blob: 5200224a2ff9cf3bd743bbd87830f256fd809fc5 [file] [log] [blame]
Zack Williamse940c7a2019-08-21 14:25:39 -07001/*
2Copyright The Kubernetes Authors.
3
4Licensed under the Apache License, Version 2.0 (the "License");
5you may not use this file except in compliance with the License.
6You may obtain a copy of the License at
7
8 http://www.apache.org/licenses/LICENSE-2.0
9
10Unless required by applicable law or agreed to in writing, software
11distributed under the License is distributed on an "AS IS" BASIS,
12WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13See the License for the specific language governing permissions and
14limitations under the License.
15*/
16
17
18// This file was autogenerated by go-to-protobuf. Do not edit it manually!
19
20syntax = 'proto2';
21
22package k8s.io.api.certificates.v1beta1;
23
24import "k8s.io/apimachinery/pkg/apis/meta/v1/generated.proto";
25import "k8s.io/apimachinery/pkg/runtime/generated.proto";
26import "k8s.io/apimachinery/pkg/runtime/schema/generated.proto";
27
28// Package-wide variables from generator "generated".
29option go_package = "v1beta1";
30
31// Describes a certificate signing request
32message CertificateSigningRequest {
33 // +optional
34 optional k8s.io.apimachinery.pkg.apis.meta.v1.ObjectMeta metadata = 1;
35
36 // The certificate request itself and any additional information.
37 // +optional
38 optional CertificateSigningRequestSpec spec = 2;
39
40 // Derived information about the request.
41 // +optional
42 optional CertificateSigningRequestStatus status = 3;
43}
44
45message CertificateSigningRequestCondition {
46 // request approval state, currently Approved or Denied.
47 optional string type = 1;
48
49 // brief reason for the request state
50 // +optional
51 optional string reason = 2;
52
53 // human readable message with details about the request state
54 // +optional
55 optional string message = 3;
56
57 // timestamp for the last update to this condition
58 // +optional
59 optional k8s.io.apimachinery.pkg.apis.meta.v1.Time lastUpdateTime = 4;
60}
61
62message CertificateSigningRequestList {
63 // +optional
64 optional k8s.io.apimachinery.pkg.apis.meta.v1.ListMeta metadata = 1;
65
66 repeated CertificateSigningRequest items = 2;
67}
68
69// This information is immutable after the request is created. Only the Request
70// and Usages fields can be set on creation, other fields are derived by
71// Kubernetes and cannot be modified by users.
72message CertificateSigningRequestSpec {
73 // Base64-encoded PKCS#10 CSR data
74 optional bytes request = 1;
75
76 // allowedUsages specifies a set of usage contexts the key will be
77 // valid for.
78 // See: https://tools.ietf.org/html/rfc5280#section-4.2.1.3
79 // https://tools.ietf.org/html/rfc5280#section-4.2.1.12
80 repeated string usages = 5;
81
82 // Information about the requesting user.
83 // See user.Info interface for details.
84 // +optional
85 optional string username = 2;
86
87 // UID information about the requesting user.
88 // See user.Info interface for details.
89 // +optional
90 optional string uid = 3;
91
92 // Group information about the requesting user.
93 // See user.Info interface for details.
94 // +optional
95 repeated string groups = 4;
96
97 // Extra information about the requesting user.
98 // See user.Info interface for details.
99 // +optional
100 map<string, ExtraValue> extra = 6;
101}
102
103message CertificateSigningRequestStatus {
104 // Conditions applied to the request, such as approval or denial.
105 // +optional
106 repeated CertificateSigningRequestCondition conditions = 1;
107
108 // If request was approved, the controller will place the issued certificate here.
109 // +optional
110 optional bytes certificate = 2;
111}
112
113// ExtraValue masks the value so protobuf can generate
114// +protobuf.nullable=true
115// +protobuf.options.(gogoproto.goproto_stringer)=false
116message ExtraValue {
117 // items, if empty, will result in an empty slice
118
119 repeated string items = 1;
120}
121