runtimev1

type AppSecret struct {

	// The unique resource id for this secret.
	Rid string `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	// The encore name of the secret.
	EncoreName string `protobuf:"bytes,2,opt,name=encore_name,json=encoreName,proto3" json:"encore_name,omitempty"`
	// The secret data.
	Data *SecretData `protobuf:"bytes,3,opt,name=data,proto3" json:"data,omitempty"`
	// contains filtered or unexported fields
}

type Bucket struct {

	// The unique resource id for this bucket.
	Rid string `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	// The encore name of the bucket.
	EncoreName string `protobuf:"bytes,2,opt,name=encore_name,json=encoreName,proto3" json:"encore_name,omitempty"`
	// The cloud name of the bucket.
	CloudName string `protobuf:"bytes,3,opt,name=cloud_name,json=cloudName,proto3" json:"cloud_name,omitempty"`
	// Optional key prefix to prepend to all bucket keys.
	//
	// Note: make sure it ends with a slash ("/") if you want
	// to group objects within a certain folder.
	KeyPrefix *string `protobuf:"bytes,4,opt,name=key_prefix,json=keyPrefix,proto3,oneof" json:"key_prefix,omitempty"`
	// Public base URL for accessing objects in this bucket.
	// Must be set for public buckets.
	PublicBaseUrl *string `protobuf:"bytes,5,opt,name=public_base_url,json=publicBaseUrl,proto3,oneof" json:"public_base_url,omitempty"`
	// contains filtered or unexported fields
}

type BucketCluster struct {

	// The unique resource id for this cluster.
	Rid     string    `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	Buckets []*Bucket `protobuf:"bytes,2,rep,name=buckets,proto3" json:"buckets,omitempty"`
	// Types that are assignable to Provider:
	//
	//	*BucketCluster_S3_
	//	*BucketCluster_Gcs
	Provider isBucketCluster_Provider `protobuf_oneof:"provider"`
	// contains filtered or unexported fields
}

type BucketCluster_GCS struct {

	// Endpoint override, if any. Defaults to https://storage.googleapis.com if unset.
	Endpoint *string `protobuf:"bytes,1,opt,name=endpoint,proto3,oneof" json:"endpoint,omitempty"`
	// Whether to connect anonymously or if a service account should be resolved.
	Anonymous bool `protobuf:"varint,2,opt,name=anonymous,proto3" json:"anonymous,omitempty"`
	// Additional options for signed URLs when running in local dev mode.
	// Only use with anonymous mode.
	LocalSign *BucketCluster_GCS_LocalSignOptions `protobuf:"bytes,3,opt,name=local_sign,json=localSign,proto3,oneof" json:"local_sign,omitempty"`
	// contains filtered or unexported fields
}

type BucketCluster_GCS_LocalSignOptions struct {

	// Base prefix to use for presigned URLs.
	BaseUrl string `protobuf:"bytes,1,opt,name=base_url,json=baseUrl,proto3" json:"base_url,omitempty"`
	// Use these credentials to sign local URLs. Only pass dummy credentials
	// here, no actual secrets.
	AccessId   string `protobuf:"bytes,2,opt,name=access_id,json=accessId,proto3" json:"access_id,omitempty"`
	PrivateKey string `protobuf:"bytes,3,opt,name=private_key,json=privateKey,proto3" json:"private_key,omitempty"`
	// contains filtered or unexported fields
}

type BucketCluster_Gcs struct {
	Gcs *BucketCluster_GCS `protobuf:"bytes,11,opt,name=gcs,proto3,oneof"`
}

type BucketCluster_S3 struct {

	// Region to connect to.
	Region string `protobuf:"bytes,1,opt,name=region,proto3" json:"region,omitempty"`
	// Endpoint override, if any. Must be specified if using a non-standard AWS region.
	Endpoint *string `protobuf:"bytes,2,opt,name=endpoint,proto3,oneof" json:"endpoint,omitempty"`
	// Set these to use explicit credentials for this bucket,
	// as opposed to resolving using AWS's default credential chain.
	AccessKeyId     *string     `protobuf:"bytes,3,opt,name=access_key_id,json=accessKeyId,proto3,oneof" json:"access_key_id,omitempty"`
	SecretAccessKey *SecretData `protobuf:"bytes,4,opt,name=secret_access_key,json=secretAccessKey,proto3,oneof" json:"secret_access_key,omitempty"`
	// contains filtered or unexported fields
}

type BucketCluster_S3_ struct {
	S3 *BucketCluster_S3 `protobuf:"bytes,10,opt,name=s3,proto3,oneof"`
}

type ClientCert struct {

	// The unique resource id for this certificate.
	Rid  string      `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	Cert string      `protobuf:"bytes,2,opt,name=cert,proto3" json:"cert,omitempty"`
	Key  *SecretData `protobuf:"bytes,3,opt,name=key,proto3" json:"key,omitempty"`
	// contains filtered or unexported fields
}

