api

type Decision struct {
	Id        string                 `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`               // unique id, replay a decision starting with this, also useful to de-dup
	Timestamp *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=timestamp,proto3" json:"timestamp,omitempty"` // UTC time when the decision was made
	Path      string                 `protobuf:"bytes,3,opt,name=path,proto3" json:"path,omitempty"`           // Policy path used in decision
	User      *DecisionUser          `protobuf:"bytes,4,opt,name=user,proto3" json:"user,omitempty"`           // info about user for whom the decision as made
	Policy    *DecisionPolicy        `protobuf:"bytes,5,opt,name=policy,proto3" json:"policy,omitempty"`       // info about policy used for the decision
	Outcomes  map[string]bool        ``                                                                        // outcome of the decisions specified in the policy context
	/* 158-byte string literal not displayed */
	Resource    *structpb.Struct  `protobuf:"bytes,7,opt,name=resource,proto3" json:"resource,omitempty"` // the resource context used in a decision
	Annotations map[string]string ``                                                                      // annotations that may be added to a decision
	/* 163-byte string literal not displayed */
	// contains filtered or unexported fields
}

type DecisionPolicy struct {
	Context         *v1.PolicyContext `protobuf:"bytes,1,opt,name=context,proto3" json:"context,omitempty"`                                        // policy context used in the decision
	RegistryService string            `protobuf:"bytes,2,opt,name=registry_service,json=registryService,proto3" json:"registry_service,omitempty"` // registry service where policy was retrieved from (e.g. opcr.io)
	RegistryImage   string            `protobuf:"bytes,3,opt,name=registry_image,json=registryImage,proto3" json:"registry_image,omitempty"`       // image of the policy in the registry, including org (e.g. acmecorp/peoplefinder-abac)
	RegistryTag     string            `protobuf:"bytes,4,opt,name=registry_tag,json=registryTag,proto3" json:"registry_tag,omitempty"`             // tag of the policy image (e.g. 0.8.2 or latest)
	RegistryDigest  string            `protobuf:"bytes,5,opt,name=registry_digest,json=registryDigest,proto3" json:"registry_digest,omitempty"`    // digest of the policy image
	// contains filtered or unexported fields
}

type DecisionUser struct {
	Context *v1.IdentityContext `protobuf:"bytes,1,opt,name=context,proto3" json:"context,omitempty"` // identity context used in the decision
	Id      string              `protobuf:"bytes,2,opt,name=id,proto3" json:"id,omitempty"`           // id of the user the identity resolved to
	Email   string              `protobuf:"bytes,3,opt,name=email,proto3" json:"email,omitempty"`     // convinience human-readable identifier
	// contains filtered or unexported fields
}