Cofide Connect API Reference (v0.47.0)

Protocol Documentation

Table of Contents

• proto/agent/v1alpha1/agent.proto

  • Agent

  • AgentStatus

  • AgentStatusCode

• proto/ap_binding/v1alpha1/ap_binding.proto
  • APBinding
  • APBindingFederation
• proto/spire/api/types/selector.proto

  • Selector

  • SelectorMatch

  • SelectorMatch.MatchBehavior

• proto/attestation_policy/v1alpha1/attestation_policy.proto
  • APKubernetes
  • APLabelSelector
  • APLabelSelector.MatchLabelsEntry
  • APMatchExpression
  • APStatic
  • APTPMNode
  • AttestationPolicy
  • TPMAttestation
• proto/trust_provider/v1alpha1/trust_provider.proto

  • K8sPsatConfig

  • K8sPsatConfig.ServiceAccount

  • TrustProvider

  • TrustProviderKind

• proto/cluster/v1alpha1/cluster.proto
  • Cluster
• proto/federation/v1alpha1/federation.proto
  • Federation
• proto/spire/api/types/bundle.proto
  • Bundle
  • BundleMask
  • JWTKey
  • X509Certificate
• proto/trust_zone/v1alpha1/trust_zone.proto

  • TrustZone

  • BundleEndpointProfile

• proto/cofidectl/datasource_plugin/v1alpha2/plugin.proto

  • AddAPBindingRequest

  • AddAPBindingResponse

  • AddAttestationPolicyRequest

  • AddAttestationPolicyResponse

  • AddClusterRequest

  • AddClusterResponse

  • AddFederationRequest

  • AddFederationResponse

  • AddTrustZoneRequest

  • AddTrustZoneResponse

  • DestroyAPBindingRequest

  • DestroyAPBindingResponse

  • DestroyAttestationPolicyRequest

  • DestroyAttestationPolicyResponse

  • DestroyClusterRequest

  • DestroyClusterResponse

  • DestroyFederationRequest

  • DestroyFederationResponse

  • DestroyTrustZoneRequest

  • DestroyTrustZoneResponse

  • GetAttestationPolicyByNameRequest

  • GetAttestationPolicyByNameResponse

  • GetAttestationPolicyRequest

  • GetAttestationPolicyResponse

  • GetClusterByNameRequest

  • GetClusterByNameResponse

  • GetClusterRequest

  • GetClusterResponse

  • GetTrustZoneByNameRequest

  • GetTrustZoneByNameResponse

  • GetTrustZoneRequest

  • GetTrustZoneResponse

  • ListAPBindingsRequest

  • ListAPBindingsRequest.Filter

  • ListAPBindingsResponse

  • ListAttestationPoliciesRequest

  • ListAttestationPoliciesResponse

  • ListClustersRequest

  • ListClustersRequest.Filter

  • ListClustersResponse

  • ListFederationsRequest

  • ListFederationsRequest.Filter

  • ListFederationsResponse

  • ListTrustZonesRequest

  • ListTrustZonesResponse

  • UpdateClusterRequest

  • UpdateClusterResponse

  • UpdateTrustZoneRequest

  • UpdateTrustZoneResponse

  • ValidateRequest

  • ValidateResponse

  • DataSourcePluginService

• proto/cofidectl/provision_plugin/v1alpha2/plugin.proto

  • DeployRequest

  • DeployResponse

  • GetHelmValuesRequest

  • GetHelmValuesResponse

  • Status

  • TearDownRequest

  • TearDownResponse

  • ValidateRequest

  • ValidateResponse

  • ProvisionPluginService

• proto/cofidectl_plugin/v1alpha1/plugin.proto

  • AddAPBindingRequest

  • AddAPBindingResponse

  • AddAttestationPolicyRequest

  • AddAttestationPolicyResponse

  • AddClusterRequest

  • AddClusterResponse

  • AddFederationRequest

  • AddFederationResponse

  • AddTrustZoneRequest

  • AddTrustZoneResponse

  • DestroyAPBindingRequest

  • DestroyAPBindingResponse

  • DestroyAttestationPolicyRequest

  • DestroyAttestationPolicyResponse

  • DestroyClusterRequest

  • DestroyClusterResponse

  • DestroyFederationRequest

  • DestroyFederationResponse

  • DestroyTrustZoneRequest

  • DestroyTrustZoneResponse

  • GetAttestationPolicyRequest

  • GetAttestationPolicyResponse

  • GetClusterRequest

  • GetClusterResponse

  • GetTrustZoneRequest

  • GetTrustZoneResponse

  • ListAPBindingsRequest

  • ListAPBindingsRequest.Filter

  • ListAPBindingsResponse

  • ListAttestationPoliciesRequest

  • ListAttestationPoliciesResponse

  • ListClustersRequest

  • ListClustersResponse

  • ListFederationsByTrustZoneRequest

  • ListFederationsByTrustZoneResponse

  • ListFederationsRequest

  • ListFederationsResponse

  • ListTrustZonesRequest

  • ListTrustZonesResponse

  • UpdateClusterRequest

  • UpdateClusterResponse

  • UpdateTrustZoneRequest

  • UpdateTrustZoneResponse

  • ValidateRequest

  • ValidateResponse

  • DataSourcePluginService

• proto/plugins/v1alpha1/plugins.proto
  • Plugins
• proto/config/v1alpha1/config.proto
  • Config
  • Config.PluginConfigEntry
• proto/federated_service/v1alpha1/federated_service.proto

  • FederatedService

  • FederatedService.WorkloadLabelsEntry

  • GatewayEntry

  • GatewaySpec

  • TLSMode

• proto/connect/agent_service/v1alpha1/agent_service.proto

  • CreateAgentJoinTokenRequest

  • CreateAgentJoinTokenResponse

  • DeregisterFederatedServiceRequest

  • DeregisterFederatedServiceResponse

  • GetFederatedServiceRequest

  • GetFederatedServiceResponse

  • ListFederatedServicesRequest

  • ListFederatedServicesResponse

  • RegisterFederatedServiceRequest

  • RegisterFederatedServiceResponse

  • UpdateAgentStatusRequest

  • UpdateAgentStatusResponse

  • UpdateFederatedServiceRequest

  • UpdateFederatedServiceResponse

  • AgentService

• proto/connect/ap_binding_service/v1alpha1/ap_binding_service.proto

  • CreateAPBindingRequest

  • CreateAPBindingResponse

  • DestroyAPBindingRequest

  • DestroyAPBindingResponse

  • GetAPBindingRequest

  • GetAPBindingResponse

  • ListAPBindingsRequest

  • ListAPBindingsRequest.Filter

  • ListAPBindingsResponse

  • UpdateAPBindingRequest

  • UpdateAPBindingResponse

  • APBindingService

• proto/connect/attestation_policy_service/v1alpha1/attestation_policy_service.proto

  • CreateAttestationPolicyRequest

  • CreateAttestationPolicyResponse

  • DestroyAttestationPolicyRequest

  • DestroyAttestationPolicyResponse

  • GetAttestationPolicyRequest

  • GetAttestationPolicyResponse

  • ListAttestationPoliciesRequest

  • ListAttestationPoliciesRequest.Filter

  • ListAttestationPoliciesRequest.TPMNodeFilter

  • ListAttestationPoliciesResponse

  • UpdateAttestationPolicyRequest

  • UpdateAttestationPolicyResponse

  • AttestationPolicyKind

  • AttestationPolicyService

• proto/connect/cluster_service/v1alpha1/cluster_service.proto

  • CreateClusterRequest

  • CreateClusterResponse

  • DestroyClusterRequest

  • DestroyClusterResponse

  • GetClusterRequest

  • GetClusterResponse

  • ListClustersRequest

  • ListClustersRequest.Filter

  • ListClustersResponse

  • UpdateClusterRequest

  • UpdateClusterResponse

  • ClusterService

• proto/connect/datastore_service/v1alpha1/datastore.proto
  • AttestedNode
  • Selector
  • Selectors
• proto/connect/datastore_service/v1alpha1/datastore_service.proto

  • AttestedNodeMask

  • CountAttestedNodesRequest

  • CountAttestedNodesResponse

  • CreateAttestedNodeRequest

  • CreateAttestedNodeResponse

  • DeleteAttestedNodeRequest

  • DeleteAttestedNodeResponse

  • FetchAttestedNodeRequest

  • FetchAttestedNodeResponse

  • GetNodeSelectorsRequest

  • GetNodeSelectorsResponse

  • ListAttestedNodesRequest

  • ListAttestedNodesRequest.BySelectors

  • ListAttestedNodesResponse

  • ListNodeSelectorsRequest

  • ListNodeSelectorsResponse

  • ListNodeSelectorsResponse.NodeSelectors

  • ListNodeSelectorsResponse.SelectorsEntry

  • PruneAttestedExpiredNodesRequest

  • PruneAttestedExpiredNodesResponse

  • SetNodeSelectorsRequest

  • SetNodeSelectorsResponse

  • UpdateAttestedNodeRequest

  • UpdateAttestedNodeResponse

  • ListAttestedNodesRequest.MatchBehavior

  • DataStoreService

• proto/exchange_policy/v1alpha1/exchange_policy.proto

  • ExchangePolicy

  • StringMatcher

  • StringSet

  • ExchangePolicyAction

• proto/connect/exchange_policy_service/v1alpha1/exchange_policy_service.proto

  • CreateExchangePolicyRequest

  • CreateExchangePolicyResponse

  • DestroyExchangePolicyRequest

  • DestroyExchangePolicyResponse

  • GetExchangePolicyRequest

  • GetExchangePolicyResponse

  • ListExchangePoliciesRequest

  • ListExchangePoliciesRequest.Filter

  • ListExchangePoliciesResponse

  • UpdateExchangePolicyRequest

  • UpdateExchangePolicyRequest.UpdateMask

  • UpdateExchangePolicyResponse

  • ExchangePolicyService

• proto/connect/federation_service/v1alpha1/federation_service.proto

  • CreateFederationRequest

  • CreateFederationResponse

  • DestroyFederationRequest

  • DestroyFederationResponse

  • GetFederationRequest

  • GetFederationResponse

  • ListFederationsRequest

  • ListFederationsRequest.Filter

  • ListFederationsResponse

  • FederationService

• proto/identity/v1alpha1/identity.proto
  • Identity
  • IdentityFederation
  • Selector
• proto/connect/identity_service/v1alpha1/identity_service.proto

