ateompb

type ActorDirs struct {

	// The actor's own directory.
	RootDir string `protobuf:"bytes,1,opt,name=root_dir,json=rootDir,proto3" json:"root_dir,omitempty"`
	// Holds one OCI bundle per container, named after the container.
	OciBundleDir string `protobuf:"bytes,2,opt,name=oci_bundle_dir,json=ociBundleDir,proto3" json:"oci_bundle_dir,omitempty"`
	// Where CheckpointWorkload writes the snapshot files.
	CheckpointDir string `protobuf:"bytes,3,opt,name=checkpoint_dir,json=checkpointDir,proto3" json:"checkpoint_dir,omitempty"`
	// Where the snapshot files RestoreWorkload reads have been downloaded to.
	RestoreDir string `protobuf:"bytes,4,opt,name=restore_dir,json=restoreDir,proto3" json:"restore_dir,omitempty"`
	// Holds one subdirectory per durable-dir volume.
	DurableDirVolumeMountsDir string `` /* 142-byte string literal not displayed */
	// Holds one subdirectory per system-info volume.
	SystemInfoVolumeRootsDir string `` /* 139-byte string literal not displayed */
	// Holds one mount point per CSI volume.
	VolumesDir string `protobuf:"bytes,7,opt,name=volumes_dir,json=volumesDir,proto3" json:"volumes_dir,omitempty"`
	// contains filtered or unexported fields
}

type AteomClient interface {
	// RunWorkload tells ateom to begin running a new workload (one or more
	// containers, potentially with shared filesystems).
	RunWorkload(ctx context.Context, in *RunWorkloadRequest, opts ...grpc.CallOption) (*RunWorkloadResponse, error)
	// CheckpointWorkload tells ateom to save the current state of the running
	// workload to object storage, and then completely reset itself to a blank
	// state (back to "available" state.)
	CheckpointWorkload(ctx context.Context, in *CheckpointWorkloadRequest, opts ...grpc.CallOption) (*CheckpointWorkloadResponse, error)
	// RestoreWorkload restores a workload from checkpoint that was previously
	// written by CheckpointWorkload.  Ateom will handle downloading the correct
	// gVisor / runsc version to match the checkpoint.
	RestoreWorkload(ctx context.Context, in *RestoreWorkloadRequest, opts ...grpc.CallOption) (*RestoreWorkloadResponse, error)
	// GetWorkloadStats returns a point-in-time resource-usage sample for the
	// workload this ateom is currently executing.
	//
	// It is a pure read: unlike the three calls above it does not move the ateom
	// between "available" and "executing", so it is safe to call on a timer for
	// the whole lifetime of a workload. It also does not wait on them. Those
	// three serialize on a mutex an ateom holds for a whole boot, restore, or
	// checkpoint; this call reads its state from outside that mutex, so a poll
	// landing in the middle of one answers immediately instead of going quiet for
	// the duration -- which would silence the poller during exactly the phases
	// whose usage is most interesting.
	//
	// Two ways it declines to give a sample, and they ask different things of the
	// caller:
	//
	//   * NOT_FOUND -- this ateom is not executing the actor in the request. It
	//     may be "available", or a recycled worker may have moved on to a
	//     different actor. Retrying on the same timer will not change the answer:
	//     the caller's worker-to-actor mapping is stale and wants re-resolving.
	//
	//   * FAILED_PRECONDITION -- this ateom is executing the requested actor but
	//     has no sample to give yet. It accepts an actor before the sandbox it
	//     will measure exists, so a poll landing in the boot lands here. Read it
	//     as "no numbers right now", not as "the actor is gone": it is transient,
	//     and the caller should skip this sample and take the next one.
	//
	// The split is worth the two codes because the identity is retained from the
	// moment the ateom accepts the actor, on both runtimes. That is what makes
	// "booting" distinguishable from "not here" at all, and it means a workload
	// that dies during boot is attributable rather than anonymous.
	GetWorkloadStats(ctx context.Context, in *GetWorkloadStatsRequest, opts ...grpc.CallOption) (*GetWorkloadStatsResponse, error)
	// GetActiveWorkloadStats reports every actor this ateom hosts, without
	// asserting an identity. It is the discovery read for a
	// scraper that enumerates ateoms and holds no worker-to-actor mapping;
	// GetWorkloadStats above is the verified read for a caller that must be
	// answered about a specific actor.
	//
	// It serves each actor's latest sample from the ateom's own sampling timer,
	// so a poll reads no sandbox and has no error path: an "available" ateom
	// answers an empty samples list, and a workload with nothing measured yet
	// (a boot, a restore, or a guest the last sweep did not reach) appears as a
	// sample carrying its attribution with source = STATS_SOURCE_UNSPECIFIED --
	// "not measured", per the sample's own contract -- so even a workload that
	// dies during boot is attributable, not anonymous. A sample is up to one
	// sampling interval old. This is deliberately unlike GetWorkloadStats, whose
	// caller asserts knowledge the codes then answer.
	//
	// Consumers MUST attribute each sample solely from the identity echoed
	// inside it, never from a mapping they hold: without an asserted uid, the
	// response is the only statement of who was measured. Like GetWorkloadStats
	// it is safe on a timer and does not touch the lifecycle mutex.
	GetActiveWorkloadStats(ctx context.Context, in *GetActiveWorkloadStatsRequest, opts ...grpc.CallOption) (*GetActiveWorkloadStatsResponse, error)
	// TerminateWorkload stops and deletes container workloads and cleans up
	// network and bundle overlays on ateom.
	TerminateWorkload(ctx context.Context, in *TerminateWorkloadRequest, opts ...grpc.CallOption) (*TerminateWorkloadResponse, error)
}

