go.chromium.org/luci@v0.0.0-20240309015107-7cdc2e660f33/auth_service/api/configspb/config.pb.go

// Copyright 2022 The LUCI Authors.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//      http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

// Code generated by protoc-gen-go. DO NOT EDIT.
// versions:
// 	protoc-gen-go v1.31.0
// 	protoc        v3.21.7
// source: go.chromium.org/luci/auth_service/api/configspb/config.proto

package configspb

import (
	protocol "go.chromium.org/luci/server/auth/service/protocol"
	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
	reflect "reflect"
	sync "sync"
)

const (
	// Verify that this generated code is sufficiently up-to-date.
	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
	// Verify that runtime/protoimpl is sufficiently up-to-date.
	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
)

// Auth service configuration that applies specifically to the service, not to
// any linked services.
//
// Provided via 'settings.cfg' config file.
type SettingsCfg struct {
	state         protoimpl.MessageState
	sizeCache     protoimpl.SizeCache
	unknownFields protoimpl.UnknownFields

	// Enable ts_mon based monitoring.
	EnableTsMonitoring bool `protobuf:"varint,1,opt,name=enable_ts_monitoring,json=enableTsMonitoring,proto3" json:"enable_ts_monitoring,omitempty"`
	// If set, store the latest AuthDB snapshot in Google Storage.
	//
	// Should have format "<bucket>/<prefix>".
	//
	// Auth service will take ownership of two objects there:
	//  1. latest.json: JSON-serialized AuthDBRevision proto.
	//  2. latest.db: binary-serialized SignedAuthDB with actual AuthDB data.
	//
	// When AuthDB changes, Auth service updates latest.db, then latest.json, and
	// finally sends a PubSub notification.
	//
	// Consumers can either poll latest.json for changes, or they can setup
	// a PubSub subscription via /auth_service/api/v1/authdb/subscription/ to get
	// notified.
	//
	// Requires at least one AuthDB change (e.g. a group update) for the files
	// to appear after setting or changing auth_db_gs_path.
	//
	// When changing or removing auth_db_gs_path, files at the old location are
	// not automatically cleaned up.
	AuthDbGsPath string `protobuf:"bytes,2,opt,name=auth_db_gs_path,json=authDbGsPath,proto3" json:"auth_db_gs_path,omitempty"`
}

func (x *SettingsCfg) Reset() {
	*x = SettingsCfg{}
	if protoimpl.UnsafeEnabled {
		mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[0]
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		ms.StoreMessageInfo(mi)
	}
}

func (x *SettingsCfg) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*SettingsCfg) ProtoMessage() {}

func (x *SettingsCfg) ProtoReflect() protoreflect.Message {
	mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[0]
	if protoimpl.UnsafeEnabled && x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use SettingsCfg.ProtoReflect.Descriptor instead.
func (*SettingsCfg) Descriptor() ([]byte, []int) {
	return file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescGZIP(), []int{0}
}

func (x *SettingsCfg) GetEnableTsMonitoring() bool {
	if x != nil {
		return x.EnableTsMonitoring
	}
	return false
}

func (x *SettingsCfg) GetAuthDbGsPath() string {
	if x != nil {
		return x.AuthDbGsPath
	}
	return ""
}

// Configuration of groups imported from external sources.
//
// Provided via 'imports.cfg' config file.
type GroupImporterConfig struct {
	state         protoimpl.MessageState
	sizeCache     protoimpl.SizeCache
	unknownFields protoimpl.UnknownFields

	Tarball       []*GroupImporterConfig_TarballEntry       `protobuf:"bytes,1,rep,name=tarball,proto3" json:"tarball,omitempty"`
	Plainlist     []*GroupImporterConfig_PlainlistEntry     `protobuf:"bytes,2,rep,name=plainlist,proto3" json:"plainlist,omitempty"`
	TarballUpload []*GroupImporterConfig_TarballUploadEntry `protobuf:"bytes,3,rep,name=tarball_upload,json=tarballUpload,proto3" json:"tarball_upload,omitempty"`
}

