ateapipb

type Actor struct {

	// Common resource metadata: atespace, name, uid, version, timestamps.
	//
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Metadata *ResourceMetadata `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// TODO: replace with full actor_template spec if we decide to make each Actor self-contained.
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	// +k8s:mutable
	ActorTemplate *ObjectRef `protobuf:"bytes,4,opt,name=actor_template,json=actorTemplate,proto3" json:"actor_template,omitempty"`
	// worker_selector is the per-actor placement constraint. The scheduler
	// evaluates the AND of this selector and the template's workerSelector to
	// find eligible pools.
	// Changes take effect on the next ResumeActor call.
	//
	// +k8s:optional
	WorkerSelector *Selector `protobuf:"bytes,5,opt,name=worker_selector,json=workerSelector,proto3" json:"worker_selector,omitempty"`
	// The tag specified by the caller at CreateActor to seed this Actor from an
	// ActorSnapshot. Unset if the Actor was not created from a snapshot. Set
	// once at creation and immutable afterward.
	//
	// +k8s:optional
	// +k8s:subfield(atespace)=+k8s:required
	// +k8s:immutable
	SourceTag *ObjectRef `protobuf:"bytes,6,opt,name=source_tag,json=sourceTag,proto3" json:"source_tag,omitempty"`
	// status is the system-managed state of the Actor. It is updated by the
	// server and ignored on input. It is always present in output.
	//
	// +k8s:optional
	Status *ActorStatus `protobuf:"bytes,7,opt,name=status,proto3" json:"status,omitempty"`
	// contains filtered or unexported fields
}

type ActorAssignment struct {

	// Metadata about the assignment.
	//
	// The atespace field is always empty, since it corresponds to a Worker, and
	// Workers are not atespaced. The name field is the Actor's UID, so the Actor
	// that caused an assignment is what addresses it.
	//
	// +k8s:required
	// +k8s:beta(since: "0.0")=+k8s:subfield(atespace)=+k8s:forbidden # TODO: get rid of beta prefix
	Metadata *ResourceMetadata `protobuf:"bytes,6,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// actor is the Actor that is assigned to the Worker.
	//
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Actor *ObjectRef `protobuf:"bytes,2,opt,name=actor,proto3" json:"actor,omitempty"`
	// +k8s:required
	// +k8s:format=k8s-uuid
	ActorUid string `protobuf:"bytes,3,opt,name=actor_uid,json=actorUid,proto3" json:"actor_uid,omitempty"`
	// actor_template_ref names the ActorTemplate resource the assigned Actor
	// uses.
	//
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	ActorTemplateRef *ObjectRef `protobuf:"bytes,4,opt,name=actor_template_ref,json=actorTemplateRef,proto3" json:"actor_template_ref,omitempty"`
	// The resources allocated to the Actor when it was assigned.
	//
	// +k8s:optional
	Resources *Resources `protobuf:"bytes,5,opt,name=resources,proto3" json:"resources,omitempty"`
	// contains filtered or unexported fields
}

type ActorCertificatePurpose int32

type ActorIdentityClient interface {
	// Request an Actor Identity JWT.
	//
	// To call this RPC, you must be authenticated as the Kubernetes Pod that is
	// currently running the requested actor.
	MintJWT(ctx context.Context, in *MintJWTRequest, opts ...grpc.CallOption) (*MintJWTResponse, error)
	// Request an Actor Identity Certificate for an actor.
	//
	// Actors do not call this RPC themselves. The atelet hosting the actor calls
	// it on the actor's behalf, authenticating with its own client certificate
	// rather than a bearer token.
	//
	// Authorization is decided on that client certificate and the worker
	// identity attested by atelet. Ateapi verifies that the worker is assigned to
	// the actor and that the actor points back to that exact worker before signing.
	//
	// The certificate in the response is the actor's identity, not the atelet's.
	MintCert(ctx context.Context, in *MintCertRequest, opts ...grpc.CallOption) (*MintCertResponse, error)
}

type ActorIdentityServer interface {
	// Request an Actor Identity JWT.
	//
	// To call this RPC, you must be authenticated as the Kubernetes Pod that is
	// currently running the requested actor.
	MintJWT(context.Context, *MintJWTRequest) (*MintJWTResponse, error)
	// Request an Actor Identity Certificate for an actor.
	//
	// Actors do not call this RPC themselves. The atelet hosting the actor calls
	// it on the actor's behalf, authenticating with its own client certificate
	// rather than a bearer token.
	//
	// Authorization is decided on that client certificate and the worker
	// identity attested by atelet. Ateapi verifies that the worker is assigned to
	// the actor and that the actor points back to that exact worker before signing.
	//
	// The certificate in the response is the actor's identity, not the atelet's.
	MintCert(context.Context, *MintCertRequest) (*MintCertResponse, error)
	// contains filtered or unexported methods
}

type ActorMetadataDataSource struct {

	// items must not project the same field twice, and item paths must be
	// unique.
	//
	// +k8s:required
	// +k8s:minItems=1
	// +k8s:maxItems=8
	// +k8s:listType=atomic
	// +k8s:unique=map
	// +k8s:listMapKey=field
	Items []*ActorMetadataItem `protobuf:"bytes,1,rep,name=items,proto3" json:"items,omitempty"`
	// contains filtered or unexported fields
}

type ActorMetadataField int32

type ActorMetadataItem struct {

	// +k8s:required
	// +k8s:minimum=1
	// +k8s:maximum=3 # keep this in sync with the ActorMetadataField enum
	Field ActorMetadataField `protobuf:"varint,1,opt,name=field,proto3,enum=ateapi.ActorMetadataField" json:"field,omitempty"`
	// +k8s:required
	// +k8s:minLength=1
	// +k8s:maxLength=255
	Path string `protobuf:"bytes,2,opt,name=path,proto3" json:"path,omitempty"`
	// contains filtered or unexported fields
}

