api

package

Go to main page

Versions in this module

v0

v0.2.0

Nov 2, 2026

Changes in this version

+ const DefaultMaxMCPBodyInspectBytes

+ const FactGrantedIngressAll

+ const FactGrantedIngressAllTypes

+ const FactGrantedIngressExact

+ const FactGrantedIngressPrefix

+ const FactGrantedIngressSet

+ const FactGrantedIngressSuffix

+ const FactIngress

+ const HeaderMeshIngress

+ const HeaderMeshIngressCallerBiscuit

+ const IngressAuthModeStringEdge

+ const IngressAuthModeStringPassthrough

+ const IngressProtocolID

+ const MaxIngressAllowEntries

+ const MaxIngressBodyBytes

+ var IngressAuthMode_name = map[int32]string

+ var IngressAuthMode_value = map[string]int32

+ var IngressPolicies []biscuit.Policy

+ func BuildIngressDatalogFacts(grants []*IngressGrant) []biscuit.Fact

+ func HasDotSegment(p string) bool

+ func IngressAuthModeToString(m IngressAuthMode) (string, error)

+ func IngressFact(svcType, svcName, mode string) biscuit.Fact

+ func InspectJSONRPCMCPBody(body []byte) (mcpTool string, allowStreamInit bool)

+ func InspectMCPHTTPRequestBody(r *http.Request, maxBytes int64) (mcpTool string, allowStreamInit bool, err error)

+ func IsInboundServiceType(t ServiceType) bool

+ func MatchIngressAllow(allow []string, claims map[string][]string) bool

+ func SanitizeExternalIngressHeaders(h http.Header, stripAuthorization bool)

+ func ValidateIngressGrant(g *IngressGrant, roleName string) error

+ func ValidateIngressGrants(grants []*IngressGrant, roleName string) error

+ func ValidateIngressURL(raw string) (string, error)

+ func ValidatePeerRecordIngress(ing *ServiceIngress) error

+ func ValidateServiceIngress(svcType ServiceType, ing *ServiceIngress) error

type DatalogSources

+ IngressPolicies []string

type DirectoryProvide

+ Ingress *ServiceIngress

+ func (x *DirectoryProvide) GetIngress() *ServiceIngress

+ type IngressAuthMode int32

+ const IngressAuthMode_INGRESS_AUTH_MODE_EDGE

+ const IngressAuthMode_INGRESS_AUTH_MODE_PASSTHROUGH

+ const IngressAuthMode_INGRESS_AUTH_MODE_UNSPECIFIED

+ func EffectiveIngressAuthMode(ing *ServiceIngress) IngressAuthMode

+ func ParseIngressAuthMode(s string) (IngressAuthMode, error)

+ func (IngressAuthMode) Descriptor() protoreflect.EnumDescriptor

+ func (IngressAuthMode) EnumDescriptor() ([]byte, []int)

+ func (IngressAuthMode) Type() protoreflect.EnumType

+ func (x IngressAuthMode) Enum() *IngressAuthMode

+ func (x IngressAuthMode) Number() protoreflect.EnumNumber

+ func (x IngressAuthMode) String() string

+ type IngressConfig struct

+ Allow []string

+ AuthMode string

+ type IngressGrant struct

+ AllowedAuthModes []IngressAuthMode

+ Services []string

+ func (*IngressGrant) Descriptor() ([]byte, []int)

+ func (*IngressGrant) ProtoMessage()

+ func (x *IngressGrant) GetAllowedAuthModes() []IngressAuthMode

+ func (x *IngressGrant) GetServices() []string

+ func (x *IngressGrant) ProtoReflect() protoreflect.Message

+ func (x *IngressGrant) Reset()

+ func (x *IngressGrant) String() string

type PeerRecord

+ Ingress *ServiceIngress

+ func (x *PeerRecord) GetIngress() *ServiceIngress

type PolicyRole

+ AllowedIngress []*IngressGrant

+ func (x *PolicyRole) GetAllowedIngress() []*IngressGrant

type RouterInfo

+ IngressUrl string

+ func (x *RouterInfo) GetIngressUrl() string

type RouterLease

+ IngressUrl string

+ func (x *RouterLease) GetIngressUrl() string

type RouterLeaseRequest

+ IngressUrl string

+ func (x *RouterLeaseRequest) GetIngressUrl() string

type ServiceConfig

+ Ingress *IngressConfig

type ServiceInfo

+ Ingress *ServiceIngress

+ func (x *ServiceInfo) GetIngress() *ServiceIngress

+ type ServiceIngress struct

+ Allow []string

+ AuthMode IngressAuthMode

+ func ServiceIngressFromConfig(svcType ServiceType, cfg *IngressConfig) (*ServiceIngress, error)

+ func (*ServiceIngress) Descriptor() ([]byte, []int)

+ func (*ServiceIngress) ProtoMessage()

+ func (x *ServiceIngress) GetAllow() []string

+ func (x *ServiceIngress) GetAuthMode() IngressAuthMode

+ func (x *ServiceIngress) ProtoReflect() protoreflect.Message

+ func (x *ServiceIngress) Reset()

+ func (x *ServiceIngress) String() string

v0.1.1

Oct 18, 2026

v0.1.0

Oct 15, 2026

Changes in this version

+ const AuthProtocolID

+ const BiscuitTokenTTL

+ const CatalogTarget

+ const ClientAssertionTypeJWTBearer

+ const ClientAssertionTypeJWTSPIFFE

+ const DHTProtocolID

+ const DHTProtocolPrefix

+ const DefaultAudience

+ const DefaultDHTReplication

+ const DefaultReprovideInterval

+ const DirectoryKeyBytes

+ const DirectoryMaxAddrs

+ const DirectoryProtocolID

+ const EgressServicePrefix

+ const EnrollProtocolID

+ const EnrollURIHost

+ const EnrollURIScheme

+ const ErrStaleChallengeTimestampMessage

+ const FactActorNode

+ const FactAllowNetworkTarget

+ const FactClientPeerID

+ const FactConnectionPeerID

+ const FactEmail

+ const FactExpiration

+ const FactGrantedMethod

+ const FactGrantedMethodAny

+ const FactGrantedPathAny

+ const FactGrantedPathExact

+ const FactGrantedPathPrefix

+ const FactGrantedPublishAll

+ const FactGrantedPublishAllTypes

+ const FactGrantedPublishExact

+ const FactGrantedPublishPrefix

+ const FactGrantedPublishSet

+ const FactGrantedPublishSuffix

+ const FactGrantedServiceAll

+ const FactGrantedServiceAllTypes

+ const FactGrantedServiceExact

+ const FactGrantedServicePrefix

+ const FactGrantedServiceSet

+ const FactGrantedServiceSuffix

+ const FactGrantedTargetAll

+ const FactGrantedTargetAllFacts

+ const FactGrantedTargetAllTypes

+ const FactGrantedTargetExact

+ const FactGrantedTargetPrefix

+ const FactGrantedTargetSet

+ const FactGrantedTargetSuffix

+ const FactGroup

+ const FactHTTPGrantedServiceAll

+ const FactHTTPGrantedServiceAllTypes

+ const FactHTTPGrantedServiceExact

+ const FactHTTPGrantedServicePrefix

+ const FactHTTPGrantedServiceSuffix

+ const FactHTTPMethodOK

+ const FactHTTPPathOK

+ const FactHost

+ const FactIdpRole

+ const FactLabel

+ const FactMethod

+ const FactNode

+ const FactPath

+ const FactPort

+ const FactPublish

+ const FactRight

+ const FactRole

+ const FactService

+ const FactTARBlock

+ const FactTargetFact

+ const FactTargetRestricted

+ const FactTargetUnrestricted

+ const FactTime

+ const FactUser

+ const GoAwayProtocolID

+ const GossipControlPlaneSync

+ const GossipEvents

+ const GrantTypeAuthorizationCode

+ const GrantTypeClientCredentials

+ const GrantTypeJWTBearer

+ const GrantTypeTokenExchange

+ const HeaderChallengeSignature

+ const HeaderChallengeTimestamp

+ const HeaderMeshAuthentication

+ const HeaderMeshBiscuit

+ const HeaderMeshNoTrailingSlash

+ const HeaderMeshPrincipal

+ const HeaderMeshRequiredLabels

+ const HeaderMeshRoles

+ const HeaderMeshTargetService

+ const HeaderMeshTask

+ const HeaderMeshTaskID

+ const HeaderPeerID

+ const InferenceServicePrefix

+ const KeysResponseFreshness

+ const MCPProtocolID

+ const MCPServicePrefix

+ const MaxAttenuationBlocks

+ const MaxEntriesPerTARList

+ const MaxNodeLabels

+ const MaxRulesPerTAR

+ const MaxTARBytes

+ const MaxTARDescriptionLength

+ const MaxTARNameLength

+ const MaxTARResourceLength

+ const NodeConfigVersionV1Alpha1

+ const OIDCSessionTTL

+ const RightRelay

+ const RightServiceInvoke

+ const RoleControlPlane

+ const RoleNode

+ const RoleRouter

+ const ServiceTypeStringA2A

+ const ServiceTypeStringEgress

+ const ServiceTypeStringInference

+ const ServiceTypeStringMCP

+ const SystemAuthenticated

+ const SystemNamespace

+ const TARBlockSourcePattern

+ const TokenRefreshCheckInterval

+ const TokenTypeAccessToken

+ const TokenTypeBiscuit

+ const TokenTypeIDToken

+ const TokenTypeJWT

+ var AllowIfTruePolicy biscuit.Policy

+ var BaselineHTTPRules []biscuit.Rule

+ var BaselinePolicies []biscuit.Policy

+ var BaselineReplayCheck biscuit.Check

+ var BaselineRules []biscuit.Rule

+ var BaselineSources DatalogSources

+ var BaselineTargetCheck biscuit.Check

+ var ControlPlaneStaticTimeCheck biscuit.Check

+ var EgressMode_name = map[int32]string

+ var EgressMode_value = map[string]int32

+ var EnrollmentStatus_name = map[int32]string

+ var EnrollmentStatus_value = map[string]int32

+ var ErrInsecureControlPlaneURL = errors.New("plaintext http:// control plane URL to a non-loopback host")

