS server process is HeapMemInUse +
	// StackMemInUse.
	StackMemInUse uint64 `protobuf:"varint,18,opt,name=StackMemInUse,json=sys_mem_stack_used,proto3" json:"StackMemInUse,omitempty"`
	// contains filtered or unexported fields
}

type Unmarshaler[T proto.Message] interface {
	UnmarshalPB(T) error
}

type VersionResponse struct {

	// Version is the version of the KMS server. It's the timestamp of
	// the latest commit formatted as 'yyyy-mm-ddThh-mm-ssZ'. For example,
	// "2023-12-01T16-06-52Z"
	Version string `protobuf:"bytes,1,opt,name=Version,json=version,proto3" json:"Version,omitempty"`
	// Commit is the commit ID of the most latest code change of the KMS
	// server.
	Commit string `protobuf:"bytes,2,opt,name=Commit,json=commit,proto3" json:"Commit,omitempty"`
	// APIVersion is the API version supported by the KMS server.
	// For example, "v1".
	APIVersion string `protobuf:"bytes,3,opt,name=APIVersion,json=api_version,proto3" json:"APIVersion,omitempty"`
	// Host is the KMS server host or host:port.
	Host string `protobuf:"bytes,4,opt,name=Host,json=host,proto3" json:"Host,omitempty"`
	// contains filtered or unexported fields
}