workloadmanagerpb

type AgentCommand struct {

	// The name of the agent one-time executable that will be invoked.
	Command string `protobuf:"bytes,1,opt,name=command,proto3" json:"command,omitempty"`
	// A map of key/value pairs that can be used to specify
	// additional one-time executable settings.
	Parameters map[string]string `` /* 161-byte string literal not displayed */
	// contains filtered or unexported fields
}

type BigQueryDestination struct {

	// Optional. Destination dataset to save evaluation results.
	DestinationDataset string `protobuf:"bytes,1,opt,name=destination_dataset,json=destinationDataset,proto3" json:"destination_dataset,omitempty"`
	// Optional. Determines if a new results table will be created when an
	// Execution is created.
	CreateNewResultsTable bool `` /* 129-byte string literal not displayed */
	// contains filtered or unexported fields
}

type Command struct {

	// The type of command.
	//
	// Types that are assignable to CommandType:
	//
	//	*Command_AgentCommand
	//	*Command_ShellCommand
	CommandType isCommand_CommandType `protobuf_oneof:"command_type"`
	// contains filtered or unexported fields
}

type Command_AgentCommand struct {
	// AgentCommand specifies a one-time executable program for the agent to
	// run.
	AgentCommand *AgentCommand `protobuf:"bytes,1,opt,name=agent_command,json=agentCommand,proto3,oneof"`
}

type Command_ShellCommand struct {
	// ShellCommand is invoked via the agent's command line executor.
	ShellCommand *ShellCommand `protobuf:"bytes,2,opt,name=shell_command,json=shellCommand,proto3,oneof"`
}

type CreateEvaluationRequest struct {

	// Required. The resource prefix of the evaluation location using the form:
	// `projects/{project_id}/locations/{location_id}`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. Id of the requesting object.
	EvaluationId string `protobuf:"bytes,2,opt,name=evaluation_id,json=evaluationId,proto3" json:"evaluation_id,omitempty"`
	// Required. The resource being created.
	Evaluation *Evaluation `protobuf:"bytes,3,opt,name=evaluation,proto3" json:"evaluation,omitempty"`
	// Optional. An optional request ID to identify requests. Specify a unique
	// request ID so that if you must retry your request, the server will know to
	// ignore the request if it has already been completed. The server will
	// guarantee that for at least 60 minutes since the first request.
	//
	// For example, consider a situation where you make an initial request and
	// the request times out. If you make the request again with the same request
	// ID, the server can check if original operation with the same request ID
	// was received, and if so, will ignore the second request. This prevents
	// clients from accidentally creating duplicate commitments.
	//
	// The request ID must be a valid UUID with the exception that zero UUID is
	// not supported (00000000-0000-0000-0000-000000000000).
	RequestId string `protobuf:"bytes,4,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

type DeleteEvaluationRequest struct {

	// Required. Name of the resource.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Optional. An optional request ID to identify requests. Specify a unique
	// request ID so that if you must retry your request, the server will know to
	// ignore the request if it has already been completed. The server will
	// guarantee that for at least 60 minutes after the first request.
	//
	// For example, consider a situation where you make an initial request and
	// the request times out. If you make the request again with the same request
	// ID, the server can check if original operation with the same request ID
	// was received, and if so, will ignore the second request. This prevents
	// clients from accidentally creating duplicate commitments.
	//
	// The request ID must be a valid UUID with the exception that zero UUID is
	// not supported (00000000-0000-0000-0000-000000000000).
	RequestId string `protobuf:"bytes,2,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// Optional. Followed the best practice from
	// https://aip.dev/135#cascading-delete.
	Force bool `protobuf:"varint,3,opt,name=force,proto3" json:"force,omitempty"`
	// contains filtered or unexported fields
}

type DeleteExecutionRequest struct {

	// Required. Name of the resource.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Optional. An optional request ID to identify requests. Specify a unique
	// request ID so that if you must retry your request, the server will know to
	// ignore the request if it has already been completed. The server will
	// guarantee that for at least 60 minutes after the first request.
	//
	// For example, consider a situation where you make an initial request and
	// the request times out. If you make the request again with the same request
	// ID, the server can check if original operation with the same request ID
	// was received, and if so, will ignore the second request. This prevents
	// clients from accidentally creating duplicate commitments.
	//
	// The request ID must be a valid UUID with the exception that zero UUID is
	// not supported (00000000-0000-0000-0000-000000000000).
	RequestId string `protobuf:"bytes,2,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

