conf

type Auth struct {

	// Authentication creates a JWT that uses this secret for signing
	GeneratedJwsHmacSecret        string          `` /* 131-byte string literal not displayed */
	AllowList                     *Auth_AllowList `protobuf:"bytes,3,opt,name=allow_list,json=allowList,proto3" json:"allow_list,omitempty"`
	CasRobotAccountPrivateKeyPath string          `` /* 156-byte string literal not displayed */
	Oidc                          *Auth_OIDC      `protobuf:"bytes,6,opt,name=oidc,proto3" json:"oidc,omitempty"`
	// contains filtered or unexported fields
}

type Auth_AllowList struct {

	// allow_list is a list of allowed email addresses or domains
	// for example ["@chainloop.dev", "foo@mycompany.org"]
	Rules []string `protobuf:"bytes,1,rep,name=rules,proto3" json:"rules,omitempty"`
	// Custom message to show when a user is not allowed
	CustomMessage string `protobuf:"bytes,2,opt,name=custom_message,json=customMessage,proto3" json:"custom_message,omitempty"`
	// The list of routes that will be affected by this middleware, by default all of them
	SelectedRoutes []string `protobuf:"bytes,3,rep,name=selected_routes,json=selectedRoutes,proto3" json:"selected_routes,omitempty"`
	// contains filtered or unexported fields
}

type Auth_OIDC struct {
	Domain       string `protobuf:"bytes,1,opt,name=domain,proto3" json:"domain,omitempty"`
	ClientId     string `protobuf:"bytes,2,opt,name=client_id,json=clientId,proto3" json:"client_id,omitempty"`
	ClientSecret string `protobuf:"bytes,3,opt,name=client_secret,json=clientSecret,proto3" json:"client_secret,omitempty"`
	// Optional login URL that will be used by the CLI to start the OIDC flow
	// If not provided, it will default to [controlplane domain]/login
	LoginUrlOverride string `protobuf:"bytes,5,opt,name=login_url_override,json=loginUrlOverride,proto3" json:"login_url_override,omitempty"`
	// contains filtered or unexported fields
}

type Bootstrap struct {
	Server             *Server                  `protobuf:"bytes,1,opt,name=server,proto3" json:"server,omitempty"`
	Data               *Data                    `protobuf:"bytes,2,opt,name=data,proto3" json:"data,omitempty"`
	Auth               *Auth                    `protobuf:"bytes,3,opt,name=auth,proto3" json:"auth,omitempty"`
	Observability      *Bootstrap_Observability `protobuf:"bytes,4,opt,name=observability,proto3" json:"observability,omitempty"`
	CredentialsService *v1.Credentials          `protobuf:"bytes,5,opt,name=credentials_service,json=credentialsService,proto3" json:"credentials_service,omitempty"`
	// CAS Server endpoint
	CasServer *Bootstrap_CASServer `protobuf:"bytes,6,opt,name=cas_server,json=casServer,proto3" json:"cas_server,omitempty"`
	// Plugins directory
	// NOTE: plugins have the form of chainloop-plugin-<name>
	PluginsDir string `protobuf:"bytes,7,opt,name=plugins_dir,json=pluginsDir,proto3" json:"plugins_dir,omitempty"`
	// Configuration about the shared referrer index
	ReferrerSharedIndex *ReferrerSharedIndex `protobuf:"bytes,8,opt,name=referrer_shared_index,json=referrerSharedIndex,proto3" json:"referrer_shared_index,omitempty"`
	// The certificate authority used for keyless signing
	CertificateAuthority *CA `protobuf:"bytes,9,opt,name=certificate_authority,json=certificateAuthority,proto3" json:"certificate_authority,omitempty"`
	// Configuration for onboarding users in organizations with specific roles
	Onboarding []*v11.OnboardingSpec `protobuf:"bytes,10,rep,name=onboarding,proto3" json:"onboarding,omitempty"`
	// Configuration to enable Prometheus integration for the specified organizations
	PrometheusIntegration []*PrometheusIntegrationSpec `protobuf:"bytes,11,rep,name=prometheus_integration,json=prometheusIntegration,proto3" json:"prometheus_integration,omitempty"`
	// contains filtered or unexported fields
}

type Bootstrap_CASServer struct {

	// CAS server GRPC endpoint
	Grpc *Server_GRPC `protobuf:"bytes,1,opt,name=grpc,proto3" json:"grpc,omitempty"`
	// insecure is used to connect to the CAS server in development
	Insecure bool `protobuf:"varint,2,opt,name=insecure,proto3" json:"insecure,omitempty"`
	// CAS server external http(s) download endpoint
	// In the form of [scheme]://[host]/path i.e https://cas.chainloop.dev/download
	// https://github.com/chainloop-dev/chainloop/blob/126f47b6c0803eac844b8e3e1a21d582f00e4dc6/app/artifact-cas/internal/service/download.go#L34
	DownloadUrl string `protobuf:"bytes,3,opt,name=download_url,json=downloadUrl,proto3" json:"download_url,omitempty"`
	// contains filtered or unexported fields
}

type Bootstrap_Observability struct {
	Sentry *Bootstrap_Observability_Sentry `protobuf:"bytes,1,opt,name=sentry,proto3" json:"sentry,omitempty"`
	// contains filtered or unexported fields
}

type Bootstrap_Observability_Sentry struct {
	Dsn         string `protobuf:"bytes,1,opt,name=dsn,proto3" json:"dsn,omitempty"`
	Environment string `protobuf:"bytes,2,opt,name=environment,proto3" json:"environment,omitempty"`
	// contains filtered or unexported fields
}