  • GetIdentityRequest

  • GetIdentityResponse

  • ListIdentitiesRequest

  • ListIdentitiesRequest.Filter

  • ListIdentitiesResponse

  • IdentityService

• proto/organization/v1alpha1/organization.proto
  • Organization
• proto/connect/organization_service/v1alpha1/organization_service.proto

  • GetOrganizationRequest

  • GetOrganizationResponse

  • ListOrganizationsRequest

  • ListOrganizationsRequest.Filter

  • ListOrganizationsResponse

  • OrganizationService

• proto/role_binding/v1alpha1/role_binding.proto
  • Group
  • Resource
  • RoleBinding
  • User
• proto/connect/role_binding_service/v1alpha1/role_binding_service.proto

  • CreateRoleBindingRequest

  • CreateRoleBindingResponse

  • DestroyRoleBindingRequest

  • DestroyRoleBindingResponse

  • GetRoleBindingRequest

  • GetRoleBindingResponse

  • ListRoleBindingsRequest

  • ListRoleBindingsRequest.Filter

  • ListRoleBindingsResponse

  • UpdateRoleBindingRequest

  • UpdateRoleBindingResponse

  • RoleBindingService

• proto/trust_zone_server/v1alpha1/trust_zone_server.proto

  • ConnectK8sPsatConfig

  • TrustZoneServer

  • TrustZoneServer.Status

  • TrustZoneServerStatus

• proto/connect/trust_zone_server_service/v1alpha1/trust_zone_server_service.proto

  • CreateTrustZoneServerRequest

  • CreateTrustZoneServerResponse

  • DestroyTrustZoneServerRequest

  • DestroyTrustZoneServerResponse

  • GetTrustZoneServerRequest

  • GetTrustZoneServerResponse

  • ListTrustZoneServersRequest

  • ListTrustZoneServersRequest.Filter

  • ListTrustZoneServersResponse

  • UpdateTrustZoneServerRequest

  • UpdateTrustZoneServerRequest.UpdateMask

  • UpdateTrustZoneServerResponse

  • UpdateTrustZoneServerStatusRequest

  • UpdateTrustZoneServerStatusResponse

  • TrustZoneServerService

• proto/connect/trust_zone_service/v1alpha1/trust_zone_service.proto

  • Agent

  • CreateTrustZoneRequest

  • CreateTrustZoneResponse

  • DestroyTrustZoneRequest

  • DestroyTrustZoneResponse

  • GetTrustZoneRequest

  • GetTrustZoneResponse

  • ListTrustZonesRequest

  • ListTrustZonesRequest.Filter

  • ListTrustZonesResponse

  • RegisterAgentRequest

  • RegisterAgentResponse

  • RegisterTrustZoneServerRequest

  • RegisterTrustZoneServerResponse

  • TrustZoneServer

  • UpdateTrustZoneBundleRequest

  • UpdateTrustZoneBundleResponse

  • UpdateTrustZoneRequest

  • UpdateTrustZoneResponse

  • TrustZoneService

• proto/workload/v1alpha1/workload.proto

  • KubernetesContainer

  • KubernetesMetadata

  • KubernetesMetadata.AnnotationsEntry

  • KubernetesMetadata.LabelsEntry

  • KubernetesPod

  • Observation

  • Workload

  • WorkloadType

• proto/connect/workload_service/v1alpha1/workload_service.proto

  • ListWorkloadsRequest

  • ListWorkloadsRequest.Filter

  • ListWorkloadsResponse

  • PublishWorkloadsRequest

  • PublishWorkloadsResponse

  • WorkloadService

• proto/provision_plugin/v1alpha1/plugin.proto

  • DeployRequest

  • DeployResponse

  • GetHelmValuesRequest

  • GetHelmValuesResponse

  • Status

  • TearDownRequest

  • TearDownResponse

  • ValidateRequest

  • ValidateResponse

  • ProvisionPluginService

• Scalar Value Types

Top

proto/agent/v1alpha1/agent.proto

Agent

Field	Type	Label	Description
id	string	optional
cluster_id	string	optional
trust_zone_id	string	optional

AgentStatus

Field	Type	Label	Description
status	AgentStatusCode	optional
status_message	string	optional
last_updated	int64	optional

AgentStatusCode

Name	Number	Description
AGENT_STATUS_CODE_UNSPECIFIED	0
AGENT_STATUS_CODE_RUNNING	1
AGENT_STATUS_CODE_STOPPED	2
AGENT_STATUS_CODE_ERROR	3
AGENT_STATUS_CODE_STARTING	4

Top

proto/ap_binding/v1alpha1/ap_binding.proto

APBinding

Field	Type	Label	Description
id	string	optional
org_id	string	optional
trust_zone_id	string	optional
policy_id	string	optional
federations	APBindingFederation	repeated

APBindingFederation

Field	Type	Label	Description
trust_zone_id	string	optional

Top

proto/spire/api/types/selector.proto

Selector

Field	Type	Label	Description
type	string		The type of the selector. This is typically the name of the plugin that produces the selector.
value	string		The value of the selector.

SelectorMatch

Field	Type	Label	Description
selectors	Selector	repeated	The set of selectors to match on.
match	SelectorMatch.MatchBehavior		How to match the selectors.

SelectorMatch.MatchBehavior

Name	Number	Description
MATCH_BEHAVIOR_EXACT_UNSPECIFIED	0	Indicates that the selectors in this match are equal to the candidate selectors, independent of ordering. Example: Given: - ‘e1 { Selectors: [“a:1”, “b:2”, “c:3”]}’ - ‘e2 { Selectors: [“a:1”, “b:2”]}’ - ‘e3 { Selectors: [“a:1”]}’ Operation: - MATCH_EXACT [“a:1”, “b:2”] Entries that match: - ‘e2’
MATCH_BEHAVIOR_SUBSET	1	Indicates that all candidates which have a non-empty subset of the provided set of selectors will match. Example: Given: - ‘e1 { Selectors: [“a:1”, “b:2”, “c:3”]}’ - ‘e2 { Selectors: [“a:1”, “b:2”]}’ - ‘e3 { Selectors: [“a:1”]}’ Operation: - MATCH_SUBSET [“a:1”] Entries that match: - ‘e1’
MATCH_BEHAVIOR_SUPERSET	2	Indicates that all candidates which are a superset of the provided selectors will match. Example: Given: - ‘e1 { Selectors: [“a:1”, “b:2”, “c:3”]}’ - ‘e2 { Selectors: [“a:1”, “b:2”]}’ - ‘e3 { Selectors: [“a:1”]}’ Operation: - MATCH_SUPERSET [“a:1”, “b:2”] Entries that match: - ‘e1’ - ‘e2’
MATCH_BEHAVIOR_ANY	3	Indicates that all candidates which have at least one of the provided set of selectors will match. Example: Given: - ‘e1 { Selectors: [“a:1”, “b:2”, “c:3”]}’ - ‘e2 { Selectors: [“a:1”, “b:2”]}’ - ‘e3 { Selectors: [“a:1”]}’ Operation: - MATCH_ANY [“a:1”] Entries that match: - ‘e1’ - ‘e2’ - ‘e3’

Top

proto/attestation_policy/v1alpha1/attestation_policy.proto

APKubernetes

Field	Type	Label	Description
namespace_selector	APLabelSelector	optional
pod_selector	APLabelSelector	optional
dns_name_templates	string	repeated
spiffe_id_path_template	string	optional	Custom SPIFFE ID path format for Connect identity issuance This defines the identity path appended to domain of the trust zone it is bound to

An example spiffe_id_path_template and corresponding SPIFFE ID: ns/{{ .PodMeta.Namespace }}/sa/{{ .PodSpec.ServiceAccountName }} => spiffe://<trust_domain_of_trust_zone>/ns/…/sa/…

This is supported in both Connect and OSS SPIRE via spire-controller-manager Note that the supported templates are a subset of those in the SCM

Valid template components: {{ .ClusterName }} - Name of cluster {{ .PodMeta.Namespace }} - Namespace of the pod {{ index .PodMeta.Labels “key” }} - Pod label value of a provided key {{ index .PodMeta.Annotations “key” }} - Pod annotation value of a provided key {{ .PodSpec.ServiceAccountName }} - Service account of the pod |

APLabelSelector

This definition has been adapted from the LabelSelector message in Kubernetes. https://github.com/kubernetes/apimachinery/blob/master/pkg/apis/meta/v1/generated.proto

Field	Type	Label	Description
match_labels	APLabelSelector.MatchLabelsEntry	repeated
match_expressions	APMatchExpression	repeated

APLabelSelector.MatchLabelsEntry

Field	Type	Label	Description
key	string
value	string

APMatchExpression

Field	Type	Label	Description
key	string
operator	string
values	string	repeated

APStatic

APStatic represents a static attestation policy

Field	Type	Label	Description
spiffe_id	string	optional	Deprecated.
spiffe_id_path	string	optional
parent_id_path	string	optional
selectors	spire.api.types.Selector	repeated
dns_names	string	repeated

APTPMNode

APTPMNode represents a node (agent) attesting using a Trusted Platform Module (TPM).

Field	Type	Label	Description
attestation	TPMAttestation
selector_values	string	repeated	selector_values are the values of node selectors to use for this node. The key of the selectors will be “tpm”.

AttestationPolicy

Field	Type	Label	Description
id	string	optional
name	string
org_id	string	optional
kubernetes	APKubernetes
static	APStatic
tpm_node	APTPMNode

TPMAttestation

TPMAttestation represents attestation requirements for a node (agent) attesting using a Trusted Platform Module (TPM).

