Documentation ¶
Overview ¶
Package config contains protobuf definitions for config.
Index ¶
- Variables
- type Config
- func (*Config) Descriptor() ([]byte, []int)deprecated
- func (x *Config) GetId() string
- func (x *Config) GetName() string
- func (x *Config) GetRoutes() []*Route
- func (x *Config) GetSettings() *Settings
- func (*Config) ProtoMessage()
- func (x *Config) ProtoReflect() protoreflect.Message
- func (x *Config) Reset()
- func (x *Config) String() string
- type DownstreamMtlsSettings
- func (*DownstreamMtlsSettings) Descriptor() ([]byte, []int)deprecated
- func (x *DownstreamMtlsSettings) GetCa() string
- func (x *DownstreamMtlsSettings) GetCrl() string
- func (x *DownstreamMtlsSettings) GetEnforcement() MtlsEnforcementMode
- func (x *DownstreamMtlsSettings) GetMatchSubjectAltNames() []*SANMatcher
- func (x *DownstreamMtlsSettings) GetMaxVerifyDepth() uint32
- func (*DownstreamMtlsSettings) ProtoMessage()
- func (x *DownstreamMtlsSettings) ProtoReflect() protoreflect.Message
- func (x *DownstreamMtlsSettings) Reset()
- func (x *DownstreamMtlsSettings) String() string
- type IssuerFormat
- func (IssuerFormat) Descriptor() protoreflect.EnumDescriptor
- func (x IssuerFormat) Enum() *IssuerFormat
- func (IssuerFormat) EnumDescriptor() ([]byte, []int)deprecated
- func (x IssuerFormat) Number() protoreflect.EnumNumber
- func (x IssuerFormat) String() string
- func (IssuerFormat) Type() protoreflect.EnumType
- type MtlsEnforcementMode
- func (MtlsEnforcementMode) Descriptor() protoreflect.EnumDescriptor
- func (x MtlsEnforcementMode) Enum() *MtlsEnforcementMode
- func (MtlsEnforcementMode) EnumDescriptor() ([]byte, []int)deprecated
- func (x MtlsEnforcementMode) Number() protoreflect.EnumNumber
- func (x MtlsEnforcementMode) String() string
- func (MtlsEnforcementMode) Type() protoreflect.EnumType
- type PPLPolicy
- type Policy
- func (*Policy) Descriptor() ([]byte, []int)deprecated
- func (x *Policy) GetAllowedDomains() []string
- func (x *Policy) GetAllowedIdpClaims() map[string]*structpb.ListValue
- func (x *Policy) GetAllowedUsers() []string
- func (x *Policy) GetExplanation() string
- func (x *Policy) GetId() string
- func (x *Policy) GetName() string
- func (x *Policy) GetRego() []string
- func (x *Policy) GetRemediation() string
- func (*Policy) ProtoMessage()
- func (x *Policy) ProtoReflect() protoreflect.Message
- func (x *Policy) Reset()
- func (x *Policy) String() string
- type Route
- func (*Route) Descriptor() ([]byte, []int)deprecated
- func (x *Route) GetAllowAnyAuthenticatedUser() bool
- func (x *Route) GetAllowPublicUnauthenticatedAccess() bool
- func (x *Route) GetAllowSpdy() bool
- func (x *Route) GetAllowWebsockets() bool
- func (x *Route) GetAllowedDomains() []stringdeprecated
- func (x *Route) GetAllowedIdpClaims() map[string]*structpb.ListValuedeprecated
- func (x *Route) GetAllowedUsers() []stringdeprecated
- func (x *Route) GetCorsAllowPreflight() bool
- func (x *Route) GetEnableGoogleCloudServerlessAuthentication() bool
- func (x *Route) GetEnvoyOpts() *v3.Cluster
- func (x *Route) GetFrom() string
- func (x *Route) GetHostPathRegexRewritePattern() string
- func (x *Route) GetHostPathRegexRewriteSubstitution() string
- func (x *Route) GetHostRewrite() string
- func (x *Route) GetHostRewriteHeader() string
- func (x *Route) GetId() string
- func (x *Route) GetIdleTimeout() *durationpb.Duration
- func (x *Route) GetIdpClientId() string
- func (x *Route) GetIdpClientSecret() string
- func (x *Route) GetJwtIssuerFormat() IssuerFormat
- func (x *Route) GetKubernetesServiceAccountToken() string
- func (x *Route) GetKubernetesServiceAccountTokenFile() string
- func (x *Route) GetLoadBalancingWeights() []uint32
- func (x *Route) GetName() string
- func (x *Route) GetPassIdentityHeaders() bool
- func (x *Route) GetPath() string
- func (x *Route) GetPolicies() []*Policy
- func (x *Route) GetPplPolicies() []*PPLPolicy
- func (x *Route) GetPrefix() string
- func (x *Route) GetPrefixRewrite() string
- func (x *Route) GetPreserveHostHeader() bool
- func (x *Route) GetRedirect() *RouteRedirect
- func (x *Route) GetRegex() string
- func (x *Route) GetRegexPriorityOrder() int64
- func (x *Route) GetRegexRewritePattern() string
- func (x *Route) GetRegexRewriteSubstitution() string
- func (x *Route) GetRemoveRequestHeaders() []string
- func (x *Route) GetResponse() *RouteDirectResponse
- func (x *Route) GetRewriteResponseHeaders() []*RouteRewriteHeader
- func (x *Route) GetSetRequestHeaders() map[string]string
- func (x *Route) GetSetResponseHeaders() map[string]string
- func (x *Route) GetShowErrorDetails() bool
- func (x *Route) GetTimeout() *durationpb.Duration
- func (x *Route) GetTlsClientCert() string
- func (x *Route) GetTlsClientCertFile() string
- func (x *Route) GetTlsClientKey() string
- func (x *Route) GetTlsClientKeyFile() string
- func (x *Route) GetTlsCustomCa() string
- func (x *Route) GetTlsCustomCaFile() string
- func (x *Route) GetTlsDownstreamClientCa() string
- func (x *Route) GetTlsDownstreamClientCaFile() string
- func (x *Route) GetTlsDownstreamServerName() string
- func (x *Route) GetTlsServerName() string
- func (x *Route) GetTlsSkipVerify() bool
- func (x *Route) GetTlsUpstreamAllowRenegotiation() bool
- func (x *Route) GetTlsUpstreamServerName() string
- func (x *Route) GetTo() []string
- func (*Route) ProtoMessage()
- func (x *Route) ProtoReflect() protoreflect.Message
- func (x *Route) Reset()
- func (x *Route) String() string
- type RouteDirectResponse
- func (*RouteDirectResponse) Descriptor() ([]byte, []int)deprecated
- func (x *RouteDirectResponse) GetBody() string
- func (x *RouteDirectResponse) GetStatus() uint32
- func (*RouteDirectResponse) ProtoMessage()
- func (x *RouteDirectResponse) ProtoReflect() protoreflect.Message
- func (x *RouteDirectResponse) Reset()
- func (x *RouteDirectResponse) String() string
- type RouteRedirect
- func (*RouteRedirect) Descriptor() ([]byte, []int)deprecated
- func (x *RouteRedirect) GetHostRedirect() string
- func (x *RouteRedirect) GetHttpsRedirect() bool
- func (x *RouteRedirect) GetPathRedirect() string
- func (x *RouteRedirect) GetPortRedirect() uint32
- func (x *RouteRedirect) GetPrefixRewrite() string
- func (x *RouteRedirect) GetResponseCode() int32
- func (x *RouteRedirect) GetSchemeRedirect() string
- func (x *RouteRedirect) GetStripQuery() bool
- func (rr *RouteRedirect) IsSet() bool
- func (*RouteRedirect) ProtoMessage()
- func (x *RouteRedirect) ProtoReflect() protoreflect.Message
- func (x *RouteRedirect) Reset()
- func (x *RouteRedirect) String() string
- type RouteRewriteHeader
- func (*RouteRewriteHeader) Descriptor() ([]byte, []int)deprecated
- func (x *RouteRewriteHeader) GetHeader() string
- func (m *RouteRewriteHeader) GetMatcher() isRouteRewriteHeader_Matcher
- func (x *RouteRewriteHeader) GetPrefix() string
- func (x *RouteRewriteHeader) GetValue() string
- func (*RouteRewriteHeader) ProtoMessage()
- func (x *RouteRewriteHeader) ProtoReflect() protoreflect.Message
- func (x *RouteRewriteHeader) Reset()
- func (x *RouteRewriteHeader) String() string
- type RouteRewriteHeader_Prefix
- type SANMatcher
- func (*SANMatcher) Descriptor() ([]byte, []int)deprecated
- func (x *SANMatcher) GetPattern() string
- func (x *SANMatcher) GetSanType() SANMatcher_SANType