type AteomServer interface {
	// RunWorkload tells ateom to begin running a new workload (one or more
	// containers, potentially with shared filesystems).
	RunWorkload(context.Context, *RunWorkloadRequest) (*RunWorkloadResponse, error)
	// CheckpointWorkload tells ateom to save the current state of the running
	// workload to object storage, and then completely reset itself to a blank
	// state (back to "available" state.)
	CheckpointWorkload(context.Context, *CheckpointWorkloadRequest) (*CheckpointWorkloadResponse, error)
	// RestoreWorkload restores a workload from checkpoint that was previously
	// written by CheckpointWorkload.  Ateom will handle downloading the correct
	// gVisor / runsc version to match the checkpoint.
	RestoreWorkload(context.Context, *RestoreWorkloadRequest) (*RestoreWorkloadResponse, error)
	// GetWorkloadStats returns a point-in-time resource-usage sample for the
	// workload this ateom is currently executing.
	//
	// It is a pure read: unlike the three calls above it does not move the ateom
	// between "available" and "executing", so it is safe to call on a timer for
	// the whole lifetime of a workload. It also does not wait on them. Those
	// three serialize on a mutex an ateom holds for a whole boot, restore, or
	// checkpoint; this call reads its state from outside that mutex, so a poll
	// landing in the middle of one answers immediately instead of going quiet for
	// the duration -- which would silence the poller during exactly the phases
	// whose usage is most interesting.
	//
	// Two ways it declines to give a sample, and they ask different things of the
	// caller:
	//
	//   * NOT_FOUND -- this ateom is not executing the actor in the request. It
	//     may be "available", or a recycled worker may have moved on to a
	//     different actor. Retrying on the same timer will not change the answer:
	//     the caller's worker-to-actor mapping is stale and wants re-resolving.
	//
	//   * FAILED_PRECONDITION -- this ateom is executing the requested actor but
	//     has no sample to give yet. It accepts an actor before the sandbox it
	//     will measure exists, so a poll landing in the boot lands here. Read it
	//     as "no numbers right now", not as "the actor is gone": it is transient,
	//     and the caller should skip this sample and take the next one.
	//
	// The split is worth the two codes because the identity is retained from the
	// moment the ateom accepts the actor, on both runtimes. That is what makes
	// "booting" distinguishable from "not here" at all, and it means a workload
	// that dies during boot is attributable rather than anonymous.
	GetWorkloadStats(context.Context, *GetWorkloadStatsRequest) (*GetWorkloadStatsResponse, error)
	// GetActiveWorkloadStats reports every actor this ateom hosts, without
	// asserting an identity. It is the discovery read for a
	// scraper that enumerates ateoms and holds no worker-to-actor mapping;
	// GetWorkloadStats above is the verified read for a caller that must be
	// answered about a specific actor.
	//
	// It serves each actor's latest sample from the ateom's own sampling timer,
	// so a poll reads no sandbox and has no error path: an "available" ateom
	// answers an empty samples list, and a workload with nothing measured yet
	// (a boot, a restore, or a guest the last sweep did not reach) appears as a
	// sample carrying its attribution with source = STATS_SOURCE_UNSPECIFIED --
	// "not measured", per the sample's own contract -- so even a workload that
	// dies during boot is attributable, not anonymous. A sample is up to one
	// sampling interval old. This is deliberately unlike GetWorkloadStats, whose
	// caller asserts knowledge the codes then answer.
	//
	// Consumers MUST attribute each sample solely from the identity echoed
	// inside it, never from a mapping they hold: without an asserted uid, the
	// response is the only statement of who was measured. Like GetWorkloadStats
	// it is safe on a timer and does not touch the lifecycle mutex.
	GetActiveWorkloadStats(context.Context, *GetActiveWorkloadStatsRequest) (*GetActiveWorkloadStatsResponse, error)
	// TerminateWorkload stops and deletes container workloads and cleans up
	// network and bundle overlays on ateom.
	TerminateWorkload(context.Context, *TerminateWorkloadRequest) (*TerminateWorkloadResponse, error)
	// contains filtered or unexported methods
}

