credentialcomposerv1

type AttributeTypeAndValue struct {

	// The OID of the attribute (e.g. "1.2.3.4").
	Oid string `protobuf:"bytes,1,opt,name=oid,proto3" json:"oid,omitempty"`
	// The value of the attribute. Only UTF-8 strings are currently supported.
	// this field may be encapsulated in a oneof at a later point.
	StringValue string `protobuf:"bytes,2,opt,name=string_value,json=stringValue,proto3" json:"string_value,omitempty"`
	// contains filtered or unexported fields
}

type ComposeAgentX509SVIDRequest struct {

	// The attributes for the agent X509-SVID. To maintain forward
	// compatibility with future attribute field additions, these attributes
	// SHOULD be mutated and used to populate the attributes field in the
	// ComposeAgentX509SVIDResponse.
	Attributes *X509SVIDAttributes `protobuf:"bytes,1,opt,name=attributes,proto3" json:"attributes,omitempty"`
	// The SPIFFE ID of the agent.
	SpiffeId string `protobuf:"bytes,2,opt,name=spiffe_id,json=spiffeId,proto3" json:"spiffe_id,omitempty"`
	// PKIX encoded public key of the agent.
	PublicKey []byte `protobuf:"bytes,3,opt,name=public_key,json=publicKey,proto3" json:"public_key,omitempty"`
	// contains filtered or unexported fields
}

type ComposeAgentX509SVIDResponse struct {

	// The attributes for the agent X509-SVID. To maintain forward
	// compatibility with future attribute field additions, these attributes
	// SHOULD be populated with the mutated attributes field in the
	// ComposeAgentX509SVIDRequest. If this field is not included in the
	// response, the original attributes sent in the request will be used.
	Attributes *X509SVIDAttributes `protobuf:"bytes,1,opt,name=attributes,proto3" json:"attributes,omitempty"`
	// contains filtered or unexported fields
}

type ComposeServerX509CARequest struct {

	// The attributes for the server X509 CA. To maintain forward compatibility
	// with future attribute field additions, these attributes SHOULD be
	// mutated and used to populate the attributes field in the
	// ComposeServerX509CAResponse.
	Attributes *X509CAAttributes `protobuf:"bytes,1,opt,name=attributes,proto3" json:"attributes,omitempty"`
	// contains filtered or unexported fields
}

type ComposeServerX509CAResponse struct {

	// The attributes for the server X509 CA. To maintain forward compatibility
	// with future attribute field additions, these attributes SHOULD be
	// populated with the mutated attributes field in the
	// ComposeServerX509CARequest. If this field is not included in the
	// response, the original attributes sent in the request will be used.
	Attributes *X509CAAttributes `protobuf:"bytes,1,opt,name=attributes,proto3" json:"attributes,omitempty"`
	// contains filtered or unexported fields
}

type ComposeServerX509SVIDRequest struct {

	// The attributes for the server X509-SVID. To maintain forward
	// compatibility with future attribute field additions, these attributes
	// SHOULD be mutated and used to populate the attributes field in the
	// ComposeServerX509SVIDResponse.
	Attributes *X509SVIDAttributes `protobuf:"bytes,1,opt,name=attributes,proto3" json:"attributes,omitempty"`
	// contains filtered or unexported fields
}

type ComposeServerX509SVIDResponse struct {

	// The attributes for the server X509-SVID. To maintain forward
	// compatibility with future attribute field additions, these attributes
	// SHOULD be populated with the mutated attributes field in the
	// ComposeServerX509SVIDRequest. If this field is not included in the
	// response, the original attributes sent in the request will be used.
	Attributes *X509SVIDAttributes `protobuf:"bytes,1,opt,name=attributes,proto3" json:"attributes,omitempty"`
	// contains filtered or unexported fields
}

type ComposeWorkloadJWTSVIDRequest struct {

	// The attributes for the workload JWT-SVID. To maintain forward
	// compatibility with future attribute field additions, these attributes
	// SHOULD be mutated and used to populate the attributes field in the
	// ComposeWorkloadJWTSVIDResponse.
	Attributes *JWTSVIDAttributes `protobuf:"bytes,1,opt,name=attributes,proto3" json:"attributes,omitempty"`
	// The SPIFFE ID of the workload.
	SpiffeId string `protobuf:"bytes,2,opt,name=spiffe_id,json=spiffeId,proto3" json:"spiffe_id,omitempty"`
	// contains filtered or unexported fields
}