- func (*SANMatcher) ProtoMessage()
- func (x *SANMatcher) ProtoReflect() protoreflect.Message
- func (x *SANMatcher) Reset()
- func (x *SANMatcher) String() string
- type SANMatcher_SANType
- func (SANMatcher_SANType) Descriptor() protoreflect.EnumDescriptor
- func (x SANMatcher_SANType) Enum() *SANMatcher_SANType
- func (SANMatcher_SANType) EnumDescriptor() ([]byte, []int)deprecated
- func (x SANMatcher_SANType) Number() protoreflect.EnumNumber
- func (x SANMatcher_SANType) String() string
- func (SANMatcher_SANType) Type() protoreflect.EnumType
- type Settings
- func (*Settings) Descriptor() ([]byte, []int)deprecated
- func (x *Settings) GetAccessLogFields() *Settings_StringList
- func (x *Settings) GetAddress() string
- func (x *Settings) GetAuditKey() *crypt.PublicKeyEncryptionKey
- func (x *Settings) GetAuthenticateCallbackPath() string
- func (x *Settings) GetAuthenticateInternalServiceUrl() string
- func (x *Settings) GetAuthenticateServiceUrl() string
- func (x *Settings) GetAuthorizeInternalServiceUrl() string
- func (x *Settings) GetAuthorizeLogFields() *Settings_StringList
- func (x *Settings) GetAuthorizeServiceUrls() []string
- func (x *Settings) GetAutocert() bool
- func (x *Settings) GetAutocertCa() string
- func (x *Settings) GetAutocertDir() string
- func (x *Settings) GetAutocertEabKeyId() string
- func (x *Settings) GetAutocertEabMacKey() string
- func (x *Settings) GetAutocertEmail() string
- func (x *Settings) GetAutocertMustStaple() bool
- func (x *Settings) GetAutocertTrustedCa() string
- func (x *Settings) GetAutocertUseStaging() bool
- func (x *Settings) GetCertificateAuthority() string
- func (x *Settings) GetCertificates() []*Settings_Certificate
- func (x *Settings) GetCodecType() v31.HttpConnectionManager_CodecType
- func (x *Settings) GetCookieDomain() string
- func (x *Settings) GetCookieExpire() *durationpb.Duration
- func (x *Settings) GetCookieHttpOnly() bool
- func (x *Settings) GetCookieName() string
- func (x *Settings) GetCookieSameSite() string
- func (x *Settings) GetCookieSecret() string
- func (x *Settings) GetDarkmodePrimaryColor() string
- func (x *Settings) GetDarkmodeSecondaryColor() string
- func (x *Settings) GetDatabrokerInternalServiceUrl() string
- func (x *Settings) GetDatabrokerServiceUrls() []string
- func (x *Settings) GetDatabrokerStorageConnectionString() string
- func (x *Settings) GetDatabrokerStorageType() string
- func (x *Settings) GetDefaultUpstreamTimeout() *durationpb.Duration
- func (x *Settings) GetDeriveTls() string
- func (x *Settings) GetDnsLookupFamily() string
- func (x *Settings) GetDownstreamMtls() *DownstreamMtlsSettings
- func (x *Settings) GetEnvoyAdminAccessLogPath() string
- func (x *Settings) GetEnvoyAdminAddress() string
- func (x *Settings) GetEnvoyAdminProfilePath() string
- func (x *Settings) GetEnvoyBindConfigFreebind() bool
- func (x *Settings) GetEnvoyBindConfigSourceAddress() string
- func (x *Settings) GetErrorMessageFirstParagraph() string
- func (x *Settings) GetFaviconUrl() string
- func (x *Settings) GetGoogleCloudServerlessAuthenticationServiceAccount() string
- func (x *Settings) GetGrpcAddress() string
- func (x *Settings) GetGrpcClientTimeout() *durationpb.Duration
- func (x *Settings) GetGrpcInsecure() bool
- func (x *Settings) GetHttpRedirectAddr() string
- func (x *Settings) GetIdpClientId() string
- func (x *Settings) GetIdpClientSecret() string
- func (x *Settings) GetIdpProvider() string
- func (x *Settings) GetIdpProviderUrl() string
- func (x *Settings) GetInsecureServer() bool
- func (x *Settings) GetInstallationId() string
- func (x *Settings) GetJwtClaimsHeaders() map[string]string
- func (x *Settings) GetLogLevel() string
- func (x *Settings) GetLogoUrl() string
- func (x *Settings) GetMetricsAddress() string
- func (x *Settings) GetMetricsBasicAuth() string
- func (x *Settings) GetMetricsCertificate() *Settings_Certificate
- func (x *Settings) GetMetricsClientCa() string
- func (x *Settings) GetOverrideCertificateName() string
- func (x *Settings) GetPassIdentityHeaders() bool
- func (x *Settings) GetPrimaryColor() string
- func (x *Settings) GetProgrammaticRedirectDomainWhitelist() []string
- func (x *Settings) GetProxyLogLevel() string
- func (x *Settings) GetRequestParams() map[string]string
- func (x *Settings) GetRuntimeFlags() map[string]bool
- func (x *Settings) GetScopes() []string
- func (x *Settings) GetSecondaryColor() string
- func (x *Settings) GetServices() string
- func (x *Settings) GetSetResponseHeaders() map[string]string
- func (x *Settings) GetSharedSecret() string
- func (x *Settings) GetSigningKey() string
- func (x *Settings) GetSignoutRedirectUrl() string
- func (x *Settings) GetSkipXffAppend() bool
- func (x *Settings) GetTimeoutIdle() *durationpb.Duration
- func (x *Settings) GetTimeoutRead() *durationpb.Duration
- func (x *Settings) GetTimeoutWrite() *durationpb.Duration
- func (x *Settings) GetTracingDatadogAddress() string
- func (x *Settings) GetTracingJaegerAgentEndpoint() string
- func (x *Settings) GetTracingJaegerCollectorEndpoint() string
- func (x *Settings) GetTracingProvider() string
- func (x *Settings) GetTracingSampleRate() float64
- func (x *Settings) GetTracingZipkinEndpoint() string
- func (x *Settings) GetUseProxyProtocol() bool
- func (x *Settings) GetXffNumTrustedHops() uint32
- func (*Settings) ProtoMessage()
- func (x *Settings) ProtoReflect() protoreflect.Message
- func (x *Settings) Reset()
- func (x *Settings) String() string
- type Settings_Certificate
- func (*Settings_Certificate) Descriptor() ([]byte, []int)deprecated
- func (x *Settings_Certificate) GetCertBytes() []byte
- func (x *Settings_Certificate) GetId() string
- func (x *Settings_Certificate) GetKeyBytes() []byte
- func (*Settings_Certificate) ProtoMessage()
- func (x *Settings_Certificate) ProtoReflect() protoreflect.Message
- func (x *Settings_Certificate) Reset()
- func (x *Settings_Certificate) String() string
- type Settings_StringList
- func (*Settings_StringList) Descriptor() ([]byte, []int)deprecated
- func (x *Settings_StringList) GetValues() []string
- func (*Settings_StringList) ProtoMessage()
- func (x *Settings_StringList) ProtoReflect() protoreflect.Message
- func (x *Settings_StringList) Reset()
- func (x *Settings_StringList) String() string
Constants ¶
This section is empty.
Variables ¶
var ( IssuerFormat_name = map[int32]string{ 0: "IssuerHostOnly", 1: "IssuerURI", } IssuerFormat_value = map[string]int32{ "IssuerHostOnly": 0, "IssuerURI": 1, } )
Enum value maps for IssuerFormat.
var ( MtlsEnforcementMode_name = map[int32]string{ 0: "UNKNOWN", 1: "POLICY", 2: "POLICY_WITH_DEFAULT_DENY", 3: "REJECT_CONNECTION", } MtlsEnforcementMode_value = map[string]int32{ "UNKNOWN": 0, "POLICY": 1, "POLICY_WITH_DEFAULT_DENY": 2, "REJECT_CONNECTION": 3, } )
Enum value maps for MtlsEnforcementMode.
var ( SANMatcher_SANType_name = map[int32]string{ 0: "SAN_TYPE_UNSPECIFIED", 1: "EMAIL", 2: "DNS", 3: "URI", 4: "IP_ADDRESS", 5: "USER_PRINCIPAL_NAME", } SANMatcher_SANType_value = map[string]int32{ "SAN_TYPE_UNSPECIFIED": 0, "EMAIL": 1, "DNS": 2, "URI": 3, "IP_ADDRESS": 4, "USER_PRINCIPAL_NAME": 5, } )
Enum value maps for SANMatcher_SANType.
var File_config_proto protoreflect.FileDescriptor
Functions ¶
This section is empty.