type Deployment struct {
	DeployId   string                 `protobuf:"bytes,1,opt,name=deploy_id,json=deployId,proto3" json:"deploy_id,omitempty"`
	DeployedAt *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=deployed_at,json=deployedAt,proto3" json:"deployed_at,omitempty"`
	// A list of experiments to enable at runtime.
	DynamicExperiments []string `protobuf:"bytes,3,rep,name=dynamic_experiments,json=dynamicExperiments,proto3" json:"dynamic_experiments,omitempty"`
	// The gateways hosted by this deployment, by rid.
	HostedGateways []string `protobuf:"bytes,4,rep,name=hosted_gateways,json=hostedGateways,proto3" json:"hosted_gateways,omitempty"`
	// The services hosted by this deployment.
	HostedServices []*HostedService `protobuf:"bytes,5,rep,name=hosted_services,json=hostedServices,proto3" json:"hosted_services,omitempty"`
	// The authentication method(s) that can be used when talking
	// to this deployment for internal service-to-service calls.
	//
	// An empty list means no service-to-service calls can be made to this deployment.
	AuthMethods []*ServiceAuth `protobuf:"bytes,6,rep,name=auth_methods,json=authMethods,proto3" json:"auth_methods,omitempty"`
	// Observability-related configuration.
	Observability *Observability `protobuf:"bytes,7,opt,name=observability,proto3" json:"observability,omitempty"`
	// Service discovery configuration.
	ServiceDiscovery *ServiceDiscovery `protobuf:"bytes,8,opt,name=service_discovery,json=serviceDiscovery,proto3" json:"service_discovery,omitempty"`
	// Graceful shutdown behavior.
	GracefulShutdown *GracefulShutdown `protobuf:"bytes,9,opt,name=graceful_shutdown,json=gracefulShutdown,proto3" json:"graceful_shutdown,omitempty"`
	// contains filtered or unexported fields
}

type EncoreAuthKey struct {
	Id   uint32      `protobuf:"varint,1,opt,name=id,proto3" json:"id,omitempty"`
	Data *SecretData `protobuf:"bytes,2,opt,name=data,proto3" json:"data,omitempty"`
	// contains filtered or unexported fields
}

type EncoreCloudProvider struct {

	// The unique resource id for this provider.
	Rid string `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	// URL to use to authenticate with the server.
	ServerUrl string           `protobuf:"bytes,2,opt,name=server_url,json=serverUrl,proto3" json:"server_url,omitempty"`
	AuthKeys  []*EncoreAuthKey `protobuf:"bytes,3,rep,name=auth_keys,json=authKeys,proto3" json:"auth_keys,omitempty"`
	// contains filtered or unexported fields
}

type EncorePlatform struct {

	// Auth keys for validating signed requests from the Encore Platform.
	PlatformSigningKeys []*EncoreAuthKey `protobuf:"bytes,1,rep,name=platform_signing_keys,json=platformSigningKeys,proto3" json:"platform_signing_keys,omitempty"`
	// The Encore Cloud configuration to use, if running in Encore Cloud.
	EncoreCloud *EncoreCloudProvider `protobuf:"bytes,2,opt,name=encore_cloud,json=encoreCloud,proto3,oneof" json:"encore_cloud,omitempty"`
	// contains filtered or unexported fields
}

type Environment struct {
	AppId   string            `protobuf:"bytes,1,opt,name=app_id,json=appId,proto3" json:"app_id,omitempty"`
	AppSlug string            `protobuf:"bytes,2,opt,name=app_slug,json=appSlug,proto3" json:"app_slug,omitempty"`
	EnvId   string            `protobuf:"bytes,3,opt,name=env_id,json=envId,proto3" json:"env_id,omitempty"`
	EnvName string            `protobuf:"bytes,4,opt,name=env_name,json=envName,proto3" json:"env_name,omitempty"`
	EnvType Environment_Type  `protobuf:"varint,5,opt,name=env_type,json=envType,proto3,enum=encore.runtime.v1.Environment_Type" json:"env_type,omitempty"`
	Cloud   Environment_Cloud `protobuf:"varint,6,opt,name=cloud,proto3,enum=encore.runtime.v1.Environment_Cloud" json:"cloud,omitempty"`
	// contains filtered or unexported fields
}

