proto

type Certificate struct {
	Cert []byte `protobuf:"bytes,1,opt,name=cert,proto3" json:"cert,omitempty"`
	Key  []byte `protobuf:"bytes,2,opt,name=key,proto3,oneof" json:"key,omitempty"`
	// info field is ignored during upsert requests
	// and is set when returning certificate info
	Info *CertificateInfo `protobuf:"bytes,3,opt,name=info,proto3,oneof" json:"info,omitempty"`
	// contains filtered or unexported fields
}

type CertificateInfo struct {
	Version                     int64                  `protobuf:"varint,1,opt,name=version,proto3" json:"version,omitempty"`
	Serial                      string                 `protobuf:"bytes,2,opt,name=serial,proto3" json:"serial,omitempty"`
	Issuer                      *Name                  `protobuf:"bytes,3,opt,name=issuer,proto3" json:"issuer,omitempty"`
	Subject                     *Name                  `protobuf:"bytes,4,opt,name=subject,proto3" json:"subject,omitempty"`
	NotBefore                   *timestamppb.Timestamp `protobuf:"bytes,5,opt,name=not_before,json=notBefore,proto3" json:"not_before,omitempty"`
	NotAfter                    *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=not_after,json=notAfter,proto3" json:"not_after,omitempty"`
	KeyUsage                    *KeyUsage              `protobuf:"bytes,7,opt,name=key_usage,json=keyUsage,proto3" json:"key_usage,omitempty"`
	DnsNames                    []string               `protobuf:"bytes,10,rep,name=dns_names,json=dnsNames,proto3" json:"dns_names,omitempty"`
	EmailAddresses              []string               `protobuf:"bytes,11,rep,name=email_addresses,json=emailAddresses,proto3" json:"email_addresses,omitempty"`
	IpAddresses                 []string               `protobuf:"bytes,12,rep,name=ip_addresses,json=ipAddresses,proto3" json:"ip_addresses,omitempty"`
	Uris                        []string               `protobuf:"bytes,13,rep,name=uris,proto3" json:"uris,omitempty"`
	PermittedDnsDomainsCritical bool                   `` /* 148-byte string literal not displayed */
	PermittedDnsDomains         []string               `protobuf:"bytes,15,rep,name=permitted_dns_domains,json=permittedDnsDomains,proto3" json:"permitted_dns_domains,omitempty"`
	ExcludedDnsDomains          []string               `protobuf:"bytes,16,rep,name=excluded_dns_domains,json=excludedDnsDomains,proto3" json:"excluded_dns_domains,omitempty"`
	PermittedIpRanges           []string               `protobuf:"bytes,17,rep,name=permitted_ip_ranges,json=permittedIpRanges,proto3" json:"permitted_ip_ranges,omitempty"`
	ExcludedIpRanges            []string               `protobuf:"bytes,18,rep,name=excluded_ip_ranges,json=excludedIpRanges,proto3" json:"excluded_ip_ranges,omitempty"`
	PermittedEmailAddresses     []string               `` /* 133-byte string literal not displayed */
	ExcludedEmailAddresses      []string               `` /* 130-byte string literal not displayed */
	PermittedUriDomains         []string               `protobuf:"bytes,21,rep,name=permitted_uri_domains,json=permittedUriDomains,proto3" json:"permitted_uri_domains,omitempty"`
	ExcludedUriDomains          []string               `protobuf:"bytes,22,rep,name=excluded_uri_domains,json=excludedUriDomains,proto3" json:"excluded_uri_domains,omitempty"`
	// error is set if there was an error parsing provided certificate
	Error *string `protobuf:"bytes,23,opt,name=error,proto3,oneof" json:"error,omitempty"`
	// contains filtered or unexported fields
}

type ClientCertFromStore struct {

	// filters based on a single name attribute (e.g. "CN=my cert" or "O=my org")
	IssuerFilter  *string `protobuf:"bytes,1,opt,name=issuer_filter,json=issuerFilter,proto3,oneof" json:"issuer_filter,omitempty"`
	SubjectFilter *string `protobuf:"bytes,2,opt,name=subject_filter,json=subjectFilter,proto3,oneof" json:"subject_filter,omitempty"`
	// contains filtered or unexported fields
}