Types ¶
type Config ¶
type Config struct { Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"` Routes []*Route `protobuf:"bytes,2,rep,name=routes,proto3" json:"routes,omitempty"` Settings *Settings `protobuf:"bytes,3,opt,name=settings,proto3" json:"settings,omitempty"` // contains filtered or unexported fields }
func (*Config) Descriptor
deprecated
func (*Config) GetSettings ¶ added in v0.11.0
func (*Config) ProtoMessage ¶
func (*Config) ProtoMessage()
func (*Config) ProtoReflect ¶
func (x *Config) ProtoReflect() protoreflect.Message
type DownstreamMtlsSettings ¶ added in v0.23.0
type DownstreamMtlsSettings struct { Ca *string `protobuf:"bytes,1,opt,name=ca,proto3,oneof" json:"ca,omitempty"` Crl *string `protobuf:"bytes,2,opt,name=crl,proto3,oneof" json:"crl,omitempty"` Enforcement *MtlsEnforcementMode `protobuf:"varint,3,opt,name=enforcement,proto3,enum=pomerium.config.MtlsEnforcementMode,oneof" json:"enforcement,omitempty"` MatchSubjectAltNames []*SANMatcher `protobuf:"bytes,4,rep,name=match_subject_alt_names,json=matchSubjectAltNames,proto3" json:"match_subject_alt_names,omitempty"` MaxVerifyDepth *uint32 `protobuf:"varint,5,opt,name=max_verify_depth,json=maxVerifyDepth,proto3,oneof" json:"max_verify_depth,omitempty"` // contains filtered or unexported fields }
func (*DownstreamMtlsSettings) Descriptor
deprecated
added in
v0.23.0
func (*DownstreamMtlsSettings) Descriptor() ([]byte, []int)
Deprecated: Use DownstreamMtlsSettings.ProtoReflect.Descriptor instead.
func (*DownstreamMtlsSettings) GetCa ¶ added in v0.23.0
func (x *DownstreamMtlsSettings) GetCa() string
func (*DownstreamMtlsSettings) GetCrl ¶ added in v0.23.0
func (x *DownstreamMtlsSettings) GetCrl() string
func (*DownstreamMtlsSettings) GetEnforcement ¶ added in v0.23.0
func (x *DownstreamMtlsSettings) GetEnforcement() MtlsEnforcementMode
func (*DownstreamMtlsSettings) GetMatchSubjectAltNames ¶ added in v0.27.2
func (x *DownstreamMtlsSettings) GetMatchSubjectAltNames() []*SANMatcher
func (*DownstreamMtlsSettings) GetMaxVerifyDepth ¶ added in v0.27.2
func (x *DownstreamMtlsSettings) GetMaxVerifyDepth() uint32
func (*DownstreamMtlsSettings) ProtoMessage ¶ added in v0.23.0
func (*DownstreamMtlsSettings) ProtoMessage()
func (*DownstreamMtlsSettings) ProtoReflect ¶ added in v0.23.0
func (x *DownstreamMtlsSettings) ProtoReflect() protoreflect.Message
func (*DownstreamMtlsSettings) Reset ¶ added in v0.23.0
func (x *DownstreamMtlsSettings) Reset()
func (*DownstreamMtlsSettings) String ¶ added in v0.23.0
func (x *DownstreamMtlsSettings) String() string
type IssuerFormat ¶ added in v0.28.0
type IssuerFormat int32
const ( // Issuer strings will be the hostname of the route, with no scheme or // trailing slash. IssuerFormat_IssuerHostOnly IssuerFormat = 0 // Issuer strings will be a complete URI, including the scheme and ending // with a trailing slash. IssuerFormat_IssuerURI IssuerFormat = 1 )
func (IssuerFormat) Descriptor ¶ added in v0.28.0
func (IssuerFormat) Descriptor() protoreflect.EnumDescriptor
func (IssuerFormat) Enum ¶ added in v0.28.0
func (x IssuerFormat) Enum() *IssuerFormat
func (IssuerFormat) EnumDescriptor
deprecated
added in
v0.28.0
func (IssuerFormat) EnumDescriptor() ([]byte, []int)
Deprecated: Use IssuerFormat.Descriptor instead.
func (IssuerFormat) Number ¶ added in v0.28.0
func (x IssuerFormat) Number() protoreflect.EnumNumber
func (IssuerFormat) String ¶ added in v0.28.0
func (x IssuerFormat) String() string
func (IssuerFormat) Type ¶ added in v0.28.0
func (IssuerFormat) Type() protoreflect.EnumType
type MtlsEnforcementMode ¶ added in v0.23.0
type MtlsEnforcementMode int32
const ( MtlsEnforcementMode_UNKNOWN MtlsEnforcementMode = 0 MtlsEnforcementMode_POLICY MtlsEnforcementMode = 1 MtlsEnforcementMode_POLICY_WITH_DEFAULT_DENY MtlsEnforcementMode = 2 MtlsEnforcementMode_REJECT_CONNECTION MtlsEnforcementMode = 3 )
func (MtlsEnforcementMode) Descriptor ¶ added in v0.23.0
func (MtlsEnforcementMode) Descriptor() protoreflect.EnumDescriptor
func (MtlsEnforcementMode) Enum ¶ added in v0.23.0
func (x MtlsEnforcementMode) Enum() *MtlsEnforcementMode
func (MtlsEnforcementMode) EnumDescriptor
deprecated
added in
v0.23.0
func (MtlsEnforcementMode) EnumDescriptor() ([]byte, []int)
Deprecated: Use MtlsEnforcementMode.Descriptor instead.
func (MtlsEnforcementMode) Number ¶ added in v0.23.0
func (x MtlsEnforcementMode) Number() protoreflect.EnumNumber
func (MtlsEnforcementMode) String ¶ added in v0.23.0
func (x MtlsEnforcementMode) String() string
func (MtlsEnforcementMode) Type ¶ added in v0.23.0
func (MtlsEnforcementMode) Type() protoreflect.EnumType
type PPLPolicy ¶ added in v0.27.2
type PPLPolicy struct { Raw []byte `protobuf:"bytes,1,opt,name=raw,proto3" json:"raw,omitempty"` // contains filtered or unexported fields }
func (*PPLPolicy) Descriptor
deprecated
added in
v0.27.2
func (*PPLPolicy) ProtoMessage ¶ added in v0.27.2
func (*PPLPolicy) ProtoMessage()
func (*PPLPolicy) ProtoReflect ¶ added in v0.27.2
func (x *PPLPolicy) ProtoReflect() protoreflect.Message
type Policy ¶
type Policy struct { Id string `protobuf:"bytes,1,opt,name=id,proto3" json:"id,omitempty"` Name string `protobuf:"bytes,2,opt,name=name,proto3" json:"name,omitempty"` AllowedUsers []string `protobuf:"bytes,3,rep,name=allowed_users,json=allowedUsers,proto3" json:"allowed_users,omitempty"` // repeated string allowed_groups = 4; AllowedDomains []string `protobuf:"bytes,5,rep,name=allowed_domains,json=allowedDomains,proto3" json:"allowed_domains,omitempty"` AllowedIdpClaims map[string]*structpb.ListValue `` /* 199-byte string literal not displayed */ Rego []string `protobuf:"bytes,6,rep,name=rego,proto3" json:"rego,omitempty"` Explanation string `protobuf:"bytes,8,opt,name=explanation,proto3" json:"explanation,omitempty"` Remediation string `protobuf:"bytes,9,opt,name=remediation,proto3" json:"remediation,omitempty"` // contains filtered or unexported fields }
func (*Policy) Descriptor
deprecated
func (*Policy) GetAllowedDomains ¶
func (*Policy) GetAllowedIdpClaims ¶ added in v0.11.0
func (*Policy) GetAllowedUsers ¶
func (*Policy) GetExplanation ¶ added in v0.19.0
func (*Policy) GetRemediation ¶ added in v0.19.0
func (*Policy) ProtoMessage ¶
func (*Policy) ProtoMessage()
func (*Policy) ProtoReflect ¶
func (x *Policy) ProtoReflect() protoreflect.Message
type Route ¶