type CA struct {

	// Types that are assignable to Ca:
	//
	//	*CA_FileCa
	//	*CA_EjbcaCa
	Ca isCA_Ca `protobuf_oneof:"ca"`
	// contains filtered or unexported fields
}

type CA_EJBCA struct {
	ServerUrl string `protobuf:"bytes,1,opt,name=server_url,json=serverUrl,proto3" json:"server_url,omitempty"`
	// client cert authentication configuration
	KeyPath    string `protobuf:"bytes,2,opt,name=key_path,json=keyPath,proto3" json:"key_path,omitempty"`
	CertPath   string `protobuf:"bytes,3,opt,name=cert_path,json=certPath,proto3" json:"cert_path,omitempty"`
	RootCaPath string `protobuf:"bytes,4,opt,name=root_ca_path,json=rootCaPath,proto3" json:"root_ca_path,omitempty"`
	// EJBCA Profile configuration
	CertificateProfileName   string `` /* 129-byte string literal not displayed */
	EndEntityProfileName     string `protobuf:"bytes,6,opt,name=end_entity_profile_name,json=endEntityProfileName,proto3" json:"end_entity_profile_name,omitempty"`
	CertificateAuthorityName string `` /* 135-byte string literal not displayed */
	// contains filtered or unexported fields
}

type CA_EjbcaCa struct {
	EjbcaCa *CA_EJBCA `protobuf:"bytes,2,opt,name=ejbca_ca,json=ejbcaCa,proto3,oneof"`
}

type CA_FileCA struct {
	CertPath string `protobuf:"bytes,1,opt,name=cert_path,json=certPath,proto3" json:"cert_path,omitempty"`
	KeyPath  string `protobuf:"bytes,2,opt,name=key_path,json=keyPath,proto3" json:"key_path,omitempty"`
	KeyPass  string `protobuf:"bytes,3,opt,name=key_pass,json=keyPass,proto3" json:"key_pass,omitempty"`
	// contains filtered or unexported fields
}

type CA_FileCa struct {
	FileCa *CA_FileCA `protobuf:"bytes,1,opt,name=file_ca,json=fileCa,proto3,oneof"`
}

type Data struct {
	Database *Data_Database `protobuf:"bytes,1,opt,name=database,proto3" json:"database,omitempty"`
	// contains filtered or unexported fields
}

type Data_Database struct {
	Driver string `protobuf:"bytes,1,opt,name=driver,proto3" json:"driver,omitempty"`
	Source string `protobuf:"bytes,2,opt,name=source,proto3" json:"source,omitempty"`
	// contains filtered or unexported fields
}

type PrometheusIntegrationSpec struct {
	OrgName string `protobuf:"bytes,1,opt,name=org_name,json=orgName,proto3" json:"org_name,omitempty"`
	// contains filtered or unexported fields
}

type ReferrerSharedIndex struct {

	// If the shared, public index feature is enabled
	Enabled bool `protobuf:"varint,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// list of organizations uuids that are allowed to appear in the shared referrer index
	// think of it as a list of trusted publishers
	AllowedOrgs []string `protobuf:"bytes,2,rep,name=allowed_orgs,json=allowedOrgs,proto3" json:"allowed_orgs,omitempty"`
	// contains filtered or unexported fields
}

type Server struct {
	Http *Server_HTTP `protobuf:"bytes,1,opt,name=http,proto3" json:"http,omitempty"`
	Grpc *Server_GRPC `protobuf:"bytes,2,opt,name=grpc,proto3" json:"grpc,omitempty"`
	// HTTPMetrics defines the HTTP server that exposes prometheus metrics
	HttpMetrics *Server_HTTP `protobuf:"bytes,3,opt,name=http_metrics,json=httpMetrics,proto3" json:"http_metrics,omitempty"`
	// contains filtered or unexported fields
}

type Server_GRPC struct {
	Network   string               `protobuf:"bytes,1,opt,name=network,proto3" json:"network,omitempty"`
	Addr      string               `protobuf:"bytes,2,opt,name=addr,proto3" json:"addr,omitempty"`
	Timeout   *durationpb.Duration `protobuf:"bytes,3,opt,name=timeout,proto3" json:"timeout,omitempty"`
	TlsConfig *Server_TLS          `protobuf:"bytes,4,opt,name=tls_config,json=tlsConfig,proto3" json:"tls_config,omitempty"`
	// contains filtered or unexported fields
}

type Server_HTTP struct {
	Network string `protobuf:"bytes,1,opt,name=network,proto3" json:"network,omitempty"`
	Addr    string `protobuf:"bytes,2,opt,name=addr,proto3" json:"addr,omitempty"`
	// In the form of [scheme]://[host] i.e https://instance.chainloop.dev
	// Optional
	ExternalUrl string               `protobuf:"bytes,4,opt,name=external_url,json=externalUrl,proto3" json:"external_url,omitempty"`
	Timeout     *durationpb.Duration `protobuf:"bytes,5,opt,name=timeout,proto3" json:"timeout,omitempty"`
	// contains filtered or unexported fields
}

type Server_TLS struct {

	// path to certificate and private key
	Certificate string `protobuf:"bytes,1,opt,name=certificate,proto3" json:"certificate,omitempty"`
	PrivateKey  string `protobuf:"bytes,2,opt,name=private_key,json=privateKey,proto3" json:"private_key,omitempty"`
	// contains filtered or unexported fields
}