policy

package
v0.0.0-...-3b69245 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Apr 27, 2024 License: AGPL-3.0 Imports: 9 Imported by: 10

Documentation

Index

Constants

This section is empty.

Variables

View Source
var (
	BuiltInPolicyType_name = map[int32]string{
		0: "GLOBAL_ROOT",
		1: "NAMESPACE_ROOT",
		2: "EMPTY",
	}
	BuiltInPolicyType_value = map[string]int32{
		"GLOBAL_ROOT":    0,
		"NAMESPACE_ROOT": 1,
		"EMPTY":          2,
	}
)

Enum value maps for BuiltInPolicyType.

View Source
var File_policy_proto protoreflect.FileDescriptor
View Source
var IAMPolicyService_ServiceDesc = grpc.ServiceDesc{
	ServiceName: "native_iam_policy.IAMPolicyService",
	HandlerType: (*IAMPolicyServiceServer)(nil),
	Methods: []grpc.MethodDesc{
		{
			MethodName: "Create",
			Handler:    _IAMPolicyService_Create_Handler,
		},
		{
			MethodName: "Get",
			Handler:    _IAMPolicyService_Get_Handler,
		},
		{
			MethodName: "Exist",
			Handler:    _IAMPolicyService_Exist_Handler,
		},
		{
			MethodName: "Update",
			Handler:    _IAMPolicyService_Update_Handler,
		},
		{
			MethodName: "Delete",
			Handler:    _IAMPolicyService_Delete_Handler,
		},
		{
			MethodName: "Count",
			Handler:    _IAMPolicyService_Count_Handler,
		},
		{
			MethodName: "GetServiceManagedPolicy",
			Handler:    _IAMPolicyService_GetServiceManagedPolicy_Handler,
		},
		{
			MethodName: "GetBuiltInPolicy",
			Handler:    _IAMPolicyService_GetBuiltInPolicy_Handler,
		},
	},
	Streams: []grpc.StreamDesc{
		{
			StreamName:    "GetMultiple",
			Handler:       _IAMPolicyService_GetMultiple_Handler,
			ServerStreams: true,
		},
		{
			StreamName:    "List",
			Handler:       _IAMPolicyService_List_Handler,
			ServerStreams: true,
		},
	},
	Metadata: "policy.proto",
}

IAMPolicyService_ServiceDesc is the grpc.ServiceDesc for IAMPolicyService service. It's only intended for direct use with grpc.RegisterService, and not to be introspected or modified (even as a copy)

Functions

func RegisterIAMPolicyServiceServer

func RegisterIAMPolicyServiceServer(s grpc.ServiceRegistrar, srv IAMPolicyServiceServer)

Types

type BuiltInManagedData

type BuiltInManagedData struct {

	// Type of the builtin policy
	Type BuiltInPolicyType `protobuf:"varint,1,opt,name=type,proto3,enum=native_iam_policy.BuiltInPolicyType" json:"type,omitempty"`
	// contains filtered or unexported fields
}

Information about built in policy

func (*BuiltInManagedData) Descriptor deprecated

func (*BuiltInManagedData) Descriptor() ([]byte, []int)

Deprecated: Use BuiltInManagedData.ProtoReflect.Descriptor instead.

func (*BuiltInManagedData) GetType

func (*BuiltInManagedData) ProtoMessage

func (*BuiltInManagedData) ProtoMessage()

func (*BuiltInManagedData) ProtoReflect

func (x *BuiltInManagedData) ProtoReflect() protoreflect.Message

func (*BuiltInManagedData) Reset

func (x *BuiltInManagedData) Reset()

func (*BuiltInManagedData) String

func (x *BuiltInManagedData) String() string

type BuiltInPolicyType

type BuiltInPolicyType int32
const (
	// Policy with full access to everything
	BuiltInPolicyType_GLOBAL_ROOT BuiltInPolicyType = 0
	// Policy with full access to the namespace
	BuiltInPolicyType_NAMESPACE_ROOT BuiltInPolicyType = 1
	// Empty policy that gives nothing. Use it if you want to correlate something with namespace but dont want to give any permisions.
	BuiltInPolicyType_EMPTY BuiltInPolicyType = 2
)

func (BuiltInPolicyType) Descriptor

func (BuiltInPolicyType) Enum

func (BuiltInPolicyType) EnumDescriptor deprecated

func (BuiltInPolicyType) EnumDescriptor() ([]byte, []int)

Deprecated: Use BuiltInPolicyType.Descriptor instead.

func (BuiltInPolicyType) Number

func (BuiltInPolicyType) String

func (x BuiltInPolicyType) String() string

func (BuiltInPolicyType) Type

type CountPoliciesRequest

type CountPoliciesRequest struct {

	// Namespace where to count policies
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// Use cache or not. Cached policy data may not be actual under very rare conditions. Invalid cache data is automatically clear after short period of time.
	UseCache bool `protobuf:"varint,2,opt,name=useCache,proto3" json:"useCache,omitempty"`
	// contains filtered or unexported fields
}

func (*CountPoliciesRequest) Descriptor deprecated

func (*CountPoliciesRequest) Descriptor() ([]byte, []int)

Deprecated: Use CountPoliciesRequest.ProtoReflect.Descriptor instead.

func (*CountPoliciesRequest) GetNamespace

func (x *CountPoliciesRequest) GetNamespace() string

func (*CountPoliciesRequest) GetUseCache

func (x *CountPoliciesRequest) GetUseCache() bool

func (*CountPoliciesRequest) ProtoMessage

func (*CountPoliciesRequest) ProtoMessage()

func (*CountPoliciesRequest) ProtoReflect

func (x *CountPoliciesRequest) ProtoReflect() protoreflect.Message

func (*CountPoliciesRequest) Reset

func (x *CountPoliciesRequest) Reset()

func (*CountPoliciesRequest) String

func (x *CountPoliciesRequest) String() string

type CountPoliciesResponse

type CountPoliciesResponse struct {

	// Count of policies in specified namespace
	Count uint64 `protobuf:"varint,1,opt,name=count,proto3" json:"count,omitempty"`
	// contains filtered or unexported fields
}

func (*CountPoliciesResponse) Descriptor deprecated

func (*CountPoliciesResponse) Descriptor() ([]byte, []int)