type ActorState int32

type ActorStatus struct {

	// state is the Actor's current lifecycle state.
	//
	// +k8s:required
	// +k8s:minimum=1
	// +k8s:maximum=8 # keep this in sync with the ActorState enum
	State ActorState `protobuf:"varint,1,opt,name=state,proto3,enum=ateapi.ActorState" json:"state,omitempty"`
	// worker_assignment points at the worker currently hosting this Actor.
	// Unset whenever the Actor has no worker (SUSPENDED, PAUSED, CRASHED).
	//
	// +k8s:optional
	// +k8s:update=NoModify # can be set and cleared, but not changed in place
	WorkerAssignment *WorkerAssignment `protobuf:"bytes,2,opt,name=worker_assignment,json=workerAssignment,proto3" json:"worker_assignment,omitempty"`
	// The name the in-progress durable snapshot will be stored under. Snapshot
	// names are server-generated UUIDs, but any resource name is valid here.
	//
	// +k8s:optional
	// +k8s:format=k8s-short-name
	InProgressSnapshotName string `` /* 131-byte string literal not displayed */
	// external_snapshot is the Actor's current external snapshot.
	// If the Actor was created from a Tag this is the tag's snapshot, borrowed
	// until the Actor's first suspend writes one of its own. Otherwise it is
	// unset until the Actor is first suspended.
	// +k8s:optional
	ExternalSnapshot *ExternalSnapshot `protobuf:"bytes,4,opt,name=external_snapshot,json=externalSnapshot,proto3" json:"external_snapshot,omitempty"`
	// Node-local state used only while the Actor is paused.
	//
	// +k8s:optional
	LocalSnapshotInfo *LocalSnapshotInfo `protobuf:"bytes,5,opt,name=local_snapshot_info,json=localSnapshotInfo,proto3" json:"local_snapshot_info,omitempty"`
	// Volumes attached to the actor. These volumes only live as long as the actor.
	// They are deleted when the actor is deleted. Each template volume
	// appears at most once.
	//
	// TODO: consider a literal map keyed by volume_name instead of a list-map.
	//
	// +k8s:optional
	// +k8s:maxItems=32 # matches the template's volumes bound
	// +k8s:listType=map
	// +k8s:listMapKey=volume_name
	ActorVolumes []*ExternalVolume `protobuf:"bytes,7,rep,name=actor_volumes,json=actorVolumes,proto3" json:"actor_volumes,omitempty"`
	// The name of the in-progress node-local checkpoint. Like durable snapshot
	// names, these are server-generated UUIDs.
	//
	// +k8s:optional
	// +k8s:format=k8s-short-name
	InProgressLocalSnapshotName string `` /* 148-byte string literal not displayed */
	// The UID of the actor template the Actor's guest state is currently built
	// on: the one its latest sprint booted with, recorded when the resume (or
	// first boot) commits RUNNING, or at creation for an Actor seeded from a tag,
	// since that Actor borrows guest state that was already built. Empty means
	// the Actor has no guest state yet.
	// Diverges from the UID of the Actor's actor_template ref when a suspended
	// Actor is repointed at a replacement template, which forces the next
	// restore to data-only.
	//
	// +k8s:optional
	CurrentActorTemplateUid string `` /* 135-byte string literal not displayed */
	// contains filtered or unexported fields
}

type ActorTemplate struct {

	// Common resource metadata: atespace, name, uid, version, timestamps.
	//
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Metadata *ResourceMetadata `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// worker_selector restricts which worker pools actors from this template
	// may use.
	//
	// +k8s:optional
	WorkerSelector *Selector `protobuf:"bytes,2,opt,name=worker_selector,json=workerSelector,proto3" json:"worker_selector,omitempty"`
	// +k8s:required # at least one container
	// +k8s:maxItems=10
	// +k8s:listType=map
	// +k8s:listMapKey=name
	Containers []*Container `protobuf:"bytes,3,rep,name=containers,proto3" json:"containers,omitempty"`
	// +k8s:optional
	// +k8s:maxItems=32
	// +k8s:listType=map
	// +k8s:listMapKey=name
	Volumes []*Volume `protobuf:"bytes,4,rep,name=volumes,proto3" json:"volumes,omitempty"`
	// +k8s:required
	SnapshotsConfig *SnapshotsConfig `protobuf:"bytes,5,opt,name=snapshots_config,json=snapshotsConfig,proto3" json:"snapshots_config,omitempty"`
	// sandbox_config selects the sandbox runtime this version's actors run on.
	//
	// +k8s:required
	SandboxConfig *SandboxConfig `protobuf:"bytes,6,opt,name=sandbox_config,json=sandboxConfig,proto3" json:"sandbox_config,omitempty"`
	// Resource usage configuration.
	//
	// +k8s:optional
	Resources *Resources `protobuf:"bytes,7,opt,name=resources,proto3" json:"resources,omitempty"`
	// +k8s:optional
	Status *ActorTemplateStatus `protobuf:"bytes,8,opt,name=status,proto3" json:"status,omitempty"`
	// contains filtered or unexported fields
}

type ActorTemplateStatus struct {

	// +k8s:optional
	GoldenSnapshotStatus *GoldenSnapshotStatus `protobuf:"bytes,1,opt,name=golden_snapshot_status,json=goldenSnapshotStatus,proto3" json:"golden_snapshot_status,omitempty"`
	// contains filtered or unexported fields
}

type Atespace struct {

	// Common resource metadata: name, uid, version, timestamps.
	//
	// +k8s:required
	// +k8s:beta(since: "0.0")=+k8s:subfield(atespace)=+k8s:forbidden # TODO: get rid of beta prefix
	Metadata *ResourceMetadata `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// contains filtered or unexported fields
}

