auth

package
v2.6.11 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Oct 19, 2023 License: Apache-2.0 Imports: 20 Imported by: 1

Documentation

Index

Constants

View Source 
const (
	// ContextTokenKey is the key of the auth token in an
	// authenticated context
	ContextTokenKey = constants.ContextTokenKey

	// ClusterRoleBindingKey is a key in etcd, in the roleBindings collection,
	// that contains the set of role bindings for the cluster. These are frequently
	// accessed so we cache them.
	ClusterRoleBindingKey = "CLUSTER:"

	// UserPrefix indicates that this Subject is a Pachyderm user synced from an IDP.
	UserPrefix = "user:"

	// RobotPrefix indicates that this Subject is a Pachyderm robot user. Any
	// string (with this prefix) is a logical Pachyderm robot user.
	RobotPrefix = "robot:"

	// InternalPrefix indicates that this Subject is internal to Pachyderm itself,
	// created to run a background task
	InternalPrefix = "internal:"

	// PipelinePrefix indicates that this Subject is a PPS pipeline. Any string
	// (with this prefix) is a logical PPS pipeline (even though the pipeline may
	// not exist).
	PipelinePrefix = "pipeline:"

	// PachPrefix indicates that this Subject is an internal Pachyderm user.
	PachPrefix = "pach:"

	// GroupPrefix indicates that this Subject is a group.
	GroupPrefix = "group:"

	// RootUser is the user created when auth is initialized. Only one token
	// can be created for this user (during auth activation) and they cannot
	// be removed from the set of cluster super-admins.
	RootUser = "pach:root"

	// ClusterAdminRole is the role for cluster admins, who have full access to all APIs
	ClusterAdminRole = "clusterAdmin"

	// RepoOwnerRole is a role which grants access to read, write and modify the role bindings for a repo
	RepoOwnerRole = "repoOwner"

	// RepoWriterRole is a role which grants ability to both read from and write to a repo
	RepoWriterRole = "repoWriter"

	// RepoReaderRole is a role which grants ability to both read from a repo
	RepoReaderRole = "repoReader"

	// IDPAdminRole is a role which grants the ability to configure OIDC apps.
	OIDCAppAdminRole = "oidcAppAdmin"

	// IDPAdminRole is a role which grants the ability to configure identity providers.
	IDPAdminRole = "idpAdmin"

	// IdentityAdmin is a role which grants the ability to configure the identity service.
	IdentityAdminRole = "identityAdmin"

	// DebuggerRole is a role which grants the ability to produce debug dumps.
	DebuggerRole = "debugger"

	// LokiLogReaderRole is a role which grants the ability to read logs from Loki.
	LokiLogReaderRole = "lokiLogReader"

	// RobotUserRole is a role which grants the ability to generate tokens for robot
	// users.
	RobotUserRole = "robotUser"

	// LicenseAdminRole is a role which grants the ability to register new
	// pachds with the license server, manage pachds and update the enterprise license.
	LicenseAdminRole = "licenseAdmin"

	// AllClusterUsersSubject is a subject which applies a role binding to all authenticated users
	AllClusterUsersSubject = "allClusterUsers"

	// SecretAdminRole is a role which grants the ability to manage secrets
	SecretAdminRole = "secretAdmin"

	// PachdLogReaderRole is a role which grants the ability to pull pachd logs
	PachdLogReaderRole = "pachdLogReader"

	// ProjectViewerRole is a role which grants the ability to view resources under a project, such as repos and pipelines
	ProjectViewerRole = "projectViewer"

	// ProjectWriterRole is a role which grants the ability to create resources under a project, such as repos and pipelines
	ProjectWriterRole = "projectWriter"

	// ProjectOwnerRole is a role which grants the ability to manage RoleBindings, as well as delete resources within a project
	ProjectOwnerRole = "projectOwner"

	// ProjectCreatorRole is a role which grants the ability to create projects
	ProjectCreatorRole = "projectCreator"
)

Variables

View Source 
var (
	// ErrNotActivated is returned by an Auth API if the Auth service
	// has not been activated.
	//
	// Note: This error message string is matched in the UI. If edited,
	// it also needs to be updated in the UI code
	ErrNotActivated = status.Error(codes.Unimplemented, "the auth service is not activated")

	// ErrAlreadyActivated is returned by Activate if the Auth service
	// is already activated.
	ErrAlreadyActivated = status.Error(codes.Unimplemented, "the auth service is already activated")

	// ErrNotSignedIn indicates that the caller isn't signed in
	//
	// Note: This error message string is matched in the UI. If edited,
	// it also needs to be updated in the UI code
	ErrNotSignedIn = status.Error(codes.Unauthenticated, "no authentication token (try logging in)")

	// ErrNoMetadata is returned by the Auth API if the caller sent a request
	// containing no auth token.
	ErrNoMetadata = status.Error(codes.Internal, "no authentication metadata (try logging in)")

	// ErrBadToken is returned by the Auth API if the caller's token is corrupted
	// or has expired.
	ErrBadToken = status.Error(codes.Unauthenticated, "provided auth token is corrupted or has expired (try logging in again)")

	// ErrExpiredToken is returned by the Auth API if a restored token expired in
	// the past.
	ErrExpiredToken = status.Error(codes.Internal, "token expiration is in the past")
)
View Source 
var (
	ErrInvalidLengthAuth        = fmt.Errorf("proto: negative length found during unmarshaling")
	ErrIntOverflowAuth          = fmt.Errorf("proto: integer overflow")
	ErrUnexpectedEndOfGroupAuth = fmt.Errorf("proto: unexpected end of group")
)
View Source 
var DefaultOIDCScopes = []string{"email", "profile", "groups", oidc.ScopeOpenID}
View Source 
var Permission_name = map[int32]string{
	0:   "PERMISSION_UNKNOWN",
	100: "CLUSTER_MODIFY_BINDINGS",
	101: "CLUSTER_GET_BINDINGS",
	148: "CLUSTER_GET_PACHD_LOGS",
	150: "CLUSTER_GET_LOKI_LOGS",
	102: "CLUSTER_AUTH_ACTIVATE",
	103: "CLUSTER_AUTH_DEACTIVATE",
	104: "CLUSTER_AUTH_GET_CONFIG",
	105: "CLUSTER_AUTH_SET_CONFIG",
	139: "CLUSTER_AUTH_GET_ROBOT_TOKEN",
	109: "CLUSTER_AUTH_MODIFY_GROUP_MEMBERS",
	110: "CLUSTER_AUTH_GET_GROUPS",
	111: "CLUSTER_AUTH_GET_GROUP_USERS",
	112: "CLUSTER_AUTH_EXTRACT_TOKENS",
	113: "CLUSTER_AUTH_RESTORE_TOKEN",
	141: "CLUSTER_AUTH_GET_PERMISSIONS_FOR_PRINCIPAL",
	140: "CLUSTER_AUTH_DELETE_EXPIRED_TOKENS",
	142: "CLUSTER_AUTH_REVOKE_USER_TOKENS",
	147: "CLUSTER_AUTH_ROTATE_ROOT_TOKEN",
	114: "CLUSTER_ENTERPRISE_ACTIVATE",
	115: "CLUSTER_ENTERPRISE_HEARTBEAT",
	116: "CLUSTER_ENTERPRISE_GET_CODE",
	117: "CLUSTER_ENTERPRISE_DEACTIVATE",
	149: "CLUSTER_ENTERPRISE_PAUSE",
	118: "CLUSTER_IDENTITY_SET_CONFIG",
	119: "CLUSTER_IDENTITY_GET_CONFIG",
	120: "CLUSTER_IDENTITY_CREATE_IDP",
	121: "CLUSTER_IDENTITY_UPDATE_IDP",
	122: "CLUSTER_IDENTITY_LIST_IDPS",
	123: "CLUSTER_IDENTITY_GET_IDP",
	124: "CLUSTER_IDENTITY_DELETE_IDP",
	125: "CLUSTER_IDENTITY_CREATE_OIDC_CLIENT",
	126: "CLUSTER_IDENTITY_UPDATE_OIDC_CLIENT",
	127: "CLUSTER_IDENTITY_LIST_OIDC_CLIENTS",
	128: "CLUSTER_IDENTITY_GET_OIDC_CLIENT",
	129: "CLUSTER_IDENTITY_DELETE_OIDC_CLIENT",
	131: "CLUSTER_DEBUG_DUMP",
	132: "CLUSTER_LICENSE_ACTIVATE",
	133: "CLUSTER_LICENSE_GET_CODE",
	134: "CLUSTER_LICENSE_ADD_CLUSTER",
	135: "CLUSTER_LICENSE_UPDATE_CLUSTER",
	136: "CLUSTER_LICENSE_DELETE_CLUSTER",
	137: "CLUSTER_LICENSE_LIST_CLUSTERS",
	143: "CLUSTER_CREATE_SECRET",
	144: "CLUSTER_LIST_SECRETS",
	145: "SECRET_DELETE",
	146: "SECRET_INSPECT",
	138: "CLUSTER_DELETE_ALL",
	200: "REPO_READ",
	201: "REPO_WRITE",
	202: "REPO_MODIFY_BINDINGS",
	203: "REPO_DELETE",
	204: "REPO_INSPECT_COMMIT",
	205: "REPO_LIST_COMMIT",
	206: "REPO_DELETE_COMMIT",
	207: "REPO_CREATE_BRANCH",
	208: "REPO_LIST_BRANCH",
	209: "REPO_DELETE_BRANCH",
	210: "REPO_INSPECT_FILE",
	211: "REPO_LIST_FILE",
	212: "REPO_ADD_PIPELINE_READER",
	213: "REPO_REMOVE_PIPELINE_READER",
	214: "REPO_ADD_PIPELINE_WRITER",
	301: "PIPELINE_LIST_JOB",
	400: "PROJECT_CREATE",
	401: "PROJECT_DELETE",
	402: "PROJECT_LIST_REPO",
	403: "PROJECT_CREATE_REPO",
	404: "PROJECT_MODIFY_BINDINGS",
}
View Source 
var Permission_value = map[string]int32{
	"PERMISSION_UNKNOWN":                         0,
	"CLUSTER_MODIFY_BINDINGS":                    100,
	"CLUSTER_GET_BINDINGS":                       101,
	"CLUSTER_GET_PACHD_LOGS":                     148,
	"CLUSTER_GET_LOKI_LOGS":                      150,
	"CLUSTER_AUTH_ACTIVATE":                      102,
	"CLUSTER_AUTH_DEACTIVATE":                    103,
	"CLUSTER_AUTH_GET_CONFIG":                    104,
	"CLUSTER_AUTH_SET_CONFIG":                    105,
	"CLUSTER_AUTH_GET_ROBOT_TOKEN":               139,
	"CLUSTER_AUTH_MODIFY_GROUP_MEMBERS":          109,
	"CLUSTER_AUTH_GET_GROUPS":                    110,
	"CLUSTER_AUTH_GET_GROUP_USERS":               111,
	"CLUSTER_AUTH_EXTRACT_TOKENS":                112,
	"CLUSTER_AUTH_RESTORE_TOKEN":                 113,
	"CLUSTER_AUTH_GET_PERMISSIONS_FOR_PRINCIPAL": 141,
	"CLUSTER_AUTH_DELETE_EXPIRED_TOKENS":         140,
	"CLUSTER_AUTH_REVOKE_USER_TOKENS":            142,
	"CLUSTER_AUTH_ROTATE_ROOT_TOKEN":             147,
	"CLUSTER_ENTERPRISE_ACTIVATE":                114,
	"CLUSTER_ENTERPRISE_HEARTBEAT":               115,
	"CLUSTER_ENTERPRISE_GET_CODE":                116,
	"CLUSTER_ENTERPRISE_DEACTIVATE":              117,
	"CLUSTER_ENTERPRISE_PAUSE":                   149,
	"CLUSTER_IDENTITY_SET_CONFIG":                118,
	"CLUSTER_IDENTITY_GET_CONFIG":                119,
	"CLUSTER_IDENTITY_CREATE_IDP":                120,
	"CLUSTER_IDENTITY_UPDATE_IDP":                121,
	"CLUSTER_IDENTITY_LIST_IDPS":                 122,
	"CLUSTER_IDENTITY_GET_IDP":                   123,
	"CLUSTER_IDENTITY_DELETE_IDP":                124,
	"CLUSTER_IDENTITY_CREATE_OIDC_CLIENT":        125,
	"CLUSTER_IDENTITY_UPDATE_OIDC_CLIENT":        126,
	"CLUSTER_IDENTITY_LIST_OIDC_CLIENTS":         127,
	"CLUSTER_IDENTITY_GET_OIDC_CLIENT":           128,
	"CLUSTER_IDENTITY_DELETE_OIDC_CLIENT":        129,
	"CLUSTER_DEBUG_DUMP":                         131,
	"CLUSTER_LICENSE_ACTIVATE":                   132,
	"CLUSTER_LICENSE_GET_CODE":                   133,
	"CLUSTER_LICENSE_ADD_CLUSTER":                134,
	"CLUSTER_LICENSE_UPDATE_CLUSTER":             135,
	"CLUSTER_LICENSE_DELETE_CLUSTER":             136,
	"CLUSTER_LICENSE_LIST_CLUSTERS":              137,
	"CLUSTER_CREATE_SECRET":                      143,
	"CLUSTER_LIST_SECRETS":                       144,
	"SECRET_DELETE":                              145,
	"SECRET_INSPECT":                             146,
	"CLUSTER_DELETE_ALL":                         138,
	"REPO_READ":                                  200,
	"REPO_WRITE":                                 201,
	"REPO_MODIFY_BINDINGS":                       202,
	"REPO_DELETE":                                203,
	"REPO_INSPECT_COMMIT":                        204,
	"REPO_LIST_COMMIT":                           205,
	"REPO_DELETE_COMMIT":                         206,
	"REPO_CREATE_BRANCH":                         207,
	"REPO_LIST_BRANCH":                           208,
	"REPO_DELETE_BRANCH":                         209,
	"REPO_INSPECT_FILE":                          210,
	"REPO_LIST_FILE":                             211,
	"REPO_ADD_PIPELINE_READER":                   212,
	"REPO_REMOVE_PIPELINE_READER":                213,
	"REPO_ADD_PIPELINE_WRITER":                   214,
	"PIPELINE_LIST_JOB":                          301,
	"PROJECT_CREATE":                             400,
	"PROJECT_DELETE":                             401,
	"PROJECT_LIST_REPO":                          402,
	"PROJECT_CREATE_REPO":                        403,
	"PROJECT_MODIFY_BINDINGS":                    404,
}
View Source 
var ResourceType_name = map[int32]string{
	0: "RESOURCE_TYPE_UNKNOWN",
	1: "CLUSTER",
	2: "REPO",
	3: "SPEC_REPO",
	4: "PROJECT",
}
View Source 
var ResourceType_value = map[string]int32{
	"RESOURCE_TYPE_UNKNOWN": 0,
	"CLUSTER":               1,
	"REPO":                  2,
	"SPEC_REPO":             3,
	"PROJECT":               4,
}

Functions

func GetAuthToken 

func GetAuthToken(ctx context.Context) (string, error)

GetAuthToken extracts the auth token embedded in 'ctx', if there is one

func HashToken 

func HashToken(token string) string

HashToken converts a token to a cryptographic hash. We don't want to store tokens verbatim in the database, as then whoever that has access to the database has access to all tokens.

func IsErrAlreadyActivated 

func IsErrAlreadyActivated(err error) bool

IsErrAlreadyActivated checks if an error is a ErrAlreadyActivated

func IsErrBadToken 

func IsErrBadToken(err error) bool

IsErrBadToken returns true if 'err' is a ErrBadToken

func IsErrExpiredToken 

func IsErrExpiredToken(err error) bool

IsErrExpiredToken returns true if 'err' is a ErrExpiredToken

func IsErrInvalidPrincipal 

func IsErrInvalidPrincipal(err error) bool

IsErrInvalidPrincipal returns true if 'err' is an ErrInvalidPrincipal

func IsErrNoMetadata 

func IsErrNoMetadata(err error) bool

IsErrNoMetadata returns true if 'err' is an ErrNoMetadata (uses string comparison to work across RPC boundaries)

func IsErrNoRoleBinding 

func IsErrNoRoleBinding(err error) bool

IsErrNoRoleBinding checks if an error is a ErrNoRoleBinding

func IsErrNotActivated 

func IsErrNotActivated(err error) bool

IsErrNotActivated checks if an error is a ErrNotActivated

func IsErrNotAuthorized 

func IsErrNotAuthorized(err error) bool

IsErrNotAuthorized checks if an error is a ErrNotAuthorized

func IsErrNotSignedIn 

func IsErrNotSignedIn(err error) bool

IsErrNotSignedIn returns true if 'err' is a ErrNotSignedIn

func IsErrTooShortTTL 

func IsErrTooShortTTL(err error) bool

IsErrTooShortTTL returns true if 'err' is a ErrTooShortTTL

func RegisterAPIServer 

func RegisterAPIServer(s *grpc.Server, srv APIServer)

Types

type APIClient 

type APIClient interface {
	// Activate/Deactivate the auth API. 'Activate' sets an initial set of admins
	// for the Pachyderm cluster, and 'Deactivate' removes all ACLs, tokens, and
	// admins from the Pachyderm cluster, making all data publicly accessable
	Activate(ctx context.Context, in *ActivateRequest, opts ...grpc.CallOption) (*ActivateResponse, error)
	Deactivate(ctx context.Context, in *DeactivateRequest, opts ...grpc.CallOption) (*DeactivateResponse, error)
	GetConfiguration(ctx context.Context, in *GetConfigurationRequest, opts ...grpc.CallOption) (*GetConfigurationResponse, error)
	SetConfiguration(ctx context.Context, in *SetConfigurationRequest, opts ...grpc.CallOption) (*SetConfigurationResponse, error)
	Authenticate(ctx context.Context, in *AuthenticateRequest, opts ...grpc.CallOption) (*AuthenticateResponse, error)
	Authorize(ctx context.Context, in *AuthorizeRequest, opts ...grpc.CallOption) (*AuthorizeResponse, error)
	GetPermissions(ctx context.Context, in *GetPermissionsRequest, opts ...grpc.CallOption) (*GetPermissionsResponse, error)
	GetPermissionsForPrincipal(ctx context.Context, in *GetPermissionsForPrincipalRequest, opts ...grpc.CallOption) (*GetPermissionsResponse, error)
	WhoAmI(ctx context.Context, in *WhoAmIRequest, opts ...grpc.CallOption) (*WhoAmIResponse, error)
	GetRolesForPermission(ctx context.Context, in *GetRolesForPermissionRequest, opts ...grpc.CallOption) (*GetRolesForPermissionResponse, error)
	ModifyRoleBinding(ctx context.Context, in *ModifyRoleBindingRequest, opts ...grpc.CallOption) (*ModifyRoleBindingResponse, error)
	GetRoleBinding(ctx context.Context, in *GetRoleBindingRequest, opts ...grpc.CallOption) (*GetRoleBindingResponse, error)
	GetOIDCLogin(ctx context.Context, in *GetOIDCLoginRequest, opts ...grpc.CallOption) (*GetOIDCLoginResponse, error)
	GetRobotToken(ctx context.Context, in *GetRobotTokenRequest, opts ...grpc.CallOption) (*GetRobotTokenResponse, error)
	RevokeAuthToken(ctx context.Context, in *RevokeAuthTokenRequest, opts ...grpc.CallOption) (*RevokeAuthTokenResponse, error)
	RevokeAuthTokensForUser(ctx context.Context, in *RevokeAuthTokensForUserRequest, opts ...grpc.CallOption) (*RevokeAuthTokensForUserResponse, error)
	SetGroupsForUser(ctx context.Context, in *SetGroupsForUserRequest, opts ...grpc.CallOption) (*SetGroupsForUserResponse, error)
	ModifyMembers(ctx context.Context, in *ModifyMembersRequest, opts ...grpc.CallOption) (*ModifyMembersResponse, error)
	GetGroups(ctx context.Context, in *GetGroupsRequest, opts ...grpc.CallOption) (*GetGroupsResponse, error)
	GetGroupsForPrincipal(ctx context.Context, in *GetGroupsForPrincipalRequest, opts ...grpc.CallOption) (*GetGroupsResponse, error)
	GetUsers(ctx context.Context, in *GetUsersRequest, opts ...grpc.CallOption) (*GetUsersResponse, error)
	ExtractAuthTokens(ctx context.Context, in *ExtractAuthTokensRequest, opts ...grpc.CallOption) (*ExtractAuthTokensResponse, error)
	RestoreAuthToken(ctx context.Context, in *RestoreAuthTokenRequest, opts ...grpc.CallOption) (*RestoreAuthTokenResponse, error)
	DeleteExpiredAuthTokens(ctx context.Context, in *DeleteExpiredAuthTokensRequest, opts ...grpc.CallOption) (*DeleteExpiredAuthTokensResponse, error)
	RotateRootToken(ctx context.Context, in *RotateRootTokenRequest, opts ...grpc.CallOption) (*RotateRootTokenResponse, error)
}