type Evaluation struct {

	// Name of resource that has the form
	// `projects/{project_id}/locations/{location_id}/evaluations/{evaluation_id}`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Description of the Evaluation.
	Description string `protobuf:"bytes,2,opt,name=description,proto3" json:"description,omitempty"`
	// Resource filter for an evaluation defining the scope of resources to be
	// evaluated.
	ResourceFilter *ResourceFilter `protobuf:"bytes,3,opt,name=resource_filter,json=resourceFilter,proto3" json:"resource_filter,omitempty"`
	// The names of the rules used for this evaluation.
	RuleNames []string `protobuf:"bytes,4,rep,name=rule_names,json=ruleNames,proto3" json:"rule_names,omitempty"`
	// Output only. [Output only] The current lifecycle state of the evaluation
	// resource.
	ResourceStatus *ResourceStatus `protobuf:"bytes,6,opt,name=resource_status,json=resourceStatus,proto3" json:"resource_status,omitempty"`
	// Output only. [Output only] Create time stamp.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Output only. [Output only] Update time stamp.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,8,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// Labels as key value pairs.
	Labels map[string]string `` /* 153-byte string literal not displayed */
	// Crontab format schedule for scheduled evaluation, currently only supports
	// the following fixed schedules:
	// * `0 */1 * * *` # Hourly
	// * `0 */6 * * *` # Every 6 hours
	// * `0 */12 * * *` # Every 12 hours
	// * `0 0 */1 * *` # Daily
	// * `0 0 */7 * *` # Weekly
	// * `0 0 */14 * *` # Every 14 days
	// * `0 0 1 */1 *` # Monthly
	Schedule *string `protobuf:"bytes,10,opt,name=schedule,proto3,oneof" json:"schedule,omitempty"`
	// The Cloud Storage bucket name for custom rules.
	CustomRulesBucket string `protobuf:"bytes,11,opt,name=custom_rules_bucket,json=customRulesBucket,proto3" json:"custom_rules_bucket,omitempty"`
	// Evaluation type.
	EvaluationType Evaluation_EvaluationType `` /* 168-byte string literal not displayed */
	// Optional. The BigQuery destination for detailed evaluation results.
	// If this field is specified, the results of each evaluation execution are
	// exported to BigQuery.
	BigQueryDestination *BigQueryDestination `protobuf:"bytes,13,opt,name=big_query_destination,json=bigQueryDestination,proto3" json:"big_query_destination,omitempty"`
	// Optional. Immutable. Customer-managed encryption key name, in the format
	// projects/*/locations/*/keyRings/*/cryptoKeys/*.
	// The key will be used for CMEK encryption of the evaluation resource.
	KmsKey string `protobuf:"bytes,15,opt,name=kms_key,json=kmsKey,proto3" json:"kms_key,omitempty"`
	// contains filtered or unexported fields
}

