You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
58 lines
2.0 KiB
58 lines
2.0 KiB
syntax = "proto3"; |
|
|
|
package envoy.extensions.transport_sockets.tls.v4alpha; |
|
|
|
import "envoy/config/core/v4alpha/base.proto"; |
|
import "envoy/config/core/v4alpha/config_source.proto"; |
|
import "envoy/extensions/transport_sockets/tls/v4alpha/common.proto"; |
|
|
|
import "udpa/annotations/sensitive.proto"; |
|
import "udpa/annotations/status.proto"; |
|
import "udpa/annotations/versioning.proto"; |
|
import "validate/validate.proto"; |
|
|
|
option java_package = "io.envoyproxy.envoy.extensions.transport_sockets.tls.v4alpha"; |
|
option java_outer_classname = "SecretProto"; |
|
option java_multiple_files = true; |
|
option (udpa.annotations.file_status).package_version_status = NEXT_MAJOR_VERSION_CANDIDATE; |
|
|
|
// [#protodoc-title: Secrets configuration] |
|
|
|
message GenericSecret { |
|
option (udpa.annotations.versioning).previous_message_type = |
|
"envoy.extensions.transport_sockets.tls.v3.GenericSecret"; |
|
|
|
// Secret of generic type and is available to filters. |
|
config.core.v4alpha.DataSource secret = 1 [(udpa.annotations.sensitive) = true]; |
|
} |
|
|
|
message SdsSecretConfig { |
|
option (udpa.annotations.versioning).previous_message_type = |
|
"envoy.extensions.transport_sockets.tls.v3.SdsSecretConfig"; |
|
|
|
// Name by which the secret can be uniquely referred to. When both name and config are specified, |
|
// then secret can be fetched and/or reloaded via SDS. When only name is specified, then secret |
|
// will be loaded from static resources. |
|
string name = 1 [(validate.rules).string = {min_len: 1}]; |
|
|
|
config.core.v4alpha.ConfigSource sds_config = 2; |
|
} |
|
|
|
// [#next-free-field: 6] |
|
message Secret { |
|
option (udpa.annotations.versioning).previous_message_type = |
|
"envoy.extensions.transport_sockets.tls.v3.Secret"; |
|
|
|
// Name (FQDN, UUID, SPKI, SHA256, etc.) by which the secret can be uniquely referred to. |
|
string name = 1; |
|
|
|
oneof type { |
|
TlsCertificate tls_certificate = 2; |
|
|
|
TlsSessionTicketKeys session_ticket_keys = 3; |
|
|
|
CertificateValidationContext validation_context = 4; |
|
|
|
GenericSecret generic_secret = 5; |
|
} |
|
}
|
|
|