APIClient is the client API for API service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://godoc.org/google.golang.org/grpc#ClientConn.NewStream.

func NewAPIClient 

func NewAPIClient(cc *grpc.ClientConn) APIClient

type APIServer 

type APIServer interface {
	// Activate/Deactivate the auth API. 'Activate' sets an initial set of admins
	// for the Pachyderm cluster, and 'Deactivate' removes all ACLs, tokens, and
	// admins from the Pachyderm cluster, making all data publicly accessable
	Activate(context.Context, *ActivateRequest) (*ActivateResponse, error)
	Deactivate(context.Context, *DeactivateRequest) (*DeactivateResponse, error)
	GetConfiguration(context.Context, *GetConfigurationRequest) (*GetConfigurationResponse, error)
	SetConfiguration(context.Context, *SetConfigurationRequest) (*SetConfigurationResponse, error)
	Authenticate(context.Context, *AuthenticateRequest) (*AuthenticateResponse, error)
	Authorize(context.Context, *AuthorizeRequest) (*AuthorizeResponse, error)
	GetPermissions(context.Context, *GetPermissionsRequest) (*GetPermissionsResponse, error)
	GetPermissionsForPrincipal(context.Context, *GetPermissionsForPrincipalRequest) (*GetPermissionsResponse, error)
	WhoAmI(context.Context, *WhoAmIRequest) (*WhoAmIResponse, error)
	GetRolesForPermission(context.Context, *GetRolesForPermissionRequest) (*GetRolesForPermissionResponse, error)
	ModifyRoleBinding(context.Context, *ModifyRoleBindingRequest) (*ModifyRoleBindingResponse, error)
	GetRoleBinding(context.Context, *GetRoleBindingRequest) (*GetRoleBindingResponse, error)
	GetOIDCLogin(context.Context, *GetOIDCLoginRequest) (*GetOIDCLoginResponse, error)
	GetRobotToken(context.Context, *GetRobotTokenRequest) (*GetRobotTokenResponse, error)
	RevokeAuthToken(context.Context, *RevokeAuthTokenRequest) (*RevokeAuthTokenResponse, error)
	RevokeAuthTokensForUser(context.Context, *RevokeAuthTokensForUserRequest) (*RevokeAuthTokensForUserResponse, error)
	SetGroupsForUser(context.Context, *SetGroupsForUserRequest) (*SetGroupsForUserResponse, error)
	ModifyMembers(context.Context, *ModifyMembersRequest) (*ModifyMembersResponse, error)
	GetGroups(context.Context, *GetGroupsRequest) (*GetGroupsResponse, error)
	GetGroupsForPrincipal(context.Context, *GetGroupsForPrincipalRequest) (*GetGroupsResponse, error)
	GetUsers(context.Context, *GetUsersRequest) (*GetUsersResponse, error)
	ExtractAuthTokens(context.Context, *ExtractAuthTokensRequest) (*ExtractAuthTokensResponse, error)
	RestoreAuthToken(context.Context, *RestoreAuthTokenRequest) (*RestoreAuthTokenResponse, error)
	DeleteExpiredAuthTokens(context.Context, *DeleteExpiredAuthTokensRequest) (*DeleteExpiredAuthTokensResponse, error)
	RotateRootToken(context.Context, *RotateRootTokenRequest) (*RotateRootTokenResponse, error)
}

APIServer is the server API for API service.

type ActivateRequest 

type ActivateRequest struct {
	// If set, this token is used as the root user login token. Otherwise the root token
	// is randomly generated and returned in the response.
	RootToken            string   `protobuf:"bytes,1,opt,name=root_token,json=rootToken,proto3" json:"root_token,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

ActivateRequest enables authentication on the cluster. It issues an auth token with no expiration for the irrevocable admin user `pach:root`.

func (*ActivateRequest) Descriptor 

func (*ActivateRequest) Descriptor() ([]byte, []int)

func (*ActivateRequest) GetRootToken 

func (m *ActivateRequest) GetRootToken() string

func (*ActivateRequest) Marshal 

func (m *ActivateRequest) Marshal() (dAtA []byte, err error)

func (*ActivateRequest) MarshalLogObject 

func (x *ActivateRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*ActivateRequest) MarshalTo 

func (m *ActivateRequest) MarshalTo(dAtA []byte) (int, error)

func (*ActivateRequest) MarshalToSizedBuffer 

func (m *ActivateRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ActivateRequest) ProtoMessage 

func (*ActivateRequest) ProtoMessage()

func (*ActivateRequest) Reset 

func (m *ActivateRequest) Reset()

func (*ActivateRequest) Size 

func (m *ActivateRequest) Size() (n int)

func (*ActivateRequest) String 

func (m *ActivateRequest) String() string

func (*ActivateRequest) Unmarshal 

func (m *ActivateRequest) Unmarshal(dAtA []byte) error

func (*ActivateRequest) XXX_DiscardUnknown 

func (m *ActivateRequest) XXX_DiscardUnknown()

func (*ActivateRequest) XXX_Marshal 

func (m *ActivateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ActivateRequest) XXX_Merge 

func (m *ActivateRequest) XXX_Merge(src proto.Message)

func (*ActivateRequest) XXX_Size 

func (m *ActivateRequest) XXX_Size() int

func (*ActivateRequest) XXX_Unmarshal 

func (m *ActivateRequest) XXX_Unmarshal(b []byte) error

type ActivateResponse 

type ActivateResponse struct {
	// pach_token authenticates the caller with Pachyderm (if you want to perform
	// Pachyderm operations after auth has been activated as themselves, you must
	// present this token along with your regular request)
	PachToken            string   `protobuf:"bytes,1,opt,name=pach_token,json=pachToken,proto3" json:"pach_token,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*ActivateResponse) Descriptor 

func (*ActivateResponse) Descriptor() ([]byte, []int)

func (*ActivateResponse) GetPachToken 

func (m *ActivateResponse) GetPachToken() string

func (*ActivateResponse) Marshal 

func (m *ActivateResponse) Marshal() (dAtA []byte, err error)

func (*ActivateResponse) MarshalLogObject 

func (x *ActivateResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*ActivateResponse) MarshalTo 

func (m *ActivateResponse) MarshalTo(dAtA []byte) (int, error)

func (*ActivateResponse) MarshalToSizedBuffer 

func (m *ActivateResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ActivateResponse) ProtoMessage 

func (*ActivateResponse) ProtoMessage()

func (*ActivateResponse) Reset 

func (m *ActivateResponse) Reset()

func (*ActivateResponse) Size 

func (m *ActivateResponse) Size() (n int)

func (*ActivateResponse) String 

func (m *ActivateResponse) String() string

func (*ActivateResponse) Unmarshal 

func (m *ActivateResponse) Unmarshal(dAtA []byte) error

func (*ActivateResponse) XXX_DiscardUnknown 

func (m *ActivateResponse) XXX_DiscardUnknown()

func (*ActivateResponse) XXX_Marshal 

func (m *ActivateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ActivateResponse) XXX_Merge 

func (m *ActivateResponse) XXX_Merge(src proto.Message)

func (*ActivateResponse) XXX_Size 

func (m *ActivateResponse) XXX_Size() int

func (*ActivateResponse) XXX_Unmarshal 

func (m *ActivateResponse) XXX_Unmarshal(b []byte) error

type AuthenticateRequest 

type AuthenticateRequest struct {
	// This is the session state that Pachyderm creates in order to keep track of
	// information related to the current OIDC session.
	OIDCState string `protobuf:"bytes,1,opt,name=oidc_state,json=oidcState,proto3" json:"oidc_state,omitempty"`
	// This is an ID Token issued by the OIDC provider.
	IdToken              string   `protobuf:"bytes,2,opt,name=id_token,json=idToken,proto3" json:"id_token,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*AuthenticateRequest) Descriptor 

func (*AuthenticateRequest) Descriptor() ([]byte, []int)

func (*AuthenticateRequest) GetIdToken 

func (m *AuthenticateRequest) GetIdToken() string

func (*AuthenticateRequest) GetOIDCState 

func (m *AuthenticateRequest) GetOIDCState() string

func (*AuthenticateRequest) Marshal 

func (m *AuthenticateRequest) Marshal() (dAtA []byte, err error)

func (*AuthenticateRequest) MarshalLogObject 

func (x *AuthenticateRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*AuthenticateRequest) MarshalTo 

func (m *AuthenticateRequest) MarshalTo(dAtA []byte) (int, error)

func (*AuthenticateRequest) MarshalToSizedBuffer 

func (m *AuthenticateRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*AuthenticateRequest) ProtoMessage 

func (*AuthenticateRequest) ProtoMessage()

func (*AuthenticateRequest) Reset 

func (m *AuthenticateRequest) Reset()

func (*AuthenticateRequest) Size 

func (m *AuthenticateRequest) Size() (n int)

func (*AuthenticateRequest) String 

func (m *AuthenticateRequest) String() string

func (*AuthenticateRequest) Unmarshal 

func (m *AuthenticateRequest) Unmarshal(dAtA []byte) error

func (*AuthenticateRequest) XXX_DiscardUnknown 

func (m *AuthenticateRequest) XXX_DiscardUnknown()

func (*AuthenticateRequest) XXX_Marshal 

func (m *AuthenticateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*AuthenticateRequest) XXX_Merge 

func (m *AuthenticateRequest) XXX_Merge(src proto.Message)

func (*AuthenticateRequest) XXX_Size 

func (m *AuthenticateRequest) XXX_Size() int

func (*AuthenticateRequest) XXX_Unmarshal 

func (m *AuthenticateRequest) XXX_Unmarshal(b []byte) error

type AuthenticateResponse 

type AuthenticateResponse struct {
	// pach_token authenticates the caller with Pachyderm (if you want to perform
	// Pachyderm operations after auth has been activated as themselves, you must
	// present this token along with your regular request)
	PachToken            string   `protobuf:"bytes,1,opt,name=pach_token,json=pachToken,proto3" json:"pach_token,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*AuthenticateResponse) Descriptor 

func (*AuthenticateResponse) Descriptor() ([]byte, []int)

func (*AuthenticateResponse) GetPachToken 

func (m *AuthenticateResponse) GetPachToken() string

func (*AuthenticateResponse) Marshal 

func (m *AuthenticateResponse) Marshal() (dAtA []byte, err error)

func (*AuthenticateResponse) MarshalLogObject 

func (x *AuthenticateResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*AuthenticateResponse) MarshalTo 

func (m *AuthenticateResponse) MarshalTo(dAtA []byte) (int, error)

func (*AuthenticateResponse) MarshalToSizedBuffer 

func (m *AuthenticateResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*AuthenticateResponse) ProtoMessage 

func (*AuthenticateResponse) ProtoMessage()

func (*AuthenticateResponse) Reset 

func (m *AuthenticateResponse) Reset()

func (*AuthenticateResponse) Size 

func (m *AuthenticateResponse) Size() (n int)

func (*AuthenticateResponse) String 

func (m *AuthenticateResponse) String() string

func (*AuthenticateResponse) Unmarshal 

func (m *AuthenticateResponse) Unmarshal(dAtA []byte) error

func (*AuthenticateResponse) XXX_DiscardUnknown 

func (m *AuthenticateResponse) XXX_DiscardUnknown()

func (*AuthenticateResponse) XXX_Marshal 

func (m *AuthenticateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*AuthenticateResponse) XXX_Merge 

func (m *AuthenticateResponse) XXX_Merge(src proto.Message)

func (*AuthenticateResponse) XXX_Size 

func (m *AuthenticateResponse) XXX_Size() int

func (*AuthenticateResponse) XXX_Unmarshal 

func (m *AuthenticateResponse) XXX_Unmarshal(b []byte) error

type AuthorizeRequest 

type AuthorizeRequest struct {
	Resource *Resource `protobuf:"bytes,1,opt,name=resource,proto3" json:"resource,omitempty"`
	// permissions are the operations the caller is attempting to perform
	Permissions          []Permission `protobuf:"varint,2,rep,packed,name=permissions,proto3,enum=auth_v2.Permission" json:"permissions,omitempty"`
	XXX_NoUnkeyedLiteral struct{}     `json:"-"`
	XXX_unrecognized     []byte       `json:"-"`
	XXX_sizecache        int32        `json:"-"`
}

func (*AuthorizeRequest) Descriptor 

func (*AuthorizeRequest) Descriptor() ([]byte, []int)

func (*AuthorizeRequest) GetPermissions 

func (m *AuthorizeRequest) GetPermissions() []Permission

func (*AuthorizeRequest) GetResource 

func (m *AuthorizeRequest) GetResource() *Resource

func (*AuthorizeRequest) Marshal 

func (m *AuthorizeRequest) Marshal() (dAtA []byte, err error)

func (*AuthorizeRequest) MarshalLogObject 

func (x *AuthorizeRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*AuthorizeRequest) MarshalTo 

func (m *AuthorizeRequest) MarshalTo(dAtA []byte) (int, error)

func (*AuthorizeRequest) MarshalToSizedBuffer 

func (m *AuthorizeRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*AuthorizeRequest) ProtoMessage 

func (*AuthorizeRequest) ProtoMessage()

func (*AuthorizeRequest) Reset 

func (m *AuthorizeRequest) Reset()

func (*AuthorizeRequest) Size 

func (m *AuthorizeRequest) Size() (n int)

func (*AuthorizeRequest) String 

func (m *AuthorizeRequest) String() string

func (*AuthorizeRequest) Unmarshal 

func (m *AuthorizeRequest) Unmarshal(dAtA []byte) error

func (*AuthorizeRequest) XXX_DiscardUnknown 

func (m *AuthorizeRequest) XXX_DiscardUnknown()

func (*AuthorizeRequest) XXX_Marshal 

func (m *AuthorizeRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*AuthorizeRequest) XXX_Merge 

func (m *AuthorizeRequest) XXX_Merge(src proto.Message)

func (*AuthorizeRequest) XXX_Size 

func (m *AuthorizeRequest) XXX_Size() int

func (*AuthorizeRequest) XXX_Unmarshal 

func (m *AuthorizeRequest) XXX_Unmarshal(b []byte) error

type AuthorizeResponse 

type AuthorizeResponse struct {
	// authorized is true if the caller has the require permissions
	Authorized bool `protobuf:"varint,1,opt,name=authorized,proto3" json:"authorized,omitempty"`
	// satisfied is the set of permission that the principal has
	Satisfied []Permission `protobuf:"varint,2,rep,packed,name=satisfied,proto3,enum=auth_v2.Permission" json:"satisfied,omitempty"`
	// missing is the set of permissions that the principal lacks
	Missing []Permission `protobuf:"varint,3,rep,packed,name=missing,proto3,enum=auth_v2.Permission" json:"missing,omitempty"`
	// principal is the principal the request was evaluated for
	Principal            string   `protobuf:"bytes,4,opt,name=principal,proto3" json:"principal,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*AuthorizeResponse) Descriptor 

func (*AuthorizeResponse) Descriptor() ([]byte, []int)

func (*AuthorizeResponse) GetAuthorized 

func (m *AuthorizeResponse) GetAuthorized() bool

func (*AuthorizeResponse) GetMissing 

func (m *AuthorizeResponse) GetMissing() []Permission

func (*AuthorizeResponse) GetPrincipal 

func (m *AuthorizeResponse) GetPrincipal() string

func (*AuthorizeResponse) GetSatisfied 

func (m *AuthorizeResponse) GetSatisfied() []Permission

func (*AuthorizeResponse) Marshal 

func (m *AuthorizeResponse) Marshal() (dAtA []byte, err error)

func (*AuthorizeResponse) MarshalLogObject 

func (x *AuthorizeResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*AuthorizeResponse) MarshalTo 

func (m *AuthorizeResponse) MarshalTo(dAtA []byte) (int, error)

func (*AuthorizeResponse) MarshalToSizedBuffer 

func (m *AuthorizeResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*AuthorizeResponse) ProtoMessage 

func (*AuthorizeResponse) ProtoMessage()

func (*AuthorizeResponse) Reset 

func (m *AuthorizeResponse) Reset()

func (*AuthorizeResponse) Size 

func (m *AuthorizeResponse) Size() (n int)

func (*AuthorizeResponse) String 

func (m *AuthorizeResponse) String() string

func (*AuthorizeResponse) Unmarshal 

func (m *AuthorizeResponse) Unmarshal(dAtA []byte) error

func (*AuthorizeResponse) XXX_DiscardUnknown 

func (m *AuthorizeResponse) XXX_DiscardUnknown()

func (*AuthorizeResponse) XXX_Marshal 

func (m *AuthorizeResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*AuthorizeResponse) XXX_Merge 

func (m *AuthorizeResponse) XXX_Merge(src proto.Message)

func (*AuthorizeResponse) XXX_Size 

func (m *AuthorizeResponse) XXX_Size() int

func (*AuthorizeResponse) XXX_Unmarshal 

func (m *AuthorizeResponse) XXX_Unmarshal(b []byte) error

type DeactivateRequest 

type DeactivateRequest struct {
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*DeactivateRequest) Descriptor 

func (*DeactivateRequest) Descriptor() ([]byte, []int)

func (*DeactivateRequest) Marshal 

func (m *DeactivateRequest) Marshal() (dAtA []byte, err error)

func (*DeactivateRequest) MarshalLogObject 

func (x *DeactivateRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*DeactivateRequest) MarshalTo 

func (m *DeactivateRequest) MarshalTo(dAtA []byte) (int, error)

func (*DeactivateRequest) MarshalToSizedBuffer 

func (m *DeactivateRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*DeactivateRequest) ProtoMessage 

func (*DeactivateRequest) ProtoMessage()

func (*DeactivateRequest) Reset 

func (m *DeactivateRequest) Reset()

func (*DeactivateRequest) Size 

func (m *DeactivateRequest) Size() (n int)

func (*DeactivateRequest) String 

func (m *DeactivateRequest) String() string

func (*DeactivateRequest) Unmarshal 

func (m *DeactivateRequest) Unmarshal(dAtA []byte) error

func (*DeactivateRequest) XXX_DiscardUnknown 

func (m *DeactivateRequest) XXX_DiscardUnknown()

func (*DeactivateRequest) XXX_Marshal 

func (m *DeactivateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*DeactivateRequest) XXX_Merge 

func (m *DeactivateRequest) XXX_Merge(src proto.Message)

func (*DeactivateRequest) XXX_Size 

func (m *DeactivateRequest) XXX_Size() int

func (*DeactivateRequest) XXX_Unmarshal 

func (m *DeactivateRequest) XXX_Unmarshal(b []byte) error

type DeactivateResponse 

type DeactivateResponse struct {
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*DeactivateResponse) Descriptor 

func (*DeactivateResponse) Descriptor() ([]byte, []int)

func (*DeactivateResponse) Marshal 

func (m *DeactivateResponse) Marshal() (dAtA []byte, err error)

func (*DeactivateResponse) MarshalLogObject 

func (x *DeactivateResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*DeactivateResponse) MarshalTo 

func (m *DeactivateResponse) MarshalTo(dAtA []byte) (int, error)

func (*DeactivateResponse) MarshalToSizedBuffer 

func (m *DeactivateResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*DeactivateResponse) ProtoMessage 

func (*DeactivateResponse) ProtoMessage()

func (*DeactivateResponse) Reset 

func (m *DeactivateResponse) Reset()

func (*DeactivateResponse) Size 

func (m *DeactivateResponse) Size() (n int)

func (*DeactivateResponse) String 

func (m *DeactivateResponse) String() string

func (*DeactivateResponse) Unmarshal 

func (m *DeactivateResponse) Unmarshal(dAtA []byte) error

func (*DeactivateResponse) XXX_DiscardUnknown 

func (m *DeactivateResponse) XXX_DiscardUnknown()

func (*DeactivateResponse) XXX_Marshal 

func (m *DeactivateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*DeactivateResponse) XXX_Merge 

func (m *DeactivateResponse) XXX_Merge(src proto.Message)

