Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
112 changes: 56 additions & 56 deletions src/pomerium/pb/routes_pb2.py

Large diffs are not rendered by default.

16 changes: 14 additions & 2 deletions src/pomerium/pb/routes_pb2.pyi
Original file line number Diff line number Diff line change
Expand Up @@ -61,13 +61,15 @@ class _BearerTokenFormatEnumTypeWrapper(google.protobuf.internal.enum_type_wrapp
BEARER_TOKEN_FORMAT_DEFAULT: _BearerTokenFormat.ValueType # 1
BEARER_TOKEN_FORMAT_IDP_ACCESS_TOKEN: _BearerTokenFormat.ValueType # 2
BEARER_TOKEN_FORMAT_IDP_IDENTITY_TOKEN: _BearerTokenFormat.ValueType # 3
BEARER_TOKEN_FORMAT_JWT: _BearerTokenFormat.ValueType # 4

class BearerTokenFormat(_BearerTokenFormat, metaclass=_BearerTokenFormatEnumTypeWrapper): ...

BEARER_TOKEN_FORMAT_UNKNOWN: BearerTokenFormat.ValueType # 0
BEARER_TOKEN_FORMAT_DEFAULT: BearerTokenFormat.ValueType # 1
BEARER_TOKEN_FORMAT_IDP_ACCESS_TOKEN: BearerTokenFormat.ValueType # 2
BEARER_TOKEN_FORMAT_IDP_IDENTITY_TOKEN: BearerTokenFormat.ValueType # 3
BEARER_TOKEN_FORMAT_JWT: BearerTokenFormat.ValueType # 4
global___BearerTokenFormat = BearerTokenFormat

class _LoadBalancingPolicy:
Expand Down Expand Up @@ -398,7 +400,7 @@ global___OAuth2Endpoint = OAuth2Endpoint
@typing.final
class Route(google.protobuf.message.Message):
"""Route defines a proxy route's settings and policy associations
Next ID: 78
Next ID: 80
"""

DESCRIPTOR: google.protobuf.descriptor.Descriptor
Expand Down Expand Up @@ -515,6 +517,7 @@ class Route(google.protobuf.message.Message):
UPSTREAM_TUNNEL_FIELD_NUMBER: builtins.int
ALLOW_UPGRADES_FIELD_NUMBER: builtins.int
SESSION_RECORDING_FIELD_NUMBER: builtins.int
IDENTITY_PROVIDERS_FIELD_NUMBER: builtins.int
id: builtins.str
namespace_id: builtins.str
name: builtins.str
Expand Down Expand Up @@ -615,6 +618,14 @@ class Route(google.protobuf.message.Message):
def allow_upgrades(self) -> global___Route.StringList: ...
@property
def session_recording(self) -> global___SessionRecording: ...
@property
def identity_providers(self) -> google.protobuf.internal.containers.RepeatedScalarFieldContainer[builtins.str]:
"""Names of the identity_providers whose JWT bearer tokens this route accepts
(when bearer_token_format is BEARER_TOKEN_FORMAT_JWT). Each entry must be a
key in Settings.identity_providers. When empty, all configured providers
are accepted.
"""

def __init__(
self,
*,
Expand Down Expand Up @@ -683,9 +694,10 @@ class Route(google.protobuf.message.Message):
upstream_tunnel: global___UpstreamTunnel | None = ...,
allow_upgrades: global___Route.StringList | None = ...,
session_recording: global___SessionRecording | None = ...,
identity_providers: collections.abc.Iterable[builtins.str] | None = ...,
) -> None: ...