Deprecated: Use CountPoliciesResponse.ProtoReflect.Descriptor instead.

func (*CountPoliciesResponse) GetCount

func (x *CountPoliciesResponse) GetCount() uint64

func (*CountPoliciesResponse) ProtoMessage

func (*CountPoliciesResponse) ProtoMessage()

func (*CountPoliciesResponse) ProtoReflect

func (x *CountPoliciesResponse) ProtoReflect() protoreflect.Message

func (*CountPoliciesResponse) Reset

func (x *CountPoliciesResponse) Reset()

func (*CountPoliciesResponse) String

func (x *CountPoliciesResponse) String() string

type CreatePolicyRequest

type CreatePolicyRequest struct {

	// Namespace where policy will be created. Namespace can be empty for global policy.
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// Public name. May not be unique.
	Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"`
	// Arbitrary description
	Description string `protobuf:"bytes,3,opt,name=description,proto3" json:"description,omitempty"`
	//
	//Indicates if this policy is managed by someone else.
	//
	//This is only a flag to inform everyone that it is managed by third party actor and
	//manual interaction with this policy may result in big problems. In order to interact with the policy,
	//you should ask someone who manages this policy to do something for you.
	//
	//There are several possible managements:
	//NotManaged* - there is no clear actor responsible for this policy
	//Identity* - this policy was created by identity. This identity is responsible for it
	//Service* - this policy was create by one of the services. This services now manages this policy.
	//
	// Types that are assignable to Managed:
	//	*CreatePolicyRequest_No
	//	*CreatePolicyRequest_Identity
	//	*CreatePolicyRequest_Service
	Managed isCreatePolicyRequest_Managed `protobuf_oneof:"managed"`
	// Indicates if this policy works in all namespaces or only in the namespace where it is defined
	NamespaceIndependent bool `protobuf:"varint,4,opt,name=namespaceIndependent,proto3" json:"namespaceIndependent,omitempty"`
	// List of resource for wich actions will be performed
	Resources []string `protobuf:"bytes,5,rep,name=resources,proto3" json:"resources,omitempty"`
	// List of actions that can be performed with this policy
	Actions []string `protobuf:"bytes,6,rep,name=actions,proto3" json:"actions,omitempty"`
	// contains filtered or unexported fields
}

func (*CreatePolicyRequest) Descriptor deprecated

func (*CreatePolicyRequest) Descriptor() ([]byte, []int)

Deprecated: Use CreatePolicyRequest.ProtoReflect.Descriptor instead.

func (*CreatePolicyRequest) GetActions

func (x *CreatePolicyRequest) GetActions() []string

func (*CreatePolicyRequest) GetDescription

func (x *CreatePolicyRequest) GetDescription() string

func (*CreatePolicyRequest) GetIdentity

func (x *CreatePolicyRequest) GetIdentity() *IdentityManagedData

func (*CreatePolicyRequest) GetManaged

func (m *CreatePolicyRequest) GetManaged() isCreatePolicyRequest_Managed

func (*CreatePolicyRequest) GetName

func (x *CreatePolicyRequest) GetName() string

func (*CreatePolicyRequest) GetNamespace

func (x *CreatePolicyRequest) GetNamespace() string

func (*CreatePolicyRequest) GetNamespaceIndependent

func (x *CreatePolicyRequest) GetNamespaceIndependent() bool

func (*CreatePolicyRequest) GetNo

func (x *CreatePolicyRequest) GetNo() *NotManagedData

func (*CreatePolicyRequest) GetResources

func (x *CreatePolicyRequest) GetResources() []string

func (*CreatePolicyRequest) GetService

func (x *CreatePolicyRequest) GetService() *ServiceManagedData

func (*CreatePolicyRequest) ProtoMessage

func (*CreatePolicyRequest) ProtoMessage()

func (*CreatePolicyRequest) ProtoReflect

func (x *CreatePolicyRequest) ProtoReflect() protoreflect.Message

func (*CreatePolicyRequest) Reset

func (x *CreatePolicyRequest) Reset()

func (*CreatePolicyRequest) String

func (x *CreatePolicyRequest) String() string

type CreatePolicyRequest_Identity

type CreatePolicyRequest_Identity struct {
	// Policy is managed by identity
	Identity *IdentityManagedData `protobuf:"bytes,21,opt,name=identity,proto3,oneof"`
}

type CreatePolicyRequest_No

type CreatePolicyRequest_No struct {
	// Policy is not managed
	No *NotManagedData `protobuf:"bytes,20,opt,name=no,proto3,oneof"`
}

type CreatePolicyRequest_Service

type CreatePolicyRequest_Service struct {
	// Policy is managed by service
	Service *ServiceManagedData `protobuf:"bytes,22,opt,name=service,proto3,oneof"`
}

type CreatePolicyResponse

type CreatePolicyResponse struct {
	Policy *Policy `protobuf:"bytes,1,opt,name=policy,proto3" json:"policy,omitempty"`
	// contains filtered or unexported fields
}

func (*CreatePolicyResponse) Descriptor deprecated

func (*CreatePolicyResponse) Descriptor() ([]byte, []int)

Deprecated: Use CreatePolicyResponse.ProtoReflect.Descriptor instead.