type Capabilities struct {

	// add lists capabilities to grant on top of the default set. "ALL" is
	// rejected: name the individual capabilities the container needs.
	//
	// +k8s:optional
	// +k8s:maxItems=64
	// +k8s:listType=set
	// +k8s:customValidation # capability grammar; "ALL" not accepted
	Add []string `protobuf:"bytes,1,rep,name=add,proto3" json:"add,omitempty"`
	// drop lists capabilities to remove from the default set. "ALL" drops the
	// whole set, so drop+add expresses an exact set rather than a relative one.
	//
	// +k8s:optional
	// +k8s:maxItems=64
	// +k8s:listType=set
	// +k8s:customValidation # capability grammar
	Drop []string `protobuf:"bytes,2,rep,name=drop,proto3" json:"drop,omitempty"`
	// contains filtered or unexported fields
}

type Container struct {

	// +k8s:required
	// +k8s:format=k8s-short-name
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// +k8s:required
	// +k8s:maxLength=512 # matches ImageVolumeSource.reference's bound
	// TODO: validate that this is a well-formed image reference
	Image string `protobuf:"bytes,2,opt,name=image,proto3" json:"image,omitempty"`
	// Entrypoint array; when set, the image's ENTRYPOINT and CMD are both
	// ignored and the process argv is command + args. Unlike Kubernetes,
	// $(VAR_NAME) references are NOT expanded.
	//
	// +k8s:optional
	// +k8s:maxItems=64
	// +k8s:listType=atomic
	// +k8s:eachVal=+k8s:maxLength=4096 # argv strings; guardrail, not a contract
	Command []string `protobuf:"bytes,3,rep,name=command,proto3" json:"command,omitempty"`
	// Arguments to the entrypoint; the image's CMD is used if unset (unless
	// command is set, which discards the image's CMD).
	//
	// +k8s:optional
	// +k8s:maxItems=64
	// +k8s:listType=atomic
	// +k8s:eachVal=+k8s:maxLength=4096 # argv strings; guardrail, not a contract
	Args []string `protobuf:"bytes,4,rep,name=args,proto3" json:"args,omitempty"`
	// Env variables to set in the container's process environment. Unlike
	// Kubernetes, $(VAR_NAME) references are NOT expanded in this field.
	//
	// +k8s:optional
	// +k8s:maxItems=32
	// +k8s:listType=map # each variable is set at most once
	// +k8s:listMapKey=name
	Env []*EnvVar `protobuf:"bytes,5,rep,name=env,proto3" json:"env,omitempty"`
	// readyz is an optional HTTP readiness probe; when set the actor is not
	// ready until the endpoint returns 200.
	//
	// +k8s:optional
	Readyz *ContainerReadyz `protobuf:"bytes,6,opt,name=readyz,proto3" json:"readyz,omitempty"`
	// TODO: Kubernetes permits mounting a single volume at multiple paths
	// (which requires keying by mountPath). We restrict it to one mount per
	// volume (keyed by name).
	//
	// +k8s:optional
	// +k8s:maxItems=32
	// +k8s:listType=map
	// +k8s:listMapKey=name
	// +k8s:customValidation # mount_path must be unique within the container
	VolumeMounts []*VolumeMount `protobuf:"bytes,7,rep,name=volume_mounts,json=volumeMounts,proto3" json:"volume_mounts,omitempty"`
	// security_context adjusts the container's security settings. Unset leaves
	// the default capability set.
	//
	// +k8s:optional
	SecurityContext *SecurityContext `protobuf:"bytes,8,opt,name=security_context,json=securityContext,proto3" json:"security_context,omitempty"`
	// resources carries this container's compute limits, enforced inside the
	// actor's sandbox. Only cpu and memory limits are supported.
	//
	// +k8s:optional
	Resources *Resources `protobuf:"bytes,9,opt,name=resources,proto3" json:"resources,omitempty"`
	// contains filtered or unexported fields
}

type ContainerReadyz struct {

	// http_get specifies the HTTP request to perform. Required.
	//
	// +k8s:required
	HttpGet *HTTPGetAction `protobuf:"bytes,1,opt,name=http_get,json=httpGet,proto3" json:"http_get,omitempty"`
	// timeout_seconds bounds how long to poll http_get before failing the
	// actor start. 0 means the server-applied default (30s).
	//
	// +k8s:optional
	// +k8s:minimum=1
	// +k8s:maximum=3600
	TimeoutSeconds int32 `protobuf:"varint,2,opt,name=timeout_seconds,json=timeoutSeconds,proto3" json:"timeout_seconds,omitempty"`
	// contains filtered or unexported fields
}