type Route struct { Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"` From string `protobuf:"bytes,2,opt,name=from,proto3" json:"from,omitempty"` To []string `protobuf:"bytes,3,rep,name=to,proto3" json:"to,omitempty"` Redirect *RouteRedirect `protobuf:"bytes,34,opt,name=redirect,proto3" json:"redirect,omitempty"` Response *RouteDirectResponse `protobuf:"bytes,62,opt,name=response,proto3" json:"response,omitempty"` // https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/endpoint/v3/endpoint_components.proto#envoy-v3-api-msg-config-endpoint-v3-lbendpoint // optional load balancing weights assigned to upstream servers defined in TO // if not specified, all upstream servers would be assigned the same weight // if provided, load_balancing_weights[i] >= 1 and len(to) == // len(load_balancing_weights) LoadBalancingWeights []uint32 `` /* 132-byte string literal not displayed */ // Deprecated: Marked as deprecated in config.proto. AllowedUsers []string `protobuf:"bytes,4,rep,name=allowed_users,json=allowedUsers,proto3" json:"allowed_users,omitempty"` // repeated string allowed_groups = 5 [ deprecated = true ]; // // Deprecated: Marked as deprecated in config.proto. AllowedDomains []string `protobuf:"bytes,6,rep,name=allowed_domains,json=allowedDomains,proto3" json:"allowed_domains,omitempty"` // Deprecated: Marked as deprecated in config.proto. AllowedIdpClaims map[string]*structpb.ListValue `` /* 200-byte string literal not displayed */ Prefix string `protobuf:"bytes,7,opt,name=prefix,proto3" json:"prefix,omitempty"` Path string `protobuf:"bytes,8,opt,name=path,proto3" json:"path,omitempty"` Regex string `protobuf:"bytes,9,opt,name=regex,proto3" json:"regex,omitempty"` PrefixRewrite string `protobuf:"bytes,29,opt,name=prefix_rewrite,json=prefixRewrite,proto3" json:"prefix_rewrite,omitempty"` RegexRewritePattern string `protobuf:"bytes,30,opt,name=regex_rewrite_pattern,json=regexRewritePattern,proto3" json:"regex_rewrite_pattern,omitempty"` RegexRewriteSubstitution string `` /* 136-byte string literal not displayed */ RegexPriorityOrder *int64 `protobuf:"varint,61,opt,name=regex_priority_order,json=regexPriorityOrder,proto3,oneof" json:"regex_priority_order,omitempty"` CorsAllowPreflight bool `protobuf:"varint,10,opt,name=cors_allow_preflight,json=corsAllowPreflight,proto3" json:"cors_allow_preflight,omitempty"` AllowPublicUnauthenticatedAccess bool `` /* 163-byte string literal not displayed */ AllowAnyAuthenticatedUser bool `` /* 142-byte string literal not displayed */ Timeout *durationpb.Duration `protobuf:"bytes,12,opt,name=timeout,proto3" json:"timeout,omitempty"` IdleTimeout *durationpb.Duration `protobuf:"bytes,43,opt,name=idle_timeout,json=idleTimeout,proto3" json:"idle_timeout,omitempty"` AllowWebsockets bool `protobuf:"varint,13,opt,name=allow_websockets,json=allowWebsockets,proto3" json:"allow_websockets,omitempty"` AllowSpdy bool `protobuf:"varint,44,opt,name=allow_spdy,json=allowSpdy,proto3" json:"allow_spdy,omitempty"` TlsSkipVerify bool `protobuf:"varint,14,opt,name=tls_skip_verify,json=tlsSkipVerify,proto3" json:"tls_skip_verify,omitempty"` TlsServerName string `protobuf:"bytes,15,opt,name=tls_server_name,json=tlsServerName,proto3" json:"tls_server_name,omitempty"` TlsUpstreamServerName string `` /* 129-byte string literal not displayed */ TlsDownstreamServerName string `` /* 135-byte string literal not displayed */ TlsCustomCa string `protobuf:"bytes,16,opt,name=tls_custom_ca,json=tlsCustomCa,proto3" json:"tls_custom_ca,omitempty"` TlsCustomCaFile string `protobuf:"bytes,17,opt,name=tls_custom_ca_file,json=tlsCustomCaFile,proto3" json:"tls_custom_ca_file,omitempty"` TlsClientCert string `protobuf:"bytes,18,opt,name=tls_client_cert,json=tlsClientCert,proto3" json:"tls_client_cert,omitempty"` TlsClientKey string `protobuf:"bytes,19,opt,name=tls_client_key,json=tlsClientKey,proto3" json:"tls_client_key,omitempty"` TlsClientCertFile string `protobuf:"bytes,20,opt,name=tls_client_cert_file,json=tlsClientCertFile,proto3" json:"tls_client_cert_file,omitempty"` TlsClientKeyFile string `protobuf:"bytes,21,opt,name=tls_client_key_file,json=tlsClientKeyFile,proto3" json:"tls_client_key_file,omitempty"` TlsDownstreamClientCa string `` /* 129-byte string literal not displayed */ TlsDownstreamClientCaFile string `` /* 143-byte string literal not displayed */ TlsUpstreamAllowRenegotiation bool `` /* 154-byte string literal not displayed */ SetRequestHeaders map[string]string `` /* 203-byte string literal not displayed */ RemoveRequestHeaders []string `protobuf:"bytes,23,rep,name=remove_request_headers,json=removeRequestHeaders,proto3" json:"remove_request_headers,omitempty"` SetResponseHeaders map[string]string `` /* 206-byte string literal not displayed */ RewriteResponseHeaders []*RouteRewriteHeader `` // AuthorizationHeaderMode set_authorization_header = 54; /* 130-byte string literal not displayed */ PreserveHostHeader bool `protobuf:"varint,24,opt,name=preserve_host_header,json=preserveHostHeader,proto3" json:"preserve_host_header,omitempty"` PassIdentityHeaders *bool `` /* 128-byte string literal not displayed */ KubernetesServiceAccountToken string `` /* 153-byte string literal not displayed */ KubernetesServiceAccountTokenFile string `` /* 167-byte string literal not displayed */ EnableGoogleCloudServerlessAuthentication bool `` /* 192-byte string literal not displayed */ JwtIssuerFormat IssuerFormat `` /* 144-byte string literal not displayed */ EnvoyOpts *v3.Cluster `protobuf:"bytes,36,opt,name=envoy_opts,json=envoyOpts,proto3" json:"envoy_opts,omitempty"` Policies []*Policy `protobuf:"bytes,27,rep,name=policies,proto3" json:"policies,omitempty"` PplPolicies []*PPLPolicy `protobuf:"bytes,63,rep,name=ppl_policies,json=pplPolicies,proto3" json:"ppl_policies,omitempty"` Id string `protobuf:"bytes,28,opt,name=id,proto3" json:"id,omitempty"` HostRewrite *string `protobuf:"bytes,50,opt,name=host_rewrite,json=hostRewrite,proto3,oneof" json:"host_rewrite,omitempty"` HostRewriteHeader *string `protobuf:"bytes,51,opt,name=host_rewrite_header,json=hostRewriteHeader,proto3,oneof" json:"host_rewrite_header,omitempty"` HostPathRegexRewritePattern *string `` /* 155-byte string literal not displayed */ HostPathRegexRewriteSubstitution *string `` /* 170-byte string literal not displayed */ IdpClientId *string `protobuf:"bytes,55,opt,name=idp_client_id,json=idpClientId,proto3,oneof" json:"idp_client_id,omitempty"` IdpClientSecret *string `protobuf:"bytes,56,opt,name=idp_client_secret,json=idpClientSecret,proto3,oneof" json:"idp_client_secret,omitempty"` ShowErrorDetails bool `protobuf:"varint,59,opt,name=show_error_details,json=showErrorDetails,proto3" json:"show_error_details,omitempty"` // contains filtered or unexported fields }
Next ID: 66.