type Evaluation_EvaluationType int32

type Execution struct {

	// The name of execution resource. The format is
	// projects/{project}/locations/{location}/evaluations/{evaluation}/executions/{execution}.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Output only. [Output only] Start time stamp.
	StartTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=start_time,json=startTime,proto3" json:"start_time,omitempty"`
	// Output only. [Output only] End time stamp.
	EndTime *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=end_time,json=endTime,proto3" json:"end_time,omitempty"`
	// Output only. [Output only] Inventory time stamp.
	InventoryTime *timestamppb.Timestamp `protobuf:"bytes,4,opt,name=inventory_time,json=inventoryTime,proto3" json:"inventory_time,omitempty"`
	// Output only. [Output only] State.
	State Execution_State `protobuf:"varint,5,opt,name=state,proto3,enum=google.cloud.workloadmanager.v1.Execution_State" json:"state,omitempty"`
	// Output only. [Output only] Evaluation ID.
	EvaluationId string `protobuf:"bytes,6,opt,name=evaluation_id,json=evaluationId,proto3" json:"evaluation_id,omitempty"`
	// Labels as key value pairs.
	Labels map[string]string `` /* 153-byte string literal not displayed */
	// Type which represents whether the execution executed directly by user or
	// scheduled according to the `Evaluation.schedule` field.
	RunType Execution_Type `` /* 135-byte string literal not displayed */
	// Output only. Execution result summary per rule.
	RuleResults []*RuleExecutionResult `protobuf:"bytes,9,rep,name=rule_results,json=ruleResults,proto3" json:"rule_results,omitempty"`
	// Optional. External data sources.
	ExternalDataSources []*Execution_ExternalDataSources `protobuf:"bytes,10,rep,name=external_data_sources,json=externalDataSources,proto3" json:"external_data_sources,omitempty"`
	// Output only. Additional information generated by the execution.
	Notices []*Execution_Notice `protobuf:"bytes,11,rep,name=notices,proto3" json:"notices,omitempty"`
	// Optional. Engine.
	Engine Execution_Engine `protobuf:"varint,12,opt,name=engine,proto3,enum=google.cloud.workloadmanager.v1.Execution_Engine" json:"engine,omitempty"`
	// Output only. [Output only] Result summary for the execution.
	ResultSummary *Execution_Summary `protobuf:"bytes,13,opt,name=result_summary,json=resultSummary,proto3" json:"result_summary,omitempty"`
	// contains filtered or unexported fields
}

type ExecutionResult struct {

	// The violation message of an execution.
	ViolationMessage string `protobuf:"bytes,1,opt,name=violation_message,json=violationMessage,proto3" json:"violation_message,omitempty"`
	// The severity of violation.
	Severity string `protobuf:"bytes,2,opt,name=severity,proto3" json:"severity,omitempty"`
	// The rule that is violated in an evaluation.
	Rule string `protobuf:"bytes,3,opt,name=rule,proto3" json:"rule,omitempty"`
	// The URL for the documentation of the rule.
	DocumentationUrl string `protobuf:"bytes,4,opt,name=documentation_url,json=documentationUrl,proto3" json:"documentation_url,omitempty"`
	// The resource that violates the rule.
	Resource *Resource `protobuf:"bytes,5,opt,name=resource,proto3" json:"resource,omitempty"`
	// The details of violation in an evaluation result.
	ViolationDetails *ViolationDetails `protobuf:"bytes,6,opt,name=violation_details,json=violationDetails,proto3" json:"violation_details,omitempty"`
	// The commands to remediate the violation.
	Commands []*Command `protobuf:"bytes,7,rep,name=commands,proto3" json:"commands,omitempty"`
	// Execution result type of the scanned resource.
	Type ExecutionResult_Type `protobuf:"varint,8,opt,name=type,proto3,enum=google.cloud.workloadmanager.v1.ExecutionResult_Type" json:"type,omitempty"`
	// contains filtered or unexported fields
}

type ExecutionResult_Type int32

type Execution_Engine int32

type Execution_ExternalDataSources struct {

	// Optional. Name of external data source. The name will be used inside the
	// rego/sql to refer the external data.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Required. URI of external data source. example of bq table
	// {project_ID}.{dataset_ID}.{table_ID}.
	Uri string `protobuf:"bytes,2,opt,name=uri,proto3" json:"uri,omitempty"`
	// Required. Type of external data source.
	Type Execution_ExternalDataSources_Type `` /* 134-byte string literal not displayed */
	// Required. The asset type of the external data source.
	// This can be a supported Cloud Asset Inventory asset type
	// (see https://cloud.google.com/asset-inventory/docs/supported-asset-types)
	// to override the default asset type, or it can be a custom type defined by
	// the user.
	AssetType string `protobuf:"bytes,4,opt,name=asset_type,json=assetType,proto3" json:"asset_type,omitempty"`
	// contains filtered or unexported fields
}

type Execution_ExternalDataSources_Type int32

type Execution_Notice struct {

	// Output only. Message of the notice.
	Message string `protobuf:"bytes,1,opt,name=message,proto3" json:"message,omitempty"`
	// contains filtered or unexported fields
}