func (*DeactivateResponse) XXX_Size 

func (m *DeactivateResponse) XXX_Size() int

func (*DeactivateResponse) XXX_Unmarshal 

func (m *DeactivateResponse) XXX_Unmarshal(b []byte) error

type DeleteExpiredAuthTokensRequest 

type DeleteExpiredAuthTokensRequest struct {
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*DeleteExpiredAuthTokensRequest) Descriptor 

func (*DeleteExpiredAuthTokensRequest) Descriptor() ([]byte, []int)

func (*DeleteExpiredAuthTokensRequest) Marshal 

func (m *DeleteExpiredAuthTokensRequest) Marshal() (dAtA []byte, err error)

func (*DeleteExpiredAuthTokensRequest) MarshalLogObject 

func (x *DeleteExpiredAuthTokensRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*DeleteExpiredAuthTokensRequest) MarshalTo 

func (m *DeleteExpiredAuthTokensRequest) MarshalTo(dAtA []byte) (int, error)

func (*DeleteExpiredAuthTokensRequest) MarshalToSizedBuffer 

func (m *DeleteExpiredAuthTokensRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*DeleteExpiredAuthTokensRequest) ProtoMessage 

func (*DeleteExpiredAuthTokensRequest) ProtoMessage()

func (*DeleteExpiredAuthTokensRequest) Reset 

func (m *DeleteExpiredAuthTokensRequest) Reset()

func (*DeleteExpiredAuthTokensRequest) Size 

func (m *DeleteExpiredAuthTokensRequest) Size() (n int)

func (*DeleteExpiredAuthTokensRequest) String 

func (m *DeleteExpiredAuthTokensRequest) String() string

func (*DeleteExpiredAuthTokensRequest) Unmarshal 

func (m *DeleteExpiredAuthTokensRequest) Unmarshal(dAtA []byte) error

func (*DeleteExpiredAuthTokensRequest) XXX_DiscardUnknown 

func (m *DeleteExpiredAuthTokensRequest) XXX_DiscardUnknown()

func (*DeleteExpiredAuthTokensRequest) XXX_Marshal 

func (m *DeleteExpiredAuthTokensRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*DeleteExpiredAuthTokensRequest) XXX_Merge 

func (m *DeleteExpiredAuthTokensRequest) XXX_Merge(src proto.Message)

func (*DeleteExpiredAuthTokensRequest) XXX_Size 

func (m *DeleteExpiredAuthTokensRequest) XXX_Size() int

func (*DeleteExpiredAuthTokensRequest) XXX_Unmarshal 

func (m *DeleteExpiredAuthTokensRequest) XXX_Unmarshal(b []byte) error

type DeleteExpiredAuthTokensResponse 

type DeleteExpiredAuthTokensResponse struct {
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*DeleteExpiredAuthTokensResponse) Descriptor 

func (*DeleteExpiredAuthTokensResponse) Descriptor() ([]byte, []int)

func (*DeleteExpiredAuthTokensResponse) Marshal 

func (m *DeleteExpiredAuthTokensResponse) Marshal() (dAtA []byte, err error)

func (*DeleteExpiredAuthTokensResponse) MarshalLogObject 

func (x *DeleteExpiredAuthTokensResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*DeleteExpiredAuthTokensResponse) MarshalTo 

func (m *DeleteExpiredAuthTokensResponse) MarshalTo(dAtA []byte) (int, error)

func (*DeleteExpiredAuthTokensResponse) MarshalToSizedBuffer 

func (m *DeleteExpiredAuthTokensResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*DeleteExpiredAuthTokensResponse) ProtoMessage 

func (*DeleteExpiredAuthTokensResponse) ProtoMessage()

func (*DeleteExpiredAuthTokensResponse) Reset 

func (m *DeleteExpiredAuthTokensResponse) Reset()

func (*DeleteExpiredAuthTokensResponse) Size 

func (m *DeleteExpiredAuthTokensResponse) Size() (n int)

func (*DeleteExpiredAuthTokensResponse) String 

func (m *DeleteExpiredAuthTokensResponse) String() string

func (*DeleteExpiredAuthTokensResponse) Unmarshal 

func (m *DeleteExpiredAuthTokensResponse) Unmarshal(dAtA []byte) error

func (*DeleteExpiredAuthTokensResponse) XXX_DiscardUnknown 

func (m *DeleteExpiredAuthTokensResponse) XXX_DiscardUnknown()

func (*DeleteExpiredAuthTokensResponse) XXX_Marshal 

func (m *DeleteExpiredAuthTokensResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*DeleteExpiredAuthTokensResponse) XXX_Merge 

func (m *DeleteExpiredAuthTokensResponse) XXX_Merge(src proto.Message)

func (*DeleteExpiredAuthTokensResponse) XXX_Size 

func (m *DeleteExpiredAuthTokensResponse) XXX_Size() int

func (*DeleteExpiredAuthTokensResponse) XXX_Unmarshal 

func (m *DeleteExpiredAuthTokensResponse) XXX_Unmarshal(b []byte) error

type ErrInvalidPrincipal 

type ErrInvalidPrincipal struct {
	Principal string
}

ErrInvalidPrincipal indicates that a an argument to e.g. GetScope, SetScope, or SetACL is invalid

func (*ErrInvalidPrincipal) Error 

func (e *ErrInvalidPrincipal) Error() string

type ErrNoRoleBinding 

type ErrNoRoleBinding struct {
	Resource Resource
}

ErrNoRoleBinding is returned if no role binding exists for a resource.

func (*ErrNoRoleBinding) Error 

func (e *ErrNoRoleBinding) Error() string

type ErrNotAuthorized 

type ErrNotAuthorized struct {
	Subject string // subject trying to perform blocked operation -- always set

	Resource Resource     // Resource that the user is attempting to access
	Required []Permission // Caller needs 'Required'-level access to 'Resource'
}

ErrNotAuthorized is returned if the user is not authorized to perform a certain operation.

func (*ErrNotAuthorized) Error 

func (e *ErrNotAuthorized) Error() string

type ErrTooShortTTL 

type ErrTooShortTTL struct {
	RequestTTL, ExistingTTL int64
}

ErrTooShortTTL is returned by the ExtendAuthToken if request.Token already has a TTL longer than request.TTL.

func (ErrTooShortTTL) Error 

func (e ErrTooShortTTL) Error() string

type ExtractAuthTokensRequest 

type ExtractAuthTokensRequest struct {
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

ExtractAuthTokens returns all the hashed robot tokens that have been issued. User tokens are not extracted as they can be recreated by logging in.

func (*ExtractAuthTokensRequest) Descriptor 

func (*ExtractAuthTokensRequest) Descriptor() ([]byte, []int)

func (*ExtractAuthTokensRequest) Marshal 

func (m *ExtractAuthTokensRequest) Marshal() (dAtA []byte, err error)

func (*ExtractAuthTokensRequest) MarshalLogObject 

func (x *ExtractAuthTokensRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*ExtractAuthTokensRequest) MarshalTo 

func (m *ExtractAuthTokensRequest) MarshalTo(dAtA []byte) (int, error)

func (*ExtractAuthTokensRequest) MarshalToSizedBuffer 

func (m *ExtractAuthTokensRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ExtractAuthTokensRequest) ProtoMessage 

func (*ExtractAuthTokensRequest) ProtoMessage()

func (*ExtractAuthTokensRequest) Reset 

func (m *ExtractAuthTokensRequest) Reset()

func (*ExtractAuthTokensRequest) Size 

func (m *ExtractAuthTokensRequest) Size() (n int)

func (*ExtractAuthTokensRequest) String 

func (m *ExtractAuthTokensRequest) String() string

func (*ExtractAuthTokensRequest) Unmarshal 

func (m *ExtractAuthTokensRequest) Unmarshal(dAtA []byte) error

func (*ExtractAuthTokensRequest) XXX_DiscardUnknown 

func (m *ExtractAuthTokensRequest) XXX_DiscardUnknown()

func (*ExtractAuthTokensRequest) XXX_Marshal 

func (m *ExtractAuthTokensRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ExtractAuthTokensRequest) XXX_Merge 

func (m *ExtractAuthTokensRequest) XXX_Merge(src proto.Message)

func (*ExtractAuthTokensRequest) XXX_Size 

func (m *ExtractAuthTokensRequest) XXX_Size() int

func (*ExtractAuthTokensRequest) XXX_Unmarshal 

func (m *ExtractAuthTokensRequest) XXX_Unmarshal(b []byte) error

type ExtractAuthTokensResponse 

type ExtractAuthTokensResponse struct {
	Tokens               []*TokenInfo `protobuf:"bytes,1,rep,name=tokens,proto3" json:"tokens,omitempty"`
	XXX_NoUnkeyedLiteral struct{}     `json:"-"`
	XXX_unrecognized     []byte       `json:"-"`
	XXX_sizecache        int32        `json:"-"`
}

func (*ExtractAuthTokensResponse) Descriptor 

func (*ExtractAuthTokensResponse) Descriptor() ([]byte, []int)

func (*ExtractAuthTokensResponse) GetTokens 

func (m *ExtractAuthTokensResponse) GetTokens() []*TokenInfo

func (*ExtractAuthTokensResponse) Marshal 

func (m *ExtractAuthTokensResponse) Marshal() (dAtA []byte, err error)

func (*ExtractAuthTokensResponse) MarshalLogObject 

func (x *ExtractAuthTokensResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*ExtractAuthTokensResponse) MarshalTo 

func (m *ExtractAuthTokensResponse) MarshalTo(dAtA []byte) (int, error)

func (*ExtractAuthTokensResponse) MarshalToSizedBuffer 

func (m *ExtractAuthTokensResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ExtractAuthTokensResponse) ProtoMessage 

func (*ExtractAuthTokensResponse) ProtoMessage()

func (*ExtractAuthTokensResponse) Reset 

func (m *ExtractAuthTokensResponse) Reset()

func (*ExtractAuthTokensResponse) Size 

func (m *ExtractAuthTokensResponse) Size() (n int)

func (*ExtractAuthTokensResponse) String 

func (m *ExtractAuthTokensResponse) String() string

func (*ExtractAuthTokensResponse) Unmarshal 

func (m *ExtractAuthTokensResponse) Unmarshal(dAtA []byte) error

func (*ExtractAuthTokensResponse) XXX_DiscardUnknown 

func (m *ExtractAuthTokensResponse) XXX_DiscardUnknown()

func (*ExtractAuthTokensResponse) XXX_Marshal 

func (m *ExtractAuthTokensResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ExtractAuthTokensResponse) XXX_Merge 

func (m *ExtractAuthTokensResponse) XXX_Merge(src proto.Message)

func (*ExtractAuthTokensResponse) XXX_Size 

func (m *ExtractAuthTokensResponse) XXX_Size() int

func (*ExtractAuthTokensResponse) XXX_Unmarshal 

func (m *ExtractAuthTokensResponse) XXX_Unmarshal(b []byte) error

type GetConfigurationRequest 

type GetConfigurationRequest struct {
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*GetConfigurationRequest) Descriptor 

func (*GetConfigurationRequest) Descriptor() ([]byte, []int)

func (*GetConfigurationRequest) Marshal 

func (m *GetConfigurationRequest) Marshal() (dAtA []byte, err error)

func (*GetConfigurationRequest) MarshalLogObject 

func (x *GetConfigurationRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetConfigurationRequest) MarshalTo 

func (m *GetConfigurationRequest) MarshalTo(dAtA []byte) (int, error)

func (*GetConfigurationRequest) MarshalToSizedBuffer 

func (m *GetConfigurationRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetConfigurationRequest) ProtoMessage 

func (*GetConfigurationRequest) ProtoMessage()

func (*GetConfigurationRequest) Reset 

func (m *GetConfigurationRequest) Reset()

func (*GetConfigurationRequest) Size 

func (m *GetConfigurationRequest) Size() (n int)

func (*GetConfigurationRequest) String 

func (m *GetConfigurationRequest) String() string

func (*GetConfigurationRequest) Unmarshal 

func (m *GetConfigurationRequest) Unmarshal(dAtA []byte) error

func (*GetConfigurationRequest) XXX_DiscardUnknown 

func (m *GetConfigurationRequest) XXX_DiscardUnknown()

func (*GetConfigurationRequest) XXX_Marshal 

func (m *GetConfigurationRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetConfigurationRequest) XXX_Merge 

func (m *GetConfigurationRequest) XXX_Merge(src proto.Message)

func (*GetConfigurationRequest) XXX_Size 

func (m *GetConfigurationRequest) XXX_Size() int

func (*GetConfigurationRequest) XXX_Unmarshal 

func (m *GetConfigurationRequest) XXX_Unmarshal(b []byte) error

type GetConfigurationResponse 

type GetConfigurationResponse struct {
	Configuration        *OIDCConfig `protobuf:"bytes,1,opt,name=configuration,proto3" json:"configuration,omitempty"`
	XXX_NoUnkeyedLiteral struct{}    `json:"-"`
	XXX_unrecognized     []byte      `json:"-"`
	XXX_sizecache        int32       `json:"-"`
}

func (*GetConfigurationResponse) Descriptor 

func (*GetConfigurationResponse) Descriptor() ([]byte, []int)

func (*GetConfigurationResponse) GetConfiguration 

func (m *GetConfigurationResponse) GetConfiguration() *OIDCConfig

func (*GetConfigurationResponse) Marshal 

func (m *GetConfigurationResponse) Marshal() (dAtA []byte, err error)

func (*GetConfigurationResponse) MarshalLogObject 

func (x *GetConfigurationResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetConfigurationResponse) MarshalTo 

func (m *GetConfigurationResponse) MarshalTo(dAtA []byte) (int, error)

func (*GetConfigurationResponse) MarshalToSizedBuffer 

func (m *GetConfigurationResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetConfigurationResponse) ProtoMessage 

func (*GetConfigurationResponse) ProtoMessage()

func (*GetConfigurationResponse) Reset 

func (m *GetConfigurationResponse) Reset()

func (*GetConfigurationResponse) Size 

func (m *GetConfigurationResponse) Size() (n int)

func (*GetConfigurationResponse) String 

func (m *GetConfigurationResponse) String() string

func (*GetConfigurationResponse) Unmarshal 

func (m *GetConfigurationResponse) Unmarshal(dAtA []byte) error

func (*GetConfigurationResponse) XXX_DiscardUnknown 

func (m *GetConfigurationResponse) XXX_DiscardUnknown()

func (*GetConfigurationResponse) XXX_Marshal 

func (m *GetConfigurationResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetConfigurationResponse) XXX_Merge 

func (m *GetConfigurationResponse) XXX_Merge(src proto.Message)

func (*GetConfigurationResponse) XXX_Size 

func (m *GetConfigurationResponse) XXX_Size() int

func (*GetConfigurationResponse) XXX_Unmarshal 

func (m *GetConfigurationResponse) XXX_Unmarshal(b []byte) error

type GetGroupsForPrincipalRequest 

type GetGroupsForPrincipalRequest struct {
	Principal            string   `protobuf:"bytes,1,opt,name=principal,proto3" json:"principal,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*GetGroupsForPrincipalRequest) Descriptor 

func (*GetGroupsForPrincipalRequest) Descriptor() ([]byte, []int)

func (*GetGroupsForPrincipalRequest) GetPrincipal 

func (m *GetGroupsForPrincipalRequest) GetPrincipal() string

func (*GetGroupsForPrincipalRequest) Marshal 

func (m *GetGroupsForPrincipalRequest) Marshal() (dAtA []byte, err error)

func (*GetGroupsForPrincipalRequest) MarshalLogObject 

func (x *GetGroupsForPrincipalRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetGroupsForPrincipalRequest) MarshalTo 

func (m *GetGroupsForPrincipalRequest) MarshalTo(dAtA []byte) (int, error)

func (*GetGroupsForPrincipalRequest) MarshalToSizedBuffer 

func (m *GetGroupsForPrincipalRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetGroupsForPrincipalRequest) ProtoMessage 

func (*GetGroupsForPrincipalRequest) ProtoMessage()

func (*GetGroupsForPrincipalRequest) Reset 

func (m *GetGroupsForPrincipalRequest) Reset()

func (*GetGroupsForPrincipalRequest) Size 

func (m *GetGroupsForPrincipalRequest) Size() (n int)

func (*GetGroupsForPrincipalRequest) String 

func (m *GetGroupsForPrincipalRequest) String() string

func (*GetGroupsForPrincipalRequest) Unmarshal 

func (m *GetGroupsForPrincipalRequest) Unmarshal(dAtA []byte) error

func (*GetGroupsForPrincipalRequest) XXX_DiscardUnknown 

func (m *GetGroupsForPrincipalRequest) XXX_DiscardUnknown()

func (*GetGroupsForPrincipalRequest) XXX_Marshal 

func (m *GetGroupsForPrincipalRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetGroupsForPrincipalRequest) XXX_Merge 

func (m *GetGroupsForPrincipalRequest) XXX_Merge(src proto.Message)

func (*GetGroupsForPrincipalRequest) XXX_Size 

func (m *GetGroupsForPrincipalRequest) XXX_Size() int

func (*GetGroupsForPrincipalRequest) XXX_Unmarshal 

func (m *GetGroupsForPrincipalRequest) XXX_Unmarshal(b []byte) error

type GetGroupsRequest 

type GetGroupsRequest struct {
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*GetGroupsRequest) Descriptor 

func (*GetGroupsRequest) Descriptor() ([]byte, []int)

func (*GetGroupsRequest) Marshal 

func (m *GetGroupsRequest) Marshal() (dAtA []byte, err error)

func (*GetGroupsRequest) MarshalLogObject 

func (x *GetGroupsRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetGroupsRequest) MarshalTo 

func (m *GetGroupsRequest) MarshalTo(dAtA []byte) (int, error)

func (*GetGroupsRequest) MarshalToSizedBuffer 

func (m *GetGroupsRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetGroupsRequest) ProtoMessage 

func (*GetGroupsRequest) ProtoMessage()

func (*GetGroupsRequest) Reset 

func (m *GetGroupsRequest) Reset()

func (*GetGroupsRequest) Size 

func (m *GetGroupsRequest) Size() (n int)

func (*GetGroupsRequest) String 

func (m *GetGroupsRequest) String() string

func (*GetGroupsRequest) Unmarshal 

func (m *GetGroupsRequest) Unmarshal(dAtA []byte) error

func (*GetGroupsRequest) XXX_DiscardUnknown 

func (m *GetGroupsRequest) XXX_DiscardUnknown()

func (*GetGroupsRequest) XXX_Marshal 

func (m *GetGroupsRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetGroupsRequest) XXX_Merge 

func (m *GetGroupsRequest) XXX_Merge(src proto.Message)

func (*GetGroupsRequest) XXX_Size 

func (m *GetGroupsRequest) XXX_Size() int

func (*GetGroupsRequest) XXX_Unmarshal 

func (m *GetGroupsRequest) XXX_Unmarshal(b []byte) error

type GetGroupsResponse 

type GetGroupsResponse struct {
	Groups               []string `protobuf:"bytes,1,rep,name=groups,proto3" json:"groups,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*GetGroupsResponse) Descriptor 

func (*GetGroupsResponse) Descriptor() ([]byte, []int)

func (*GetGroupsResponse) GetGroups 

func (m *GetGroupsResponse) GetGroups() []string

func (*GetGroupsResponse) Marshal 

func (m *GetGroupsResponse) Marshal() (dAtA []byte, err error)

func (*GetGroupsResponse) MarshalLogObject 

func (x *GetGroupsResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetGroupsResponse) MarshalTo 

func (m *GetGroupsResponse) MarshalTo(dAtA []byte) (int, error)

func (*GetGroupsResponse) MarshalToSizedBuffer 

func (m *GetGroupsResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetGroupsResponse) ProtoMessage 

func (*GetGroupsResponse) ProtoMessage()

func (*GetGroupsResponse) Reset 

func (m *GetGroupsResponse) Reset()

func (*GetGroupsResponse) Size 

func (m *GetGroupsResponse) Size() (n int)

func (*GetGroupsResponse) String 

func (m *GetGroupsResponse) String() string

func (*GetGroupsResponse) Unmarshal 

func (m *GetGroupsResponse) Unmarshal(dAtA []byte) error

func (*GetGroupsResponse) XXX_DiscardUnknown 

func (m *GetGroupsResponse) XXX_DiscardUnknown()

func (*GetGroupsResponse) XXX_Marshal 

func (m *GetGroupsResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetGroupsResponse) XXX_Merge 

func (m *GetGroupsResponse) XXX_Merge(src proto.Message)