func (*Route) Descriptor
deprecated
func (*Route) GetAllowAnyAuthenticatedUser ¶ added in v0.11.0
func (*Route) GetAllowPublicUnauthenticatedAccess ¶
func (*Route) GetAllowSpdy ¶ added in v0.15.1
func (*Route) GetAllowWebsockets ¶
func (*Route) GetAllowedDomains
deprecated
func (*Route) GetAllowedIdpClaims
deprecated
added in
v0.11.0
func (*Route) GetAllowedUsers
deprecated
func (*Route) GetCorsAllowPreflight ¶
func (*Route) GetEnableGoogleCloudServerlessAuthentication ¶ added in v0.15.0
func (*Route) GetEnvoyOpts ¶ added in v0.12.2
func (*Route) GetHostPathRegexRewritePattern ¶ added in v0.15.4
func (*Route) GetHostPathRegexRewriteSubstitution ¶ added in v0.15.4
func (*Route) GetHostRewrite ¶ added in v0.15.4
func (*Route) GetHostRewriteHeader ¶ added in v0.15.4
func (*Route) GetIdleTimeout ¶ added in v0.15.0
func (x *Route) GetIdleTimeout() *durationpb.Duration
func (*Route) GetIdpClientId ¶ added in v0.17.0
func (*Route) GetIdpClientSecret ¶ added in v0.17.0
func (*Route) GetJwtIssuerFormat ¶ added in v0.28.0
func (x *Route) GetJwtIssuerFormat() IssuerFormat
func (*Route) GetKubernetesServiceAccountToken ¶
func (*Route) GetKubernetesServiceAccountTokenFile ¶ added in v0.27.2
func (*Route) GetLoadBalancingWeights ¶ added in v0.12.2
func (*Route) GetPassIdentityHeaders ¶
func (*Route) GetPolicies ¶
func (*Route) GetPplPolicies ¶ added in v0.27.2
func (*Route) GetPrefixRewrite ¶ added in v0.11.0
func (*Route) GetPreserveHostHeader ¶
func (*Route) GetRedirect ¶ added in v0.12.2
func (x *Route) GetRedirect() *RouteRedirect
func (*Route) GetRegexPriorityOrder ¶ added in v0.24.0
func (*Route) GetRegexRewritePattern ¶ added in v0.11.0
func (*Route) GetRegexRewriteSubstitution ¶ added in v0.11.0
func (*Route) GetRemoveRequestHeaders ¶
func (*Route) GetResponse ¶ added in v0.26.0
func (x *Route) GetResponse() *RouteDirectResponse
func (*Route) GetRewriteResponseHeaders ¶ added in v0.14.0
func (x *Route) GetRewriteResponseHeaders() []*RouteRewriteHeader
func (*Route) GetSetRequestHeaders ¶
func (*Route) GetSetResponseHeaders ¶ added in v0.14.0
func (*Route) GetShowErrorDetails ¶ added in v0.19.0
func (*Route) GetTimeout ¶
func (x *Route) GetTimeout() *durationpb.Duration
func (*Route) GetTlsClientCert ¶
func (*Route) GetTlsClientCertFile ¶
func (*Route) GetTlsClientKey ¶
func (*Route) GetTlsClientKeyFile ¶
func (*Route) GetTlsCustomCa ¶
func (*Route) GetTlsCustomCaFile ¶
func (*Route) GetTlsDownstreamClientCa ¶ added in v0.12.2
func (*Route) GetTlsDownstreamClientCaFile ¶ added in v0.12.2
func (*Route) GetTlsDownstreamServerName ¶ added in v0.17.3
func (*Route) GetTlsServerName ¶
func (*Route) GetTlsSkipVerify ¶
func (*Route) GetTlsUpstreamAllowRenegotiation ¶ added in v0.21.0
func (*Route) GetTlsUpstreamServerName ¶ added in v0.17.3
func (*Route) ProtoMessage ¶
func (*Route) ProtoMessage()
func (*Route) ProtoReflect ¶
func (x *Route) ProtoReflect() protoreflect.Message
type RouteDirectResponse ¶ added in v0.26.0
type RouteDirectResponse struct { Status uint32 `protobuf:"varint,1,opt,name=status,proto3" json:"status,omitempty"` Body string `protobuf:"bytes,2,opt,name=body,proto3" json:"body,omitempty"` // contains filtered or unexported fields }
func (*RouteDirectResponse) Descriptor
deprecated
added in
v0.26.0
func (*RouteDirectResponse) Descriptor() ([]byte, []int)
Deprecated: Use RouteDirectResponse.ProtoReflect.Descriptor instead.
func (*RouteDirectResponse) GetBody ¶ added in v0.26.0
func (x *RouteDirectResponse) GetBody() string
func (*RouteDirectResponse) GetStatus ¶ added in v0.26.0
func (x *RouteDirectResponse) GetStatus() uint32
func (*RouteDirectResponse) ProtoMessage ¶ added in v0.26.0
func (*RouteDirectResponse) ProtoMessage()
func (*RouteDirectResponse) ProtoReflect ¶ added in v0.26.0
func (x *RouteDirectResponse) ProtoReflect() protoreflect.Message
func (*RouteDirectResponse) Reset ¶ added in v0.26.0
func (x *RouteDirectResponse) Reset()
func (*RouteDirectResponse) String ¶ added in v0.26.0
func (x *RouteDirectResponse) String() string
type RouteRedirect ¶ added in v0.12.2
type RouteRedirect struct { HttpsRedirect *bool `protobuf:"varint,1,opt,name=https_redirect,json=httpsRedirect,proto3,oneof" json:"https_redirect,omitempty"` SchemeRedirect *string `protobuf:"bytes,2,opt,name=scheme_redirect,json=schemeRedirect,proto3,oneof" json:"scheme_redirect,omitempty"` HostRedirect *string `protobuf:"bytes,3,opt,name=host_redirect,json=hostRedirect,proto3,oneof" json:"host_redirect,omitempty"` PortRedirect *uint32 `protobuf:"varint,4,opt,name=port_redirect,json=portRedirect,proto3,oneof" json:"port_redirect,omitempty"` PathRedirect *string `protobuf:"bytes,5,opt,name=path_redirect,json=pathRedirect,proto3,oneof" json:"path_redirect,omitempty"` PrefixRewrite *string `protobuf:"bytes,6,opt,name=prefix_rewrite,json=prefixRewrite,proto3,oneof" json:"prefix_rewrite,omitempty"` ResponseCode *int32 `protobuf:"varint,7,opt,name=response_code,json=responseCode,proto3,oneof" json:"response_code,omitempty"` StripQuery *bool `protobuf:"varint,8,opt,name=strip_query,json=stripQuery,proto3,oneof" json:"strip_query,omitempty"` // contains filtered or unexported fields }
func (*RouteRedirect) Descriptor
deprecated
added in
v0.12.2
func (*RouteRedirect) Descriptor() ([]byte, []int)
Deprecated: Use RouteRedirect.ProtoReflect.Descriptor instead.
func (*RouteRedirect) GetHostRedirect ¶ added in v0.12.2
func (x *RouteRedirect) GetHostRedirect() string
func (*RouteRedirect) GetHttpsRedirect ¶ added in v0.12.2
func (x *RouteRedirect) GetHttpsRedirect() bool
func (*RouteRedirect) GetPathRedirect ¶ added in v0.12.2
func (x *RouteRedirect) GetPathRedirect() string
func (*RouteRedirect) GetPortRedirect ¶ added in v0.12.2
func (x *RouteRedirect) GetPortRedirect() uint32
func (*RouteRedirect) GetPrefixRewrite ¶ added in v0.12.2
func (x *RouteRedirect) GetPrefixRewrite() string
func (*RouteRedirect) GetResponseCode ¶ added in v0.12.2
func (x *RouteRedirect) GetResponseCode() int32
func (*RouteRedirect) GetSchemeRedirect ¶ added in v0.12.2
func (x *RouteRedirect) GetSchemeRedirect() string
func (*RouteRedirect) GetStripQuery ¶ added in v0.12.2
func (x *RouteRedirect) GetStripQuery() bool
func (*RouteRedirect) IsSet ¶ added in v0.12.2
func (rr *RouteRedirect) IsSet() bool
IsSet returns true if one of the route redirect options has been chosen.
func (*RouteRedirect) ProtoMessage ¶ added in v0.12.2
func (*RouteRedirect) ProtoMessage()
func (*RouteRedirect) ProtoReflect ¶ added in v0.12.2
func (x *RouteRedirect) ProtoReflect() protoreflect.Message
func (*RouteRedirect) Reset ¶ added in v0.12.2
func (x *RouteRedirect) Reset()
func (*RouteRedirect) String ¶ added in v0.12.2
func (x *RouteRedirect) String() string
type RouteRewriteHeader ¶ added in v0.14.0
type RouteRewriteHeader struct { Header string `protobuf:"bytes,1,opt,name=header,proto3" json:"header,omitempty"` // Types that are assignable to Matcher: // // *RouteRewriteHeader_Prefix Matcher isRouteRewriteHeader_Matcher `protobuf_oneof:"matcher"` Value string `protobuf:"bytes,2,opt,name=value,proto3" json:"value,omitempty"` // contains filtered or unexported fields }
func (*RouteRewriteHeader) Descriptor
deprecated
added in
v0.14.0
func (*RouteRewriteHeader) Descriptor() ([]byte, []int)
Deprecated: Use RouteRewriteHeader.ProtoReflect.Descriptor instead.
func (*RouteRewriteHeader) GetHeader ¶ added in v0.14.0
func (x *RouteRewriteHeader) GetHeader() string
func (*RouteRewriteHeader) GetMatcher ¶ added in v0.14.0
func (m *RouteRewriteHeader) GetMatcher() isRouteRewriteHeader_Matcher
func (*RouteRewriteHeader) GetPrefix ¶ added in v0.14.0
func (x *RouteRewriteHeader) GetPrefix() string
func (*RouteRewriteHeader) GetValue ¶ added in v0.14.0
func (x *RouteRewriteHeader) GetValue() string
func (*RouteRewriteHeader) ProtoMessage ¶ added in v0.14.0
func (*RouteRewriteHeader) ProtoMessage()
func (*RouteRewriteHeader) ProtoReflect ¶ added in v0.14.0
func (x *RouteRewriteHeader) ProtoReflect() protoreflect.Message
func (*RouteRewriteHeader) Reset ¶ added in v0.14.0
func (x *RouteRewriteHeader) Reset()
func (*RouteRewriteHeader) String ¶ added in v0.14.0
func (x *RouteRewriteHeader) String() string
type RouteRewriteHeader_Prefix ¶ added in v0.14.0
type RouteRewriteHeader_Prefix struct {
Prefix string `protobuf:"bytes,3,opt,name=prefix,proto3,oneof"`
}
type SANMatcher ¶ added in v0.27.2
type SANMatcher struct { SanType SANMatcher_SANType `protobuf:"varint,1,opt,name=san_type,json=sanType,proto3,enum=pomerium.config.SANMatcher_SANType" json:"san_type,omitempty"` Pattern string `protobuf:"bytes,2,opt,name=pattern,proto3" json:"pattern,omitempty"` // contains filtered or unexported fields }
func (*SANMatcher) Descriptor
deprecated
added in
v0.27.2
func (*SANMatcher) Descriptor() ([]byte, []int)
Deprecated: Use SANMatcher.ProtoReflect.Descriptor instead.
