conf

type Auth struct {

	// Public key used to verify the received JWT token
	// This token in the context of chainloop has been crafted by the controlplane
	//
	// Deprecated: Marked as deprecated in conf.proto.
	RobotAccountPublicKeyPath string `` /* 142-byte string literal not displayed */
	// Public key used to verify the received JWT token
	PublicKeyPath string `protobuf:"bytes,2,opt,name=public_key_path,json=publicKeyPath,proto3" json:"public_key_path,omitempty"`
	// contains filtered or unexported fields
}

type Bootstrap struct {
	Server             *Server                  `protobuf:"bytes,1,opt,name=server,proto3" json:"server,omitempty"`
	Auth               *Auth                    `protobuf:"bytes,2,opt,name=auth,proto3" json:"auth,omitempty"`
	Observability      *Bootstrap_Observability `protobuf:"bytes,3,opt,name=observability,proto3" json:"observability,omitempty"`
	CredentialsService *v1.Credentials          `protobuf:"bytes,4,opt,name=credentials_service,json=credentialsService,proto3" json:"credentials_service,omitempty"`
	// Optional NATS server configuration to publish audit events to the
	// control-plane-owned stream. When unset, event publishing is disabled.
	NatsServer *Bootstrap_NatsServer `protobuf:"bytes,5,opt,name=nats_server,json=natsServer,proto3" json:"nats_server,omitempty"`
	// Local directory where uploads and downloads are staged on disk and verified
	// against their digest: uploads before reaching the backend, downloads before
	// the first byte is sent to the client. It must be a writable volume; in
	// production a dedicated emptyDir is mounted here (NOT tmpfs/RAM, and NOT the
	// /tmp secret mount). Required: when unset the service refuses to start.
	StagingDir string `protobuf:"bytes,6,opt,name=staging_dir,json=stagingDir,proto3" json:"staging_dir,omitempty"`
	// contains filtered or unexported fields
}

type Bootstrap_NatsServer struct {

	// NATS server URI, e.g. "nats://localhost:4222"
	Uri string `protobuf:"bytes,1,opt,name=uri,proto3" json:"uri,omitempty"`
	// Types that are valid to be assigned to Authentication:
	//
	//	*Bootstrap_NatsServer_Token
	Authentication isBootstrap_NatsServer_Authentication `protobuf_oneof:"authentication"`
	// contains filtered or unexported fields
}

type Bootstrap_NatsServer_Token struct {
	Token string `protobuf:"bytes,2,opt,name=token,proto3,oneof"`
}

type Bootstrap_Observability struct {
	Sentry  *Bootstrap_Observability_Sentry  `protobuf:"bytes,1,opt,name=sentry,proto3" json:"sentry,omitempty"`
	Tracing *Bootstrap_Observability_Tracing `protobuf:"bytes,2,opt,name=tracing,proto3" json:"tracing,omitempty"`
	// contains filtered or unexported fields
}

type Bootstrap_Observability_Sentry struct {
	Dsn         string `protobuf:"bytes,1,opt,name=dsn,proto3" json:"dsn,omitempty"`
	Environment string `protobuf:"bytes,2,opt,name=environment,proto3" json:"environment,omitempty"`
	// contains filtered or unexported fields
}

type Bootstrap_Observability_Tracing struct {

	// Whether tracing is enabled. Disabled by default for backward compatibility.
	Enabled bool `protobuf:"varint,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
	// OTLP gRPC exporter endpoint (e.g. "localhost:4317")
	Endpoint string `protobuf:"bytes,2,opt,name=endpoint,proto3" json:"endpoint,omitempty"`
	// Whether to use insecure connection (no TLS). Useful for local development.
	Insecure bool `protobuf:"varint,3,opt,name=insecure,proto3" json:"insecure,omitempty"`
	// Sampling ratio between 0.0 and 1.0. Defaults to 1.0 (sample everything) when unset.
	SamplingRatio *float64 `protobuf:"fixed64,4,opt,name=sampling_ratio,json=samplingRatio,proto3,oneof" json:"sampling_ratio,omitempty"`
	// contains filtered or unexported fields
}

type Server struct {

	// Shared HTTP and native gRPC endpoint
	Http *Server_HTTP `protobuf:"bytes,1,opt,name=http,proto3" json:"http,omitempty"`
	// GRPC API endpoint
	Grpc *Server_GRPC `protobuf:"bytes,2,opt,name=grpc,proto3" json:"grpc,omitempty"`
	// hHTTP server where the prometheus metrics will get exposed
	HttpMetrics *Server_HTTP `protobuf:"bytes,3,opt,name=http_metrics,json=httpMetrics,proto3" json:"http_metrics,omitempty"`
	// The native gRPC listener remains enabled when this field is unset.
	LegacyGrpcListener *bool `protobuf:"varint,4,opt,name=legacy_grpc_listener,json=legacyGrpcListener,proto3,oneof" json:"legacy_grpc_listener,omitempty"`
	// contains filtered or unexported fields
}

type Server_CORS struct {
	AllowOrigins []string `protobuf:"bytes,1,rep,name=allow_origins,json=allowOrigins,proto3" json:"allow_origins,omitempty"`
	// contains filtered or unexported fields
}

type Server_GRPC struct {
	Network   string               `protobuf:"bytes,1,opt,name=network,proto3" json:"network,omitempty"`
	Addr      string               `protobuf:"bytes,2,opt,name=addr,proto3" json:"addr,omitempty"`
	Timeout   *durationpb.Duration `protobuf:"bytes,3,opt,name=timeout,proto3" json:"timeout,omitempty"`
	TlsConfig *Server_TLS          `protobuf:"bytes,4,opt,name=tls_config,json=tlsConfig,proto3" json:"tls_config,omitempty"`
	// contains filtered or unexported fields
}

type Server_HTTP struct {
	Network string               `protobuf:"bytes,1,opt,name=network,proto3" json:"network,omitempty"`
	Addr    string               `protobuf:"bytes,2,opt,name=addr,proto3" json:"addr,omitempty"`
	Timeout *durationpb.Duration `protobuf:"bytes,3,opt,name=timeout,proto3" json:"timeout,omitempty"`
	// CORS configuration for the HTTP download endpoint
	Cors *Server_CORS `protobuf:"bytes,4,opt,name=cors,proto3" json:"cors,omitempty"`
	// TLS for every protocol on the shared HTTP endpoint.
	TlsConfig *Server_TLS `protobuf:"bytes,5,opt,name=tls_config,json=tlsConfig,proto3" json:"tls_config,omitempty"`
	// contains filtered or unexported fields
}

type Server_TLS struct {

	// path to certificate and private key
	Certificate string `protobuf:"bytes,1,opt,name=certificate,proto3" json:"certificate,omitempty"`
	PrivateKey  string `protobuf:"bytes,2,opt,name=private_key,json=privateKey,proto3" json:"private_key,omitempty"`
	// contains filtered or unexported fields
}