func (x *GroupImporterConfig) Reset() {
	*x = GroupImporterConfig{}
	if protoimpl.UnsafeEnabled {
		mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[1]
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		ms.StoreMessageInfo(mi)
	}
}

func (x *GroupImporterConfig) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*GroupImporterConfig) ProtoMessage() {}

func (x *GroupImporterConfig) ProtoReflect() protoreflect.Message {
	mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[1]
	if protoimpl.UnsafeEnabled && x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use GroupImporterConfig.ProtoReflect.Descriptor instead.
func (*GroupImporterConfig) Descriptor() ([]byte, []int) {
	return file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescGZIP(), []int{1}
}

func (x *GroupImporterConfig) GetTarball() []*GroupImporterConfig_TarballEntry {
	if x != nil {
		return x.Tarball
	}
	return nil
}

func (x *GroupImporterConfig) GetPlainlist() []*GroupImporterConfig_PlainlistEntry {
	if x != nil {
		return x.Plainlist
	}
	return nil
}

func (x *GroupImporterConfig) GetTarballUpload() []*GroupImporterConfig_TarballUploadEntry {
	if x != nil {
		return x.TarballUpload
	}
	return nil
}

// IP allowlists config: a set of named IP allowlists and a mapping between
// identity name -> IP allowlist to restrict it to.
type IPAllowlistConfig struct {
	state         protoimpl.MessageState
	sizeCache     protoimpl.SizeCache
	unknownFields protoimpl.UnknownFields

	// A set of named subnets.
	IpAllowlists []*IPAllowlistConfig_IPAllowlist `protobuf:"bytes,1,rep,name=ip_allowlists,json=ipAllowlists,proto3" json:"ip_allowlists,omitempty"`
	// A mapping "identity name -> IP allowlist name".
	Assignments []*IPAllowlistConfig_Assignment `protobuf:"bytes,2,rep,name=assignments,proto3" json:"assignments,omitempty"`
}

func (x *IPAllowlistConfig) Reset() {
	*x = IPAllowlistConfig{}
	if protoimpl.UnsafeEnabled {
		mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[2]
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		ms.StoreMessageInfo(mi)
	}
}

func (x *IPAllowlistConfig) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*IPAllowlistConfig) ProtoMessage() {}

func (x *IPAllowlistConfig) ProtoReflect() protoreflect.Message {
	mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[2]
	if protoimpl.UnsafeEnabled && x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use IPAllowlistConfig.ProtoReflect.Descriptor instead.
func (*IPAllowlistConfig) Descriptor() ([]byte, []int) {
	return file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescGZIP(), []int{2}
}

func (x *IPAllowlistConfig) GetIpAllowlists() []*IPAllowlistConfig_IPAllowlist {
	if x != nil {
		return x.IpAllowlists
	}
	return nil
}

func (x *IPAllowlistConfig) GetAssignments() []*IPAllowlistConfig_Assignment {
	if x != nil {
		return x.Assignments
	}
	return nil
}

// Legacy config, this is maintained to support clients still utilizing
// https://crsrc.org/i/luci/client/utils/oauth.py;l=419;drc=173496da114efb94dceedb58e588b9c58dabc5e9
//
// Global config. Includes OAuth client_id allowlist and token server URL.
//
// Provided via 'oauth.cfg' config file.
type OAuthConfig struct {
	state         protoimpl.MessageState
	sizeCache     protoimpl.SizeCache
	unknownFields protoimpl.UnknownFields

	// ClientID returned by /auth/api/v1/server/oauth_config endpoint to clients.
	PrimaryClientId string `protobuf:"bytes,1,opt,name=primary_client_id,json=primaryClientId,proto3" json:"primary_client_id,omitempty"`
	// Client secret (that's not really a secret, since it is visible) returned
	// by /auth/api/v1/server/oauth_config endpoint to clients. Corresponding
	// callback URL must be localhost or urn:ietf:wg:oauth:2.0:oob.
	PrimaryClientSecret string `protobuf:"bytes,2,opt,name=primary_client_secret,json=primaryClientSecret,proto3" json:"primary_client_secret,omitempty"`
	// Allowlist of all accepted client_ids (in addition to the primary one).
	ClientIds []string `protobuf:"bytes,3,rep,name=client_ids,json=clientIds,proto3" json:"client_ids,omitempty"`
	// URL of a token server to use to generate delegation tokens.
	TokenServerUrl string `protobuf:"bytes,4,opt,name=token_server_url,json=tokenServerUrl,proto3" json:"token_server_url,omitempty"`
}