type Execution_State int32

type Execution_Summary struct {

	// Output only. Number of failures.
	Failures int64 `protobuf:"varint,1,opt,name=failures,proto3" json:"failures,omitempty"`
	// Output only. Number of new failures compared to the previous execution.
	NewFailures int64 `protobuf:"varint,2,opt,name=new_failures,json=newFailures,proto3" json:"new_failures,omitempty"`
	// Output only. Number of new fixes compared to the previous execution.
	NewFixes int64 `protobuf:"varint,3,opt,name=new_fixes,json=newFixes,proto3" json:"new_fixes,omitempty"`
	// contains filtered or unexported fields
}

type Execution_Type int32

type GceInstanceFilter struct {

	// If non-empty, only Compute Engine instances associated with at least one of
	// the provided service accounts will be included in the evaluation.
	ServiceAccounts []string `protobuf:"bytes,4,rep,name=service_accounts,json=serviceAccounts,proto3" json:"service_accounts,omitempty"`
	// contains filtered or unexported fields
}

type GetEvaluationRequest struct {

	// Required. Name of the resource.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetExecutionRequest struct {

	// Required. Name of the resource.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type ListEvaluationsRequest struct {

	// Required. Parent value for ListEvaluationsRequest.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Requested page size. Server may return fewer items than requested.
	// If unspecified, server will pick an appropriate default.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// A token identifying a page of results the server should return.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Filter to be applied when listing the evaluation results.
	Filter string `protobuf:"bytes,4,opt,name=filter,proto3" json:"filter,omitempty"`
	// Hint for how to order the results.
	OrderBy string `protobuf:"bytes,5,opt,name=order_by,json=orderBy,proto3" json:"order_by,omitempty"`
	// contains filtered or unexported fields
}

type ListEvaluationsResponse struct {

	// The list of evaluations.
	Evaluations []*Evaluation `protobuf:"bytes,1,rep,name=evaluations,proto3" json:"evaluations,omitempty"`
	// A token identifying a page of results the server should return.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// Locations that could not be reached.
	Unreachable []string `protobuf:"bytes,3,rep,name=unreachable,proto3" json:"unreachable,omitempty"`
	// contains filtered or unexported fields
}

type ListExecutionResultsRequest struct {

	// Required. The execution results.
	// Format: {parent}/evaluations/*/executions/*/results.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Requested page size. Server may return fewer items than requested.
	// If unspecified, server will pick an appropriate default.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// A token identifying a page of results the server should return.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Filtering results.
	Filter string `protobuf:"bytes,4,opt,name=filter,proto3" json:"filter,omitempty"`
	// contains filtered or unexported fields
}

type ListExecutionResultsResponse struct {

	// The versions from the specified publisher.
	ExecutionResults []*ExecutionResult `protobuf:"bytes,1,rep,name=execution_results,json=executionResults,proto3" json:"execution_results,omitempty"`
	// A token, which can be sent as `page_token` to retrieve the next page.
	// If this field is omitted, there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type ListExecutionsRequest struct {

	// Required. The resource prefix of the Execution using the form:
	// `projects/{project}/locations/{location}/evaluations/{evaluation}`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Requested page size. Server may return fewer items than requested.
	// If unspecified, server will pick an appropriate default.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// A token identifying a page of results the server should return.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Filtering results.
	Filter string `protobuf:"bytes,4,opt,name=filter,proto3" json:"filter,omitempty"`
	// Field to sort by. See https://google.aip.dev/132#ordering for more details.
	OrderBy string `protobuf:"bytes,5,opt,name=order_by,json=orderBy,proto3" json:"order_by,omitempty"`
	// contains filtered or unexported fields
}

type ListExecutionsResponse struct {

	// The list of Execution.
	Executions []*Execution `protobuf:"bytes,1,rep,name=executions,proto3" json:"executions,omitempty"`
	// A token identifying a page of results the server should return.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// Locations that could not be reached.
	Unreachable []string `protobuf:"bytes,3,rep,name=unreachable,proto3" json:"unreachable,omitempty"`
	// contains filtered or unexported fields
}