type CheckpointWorkloadRequest struct {
	Atespace              string        `protobuf:"bytes,1,opt,name=atespace,proto3" json:"atespace,omitempty"`
	ActorName             string        `protobuf:"bytes,2,opt,name=actor_name,json=actorName,proto3" json:"actor_name,omitempty"`
	ActorUid              string        `protobuf:"bytes,3,opt,name=actor_uid,json=actorUid,proto3" json:"actor_uid,omitempty"`
	ActorTemplateAtespace string        `` /* 126-byte string literal not displayed */
	ActorTemplateName     string        `protobuf:"bytes,5,opt,name=actor_template_name,json=actorTemplateName,proto3" json:"actor_template_name,omitempty"`
	RunscPath             string        `protobuf:"bytes,6,opt,name=runsc_path,json=runscPath,proto3" json:"runsc_path,omitempty"`
	Spec                  *WorkloadSpec `protobuf:"bytes,7,opt,name=spec,proto3" json:"spec,omitempty"`
	// The object storage URI of the snapshot to write. Object names are appended
	// to it, so it addresses the snapshot as a whole rather than any one object.
	//
	// The structure of the checkpoint should generally be treated as opaque. For
	// gVisor, the checkpoint consists of a checkpoint.img file that contains the
	// memory, sentry state, and filesystem deltas.
	//
	// The control plane sends an ActorSnapshot's snapshot_uri, which sits under
	// the prefix of the resource that owns the snapshot. For example:
	// "gs://bucket/root/atespaces/team-a/actors/<actor uid>/snapshots/5678".
	SnapshotUri string `protobuf:"bytes,8,opt,name=snapshot_uri,json=snapshotUri,proto3" json:"snapshot_uri,omitempty"`
	// runtime_asset_paths maps a runtime asset name to the local on-disk path
	// atelet fetched it to (see RunWorkloadRequest). Empty for gVisor.
	RuntimeAssetPaths map[string]string `` /* 188-byte string literal not displayed */
	// Fidelity the checkpoint captures.
	Fidelity  SnapshotFidelity `protobuf:"varint,10,opt,name=fidelity,proto3,enum=ateom.SnapshotFidelity" json:"fidelity,omitempty"`
	ActorDirs *ActorDirs       `protobuf:"bytes,11,opt,name=actor_dirs,json=actorDirs,proto3" json:"actor_dirs,omitempty"`
	// contains filtered or unexported fields
}