type ControlClient interface {
	// Get an Actor.
	GetActor(ctx context.Context, in *GetActorRequest, opts ...grpc.CallOption) (*Actor, error)
	// Create a new Actor deriving from a given ActorTemplate.
	CreateActor(ctx context.Context, in *CreateActorRequest, opts ...grpc.CallOption) (*Actor, error)
	// Update mutable fields on an existing Actor.
	UpdateActor(ctx context.Context, in *UpdateActorRequest, opts ...grpc.CallOption) (*Actor, error)
	// Suspend a given actor to a new snapshot. A running actor is checkpointed
	// on its worker; a paused actor's node-local snapshot is uploaded, narrowed
	// to the template's commit scope where required (Full capture, Data commit).
	SuspendActor(ctx context.Context, in *SuspendActorRequest, opts ...grpc.CallOption) (*SuspendActorResponse, error)
	// Pause a given actor and keep its snapshots on node VM.
	PauseActor(ctx context.Context, in *PauseActorRequest, opts ...grpc.CallOption) (*PauseActorResponse, error)
	// Resume an actor from its latest snapshot.
	ResumeActor(ctx context.Context, in *ResumeActorRequest, opts ...grpc.CallOption) (*ResumeActorResponse, error)
	// Delete an actor. Only suspended actors can be deleted.
	DeleteActor(ctx context.Context, in *DeleteActorRequest, opts ...grpc.CallOption) (*Actor, error)
	// Get the egress policy resource nested under an Actor.
	GetActorEgressPolicy(ctx context.Context, in *GetActorEgressPolicyRequest, opts ...grpc.CallOption) (*EgressPolicy, error)
	// Create the egress policy resource nested under an Actor.
	CreateActorEgressPolicy(ctx context.Context, in *CreateActorEgressPolicyRequest, opts ...grpc.CallOption) (*EgressPolicy, error)
	// Replace the egress policy resource nested under an Actor.
	UpdateActorEgressPolicy(ctx context.Context, in *UpdateActorEgressPolicyRequest, opts ...grpc.CallOption) (*EgressPolicy, error)
	// Delete the egress policy resource nested under an Actor.
	DeleteActorEgressPolicy(ctx context.Context, in *DeleteActorEgressPolicyRequest, opts ...grpc.CallOption) (*EgressPolicy, error)
	// Tag the external snapshot a suspended Actor holds. The tag gets its own
	// copy of that snapshot, so suspending or deleting the Actor afterwards
	// cannot collect it.
	CreateTag(ctx context.Context, in *CreateTagRequest, opts ...grpc.CallOption) (*Tag, error)
	// Get a Tag.
	GetTag(ctx context.Context, in *GetTagRequest, opts ...grpc.CallOption) (*Tag, error)
	// List Tags.
	ListTags(ctx context.Context, in *ListTagsRequest, opts ...grpc.CallOption) (*ListTagsResponse, error)
	// Publish or unpublish a Tag without changing its address.
	UpdateTag(ctx context.Context, in *UpdateTagRequest, opts ...grpc.CallOption) (*Tag, error)
	// Delete a Tag and the external snapshot it owns. Actors created from the
	// tag that have not yet been suspended still point at that external snapshot
	// and become unrecoverable, so do not delete a tag while such Actors exist.
	DeleteTag(ctx context.Context, in *DeleteTagRequest, opts ...grpc.CallOption) (*Tag, error)
	// List Workers.
	ListWorkers(ctx context.Context, in *ListWorkersRequest, opts ...grpc.CallOption) (*ListWorkersResponse, error)
	// Get a Worker.
	GetWorker(ctx context.Context, in *GetWorkerRequest, opts ...grpc.CallOption) (*Worker, error)
	// Register a Worker. Called once its Pod is Ready and has an IP.
	CreateWorker(ctx context.Context, in *CreateWorkerRequest, opts ...grpc.CallOption) (*Worker, error)
	// Update observed pool state on a Worker.
	UpdateWorker(ctx context.Context, in *UpdateWorkerRequest, opts ...grpc.CallOption) (*Worker, error)
	// Deregister a Worker. Does not cascade: the caller is responsible for
	// cleaning up related resources first.
	DeleteWorker(ctx context.Context, in *DeleteWorkerRequest, opts ...grpc.CallOption) (*Worker, error)
	// Mark a Worker as terminating so the scheduler stops routing new Actors to
	// it. Idempotent; one-way. Deliberately leaves any bound Actor alone.
	// Returns ABORTED if another write lands on the Worker first; retry.
	DrainWorker(ctx context.Context, in *DrainWorkerRequest, opts ...grpc.CallOption) (*Worker, error)
	// List the Actors hosted by a given Worker.
	ListWorkerActorAssignments(ctx context.Context, in *ListWorkerActorAssignmentsRequest, opts ...grpc.CallOption) (*ListWorkerActorAssignmentsResponse, error)
	// List Actors.
	ListActors(ctx context.Context, in *ListActorsRequest, opts ...grpc.CallOption) (*ListActorsResponse, error)
	// Create a new Atespace. Substrate-native, stored in database.
	CreateAtespace(ctx context.Context, in *CreateAtespaceRequest, opts ...grpc.CallOption) (*Atespace, error)
	// Get an Atespace by name.
	GetAtespace(ctx context.Context, in *GetAtespaceRequest, opts ...grpc.CallOption) (*Atespace, error)
	// List Atespaces.
	ListAtespaces(ctx context.Context, in *ListAtespacesRequest, opts ...grpc.CallOption) (*ListAtespacesResponse, error)
	// Delete an empty Atespace. Rejects (FailedPrecondition) if any Actors or
	// Tags remain.
	DeleteAtespace(ctx context.Context, in *DeleteAtespaceRequest, opts ...grpc.CallOption) (*Atespace, error)
	CreateActorTemplate(ctx context.Context, in *CreateActorTemplateRequest, opts ...grpc.CallOption) (*ActorTemplate, error)
	GetActorTemplate(ctx context.Context, in *GetActorTemplateRequest, opts ...grpc.CallOption) (*ActorTemplate, error)
	ListActorTemplates(ctx context.Context, in *ListActorTemplatesRequest, opts ...grpc.CallOption) (*ListActorTemplatesResponse, error)
	// Delete an ActorTemplate together with its golden actor and golden
	// snapshot in the ActorTemplate's namespace.
	DeleteActorTemplate(ctx context.Context, in *DeleteActorTemplateRequest, opts ...grpc.CallOption) (*ActorTemplate, error)
}