type ListRulesRequest struct {

	// Required. The [project] on which to execute the request. The format is:
	//
	//	projects/{project_id}/locations/{location}
	//
	// Currently, the pre-defined rules are global available to all projects and
	// all regions.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Requested page size. Server may return fewer items than requested.
	// If unspecified, server will pick an appropriate default.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// A token identifying a page of results the server should return.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Filter based on primary_category, secondary_category.
	Filter string `protobuf:"bytes,4,opt,name=filter,proto3" json:"filter,omitempty"`
	// The Cloud Storage bucket name for custom rules.
	CustomRulesBucket string `protobuf:"bytes,5,opt,name=custom_rules_bucket,json=customRulesBucket,proto3" json:"custom_rules_bucket,omitempty"`
	// Optional. The evaluation type of the rules will be applied to.
	// The Cloud Storage bucket name for custom rules.
	EvaluationType Evaluation_EvaluationType `` /* 167-byte string literal not displayed */
	// contains filtered or unexported fields
}

type ListRulesResponse struct {

	// All rules in response.
	Rules []*Rule `protobuf:"bytes,1,rep,name=rules,proto3" json:"rules,omitempty"`
	// contains filtered or unexported fields
}

type ListScannedResourcesRequest struct {

	// Required. Parent for ListScannedResourcesRequest.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Rule name.
	Rule string `protobuf:"bytes,2,opt,name=rule,proto3" json:"rule,omitempty"`
	// Requested page size. Server may return fewer items than requested.
	// If unspecified, server will pick an appropriate default.
	PageSize int32 `protobuf:"varint,3,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// A token identifying a page of results the server should return.
	PageToken string `protobuf:"bytes,4,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Filtering results.
	Filter string `protobuf:"bytes,5,opt,name=filter,proto3" json:"filter,omitempty"`
	// Field to sort by. See https://google.aip.dev/132#ordering for more details.
	OrderBy string `protobuf:"bytes,6,opt,name=order_by,json=orderBy,proto3" json:"order_by,omitempty"`
	// contains filtered or unexported fields
}

type ListScannedResourcesResponse struct {

	// All scanned resources in response.
	ScannedResources []*ScannedResource `protobuf:"bytes,1,rep,name=scanned_resources,json=scannedResources,proto3" json:"scanned_resources,omitempty"`
	// A token, which can be sent as `page_token` to retrieve the next page.
	// If this field is omitted, there are no subsequent pages.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// contains filtered or unexported fields
}

type OperationMetadata struct {

	// Output only. The time the operation was created.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Output only. The time the operation finished running.
	EndTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=end_time,json=endTime,proto3" json:"end_time,omitempty"`
	// Output only. Server-defined resource path for the target of the operation.
	Target string `protobuf:"bytes,3,opt,name=target,proto3" json:"target,omitempty"`
	// Output only. Name of the verb executed by the operation.
	Verb string `protobuf:"bytes,4,opt,name=verb,proto3" json:"verb,omitempty"`
	// Output only. Human-readable status of the operation, if any.
	StatusMessage string `protobuf:"bytes,5,opt,name=status_message,json=statusMessage,proto3" json:"status_message,omitempty"`
	// Output only. Identifies whether the user has requested cancellation
	// of the operation. Operations that have been cancelled successfully
	// have [Operation.error][] value with a
	// [google.rpc.Status.code][google.rpc.Status.code] of 1, corresponding to
	// `Code.CANCELLED`.
	RequestedCancellation bool `protobuf:"varint,6,opt,name=requested_cancellation,json=requestedCancellation,proto3" json:"requested_cancellation,omitempty"`
	// Output only. API version used to start the operation.
	ApiVersion string `protobuf:"bytes,7,opt,name=api_version,json=apiVersion,proto3" json:"api_version,omitempty"`
	// contains filtered or unexported fields
}

type Resource struct {

	// The type of resource.
	Type string `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
	// The name of the resource.
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// The service account associated with the resource.
	ServiceAccount string `protobuf:"bytes,3,opt,name=service_account,json=serviceAccount,proto3" json:"service_account,omitempty"`
	// contains filtered or unexported fields
}