type CheckpointWorkloadResponse struct {

	// snapshot_files lists the files ateom wrote into the checkpoint directory
	// (relative names) for atelet to ship to object storage. Each runtime reports
	// its own set (gVisor's image files, cloud-hypervisor's snapshot set, ...).
	SnapshotFiles []string `protobuf:"bytes,1,rep,name=snapshot_files,json=snapshotFiles,proto3" json:"snapshot_files,omitempty"`
	// data_snapshot_files is the subset of snapshot_files that restores the
	// actor at VOLUMES fidelity on its own. Empty when the capture holds no durable data.
	DataSnapshotFiles []string `protobuf:"bytes,2,rep,name=data_snapshot_files,json=dataSnapshotFiles,proto3" json:"data_snapshot_files,omitempty"`
	// contains filtered or unexported fields
}

type Container struct {
	Name        string       `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	WakeupProbe *WakeupProbe `protobuf:"bytes,2,opt,name=wakeup_probe,json=wakeupProbe,proto3" json:"wakeup_probe,omitempty"`
	// durable_dir_volume_mounts are the durable-dir volumes this container
	// mounts, if any.
	DurableDirVolumeMounts []*DurableDirVolumeMount `` /* 131-byte string literal not displayed */
	// csi_volume_mounts are the CSI volumes this container mounts, if any.
	CsiVolumeMounts []*VolumeMount `protobuf:"bytes,4,rep,name=csi_volume_mounts,json=csiVolumeMounts,proto3" json:"csi_volume_mounts,omitempty"`
	// system_info_volume_mounts are the system-info volumes this container
	// mounts, if any. Contents are generated by atelet on the host; the
	// container sees them read-only.
	SystemInfoVolumeMounts []*SystemInfoVolumeMount `` /* 131-byte string literal not displayed */
	// image_volume_mounts are the image volumes this container mounts, if any.
	ImageVolumeMounts []*ImageVolumeMount `protobuf:"bytes,6,rep,name=image_volume_mounts,json=imageVolumeMounts,proto3" json:"image_volume_mounts,omitempty"`
	// container_spec is what ateom builds the container's OCI spec from,
	// besides its volume mounts. Unset on RPCs that start no process.
	ContainerSpec *ContainerSpec `protobuf:"bytes,7,opt,name=container_spec,json=containerSpec,proto3" json:"container_spec,omitempty"`
	// contains filtered or unexported fields
}

type ContainerSpec struct {

	// args is the process argv, already resolved against the image's
	// ENTRYPOINT and CMD.
	Args []string `protobuf:"bytes,1,rep,name=args,proto3" json:"args,omitempty"`
	// env is the process environment as KEY=VALUE, already merged with the
	// image's ENV.
	Env []string `protobuf:"bytes,2,rep,name=env,proto3" json:"env,omitempty"`
	// capabilities is the container's capability set, CAP_-prefixed.
	Capabilities []string `protobuf:"bytes,3,rep,name=capabilities,proto3" json:"capabilities,omitempty"`
	// resources are the container's own declared limits, if any.
	Resources *ResourceLimits `protobuf:"bytes,4,opt,name=resources,proto3" json:"resources,omitempty"`
	// contains filtered or unexported fields
}

type DurableDirVolumeMount struct {

	// volume_name is the name the ActorTemplate gave the volume. It selects the
	// per-volume directory atelet prepared for the actor on the host.
	VolumeName string `protobuf:"bytes,1,opt,name=volume_name,json=volumeName,proto3" json:"volume_name,omitempty"`
	// mount_path is where the container sees the volume.
	MountPath string `protobuf:"bytes,2,opt,name=mount_path,json=mountPath,proto3" json:"mount_path,omitempty"`
	// contains filtered or unexported fields
}

