ateapipb

type Actor struct {

	// Common resource metadata: atespace, name, uid, version, timestamps.
	//
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Metadata *ResourceMetadata `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// TODO: replace with full actor_template spec if we decide to make each Actor self-contained.
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	// +k8s:mutable
	ActorTemplate *ObjectRef `protobuf:"bytes,4,opt,name=actor_template,json=actorTemplate,proto3" json:"actor_template,omitempty"`
	// worker_selector is the per-actor placement constraint. The scheduler
	// evaluates the AND of this selector and the template's workerSelector to
	// find eligible pools.
	// Changes take effect on the next ResumeActor call.
	//
	// +k8s:optional
	WorkerSelector *Selector `protobuf:"bytes,5,opt,name=worker_selector,json=workerSelector,proto3" json:"worker_selector,omitempty"`
	// The tag specified by the caller at CreateActor to seed this Actor from an
	// ActorSnapshot. Unset if the Actor was not created from a snapshot. Set
	// once at creation and immutable afterward.
	//
	// +k8s:optional
	// +k8s:subfield(atespace)=+k8s:required
	// +k8s:immutable
	SourceTag *ObjectRef `protobuf:"bytes,6,opt,name=source_tag,json=sourceTag,proto3" json:"source_tag,omitempty"`
	// status is the system-managed state of the Actor. It is updated by the
	// server and ignored on input. It is always present in output.
	//
	// +k8s:optional
	Status *ActorStatus `protobuf:"bytes,7,opt,name=status,proto3" json:"status,omitempty"`
	// contains filtered or unexported fields
}

type ActorAssignment struct {

	// Metadata about the assignment.
	//
	// The atespace field is always empty, since it corresponds to a Worker, and
	// Workers are not atespaced. The name field is the Actor's UID, so the Actor
	// that caused an assignment is what addresses it.
	//
	// +k8s:required
	// +k8s:beta(since: "0.0")=+k8s:subfield(atespace)=+k8s:forbidden # TODO: get rid of beta prefix
	Metadata *ResourceMetadata `protobuf:"bytes,6,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// actor is the Actor that is assigned to the Worker.
	//
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Actor *ObjectRef `protobuf:"bytes,2,opt,name=actor,proto3" json:"actor,omitempty"`
	// +k8s:required
	// +k8s:format=k8s-uuid
	ActorUid string `protobuf:"bytes,3,opt,name=actor_uid,json=actorUid,proto3" json:"actor_uid,omitempty"`
	// actor_template_ref names the ActorTemplate resource the assigned Actor
	// uses.
	//
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	ActorTemplateRef *ObjectRef `protobuf:"bytes,4,opt,name=actor_template_ref,json=actorTemplateRef,proto3" json:"actor_template_ref,omitempty"`
	// The resources allocated to the Actor when it was assigned.
	//
	// +k8s:optional
	Resources *Resources `protobuf:"bytes,5,opt,name=resources,proto3" json:"resources,omitempty"`
	// contains filtered or unexported fields
}

type ActorCrash struct {

	// message is a human-readable description of the failure.
	//
	// +k8s:optional
	// +k8s:maxLength=4096
	Message string `protobuf:"bytes,1,opt,name=message,proto3" json:"message,omitempty"`
	// crash_time is when the Actor entered CRASHED.
	//
	// +k8s:optional
	CrashTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=crash_time,json=crashTime,proto3" json:"crash_time,omitempty"`
	// contains filtered or unexported fields
}

type ActorMetadataDataSource struct {

	// items must not project the same field twice, and item paths must be
	// unique.
	//
	// +k8s:required
	// +k8s:minItems=1
	// +k8s:maxItems=8
	// +k8s:listType=atomic
	// +k8s:unique=map
	// +k8s:listMapKey=field
	Items []*ActorMetadataItem `protobuf:"bytes,1,rep,name=items,proto3" json:"items,omitempty"`
	// contains filtered or unexported fields
}

type ActorMetadataField int32

type ActorMetadataItem struct {

	// +k8s:required
	// +k8s:minimum=1
	// +k8s:maximum=3 # keep this in sync with the ActorMetadataField enum
	Field ActorMetadataField `protobuf:"varint,1,opt,name=field,proto3,enum=ateapi.ActorMetadataField" json:"field,omitempty"`
	// path must be a clean relative Unix path: at most 16 '/'-separated
	// segments, none of them empty, '.' or '..', and no NUL byte.
	//
	// +k8s:required
	// +k8s:minLength=1
	// +k8s:maxLength=255
	// +k8s:customValidation # projected-path rule shared with atelet, see internal/volumepath
	Path string `protobuf:"bytes,2,opt,name=path,proto3" json:"path,omitempty"`
	// contains filtered or unexported fields
}