func (x *OAuthConfig) Reset() {
	*x = OAuthConfig{}
	if protoimpl.UnsafeEnabled {
		mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[3]
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		ms.StoreMessageInfo(mi)
	}
}

func (x *OAuthConfig) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*OAuthConfig) ProtoMessage() {}

func (x *OAuthConfig) ProtoReflect() protoreflect.Message {
	mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[3]
	if protoimpl.UnsafeEnabled && x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use OAuthConfig.ProtoReflect.Descriptor instead.
func (*OAuthConfig) Descriptor() ([]byte, []int) {
	return file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescGZIP(), []int{3}
}

func (x *OAuthConfig) GetPrimaryClientId() string {
	if x != nil {
		return x.PrimaryClientId
	}
	return ""
}

func (x *OAuthConfig) GetPrimaryClientSecret() string {
	if x != nil {
		return x.PrimaryClientSecret
	}
	return ""
}

func (x *OAuthConfig) GetClientIds() []string {
	if x != nil {
		return x.ClientIds
	}
	return nil
}

func (x *OAuthConfig) GetTokenServerUrl() string {
	if x != nil {
		return x.TokenServerUrl
	}
	return ""
}

// Provided via 'permissions.cfg' config file.
// Defines the list of roles and their respective permissions.
type PermissionsConfig struct {
	state         protoimpl.MessageState
	sizeCache     protoimpl.SizeCache
	unknownFields protoimpl.UnknownFields

	// Representation of all defined roles.
	Role []*PermissionsConfig_Role `protobuf:"bytes,1,rep,name=role,proto3" json:"role,omitempty"`
	// Defines attributes that can be referenced in certain conditions.
	Attribute []string `protobuf:"bytes,2,rep,name=attribute,proto3" json:"attribute,omitempty"`
}

func (x *PermissionsConfig) Reset() {
	*x = PermissionsConfig{}
	if protoimpl.UnsafeEnabled {
		mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[4]
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		ms.StoreMessageInfo(mi)
	}
}

func (x *PermissionsConfig) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*PermissionsConfig) ProtoMessage() {}

func (x *PermissionsConfig) ProtoReflect() protoreflect.Message {
	mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[4]
	if protoimpl.UnsafeEnabled && x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use PermissionsConfig.ProtoReflect.Descriptor instead.
func (*PermissionsConfig) Descriptor() ([]byte, []int) {
	return file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescGZIP(), []int{4}
}

func (x *PermissionsConfig) GetRole() []*PermissionsConfig_Role {
	if x != nil {
		return x.Role
	}
	return nil
}

func (x *PermissionsConfig) GetAttribute() []string {
	if x != nil {
		return x.Attribute
	}
	return nil
}

// Periodically fetch a tarball with groups stored as individual files.
type GroupImporterConfig_TarballEntry struct {
	state         protoimpl.MessageState
	sizeCache     protoimpl.SizeCache
	unknownFields protoimpl.UnknownFields

	// Where to import data from.
	Url string `protobuf:"bytes,1,opt,name=url,proto3" json:"url,omitempty"`
	// List of OAuth scopes to use for authentication (or empty to skip auth).
	OauthScopes []string `protobuf:"bytes,2,rep,name=oauth_scopes,json=oauthScopes,proto3" json:"oauth_scopes,omitempty"`
	// Email domain to append to imported identities.
	Domain string `protobuf:"bytes,3,opt,name=domain,proto3" json:"domain,omitempty"`
	// List of group systems expected to be found in the archive. They act as
	// prefixes to group names, e.g. 'ldap'. Each system corresponds to
	// a subdirectory in the tarball. Each tarball may have groups from multiple
	// external systems, but groups from some external system must not be split
	// between multiple tarballs. When importer sees <group system name>/* in
	// a tarball, it modifies group list from that system on the auth_service to
	// match group list in the tarball _exactly_. For example it removes groups
	// that are on the server, but no longer present in the tarball.
	Systems []string `protobuf:"bytes,4,rep,name=systems,proto3" json:"systems,omitempty"`
	// List of groups to import from the tarball (as filenames relative to
	// tarball root, e.g. 'ldap/some-group'). If empty, imports all groups in
	// the tarball.
	Groups []string `protobuf:"bytes,5,rep,name=groups,proto3" json:"groups,omitempty"`
}