type EgressGateway struct {

	// address is required and identifies the remote gateway as an IP address or
	// DNS name followed by its port.
	Address string `protobuf:"bytes,1,opt,name=address,proto3" json:"address,omitempty"`
	// contains filtered or unexported fields
}

type GetActiveWorkloadStatsRequest struct {
	// contains filtered or unexported fields
}

type GetActiveWorkloadStatsResponse struct {

	// One entry per workload this ateom is executing; empty when it is
	// "available". Each sample is self-describing (see the attribution rule on
	// the rpc); an entry with source = STATS_SOURCE_UNSPECIFIED is a workload
	// with no numbers to give yet (boot, restore, teardown, or a lifecycle
	// transition underneath the read) -- skip its measurements and take the
	// next sample. An ateom serves one actor at a time today, so the list holds
	// at most one entry until multi-actor workers land; consumers must not
	// assume that.
	Samples []*WorkloadStatsSample `protobuf:"bytes,1,rep,name=samples,proto3" json:"samples,omitempty"`
	// contains filtered or unexported fields
}

type GetWorkloadStatsRequest struct {

	// The actor the caller believes is executing here. A worker can be recycled
	// between the caller's view of the world and this call, so ateom answers
	// NOT_FOUND on a mismatch rather than reporting a different actor's numbers
	// under the requested actor's identity.
	ActorUid string `protobuf:"bytes,1,opt,name=actor_uid,json=actorUid,proto3" json:"actor_uid,omitempty"`
	// contains filtered or unexported fields
}

type GetWorkloadStatsResponse struct {
	Sample *WorkloadStatsSample `protobuf:"bytes,1,opt,name=sample,proto3" json:"sample,omitempty"`
	// contains filtered or unexported fields
}

type HttpGetAction struct {

	// Path to access on the HTTP server.
	Path string `protobuf:"bytes,1,opt,name=path,proto3" json:"path,omitempty"`
	// TCP port to connect to (1..65535).
	Port int32 `protobuf:"varint,2,opt,name=port,proto3" json:"port,omitempty"`
	// contains filtered or unexported fields
}

type ImageVolumeMount struct {

	// volume_name is the name the ActorTemplate gave the volume.
	VolumeName string `protobuf:"bytes,1,opt,name=volume_name,json=volumeName,proto3" json:"volume_name,omitempty"`
	// mount_path is where the container sees the volume.
	MountPath string `protobuf:"bytes,2,opt,name=mount_path,json=mountPath,proto3" json:"mount_path,omitempty"`
	// contains filtered or unexported fields
}

type ResourceLimits struct {

	// memory_bytes is the memory limit in bytes. 0 means unset.
	MemoryBytes int64 `protobuf:"varint,1,opt,name=memory_bytes,json=memoryBytes,proto3" json:"memory_bytes,omitempty"`
	// cpu_millis is the CPU limit in milli-cores (1000 = one core). 0 means unset.
	CpuMillis int64 `protobuf:"varint,2,opt,name=cpu_millis,json=cpuMillis,proto3" json:"cpu_millis,omitempty"`
	// contains filtered or unexported fields
}