def HasField(self, field_name: typing.Literal["_allow_spdy", b"_allow_spdy", "_allow_upgrades", b"_allow_upgrades", "_allow_websockets", b"_allow_websockets", "_bearer_token_format", b"_bearer_token_format", "_circuit_breaker_thresholds", b"_circuit_breaker_thresholds", "_description", b"_description", "_healthy_panic_threshold", b"_healthy_panic_threshold", "_host_path_regex_rewrite_pattern", b"_host_path_regex_rewrite_pattern", "_host_path_regex_rewrite_substitution", b"_host_path_regex_rewrite_substitution", "_host_rewrite", b"_host_rewrite", "_host_rewrite_header", b"_host_rewrite_header", "_idle_timeout", b"_idle_timeout", "_idp_access_token_allowed_audiences", b"_idp_access_token_allowed_audiences", "_idp_client_id", b"_idp_client_id", "_idp_client_secret", b"_idp_client_secret", "_jwt_issuer_format", b"_jwt_issuer_format", "_kubernetes_service_account_token", b"_kubernetes_service_account_token", "_kubernetes_service_account_token_file", b"_kubernetes_service_account_token_file", "_load_balancing_policy", b"_load_balancing_policy", "_logo_url", b"_logo_url", "_mcp", b"_mcp", "_pass_identity_headers", b"_pass_identity_headers", "_path", b"_path", "_prefix", b"_prefix", "_prefix_rewrite", b"_prefix_rewrite", "_preserve_host_header", b"_preserve_host_header", "_regex", b"_regex", "_regex_priority_order", b"_regex_priority_order", "_regex_rewrite_pattern", b"_regex_rewrite_pattern", "_regex_rewrite_substitution", b"_regex_rewrite_substitution", "_timeout", b"_timeout", "_tls_client_key_pair_id", b"_tls_client_key_pair_id", "_tls_custom_ca_key_pair_id", b"_tls_custom_ca_key_pair_id", "_tls_downstream_client_ca_key_pair_id", b"_tls_downstream_client_ca_key_pair_id", "_tls_downstream_server_name", b"_tls_downstream_server_name", "_tls_skip_verify", b"_tls_skip_verify", "_tls_upstream_allow_renegotiation", b"_tls_upstream_allow_renegotiation", "_tls_upstream_server_name", b"_tls_upstream_server_name", "_upstream_tunnel", b"_upstream_tunnel", "allow_spdy", b"allow_spdy", "allow_upgrades", b"allow_upgrades", "allow_websockets", b"allow_websockets", "bearer_token_format", b"bearer_token_format", "circuit_breaker_thresholds", b"circuit_breaker_thresholds", "created_at", b"created_at", "deleted_at", b"deleted_at", "description", b"description", "healthy_panic_threshold", b"healthy_panic_threshold", "host_path_regex_rewrite_pattern", b"host_path_regex_rewrite_pattern", "host_path_regex_rewrite_substitution", b"host_path_regex_rewrite_substitution", "host_rewrite", b"host_rewrite", "host_rewrite_header", b"host_rewrite_header", "idle_timeout", b"idle_timeout", "idp_access_token_allowed_audiences", b"idp_access_token_allowed_audiences", "idp_client_id", b"idp_client_id", "idp_client_secret", b"idp_client_secret", "jwt_groups_filter", b"jwt_groups_filter", "jwt_issuer_format", b"jwt_issuer_format", "kubernetes_service_account_token", b"kubernetes_service_account_token", "kubernetes_service_account_token_file", b"kubernetes_service_account_token_file", "load_balancing_policy", b"load_balancing_policy", "logo_url", b"logo_url", "mcp", b"mcp", "modified_at", b"modified_at", "pass_identity_headers", b"pass_identity_headers", "path", b"path", "prefix", b"prefix", "prefix_rewrite", b"prefix_rewrite", "preserve_host_header", b"preserve_host_header", "redirect", b"redirect", "regex", b"regex", "regex_priority_order", b"regex_priority_order", "regex_rewrite_pattern", b"regex_rewrite_pattern", "regex_rewrite_substitution", b"regex_rewrite_substitution", "response", b"response", "session_recording", b"session_recording", "timeout", b"timeout", "tls_client_key_pair_id", b"tls_client_key_pair_id", "tls_custom_ca_key_pair_id", b"tls_custom_ca_key_pair_id", "tls_downstream_client_ca_key_pair_id", b"tls_downstream_client_ca_key_pair_id", "tls_downstream_server_name", b"tls_downstream_server_name", "tls_skip_verify", b"tls_skip_verify", "tls_upstream_allow_renegotiation", b"tls_upstream_allow_renegotiation", "tls_upstream_server_name", b"tls_upstream_server_name", "upstream_tunnel", b"upstream_tunnel"]) -> builtins.bool: ...
def ClearField(self, field_name: typing.Literal["_allow_spdy", b"_allow_spdy", "_allow_upgrades", b"_allow_upgrades", "_allow_websockets", b"_allow_websockets", "_bearer_token_format", b"_bearer_token_format", "_circuit_breaker_thresholds", b"_circuit_breaker_thresholds", "_description", b"_description", "_healthy_panic_threshold", b"_healthy_panic_threshold", "_host_path_regex_rewrite_pattern", b"_host_path_regex_rewrite_pattern", "_host_path_regex_rewrite_substitution", b"_host_path_regex_rewrite_substitution", "_host_rewrite", b"_host_rewrite", "_host_rewrite_header", b"_host_rewrite_header", "_idle_timeout", b"_idle_timeout", "_idp_access_token_allowed_audiences", b"_idp_access_token_allowed_audiences", "_idp_client_id", b"_idp_client_id", "_idp_client_secret", b"_idp_client_secret", "_jwt_issuer_format", b"_jwt_issuer_format", "_kubernetes_service_account_token", b"_kubernetes_service_account_token", "_kubernetes_service_account_token_file", b"_kubernetes_service_account_token_file", "_load_balancing_policy", b"_load_balancing_policy", "_logo_url", b"_logo_url", "_mcp", b"_mcp", "_pass_identity_headers", b"_pass_identity_headers", "_path", b"_path", "_prefix", b"_prefix", "_prefix_rewrite", b"_prefix_rewrite", "_preserve_host_header", b"_preserve_host_header", "_regex", b"_regex", "_regex_priority_order", b"_regex_priority_order", "_regex_rewrite_pattern", b"_regex_rewrite_pattern", "_regex_rewrite_substitution", b"_regex_rewrite_substitution", "_timeout", b"_timeout", "_tls_client_key_pair_id", b"_tls_client_key_pair_id", "_tls_custom_ca_key_pair_id", b"_tls_custom_ca_key_pair_id", "_tls_downstream_client_ca_key_pair_id", b"_tls_downstream_client_ca_key_pair_id", "_tls_downstream_server_name", b"_tls_downstream_server_name", "_tls_skip_verify", b"_tls_skip_verify", "_tls_upstream_allow_renegotiation", b"_tls_upstream_allow_renegotiation", "_tls_upstream_server_name", b"_tls_upstream_server_name", "_upstream_tunnel", b"_upstream_tunnel", "allow_spdy", b"allow_spdy", "allow_upgrades", b"allow_upgrades", "allow_websockets", b"allow_websockets", "bearer_token_format", b"bearer_token_format", "circuit_breaker_thresholds", b"circuit_breaker_thresholds", "created_at", b"created_at", "deleted_at", b"deleted_at", "depends_on", b"depends_on", "description", b"description", "enable_google_cloud_serverless_authentication", b"enable_google_cloud_serverless_authentication", "enforced_policy_ids", b"enforced_policy_ids", "enforced_policy_names", b"enforced_policy_names", "from", b"from", "health_checks", b"health_checks", "healthy_panic_threshold", b"healthy_panic_threshold", "host_path_regex_rewrite_pattern", b"host_path_regex_rewrite_pattern", "host_path_regex_rewrite_substitution", b"host_path_regex_rewrite_substitution", "host_rewrite", b"host_rewrite", "host_rewrite_header", b"host_rewrite_header", "id", b"id", "idle_timeout", b"idle_timeout", "idp_access_token_allowed_audiences", b"idp_access_token_allowed_audiences", "idp_client_id", b"idp_client_id", "idp_client_secret", b"idp_client_secret", "jwt_groups_filter", b"jwt_groups_filter", "jwt_issuer_format", b"jwt_issuer_format", "kubernetes_service_account_token", b"kubernetes_service_account_token", "kubernetes_service_account_token_file", b"kubernetes_service_account_token_file", "load_balancing_policy", b"load_balancing_policy", "logo_url", b"logo_url", "mcp", b"mcp", "modified_at", b"modified_at", "name", b"name", "namespace_id", b"namespace_id", "namespace_name", b"namespace_name", "originator_id", b"originator_id", "pass_identity_headers", b"pass_identity_headers", "path", b"path", "policy_ids", b"policy_ids", "policy_names", b"policy_names", "prefix", b"prefix", "prefix_rewrite", b"prefix_rewrite", "preserve_host_header", b"preserve_host_header", "redirect", b"redirect", "regex", b"regex", "regex_priority_order", b"regex_priority_order", "regex_rewrite_pattern", b"regex_rewrite_pattern", "regex_rewrite_substitution", b"regex_rewrite_substitution", "remove_request_headers", b"remove_request_headers", "response", b"response", "rewrite_response_headers", b"rewrite_response_headers", "session_recording", b"session_recording", "set_request_headers", b"set_request_headers", "set_response_headers", b"set_response_headers", "show_error_details", b"show_error_details", "stat_name", b"stat_name", "timeout", b"timeout", "tls_client_key_pair_id", b"tls_client_key_pair_id", "tls_custom_ca_key_pair_id", b"tls_custom_ca_key_pair_id", "tls_downstream_client_ca_key_pair_id", b"tls_downstream_client_ca_key_pair_id", "tls_downstream_server_name", b"tls_downstream_server_name", "tls_skip_verify", b"tls_skip_verify", "tls_upstream_allow_renegotiation", b"tls_upstream_allow_renegotiation", "tls_upstream_server_name", b"tls_upstream_server_name", "to", b"to", "upstream_tunnel", b"upstream_tunnel"]) -> None: ...
def ClearField(self, field_name: typing.Literal["_allow_spdy", b"_allow_spdy", "_allow_upgrades", b"_allow_upgrades", "_allow_websockets", b"_allow_websockets", "_bearer_token_format", b"_bearer_token_format", "_circuit_breaker_thresholds", b"_circuit_breaker_thresholds", "_description", b"_description", "_healthy_panic_threshold", b"_healthy_panic_threshold", "_host_path_regex_rewrite_pattern", b"_host_path_regex_rewrite_pattern", "_host_path_regex_rewrite_substitution", b"_host_path_regex_rewrite_substitution", "_host_rewrite", b"_host_rewrite", "_host_rewrite_header", b"_host_rewrite_header", "_idle_timeout", b"_idle_timeout", "_idp_access_token_allowed_audiences", b"_idp_access_token_allowed_audiences", "_idp_client_id", b"_idp_client_id", "_idp_client_secret", b"_idp_client_secret", "_jwt_issuer_format", b"_jwt_issuer_format", "_kubernetes_service_account_token", b"_kubernetes_service_account_token", "_kubernetes_service_account_token_file", b"_kubernetes_service_account_token_file", "_load_balancing_policy", b"_load_balancing_policy", "_logo_url", b"_logo_url", "_mcp", b"_mcp", "_pass_identity_headers", b"_pass_identity_headers", "_path", b"_path", "_prefix", b"_prefix", "_prefix_rewrite", b"_prefix_rewrite", "_preserve_host_header", b"_preserve_host_header", "_regex", b"_regex", "_regex_priority_order", b"_regex_priority_order", "_regex_rewrite_pattern", b"_regex_rewrite_pattern", "_regex_rewrite_substitution", b"_regex_rewrite_substitution", "_timeout", b"_timeout", "_tls_client_key_pair_id", b"_tls_client_key_pair_id", "_tls_custom_ca_key_pair_id", b"_tls_custom_ca_key_pair_id", "_tls_downstream_client_ca_key_pair_id", b"_tls_downstream_client_ca_key_pair_id", "_tls_downstream_server_name", b"_tls_downstream_server_name", "_tls_skip_verify", b"_tls_skip_verify", "_tls_upstream_allow_renegotiation", b"_tls_upstream_allow_renegotiation", "_tls_upstream_server_name", b"_tls_upstream_server_name", "_upstream_tunnel", b"_upstream_tunnel", "allow_spdy", b"allow_spdy", "allow_upgrades", b"allow_upgrades", "allow_websockets", b"allow_websockets", "bearer_token_format", b"bearer_token_format", "circuit_breaker_thresholds", b"circuit_breaker_thresholds", "created_at", b"created_at", "deleted_at", b"deleted_at", "depends_on", b"depends_on", "description", b"description", "enable_google_cloud_serverless_authentication", b"enable_google_cloud_serverless_authentication", "enforced_policy_ids", b"enforced_policy_ids", "enforced_policy_names", b"enforced_policy_names", "from", b"from", "health_checks", b"health_checks", "healthy_panic_threshold", b"healthy_panic_threshold", "host_path_regex_rewrite_pattern", b"host_path_regex_rewrite_pattern", "host_path_regex_rewrite_substitution", b"host_path_regex_rewrite_substitution", "host_rewrite", b"host_rewrite", "host_rewrite_header", b"host_rewrite_header", "id", b"id", "identity_providers", b"identity_providers", "idle_timeout", b"idle_timeout", "idp_access_token_allowed_audiences", b"idp_access_token_allowed_audiences", "idp_client_id", b"idp_client_id", "idp_client_secret", b"idp_client_secret", "jwt_groups_filter", b"jwt_groups_filter", "jwt_issuer_format", b"jwt_issuer_format", "kubernetes_service_account_token", b"kubernetes_service_account_token", "kubernetes_service_account_token_file", b"kubernetes_service_account_token_file", "load_balancing_policy", b"load_balancing_policy", "logo_url", b"logo_url", "mcp", b"mcp", "modified_at", b"modified_at", "name", b"name", "namespace_id", b"namespace_id", "namespace_name", b"namespace_name", "originator_id", b"originator_id", "pass_identity_headers", b"pass_identity_headers", "path", b"path", "policy_ids", b"policy_ids", "policy_names", b"policy_names", "prefix", b"prefix", "prefix_rewrite", b"prefix_rewrite", "preserve_host_header", b"preserve_host_header", "redirect", b"redirect", "regex", b"regex", "regex_priority_order", b"regex_priority_order", "regex_rewrite_pattern", b"regex_rewrite_pattern", "regex_rewrite_substitution", b"regex_rewrite_substitution", "remove_request_headers", b"remove_request_headers", "response", b"response", "rewrite_response_headers", b"rewrite_response_headers", "session_recording", b"session_recording", "set_request_headers", b"set_request_headers", "set_response_headers", b"set_response_headers", "show_error_details", b"show_error_details", "stat_name", b"stat_name", "timeout", b"timeout", "tls_client_key_pair_id", b"tls_client_key_pair_id", "tls_custom_ca_key_pair_id", b"tls_custom_ca_key_pair_id", "tls_downstream_client_ca_key_pair_id", b"tls_downstream_client_ca_key_pair_id", "tls_downstream_server_name", b"tls_downstream_server_name", "tls_skip_verify", b"tls_skip_verify", "tls_upstream_allow_renegotiation", b"tls_upstream_allow_renegotiation", "tls_upstream_server_name", b"tls_upstream_server_name", "to", b"to", "upstream_tunnel", b"upstream_tunnel"]) -> None: ...
@typing.overload
def WhichOneof(self, oneof_group: typing.Literal["_allow_spdy", b"_allow_spdy"]) -> typing.Literal["allow_spdy"] | None: ...
@typing.overload
Expand Down
Loading