type ConfigClient interface {
	// List returns records that match Selector
	List(ctx context.Context, in *Selector, opts ...grpc.CallOption) (*Records, error)
	// Delete deletes records that match Selector
	Delete(ctx context.Context, in *Selector, opts ...grpc.CallOption) (*DeleteRecordsResponse, error)
	// Upsert inserts (if no ID is provided) or updates records
	// you may omit the Connection data to just manipulate tags
	Upsert(ctx context.Context, in *Record, opts ...grpc.CallOption) (*Record, error)
	// GetTags returns all tags. Note that tags are case sensitive
	GetTags(ctx context.Context, in *GetTagsRequest, opts ...grpc.CallOption) (*GetTagsResponse, error)
	// Export dumps config into serialized format
	Export(ctx context.Context, in *ExportRequest, opts ...grpc.CallOption) (*ConfigData, error)
	// Import imports previously serialized records
	Import(ctx context.Context, in *ImportRequest, opts ...grpc.CallOption) (*ImportResponse, error)
	// FetchRoutes fetches all the routes from the routes portal.
	FetchRoutes(ctx context.Context, in *FetchRoutesRequest, opts ...grpc.CallOption) (*FetchRoutesResponse, error)
}

type ConfigData struct {
	Data []byte `protobuf:"bytes,1,opt,name=data,proto3" json:"data,omitempty"`
	// contains filtered or unexported fields
}

type ConfigServer interface {
	// List returns records that match Selector
	List(context.Context, *Selector) (*Records, error)
	// Delete deletes records that match Selector
	Delete(context.Context, *Selector) (*DeleteRecordsResponse, error)
	// Upsert inserts (if no ID is provided) or updates records
	// you may omit the Connection data to just manipulate tags
	Upsert(context.Context, *Record) (*Record, error)
	// GetTags returns all tags. Note that tags are case sensitive
	GetTags(context.Context, *GetTagsRequest) (*GetTagsResponse, error)
	// Export dumps config into serialized format
	Export(context.Context, *ExportRequest) (*ConfigData, error)
	// Import imports previously serialized records
	Import(context.Context, *ImportRequest) (*ImportResponse, error)
	// FetchRoutes fetches all the routes from the routes portal.
	FetchRoutes(context.Context, *FetchRoutesRequest) (*FetchRoutesResponse, error)
}

type Connection struct {

	// name is a user friendly connection name that a user may define
	Name *string `protobuf:"bytes,1,opt,name=name,proto3,oneof" json:"name,omitempty"`
	// the protocol to use for the connection
	Protocol *Protocol `protobuf:"varint,10,opt,name=protocol,proto3,enum=pomerium.cli.Protocol,oneof" json:"protocol,omitempty"`
	// remote_addr is a remote pomerium host:port
	RemoteAddr string `protobuf:"bytes,2,opt,name=remote_addr,json=remoteAddr,proto3" json:"remote_addr,omitempty"`
	// listen_address, if not provided, will assign a random port each time
	ListenAddr *string `protobuf:"bytes,3,opt,name=listen_addr,json=listenAddr,proto3,oneof" json:"listen_addr,omitempty"`
	// the URL of the pomerium server to connect to
	PomeriumUrl *string `protobuf:"bytes,4,opt,name=pomerium_url,json=pomeriumUrl,proto3,oneof" json:"pomerium_url,omitempty"`
	// Types that are valid to be assigned to TlsOptions:
	//
	//	*Connection_DisableTlsVerification
	//	*Connection_CaCert
	TlsOptions isConnection_TlsOptions `protobuf_oneof:"tls_options"`
	ClientCert *Certificate            `protobuf:"bytes,7,opt,name=client_cert,json=clientCert,proto3,oneof" json:"client_cert,omitempty"`
	// indicates to search the system trust store for a client certificate
	ClientCertFromStore *ClientCertFromStore `` /* 128-byte string literal not displayed */
	Autostart           *bool                `protobuf:"varint,11,opt,name=autostart,proto3,oneof" json:"autostart,omitempty"`
	// contains filtered or unexported fields
}