func (*SANMatcher) GetPattern ¶ added in v0.27.2
func (x *SANMatcher) GetPattern() string
func (*SANMatcher) GetSanType ¶ added in v0.27.2
func (x *SANMatcher) GetSanType() SANMatcher_SANType
func (*SANMatcher) ProtoMessage ¶ added in v0.27.2
func (*SANMatcher) ProtoMessage()
func (*SANMatcher) ProtoReflect ¶ added in v0.27.2
func (x *SANMatcher) ProtoReflect() protoreflect.Message
func (*SANMatcher) Reset ¶ added in v0.27.2
func (x *SANMatcher) Reset()
func (*SANMatcher) String ¶ added in v0.27.2
func (x *SANMatcher) String() string
type SANMatcher_SANType ¶ added in v0.27.2
type SANMatcher_SANType int32
const ( SANMatcher_SAN_TYPE_UNSPECIFIED SANMatcher_SANType = 0 SANMatcher_EMAIL SANMatcher_SANType = 1 SANMatcher_DNS SANMatcher_SANType = 2 SANMatcher_URI SANMatcher_SANType = 3 SANMatcher_IP_ADDRESS SANMatcher_SANType = 4 SANMatcher_USER_PRINCIPAL_NAME SANMatcher_SANType = 5 )
func (SANMatcher_SANType) Descriptor ¶ added in v0.27.2
func (SANMatcher_SANType) Descriptor() protoreflect.EnumDescriptor
func (SANMatcher_SANType) Enum ¶ added in v0.27.2
func (x SANMatcher_SANType) Enum() *SANMatcher_SANType
func (SANMatcher_SANType) EnumDescriptor
deprecated
added in
v0.27.2
func (SANMatcher_SANType) EnumDescriptor() ([]byte, []int)
Deprecated: Use SANMatcher_SANType.Descriptor instead.
func (SANMatcher_SANType) Number ¶ added in v0.27.2
func (x SANMatcher_SANType) Number() protoreflect.EnumNumber
func (SANMatcher_SANType) String ¶ added in v0.27.2
func (x SANMatcher_SANType) String() string
func (SANMatcher_SANType) Type ¶ added in v0.27.2
func (SANMatcher_SANType) Type() protoreflect.EnumType
type Settings ¶ added in v0.11.0
type Settings struct { InstallationId *string `protobuf:"bytes,71,opt,name=installation_id,json=installationId,proto3,oneof" json:"installation_id,omitempty"` LogLevel *string `protobuf:"bytes,3,opt,name=log_level,json=logLevel,proto3,oneof" json:"log_level,omitempty"` AccessLogFields *Settings_StringList `protobuf:"bytes,114,opt,name=access_log_fields,json=accessLogFields,proto3,oneof" json:"access_log_fields,omitempty"` AuthorizeLogFields *Settings_StringList `protobuf:"bytes,115,opt,name=authorize_log_fields,json=authorizeLogFields,proto3,oneof" json:"authorize_log_fields,omitempty"` ProxyLogLevel *string `protobuf:"bytes,4,opt,name=proxy_log_level,json=proxyLogLevel,proto3,oneof" json:"proxy_log_level,omitempty"` Services *string `protobuf:"bytes,6,opt,name=services,proto3,oneof" json:"services,omitempty"` Address *string `protobuf:"bytes,7,opt,name=address,proto3,oneof" json:"address,omitempty"` InsecureServer *bool `protobuf:"varint,8,opt,name=insecure_server,json=insecureServer,proto3,oneof" json:"insecure_server,omitempty"` DnsLookupFamily *string `protobuf:"bytes,60,opt,name=dns_lookup_family,json=dnsLookupFamily,proto3,oneof" json:"dns_lookup_family,omitempty"` Certificates []*Settings_Certificate `protobuf:"bytes,9,rep,name=certificates,proto3" json:"certificates,omitempty"` HttpRedirectAddr *string `protobuf:"bytes,10,opt,name=http_redirect_addr,json=httpRedirectAddr,proto3,oneof" json:"http_redirect_addr,omitempty"` TimeoutRead *durationpb.Duration `protobuf:"bytes,11,opt,name=timeout_read,json=timeoutRead,proto3,oneof" json:"timeout_read,omitempty"` TimeoutWrite *durationpb.Duration `protobuf:"bytes,12,opt,name=timeout_write,json=timeoutWrite,proto3,oneof" json:"timeout_write,omitempty"` TimeoutIdle *durationpb.Duration `protobuf:"bytes,13,opt,name=timeout_idle,json=timeoutIdle,proto3,oneof" json:"timeout_idle,omitempty"` AuthenticateServiceUrl *string `` /* 136-byte string literal not displayed */ AuthenticateInternalServiceUrl *string `` /* 162-byte string literal not displayed */ SignoutRedirectUrl *string `protobuf:"bytes,93,opt,name=signout_redirect_url,json=signoutRedirectUrl,proto3,oneof" json:"signout_redirect_url,omitempty"` AuthenticateCallbackPath *string `` /* 142-byte string literal not displayed */ CookieName *string `protobuf:"bytes,16,opt,name=cookie_name,json=cookieName,proto3,oneof" json:"cookie_name,omitempty"` CookieSecret *string `protobuf:"bytes,17,opt,name=cookie_secret,json=cookieSecret,proto3,oneof" json:"cookie_secret,omitempty"` CookieDomain *string `protobuf:"bytes,18,opt,name=cookie_domain,json=cookieDomain,proto3,oneof" json:"cookie_domain,omitempty"` // optional bool cookie_secure = 19; CookieHttpOnly *bool `protobuf:"varint,20,opt,name=cookie_http_only,json=cookieHttpOnly,proto3,oneof" json:"cookie_http_only,omitempty"` CookieExpire *durationpb.Duration `protobuf:"bytes,21,opt,name=cookie_expire,json=cookieExpire,proto3,oneof" json:"cookie_expire,omitempty"` CookieSameSite *string `protobuf:"bytes,113,opt,name=cookie_same_site,json=cookieSameSite,proto3,oneof" json:"cookie_same_site,omitempty"` IdpClientId *string `protobuf:"bytes,22,opt,name=idp_client_id,json=idpClientId,proto3,oneof" json:"idp_client_id,omitempty"` IdpClientSecret *string `protobuf:"bytes,23,opt,name=idp_client_secret,json=idpClientSecret,proto3,oneof" json:"idp_client_secret,omitempty"` IdpProvider *string `protobuf:"bytes,24,opt,name=idp_provider,json=idpProvider,proto3,oneof" json:"idp_provider,omitempty"` IdpProviderUrl *string `protobuf:"bytes,25,opt,name=idp_provider_url,json=idpProviderUrl,proto3,oneof" json:"idp_provider_url,omitempty"` Scopes []string `protobuf:"bytes,26,rep,name=scopes,proto3" json:"scopes,omitempty"` // optional string idp_service_account = 27; // optional google.protobuf.Duration idp_refresh_directory_timeout = 28; // optional google.protobuf.Duration idp_refresh_directory_interval = 29; RequestParams map[string]string `` /* 189-byte string literal not displayed */ AuthorizeServiceUrls []string `protobuf:"bytes,32,rep,name=authorize_service_urls,json=authorizeServiceUrls,proto3" json:"authorize_service_urls,omitempty"` AuthorizeInternalServiceUrl *string `` /* 153-byte string literal not displayed */ OverrideCertificateName *string `` /* 139-byte string literal not displayed */ CertificateAuthority *string `` /* 128-byte string literal not displayed */ DeriveTls *string `protobuf:"bytes,96,opt,name=derive_tls,json=deriveTls,proto3,oneof" json:"derive_tls,omitempty"` SigningKey *string `protobuf:"bytes,36,opt,name=signing_key,json=signingKey,proto3,oneof" json:"signing_key,omitempty"` SetResponseHeaders map[string]string `` /* 206-byte string literal not displayed */ // repeated string jwt_claims_headers = 37; JwtClaimsHeaders map[string]string `` /* 200-byte string literal not displayed */ DefaultUpstreamTimeout *durationpb.Duration `` /* 136-byte string literal not displayed */ MetricsAddress *string `protobuf:"bytes,40,opt,name=metrics_address,json=metricsAddress,proto3,oneof" json:"metrics_address,omitempty"` MetricsBasicAuth *string `protobuf:"bytes,64,opt,name=metrics_basic_auth,json=metricsBasicAuth,proto3,oneof" json:"metrics_basic_auth,omitempty"` MetricsCertificate *Settings_Certificate `protobuf:"bytes,65,opt,name=metrics_certificate,json=metricsCertificate,proto3,oneof" json:"metrics_certificate,omitempty"` MetricsClientCa *string `protobuf:"bytes,66,opt,name=metrics_client_ca,json=metricsClientCa,proto3,oneof" json:"metrics_client_ca,omitempty"` TracingProvider *string `protobuf:"bytes,41,opt,name=tracing_provider,json=tracingProvider,proto3,oneof" json:"tracing_provider,omitempty"` TracingSampleRate *float64 `protobuf:"fixed64,42,opt,name=tracing_sample_rate,json=tracingSampleRate,proto3,oneof" json:"tracing_sample_rate,omitempty"` TracingDatadogAddress *string `` /* 133-byte string literal not displayed */ TracingJaegerCollectorEndpoint *string `` /* 162-byte string literal not displayed */ TracingJaegerAgentEndpoint *string `` /* 150-byte string literal not displayed */ TracingZipkinEndpoint *string `` /* 133-byte string literal not displayed */ GrpcAddress *string `protobuf:"bytes,46,opt,name=grpc_address,json=grpcAddress,proto3,oneof" json:"grpc_address,omitempty"` GrpcInsecure *bool `protobuf:"varint,47,opt,name=grpc_insecure,json=grpcInsecure,proto3,oneof" json:"grpc_insecure,omitempty"` GrpcClientTimeout *durationpb.Duration `protobuf:"bytes,99,opt,name=grpc_client_timeout,json=grpcClientTimeout,proto3,oneof" json:"grpc_client_timeout,omitempty"` // optional string forward_auth_url = 50; DatabrokerServiceUrls []string `` /* 127-byte string literal not displayed */ DatabrokerInternalServiceUrl *string `` /* 156-byte string literal not displayed */ DatabrokerStorageType *string `` /* 134-byte string literal not displayed */ DatabrokerStorageConnectionString *string `` /* 172-byte string literal not displayed */ DownstreamMtls *DownstreamMtlsSettings `protobuf:"bytes,116,opt,name=downstream_mtls,json=downstreamMtls,proto3,oneof" json:"downstream_mtls,omitempty"` // optional string client_ca = 53; // optional string client_crl = 74; GoogleCloudServerlessAuthenticationServiceAccount *string `` /* 223-byte string literal not displayed */ UseProxyProtocol *bool `protobuf:"varint,107,opt,name=use_proxy_protocol,json=useProxyProtocol,proto3,oneof" json:"use_proxy_protocol,omitempty"` Autocert *bool `protobuf:"varint,56,opt,name=autocert,proto3,oneof" json:"autocert,omitempty"` AutocertCa *string `protobuf:"bytes,76,opt,name=autocert_ca,json=autocertCa,proto3,oneof" json:"autocert_ca,omitempty"` AutocertEmail *string `protobuf:"bytes,77,opt,name=autocert_email,json=autocertEmail,proto3,oneof" json:"autocert_email,omitempty"` AutocertUseStaging *bool `protobuf:"varint,57,opt,name=autocert_use_staging,json=autocertUseStaging,proto3,oneof" json:"autocert_use_staging,omitempty"` AutocertEabKeyId *string `protobuf:"bytes,78,opt,name=autocert_eab_key_id,json=autocertEabKeyId,proto3,oneof" json:"autocert_eab_key_id,omitempty"` AutocertEabMacKey *string `protobuf:"bytes,79,opt,name=autocert_eab_mac_key,json=autocertEabMacKey,proto3,oneof" json:"autocert_eab_mac_key,omitempty"` AutocertMustStaple *bool `protobuf:"varint,58,opt,name=autocert_must_staple,json=autocertMustStaple,proto3,oneof" json:"autocert_must_staple,omitempty"` AutocertDir *string `protobuf:"bytes,59,opt,name=autocert_dir,json=autocertDir,proto3,oneof" json:"autocert_dir,omitempty"` AutocertTrustedCa *string `protobuf:"bytes,80,opt,name=autocert_trusted_ca,json=autocertTrustedCa,proto3,oneof" json:"autocert_trusted_ca,omitempty"` SkipXffAppend *bool `protobuf:"varint,61,opt,name=skip_xff_append,json=skipXffAppend,proto3,oneof" json:"skip_xff_append,omitempty"` XffNumTrustedHops *uint32 `protobuf:"varint,70,opt,name=xff_num_trusted_hops,json=xffNumTrustedHops,proto3,oneof" json:"xff_num_trusted_hops,omitempty"` EnvoyAdminAccessLogPath *string `` /* 144-byte string literal not displayed */ EnvoyAdminProfilePath *string `` /* 136-byte string literal not displayed */ EnvoyAdminAddress *string `protobuf:"bytes,110,opt,name=envoy_admin_address,json=envoyAdminAddress,proto3,oneof" json:"envoy_admin_address,omitempty"` EnvoyBindConfigSourceAddress *string `` /* 159-byte string literal not displayed */ EnvoyBindConfigFreebind *bool `` /* 143-byte string literal not displayed */ ProgrammaticRedirectDomainWhitelist []string `` /* 171-byte string literal not displayed */ CodecType *v31.HttpConnectionManager_CodecType `` /* 193-byte string literal not displayed */ AuditKey *crypt.PublicKeyEncryptionKey `protobuf:"bytes,72,opt,name=audit_key,json=auditKey,proto3,oneof" json:"audit_key,omitempty"` PrimaryColor *string `protobuf:"bytes,85,opt,name=primary_color,json=primaryColor,proto3,oneof" json:"primary_color,omitempty"` SecondaryColor *string `protobuf:"bytes,86,opt,name=secondary_color,json=secondaryColor,proto3,oneof" json:"secondary_color,omitempty"` DarkmodePrimaryColor *string `` /* 130-byte string literal not displayed */ DarkmodeSecondaryColor *string `` /* 136-byte string literal not displayed */ LogoUrl *string `protobuf:"bytes,89,opt,name=logo_url,json=logoUrl,proto3,oneof" json:"logo_url,omitempty"` FaviconUrl *string `protobuf:"bytes,90,opt,name=favicon_url,json=faviconUrl,proto3,oneof" json:"favicon_url,omitempty"` ErrorMessageFirstParagraph *string `` /* 150-byte string literal not displayed */ PassIdentityHeaders *bool `` /* 129-byte string literal not displayed */ RuntimeFlags map[string]bool `` /* 188-byte string literal not displayed */ // contains filtered or unexported fields }
Next ID: 119.