func (*GetGroupsResponse) XXX_Size 

func (m *GetGroupsResponse) XXX_Size() int

func (*GetGroupsResponse) XXX_Unmarshal 

func (m *GetGroupsResponse) XXX_Unmarshal(b []byte) error

type GetOIDCLoginRequest 

type GetOIDCLoginRequest struct {
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*GetOIDCLoginRequest) Descriptor 

func (*GetOIDCLoginRequest) Descriptor() ([]byte, []int)

func (*GetOIDCLoginRequest) Marshal 

func (m *GetOIDCLoginRequest) Marshal() (dAtA []byte, err error)

func (*GetOIDCLoginRequest) MarshalLogObject 

func (x *GetOIDCLoginRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetOIDCLoginRequest) MarshalTo 

func (m *GetOIDCLoginRequest) MarshalTo(dAtA []byte) (int, error)

func (*GetOIDCLoginRequest) MarshalToSizedBuffer 

func (m *GetOIDCLoginRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetOIDCLoginRequest) ProtoMessage 

func (*GetOIDCLoginRequest) ProtoMessage()

func (*GetOIDCLoginRequest) Reset 

func (m *GetOIDCLoginRequest) Reset()

func (*GetOIDCLoginRequest) Size 

func (m *GetOIDCLoginRequest) Size() (n int)

func (*GetOIDCLoginRequest) String 

func (m *GetOIDCLoginRequest) String() string

func (*GetOIDCLoginRequest) Unmarshal 

func (m *GetOIDCLoginRequest) Unmarshal(dAtA []byte) error

func (*GetOIDCLoginRequest) XXX_DiscardUnknown 

func (m *GetOIDCLoginRequest) XXX_DiscardUnknown()

func (*GetOIDCLoginRequest) XXX_Marshal 

func (m *GetOIDCLoginRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetOIDCLoginRequest) XXX_Merge 

func (m *GetOIDCLoginRequest) XXX_Merge(src proto.Message)

func (*GetOIDCLoginRequest) XXX_Size 

func (m *GetOIDCLoginRequest) XXX_Size() int

func (*GetOIDCLoginRequest) XXX_Unmarshal 

func (m *GetOIDCLoginRequest) XXX_Unmarshal(b []byte) error

type GetOIDCLoginResponse 

type GetOIDCLoginResponse struct {
	// The login URL generated for the OIDC object
	LoginURL             string   `protobuf:"bytes,1,opt,name=login_url,json=loginUrl,proto3" json:"login_url,omitempty"`
	State                string   `protobuf:"bytes,2,opt,name=state,proto3" json:"state,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*GetOIDCLoginResponse) Descriptor 

func (*GetOIDCLoginResponse) Descriptor() ([]byte, []int)

func (*GetOIDCLoginResponse) GetLoginURL 

func (m *GetOIDCLoginResponse) GetLoginURL() string

func (*GetOIDCLoginResponse) GetState 

func (m *GetOIDCLoginResponse) GetState() string

func (*GetOIDCLoginResponse) Marshal 

func (m *GetOIDCLoginResponse) Marshal() (dAtA []byte, err error)

func (*GetOIDCLoginResponse) MarshalLogObject 

func (x *GetOIDCLoginResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetOIDCLoginResponse) MarshalTo 

func (m *GetOIDCLoginResponse) MarshalTo(dAtA []byte) (int, error)

func (*GetOIDCLoginResponse) MarshalToSizedBuffer 

func (m *GetOIDCLoginResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetOIDCLoginResponse) ProtoMessage 

func (*GetOIDCLoginResponse) ProtoMessage()

func (*GetOIDCLoginResponse) Reset 

func (m *GetOIDCLoginResponse) Reset()

func (*GetOIDCLoginResponse) Size 

func (m *GetOIDCLoginResponse) Size() (n int)

func (*GetOIDCLoginResponse) String 

func (m *GetOIDCLoginResponse) String() string

func (*GetOIDCLoginResponse) Unmarshal 

func (m *GetOIDCLoginResponse) Unmarshal(dAtA []byte) error

func (*GetOIDCLoginResponse) XXX_DiscardUnknown 

func (m *GetOIDCLoginResponse) XXX_DiscardUnknown()

func (*GetOIDCLoginResponse) XXX_Marshal 

func (m *GetOIDCLoginResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetOIDCLoginResponse) XXX_Merge 

func (m *GetOIDCLoginResponse) XXX_Merge(src proto.Message)

func (*GetOIDCLoginResponse) XXX_Size 

func (m *GetOIDCLoginResponse) XXX_Size() int

func (*GetOIDCLoginResponse) XXX_Unmarshal 

func (m *GetOIDCLoginResponse) XXX_Unmarshal(b []byte) error

type GetPermissionsForPrincipalRequest 

type GetPermissionsForPrincipalRequest struct {
	Resource             *Resource `protobuf:"bytes,1,opt,name=resource,proto3" json:"resource,omitempty"`
	Principal            string    `protobuf:"bytes,2,opt,name=principal,proto3" json:"principal,omitempty"`
	XXX_NoUnkeyedLiteral struct{}  `json:"-"`
	XXX_unrecognized     []byte    `json:"-"`
	XXX_sizecache        int32     `json:"-"`
}

GetPermissionsForPrincipal evaluates an arbitrary principal's permissions on a resource

func (*GetPermissionsForPrincipalRequest) Descriptor 

func (*GetPermissionsForPrincipalRequest) Descriptor() ([]byte, []int)

func (*GetPermissionsForPrincipalRequest) GetPrincipal 

func (m *GetPermissionsForPrincipalRequest) GetPrincipal() string

func (*GetPermissionsForPrincipalRequest) GetResource 

func (m *GetPermissionsForPrincipalRequest) GetResource() *Resource

func (*GetPermissionsForPrincipalRequest) Marshal 

func (m *GetPermissionsForPrincipalRequest) Marshal() (dAtA []byte, err error)

func (*GetPermissionsForPrincipalRequest) MarshalLogObject 

func (x *GetPermissionsForPrincipalRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetPermissionsForPrincipalRequest) MarshalTo 

func (m *GetPermissionsForPrincipalRequest) MarshalTo(dAtA []byte) (int, error)

func (*GetPermissionsForPrincipalRequest) MarshalToSizedBuffer 

func (m *GetPermissionsForPrincipalRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetPermissionsForPrincipalRequest) ProtoMessage 

func (*GetPermissionsForPrincipalRequest) ProtoMessage()

func (*GetPermissionsForPrincipalRequest) Reset 

func (m *GetPermissionsForPrincipalRequest) Reset()

func (*GetPermissionsForPrincipalRequest) Size 

func (m *GetPermissionsForPrincipalRequest) Size() (n int)

func (*GetPermissionsForPrincipalRequest) String 

func (m *GetPermissionsForPrincipalRequest) String() string

func (*GetPermissionsForPrincipalRequest) Unmarshal 

func (m *GetPermissionsForPrincipalRequest) Unmarshal(dAtA []byte) error

func (*GetPermissionsForPrincipalRequest) XXX_DiscardUnknown 

func (m *GetPermissionsForPrincipalRequest) XXX_DiscardUnknown()

func (*GetPermissionsForPrincipalRequest) XXX_Marshal 

func (m *GetPermissionsForPrincipalRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetPermissionsForPrincipalRequest) XXX_Merge 

func (m *GetPermissionsForPrincipalRequest) XXX_Merge(src proto.Message)

func (*GetPermissionsForPrincipalRequest) XXX_Size 

func (m *GetPermissionsForPrincipalRequest) XXX_Size() int

func (*GetPermissionsForPrincipalRequest) XXX_Unmarshal 

func (m *GetPermissionsForPrincipalRequest) XXX_Unmarshal(b []byte) error

type GetPermissionsRequest 

type GetPermissionsRequest struct {
	Resource             *Resource `protobuf:"bytes,1,opt,name=resource,proto3" json:"resource,omitempty"`
	XXX_NoUnkeyedLiteral struct{}  `json:"-"`
	XXX_unrecognized     []byte    `json:"-"`
	XXX_sizecache        int32     `json:"-"`
}

GetPermissions evaluates the current user's permissions on a resource

func (*GetPermissionsRequest) Descriptor 

func (*GetPermissionsRequest) Descriptor() ([]byte, []int)

func (*GetPermissionsRequest) GetResource 

func (m *GetPermissionsRequest) GetResource() *Resource

func (*GetPermissionsRequest) Marshal 

func (m *GetPermissionsRequest) Marshal() (dAtA []byte, err error)

func (*GetPermissionsRequest) MarshalLogObject 

func (x *GetPermissionsRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetPermissionsRequest) MarshalTo 

func (m *GetPermissionsRequest) MarshalTo(dAtA []byte) (int, error)

func (*GetPermissionsRequest) MarshalToSizedBuffer 

func (m *GetPermissionsRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetPermissionsRequest) ProtoMessage 

func (*GetPermissionsRequest) ProtoMessage()

func (*GetPermissionsRequest) Reset 

func (m *GetPermissionsRequest) Reset()

func (*GetPermissionsRequest) Size 

func (m *GetPermissionsRequest) Size() (n int)

func (*GetPermissionsRequest) String 

func (m *GetPermissionsRequest) String() string

func (*GetPermissionsRequest) Unmarshal 

func (m *GetPermissionsRequest) Unmarshal(dAtA []byte) error

func (*GetPermissionsRequest) XXX_DiscardUnknown 

func (m *GetPermissionsRequest) XXX_DiscardUnknown()

func (*GetPermissionsRequest) XXX_Marshal 

func (m *GetPermissionsRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetPermissionsRequest) XXX_Merge 

func (m *GetPermissionsRequest) XXX_Merge(src proto.Message)

func (*GetPermissionsRequest) XXX_Size 

func (m *GetPermissionsRequest) XXX_Size() int

func (*GetPermissionsRequest) XXX_Unmarshal 

func (m *GetPermissionsRequest) XXX_Unmarshal(b []byte) error

type GetPermissionsResponse 

type GetPermissionsResponse struct {
	// permissions is the set of permissions the principal has
	Permissions []Permission `protobuf:"varint,1,rep,packed,name=permissions,proto3,enum=auth_v2.Permission" json:"permissions,omitempty"`
	// roles is the set of roles the principal has
	Roles                []string `protobuf:"bytes,2,rep,name=roles,proto3" json:"roles,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*GetPermissionsResponse) Descriptor 

func (*GetPermissionsResponse) Descriptor() ([]byte, []int)

func (*GetPermissionsResponse) GetPermissions 

func (m *GetPermissionsResponse) GetPermissions() []Permission

func (*GetPermissionsResponse) GetRoles 

func (m *GetPermissionsResponse) GetRoles() []string

func (*GetPermissionsResponse) Marshal 

func (m *GetPermissionsResponse) Marshal() (dAtA []byte, err error)

func (*GetPermissionsResponse) MarshalLogObject 

func (x *GetPermissionsResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetPermissionsResponse) MarshalTo 

func (m *GetPermissionsResponse) MarshalTo(dAtA []byte) (int, error)

func (*GetPermissionsResponse) MarshalToSizedBuffer 

func (m *GetPermissionsResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetPermissionsResponse) ProtoMessage 

func (*GetPermissionsResponse) ProtoMessage()

func (*GetPermissionsResponse) Reset 

func (m *GetPermissionsResponse) Reset()

func (*GetPermissionsResponse) Size 

func (m *GetPermissionsResponse) Size() (n int)

func (*GetPermissionsResponse) String 

func (m *GetPermissionsResponse) String() string

func (*GetPermissionsResponse) Unmarshal 

func (m *GetPermissionsResponse) Unmarshal(dAtA []byte) error

func (*GetPermissionsResponse) XXX_DiscardUnknown 

func (m *GetPermissionsResponse) XXX_DiscardUnknown()

func (*GetPermissionsResponse) XXX_Marshal 

func (m *GetPermissionsResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetPermissionsResponse) XXX_Merge 

func (m *GetPermissionsResponse) XXX_Merge(src proto.Message)

func (*GetPermissionsResponse) XXX_Size 

func (m *GetPermissionsResponse) XXX_Size() int

func (*GetPermissionsResponse) XXX_Unmarshal 

func (m *GetPermissionsResponse) XXX_Unmarshal(b []byte) error

type GetRobotTokenRequest 

type GetRobotTokenRequest struct {
	// The returned token will allow the caller to access resources as this
	// robot user
	Robot string `protobuf:"bytes,1,opt,name=robot,proto3" json:"robot,omitempty"`
	// ttl indicates the requested (approximate) remaining lifetime of this token,
	// in seconds
	TTL                  int64    `protobuf:"varint,2,opt,name=ttl,proto3" json:"ttl,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*GetRobotTokenRequest) Descriptor 

func (*GetRobotTokenRequest) Descriptor() ([]byte, []int)

func (*GetRobotTokenRequest) GetRobot 

func (m *GetRobotTokenRequest) GetRobot() string

func (*GetRobotTokenRequest) GetTTL 

func (m *GetRobotTokenRequest) GetTTL() int64

func (*GetRobotTokenRequest) Marshal 

func (m *GetRobotTokenRequest) Marshal() (dAtA []byte, err error)

func (*GetRobotTokenRequest) MarshalLogObject 

func (x *GetRobotTokenRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetRobotTokenRequest) MarshalTo 

func (m *GetRobotTokenRequest) MarshalTo(dAtA []byte) (int, error)

func (*GetRobotTokenRequest) MarshalToSizedBuffer 

func (m *GetRobotTokenRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetRobotTokenRequest) ProtoMessage 

func (*GetRobotTokenRequest) ProtoMessage()

func (*GetRobotTokenRequest) Reset 

func (m *GetRobotTokenRequest) Reset()

func (*GetRobotTokenRequest) Size 

func (m *GetRobotTokenRequest) Size() (n int)

func (*GetRobotTokenRequest) String 

func (m *GetRobotTokenRequest) String() string

func (*GetRobotTokenRequest) Unmarshal 

func (m *GetRobotTokenRequest) Unmarshal(dAtA []byte) error

func (*GetRobotTokenRequest) XXX_DiscardUnknown 

func (m *GetRobotTokenRequest) XXX_DiscardUnknown()

func (*GetRobotTokenRequest) XXX_Marshal 

func (m *GetRobotTokenRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetRobotTokenRequest) XXX_Merge 

func (m *GetRobotTokenRequest) XXX_Merge(src proto.Message)

func (*GetRobotTokenRequest) XXX_Size 

func (m *GetRobotTokenRequest) XXX_Size() int

func (*GetRobotTokenRequest) XXX_Unmarshal 

func (m *GetRobotTokenRequest) XXX_Unmarshal(b []byte) error

type GetRobotTokenResponse 

type GetRobotTokenResponse struct {
	// A new auth token for the requested robot
	Token                string   `protobuf:"bytes,1,opt,name=token,proto3" json:"token,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*GetRobotTokenResponse) Descriptor 

func (*GetRobotTokenResponse) Descriptor() ([]byte, []int)

func (*GetRobotTokenResponse) GetToken 

func (m *GetRobotTokenResponse) GetToken() string

func (*GetRobotTokenResponse) Marshal 

func (m *GetRobotTokenResponse) Marshal() (dAtA []byte, err error)

func (*GetRobotTokenResponse) MarshalLogObject 

func (x *GetRobotTokenResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetRobotTokenResponse) MarshalTo 

func (m *GetRobotTokenResponse) MarshalTo(dAtA []byte) (int, error)

func (*GetRobotTokenResponse) MarshalToSizedBuffer 

func (m *GetRobotTokenResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetRobotTokenResponse) ProtoMessage 

func (*GetRobotTokenResponse) ProtoMessage()

func (*GetRobotTokenResponse) Reset 

func (m *GetRobotTokenResponse) Reset()

func (*GetRobotTokenResponse) Size 

func (m *GetRobotTokenResponse) Size() (n int)

func (*GetRobotTokenResponse) String 

func (m *GetRobotTokenResponse) String() string

func (*GetRobotTokenResponse) Unmarshal 

func (m *GetRobotTokenResponse) Unmarshal(dAtA []byte) error

func (*GetRobotTokenResponse) XXX_DiscardUnknown 

func (m *GetRobotTokenResponse) XXX_DiscardUnknown()

func (*GetRobotTokenResponse) XXX_Marshal 

func (m *GetRobotTokenResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetRobotTokenResponse) XXX_Merge 

func (m *GetRobotTokenResponse) XXX_Merge(src proto.Message)

func (*GetRobotTokenResponse) XXX_Size 

func (m *GetRobotTokenResponse) XXX_Size() int

func (*GetRobotTokenResponse) XXX_Unmarshal 

func (m *GetRobotTokenResponse) XXX_Unmarshal(b []byte) error

type GetRoleBindingRequest 

type GetRoleBindingRequest struct {
	Resource             *Resource `protobuf:"bytes,1,opt,name=resource,proto3" json:"resource,omitempty"`
	XXX_NoUnkeyedLiteral struct{}  `json:"-"`
	XXX_unrecognized     []byte    `json:"-"`
	XXX_sizecache        int32     `json:"-"`
}

func (*GetRoleBindingRequest) Descriptor 

func (*GetRoleBindingRequest) Descriptor() ([]byte, []int)

func (*GetRoleBindingRequest) GetResource 

func (m *GetRoleBindingRequest) GetResource() *Resource

func (*GetRoleBindingRequest) Marshal 

func (m *GetRoleBindingRequest) Marshal() (dAtA []byte, err error)

func (*GetRoleBindingRequest) MarshalLogObject 

func (x *GetRoleBindingRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetRoleBindingRequest) MarshalTo 

func (m *GetRoleBindingRequest) MarshalTo(dAtA []byte) (int, error)

func (*GetRoleBindingRequest) MarshalToSizedBuffer 

func (m *GetRoleBindingRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetRoleBindingRequest) ProtoMessage 

func (*GetRoleBindingRequest) ProtoMessage()

func (*GetRoleBindingRequest) Reset 

func (m *GetRoleBindingRequest) Reset()

func (*GetRoleBindingRequest) Size 

func (m *GetRoleBindingRequest) Size() (n int)

func (*GetRoleBindingRequest) String 

func (m *GetRoleBindingRequest) String() string

func (*GetRoleBindingRequest) Unmarshal 

func (m *GetRoleBindingRequest) Unmarshal(dAtA []byte) error

func (*GetRoleBindingRequest) XXX_DiscardUnknown 

func (m *GetRoleBindingRequest) XXX_DiscardUnknown()

func (*GetRoleBindingRequest) XXX_Marshal 

func (m *GetRoleBindingRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetRoleBindingRequest) XXX_Merge 

func (m *GetRoleBindingRequest) XXX_Merge(src proto.Message)

func (*GetRoleBindingRequest) XXX_Size 

func (m *GetRoleBindingRequest) XXX_Size() int

func (*GetRoleBindingRequest) XXX_Unmarshal 

func (m *GetRoleBindingRequest) XXX_Unmarshal(b []byte) error

type GetRoleBindingResponse 

type GetRoleBindingResponse struct {
	Binding              *RoleBinding `protobuf:"bytes,1,opt,name=binding,proto3" json:"binding,omitempty"`
	XXX_NoUnkeyedLiteral struct{}     `json:"-"`
	XXX_unrecognized     []byte       `json:"-"`
	XXX_sizecache        int32        `json:"-"`
}

func (*GetRoleBindingResponse) Descriptor 

func (*GetRoleBindingResponse) Descriptor() ([]byte, []int)

func (*GetRoleBindingResponse) GetBinding 

func (m *GetRoleBindingResponse) GetBinding() *RoleBinding

func (*GetRoleBindingResponse) Marshal 

func (m *GetRoleBindingResponse) Marshal() (dAtA []byte, err error)

func (*GetRoleBindingResponse) MarshalLogObject 

func (x *GetRoleBindingResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetRoleBindingResponse) MarshalTo 

func (m *GetRoleBindingResponse) MarshalTo(dAtA []byte) (int, error)

func (*GetRoleBindingResponse) MarshalToSizedBuffer 

func (m *GetRoleBindingResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetRoleBindingResponse) ProtoMessage 

func (*GetRoleBindingResponse) ProtoMessage()

func (*GetRoleBindingResponse) Reset 

func (m *GetRoleBindingResponse) Reset()

func (*GetRoleBindingResponse) Size 

func (m *GetRoleBindingResponse) Size() (n int)

func (*GetRoleBindingResponse) String 

func (m *GetRoleBindingResponse) String() string

func (*GetRoleBindingResponse) Unmarshal 

func (m *GetRoleBindingResponse) Unmarshal(dAtA []byte) error

func (*GetRoleBindingResponse) XXX_DiscardUnknown 

func (m *GetRoleBindingResponse) XXX_DiscardUnknown()