Field	Type	Label	Description
ek_hash	string	optional	ek_hash is the SHA256 hash of the TPM’s Endorsement Key (EK).

Top

proto/trust_provider/v1alpha1/trust_provider.proto

K8sPsatConfig

Field	Type	Label	Description
enabled	bool		Whether to enable the k8s psat node attestor plugin with a Connect datasource.
allowed_service_accounts	K8sPsatConfig.ServiceAccount	repeated	Namespace and name of service accounts agents can use tokens from to attest nodes in this cluster. At least 1 must be provided if the SPIRE server is outside the cluster.
allowed_node_label_keys	string	repeated	Node labels that can be used as selectors in this cluster.
allowed_pod_label_keys	string	repeated	Pod labels that can be used as selectors in this cluster.
api_server_ca_cert	bytes		CA certificate of the cluster’s API server. Optional, but required if the SPIRE server is outside the cluster and the cluster’s API server CA is not already trusted by the SPIRE server (very likely).
api_server_url	string		Cluster’s API server URL. Required if the SPIRE server is outside the cluster.
api_server_tls_server_name	string		Alternative TLS server name to verify the presented certificate with if the hostname of the API server URL is not in the presented certificate.
api_server_proxy_url	string		Proxy URL of the API server (if running behind a proxy).
spire_server_audience	string		Audience the SPIRE server should use in the JWT presented to the cluster’s API server. Required if the SPIRE server is outside the cluster.

K8sPsatConfig.ServiceAccount

Field	Type	Label	Description
namespace	string
service_account_name	string

TrustProvider

Field	Type	Label	Description
kind	string	optional
k8s_psat_config	K8sPsatConfig		Configuration for the k8s psat node attestor plugin when using a Connect datasource with remote clusters.

Configuration for additional server plugins goes here. More than one may be enabled, to allow node attestation in a cluster to be done in multiple different ways. |

TrustProviderKind

Name	Number	Description
TRUST_PROVIDER_KIND_UNSPECIFIED	0
TRUST_PROVIDER_KIND_KUBERNETES	1

Top

proto/cluster/v1alpha1/cluster.proto

Cluster

Field	Type	Label	Description
id	string	optional
name	string	optional
org_id	string	optional
trust_zone_id	string	optional
kubernetes_context	string	optional
trust_provider	proto.trust_provider.v1alpha1.TrustProvider	optional
extra_helm_values	google.protobuf.Struct	optional
profile	string	optional
external_server	bool	optional
oidc_issuer_url	string	optional
oidc_issuer_ca_cert	bytes	optional

Top

proto/federation/v1alpha1/federation.proto

Federation

Field	Type	Label	Description
id	string	optional
org_id	string	optional
trust_zone_id	string	optional
remote_trust_zone_id	string	optional

Top

proto/spire/api/types/bundle.proto

Bundle

Field	Type	Label	Description
trust_domain	string		The name of the trust domain the bundle belongs to (e.g., “example.org”).
x509_authorities	X509Certificate	repeated	X.509 authorities for authenticating X509-SVIDs.
jwt_authorities	JWTKey	repeated	JWT authorities for authenticating JWT-SVIDs.
refresh_hint	int64		A hint on how often the bundle should be refreshed from the bundle provider, in seconds. Can be zero (meaning no hint available).
sequence_number	uint64		The sequence number of the bundle.

BundleMask

Field	Type	Label	Description
x509_authorities	bool		x509_authorities field mask.
jwt_authorities	bool		jwt_authorities field mask.
refresh_hint	bool		refresh_hint field mask.
sequence_number	bool		sequence_number field mask.

JWTKey

Field	Type	Label	Description
public_key	bytes		The PKIX encoded public key.
key_id	string		The key identifier.
expires_at	int64		When the key expires (seconds since Unix epoch). If zero, the key does not expire.
tainted	bool		This authority is no longer secure and must not be used

X509Certificate

Field	Type	Label	Description
asn1	bytes		The ASN.1 DER encoded bytes of the X.509 certificate.
tainted	bool		This authority is no longer secure and must not be used.

Top

proto/trust_zone/v1alpha1/trust_zone.proto

TrustZone

Field	Type	Label	Description
name	string
trust_domain	string
bundle_endpoint_url	string	optional
bundle	spire.api.types.Bundle	optional
jwt_issuer	string	optional
bundle_endpoint_profile	BundleEndpointProfile	optional
id	string	optional
is_management_zone	bool
org_id	string	optional

BundleEndpointProfile

Name	Number	Description
BUNDLE_ENDPOINT_PROFILE_UNSPECIFIED	0
BUNDLE_ENDPOINT_PROFILE_HTTPS_SPIFFE	1
BUNDLE_ENDPOINT_PROFILE_HTTPS_WEB	2

Top

proto/cofidectl/datasource_plugin/v1alpha2/plugin.proto

AddAPBindingRequest

Field	Type	Label	Description
binding	proto.ap_binding.v1alpha1.APBinding	optional

AddAPBindingResponse

Field	Type	Label	Description
binding	proto.ap_binding.v1alpha1.APBinding	optional

AddAttestationPolicyRequest

Field	Type	Label	Description
policy	proto.attestation_policy.v1alpha1.AttestationPolicy	optional

AddAttestationPolicyResponse

Field	Type	Label	Description
policy	proto.attestation_policy.v1alpha1.AttestationPolicy	optional

AddClusterRequest

Field	Type	Label	Description
cluster	proto.cluster.v1alpha1.Cluster	optional

AddClusterResponse

Field	Type	Label	Description
cluster	proto.cluster.v1alpha1.Cluster	optional

AddFederationRequest

Field	Type	Label	Description
federation	proto.federation.v1alpha1.Federation	optional

AddFederationResponse

Field	Type	Label	Description
federation	proto.federation.v1alpha1.Federation	optional

AddTrustZoneRequest

Field	Type	Label	Description
trust_zone	proto.trust_zone.v1alpha1.TrustZone	optional

AddTrustZoneResponse

Field	Type	Label	Description
trust_zone	proto.trust_zone.v1alpha1.TrustZone	optional

DestroyAPBindingRequest

Field	Type	Label	Description
id	string	optional

DestroyAPBindingResponse

DestroyAttestationPolicyRequest

Field	Type	Label	Description
id	string	optional

DestroyAttestationPolicyResponse

DestroyClusterRequest

Field	Type	Label	Description
id	string	optional

DestroyClusterResponse

DestroyFederationRequest

Field	Type	Label	Description
id	string	optional

DestroyFederationResponse

DestroyTrustZoneRequest

Field	Type	Label	Description
id	string	optional

DestroyTrustZoneResponse

GetAttestationPolicyByNameRequest

Field	Type	Label	Description
name	string	optional

GetAttestationPolicyByNameResponse

Field	Type	Label	Description
policy	proto.attestation_policy.v1alpha1.AttestationPolicy

GetAttestationPolicyRequest

Field	Type	Label	Description
id	string	optional

GetAttestationPolicyResponse

Field	Type	Label	Description
policy	proto.attestation_policy.v1alpha1.AttestationPolicy

GetClusterByNameRequest

Field	Type	Label	Description
name	string	optional
trust_zone_id	string	optional

GetClusterByNameResponse

Field	Type	Label	Description
cluster	proto.cluster.v1alpha1.Cluster	optional

GetClusterRequest

Field	Type	Label	Description
id	string	optional

GetClusterResponse

Field	Type	Label	Description
cluster	proto.cluster.v1alpha1.Cluster	optional

GetTrustZoneByNameRequest

Field	Type	Label	Description
name	string	optional

GetTrustZoneByNameResponse

Field	Type	Label	Description
trust_zone	proto.trust_zone.v1alpha1.TrustZone	optional

GetTrustZoneRequest

Field	Type	Label	Description
id	string	optional

GetTrustZoneResponse

Field	Type	Label	Description
trust_zone	proto.trust_zone.v1alpha1.TrustZone	optional

ListAPBindingsRequest

Field	Type	Label	Description
filter	ListAPBindingsRequest.Filter	optional

ListAPBindingsRequest.Filter

Field	Type	Label	Description
trust_zone_id	string	optional
policy_id	string	optional

ListAPBindingsResponse

Field	Type	Label	Description
bindings	proto.ap_binding.v1alpha1.APBinding	repeated

ListAttestationPoliciesRequest

ListAttestationPoliciesResponse

Field	Type	Label	Description
policies	proto.attestation_policy.v1alpha1.AttestationPolicy	repeated

ListClustersRequest

Field	Type	Label	Description
filter	ListClustersRequest.Filter	optional

ListClustersRequest.Filter

Field	Type	Label	Description
trust_zone_id	string	optional

ListClustersResponse

Field	Type	Label	Description
clusters	proto.cluster.v1alpha1.Cluster	repeated

ListFederationsRequest

Field	Type	Label	Description
filter	ListFederationsRequest.Filter	optional

ListFederationsRequest.Filter

Field	Type	Label	Description
trust_zone_id	string	optional

ListFederationsResponse

Field	Type	Label	Description
federations	proto.federation.v1alpha1.Federation	repeated

ListTrustZonesRequest

ListTrustZonesResponse

Field	Type	Label	Description
trust_zones	proto.trust_zone.v1alpha1.TrustZone	repeated

UpdateClusterRequest

Field	Type	Label	Description
cluster	proto.cluster.v1alpha1.Cluster	optional

UpdateClusterResponse

Field	Type	Label	Description
cluster	proto.cluster.v1alpha1.Cluster	optional

UpdateTrustZoneRequest

Field	Type	Label	Description
trust_zone	proto.trust_zone.v1alpha1.TrustZone	optional

UpdateTrustZoneResponse

Field	Type	Label	Description
trust_zone	proto.trust_zone.v1alpha1.TrustZone	optional

ValidateRequest

ValidateResponse

DataSourcePluginService

Method Name	Request Type	Response Type	Description
Validate	ValidateRequest	ValidateResponse
AddTrustZone	AddTrustZoneRequest	AddTrustZoneResponse
DestroyTrustZone	DestroyTrustZoneRequest	DestroyTrustZoneResponse
GetTrustZone	GetTrustZoneRequest	GetTrustZoneResponse
GetTrustZoneByName	GetTrustZoneByNameRequest	GetTrustZoneByNameResponse
ListTrustZones	ListTrustZonesRequest	ListTrustZonesResponse
UpdateTrustZone	UpdateTrustZoneRequest	UpdateTrustZoneResponse
AddCluster	AddClusterRequest	AddClusterResponse
DestroyCluster	DestroyClusterRequest	DestroyClusterResponse
GetCluster	GetClusterRequest	GetClusterResponse
GetClusterByName	GetClusterByNameRequest	GetClusterByNameResponse
ListClusters	ListClustersRequest	ListClustersResponse
UpdateCluster	UpdateClusterRequest	UpdateClusterResponse
AddAttestationPolicy	AddAttestationPolicyRequest	AddAttestationPolicyResponse
DestroyAttestationPolicy	DestroyAttestationPolicyRequest	DestroyAttestationPolicyResponse
GetAttestationPolicy	GetAttestationPolicyRequest	GetAttestationPolicyResponse
GetAttestationPolicyByName	GetAttestationPolicyByNameRequest	GetAttestationPolicyByNameResponse
ListAttestationPolicies	ListAttestationPoliciesRequest	ListAttestationPoliciesResponse
AddAPBinding	AddAPBindingRequest	AddAPBindingResponse
DestroyAPBinding	DestroyAPBindingRequest	DestroyAPBindingResponse
ListAPBindings	ListAPBindingsRequest	ListAPBindingsResponse
AddFederation	AddFederationRequest	AddFederationResponse
DestroyFederation	DestroyFederationRequest	DestroyFederationResponse
ListFederations	ListFederationsRequest	ListFederationsResponse

Top

proto/cofidectl/provision_plugin/v1alpha2/plugin.proto

DeployRequest

Field	Type	Label	Description
data_source	uint32	optional
kube_cfg_file	string	optional
trust_zone_ids	string	repeated

DeployResponse

Field	Type	Label	Description
status	Status	optional

GetHelmValuesRequest

Field	Type	Label	Description
data_source	uint32	optional
cluster_id	string	optional

GetHelmValuesResponse

Field	Type	Label	Description
helm_values	google.protobuf.Struct	optional

Status

Field	Type	Label	Description
stage	string	optional
message	string	optional
done	bool	optional
error	string	optional

TearDownRequest

Field	Type	Label	Description
data_source	uint32	optional
kube_cfg_file	string	optional
trust_zone_ids	string	repeated

TearDownResponse

Field	Type	Label	Description
status	Status	optional

ValidateRequest

ValidateResponse

ProvisionPluginService

Method Name	Request Type	Response Type	Description
Validate	ValidateRequest	ValidateResponse
Deploy	DeployRequest	DeployResponse stream
TearDown	TearDownRequest	TearDownResponse stream
GetHelmValues	GetHelmValuesRequest	GetHelmValuesResponse

Top

proto/cofidectl_plugin/v1alpha1/plugin.proto

AddAPBindingRequest

Field	Type	Label	Description
binding	proto.ap_binding.v1alpha1.APBinding	optional

AddAPBindingResponse

Field	Type	Label	Description
binding	proto.ap_binding.v1alpha1.APBinding	optional

AddAttestationPolicyRequest

Field	Type	Label	Description
policy	proto.attestation_policy.v1alpha1.AttestationPolicy	optional

AddAttestationPolicyResponse

Field	Type	Label	Description
policy	proto.attestation_policy.v1alpha1.AttestationPolicy	optional

AddClusterRequest

Field	Type	Label	Description
cluster	proto.cluster.v1alpha1.Cluster	optional

AddClusterResponse

Field	Type	Label	Description
cluster	proto.cluster.v1alpha1.Cluster	optional

AddFederationRequest

Field	Type	Label	Description
federation	proto.federation.v1alpha1.Federation	optional

AddFederationResponse

Field	Type	Label	Description
federation	proto.federation.v1alpha1.Federation	optional

AddTrustZoneRequest

Field	Type	Label	Description
trust_zone	proto.trust_zone.v1alpha1.TrustZone	optional

AddTrustZoneResponse

Field	Type	Label	Description
trust_zone	proto.trust_zone.v1alpha1.TrustZone	optional

DestroyAPBindingRequest

Field	Type	Label	Description
binding	proto.ap_binding.v1alpha1.APBinding	optional

DestroyAPBindingResponse

DestroyAttestationPolicyRequest

Field	Type	Label	Description
name	string	optional

DestroyAttestationPolicyResponse

DestroyClusterRequest

Field	Type	Label	Description
name	string	optional
trust_zone	string	optional

DestroyClusterResponse

DestroyFederationRequest

Field	Type	Label	Description
federation	proto.federation.v1alpha1.Federation	optional

DestroyFederationResponse

DestroyTrustZoneRequest

Field	Type	Label	Description
name	string	optional

DestroyTrustZoneResponse

GetAttestationPolicyRequest

Field	Type	Label	Description
name	string	optional

GetAttestationPolicyResponse

Field	Type	Label	Description
policy	proto.attestation_policy.v1alpha1.AttestationPolicy

GetClusterRequest

Field	Type	Label	Description
name	string	optional
trust_zone	string	optional

GetClusterResponse

Field	Type	Label	Description
cluster	proto.cluster.v1alpha1.Cluster	optional

GetTrustZoneRequest

Field	Type	Label	Description
name	string	optional

GetTrustZoneResponse

Field	Type	Label	Description
trust_zone	proto.trust_zone.v1alpha1.TrustZone	optional

ListAPBindingsRequest

Field	Type	Label	Description
filter	ListAPBindingsRequest.Filter	optional

ListAPBindingsRequest.Filter

Field	Type	Label	Description
trust_zone_name	string	optional
policy_name	string	optional

ListAPBindingsResponse

Field	Type	Label	Description
bindings	proto.ap_binding.v1alpha1.APBinding	repeated

ListAttestationPoliciesRequest

ListAttestationPoliciesResponse

Field	Type	Label	Description
policies	proto.attestation_policy.v1alpha1.AttestationPolicy	repeated

ListClustersRequest

Field	Type	Label	Description
trust_zone	string	optional

ListClustersResponse

Field	Type	Label	Description
clusters	proto.cluster.v1alpha1.Cluster	repeated

ListFederationsByTrustZoneRequest

Field	Type	Label	Description
trust_zone_name	string	optional

ListFederationsByTrustZoneResponse

Field	Type	Label	Description
federations	proto.federation.v1alpha1.Federation	repeated

ListFederationsRequest

ListFederationsResponse

Field	Type	Label	Description
federations	proto.federation.v1alpha1.Federation	repeated

ListTrustZonesRequest

ListTrustZonesResponse

Field	Type	Label	Description
trust_zones	proto.trust_zone.v1alpha1.TrustZone	repeated

UpdateClusterRequest

Field	Type	Label	Description
cluster	proto.cluster.v1alpha1.Cluster	optional

UpdateClusterResponse

Field	Type	Label	Description
cluster	proto.cluster.v1alpha1.Cluster	optional

UpdateTrustZoneRequest

Field	Type	Label	Description
trust_zone	proto.trust_zone.v1alpha1.TrustZone	optional

UpdateTrustZoneResponse

Field	Type	Label	Description
trust_zone	proto.trust_zone.v1alpha1.TrustZone	optional

ValidateRequest

ValidateResponse

DataSourcePluginService

Method Name	Request Type	Response Type	Description
Validate	ValidateRequest	ValidateResponse
AddTrustZone	AddTrustZoneRequest	AddTrustZoneResponse
DestroyTrustZone	DestroyTrustZoneRequest	DestroyTrustZoneResponse
GetTrustZone	GetTrustZoneRequest	GetTrustZoneResponse
ListTrustZones	ListTrustZonesRequest	ListTrustZonesResponse
UpdateTrustZone	UpdateTrustZoneRequest	UpdateTrustZoneResponse
AddCluster	AddClusterRequest	AddClusterResponse
DestroyCluster	DestroyClusterRequest	DestroyClusterResponse
GetCluster	GetClusterRequest	GetClusterResponse
ListClusters	ListClustersRequest	ListClustersResponse
UpdateCluster	UpdateClusterRequest	UpdateClusterResponse
AddAttestationPolicy	AddAttestationPolicyRequest	AddAttestationPolicyResponse
DestroyAttestationPolicy	DestroyAttestationPolicyRequest	DestroyAttestationPolicyResponse
GetAttestationPolicy	GetAttestationPolicyRequest	GetAttestationPolicyResponse
ListAttestationPolicies	ListAttestationPoliciesRequest	ListAttestationPoliciesResponse
AddAPBinding	AddAPBindingRequest	AddAPBindingResponse
DestroyAPBinding	DestroyAPBindingRequest	DestroyAPBindingResponse
ListAPBindings	ListAPBindingsRequest	ListAPBindingsResponse
AddFederation	AddFederationRequest	AddFederationResponse
DestroyFederation	DestroyFederationRequest	DestroyFederationResponse
ListFederations	ListFederationsRequest	ListFederationsResponse
ListFederationsByTrustZone	ListFederationsByTrustZoneRequest	ListFederationsByTrustZoneResponse

Top

proto/plugins/v1alpha1/plugins.proto

Plugins

Field	Type	Label	Description
data_source	string	optional
provision	string	optional

Top

proto/config/v1alpha1/config.proto

Config

Field	Type	Label	Description
trust_zones	proto.trust_zone.v1alpha1.TrustZone	repeated
clusters	proto.cluster.v1alpha1.Cluster	repeated
attestation_policies	proto.attestation_policy.v1alpha1.AttestationPolicy	repeated
plugin_config	Config.PluginConfigEntry	repeated
plugins	proto.plugins.v1alpha1.Plugins	optional
federations	proto.federation.v1alpha1.Federation	repeated
ap_bindings	proto.ap_binding.v1alpha1.APBinding	repeated