func (*Settings) Descriptor
deprecated
added in
v0.11.0
func (*Settings) GetAccessLogFields ¶ added in v0.23.0
func (x *Settings) GetAccessLogFields() *Settings_StringList
func (*Settings) GetAddress ¶ added in v0.11.0
func (*Settings) GetAuditKey ¶ added in v0.14.0
func (x *Settings) GetAuditKey() *crypt.PublicKeyEncryptionKey
func (*Settings) GetAuthenticateCallbackPath ¶ added in v0.11.0
func (*Settings) GetAuthenticateInternalServiceUrl ¶ added in v0.16.0
func (*Settings) GetAuthenticateServiceUrl ¶ added in v0.11.0
func (*Settings) GetAuthorizeInternalServiceUrl ¶ added in v0.16.0
func (*Settings) GetAuthorizeLogFields ¶ added in v0.23.0
func (x *Settings) GetAuthorizeLogFields() *Settings_StringList
func (*Settings) GetAuthorizeServiceUrls ¶ added in v0.14.0
func (*Settings) GetAutocert ¶ added in v0.11.0
func (*Settings) GetAutocertCa ¶ added in v0.15.6
func (*Settings) GetAutocertDir ¶ added in v0.11.0
func (*Settings) GetAutocertEabKeyId ¶ added in v0.15.6
func (*Settings) GetAutocertEabMacKey ¶ added in v0.15.6
func (*Settings) GetAutocertEmail ¶ added in v0.15.6
func (*Settings) GetAutocertMustStaple ¶ added in v0.11.0
func (*Settings) GetAutocertTrustedCa ¶ added in v0.15.6
func (*Settings) GetAutocertUseStaging ¶ added in v0.11.0
func (*Settings) GetCertificateAuthority ¶ added in v0.11.0
func (*Settings) GetCertificates ¶ added in v0.11.0
func (x *Settings) GetCertificates() []*Settings_Certificate
func (*Settings) GetCodecType ¶ added in v0.14.0
func (x *Settings) GetCodecType() v31.HttpConnectionManager_CodecType
func (*Settings) GetCookieDomain ¶ added in v0.11.0
func (*Settings) GetCookieExpire ¶ added in v0.11.0
func (x *Settings) GetCookieExpire() *durationpb.Duration
func (*Settings) GetCookieHttpOnly ¶ added in v0.11.0
func (*Settings) GetCookieName ¶ added in v0.11.0
func (*Settings) GetCookieSameSite ¶ added in v0.23.0
func (*Settings) GetCookieSecret ¶ added in v0.11.0
func (*Settings) GetDarkmodePrimaryColor ¶ added in v0.19.0
func (*Settings) GetDarkmodeSecondaryColor ¶ added in v0.19.0
func (*Settings) GetDatabrokerInternalServiceUrl ¶ added in v0.16.0
func (*Settings) GetDatabrokerServiceUrls ¶ added in v0.14.0
func (*Settings) GetDatabrokerStorageConnectionString ¶ added in v0.21.0
func (*Settings) GetDatabrokerStorageType ¶ added in v0.21.0
func (*Settings) GetDefaultUpstreamTimeout ¶ added in v0.11.0
func (x *Settings) GetDefaultUpstreamTimeout() *durationpb.Duration
func (*Settings) GetDeriveTls ¶ added in v0.21.0
func (*Settings) GetDnsLookupFamily ¶ added in v0.11.0
func (*Settings) GetDownstreamMtls ¶ added in v0.23.0
func (x *Settings) GetDownstreamMtls() *DownstreamMtlsSettings
func (*Settings) GetEnvoyAdminAccessLogPath ¶ added in v0.21.0
func (*Settings) GetEnvoyAdminAddress ¶ added in v0.21.0
func (*Settings) GetEnvoyAdminProfilePath ¶ added in v0.21.0
func (*Settings) GetEnvoyBindConfigFreebind ¶ added in v0.21.0
func (*Settings) GetEnvoyBindConfigSourceAddress ¶ added in v0.21.0
func (*Settings) GetErrorMessageFirstParagraph ¶ added in v0.19.0
func (*Settings) GetFaviconUrl ¶ added in v0.19.0
func (*Settings) GetGoogleCloudServerlessAuthenticationServiceAccount ¶ added in v0.11.0
func (*Settings) GetGrpcAddress ¶ added in v0.11.0
func (*Settings) GetGrpcClientTimeout ¶ added in v0.21.0
func (x *Settings) GetGrpcClientTimeout() *durationpb.Duration
func (*Settings) GetGrpcInsecure ¶ added in v0.11.0
func (*Settings) GetHttpRedirectAddr ¶ added in v0.11.0
func (*Settings) GetIdpClientId ¶ added in v0.11.0
func (*Settings) GetIdpClientSecret ¶ added in v0.11.0
func (*Settings) GetIdpProvider ¶ added in v0.11.0
func (*Settings) GetIdpProviderUrl ¶ added in v0.11.0
func (*Settings) GetInsecureServer ¶ added in v0.11.0
func (*Settings) GetInstallationId ¶ added in v0.14.0
func (*Settings) GetJwtClaimsHeaders ¶ added in v0.11.0
func (*Settings) GetLogLevel ¶ added in v0.11.0
func (*Settings) GetLogoUrl ¶ added in v0.19.0
func (*Settings) GetMetricsAddress ¶ added in v0.11.0
func (*Settings) GetMetricsBasicAuth ¶ added in v0.14.0
func (*Settings) GetMetricsCertificate ¶ added in v0.14.0
func (x *Settings) GetMetricsCertificate() *Settings_Certificate
func (*Settings) GetMetricsClientCa ¶ added in v0.14.0
func (*Settings) GetOverrideCertificateName ¶ added in v0.11.0
func (*Settings) GetPassIdentityHeaders ¶ added in v0.25.0
func (*Settings) GetPrimaryColor ¶ added in v0.19.0
func (*Settings) GetProgrammaticRedirectDomainWhitelist ¶ added in v0.13.4
func (*Settings) GetProxyLogLevel ¶ added in v0.11.0
func (*Settings) GetRequestParams ¶ added in v0.11.0
func (*Settings) GetRuntimeFlags ¶ added in v0.26.0
func (*Settings) GetSecondaryColor ¶ added in v0.19.0
func (*Settings) GetServices ¶ added in v0.11.0
func (*Settings) GetSetResponseHeaders ¶ added in v0.14.0
func (*Settings) GetSharedSecret ¶ added in v0.11.0
func (*Settings) GetSigningKey ¶ added in v0.11.0
func (*Settings) GetSignoutRedirectUrl ¶ added in v0.21.0
func (*Settings) GetSkipXffAppend ¶ added in v0.12.2
func (*Settings) GetTimeoutIdle ¶ added in v0.11.0
func (x *Settings) GetTimeoutIdle() *durationpb.Duration
func (*Settings) GetTimeoutRead ¶ added in v0.11.0
func (x *Settings) GetTimeoutRead() *durationpb.Duration
func (*Settings) GetTimeoutWrite ¶ added in v0.11.0
func (x *Settings) GetTimeoutWrite() *durationpb.Duration
func (*Settings) GetTracingDatadogAddress ¶ added in v0.21.0
func (*Settings) GetTracingJaegerAgentEndpoint ¶ added in v0.11.0
func (*Settings) GetTracingJaegerCollectorEndpoint ¶ added in v0.11.0
func (*Settings) GetTracingProvider ¶ added in v0.11.0
func (*Settings) GetTracingSampleRate ¶ added in v0.11.0
func (*Settings) GetTracingZipkinEndpoint ¶ added in v0.11.0
func (*Settings) GetUseProxyProtocol ¶ added in v0.21.0
func (*Settings) GetXffNumTrustedHops ¶ added in v0.14.0
func (*Settings) ProtoMessage ¶ added in v0.11.0
func (*Settings) ProtoMessage()
func (*Settings) ProtoReflect ¶ added in v0.11.0
func (x *Settings) ProtoReflect() protoreflect.Message
type Settings_Certificate ¶ added in v0.11.0
type Settings_Certificate struct { CertBytes []byte `protobuf:"bytes,3,opt,name=cert_bytes,json=certBytes,proto3" json:"cert_bytes,omitempty"` KeyBytes []byte `protobuf:"bytes,4,opt,name=key_bytes,json=keyBytes,proto3" json:"key_bytes,omitempty"` Id string `protobuf:"bytes,5,opt,name=id,proto3" json:"id,omitempty"` // contains filtered or unexported fields }
func (*Settings_Certificate) Descriptor
deprecated
added in
v0.11.0
func (*Settings_Certificate) Descriptor() ([]byte, []int)
Deprecated: Use Settings_Certificate.ProtoReflect.Descriptor instead.
func (*Settings_Certificate) GetCertBytes ¶ added in v0.11.0
func (x *Settings_Certificate) GetCertBytes() []byte
func (*Settings_Certificate) GetId ¶ added in v0.24.0
func (x *Settings_Certificate) GetId() string
func (*Settings_Certificate) GetKeyBytes ¶ added in v0.11.0
func (x *Settings_Certificate) GetKeyBytes() []byte
func (*Settings_Certificate) ProtoMessage ¶ added in v0.11.0
func (*Settings_Certificate) ProtoMessage()
func (*Settings_Certificate) ProtoReflect ¶ added in v0.11.0
func (x *Settings_Certificate) ProtoReflect() protoreflect.Message
func (*Settings_Certificate) Reset ¶ added in v0.11.0
func (x *Settings_Certificate) Reset()
func (*Settings_Certificate) String ¶ added in v0.11.0
func (x *Settings_Certificate) String() string
type Settings_StringList ¶ added in v0.23.0
type Settings_StringList struct { Values []string `protobuf:"bytes,1,rep,name=values,proto3" json:"values,omitempty"` // contains filtered or unexported fields }
func (*Settings_StringList) Descriptor
deprecated
added in
v0.23.0
func (*Settings_StringList) Descriptor() ([]byte, []int)
Deprecated: Use Settings_StringList.ProtoReflect.Descriptor instead.
func (*Settings_StringList) GetValues ¶ added in v0.23.0
func (x *Settings_StringList) GetValues() []string
func (*Settings_StringList) ProtoMessage ¶ added in v0.23.0
func (*Settings_StringList) ProtoMessage()
func (*Settings_StringList) ProtoReflect ¶ added in v0.23.0
func (x *Settings_StringList) ProtoReflect() protoreflect.Message
func (*Settings_StringList) Reset ¶ added in v0.23.0
func (x *Settings_StringList) Reset()
func (*Settings_StringList) String ¶ added in v0.23.0
func (x *Settings_StringList) String() string