type ConnectionStatusUpdate struct {

	// record this event relates to
	Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	// peer_addr represents connecting party remote address and may be used to
	// distinguish between individual TCP connections
	PeerAddr *string                                 `protobuf:"bytes,2,opt,name=peer_addr,json=peerAddr,proto3,oneof" json:"peer_addr,omitempty"`
	Status   ConnectionStatusUpdate_ConnectionStatus `protobuf:"varint,3,opt,name=status,proto3,enum=pomerium.cli.ConnectionStatusUpdate_ConnectionStatus" json:"status,omitempty"`
	// in case the connection failed or terminated, last error may be available
	LastError *string `protobuf:"bytes,4,opt,name=last_error,json=lastError,proto3,oneof" json:"last_error,omitempty"`
	// provides an authentication URL when AUTH_REQUIRED status is set
	AuthUrl *string `protobuf:"bytes,5,opt,name=auth_url,json=authUrl,proto3,oneof" json:"auth_url,omitempty"`
	// event timestamp
	Ts *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=ts,proto3" json:"ts,omitempty"`
	// contains filtered or unexported fields
}

type ConnectionStatusUpdate_ConnectionStatus int32

type Connection_CaCert struct {
	CaCert []byte `protobuf:"bytes,6,opt,name=ca_cert,json=caCert,proto3,oneof"`
}

type Connection_DisableTlsVerification struct {
	DisableTlsVerification bool `protobuf:"varint,5,opt,name=disable_tls_verification,json=disableTlsVerification,proto3,oneof"`
}

type DeleteRecordsResponse struct {
	// contains filtered or unexported fields
}

type ExportRequest struct {
	Selector *Selector `protobuf:"bytes,1,opt,name=selector,proto3" json:"selector,omitempty"`
	// remove_tags to strip tags from output
	RemoveTags bool                 `protobuf:"varint,2,opt,name=remove_tags,json=removeTags,proto3" json:"remove_tags,omitempty"`
	Format     ExportRequest_Format `protobuf:"varint,3,opt,name=format,proto3,enum=pomerium.cli.ExportRequest_Format" json:"format,omitempty"`
	// contains filtered or unexported fields
}

type ExportRequest_Format int32

type FetchRoutesRequest struct {
	ServerUrl string `protobuf:"bytes,1,opt,name=server_url,json=serverUrl,proto3" json:"server_url,omitempty"`
	// Types that are valid to be assigned to TlsOptions:
	//
	//	*FetchRoutesRequest_DisableTlsVerification
	//	*FetchRoutesRequest_CaCert
	TlsOptions          isFetchRoutesRequest_TlsOptions `protobuf_oneof:"tls_options"`
	ClientCert          *Certificate                    `protobuf:"bytes,4,opt,name=client_cert,json=clientCert,proto3,oneof" json:"client_cert,omitempty"`
	ClientCertFromStore *ClientCertFromStore            `` /* 128-byte string literal not displayed */
	// contains filtered or unexported fields
}

type FetchRoutesRequest_CaCert struct {
	CaCert []byte `protobuf:"bytes,3,opt,name=ca_cert,json=caCert,proto3,oneof"`
}

type FetchRoutesRequest_DisableTlsVerification struct {
	DisableTlsVerification bool `protobuf:"varint,2,opt,name=disable_tls_verification,json=disableTlsVerification,proto3,oneof"`
}

type FetchRoutesResponse struct {
	Routes []*PortalRoute `protobuf:"bytes,1,rep,name=routes,proto3" json:"routes,omitempty"`
	// contains filtered or unexported fields
}

type GetTagsRequest struct {
	// contains filtered or unexported fields
}

type GetTagsResponse struct {
	Tags []string `protobuf:"bytes,1,rep,name=tags,proto3" json:"tags,omitempty"`
	// contains filtered or unexported fields
}

type ImportRequest struct {

	// if set, all connections would receive that tag instead
	OverrideTag *string `protobuf:"bytes,1,opt,name=override_tag,json=overrideTag,proto3,oneof" json:"override_tag,omitempty"`
	Data        []byte  `protobuf:"bytes,2,opt,name=data,proto3" json:"data,omitempty"`
	// contains filtered or unexported fields
}