func (*CreatePolicyResponse) GetPolicy

func (x *CreatePolicyResponse) GetPolicy() *Policy

func (*CreatePolicyResponse) ProtoMessage

func (*CreatePolicyResponse) ProtoMessage()

func (*CreatePolicyResponse) ProtoReflect

func (x *CreatePolicyResponse) ProtoReflect() protoreflect.Message

func (*CreatePolicyResponse) Reset

func (x *CreatePolicyResponse) Reset()

func (*CreatePolicyResponse) String

func (x *CreatePolicyResponse) String() string

type DeletePolicyRequest

type DeletePolicyRequest struct {

	// Namespace of the policy
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// Unique identifier of the policy in the namespace
	Uuid string `protobuf:"bytes,2,opt,name=uuid,proto3" json:"uuid,omitempty"`
	// contains filtered or unexported fields
}

func (*DeletePolicyRequest) Descriptor deprecated

func (*DeletePolicyRequest) Descriptor() ([]byte, []int)

Deprecated: Use DeletePolicyRequest.ProtoReflect.Descriptor instead.

func (*DeletePolicyRequest) GetNamespace

func (x *DeletePolicyRequest) GetNamespace() string

func (*DeletePolicyRequest) GetUuid

func (x *DeletePolicyRequest) GetUuid() string

func (*DeletePolicyRequest) ProtoMessage

func (*DeletePolicyRequest) ProtoMessage()

func (*DeletePolicyRequest) ProtoReflect

func (x *DeletePolicyRequest) ProtoReflect() protoreflect.Message

func (*DeletePolicyRequest) Reset

func (x *DeletePolicyRequest) Reset()

func (*DeletePolicyRequest) String

func (x *DeletePolicyRequest) String() string

type DeletePolicyResponse

type DeletePolicyResponse struct {

	// Indicates if policy existed before this request
	Existed bool `protobuf:"varint,1,opt,name=existed,proto3" json:"existed,omitempty"`
	// contains filtered or unexported fields
}

func (*DeletePolicyResponse) Descriptor deprecated

func (*DeletePolicyResponse) Descriptor() ([]byte, []int)

Deprecated: Use DeletePolicyResponse.ProtoReflect.Descriptor instead.

func (*DeletePolicyResponse) GetExisted

func (x *DeletePolicyResponse) GetExisted() bool

func (*DeletePolicyResponse) ProtoMessage

func (*DeletePolicyResponse) ProtoMessage()

func (*DeletePolicyResponse) ProtoReflect

func (x *DeletePolicyResponse) ProtoReflect() protoreflect.Message

func (*DeletePolicyResponse) Reset

func (x *DeletePolicyResponse) Reset()

func (*DeletePolicyResponse) String

func (x *DeletePolicyResponse) String() string

type ExistPolicyRequest

type ExistPolicyRequest struct {

	// Namespace of the policy
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// Unique identifier of the policy in the namespace
	Uuid string `protobuf:"bytes,2,opt,name=uuid,proto3" json:"uuid,omitempty"`
	// Use cache or not. Cache may be invalid under very rare conditions (simultanious read and writes to the policy while it is not in cache). Cache automatically deletes after short period of time (30 seconds by default).
	UseCache bool `protobuf:"varint,3,opt,name=useCache,proto3" json:"useCache,omitempty"`
	// contains filtered or unexported fields
}

func (*ExistPolicyRequest) Descriptor deprecated

func (*ExistPolicyRequest) Descriptor() ([]byte, []int)

Deprecated: Use ExistPolicyRequest.ProtoReflect.Descriptor instead.

func (*ExistPolicyRequest) GetNamespace

func (x *ExistPolicyRequest) GetNamespace() string

func (*ExistPolicyRequest) GetUseCache

func (x *ExistPolicyRequest) GetUseCache() bool

func (*ExistPolicyRequest) GetUuid

func (x *ExistPolicyRequest) GetUuid() string

func (*ExistPolicyRequest) ProtoMessage

func (*ExistPolicyRequest) ProtoMessage()

func (*ExistPolicyRequest) ProtoReflect

func (x *ExistPolicyRequest) ProtoReflect() protoreflect.Message

func (*ExistPolicyRequest) Reset

func (x *ExistPolicyRequest) Reset()

func (*ExistPolicyRequest) String

func (x *ExistPolicyRequest) String() string

type ExistPolicyResponse

type ExistPolicyResponse struct {

	// True if policy exists, false if not
	Exist bool `protobuf:"varint,1,opt,name=exist,proto3" json:"exist,omitempty"`
	// contains filtered or unexported fields
}

func (*ExistPolicyResponse) Descriptor deprecated

func (*ExistPolicyResponse) Descriptor() ([]byte, []int)

Deprecated: Use ExistPolicyResponse.ProtoReflect.Descriptor instead.

func (*ExistPolicyResponse) GetExist

func (x *ExistPolicyResponse) GetExist() bool

func (*ExistPolicyResponse) ProtoMessage

func (*ExistPolicyResponse) ProtoMessage()

func (*ExistPolicyResponse) ProtoReflect

func (x *ExistPolicyResponse) ProtoReflect() protoreflect.Message

func (*ExistPolicyResponse) Reset

func (x *ExistPolicyResponse) Reset()

func (*ExistPolicyResponse) String

func (x *ExistPolicyResponse) String() string

type GetBuiltInPolicyRequest

type GetBuiltInPolicyRequest struct {

	// Namespace where to get builtin policy.
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// Type of the policy to search
	Type BuiltInPolicyType `protobuf:"varint,2,opt,name=type,proto3,enum=native_iam_policy.BuiltInPolicyType" json:"type,omitempty"`
	// contains filtered or unexported fields
}

func (*GetBuiltInPolicyRequest) Descriptor deprecated

func (*GetBuiltInPolicyRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetBuiltInPolicyRequest.ProtoReflect.Descriptor instead.