type Environment_Cloud int32

type Environment_Type int32

type Gateway struct {

	// The unique id for this resource.
	Rid string `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	// The encore name of the gateway.
	EncoreName string `protobuf:"bytes,2,opt,name=encore_name,json=encoreName,proto3" json:"encore_name,omitempty"`
	// The base url for reaching this gateway, for returning to the application
	// via e.g. the metadata APIs.
	BaseUrl string `protobuf:"bytes,3,opt,name=base_url,json=baseUrl,proto3" json:"base_url,omitempty"`
	// The hostnames this gateway accepts requests for.
	Hostnames []string `protobuf:"bytes,4,rep,name=hostnames,proto3" json:"hostnames,omitempty"`
	// CORS is the CORS configuration for this gateway.
	Cors *Gateway_CORS `protobuf:"bytes,5,opt,name=cors,proto3" json:"cors,omitempty"`
	// contains filtered or unexported fields
}

type Gateway_CORS struct {
	Debug bool `protobuf:"varint,1,opt,name=debug,proto3" json:"debug,omitempty"`
	// If true, causes Encore to respond to OPTIONS requests
	// without setting Access-Control-Allow-Credentials: true.
	DisableCredentials bool `protobuf:"varint,2,opt,name=disable_credentials,json=disableCredentials,proto3" json:"disable_credentials,omitempty"`
	// Specifies the allowed origins for requests that include credentials.
	// If a request is made from an Origin in this list
	// Encore responds with Access-Control-Allow-Origin: <Origin>.
	//
	// If disable_credentials is true this field is not used.
	//
	// Types that are assignable to AllowedOriginsWithCredentials:
	//
	//	*Gateway_CORS_AllowedOrigins
	//	*Gateway_CORS_UnsafeAllowAllOriginsWithCredentials
	AllowedOriginsWithCredentials isGateway_CORS_AllowedOriginsWithCredentials `protobuf_oneof:"allowed_origins_with_credentials"`
	// Specifies the allowed origins for requests
	// that don't include credentials.
	//
	// The URLs in this list may include wildcards (e.g. "https://*.example.com"
	// or "https://*-myapp.example.com").
	AllowedOriginsWithoutCredentials *Gateway_CORSAllowedOrigins `` /* 161-byte string literal not displayed */
	// Specifies extra headers to allow, beyond
	// the default set always recognized by Encore.
	// As a special case, if the list contains "*" all headers are allowed.
	ExtraAllowedHeaders []string `protobuf:"bytes,6,rep,name=extra_allowed_headers,json=extraAllowedHeaders,proto3" json:"extra_allowed_headers,omitempty"`
	// Specifies extra headers to expose, beyond
	// the default set always recognized by Encore.
	// As a special case, if the list contains "*" all headers are allowed.
	ExtraExposedHeaders []string `protobuf:"bytes,7,rep,name=extra_exposed_headers,json=extraExposedHeaders,proto3" json:"extra_exposed_headers,omitempty"`
	// If true, allows requests to Encore apps running
	// on private networks from websites.
	// See: https://wicg.github.io/private-network-access/
	AllowPrivateNetworkAccess bool `` /* 141-byte string literal not displayed */
	// contains filtered or unexported fields
}

type Gateway_CORSAllowedOrigins struct {

	// The list of allowed origins.
	// The URLs in this list may include wildcards (e.g. "https://*.example.com"
	// or "https://*-myapp.example.com").
	//
	// The string "*" allows all origins, except for requests with credentials;
	// use CORS.unsafe_allow_unsafe_all_origins_with_credentials for that.
	AllowedOrigins []string `protobuf:"bytes,1,rep,name=allowed_origins,json=allowedOrigins,proto3" json:"allowed_origins,omitempty"`
	// contains filtered or unexported fields
}

type Gateway_CORS_AllowedOrigins struct {
	AllowedOrigins *Gateway_CORSAllowedOrigins `protobuf:"bytes,3,opt,name=allowed_origins,json=allowedOrigins,proto3,oneof"`
}

type Gateway_CORS_UnsafeAllowAllOriginsWithCredentials struct {
	UnsafeAllowAllOriginsWithCredentials bool `protobuf:"varint,4,opt,name=unsafe_allow_all_origins_with_credentials,json=unsafeAllowAllOriginsWithCredentials,proto3,oneof"`
}

type GracefulShutdown struct {

	// Total is how long we allow the total shutdown to take
	// before the process forcibly exits.
	Total *durationpb.Duration `protobuf:"bytes,1,opt,name=total,proto3" json:"total,omitempty"`
	// ShutdownHooks is how long before [total] runs out that we cancel
	// the context that is passed to the shutdown hooks.
	//
	// It is expected that ShutdownHooks is a larger value than Handlers.
	ShutdownHooks *durationpb.Duration `protobuf:"bytes,2,opt,name=shutdown_hooks,json=shutdownHooks,proto3" json:"shutdown_hooks,omitempty"`
	// Handlers is how long before [total] runs out that we cancel
	// the context that is passed to API and PubSub Subscription handlers.
	//
	// For example, if [total] is 10 seconds and [handlers] is 2 seconds,
	// then we will cancel the context passed to handlers 8 seconds after
	// a graceful shutdown is initiated.
	Handlers *durationpb.Duration `protobuf:"bytes,3,opt,name=handlers,proto3" json:"handlers,omitempty"`
	// contains filtered or unexported fields
}