type ImportResponse struct {
	// contains filtered or unexported fields
}

type KeyUsage struct {

	// standard key usages
	DigitalSignature  bool `protobuf:"varint,1,opt,name=digital_signature,json=digitalSignature,proto3" json:"digital_signature,omitempty"`
	ContentCommitment bool `protobuf:"varint,2,opt,name=content_commitment,json=contentCommitment,proto3" json:"content_commitment,omitempty"`
	KeyEncipherment   bool `protobuf:"varint,3,opt,name=key_encipherment,json=keyEncipherment,proto3" json:"key_encipherment,omitempty"`
	DataEncipherment  bool `protobuf:"varint,4,opt,name=data_encipherment,json=dataEncipherment,proto3" json:"data_encipherment,omitempty"`
	KeyAgreement      bool `protobuf:"varint,5,opt,name=key_agreement,json=keyAgreement,proto3" json:"key_agreement,omitempty"`
	// certificate authority
	CertSign     bool `protobuf:"varint,6,opt,name=cert_sign,json=certSign,proto3" json:"cert_sign,omitempty"`
	CrlSign      bool `protobuf:"varint,7,opt,name=crl_sign,json=crlSign,proto3" json:"crl_sign,omitempty"`
	EncipherOnly bool `protobuf:"varint,8,opt,name=encipher_only,json=encipherOnly,proto3" json:"encipher_only,omitempty"`
	DecipherOnly bool `protobuf:"varint,9,opt,name=decipher_only,json=decipherOnly,proto3" json:"decipher_only,omitempty"`
	// extensions derived from x509.ExtKeyUsage
	// server certificate
	ServerAuth bool `protobuf:"varint,10,opt,name=server_auth,json=serverAuth,proto3" json:"server_auth,omitempty"`
	// client certificate
	ClientAuth bool `protobuf:"varint,11,opt,name=client_auth,json=clientAuth,proto3" json:"client_auth,omitempty"`
	// contains filtered or unexported fields
}

type ListenerClient interface {
	// Update alters connection status.
	Update(ctx context.Context, in *ListenerUpdateRequest, opts ...grpc.CallOption) (*ListenerStatusResponse, error)
	// GetStatus returns current listener status for active tunnels
	GetStatus(ctx context.Context, in *Selector, opts ...grpc.CallOption) (*ListenerStatusResponse, error)
	// StatusUpdates opens a stream to listen to connection status updates
	// a client has to subscribe and continuously
	// listen to the broadcasted updates
	StatusUpdates(ctx context.Context, in *StatusUpdatesRequest, opts ...grpc.CallOption) (grpc.ServerStreamingClient[ConnectionStatusUpdate], error)
}

type ListenerServer interface {
	// Update alters connection status.
	Update(context.Context, *ListenerUpdateRequest) (*ListenerStatusResponse, error)
	// GetStatus returns current listener status for active tunnels
	GetStatus(context.Context, *Selector) (*ListenerStatusResponse, error)
	// StatusUpdates opens a stream to listen to connection status updates
	// a client has to subscribe and continuously
	// listen to the broadcasted updates
	StatusUpdates(*StatusUpdatesRequest, grpc.ServerStreamingServer[ConnectionStatusUpdate]) error
}

type ListenerStatus struct {
	Listening  bool    `protobuf:"varint,1,opt,name=listening,proto3" json:"listening,omitempty"`
	ListenAddr *string `protobuf:"bytes,2,opt,name=listen_addr,json=listenAddr,proto3,oneof" json:"listen_addr,omitempty"`
	LastError  *string `protobuf:"bytes,3,opt,name=last_error,json=lastError,proto3,oneof" json:"last_error,omitempty"`
	// contains filtered or unexported fields
}

type ListenerStatusResponse struct {
	Listeners map[string]*ListenerStatus `` /* 145-byte string literal not displayed */
	// contains filtered or unexported fields
}

type ListenerUpdateRequest struct {

	// omit connection ids to connect all connections
	ConnectionIds []string `protobuf:"bytes,1,rep,name=connection_ids,json=connectionIds,proto3" json:"connection_ids,omitempty"`
	Connected     bool     `protobuf:"varint,2,opt,name=connected,proto3" json:"connected,omitempty"`
	// contains filtered or unexported fields
}