func (*GetBuiltInPolicyRequest) GetNamespace

func (x *GetBuiltInPolicyRequest) GetNamespace() string

func (*GetBuiltInPolicyRequest) GetType

func (*GetBuiltInPolicyRequest) ProtoMessage

func (*GetBuiltInPolicyRequest) ProtoMessage()

func (*GetBuiltInPolicyRequest) ProtoReflect

func (x *GetBuiltInPolicyRequest) ProtoReflect() protoreflect.Message

func (*GetBuiltInPolicyRequest) Reset

func (x *GetBuiltInPolicyRequest) Reset()

func (*GetBuiltInPolicyRequest) String

func (x *GetBuiltInPolicyRequest) String() string

type GetBuiltInPolicyResponse

type GetBuiltInPolicyResponse struct {
	Policy *Policy `protobuf:"bytes,1,opt,name=policy,proto3" json:"policy,omitempty"`
	// contains filtered or unexported fields
}

func (*GetBuiltInPolicyResponse) Descriptor deprecated

func (*GetBuiltInPolicyResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetBuiltInPolicyResponse.ProtoReflect.Descriptor instead.

func (*GetBuiltInPolicyResponse) GetPolicy

func (x *GetBuiltInPolicyResponse) GetPolicy() *Policy

func (*GetBuiltInPolicyResponse) ProtoMessage

func (*GetBuiltInPolicyResponse) ProtoMessage()

func (*GetBuiltInPolicyResponse) ProtoReflect

func (x *GetBuiltInPolicyResponse) ProtoReflect() protoreflect.Message

func (*GetBuiltInPolicyResponse) Reset

func (x *GetBuiltInPolicyResponse) Reset()

func (*GetBuiltInPolicyResponse) String

func (x *GetBuiltInPolicyResponse) String() string

type GetMultiplePoliciesRequest

type GetMultiplePoliciesRequest struct {

	// List of policies to get
	Policies []*GetMultiplePoliciesRequest_RequestedPolicy `protobuf:"bytes,1,rep,name=policies,proto3" json:"policies,omitempty"`
	// contains filtered or unexported fields
}

func (*GetMultiplePoliciesRequest) Descriptor deprecated

func (*GetMultiplePoliciesRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetMultiplePoliciesRequest.ProtoReflect.Descriptor instead.

func (*GetMultiplePoliciesRequest) GetPolicies

func (*GetMultiplePoliciesRequest) ProtoMessage

func (*GetMultiplePoliciesRequest) ProtoMessage()

func (*GetMultiplePoliciesRequest) ProtoReflect

func (*GetMultiplePoliciesRequest) Reset

func (x *GetMultiplePoliciesRequest) Reset()

func (*GetMultiplePoliciesRequest) String

func (x *GetMultiplePoliciesRequest) String() string

type GetMultiplePoliciesRequest_RequestedPolicy

type GetMultiplePoliciesRequest_RequestedPolicy struct {

	// Namespace where to search for policy. Leave empty for global policy.
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// Unique identifier of the policy inside searched namespace
	Uuid string `protobuf:"bytes,2,opt,name=uuid,proto3" json:"uuid,omitempty"`
	// contains filtered or unexported fields
}

Hold information on where to find the policy

func (*GetMultiplePoliciesRequest_RequestedPolicy) Descriptor deprecated

Deprecated: Use GetMultiplePoliciesRequest_RequestedPolicy.ProtoReflect.Descriptor instead.

func (*GetMultiplePoliciesRequest_RequestedPolicy) GetNamespace

func (*GetMultiplePoliciesRequest_RequestedPolicy) GetUuid

func (*GetMultiplePoliciesRequest_RequestedPolicy) ProtoMessage

func (*GetMultiplePoliciesRequest_RequestedPolicy) ProtoReflect

func (*GetMultiplePoliciesRequest_RequestedPolicy) Reset

func (*GetMultiplePoliciesRequest_RequestedPolicy) String

type GetMultiplePoliciesResponse

type GetMultiplePoliciesResponse struct {

	// Founded policy. The ordering is random.
	Policy *Policy `protobuf:"bytes,1,opt,name=policy,proto3" json:"policy,omitempty"`
	// contains filtered or unexported fields
}

func (*GetMultiplePoliciesResponse) Descriptor deprecated

func (*GetMultiplePoliciesResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetMultiplePoliciesResponse.ProtoReflect.Descriptor instead.

func (*GetMultiplePoliciesResponse) GetPolicy

func (x *GetMultiplePoliciesResponse) GetPolicy() *Policy

func (*GetMultiplePoliciesResponse) ProtoMessage

func (*GetMultiplePoliciesResponse) ProtoMessage()

func (*GetMultiplePoliciesResponse) ProtoReflect

func (*GetMultiplePoliciesResponse) Reset

func (x *GetMultiplePoliciesResponse) Reset()

func (*GetMultiplePoliciesResponse) String

func (x *GetMultiplePoliciesResponse) String() string

type GetPolicyRequest

type GetPolicyRequest struct {

	// Namespace of the policy
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// Unique identifier of the policy in the namespace
	Uuid string `protobuf:"bytes,2,opt,name=uuid,proto3" json:"uuid,omitempty"`
	// Use cache or not. Cache may be invalid under very rare conditions (simultanious read and writes to the policy while it is not in cache). Cache automatically deletes after short period of time (30 seconds by default).
	UseCache bool `protobuf:"varint,3,opt,name=useCache,proto3" json:"useCache,omitempty"`
	// contains filtered or unexported fields
}

func (*GetPolicyRequest) Descriptor deprecated

func (*GetPolicyRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetPolicyRequest.ProtoReflect.Descriptor instead.

func (*GetPolicyRequest) GetNamespace

func (x *GetPolicyRequest) GetNamespace() string

func (*GetPolicyRequest) GetUseCache

func (x *GetPolicyRequest) GetUseCache() bool

func (*GetPolicyRequest) GetUuid

func (x *GetPolicyRequest) GetUuid() string

func (*GetPolicyRequest) ProtoMessage

func (*GetPolicyRequest) ProtoMessage()

func (*GetPolicyRequest) ProtoReflect

func (x *GetPolicyRequest) ProtoReflect() protoreflect.Message

func (*GetPolicyRequest) Reset

func (x *GetPolicyRequest) Reset()

func (*GetPolicyRequest) String

func (x *GetPolicyRequest) String() string

type GetPolicyResponse

type GetPolicyResponse struct {
	Policy *Policy `protobuf:"bytes,1,opt,name=policy,proto3" json:"policy,omitempty"`
	// contains filtered or unexported fields
}

func (*GetPolicyResponse) Descriptor deprecated

func (*GetPolicyResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetPolicyResponse.ProtoReflect.Descriptor instead.

