security

type ApiSecurity struct {

	// If you have authentication enabled, are accessing Spinnaker remotely, and
	// are logging in from sources other than the UI, provide a regex matching all
	// URLs authentication redirects may come from.
	CorsAccessPattern string `protobuf:"bytes,1,opt,name=corsAccessPattern,proto3" json:"corsAccessPattern,omitempty"`
	// If you want the API server to do SSL termination, it must be enabled and
	// configured here. If you are doing your own SSL termination, leave this disabled.
	Ssl *ApiSsl `protobuf:"bytes,2,opt,name=ssl,proto3" json:"ssl,omitempty"`
	// If you are accessing the API server remotely, provide the full base URL of
	// whatever proxy or load balancer is fronting the API requests
	OverrideBaseUrl string `protobuf:"bytes,3,opt,name=overrideBaseUrl,proto3" json:"overrideBaseUrl,omitempty"`
	// contains filtered or unexported fields
}

type ApiSsl struct {

	// Whether SSL is enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Name of your keystore entry as generated with your keytool.
	KeyAlias string `protobuf:"bytes,2,opt,name=keyAlias,proto3" json:"keyAlias,omitempty"`
	// Path to the keystore holding your security certificates.
	KeyStore string `protobuf:"bytes,3,opt,name=keyStore,proto3" json:"keyStore,omitempty"`
	// The type of your keystore. Examples include JKS, and PKCS12.
	KeyStoreType string `protobuf:"bytes,4,opt,name=keyStoreType,proto3" json:"keyStoreType,omitempty"`
	// The password to unlock your keystore. Due to a limitation in Tomcat, this
	// must match your key's password in the keystore.
	KeyStorePassword string `protobuf:"bytes,5,opt,name=keyStorePassword,proto3" json:"keyStorePassword,omitempty"`
	// Path to the truststore holding your trusted certificates.
	TrustStore string `protobuf:"bytes,6,opt,name=trustStore,proto3" json:"trustStore,omitempty"`
	// The type of your truststore. Examples include JKS, and PKCS12.
	TrustStoreType string `protobuf:"bytes,7,opt,name=trustStoreType,proto3" json:"trustStoreType,omitempty"`
	// The password to unlock your truststore.
	TrustStorePassword string `protobuf:"bytes,8,opt,name=trustStorePassword,proto3" json:"trustStorePassword,omitempty"`
	// Whether to require or allow client authentication.
	ClientAuth ClientAuth `protobuf:"varint,9,opt,name=clientAuth,proto3,enum=proto.security.ClientAuth" json:"clientAuth,omitempty"`
	// contains filtered or unexported fields
}

type ClientAuth int32

type Security struct {

	// Configuration for the API server's addressable URL and CORS policies.
	ApiSecurity *ApiSecurity `protobuf:"bytes,1,opt,name=apiSecurity,proto3" json:"apiSecurity,omitempty"`
	// Configuration for the UI server's addressable URL.
	UiSecurity *UiSecurity `protobuf:"bytes,2,opt,name=uiSecurity,proto3" json:"uiSecurity,omitempty"`
	// Configuration of how users authenticate against Spinnaker.
	Authn *authn.Authentication `protobuf:"bytes,3,opt,name=authn,proto3" json:"authn,omitempty"`
	// Configuration for what resources users of Spinnaker can read and modify.
	Authz *authz.Authorization `protobuf:"bytes,4,opt,name=authz,proto3" json:"authz,omitempty"`
	// contains filtered or unexported fields
}

type TrustStore struct {

	// Whether this custom trust store is enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// The path to a key store in JKS format containing certification authorities
	// that should be trusted.
	TrustStore string `protobuf:"bytes,2,opt,name=trustStore,proto3" json:"trustStore,omitempty"`
	// The password for the supplied trustStore.
	TrustStorePassword string `protobuf:"bytes,3,opt,name=trustStorePassword,proto3" json:"trustStorePassword,omitempty"`
	// contains filtered or unexported fields
}

type UiSecurity struct {

	// Configuration for SSL termination by the UI gateway.
	Ssl *UiSsl `protobuf:"bytes,1,opt,name=ssl,proto3" json:"ssl,omitempty"`
	// If you are accessing the UI server remotely, provide the full base URL of
	// whatever proxy or load balancer is fronting the UI requests.
	OverrideBaseUrl string `protobuf:"bytes,2,opt,name=overrideBaseUrl,proto3" json:"overrideBaseUrl,omitempty"`
	// contains filtered or unexported fields
}

type UiSsl struct {

	// Whether SSL is enabled.
	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// Path to your .crt file.
	SslCertificateFile string `protobuf:"bytes,2,opt,name=sslCertificateFile,proto3" json:"sslCertificateFile,omitempty"`
	// Path to your .key file.
	SslCertificateKeyFile string `protobuf:"bytes,3,opt,name=sslCertificateKeyFile,proto3" json:"sslCertificateKeyFile,omitempty"`
	// Path to the .crt file for the CA that issued your SSL certificate. This is
	// only needed for local git deployments that serve the UI using webpack dev server.
	SslCACertificateFile string `protobuf:"bytes,4,opt,name=sslCACertificateFile,proto3" json:"sslCACertificateFile,omitempty"`
	// The passphrase needed to unlock your SSL certificate. This will be provided
	// to Apache on startup.
	SslCertificatePassphrase string `protobuf:"bytes,5,opt,name=sslCertificatePassphrase,proto3" json:"sslCertificatePassphrase,omitempty"`
	// contains filtered or unexported fields
}

type WebhookConfig struct {

	// A custom trust store to use for outgoing webhook connections.
	Trust *TrustStore `protobuf:"bytes,1,opt,name=trust,proto3" json:"trust,omitempty"`
	// contains filtered or unexported fields
}