+ var ExtProcProcessingMode_BodyMode_name = map[int32]string

+ var ExtProcProcessingMode_BodyMode_value = map[string]int32

+ var ExtProcProcessingMode_HeaderMode_name = map[int32]string

+ var ExtProcProcessingMode_HeaderMode_value = map[string]int32

+ var File_api_agentmesh_proto protoreflect.FileDescriptor

+ var MarkerTerm biscuit.Term = biscuit.Bool(true)

+ var MeshEvent_Type_name = map[int32]string

+ var MeshEvent_Type_value = map[string]int32

+ var PublishPolicies []biscuit.Policy

+ var ResponseInspection_name = map[int32]string

+ var ResponseInspection_value = map[string]int32

+ var RouterGoAway_Reason_name = map[int32]string

+ var RouterGoAway_Reason_value = map[string]int32

+ var ServiceType_name = map[int32]string

+ var ServiceType_value = map[string]int32

+ var SupportedNodeConfigVersions = map[string]bool

+ var TARBlockSourceRegex = regexp.MustCompile(TARBlockSourcePattern)

+ var TargetFactRules []biscuit.Rule

+ func BindingMemberPrefixes() []string

+ func BuildHTTPGrantFacts(g *HTTPGrant) []biscuit.Fact

+ func BuildPublishDatalogFacts(services []string) []biscuit.Fact

+ func BuildServiceDatalogFact(serviceStr string) biscuit.Fact

+ func BuildServiceDatalogFacts(services []string) []biscuit.Fact

+ func BuildTargetDatalogFact(targetStr string) biscuit.Fact

+ func BuildTargetDatalogFacts(targets []string) []biscuit.Fact

+ func EffectiveTARExpiration(authorityExp time.Time, blocks []*TaskAuthorizationRule) time.Time

+ func EgressChallenge(peerID string, ts int64) []byte

+ func EgressServedBy(d *EgressDestination, roles []string, labels map[string]string) bool

+ func EgressStaticSecret(d *EgressDestination) string

+ func EgressTargetURL(d *EgressDestination) string

+ func EncodeTARBlockFact(rule *TaskAuthorizationRule) (biscuit.Fact, error)

+ func EncodeTARBlockPayload(rule *TaskAuthorizationRule) (string, error)

+ func EnrollChallenge(peerID string, ts int64) []byte

+ func EnrollStatusChallenge(peerID string, ts int64) []byte

+ func EnrollURI(server, token string) string

+ func EvaluateTaskRules(blocks []*TaskAuthorizationRule, req TaskRequestContext, now time.Time) error

+ func EvaluateTaskRulesForDestination(blocks []*TaskAuthorizationRule, serviceType, serviceName string, ...) error

+ func HTTPGrantKey(service string) (factName, svcType, key string)

+ func HTTPMethodSyntaxPattern() string

+ func IsSafeRequestHTTPPath(reqPath string) bool

+ func KeysResponsePayload(resp *KeysResponse) ([]byte, error)

+ func LabelCheck(required map[string]string) (biscuit.Check, error)

+ func LabelFacts(labels map[string]string) []biscuit.Fact

+ func LabelPatternsAllow(patterns []string, labels map[string]string) error

+ func LabelsContradict(required, claimed map[string]string) bool

+ func LabelsSatisfy(required, claimed map[string]string) bool

+ func MarkerFact(name string) biscuit.Fact

+ func MatchBindingMemberValue(candidates []string, pattern string) bool

+ func MatchHTTPPath(pattern, reqPath string) bool

+ func MatchServicePattern(pattern, reqType, reqName string) bool

+ func MatchTaskRule(rule *TaskRule, req TaskRequestContext) bool

+ func NodesCatalogChallenge(peerID string, ts int64) []byte

+ func NormalizeMeshHost(host string) string

+ func OIDCClaimToFact() map[string]string

+ func ParseDatalogRules(texts []string) ([]biscuit.Rule, error)

+ func ParseEnrollURI(raw string) (server, token string, err error)

+ func ParseLabelFlags(raw []string) (map[string]string, error)

+ func ParseServiceTarget(target string) (svcType, svcName string)

+ func PeerKey(p peer.ID) []byte

+ func PoliciesChallenge(peerID string, ts int64) []byte

+ func PolicyRuleTexts(rules []PolicyRule) []string

+ func PublishFact(svcType, svcName string) biscuit.Fact

+ func RecordTTL(reprovide time.Duration) time.Duration

+ func RefreshChallenge(peerID string, ts int64) []byte

+ func RegisterChallenge(peerID string, ts int64) []byte

+ func RevocationsChallenge(peerID string, ts int64) []byte

+ func RouterLeaseChallenge(peerID string, ts int64) []byte

+ func STSTokenChallenge(peerID string, ts int64) []byte

+ func ServiceKey(t ServiceType, name string) ([]byte, error)

+ func ServiceTypeToString(t ServiceType) (string, error)

+ func SignKeysResponse(resp *KeysResponse, privateKeys []ed25519.PrivateKey, now time.Time) error

+ func SplitToolName(toolName string) (targetService, originalToolName string, err error)

+ func TargetFactNames() []string

+ func TokenExchangeChallenge(peerID string, ts int64) []byte

+ func ValidateBindingMember(member string, role string) error

+ func ValidateControlPlaneTransport(rawURL string, allowInsecure bool) error

+ func ValidateDirectoryKey(key []byte) error

+ func ValidateDirectoryParameters(replication int, reprovide time.Duration) error

+ func ValidateEgressDestination(d *EgressDestination, roleNames map[string]bool) error

+ func ValidateEgressName(name string) error

+ func ValidateEgressServicePattern(svc string) error

+ func ValidateHTTPGrant(g *HTTPGrant, allowedServices []string) error

+ func ValidateHTTPGrants(grants []*HTTPGrant, allowedServices []string) error

+ func ValidateLabelKey(key string) error

+ func ValidateLabelPattern(pattern string) error

+ func ValidateLabelValue(value string) error

+ func ValidateLabels(labels map[string]string) error

+ func ValidateRoleName(name string) error

+ func ValidateServiceFormat(svc string) error

+ func ValidateTARServicePattern(svc string) error

+ func ValidateTargetFormat(target string) error

+ func ValidateTaskAuthorizationRule(rule *TaskAuthorizationRule) error

+ func VerifyKeysResponse(resp *KeysResponse, trusted []ed25519.PublicKey, now time.Time) ([]ed25519.PublicKey, error)

+ type AWSAssumeRole struct

+ RoleArn string

+ SessionPolicy string

+ func (*AWSAssumeRole) Descriptor() ([]byte, []int)

+ func (*AWSAssumeRole) ProtoMessage()

+ func (x *AWSAssumeRole) GetRoleArn() string

+ func (x *AWSAssumeRole) GetSessionPolicy() string

+ func (x *AWSAssumeRole) ProtoReflect() protoreflect.Message

+ func (x *AWSAssumeRole) Reset()

+ func (x *AWSAssumeRole) String() string

+ type AdminStatusResponse struct

+ ActiveRouters []*RouterLease

+ BootstrapTokens []*BootstrapToken

+ EnrolledNodes []*EnrolledNode

+ EnrollmentRequests []*EnrollmentRequest

+ NodeCatalog map[string]*NodeServices

+ Policy *PolicyConfig

+ Users []*User

+ func (*AdminStatusResponse) Descriptor() ([]byte, []int)

+ func (*AdminStatusResponse) ProtoMessage()

+ func (x *AdminStatusResponse) GetActiveRouters() []*RouterLease

+ func (x *AdminStatusResponse) GetBootstrapTokens() []*BootstrapToken

+ func (x *AdminStatusResponse) GetEnrolledNodes() []*EnrolledNode

+ func (x *AdminStatusResponse) GetEnrollmentRequests() []*EnrollmentRequest

+ func (x *AdminStatusResponse) GetNodeCatalog() map[string]*NodeServices

+ func (x *AdminStatusResponse) GetPolicy() *PolicyConfig

+ func (x *AdminStatusResponse) GetUsers() []*User

+ func (x *AdminStatusResponse) ProtoReflect() protoreflect.Message

+ func (x *AdminStatusResponse) Reset()

+ func (x *AdminStatusResponse) String() string

+ type Attenuation struct

+ Checks []string

+ Policies []string

+ Rules []string

+ type AuthFrame struct

+ Biscuit []byte

+ TargetService string

+ func (*AuthFrame) Descriptor() ([]byte, []int)

+ func (*AuthFrame) ProtoMessage()

+ func (x *AuthFrame) GetBiscuit() []byte

+ func (x *AuthFrame) GetTargetService() string

+ func (x *AuthFrame) ProtoReflect() protoreflect.Message

+ func (x *AuthFrame) Reset()

+ func (x *AuthFrame) String() string

+ type AuthResponse struct

+ Biscuit []byte

+ Error string

+ Success bool

+ func (*AuthResponse) Descriptor() ([]byte, []int)

+ func (*AuthResponse) ProtoMessage()

+ func (x *AuthResponse) GetBiscuit() []byte

+ func (x *AuthResponse) GetError() string

+ func (x *AuthResponse) GetSuccess() bool

+ func (x *AuthResponse) ProtoReflect() protoreflect.Message

+ func (x *AuthResponse) Reset()

+ func (x *AuthResponse) String() string

+ type BootstrapEnrollRequest struct

+ BootstrapToken string

+ ChallengeSignature []byte

+ ChallengeUnixMs int64

+ Labels map[string]string

+ PeerId string

+ PublicKey []byte

+ RequestedRole string

+ func (*BootstrapEnrollRequest) Descriptor() ([]byte, []int)

+ func (*BootstrapEnrollRequest) ProtoMessage()

+ func (x *BootstrapEnrollRequest) GetBootstrapToken() string

+ func (x *BootstrapEnrollRequest) GetChallengeSignature() []byte

+ func (x *BootstrapEnrollRequest) GetChallengeUnixMs() int64

+ func (x *BootstrapEnrollRequest) GetLabels() map[string]string

+ func (x *BootstrapEnrollRequest) GetPeerId() string

+ func (x *BootstrapEnrollRequest) GetPublicKey() []byte

+ func (x *BootstrapEnrollRequest) GetRequestedRole() string

+ func (x *BootstrapEnrollRequest) ProtoReflect() protoreflect.Message

+ func (x *BootstrapEnrollRequest) Reset()