func (*GetPolicyResponse) GetPolicy

func (x *GetPolicyResponse) GetPolicy() *Policy

func (*GetPolicyResponse) ProtoMessage

func (*GetPolicyResponse) ProtoMessage()

func (*GetPolicyResponse) ProtoReflect

func (x *GetPolicyResponse) ProtoReflect() protoreflect.Message

func (*GetPolicyResponse) Reset

func (x *GetPolicyResponse) Reset()

func (*GetPolicyResponse) String

func (x *GetPolicyResponse) String() string

type GetServiceManagedPolicyRequest

type GetServiceManagedPolicyRequest struct {

	// Namespace where to search for policy
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// Service which manages this policy
	Service string `protobuf:"bytes,2,opt,name=service,proto3" json:"service,omitempty"`
	// Special ID for this policy defined by this service
	ManagedId string `protobuf:"bytes,3,opt,name=managedId,proto3" json:"managedId,omitempty"`
	// Use cache or not. Cached policy data may not be actual under very rare conditions. Invalid cache data is automatically clear after short period of time.
	UseCache bool `protobuf:"varint,4,opt,name=useCache,proto3" json:"useCache,omitempty"`
	// contains filtered or unexported fields
}

func (*GetServiceManagedPolicyRequest) Descriptor deprecated

func (*GetServiceManagedPolicyRequest) Descriptor() ([]byte, []int)

Deprecated: Use GetServiceManagedPolicyRequest.ProtoReflect.Descriptor instead.

func (*GetServiceManagedPolicyRequest) GetManagedId

func (x *GetServiceManagedPolicyRequest) GetManagedId() string

func (*GetServiceManagedPolicyRequest) GetNamespace

func (x *GetServiceManagedPolicyRequest) GetNamespace() string

func (*GetServiceManagedPolicyRequest) GetService

func (x *GetServiceManagedPolicyRequest) GetService() string

func (*GetServiceManagedPolicyRequest) GetUseCache

func (x *GetServiceManagedPolicyRequest) GetUseCache() bool

func (*GetServiceManagedPolicyRequest) ProtoMessage

func (*GetServiceManagedPolicyRequest) ProtoMessage()

func (*GetServiceManagedPolicyRequest) ProtoReflect

func (*GetServiceManagedPolicyRequest) Reset

func (x *GetServiceManagedPolicyRequest) Reset()

func (*GetServiceManagedPolicyRequest) String

type GetServiceManagedPolicyResponse

type GetServiceManagedPolicyResponse struct {

	// Founded policy
	Policy *Policy `protobuf:"bytes,1,opt,name=policy,proto3" json:"policy,omitempty"`
	// contains filtered or unexported fields
}

func (*GetServiceManagedPolicyResponse) Descriptor deprecated

func (*GetServiceManagedPolicyResponse) Descriptor() ([]byte, []int)

Deprecated: Use GetServiceManagedPolicyResponse.ProtoReflect.Descriptor instead.

func (*GetServiceManagedPolicyResponse) GetPolicy

func (x *GetServiceManagedPolicyResponse) GetPolicy() *Policy

func (*GetServiceManagedPolicyResponse) ProtoMessage

func (*GetServiceManagedPolicyResponse) ProtoMessage()

func (*GetServiceManagedPolicyResponse) ProtoReflect

func (*GetServiceManagedPolicyResponse) Reset

func (*GetServiceManagedPolicyResponse) String

type IAMPolicyServiceClient

type IAMPolicyServiceClient interface {
	// Create new policy
	Create(ctx context.Context, in *CreatePolicyRequest, opts ...grpc.CallOption) (*CreatePolicyResponse, error)
	// Get existing policy by uuid
	Get(ctx context.Context, in *GetPolicyRequest, opts ...grpc.CallOption) (*GetPolicyResponse, error)
	// Get multiple policies.
	GetMultiple(ctx context.Context, in *GetMultiplePoliciesRequest, opts ...grpc.CallOption) (IAMPolicyService_GetMultipleClient, error)
	// Check if policy exist or not
	Exist(ctx context.Context, in *ExistPolicyRequest, opts ...grpc.CallOption) (*ExistPolicyResponse, error)
	// Update policy
	Update(ctx context.Context, in *UpdatePolicyRequest, opts ...grpc.CallOption) (*UpdatePolicyResponse, error)
	// Delete policy
	Delete(ctx context.Context, in *DeletePolicyRequest, opts ...grpc.CallOption) (*DeletePolicyResponse, error)
	// List policies in namespace
	List(ctx context.Context, in *ListPoliciesRequest, opts ...grpc.CallOption) (IAMPolicyService_ListClient, error)
	// Count policies in namespace
	Count(ctx context.Context, in *CountPoliciesRequest, opts ...grpc.CallOption) (*CountPoliciesResponse, error)
	// Get policy that is managed by service
	GetServiceManagedPolicy(ctx context.Context, in *GetServiceManagedPolicyRequest, opts ...grpc.CallOption) (*GetServiceManagedPolicyResponse, error)
	// Get one of the builtin policies
	GetBuiltInPolicy(ctx context.Context, in *GetBuiltInPolicyRequest, opts ...grpc.CallOption) (*GetBuiltInPolicyResponse, error)
}

IAMPolicyServiceClient is the client API for IAMPolicyService service.