type ControlServer interface {
	// Get an Actor.
	GetActor(context.Context, *GetActorRequest) (*Actor, error)
	// Create a new Actor deriving from a given ActorTemplate.
	CreateActor(context.Context, *CreateActorRequest) (*Actor, error)
	// Update mutable fields on an existing Actor.
	UpdateActor(context.Context, *UpdateActorRequest) (*Actor, error)
	// Suspend a given actor to a new snapshot. A running actor is checkpointed
	// on its worker; a paused actor's node-local snapshot is uploaded, narrowed
	// to the template's commit scope where required (Full capture, Data commit).
	SuspendActor(context.Context, *SuspendActorRequest) (*SuspendActorResponse, error)
	// Pause a given actor and keep its snapshots on node VM.
	PauseActor(context.Context, *PauseActorRequest) (*PauseActorResponse, error)
	// Resume an actor from its latest snapshot.
	ResumeActor(context.Context, *ResumeActorRequest) (*ResumeActorResponse, error)
	// Delete an actor. Only suspended actors can be deleted.
	DeleteActor(context.Context, *DeleteActorRequest) (*Actor, error)
	// Get the egress policy resource nested under an Actor.
	GetActorEgressPolicy(context.Context, *GetActorEgressPolicyRequest) (*EgressPolicy, error)
	// Create the egress policy resource nested under an Actor.
	CreateActorEgressPolicy(context.Context, *CreateActorEgressPolicyRequest) (*EgressPolicy, error)
	// Replace the egress policy resource nested under an Actor.
	UpdateActorEgressPolicy(context.Context, *UpdateActorEgressPolicyRequest) (*EgressPolicy, error)
	// Delete the egress policy resource nested under an Actor.
	DeleteActorEgressPolicy(context.Context, *DeleteActorEgressPolicyRequest) (*EgressPolicy, error)
	// Tag the external snapshot a suspended Actor holds. The tag gets its own
	// copy of that snapshot, so suspending or deleting the Actor afterwards
	// cannot collect it.
	CreateTag(context.Context, *CreateTagRequest) (*Tag, error)
	// Get a Tag.
	GetTag(context.Context, *GetTagRequest) (*Tag, error)
	// List Tags.
	ListTags(context.Context, *ListTagsRequest) (*ListTagsResponse, error)
	// Publish or unpublish a Tag without changing its address.
	UpdateTag(context.Context, *UpdateTagRequest) (*Tag, error)
	// Delete a Tag and the external snapshot it owns. Actors created from the
	// tag that have not yet been suspended still point at that external snapshot
	// and become unrecoverable, so do not delete a tag while such Actors exist.
	DeleteTag(context.Context, *DeleteTagRequest) (*Tag, error)
	// List Workers.
	ListWorkers(context.Context, *ListWorkersRequest) (*ListWorkersResponse, error)
	// Get a Worker.
	GetWorker(context.Context, *GetWorkerRequest) (*Worker, error)
	// Register a Worker. Called once its Pod is Ready and has an IP.
	CreateWorker(context.Context, *CreateWorkerRequest) (*Worker, error)
	// Update observed pool state on a Worker.
	UpdateWorker(context.Context, *UpdateWorkerRequest) (*Worker, error)
	// Deregister a Worker. Does not cascade: the caller is responsible for
	// cleaning up related resources first.
	DeleteWorker(context.Context, *DeleteWorkerRequest) (*Worker, error)
	// Mark a Worker as terminating so the scheduler stops routing new Actors to
	// it. Idempotent; one-way. Deliberately leaves any bound Actor alone.
	// Returns ABORTED if another write lands on the Worker first; retry.
	DrainWorker(context.Context, *DrainWorkerRequest) (*Worker, error)
	// List the Actors hosted by a given Worker.
	ListWorkerActorAssignments(context.Context, *ListWorkerActorAssignmentsRequest) (*ListWorkerActorAssignmentsResponse, error)
	// List Actors.
	ListActors(context.Context, *ListActorsRequest) (*ListActorsResponse, error)
	// Create a new Atespace. Substrate-native, stored in database.
	CreateAtespace(context.Context, *CreateAtespaceRequest) (*Atespace, error)
	// Get an Atespace by name.
	GetAtespace(context.Context, *GetAtespaceRequest) (*Atespace, error)
	// List Atespaces.
	ListAtespaces(context.Context, *ListAtespacesRequest) (*ListAtespacesResponse, error)
	// Delete an empty Atespace. Rejects (FailedPrecondition) if any Actors or
	// Tags remain.
	DeleteAtespace(context.Context, *DeleteAtespaceRequest) (*Atespace, error)
	CreateActorTemplate(context.Context, *CreateActorTemplateRequest) (*ActorTemplate, error)
	GetActorTemplate(context.Context, *GetActorTemplateRequest) (*ActorTemplate, error)
	ListActorTemplates(context.Context, *ListActorTemplatesRequest) (*ListActorTemplatesResponse, error)
	// Delete an ActorTemplate together with its golden actor and golden
	// snapshot in the ActorTemplate's namespace.
	DeleteActorTemplate(context.Context, *DeleteActorTemplateRequest) (*ActorTemplate, error)
	// contains filtered or unexported methods
}

type CreateActorEgressPolicyRequest struct {

	// Parent Actor under which to create the policy resource.
	//
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Actor *ObjectRef `protobuf:"bytes,1,opt,name=actor,proto3" json:"actor,omitempty"`
	// The policy to create. metadata.name must be "default" and
	// metadata.atespace must match actor.atespace.
	//
	// +k8s:required
	EgressPolicy *EgressPolicy `protobuf:"bytes,2,opt,name=egress_policy,json=egressPolicy,proto3" json:"egress_policy,omitempty"`
	// contains filtered or unexported fields
}

type CreateActorRequest struct {

	// The actor to create.
	//
	// +k8s:required
	Actor *Actor `protobuf:"bytes,1,opt,name=actor,proto3" json:"actor,omitempty"`
	// contains filtered or unexported fields
}

type CreateActorTemplateRequest struct {

	// The actor template version to create. Server-assigned metadata (uid,
	// version, timestamps) is ignored, as are the status fields.
	//
	// +k8s:required
	// +k8s:customValidation # volume_mounts must reference declared volumes
	ActorTemplate *ActorTemplate `protobuf:"bytes,1,opt,name=actor_template,json=actorTemplate,proto3" json:"actor_template,omitempty"`
	// contains filtered or unexported fields
}