func (x *GroupImporterConfig_TarballEntry) Reset() {
	*x = GroupImporterConfig_TarballEntry{}
	if protoimpl.UnsafeEnabled {
		mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[5]
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		ms.StoreMessageInfo(mi)
	}
}

func (x *GroupImporterConfig_TarballEntry) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*GroupImporterConfig_TarballEntry) ProtoMessage() {}

func (x *GroupImporterConfig_TarballEntry) ProtoReflect() protoreflect.Message {
	mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[5]
	if protoimpl.UnsafeEnabled && x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use GroupImporterConfig_TarballEntry.ProtoReflect.Descriptor instead.
func (*GroupImporterConfig_TarballEntry) Descriptor() ([]byte, []int) {
	return file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescGZIP(), []int{1, 0}
}

func (x *GroupImporterConfig_TarballEntry) GetUrl() string {
	if x != nil {
		return x.Url
	}
	return ""
}

func (x *GroupImporterConfig_TarballEntry) GetOauthScopes() []string {
	if x != nil {
		return x.OauthScopes
	}
	return nil
}

func (x *GroupImporterConfig_TarballEntry) GetDomain() string {
	if x != nil {
		return x.Domain
	}
	return ""
}

func (x *GroupImporterConfig_TarballEntry) GetSystems() []string {
	if x != nil {
		return x.Systems
	}
	return nil
}

func (x *GroupImporterConfig_TarballEntry) GetGroups() []string {
	if x != nil {
		return x.Groups
	}
	return nil
}

// Accept a tarball upload from some external service.
//
// Same as 'TarballEntry', except the tarball is pushed to the service (via
// PUT to /auth_service/api/v1/importer/ingest_tarball/<name>) rather than
// being fetched from somewhere. See 'TarballEntry' comments for details.
type GroupImporterConfig_TarballUploadEntry struct {
	state         protoimpl.MessageState
	sizeCache     protoimpl.SizeCache
	unknownFields protoimpl.UnknownFields

	// Identifies this particular entry. Used in push API requests.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// A service account email that is allowed to do this push.
	AuthorizedUploader []string `protobuf:"bytes,2,rep,name=authorized_uploader,json=authorizedUploader,proto3" json:"authorized_uploader,omitempty"`
	// Email domain to append to imported identities.
	Domain string `protobuf:"bytes,3,opt,name=domain,proto3" json:"domain,omitempty"`
	// List of group systems expected to be found in the archive.
	Systems []string `protobuf:"bytes,4,rep,name=systems,proto3" json:"systems,omitempty"`
	// List of groups to import from the tarball.
	Groups []string `protobuf:"bytes,5,rep,name=groups,proto3" json:"groups,omitempty"`
}

func (x *GroupImporterConfig_TarballUploadEntry) Reset() {
	*x = GroupImporterConfig_TarballUploadEntry{}
	if protoimpl.UnsafeEnabled {
		mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[6]
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		ms.StoreMessageInfo(mi)
	}
}

func (x *GroupImporterConfig_TarballUploadEntry) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*GroupImporterConfig_TarballUploadEntry) ProtoMessage() {}

func (x *GroupImporterConfig_TarballUploadEntry) ProtoReflect() protoreflect.Message {
	mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[6]
	if protoimpl.UnsafeEnabled && x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use GroupImporterConfig_TarballUploadEntry.ProtoReflect.Descriptor instead.
func (*GroupImporterConfig_TarballUploadEntry) Descriptor() ([]byte, []int) {
	return file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescGZIP(), []int{1, 1}
}

func (x *GroupImporterConfig_TarballUploadEntry) GetName() string {
	if x != nil {
		return x.Name
	}
	return ""
}