Config.PluginConfigEntry

Field	Type	Label	Description
key	string
value	google.protobuf.Struct

Top

proto/federated_service/v1alpha1/federated_service.proto

FederatedService

Field	Type	Label	Description
id	string
name	string
namespace	string
cluster_name	string
trust_domain	string
workload_labels	FederatedService.WorkloadLabelsEntry	repeated
exported_trust_domains	string	repeated
port	uint32
gateway_entries	GatewayEntry	repeated
gateway_specs	GatewaySpec	repeated
tls_mode	TLSMode

FederatedService.WorkloadLabelsEntry

Field	Type	Label	Description
key	string
value	string

GatewayEntry

Field	Type	Label	Description
hostname	string
type	string
ip	string
port	int32

GatewaySpec

Field	Type	Label	Description
hostname	string
type	string
ip	string
port	int32

TLSMode

Name	Number	Description
TLS_MODE_UNSPECIFIED	0
TLS_MODE_MTLS	1
TLS_MODE_ISTIO_MTLS	2

Top

proto/connect/agent_service/v1alpha1/agent_service.proto

CreateAgentJoinTokenRequest

Field	Type	Label	Description
trust_zone_id	string	optional
cluster_id	string	optional

CreateAgentJoinTokenResponse

Field	Type	Label	Description
agent_token	string	optional

DeregisterFederatedServiceRequest

Field	Type	Label	Description
service_id	string

DeregisterFederatedServiceResponse

Field	Type	Label	Description
service_id	string

GetFederatedServiceRequest

Field	Type	Label	Description
service_id	string

GetFederatedServiceResponse

Field	Type	Label	Description
service	proto.federated_service.v1alpha1.FederatedService

ListFederatedServicesRequest

Field	Type	Label	Description
org_id	string

ListFederatedServicesResponse

Field	Type	Label	Description
services	proto.federated_service.v1alpha1.FederatedService	repeated

RegisterFederatedServiceRequest

Field	Type	Label	Description
service	proto.federated_service.v1alpha1.FederatedService

RegisterFederatedServiceResponse

Field	Type	Label	Description
service_id	string

UpdateAgentStatusRequest

Field	Type	Label	Description
status	proto.agent.v1alpha1.AgentStatus

UpdateAgentStatusResponse

UpdateFederatedServiceRequest

Field	Type	Label	Description
service	proto.federated_service.v1alpha1.FederatedService

UpdateFederatedServiceResponse

Field	Type	Label	Description
service_id	string

AgentService

Method Name	Request Type	Response Type	Description
CreateAgentJoinToken	CreateAgentJoinTokenRequest	CreateAgentJoinTokenResponse
UpdateAgentStatus	UpdateAgentStatusRequest	UpdateAgentStatusResponse
RegisterFederatedService	RegisterFederatedServiceRequest	RegisterFederatedServiceResponse
DeregisterFederatedService	DeregisterFederatedServiceRequest	DeregisterFederatedServiceResponse
UpdateFederatedService	UpdateFederatedServiceRequest	UpdateFederatedServiceResponse
GetFederatedService	GetFederatedServiceRequest	GetFederatedServiceResponse
ListFederatedServices	ListFederatedServicesRequest	ListFederatedServicesResponse

Top

proto/connect/ap_binding_service/v1alpha1/ap_binding_service.proto

CreateAPBindingRequest

Field	Type	Label	Description
binding	proto.ap_binding.v1alpha1.APBinding	optional

CreateAPBindingResponse

Field	Type	Label	Description
binding	proto.ap_binding.v1alpha1.APBinding	optional

DestroyAPBindingRequest

Field	Type	Label	Description
binding_id	string	optional

DestroyAPBindingResponse

GetAPBindingRequest

Field	Type	Label	Description
binding_id	string	optional

GetAPBindingResponse

Field	Type	Label	Description
binding	proto.ap_binding.v1alpha1.APBinding	optional

ListAPBindingsRequest

Field	Type	Label	Description
filter	ListAPBindingsRequest.Filter	optional

ListAPBindingsRequest.Filter

Field	Type	Label	Description
org_id	string	optional
trust_zone_id	string	optional
policy_id	string	optional

ListAPBindingsResponse

Field	Type	Label	Description
bindings	proto.ap_binding.v1alpha1.APBinding	repeated

UpdateAPBindingRequest

Field	Type	Label	Description
binding	proto.ap_binding.v1alpha1.APBinding	optional

UpdateAPBindingResponse

Field	Type	Label	Description
binding	proto.ap_binding.v1alpha1.APBinding	optional

APBindingService

Method Name	Request Type	Response Type	Description
CreateAPBinding	CreateAPBindingRequest	CreateAPBindingResponse
DestroyAPBinding	DestroyAPBindingRequest	DestroyAPBindingResponse
GetAPBinding	GetAPBindingRequest	GetAPBindingResponse
ListAPBindings	ListAPBindingsRequest	ListAPBindingsResponse
UpdateAPBinding	UpdateAPBindingRequest	UpdateAPBindingResponse

Top

proto/connect/attestation_policy_service/v1alpha1/attestation_policy_service.proto

CreateAttestationPolicyRequest

Field	Type	Label	Description
policy	proto.attestation_policy.v1alpha1.AttestationPolicy	optional

CreateAttestationPolicyResponse

Field	Type	Label	Description
policy	proto.attestation_policy.v1alpha1.AttestationPolicy	optional

DestroyAttestationPolicyRequest

Field	Type	Label	Description
policy_id	string	optional

DestroyAttestationPolicyResponse

GetAttestationPolicyRequest

Field	Type	Label	Description
policy_id	string	optional

GetAttestationPolicyResponse

Field	Type	Label	Description
policy	proto.attestation_policy.v1alpha1.AttestationPolicy	optional

ListAttestationPoliciesRequest

Field	Type	Label	Description
filter	ListAttestationPoliciesRequest.Filter	optional

ListAttestationPoliciesRequest.Filter

Field	Type	Label	Description
name	string	optional
org_id	string	optional
trust_zone_id	string	optional
kind	AttestationPolicyKind	optional
tpm_node	ListAttestationPoliciesRequest.TPMNodeFilter	optional

ListAttestationPoliciesRequest.TPMNodeFilter

Field	Type	Label	Description
ek_hash	string	optional

ListAttestationPoliciesResponse

Field	Type	Label	Description
policies	proto.attestation_policy.v1alpha1.AttestationPolicy	repeated

UpdateAttestationPolicyRequest

Field	Type	Label	Description
policy	proto.attestation_policy.v1alpha1.AttestationPolicy	optional

UpdateAttestationPolicyResponse

Field	Type	Label	Description
policy	proto.attestation_policy.v1alpha1.AttestationPolicy	optional

AttestationPolicyKind

Name	Number	Description
ATTESTATION_POLICY_KIND_UNSPECIFIED	0
ATTESTATION_POLICY_KIND_KUBERNETES	1
ATTESTATION_POLICY_KIND_STATIC	2
ATTESTATION_POLICY_KIND_TPM_NODE	3

AttestationPolicyService

Method Name	Request Type	Response Type	Description
CreateAttestationPolicy	CreateAttestationPolicyRequest	CreateAttestationPolicyResponse
DestroyAttestationPolicy	DestroyAttestationPolicyRequest	DestroyAttestationPolicyResponse
GetAttestationPolicy	GetAttestationPolicyRequest	GetAttestationPolicyResponse
ListAttestationPolicies	ListAttestationPoliciesRequest	ListAttestationPoliciesResponse
UpdateAttestationPolicy	UpdateAttestationPolicyRequest	UpdateAttestationPolicyResponse

Top

proto/connect/cluster_service/v1alpha1/cluster_service.proto

CreateClusterRequest

Field	Type	Label	Description
cluster	proto.cluster.v1alpha1.Cluster	optional

CreateClusterResponse

Field	Type	Label	Description
cluster	proto.cluster.v1alpha1.Cluster	optional

DestroyClusterRequest

Field	Type	Label	Description
cluster_id	string	optional

DestroyClusterResponse

GetClusterRequest

Field	Type	Label	Description
cluster_id	string	optional

GetClusterResponse

Field	Type	Label	Description
cluster	proto.cluster.v1alpha1.Cluster	optional

ListClustersRequest

Field	Type	Label	Description
filter	ListClustersRequest.Filter	optional

ListClustersRequest.Filter

Field	Type	Label	Description
name	string	optional
org_id	string	optional
trust_zone_id	string	optional

ListClustersResponse

Field	Type	Label	Description
clusters	proto.cluster.v1alpha1.Cluster	repeated

UpdateClusterRequest

Field	Type	Label	Description
cluster	proto.cluster.v1alpha1.Cluster	optional

UpdateClusterResponse

Field	Type	Label	Description
cluster	proto.cluster.v1alpha1.Cluster	optional

ClusterService

Method Name	Request Type	Response Type	Description
CreateCluster	CreateClusterRequest	CreateClusterResponse
DestroyCluster	DestroyClusterRequest	DestroyClusterResponse
GetCluster	GetClusterRequest	GetClusterResponse
ListClusters	ListClustersRequest	ListClustersResponse
UpdateCluster	UpdateClusterRequest	UpdateClusterResponse

Top

proto/connect/datastore_service/v1alpha1/datastore.proto

AttestedNode

Represents an attested SPIRE agent

Field	Type	Label	Description
org_id	string		Organisation ID
trust_zone_id	string		Trust zone ID
spiffe_id	string		Node SPIFFE ID
attestation_data_type	string		Attestation data type
cert_serial_number	string		Node certificate serial number
cert_not_after	int64		Node certificate not_after (seconds since unix epoch)
new_cert_serial_number	string		Node certificate serial number
new_cert_not_after	int64		Node certificate not_after (seconds since unix epoch)
selectors	Selector	repeated	Node selectors
can_reattest	bool		CanReattest field (can the attestation safely be deleted and recreated automatically)

Selector

A type which describes the conditions under which a registration entry is matched.