type Listener_StatusUpdatesClient = grpc.ServerStreamingClient[ConnectionStatusUpdate]

type Listener_StatusUpdatesServer = grpc.ServerStreamingServer[ConnectionStatusUpdate]

type Name struct {
	Country            []string `protobuf:"bytes,1,rep,name=country,proto3" json:"country,omitempty"`
	Organization       []string `protobuf:"bytes,2,rep,name=organization,proto3" json:"organization,omitempty"`
	OrganizationalUnit []string `protobuf:"bytes,3,rep,name=organizational_unit,json=organizationalUnit,proto3" json:"organizational_unit,omitempty"`
	Locality           []string `protobuf:"bytes,4,rep,name=locality,proto3" json:"locality,omitempty"`
	Province           []string `protobuf:"bytes,5,rep,name=province,proto3" json:"province,omitempty"`
	StreetAddress      []string `protobuf:"bytes,6,rep,name=street_address,json=streetAddress,proto3" json:"street_address,omitempty"`
	PostalCode         []string `protobuf:"bytes,7,rep,name=postal_code,json=postalCode,proto3" json:"postal_code,omitempty"`
	SerialNumber       string   `protobuf:"bytes,8,opt,name=serial_number,json=serialNumber,proto3" json:"serial_number,omitempty"`
	CommonName         string   `protobuf:"bytes,9,opt,name=common_name,json=commonName,proto3" json:"common_name,omitempty"`
	// contains filtered or unexported fields
}

type PortalRoute struct {
	Id             string  `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"`
	Name           string  `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	Type           string  `protobuf:"bytes,3,opt,name=type,proto3" json:"type,omitempty"`
	From           string  `protobuf:"bytes,4,opt,name=from,proto3" json:"from,omitempty"`
	Description    string  `protobuf:"bytes,5,opt,name=description,proto3" json:"description,omitempty"`
	ConnectCommand *string `protobuf:"bytes,6,opt,name=connect_command,json=connectCommand,proto3,oneof" json:"connect_command,omitempty"`
	LogoUrl        string  `protobuf:"bytes,7,opt,name=logo_url,json=logoUrl,proto3" json:"logo_url,omitempty"`
	// contains filtered or unexported fields
}

type Protocol int32

type Record struct {

	// if omitted, a new record would be created
	Id   *string  `protobuf:"bytes,1,opt,name=id,proto3,oneof" json:"id,omitempty"`
	Tags []string `protobuf:"bytes,2,rep,name=tags,proto3" json:"tags,omitempty"`
	// connection data may be omitted if i.e. just manipulating the tags data
	Conn   *Connection `protobuf:"bytes,3,opt,name=conn,proto3,oneof" json:"conn,omitempty"`
	Source *string     `protobuf:"bytes,4,opt,name=source,proto3,oneof" json:"source,omitempty"`
	// contains filtered or unexported fields
}

type Records struct {
	Records []*Record `protobuf:"bytes,1,rep,name=records,proto3" json:"records,omitempty"`
	// contains filtered or unexported fields
}

type Selector struct {

	// all records
	All bool `protobuf:"varint,1,opt,name=all,proto3" json:"all,omitempty"`
	// only return connections matching tag(s)
	Ids []string `protobuf:"bytes,2,rep,name=ids,proto3" json:"ids,omitempty"`
	// only return specific connection(s)
	Tags []string `protobuf:"bytes,3,rep,name=tags,proto3" json:"tags,omitempty"`
	// contains filtered or unexported fields
}

type StatusUpdatesRequest struct {
	ConnectionId string `protobuf:"bytes,1,opt,name=connection_id,json=connectionId,proto3" json:"connection_id,omitempty"`
	// contains filtered or unexported fields
}

type UnimplementedConfigServer struct{}

type UnimplementedListenerServer struct{}

type UnsafeConfigServer interface {
	// contains filtered or unexported methods
}

type UnsafeListenerServer interface {
	// contains filtered or unexported methods
}