type ResourceFilter struct {

	// The scopes of evaluation resource.
	// Format:
	// * `projects/{project_id}`
	// * `folders/{folder_id}`
	// * `organizations/{organization_id}`
	Scopes []string `protobuf:"bytes,1,rep,name=scopes,proto3" json:"scopes,omitempty"`
	// The pattern to filter resources by their id
	// For example, a pattern of ".*prod-cluster.*" will match all resources that
	// contain "prod-cluster" in their ID.
	ResourceIdPatterns []string `protobuf:"bytes,2,rep,name=resource_id_patterns,json=resourceIdPatterns,proto3" json:"resource_id_patterns,omitempty"`
	// Labels to filter resources by. Each key-value pair in the map must exist
	// on the resource for it to be included (e.g. VM instance labels).
	// For example, specifying `{ "env": "prod", "database": "nosql" }` will only
	// include resources that have labels `env=prod` and `database=nosql`.
	InclusionLabels map[string]string `` /* 194-byte string literal not displayed */
	// Filter compute engine resources.
	GceInstanceFilter *GceInstanceFilter `protobuf:"bytes,4,opt,name=gce_instance_filter,json=gceInstanceFilter,proto3" json:"gce_instance_filter,omitempty"`
	// contains filtered or unexported fields
}

type ResourceStatus struct {

	// State of the Evaluation resource.
	State ResourceStatus_State `protobuf:"varint,2,opt,name=state,proto3,enum=google.cloud.workloadmanager.v1.ResourceStatus_State" json:"state,omitempty"`
	// contains filtered or unexported fields
}

type ResourceStatus_State int32

type Rule struct {

	// Rule name.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Output only. The version of the rule.
	RevisionId string `protobuf:"bytes,2,opt,name=revision_id,json=revisionId,proto3" json:"revision_id,omitempty"`
	// The name display in UI.
	DisplayName string `protobuf:"bytes,3,opt,name=display_name,json=displayName,proto3" json:"display_name,omitempty"`
	// Describe rule in plain language.
	Description string `protobuf:"bytes,4,opt,name=description,proto3" json:"description,omitempty"`
	// The severity of the rule.
	Severity string `protobuf:"bytes,5,opt,name=severity,proto3" json:"severity,omitempty"`
	// The primary category.
	PrimaryCategory string `protobuf:"bytes,6,opt,name=primary_category,json=primaryCategory,proto3" json:"primary_category,omitempty"`
	// The secondary category.
	SecondaryCategory string `protobuf:"bytes,7,opt,name=secondary_category,json=secondaryCategory,proto3" json:"secondary_category,omitempty"`
	// The message template for rule.
	ErrorMessage string `protobuf:"bytes,8,opt,name=error_message,json=errorMessage,proto3" json:"error_message,omitempty"`
	// The document url for the rule.
	Uri string `protobuf:"bytes,9,opt,name=uri,proto3" json:"uri,omitempty"`
	// The remediation for the rule.
	Remediation string `protobuf:"bytes,10,opt,name=remediation,proto3" json:"remediation,omitempty"`
	// List of user-defined tags.
	Tags []string `protobuf:"bytes,11,rep,name=tags,proto3" json:"tags,omitempty"`
	// The type of the rule.
	RuleType Rule_RuleType `` /* 138-byte string literal not displayed */
	// The CAI asset type of the rule is evaluating, for joined asset types, it
	// will be the corresponding primary asset types.
	AssetType string `protobuf:"bytes,13,opt,name=asset_type,json=assetType,proto3" json:"asset_type,omitempty"`
	// contains filtered or unexported fields
}

type RuleExecutionResult struct {

	// Rule name as plain text like `sap-hana-configured`.
	Rule string `protobuf:"bytes,1,opt,name=rule,proto3" json:"rule,omitempty"`
	// Output only. The execution status.
	State RuleExecutionResult_State `` /* 127-byte string literal not displayed */
	// Execution message, if any.
	Message string `protobuf:"bytes,3,opt,name=message,proto3" json:"message,omitempty"`
	// Number of violations.
	ResultCount int64 `protobuf:"varint,4,opt,name=result_count,json=resultCount,proto3" json:"result_count,omitempty"`
	// Number of total scanned resources.
	ScannedResourceCount int64 `protobuf:"varint,5,opt,name=scanned_resource_count,json=scannedResourceCount,proto3" json:"scanned_resource_count,omitempty"`
	// contains filtered or unexported fields
}