type ComposeWorkloadJWTSVIDResponse struct {

	// The attributes for the workload JWT-SVID. To maintain forward
	// compatibility with future attribute field additions, these attributes
	// SHOULD be populated with the mutated attributes field in the
	// ComposeWorkloadJWTSVIDRequest. If this field is not included in the
	// response, the original attributes sent in the request will be used.
	Attributes *JWTSVIDAttributes `protobuf:"bytes,1,opt,name=attributes,proto3" json:"attributes,omitempty"`
	// contains filtered or unexported fields
}

type ComposeWorkloadX509SVIDRequest struct {

	// The attributes for the workload X509-SVID. To maintain forward
	// compatibility with future attribute field additions, these attributes
	// SHOULD be mutated and used to populate the attributes field in the
	// ComposeWorkloadX509SVIDResponse.
	Attributes *X509SVIDAttributes `protobuf:"bytes,1,opt,name=attributes,proto3" json:"attributes,omitempty"`
	// The SPIFFE ID of the workload.
	SpiffeId string `protobuf:"bytes,2,opt,name=spiffe_id,json=spiffeId,proto3" json:"spiffe_id,omitempty"`
	// PKIX encoded public key of the workload.
	PublicKey []byte `protobuf:"bytes,3,opt,name=public_key,json=publicKey,proto3" json:"public_key,omitempty"`
	// contains filtered or unexported fields
}

type ComposeWorkloadX509SVIDResponse struct {

	// The attributes for the workload X509-SVID. To maintain forward
	// compatibility with future attribute field additions, these attributes
	// SHOULD be populated with the mutated attributes field in the
	// ComposeWorkloadX509SVIDRequest. If this message is not included in the
	// response, the original attributes sent in the request will be used.
	Attributes *X509SVIDAttributes `protobuf:"bytes,1,opt,name=attributes,proto3" json:"attributes,omitempty"`
	// contains filtered or unexported fields
}

type CredentialComposerClient interface {
	// Composes the SPIRE Server X509 CA. The server will supply the default
	// attributes it will apply to the CA. If the plugin returns an empty
	// response or NOT_IMPLEMENTED, the server will apply the default
	// attributes. Otherwise the returned attributes are used. If a CA is
	// produced that does not conform to the SPIFFE X509-SVID specification for
	// signing certificates, it will be rejected.
	ComposeServerX509CA(ctx context.Context, in *ComposeServerX509CARequest, opts ...grpc.CallOption) (*ComposeServerX509CAResponse, error)
	// Composes the SPIRE Server X509-SVID. The server will supply the default
	// attributes it will apply to the server X509-SVID. If the plugin returns
	// an empty response or NOT_IMPLEMENTED, the server will apply the default
	// attributes. Otherwise the returned attributes are used. If an X509-SVID
	// is produced that does not conform to the SPIFFE X509-SVID specification
	// for leaf certificates, it will be rejected. This function cannot be used
	// to modify the SPIFFE ID of the X509-SVID.
	ComposeServerX509SVID(ctx context.Context, in *ComposeServerX509SVIDRequest, opts ...grpc.CallOption) (*ComposeServerX509SVIDResponse, error)
	// Composes the SPIRE Agent X509-SVID. The server will supply the default
	// attributes it will apply to the agent X509-SVID. If the plugin returns
	// an empty response or NOT_IMPLEMENTED, the server will apply the default
	// attributes. Otherwise the returned attributes are used. If an X509-SVID
	// is produced that does not conform to the SPIFFE X509-SVID specification
	// for leaf certificates, it will be rejected. This function cannot be used
	// to modify the SPIFFE ID of the X509-SVID.
	ComposeAgentX509SVID(ctx context.Context, in *ComposeAgentX509SVIDRequest, opts ...grpc.CallOption) (*ComposeAgentX509SVIDResponse, error)
	// Composes workload X509-SVIDs. The server will supply the default
	// attributes it will apply to the workload X509-SVID. If the plugin
	// returns an empty response or NOT_IMPLEMENTED, the server will apply the
	// default attributes. Otherwise the returned attributes are used. If an
	// X509-SVID is produced that does not conform to the SPIFFE X509-SVID
	// specification for leaf certificates, it will be rejected. This function
	// cannot be used to modify the SPIFFE ID of the X509-SVID.
	ComposeWorkloadX509SVID(ctx context.Context, in *ComposeWorkloadX509SVIDRequest, opts ...grpc.CallOption) (*ComposeWorkloadX509SVIDResponse, error)
	// Composes workload JWT-SVIDs. The server will supply the default
	// attributes it will apply to the workload JWT-SVID. If the plugin
	// returns an empty response or NOT_IMPLEMENTED, the server will apply the
	// default attributes. Otherwise the returned attributes are used. If a
	// JWT-SVID is produced that does not conform to the SPIFFE JWT-SVID
	// specification, it will be rejected. This function cannot be used to
	// modify the SPIFFE ID of the JWT-SVID.
	ComposeWorkloadJWTSVID(ctx context.Context, in *ComposeWorkloadJWTSVIDRequest, opts ...grpc.CallOption) (*ComposeWorkloadJWTSVIDResponse, error)
}