func (*GetRoleBindingResponse) XXX_Marshal 

func (m *GetRoleBindingResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetRoleBindingResponse) XXX_Merge 

func (m *GetRoleBindingResponse) XXX_Merge(src proto.Message)

func (*GetRoleBindingResponse) XXX_Size 

func (m *GetRoleBindingResponse) XXX_Size() int

func (*GetRoleBindingResponse) XXX_Unmarshal 

func (m *GetRoleBindingResponse) XXX_Unmarshal(b []byte) error

type GetRolesForPermissionRequest 

type GetRolesForPermissionRequest struct {
	Permission           Permission `protobuf:"varint,1,opt,name=permission,proto3,enum=auth_v2.Permission" json:"permission,omitempty"`
	XXX_NoUnkeyedLiteral struct{}   `json:"-"`
	XXX_unrecognized     []byte     `json:"-"`
	XXX_sizecache        int32      `json:"-"`
}

func (*GetRolesForPermissionRequest) Descriptor 

func (*GetRolesForPermissionRequest) Descriptor() ([]byte, []int)

func (*GetRolesForPermissionRequest) GetPermission 

func (m *GetRolesForPermissionRequest) GetPermission() Permission

func (*GetRolesForPermissionRequest) Marshal 

func (m *GetRolesForPermissionRequest) Marshal() (dAtA []byte, err error)

func (*GetRolesForPermissionRequest) MarshalLogObject 

func (x *GetRolesForPermissionRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetRolesForPermissionRequest) MarshalTo 

func (m *GetRolesForPermissionRequest) MarshalTo(dAtA []byte) (int, error)

func (*GetRolesForPermissionRequest) MarshalToSizedBuffer 

func (m *GetRolesForPermissionRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetRolesForPermissionRequest) ProtoMessage 

func (*GetRolesForPermissionRequest) ProtoMessage()

func (*GetRolesForPermissionRequest) Reset 

func (m *GetRolesForPermissionRequest) Reset()

func (*GetRolesForPermissionRequest) Size 

func (m *GetRolesForPermissionRequest) Size() (n int)

func (*GetRolesForPermissionRequest) String 

func (m *GetRolesForPermissionRequest) String() string

func (*GetRolesForPermissionRequest) Unmarshal 

func (m *GetRolesForPermissionRequest) Unmarshal(dAtA []byte) error

func (*GetRolesForPermissionRequest) XXX_DiscardUnknown 

func (m *GetRolesForPermissionRequest) XXX_DiscardUnknown()

func (*GetRolesForPermissionRequest) XXX_Marshal 

func (m *GetRolesForPermissionRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetRolesForPermissionRequest) XXX_Merge 

func (m *GetRolesForPermissionRequest) XXX_Merge(src proto.Message)

func (*GetRolesForPermissionRequest) XXX_Size 

func (m *GetRolesForPermissionRequest) XXX_Size() int

func (*GetRolesForPermissionRequest) XXX_Unmarshal 

func (m *GetRolesForPermissionRequest) XXX_Unmarshal(b []byte) error

type GetRolesForPermissionResponse 

type GetRolesForPermissionResponse struct {
	Roles                []*Role  `protobuf:"bytes,1,rep,name=roles,proto3" json:"roles,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*GetRolesForPermissionResponse) Descriptor 

func (*GetRolesForPermissionResponse) Descriptor() ([]byte, []int)

func (*GetRolesForPermissionResponse) GetRoles 

func (m *GetRolesForPermissionResponse) GetRoles() []*Role

func (*GetRolesForPermissionResponse) Marshal 

func (m *GetRolesForPermissionResponse) Marshal() (dAtA []byte, err error)

func (*GetRolesForPermissionResponse) MarshalLogObject 

func (x *GetRolesForPermissionResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetRolesForPermissionResponse) MarshalTo 

func (m *GetRolesForPermissionResponse) MarshalTo(dAtA []byte) (int, error)

func (*GetRolesForPermissionResponse) MarshalToSizedBuffer 

func (m *GetRolesForPermissionResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetRolesForPermissionResponse) ProtoMessage 

func (*GetRolesForPermissionResponse) ProtoMessage()

func (*GetRolesForPermissionResponse) Reset 

func (m *GetRolesForPermissionResponse) Reset()

func (*GetRolesForPermissionResponse) Size 

func (m *GetRolesForPermissionResponse) Size() (n int)

func (*GetRolesForPermissionResponse) String 

func (m *GetRolesForPermissionResponse) String() string

func (*GetRolesForPermissionResponse) Unmarshal 

func (m *GetRolesForPermissionResponse) Unmarshal(dAtA []byte) error

func (*GetRolesForPermissionResponse) XXX_DiscardUnknown 

func (m *GetRolesForPermissionResponse) XXX_DiscardUnknown()

func (*GetRolesForPermissionResponse) XXX_Marshal 

func (m *GetRolesForPermissionResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetRolesForPermissionResponse) XXX_Merge 

func (m *GetRolesForPermissionResponse) XXX_Merge(src proto.Message)

func (*GetRolesForPermissionResponse) XXX_Size 

func (m *GetRolesForPermissionResponse) XXX_Size() int

func (*GetRolesForPermissionResponse) XXX_Unmarshal 

func (m *GetRolesForPermissionResponse) XXX_Unmarshal(b []byte) error

type GetUsersRequest 

type GetUsersRequest struct {
	Group                string   `protobuf:"bytes,1,opt,name=group,proto3" json:"group,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*GetUsersRequest) Descriptor 

func (*GetUsersRequest) Descriptor() ([]byte, []int)

func (*GetUsersRequest) GetGroup 

func (m *GetUsersRequest) GetGroup() string

func (*GetUsersRequest) Marshal 

func (m *GetUsersRequest) Marshal() (dAtA []byte, err error)

func (*GetUsersRequest) MarshalLogObject 

func (x *GetUsersRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetUsersRequest) MarshalTo 

func (m *GetUsersRequest) MarshalTo(dAtA []byte) (int, error)

func (*GetUsersRequest) MarshalToSizedBuffer 

func (m *GetUsersRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetUsersRequest) ProtoMessage 

func (*GetUsersRequest) ProtoMessage()

func (*GetUsersRequest) Reset 

func (m *GetUsersRequest) Reset()

func (*GetUsersRequest) Size 

func (m *GetUsersRequest) Size() (n int)

func (*GetUsersRequest) String 

func (m *GetUsersRequest) String() string

func (*GetUsersRequest) Unmarshal 

func (m *GetUsersRequest) Unmarshal(dAtA []byte) error

func (*GetUsersRequest) XXX_DiscardUnknown 

func (m *GetUsersRequest) XXX_DiscardUnknown()

func (*GetUsersRequest) XXX_Marshal 

func (m *GetUsersRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetUsersRequest) XXX_Merge 

func (m *GetUsersRequest) XXX_Merge(src proto.Message)

func (*GetUsersRequest) XXX_Size 

func (m *GetUsersRequest) XXX_Size() int

func (*GetUsersRequest) XXX_Unmarshal 

func (m *GetUsersRequest) XXX_Unmarshal(b []byte) error

type GetUsersResponse 

type GetUsersResponse struct {
	Usernames            []string `protobuf:"bytes,1,rep,name=usernames,proto3" json:"usernames,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*GetUsersResponse) Descriptor 

func (*GetUsersResponse) Descriptor() ([]byte, []int)

func (*GetUsersResponse) GetUsernames 

func (m *GetUsersResponse) GetUsernames() []string

func (*GetUsersResponse) Marshal 

func (m *GetUsersResponse) Marshal() (dAtA []byte, err error)

func (*GetUsersResponse) MarshalLogObject 

func (x *GetUsersResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*GetUsersResponse) MarshalTo 

func (m *GetUsersResponse) MarshalTo(dAtA []byte) (int, error)

func (*GetUsersResponse) MarshalToSizedBuffer 

func (m *GetUsersResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*GetUsersResponse) ProtoMessage 

func (*GetUsersResponse) ProtoMessage()

func (*GetUsersResponse) Reset 

func (m *GetUsersResponse) Reset()

func (*GetUsersResponse) Size 

func (m *GetUsersResponse) Size() (n int)

func (*GetUsersResponse) String 

func (m *GetUsersResponse) String() string

func (*GetUsersResponse) Unmarshal 

func (m *GetUsersResponse) Unmarshal(dAtA []byte) error

func (*GetUsersResponse) XXX_DiscardUnknown 

func (m *GetUsersResponse) XXX_DiscardUnknown()

func (*GetUsersResponse) XXX_Marshal 

func (m *GetUsersResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*GetUsersResponse) XXX_Merge 

func (m *GetUsersResponse) XXX_Merge(src proto.Message)

func (*GetUsersResponse) XXX_Size 

func (m *GetUsersResponse) XXX_Size() int

func (*GetUsersResponse) XXX_Unmarshal 

func (m *GetUsersResponse) XXX_Unmarshal(b []byte) error

type Groups 

type Groups struct {
	Groups               map[string]bool `` /* 154-byte string literal not displayed */
	XXX_NoUnkeyedLiteral struct{}        `json:"-"`
	XXX_unrecognized     []byte          `json:"-"`
	XXX_sizecache        int32           `json:"-"`
}

func (*Groups) Descriptor 

func (*Groups) Descriptor() ([]byte, []int)

func (*Groups) GetGroups 

func (m *Groups) GetGroups() map[string]bool

func (*Groups) Marshal 

func (m *Groups) Marshal() (dAtA []byte, err error)

func (*Groups) MarshalLogObject 

func (x *Groups) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*Groups) MarshalTo 

func (m *Groups) MarshalTo(dAtA []byte) (int, error)

func (*Groups) MarshalToSizedBuffer 

func (m *Groups) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Groups) ProtoMessage 

func (*Groups) ProtoMessage()

func (*Groups) Reset 

func (m *Groups) Reset()

func (*Groups) Size 

func (m *Groups) Size() (n int)

func (*Groups) String 

func (m *Groups) String() string

func (*Groups) Unmarshal 

func (m *Groups) Unmarshal(dAtA []byte) error

func (*Groups) XXX_DiscardUnknown 

func (m *Groups) XXX_DiscardUnknown()

func (*Groups) XXX_Marshal 

func (m *Groups) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Groups) XXX_Merge 

func (m *Groups) XXX_Merge(src proto.Message)

func (*Groups) XXX_Size 

func (m *Groups) XXX_Size() int

func (*Groups) XXX_Unmarshal 

func (m *Groups) XXX_Unmarshal(b []byte) error

type ModifyMembersRequest 

type ModifyMembersRequest struct {
	Group                string   `protobuf:"bytes,1,opt,name=group,proto3" json:"group,omitempty"`
	Add                  []string `protobuf:"bytes,2,rep,name=add,proto3" json:"add,omitempty"`
	Remove               []string `protobuf:"bytes,3,rep,name=remove,proto3" json:"remove,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*ModifyMembersRequest) Descriptor 

func (*ModifyMembersRequest) Descriptor() ([]byte, []int)

func (*ModifyMembersRequest) GetAdd 

func (m *ModifyMembersRequest) GetAdd() []string

func (*ModifyMembersRequest) GetGroup 

func (m *ModifyMembersRequest) GetGroup() string

func (*ModifyMembersRequest) GetRemove 

func (m *ModifyMembersRequest) GetRemove() []string

func (*ModifyMembersRequest) Marshal 

func (m *ModifyMembersRequest) Marshal() (dAtA []byte, err error)

func (*ModifyMembersRequest) MarshalLogObject 

func (x *ModifyMembersRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*ModifyMembersRequest) MarshalTo 

func (m *ModifyMembersRequest) MarshalTo(dAtA []byte) (int, error)

func (*ModifyMembersRequest) MarshalToSizedBuffer 

func (m *ModifyMembersRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ModifyMembersRequest) ProtoMessage 

func (*ModifyMembersRequest) ProtoMessage()

func (*ModifyMembersRequest) Reset 

func (m *ModifyMembersRequest) Reset()

func (*ModifyMembersRequest) Size 

func (m *ModifyMembersRequest) Size() (n int)

func (*ModifyMembersRequest) String 

func (m *ModifyMembersRequest) String() string

func (*ModifyMembersRequest) Unmarshal 

func (m *ModifyMembersRequest) Unmarshal(dAtA []byte) error

func (*ModifyMembersRequest) XXX_DiscardUnknown 

func (m *ModifyMembersRequest) XXX_DiscardUnknown()

func (*ModifyMembersRequest) XXX_Marshal 

func (m *ModifyMembersRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ModifyMembersRequest) XXX_Merge 

func (m *ModifyMembersRequest) XXX_Merge(src proto.Message)

func (*ModifyMembersRequest) XXX_Size 

func (m *ModifyMembersRequest) XXX_Size() int

func (*ModifyMembersRequest) XXX_Unmarshal 

func (m *ModifyMembersRequest) XXX_Unmarshal(b []byte) error

type ModifyMembersResponse 

type ModifyMembersResponse struct {
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*ModifyMembersResponse) Descriptor 

func (*ModifyMembersResponse) Descriptor() ([]byte, []int)

func (*ModifyMembersResponse) Marshal 

func (m *ModifyMembersResponse) Marshal() (dAtA []byte, err error)

func (*ModifyMembersResponse) MarshalLogObject 

func (x *ModifyMembersResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*ModifyMembersResponse) MarshalTo 

func (m *ModifyMembersResponse) MarshalTo(dAtA []byte) (int, error)

func (*ModifyMembersResponse) MarshalToSizedBuffer 

func (m *ModifyMembersResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ModifyMembersResponse) ProtoMessage 

func (*ModifyMembersResponse) ProtoMessage()

func (*ModifyMembersResponse) Reset 

func (m *ModifyMembersResponse) Reset()

func (*ModifyMembersResponse) Size 

func (m *ModifyMembersResponse) Size() (n int)

func (*ModifyMembersResponse) String 

func (m *ModifyMembersResponse) String() string

func (*ModifyMembersResponse) Unmarshal 

func (m *ModifyMembersResponse) Unmarshal(dAtA []byte) error

func (*ModifyMembersResponse) XXX_DiscardUnknown 

func (m *ModifyMembersResponse) XXX_DiscardUnknown()

func (*ModifyMembersResponse) XXX_Marshal 

func (m *ModifyMembersResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ModifyMembersResponse) XXX_Merge 

func (m *ModifyMembersResponse) XXX_Merge(src proto.Message)

func (*ModifyMembersResponse) XXX_Size 

func (m *ModifyMembersResponse) XXX_Size() int

func (*ModifyMembersResponse) XXX_Unmarshal 

func (m *ModifyMembersResponse) XXX_Unmarshal(b []byte) error

type ModifyRoleBindingRequest 

type ModifyRoleBindingRequest struct {
	// resource is the resource to modify the role bindings on
	Resource *Resource `protobuf:"bytes,1,opt,name=resource,proto3" json:"resource,omitempty"`
	// principal is the principal to modify the roles binding for
	Principal string `protobuf:"bytes,2,opt,name=principal,proto3" json:"principal,omitempty"`
	// roles is the set of roles for principal - an empty list
	// removes all role bindings
	Roles                []string `protobuf:"bytes,3,rep,name=roles,proto3" json:"roles,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*ModifyRoleBindingRequest) Descriptor 

func (*ModifyRoleBindingRequest) Descriptor() ([]byte, []int)

func (*ModifyRoleBindingRequest) GetPrincipal 

func (m *ModifyRoleBindingRequest) GetPrincipal() string

func (*ModifyRoleBindingRequest) GetResource 

func (m *ModifyRoleBindingRequest) GetResource() *Resource

func (*ModifyRoleBindingRequest) GetRoles 

func (m *ModifyRoleBindingRequest) GetRoles() []string

func (*ModifyRoleBindingRequest) Marshal 

func (m *ModifyRoleBindingRequest) Marshal() (dAtA []byte, err error)

func (*ModifyRoleBindingRequest) MarshalLogObject 

func (x *ModifyRoleBindingRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*ModifyRoleBindingRequest) MarshalTo 

func (m *ModifyRoleBindingRequest) MarshalTo(dAtA []byte) (int, error)

func (*ModifyRoleBindingRequest) MarshalToSizedBuffer 

func (m *ModifyRoleBindingRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ModifyRoleBindingRequest) ProtoMessage 

func (*ModifyRoleBindingRequest) ProtoMessage()

func (*ModifyRoleBindingRequest) Reset 

func (m *ModifyRoleBindingRequest) Reset()

func (*ModifyRoleBindingRequest) Size 

func (m *ModifyRoleBindingRequest) Size() (n int)

func (*ModifyRoleBindingRequest) String 

func (m *ModifyRoleBindingRequest) String() string

func (*ModifyRoleBindingRequest) Unmarshal 

func (m *ModifyRoleBindingRequest) Unmarshal(dAtA []byte) error

func (*ModifyRoleBindingRequest) XXX_DiscardUnknown 

func (m *ModifyRoleBindingRequest) XXX_DiscardUnknown()

func (*ModifyRoleBindingRequest) XXX_Marshal 

func (m *ModifyRoleBindingRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ModifyRoleBindingRequest) XXX_Merge 

func (m *ModifyRoleBindingRequest) XXX_Merge(src proto.Message)

func (*ModifyRoleBindingRequest) XXX_Size 

func (m *ModifyRoleBindingRequest) XXX_Size() int

func (*ModifyRoleBindingRequest) XXX_Unmarshal 

func (m *ModifyRoleBindingRequest) XXX_Unmarshal(b []byte) error

type ModifyRoleBindingResponse 

type ModifyRoleBindingResponse struct {
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*ModifyRoleBindingResponse) Descriptor 

func (*ModifyRoleBindingResponse) Descriptor() ([]byte, []int)

func (*ModifyRoleBindingResponse) Marshal 

func (m *ModifyRoleBindingResponse) Marshal() (dAtA []byte, err error)

func (*ModifyRoleBindingResponse) MarshalLogObject 

func (x *ModifyRoleBindingResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*ModifyRoleBindingResponse) MarshalTo 

func (m *ModifyRoleBindingResponse) MarshalTo(dAtA []byte) (int, error)

func (*ModifyRoleBindingResponse) MarshalToSizedBuffer 

func (m *ModifyRoleBindingResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*ModifyRoleBindingResponse) ProtoMessage 

func (*ModifyRoleBindingResponse) ProtoMessage()

func (*ModifyRoleBindingResponse) Reset 

func (m *ModifyRoleBindingResponse) Reset()

func (*ModifyRoleBindingResponse) Size 

func (m *ModifyRoleBindingResponse) Size() (n int)

func (*ModifyRoleBindingResponse) String 

func (m *ModifyRoleBindingResponse) String() string

func (*ModifyRoleBindingResponse) Unmarshal 

func (m *ModifyRoleBindingResponse) Unmarshal(dAtA []byte) error

func (*ModifyRoleBindingResponse) XXX_DiscardUnknown 

func (m *ModifyRoleBindingResponse) XXX_DiscardUnknown()

func (*ModifyRoleBindingResponse) XXX_Marshal 

func (m *ModifyRoleBindingResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*ModifyRoleBindingResponse) XXX_Merge 

func (m *ModifyRoleBindingResponse) XXX_Merge(src proto.Message)

func (*ModifyRoleBindingResponse) XXX_Size 

func (m *ModifyRoleBindingResponse) XXX_Size() int

func (*ModifyRoleBindingResponse) XXX_Unmarshal 

func (m *ModifyRoleBindingResponse) XXX_Unmarshal(b []byte) error

type OIDCConfig 

type OIDCConfig struct {
	Issuer               string   `protobuf:"bytes,1,opt,name=issuer,proto3" json:"issuer,omitempty"`
	ClientID             string   `protobuf:"bytes,2,opt,name=client_id,json=clientId,proto3" json:"client_id,omitempty"`
	ClientSecret         string   `protobuf:"bytes,3,opt,name=client_secret,json=clientSecret,proto3" json:"client_secret,omitempty"`
	RedirectURI          string   `protobuf:"bytes,4,opt,name=redirect_uri,json=redirectUri,proto3" json:"redirect_uri,omitempty"`
	Scopes               []string `protobuf:"bytes,5,rep,name=scopes,proto3" json:"scopes,omitempty"`
	RequireEmailVerified bool     `protobuf:"varint,6,opt,name=require_email_verified,json=requireEmailVerified,proto3" json:"require_email_verified,omitempty"`
	// localhost_issuer ignores the contents of the issuer claim and makes all
	// OIDC requests to the embedded OIDC provider. This is necessary to support
	// some network configurations like Minikube.
	LocalhostIssuer bool `protobuf:"varint,7,opt,name=localhost_issuer,json=localhostIssuer,proto3" json:"localhost_issuer,omitempty"`
	// user_accessible_issuer_host can be set to override the host used
	// in the OAuth2 authorization URL in case the OIDC issuer isn't
	// accessible outside the cluster. This requires a fully formed URL with scheme of either http or https.
	// This is necessary to support some configurations like Minikube.
	UserAccessibleIssuerHost string   `` /* 137-byte string literal not displayed */
	XXX_NoUnkeyedLiteral     struct{} `json:"-"`
	XXX_unrecognized         []byte   `json:"-"`
	XXX_sizecache            int32    `json:"-"`
}

Configure Pachyderm's auth system with an OIDC provider

func (*OIDCConfig) Descriptor 

func (*OIDCConfig) Descriptor() ([]byte, []int)

func (*OIDCConfig) GetClientID 

func (m *OIDCConfig) GetClientID() string

func (*OIDCConfig) GetClientSecret 

func (m *OIDCConfig) GetClientSecret() string

func (*OIDCConfig) GetIssuer 

func (m *OIDCConfig) GetIssuer() string

func (*OIDCConfig) GetLocalhostIssuer 

func (m *OIDCConfig) GetLocalhostIssuer() bool

func (*OIDCConfig) GetRedirectURI 

func (m *OIDCConfig) GetRedirectURI() string

func (*OIDCConfig) GetRequireEmailVerified 

func (m *OIDCConfig) GetRequireEmailVerified() bool

func (*OIDCConfig) GetScopes 

func (m *OIDCConfig) GetScopes() []string

func (*OIDCConfig) GetUserAccessibleIssuerHost 

func (m *OIDCConfig) GetUserAccessibleIssuerHost() string

func (*OIDCConfig) Marshal 

func (m *OIDCConfig) Marshal() (dAtA []byte, err error)

func (*OIDCConfig) MarshalLogObject 

func (x *OIDCConfig) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*OIDCConfig) MarshalTo 

func (m *OIDCConfig) MarshalTo(dAtA []byte) (int, error)

func (*OIDCConfig) MarshalToSizedBuffer 

func (m *OIDCConfig) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*OIDCConfig) ProtoMessage 

func (*OIDCConfig) ProtoMessage()

func (*OIDCConfig) Reset 

func (m *OIDCConfig) Reset()

func (*OIDCConfig) Size 

func (m *OIDCConfig) Size() (n int)

func (*OIDCConfig) String 

func (m *OIDCConfig) String() string

func (*OIDCConfig) Unmarshal 

func (m *OIDCConfig) Unmarshal(dAtA []byte) error

func (*OIDCConfig) XXX_DiscardUnknown 

func (m *OIDCConfig) XXX_DiscardUnknown()

func (*OIDCConfig) XXX_Marshal 

func (m *OIDCConfig) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*OIDCConfig) XXX_Merge 

func (m *OIDCConfig) XXX_Merge(src proto.Message)

func (*OIDCConfig) XXX_Size 

func (m *OIDCConfig) XXX_Size() int

func (*OIDCConfig) XXX_Unmarshal 

func (m *OIDCConfig) XXX_Unmarshal(b []byte) error

type Permission 

type Permission int32

Permission represents the ability to perform a given operation on a Resource 

const (
	Permission_PERMISSION_UNKNOWN                         Permission = 0
	Permission_CLUSTER_MODIFY_BINDINGS                    Permission = 100
	Permission_CLUSTER_GET_BINDINGS                       Permission = 101
	Permission_CLUSTER_GET_PACHD_LOGS                     Permission = 148
	Permission_CLUSTER_GET_LOKI_LOGS                      Permission = 150
	Permission_CLUSTER_AUTH_ACTIVATE                      Permission = 102
	Permission_CLUSTER_AUTH_DEACTIVATE                    Permission = 103
	Permission_CLUSTER_AUTH_GET_CONFIG                    Permission = 104
	Permission_CLUSTER_AUTH_SET_CONFIG                    Permission = 105
	Permission_CLUSTER_AUTH_GET_ROBOT_TOKEN               Permission = 139
	Permission_CLUSTER_AUTH_MODIFY_GROUP_MEMBERS          Permission = 109
	Permission_CLUSTER_AUTH_GET_GROUPS                    Permission = 110
	Permission_CLUSTER_AUTH_GET_GROUP_USERS               Permission = 111
	Permission_CLUSTER_AUTH_EXTRACT_TOKENS                Permission = 112
	Permission_CLUSTER_AUTH_RESTORE_TOKEN                 Permission = 113
	Permission_CLUSTER_AUTH_GET_PERMISSIONS_FOR_PRINCIPAL Permission = 141
	Permission_CLUSTER_AUTH_DELETE_EXPIRED_TOKENS         Permission = 140
	Permission_CLUSTER_AUTH_REVOKE_USER_TOKENS            Permission = 142
	Permission_CLUSTER_AUTH_ROTATE_ROOT_TOKEN             Permission = 147
	Permission_CLUSTER_ENTERPRISE_ACTIVATE                Permission = 114
	Permission_CLUSTER_ENTERPRISE_HEARTBEAT               Permission = 115
	Permission_CLUSTER_ENTERPRISE_GET_CODE                Permission = 116
	Permission_CLUSTER_ENTERPRISE_DEACTIVATE              Permission = 117
	Permission_CLUSTER_ENTERPRISE_PAUSE                   Permission = 149
	Permission_CLUSTER_IDENTITY_SET_CONFIG                Permission = 118
	Permission_CLUSTER_IDENTITY_GET_CONFIG                Permission = 119
	Permission_CLUSTER_IDENTITY_CREATE_IDP                Permission = 120
	Permission_CLUSTER_IDENTITY_UPDATE_IDP                Permission = 121
	Permission_CLUSTER_IDENTITY_LIST_IDPS                 Permission = 122
	Permission_CLUSTER_IDENTITY_GET_IDP                   Permission = 123
	Permission_CLUSTER_IDENTITY_DELETE_IDP                Permission = 124
	Permission_CLUSTER_IDENTITY_CREATE_OIDC_CLIENT        Permission = 125
	Permission_CLUSTER_IDENTITY_UPDATE_OIDC_CLIENT        Permission = 126
	Permission_CLUSTER_IDENTITY_LIST_OIDC_CLIENTS         Permission = 127
	Permission_CLUSTER_IDENTITY_GET_OIDC_CLIENT           Permission = 128
	Permission_CLUSTER_IDENTITY_DELETE_OIDC_CLIENT        Permission = 129
	Permission_CLUSTER_DEBUG_DUMP                         Permission = 131
	Permission_CLUSTER_LICENSE_ACTIVATE                   Permission = 132
	Permission_CLUSTER_LICENSE_GET_CODE                   Permission = 133
	Permission_CLUSTER_LICENSE_ADD_CLUSTER                Permission = 134
	Permission_CLUSTER_LICENSE_UPDATE_CLUSTER             Permission = 135
	Permission_CLUSTER_LICENSE_DELETE_CLUSTER             Permission = 136
	Permission_CLUSTER_LICENSE_LIST_CLUSTERS              Permission = 137
	// TODO(actgardner): Make k8s secrets into nouns and add an Update RPC
	Permission_CLUSTER_CREATE_SECRET       Permission = 143
	Permission_CLUSTER_LIST_SECRETS        Permission = 144
	Permission_SECRET_DELETE               Permission = 145
	Permission_SECRET_INSPECT              Permission = 146
	Permission_CLUSTER_DELETE_ALL          Permission = 138
	Permission_REPO_READ                   Permission = 200
	Permission_REPO_WRITE                  Permission = 201
	Permission_REPO_MODIFY_BINDINGS        Permission = 202
	Permission_REPO_DELETE                 Permission = 203
	Permission_REPO_INSPECT_COMMIT         Permission = 204
	Permission_REPO_LIST_COMMIT            Permission = 205
	Permission_REPO_DELETE_COMMIT          Permission = 206
	Permission_REPO_CREATE_BRANCH          Permission = 207
	Permission_REPO_LIST_BRANCH            Permission = 208
	Permission_REPO_DELETE_BRANCH          Permission = 209
	Permission_REPO_INSPECT_FILE           Permission = 210
	Permission_REPO_LIST_FILE              Permission = 211
	Permission_REPO_ADD_PIPELINE_READER    Permission = 212
	Permission_REPO_REMOVE_PIPELINE_READER Permission = 213
	Permission_REPO_ADD_PIPELINE_WRITER    Permission = 214
	Permission_PIPELINE_LIST_JOB           Permission = 301
	Permission_PROJECT_CREATE              Permission = 400
	Permission_PROJECT_DELETE              Permission = 401
	Permission_PROJECT_LIST_REPO           Permission = 402
	Permission_PROJECT_CREATE_REPO         Permission = 403
	Permission_PROJECT_MODIFY_BINDINGS     Permission = 404
)

func (Permission) EnumDescriptor 

func (Permission) EnumDescriptor() ([]byte, []int)

func (Permission) String 

func (x Permission) String() string

type Resource 

type Resource struct {
	Type                 ResourceType `protobuf:"varint,1,opt,name=type,proto3,enum=auth_v2.ResourceType" json:"type,omitempty"`
	Name                 string       `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	XXX_NoUnkeyedLiteral struct{}     `json:"-"`
	XXX_unrecognized     []byte       `json:"-"`
	XXX_sizecache        int32        `json:"-"`
}

Resource represents any resource that has role-bindings in the system

func (*Resource) Descriptor 

func (*Resource) Descriptor() ([]byte, []int)

func (*Resource) GetName 

func (m *Resource) GetName() string

func (*Resource) GetType 

func (m *Resource) GetType() ResourceType

func (*Resource) Marshal 

func (m *Resource) Marshal() (dAtA []byte, err error)

func (*Resource) MarshalLogObject 

func (x *Resource) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*Resource) MarshalTo 

func (m *Resource) MarshalTo(dAtA []byte) (int, error)

func (*Resource) MarshalToSizedBuffer 

func (m *Resource) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Resource) ProtoMessage 

func (*Resource) ProtoMessage()

func (*Resource) Reset 

func (m *Resource) Reset()

func (*Resource) Size 

func (m *Resource) Size() (n int)

func (*Resource) String 

func (m *Resource) String() string

func (*Resource) Unmarshal 

func (m *Resource) Unmarshal(dAtA []byte) error

func (*Resource) XXX_DiscardUnknown 

func (m *Resource) XXX_DiscardUnknown()

func (*Resource) XXX_Marshal 

func (m *Resource) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Resource) XXX_Merge 

func (m *Resource) XXX_Merge(src proto.Message)

func (*Resource) XXX_Size 

func (m *Resource) XXX_Size() int

func (*Resource) XXX_Unmarshal 

func (m *Resource) XXX_Unmarshal(b []byte) error

type ResourceType 

type ResourceType int32

ResourceType represents the type of a Resource 

const (
	ResourceType_RESOURCE_TYPE_UNKNOWN ResourceType = 0
	ResourceType_CLUSTER               ResourceType = 1
	ResourceType_REPO                  ResourceType = 2
	ResourceType_SPEC_REPO             ResourceType = 3
	ResourceType_PROJECT               ResourceType = 4
)

func (ResourceType) EnumDescriptor 

func (ResourceType) EnumDescriptor() ([]byte, []int)

func (ResourceType) String 

func (x ResourceType) String() string

type RestoreAuthTokenRequest 

type RestoreAuthTokenRequest struct {
	Token                *TokenInfo `protobuf:"bytes,1,opt,name=token,proto3" json:"token,omitempty"`
	XXX_NoUnkeyedLiteral struct{}   `json:"-"`
	XXX_unrecognized     []byte     `json:"-"`
	XXX_sizecache        int32      `json:"-"`
}

RestoreAuthToken inserts a hashed token that has previously been extracted.

func (*RestoreAuthTokenRequest) Descriptor 

func (*RestoreAuthTokenRequest) Descriptor() ([]byte, []int)

func (*RestoreAuthTokenRequest) GetToken 

func (m *RestoreAuthTokenRequest) GetToken() *TokenInfo

func (*RestoreAuthTokenRequest) Marshal 

func (m *RestoreAuthTokenRequest) Marshal() (dAtA []byte, err error)

func (*RestoreAuthTokenRequest) MarshalLogObject 

func (x *RestoreAuthTokenRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*RestoreAuthTokenRequest) MarshalTo 

func (m *RestoreAuthTokenRequest) MarshalTo(dAtA []byte) (int, error)

func (*RestoreAuthTokenRequest) MarshalToSizedBuffer 

func (m *RestoreAuthTokenRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RestoreAuthTokenRequest) ProtoMessage 

func (*RestoreAuthTokenRequest) ProtoMessage()

func (*RestoreAuthTokenRequest) Reset 

func (m *RestoreAuthTokenRequest) Reset()

func (*RestoreAuthTokenRequest) Size 

func (m *RestoreAuthTokenRequest) Size() (n int)

func (*RestoreAuthTokenRequest) String 

func (m *RestoreAuthTokenRequest) String() string

func (*RestoreAuthTokenRequest) Unmarshal 

func (m *RestoreAuthTokenRequest) Unmarshal(dAtA []byte) error

func (*RestoreAuthTokenRequest) XXX_DiscardUnknown 

func (m *RestoreAuthTokenRequest) XXX_DiscardUnknown()

func (*RestoreAuthTokenRequest) XXX_Marshal 

func (m *RestoreAuthTokenRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RestoreAuthTokenRequest) XXX_Merge 

func (m *RestoreAuthTokenRequest) XXX_Merge(src proto.Message)

func (*RestoreAuthTokenRequest) XXX_Size 

func (m *RestoreAuthTokenRequest) XXX_Size() int

func (*RestoreAuthTokenRequest) XXX_Unmarshal 

func (m *RestoreAuthTokenRequest) XXX_Unmarshal(b []byte) error

type RestoreAuthTokenResponse 

type RestoreAuthTokenResponse struct {
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*RestoreAuthTokenResponse) Descriptor 

func (*RestoreAuthTokenResponse) Descriptor() ([]byte, []int)

func (*RestoreAuthTokenResponse) Marshal 

func (m *RestoreAuthTokenResponse) Marshal() (dAtA []byte, err error)

func (*RestoreAuthTokenResponse) MarshalLogObject 

func (x *RestoreAuthTokenResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*RestoreAuthTokenResponse) MarshalTo 

func (m *RestoreAuthTokenResponse) MarshalTo(dAtA []byte) (int, error)

func (*RestoreAuthTokenResponse) MarshalToSizedBuffer 

func (m *RestoreAuthTokenResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RestoreAuthTokenResponse) ProtoMessage 

func (*RestoreAuthTokenResponse) ProtoMessage()

func (*RestoreAuthTokenResponse) Reset 

func (m *RestoreAuthTokenResponse) Reset()

func (*RestoreAuthTokenResponse) Size 

func (m *RestoreAuthTokenResponse) Size() (n int)

func (*RestoreAuthTokenResponse) String 

func (m *RestoreAuthTokenResponse) String() string

func (*RestoreAuthTokenResponse) Unmarshal 

func (m *RestoreAuthTokenResponse) Unmarshal(dAtA []byte) error

func (*RestoreAuthTokenResponse) XXX_DiscardUnknown 

func (m *RestoreAuthTokenResponse) XXX_DiscardUnknown()

func (*RestoreAuthTokenResponse) XXX_Marshal 

func (m *RestoreAuthTokenResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RestoreAuthTokenResponse) XXX_Merge 

func (m *RestoreAuthTokenResponse) XXX_Merge(src proto.Message)

func (*RestoreAuthTokenResponse) XXX_Size 

func (m *RestoreAuthTokenResponse) XXX_Size() int

func (*RestoreAuthTokenResponse) XXX_Unmarshal 

func (m *RestoreAuthTokenResponse) XXX_Unmarshal(b []byte) error

type RevokeAuthTokenRequest 

type RevokeAuthTokenRequest struct {
	Token                string   `protobuf:"bytes,1,opt,name=token,proto3" json:"token,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*RevokeAuthTokenRequest) Descriptor 

func (*RevokeAuthTokenRequest) Descriptor() ([]byte, []int)

func (*RevokeAuthTokenRequest) GetToken 

func (m *RevokeAuthTokenRequest) GetToken() string

func (*RevokeAuthTokenRequest) Marshal 

func (m *RevokeAuthTokenRequest) Marshal() (dAtA []byte, err error)

func (*RevokeAuthTokenRequest) MarshalLogObject 

func (x *RevokeAuthTokenRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*RevokeAuthTokenRequest) MarshalTo 

func (m *RevokeAuthTokenRequest) MarshalTo(dAtA []byte) (int, error)

func (*RevokeAuthTokenRequest) MarshalToSizedBuffer 

func (m *RevokeAuthTokenRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RevokeAuthTokenRequest) ProtoMessage 

func (*RevokeAuthTokenRequest) ProtoMessage()

func (*RevokeAuthTokenRequest) Reset 

func (m *RevokeAuthTokenRequest) Reset()

func (*RevokeAuthTokenRequest) Size 

func (m *RevokeAuthTokenRequest) Size() (n int)

func (*RevokeAuthTokenRequest) String 

func (m *RevokeAuthTokenRequest) String() string

func (*RevokeAuthTokenRequest) Unmarshal 

func (m *RevokeAuthTokenRequest) Unmarshal(dAtA []byte) error

func (*RevokeAuthTokenRequest) XXX_DiscardUnknown 

func (m *RevokeAuthTokenRequest) XXX_DiscardUnknown()

func (*RevokeAuthTokenRequest) XXX_Marshal 

func (m *RevokeAuthTokenRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RevokeAuthTokenRequest) XXX_Merge 

func (m *RevokeAuthTokenRequest) XXX_Merge(src proto.Message)

func (*RevokeAuthTokenRequest) XXX_Size 

func (m *RevokeAuthTokenRequest) XXX_Size() int

func (*RevokeAuthTokenRequest) XXX_Unmarshal 

func (m *RevokeAuthTokenRequest) XXX_Unmarshal(b []byte) error

type RevokeAuthTokenResponse 

type RevokeAuthTokenResponse struct {
	Number               int64    `protobuf:"varint,1,opt,name=number,proto3" json:"number,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*RevokeAuthTokenResponse) Descriptor 

func (*RevokeAuthTokenResponse) Descriptor() ([]byte, []int)

func (*RevokeAuthTokenResponse) GetNumber 

func (m *RevokeAuthTokenResponse) GetNumber() int64

func (*RevokeAuthTokenResponse) Marshal 

func (m *RevokeAuthTokenResponse) Marshal() (dAtA []byte, err error)

func (*RevokeAuthTokenResponse) MarshalLogObject 

func (x *RevokeAuthTokenResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*RevokeAuthTokenResponse) MarshalTo 

func (m *RevokeAuthTokenResponse) MarshalTo(dAtA []byte) (int, error)

func (*RevokeAuthTokenResponse) MarshalToSizedBuffer 

func (m *RevokeAuthTokenResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RevokeAuthTokenResponse) ProtoMessage 

func (*RevokeAuthTokenResponse) ProtoMessage()

func (*RevokeAuthTokenResponse) Reset 

func (m *RevokeAuthTokenResponse) Reset()

func (*RevokeAuthTokenResponse) Size 

func (m *RevokeAuthTokenResponse) Size() (n int)

func (*RevokeAuthTokenResponse) String 

func (m *RevokeAuthTokenResponse) String() string

func (*RevokeAuthTokenResponse) Unmarshal 

func (m *RevokeAuthTokenResponse) Unmarshal(dAtA []byte) error

func (*RevokeAuthTokenResponse) XXX_DiscardUnknown 

func (m *RevokeAuthTokenResponse) XXX_DiscardUnknown()

func (*RevokeAuthTokenResponse) XXX_Marshal 

func (m *RevokeAuthTokenResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RevokeAuthTokenResponse) XXX_Merge 

func (m *RevokeAuthTokenResponse) XXX_Merge(src proto.Message)

func (*RevokeAuthTokenResponse) XXX_Size 

func (m *RevokeAuthTokenResponse) XXX_Size() int

func (*RevokeAuthTokenResponse) XXX_Unmarshal 

func (m *RevokeAuthTokenResponse) XXX_Unmarshal(b []byte) error

type RevokeAuthTokensForUserRequest 

type RevokeAuthTokensForUserRequest struct {
	Username             string   `protobuf:"bytes,1,opt,name=username,proto3" json:"username,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*RevokeAuthTokensForUserRequest) Descriptor 