For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.

type IAMPolicyServiceServer

type IAMPolicyServiceServer interface {
	// Create new policy
	Create(context.Context, *CreatePolicyRequest) (*CreatePolicyResponse, error)
	// Get existing policy by uuid
	Get(context.Context, *GetPolicyRequest) (*GetPolicyResponse, error)
	// Get multiple policies.
	GetMultiple(*GetMultiplePoliciesRequest, IAMPolicyService_GetMultipleServer) error
	// Check if policy exist or not
	Exist(context.Context, *ExistPolicyRequest) (*ExistPolicyResponse, error)
	// Update policy
	Update(context.Context, *UpdatePolicyRequest) (*UpdatePolicyResponse, error)
	// Delete policy
	Delete(context.Context, *DeletePolicyRequest) (*DeletePolicyResponse, error)
	// List policies in namespace
	List(*ListPoliciesRequest, IAMPolicyService_ListServer) error
	// Count policies in namespace
	Count(context.Context, *CountPoliciesRequest) (*CountPoliciesResponse, error)
	// Get policy that is managed by service
	GetServiceManagedPolicy(context.Context, *GetServiceManagedPolicyRequest) (*GetServiceManagedPolicyResponse, error)
	// Get one of the builtin policies
	GetBuiltInPolicy(context.Context, *GetBuiltInPolicyRequest) (*GetBuiltInPolicyResponse, error)
	// contains filtered or unexported methods
}

IAMPolicyServiceServer is the server API for IAMPolicyService service. All implementations must embed UnimplementedIAMPolicyServiceServer for forward compatibility

type IAMPolicyService_GetMultipleClient

type IAMPolicyService_GetMultipleClient interface {
	Recv() (*GetMultiplePoliciesResponse, error)
	grpc.ClientStream
}

type IAMPolicyService_GetMultipleServer

type IAMPolicyService_GetMultipleServer interface {
	Send(*GetMultiplePoliciesResponse) error
	grpc.ServerStream
}

type IAMPolicyService_ListClient

type IAMPolicyService_ListClient interface {
	Recv() (*ListPoliciesResponse, error)
	grpc.ClientStream
}

type IAMPolicyService_ListServer

type IAMPolicyService_ListServer interface {
	Send(*ListPoliciesResponse) error
	grpc.ServerStream
}

type IdentityManagedData

type IdentityManagedData struct {

	// Namespace where identity is located
	IdentityNamespace string `protobuf:"bytes,1,opt,name=identityNamespace,proto3" json:"identityNamespace,omitempty"`
	// Identity UUID inside this namespace
	IdentityUUID string `protobuf:"bytes,2,opt,name=identityUUID,proto3" json:"identityUUID,omitempty"`
	// contains filtered or unexported fields
}

Information about identity that manages this policy

func (*IdentityManagedData) Descriptor deprecated

func (*IdentityManagedData) Descriptor() ([]byte, []int)

Deprecated: Use IdentityManagedData.ProtoReflect.Descriptor instead.

func (*IdentityManagedData) GetIdentityNamespace

func (x *IdentityManagedData) GetIdentityNamespace() string

func (*IdentityManagedData) GetIdentityUUID

func (x *IdentityManagedData) GetIdentityUUID() string

func (*IdentityManagedData) ProtoMessage

func (*IdentityManagedData) ProtoMessage()

func (*IdentityManagedData) ProtoReflect

func (x *IdentityManagedData) ProtoReflect() protoreflect.Message

func (*IdentityManagedData) Reset

func (x *IdentityManagedData) Reset()

func (*IdentityManagedData) String

func (x *IdentityManagedData) String() string

type ListPoliciesRequest

type ListPoliciesRequest struct {

	// Namespace from where to list policies
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// How many values to skip before returning result
	Skip uint64 `protobuf:"varint,2,opt,name=skip,proto3" json:"skip,omitempty"`
	// Maximum number of values to return. Use 0 to return all up to the end.
	Limit uint64 `protobuf:"varint,3,opt,name=limit,proto3" json:"limit,omitempty"`
	// contains filtered or unexported fields
}

func (*ListPoliciesRequest) Descriptor deprecated

func (*ListPoliciesRequest) Descriptor() ([]byte, []int)

Deprecated: Use ListPoliciesRequest.ProtoReflect.Descriptor instead.

func (*ListPoliciesRequest) GetLimit

func (x *ListPoliciesRequest) GetLimit() uint64

func (*ListPoliciesRequest) GetNamespace

func (x *ListPoliciesRequest) GetNamespace() string

func (*ListPoliciesRequest) GetSkip

func (x *ListPoliciesRequest) GetSkip() uint64

func (*ListPoliciesRequest) ProtoMessage

func (*ListPoliciesRequest) ProtoMessage()

func (*ListPoliciesRequest) ProtoReflect

func (x *ListPoliciesRequest) ProtoReflect() protoreflect.Message

func (*ListPoliciesRequest) Reset

func (x *ListPoliciesRequest) Reset()

func (*ListPoliciesRequest) String

func (x *ListPoliciesRequest) String() string

type ListPoliciesResponse

type ListPoliciesResponse struct {
	Policy *Policy `protobuf:"bytes,1,opt,name=policy,proto3" json:"policy,omitempty"`
	// contains filtered or unexported fields
}

func (*ListPoliciesResponse) Descriptor deprecated

func (*ListPoliciesResponse) Descriptor() ([]byte, []int)

Deprecated: Use ListPoliciesResponse.ProtoReflect.Descriptor instead.

func (*ListPoliciesResponse) GetPolicy

func (x *ListPoliciesResponse) GetPolicy() *Policy

func (*ListPoliciesResponse) ProtoMessage

func (*ListPoliciesResponse) ProtoMessage()

func (*ListPoliciesResponse) ProtoReflect

func (x *ListPoliciesResponse) ProtoReflect() protoreflect.Message

func (*ListPoliciesResponse) Reset

func (x *ListPoliciesResponse) Reset()

func (*ListPoliciesResponse) String

func (x *ListPoliciesResponse) String() string

type NotManagedData

type NotManagedData struct {
	// contains filtered or unexported fields
}

Empty information to indicate that management for this role is not defined.

func (*NotManagedData) Descriptor deprecated

func (*NotManagedData) Descriptor() ([]byte, []int)