type ActorState int32

type ActorStatus struct {

	// state is the Actor's current lifecycle state.
	//
	// +k8s:required
	// +k8s:minimum=1
	// +k8s:maximum=9 # keep this in sync with the ActorState enum
	State ActorState `protobuf:"varint,1,opt,name=state,proto3,enum=ateapi.ActorState" json:"state,omitempty"`
	// worker_assignment points at the worker currently hosting this Actor.
	// Unset whenever the Actor has no worker (SUSPENDED, PAUSED, CRASHED).
	//
	// +k8s:optional
	// +k8s:update=NoModify # can be set and cleared, but not changed in place
	WorkerAssignment *WorkerAssignment `protobuf:"bytes,2,opt,name=worker_assignment,json=workerAssignment,proto3" json:"worker_assignment,omitempty"`
	// in_progress_snapshot_uri is the URI in object storage of the durable
	// snapshot the Actor is currently taking.
	//
	// +k8s:optional
	// +k8s:maxLength=2048 # the template's storage_location bound plus the owner prefix and snapshot name
	InProgressSnapshotUri string `` /* 128-byte string literal not displayed */
	// external_snapshot is the Actor's current external snapshot.
	// If the Actor was created from a Tag this is the tag's snapshot, borrowed
	// until the Actor's first suspend writes one of its own. Otherwise it is
	// unset until the Actor is first suspended.
	// +k8s:optional
	ExternalSnapshot *ExternalSnapshot `protobuf:"bytes,4,opt,name=external_snapshot,json=externalSnapshot,proto3" json:"external_snapshot,omitempty"`
	// Node-local state used only while the Actor is paused.
	//
	// +k8s:optional
	LocalSnapshot *LocalSnapshot `protobuf:"bytes,5,opt,name=local_snapshot,json=localSnapshot,proto3" json:"local_snapshot,omitempty"`
	// Volumes attached to the actor. These volumes only live as long as the actor.
	// They are deleted when the actor is deleted. Each template volume
	// appears at most once.
	//
	// +k8s:optional
	// +k8s:maxItems=32 # matches the template's volumes bound
	// +k8s:listType=map
	// +k8s:listMapKey=volume_name
	ActorVolumes []*ExternalVolume `protobuf:"bytes,7,rep,name=actor_volumes,json=actorVolumes,proto3" json:"actor_volumes,omitempty"`
	// The name of the in-progress node-local checkpoint. Like durable snapshot
	// names, these are server-generated UUIDs.
	//
	// +k8s:optional
	// +k8s:format=k8s-short-name
	InProgressLocalSnapshotName string `` /* 148-byte string literal not displayed */
	// crash records why and when the Actor entered CRASHED. It is set with the
	// CRASHED state and cleared when a revert returns the Actor to SUSPENDED.
	//
	// +k8s:optional
	Crash *ActorCrash `protobuf:"bytes,9,opt,name=crash,proto3" json:"crash,omitempty"`
	// contains filtered or unexported fields
}

type ActorTemplate struct {

	// Common resource metadata: atespace, name, uid, version, timestamps.
	//
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Metadata *ResourceMetadata `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// worker_selector restricts which worker pools actors from this template
	// may use.
	//
	// +k8s:optional
	WorkerSelector *Selector `protobuf:"bytes,2,opt,name=worker_selector,json=workerSelector,proto3" json:"worker_selector,omitempty"`
	// +k8s:required # at least one container
	// +k8s:maxItems=10
	// +k8s:listType=map
	// +k8s:listMapKey=name
	Containers []*Container `protobuf:"bytes,3,rep,name=containers,proto3" json:"containers,omitempty"`
	// +k8s:optional
	// +k8s:maxItems=32
	// +k8s:listType=map
	// +k8s:listMapKey=name
	Volumes []*Volume `protobuf:"bytes,4,rep,name=volumes,proto3" json:"volumes,omitempty"`
	// +k8s:required
	SnapshotConfig *SnapshotConfig `protobuf:"bytes,5,opt,name=snapshot_config,json=snapshotConfig,proto3" json:"snapshot_config,omitempty"`
	// sandbox_config selects the sandbox runtime this version's actors run on.
	//
	// +k8s:required
	SandboxConfig *SandboxConfig `protobuf:"bytes,6,opt,name=sandbox_config,json=sandboxConfig,proto3" json:"sandbox_config,omitempty"`
	// Resource usage configuration.
	//
	// +k8s:optional
	Resources *Resources `protobuf:"bytes,7,opt,name=resources,proto3" json:"resources,omitempty"`
	// +k8s:optional
	Status *ActorTemplateStatus `protobuf:"bytes,8,opt,name=status,proto3" json:"status,omitempty"`
	// contains filtered or unexported fields
}

type ActorTemplateStatus struct {

	// +k8s:optional
	GoldenSnapshotStatus *GoldenSnapshotStatus `protobuf:"bytes,1,opt,name=golden_snapshot_status,json=goldenSnapshotStatus,proto3" json:"golden_snapshot_status,omitempty"`
	// contains filtered or unexported fields
}

type AllPorts struct {
	// contains filtered or unexported fields
}

type Atespace struct {

	// Common resource metadata: name, uid, version, timestamps.
	//
	// +k8s:required
	// +k8s:beta(since: "0.0")=+k8s:subfield(atespace)=+k8s:forbidden # TODO: get rid of beta prefix
	Metadata *ResourceMetadata `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// contains filtered or unexported fields
}

type Capabilities struct {

	// add lists capabilities to grant on top of the default set. "ALL" is
	// rejected: name the individual capabilities the container needs.
	//
	// +k8s:optional
	// +k8s:maxItems=64
	// +k8s:listType=set
	// +k8s:customValidation # capability grammar; "ALL" not accepted
	Add []string `protobuf:"bytes,1,rep,name=add,proto3" json:"add,omitempty"`
	// drop lists capabilities to remove from the default set. "ALL" drops the
	// whole set, so drop+add expresses an exact set rather than a relative one.
	//
	// +k8s:optional
	// +k8s:maxItems=64
	// +k8s:listType=set
	// +k8s:customValidation # capability grammar
	Drop []string `protobuf:"bytes,2,rep,name=drop,proto3" json:"drop,omitempty"`
	// contains filtered or unexported fields
}