+ func (x *BootstrapEnrollRequest) String() string

+ type BootstrapEnrollResponse struct

+ BiscuitToken []byte

+ ControlPlanePublicKey []byte

+ ErrorMessage string

+ ExpireTime *timestamppb.Timestamp

+ PollIntervalSeconds int32

+ RouterAddresses []string

+ Status EnrollmentStatus

+ func (*BootstrapEnrollResponse) Descriptor() ([]byte, []int)

+ func (*BootstrapEnrollResponse) ProtoMessage()

+ func (x *BootstrapEnrollResponse) GetBiscuitToken() []byte

+ func (x *BootstrapEnrollResponse) GetControlPlanePublicKey() []byte

+ func (x *BootstrapEnrollResponse) GetErrorMessage() string

+ func (x *BootstrapEnrollResponse) GetExpireTime() *timestamppb.Timestamp

+ func (x *BootstrapEnrollResponse) GetPollIntervalSeconds() int32

+ func (x *BootstrapEnrollResponse) GetRouterAddresses() []string

+ func (x *BootstrapEnrollResponse) GetStatus() EnrollmentStatus

+ func (x *BootstrapEnrollResponse) ProtoReflect() protoreflect.Message

+ func (x *BootstrapEnrollResponse) Reset()

+ func (x *BootstrapEnrollResponse) String() string

+ type BootstrapToken struct

+ AutonomousRecovery bool

+ CreateTime *timestamppb.Timestamp

+ Description string

+ Ephemeral bool

+ ExpireTime *timestamppb.Timestamp

+ Id string

+ MaxUsages int32

+ OwnerId string

+ RevokeTime *timestamppb.Timestamp

+ Role string

+ UsagesCount int32

+ func (*BootstrapToken) Descriptor() ([]byte, []int)

+ func (*BootstrapToken) ProtoMessage()

+ func (x *BootstrapToken) GetAutonomousRecovery() bool

+ func (x *BootstrapToken) GetCreateTime() *timestamppb.Timestamp

+ func (x *BootstrapToken) GetDescription() string

+ func (x *BootstrapToken) GetEphemeral() bool

+ func (x *BootstrapToken) GetExpireTime() *timestamppb.Timestamp

+ func (x *BootstrapToken) GetId() string

+ func (x *BootstrapToken) GetMaxUsages() int32

+ func (x *BootstrapToken) GetOwnerId() string

+ func (x *BootstrapToken) GetRevokeTime() *timestamppb.Timestamp

+ func (x *BootstrapToken) GetRole() string

+ func (x *BootstrapToken) GetUsagesCount() int32

+ func (x *BootstrapToken) ProtoReflect() protoreflect.Message

+ func (x *BootstrapToken) Reset()

+ func (x *BootstrapToken) String() string

+ type BootstrapTokenCreateRequest struct

+ AutonomousRecovery bool

+ Description string

+ Ephemeral bool

+ MaxUsages int32

+ OwnerId string

+ Role string

+ TtlHours int32

+ func (*BootstrapTokenCreateRequest) Descriptor() ([]byte, []int)

+ func (*BootstrapTokenCreateRequest) ProtoMessage()

+ func (x *BootstrapTokenCreateRequest) GetAutonomousRecovery() bool

+ func (x *BootstrapTokenCreateRequest) GetDescription() string

+ func (x *BootstrapTokenCreateRequest) GetEphemeral() bool

+ func (x *BootstrapTokenCreateRequest) GetMaxUsages() int32

+ func (x *BootstrapTokenCreateRequest) GetOwnerId() string

+ func (x *BootstrapTokenCreateRequest) GetRole() string

+ func (x *BootstrapTokenCreateRequest) GetTtlHours() int32

+ func (x *BootstrapTokenCreateRequest) ProtoReflect() protoreflect.Message

+ func (x *BootstrapTokenCreateRequest) Reset()

+ func (x *BootstrapTokenCreateRequest) String() string

+ type BootstrapTokenCreateResponse struct

+ ExpireTime *timestamppb.Timestamp

+ Id string

+ OwnerId string

+ Role string

+ Token string

+ func (*BootstrapTokenCreateResponse) Descriptor() ([]byte, []int)

+ func (*BootstrapTokenCreateResponse) ProtoMessage()

+ func (x *BootstrapTokenCreateResponse) GetExpireTime() *timestamppb.Timestamp

+ func (x *BootstrapTokenCreateResponse) GetId() string

+ func (x *BootstrapTokenCreateResponse) GetOwnerId() string

+ func (x *BootstrapTokenCreateResponse) GetRole() string

+ func (x *BootstrapTokenCreateResponse) GetToken() string

+ func (x *BootstrapTokenCreateResponse) ProtoReflect() protoreflect.Message

+ func (x *BootstrapTokenCreateResponse) Reset()

+ func (x *BootstrapTokenCreateResponse) String() string

+ type BootstrapTokenListResponse struct

+ Tokens []*BootstrapToken

+ func (*BootstrapTokenListResponse) Descriptor() ([]byte, []int)

+ func (*BootstrapTokenListResponse) ProtoMessage()

+ func (x *BootstrapTokenListResponse) GetTokens() []*BootstrapToken

+ func (x *BootstrapTokenListResponse) ProtoReflect() protoreflect.Message

+ func (x *BootstrapTokenListResponse) Reset()

+ func (x *BootstrapTokenListResponse) String() string

+ type CommandBackend struct

+ Command []string

+ Env map[string]string

+ func (*CommandBackend) Descriptor() ([]byte, []int)

+ func (*CommandBackend) ProtoMessage()

+ func (x *CommandBackend) GetCommand() []string

+ func (x *CommandBackend) GetEnv() map[string]string

+ func (x *CommandBackend) ProtoReflect() protoreflect.Message

+ func (x *CommandBackend) Reset()

+ func (x *CommandBackend) String() string

+ type ControlPlaneInfoResponse struct

+ Audience string

+ BannedPeerIds []string

+ ClientId string

+ Directory *DirectoryParameters

+ OidcIssuer string

+ RouterAddresses []string

+ Routers []*RouterInfo

+ func (*ControlPlaneInfoResponse) Descriptor() ([]byte, []int)

+ func (*ControlPlaneInfoResponse) ProtoMessage()

+ func (x *ControlPlaneInfoResponse) GetAudience() string

+ func (x *ControlPlaneInfoResponse) GetBannedPeerIds() []string

+ func (x *ControlPlaneInfoResponse) GetClientId() string

+ func (x *ControlPlaneInfoResponse) GetDirectory() *DirectoryParameters

+ func (x *ControlPlaneInfoResponse) GetOidcIssuer() string

+ func (x *ControlPlaneInfoResponse) GetRouterAddresses() []string

+ func (x *ControlPlaneInfoResponse) GetRouters() []*RouterInfo

+ func (x *ControlPlaneInfoResponse) ProtoReflect() protoreflect.Message

+ func (x *ControlPlaneInfoResponse) Reset()

+ func (x *ControlPlaneInfoResponse) String() string

+ type CredentialBroker struct

+ Kind isCredentialBroker_Kind

+ func (*CredentialBroker) Descriptor() ([]byte, []int)

+ func (*CredentialBroker) ProtoMessage()

+ func (x *CredentialBroker) GetAwsAssumeRole() *AWSAssumeRole

+ func (x *CredentialBroker) GetKind() isCredentialBroker_Kind

+ func (x *CredentialBroker) GetOidcFederation() *OIDCFederation

+ func (x *CredentialBroker) GetPlatformIdentity() *PlatformIdentity

+ func (x *CredentialBroker) GetStaticSecret() string

+ func (x *CredentialBroker) ProtoReflect() protoreflect.Message

+ func (x *CredentialBroker) Reset()

+ func (x *CredentialBroker) String() string

+ type CredentialBroker_AwsAssumeRole struct

+ AwsAssumeRole *AWSAssumeRole

+ type CredentialBroker_OidcFederation struct

+ OidcFederation *OIDCFederation

+ type CredentialBroker_PlatformIdentity struct

+ PlatformIdentity *PlatformIdentity

+ type CredentialBroker_StaticSecret struct

+ StaticSecret string

+ type DatalogSources struct

+ AllowIfTrue string

+ HTTPRules []string

+ Policies []string

+ PublishPolicies []string

+ ReplayCheck string

+ Rules []string

+ TargetCheck string

+ TargetFactRules []string

+ TimeCheck string

+ type DirectoryFindPeer struct

+ PeerId string

+ func (*DirectoryFindPeer) Descriptor() ([]byte, []int)

+ func (*DirectoryFindPeer) ProtoMessage()

+ func (x *DirectoryFindPeer) GetPeerId() string

+ func (x *DirectoryFindPeer) ProtoReflect() protoreflect.Message

+ func (x *DirectoryFindPeer) Reset()

+ func (x *DirectoryFindPeer) String() string

+ type DirectoryFindProviders struct

+ Key []byte

+ Limit uint32

+ func (*DirectoryFindProviders) Descriptor() ([]byte, []int)

+ func (*DirectoryFindProviders) ProtoMessage()

+ func (x *DirectoryFindProviders) GetKey() []byte

+ func (x *DirectoryFindProviders) GetLimit() uint32

+ func (x *DirectoryFindProviders) ProtoReflect() protoreflect.Message

+ func (x *DirectoryFindProviders) Reset()

+ func (x *DirectoryFindProviders) String() string

+ type DirectoryParameters struct

+ RecordTtl *durationpb.Duration

+ Replication int32

+ ReprovideInterval *durationpb.Duration

+ func NewDirectoryParameters(replication int, reprovide time.Duration) *DirectoryParameters

+ func (*DirectoryParameters) Descriptor() ([]byte, []int)

+ func (*DirectoryParameters) ProtoMessage()

+ func (x *DirectoryParameters) GetRecordTtl() *durationpb.Duration

+ func (x *DirectoryParameters) GetReplication() int32

+ func (x *DirectoryParameters) GetReprovideInterval() *durationpb.Duration

+ func (x *DirectoryParameters) ProtoReflect() protoreflect.Message

+ func (x *DirectoryParameters) Reset()

+ func (x *DirectoryParameters) String() string

+ type DirectoryProvide struct

+ Addrs []string

+ Key []byte

+ Provider string

+ Service string

+ func (*DirectoryProvide) Descriptor() ([]byte, []int)

+ func (*DirectoryProvide) ProtoMessage()