type RuleExecutionResult_State int32

type RuleOutput struct {

	// Output only. Violation details generated by rule.
	Details map[string]string `` /* 155-byte string literal not displayed */
	// Output only. The message generated by rule.
	Message string `protobuf:"bytes,2,opt,name=message,proto3" json:"message,omitempty"`
	// contains filtered or unexported fields
}

type Rule_RuleType int32

type RunEvaluationRequest struct {

	// Required. The resource name of the Evaluation using the form:
	// `projects/{project}/locations/{location}/evaluations/{evaluation}`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Required. ID of the execution which will be created.
	ExecutionId string `protobuf:"bytes,2,opt,name=execution_id,json=executionId,proto3" json:"execution_id,omitempty"`
	// Required. The resource being created.
	Execution *Execution `protobuf:"bytes,3,opt,name=execution,proto3" json:"execution,omitempty"`
	// Optional. An optional request ID to identify requests. Specify a unique
	// request ID so that if you must retry your request, the server will know to
	// ignore the request if it has already been completed. The server will
	// guarantee that for at least 60 minutes since the first request.
	//
	// For example, consider a situation where you make an initial request and
	// the request times out. If you make the request again with the same request
	// ID, the server can check if original operation with the same request ID
	// was received, and if so, will ignore the second request. This prevents
	// clients from accidentally creating duplicate commitments.
	//
	// The request ID must be a valid UUID with the exception that zero UUID is
	// not supported (00000000-0000-0000-0000-000000000000).
	RequestId string `protobuf:"bytes,4,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

type ScannedResource struct {

	// Resource name.
	Resource string `protobuf:"bytes,1,opt,name=resource,proto3" json:"resource,omitempty"`
	// Resource type.
	Type string `protobuf:"bytes,2,opt,name=type,proto3" json:"type,omitempty"`
	// contains filtered or unexported fields
}

type ShellCommand struct {

	// The name of the command to be executed.
	Command string `protobuf:"bytes,1,opt,name=command,proto3" json:"command,omitempty"`
	// Arguments to be passed to the command.
	Args string `protobuf:"bytes,2,opt,name=args,proto3" json:"args,omitempty"`
	// Optional. If not specified, the default timeout is 60 seconds.
	TimeoutSeconds int32 `protobuf:"varint,3,opt,name=timeout_seconds,json=timeoutSeconds,proto3" json:"timeout_seconds,omitempty"`
	// contains filtered or unexported fields
}

type UnimplementedWorkloadManagerServer struct {
}

type UnsafeWorkloadManagerServer interface {
	// contains filtered or unexported methods
}

type UpdateEvaluationRequest struct {

	// Required. Field mask is used to specify the fields to be overwritten in the
	// Evaluation resource by the update.
	// The fields specified in the update_mask are relative to the resource, not
	// the full request. A field will be overwritten if it is in the mask.
	UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,1,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	// Required. The resource being updated.
	Evaluation *Evaluation `protobuf:"bytes,2,opt,name=evaluation,proto3" json:"evaluation,omitempty"`
	// Optional. An optional request ID to identify requests. Specify a unique
	// request ID so that if you must retry your request, the server will know to
	// ignore the request if it has already been completed. The server will
	// guarantee that for at least 60 minutes since the first request.
	//
	// For example, consider a situation where you make an initial request and
	// the request times out. If you make the request again with the same request
	// ID, the server can check if original operation with the same request ID
	// was received, and if so, will ignore the second request. This prevents
	// clients from accidentally creating duplicate commitments.
	//
	// The request ID must be a valid UUID with the exception that zero UUID is
	// not supported (00000000-0000-0000-0000-000000000000).
	RequestId string `protobuf:"bytes,3,opt,name=request_id,json=requestId,proto3" json:"request_id,omitempty"`
	// contains filtered or unexported fields
}