type CredentialComposerPluginClient struct {
	CredentialComposerClient
}

type CredentialComposerServer interface {
	// Composes the SPIRE Server X509 CA. The server will supply the default
	// attributes it will apply to the CA. If the plugin returns an empty
	// response or NOT_IMPLEMENTED, the server will apply the default
	// attributes. Otherwise the returned attributes are used. If a CA is
	// produced that does not conform to the SPIFFE X509-SVID specification for
	// signing certificates, it will be rejected.
	ComposeServerX509CA(context.Context, *ComposeServerX509CARequest) (*ComposeServerX509CAResponse, error)
	// Composes the SPIRE Server X509-SVID. The server will supply the default
	// attributes it will apply to the server X509-SVID. If the plugin returns
	// an empty response or NOT_IMPLEMENTED, the server will apply the default
	// attributes. Otherwise the returned attributes are used. If an X509-SVID
	// is produced that does not conform to the SPIFFE X509-SVID specification
	// for leaf certificates, it will be rejected. This function cannot be used
	// to modify the SPIFFE ID of the X509-SVID.
	ComposeServerX509SVID(context.Context, *ComposeServerX509SVIDRequest) (*ComposeServerX509SVIDResponse, error)
	// Composes the SPIRE Agent X509-SVID. The server will supply the default
	// attributes it will apply to the agent X509-SVID. If the plugin returns
	// an empty response or NOT_IMPLEMENTED, the server will apply the default
	// attributes. Otherwise the returned attributes are used. If an X509-SVID
	// is produced that does not conform to the SPIFFE X509-SVID specification
	// for leaf certificates, it will be rejected. This function cannot be used
	// to modify the SPIFFE ID of the X509-SVID.
	ComposeAgentX509SVID(context.Context, *ComposeAgentX509SVIDRequest) (*ComposeAgentX509SVIDResponse, error)
	// Composes workload X509-SVIDs. The server will supply the default
	// attributes it will apply to the workload X509-SVID. If the plugin
	// returns an empty response or NOT_IMPLEMENTED, the server will apply the
	// default attributes. Otherwise the returned attributes are used. If an
	// X509-SVID is produced that does not conform to the SPIFFE X509-SVID
	// specification for leaf certificates, it will be rejected. This function
	// cannot be used to modify the SPIFFE ID of the X509-SVID.
	ComposeWorkloadX509SVID(context.Context, *ComposeWorkloadX509SVIDRequest) (*ComposeWorkloadX509SVIDResponse, error)
	// Composes workload JWT-SVIDs. The server will supply the default
	// attributes it will apply to the workload JWT-SVID. If the plugin
	// returns an empty response or NOT_IMPLEMENTED, the server will apply the
	// default attributes. Otherwise the returned attributes are used. If a
	// JWT-SVID is produced that does not conform to the SPIFFE JWT-SVID
	// specification, it will be rejected. This function cannot be used to
	// modify the SPIFFE ID of the JWT-SVID.
	ComposeWorkloadJWTSVID(context.Context, *ComposeWorkloadJWTSVIDRequest) (*ComposeWorkloadJWTSVIDResponse, error)
	// contains filtered or unexported methods
}