type Container struct {

	// +k8s:required
	// +k8s:format=k8s-short-name
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// image is the OCI image reference the container runs:
	// [registry/]repository[:tag]@digest. Must be pinned by digest
	// (e.g. "name@sha256:...").
	//
	// +k8s:required
	// +k8s:maxLength=512 # matches ImageVolumeSource.reference's bound
	// +k8s:customValidation # must be a well-formed image reference, pinned by digest
	Image string `protobuf:"bytes,2,opt,name=image,proto3" json:"image,omitempty"`
	// Entrypoint array; when set, the image's ENTRYPOINT and CMD are both
	// ignored and the process argv is command + args. Unlike Kubernetes,
	// $(VAR_NAME) references are NOT expanded.
	//
	// +k8s:optional
	// +k8s:maxItems=64
	// +k8s:listType=atomic
	// +k8s:eachVal=+k8s:maxLength=4096 # argv strings; guardrail, not a contract
	Command []string `protobuf:"bytes,3,rep,name=command,proto3" json:"command,omitempty"`
	// Arguments to the entrypoint; the image's CMD is used if unset (unless
	// command is set, which discards the image's CMD).
	//
	// +k8s:optional
	// +k8s:maxItems=64
	// +k8s:listType=atomic
	// +k8s:eachVal=+k8s:maxLength=4096 # argv strings; guardrail, not a contract
	Args []string `protobuf:"bytes,4,rep,name=args,proto3" json:"args,omitempty"`
	// Env variables to set in the container's process environment. Unlike
	// Kubernetes, $(VAR_NAME) references are NOT expanded in this field.
	//
	// +k8s:optional
	// +k8s:maxItems=32
	// +k8s:listType=map # each variable is set at most once
	// +k8s:listMapKey=name
	Env []*EnvVar `protobuf:"bytes,5,rep,name=env,proto3" json:"env,omitempty"`
	// wakeup_probe gates each wakeup on this container: ResumeActor returns
	// only after the probe answers HTTP 200. Without it, ResumeActor returns
	// as soon as the container has started, which may be before it listens.
	//
	// +k8s:optional
	WakeupProbe *ContainerWakeupProbe `protobuf:"bytes,6,opt,name=wakeup_probe,json=wakeupProbe,proto3" json:"wakeup_probe,omitempty"`
	// Keyed by mount_path: each path hosts exactly one mount, while a volume
	// may be mounted at multiple paths.
	//
	// +k8s:optional
	// +k8s:maxItems=32
	// +k8s:listType=map
	// +k8s:listMapKey=mount_path
	// +k8s:customValidation # mounts must not nest
	VolumeMounts []*VolumeMount `protobuf:"bytes,7,rep,name=volume_mounts,json=volumeMounts,proto3" json:"volume_mounts,omitempty"`
	// security_context adjusts the container's security settings. Unset leaves
	// the default capability set.
	//
	// +k8s:optional
	SecurityContext *SecurityContext `protobuf:"bytes,8,opt,name=security_context,json=securityContext,proto3" json:"security_context,omitempty"`
	// resources carries this container's compute limits, enforced inside the
	// actor's sandbox. Only cpu and memory limits are supported.
	//
	// +k8s:optional
	Resources *Resources `protobuf:"bytes,9,opt,name=resources,proto3" json:"resources,omitempty"`
	// contains filtered or unexported fields
}

type ContainerWakeupProbe struct {

	// http_get is the request to poll.
	//
	// +k8s:required
	HttpGet *HTTPGetAction `protobuf:"bytes,1,opt,name=http_get,json=httpGet,proto3" json:"http_get,omitempty"`
	// timeout_seconds is how long to keep polling before giving up.
	// Defaults to 30 when unset.
	//
	// +k8s:required
	// +k8s:minimum=1
	// +k8s:maximum=3600
	TimeoutSeconds int32 `protobuf:"varint,2,opt,name=timeout_seconds,json=timeoutSeconds,proto3" json:"timeout_seconds,omitempty"`
	// contains filtered or unexported fields
}