type HostedService struct {

	// The name of the service.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Number of worker threads to use.
	// If unset it defaults to 1. If set to 0 the runtime
	// automatically determines the number of threads to use
	// based on the number of CPUs available.
	WorkerThreads *int32 `protobuf:"varint,2,opt,name=worker_threads,json=workerThreads,proto3,oneof" json:"worker_threads,omitempty"`
	// The log configuration to use for this service.
	// If unset it defaults to "trace".
	LogConfig *string `protobuf:"bytes,3,opt,name=log_config,json=logConfig,proto3,oneof" json:"log_config,omitempty"`
	// contains filtered or unexported fields
}

type Infrastructure struct {
	Resources   *Infrastructure_Resources   `protobuf:"bytes,1,opt,name=resources,proto3" json:"resources,omitempty"`
	Credentials *Infrastructure_Credentials `protobuf:"bytes,2,opt,name=credentials,proto3" json:"credentials,omitempty"`
	// contains filtered or unexported fields
}

type Infrastructure_Credentials struct {
	ClientCerts []*ClientCert `protobuf:"bytes,1,rep,name=client_certs,json=clientCerts,proto3" json:"client_certs,omitempty"`
	SqlRoles    []*SQLRole    `protobuf:"bytes,2,rep,name=sql_roles,json=sqlRoles,proto3" json:"sql_roles,omitempty"`
	RedisRoles  []*RedisRole  `protobuf:"bytes,3,rep,name=redis_roles,json=redisRoles,proto3" json:"redis_roles,omitempty"`
	// contains filtered or unexported fields
}

type Infrastructure_Resources struct {
	Gateways       []*Gateway       `protobuf:"bytes,1,rep,name=gateways,proto3" json:"gateways,omitempty"`
	SqlClusters    []*SQLCluster    `protobuf:"bytes,2,rep,name=sql_clusters,json=sqlClusters,proto3" json:"sql_clusters,omitempty"`
	PubsubClusters []*PubSubCluster `protobuf:"bytes,3,rep,name=pubsub_clusters,json=pubsubClusters,proto3" json:"pubsub_clusters,omitempty"`
	RedisClusters  []*RedisCluster  `protobuf:"bytes,4,rep,name=redis_clusters,json=redisClusters,proto3" json:"redis_clusters,omitempty"`
	AppSecrets     []*AppSecret     `protobuf:"bytes,5,rep,name=app_secrets,json=appSecrets,proto3" json:"app_secrets,omitempty"`
	BucketClusters []*BucketCluster `protobuf:"bytes,6,rep,name=bucket_clusters,json=bucketClusters,proto3" json:"bucket_clusters,omitempty"`
	// contains filtered or unexported fields
}

type LogsProvider struct {

	// The unique resource id for this provider.
	Rid string `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	// contains filtered or unexported fields
}

type MetricsProvider struct {

	// The unique resource id for this provider.
	Rid                string               `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	CollectionInterval *durationpb.Duration `protobuf:"bytes,2,opt,name=collection_interval,json=collectionInterval,proto3" json:"collection_interval,omitempty"`
	// Types that are assignable to Provider:
	//
	//	*MetricsProvider_EncoreCloud
	//	*MetricsProvider_Gcp
	//	*MetricsProvider_Aws
	//	*MetricsProvider_PromRemoteWrite
	//	*MetricsProvider_Datadog_
	Provider isMetricsProvider_Provider `protobuf_oneof:"provider"`
	// contains filtered or unexported fields
}

type MetricsProvider_AWSCloudWatch struct {

	// The namespace to use for metrics.
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// contains filtered or unexported fields
}

type MetricsProvider_Aws struct {
	Aws *MetricsProvider_AWSCloudWatch `protobuf:"bytes,12,opt,name=aws,proto3,oneof"`
}

type MetricsProvider_Datadog struct {
	Site   string      `protobuf:"bytes,1,opt,name=site,proto3" json:"site,omitempty"`
	ApiKey *SecretData `protobuf:"bytes,2,opt,name=api_key,json=apiKey,proto3" json:"api_key,omitempty"`
	// contains filtered or unexported fields
}

type MetricsProvider_Datadog_ struct {
	Datadog *MetricsProvider_Datadog `protobuf:"bytes,14,opt,name=datadog,proto3,oneof"`
}

type MetricsProvider_EncoreCloud struct {
	EncoreCloud *MetricsProvider_GCPCloudMonitoring `protobuf:"bytes,10,opt,name=encore_cloud,json=encoreCloud,proto3,oneof"`
}