type DistinguishedName struct {

	// Zero or more country designations.
	Country []string `protobuf:"bytes,1,rep,name=country,proto3" json:"country,omitempty"`
	// Zero or more organization designations.
	Organization []string `protobuf:"bytes,2,rep,name=organization,proto3" json:"organization,omitempty"`
	// Zero or more organizational unit designations.
	OrganizationalUnit []string `protobuf:"bytes,3,rep,name=organizational_unit,json=organizationalUnit,proto3" json:"organizational_unit,omitempty"`
	// Zero or more locality designations.
	Locality []string `protobuf:"bytes,4,rep,name=locality,proto3" json:"locality,omitempty"`
	// Zero or more province designations.
	Province []string `protobuf:"bytes,5,rep,name=province,proto3" json:"province,omitempty"`
	// Zero or more street address designations.
	StreetAddress []string `protobuf:"bytes,6,rep,name=street_address,json=streetAddress,proto3" json:"street_address,omitempty"`
	// Zero or more postal code designations.
	PostalCode []string `protobuf:"bytes,7,rep,name=postal_code,json=postalCode,proto3" json:"postal_code,omitempty"`
	// The serial number designation. The attribute is only set if this field
	// is non-empty.
	SerialNumber string `protobuf:"bytes,8,opt,name=serial_number,json=serialNumber,proto3" json:"serial_number,omitempty"`
	// The common name designation. The attribute is only set if this field is
	// non-empty.
	CommonName string `protobuf:"bytes,9,opt,name=common_name,json=commonName,proto3" json:"common_name,omitempty"`
	// Extra names, determined by oid and value, to be added to the
	// distinguished names. This field is to support names not covered by the
	// DistinguishedName message. It will override values specified in other
	// fields in the DistinguishedName if the attributes overlap.
	ExtraNames []*AttributeTypeAndValue `protobuf:"bytes,10,rep,name=extra_names,json=extraNames,proto3" json:"extra_names,omitempty"`
	// contains filtered or unexported fields
}

type JWTSVIDAttributes struct {

	// The JWT-SVID claims. Returned attributes must contain all of the
	// claims required by the JWT-SVID specification:
	//
	// https://github.com/spiffe/spiffe/blob/main/standards/JWT-SVID.md
	//
	// The subject claim (i.e. SPIFFE ID) cannot be overriden.
	Claims *structpb.Struct `protobuf:"bytes,1,opt,name=claims,proto3" json:"claims,omitempty"`
	// contains filtered or unexported fields
}

type UnimplementedCredentialComposerServer struct {
}

type UnsafeCredentialComposerServer interface {
	// contains filtered or unexported methods
}

type X509CAAttributes struct {

	// The subject of the X509 CA.
	Subject *DistinguishedName `protobuf:"bytes,1,opt,name=subject,proto3" json:"subject,omitempty"`
	// Zero or more policy identifiers (OIDs) to apply to the CA.
	PolicyIdentifiers []string `protobuf:"bytes,2,rep,name=policy_identifiers,json=policyIdentifiers,proto3" json:"policy_identifiers,omitempty"`
	// Zero or more extensions to apply to the X509 CA. These will override
	// any extensions otherwise added by the other fields.
	ExtraExtensions []*X509Extension `protobuf:"bytes,3,rep,name=extra_extensions,json=extraExtensions,proto3" json:"extra_extensions,omitempty"`
	// contains filtered or unexported fields
}

type X509Extension struct {

	// The OID of the X.509 extension (e.g. "1.2.3.4")
	Oid string `protobuf:"bytes,1,opt,name=oid,proto3" json:"oid,omitempty"`
	// Opaque value of the extension. No validity checking is performed on
	// this value. Plugin implementors must ensure they are providing well
	// formed values for the given extension OID.
	Value []byte `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	// Whether or not the extension is critical, i.e., must be
	// handled/understood by verifiers or not.
	Critical bool `protobuf:"varint,3,opt,name=critical,proto3" json:"critical,omitempty"`
	// contains filtered or unexported fields
}

type X509SVIDAttributes struct {

	// The subject of the X509-SVID.
	Subject *DistinguishedName `protobuf:"bytes,1,opt,name=subject,proto3" json:"subject,omitempty"`
	// Zero or more DNS SANs to apply to the X509-SVID.
	DnsSans []string `protobuf:"bytes,2,rep,name=dns_sans,json=dnsSans,proto3" json:"dns_sans,omitempty"`
	// Zero or more extensions to apply to the X509-SVID . These will override
	// any extensions otherwise added by the other fields. This field cannot
	// be used to change the URI SAN of the X509-SVID (i.e. the SPIFFE ID).
	ExtraExtensions []*X509Extension `protobuf:"bytes,3,rep,name=extra_extensions,json=extraExtensions,proto3" json:"extra_extensions,omitempty"`
	// contains filtered or unexported fields
}