type CreateAtespaceRequest struct {

	// The atespace to create.
	//
	// +k8s:required
	Atespace *Atespace `protobuf:"bytes,1,opt,name=atespace,proto3" json:"atespace,omitempty"`
	// contains filtered or unexported fields
}

type CreateTagRequest struct {

	// The tag to create. metadata.atespace, metadata.name, scope and source_actor
	// are honored; metadata.atespace must match source_actor's, and status is
	// ignored on write.
	//
	// +k8s:required
	Tag *Tag `protobuf:"bytes,1,opt,name=tag,proto3" json:"tag,omitempty"`
	// contains filtered or unexported fields
}

type CreateWorkerRequest struct {

	// The Worker to register.
	//
	// +k8s:required
	Worker *Worker `protobuf:"bytes,1,opt,name=worker,proto3" json:"worker,omitempty"`
	// contains filtered or unexported fields
}

type CredentialHeaderInjection struct {

	// The case-insensitive HTTP request header to inject.
	//
	// +k8s:required
	// +k8s:customValidation # format
	Header string `protobuf:"bytes,1,opt,name=header,proto3" json:"header,omitempty"`
	// Prepended verbatim to the credential value. Include any desired separator;
	// for example, use "Bearer " (including the space) for Authorization.
	//
	// +k8s:optional
	// +k8s:customValidation # format
	Prefix string `protobuf:"bytes,2,opt,name=prefix,proto3" json:"prefix,omitempty"`
	// Source-agnostic reference interpreted by a registered credential provider:
	// substrate-secret://<provider-class>/<provider-name>/<provider-specific-tail>
	//
	// +k8s:required
	// +k8s:customValidation # format
	CredentialUri string `protobuf:"bytes,3,opt,name=credential_uri,json=credentialUri,proto3" json:"credential_uri,omitempty"`
	// contains filtered or unexported fields
}

type DeleteActorEgressPolicyRequest struct {

	// The parent Actor of the egress policy resource to delete.
	//
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Actor *ObjectRef `protobuf:"bytes,1,opt,name=actor,proto3" json:"actor,omitempty"`
	// contains filtered or unexported fields
}

type DeleteActorRequest struct {

	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Actor *ObjectRef `protobuf:"bytes,1,opt,name=actor,proto3" json:"actor,omitempty"`
	// If true, delete the actor regardless of its state.
	//
	// +k8s:optional
	AnyState bool `protobuf:"varint,2,opt,name=any_state,json=anyState,proto3" json:"any_state,omitempty"`
	// contains filtered or unexported fields
}

type DeleteActorTemplateRequest struct {

	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	ActorTemplate *ObjectRef `protobuf:"bytes,1,opt,name=actor_template,json=actorTemplate,proto3" json:"actor_template,omitempty"`
	// contains filtered or unexported fields
}

type DeleteAtespaceRequest struct {

	// +k8s:required
	// +k8s:beta(since: "0.0")=+k8s:subfield(atespace)=+k8s:forbidden # TODO: get rid of beta prefix
	Atespace *ObjectRef `protobuf:"bytes,1,opt,name=atespace,proto3" json:"atespace,omitempty"`
	// contains filtered or unexported fields
}

type DeleteOptions struct {

	// If non-zero, delete only if the server's current version matches.
	//
	// +k8s:optional
	// +k8s:minimum=1
	Version int64 `protobuf:"varint,1,opt,name=version,proto3" json:"version,omitempty"`
	// If non-empty, delete only if the server's current uid matches. Guards
	// against name reuse across lifecycles.
	//
	// +k8s:optional
	// +k8s:format=k8s-uuid
	Uid string `protobuf:"bytes,2,opt,name=uid,proto3" json:"uid,omitempty"`
	// contains filtered or unexported fields
}

type DeleteTagRequest struct {

	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Tag *ObjectRef `protobuf:"bytes,1,opt,name=tag,proto3" json:"tag,omitempty"`
	// contains filtered or unexported fields
}

type DeleteWorkerRequest struct {

	// The Worker to deregister.
	//
	// +k8s:required
	// +k8s:beta(since: "0.0")=+k8s:subfield(atespace)=+k8s:forbidden # TODO: get rid of beta prefix
	Worker *ObjectRef `protobuf:"bytes,1,opt,name=worker,proto3" json:"worker,omitempty"`
	// Optional per-delete preconditions.
	//
	// +k8s:optional
	Options *DeleteOptions `protobuf:"bytes,2,opt,name=options,proto3" json:"options,omitempty"`
	// contains filtered or unexported fields
}

type DrainWorkerRequest struct {

	// The Worker to mark as terminating.
	//
	// +k8s:required
	// +k8s:beta(since: "0.0")=+k8s:subfield(atespace)=+k8s:forbidden # TODO: get rid of beta prefix
	Worker *ObjectRef `protobuf:"bytes,1,opt,name=worker,proto3" json:"worker,omitempty"`
	// contains filtered or unexported fields
}

type DurableDirVolumeSource struct {
	// contains filtered or unexported fields
}

type EgressPolicy struct {

	// Standard resource metadata. Atespace must match the parent Actor and name
	// must be "default". Both are caller-specified on create and immutable.
	// UID, version, create_time, and update_time are server-managed.
	//
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	// +k8s:customValidation # name must be "default"
	Metadata *ResourceMetadata `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// Rules are evaluated in order. The first matching rule authorizes the
	// request, only that rule's effects are applied, and evaluation stops even if
	// later rules would also match. A request is denied when no rule matches.
	//
	// +k8s:optional
	// +k8s:maxItems=256
	// +k8s:listType=atomic # rule order matters
	Rules []*EgressRule `protobuf:"bytes,2,rep,name=rules,proto3" json:"rules,omitempty"`
	// contains filtered or unexported fields
}