type ControlClient interface {
	// Get an Actor.
	GetActor(ctx context.Context, in *GetActorRequest, opts ...grpc.CallOption) (*Actor, error)
	// Create a new Actor deriving from a given ActorTemplate.
	CreateActor(ctx context.Context, in *CreateActorRequest, opts ...grpc.CallOption) (*Actor, error)
	// Update mutable fields on an existing Actor.
	UpdateActor(ctx context.Context, in *UpdateActorRequest, opts ...grpc.CallOption) (*Actor, error)
	// Suspend a given actor to a new snapshot. A running actor is checkpointed
	// on its worker; a paused actor's node-local snapshot is uploaded, narrowed
	// to the template's commit scope where required (Full capture, Data commit).
	SuspendActor(ctx context.Context, in *SuspendActorRequest, opts ...grpc.CallOption) (*SuspendActorResponse, error)
	// Pause a given actor and keep its snapshots on node VM.
	PauseActor(ctx context.Context, in *PauseActorRequest, opts ...grpc.CallOption) (*PauseActorResponse, error)
	// Resume an actor from its latest snapshot.
	ResumeActor(ctx context.Context, in *ResumeActorRequest, opts ...grpc.CallOption) (*ResumeActorResponse, error)
	// Revert an actor to SUSPENDED state.
	// Only crashed, running or paused actors can be reverted.
	RevertActor(ctx context.Context, in *RevertActorRequest, opts ...grpc.CallOption) (*RevertActorResponse, error)
	// Delete an actor. Only suspended or crashed actors can be deleted unless
	// any_state is set.
	DeleteActor(ctx context.Context, in *DeleteActorRequest, opts ...grpc.CallOption) (*Actor, error)
	// Get the egress policy resource nested under an Actor.
	GetActorEgressPolicy(ctx context.Context, in *GetActorEgressPolicyRequest, opts ...grpc.CallOption) (*EgressPolicy, error)
	// Create the egress policy resource nested under an Actor.
	CreateActorEgressPolicy(ctx context.Context, in *CreateActorEgressPolicyRequest, opts ...grpc.CallOption) (*EgressPolicy, error)
	// Replace the egress policy resource nested under an Actor.
	UpdateActorEgressPolicy(ctx context.Context, in *UpdateActorEgressPolicyRequest, opts ...grpc.CallOption) (*EgressPolicy, error)
	// Delete the egress policy resource nested under an Actor.
	DeleteActorEgressPolicy(ctx context.Context, in *DeleteActorEgressPolicyRequest, opts ...grpc.CallOption) (*EgressPolicy, error)
	// Create a Substrate-issued JWT asserting the actor identity.
	//
	// * Called by the egress gateway when actor JWT injection is configured for outbound requests.
	MintActorJWT(ctx context.Context, in *MintActorJWTRequest, opts ...grpc.CallOption) (*MintActorJWTResponse, error)
	// Create a Substrate-issued SPIFFE certificate asserting the actor identity.
	//
	// SPIFFE URI: spiffe://${trustdomain}/actor/${atespace}/${actor}
	//
	// * Called by the egress gateway when actor client certificate injection is
	//   configured for outbound requests.
	MintActorCertificate(ctx context.Context, in *MintActorCertificateRequest, opts ...grpc.CallOption) (*MintActorCertificateResponse, error)
	// Tag the external snapshot a suspended Actor holds. The tag gets its own
	// copy of that snapshot, so suspending or deleting the Actor afterwards
	// cannot collect it.
	CreateTag(ctx context.Context, in *CreateTagRequest, opts ...grpc.CallOption) (*Tag, error)
	// Get a Tag.
	GetTag(ctx context.Context, in *GetTagRequest, opts ...grpc.CallOption) (*Tag, error)
	// List Tags.
	ListTags(ctx context.Context, in *ListTagsRequest, opts ...grpc.CallOption) (*ListTagsResponse, error)
	// Publish or unpublish a Tag without changing its address.
	UpdateTag(ctx context.Context, in *UpdateTagRequest, opts ...grpc.CallOption) (*Tag, error)
	// Delete a Tag and the external snapshot it owns. Actors created from the
	// tag that have not yet been suspended still point at that external snapshot
	// and become unrecoverable, so do not delete a tag while such Actors exist.
	DeleteTag(ctx context.Context, in *DeleteTagRequest, opts ...grpc.CallOption) (*Tag, error)
	// List Workers.
	ListWorkers(ctx context.Context, in *ListWorkersRequest, opts ...grpc.CallOption) (*ListWorkersResponse, error)
	// Get a Worker.
	GetWorker(ctx context.Context, in *GetWorkerRequest, opts ...grpc.CallOption) (*Worker, error)
	// Register a Worker. Called once its Pod is Ready and has an IP.
	CreateWorker(ctx context.Context, in *CreateWorkerRequest, opts ...grpc.CallOption) (*Worker, error)
	// Update observed pool state on a Worker.
	UpdateWorker(ctx context.Context, in *UpdateWorkerRequest, opts ...grpc.CallOption) (*Worker, error)
	// Deregister a Worker. Does not cascade: the caller is responsible for
	// cleaning up related resources first.
	DeleteWorker(ctx context.Context, in *DeleteWorkerRequest, opts ...grpc.CallOption) (*Worker, error)
	// Mark a Worker as terminating so the scheduler stops routing new Actors to
	// it. Idempotent; one-way. Deliberately leaves any bound Actor alone.
	// Returns ABORTED if another write lands on the Worker first; retry.
	DrainWorker(ctx context.Context, in *DrainWorkerRequest, opts ...grpc.CallOption) (*Worker, error)
	// List the Actors hosted by a given Worker.
	ListWorkerActorAssignments(ctx context.Context, in *ListWorkerActorAssignmentsRequest, opts ...grpc.CallOption) (*ListWorkerActorAssignmentsResponse, error)
	// List Actors.
	ListActors(ctx context.Context, in *ListActorsRequest, opts ...grpc.CallOption) (*ListActorsResponse, error)
	// Create a new Atespace. Substrate-native, stored in database.
	CreateAtespace(ctx context.Context, in *CreateAtespaceRequest, opts ...grpc.CallOption) (*Atespace, error)
	// Get an Atespace by name.
	GetAtespace(ctx context.Context, in *GetAtespaceRequest, opts ...grpc.CallOption) (*Atespace, error)
	// List Atespaces.
	ListAtespaces(ctx context.Context, in *ListAtespacesRequest, opts ...grpc.CallOption) (*ListAtespacesResponse, error)
	// Delete an empty Atespace. Rejects (FailedPrecondition) if any Actors or
	// Tags remain.
	DeleteAtespace(ctx context.Context, in *DeleteAtespaceRequest, opts ...grpc.CallOption) (*Atespace, error)
	CreateActorTemplate(ctx context.Context, in *CreateActorTemplateRequest, opts ...grpc.CallOption) (*ActorTemplate, error)
	GetActorTemplate(ctx context.Context, in *GetActorTemplateRequest, opts ...grpc.CallOption) (*ActorTemplate, error)
	ListActorTemplates(ctx context.Context, in *ListActorTemplatesRequest, opts ...grpc.CallOption) (*ListActorTemplatesResponse, error)
	// Delete an ActorTemplate together with its golden actor and golden
	// tag in the reserved ate-golden atespace.
	DeleteActorTemplate(ctx context.Context, in *DeleteActorTemplateRequest, opts ...grpc.CallOption) (*ActorTemplate, error)
}

