github.com/cloudwan/edgelq-sdk@v1.15.4/secrets/proto/v1/crypto_key_service.proto

syntax = "proto3";

package ntt.secrets.v1;

import "edgelq-sdk/secrets/proto/v1/crypto_key.proto";
import "edgelq-sdk/secrets/proto/v1/crypto_key_change.proto";
import "google/api/annotations.proto";
import "google/api/client.proto";
import "google/protobuf/empty.proto";
import "google/protobuf/field_mask.proto";
import "google/protobuf/timestamp.proto";
import "goten-sdk/types/view.proto";
import "goten-sdk/types/watch_type.proto";

option go_package = "github.com/cloudwan/edgelq-sdk/secrets/client/v1/crypto_key;crypto_key_client";
option java_multiple_files = false;
option java_outer_classname = "CryptoKeyServiceProto";
option java_package = "com.ntt.secrets.pb.v1";

// A request message of the GetCryptoKey method.
message GetCryptoKeyRequest {
  // Name of ntt.secrets.v1.CryptoKey
  string name = 1;

  // A list of extra fields to be obtained for each response item on top of
  // fields defined by request field view
  google.protobuf.FieldMask field_mask = 3;

  // View defines list of standard response fields present in response items.
  // Additional fields can be amended by request field field_mask
  goten.types.View view = 4;
}

// A request message of the BatchGetCryptoKeys method.
message BatchGetCryptoKeysRequest {
  // Names of CryptoKeys
  repeated string names = 2;

  // A list of extra fields to be obtained for each response item on top of
  // fields defined by request field view
  google.protobuf.FieldMask field_mask = 3;

  // View defines list of standard response fields present in response items.
  // Additional fields can be amended by request field field_mask
  goten.types.View view = 4;

  reserved 1;
}

// A response message of the BatchGetCryptoKeys method.
message BatchGetCryptoKeysResponse {
  // found CryptoKeys
  repeated CryptoKey crypto_keys = 1;

  // list of not found CryptoKeys
  repeated string missing = 2;
}

// A request message of the ListCryptoKeys method.
message ListCryptoKeysRequest {
  // Parent name of ntt.secrets.v1.CryptoKey
  string parent = 1;

  // Requested page size. Server may return fewer CryptoKeys than requested.
  // If unspecified, server will pick an appropriate default.
  int32 page_size = 2;

  // A token identifying a page of results the server should return.
  // Typically, this is the value of
  // ListCryptoKeysResponse.next_page_token.
  string page_token = 3;

  // Order By -
  // https://cloud.google.com/apis/design/design_patterns#list_pagination list
  // of field path with order directive, either 'asc' or 'desc'. If direction is
  // not provided, 'asc' is assumed. e.g. "state.nested_field asc,
  // state.something.else desc, theme"
  string order_by = 4;

  // Filter - filter results by field criteria. Simplified SQL-like syntax with
  // following operators:
  // <=, >=, =, !=, <, >, LIKE, CONTAINS (aliases CONTAIN, HAS, HAVE), IN, IS
  // [NOT] NULL | NaN . Combine conditions with OR | AND example: 'meta.labels
  // CONTAINS "severity:important" OR (state.last_error_time >
  // "2018-11-15T10:00:00Z" AND state.status = "ERROR")'
  string filter = 5;

  // A list of extra fields to be obtained for each response item on top of
  // fields defined by request field view
  google.protobuf.FieldMask field_mask = 6;

  // View defines list of standard response fields present in response items.
  // Additional fields can be amended by request field field_mask
  goten.types.View view = 7;

  // Indicates if list response should contain total count and offset (fields
  // current_offset and total_results_count).
  bool include_paging_info = 8;
}

// A response message of the ListCryptoKeys method.
message ListCryptoKeysResponse {
  // The list of CryptoKeys
  repeated CryptoKey crypto_keys = 1;

  // A token to retrieve previous page of results.
  //
  // Pass this value in the ListCryptoKeysRequest.page_token.
  string prev_page_token = 3;

  // A token to retrieve next page of results.
  //
  // Pass this value in the ListCryptoKeysRequest.page_token.
  string next_page_token = 4;

  // Current offset from the first page or 0 if no page tokens were given,
  // paging info was not requested or there was an error while trying to get
  // it). Page index can be computed from offset and limit provided in a
  // request.
  int32 current_offset = 5;

  // Number of total CryptoKeys across all pages or 0, if there are no items,
  // paging info was not requested or there was an error while trying to get it.
  int32 total_results_count = 6;
}

// A request message of the WatchCryptoKey method.
message WatchCryptoKeyRequest {
  // Name of ntt.secrets.v1.CryptoKey
  string name = 1;

  // A list of extra fields to be obtained for each response item on top of
  // fields defined by request field view
  google.protobuf.FieldMask field_mask = 2;

  // View defines list of standard response fields present in response items.
  // Additional fields can be amended by request field field_mask
  goten.types.View view = 4;
}

// A response message of the WatchCryptoKey method.
message WatchCryptoKeyResponse { CryptoKeyChange change = 1; }

// A request message of the WatchCryptoKeys method.
message WatchCryptoKeysRequest {
  // Type of a watch. Identifies how server stream data to a client, which
  // fields in a request are allowed and which fields in response are relevant.
  goten.types.WatchType type = 9;

  // Parent name of ntt.secrets.v1.CryptoKey
  string parent = 1;

  // Requested page size. Server may return fewer CryptoKeys than requested.
  // If unspecified, server will pick an appropriate default.
  // Can be populated only for stateful watch type.
  int32 page_size = 2;

  // A token identifying a page of results the server should return.
  // Can be populated only for stateful watch type.
  string page_token = 3;

  // Order By -
  // https://cloud.google.com/apis/design/design_patterns#list_pagination Can be
  // populated only for stateful watch type.
  string order_by = 4;

  // A token identifying watch resume point from previous session.
  // Can be populated only for stateless watch type.
  string resume_token = 10;

  // Point in the time from which we want to start getting updates. This field
  // can be populated only for stateless watch type and if resume token is not
  // known yet. If specified, initial snapshot will NOT be provided. It is
  // assumed client can obtain it using separate means. Watch responses will
  // contain resume tokens which should be used to resume broken connection.
  google.protobuf.Timestamp starting_time = 12;

  // Filter - filter results by field criteria. Simplified SQL-like syntax with
  // following operators:
  // <=, >=, =, !=, <, >, LIKE, CONTAINS (aliases CONTAIN, HAS, HAVE), IN, IS
  // [NOT] NULL | NaN . Combine conditions with OR | AND example: 'meta.labels
  // CONTAINS "severity:important" OR (state.last_error_time >
  // "2018-11-15T10:00:00Z" AND state.status = "ERROR")'
  string filter = 5;

  // A list of extra fields to be obtained for each response item on top of
  // fields defined by request field view Changes to CryptoKey that don't affect
  // any of masked fields won't be sent back.
  google.protobuf.FieldMask field_mask = 6;

  // View defines list of standard response fields present in response items.
  // Additional fields can be amended by request field field_mask Changes to
  // CryptoKey that don't affect any of masked fields won't be sent back.
  goten.types.View view = 8;

  // Maximum amount of changes in each response message. Query result response
  // is divided on the server side into chunks with size of a specified amount
  // to limit memory footprint of each message. Responses will hold information
  // whether more elements will continue for the actual change. If unspecified,
  // server will pick an appropriate default.
  int32 max_chunk_size = 11;
}

// A response message of the WatchCryptoKeys method.
message WatchCryptoKeysResponse {
  // Changes of CryptoKeys
  repeated CryptoKeyChange crypto_key_changes = 2;

  // If request specified max_chunk_size (or this limit was enforced if
  // stateless watch has been chosen), then responses with "full changeset" will
  // be divided into chunks. Client should keep receiving messages and, once
  // is_current has value true, combine this recent message with all previous
  // ones where is_current is false. If this is the first is_current in a whole
  // watch stream, then it means that client should have, at this moment,
  // contain snapshot of the current situation (or more accurately, snapshot of
  // situation at the moment of request). All CryptoKeys will be of type
  // Added/Current (depending on watch_type specified in the request). Further
  // responses will be incremental - however messages may still be chunked and
  // is_current logic still applies. is_current is always true for stateful
  // watch if max_chunk_size was left to 0.
  bool is_current = 4;

  // When present, PageTokens used for page navigation should be updated.
  // Present only if is_current is true (last chunk).
  PageTokenChange page_token_change = 3;

  // Token that can be used if current connection drops and client needs to
  // reconnect. Populated only for stateless watch type. Present only if
  // is_current is true (last chunk).
  string resume_token = 5;

  // Server may occasionally send information how many resources should client
  // have in its state so far (response message without any changes, but with
  // snapshot_size field specified). If client has different value than the one
  // sent by the server, then it should be treated by a client as an error and
  // should reconnect. If value is smaller then 0, then client should ignore
  // this field as unpopulated. This field should be checked only for stateless
  // watch. In stateful those kind of errors are handled by the server side.
  // Will be never sent together with is_current, is_soft_reset and
  // is_hard_reset flags.
  int64 snapshot_size = 6;

  // In case of internal issue server may send response message with this flag.
  // It indicates that client should drop all changes from recent responses
  // where is_current is false only! If last message had is_current set to true,
  // client should do nothing and process normally. Resume token received before
  // is still valid. This field should be checked only for stateless watch. In
  // stateful those kind of errors are handled by the server side. Will never be
  // sent along with is_current, is_hard_reset or snapshot_size.
  bool is_soft_reset = 7;

  // In case of internal issue server may send response message with this flag.
  // After receiving, client should clear whole state (drop all changes received
  // so far) as server will send new snapshot (CryptoKeys will contains changes
  // of type Current only). Any resume tokens should be discarded as well. This
  // field should be checked only for stateless watch. In stateful those kind of
  // errors are handled by the server side. Will never be sent along with
  // is_current, is_soft_reset or snapshot_size.
  bool is_hard_reset = 8;

  message PageTokenChange {
    // New token to retrieve previous page of results.
    string prev_page_token = 1;

    // New token to retrieve next page of results.
    string next_page_token = 2;
  }
}

// A request message of the DeleteCryptoKey method.
message DeleteCryptoKeyRequest {
  // Name of ntt.secrets.v1.CryptoKey
  string name = 1;

  // If set to true, and the resource is not found, method will be successful
  // and will not return NotFound error.
  bool allow_missing = 2;
}

// CryptoKey service API for Secrets
service CryptoKeyService {
  option (google.api.default_host) = "secrets.edgelq.com";
  option (google.api.oauth_scopes) = "https://apis.edgelq.com";

  // GetCryptoKey
  rpc GetCryptoKey(GetCryptoKeyRequest) returns (CryptoKey) {
    option (google.api.http) = {
      get : "/v1/{name=projects/*/regions/*/cryptoKeys/*}"
    };
  }

  // BatchGetCryptoKeys
  rpc BatchGetCryptoKeys(BatchGetCryptoKeysRequest)
      returns (BatchGetCryptoKeysResponse) {
    option (google.api.http) = {
      get : "/v1/cryptoKeys:batchGet"
    };
  }

  // ListCryptoKeys
  rpc ListCryptoKeys(ListCryptoKeysRequest) returns (ListCryptoKeysResponse) {
    option (google.api.http) = {
      get : "/v1/{parent=projects/*/regions/*}/cryptoKeys"
    };
  }

  // WatchCryptoKey
  rpc WatchCryptoKey(WatchCryptoKeyRequest)
      returns (stream WatchCryptoKeyResponse) {
    option (google.api.http) = {
      post : "/v1/{name=projects/*/regions/*/cryptoKeys/*}:watch"
    };
  }

  // WatchCryptoKeys
  rpc WatchCryptoKeys(WatchCryptoKeysRequest)
      returns (stream WatchCryptoKeysResponse) {
    option (google.api.http) = {
      post : "/v1/{parent=projects/*/regions/*}/cryptoKeys:watch"
    };
  }

  // DeleteCryptoKey
  rpc DeleteCryptoKey(DeleteCryptoKeyRequest) returns (google.protobuf.Empty) {
    option (google.api.http) = {
      delete : "/v1/{name=projects/*/regions/*/cryptoKeys/*}"
    };
  }
}