+ func (x *DirectoryProvide) GetAddrs() []string

+ func (x *DirectoryProvide) GetKey() []byte

+ func (x *DirectoryProvide) GetProvider() string

+ func (x *DirectoryProvide) GetService() string

+ func (x *DirectoryProvide) ProtoReflect() protoreflect.Message

+ func (x *DirectoryProvide) Reset()

+ func (x *DirectoryProvide) String() string

+ type DirectoryRequest struct

+ Request isDirectoryRequest_Request

+ func (*DirectoryRequest) Descriptor() ([]byte, []int)

+ func (*DirectoryRequest) ProtoMessage()

+ func (x *DirectoryRequest) GetFindPeer() *DirectoryFindPeer

+ func (x *DirectoryRequest) GetFindProviders() *DirectoryFindProviders

+ func (x *DirectoryRequest) GetProvide() *DirectoryProvide

+ func (x *DirectoryRequest) GetRequest() isDirectoryRequest_Request

+ func (x *DirectoryRequest) GetWithdraw() *DirectoryWithdraw

+ func (x *DirectoryRequest) ProtoReflect() protoreflect.Message

+ func (x *DirectoryRequest) Reset()

+ func (x *DirectoryRequest) String() string

+ type DirectoryRequest_FindPeer struct

+ FindPeer *DirectoryFindPeer

+ type DirectoryRequest_FindProviders struct

+ FindProviders *DirectoryFindProviders

+ type DirectoryRequest_Provide struct

+ Provide *DirectoryProvide

+ type DirectoryRequest_Withdraw struct

+ Withdraw *DirectoryWithdraw

+ type DirectoryResponse struct

+ Error string

+ Peer *PeerRecord

+ Providers []*PeerRecord

+ func (*DirectoryResponse) Descriptor() ([]byte, []int)

+ func (*DirectoryResponse) ProtoMessage()

+ func (x *DirectoryResponse) GetError() string

+ func (x *DirectoryResponse) GetPeer() *PeerRecord

+ func (x *DirectoryResponse) GetProviders() []*PeerRecord

+ func (x *DirectoryResponse) ProtoReflect() protoreflect.Message

+ func (x *DirectoryResponse) Reset()

+ func (x *DirectoryResponse) String() string

+ type DirectorySettings struct

+ RecordTTL time.Duration

+ Replication int

+ Reprovide time.Duration

+ func DefaultDirectorySettings() DirectorySettings

+ func DirectorySettingsFrom(p *DirectoryParameters) DirectorySettings

+ type DirectoryWithdraw struct

+ Key []byte

+ Provider string

+ func (*DirectoryWithdraw) Descriptor() ([]byte, []int)

+ func (*DirectoryWithdraw) ProtoMessage()

+ func (x *DirectoryWithdraw) GetKey() []byte

+ func (x *DirectoryWithdraw) GetProvider() string

+ func (x *DirectoryWithdraw) ProtoReflect() protoreflect.Message

+ func (x *DirectoryWithdraw) Reset()

+ func (x *DirectoryWithdraw) String() string

+ type DiscoveredProvider struct

+ LocalProxyUrl string

+ PeerId string

+ SrvDescription string

+ SrvName string

+ func (*DiscoveredProvider) Descriptor() ([]byte, []int)

+ func (*DiscoveredProvider) ProtoMessage()

+ func (x *DiscoveredProvider) GetLocalProxyUrl() string

+ func (x *DiscoveredProvider) GetPeerId() string

+ func (x *DiscoveredProvider) GetSrvDescription() string

+ func (x *DiscoveredProvider) GetSrvName() string

+ func (x *DiscoveredProvider) ProtoReflect() protoreflect.Message

+ func (x *DiscoveredProvider) Reset()

+ func (x *DiscoveredProvider) String() string

+ type Egress struct

+ RequireLabels map[string]string

+ type EgressAssignmentsRequest struct

+ func (*EgressAssignmentsRequest) Descriptor() ([]byte, []int)

+ func (*EgressAssignmentsRequest) ProtoMessage()

+ func (x *EgressAssignmentsRequest) ProtoReflect() protoreflect.Message

+ func (x *EgressAssignmentsRequest) Reset()

+ func (x *EgressAssignmentsRequest) String() string

+ type EgressAssignmentsResponse struct

+ Egress []*EgressDestination

+ func (*EgressAssignmentsResponse) Descriptor() ([]byte, []int)

+ func (*EgressAssignmentsResponse) ProtoMessage()

+ func (x *EgressAssignmentsResponse) GetEgress() []*EgressDestination

+ func (x *EgressAssignmentsResponse) ProtoReflect() protoreflect.Message

+ func (x *EgressAssignmentsResponse) Reset()

+ func (x *EgressAssignmentsResponse) String() string

+ type EgressDestination struct

+ Broker *CredentialBroker

+ Credential string

+ ForwardContext bool

+ Inspection *Inspection

+ Mode EgressMode

+ Name string

+ Ports []uint32

+ PreserveHost bool

+ ServedBy []string

+ TargetUrl string

+ func (*EgressDestination) Descriptor() ([]byte, []int)

+ func (*EgressDestination) ProtoMessage()

+ func (x *EgressDestination) GetBroker() *CredentialBroker

+ func (x *EgressDestination) GetCredential() string

+ func (x *EgressDestination) GetForwardContext() bool

+ func (x *EgressDestination) GetInspection() *Inspection

+ func (x *EgressDestination) GetMode() EgressMode

+ func (x *EgressDestination) GetName() string

+ func (x *EgressDestination) GetPorts() []uint32

+ func (x *EgressDestination) GetPreserveHost() bool

+ func (x *EgressDestination) GetServedBy() []string

+ func (x *EgressDestination) GetTargetUrl() string

+ func (x *EgressDestination) ProtoReflect() protoreflect.Message

+ func (x *EgressDestination) Reset()

+ func (x *EgressDestination) String() string

+ type EgressMode int32

+ const EgressMode_EGRESS_MODE_HTTP

+ const EgressMode_EGRESS_MODE_TCP

+ func (EgressMode) Descriptor() protoreflect.EnumDescriptor

+ func (EgressMode) EnumDescriptor() ([]byte, []int)

+ func (EgressMode) Type() protoreflect.EnumType

+ func (x EgressMode) Enum() *EgressMode

+ func (x EgressMode) Number() protoreflect.EnumNumber

+ func (x EgressMode) String() string

+ type EnrollRequest struct

+ ChallengeSignature []byte

+ ChallengeUnixMs int64

+ Jwt string

+ Labels map[string]string

+ PeerId string

+ PublicKey []byte

+ RequestedRole string

+ func (*EnrollRequest) Descriptor() ([]byte, []int)

+ func (*EnrollRequest) ProtoMessage()

+ func (x *EnrollRequest) GetChallengeSignature() []byte

+ func (x *EnrollRequest) GetChallengeUnixMs() int64

+ func (x *EnrollRequest) GetJwt() string

+ func (x *EnrollRequest) GetLabels() map[string]string

+ func (x *EnrollRequest) GetPeerId() string

+ func (x *EnrollRequest) GetPublicKey() []byte

+ func (x *EnrollRequest) GetRequestedRole() string

+ func (x *EnrollRequest) ProtoReflect() protoreflect.Message

+ func (x *EnrollRequest) Reset()

+ func (x *EnrollRequest) String() string

+ type EnrollResponse struct

+ BiscuitToken []byte

+ ControlPlanePublicKey []byte

+ ErrorMessage string

+ ExpireTime *timestamppb.Timestamp

+ RouterAddresses []string

+ func (*EnrollResponse) Descriptor() ([]byte, []int)

+ func (*EnrollResponse) ProtoMessage()

+ func (x *EnrollResponse) GetBiscuitToken() []byte

+ func (x *EnrollResponse) GetControlPlanePublicKey() []byte

+ func (x *EnrollResponse) GetErrorMessage() string

+ func (x *EnrollResponse) GetExpireTime() *timestamppb.Timestamp

+ func (x *EnrollResponse) GetRouterAddresses() []string

+ func (x *EnrollResponse) ProtoReflect() protoreflect.Message

+ func (x *EnrollResponse) Reset()

+ func (x *EnrollResponse) String() string

+ type EnrolledNode struct

+ AutonomousRecovery bool

+ Banned bool

+ ClaimsJson string

+ EnrollTime *timestamppb.Timestamp

+ EnrollmentType string

+ Ephemeral bool

+ ExpireTime *timestamppb.Timestamp

+ Labels map[string]string

+ OwnerId string

+ PeerId string

+ Role string

+ func (*EnrolledNode) Descriptor() ([]byte, []int)

+ func (*EnrolledNode) ProtoMessage()

+ func (x *EnrolledNode) GetAutonomousRecovery() bool

+ func (x *EnrolledNode) GetBanned() bool

+ func (x *EnrolledNode) GetClaimsJson() string

+ func (x *EnrolledNode) GetEnrollTime() *timestamppb.Timestamp

+ func (x *EnrolledNode) GetEnrollmentType() string

+ func (x *EnrolledNode) GetEphemeral() bool

+ func (x *EnrolledNode) GetExpireTime() *timestamppb.Timestamp

+ func (x *EnrolledNode) GetLabels() map[string]string

+ func (x *EnrolledNode) GetOwnerId() string

+ func (x *EnrolledNode) GetPeerId() string

+ func (x *EnrolledNode) GetRole() string

+ func (x *EnrolledNode) ProtoReflect() protoreflect.Message

+ func (x *EnrolledNode) Reset()

+ func (x *EnrolledNode) String() string

+ type EnrollmentRequest struct

+ CreateTime *timestamppb.Timestamp

+ Id string

+ Labels map[string]string

+ PeerId string

+ ResolveTime *timestamppb.Timestamp

+ ResolvedBy string

+ Status EnrollmentStatus

+ TokenId string

+ func (*EnrollmentRequest) Descriptor() ([]byte, []int)

+ func (*EnrollmentRequest) ProtoMessage()

+ func (x *EnrollmentRequest) GetCreateTime() *timestamppb.Timestamp

+ func (x *EnrollmentRequest) GetId() string

+ func (x *EnrollmentRequest) GetLabels() map[string]string

+ func (x *EnrollmentRequest) GetPeerId() string

+ func (x *EnrollmentRequest) GetResolveTime() *timestamppb.Timestamp

+ func (x *EnrollmentRequest) GetResolvedBy() string

+ func (x *EnrollmentRequest) GetStatus() EnrollmentStatus

+ func (x *EnrollmentRequest) GetTokenId() string

+ func (x *EnrollmentRequest) ProtoReflect() protoreflect.Message

+ func (x *EnrollmentRequest) Reset()