type MetricsProvider_GCPCloudMonitoring struct {

	// The GCP project id to send metrics to.
	ProjectId string `protobuf:"bytes,1,opt,name=project_id,json=projectId,proto3" json:"project_id,omitempty"`
	// The enum value for the monitored resource this application is monitoring.
	// See https://cloud.google.com/monitoring/api/resources for valid values.
	MonitoredResourceType string `` /* 126-byte string literal not displayed */
	// The labels to specify for the monitored resource.
	// Each monitored resource type has a pre-defined set of labels that must be set.
	// See https://cloud.google.com/monitoring/api/resources for expected labels.
	MonitoredResourceLabels map[string]string `` /* 220-byte string literal not displayed */
	// The mapping between metric names in Encore and metric names in GCP.
	MetricNames map[string]string `` /* 182-byte string literal not displayed */
	// contains filtered or unexported fields
}

type MetricsProvider_Gcp struct {
	Gcp *MetricsProvider_GCPCloudMonitoring `protobuf:"bytes,11,opt,name=gcp,proto3,oneof"`
}

type MetricsProvider_PromRemoteWrite struct {
	PromRemoteWrite *MetricsProvider_PrometheusRemoteWrite `protobuf:"bytes,13,opt,name=prom_remote_write,json=promRemoteWrite,proto3,oneof"`
}

type MetricsProvider_PrometheusRemoteWrite struct {

	// The URL to send metrics to.
	RemoteWriteUrl *SecretData `protobuf:"bytes,1,opt,name=remote_write_url,json=remoteWriteUrl,proto3" json:"remote_write_url,omitempty"`
	// contains filtered or unexported fields
}

type Observability struct {

	// The observability providers to use.
	Tracing []*TracingProvider `protobuf:"bytes,1,rep,name=tracing,proto3" json:"tracing,omitempty"`
	Metrics []*MetricsProvider `protobuf:"bytes,2,rep,name=metrics,proto3" json:"metrics,omitempty"`
	Logs    []*LogsProvider    `protobuf:"bytes,3,rep,name=logs,proto3" json:"logs,omitempty"`
	// contains filtered or unexported fields
}

type PubSubCluster struct {

	// The unique resource id for this cluster.
	Rid           string                `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	Topics        []*PubSubTopic        `protobuf:"bytes,2,rep,name=topics,proto3" json:"topics,omitempty"`
	Subscriptions []*PubSubSubscription `protobuf:"bytes,3,rep,name=subscriptions,proto3" json:"subscriptions,omitempty"`
	// Types that are assignable to Provider:
	//
	//	*PubSubCluster_Encore
	//	*PubSubCluster_Aws
	//	*PubSubCluster_Gcp
	//	*PubSubCluster_Azure
	//	*PubSubCluster_Nsq
	Provider isPubSubCluster_Provider `protobuf_oneof:"provider"`
	// contains filtered or unexported fields
}

type PubSubCluster_AWSSqsSns struct {
	// contains filtered or unexported fields
}

type PubSubCluster_Aws struct {
	Aws *PubSubCluster_AWSSqsSns `protobuf:"bytes,6,opt,name=aws,proto3,oneof"`
}

type PubSubCluster_Azure struct {
	Azure *PubSubCluster_AzureServiceBus `protobuf:"bytes,8,opt,name=azure,proto3,oneof"`
}

type PubSubCluster_AzureServiceBus struct {
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// contains filtered or unexported fields
}

type PubSubCluster_Encore struct {
	Encore *PubSubCluster_EncoreCloud `protobuf:"bytes,5,opt,name=encore,proto3,oneof"`
}

type PubSubCluster_EncoreCloud struct {
	// contains filtered or unexported fields
}

type PubSubCluster_GCPPubSub struct {
	// contains filtered or unexported fields
}

type PubSubCluster_Gcp struct {
	Gcp *PubSubCluster_GCPPubSub `protobuf:"bytes,7,opt,name=gcp,proto3,oneof"`
}

type PubSubCluster_NSQ struct {

	// The hosts to connect to NSQ. Must be non-empty.
	Hosts []string `protobuf:"bytes,1,rep,name=hosts,proto3" json:"hosts,omitempty"`
	// contains filtered or unexported fields
}

type PubSubCluster_Nsq struct {
	Nsq *PubSubCluster_NSQ `protobuf:"bytes,9,opt,name=nsq,proto3,oneof"`
}

type PubSubSubscription struct {

	// The unique resource id for this subscription.
	Rid string `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	// The encore name of the topic this subscription is for.
	TopicEncoreName string `protobuf:"bytes,2,opt,name=topic_encore_name,json=topicEncoreName,proto3" json:"topic_encore_name,omitempty"`
	// The encore name of the subscription.
	SubscriptionEncoreName string `` /* 129-byte string literal not displayed */
	// The cloud name of the subscription.
	TopicCloudName string `protobuf:"bytes,4,opt,name=topic_cloud_name,json=topicCloudName,proto3" json:"topic_cloud_name,omitempty"`
	// The cloud name of the subscription.
	SubscriptionCloudName string `` /* 126-byte string literal not displayed */
	// If true the application will not actively subscribe but wait
	// for incoming messages to be pushed to it.
	PushOnly bool `protobuf:"varint,6,opt,name=push_only,json=pushOnly,proto3" json:"push_only,omitempty"`
	// Subscription-specific provider configuration.
	// Not all providers require this, but it must always be set
	// for the providers that are present.
	//
	// Types that are assignable to ProviderConfig:
	//
	//	*PubSubSubscription_GcpConfig
	ProviderConfig isPubSubSubscription_ProviderConfig `protobuf_oneof:"provider_config"`
	// contains filtered or unexported fields
}

type PubSubSubscription_GCPConfig struct {

	// The GCP project id where the subscription exists.
	ProjectId string `protobuf:"bytes,1,opt,name=project_id,json=projectId,proto3" json:"project_id,omitempty"`
	// The service account used to authenticate messages being delivered over push.
	// If unset, pushes are rejected.
	PushServiceAccount *string `protobuf:"bytes,2,opt,name=push_service_account,json=pushServiceAccount,proto3,oneof" json:"push_service_account,omitempty"`
	// The audience to use when validating JWTs delivered over push.
	// If set, the JWT audience claim must match. If unset, any JWT audience is allowed.
	PushJwtAudience *string `protobuf:"bytes,3,opt,name=push_jwt_audience,json=pushJwtAudience,proto3,oneof" json:"push_jwt_audience,omitempty"`
	// contains filtered or unexported fields
}

type PubSubSubscription_GcpConfig struct {
	GcpConfig *PubSubSubscription_GCPConfig `protobuf:"bytes,10,opt,name=gcp_config,json=gcpConfig,proto3,oneof"` // Null: no provider-specific configuration.
}

type PubSubTopic struct {

	// The unique resource id for this topic.
	Rid string `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	// The encore name of the topic.
	EncoreName string `protobuf:"bytes,2,opt,name=encore_name,json=encoreName,proto3" json:"encore_name,omitempty"`
	// The cloud name of the topic.
	CloudName string `protobuf:"bytes,3,opt,name=cloud_name,json=cloudName,proto3" json:"cloud_name,omitempty"`
	// The delivery guarantee.
	DeliveryGuarantee PubSubTopic_DeliveryGuarantee `` /* 166-byte string literal not displayed */
	// Optional ordering attribute. Specifies the attribute name
	// to use for message ordering.
	OrderingAttr *string `protobuf:"bytes,5,opt,name=ordering_attr,json=orderingAttr,proto3,oneof" json:"ordering_attr,omitempty"`
	// Provider-specific configuration.
	// Not all providers require this, but it must always be set
	// for the providers that are present.
	//
	// Types that are assignable to ProviderConfig:
	//
	//	*PubSubTopic_GcpConfig
	ProviderConfig isPubSubTopic_ProviderConfig `protobuf_oneof:"provider_config"`
	// contains filtered or unexported fields
}

type PubSubTopic_DeliveryGuarantee int32

type PubSubTopic_GCPConfig struct {

	// The GCP project id where the topic exists.
	ProjectId string `protobuf:"bytes,1,opt,name=project_id,json=projectId,proto3" json:"project_id,omitempty"`
	// contains filtered or unexported fields
}

type PubSubTopic_GcpConfig struct {
	GcpConfig *PubSubTopic_GCPConfig `protobuf:"bytes,10,opt,name=gcp_config,json=gcpConfig,proto3,oneof"` // Null: no provider-specific configuration.
}

type RateLimiter struct {

	// Types that are assignable to Kind:
	//
	//	*RateLimiter_TokenBucket_
	Kind isRateLimiter_Kind `protobuf_oneof:"kind"`
	// contains filtered or unexported fields
}

type RateLimiter_TokenBucket struct {

	// The rate (in events per per second) to allow.
	Rate float64 `protobuf:"fixed64,1,opt,name=rate,proto3" json:"rate,omitempty"`
	// The burst size to allow.
	Burst uint32 `protobuf:"varint,2,opt,name=burst,proto3" json:"burst,omitempty"`
	// contains filtered or unexported fields
}

type RateLimiter_TokenBucket_ struct {
	TokenBucket *RateLimiter_TokenBucket `protobuf:"bytes,1,opt,name=token_bucket,json=tokenBucket,proto3,oneof"`
}

type RedisCluster struct {

	// The unique resource id for this cluster.
	Rid       string           `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	Servers   []*RedisServer   `protobuf:"bytes,2,rep,name=servers,proto3" json:"servers,omitempty"`
	Databases []*RedisDatabase `protobuf:"bytes,3,rep,name=databases,proto3" json:"databases,omitempty"`
	// contains filtered or unexported fields
}

type RedisConnectionPool struct {

	// Whether this connection pool is for read-only servers.
	IsReadonly bool `protobuf:"varint,1,opt,name=is_readonly,json=isReadonly,proto3" json:"is_readonly,omitempty"`
	// The role to use to authenticate.
	RoleRid string `protobuf:"bytes,2,opt,name=role_rid,json=roleRid,proto3" json:"role_rid,omitempty"`
	// The minimum and maximum number of connections to use.
	MinConnections int32 `protobuf:"varint,3,opt,name=min_connections,json=minConnections,proto3" json:"min_connections,omitempty"`
	MaxConnections int32 `protobuf:"varint,4,opt,name=max_connections,json=maxConnections,proto3" json:"max_connections,omitempty"`
	// contains filtered or unexported fields
}

type RedisDatabase struct {

	// Unique resource id for this database.
	Rid string `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	// The encore name of the database.
	EncoreName string `protobuf:"bytes,2,opt,name=encore_name,json=encoreName,proto3" json:"encore_name,omitempty"`
	// The database index to use, [0-15].
	DatabaseIdx int32 `protobuf:"varint,3,opt,name=database_idx,json=databaseIdx,proto3" json:"database_idx,omitempty"`
	// KeyPrefix specifies a prefix to add to all cache keys
	// for this database. It exists to enable multiple cache clusters
	// to use the same physical Redis database for local development
	// without having to coordinate and persist database index ids.
	KeyPrefix *string `protobuf:"bytes,4,opt,name=key_prefix,json=keyPrefix,proto3,oneof" json:"key_prefix,omitempty"`
	// Connection pools to use for connecting to the database.
	ConnPools []*RedisConnectionPool `protobuf:"bytes,5,rep,name=conn_pools,json=connPools,proto3" json:"conn_pools,omitempty"`
	// contains filtered or unexported fields
}

type RedisRole struct {

	// The unique resource id for this role.
	Rid string `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	// The client cert to use to authenticate, if any.
	ClientCertRid *string `protobuf:"bytes,2,opt,name=client_cert_rid,json=clientCertRid,proto3,oneof" json:"client_cert_rid,omitempty"`
	// How to authenticate with Redis.
	// If unset, no authentication is used.
	//
	// Types that are assignable to Auth:
	//
	//	*RedisRole_Acl
	//	*RedisRole_AuthString
	Auth isRedisRole_Auth `protobuf_oneof:"auth"`
	// contains filtered or unexported fields
}

type RedisRole_Acl struct {
	Acl *RedisRole_AuthACL `protobuf:"bytes,10,opt,name=acl,proto3,oneof"` // Redis ACL
}

type RedisRole_AuthACL struct {
	Username string      `protobuf:"bytes,1,opt,name=username,proto3" json:"username,omitempty"`
	Password *SecretData `protobuf:"bytes,2,opt,name=password,proto3" json:"password,omitempty"`
	// contains filtered or unexported fields
}

type RedisRole_AuthString struct {
	AuthString *SecretData `protobuf:"bytes,11,opt,name=auth_string,json=authString,proto3,oneof"` // Redis AUTH string
}

type RedisServer struct {

	// The unique resource id for this server.
	Rid string `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	// Host is the host to connect to.
	// Valid formats are "hostname", "hostname:port", and "/path/to/unix.socket".
	Host string     `protobuf:"bytes,2,opt,name=host,proto3" json:"host,omitempty"`
	Kind ServerKind `protobuf:"varint,3,opt,name=kind,proto3,enum=encore.runtime.v1.ServerKind" json:"kind,omitempty"`
	// TLS configuration to use when connecting.
	// If nil, TLS is not used.
	TlsConfig *TLSConfig `protobuf:"bytes,4,opt,name=tls_config,json=tlsConfig,proto3,oneof" json:"tls_config,omitempty"`
	// contains filtered or unexported fields
}

type RuntimeConfig struct {
	Environment    *Environment    `protobuf:"bytes,1,opt,name=environment,proto3" json:"environment,omitempty"`
	Infra          *Infrastructure `protobuf:"bytes,2,opt,name=infra,proto3" json:"infra,omitempty"`
	Deployment     *Deployment     `protobuf:"bytes,3,opt,name=deployment,proto3" json:"deployment,omitempty"`
	EncorePlatform *EncorePlatform `protobuf:"bytes,5,opt,name=encore_platform,json=encorePlatform,proto3,oneof" json:"encore_platform,omitempty"`
	// contains filtered or unexported fields
}

type SQLCluster struct {

	// The unique resource id for this cluster.
	Rid       string         `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	Servers   []*SQLServer   `protobuf:"bytes,2,rep,name=servers,proto3" json:"servers,omitempty"`
	Databases []*SQLDatabase `protobuf:"bytes,3,rep,name=databases,proto3" json:"databases,omitempty"`
	// contains filtered or unexported fields
}

type SQLConnectionPool struct {

	// Whether this connection pool is for read-only servers.
	IsReadonly bool `protobuf:"varint,1,opt,name=is_readonly,json=isReadonly,proto3" json:"is_readonly,omitempty"`
	// The role to use to authenticate.
	RoleRid string `protobuf:"bytes,2,opt,name=role_rid,json=roleRid,proto3" json:"role_rid,omitempty"`
	// The minimum and maximum number of connections to use.
	MinConnections int32 `protobuf:"varint,3,opt,name=min_connections,json=minConnections,proto3" json:"min_connections,omitempty"`
	MaxConnections int32 `protobuf:"varint,4,opt,name=max_connections,json=maxConnections,proto3" json:"max_connections,omitempty"`
	// contains filtered or unexported fields
}

type SQLDatabase struct {

	// The unique resource id for this database.
	Rid        string `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	EncoreName string `protobuf:"bytes,2,opt,name=encore_name,json=encoreName,proto3" json:"encore_name,omitempty"`
	// The physical name of the database in the cluster.
	CloudName string `protobuf:"bytes,3,opt,name=cloud_name,json=cloudName,proto3" json:"cloud_name,omitempty"`
	// Connection pools to use for connecting to the database.
	ConnPools []*SQLConnectionPool `protobuf:"bytes,4,rep,name=conn_pools,json=connPools,proto3" json:"conn_pools,omitempty"`
	// contains filtered or unexported fields
}

type SQLRole struct {

	// The unique resource id for this role.
	Rid      string      `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	Username string      `protobuf:"bytes,2,opt,name=username,proto3" json:"username,omitempty"`
	Password *SecretData `protobuf:"bytes,3,opt,name=password,proto3" json:"password,omitempty"`
	// The client cert to use to authenticate, if any.
	ClientCertRid *string `protobuf:"bytes,4,opt,name=client_cert_rid,json=clientCertRid,proto3,oneof" json:"client_cert_rid,omitempty"`
	// contains filtered or unexported fields
}

type SQLServer struct {

	// The unique resource id for this server.
	Rid string `protobuf:"bytes,1,opt,name=rid,proto3" json:"rid,omitempty"`
	// Host is the host to connect to.
	// Valid formats are "hostname", "hostname:port", and "/path/to/unix.socket".
	Host string     `protobuf:"bytes,2,opt,name=host,proto3" json:"host,omitempty"`
	Kind ServerKind `protobuf:"varint,3,opt,name=kind,proto3,enum=encore.runtime.v1.ServerKind" json:"kind,omitempty"`
	// TLS configuration to use when connecting.
	TlsConfig *TLSConfig `protobuf:"bytes,4,opt,name=tls_config,json=tlsConfig,proto3,oneof" json:"tls_config,omitempty"`
	// contains filtered or unexported fields
}

type SecretData struct {

	// How to resolve the initial secret value.
	// The output of this step is always a byte slice.
	//
	// Types that are assignable to Source:
	//
	//	*SecretData_Embedded
	//	*SecretData_Env
	Source isSecretData_Source `protobuf_oneof:"source"`
	// How the value is encoded.
	Encoding SecretData_Encoding `protobuf:"varint,20,opt,name=encoding,proto3,enum=encore.runtime.v1.SecretData_Encoding" json:"encoding,omitempty"`
	// sub_path is an optional path to a sub-value within the secret data.
	//
	// Types that are assignable to SubPath:
	//
	//	*SecretData_JsonKey
	SubPath isSecretData_SubPath `protobuf_oneof:"sub_path"`
	// contains filtered or unexported fields
}

type SecretData_Embedded struct {
	// The secret data is embedded directly in the configuration.
	// This is insecure unless `encrypted` is true, and should only
	// be used for local development.
	Embedded []byte `protobuf:"bytes,1,opt,name=embedded,proto3,oneof"`
}

type SecretData_Encoding int32

type SecretData_Env struct {
	// Look up the secret data in an env variable with the given name.
	// Assumes the
	Env string `protobuf:"bytes,2,opt,name=env,proto3,oneof"`
}

type SecretData_JsonKey struct {
	// json_key indicates the secret data is a JSON map,
	// and the resolved secret value is a key in that map.
	//
	// The value is encoded differently based on its type.
	// Supported types are utf-8 strings and raw bytes:
	// - For strings, the value is the string itself, e.g. "foo".
	// - For raw bytes, the value is a JSON object with a single key "bytes" and the value is the base64-encoded bytes.
	//
	// For example: '{"foo": "string-value", "bar": {"bytes": "aGVsbG8="}}'.
	JsonKey string `protobuf:"bytes,10,opt,name=json_key,json=jsonKey,proto3,oneof"`
}

type ServerKind int32