Field	Type	Label	Description
type	string		A selector type represents the type of attestation used in attesting the entity (Eg: AWS, K8).
value	string		The value to be attested.

Selectors

Represents a type with a list of Selector.

Field	Type	Label	Description
entries	Selector	repeated	A list of Selector.

Top

proto/connect/datastore_service/v1alpha1/datastore_service.proto

AttestedNodeMask

Field	Type	Label	Description
attestation_data_type	bool
cert_serial_number	bool
cert_not_after	bool
new_cert_serial_number	bool
new_cert_not_after	bool
can_reattest	bool

CountAttestedNodesRequest

Node operations request/response messages

Field	Type	Label	Description
trust_zone_id	string	optional

CountAttestedNodesResponse

Field	Type	Label	Description
count	int32

CreateAttestedNodeRequest

Field	Type	Label	Description
node	AttestedNode
trust_zone_id	string	optional

CreateAttestedNodeResponse

Field	Type	Label	Description
node	AttestedNode

DeleteAttestedNodeRequest

Field	Type	Label	Description
spiffe_id	string
trust_zone_id	string	optional

DeleteAttestedNodeResponse

Field	Type	Label	Description
node	AttestedNode	optional

FetchAttestedNodeRequest

Field	Type	Label	Description
spiffe_id	string
trust_zone_id	string	optional

FetchAttestedNodeResponse

Field	Type	Label	Description
node	AttestedNode	optional

GetNodeSelectorsRequest

Node Selector operations request/response messages

Field	Type	Label	Description
spiffe_id	string
trust_zone_id	string	optional

GetNodeSelectorsResponse

Field	Type	Label	Description
spiffe_id	string
selectors	Selector	repeated

ListAttestedNodesRequest

Field	Type	Label	Description
by_attestation_type	string	optional	Filters nodes by attestation type
by_banned	bool	optional	Filters nodes by banned status
by_expires_before	int64	optional	Filters nodes that expire before the specified timestamp
by_selector_match	ListAttestedNodesRequest.BySelectors	optional
fetch_selectors	bool	optional	Whether to fetch selectors with nodes
by_can_reattest	bool	optional	Filters nodes by ability to re-attest
trust_zone_id	string	optional

ListAttestedNodesRequest.BySelectors

Filters nodes by selectors

Field	Type	Label	Description
selectors	Selector	repeated
match	ListAttestedNodesRequest.MatchBehavior

ListAttestedNodesResponse

Field	Type	Label	Description
nodes	AttestedNode	repeated

ListNodeSelectorsRequest

Field	Type	Label	Description
valid_at	int64	optional
trust_zone_id	string	optional

ListNodeSelectorsResponse

Field	Type	Label	Description
selectors	ListNodeSelectorsResponse.SelectorsEntry	repeated

ListNodeSelectorsResponse.NodeSelectors

Field	Type	Label	Description
selectors	Selector	repeated

ListNodeSelectorsResponse.SelectorsEntry

Field	Type	Label	Description
key	string
value	ListNodeSelectorsResponse.NodeSelectors

PruneAttestedExpiredNodesRequest

Field	Type	Label	Description
trust_zone_id	string
expired_before	google.protobuf.Timestamp
include_non_reattestable	bool

PruneAttestedExpiredNodesResponse

SetNodeSelectorsRequest

Field	Type	Label	Description
spiffe_id	string
selectors	Selector	repeated
trust_zone_id	string	optional

SetNodeSelectorsResponse

UpdateAttestedNodeRequest

Field	Type	Label	Description
node	AttestedNode
mask	AttestedNodeMask
trust_zone_id	string	optional

UpdateAttestedNodeResponse

Field	Type	Label	Description
node	AttestedNode	optional

ListAttestedNodesRequest.MatchBehavior

Name	Number	Description
MATCH_BEHAVIOR_EXACT_UNSPECIFIED	0
MATCH_BEHAVIOR_SUBSET	1
MATCH_BEHAVIOR_SUPERSET	2
MATCH_BEHAVIOR_MATCH_ANY	3

DataStoreService

DataStoreService defines the gRPC service for the SPIRE server DataStore interface

Method Name	Request Type	Response Type	Description
CountAttestedNodes	CountAttestedNodesRequest	CountAttestedNodesResponse	Node operations
CreateAttestedNode	CreateAttestedNodeRequest	CreateAttestedNodeResponse
DeleteAttestedNode	DeleteAttestedNodeRequest	DeleteAttestedNodeResponse
FetchAttestedNode	FetchAttestedNodeRequest	FetchAttestedNodeResponse
UpdateAttestedNode	UpdateAttestedNodeRequest	UpdateAttestedNodeResponse
ListAttestedNodes	ListAttestedNodesRequest	ListAttestedNodesResponse
PruneAttestedExpiredNodes	PruneAttestedExpiredNodesRequest	PruneAttestedExpiredNodesResponse
GetNodeSelectors	GetNodeSelectorsRequest	GetNodeSelectorsResponse	Node Selector operations
SetNodeSelectors	SetNodeSelectorsRequest	SetNodeSelectorsResponse
ListNodeSelectors	ListNodeSelectorsRequest	ListNodeSelectorsResponse

Top

proto/exchange_policy/v1alpha1/exchange_policy.proto

ExchangePolicy

ExchangePolicy defines a rule for permitting or denying Credex token exchanges within a trust zone

Field	Type	Label	Description
id	string		The unique ID of the exchange policy. Generated by the server.
org_id	string		Organization to which the exchange policy belongs. Derived from the trust zone by the API service.
name	string
trust_zone_id	string		Trust zone to which this policy applies. Immutable after creation.
action	ExchangePolicyAction	optional	Action to take when all conditions match. Defaults to ALLOW when unset.
subject_identity	StringSet		Match conditions on the inbound subject token
subject_issuer	StringSet
actor_identity	StringSet		Match conditions on the optional inbound actor
actor_issuer	StringSet
client_id	StringSet		Match condition on the OAuth client_id presenting the exchange request
target_audience	StringSet		Match condition on the requested target audience
outbound_scopes	string	repeated	Outbound scopes to grant. Only relevant when action is ALLOW.

StringMatcher

Field	Type	Label	Description
exact	string		Exact string equality.
glob	string		Glob pattern (e.g. spiffe://trust.domain/ns//sa/).

StringSet

StringSet holds a collection of StringMatchers evaluated with OR semantics.

Field	Type	Label	Description
matchers	StringMatcher	repeated

ExchangePolicyAction

Name	Number	Description
EXCHANGE_POLICY_ACTION_UNSPECIFIED	0	treated as ALLOW
EXCHANGE_POLICY_ACTION_ALLOW	1
EXCHANGE_POLICY_ACTION_DENY	2

Top

proto/connect/exchange_policy_service/v1alpha1/exchange_policy_service.proto

CreateExchangePolicyRequest

Field	Type	Label	Description
exchange_policy	proto.exchange_policy.v1alpha1.ExchangePolicy

CreateExchangePolicyResponse

Field	Type	Label	Description
exchange_policy	proto.exchange_policy.v1alpha1.ExchangePolicy

DestroyExchangePolicyRequest

Field	Type	Label	Description
exchange_policy_id	string

DestroyExchangePolicyResponse

GetExchangePolicyRequest

Field	Type	Label	Description
exchange_policy_id	string

GetExchangePolicyResponse

Field	Type	Label	Description
exchange_policy	proto.exchange_policy.v1alpha1.ExchangePolicy	optional

ListExchangePoliciesRequest

Field	Type	Label	Description
filter	ListExchangePoliciesRequest.Filter

ListExchangePoliciesRequest.Filter

Field	Type	Label	Description
name	string
org_id	string
trust_zone_id	string

ListExchangePoliciesResponse

Field	Type	Label	Description
exchange_policies	proto.exchange_policy.v1alpha1.ExchangePolicy	repeated

UpdateExchangePolicyRequest

Field	Type	Label	Description
exchange_policy	proto.exchange_policy.v1alpha1.ExchangePolicy
update_mask	UpdateExchangePolicyRequest.UpdateMask	optional	The list of fields to be updated. If not provided a full replacement will be made.

UpdateExchangePolicyRequest.UpdateMask

Field	Type	Label	Description
name	bool		Set to true to update the name field.
action	bool		Set to true to update the action field.
subject_identity	bool		Set to true to update the subject_identity field.
subject_issuer	bool		Set to true to update the subject_issuer field.
actor_identity	bool		Set to true to update the actor_identity field.
actor_issuer	bool		Set to true to update the actor_issuer field.
client_id	bool		Set to true to update the client_id field.
target_audience	bool		Set to true to update the target_audience field.
outbound_scopes	bool		Set to true to update the outbound_scopes field.