+ func (x *EnrollmentRequest) String() string

+ type EnrollmentRequestListResponse struct

+ Requests []*EnrollmentRequest

+ func (*EnrollmentRequestListResponse) Descriptor() ([]byte, []int)

+ func (*EnrollmentRequestListResponse) ProtoMessage()

+ func (x *EnrollmentRequestListResponse) GetRequests() []*EnrollmentRequest

+ func (x *EnrollmentRequestListResponse) ProtoReflect() protoreflect.Message

+ func (x *EnrollmentRequestListResponse) Reset()

+ func (x *EnrollmentRequestListResponse) String() string

+ type EnrollmentStatus int32

+ const EnrollmentStatus_ENROLLMENT_STATUS_APPROVED

+ const EnrollmentStatus_ENROLLMENT_STATUS_PENDING

+ const EnrollmentStatus_ENROLLMENT_STATUS_REJECTED

+ const EnrollmentStatus_ENROLLMENT_STATUS_UNSPECIFIED

+ func (EnrollmentStatus) Descriptor() protoreflect.EnumDescriptor

+ func (EnrollmentStatus) EnumDescriptor() ([]byte, []int)

+ func (EnrollmentStatus) Type() protoreflect.EnumType

+ func (x EnrollmentStatus) Enum() *EnrollmentStatus

+ func (x EnrollmentStatus) Number() protoreflect.EnumNumber

+ func (x EnrollmentStatus) String() string

+ type ExtProc struct

+ AllowModeOverride bool

+ Ca string

+ ClientCertificate string

+ FailureModeAllow bool

+ MaxBufferedBytes uint32

+ MessageTimeout *durationpb.Duration

+ ProcessingMode *ExtProcProcessingMode

+ Target string

+ func (*ExtProc) Descriptor() ([]byte, []int)

+ func (*ExtProc) ProtoMessage()

+ func (x *ExtProc) GetAllowModeOverride() bool

+ func (x *ExtProc) GetCa() string

+ func (x *ExtProc) GetClientCertificate() string

+ func (x *ExtProc) GetFailureModeAllow() bool

+ func (x *ExtProc) GetMaxBufferedBytes() uint32

+ func (x *ExtProc) GetMessageTimeout() *durationpb.Duration

+ func (x *ExtProc) GetProcessingMode() *ExtProcProcessingMode

+ func (x *ExtProc) GetTarget() string

+ func (x *ExtProc) ProtoReflect() protoreflect.Message

+ func (x *ExtProc) Reset()

+ func (x *ExtProc) String() string

+ type ExtProcProcessingMode struct

+ RequestBodyMode ExtProcProcessingMode_BodyMode

+ RequestHeaderMode ExtProcProcessingMode_HeaderMode

+ RequestTrailerMode ExtProcProcessingMode_HeaderMode

+ ResponseBodyMode ExtProcProcessingMode_BodyMode

+ ResponseHeaderMode ExtProcProcessingMode_HeaderMode

+ ResponseTrailerMode ExtProcProcessingMode_HeaderMode

+ func (*ExtProcProcessingMode) Descriptor() ([]byte, []int)

+ func (*ExtProcProcessingMode) ProtoMessage()

+ func (x *ExtProcProcessingMode) GetRequestBodyMode() ExtProcProcessingMode_BodyMode

+ func (x *ExtProcProcessingMode) GetRequestHeaderMode() ExtProcProcessingMode_HeaderMode

+ func (x *ExtProcProcessingMode) GetRequestTrailerMode() ExtProcProcessingMode_HeaderMode

+ func (x *ExtProcProcessingMode) GetResponseBodyMode() ExtProcProcessingMode_BodyMode

+ func (x *ExtProcProcessingMode) GetResponseHeaderMode() ExtProcProcessingMode_HeaderMode

+ func (x *ExtProcProcessingMode) GetResponseTrailerMode() ExtProcProcessingMode_HeaderMode

+ func (x *ExtProcProcessingMode) ProtoReflect() protoreflect.Message

+ func (x *ExtProcProcessingMode) Reset()

+ func (x *ExtProcProcessingMode) String() string

+ type ExtProcProcessingMode_BodyMode int32

+ const ExtProcProcessingMode_BUFFERED

+ const ExtProcProcessingMode_BUFFERED_PARTIAL

+ const ExtProcProcessingMode_FULL_DUPLEX_STREAMED

+ const ExtProcProcessingMode_NONE

+ const ExtProcProcessingMode_STREAMED

+ func (ExtProcProcessingMode_BodyMode) Descriptor() protoreflect.EnumDescriptor

+ func (ExtProcProcessingMode_BodyMode) EnumDescriptor() ([]byte, []int)

+ func (ExtProcProcessingMode_BodyMode) Type() protoreflect.EnumType

+ func (x ExtProcProcessingMode_BodyMode) Enum() *ExtProcProcessingMode_BodyMode

+ func (x ExtProcProcessingMode_BodyMode) Number() protoreflect.EnumNumber

+ func (x ExtProcProcessingMode_BodyMode) String() string

+ type ExtProcProcessingMode_HeaderMode int32

+ const ExtProcProcessingMode_HEADER_MODE_DEFAULT

+ const ExtProcProcessingMode_SEND

+ const ExtProcProcessingMode_SKIP

+ func (ExtProcProcessingMode_HeaderMode) Descriptor() protoreflect.EnumDescriptor

+ func (ExtProcProcessingMode_HeaderMode) EnumDescriptor() ([]byte, []int)

+ func (ExtProcProcessingMode_HeaderMode) Type() protoreflect.EnumType

+ func (x ExtProcProcessingMode_HeaderMode) Enum() *ExtProcProcessingMode_HeaderMode

+ func (x ExtProcProcessingMode_HeaderMode) Number() protoreflect.EnumNumber

+ func (x ExtProcProcessingMode_HeaderMode) String() string

+ type HTTPGrant struct

+ Methods []string

+ Paths []string

+ Service string

+ func SplitHTTPGrants(role *PolicyRole) (plain []string, narrowed []*HTTPGrant)

+ func (*HTTPGrant) Descriptor() ([]byte, []int)

+ func (*HTTPGrant) ProtoMessage()

+ func (x *HTTPGrant) GetMethods() []string

+ func (x *HTTPGrant) GetPaths() []string

+ func (x *HTTPGrant) GetService() string

+ func (x *HTTPGrant) ProtoReflect() protoreflect.Message

+ func (x *HTTPGrant) Reset()

+ func (x *HTTPGrant) String() string

+ type IdentityEvidenceResponse struct

+ Biscuit []byte

+ BiscuitExpireTime *timestamppb.Timestamp

+ CheckTime *timestamppb.Timestamp

+ ControlPlaneUrl string

+ PeerId string

+ TrustedControlPlaneKeys [][]byte

+ func (*IdentityEvidenceResponse) Descriptor() ([]byte, []int)

+ func (*IdentityEvidenceResponse) ProtoMessage()

+ func (x *IdentityEvidenceResponse) GetBiscuit() []byte

+ func (x *IdentityEvidenceResponse) GetBiscuitExpireTime() *timestamppb.Timestamp

+ func (x *IdentityEvidenceResponse) GetCheckTime() *timestamppb.Timestamp

+ func (x *IdentityEvidenceResponse) GetControlPlaneUrl() string

+ func (x *IdentityEvidenceResponse) GetPeerId() string

+ func (x *IdentityEvidenceResponse) GetTrustedControlPlaneKeys() [][]byte

+ func (x *IdentityEvidenceResponse) ProtoReflect() protoreflect.Message

+ func (x *IdentityEvidenceResponse) Reset()

+ func (x *IdentityEvidenceResponse) String() string

+ type Inspection struct

+ Inspectors []*Inspector

+ func (*Inspection) Descriptor() ([]byte, []int)

+ func (*Inspection) ProtoMessage()

+ func (x *Inspection) GetInspectors() []*Inspector

+ func (x *Inspection) ProtoReflect() protoreflect.Message

+ func (x *Inspection) Reset()

+ func (x *Inspection) String() string

+ type Inspector struct

+ Kind isInspector_Kind

+ func (*Inspector) Descriptor() ([]byte, []int)

+ func (*Inspector) ProtoMessage()

+ func (x *Inspector) GetExtProc() *ExtProc

+ func (x *Inspector) GetKind() isInspector_Kind

+ func (x *Inspector) GetModelArmor() *ModelArmor

+ func (x *Inspector) ProtoReflect() protoreflect.Message

+ func (x *Inspector) Reset()

+ func (x *Inspector) String() string

+ type Inspector_ExtProc struct

+ ExtProc *ExtProc

+ type Inspector_ModelArmor struct

+ ModelArmor *ModelArmor

+ type KeysResponse struct

+ PublicKeys [][]byte

+ SignTime *timestamppb.Timestamp

+ Signatures [][]byte

+ func (*KeysResponse) Descriptor() ([]byte, []int)

+ func (*KeysResponse) ProtoMessage()

+ func (x *KeysResponse) GetPublicKeys() [][]byte

+ func (x *KeysResponse) GetSignTime() *timestamppb.Timestamp

+ func (x *KeysResponse) GetSignatures() [][]byte

+ func (x *KeysResponse) ProtoReflect() protoreflect.Message

+ func (x *KeysResponse) Reset()

+ func (x *KeysResponse) String() string

+ type MemberCredential struct

+ Biscuit []byte

+ ControlPlaneUrl string

+ ExpireTime *timestamppb.Timestamp

+ IssuedUnderKeys [][]byte

+ OidcSession *OIDCSession

+ RouterAddresses []string

+ TrustedKeys []*TrustedSigningKey

+ func (*MemberCredential) Descriptor() ([]byte, []int)

+ func (*MemberCredential) ProtoMessage()

+ func (x *MemberCredential) GetBiscuit() []byte

+ func (x *MemberCredential) GetControlPlaneUrl() string

+ func (x *MemberCredential) GetExpireTime() *timestamppb.Timestamp

+ func (x *MemberCredential) GetIssuedUnderKeys() [][]byte

+ func (x *MemberCredential) GetOidcSession() *OIDCSession

+ func (x *MemberCredential) GetRouterAddresses() []string

+ func (x *MemberCredential) GetTrustedKeys() []*TrustedSigningKey

+ func (x *MemberCredential) ProtoReflect() protoreflect.Message

+ func (x *MemberCredential) Reset()