Deprecated: Use NotManagedData.ProtoReflect.Descriptor instead.

func (*NotManagedData) ProtoMessage

func (*NotManagedData) ProtoMessage()

func (*NotManagedData) ProtoReflect

func (x *NotManagedData) ProtoReflect() protoreflect.Message

func (*NotManagedData) Reset

func (x *NotManagedData) Reset()

func (*NotManagedData) String

func (x *NotManagedData) String() string

type Policy

type Policy struct {

	// Namespace where policy was created. Namespace can be empty for global policy.
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// Unique identifier of the policy in the namespace
	Uuid string `protobuf:"bytes,2,opt,name=uuid,proto3" json:"uuid,omitempty"`
	// Public name
	Name string `protobuf:"bytes,3,opt,name=name,proto3" json:"name,omitempty"`
	// Arbitrary description
	Description string `protobuf:"bytes,4,opt,name=description,proto3" json:"description,omitempty"`
	//
	//Indicates if this policy is managed by someone else.
	//
	//This is only a flag to inform everyone that it is managed by third party actor and
	//manual interaction with this policy may result in big problems. In order to interact with the policy,
	//you should ask someone who manages this policy to do something for you.
	//
	//There are several possible managements:
	//NotManaged* - there is no clear actor responsible for this policy
	//BuiltIn* - this is predefined policy that doesn't belong to any service. The list is predefined. For example "GLOBAL_ROOT" policy. It is not possible to delete builtin policy.
	//Identity* - this policy was created by identity. This identity is responsible for it
	//Service* - this policy was create by one of the services. This services now manages this policy.
	//
	// Types that are assignable to Managed:
	//	*Policy_No
	//	*Policy_BuiltIn
	//	*Policy_Identity
	//	*Policy_Service
	Managed isPolicy_Managed `protobuf_oneof:"managed"`
	// Indicates if this policy works in all namespaces or only in the namespace where it is defined
	NamespaceIndependent bool `protobuf:"varint,5,opt,name=namespaceIndependent,proto3" json:"namespaceIndependent,omitempty"`
	// List of resource for wich actions will be performed
	Resources []string `protobuf:"bytes,6,rep,name=resources,proto3" json:"resources,omitempty"`
	// List of actions that can be performed
	Actions []string `protobuf:"bytes,7,rep,name=actions,proto3" json:"actions,omitempty"`
	// List of tags associated with this policy
	Tags []string `protobuf:"bytes,8,rep,name=tags,proto3" json:"tags,omitempty"`
	// When the policy was created
	Created *timestamp.Timestamp `protobuf:"bytes,9,opt,name=created,proto3" json:"created,omitempty"`
	// Last time when the policy information was updated.
	Updated *timestamp.Timestamp `protobuf:"bytes,10,opt,name=updated,proto3" json:"updated,omitempty"`
	// Counter that increases after every update of the policy
	Version uint64 `protobuf:"varint,11,opt,name=version,proto3" json:"version,omitempty"`
	// contains filtered or unexported fields
}

func (*Policy) Descriptor deprecated

func (*Policy) Descriptor() ([]byte, []int)

Deprecated: Use Policy.ProtoReflect.Descriptor instead.

func (*Policy) GetActions

func (x *Policy) GetActions() []string

func (*Policy) GetBuiltIn

func (x *Policy) GetBuiltIn() *BuiltInManagedData

func (*Policy) GetCreated

func (x *Policy) GetCreated() *timestamp.Timestamp

func (*Policy) GetDescription

func (x *Policy) GetDescription() string

func (*Policy) GetIdentity

func (x *Policy) GetIdentity() *IdentityManagedData

func (*Policy) GetManaged

func (m *Policy) GetManaged() isPolicy_Managed

func (*Policy) GetName

func (x *Policy) GetName() string

func (*Policy) GetNamespace

func (x *Policy) GetNamespace() string

func (*Policy) GetNamespaceIndependent

func (x *Policy) GetNamespaceIndependent() bool

func (*Policy) GetNo

func (x *Policy) GetNo() *NotManagedData

func (*Policy) GetResources

func (x *Policy) GetResources() []string

func (*Policy) GetService

func (x *Policy) GetService() *ServiceManagedData

func (*Policy) GetTags

func (x *Policy) GetTags() []string

func (*Policy) GetUpdated

func (x *Policy) GetUpdated() *timestamp.Timestamp

func (*Policy) GetUuid

func (x *Policy) GetUuid() string

func (*Policy) GetVersion

func (x *Policy) GetVersion() uint64

func (*Policy) ProtoMessage

func (*Policy) ProtoMessage()

func (*Policy) ProtoReflect

func (x *Policy) ProtoReflect() protoreflect.Message

func (*Policy) Reset

func (x *Policy) Reset()

func (*Policy) String

func (x *Policy) String() string

type Policy_BuiltIn

type Policy_BuiltIn struct {
	// Policy is builtIn and predifined
	BuiltIn *BuiltInManagedData `protobuf:"bytes,21,opt,name=builtIn,proto3,oneof"`
}

type Policy_Identity

type Policy_Identity struct {
	// Policy is managed by identity
	Identity *IdentityManagedData `protobuf:"bytes,22,opt,name=identity,proto3,oneof"`
}

type Policy_No

type Policy_No struct {
	// Policy is not managed
	No *NotManagedData `protobuf:"bytes,20,opt,name=no,proto3,oneof"`
}

type Policy_Service

type Policy_Service struct {
	// Policy is managed by service
	Service *ServiceManagedData `protobuf:"bytes,23,opt,name=service,proto3,oneof"`
}

type ServiceManagedData

type ServiceManagedData struct {

	// Name of the service
	Service string `protobuf:"bytes,1,opt,name=service,proto3" json:"service,omitempty"`
	// Reason why this service created this policy
	Reason string `protobuf:"bytes,2,opt,name=reason,proto3" json:"reason,omitempty"`
	// This is an ID that can be defined by managed service to find this policy. Set to empty string if you dont need this. If this is not empty Service+ID combination is unique.
	ManagementId string `protobuf:"bytes,3,opt,name=managementId,proto3" json:"managementId,omitempty"`
	// contains filtered or unexported fields
}