type RestoreWorkloadRequest struct {
	Atespace              string        `protobuf:"bytes,1,opt,name=atespace,proto3" json:"atespace,omitempty"`
	ActorName             string        `protobuf:"bytes,2,opt,name=actor_name,json=actorName,proto3" json:"actor_name,omitempty"`
	ActorUid              string        `protobuf:"bytes,3,opt,name=actor_uid,json=actorUid,proto3" json:"actor_uid,omitempty"`
	ActorTemplateAtespace string        `` /* 126-byte string literal not displayed */
	ActorTemplateName     string        `protobuf:"bytes,5,opt,name=actor_template_name,json=actorTemplateName,proto3" json:"actor_template_name,omitempty"`
	RunscPath             string        `protobuf:"bytes,6,opt,name=runsc_path,json=runscPath,proto3" json:"runsc_path,omitempty"`
	Spec                  *WorkloadSpec `protobuf:"bytes,7,opt,name=spec,proto3" json:"spec,omitempty"`
	// The object storage URI of the snapshot to restore. Object names are
	// appended to it; it addresses the snapshot, not any one object.
	SnapshotUri string `protobuf:"bytes,8,opt,name=snapshot_uri,json=snapshotUri,proto3" json:"snapshot_uri,omitempty"`
	// runtime_asset_paths maps a runtime asset name to the local on-disk path
	// atelet fetched it to (see RunWorkloadRequest). Empty for gVisor.
	RuntimeAssetPaths map[string]string `` /* 188-byte string literal not displayed */
	// Fidelity to restore from the snapshot.
	Fidelity SnapshotFidelity `protobuf:"varint,10,opt,name=fidelity,proto3,enum=ateom.SnapshotFidelity" json:"fidelity,omitempty"`
	// When absent the actor has no egress: its TCP is captured and refused.
	EgressGateway *EgressGateway `protobuf:"bytes,12,opt,name=egress_gateway,json=egressGateway,proto3,oneof" json:"egress_gateway,omitempty"`
	// The actor's declared size, from the ActorTemplate's resource limits. Used to
	// (re)size the sandbox on a VOLUMES restore (fresh guest container). On a
	// MEMORY micro-VM restore the size baked into the snapshot is authoritative and
	// these are ignored. Zero means "unset": keep the runtime default.
	CpuMilli    int64      `protobuf:"varint,14,opt,name=cpu_milli,json=cpuMilli,proto3" json:"cpu_milli,omitempty"`          // CPU limit in millicores (1000 = one core).
	MemoryBytes int64      `protobuf:"varint,15,opt,name=memory_bytes,json=memoryBytes,proto3" json:"memory_bytes,omitempty"` // Memory limit in bytes.
	ActorDirs   *ActorDirs `protobuf:"bytes,16,opt,name=actor_dirs,json=actorDirs,proto3" json:"actor_dirs,omitempty"`
	// actor_dirs.restore_dir is a preserved local snapshot, not a scratch copy:
	// ateom must not delete or modify files in it.
	PreserveRestoreDir bool `protobuf:"varint,17,opt,name=preserve_restore_dir,json=preserveRestoreDir,proto3" json:"preserve_restore_dir,omitempty"`
	// contains filtered or unexported fields
}

type RestoreWorkloadResponse struct {
	// contains filtered or unexported fields
}

type RunWorkloadRequest struct {
	Atespace              string        `protobuf:"bytes,1,opt,name=atespace,proto3" json:"atespace,omitempty"`
	ActorName             string        `protobuf:"bytes,2,opt,name=actor_name,json=actorName,proto3" json:"actor_name,omitempty"`
	ActorUid              string        `protobuf:"bytes,3,opt,name=actor_uid,json=actorUid,proto3" json:"actor_uid,omitempty"`
	ActorTemplateAtespace string        `` /* 126-byte string literal not displayed */
	ActorTemplateName     string        `protobuf:"bytes,5,opt,name=actor_template_name,json=actorTemplateName,proto3" json:"actor_template_name,omitempty"`
	RunscPath             string        `protobuf:"bytes,6,opt,name=runsc_path,json=runscPath,proto3" json:"runsc_path,omitempty"`
	Spec                  *WorkloadSpec `protobuf:"bytes,7,opt,name=spec,proto3" json:"spec,omitempty"`
	// runtime_asset_paths maps a runtime asset name (e.g. "cloud-hypervisor",
	// "virtiofsd", "kata-kernel", "kata-image")
	// to the local on-disk path atelet fetched it to (content-addressed, like
	// runsc_path). Empty for the gVisor runtime, which uses runsc_path.
	RuntimeAssetPaths map[string]string `` /* 188-byte string literal not displayed */
	// When absent the actor has no egress: its TCP is captured and refused.
	EgressGateway *EgressGateway `protobuf:"bytes,10,opt,name=egress_gateway,json=egressGateway,proto3,oneof" json:"egress_gateway,omitempty"`
	// The actor's declared size, from the ActorTemplate's resource limits. ateom
	// sizes the sandbox to these (cgroup caps via the OCI spec, and for the
	// micro-VM the VM's vCPU count and memory). Zero means "unset": keep the
	// runtime default (unlimited for gVisor, ateom's own default for the micro-VM).
	CpuMilli    int64      `protobuf:"varint,11,opt,name=cpu_milli,json=cpuMilli,proto3" json:"cpu_milli,omitempty"`          // CPU limit in millicores (1000 = one core).
	MemoryBytes int64      `protobuf:"varint,12,opt,name=memory_bytes,json=memoryBytes,proto3" json:"memory_bytes,omitempty"` // Memory limit in bytes.
	ActorDirs   *ActorDirs `protobuf:"bytes,13,opt,name=actor_dirs,json=actorDirs,proto3" json:"actor_dirs,omitempty"`
	// contains filtered or unexported fields
}