type ControlServer interface {
	// Get an Actor.
	GetActor(context.Context, *GetActorRequest) (*Actor, error)
	// Create a new Actor deriving from a given ActorTemplate.
	CreateActor(context.Context, *CreateActorRequest) (*Actor, error)
	// Update mutable fields on an existing Actor.
	UpdateActor(context.Context, *UpdateActorRequest) (*Actor, error)
	// Suspend a given actor to a new snapshot. A running actor is checkpointed
	// on its worker; a paused actor's node-local snapshot is uploaded, narrowed
	// to the template's commit scope where required (Full capture, Data commit).
	SuspendActor(context.Context, *SuspendActorRequest) (*SuspendActorResponse, error)
	// Pause a given actor and keep its snapshots on node VM.
	PauseActor(context.Context, *PauseActorRequest) (*PauseActorResponse, error)
	// Resume an actor from its latest snapshot.
	ResumeActor(context.Context, *ResumeActorRequest) (*ResumeActorResponse, error)
	// Revert an actor to SUSPENDED state.
	// Only crashed, running or paused actors can be reverted.
	RevertActor(context.Context, *RevertActorRequest) (*RevertActorResponse, error)
	// Delete an actor. Only suspended or crashed actors can be deleted unless
	// any_state is set.
	DeleteActor(context.Context, *DeleteActorRequest) (*Actor, error)
	// Get the egress policy resource nested under an Actor.
	GetActorEgressPolicy(context.Context, *GetActorEgressPolicyRequest) (*EgressPolicy, error)
	// Create the egress policy resource nested under an Actor.
	CreateActorEgressPolicy(context.Context, *CreateActorEgressPolicyRequest) (*EgressPolicy, error)
	// Replace the egress policy resource nested under an Actor.
	UpdateActorEgressPolicy(context.Context, *UpdateActorEgressPolicyRequest) (*EgressPolicy, error)
	// Delete the egress policy resource nested under an Actor.
	DeleteActorEgressPolicy(context.Context, *DeleteActorEgressPolicyRequest) (*EgressPolicy, error)
	// Create a Substrate-issued JWT asserting the actor identity.
	//
	// * Called by the egress gateway when actor JWT injection is configured for outbound requests.
	MintActorJWT(context.Context, *MintActorJWTRequest) (*MintActorJWTResponse, error)
	// Create a Substrate-issued SPIFFE certificate asserting the actor identity.
	//
	// SPIFFE URI: spiffe://${trustdomain}/actor/${atespace}/${actor}
	//
	// * Called by the egress gateway when actor client certificate injection is
	//   configured for outbound requests.
	MintActorCertificate(context.Context, *MintActorCertificateRequest) (*MintActorCertificateResponse, error)
	// Tag the external snapshot a suspended Actor holds. The tag gets its own
	// copy of that snapshot, so suspending or deleting the Actor afterwards
	// cannot collect it.
	CreateTag(context.Context, *CreateTagRequest) (*Tag, error)
	// Get a Tag.
	GetTag(context.Context, *GetTagRequest) (*Tag, error)
	// List Tags.
	ListTags(context.Context, *ListTagsRequest) (*ListTagsResponse, error)
	// Publish or unpublish a Tag without changing its address.
	UpdateTag(context.Context, *UpdateTagRequest) (*Tag, error)
	// Delete a Tag and the external snapshot it owns. Actors created from the
	// tag that have not yet been suspended still point at that external snapshot
	// and become unrecoverable, so do not delete a tag while such Actors exist.
	DeleteTag(context.Context, *DeleteTagRequest) (*Tag, error)
	// List Workers.
	ListWorkers(context.Context, *ListWorkersRequest) (*ListWorkersResponse, error)
	// Get a Worker.
	GetWorker(context.Context, *GetWorkerRequest) (*Worker, error)
	// Register a Worker. Called once its Pod is Ready and has an IP.
	CreateWorker(context.Context, *CreateWorkerRequest) (*Worker, error)
	// Update observed pool state on a Worker.
	UpdateWorker(context.Context, *UpdateWorkerRequest) (*Worker, error)
	// Deregister a Worker. Does not cascade: the caller is responsible for
	// cleaning up related resources first.
	DeleteWorker(context.Context, *DeleteWorkerRequest) (*Worker, error)
	// Mark a Worker as terminating so the scheduler stops routing new Actors to
	// it. Idempotent; one-way. Deliberately leaves any bound Actor alone.
	// Returns ABORTED if another write lands on the Worker first; retry.
	DrainWorker(context.Context, *DrainWorkerRequest) (*Worker, error)
	// List the Actors hosted by a given Worker.
	ListWorkerActorAssignments(context.Context, *ListWorkerActorAssignmentsRequest) (*ListWorkerActorAssignmentsResponse, error)
	// List Actors.
	ListActors(context.Context, *ListActorsRequest) (*ListActorsResponse, error)
	// Create a new Atespace. Substrate-native, stored in database.
	CreateAtespace(context.Context, *CreateAtespaceRequest) (*Atespace, error)
	// Get an Atespace by name.
	GetAtespace(context.Context, *GetAtespaceRequest) (*Atespace, error)
	// List Atespaces.
	ListAtespaces(context.Context, *ListAtespacesRequest) (*ListAtespacesResponse, error)
	// Delete an empty Atespace. Rejects (FailedPrecondition) if any Actors or
	// Tags remain.
	DeleteAtespace(context.Context, *DeleteAtespaceRequest) (*Atespace, error)
	CreateActorTemplate(context.Context, *CreateActorTemplateRequest) (*ActorTemplate, error)
	GetActorTemplate(context.Context, *GetActorTemplateRequest) (*ActorTemplate, error)
	ListActorTemplates(context.Context, *ListActorTemplatesRequest) (*ListActorTemplatesResponse, error)
	// Delete an ActorTemplate together with its golden actor and golden
	// tag in the reserved ate-golden atespace.
	DeleteActorTemplate(context.Context, *DeleteActorTemplateRequest) (*ActorTemplate, error)
	// contains filtered or unexported methods
}

type CreateActorEgressPolicyRequest struct {

	// Parent Actor under which to create the policy resource.
	//
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Actor *ObjectRef `protobuf:"bytes,1,opt,name=actor,proto3" json:"actor,omitempty"`
	// The policy to create. metadata.name must be "default" and
	// metadata.atespace must match actor.atespace.
	//
	// +k8s:required
	EgressPolicy *EgressPolicy `protobuf:"bytes,2,opt,name=egress_policy,json=egressPolicy,proto3" json:"egress_policy,omitempty"`
	// contains filtered or unexported fields
}

type CreateActorRequest struct {

	// The actor to create.
	//
	// +k8s:required
	Actor *Actor `protobuf:"bytes,1,opt,name=actor,proto3" json:"actor,omitempty"`
	// contains filtered or unexported fields
}

