diff options
Diffstat (limited to 'src/rpc/envoy.service.auth.v2.rs')
| -rw-r--r-- | src/rpc/envoy.service.auth.v2.rs | 228 |
1 files changed, 0 insertions, 228 deletions
diff --git a/src/rpc/envoy.service.auth.v2.rs b/src/rpc/envoy.service.auth.v2.rs deleted file mode 100644 index d79c22fd..00000000 --- a/src/rpc/envoy.service.auth.v2.rs +++ /dev/null @@ -1,228 +0,0 @@ -// @generated -// This file is @generated by prost-build. -// \[#protodoc-title: Attribute Context \] - -// See :ref:`network filter configuration overview <config_network_filters_ext_authz>` -// and :ref:`HTTP filter configuration overview <config_http_filters_ext_authz>`. - -/// An attribute is a piece of metadata that describes an activity on a network. -/// For example, the size of an HTTP request, or the status code of an HTTP response. -/// -/// Each attribute has a type and a name, which is logically defined as a proto message field -/// of the `AttributeContext`. The `AttributeContext` is a collection of individual attributes -/// supported by Envoy authorization system. -/// [#comment: The following items are left out of this proto -/// Request.Auth field for JWTs -/// Request.Api for api management -/// Origin peer that originated the request -/// Caching Protocol -/// request_context return values to inject back into the filter chain -/// peer.claims -- from X.509 extensions -/// Configuration -/// - field mask to send -/// - which return values from request_context are copied back -/// - which return values are copied into request_headers] -/// \[#next-free-field: 12\] -#[allow(clippy::derive_partial_eq_without_eq)] -#[derive(Clone, PartialEq, ::prost::Message)] -pub struct AttributeContext { - /// The source of a network activity, such as starting a TCP connection. - /// In a multi hop network activity, the source represents the sender of the - /// last hop. - #[prost(message, optional, tag="1")] - pub source: ::core::option::Option<attribute_context::Peer>, - /// The destination of a network activity, such as accepting a TCP connection. - /// In a multi hop network activity, the destination represents the receiver of - /// the last hop. - #[prost(message, optional, tag="2")] - pub destination: ::core::option::Option<attribute_context::Peer>, - /// Represents a network request, such as an HTTP request. - #[prost(message, optional, tag="4")] - pub request: ::core::option::Option<attribute_context::Request>, - /// This is analogous to http_request.headers, however these contents will not be sent to the - /// upstream server. Context_extensions provide an extension mechanism for sending additional - /// information to the auth server without modifying the proto definition. It maps to the - /// internal opaque context in the filter chain. - #[prost(map="string, string", tag="10")] - pub context_extensions: ::std::collections::HashMap<::prost::alloc::string::String, ::prost::alloc::string::String>, - /// Dynamic metadata associated with the request. - #[prost(message, optional, tag="11")] - pub metadata_context: ::core::option::Option<super::super::super::api::v2::core::Metadata>, -} -/// Nested message and enum types in `AttributeContext`. -pub mod attribute_context { - /// This message defines attributes for a node that handles a network request. - /// The node can be either a service or an application that sends, forwards, - /// or receives the request. Service peers should fill in the `service`, - /// `principal`, and `labels` as appropriate. - /// \[#next-free-field: 6\] - #[allow(clippy::derive_partial_eq_without_eq)] -#[derive(Clone, PartialEq, ::prost::Message)] - pub struct Peer { - /// The address of the peer, this is typically the IP address. - /// It can also be UDS path, or others. - #[prost(message, optional, tag="1")] - pub address: ::core::option::Option<super::super::super::super::api::v2::core::Address>, - /// The canonical service name of the peer. - /// It should be set to :ref:`the HTTP x-envoy-downstream-service-cluster - /// <config_http_conn_man_headers_downstream-service-cluster>` - /// If a more trusted source of the service name is available through mTLS/secure naming, it - /// should be used. - #[prost(string, tag="2")] - pub service: ::prost::alloc::string::String, - /// The labels associated with the peer. - /// These could be pod labels for Kubernetes or tags for VMs. - /// The source of the labels could be an X.509 certificate or other configuration. - #[prost(map="string, string", tag="3")] - pub labels: ::std::collections::HashMap<::prost::alloc::string::String, ::prost::alloc::string::String>, - /// The authenticated identity of this peer. - /// For example, the identity associated with the workload such as a service account. - /// If an X.509 certificate is used to assert the identity this field should be sourced from - /// `URI Subject Alternative Names`, `DNS Subject Alternate Names` or `Subject` in that order. - /// The primary identity should be the principal. The principal format is issuer specific. - /// - /// Example: - /// * SPIFFE format is `spiffe://trust-domain/path` - /// * Google account format is `<https://accounts.google.com/{userid}`> - #[prost(string, tag="4")] - pub principal: ::prost::alloc::string::String, - /// The X.509 certificate used to authenticate the identify of this peer. - /// When present, the certificate contents are encoded in URL and PEM format. - #[prost(string, tag="5")] - pub certificate: ::prost::alloc::string::String, - } - /// Represents a network request, such as an HTTP request. - #[allow(clippy::derive_partial_eq_without_eq)] -#[derive(Clone, PartialEq, ::prost::Message)] - pub struct Request { - /// The timestamp when the proxy receives the first byte of the request. - #[prost(message, optional, tag="1")] - pub time: ::core::option::Option<super::super::super::super::super::google::protobuf::Timestamp>, - /// Represents an HTTP request or an HTTP-like request. - #[prost(message, optional, tag="2")] - pub http: ::core::option::Option<HttpRequest>, - } - /// This message defines attributes for an HTTP request. - /// HTTP/1.x, HTTP/2, gRPC are all considered as HTTP requests. - /// \[#next-free-field: 12\] - #[allow(clippy::derive_partial_eq_without_eq)] -#[derive(Clone, PartialEq, ::prost::Message)] - pub struct HttpRequest { - /// The unique ID for a request, which can be propagated to downstream - /// systems. The ID should have low probability of collision - /// within a single day for a specific service. - /// For HTTP requests, it should be X-Request-ID or equivalent. - #[prost(string, tag="1")] - pub id: ::prost::alloc::string::String, - /// The HTTP request method, such as `GET`, `POST`. - #[prost(string, tag="2")] - pub method: ::prost::alloc::string::String, - /// The HTTP request headers. If multiple headers share the same key, they - /// must be merged according to the HTTP spec. All header keys must be - /// lower-cased, because HTTP header keys are case-insensitive. - #[prost(map="string, string", tag="3")] - pub headers: ::std::collections::HashMap<::prost::alloc::string::String, ::prost::alloc::string::String>, - /// The request target, as it appears in the first line of the HTTP request. This includes - /// the URL path and query-string. No decoding is performed. - #[prost(string, tag="4")] - pub path: ::prost::alloc::string::String, - /// The HTTP request `Host` or 'Authority` header value. - #[prost(string, tag="5")] - pub host: ::prost::alloc::string::String, - /// The HTTP URL scheme, such as `http` and `https`. This is set for HTTP/2 - /// requests only. For HTTP/1.1, use "x-forwarded-for" header value to lookup - /// the scheme of the request. - #[prost(string, tag="6")] - pub scheme: ::prost::alloc::string::String, - /// This field is always empty, and exists for compatibility reasons. The HTTP URL query is - /// included in `path` field. - #[prost(string, tag="7")] - pub query: ::prost::alloc::string::String, - /// This field is always empty, and exists for compatibility reasons. The URL fragment is - /// not submitted as part of HTTP requests; it is unknowable. - #[prost(string, tag="8")] - pub fragment: ::prost::alloc::string::String, - /// The HTTP request size in bytes. If unknown, it must be -1. - #[prost(int64, tag="9")] - pub size: i64, - /// The network protocol used with the request, such as "HTTP/1.0", "HTTP/1.1", or "HTTP/2". - /// - /// See :repo:`headers.h:ProtocolStrings <source/common/http/headers.h>` for a list of all - /// possible values. - #[prost(string, tag="10")] - pub protocol: ::prost::alloc::string::String, - /// The HTTP request body. - #[prost(string, tag="11")] - pub body: ::prost::alloc::string::String, - } -} -#[allow(clippy::derive_partial_eq_without_eq)] -#[derive(Clone, PartialEq, ::prost::Message)] -pub struct CheckRequest { - /// The request attributes. - #[prost(message, optional, tag="1")] - pub attributes: ::core::option::Option<AttributeContext>, -} -/// HTTP attributes for a denied response. -#[allow(clippy::derive_partial_eq_without_eq)] -#[derive(Clone, PartialEq, ::prost::Message)] -pub struct DeniedHttpResponse { - /// This field allows the authorization service to send a HTTP response status - /// code to the downstream client other than 403 (Forbidden). - #[prost(message, optional, tag="1")] - pub status: ::core::option::Option<super::super::super::r#type::HttpStatus>, - /// This field allows the authorization service to send HTTP response headers - /// to the downstream client. Note that the `append` field in `HeaderValueOption` defaults to - /// false when used in this message. - #[prost(message, repeated, tag="2")] - pub headers: ::prost::alloc::vec::Vec<super::super::super::api::v2::core::HeaderValueOption>, - /// This field allows the authorization service to send a response body data - /// to the downstream client. - #[prost(string, tag="3")] - pub body: ::prost::alloc::string::String, -} -/// HTTP attributes for an ok response. -#[allow(clippy::derive_partial_eq_without_eq)] -#[derive(Clone, PartialEq, ::prost::Message)] -pub struct OkHttpResponse { - /// HTTP entity headers in addition to the original request headers. This allows the authorization - /// service to append, to add or to override headers from the original request before - /// dispatching it to the upstream. Note that the `append` field in `HeaderValueOption` defaults to - /// false when used in this message. By setting the `append` field to `true`, - /// the filter will append the correspondent header value to the matched request header. - /// By leaving `append` as false, the filter will either add a new header, or override an existing - /// one if there is a match. - #[prost(message, repeated, tag="2")] - pub headers: ::prost::alloc::vec::Vec<super::super::super::api::v2::core::HeaderValueOption>, -} -/// Intended for gRPC and Network Authorization servers `only`. -#[allow(clippy::derive_partial_eq_without_eq)] -#[derive(Clone, PartialEq, ::prost::Message)] -pub struct CheckResponse { - /// Status `OK` allows the request. Any other status indicates the request should be denied. - #[prost(message, optional, tag="1")] - pub status: ::core::option::Option<super::super::super::super::google::rpc::Status>, - /// An message that contains HTTP response attributes. This message is - /// used when the authorization service needs to send custom responses to the - /// downstream client or, to modify/add request headers being dispatched to the upstream. - #[prost(oneof="check_response::HttpResponse", tags="2, 3")] - pub http_response: ::core::option::Option<check_response::HttpResponse>, -} -/// Nested message and enum types in `CheckResponse`. -pub mod check_response { - /// An message that contains HTTP response attributes. This message is - /// used when the authorization service needs to send custom responses to the - /// downstream client or, to modify/add request headers being dispatched to the upstream. - #[allow(clippy::derive_partial_eq_without_eq)] -#[derive(Clone, PartialEq, ::prost::Oneof)] - pub enum HttpResponse { - /// Supplies http attributes for a denied response. - #[prost(message, tag="2")] - DeniedResponse(super::DeniedHttpResponse), - /// Supplies http attributes for an ok response. - #[prost(message, tag="3")] - OkResponse(super::OkHttpResponse), - } -} -include!("envoy.service.auth.v2.tonic.rs"); -// @@protoc_insertion_point(module)
\ No newline at end of file |