UpdateExchangePolicyResponse

Field	Type	Label	Description
exchange_policy	proto.exchange_policy.v1alpha1.ExchangePolicy

ExchangePolicyService

Method Name	Request Type	Response Type	Description
CreateExchangePolicy	CreateExchangePolicyRequest	CreateExchangePolicyResponse
DestroyExchangePolicy	DestroyExchangePolicyRequest	DestroyExchangePolicyResponse
GetExchangePolicy	GetExchangePolicyRequest	GetExchangePolicyResponse
ListExchangePolicies	ListExchangePoliciesRequest	ListExchangePoliciesResponse
UpdateExchangePolicy	UpdateExchangePolicyRequest	UpdateExchangePolicyResponse

Top

proto/connect/federation_service/v1alpha1/federation_service.proto

CreateFederationRequest

Field	Type	Label	Description
federation	proto.federation.v1alpha1.Federation

CreateFederationResponse

Field	Type	Label	Description
federation	proto.federation.v1alpha1.Federation

DestroyFederationRequest

Field	Type	Label	Description
federation_id	string	optional

DestroyFederationResponse

GetFederationRequest

Field	Type	Label	Description
federation_id	string

GetFederationResponse

Field	Type	Label	Description
federation	proto.federation.v1alpha1.Federation

ListFederationsRequest

Field	Type	Label	Description
filter	ListFederationsRequest.Filter	optional

ListFederationsRequest.Filter

Field	Type	Label	Description
org_id	string	optional
trust_zone_id	string	optional
remote_trust_zone_id	string	optional

ListFederationsResponse

Field	Type	Label	Description
federations	proto.federation.v1alpha1.Federation	repeated

FederationService

Method Name	Request Type	Response Type	Description
CreateFederation	CreateFederationRequest	CreateFederationResponse
DestroyFederation	DestroyFederationRequest	DestroyFederationResponse
ListFederations	ListFederationsRequest	ListFederationsResponse
GetFederation	GetFederationRequest	GetFederationResponse

Top

proto/identity/v1alpha1/identity.proto

Identity

Field	Type	Label	Description
id	string
org_id	string
trust_zone_id	string
cluster_id	string
attestation_policy_id	string
ap_binding_id	string
workload_id	string
spiffe_id	string
parent_id	string
selectors	Selector	repeated
dns_names	string	repeated
federations	IdentityFederation	repeated
created_at	google.protobuf.Timestamp

IdentityFederation

Field	Type	Label	Description
trust_zone_id	string
trust_domain	string

Selector

Field	Type	Label	Description
type	string
value	string

Top

proto/connect/identity_service/v1alpha1/identity_service.proto

GetIdentityRequest

Field	Type	Label	Description
identity_id	string

GetIdentityResponse

Field	Type	Label	Description
identity	proto.identity.v1alpha1.Identity

ListIdentitiesRequest

Field	Type	Label	Description
filter	ListIdentitiesRequest.Filter	optional

ListIdentitiesRequest.Filter

Field	Type	Label	Description
org_id	string	optional
trust_zone_id	string	optional
cluster_id	string	optional
attestation_policy_id	string	optional
ap_binding_id	string	optional
workload_id	string	optional
spiffe_id	string	optional

ListIdentitiesResponse

Field	Type	Label	Description
identities	proto.identity.v1alpha1.Identity	repeated

IdentityService

Method Name	Request Type	Response Type	Description
GetIdentity	GetIdentityRequest	GetIdentityResponse
ListIdentities	ListIdentitiesRequest	ListIdentitiesResponse

Top

proto/organization/v1alpha1/organization.proto

Organization

Field	Type	Label	Description
id	string
name	string

Top

proto/connect/organization_service/v1alpha1/organization_service.proto

GetOrganizationRequest

Field	Type	Label	Description
org_id	string	optional

GetOrganizationResponse

Field	Type	Label	Description
organization	proto.organization.v1alpha1.Organization	optional

ListOrganizationsRequest

Field	Type	Label	Description
filter	ListOrganizationsRequest.Filter	optional

ListOrganizationsRequest.Filter

Field	Type	Label	Description
name	string	optional

ListOrganizationsResponse

Field	Type	Label	Description
organizations	proto.organization.v1alpha1.Organization	repeated

OrganizationService

Method Name	Request Type	Response Type	Description
GetOrganization	GetOrganizationRequest	GetOrganizationResponse
ListOrganizations	ListOrganizationsRequest	ListOrganizationsResponse

Top

proto/role_binding/v1alpha1/role_binding.proto

Group

Field	Type	Label	Description
claim_value	string		For users this is matched against the list of values in the “groups” claim of the JWT presented by a user.

Resource

Field	Type	Label	Description
type	string		type can be one of the following: AttestationPolicyBinding AttestationPolicy Cluster FederatedService Federation Organization System TrustZone
id	string

RoleBinding

Field	Type	Label	Description
id	string
role_id	string
user	User
group	Group
resource	Resource

User

Field	Type	Label	Description
subject	string		This is matched against the “sub” claim of the JWT presented by a user.

Top

proto/connect/role_binding_service/v1alpha1/role_binding_service.proto

CreateRoleBindingRequest

Field	Type	Label	Description
role_binding	proto.role_binding.v1alpha1.RoleBinding

CreateRoleBindingResponse

Field	Type	Label	Description
role_binding	proto.role_binding.v1alpha1.RoleBinding

DestroyRoleBindingRequest

Field	Type	Label	Description
role_binding_id	string

DestroyRoleBindingResponse

GetRoleBindingRequest

Field	Type	Label	Description
role_binding_id	string

GetRoleBindingResponse

Field	Type	Label	Description
role_binding	proto.role_binding.v1alpha1.RoleBinding	optional

ListRoleBindingsRequest

Field	Type	Label	Description
filter	ListRoleBindingsRequest.Filter	optional

ListRoleBindingsRequest.Filter

Field	Type	Label	Description
role_id	string	optional
user_subject	string	optional
group_claim_value	string	optional
resource_type	string	optional
resource_id	string	optional

ListRoleBindingsResponse

Field	Type	Label	Description
role_bindings	proto.role_binding.v1alpha1.RoleBinding	repeated

UpdateRoleBindingRequest

Field	Type	Label	Description
role_binding	proto.role_binding.v1alpha1.RoleBinding

UpdateRoleBindingResponse

Field	Type	Label	Description
role_binding	proto.role_binding.v1alpha1.RoleBinding

RoleBindingService

Method Name	Request Type	Response Type	Description
CreateRoleBinding	CreateRoleBindingRequest	CreateRoleBindingResponse
DestroyRoleBinding	DestroyRoleBindingRequest	DestroyRoleBindingResponse
GetRoleBinding	GetRoleBindingRequest	GetRoleBindingResponse
ListRoleBindings	ListRoleBindingsRequest	ListRoleBindingsResponse
UpdateRoleBinding	UpdateRoleBindingRequest	UpdateRoleBindingResponse

Top

proto/trust_zone_server/v1alpha1/trust_zone_server.proto

ConnectK8sPsatConfig

Field	Type	Label	Description
audiences	string	repeated	Audiences that can be presented by SPIRE agents in remote clusters to perform node attestation when this server is using the k8s psat plugin with the Connect datasource. At least 1 must be provided if there are remote clusters in the trust zone.
spire_server_spiffe_id_path	string		Path to use for the SPIFFE ID in the JWT presented by the SPIRE server to the cluster’s API server when this server is using the k8s psat plugin with the Connect datasource. This must be configured to be an allowed subject in the remote cluster’s API server.

TrustZoneServer

TrustZoneServer defines how the server managing a trust zone should be deployed.

Field	Type	Label	Description
id	string		The unique ID of the server. Generated by the server.
trust_zone_id	string		Trust Zone managed by this server. Immutable after creation.
cluster_id	string		Cluster in which the server should be deployed. Immutable after creation.
kubernetes_namespace	string		Kubernetes namespace in which the server should be deployed. If not provided the API service should set this.
kubernetes_service_account	string		Name of kubernetes service account to deploy with the server. If not provided the API service should set this.
org_id	string		Organization to which the server belongs. Derived from the trust zone by the API service.
helm_values	google.protobuf.Struct		Helm values to configure the server install with.
status	TrustZoneServer.Status		Current status of the trust zone server
created_at	google.protobuf.Timestamp		Time of resource creation by user.
last_updated_at	google.protobuf.Timestamp		Times of last resource update by user.
deleted_at	google.protobuf.Timestamp		Time of resource deletion by user.
connect_k8s_psat_config	ConnectK8sPsatConfig		Configuration for the k8s psat node attestor plugin when using a Connect datasource with remote clusters.

TrustZoneServer.Status

Field	Type	Label	Description
status	TrustZoneServerStatus		Last reported status of the trust zone server.
last_transition_time	google.protobuf.Timestamp		When the status of the trust zone server last changed.

TrustZoneServerStatus

Status of a trust zone server

Name	Number	Description
TRUST_ZONE_SERVER_STATUS_UNSPECIFIED	0
TRUST_ZONE_SERVER_STATUS_PROVISIONING	1	Provisioning / Deleting statuses are only applicable for managed trust zone servers
TRUST_ZONE_SERVER_STATUS_PROVISIONED	2
TRUST_ZONE_SERVER_STATUS_PROVISIONING_ERROR	3
TRUST_ZONE_SERVER_STATUS_DELETING	4
TRUST_ZONE_SERVER_STATUS_DELETED	5
TRUST_ZONE_SERVER_STATUS_DELETING_ERROR	6

Top

proto/connect/trust_zone_server_service/v1alpha1/trust_zone_server_service.proto

CreateTrustZoneServerRequest

Field	Type	Label	Description
trust_zone_server	proto.trust_zone_server.v1alpha1.TrustZoneServer

CreateTrustZoneServerResponse

Field	Type	Label	Description
trust_zone_server	proto.trust_zone_server.v1alpha1.TrustZoneServer

DestroyTrustZoneServerRequest

Field	Type	Label	Description
trust_zone_server_id	string

DestroyTrustZoneServerResponse

GetTrustZoneServerRequest

Field	Type	Label	Description
trust_zone_server_id	string

GetTrustZoneServerResponse

Field	Type	Label	Description
trust_zone_server	proto.trust_zone_server.v1alpha1.TrustZoneServer	optional

ListTrustZoneServersRequest

Field	Type	Label	Description
filter	ListTrustZoneServersRequest.Filter

ListTrustZoneServersRequest.Filter

Field	Type	Label	Description
trust_zone_id	string
cluster_id	string
org_id	string

ListTrustZoneServersResponse

Field	Type	Label	Description
trust_zone_servers	proto.trust_zone_server.v1alpha1.TrustZoneServer	repeated

UpdateTrustZoneServerRequest

Field	Type	Label	Description
trust_zone_server	proto.trust_zone_server.v1alpha1.TrustZoneServer
update_mask	UpdateTrustZoneServerRequest.UpdateMask	optional	The list of fields to be updated. If not provided a full replacement will be made.

UpdateTrustZoneServerRequest.UpdateMask

Field	Type	Label	Description
helm_values	bool		Set to true to update helm values of trust zone server to those provided.