+ func (x *MemberCredential) String() string

+ type MeshEvent struct

+ EventTime *timestamppb.Timestamp

+ NewPublicKey []byte

+ PeerId string

+ Signature []byte

+ Type MeshEvent_Type

+ func (*MeshEvent) Descriptor() ([]byte, []int)

+ func (*MeshEvent) ProtoMessage()

+ func (x *MeshEvent) GetEventTime() *timestamppb.Timestamp

+ func (x *MeshEvent) GetNewPublicKey() []byte

+ func (x *MeshEvent) GetPeerId() string

+ func (x *MeshEvent) GetSignature() []byte

+ func (x *MeshEvent) GetType() MeshEvent_Type

+ func (x *MeshEvent) ProtoReflect() protoreflect.Message

+ func (x *MeshEvent) Reset()

+ func (x *MeshEvent) String() string

+ type MeshEvent_Type int32

+ const MeshEvent_BANNED

+ const MeshEvent_KEY_ROTATION

+ const MeshEvent_POLICY_UPDATE

+ func (MeshEvent_Type) Descriptor() protoreflect.EnumDescriptor

+ func (MeshEvent_Type) EnumDescriptor() ([]byte, []int)

+ func (MeshEvent_Type) Type() protoreflect.EnumType

+ func (x MeshEvent_Type) Enum() *MeshEvent_Type

+ func (x MeshEvent_Type) Number() protoreflect.EnumNumber

+ func (x MeshEvent_Type) String() string

+ type ModelArmor struct

+ FailOpen bool

+ Response ResponseInspection

+ Template string

+ Timeout *durationpb.Duration

+ func (*ModelArmor) Descriptor() ([]byte, []int)

+ func (*ModelArmor) ProtoMessage()

+ func (x *ModelArmor) GetFailOpen() bool

+ func (x *ModelArmor) GetResponse() ResponseInspection

+ func (x *ModelArmor) GetTemplate() string

+ func (x *ModelArmor) GetTimeout() *durationpb.Duration

+ func (x *ModelArmor) ProtoReflect() protoreflect.Message

+ func (x *ModelArmor) Reset()

+ func (x *ModelArmor) String() string

+ type NodeCatalogReport struct

+ Services []*ServiceInfo

+ func (*NodeCatalogReport) Descriptor() ([]byte, []int)

+ func (*NodeCatalogReport) ProtoMessage()

+ func (x *NodeCatalogReport) GetServices() []*ServiceInfo

+ func (x *NodeCatalogReport) ProtoReflect() protoreflect.Message

+ func (x *NodeCatalogReport) Reset()

+ func (x *NodeCatalogReport) String() string

+ type NodeConfig struct

+ Attenuation Attenuation

+ Egress Egress

+ Labels map[string]string

+ Services []ServiceConfig

+ Version string

+ type NodeListResponse struct

+ NextPageToken string

+ Nodes []*EnrolledNode

+ func (*NodeListResponse) Descriptor() ([]byte, []int)

+ func (*NodeListResponse) ProtoMessage()

+ func (x *NodeListResponse) GetNextPageToken() string

+ func (x *NodeListResponse) GetNodes() []*EnrolledNode

+ func (x *NodeListResponse) ProtoReflect() protoreflect.Message

+ func (x *NodeListResponse) Reset()

+ func (x *NodeListResponse) String() string

+ type NodeServices struct

+ ReportTime *timestamppb.Timestamp

+ Services []*ServiceInfo

+ func (*NodeServices) Descriptor() ([]byte, []int)

+ func (*NodeServices) ProtoMessage()

+ func (x *NodeServices) GetReportTime() *timestamppb.Timestamp

+ func (x *NodeServices) GetServices() []*ServiceInfo

+ func (x *NodeServices) ProtoReflect() protoreflect.Message

+ func (x *NodeServices) Reset()

+ func (x *NodeServices) String() string

+ type OAuthAuthorizationServerMetadata struct

+ AuthorizationEndpoint string

+ CodeChallengeMethodsSupported []string

+ GrantTypesSupported []string

+ Issuer string

+ JWKSURI string

+ ResponseTypesSupported []string

+ RevocationEndpoint string

+ RevocationEndpointAuthMethodsSupported []string

+ TokenEndpoint string

+ TokenEndpointAuthMethodsSupported []string

+ type OAuthProtectedResourceMetadata struct

+ AuthorizationServers []string

+ BearerMethodsSupported []string

+ Resource string

+ ScopesSupported []string

+ type OIDCFederation struct

+ Audience string

+ Impersonate string

+ Scopes []string

+ TokenEndpoint string

+ func (*OIDCFederation) Descriptor() ([]byte, []int)

+ func (*OIDCFederation) ProtoMessage()

+ func (x *OIDCFederation) GetAudience() string

+ func (x *OIDCFederation) GetImpersonate() string

+ func (x *OIDCFederation) GetScopes() []string

+ func (x *OIDCFederation) GetTokenEndpoint() string

+ func (x *OIDCFederation) ProtoReflect() protoreflect.Message

+ func (x *OIDCFederation) Reset()

+ func (x *OIDCFederation) String() string

+ type OIDCSession struct

+ Audience string

+ ClientId string

+ Issuer string

+ RefreshToken string

+ func (*OIDCSession) Descriptor() ([]byte, []int)

+ func (*OIDCSession) ProtoMessage()

+ func (x *OIDCSession) GetAudience() string

+ func (x *OIDCSession) GetClientId() string

+ func (x *OIDCSession) GetIssuer() string

+ func (x *OIDCSession) GetRefreshToken() string

+ func (x *OIDCSession) ProtoReflect() protoreflect.Message

+ func (x *OIDCSession) Reset()

+ func (x *OIDCSession) String() string

+ type PeerEvidenceResponse struct

+ Biscuit []byte

+ CheckTime *timestamppb.Timestamp

+ ExpireTime *timestamppb.Timestamp

+ Labels map[string]string

+ PeerId string

+ RevocationIds []string

+ Roles []string

+ VerifyingKey []byte

+ func (*PeerEvidenceResponse) Descriptor() ([]byte, []int)

+ func (*PeerEvidenceResponse) ProtoMessage()

+ func (x *PeerEvidenceResponse) GetBiscuit() []byte

+ func (x *PeerEvidenceResponse) GetCheckTime() *timestamppb.Timestamp

+ func (x *PeerEvidenceResponse) GetExpireTime() *timestamppb.Timestamp

+ func (x *PeerEvidenceResponse) GetLabels() map[string]string

+ func (x *PeerEvidenceResponse) GetPeerId() string

+ func (x *PeerEvidenceResponse) GetRevocationIds() []string

+ func (x *PeerEvidenceResponse) GetRoles() []string

+ func (x *PeerEvidenceResponse) GetVerifyingKey() []byte

+ func (x *PeerEvidenceResponse) ProtoReflect() protoreflect.Message

+ func (x *PeerEvidenceResponse) Reset()

+ func (x *PeerEvidenceResponse) String() string

+ type PeerRecord struct

+ Addrs []string

+ PeerId string

+ func (*PeerRecord) Descriptor() ([]byte, []int)

+ func (*PeerRecord) ProtoMessage()

+ func (x *PeerRecord) GetAddrs() []string

+ func (x *PeerRecord) GetPeerId() string

+ func (x *PeerRecord) ProtoReflect() protoreflect.Message

+ func (x *PeerRecord) Reset()

+ func (x *PeerRecord) String() string

+ type PlatformIdentity struct

+ Scopes []string

+ func (*PlatformIdentity) Descriptor() ([]byte, []int)

+ func (*PlatformIdentity) ProtoMessage()

+ func (x *PlatformIdentity) GetScopes() []string

+ func (x *PlatformIdentity) ProtoReflect() protoreflect.Message

+ func (x *PlatformIdentity) Reset()

+ func (x *PlatformIdentity) String() string

+ type PolicyBinding struct

+ Members []string

+ Role string

+ func (*PolicyBinding) Descriptor() ([]byte, []int)

+ func (*PolicyBinding) ProtoMessage()

+ func (x *PolicyBinding) GetMembers() []string

+ func (x *PolicyBinding) GetRole() string

+ func (x *PolicyBinding) ProtoReflect() protoreflect.Message

+ func (x *PolicyBinding) Reset()

+ func (x *PolicyBinding) String() string

+ type PolicyConfig struct

+ Bindings []*PolicyBinding

+ Egress []*EgressDestination

+ Roles []*PolicyRole

+ func (*PolicyConfig) Descriptor() ([]byte, []int)

+ func (*PolicyConfig) ProtoMessage()

+ func (x *PolicyConfig) GetBindings() []*PolicyBinding

+ func (x *PolicyConfig) GetEgress() []*EgressDestination

+ func (x *PolicyConfig) GetRoles() []*PolicyRole

+ func (x *PolicyConfig) ProtoReflect() protoreflect.Message

+ func (x *PolicyConfig) Reset()

+ func (x *PolicyConfig) String() string

+ type PolicyConfigGetRequest struct

+ func (*PolicyConfigGetRequest) Descriptor() ([]byte, []int)

+ func (*PolicyConfigGetRequest) ProtoMessage()

+ func (x *PolicyConfigGetRequest) ProtoReflect() protoreflect.Message

+ func (x *PolicyConfigGetRequest) Reset()

+ func (x *PolicyConfigGetRequest) String() string

+ type PolicyConfigGetResponse struct

+ DatalogRules []string

+ func (*PolicyConfigGetResponse) Descriptor() ([]byte, []int)

+ func (*PolicyConfigGetResponse) ProtoMessage()

+ func (x *PolicyConfigGetResponse) GetDatalogRules() []string

+ func (x *PolicyConfigGetResponse) ProtoReflect() protoreflect.Message

+ func (x *PolicyConfigGetResponse) Reset()

+ func (x *PolicyConfigGetResponse) String() string

+ type PolicyConfigUpdateResponse struct

+ Error string

+ Success bool

+ func (*PolicyConfigUpdateResponse) Descriptor() ([]byte, []int)

+ func (*PolicyConfigUpdateResponse) ProtoMessage()

+ func (x *PolicyConfigUpdateResponse) GetError() string

+ func (x *PolicyConfigUpdateResponse) GetSuccess() bool

+ func (x *PolicyConfigUpdateResponse) ProtoReflect() protoreflect.Message

+ func (x *PolicyConfigUpdateResponse) Reset()

+ func (x *PolicyConfigUpdateResponse) String() string

+ type PolicyRole struct

+ AllowedLabels []string

+ AllowedPublish []string

+ AllowedServices []string

+ AllowedTargets []string

+ CustomDatalog []string

+ Http []*HTTPGrant

+ Name string

+ func WithEgressPublish(policyRoles []*PolicyRole, egress []*EgressDestination, roles []string, ...) []*PolicyRole

+ func (*PolicyRole) Descriptor() ([]byte, []int)

+ func (*PolicyRole) ProtoMessage()

+ func (x *PolicyRole) GetAllowedLabels() []string

+ func (x *PolicyRole) GetAllowedPublish() []string

+ func (x *PolicyRole) GetAllowedServices() []string

+ func (x *PolicyRole) GetAllowedTargets() []string

+ func (x *PolicyRole) GetCustomDatalog() []string

+ func (x *PolicyRole) GetHttp() []*HTTPGrant

+ func (x *PolicyRole) GetName() string

+ func (x *PolicyRole) ProtoReflect() protoreflect.Message

+ func (x *PolicyRole) Reset()

+ func (x *PolicyRole) String() string

+ type PolicyRule struct

+ Rule biscuit.Rule

+ Text string

+ func BuildEgressServingRules(egress []*EgressDestination) []PolicyRule

+ func BuildPolicyRules(roles []*PolicyRole, bindings []*PolicyBinding) (rules []PolicyRule, warnings []string)

+ type RegisterServiceRequest struct

+ Backend isRegisterServiceRequest_Backend

+ Service *ServiceInfo

+ func (*RegisterServiceRequest) Descriptor() ([]byte, []int)

+ func (*RegisterServiceRequest) ProtoMessage()

+ func (x *RegisterServiceRequest) GetBackend() isRegisterServiceRequest_Backend

+ func (x *RegisterServiceRequest) GetCommand() *CommandBackend

+ func (x *RegisterServiceRequest) GetService() *ServiceInfo

+ func (x *RegisterServiceRequest) GetTargetUrl() string

+ func (x *RegisterServiceRequest) ProtoReflect() protoreflect.Message

+ func (x *RegisterServiceRequest) Reset()

+ func (x *RegisterServiceRequest) String() string

+ type RegisterServiceRequest_Command struct

+ Command *CommandBackend

+ type RegisterServiceRequest_TargetUrl struct

+ TargetUrl string

+ type ResponseInspection int32

+ const ResponseInspection_RESPONSE_INSPECTION_BUFFERED

+ const ResponseInspection_RESPONSE_INSPECTION_REQUEST_ONLY

+ func (ResponseInspection) Descriptor() protoreflect.EnumDescriptor

+ func (ResponseInspection) EnumDescriptor() ([]byte, []int)

+ func (ResponseInspection) Type() protoreflect.EnumType

+ func (x ResponseInspection) Enum() *ResponseInspection

+ func (x ResponseInspection) Number() protoreflect.EnumNumber

+ func (x ResponseInspection) String() string

+ type RevocationsResponse struct

+ BannedPeerIds []string

+ RevocationIds []string

+ func (*RevocationsResponse) Descriptor() ([]byte, []int)

+ func (*RevocationsResponse) ProtoMessage()

+ func (x *RevocationsResponse) GetBannedPeerIds() []string

+ func (x *RevocationsResponse) GetRevocationIds() []string

+ func (x *RevocationsResponse) ProtoReflect() protoreflect.Message

+ func (x *RevocationsResponse) Reset()

+ func (x *RevocationsResponse) String() string

+ type RouterGoAway struct

+ Reason RouterGoAway_Reason

+ RetryAfter *durationpb.Duration

+ func (*RouterGoAway) Descriptor() ([]byte, []int)

+ func (*RouterGoAway) ProtoMessage()

+ func (x *RouterGoAway) GetReason() RouterGoAway_Reason

+ func (x *RouterGoAway) GetRetryAfter() *durationpb.Duration

+ func (x *RouterGoAway) ProtoReflect() protoreflect.Message

+ func (x *RouterGoAway) Reset()

+ func (x *RouterGoAway) String() string

+ type RouterGoAway_Reason int32

+ const RouterGoAway_DRAINING

+ const RouterGoAway_OVERLOADED

+ const RouterGoAway_REASON_UNSPECIFIED

+ func (RouterGoAway_Reason) Descriptor() protoreflect.EnumDescriptor

+ func (RouterGoAway_Reason) EnumDescriptor() ([]byte, []int)

+ func (RouterGoAway_Reason) Type() protoreflect.EnumType

+ func (x RouterGoAway_Reason) Enum() *RouterGoAway_Reason

+ func (x RouterGoAway_Reason) Number() protoreflect.EnumNumber

+ func (x RouterGoAway_Reason) String() string

+ type RouterInfo struct

+ Addresses []string

+ ConnectionLimit int32

+ Connections int32

+ Labels map[string]string

+ PeerId string

+ func (*RouterInfo) Descriptor() ([]byte, []int)

+ func (*RouterInfo) ProtoMessage()

+ func (x *RouterInfo) GetAddresses() []string

+ func (x *RouterInfo) GetConnectionLimit() int32

+ func (x *RouterInfo) GetConnections() int32

+ func (x *RouterInfo) GetLabels() map[string]string

+ func (x *RouterInfo) GetPeerId() string

+ func (x *RouterInfo) ProtoReflect() protoreflect.Message

+ func (x *RouterInfo) Reset()

+ func (x *RouterInfo) String() string

+ type RouterLease struct

+ Addresses []string

+ ConnectedPeers []string

+ DhtSize int32

+ ExpireTime *timestamppb.Timestamp

+ LastRenewalTime *timestamppb.Timestamp

+ PeerId string

+ func (*RouterLease) Descriptor() ([]byte, []int)

+ func (*RouterLease) ProtoMessage()

+ func (x *RouterLease) GetAddresses() []string

+ func (x *RouterLease) GetConnectedPeers() []string

+ func (x *RouterLease) GetDhtSize() int32

+ func (x *RouterLease) GetExpireTime() *timestamppb.Timestamp

+ func (x *RouterLease) GetLastRenewalTime() *timestamppb.Timestamp

+ func (x *RouterLease) GetPeerId() string

+ func (x *RouterLease) ProtoReflect() protoreflect.Message

+ func (x *RouterLease) Reset()

+ func (x *RouterLease) String() string

+ type RouterLeaseRequest struct

+ Addresses []string

+ Biscuit []byte

+ ChallengeSignature []byte

+ ChallengeUnixMs int64

+ ConnectedPeers []string

+ ConnectionLimit int32

+ Connections int32

+ DhtSize int32

+ PeerId string

+ Ttl *durationpb.Duration

+ func (*RouterLeaseRequest) Descriptor() ([]byte, []int)

+ func (*RouterLeaseRequest) ProtoMessage()

+ func (x *RouterLeaseRequest) GetAddresses() []string

+ func (x *RouterLeaseRequest) GetBiscuit() []byte

+ func (x *RouterLeaseRequest) GetChallengeSignature() []byte

+ func (x *RouterLeaseRequest) GetChallengeUnixMs() int64

+ func (x *RouterLeaseRequest) GetConnectedPeers() []string

+ func (x *RouterLeaseRequest) GetConnectionLimit() int32

+ func (x *RouterLeaseRequest) GetConnections() int32

+ func (x *RouterLeaseRequest) GetDhtSize() int32

+ func (x *RouterLeaseRequest) GetPeerId() string

+ func (x *RouterLeaseRequest) GetTtl() *durationpb.Duration

+ func (x *RouterLeaseRequest) ProtoReflect() protoreflect.Message

+ func (x *RouterLeaseRequest) Reset()

+ func (x *RouterLeaseRequest) String() string

+ type RouterLeaseResponse struct

+ Error string

+ ExpireTime *timestamppb.Timestamp

+ Success bool

+ func (*RouterLeaseResponse) Descriptor() ([]byte, []int)

+ func (*RouterLeaseResponse) ProtoMessage()

+ func (x *RouterLeaseResponse) GetError() string

+ func (x *RouterLeaseResponse) GetExpireTime() *timestamppb.Timestamp

+ func (x *RouterLeaseResponse) GetSuccess() bool

+ func (x *RouterLeaseResponse) ProtoReflect() protoreflect.Message

+ func (x *RouterLeaseResponse) Reset()

+ func (x *RouterLeaseResponse) String() string

+ type STSTokenRequest struct

+ Audience string

+ Biscuit []byte

+ ChallengeSignature []byte

+ ChallengeUnixMs int64

+ Destination string

+ func (*STSTokenRequest) Descriptor() ([]byte, []int)

+ func (*STSTokenRequest) ProtoMessage()

+ func (x *STSTokenRequest) GetAudience() string

+ func (x *STSTokenRequest) GetBiscuit() []byte

+ func (x *STSTokenRequest) GetChallengeSignature() []byte

+ func (x *STSTokenRequest) GetChallengeUnixMs() int64

+ func (x *STSTokenRequest) GetDestination() string

+ func (x *STSTokenRequest) ProtoReflect() protoreflect.Message

+ func (x *STSTokenRequest) Reset()

+ func (x *STSTokenRequest) String() string

+ type STSTokenResponse struct

+ ExpireTime *timestamppb.Timestamp

+ Jwt string

+ Roles []string

+ Subject string

+ TaskName string

+ func (*STSTokenResponse) Descriptor() ([]byte, []int)

+ func (*STSTokenResponse) ProtoMessage()

+ func (x *STSTokenResponse) GetExpireTime() *timestamppb.Timestamp

+ func (x *STSTokenResponse) GetJwt() string

+ func (x *STSTokenResponse) GetRoles() []string

+ func (x *STSTokenResponse) GetSubject() string

+ func (x *STSTokenResponse) GetTaskName() string

+ func (x *STSTokenResponse) ProtoReflect() protoreflect.Message

+ func (x *STSTokenResponse) Reset()

+ func (x *STSTokenResponse) String() string

+ type ServiceConfig struct

+ Command []string

+ Description string

+ Env map[string]string

+ Name string

+ TargetAuthPath string

+ TargetURL string

+ Type string

+ type ServiceInfo struct

+ Description string

+ Name string

+ Type ServiceType

+ func (*ServiceInfo) Descriptor() ([]byte, []int)