type RunWorkloadResponse struct {
	// contains filtered or unexported fields
}

type SnapshotFidelity int32

type StatsSource int32

type SystemInfoVolumeMount struct {

	// volume_name is the name the ActorTemplate gave the volume. It selects the
	// per-volume directory atelet prepared for the actor on the host.
	VolumeName string `protobuf:"bytes,1,opt,name=volume_name,json=volumeName,proto3" json:"volume_name,omitempty"`
	// mount_path is where the container sees the volume.
	MountPath string `protobuf:"bytes,2,opt,name=mount_path,json=mountPath,proto3" json:"mount_path,omitempty"`
	// contains filtered or unexported fields
}

type TerminateWorkloadRequest struct {
	Atespace              string        `protobuf:"bytes,1,opt,name=atespace,proto3" json:"atespace,omitempty"`
	ActorName             string        `protobuf:"bytes,2,opt,name=actor_name,json=actorName,proto3" json:"actor_name,omitempty"`
	ActorUid              string        `protobuf:"bytes,3,opt,name=actor_uid,json=actorUid,proto3" json:"actor_uid,omitempty"`
	ActorTemplateAtespace string        `` /* 126-byte string literal not displayed */
	ActorTemplateName     string        `protobuf:"bytes,5,opt,name=actor_template_name,json=actorTemplateName,proto3" json:"actor_template_name,omitempty"`
	RunscPath             string        `protobuf:"bytes,6,opt,name=runsc_path,json=runscPath,proto3" json:"runsc_path,omitempty"`
	Spec                  *WorkloadSpec `protobuf:"bytes,7,opt,name=spec,proto3" json:"spec,omitempty"`
	ActorDirs             *ActorDirs    `protobuf:"bytes,8,opt,name=actor_dirs,json=actorDirs,proto3" json:"actor_dirs,omitempty"`
	// contains filtered or unexported fields
}

type TerminateWorkloadResponse struct {
	// contains filtered or unexported fields
}

type UnimplementedAteomServer struct{}

type UnsafeAteomServer interface {
	// contains filtered or unexported methods
}

type VolumeMount struct {
	VolumeName string `protobuf:"bytes,1,opt,name=volume_name,json=volumeName,proto3" json:"volume_name,omitempty"`
	MountPath  string `protobuf:"bytes,2,opt,name=mount_path,json=mountPath,proto3" json:"mount_path,omitempty"`
	// contains filtered or unexported fields
}

type WakeupProbe struct {
	HttpGet *HttpGetAction `protobuf:"bytes,1,opt,name=http_get,json=httpGet,proto3" json:"http_get,omitempty"`
	// How long to keep polling before giving up and failing the actor start.
	TimeoutSeconds int32 `protobuf:"varint,2,opt,name=timeout_seconds,json=timeoutSeconds,proto3" json:"timeout_seconds,omitempty"`
	// contains filtered or unexported fields
}

type WorkloadSpec struct {
	Containers []*Container `protobuf:"bytes,1,rep,name=containers,proto3" json:"containers,omitempty"`
	// contains filtered or unexported fields
}

type WorkloadStatsSample struct {

	// Identity of the measured actor, retained by ateom from the
	// RunWorkloadRequest / RestoreWorkloadRequest that started it. Echoed back so
	// the caller can attribute the sample without holding its own mapping from
	// worker to actor.
	Atespace              string `protobuf:"bytes,1,opt,name=atespace,proto3" json:"atespace,omitempty"`
	ActorName             string `protobuf:"bytes,2,opt,name=actor_name,json=actorName,proto3" json:"actor_name,omitempty"`
	ActorUid              string `protobuf:"bytes,3,opt,name=actor_uid,json=actorUid,proto3" json:"actor_uid,omitempty"`
	ActorTemplateAtespace string `` /* 126-byte string literal not displayed */
	ActorTemplateName     string `protobuf:"bytes,5,opt,name=actor_template_name,json=actorTemplateName,proto3" json:"actor_template_name,omitempty"`
	// The sandbox runtime family that produced this sample, in the
	// ate.dev/v1alpha1 SandboxClass form: "gvisor" (cmd/ateom-gvisor) or
	// "microvm" (cmd/ateom-microvm). An ateom binary only ever reports its own.
	SandboxClass string `protobuf:"bytes,6,opt,name=sandbox_class,json=sandboxClass,proto3" json:"sandbox_class,omitempty"`
	// How the measurements below were obtained.
	Source StatsSource `protobuf:"varint,7,opt,name=source,proto3,enum=ateom.StatsSource" json:"source,omitempty"`
	// Measurements. All four are zero when source is STATS_SOURCE_UNSPECIFIED,
	// which means "not measured" rather than "measured as zero".
	//
	// memory_current_bytes and memory_working_set_bytes are absolute.
	MemoryCurrentBytes uint64 `protobuf:"varint,8,opt,name=memory_current_bytes,json=memoryCurrentBytes,proto3" json:"memory_current_bytes,omitempty"`
	// High-water mark of memory_current_bytes, as the source reports it: the
	// cgroup source restarts it on a restore, the guest-agent source brings the
	// guest's own back with it. Also zero when the runtime cannot report a peak:
	// the cgroup source reads memory.peak, which only exists on Linux 5.19 and
	// later.
	MemoryPeakBytes uint64 `protobuf:"varint,9,opt,name=memory_peak_bytes,json=memoryPeakBytes,proto3" json:"memory_peak_bytes,omitempty"`
	// memory_current_bytes less the reclaimable page cache, floored at zero. This
	// is the figure to compare against a memory limit; memory_current_bytes
	// drifts upward with cache the kernel would drop for free under pressure.
	MemoryWorkingSetBytes uint64 `` /* 130-byte string literal not displayed */
	// Cumulative CPU time since the activation began (epoch_unix_nano), for
	// every source, and never decreasing within it. The cgroup source restarts on
	// its own; the guest-agent source counts from its first read after a restore
	// that resumes the guest, since the guest's counters survive in guest RAM. A
	// lifetime figure is the sum over epochs of each epoch's highest value.
	CpuUsageUsec       uint64 `protobuf:"varint,11,opt,name=cpu_usage_usec,json=cpuUsageUsec,proto3" json:"cpu_usage_usec,omitempty"`
	ObservedAtUnixNano int64  `protobuf:"varint,12,opt,name=observed_at_unix_nano,json=observedAtUnixNano,proto3" json:"observed_at_unix_nano,omitempty"`
	// The activation this sample belongs to, as the unix-nano time it began. A
	// Run or Restore starts one.
	EpochUnixNano int64 `protobuf:"varint,13,opt,name=epoch_unix_nano,json=epochUnixNano,proto3" json:"epoch_unix_nano,omitempty"`
	// contains filtered or unexported fields
}