UpdateTrustZoneServerResponse

Field	Type	Label	Description
trust_zone_server	proto.trust_zone_server.v1alpha1.TrustZoneServer

UpdateTrustZoneServerStatusRequest

Field	Type	Label	Description
trust_zone_server_id	string
status	proto.trust_zone_server.v1alpha1.TrustZoneServerStatus

UpdateTrustZoneServerStatusResponse

TrustZoneServerService

TrustZoneServerService manages TrustZoneServers.

Method Name	Request Type	Response Type	Description
CreateTrustZoneServer	CreateTrustZoneServerRequest	CreateTrustZoneServerResponse	Create a TrustZoneServer for the given trust zone in the specified cluster. In the submitted resource the ID should not be set and will be generated by the server API.
DestroyTrustZoneServer	DestroyTrustZoneServerRequest	DestroyTrustZoneServerResponse	Destroy a TrustZoneServer. For managed TrustZoneServers this should soft delete the API resource until the managed server is deprovisioned.
GetTrustZoneServer	GetTrustZoneServerRequest	GetTrustZoneServerResponse	Get a TrustZoneServer by ID.
ListTrustZoneServers	ListTrustZoneServersRequest	ListTrustZoneServersResponse	List TrustZoneServers.
UpdateTrustZoneServer	UpdateTrustZoneServerRequest	UpdateTrustZoneServerResponse	Update a TrustZoneServer. Server implementations may prevent some fields from being updated.
UpdateTrustZoneServerStatus	UpdateTrustZoneServerStatusRequest	UpdateTrustZoneServerStatusResponse	Update the status of a trust zone server.

Top

proto/connect/trust_zone_service/v1alpha1/trust_zone_service.proto

Agent

Field	Type	Label	Description
agent_id	string
cluster_id	string
trust_zone_id	string

CreateTrustZoneRequest

Field	Type	Label	Description
trust_zone	proto.trust_zone.v1alpha1.TrustZone

CreateTrustZoneResponse

Field	Type	Label	Description
trust_zone	proto.trust_zone.v1alpha1.TrustZone

DestroyTrustZoneRequest

Field	Type	Label	Description
trust_zone_id	string	optional

DestroyTrustZoneResponse

GetTrustZoneRequest

Field	Type	Label	Description
trust_zone_id	string	optional

GetTrustZoneResponse

Field	Type	Label	Description
trust_zone	proto.trust_zone.v1alpha1.TrustZone	optional

ListTrustZonesRequest

Field	Type	Label	Description
filter	ListTrustZonesRequest.Filter	optional

ListTrustZonesRequest.Filter

Field	Type	Label	Description
name	string	optional
org_id	string	optional
trust_domain	string	optional

ListTrustZonesResponse

Field	Type	Label	Description
trust_zones	proto.trust_zone.v1alpha1.TrustZone	repeated

RegisterAgentRequest

Field	Type	Label	Description
agent	Agent
agent_token	string
bundle	spire.api.types.Bundle

RegisterAgentResponse

Field	Type	Label	Description
agent_id	string

RegisterTrustZoneServerRequest

Field	Type	Label	Description
trust_zone_server	TrustZoneServer		To be deprecated, registration of a trust zone server by just specifying the cluster ID Consumers should provide a trust zone server ID instead
bundle	spire.api.types.Bundle
trust_zone_server_id	string

RegisterTrustZoneServerResponse

Empty for the moment

TrustZoneServer

Field	Type	Label	Description
cluster_id	string

UpdateTrustZoneBundleRequest

Field	Type	Label	Description
bundle	spire.api.types.Bundle
trust_zone_id	string

UpdateTrustZoneBundleResponse

UpdateTrustZoneRequest

Field	Type	Label	Description
trust_zone	proto.trust_zone.v1alpha1.TrustZone

UpdateTrustZoneResponse

Field	Type	Label	Description
trust_zone	proto.trust_zone.v1alpha1.TrustZone

TrustZoneService

Method Name	Request Type	Response Type	Description
CreateTrustZone	CreateTrustZoneRequest	CreateTrustZoneResponse
DestroyTrustZone	DestroyTrustZoneRequest	DestroyTrustZoneResponse
GetTrustZone	GetTrustZoneRequest	GetTrustZoneResponse
ListTrustZones	ListTrustZonesRequest	ListTrustZonesResponse
UpdateTrustZone	UpdateTrustZoneRequest	UpdateTrustZoneResponse
RegisterAgent	RegisterAgentRequest	RegisterAgentResponse
RegisterTrustZoneServer	RegisterTrustZoneServerRequest	RegisterTrustZoneServerResponse
UpdateTrustZoneBundle	UpdateTrustZoneBundleRequest	UpdateTrustZoneBundleResponse

Top

proto/workload/v1alpha1/workload.proto

KubernetesContainer

Field	Type	Label	Description
name	string
image	string

KubernetesMetadata

Field	Type	Label	Description
uid	string
name	string
namespace	string
labels	KubernetesMetadata.LabelsEntry	repeated
annotations	KubernetesMetadata.AnnotationsEntry	repeated
creation_timestamp	google.protobuf.Timestamp

KubernetesMetadata.AnnotationsEntry

Field	Type	Label	Description
key	string
value	string

KubernetesMetadata.LabelsEntry

Field	Type	Label	Description
key	string
value	string

KubernetesPod

Field	Type	Label	Description
metadata	KubernetesMetadata
service_account_name	string
node_name	string
node_uid	string
containers	KubernetesContainer	repeated
start_time	google.protobuf.Timestamp

Observation

Field	Type	Label	Description
type_url	string
value	google.protobuf.Value

Workload

Field	Type	Label	Description
id	string
org_id	string
trust_zone_id	string
cluster_id	string
type	WorkloadType
kubernetes_pod	KubernetesPod
observations	Observation	repeated
observed_timestamp	google.protobuf.Timestamp
deleted	bool

WorkloadType

Name	Number	Description
WORKLOAD_TYPE_UNSPECIFIED	0
WORKLOAD_TYPE_KUBERNETES_POD	1

Top

proto/connect/workload_service/v1alpha1/workload_service.proto

ListWorkloadsRequest

Field	Type	Label	Description
filter	ListWorkloadsRequest.Filter	optional

ListWorkloadsRequest.Filter

Field	Type	Label	Description
org_id	string	optional
trust_zone_id	string	optional
cluster_id	string	optional
max_age	google.protobuf.Duration	optional	max_age filters workloads to those last observed within this duration.

ListWorkloadsResponse

Field	Type	Label	Description
workloads	proto.workload.v1alpha1.Workload	repeated

PublishWorkloadsRequest

Field	Type	Label	Description
workloads	proto.workload.v1alpha1.Workload	repeated

PublishWorkloadsResponse

WorkloadService

Method Name	Request Type	Response Type	Description
ListWorkloads	ListWorkloadsRequest	ListWorkloadsResponse
PublishWorkloads	PublishWorkloadsRequest stream	PublishWorkloadsResponse

Top

proto/provision_plugin/v1alpha1/plugin.proto

DeployRequest

Field	Type	Label	Description
data_source	uint32	optional
kube_cfg_file	string	optional
trust_zone_names	string	repeated

DeployResponse

Field	Type	Label	Description
status	Status	optional

GetHelmValuesRequest

Field	Type	Label	Description
data_source	uint32	optional
trust_zone_name	string	optional
cluster_name	string	optional

GetHelmValuesResponse

Field	Type	Label	Description
helm_values	google.protobuf.Struct	optional

Status

Field	Type	Label	Description
stage	string	optional
message	string	optional
done	bool	optional
error	string	optional

TearDownRequest

Field	Type	Label	Description
data_source	uint32	optional
kube_cfg_file	string	optional
trust_zone_names	string	repeated

TearDownResponse

Field	Type	Label	Description
status	Status	optional

ValidateRequest

ValidateResponse

ProvisionPluginService

Method Name	Request Type	Response Type	Description
Validate	ValidateRequest	ValidateResponse
Deploy	DeployRequest	DeployResponse stream
TearDown	TearDownRequest	TearDownResponse stream
GetHelmValues	GetHelmValuesRequest	GetHelmValuesResponse

Scalar Value Types

.proto Type	Notes	C++	Java	Python	Go	C#	PHP	Ruby
double		double	double	float	float64	double	float	Float
float		float	float	float	float32	float	float	Float
int32	Uses variable-length encoding. Inefficient for encoding negative numbers – if your field is likely to have negative values, use sint32 instead.	int32	int	int	int32	int	integer	Bignum or Fixnum (as required)
int64	Uses variable-length encoding. Inefficient for encoding negative numbers – if your field is likely to have negative values, use sint64 instead.	int64	long	int/long	int64	long	integer/string	Bignum
uint32	Uses variable-length encoding.	uint32	int	int/long	uint32	uint	integer	Bignum or Fixnum (as required)
uint64	Uses variable-length encoding.	uint64	long	int/long	uint64	ulong	integer/string	Bignum or Fixnum (as required)
sint32	Uses variable-length encoding. Signed int value. These more efficiently encode negative numbers than regular int32s.	int32	int	int	int32	int	integer	Bignum or Fixnum (as required)
sint64	Uses variable-length encoding. Signed int value. These more efficiently encode negative numbers than regular int64s.	int64	long	int/long	int64	long	integer/string	Bignum
fixed32	Always four bytes. More efficient than uint32 if values are often greater than 2^28.	uint32	int	int	uint32	uint	integer	Bignum or Fixnum (as required)
fixed64	Always eight bytes. More efficient than uint64 if values are often greater than 2^56.	uint64	long	int/long	uint64	ulong	integer/string	Bignum
sfixed32	Always four bytes.	int32	int	int	int32	int	integer	Bignum or Fixnum (as required)
sfixed64	Always eight bytes.	int64	long	int/long	int64	long	integer/string	Bignum
bool		bool	boolean	boolean	bool	bool	boolean	TrueClass/FalseClass
string	A string must always contain UTF-8 encoded or 7-bit ASCII text.	string	String	str/unicode	string	string	string	String (UTF-8)
bytes	May contain any arbitrary sequence of bytes.	string	ByteString	str	[]byte	ByteString	string	String (ASCII-8BIT)