type ViolationDetails struct {

	// The name of the asset.
	Asset string `protobuf:"bytes,1,opt,name=asset,proto3" json:"asset,omitempty"`
	// The service account associated with the resource.
	ServiceAccount string `protobuf:"bytes,2,opt,name=service_account,json=serviceAccount,proto3" json:"service_account,omitempty"`
	// Details of the violation.
	Observed map[string]string `` /* 157-byte string literal not displayed */
	// Output only. The rule output of the violation.
	RuleOutput []*RuleOutput `protobuf:"bytes,4,rep,name=rule_output,json=ruleOutput,proto3" json:"rule_output,omitempty"`
	// contains filtered or unexported fields
}

type WorkloadManagerClient interface {
	// Lists Evaluations in a given project and location.
	ListEvaluations(ctx context.Context, in *ListEvaluationsRequest, opts ...grpc.CallOption) (*ListEvaluationsResponse, error)
	// Gets details of a single Evaluation.
	GetEvaluation(ctx context.Context, in *GetEvaluationRequest, opts ...grpc.CallOption) (*Evaluation, error)
	// Creates a new Evaluation in a given project and location.
	CreateEvaluation(ctx context.Context, in *CreateEvaluationRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Updates the parameters of a single Evaluation.
	UpdateEvaluation(ctx context.Context, in *UpdateEvaluationRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Deletes a single Evaluation.
	DeleteEvaluation(ctx context.Context, in *DeleteEvaluationRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Lists Executions in a given project and location.
	ListExecutions(ctx context.Context, in *ListExecutionsRequest, opts ...grpc.CallOption) (*ListExecutionsResponse, error)
	// Gets details of a single Execution.
	GetExecution(ctx context.Context, in *GetExecutionRequest, opts ...grpc.CallOption) (*Execution, error)
	// Creates a new Execution in a given project and location.
	RunEvaluation(ctx context.Context, in *RunEvaluationRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Deletes a single Execution.
	DeleteExecution(ctx context.Context, in *DeleteExecutionRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Lists the result of a single evaluation.
	ListExecutionResults(ctx context.Context, in *ListExecutionResultsRequest, opts ...grpc.CallOption) (*ListExecutionResultsResponse, error)
	// Lists rules in a given project.
	ListRules(ctx context.Context, in *ListRulesRequest, opts ...grpc.CallOption) (*ListRulesResponse, error)
	// List all scanned resources for a single Execution.
	ListScannedResources(ctx context.Context, in *ListScannedResourcesRequest, opts ...grpc.CallOption) (*ListScannedResourcesResponse, error)
}

type WorkloadManagerServer interface {
	// Lists Evaluations in a given project and location.
	ListEvaluations(context.Context, *ListEvaluationsRequest) (*ListEvaluationsResponse, error)
	// Gets details of a single Evaluation.
	GetEvaluation(context.Context, *GetEvaluationRequest) (*Evaluation, error)
	// Creates a new Evaluation in a given project and location.
	CreateEvaluation(context.Context, *CreateEvaluationRequest) (*longrunningpb.Operation, error)
	// Updates the parameters of a single Evaluation.
	UpdateEvaluation(context.Context, *UpdateEvaluationRequest) (*longrunningpb.Operation, error)
	// Deletes a single Evaluation.
	DeleteEvaluation(context.Context, *DeleteEvaluationRequest) (*longrunningpb.Operation, error)
	// Lists Executions in a given project and location.
	ListExecutions(context.Context, *ListExecutionsRequest) (*ListExecutionsResponse, error)
	// Gets details of a single Execution.
	GetExecution(context.Context, *GetExecutionRequest) (*Execution, error)
	// Creates a new Execution in a given project and location.
	RunEvaluation(context.Context, *RunEvaluationRequest) (*longrunningpb.Operation, error)
	// Deletes a single Execution.
	DeleteExecution(context.Context, *DeleteExecutionRequest) (*longrunningpb.Operation, error)
	// Lists the result of a single evaluation.
	ListExecutionResults(context.Context, *ListExecutionResultsRequest) (*ListExecutionResultsResponse, error)
	// Lists rules in a given project.
	ListRules(context.Context, *ListRulesRequest) (*ListRulesResponse, error)
	// List all scanned resources for a single Execution.
	ListScannedResources(context.Context, *ListScannedResourcesRequest) (*ListScannedResourcesResponse, error)
}