type EgressRule struct {

	// Matches when the request hostname matches any configured pattern. Effects
	// are applied once when the rule matches.
	//
	// +k8s:optional
	// +k8s:unionMember
	Hostnames *HostnameRule `protobuf:"bytes,1,opt,name=hostnames,proto3" json:"hostnames,omitempty"`
	// Matches when the original destination IP belongs to any configured block.
	//
	// +k8s:optional
	// +k8s:unionMember
	IpBlocks *IPBlockRule `protobuf:"bytes,2,opt,name=ip_blocks,json=ipBlocks,proto3" json:"ip_blocks,omitempty"`
	// Matches every destination.
	//
	// +k8s:optional
	// +k8s:unionMember
	All *emptypb.Empty `protobuf:"bytes,3,opt,name=all,proto3" json:"all,omitempty"`
	// contains filtered or unexported fields
}

type EgressRuleEffects struct {

	// Injects values retrieved from credential providers into request headers.
	// Header names must be unique case-insensitively.
	//
	// +k8s:optional
	// +k8s:maxItems=16
	// +k8s:listType=map
	// +k8s:listMapKey=header
	// +k8s:customUnique # case-insensitive
	// +k8s:customValidation # for duplicate headers
	InjectStaticHeaders []*CredentialHeaderInjection `protobuf:"bytes,1,rep,name=inject_static_headers,json=injectStaticHeaders,proto3" json:"inject_static_headers,omitempty"`
	// contains filtered or unexported fields
}

type EnvVar struct {

	// name may be any printable ASCII character except '='.
	//
	// +k8s:required
	// +k8s:maxLength=256 # guardrail;
	// +k8s:customValidation # printable ASCII except '='
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// value is the literal value.
	//
	// +k8s:optional
	// +k8s:maxLength=32768 # guardrail;
	Value string `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

type ExternalSnapshot struct {

	// snapshot_uri addresses the snapshot's prefix in object storage.
	//
	// +k8s:required
	SnapshotUri string `protobuf:"bytes,1,opt,name=snapshot_uri,json=snapshotUri,proto3" json:"snapshot_uri,omitempty"`
	// content_scope is what the snapshot captured.
	//
	// +k8s:optional
	// +k8s:minimum=1
	// +k8s:maximum=2 # keep this in sync with the SnapshotContentScope enum
	ContentScope SnapshotContentScope `` /* 131-byte string literal not displayed */
	// contains filtered or unexported fields
}

type ExternalVolume struct {

	// Name of the volume specified in the actor template. Template volume
	// names are DNS labels.
	//
	// +k8s:required
	// +k8s:format=k8s-short-name
	// +k8s:update=NoModify
	// +k8s:update=NoUnset # set-once; immutable would reject the create
	// ratchet's nil->set when the final object is validated as an update
	VolumeName string `protobuf:"bytes,1,opt,name=volume_name,json=volumeName,proto3" json:"volume_name,omitempty"`
	// The globally unique volume_id returned from the storage system.
	// This will be initially empty during volume creation. Its format is the
	// storage system's own, so it is only bounded and checked for control
	// characters (U+0000-U+0008, U+000B, U+000C, U+000E-U+001F, U+007F-U+009F).
	// The CSI spec caps IDs at 128 bytes but does not require it, so allow
	// some slack. Set once when provisioning completes, then never changed.
	//
	// +k8s:optional
	// +k8s:maxLength=256
	// +k8s:update=NoModify
	// +k8s:update=NoUnset
	// +k8s:customValidation # no control characters
	StorageVolumeId string `protobuf:"bytes,2,opt,name=storage_volume_id,json=storageVolumeId,proto3" json:"storage_volume_id,omitempty"`
	// Internal volume plugin name or CSI driver name, from the StorageClass
	// provisioner. Must be a DNS subdomain, optionally prefixed with
	// "substrate.io/" (per the CSI spec's driver-name syntax).
	//
	// +k8s:required
	// +k8s:maxLength=253
	// +k8s:update=NoModify
	// +k8s:update=NoUnset # set-once, like volume_name above
	// +k8s:customValidation
	VolumeType string `protobuf:"bytes,3,opt,name=volume_type,json=volumeType,proto3" json:"volume_type,omitempty"`
	// +k8s:optional
	// +k8s:minimum=1
	// +k8s:maximum=3 # keep this in sync with the Status enum
	Status ExternalVolume_Status `protobuf:"varint,4,opt,name=status,proto3,enum=ateapi.ExternalVolume_Status" json:"status,omitempty"`
	// volume_context contains metadata returned by the CSI driver during volume
	// provisioning, needed by the node plugin for mounting (e.g. attachment
	// info). Keys and values are the driver's own, so they are only bounded,
	// not validated.
	//
	// +k8s:optional
	// +k8s:maxProperties=32
	// +k8s:eachKey=+k8s:maxLength=128
	// +k8s:eachVal=+k8s:maxLength=256
	VolumeContext map[string]string `` /* 174-byte string literal not displayed */
	// contains filtered or unexported fields
}

type ExternalVolumeTemplate struct {

	// capacity of the volume to create, in Kubernetes resource.Quantity string
	// form (e.g. "10Gi"). Required.
	//
	// +k8s:required
	// +k8s:customValidation # must parse as a resource.Quantity
	Capacity string `protobuf:"bytes,1,opt,name=capacity,proto3" json:"capacity,omitempty"`
	// storage_class_name names the cluster-scoped Kubernetes StorageClass to
	// create the volume from. Required.
	//
	// +k8s:required
	// +k8s:format=k8s-long-name
	StorageClassName string `protobuf:"bytes,2,opt,name=storage_class_name,json=storageClassName,proto3" json:"storage_class_name,omitempty"`
	// contains filtered or unexported fields
}