Handles information about the service that manages this policy

func (*ServiceManagedData) Descriptor deprecated

func (*ServiceManagedData) Descriptor() ([]byte, []int)

Deprecated: Use ServiceManagedData.ProtoReflect.Descriptor instead.

func (*ServiceManagedData) GetManagementId

func (x *ServiceManagedData) GetManagementId() string

func (*ServiceManagedData) GetReason

func (x *ServiceManagedData) GetReason() string

func (*ServiceManagedData) GetService

func (x *ServiceManagedData) GetService() string

func (*ServiceManagedData) ProtoMessage

func (*ServiceManagedData) ProtoMessage()

func (*ServiceManagedData) ProtoReflect

func (x *ServiceManagedData) ProtoReflect() protoreflect.Message

func (*ServiceManagedData) Reset

func (x *ServiceManagedData) Reset()

func (*ServiceManagedData) String

func (x *ServiceManagedData) String() string

type UnimplementedIAMPolicyServiceServer

type UnimplementedIAMPolicyServiceServer struct {
}

UnimplementedIAMPolicyServiceServer must be embedded to have forward compatible implementations.

func (UnimplementedIAMPolicyServiceServer) Count

func (UnimplementedIAMPolicyServiceServer) Create

func (UnimplementedIAMPolicyServiceServer) Delete

func (UnimplementedIAMPolicyServiceServer) Exist

func (UnimplementedIAMPolicyServiceServer) Get

func (UnimplementedIAMPolicyServiceServer) GetBuiltInPolicy

func (UnimplementedIAMPolicyServiceServer) List

func (UnimplementedIAMPolicyServiceServer) Update

type UnsafeIAMPolicyServiceServer

type UnsafeIAMPolicyServiceServer interface {
	// contains filtered or unexported methods
}

UnsafeIAMPolicyServiceServer may be embedded to opt out of forward compatibility for this service. Use of this interface is not recommended, as added methods to IAMPolicyServiceServer will result in compilation errors.

type UpdatePolicyRequest

type UpdatePolicyRequest struct {

	// Namespace of the policy
	Namespace string `protobuf:"bytes,1,opt,name=namespace,proto3" json:"namespace,omitempty"`
	// Unique identifier of the policy in the namespace
	Uuid string `protobuf:"bytes,2,opt,name=uuid,proto3" json:"uuid,omitempty"`
	// Public name
	Name string `protobuf:"bytes,3,opt,name=name,proto3" json:"name,omitempty"`
	// Arbitrary description
	Description string `protobuf:"bytes,4,opt,name=description,proto3" json:"description,omitempty"`
	// Indicates if this policy works in all namespaces or only in the namespace where it is defined
	NamespaceIndependent bool `protobuf:"varint,5,opt,name=namespaceIndependent,proto3" json:"namespaceIndependent,omitempty"`
	// List of resource for wich actions will be performed
	Resources []string `protobuf:"bytes,6,rep,name=resources,proto3" json:"resources,omitempty"`
	// List of actions that can be performed
	Actions []string `protobuf:"bytes,7,rep,name=actions,proto3" json:"actions,omitempty"`
	// contains filtered or unexported fields
}

func (*UpdatePolicyRequest) Descriptor deprecated

func (*UpdatePolicyRequest) Descriptor() ([]byte, []int)

Deprecated: Use UpdatePolicyRequest.ProtoReflect.Descriptor instead.

func (*UpdatePolicyRequest) GetActions

func (x *UpdatePolicyRequest) GetActions() []string

func (*UpdatePolicyRequest) GetDescription

func (x *UpdatePolicyRequest) GetDescription() string

func (*UpdatePolicyRequest) GetName

func (x *UpdatePolicyRequest) GetName() string

func (*UpdatePolicyRequest) GetNamespace

func (x *UpdatePolicyRequest) GetNamespace() string

func (*UpdatePolicyRequest) GetNamespaceIndependent

func (x *UpdatePolicyRequest) GetNamespaceIndependent() bool

func (*UpdatePolicyRequest) GetResources

func (x *UpdatePolicyRequest) GetResources() []string

func (*UpdatePolicyRequest) GetUuid

func (x *UpdatePolicyRequest) GetUuid() string

func (*UpdatePolicyRequest) ProtoMessage

func (*UpdatePolicyRequest) ProtoMessage()

func (*UpdatePolicyRequest) ProtoReflect

func (x *UpdatePolicyRequest) ProtoReflect() protoreflect.Message

func (*UpdatePolicyRequest) Reset

func (x *UpdatePolicyRequest) Reset()

func (*UpdatePolicyRequest) String

func (x *UpdatePolicyRequest) String() string

type UpdatePolicyResponse

type UpdatePolicyResponse struct {

	// Updated policy
	Policy *Policy `protobuf:"bytes,1,opt,name=policy,proto3" json:"policy,omitempty"`
	// contains filtered or unexported fields
}

func (*UpdatePolicyResponse) Descriptor deprecated

func (*UpdatePolicyResponse) Descriptor() ([]byte, []int)

Deprecated: Use UpdatePolicyResponse.ProtoReflect.Descriptor instead.

func (*UpdatePolicyResponse) GetPolicy

func (x *UpdatePolicyResponse) GetPolicy() *Policy

func (*UpdatePolicyResponse) ProtoMessage

func (*UpdatePolicyResponse) ProtoMessage()

func (*UpdatePolicyResponse) ProtoReflect

func (x *UpdatePolicyResponse) ProtoReflect() protoreflect.Message

func (*UpdatePolicyResponse) Reset

func (x *UpdatePolicyResponse) Reset()

func (*UpdatePolicyResponse) String

func (x *UpdatePolicyResponse) String() string

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL