config

type AuthMiddleware struct {
	CredentialsByUserAgent map[string]string `yaml:"credentials_by_user_agent"`
	AllowAppAuth           bool              `` /* 236-byte string literal not displayed */
}

type AutoProvisionClaims struct {
	Username    string `` /* 143-byte string literal not displayed */
	Email       string `` /* 134-byte string literal not displayed */
	DisplayName string `` /* 154-byte string literal not displayed */
	Groups      string `` /* 137-byte string literal not displayed */
}

type CSP struct {
	Directives map[string][]string `yaml:"directives"`
}

type Cache struct {
	Store              string        `` /* 239-byte string literal not displayed */
	Nodes              []string      `` /* 379-byte string literal not displayed */
	Database           string        `yaml:"database" env:"OC_CACHE_DATABASE" desc:"The database name the configured store should use." introductionVersion:"1.0.0"`
	Table              string        `` /* 126-byte string literal not displayed */
	TTL                time.Duration `` /* 269-byte string literal not displayed */
	DisablePersistence bool          `` /* 253-byte string literal not displayed */
	AuthUsername       string        `` /* 221-byte string literal not displayed */
	AuthPassword       string        `` /* 221-byte string literal not displayed */
}

type ClaimsSelectorConf struct {
	DefaultPolicy         string `yaml:"default_policy"`
	UnauthenticatedPolicy string `yaml:"unauthenticated_policy"`
	SelectorCookieName    string `yaml:"selector_cookie_name"`
}

type Config struct {
	Commons *shared.Commons `yaml:"-" mask:"struct"` // don't use this directly as configuration for a service

	Service Service `yaml:"-"`

	Tracing *Tracing `yaml:"tracing"`
	Log     *Log     `yaml:"log"`
	Debug   Debug    `yaml:"debug" mask:"struct"`

	HTTP HTTP `yaml:"http"`

	Reva          *shared.Reva          `yaml:"reva"`
	GRPCClientTLS *shared.GRPCClientTLS `yaml:"grpc_client_tls"`
	GrpcClient    client.Client         `yaml:"-"`

	RoleQuotas            map[string]uint64   `yaml:"role_quotas"`
	Policies              []Policy            `yaml:"policies"`
	AdditionalPolicies    []Policy            `yaml:"additional_policies"`
	OIDC                  OIDC                `yaml:"oidc"`
	ServiceAccount        ServiceAccount      `yaml:"service_account"`
	RoleAssignment        RoleAssignment      `yaml:"role_assignment"`
	PolicySelector        *PolicySelector     `yaml:"policy_selector"`
	PreSignedURL          PreSignedURL        `yaml:"pre_signed_url"`
	AccountBackend        string              `` /* 175-byte string literal not displayed */
	UserOIDCClaim         string              `` /* 471-byte string literal not displayed */
	UserCS3Claim          string              `` /* 226-byte string literal not displayed */
	MachineAuthAPIKey     string              `` /* 242-byte string literal not displayed */
	AutoprovisionAccounts bool                `` /* 307-byte string literal not displayed */
	AutoProvisionClaims   AutoProvisionClaims `yaml:"auto_provision_claims"`
	EnableBasicAuth       bool                `` /* 160-byte string literal not displayed */
	InsecureBackends      bool                `` /* 158-byte string literal not displayed */
	BackendHTTPSCACert    string              `` /* 209-byte string literal not displayed */
	AuthMiddleware        AuthMiddleware      `yaml:"auth_middleware"`
	PoliciesMiddleware    PoliciesMiddleware  `yaml:"policies_middleware"`
	CSPConfigFileLocation string              `` /* 147-byte string literal not displayed */
	Events                Events              `yaml:"events"`

	Context context.Context `json:"-" yaml:"-"`
}

type Debug struct {
	Addr   string `` /* 170-byte string literal not displayed */
	Token  string `mask:"password" yaml:"token" env:"PROXY_DEBUG_TOKEN" desc:"Token to secure the metrics endpoint." introductionVersion:"1.0.0"`
	Pprof  bool   `yaml:"pprof" env:"PROXY_DEBUG_PPROF" desc:"Enables pprof, which can be used for profiling." introductionVersion:"1.0.0"`
	Zpages bool   `` /* 152-byte string literal not displayed */
}

type Events struct {
	Endpoint             string `` /* 293-byte string literal not displayed */
	Cluster              string `` /* 242-byte string literal not displayed */
	TLSInsecure          bool   `` /* 145-byte string literal not displayed */
	TLSRootCACertificate string `` /* 274-byte string literal not displayed */
	EnableTLS            bool   `` /* 255-byte string literal not displayed */
	AuthUsername         string `` /* 260-byte string literal not displayed */
	AuthPassword         string `` /* 260-byte string literal not displayed */
}

type HTTP struct {
	Addr      string `yaml:"addr" env:"PROXY_HTTP_ADDR" desc:"The bind address of the HTTP service." introductionVersion:"1.0.0"`
	Root      string `` /* 128-byte string literal not displayed */
	Namespace string `yaml:"-"`
	TLSCert   string `` /* 248-byte string literal not displayed */
	TLSKey    string `` /* 278-byte string literal not displayed */
	TLS       bool   `` /* 227-byte string literal not displayed */
}