type CreateActorTemplateRequest struct {

	// The actor template version to create. Server-assigned metadata (uid,
	// version, timestamps) is ignored, as are the status fields.
	//
	// +k8s:required
	// +k8s:customValidation # volume_mounts must reference declared volumes
	ActorTemplate *ActorTemplate `protobuf:"bytes,1,opt,name=actor_template,json=actorTemplate,proto3" json:"actor_template,omitempty"`
	// contains filtered or unexported fields
}

type CreateAtespaceRequest struct {

	// The atespace to create.
	//
	// +k8s:required
	Atespace *Atespace `protobuf:"bytes,1,opt,name=atespace,proto3" json:"atespace,omitempty"`
	// contains filtered or unexported fields
}

type CreateTagRequest struct {

	// The tag to create. metadata.atespace, metadata.name, scope and source_actor
	// are honored; metadata.atespace must match source_actor's, and status is
	// ignored on write.
	//
	// +k8s:required
	Tag *Tag `protobuf:"bytes,1,opt,name=tag,proto3" json:"tag,omitempty"`
	// contains filtered or unexported fields
}

type CreateWorkerRequest struct {

	// The Worker to register.
	//
	// +k8s:required
	Worker *Worker `protobuf:"bytes,1,opt,name=worker,proto3" json:"worker,omitempty"`
	// contains filtered or unexported fields
}

type CredentialHeader struct {

	// The case-insensitive HTTP request header to replace when present.
	//
	// +k8s:required
	// +k8s:customValidation # format
	Header string `protobuf:"bytes,1,opt,name=header,proto3" json:"header,omitempty"`
	// Prepended verbatim to the credential value. Include any desired separator;
	// for example, use "Bearer " (including the space) for Authorization.
	//
	// +k8s:optional
	// +k8s:customValidation # format
	Prefix string `protobuf:"bytes,2,opt,name=prefix,proto3" json:"prefix,omitempty"`
	// Source-agnostic reference interpreted by a registered credential provider:
	// ate-secret://<provider-class>/<provider-name>/<provider-specific-tail>
	//
	// +k8s:required
	// +k8s:customValidation # format
	CredentialUri string `protobuf:"bytes,3,opt,name=credential_uri,json=credentialUri,proto3" json:"credential_uri,omitempty"`
	// contains filtered or unexported fields
}

type DeleteActorEgressPolicyRequest struct {

	// The parent Actor of the egress policy resource to delete.
	//
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Actor *ObjectRef `protobuf:"bytes,1,opt,name=actor,proto3" json:"actor,omitempty"`
	// Optional per-delete preconditions.
	//
	// +k8s:optional
	Options *DeleteOptions `protobuf:"bytes,2,opt,name=options,proto3" json:"options,omitempty"`
	// contains filtered or unexported fields
}

type DeleteActorRequest struct {

	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Actor *ObjectRef `protobuf:"bytes,1,opt,name=actor,proto3" json:"actor,omitempty"`
	// If true, delete the actor regardless of its state.
	//
	// +k8s:optional
	AnyState bool `protobuf:"varint,2,opt,name=any_state,json=anyState,proto3" json:"any_state,omitempty"`
	// Optional per-delete preconditions.
	//
	// +k8s:optional
	Options *DeleteOptions `protobuf:"bytes,3,opt,name=options,proto3" json:"options,omitempty"`
	// contains filtered or unexported fields
}

type DeleteActorTemplateRequest struct {

	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	ActorTemplate *ObjectRef `protobuf:"bytes,1,opt,name=actor_template,json=actorTemplate,proto3" json:"actor_template,omitempty"`
	// Optional per-delete preconditions.
	//
	// +k8s:optional
	Options *DeleteOptions `protobuf:"bytes,2,opt,name=options,proto3" json:"options,omitempty"`
	// contains filtered or unexported fields
}

type DeleteAtespaceRequest struct {

	// +k8s:required
	// +k8s:beta(since: "0.0")=+k8s:subfield(atespace)=+k8s:forbidden # TODO: get rid of beta prefix
	Atespace *ObjectRef `protobuf:"bytes,1,opt,name=atespace,proto3" json:"atespace,omitempty"`
	// Optional per-delete preconditions.
	//
	// +k8s:optional
	Options *DeleteOptions `protobuf:"bytes,2,opt,name=options,proto3" json:"options,omitempty"`
	// contains filtered or unexported fields
}

type DeleteOptions struct {

	// Delete only if the resource is still at this version, that is, unchanged
	// since the caller read it. Zero skips the check.
	//
	// +k8s:optional
	// +k8s:minimum=1
	Version int64 `protobuf:"varint,1,opt,name=version,proto3" json:"version,omitempty"`
	// Delete only if the resource still has this uid, that is, it is the one
	// the caller read and not a later one created under the same name. Empty
	// skips the check.
	//
	// +k8s:optional
	// +k8s:format=k8s-uuid
	Uid string `protobuf:"bytes,2,opt,name=uid,proto3" json:"uid,omitempty"`
	// contains filtered or unexported fields
}

type DeleteTagRequest struct {

	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Tag *ObjectRef `protobuf:"bytes,1,opt,name=tag,proto3" json:"tag,omitempty"`
	// Optional per-delete preconditions.
	//
	// +k8s:optional
	Options *DeleteOptions `protobuf:"bytes,2,opt,name=options,proto3" json:"options,omitempty"`
	// contains filtered or unexported fields
}

type DeleteWorkerRequest struct {

	// The Worker to deregister.
	//
	// +k8s:required
	// +k8s:beta(since: "0.0")=+k8s:subfield(atespace)=+k8s:forbidden # TODO: get rid of beta prefix
	Worker *ObjectRef `protobuf:"bytes,1,opt,name=worker,proto3" json:"worker,omitempty"`
	// Optional per-delete preconditions.
	//
	// +k8s:optional
	Options *DeleteOptions `protobuf:"bytes,2,opt,name=options,proto3" json:"options,omitempty"`
	// contains filtered or unexported fields
}