type ExternalVolume_Status int32

type GetActorEgressPolicyRequest struct {

	// The parent Actor of the egress policy resource to retrieve.
	//
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Actor *ObjectRef `protobuf:"bytes,1,opt,name=actor,proto3" json:"actor,omitempty"`
	// contains filtered or unexported fields
}

type GetActorRequest struct {

	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Actor *ObjectRef `protobuf:"bytes,1,opt,name=actor,proto3" json:"actor,omitempty"`
	// contains filtered or unexported fields
}

type GetActorTemplateRequest struct {

	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	ActorTemplate *ObjectRef `protobuf:"bytes,1,opt,name=actor_template,json=actorTemplate,proto3" json:"actor_template,omitempty"`
	// contains filtered or unexported fields
}

type GetAtespaceRequest struct {

	// +k8s:required
	// +k8s:beta(since: "0.0")=+k8s:subfield(atespace)=+k8s:forbidden # TODO: get rid of beta prefix
	Atespace *ObjectRef `protobuf:"bytes,1,opt,name=atespace,proto3" json:"atespace,omitempty"`
	// contains filtered or unexported fields
}

type GetTagRequest struct {

	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Tag *ObjectRef `protobuf:"bytes,1,opt,name=tag,proto3" json:"tag,omitempty"`
	// contains filtered or unexported fields
}

type GetWorkerRequest struct {

	// The Worker to fetch. atespace is always empty; Workers are global-scoped.
	//
	// +k8s:required
	// +k8s:beta(since: "0.0")=+k8s:subfield(atespace)=+k8s:forbidden # TODO: get rid of beta prefix
	Worker *ObjectRef `protobuf:"bytes,1,opt,name=worker,proto3" json:"worker,omitempty"`
	// contains filtered or unexported fields
}

type GoldenSnapshotStatus struct {

	// golden_snapshot is the external snapshot built for this version by
	// ate-api, taken from the golden Actor in the reserved ate-golden system
	// atespace. Set once state is READY. The golden Actor owns it.
	//
	// +k8s:optional
	GoldenSnapshot *ExternalSnapshot `protobuf:"bytes,1,opt,name=golden_snapshot,json=goldenSnapshot,proto3" json:"golden_snapshot,omitempty"`
	// take_golden_snapshot_at is when the golden-actor warmup ends and the
	// golden snapshot may be taken.
	TakeGoldenSnapshotAt *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=take_golden_snapshot_at,json=takeGoldenSnapshotAt,proto3" json:"take_golden_snapshot_at,omitempty"`
	ErrorMessage         string                 `protobuf:"bytes,3,opt,name=error_message,json=errorMessage,proto3" json:"error_message,omitempty"`
	// contains filtered or unexported fields
}

type HTTPGetAction struct {

	// path defaults to "/readyz". Must be a URL path starting with "/", using
	// only RFC 3986 path-segment characters, without query or fragment.
	//
	// +k8s:optional
	// +k8s:maxLength=1024
	// +k8s:customValidation # RFC 3986 path shape; no regex/pattern tag exists
	Path string `protobuf:"bytes,1,opt,name=path,proto3" json:"path,omitempty"`
	// +k8s:required
	// +k8s:minimum=1
	// +k8s:maximum=65535
	Port int32 `protobuf:"varint,2,opt,name=port,proto3" json:"port,omitempty"`
	// contains filtered or unexported fields
}

type HostnameRule struct {

	// DNS names, or DNS names with a wildcard "*" in the leftmost label. The
	// rule matches when any pattern matches.
	//
	// The DNS name must conform to RFC 1034 and RFC 1123. It must be lowercase
	// and must not have a trailing dot.
	//
	// A wildcard replaces the complete leftmost label. "*.example.com" matches
	// exactly one non-empty label, such as "api.example.com". It does not match
	// "example.com" or "nested.api.example.com". No other wildcard syntax is
	// accepted. A pattern without a wildcard matches only the complete normalized
	// name.
	//
	// Internationalized names must use their IDNA A-label (punycode) form; no
	// Unicode conversion is performed. URLs, IP addresses, names with ports,
	// malformed DNS names (for example, "foo..example.com"), and more than one
	// trailing dot are invalid.
	//
	// +k8s:required
	// +k8s:maxItems=256
	// +k8s:listType=set
	// +k8s:customValidation # format
	Patterns []string `protobuf:"bytes,1,rep,name=patterns,proto3" json:"patterns,omitempty"`
	// Effects do not authorize traffic. They are applied only when this is the
	// first matching rule.
	//
	// +k8s:optional
	Effects *EgressRuleEffects `protobuf:"bytes,2,opt,name=effects,proto3" json:"effects,omitempty"`
	// contains filtered or unexported fields
}

type IPBlockRule struct {

	// Canonical IPv4 or IPv6 CIDR prefixes. IPv4 uses dotted-decimal notation,
	// such as "192.0.2.0/24". IPv6 uses lowercase compressed notation, such as
	// "2001:db8::/32". Bits after the prefix length must be zero. The rule
	// matches when the original destination IP belongs to any prefix.
	//
	// +k8s:required
	// +k8s:maxItems=256
	// +k8s:listType=set
	// +k8s:customValidation # format
	Cidrs []string `protobuf:"bytes,1,rep,name=cidrs,proto3" json:"cidrs,omitempty"`
	// contains filtered or unexported fields
}

type ImageVolumeSource struct {

	// reference is the OCI image reference, pinned by digest.
	//
	// +k8s:required
	// +k8s:maxLength=512
	// +k8s:customValidation # must be pinned by digest; no contains tag exists
	Reference string `protobuf:"bytes,1,opt,name=reference,proto3" json:"reference,omitempty"`
	// contains filtered or unexported fields
}