type JWKS struct {
	RefreshInterval   uint64 `` /* 217-byte string literal not displayed */
	RefreshTimeout    uint64 `` /* 148-byte string literal not displayed */
	RefreshRateLimit  uint64 `` /* 281-byte string literal not displayed */
	RefreshUnknownKID bool   `` /* 250-byte string literal not displayed */
}

type Log struct {
	Level  string `` /* 184-byte string literal not displayed */
	Pretty bool   `mapstructure:"pretty" env:"OC_LOG_PRETTY;PROXY_LOG_PRETTY" desc:"Activates pretty log output." introductionVersion:"1.0.0"`
	Color  bool   `mapstructure:"color" env:"OC_LOG_COLOR;PROXY_LOG_COLOR" desc:"Activates colorized log output." introductionVersion:"1.0.0"`
	File   string `` /* 152-byte string literal not displayed */
}

type OIDC struct {
	Issuer                  string `` /* 157-byte string literal not displayed */
	Insecure                bool   `` /* 214-byte string literal not displayed */
	AccessTokenVerifyMethod string `` /* 460-byte string literal not displayed */
	SkipUserInfo            bool   `` /* 250-byte string literal not displayed */
	UserinfoCache           *Cache `yaml:"user_info_cache"`
	JWKS                    JWKS   `yaml:"jwks"`
	RewriteWellKnown        bool   `` /* 273-byte string literal not displayed */
}

type OIDCRoleMapper struct {
	RoleClaim string        `` /* 148-byte string literal not displayed */
	RolesMap  []RoleMapping `` /* 216-byte string literal not displayed */
}

type PoliciesMiddleware struct {
	Query string `` /* 229-byte string literal not displayed */
}

type Policy struct {
	Name   string  `yaml:"name"`
	Routes []Route `yaml:"routes"`
}

type PolicySelector struct {
	Static *StaticSelectorConf `yaml:"static"`
	Claims *ClaimsSelectorConf `yaml:"claims"`
	Regex  *RegexSelectorConf  `yaml:"regex"`
}

type PreSignedURL struct {
	AllowedHTTPMethods []string     `yaml:"allowed_http_methods"`
	Enabled            bool         `` /* 131-byte string literal not displayed */
	SigningKeys        *SigningKeys `yaml:"signing_keys"`
}

type RegexRuleConf struct {
	Priority int    `yaml:"priority"`
	Property string `yaml:"property"`
	Match    string `yaml:"match"`
	Policy   string `yaml:"policy"`
}

type RegexSelectorConf struct {
	DefaultPolicy         string          `yaml:"default_policy"`
	MatchesPolicies       []RegexRuleConf `yaml:"matches_policies"`
	UnauthenticatedPolicy string          `yaml:"unauthenticated_policy"`
	SelectorCookieName    string          `yaml:"selector_cookie_name"`
}

type RoleAssignment struct {
	Driver         string         `` /* 432-byte string literal not displayed */
	OIDCRoleMapper OIDCRoleMapper `yaml:"oidc_role_mapper"`
}

type RoleMapping struct {
	RoleName   string `yaml:"role_name" desc:"The name of an OpenCloud role that this mapping should apply for."`
	ClaimValue string `yaml:"claim_value" desc:"The value of the 'PROXY_ROLE_ASSIGNMENT_OIDC_CLAIM' that matches the role defined in 'role_name'."`
}

type Route struct {
	Type RouteType `yaml:"type,omitempty"`
	// Method optionally limits the route to this HTTP method
	Method   string `yaml:"method,omitempty"`
	Endpoint string `yaml:"endpoint,omitempty"`
	// Backend is a static URL to forward the request to
	Backend string `yaml:"backend,omitempty"`
	// Service name to look up in the registry
	Service     string `yaml:"service,omitempty"`
	ApacheVHost bool   `yaml:"apache_vhost,omitempty"`
	Unprotected bool   `yaml:"unprotected,omitempty"`
}

type RouteType string

type Service struct {
	Name string `yaml:"-"`
}

type ServiceAccount struct {
	ServiceAccountID     string `` /* 228-byte string literal not displayed */
	ServiceAccountSecret string `` /* 153-byte string literal not displayed */
}

type SigningKeys struct {
	Store              string        `` /* 274-byte string literal not displayed */
	Nodes              []string      `` /* 331-byte string literal not displayed */
	TTL                time.Duration `` /* 210-byte string literal not displayed */
	DisablePersistence bool          `` /* 264-byte string literal not displayed */
	AuthUsername       string        `` /* 233-byte string literal not displayed */
	AuthPassword       string        `` /* 233-byte string literal not displayed */
}

type StaticSelectorConf struct {
	Policy string `yaml:"policy"`
}

type Tracing struct {
	Enabled   bool   `yaml:"enabled" env:"OC_TRACING_ENABLED;PROXY_TRACING_ENABLED" desc:"Activates tracing." introductionVersion:"1.0.0"`
	Type      string `` /* 208-byte string literal not displayed */
	Endpoint  string `` /* 134-byte string literal not displayed */
	Collector string `` /* 254-byte string literal not displayed */
}