+ func (*ServiceInfo) ProtoMessage()

+ func (x *ServiceInfo) GetDescription() string

+ func (x *ServiceInfo) GetName() string

+ func (x *ServiceInfo) GetType() ServiceType

+ func (x *ServiceInfo) ProtoReflect() protoreflect.Message

+ func (x *ServiceInfo) Reset()

+ func (x *ServiceInfo) String() string

+ type ServiceType int32

+ const ServiceType_SERVICE_TYPE_A2A

+ const ServiceType_SERVICE_TYPE_EGRESS

+ const ServiceType_SERVICE_TYPE_INFERENCE

+ const ServiceType_SERVICE_TYPE_MCP

+ const ServiceType_SERVICE_TYPE_UNSPECIFIED

+ func ParseServiceType(s string) (ServiceType, error)

+ func ServiceOfRecord(provider peer.ID, key []byte, service string) (ServiceType, string, error)

+ func (ServiceType) Descriptor() protoreflect.EnumDescriptor

+ func (ServiceType) EnumDescriptor() ([]byte, []int)

+ func (ServiceType) Type() protoreflect.EnumType

+ func (x ServiceType) Enum() *ServiceType

+ func (x ServiceType) Number() protoreflect.EnumNumber

+ func (x ServiceType) String() string

+ type TaskAuthorizationRule struct

+ DisplayName string

+ ExpireTime *timestamppb.Timestamp

+ Name string

+ Rules []*TaskRule

+ func BuildTARFromOAuthParams(defaultName, optionsParam string, resources []string, scope string, ...) (*TaskAuthorizationRule, error)

+ func DecodeTARBlockPayload(b64 string) (*TaskAuthorizationRule, error)

+ func ParseTARBlockSource(blockSource string) (*TaskAuthorizationRule, error)

+ func (*TaskAuthorizationRule) Descriptor() ([]byte, []int)

+ func (*TaskAuthorizationRule) ProtoMessage()

+ func (x *TaskAuthorizationRule) GetDisplayName() string

+ func (x *TaskAuthorizationRule) GetExpireTime() *timestamppb.Timestamp

+ func (x *TaskAuthorizationRule) GetName() string

+ func (x *TaskAuthorizationRule) GetRules() []*TaskRule

+ func (x *TaskAuthorizationRule) ProtoReflect() protoreflect.Message

+ func (x *TaskAuthorizationRule) Reset()

+ func (x *TaskAuthorizationRule) String() string

+ type TaskOperation struct

+ AllowedMethods []string

+ AllowedPaths []string

+ AllowedPermissions []string

+ AllowedTools []string

+ func (*TaskOperation) Descriptor() ([]byte, []int)

+ func (*TaskOperation) ProtoMessage()

+ func (x *TaskOperation) GetAllowedMethods() []string

+ func (x *TaskOperation) GetAllowedPaths() []string

+ func (x *TaskOperation) GetAllowedPermissions() []string

+ func (x *TaskOperation) GetAllowedTools() []string

+ func (x *TaskOperation) ProtoReflect() protoreflect.Message

+ func (x *TaskOperation) Reset()

+ func (x *TaskOperation) String() string

+ type TaskRequestContext struct

+ AllowMCPStreamInit bool

+ HasHTTP bool

+ MCPTool string

+ Method string

+ Path string

+ ServiceName string

+ ServiceType string

+ type TaskRule struct

+ AllowedResources []string

+ AllowedServices []string

+ Description string

+ Operation *TaskOperation

+ func (*TaskRule) Descriptor() ([]byte, []int)

+ func (*TaskRule) ProtoMessage()

+ func (x *TaskRule) GetAllowedResources() []string

+ func (x *TaskRule) GetAllowedServices() []string

+ func (x *TaskRule) GetDescription() string

+ func (x *TaskRule) GetOperation() *TaskOperation

+ func (x *TaskRule) ProtoReflect() protoreflect.Message

+ func (x *TaskRule) Reset()

+ func (x *TaskRule) String() string

+ type TokenExchangeRequest struct

+ ChallengeSignature []byte

+ ChallengeUnixMs int64

+ Seal bool

+ SubjectToken string

+ TaskRule *TaskAuthorizationRule

+ func (*TokenExchangeRequest) Descriptor() ([]byte, []int)

+ func (*TokenExchangeRequest) ProtoMessage()

+ func (x *TokenExchangeRequest) GetChallengeSignature() []byte

+ func (x *TokenExchangeRequest) GetChallengeUnixMs() int64

+ func (x *TokenExchangeRequest) GetSeal() bool

+ func (x *TokenExchangeRequest) GetSubjectToken() string

+ func (x *TokenExchangeRequest) GetTaskRule() *TaskAuthorizationRule

+ func (x *TokenExchangeRequest) ProtoReflect() protoreflect.Message

+ func (x *TokenExchangeRequest) Reset()

+ func (x *TokenExchangeRequest) String() string

+ type TokenExchangeResponse struct

+ BiscuitToken []byte

+ ExpireTime *timestamppb.Timestamp

+ Roles []string

+ Subject string

+ func (*TokenExchangeResponse) Descriptor() ([]byte, []int)

+ func (*TokenExchangeResponse) ProtoMessage()

+ func (x *TokenExchangeResponse) GetBiscuitToken() []byte

+ func (x *TokenExchangeResponse) GetExpireTime() *timestamppb.Timestamp

+ func (x *TokenExchangeResponse) GetRoles() []string

+ func (x *TokenExchangeResponse) GetSubject() string

+ func (x *TokenExchangeResponse) ProtoReflect() protoreflect.Message

+ func (x *TokenExchangeResponse) Reset()

+ func (x *TokenExchangeResponse) String() string

+ type TokenRefreshRequest struct

+ ChallengeSignature []byte

+ ChallengeUnixMs int64

+ Jwt string

+ PeerId string

+ func (*TokenRefreshRequest) Descriptor() ([]byte, []int)

+ func (*TokenRefreshRequest) ProtoMessage()

+ func (x *TokenRefreshRequest) GetChallengeSignature() []byte

+ func (x *TokenRefreshRequest) GetChallengeUnixMs() int64

+ func (x *TokenRefreshRequest) GetJwt() string

+ func (x *TokenRefreshRequest) GetPeerId() string

+ func (x *TokenRefreshRequest) ProtoReflect() protoreflect.Message

+ func (x *TokenRefreshRequest) Reset()

+ func (x *TokenRefreshRequest) String() string

+ type TokenRefreshResponse struct

+ BiscuitToken []byte

+ ErrorMessage string

+ ExpireTime *timestamppb.Timestamp

+ func (*TokenRefreshResponse) Descriptor() ([]byte, []int)

+ func (*TokenRefreshResponse) ProtoMessage()

+ func (x *TokenRefreshResponse) GetBiscuitToken() []byte

+ func (x *TokenRefreshResponse) GetErrorMessage() string

+ func (x *TokenRefreshResponse) GetExpireTime() *timestamppb.Timestamp

+ func (x *TokenRefreshResponse) ProtoReflect() protoreflect.Message

+ func (x *TokenRefreshResponse) Reset()

+ func (x *TokenRefreshResponse) String() string

+ type TokenRevokeRequest struct

+ PeerId string

+ func (*TokenRevokeRequest) Descriptor() ([]byte, []int)

+ func (*TokenRevokeRequest) ProtoMessage()

+ func (x *TokenRevokeRequest) GetPeerId() string

+ func (x *TokenRevokeRequest) ProtoReflect() protoreflect.Message

+ func (x *TokenRevokeRequest) Reset()

+ func (x *TokenRevokeRequest) String() string

+ type TokenRevokeResponse struct

+ Error string

+ Success bool

+ func (*TokenRevokeResponse) Descriptor() ([]byte, []int)

+ func (*TokenRevokeResponse) ProtoMessage()

+ func (x *TokenRevokeResponse) GetError() string

+ func (x *TokenRevokeResponse) GetSuccess() bool

+ func (x *TokenRevokeResponse) ProtoReflect() protoreflect.Message

+ func (x *TokenRevokeResponse) Reset()

+ func (x *TokenRevokeResponse) String() string

+ type TrustedSigningKey struct

+ PublicKey []byte

+ ReceiveTime *timestamppb.Timestamp

+ func (*TrustedSigningKey) Descriptor() ([]byte, []int)

+ func (*TrustedSigningKey) ProtoMessage()

+ func (x *TrustedSigningKey) GetPublicKey() []byte

+ func (x *TrustedSigningKey) GetReceiveTime() *timestamppb.Timestamp

+ func (x *TrustedSigningKey) ProtoReflect() protoreflect.Message

+ func (x *TrustedSigningKey) Reset()

+ func (x *TrustedSigningKey) String() string

+ type User struct

+ CreateTime *timestamppb.Timestamp

+ Email string

+ Id string

+ Issuer string

+ Role string

+ func (*User) Descriptor() ([]byte, []int)

+ func (*User) ProtoMessage()

+ func (x *User) GetCreateTime() *timestamppb.Timestamp

+ func (x *User) GetEmail() string

+ func (x *User) GetId() string

+ func (x *User) GetIssuer() string

+ func (x *User) GetRole() string

+ func (x *User) ProtoReflect() protoreflect.Message

+ func (x *User) Reset()

+ func (x *User) String() string

+ type UserStatusResponse struct

+ ActiveRouters []*RouterLease

+ BootstrapTokens []*BootstrapToken

+ EnrolledNodes []*EnrolledNode

+ Policy *PolicyConfig

+ User *User

+ func (*UserStatusResponse) Descriptor() ([]byte, []int)

+ func (*UserStatusResponse) ProtoMessage()

+ func (x *UserStatusResponse) GetActiveRouters() []*RouterLease

+ func (x *UserStatusResponse) GetBootstrapTokens() []*BootstrapToken

+ func (x *UserStatusResponse) GetEnrolledNodes() []*EnrolledNode

+ func (x *UserStatusResponse) GetPolicy() *PolicyConfig

+ func (x *UserStatusResponse) GetUser() *User

+ func (x *UserStatusResponse) ProtoReflect() protoreflect.Message

+ func (x *UserStatusResponse) Reset()

+ func (x *UserStatusResponse) String() string

v0.1.0-rc.10

Oct 14, 2026

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL