github.com/hxx258456/ccgo@v0.0.5-0.20230213014102-48b35f46f66f/go-control-plane/envoy/api/v2/auth/tls.pb.go (about)

     1  // Code generated by protoc-gen-go. DO NOT EDIT.
     2  // versions:
     3  // 	protoc-gen-go v1.25.0
     4  // 	protoc        v3.16.0
     5  // source: envoy/api/v2/auth/tls.proto
     6  
     7  package envoy_api_v2_auth
     8  
     9  import (
    10  	_ "github.com/cncf/xds/go/udpa/annotations"
    11  	_ "github.com/envoyproxy/protoc-gen-validate/validate"
    12  	proto "github.com/golang/protobuf/proto"
    13  	duration "github.com/golang/protobuf/ptypes/duration"
    14  	wrappers "github.com/golang/protobuf/ptypes/wrappers"
    15  	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
    16  	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
    17  	reflect "reflect"
    18  	sync "sync"
    19  )
    20  
    21  const (
    22  	// Verify that this generated code is sufficiently up-to-date.
    23  	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
    24  	// Verify that runtime/protoimpl is sufficiently up-to-date.
    25  	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
    26  )
    27  
    28  // This is a compile-time assertion that a sufficiently up-to-date version
    29  // of the legacy proto package is being used.
    30  const _ = proto.ProtoPackageIsVersion4
    31  
    32  type UpstreamTlsContext struct {
    33  	state         protoimpl.MessageState
    34  	sizeCache     protoimpl.SizeCache
    35  	unknownFields protoimpl.UnknownFields
    36  
    37  	// Common TLS context settings.
    38  	//
    39  	// .. attention::
    40  	//
    41  	//   Server certificate verification is not enabled by default. Configure
    42  	//   :ref:`trusted_ca<envoy_api_field_auth.CertificateValidationContext.trusted_ca>` to enable
    43  	//   verification.
    44  	CommonTlsContext *CommonTlsContext `protobuf:"bytes,1,opt,name=common_tls_context,json=commonTlsContext,proto3" json:"common_tls_context,omitempty"`
    45  	// SNI string to use when creating TLS backend connections.
    46  	Sni string `protobuf:"bytes,2,opt,name=sni,proto3" json:"sni,omitempty"`
    47  	// If true, server-initiated TLS renegotiation will be allowed.
    48  	//
    49  	// .. attention::
    50  	//
    51  	//   TLS renegotiation is considered insecure and shouldn't be used unless absolutely necessary.
    52  	AllowRenegotiation bool `protobuf:"varint,3,opt,name=allow_renegotiation,json=allowRenegotiation,proto3" json:"allow_renegotiation,omitempty"`
    53  	// Maximum number of session keys (Pre-Shared Keys for TLSv1.3+, Session IDs and Session Tickets
    54  	// for TLSv1.2 and older) to store for the purpose of session resumption.
    55  	//
    56  	// Defaults to 1, setting this to 0 disables session resumption.
    57  	MaxSessionKeys *wrappers.UInt32Value `protobuf:"bytes,4,opt,name=max_session_keys,json=maxSessionKeys,proto3" json:"max_session_keys,omitempty"`
    58  }
    59  
    60  func (x *UpstreamTlsContext) Reset() {
    61  	*x = UpstreamTlsContext{}
    62  	if protoimpl.UnsafeEnabled {
    63  		mi := &file_envoy_api_v2_auth_tls_proto_msgTypes[0]
    64  		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
    65  		ms.StoreMessageInfo(mi)
    66  	}
    67  }
    68  
    69  func (x *UpstreamTlsContext) String() string {
    70  	return protoimpl.X.MessageStringOf(x)
    71  }
    72  
    73  func (*UpstreamTlsContext) ProtoMessage() {}
    74  
    75  func (x *UpstreamTlsContext) ProtoReflect() protoreflect.Message {
    76  	mi := &file_envoy_api_v2_auth_tls_proto_msgTypes[0]
    77  	if protoimpl.UnsafeEnabled && x != nil {
    78  		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
    79  		if ms.LoadMessageInfo() == nil {
    80  			ms.StoreMessageInfo(mi)
    81  		}
    82  		return ms
    83  	}
    84  	return mi.MessageOf(x)
    85  }
    86  
    87  // Deprecated: Use UpstreamTlsContext.ProtoReflect.Descriptor instead.
    88  func (*UpstreamTlsContext) Descriptor() ([]byte, []int) {
    89  	return file_envoy_api_v2_auth_tls_proto_rawDescGZIP(), []int{0}
    90  }
    91  
    92  func (x *UpstreamTlsContext) GetCommonTlsContext() *CommonTlsContext {
    93  	if x != nil {
    94  		return x.CommonTlsContext
    95  	}
    96  	return nil
    97  }
    98  
    99  func (x *UpstreamTlsContext) GetSni() string {
   100  	if x != nil {
   101  		return x.Sni
   102  	}
   103  	return ""
   104  }
   105  
   106  func (x *UpstreamTlsContext) GetAllowRenegotiation() bool {
   107  	if x != nil {
   108  		return x.AllowRenegotiation
   109  	}
   110  	return false
   111  }
   112  
   113  func (x *UpstreamTlsContext) GetMaxSessionKeys() *wrappers.UInt32Value {
   114  	if x != nil {
   115  		return x.MaxSessionKeys
   116  	}
   117  	return nil
   118  }
   119  
   120  // [#next-free-field: 8]
   121  type DownstreamTlsContext struct {
   122  	state         protoimpl.MessageState
   123  	sizeCache     protoimpl.SizeCache
   124  	unknownFields protoimpl.UnknownFields
   125  
   126  	// Common TLS context settings.
   127  	CommonTlsContext *CommonTlsContext `protobuf:"bytes,1,opt,name=common_tls_context,json=commonTlsContext,proto3" json:"common_tls_context,omitempty"`
   128  	// If specified, Envoy will reject connections without a valid client
   129  	// certificate.
   130  	RequireClientCertificate *wrappers.BoolValue `protobuf:"bytes,2,opt,name=require_client_certificate,json=requireClientCertificate,proto3" json:"require_client_certificate,omitempty"`
   131  	// If specified, Envoy will reject connections without a valid and matching SNI.
   132  	// [#not-implemented-hide:]
   133  	RequireSni *wrappers.BoolValue `protobuf:"bytes,3,opt,name=require_sni,json=requireSni,proto3" json:"require_sni,omitempty"`
   134  	// Types that are assignable to SessionTicketKeysType:
   135  	//	*DownstreamTlsContext_SessionTicketKeys
   136  	//	*DownstreamTlsContext_SessionTicketKeysSdsSecretConfig
   137  	//	*DownstreamTlsContext_DisableStatelessSessionResumption
   138  	SessionTicketKeysType isDownstreamTlsContext_SessionTicketKeysType `protobuf_oneof:"session_ticket_keys_type"`
   139  	// If specified, session_timeout will change maximum lifetime (in seconds) of TLS session
   140  	// Currently this value is used as a hint to `TLS session ticket lifetime (for TLSv1.2)
   141  	// <https://tools.ietf.org/html/rfc5077#section-5.6>`
   142  	// only seconds could be specified (fractional seconds are going to be ignored).
   143  	SessionTimeout *duration.Duration `protobuf:"bytes,6,opt,name=session_timeout,json=sessionTimeout,proto3" json:"session_timeout,omitempty"`
   144  }
   145  
   146  func (x *DownstreamTlsContext) Reset() {
   147  	*x = DownstreamTlsContext{}
   148  	if protoimpl.UnsafeEnabled {
   149  		mi := &file_envoy_api_v2_auth_tls_proto_msgTypes[1]
   150  		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
   151  		ms.StoreMessageInfo(mi)
   152  	}
   153  }
   154  
   155  func (x *DownstreamTlsContext) String() string {
   156  	return protoimpl.X.MessageStringOf(x)
   157  }
   158  
   159  func (*DownstreamTlsContext) ProtoMessage() {}
   160  
   161  func (x *DownstreamTlsContext) ProtoReflect() protoreflect.Message {
   162  	mi := &file_envoy_api_v2_auth_tls_proto_msgTypes[1]
   163  	if protoimpl.UnsafeEnabled && x != nil {
   164  		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
   165  		if ms.LoadMessageInfo() == nil {
   166  			ms.StoreMessageInfo(mi)
   167  		}
   168  		return ms
   169  	}
   170  	return mi.MessageOf(x)
   171  }
   172  
   173  // Deprecated: Use DownstreamTlsContext.ProtoReflect.Descriptor instead.
   174  func (*DownstreamTlsContext) Descriptor() ([]byte, []int) {
   175  	return file_envoy_api_v2_auth_tls_proto_rawDescGZIP(), []int{1}
   176  }
   177  
   178  func (x *DownstreamTlsContext) GetCommonTlsContext() *CommonTlsContext {
   179  	if x != nil {
   180  		return x.CommonTlsContext
   181  	}
   182  	return nil
   183  }
   184  
   185  func (x *DownstreamTlsContext) GetRequireClientCertificate() *wrappers.BoolValue {
   186  	if x != nil {
   187  		return x.RequireClientCertificate
   188  	}
   189  	return nil
   190  }
   191  
   192  func (x *DownstreamTlsContext) GetRequireSni() *wrappers.BoolValue {
   193  	if x != nil {
   194  		return x.RequireSni
   195  	}
   196  	return nil
   197  }
   198  
   199  func (m *DownstreamTlsContext) GetSessionTicketKeysType() isDownstreamTlsContext_SessionTicketKeysType {
   200  	if m != nil {
   201  		return m.SessionTicketKeysType
   202  	}
   203  	return nil
   204  }
   205  
   206  func (x *DownstreamTlsContext) GetSessionTicketKeys() *TlsSessionTicketKeys {
   207  	if x, ok := x.GetSessionTicketKeysType().(*DownstreamTlsContext_SessionTicketKeys); ok {
   208  		return x.SessionTicketKeys
   209  	}
   210  	return nil
   211  }
   212  
   213  func (x *DownstreamTlsContext) GetSessionTicketKeysSdsSecretConfig() *SdsSecretConfig {
   214  	if x, ok := x.GetSessionTicketKeysType().(*DownstreamTlsContext_SessionTicketKeysSdsSecretConfig); ok {
   215  		return x.SessionTicketKeysSdsSecretConfig
   216  	}
   217  	return nil
   218  }
   219  
   220  func (x *DownstreamTlsContext) GetDisableStatelessSessionResumption() bool {
   221  	if x, ok := x.GetSessionTicketKeysType().(*DownstreamTlsContext_DisableStatelessSessionResumption); ok {
   222  		return x.DisableStatelessSessionResumption
   223  	}
   224  	return false
   225  }
   226  
   227  func (x *DownstreamTlsContext) GetSessionTimeout() *duration.Duration {
   228  	if x != nil {
   229  		return x.SessionTimeout
   230  	}
   231  	return nil
   232  }
   233  
   234  type isDownstreamTlsContext_SessionTicketKeysType interface {
   235  	isDownstreamTlsContext_SessionTicketKeysType()
   236  }
   237  
   238  type DownstreamTlsContext_SessionTicketKeys struct {
   239  	// TLS session ticket key settings.
   240  	SessionTicketKeys *TlsSessionTicketKeys `protobuf:"bytes,4,opt,name=session_ticket_keys,json=sessionTicketKeys,proto3,oneof"`
   241  }
   242  
   243  type DownstreamTlsContext_SessionTicketKeysSdsSecretConfig struct {
   244  	// Config for fetching TLS session ticket keys via SDS API.
   245  	SessionTicketKeysSdsSecretConfig *SdsSecretConfig `protobuf:"bytes,5,opt,name=session_ticket_keys_sds_secret_config,json=sessionTicketKeysSdsSecretConfig,proto3,oneof"`
   246  }
   247  
   248  type DownstreamTlsContext_DisableStatelessSessionResumption struct {
   249  	// Config for controlling stateless TLS session resumption: setting this to true will cause the TLS
   250  	// server to not issue TLS session tickets for the purposes of stateless TLS session resumption.
   251  	// If set to false, the TLS server will issue TLS session tickets and encrypt/decrypt them using
   252  	// the keys specified through either :ref:`session_ticket_keys <envoy_api_field_auth.DownstreamTlsContext.session_ticket_keys>`
   253  	// or :ref:`session_ticket_keys_sds_secret_config <envoy_api_field_auth.DownstreamTlsContext.session_ticket_keys_sds_secret_config>`.
   254  	// If this config is set to false and no keys are explicitly configured, the TLS server will issue
   255  	// TLS session tickets and encrypt/decrypt them using an internally-generated and managed key, with the
   256  	// implication that sessions cannot be resumed across hot restarts or on different hosts.
   257  	DisableStatelessSessionResumption bool `protobuf:"varint,7,opt,name=disable_stateless_session_resumption,json=disableStatelessSessionResumption,proto3,oneof"`
   258  }
   259  
   260  func (*DownstreamTlsContext_SessionTicketKeys) isDownstreamTlsContext_SessionTicketKeysType() {}
   261  
   262  func (*DownstreamTlsContext_SessionTicketKeysSdsSecretConfig) isDownstreamTlsContext_SessionTicketKeysType() {
   263  }
   264  
   265  func (*DownstreamTlsContext_DisableStatelessSessionResumption) isDownstreamTlsContext_SessionTicketKeysType() {
   266  }
   267  
   268  // TLS context shared by both client and server TLS contexts.
   269  // [#next-free-field: 9]
   270  type CommonTlsContext struct {
   271  	state         protoimpl.MessageState
   272  	sizeCache     protoimpl.SizeCache
   273  	unknownFields protoimpl.UnknownFields
   274  
   275  	// TLS protocol versions, cipher suites etc.
   276  	TlsParams *TlsParameters `protobuf:"bytes,1,opt,name=tls_params,json=tlsParams,proto3" json:"tls_params,omitempty"`
   277  	// :ref:`Multiple TLS certificates <arch_overview_ssl_cert_select>` can be associated with the
   278  	// same context to allow both RSA and ECDSA certificates.
   279  	//
   280  	// Only a single TLS certificate is supported in client contexts. In server contexts, the first
   281  	// RSA certificate is used for clients that only support RSA and the first ECDSA certificate is
   282  	// used for clients that support ECDSA.
   283  	TlsCertificates []*TlsCertificate `protobuf:"bytes,2,rep,name=tls_certificates,json=tlsCertificates,proto3" json:"tls_certificates,omitempty"`
   284  	// Configs for fetching TLS certificates via SDS API.
   285  	TlsCertificateSdsSecretConfigs []*SdsSecretConfig `protobuf:"bytes,6,rep,name=tls_certificate_sds_secret_configs,json=tlsCertificateSdsSecretConfigs,proto3" json:"tls_certificate_sds_secret_configs,omitempty"`
   286  	// Types that are assignable to ValidationContextType:
   287  	//	*CommonTlsContext_ValidationContext
   288  	//	*CommonTlsContext_ValidationContextSdsSecretConfig
   289  	//	*CommonTlsContext_CombinedValidationContext
   290  	ValidationContextType isCommonTlsContext_ValidationContextType `protobuf_oneof:"validation_context_type"`
   291  	// Supplies the list of ALPN protocols that the listener should expose. In
   292  	// practice this is likely to be set to one of two values (see the
   293  	// :ref:`codec_type
   294  	// <envoy_api_field_config.filter.network.http_connection_manager.v2.HttpConnectionManager.codec_type>`
   295  	// parameter in the HTTP connection manager for more information):
   296  	//
   297  	// * "h2,http/1.1" If the listener is going to support both HTTP/2 and HTTP/1.1.
   298  	// * "http/1.1" If the listener is only going to support HTTP/1.1.
   299  	//
   300  	// There is no default for this parameter. If empty, Envoy will not expose ALPN.
   301  	AlpnProtocols []string `protobuf:"bytes,4,rep,name=alpn_protocols,json=alpnProtocols,proto3" json:"alpn_protocols,omitempty"`
   302  }
   303  
   304  func (x *CommonTlsContext) Reset() {
   305  	*x = CommonTlsContext{}
   306  	if protoimpl.UnsafeEnabled {
   307  		mi := &file_envoy_api_v2_auth_tls_proto_msgTypes[2]
   308  		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
   309  		ms.StoreMessageInfo(mi)
   310  	}
   311  }
   312  
   313  func (x *CommonTlsContext) String() string {
   314  	return protoimpl.X.MessageStringOf(x)
   315  }
   316  
   317  func (*CommonTlsContext) ProtoMessage() {}
   318  
   319  func (x *CommonTlsContext) ProtoReflect() protoreflect.Message {
   320  	mi := &file_envoy_api_v2_auth_tls_proto_msgTypes[2]
   321  	if protoimpl.UnsafeEnabled && x != nil {
   322  		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
   323  		if ms.LoadMessageInfo() == nil {
   324  			ms.StoreMessageInfo(mi)
   325  		}
   326  		return ms
   327  	}
   328  	return mi.MessageOf(x)
   329  }
   330  
   331  // Deprecated: Use CommonTlsContext.ProtoReflect.Descriptor instead.
   332  func (*CommonTlsContext) Descriptor() ([]byte, []int) {
   333  	return file_envoy_api_v2_auth_tls_proto_rawDescGZIP(), []int{2}
   334  }
   335  
   336  func (x *CommonTlsContext) GetTlsParams() *TlsParameters {
   337  	if x != nil {
   338  		return x.TlsParams
   339  	}
   340  	return nil
   341  }
   342  
   343  func (x *CommonTlsContext) GetTlsCertificates() []*TlsCertificate {
   344  	if x != nil {
   345  		return x.TlsCertificates
   346  	}
   347  	return nil
   348  }
   349  
   350  func (x *CommonTlsContext) GetTlsCertificateSdsSecretConfigs() []*SdsSecretConfig {
   351  	if x != nil {
   352  		return x.TlsCertificateSdsSecretConfigs
   353  	}
   354  	return nil
   355  }
   356  
   357  func (m *CommonTlsContext) GetValidationContextType() isCommonTlsContext_ValidationContextType {
   358  	if m != nil {
   359  		return m.ValidationContextType
   360  	}
   361  	return nil
   362  }
   363  
   364  func (x *CommonTlsContext) GetValidationContext() *CertificateValidationContext {
   365  	if x, ok := x.GetValidationContextType().(*CommonTlsContext_ValidationContext); ok {
   366  		return x.ValidationContext
   367  	}
   368  	return nil
   369  }
   370  
   371  func (x *CommonTlsContext) GetValidationContextSdsSecretConfig() *SdsSecretConfig {
   372  	if x, ok := x.GetValidationContextType().(*CommonTlsContext_ValidationContextSdsSecretConfig); ok {
   373  		return x.ValidationContextSdsSecretConfig
   374  	}
   375  	return nil
   376  }
   377  
   378  func (x *CommonTlsContext) GetCombinedValidationContext() *CommonTlsContext_CombinedCertificateValidationContext {
   379  	if x, ok := x.GetValidationContextType().(*CommonTlsContext_CombinedValidationContext); ok {
   380  		return x.CombinedValidationContext
   381  	}
   382  	return nil
   383  }
   384  
   385  func (x *CommonTlsContext) GetAlpnProtocols() []string {
   386  	if x != nil {
   387  		return x.AlpnProtocols
   388  	}
   389  	return nil
   390  }
   391  
   392  type isCommonTlsContext_ValidationContextType interface {
   393  	isCommonTlsContext_ValidationContextType()
   394  }
   395  
   396  type CommonTlsContext_ValidationContext struct {
   397  	// How to validate peer certificates.
   398  	ValidationContext *CertificateValidationContext `protobuf:"bytes,3,opt,name=validation_context,json=validationContext,proto3,oneof"`
   399  }
   400  
   401  type CommonTlsContext_ValidationContextSdsSecretConfig struct {
   402  	// Config for fetching validation context via SDS API.
   403  	ValidationContextSdsSecretConfig *SdsSecretConfig `protobuf:"bytes,7,opt,name=validation_context_sds_secret_config,json=validationContextSdsSecretConfig,proto3,oneof"`
   404  }
   405  
   406  type CommonTlsContext_CombinedValidationContext struct {
   407  	// Combined certificate validation context holds a default CertificateValidationContext
   408  	// and SDS config. When SDS server returns dynamic CertificateValidationContext, both dynamic
   409  	// and default CertificateValidationContext are merged into a new CertificateValidationContext
   410  	// for validation. This merge is done by Message::MergeFrom(), so dynamic
   411  	// CertificateValidationContext overwrites singular fields in default
   412  	// CertificateValidationContext, and concatenates repeated fields to default
   413  	// CertificateValidationContext, and logical OR is applied to boolean fields.
   414  	CombinedValidationContext *CommonTlsContext_CombinedCertificateValidationContext `protobuf:"bytes,8,opt,name=combined_validation_context,json=combinedValidationContext,proto3,oneof"`
   415  }
   416  
   417  func (*CommonTlsContext_ValidationContext) isCommonTlsContext_ValidationContextType() {}
   418  
   419  func (*CommonTlsContext_ValidationContextSdsSecretConfig) isCommonTlsContext_ValidationContextType() {
   420  }
   421  
   422  func (*CommonTlsContext_CombinedValidationContext) isCommonTlsContext_ValidationContextType() {}
   423  
   424  type CommonTlsContext_CombinedCertificateValidationContext struct {
   425  	state         protoimpl.MessageState
   426  	sizeCache     protoimpl.SizeCache
   427  	unknownFields protoimpl.UnknownFields
   428  
   429  	// How to validate peer certificates.
   430  	DefaultValidationContext *CertificateValidationContext `protobuf:"bytes,1,opt,name=default_validation_context,json=defaultValidationContext,proto3" json:"default_validation_context,omitempty"`
   431  	// Config for fetching validation context via SDS API.
   432  	ValidationContextSdsSecretConfig *SdsSecretConfig `protobuf:"bytes,2,opt,name=validation_context_sds_secret_config,json=validationContextSdsSecretConfig,proto3" json:"validation_context_sds_secret_config,omitempty"`
   433  }
   434  
   435  func (x *CommonTlsContext_CombinedCertificateValidationContext) Reset() {
   436  	*x = CommonTlsContext_CombinedCertificateValidationContext{}
   437  	if protoimpl.UnsafeEnabled {
   438  		mi := &file_envoy_api_v2_auth_tls_proto_msgTypes[3]
   439  		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
   440  		ms.StoreMessageInfo(mi)
   441  	}
   442  }
   443  
   444  func (x *CommonTlsContext_CombinedCertificateValidationContext) String() string {
   445  	return protoimpl.X.MessageStringOf(x)
   446  }
   447  
   448  func (*CommonTlsContext_CombinedCertificateValidationContext) ProtoMessage() {}
   449  
   450  func (x *CommonTlsContext_CombinedCertificateValidationContext) ProtoReflect() protoreflect.Message {
   451  	mi := &file_envoy_api_v2_auth_tls_proto_msgTypes[3]
   452  	if protoimpl.UnsafeEnabled && x != nil {
   453  		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
   454  		if ms.LoadMessageInfo() == nil {
   455  			ms.StoreMessageInfo(mi)
   456  		}
   457  		return ms
   458  	}
   459  	return mi.MessageOf(x)
   460  }
   461  
   462  // Deprecated: Use CommonTlsContext_CombinedCertificateValidationContext.ProtoReflect.Descriptor instead.
   463  func (*CommonTlsContext_CombinedCertificateValidationContext) Descriptor() ([]byte, []int) {
   464  	return file_envoy_api_v2_auth_tls_proto_rawDescGZIP(), []int{2, 0}
   465  }
   466  
   467  func (x *CommonTlsContext_CombinedCertificateValidationContext) GetDefaultValidationContext() *CertificateValidationContext {
   468  	if x != nil {
   469  		return x.DefaultValidationContext
   470  	}
   471  	return nil
   472  }
   473  
   474  func (x *CommonTlsContext_CombinedCertificateValidationContext) GetValidationContextSdsSecretConfig() *SdsSecretConfig {
   475  	if x != nil {
   476  		return x.ValidationContextSdsSecretConfig
   477  	}
   478  	return nil
   479  }
   480  
   481  var File_envoy_api_v2_auth_tls_proto protoreflect.FileDescriptor
   482  
   483  var file_envoy_api_v2_auth_tls_proto_rawDesc = []byte{
   484  	0x0a, 0x1b, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x61, 0x70, 0x69, 0x2f, 0x76, 0x32, 0x2f, 0x61,
   485  	0x75, 0x74, 0x68, 0x2f, 0x74, 0x6c, 0x73, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x11, 0x65,
   486  	0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x61, 0x75, 0x74, 0x68,
   487  	0x1a, 0x1e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x61, 0x70, 0x69, 0x2f, 0x76, 0x32, 0x2f, 0x61,
   488  	0x75, 0x74, 0x68, 0x2f, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
   489  	0x1a, 0x1e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2f, 0x61, 0x70, 0x69, 0x2f, 0x76, 0x32, 0x2f, 0x61,
   490  	0x75, 0x74, 0x68, 0x2f, 0x73, 0x65, 0x63, 0x72, 0x65, 0x74, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
   491  	0x1a, 0x1e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75,
   492  	0x66, 0x2f, 0x64, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
   493  	0x1a, 0x1e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75,
   494  	0x66, 0x2f, 0x77, 0x72, 0x61, 0x70, 0x70, 0x65, 0x72, 0x73, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
   495  	0x1a, 0x1e, 0x75, 0x64, 0x70, 0x61, 0x2f, 0x61, 0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f,
   496  	0x6e, 0x73, 0x2f, 0x6d, 0x69, 0x67, 0x72, 0x61, 0x74, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
   497  	0x1a, 0x1d, 0x75, 0x64, 0x70, 0x61, 0x2f, 0x61, 0x6e, 0x6e, 0x6f, 0x74, 0x61, 0x74, 0x69, 0x6f,
   498  	0x6e, 0x73, 0x2f, 0x73, 0x74, 0x61, 0x74, 0x75, 0x73, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a,
   499  	0x17, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65, 0x2f, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61,
   500  	0x74, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22, 0xfc, 0x01, 0x0a, 0x12, 0x55, 0x70, 0x73,
   501  	0x74, 0x72, 0x65, 0x61, 0x6d, 0x54, 0x6c, 0x73, 0x43, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x12,
   502  	0x51, 0x0a, 0x12, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x74, 0x6c, 0x73, 0x5f, 0x63, 0x6f,
   503  	0x6e, 0x74, 0x65, 0x78, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x23, 0x2e, 0x65, 0x6e,
   504  	0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x61, 0x75, 0x74, 0x68, 0x2e,
   505  	0x43, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x54, 0x6c, 0x73, 0x43, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74,
   506  	0x52, 0x10, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x54, 0x6c, 0x73, 0x43, 0x6f, 0x6e, 0x74, 0x65,
   507  	0x78, 0x74, 0x12, 0x1a, 0x0a, 0x03, 0x73, 0x6e, 0x69, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x42,
   508  	0x08, 0xfa, 0x42, 0x05, 0x72, 0x03, 0x28, 0xff, 0x01, 0x52, 0x03, 0x73, 0x6e, 0x69, 0x12, 0x2f,
   509  	0x0a, 0x13, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x5f, 0x72, 0x65, 0x6e, 0x65, 0x67, 0x6f, 0x74, 0x69,
   510  	0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x08, 0x52, 0x12, 0x61, 0x6c, 0x6c,
   511  	0x6f, 0x77, 0x52, 0x65, 0x6e, 0x65, 0x67, 0x6f, 0x74, 0x69, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12,
   512  	0x46, 0x0a, 0x10, 0x6d, 0x61, 0x78, 0x5f, 0x73, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x5f, 0x6b,
   513  	0x65, 0x79, 0x73, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c, 0x2e, 0x67, 0x6f, 0x6f, 0x67,
   514  	0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x55, 0x49, 0x6e, 0x74,
   515  	0x33, 0x32, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x0e, 0x6d, 0x61, 0x78, 0x53, 0x65, 0x73, 0x73,
   516  	0x69, 0x6f, 0x6e, 0x4b, 0x65, 0x79, 0x73, 0x22, 0x97, 0x05, 0x0a, 0x14, 0x44, 0x6f, 0x77, 0x6e,
   517  	0x73, 0x74, 0x72, 0x65, 0x61, 0x6d, 0x54, 0x6c, 0x73, 0x43, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74,
   518  	0x12, 0x51, 0x0a, 0x12, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x5f, 0x74, 0x6c, 0x73, 0x5f, 0x63,
   519  	0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x23, 0x2e, 0x65,
   520  	0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x61, 0x75, 0x74, 0x68,
   521  	0x2e, 0x43, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x54, 0x6c, 0x73, 0x43, 0x6f, 0x6e, 0x74, 0x65, 0x78,
   522  	0x74, 0x52, 0x10, 0x63, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x54, 0x6c, 0x73, 0x43, 0x6f, 0x6e, 0x74,
   523  	0x65, 0x78, 0x74, 0x12, 0x58, 0x0a, 0x1a, 0x72, 0x65, 0x71, 0x75, 0x69, 0x72, 0x65, 0x5f, 0x63,
   524  	0x6c, 0x69, 0x65, 0x6e, 0x74, 0x5f, 0x63, 0x65, 0x72, 0x74, 0x69, 0x66, 0x69, 0x63, 0x61, 0x74,
   525  	0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65,
   526  	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61,
   527  	0x6c, 0x75, 0x65, 0x52, 0x18, 0x72, 0x65, 0x71, 0x75, 0x69, 0x72, 0x65, 0x43, 0x6c, 0x69, 0x65,
   528  	0x6e, 0x74, 0x43, 0x65, 0x72, 0x74, 0x69, 0x66, 0x69, 0x63, 0x61, 0x74, 0x65, 0x12, 0x3b, 0x0a,
   529  	0x0b, 0x72, 0x65, 0x71, 0x75, 0x69, 0x72, 0x65, 0x5f, 0x73, 0x6e, 0x69, 0x18, 0x03, 0x20, 0x01,
   530  	0x28, 0x0b, 0x32, 0x1a, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74,
   531  	0x6f, 0x62, 0x75, 0x66, 0x2e, 0x42, 0x6f, 0x6f, 0x6c, 0x56, 0x61, 0x6c, 0x75, 0x65, 0x52, 0x0a,
   532  	0x72, 0x65, 0x71, 0x75, 0x69, 0x72, 0x65, 0x53, 0x6e, 0x69, 0x12, 0x59, 0x0a, 0x13, 0x73, 0x65,
   533  	0x73, 0x73, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x69, 0x63, 0x6b, 0x65, 0x74, 0x5f, 0x6b, 0x65, 0x79,
   534  	0x73, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x27, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e,
   535  	0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x61, 0x75, 0x74, 0x68, 0x2e, 0x54, 0x6c, 0x73, 0x53,
   536  	0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x54, 0x69, 0x63, 0x6b, 0x65, 0x74, 0x4b, 0x65, 0x79, 0x73,
   537  	0x48, 0x00, 0x52, 0x11, 0x73, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x54, 0x69, 0x63, 0x6b, 0x65,
   538  	0x74, 0x4b, 0x65, 0x79, 0x73, 0x12, 0x75, 0x0a, 0x25, 0x73, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e,
   539  	0x5f, 0x74, 0x69, 0x63, 0x6b, 0x65, 0x74, 0x5f, 0x6b, 0x65, 0x79, 0x73, 0x5f, 0x73, 0x64, 0x73,
   540  	0x5f, 0x73, 0x65, 0x63, 0x72, 0x65, 0x74, 0x5f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x18, 0x05,
   541  	0x20, 0x01, 0x28, 0x0b, 0x32, 0x22, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69,
   542  	0x2e, 0x76, 0x32, 0x2e, 0x61, 0x75, 0x74, 0x68, 0x2e, 0x53, 0x64, 0x73, 0x53, 0x65, 0x63, 0x72,
   543  	0x65, 0x74, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x48, 0x00, 0x52, 0x20, 0x73, 0x65, 0x73, 0x73,
   544  	0x69, 0x6f, 0x6e, 0x54, 0x69, 0x63, 0x6b, 0x65, 0x74, 0x4b, 0x65, 0x79, 0x73, 0x53, 0x64, 0x73,
   545  	0x53, 0x65, 0x63, 0x72, 0x65, 0x74, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x12, 0x51, 0x0a, 0x24,
   546  	0x64, 0x69, 0x73, 0x61, 0x62, 0x6c, 0x65, 0x5f, 0x73, 0x74, 0x61, 0x74, 0x65, 0x6c, 0x65, 0x73,
   547  	0x73, 0x5f, 0x73, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x5f, 0x72, 0x65, 0x73, 0x75, 0x6d, 0x70,
   548  	0x74, 0x69, 0x6f, 0x6e, 0x18, 0x07, 0x20, 0x01, 0x28, 0x08, 0x48, 0x00, 0x52, 0x21, 0x64, 0x69,
   549  	0x73, 0x61, 0x62, 0x6c, 0x65, 0x53, 0x74, 0x61, 0x74, 0x65, 0x6c, 0x65, 0x73, 0x73, 0x53, 0x65,
   550  	0x73, 0x73, 0x69, 0x6f, 0x6e, 0x52, 0x65, 0x73, 0x75, 0x6d, 0x70, 0x74, 0x69, 0x6f, 0x6e, 0x12,
   551  	0x54, 0x0a, 0x0f, 0x73, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x5f, 0x74, 0x69, 0x6d, 0x65, 0x6f,
   552  	0x75, 0x74, 0x18, 0x06, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e, 0x67, 0x6f, 0x6f, 0x67, 0x6c,
   553  	0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2e, 0x44, 0x75, 0x72, 0x61, 0x74,
   554  	0x69, 0x6f, 0x6e, 0x42, 0x10, 0xfa, 0x42, 0x0d, 0xaa, 0x01, 0x0a, 0x1a, 0x06, 0x08, 0x80, 0x80,
   555  	0x80, 0x80, 0x10, 0x32, 0x00, 0x52, 0x0e, 0x73, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x54, 0x69,
   556  	0x6d, 0x65, 0x6f, 0x75, 0x74, 0x42, 0x1a, 0x0a, 0x18, 0x73, 0x65, 0x73, 0x73, 0x69, 0x6f, 0x6e,
   557  	0x5f, 0x74, 0x69, 0x63, 0x6b, 0x65, 0x74, 0x5f, 0x6b, 0x65, 0x79, 0x73, 0x5f, 0x74, 0x79, 0x70,
   558  	0x65, 0x22, 0xe8, 0x07, 0x0a, 0x10, 0x43, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x54, 0x6c, 0x73, 0x43,
   559  	0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x12, 0x3f, 0x0a, 0x0a, 0x74, 0x6c, 0x73, 0x5f, 0x70, 0x61,
   560  	0x72, 0x61, 0x6d, 0x73, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x20, 0x2e, 0x65, 0x6e, 0x76,
   561  	0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x61, 0x75, 0x74, 0x68, 0x2e, 0x54,
   562  	0x6c, 0x73, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x65, 0x74, 0x65, 0x72, 0x73, 0x52, 0x09, 0x74, 0x6c,
   563  	0x73, 0x50, 0x61, 0x72, 0x61, 0x6d, 0x73, 0x12, 0x4c, 0x0a, 0x10, 0x74, 0x6c, 0x73, 0x5f, 0x63,
   564  	0x65, 0x72, 0x74, 0x69, 0x66, 0x69, 0x63, 0x61, 0x74, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28,
   565  	0x0b, 0x32, 0x21, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32,
   566  	0x2e, 0x61, 0x75, 0x74, 0x68, 0x2e, 0x54, 0x6c, 0x73, 0x43, 0x65, 0x72, 0x74, 0x69, 0x66, 0x69,
   567  	0x63, 0x61, 0x74, 0x65, 0x52, 0x0f, 0x74, 0x6c, 0x73, 0x43, 0x65, 0x72, 0x74, 0x69, 0x66, 0x69,
   568  	0x63, 0x61, 0x74, 0x65, 0x73, 0x12, 0x78, 0x0a, 0x22, 0x74, 0x6c, 0x73, 0x5f, 0x63, 0x65, 0x72,
   569  	0x74, 0x69, 0x66, 0x69, 0x63, 0x61, 0x74, 0x65, 0x5f, 0x73, 0x64, 0x73, 0x5f, 0x73, 0x65, 0x63,
   570  	0x72, 0x65, 0x74, 0x5f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x73, 0x18, 0x06, 0x20, 0x03, 0x28,
   571  	0x0b, 0x32, 0x22, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32,
   572  	0x2e, 0x61, 0x75, 0x74, 0x68, 0x2e, 0x53, 0x64, 0x73, 0x53, 0x65, 0x63, 0x72, 0x65, 0x74, 0x43,
   573  	0x6f, 0x6e, 0x66, 0x69, 0x67, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x92, 0x01, 0x02, 0x10, 0x01, 0x52,
   574  	0x1e, 0x74, 0x6c, 0x73, 0x43, 0x65, 0x72, 0x74, 0x69, 0x66, 0x69, 0x63, 0x61, 0x74, 0x65, 0x53,
   575  	0x64, 0x73, 0x53, 0x65, 0x63, 0x72, 0x65, 0x74, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x73, 0x12,
   576  	0x60, 0x0a, 0x12, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x63, 0x6f,
   577  	0x6e, 0x74, 0x65, 0x78, 0x74, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2f, 0x2e, 0x65, 0x6e,
   578  	0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x61, 0x75, 0x74, 0x68, 0x2e,
   579  	0x43, 0x65, 0x72, 0x74, 0x69, 0x66, 0x69, 0x63, 0x61, 0x74, 0x65, 0x56, 0x61, 0x6c, 0x69, 0x64,
   580  	0x61, 0x74, 0x69, 0x6f, 0x6e, 0x43, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x48, 0x00, 0x52, 0x11,
   581  	0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x43, 0x6f, 0x6e, 0x74, 0x65, 0x78,
   582  	0x74, 0x12, 0x74, 0x0a, 0x24, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f,
   583  	0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x5f, 0x73, 0x64, 0x73, 0x5f, 0x73, 0x65, 0x63, 0x72,
   584  	0x65, 0x74, 0x5f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x18, 0x07, 0x20, 0x01, 0x28, 0x0b, 0x32,
   585  	0x22, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x61,
   586  	0x75, 0x74, 0x68, 0x2e, 0x53, 0x64, 0x73, 0x53, 0x65, 0x63, 0x72, 0x65, 0x74, 0x43, 0x6f, 0x6e,
   587  	0x66, 0x69, 0x67, 0x48, 0x00, 0x52, 0x20, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69, 0x6f,
   588  	0x6e, 0x43, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x53, 0x64, 0x73, 0x53, 0x65, 0x63, 0x72, 0x65,
   589  	0x74, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x12, 0x8a, 0x01, 0x0a, 0x1b, 0x63, 0x6f, 0x6d, 0x62,
   590  	0x69, 0x6e, 0x65, 0x64, 0x5f, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f,
   591  	0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x18, 0x08, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x48, 0x2e,
   592  	0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x61, 0x75, 0x74,
   593  	0x68, 0x2e, 0x43, 0x6f, 0x6d, 0x6d, 0x6f, 0x6e, 0x54, 0x6c, 0x73, 0x43, 0x6f, 0x6e, 0x74, 0x65,
   594  	0x78, 0x74, 0x2e, 0x43, 0x6f, 0x6d, 0x62, 0x69, 0x6e, 0x65, 0x64, 0x43, 0x65, 0x72, 0x74, 0x69,
   595  	0x66, 0x69, 0x63, 0x61, 0x74, 0x65, 0x56, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e,
   596  	0x43, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x48, 0x00, 0x52, 0x19, 0x63, 0x6f, 0x6d, 0x62, 0x69,
   597  	0x6e, 0x65, 0x64, 0x56, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x43, 0x6f, 0x6e,
   598  	0x74, 0x65, 0x78, 0x74, 0x12, 0x25, 0x0a, 0x0e, 0x61, 0x6c, 0x70, 0x6e, 0x5f, 0x70, 0x72, 0x6f,
   599  	0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x09, 0x52, 0x0d, 0x61, 0x6c,
   600  	0x70, 0x6e, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x73, 0x1a, 0x9d, 0x02, 0x0a, 0x24,
   601  	0x43, 0x6f, 0x6d, 0x62, 0x69, 0x6e, 0x65, 0x64, 0x43, 0x65, 0x72, 0x74, 0x69, 0x66, 0x69, 0x63,
   602  	0x61, 0x74, 0x65, 0x56, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x43, 0x6f, 0x6e,
   603  	0x74, 0x65, 0x78, 0x74, 0x12, 0x77, 0x0a, 0x1a, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x5f,
   604  	0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x63, 0x6f, 0x6e, 0x74, 0x65,
   605  	0x78, 0x74, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x2f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79,
   606  	0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x61, 0x75, 0x74, 0x68, 0x2e, 0x43, 0x65, 0x72,
   607  	0x74, 0x69, 0x66, 0x69, 0x63, 0x61, 0x74, 0x65, 0x56, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69,
   608  	0x6f, 0x6e, 0x43, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x42, 0x08, 0xfa, 0x42, 0x05, 0x8a, 0x01,
   609  	0x02, 0x10, 0x01, 0x52, 0x18, 0x64, 0x65, 0x66, 0x61, 0x75, 0x6c, 0x74, 0x56, 0x61, 0x6c, 0x69,
   610  	0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x43, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x12, 0x7c, 0x0a,
   611  	0x24, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x63, 0x6f, 0x6e, 0x74,
   612  	0x65, 0x78, 0x74, 0x5f, 0x73, 0x64, 0x73, 0x5f, 0x73, 0x65, 0x63, 0x72, 0x65, 0x74, 0x5f, 0x63,
   613  	0x6f, 0x6e, 0x66, 0x69, 0x67, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x22, 0x2e, 0x65, 0x6e,
   614  	0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x61, 0x75, 0x74, 0x68, 0x2e,
   615  	0x53, 0x64, 0x73, 0x53, 0x65, 0x63, 0x72, 0x65, 0x74, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x42,
   616  	0x08, 0xfa, 0x42, 0x05, 0x8a, 0x01, 0x02, 0x10, 0x01, 0x52, 0x20, 0x76, 0x61, 0x6c, 0x69, 0x64,
   617  	0x61, 0x74, 0x69, 0x6f, 0x6e, 0x43, 0x6f, 0x6e, 0x74, 0x65, 0x78, 0x74, 0x53, 0x64, 0x73, 0x53,
   618  	0x65, 0x63, 0x72, 0x65, 0x74, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x42, 0x19, 0x0a, 0x17, 0x76,
   619  	0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x63, 0x6f, 0x6e, 0x74, 0x65, 0x78,
   620  	0x74, 0x5f, 0x74, 0x79, 0x70, 0x65, 0x4a, 0x04, 0x08, 0x05, 0x10, 0x06, 0x42, 0x66, 0x0a, 0x1f,
   621  	0x69, 0x6f, 0x2e, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x70, 0x72, 0x6f, 0x78, 0x79, 0x2e, 0x65, 0x6e,
   622  	0x76, 0x6f, 0x79, 0x2e, 0x61, 0x70, 0x69, 0x2e, 0x76, 0x32, 0x2e, 0x61, 0x75, 0x74, 0x68, 0x42,
   623  	0x08, 0x54, 0x6c, 0x73, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0xf2, 0x98, 0xfe, 0x8f, 0x05,
   624  	0x2b, 0x12, 0x29, 0x65, 0x6e, 0x76, 0x6f, 0x79, 0x2e, 0x65, 0x78, 0x74, 0x65, 0x6e, 0x73, 0x69,
   625  	0x6f, 0x6e, 0x73, 0x2e, 0x74, 0x72, 0x61, 0x6e, 0x73, 0x70, 0x6f, 0x72, 0x74, 0x5f, 0x73, 0x6f,
   626  	0x63, 0x6b, 0x65, 0x74, 0x73, 0x2e, 0x74, 0x6c, 0x73, 0x2e, 0x76, 0x33, 0xba, 0x80, 0xc8, 0xd1,
   627  	0x06, 0x02, 0x10, 0x01, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
   628  }
   629  
   630  var (
   631  	file_envoy_api_v2_auth_tls_proto_rawDescOnce sync.Once
   632  	file_envoy_api_v2_auth_tls_proto_rawDescData = file_envoy_api_v2_auth_tls_proto_rawDesc
   633  )
   634  
   635  func file_envoy_api_v2_auth_tls_proto_rawDescGZIP() []byte {
   636  	file_envoy_api_v2_auth_tls_proto_rawDescOnce.Do(func() {
   637  		file_envoy_api_v2_auth_tls_proto_rawDescData = protoimpl.X.CompressGZIP(file_envoy_api_v2_auth_tls_proto_rawDescData)
   638  	})
   639  	return file_envoy_api_v2_auth_tls_proto_rawDescData
   640  }
   641  
   642  var file_envoy_api_v2_auth_tls_proto_msgTypes = make([]protoimpl.MessageInfo, 4)
   643  var file_envoy_api_v2_auth_tls_proto_goTypes = []interface{}{
   644  	(*UpstreamTlsContext)(nil),                                    // 0: envoy.api.v2.auth.UpstreamTlsContext
   645  	(*DownstreamTlsContext)(nil),                                  // 1: envoy.api.v2.auth.DownstreamTlsContext
   646  	(*CommonTlsContext)(nil),                                      // 2: envoy.api.v2.auth.CommonTlsContext
   647  	(*CommonTlsContext_CombinedCertificateValidationContext)(nil), // 3: envoy.api.v2.auth.CommonTlsContext.CombinedCertificateValidationContext
   648  	(*wrappers.UInt32Value)(nil),                                  // 4: google.protobuf.UInt32Value
   649  	(*wrappers.BoolValue)(nil),                                    // 5: google.protobuf.BoolValue
   650  	(*TlsSessionTicketKeys)(nil),                                  // 6: envoy.api.v2.auth.TlsSessionTicketKeys
   651  	(*SdsSecretConfig)(nil),                                       // 7: envoy.api.v2.auth.SdsSecretConfig
   652  	(*duration.Duration)(nil),                                     // 8: google.protobuf.Duration
   653  	(*TlsParameters)(nil),                                         // 9: envoy.api.v2.auth.TlsParameters
   654  	(*TlsCertificate)(nil),                                        // 10: envoy.api.v2.auth.TlsCertificate
   655  	(*CertificateValidationContext)(nil),                          // 11: envoy.api.v2.auth.CertificateValidationContext
   656  }
   657  var file_envoy_api_v2_auth_tls_proto_depIdxs = []int32{
   658  	2,  // 0: envoy.api.v2.auth.UpstreamTlsContext.common_tls_context:type_name -> envoy.api.v2.auth.CommonTlsContext
   659  	4,  // 1: envoy.api.v2.auth.UpstreamTlsContext.max_session_keys:type_name -> google.protobuf.UInt32Value
   660  	2,  // 2: envoy.api.v2.auth.DownstreamTlsContext.common_tls_context:type_name -> envoy.api.v2.auth.CommonTlsContext
   661  	5,  // 3: envoy.api.v2.auth.DownstreamTlsContext.require_client_certificate:type_name -> google.protobuf.BoolValue
   662  	5,  // 4: envoy.api.v2.auth.DownstreamTlsContext.require_sni:type_name -> google.protobuf.BoolValue
   663  	6,  // 5: envoy.api.v2.auth.DownstreamTlsContext.session_ticket_keys:type_name -> envoy.api.v2.auth.TlsSessionTicketKeys
   664  	7,  // 6: envoy.api.v2.auth.DownstreamTlsContext.session_ticket_keys_sds_secret_config:type_name -> envoy.api.v2.auth.SdsSecretConfig
   665  	8,  // 7: envoy.api.v2.auth.DownstreamTlsContext.session_timeout:type_name -> google.protobuf.Duration
   666  	9,  // 8: envoy.api.v2.auth.CommonTlsContext.tls_params:type_name -> envoy.api.v2.auth.TlsParameters
   667  	10, // 9: envoy.api.v2.auth.CommonTlsContext.tls_certificates:type_name -> envoy.api.v2.auth.TlsCertificate
   668  	7,  // 10: envoy.api.v2.auth.CommonTlsContext.tls_certificate_sds_secret_configs:type_name -> envoy.api.v2.auth.SdsSecretConfig
   669  	11, // 11: envoy.api.v2.auth.CommonTlsContext.validation_context:type_name -> envoy.api.v2.auth.CertificateValidationContext
   670  	7,  // 12: envoy.api.v2.auth.CommonTlsContext.validation_context_sds_secret_config:type_name -> envoy.api.v2.auth.SdsSecretConfig
   671  	3,  // 13: envoy.api.v2.auth.CommonTlsContext.combined_validation_context:type_name -> envoy.api.v2.auth.CommonTlsContext.CombinedCertificateValidationContext
   672  	11, // 14: envoy.api.v2.auth.CommonTlsContext.CombinedCertificateValidationContext.default_validation_context:type_name -> envoy.api.v2.auth.CertificateValidationContext
   673  	7,  // 15: envoy.api.v2.auth.CommonTlsContext.CombinedCertificateValidationContext.validation_context_sds_secret_config:type_name -> envoy.api.v2.auth.SdsSecretConfig
   674  	16, // [16:16] is the sub-list for method output_type
   675  	16, // [16:16] is the sub-list for method input_type
   676  	16, // [16:16] is the sub-list for extension type_name
   677  	16, // [16:16] is the sub-list for extension extendee
   678  	0,  // [0:16] is the sub-list for field type_name
   679  }
   680  
   681  func init() { file_envoy_api_v2_auth_tls_proto_init() }
   682  func file_envoy_api_v2_auth_tls_proto_init() {
   683  	if File_envoy_api_v2_auth_tls_proto != nil {
   684  		return
   685  	}
   686  	file_envoy_api_v2_auth_common_proto_init()
   687  	file_envoy_api_v2_auth_secret_proto_init()
   688  	if !protoimpl.UnsafeEnabled {
   689  		file_envoy_api_v2_auth_tls_proto_msgTypes[0].Exporter = func(v interface{}, i int) interface{} {
   690  			switch v := v.(*UpstreamTlsContext); i {
   691  			case 0:
   692  				return &v.state
   693  			case 1:
   694  				return &v.sizeCache
   695  			case 2:
   696  				return &v.unknownFields
   697  			default:
   698  				return nil
   699  			}
   700  		}
   701  		file_envoy_api_v2_auth_tls_proto_msgTypes[1].Exporter = func(v interface{}, i int) interface{} {
   702  			switch v := v.(*DownstreamTlsContext); i {
   703  			case 0:
   704  				return &v.state
   705  			case 1:
   706  				return &v.sizeCache
   707  			case 2:
   708  				return &v.unknownFields
   709  			default:
   710  				return nil
   711  			}
   712  		}
   713  		file_envoy_api_v2_auth_tls_proto_msgTypes[2].Exporter = func(v interface{}, i int) interface{} {
   714  			switch v := v.(*CommonTlsContext); i {
   715  			case 0:
   716  				return &v.state
   717  			case 1:
   718  				return &v.sizeCache
   719  			case 2:
   720  				return &v.unknownFields
   721  			default:
   722  				return nil
   723  			}
   724  		}
   725  		file_envoy_api_v2_auth_tls_proto_msgTypes[3].Exporter = func(v interface{}, i int) interface{} {
   726  			switch v := v.(*CommonTlsContext_CombinedCertificateValidationContext); i {
   727  			case 0:
   728  				return &v.state
   729  			case 1:
   730  				return &v.sizeCache
   731  			case 2:
   732  				return &v.unknownFields
   733  			default:
   734  				return nil
   735  			}
   736  		}
   737  	}
   738  	file_envoy_api_v2_auth_tls_proto_msgTypes[1].OneofWrappers = []interface{}{
   739  		(*DownstreamTlsContext_SessionTicketKeys)(nil),
   740  		(*DownstreamTlsContext_SessionTicketKeysSdsSecretConfig)(nil),
   741  		(*DownstreamTlsContext_DisableStatelessSessionResumption)(nil),
   742  	}
   743  	file_envoy_api_v2_auth_tls_proto_msgTypes[2].OneofWrappers = []interface{}{
   744  		(*CommonTlsContext_ValidationContext)(nil),
   745  		(*CommonTlsContext_ValidationContextSdsSecretConfig)(nil),
   746  		(*CommonTlsContext_CombinedValidationContext)(nil),
   747  	}
   748  	type x struct{}
   749  	out := protoimpl.TypeBuilder{
   750  		File: protoimpl.DescBuilder{
   751  			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
   752  			RawDescriptor: file_envoy_api_v2_auth_tls_proto_rawDesc,
   753  			NumEnums:      0,
   754  			NumMessages:   4,
   755  			NumExtensions: 0,
   756  			NumServices:   0,
   757  		},
   758  		GoTypes:           file_envoy_api_v2_auth_tls_proto_goTypes,
   759  		DependencyIndexes: file_envoy_api_v2_auth_tls_proto_depIdxs,
   760  		MessageInfos:      file_envoy_api_v2_auth_tls_proto_msgTypes,
   761  	}.Build()
   762  	File_envoy_api_v2_auth_tls_proto = out.File
   763  	file_envoy_api_v2_auth_tls_proto_rawDesc = nil
   764  	file_envoy_api_v2_auth_tls_proto_goTypes = nil
   765  	file_envoy_api_v2_auth_tls_proto_depIdxs = nil
   766  }