func (*RevokeAuthTokensForUserRequest) Descriptor() ([]byte, []int)

func (*RevokeAuthTokensForUserRequest) GetUsername 

func (m *RevokeAuthTokensForUserRequest) GetUsername() string

func (*RevokeAuthTokensForUserRequest) Marshal 

func (m *RevokeAuthTokensForUserRequest) Marshal() (dAtA []byte, err error)

func (*RevokeAuthTokensForUserRequest) MarshalLogObject 

func (x *RevokeAuthTokensForUserRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*RevokeAuthTokensForUserRequest) MarshalTo 

func (m *RevokeAuthTokensForUserRequest) MarshalTo(dAtA []byte) (int, error)

func (*RevokeAuthTokensForUserRequest) MarshalToSizedBuffer 

func (m *RevokeAuthTokensForUserRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RevokeAuthTokensForUserRequest) ProtoMessage 

func (*RevokeAuthTokensForUserRequest) ProtoMessage()

func (*RevokeAuthTokensForUserRequest) Reset 

func (m *RevokeAuthTokensForUserRequest) Reset()

func (*RevokeAuthTokensForUserRequest) Size 

func (m *RevokeAuthTokensForUserRequest) Size() (n int)

func (*RevokeAuthTokensForUserRequest) String 

func (m *RevokeAuthTokensForUserRequest) String() string

func (*RevokeAuthTokensForUserRequest) Unmarshal 

func (m *RevokeAuthTokensForUserRequest) Unmarshal(dAtA []byte) error

func (*RevokeAuthTokensForUserRequest) XXX_DiscardUnknown 

func (m *RevokeAuthTokensForUserRequest) XXX_DiscardUnknown()

func (*RevokeAuthTokensForUserRequest) XXX_Marshal 

func (m *RevokeAuthTokensForUserRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RevokeAuthTokensForUserRequest) XXX_Merge 

func (m *RevokeAuthTokensForUserRequest) XXX_Merge(src proto.Message)

func (*RevokeAuthTokensForUserRequest) XXX_Size 

func (m *RevokeAuthTokensForUserRequest) XXX_Size() int

func (*RevokeAuthTokensForUserRequest) XXX_Unmarshal 

func (m *RevokeAuthTokensForUserRequest) XXX_Unmarshal(b []byte) error

type RevokeAuthTokensForUserResponse 

type RevokeAuthTokensForUserResponse struct {
	Number               int64    `protobuf:"varint,1,opt,name=number,proto3" json:"number,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*RevokeAuthTokensForUserResponse) Descriptor 

func (*RevokeAuthTokensForUserResponse) Descriptor() ([]byte, []int)

func (*RevokeAuthTokensForUserResponse) GetNumber 

func (m *RevokeAuthTokensForUserResponse) GetNumber() int64

func (*RevokeAuthTokensForUserResponse) Marshal 

func (m *RevokeAuthTokensForUserResponse) Marshal() (dAtA []byte, err error)

func (*RevokeAuthTokensForUserResponse) MarshalLogObject 

func (x *RevokeAuthTokensForUserResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*RevokeAuthTokensForUserResponse) MarshalTo 

func (m *RevokeAuthTokensForUserResponse) MarshalTo(dAtA []byte) (int, error)

func (*RevokeAuthTokensForUserResponse) MarshalToSizedBuffer 

func (m *RevokeAuthTokensForUserResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RevokeAuthTokensForUserResponse) ProtoMessage 

func (*RevokeAuthTokensForUserResponse) ProtoMessage()

func (*RevokeAuthTokensForUserResponse) Reset 

func (m *RevokeAuthTokensForUserResponse) Reset()

func (*RevokeAuthTokensForUserResponse) Size 

func (m *RevokeAuthTokensForUserResponse) Size() (n int)

func (*RevokeAuthTokensForUserResponse) String 

func (m *RevokeAuthTokensForUserResponse) String() string

func (*RevokeAuthTokensForUserResponse) Unmarshal 

func (m *RevokeAuthTokensForUserResponse) Unmarshal(dAtA []byte) error

func (*RevokeAuthTokensForUserResponse) XXX_DiscardUnknown 

func (m *RevokeAuthTokensForUserResponse) XXX_DiscardUnknown()

func (*RevokeAuthTokensForUserResponse) XXX_Marshal 

func (m *RevokeAuthTokensForUserResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RevokeAuthTokensForUserResponse) XXX_Merge 

func (m *RevokeAuthTokensForUserResponse) XXX_Merge(src proto.Message)

func (*RevokeAuthTokensForUserResponse) XXX_Size 

func (m *RevokeAuthTokensForUserResponse) XXX_Size() int

func (*RevokeAuthTokensForUserResponse) XXX_Unmarshal 

func (m *RevokeAuthTokensForUserResponse) XXX_Unmarshal(b []byte) error

type Role 

type Role struct {
	Name        string       `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Permissions []Permission `protobuf:"varint,2,rep,packed,name=permissions,proto3,enum=auth_v2.Permission" json:"permissions,omitempty"`
	// Resources this role can be bound to.  For example, you can't apply clusterAdmin to a repo, so
	// REPO would not be listed here.
	CanBeBoundTo []ResourceType `` /* 135-byte string literal not displayed */
	// Resources this role is returned for.  For example, a principal might have clusterAdmin
	// permissions on the cluster, and this is what allows them to write to a repo.  So, clusterAdmin
	// is returned for the repo, even though it cannot be bound to a repo.
	ReturnedFor          []ResourceType `` /* 128-byte string literal not displayed */
	XXX_NoUnkeyedLiteral struct{}       `json:"-"`
	XXX_unrecognized     []byte         `json:"-"`
	XXX_sizecache        int32          `json:"-"`
}

func (*Role) Descriptor 

func (*Role) Descriptor() ([]byte, []int)

func (*Role) GetCanBeBoundTo added in v2.6.4 

func (m *Role) GetCanBeBoundTo() []ResourceType

func (*Role) GetName 

func (m *Role) GetName() string

func (*Role) GetPermissions 

func (m *Role) GetPermissions() []Permission

func (*Role) GetReturnedFor added in v2.6.4 

func (m *Role) GetReturnedFor() []ResourceType

func (*Role) Marshal 

func (m *Role) Marshal() (dAtA []byte, err error)

func (*Role) MarshalLogObject 

func (x *Role) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*Role) MarshalTo 

func (m *Role) MarshalTo(dAtA []byte) (int, error)

func (*Role) MarshalToSizedBuffer 

func (m *Role) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Role) ProtoMessage 

func (*Role) ProtoMessage()

func (*Role) Reset 

func (m *Role) Reset()

func (*Role) Size 

func (m *Role) Size() (n int)

func (*Role) String 

func (m *Role) String() string

func (*Role) Unmarshal 

func (m *Role) Unmarshal(dAtA []byte) error

func (*Role) XXX_DiscardUnknown 

func (m *Role) XXX_DiscardUnknown()

func (*Role) XXX_Marshal 

func (m *Role) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Role) XXX_Merge 

func (m *Role) XXX_Merge(src proto.Message)

func (*Role) XXX_Size 

func (m *Role) XXX_Size() int

func (*Role) XXX_Unmarshal 

func (m *Role) XXX_Unmarshal(b []byte) error

type RoleBinding 

type RoleBinding struct {
	// principal -> roles. All principal names include the structured prefix indicating their type.
	Entries              map[string]*Roles `` /* 155-byte string literal not displayed */
	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
	XXX_unrecognized     []byte            `json:"-"`
	XXX_sizecache        int32             `json:"-"`
}

RoleBinding represents the set of roles principals have on a given Resource

func (*RoleBinding) Descriptor 

func (*RoleBinding) Descriptor() ([]byte, []int)

func (*RoleBinding) GetEntries 

func (m *RoleBinding) GetEntries() map[string]*Roles

func (*RoleBinding) Marshal 

func (m *RoleBinding) Marshal() (dAtA []byte, err error)

func (*RoleBinding) MarshalLogObject 

func (x *RoleBinding) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*RoleBinding) MarshalTo 

func (m *RoleBinding) MarshalTo(dAtA []byte) (int, error)

func (*RoleBinding) MarshalToSizedBuffer 

func (m *RoleBinding) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RoleBinding) ProtoMessage 

func (*RoleBinding) ProtoMessage()

func (*RoleBinding) Reset 

func (m *RoleBinding) Reset()

func (*RoleBinding) Size 

func (m *RoleBinding) Size() (n int)

func (*RoleBinding) String 

func (m *RoleBinding) String() string

func (*RoleBinding) Unmarshal 

func (m *RoleBinding) Unmarshal(dAtA []byte) error

func (*RoleBinding) XXX_DiscardUnknown 

func (m *RoleBinding) XXX_DiscardUnknown()

func (*RoleBinding) XXX_Marshal 

func (m *RoleBinding) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RoleBinding) XXX_Merge 

func (m *RoleBinding) XXX_Merge(src proto.Message)

func (*RoleBinding) XXX_Size 

func (m *RoleBinding) XXX_Size() int

func (*RoleBinding) XXX_Unmarshal 

func (m *RoleBinding) XXX_Unmarshal(b []byte) error

type Roles 

type Roles struct {
	Roles                map[string]bool `` /* 152-byte string literal not displayed */
	XXX_NoUnkeyedLiteral struct{}        `json:"-"`
	XXX_unrecognized     []byte          `json:"-"`
	XXX_sizecache        int32           `json:"-"`
}

Roles represents the set of roles a principal has

func (*Roles) Descriptor 

func (*Roles) Descriptor() ([]byte, []int)

func (*Roles) GetRoles 

func (m *Roles) GetRoles() map[string]bool

func (*Roles) Marshal 

func (m *Roles) Marshal() (dAtA []byte, err error)

func (*Roles) MarshalLogObject 

func (x *Roles) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*Roles) MarshalTo 

func (m *Roles) MarshalTo(dAtA []byte) (int, error)

func (*Roles) MarshalToSizedBuffer 

func (m *Roles) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Roles) ProtoMessage 

func (*Roles) ProtoMessage()

func (*Roles) Reset 

func (m *Roles) Reset()

func (*Roles) Size 

func (m *Roles) Size() (n int)

func (*Roles) String 

func (m *Roles) String() string

func (*Roles) Unmarshal 

func (m *Roles) Unmarshal(dAtA []byte) error

func (*Roles) XXX_DiscardUnknown 

func (m *Roles) XXX_DiscardUnknown()

func (*Roles) XXX_Marshal 

func (m *Roles) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Roles) XXX_Merge 

func (m *Roles) XXX_Merge(src proto.Message)

func (*Roles) XXX_Size 

func (m *Roles) XXX_Size() int

func (*Roles) XXX_Unmarshal 

func (m *Roles) XXX_Unmarshal(b []byte) error

type RotateRootTokenRequest 

type RotateRootTokenRequest struct {
	// root_token is used as the new root token value. If it's unset, then a token will be auto-generated.
	RootToken            string   `protobuf:"bytes,1,opt,name=root_token,json=rootToken,proto3" json:"root_token,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*RotateRootTokenRequest) Descriptor 

func (*RotateRootTokenRequest) Descriptor() ([]byte, []int)

func (*RotateRootTokenRequest) GetRootToken 

func (m *RotateRootTokenRequest) GetRootToken() string

func (*RotateRootTokenRequest) Marshal 

func (m *RotateRootTokenRequest) Marshal() (dAtA []byte, err error)

func (*RotateRootTokenRequest) MarshalLogObject 

func (x *RotateRootTokenRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*RotateRootTokenRequest) MarshalTo 

func (m *RotateRootTokenRequest) MarshalTo(dAtA []byte) (int, error)

func (*RotateRootTokenRequest) MarshalToSizedBuffer 

func (m *RotateRootTokenRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RotateRootTokenRequest) ProtoMessage 

func (*RotateRootTokenRequest) ProtoMessage()

func (*RotateRootTokenRequest) Reset 

func (m *RotateRootTokenRequest) Reset()

func (*RotateRootTokenRequest) Size 

func (m *RotateRootTokenRequest) Size() (n int)

func (*RotateRootTokenRequest) String 

func (m *RotateRootTokenRequest) String() string

func (*RotateRootTokenRequest) Unmarshal 

func (m *RotateRootTokenRequest) Unmarshal(dAtA []byte) error

func (*RotateRootTokenRequest) XXX_DiscardUnknown 

func (m *RotateRootTokenRequest) XXX_DiscardUnknown()

func (*RotateRootTokenRequest) XXX_Marshal 

func (m *RotateRootTokenRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RotateRootTokenRequest) XXX_Merge 

func (m *RotateRootTokenRequest) XXX_Merge(src proto.Message)

func (*RotateRootTokenRequest) XXX_Size 

func (m *RotateRootTokenRequest) XXX_Size() int

func (*RotateRootTokenRequest) XXX_Unmarshal 

func (m *RotateRootTokenRequest) XXX_Unmarshal(b []byte) error

type RotateRootTokenResponse 

type RotateRootTokenResponse struct {
	RootToken            string   `protobuf:"bytes,1,opt,name=root_token,json=rootToken,proto3" json:"root_token,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*RotateRootTokenResponse) Descriptor 

func (*RotateRootTokenResponse) Descriptor() ([]byte, []int)

func (*RotateRootTokenResponse) GetRootToken 

func (m *RotateRootTokenResponse) GetRootToken() string

func (*RotateRootTokenResponse) Marshal 

func (m *RotateRootTokenResponse) Marshal() (dAtA []byte, err error)

func (*RotateRootTokenResponse) MarshalLogObject 

func (x *RotateRootTokenResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*RotateRootTokenResponse) MarshalTo 

func (m *RotateRootTokenResponse) MarshalTo(dAtA []byte) (int, error)

func (*RotateRootTokenResponse) MarshalToSizedBuffer 

func (m *RotateRootTokenResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*RotateRootTokenResponse) ProtoMessage 

func (*RotateRootTokenResponse) ProtoMessage()

func (*RotateRootTokenResponse) Reset 

func (m *RotateRootTokenResponse) Reset()

func (*RotateRootTokenResponse) Size 

func (m *RotateRootTokenResponse) Size() (n int)

func (*RotateRootTokenResponse) String 

func (m *RotateRootTokenResponse) String() string

func (*RotateRootTokenResponse) Unmarshal 

func (m *RotateRootTokenResponse) Unmarshal(dAtA []byte) error

func (*RotateRootTokenResponse) XXX_DiscardUnknown 

func (m *RotateRootTokenResponse) XXX_DiscardUnknown()

func (*RotateRootTokenResponse) XXX_Marshal 

func (m *RotateRootTokenResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*RotateRootTokenResponse) XXX_Merge 

func (m *RotateRootTokenResponse) XXX_Merge(src proto.Message)

func (*RotateRootTokenResponse) XXX_Size 

func (m *RotateRootTokenResponse) XXX_Size() int

func (*RotateRootTokenResponse) XXX_Unmarshal 

func (m *RotateRootTokenResponse) XXX_Unmarshal(b []byte) error

type SessionInfo 

type SessionInfo struct {
	// nonce is used by /authorization-code/callback to validate session
	// continuity with the IdP after a user has arrived there from GetOIDCLogin().
	// This is a 30-character CSPRNG-generated string.
	Nonce string `protobuf:"bytes,1,opt,name=nonce,proto3" json:"nonce,omitempty"`
	// email contains the email adddress associated with a user in their OIDC ID
	// provider. Currently users are identified with their email address rather
	// than their OIDC subject identifier to make switching between OIDC ID
	// providers easier for users, and to make user identities more easily
	// comprehensible in Pachyderm. The OIDC spec doesn't require that users'
	// emails be present or unique, but we think this will be preferable in
	// practice.
	Email string `protobuf:"bytes,2,opt,name=email,proto3" json:"email,omitempty"`
	// conversion_err indicates whether an error was encountered while exchanging
	// an auth code for an access token, or while obtaining a user's email (in
	// /authorization-code/callback). Storing the error state here allows any
	// sibling calls to Authenticate() (i.e. using the same OIDC state token) to
	// notify their caller that an error has occurred. We avoid passing the caller
	// any details of the error (which are logged by Pachyderm) to avoid giving
	// information to a user who has network access to Pachyderm but not an
	// account in the OIDC provider.
	ConversionErr        bool     `protobuf:"varint,3,opt,name=conversion_err,json=conversionErr,proto3" json:"conversion_err,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

SessionInfo stores information associated with one OIDC authentication session (i.e. a single instance of a single user logging in). Sessions are short-lived and stored in the 'oidc-authns' collection, keyed by the OIDC 'state' token (30-character CSPRNG-generated string). 'GetOIDCLogin' generates and inserts entries, then /authorization-code/callback retrieves an access token from the ID provider and uses it to retrive the caller's email and store it in 'email', and finally Authorize() returns a Pachyderm token identified with that email address as a subject in Pachyderm.

func (*SessionInfo) Descriptor 

func (*SessionInfo) Descriptor() ([]byte, []int)

func (*SessionInfo) GetConversionErr 

func (m *SessionInfo) GetConversionErr() bool

func (*SessionInfo) GetEmail 

func (m *SessionInfo) GetEmail() string

func (*SessionInfo) GetNonce 

func (m *SessionInfo) GetNonce() string

func (*SessionInfo) Marshal 

func (m *SessionInfo) Marshal() (dAtA []byte, err error)

func (*SessionInfo) MarshalLogObject 

func (x *SessionInfo) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*SessionInfo) MarshalTo 

func (m *SessionInfo) MarshalTo(dAtA []byte) (int, error)

func (*SessionInfo) MarshalToSizedBuffer 

func (m *SessionInfo) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*SessionInfo) ProtoMessage 

func (*SessionInfo) ProtoMessage()

func (*SessionInfo) Reset 

func (m *SessionInfo) Reset()

func (*SessionInfo) Size 

func (m *SessionInfo) Size() (n int)

func (*SessionInfo) String 

func (m *SessionInfo) String() string

func (*SessionInfo) Unmarshal 

func (m *SessionInfo) Unmarshal(dAtA []byte) error

func (*SessionInfo) XXX_DiscardUnknown 

func (m *SessionInfo) XXX_DiscardUnknown()

func (*SessionInfo) XXX_Marshal 

func (m *SessionInfo) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*SessionInfo) XXX_Merge 

func (m *SessionInfo) XXX_Merge(src proto.Message)

func (*SessionInfo) XXX_Size 

func (m *SessionInfo) XXX_Size() int

func (*SessionInfo) XXX_Unmarshal 

func (m *SessionInfo) XXX_Unmarshal(b []byte) error

type SetConfigurationRequest 

type SetConfigurationRequest struct {
	Configuration        *OIDCConfig `protobuf:"bytes,1,opt,name=configuration,proto3" json:"configuration,omitempty"`
	XXX_NoUnkeyedLiteral struct{}    `json:"-"`
	XXX_unrecognized     []byte      `json:"-"`
	XXX_sizecache        int32       `json:"-"`
}

func (*SetConfigurationRequest) Descriptor 

func (*SetConfigurationRequest) Descriptor() ([]byte, []int)

func (*SetConfigurationRequest) GetConfiguration 

func (m *SetConfigurationRequest) GetConfiguration() *OIDCConfig

func (*SetConfigurationRequest) Marshal 

func (m *SetConfigurationRequest) Marshal() (dAtA []byte, err error)

func (*SetConfigurationRequest) MarshalLogObject 

func (x *SetConfigurationRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*SetConfigurationRequest) MarshalTo 

func (m *SetConfigurationRequest) MarshalTo(dAtA []byte) (int, error)

func (*SetConfigurationRequest) MarshalToSizedBuffer 

func (m *SetConfigurationRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*SetConfigurationRequest) ProtoMessage 

func (*SetConfigurationRequest) ProtoMessage()

func (*SetConfigurationRequest) Reset 

func (m *SetConfigurationRequest) Reset()

func (*SetConfigurationRequest) Size 

func (m *SetConfigurationRequest) Size() (n int)

func (*SetConfigurationRequest) String 

func (m *SetConfigurationRequest) String() string

func (*SetConfigurationRequest) Unmarshal 

func (m *SetConfigurationRequest) Unmarshal(dAtA []byte) error

func (*SetConfigurationRequest) XXX_DiscardUnknown 

func (m *SetConfigurationRequest) XXX_DiscardUnknown()

func (*SetConfigurationRequest) XXX_Marshal 

func (m *SetConfigurationRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*SetConfigurationRequest) XXX_Merge 

func (m *SetConfigurationRequest) XXX_Merge(src proto.Message)

func (*SetConfigurationRequest) XXX_Size 

func (m *SetConfigurationRequest) XXX_Size() int

func (*SetConfigurationRequest) XXX_Unmarshal 

func (m *SetConfigurationRequest) XXX_Unmarshal(b []byte) error

type SetConfigurationResponse 

type SetConfigurationResponse struct {
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*SetConfigurationResponse) Descriptor 

func (*SetConfigurationResponse) Descriptor() ([]byte, []int)

func (*SetConfigurationResponse) Marshal 

func (m *SetConfigurationResponse) Marshal() (dAtA []byte, err error)

func (*SetConfigurationResponse) MarshalLogObject 

func (x *SetConfigurationResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*SetConfigurationResponse) MarshalTo 

func (m *SetConfigurationResponse) MarshalTo(dAtA []byte) (int, error)

func (*SetConfigurationResponse) MarshalToSizedBuffer 

func (m *SetConfigurationResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*SetConfigurationResponse) ProtoMessage 

func (*SetConfigurationResponse) ProtoMessage()

func (*SetConfigurationResponse) Reset 

func (m *SetConfigurationResponse) Reset()

func (*SetConfigurationResponse) Size 

func (m *SetConfigurationResponse) Size() (n int)

func (*SetConfigurationResponse) String 

func (m *SetConfigurationResponse) String() string

func (*SetConfigurationResponse) Unmarshal 

func (m *SetConfigurationResponse) Unmarshal(dAtA []byte) error

func (*SetConfigurationResponse) XXX_DiscardUnknown 

func (m *SetConfigurationResponse) XXX_DiscardUnknown()

func (*SetConfigurationResponse) XXX_Marshal 

func (m *SetConfigurationResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*SetConfigurationResponse) XXX_Merge 

func (m *SetConfigurationResponse) XXX_Merge(src proto.Message)

func (*SetConfigurationResponse) XXX_Size 

func (m *SetConfigurationResponse) XXX_Size() int

func (*SetConfigurationResponse) XXX_Unmarshal 

func (m *SetConfigurationResponse) XXX_Unmarshal(b []byte) error

type SetGroupsForUserRequest 

type SetGroupsForUserRequest struct {
	Username             string   `protobuf:"bytes,1,opt,name=username,proto3" json:"username,omitempty"`
	Groups               []string `protobuf:"bytes,2,rep,name=groups,proto3" json:"groups,omitempty"`
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*SetGroupsForUserRequest) Descriptor 

func (*SetGroupsForUserRequest) Descriptor() ([]byte, []int)

func (*SetGroupsForUserRequest) GetGroups 

func (m *SetGroupsForUserRequest) GetGroups() []string

func (*SetGroupsForUserRequest) GetUsername 

func (m *SetGroupsForUserRequest) GetUsername() string

func (*SetGroupsForUserRequest) Marshal 

func (m *SetGroupsForUserRequest) Marshal() (dAtA []byte, err error)

func (*SetGroupsForUserRequest) MarshalLogObject 

func (x *SetGroupsForUserRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*SetGroupsForUserRequest) MarshalTo 

func (m *SetGroupsForUserRequest) MarshalTo(dAtA []byte) (int, error)

func (*SetGroupsForUserRequest) MarshalToSizedBuffer 

func (m *SetGroupsForUserRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*SetGroupsForUserRequest) ProtoMessage 

func (*SetGroupsForUserRequest) ProtoMessage()

func (*SetGroupsForUserRequest) Reset 

func (m *SetGroupsForUserRequest) Reset()

func (*SetGroupsForUserRequest) Size 

func (m *SetGroupsForUserRequest) Size() (n int)

func (*SetGroupsForUserRequest) String 

func (m *SetGroupsForUserRequest) String() string

func (*SetGroupsForUserRequest) Unmarshal 

func (m *SetGroupsForUserRequest) Unmarshal(dAtA []byte) error

func (*SetGroupsForUserRequest) XXX_DiscardUnknown 

func (m *SetGroupsForUserRequest) XXX_DiscardUnknown()

func (*SetGroupsForUserRequest) XXX_Marshal 

func (m *SetGroupsForUserRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*SetGroupsForUserRequest) XXX_Merge 

func (m *SetGroupsForUserRequest) XXX_Merge(src proto.Message)

func (*SetGroupsForUserRequest) XXX_Size 

func (m *SetGroupsForUserRequest) XXX_Size() int

func (*SetGroupsForUserRequest) XXX_Unmarshal 

func (m *SetGroupsForUserRequest) XXX_Unmarshal(b []byte) error

type SetGroupsForUserResponse 

type SetGroupsForUserResponse struct {
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*SetGroupsForUserResponse) Descriptor 

func (*SetGroupsForUserResponse) Descriptor() ([]byte, []int)

func (*SetGroupsForUserResponse) Marshal 

func (m *SetGroupsForUserResponse) Marshal() (dAtA []byte, err error)

func (*SetGroupsForUserResponse) MarshalLogObject 

func (x *SetGroupsForUserResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*SetGroupsForUserResponse) MarshalTo 

func (m *SetGroupsForUserResponse) MarshalTo(dAtA []byte) (int, error)

func (*SetGroupsForUserResponse) MarshalToSizedBuffer 

func (m *SetGroupsForUserResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*SetGroupsForUserResponse) ProtoMessage 

func (*SetGroupsForUserResponse) ProtoMessage()

func (*SetGroupsForUserResponse) Reset 

func (m *SetGroupsForUserResponse) Reset()

func (*SetGroupsForUserResponse) Size 

func (m *SetGroupsForUserResponse) Size() (n int)

func (*SetGroupsForUserResponse) String 

func (m *SetGroupsForUserResponse) String() string

func (*SetGroupsForUserResponse) Unmarshal 

func (m *SetGroupsForUserResponse) Unmarshal(dAtA []byte) error

func (*SetGroupsForUserResponse) XXX_DiscardUnknown 

func (m *SetGroupsForUserResponse) XXX_DiscardUnknown()

func (*SetGroupsForUserResponse) XXX_Marshal 

func (m *SetGroupsForUserResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*SetGroupsForUserResponse) XXX_Merge 

func (m *SetGroupsForUserResponse) XXX_Merge(src proto.Message)

func (*SetGroupsForUserResponse) XXX_Size 

func (m *SetGroupsForUserResponse) XXX_Size() int

func (*SetGroupsForUserResponse) XXX_Unmarshal 

func (m *SetGroupsForUserResponse) XXX_Unmarshal(b []byte) error

type TokenInfo 

type TokenInfo struct {
	// Subject (i.e. Pachyderm account) that a given token authorizes.
	// See the note at the top of the doc for an explanation of subject structure.
	Subject              string     `protobuf:"bytes,1,opt,name=subject,proto3" json:"subject,omitempty"`
	Expiration           *time.Time `protobuf:"bytes,2,opt,name=expiration,proto3,stdtime" json:"expiration,omitempty" db:"expiration"`
	HashedToken          string     `protobuf:"bytes,3,opt,name=hashed_token,json=hashedToken,proto3" json:"hashed_token,omitempty" db:"token_hash"`
	XXX_NoUnkeyedLiteral struct{}   `json:"-"`
	XXX_unrecognized     []byte     `json:"-"`
	XXX_sizecache        int32      `json:"-"`
}

TokenInfo is the 'value' of an auth token 'key' in the 'tokens' collection

func (*TokenInfo) Descriptor 

func (*TokenInfo) Descriptor() ([]byte, []int)

func (*TokenInfo) GetExpiration 

func (m *TokenInfo) GetExpiration() *time.Time

func (*TokenInfo) GetHashedToken 

func (m *TokenInfo) GetHashedToken() string

func (*TokenInfo) GetSubject 

func (m *TokenInfo) GetSubject() string

func (*TokenInfo) Marshal 

func (m *TokenInfo) Marshal() (dAtA []byte, err error)

func (*TokenInfo) MarshalLogObject 

func (x *TokenInfo) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*TokenInfo) MarshalTo 

func (m *TokenInfo) MarshalTo(dAtA []byte) (int, error)

func (*TokenInfo) MarshalToSizedBuffer 

func (m *TokenInfo) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*TokenInfo) ProtoMessage 

func (*TokenInfo) ProtoMessage()

func (*TokenInfo) Reset 

func (m *TokenInfo) Reset()

func (*TokenInfo) Size 

func (m *TokenInfo) Size() (n int)

func (*TokenInfo) String 

func (m *TokenInfo) String() string

func (*TokenInfo) Unmarshal 

func (m *TokenInfo) Unmarshal(dAtA []byte) error

func (*TokenInfo) XXX_DiscardUnknown 

func (m *TokenInfo) XXX_DiscardUnknown()

func (*TokenInfo) XXX_Marshal 

func (m *TokenInfo) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*TokenInfo) XXX_Merge 

func (m *TokenInfo) XXX_Merge(src proto.Message)

func (*TokenInfo) XXX_Size 

func (m *TokenInfo) XXX_Size() int

func (*TokenInfo) XXX_Unmarshal 

func (m *TokenInfo) XXX_Unmarshal(b []byte) error

type UnimplementedAPIServer 

type UnimplementedAPIServer struct {
}

UnimplementedAPIServer can be embedded to have forward compatible implementations.

func (*UnimplementedAPIServer) Activate 

func (*UnimplementedAPIServer) Activate(ctx context.Context, req *ActivateRequest) (*ActivateResponse, error)

func (*UnimplementedAPIServer) Authenticate 

func (*UnimplementedAPIServer) Authenticate(ctx context.Context, req *AuthenticateRequest) (*AuthenticateResponse, error)

func (*UnimplementedAPIServer) Authorize 

func (*UnimplementedAPIServer) Authorize(ctx context.Context, req *AuthorizeRequest) (*AuthorizeResponse, error)

func (*UnimplementedAPIServer) Deactivate 

func (*UnimplementedAPIServer) Deactivate(ctx context.Context, req *DeactivateRequest) (*DeactivateResponse, error)

func (*UnimplementedAPIServer) DeleteExpiredAuthTokens 

func (*UnimplementedAPIServer) DeleteExpiredAuthTokens(ctx context.Context, req *DeleteExpiredAuthTokensRequest) (*DeleteExpiredAuthTokensResponse, error)

func (*UnimplementedAPIServer) ExtractAuthTokens 

func (*UnimplementedAPIServer) ExtractAuthTokens(ctx context.Context, req *ExtractAuthTokensRequest) (*ExtractAuthTokensResponse, error)

func (*UnimplementedAPIServer) GetConfiguration 

func (*UnimplementedAPIServer) GetConfiguration(ctx context.Context, req *GetConfigurationRequest) (*GetConfigurationResponse, error)

func (*UnimplementedAPIServer) GetGroups 

func (*UnimplementedAPIServer) GetGroups(ctx context.Context, req *GetGroupsRequest) (*GetGroupsResponse, error)

func (*UnimplementedAPIServer) GetGroupsForPrincipal 

func (*UnimplementedAPIServer) GetGroupsForPrincipal(ctx context.Context, req *GetGroupsForPrincipalRequest) (*GetGroupsResponse, error)

func (*UnimplementedAPIServer) GetOIDCLogin 

func (*UnimplementedAPIServer) GetOIDCLogin(ctx context.Context, req *GetOIDCLoginRequest) (*GetOIDCLoginResponse, error)

func (*UnimplementedAPIServer) GetPermissions 

func (*UnimplementedAPIServer) GetPermissions(ctx context.Context, req *GetPermissionsRequest) (*GetPermissionsResponse, error)

func (*UnimplementedAPIServer) GetPermissionsForPrincipal 

func (*UnimplementedAPIServer) GetPermissionsForPrincipal(ctx context.Context, req *GetPermissionsForPrincipalRequest) (*GetPermissionsResponse, error)

func (*UnimplementedAPIServer) GetRobotToken 

func (*UnimplementedAPIServer) GetRobotToken(ctx context.Context, req *GetRobotTokenRequest) (*GetRobotTokenResponse, error)

func (*UnimplementedAPIServer) GetRoleBinding 

func (*UnimplementedAPIServer) GetRoleBinding(ctx context.Context, req *GetRoleBindingRequest) (*GetRoleBindingResponse, error)

func (*UnimplementedAPIServer) GetRolesForPermission 

func (*UnimplementedAPIServer) GetRolesForPermission(ctx context.Context, req *GetRolesForPermissionRequest) (*GetRolesForPermissionResponse, error)

func (*UnimplementedAPIServer) GetUsers 

func (*UnimplementedAPIServer) GetUsers(ctx context.Context, req *GetUsersRequest) (*GetUsersResponse, error)

func (*UnimplementedAPIServer) ModifyMembers 

func (*UnimplementedAPIServer) ModifyMembers(ctx context.Context, req *ModifyMembersRequest) (*ModifyMembersResponse, error)

func (*UnimplementedAPIServer) ModifyRoleBinding 

func (*UnimplementedAPIServer) ModifyRoleBinding(ctx context.Context, req *ModifyRoleBindingRequest) (*ModifyRoleBindingResponse, error)

func (*UnimplementedAPIServer) RestoreAuthToken 

func (*UnimplementedAPIServer) RestoreAuthToken(ctx context.Context, req *RestoreAuthTokenRequest) (*RestoreAuthTokenResponse, error)

func (*UnimplementedAPIServer) RevokeAuthToken 

func (*UnimplementedAPIServer) RevokeAuthToken(ctx context.Context, req *RevokeAuthTokenRequest) (*RevokeAuthTokenResponse, error)

func (*UnimplementedAPIServer) RevokeAuthTokensForUser 

func (*UnimplementedAPIServer) RevokeAuthTokensForUser(ctx context.Context, req *RevokeAuthTokensForUserRequest) (*RevokeAuthTokensForUserResponse, error)

func (*UnimplementedAPIServer) RotateRootToken 

func (*UnimplementedAPIServer) RotateRootToken(ctx context.Context, req *RotateRootTokenRequest) (*RotateRootTokenResponse, error)

func (*UnimplementedAPIServer) SetConfiguration 

func (*UnimplementedAPIServer) SetConfiguration(ctx context.Context, req *SetConfigurationRequest) (*SetConfigurationResponse, error)

func (*UnimplementedAPIServer) SetGroupsForUser 

func (*UnimplementedAPIServer) SetGroupsForUser(ctx context.Context, req *SetGroupsForUserRequest) (*SetGroupsForUserResponse, error)

func (*UnimplementedAPIServer) WhoAmI 

func (*UnimplementedAPIServer) WhoAmI(ctx context.Context, req *WhoAmIRequest) (*WhoAmIResponse, error)

type Users 

type Users struct {
	Usernames            map[string]bool `` /* 160-byte string literal not displayed */
	XXX_NoUnkeyedLiteral struct{}        `json:"-"`
	XXX_unrecognized     []byte          `json:"-"`
	XXX_sizecache        int32           `json:"-"`
}

func (*Users) Descriptor 

func (*Users) Descriptor() ([]byte, []int)

func (*Users) GetUsernames 

func (m *Users) GetUsernames() map[string]bool

func (*Users) Marshal 

func (m *Users) Marshal() (dAtA []byte, err error)

func (*Users) MarshalLogObject 

func (x *Users) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*Users) MarshalTo 

func (m *Users) MarshalTo(dAtA []byte) (int, error)

func (*Users) MarshalToSizedBuffer 

func (m *Users) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*Users) ProtoMessage 

func (*Users) ProtoMessage()

func (*Users) Reset 

func (m *Users) Reset()

func (*Users) Size 

func (m *Users) Size() (n int)

func (*Users) String 

func (m *Users) String() string

func (*Users) Unmarshal 

func (m *Users) Unmarshal(dAtA []byte) error

func (*Users) XXX_DiscardUnknown 

func (m *Users) XXX_DiscardUnknown()

func (*Users) XXX_Marshal 

func (m *Users) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*Users) XXX_Merge 

func (m *Users) XXX_Merge(src proto.Message)

func (*Users) XXX_Size 

func (m *Users) XXX_Size() int

func (*Users) XXX_Unmarshal 

func (m *Users) XXX_Unmarshal(b []byte) error

type WhoAmIRequest 

type WhoAmIRequest struct {
	XXX_NoUnkeyedLiteral struct{} `json:"-"`
	XXX_unrecognized     []byte   `json:"-"`
	XXX_sizecache        int32    `json:"-"`
}

func (*WhoAmIRequest) Descriptor 

func (*WhoAmIRequest) Descriptor() ([]byte, []int)

func (*WhoAmIRequest) Marshal 

func (m *WhoAmIRequest) Marshal() (dAtA []byte, err error)

func (*WhoAmIRequest) MarshalLogObject 

func (x *WhoAmIRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*WhoAmIRequest) MarshalTo 

func (m *WhoAmIRequest) MarshalTo(dAtA []byte) (int, error)

func (*WhoAmIRequest) MarshalToSizedBuffer 

func (m *WhoAmIRequest) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*WhoAmIRequest) ProtoMessage 

func (*WhoAmIRequest) ProtoMessage()

func (*WhoAmIRequest) Reset 

func (m *WhoAmIRequest) Reset()

func (*WhoAmIRequest) Size 

func (m *WhoAmIRequest) Size() (n int)

func (*WhoAmIRequest) String 

func (m *WhoAmIRequest) String() string

func (*WhoAmIRequest) Unmarshal 

func (m *WhoAmIRequest) Unmarshal(dAtA []byte) error

func (*WhoAmIRequest) XXX_DiscardUnknown 

func (m *WhoAmIRequest) XXX_DiscardUnknown()

func (*WhoAmIRequest) XXX_Marshal 

func (m *WhoAmIRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*WhoAmIRequest) XXX_Merge 

func (m *WhoAmIRequest) XXX_Merge(src proto.Message)

func (*WhoAmIRequest) XXX_Size 

func (m *WhoAmIRequest) XXX_Size() int

func (*WhoAmIRequest) XXX_Unmarshal 

func (m *WhoAmIRequest) XXX_Unmarshal(b []byte) error

type WhoAmIResponse 

type WhoAmIResponse struct {
	Username             string     `protobuf:"bytes,1,opt,name=username,proto3" json:"username,omitempty"`
	Expiration           *time.Time `protobuf:"bytes,2,opt,name=expiration,proto3,stdtime" json:"expiration,omitempty" db:"expiration"`
	XXX_NoUnkeyedLiteral struct{}   `json:"-"`
	XXX_unrecognized     []byte     `json:"-"`
	XXX_sizecache        int32      `json:"-"`
}

func (*WhoAmIResponse) Descriptor 

func (*WhoAmIResponse) Descriptor() ([]byte, []int)

func (*WhoAmIResponse) GetExpiration 

func (m *WhoAmIResponse) GetExpiration() *time.Time

func (*WhoAmIResponse) GetUsername 

func (m *WhoAmIResponse) GetUsername() string

func (*WhoAmIResponse) Marshal 

func (m *WhoAmIResponse) Marshal() (dAtA []byte, err error)

func (*WhoAmIResponse) MarshalLogObject 

func (x *WhoAmIResponse) MarshalLogObject(enc zapcore.ObjectEncoder) error

func (*WhoAmIResponse) MarshalTo 

func (m *WhoAmIResponse) MarshalTo(dAtA []byte) (int, error)

func (*WhoAmIResponse) MarshalToSizedBuffer 

func (m *WhoAmIResponse) MarshalToSizedBuffer(dAtA []byte) (int, error)

func (*WhoAmIResponse) ProtoMessage 

func (*WhoAmIResponse) ProtoMessage()

func (*WhoAmIResponse) Reset 

func (m *WhoAmIResponse) Reset()

func (*WhoAmIResponse) Size 

func (m *WhoAmIResponse) Size() (n int)

func (*WhoAmIResponse) String 

func (m *WhoAmIResponse) String() string

func (*WhoAmIResponse) Unmarshal 

func (m *WhoAmIResponse) Unmarshal(dAtA []byte) error

func (*WhoAmIResponse) XXX_DiscardUnknown 

func (m *WhoAmIResponse) XXX_DiscardUnknown()

func (*WhoAmIResponse) XXX_Marshal 

func (m *WhoAmIResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error)

func (*WhoAmIResponse) XXX_Merge 

func (m *WhoAmIResponse) XXX_Merge(src proto.Message)

func (*WhoAmIResponse) XXX_Size 

func (m *WhoAmIResponse) XXX_Size() int

func (*WhoAmIResponse) XXX_Unmarshal 

func (m *WhoAmIResponse) XXX_Unmarshal(b []byte) error

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.