type DrainWorkerRequest struct {

	// The Worker to mark as terminating.
	//
	// +k8s:required
	// +k8s:beta(since: "0.0")=+k8s:subfield(atespace)=+k8s:forbidden # TODO: get rid of beta prefix
	Worker *ObjectRef `protobuf:"bytes,1,opt,name=worker,proto3" json:"worker,omitempty"`
	// contains filtered or unexported fields
}

type DurableDirVolumeSource struct {
	// contains filtered or unexported fields
}

type EgressPolicy struct {

	// Standard resource metadata. Atespace must match the parent Actor and name
	// must be "default". Both are caller-specified on create and immutable.
	// UID, version, create_time, and update_time are server-managed.
	//
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	// +k8s:customValidation # name must be "default"
	Metadata *ResourceMetadata `protobuf:"bytes,1,opt,name=metadata,proto3" json:"metadata,omitempty"`
	// Rules are an unordered set of allows. Traffic is denied when no rule
	// matches.
	//
	// For a given destination name and port, exactly one rule decides,
	// whatever its protocol. When more than one rule matches, the winner is
	// chosen by these criteria, in order, moving to the next one on a tie:
	//
	//   * A matching hostname without a wildcard.
	//   * A matching port number rather than all ports.
	//
	// Two rules with the same pattern on the same port, or both on all ports,
	// are rejected at admission.
	//
	// These criteria apply within a protocol and across protocols that decide
	// on the same input, such as an https and a tls_passthrough rule that match
	// the same pattern. Only the winning rule's effects are applied.
	//
	// +k8s:optional
	// +k8s:maxItems=256
	// +k8s:listType=atomic
	// +k8s:customValidation # no two rules tie on a name and port
	Rules []*EgressRule `protobuf:"bytes,2,rep,name=rules,proto3" json:"rules,omitempty"`
	// contains filtered or unexported fields
}

type EgressRule struct {

	// Cleartext HTTP to the named hosts: HTTP/1.1, and h2c as used by gRPC.
	// TLS to these names is not allowed by this rule.
	//
	// +k8s:optional
	// +k8s:unionMember
	Http *HTTPRule `protobuf:"bytes,1,opt,name=http,proto3" json:"http,omitempty"`
	// HTTPS to the named hosts, intercepted (man-in-the-middle) so the gateway
	// can authorize and modify each request. HTTP/1.1 and HTTP/2 inside the
	// TLS connection; HTTP/3 is not supported.
	//
	// +k8s:optional
	// +k8s:unionMember
	Https *HTTPSRule `protobuf:"bytes,2,opt,name=https,proto3" json:"https,omitempty"`
	// TLS to the named servers, forwarded without decryption.
	//
	// +k8s:optional
	// +k8s:unionMember
	TlsPassthrough *TLSPassthroughRule `protobuf:"bytes,3,opt,name=tls_passthrough,json=tlsPassthrough,proto3" json:"tls_passthrough,omitempty"`
	// contains filtered or unexported fields
}

type EnvVar struct {

	// name may be any printable ASCII character except '='.
	//
	// +k8s:required
	// +k8s:maxLength=256 # guardrail;
	// +k8s:customValidation # printable ASCII except '='
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// value is the literal value.
	//
	// +k8s:optional
	// +k8s:maxLength=32768 # guardrail;
	Value string `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"`
	// contains filtered or unexported fields
}

type ExternalSnapshot struct {

	// snapshot_uri addresses the snapshot's prefix in object storage.
	//
	// +k8s:required
	// +k8s:maxLength=2048 # the template's storage_location bound plus the owner prefix and snapshot name
	SnapshotUri string `protobuf:"bytes,1,opt,name=snapshot_uri,json=snapshotUri,proto3" json:"snapshot_uri,omitempty"`
	// content_scope is what the snapshot captured.
	//
	// +k8s:optional
	// +k8s:minimum=1
	// +k8s:maximum=2 # keep this in sync with the SnapshotContentScope enum
	ContentScope SnapshotContentScope `` /* 131-byte string literal not displayed */
	// UID of the ActorTemplate whose sandbox this snapshot's guest state was
	// captured from.
	//
	// +k8s:optional
	// +k8s:format=k8s-uuid
	ActorTemplateUid string `protobuf:"bytes,3,opt,name=actor_template_uid,json=actorTemplateUid,proto3" json:"actor_template_uid,omitempty"`
	// contains filtered or unexported fields
}

type ExternalVolume struct {

	// Name of the volume specified in the actor template. Template volume
	// names are DNS labels.
	//
	// +k8s:required
	// +k8s:format=k8s-short-name
	// +k8s:update=NoModify
	// +k8s:update=NoUnset # set-once; immutable would reject the create
	// ratchet's nil->set when the final object is validated as an update
	VolumeName string `protobuf:"bytes,1,opt,name=volume_name,json=volumeName,proto3" json:"volume_name,omitempty"`
	// The globally unique volume_id returned from the storage system.
	// This will be initially empty during volume creation. Its format is the
	// storage system's own, so it is only bounded and checked for control
	// characters (U+0000-U+0008, U+000B, U+000C, U+000E-U+001F, U+007F-U+009F).
	// The CSI spec caps IDs at 128 bytes but does not require it, so allow
	// some slack. Set once when provisioning completes, then never changed.
	//
	// +k8s:optional
	// +k8s:maxLength=256
	// +k8s:update=NoModify
	// +k8s:update=NoUnset
	// +k8s:customValidation # no control characters
	StorageVolumeId string `protobuf:"bytes,2,opt,name=storage_volume_id,json=storageVolumeId,proto3" json:"storage_volume_id,omitempty"`
	// Internal volume plugin name or CSI driver name, from the StorageClass
	// provisioner. Must be a DNS subdomain, optionally prefixed with
	// "substrate.io/" (per the CSI spec's driver-name syntax).
	//
	// +k8s:required
	// +k8s:maxLength=253
	// +k8s:update=NoModify
	// +k8s:update=NoUnset # set-once, like volume_name above
	// +k8s:customValidation
	VolumeType string `protobuf:"bytes,3,opt,name=volume_type,json=volumeType,proto3" json:"volume_type,omitempty"`
	// +k8s:optional
	// +k8s:minimum=1
	// +k8s:maximum=3 # keep this in sync with the Status enum
	Status ExternalVolume_Status `protobuf:"varint,4,opt,name=status,proto3,enum=ateapi.ExternalVolume_Status" json:"status,omitempty"`
	// volume_context contains metadata returned by the CSI driver during volume
	// provisioning, needed by the node plugin for mounting (e.g. attachment
	// info). Keys and values are the driver's own, so they are only bounded,
	// not validated.
	//
	// +k8s:optional
	// +k8s:maxProperties=32
	// +k8s:eachKey=+k8s:maxLength=128
	// +k8s:eachVal=+k8s:maxLength=256
	VolumeContext map[string]string `` /* 174-byte string literal not displayed */
	// contains filtered or unexported fields
}

type ExternalVolumeTemplate struct {

	// capacity of the volume to create, in Kubernetes resource.Quantity string
	// form (e.g. "10Gi"). Required.
	//
	// +k8s:required
	// +k8s:maxLength=32 # matches Limits.quantity's bound
	// +k8s:customValidation # must parse as a resource.Quantity
	Capacity string `protobuf:"bytes,1,opt,name=capacity,proto3" json:"capacity,omitempty"`
	// storage_class_name names the cluster-scoped Kubernetes StorageClass to
	// create the volume from. Required.
	//
	// +k8s:required
	// +k8s:format=k8s-long-name
	StorageClassName string `protobuf:"bytes,2,opt,name=storage_class_name,json=storageClassName,proto3" json:"storage_class_name,omitempty"`
	// contains filtered or unexported fields
}

type ExternalVolume_Status int32

type GetActorEgressPolicyRequest struct {

	// The parent Actor of the egress policy resource to retrieve.
	//
	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Actor *ObjectRef `protobuf:"bytes,1,opt,name=actor,proto3" json:"actor,omitempty"`
	// contains filtered or unexported fields
}

type GetActorRequest struct {

	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Actor *ObjectRef `protobuf:"bytes,1,opt,name=actor,proto3" json:"actor,omitempty"`
	// contains filtered or unexported fields
}

type GetActorTemplateRequest struct {

	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	ActorTemplate *ObjectRef `protobuf:"bytes,1,opt,name=actor_template,json=actorTemplate,proto3" json:"actor_template,omitempty"`
	// contains filtered or unexported fields
}

type GetAtespaceRequest struct {

	// +k8s:required
	// +k8s:beta(since: "0.0")=+k8s:subfield(atespace)=+k8s:forbidden # TODO: get rid of beta prefix
	Atespace *ObjectRef `protobuf:"bytes,1,opt,name=atespace,proto3" json:"atespace,omitempty"`
	// contains filtered or unexported fields
}

type GetTagRequest struct {

	// +k8s:required
	// +k8s:subfield(atespace)=+k8s:required
	Tag *ObjectRef `protobuf:"bytes,1,opt,name=tag,proto3" json:"tag,omitempty"`
	// contains filtered or unexported fields
}

type GetWorkerRequest struct {

	// The Worker to fetch. atespace is always empty; Workers are global-scoped.
	//
	// +k8s:required
	// +k8s:beta(since: "0.0")=+k8s:subfield(atespace)=+k8s:forbidden # TODO: get rid of beta prefix
	Worker *ObjectRef `protobuf:"bytes,1,opt,name=worker,proto3" json:"worker,omitempty"`
	// contains filtered or unexported fields
}

type GoldenSnapshotStatus struct {

	// golden_tag owns the immutable snapshot built by the template controller.
	// Set after tagging the snapshot and deleting the temporary golden Actor.
	// +k8s:optional
	// +k8s:subfield(atespace)=+k8s:required
	GoldenTag *ObjectRef `protobuf:"bytes,1,opt,name=golden_tag,json=goldenTag,proto3" json:"golden_tag,omitempty"`
	// take_golden_snapshot_at is when the golden-actor warmup ends and the
	// golden snapshot may be taken.
	//
	// +k8s:optional
	TakeGoldenSnapshotAt *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=take_golden_snapshot_at,json=takeGoldenSnapshotAt,proto3" json:"take_golden_snapshot_at,omitempty"`
	// error_message is set when the golden snapshot build fails and will not be
	// retried, formatted as "<Reason>: <detail>". A nonempty value is terminal.
	//
	// +k8s:optional
	// +k8s:maxLength=4096
	ErrorMessage string `protobuf:"bytes,3,opt,name=error_message,json=errorMessage,proto3" json:"error_message,omitempty"`
	// contains filtered or unexported fields
}

type HTTPGetAction struct {

	// path must be a URL path starting with "/", using only RFC 3986
	// path-segment characters, without query or fragment.
	// Defaults to "/" when unset.
	//
	// +k8s:required
	// +k8s:maxLength=1024
	// +k8s:customValidation # RFC 3986 path shape; no regex/pattern tag exists
	Path string `protobuf:"bytes,1,opt,name=path,proto3" json:"path,omitempty"`
	// port is the container port to connect to.
	//
	// +k8s:required
	// +k8s:minimum=1
	// +k8s:maximum=65535
	Port int32 `protobuf:"varint,2,opt,name=port,proto3" json:"port,omitempty"`
	// contains filtered or unexported fields
}