func (x *GroupImporterConfig_TarballUploadEntry) GetAuthorizedUploader() []string {
	if x != nil {
		return x.AuthorizedUploader
	}
	return nil
}

func (x *GroupImporterConfig_TarballUploadEntry) GetDomain() string {
	if x != nil {
		return x.Domain
	}
	return ""
}

func (x *GroupImporterConfig_TarballUploadEntry) GetSystems() []string {
	if x != nil {
		return x.Systems
	}
	return nil
}

func (x *GroupImporterConfig_TarballUploadEntry) GetGroups() []string {
	if x != nil {
		return x.Groups
	}
	return nil
}

// Periodically fetch a single group stored as a plain list of identities.
type GroupImporterConfig_PlainlistEntry struct {
	state         protoimpl.MessageState
	sizeCache     protoimpl.SizeCache
	unknownFields protoimpl.UnknownFields

	// Where to import data from.
	Url string `protobuf:"bytes,1,opt,name=url,proto3" json:"url,omitempty"`
	// List of OAuth scopes to use for authentication (or empty to skip auth).
	OauthScopes []string `protobuf:"bytes,2,rep,name=oauth_scopes,json=oauthScopes,proto3" json:"oauth_scopes,omitempty"`
	// Email domain to append to imported identities.
	Domain string `protobuf:"bytes,3,opt,name=domain,proto3" json:"domain,omitempty"`
	// A name of imported group. The full group name will be 'external/<group>'.
	Group string `protobuf:"bytes,4,opt,name=group,proto3" json:"group,omitempty"`
}

func (x *GroupImporterConfig_PlainlistEntry) Reset() {
	*x = GroupImporterConfig_PlainlistEntry{}
	if protoimpl.UnsafeEnabled {
		mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[7]
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		ms.StoreMessageInfo(mi)
	}
}

func (x *GroupImporterConfig_PlainlistEntry) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*GroupImporterConfig_PlainlistEntry) ProtoMessage() {}

func (x *GroupImporterConfig_PlainlistEntry) ProtoReflect() protoreflect.Message {
	mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[7]
	if protoimpl.UnsafeEnabled && x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use GroupImporterConfig_PlainlistEntry.ProtoReflect.Descriptor instead.
func (*GroupImporterConfig_PlainlistEntry) Descriptor() ([]byte, []int) {
	return file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescGZIP(), []int{1, 2}
}

func (x *GroupImporterConfig_PlainlistEntry) GetUrl() string {
	if x != nil {
		return x.Url
	}
	return ""
}

func (x *GroupImporterConfig_PlainlistEntry) GetOauthScopes() []string {
	if x != nil {
		return x.OauthScopes
	}
	return nil
}

func (x *GroupImporterConfig_PlainlistEntry) GetDomain() string {
	if x != nil {
		return x.Domain
	}
	return ""
}

func (x *GroupImporterConfig_PlainlistEntry) GetGroup() string {
	if x != nil {
		return x.Group
	}
	return ""
}

type IPAllowlistConfig_IPAllowlist struct {
	state         protoimpl.MessageState
	sizeCache     protoimpl.SizeCache
	unknownFields protoimpl.UnknownFields

	// Name of the IP allowlist.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// List of subnets.
	Subnets []string `protobuf:"bytes,2,rep,name=subnets,proto3" json:"subnets,omitempty"`
	// Names of other IPAllowlist entities to include.
	Includes []string `protobuf:"bytes,3,rep,name=includes,proto3" json:"includes,omitempty"`
}

func (x *IPAllowlistConfig_IPAllowlist) Reset() {
	*x = IPAllowlistConfig_IPAllowlist{}
	if protoimpl.UnsafeEnabled {
		mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[8]
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		ms.StoreMessageInfo(mi)
	}
}

func (x *IPAllowlistConfig_IPAllowlist) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*IPAllowlistConfig_IPAllowlist) ProtoMessage() {}

func (x *IPAllowlistConfig_IPAllowlist) ProtoReflect() protoreflect.Message {
	mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[8]
	if protoimpl.UnsafeEnabled && x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use IPAllowlistConfig_IPAllowlist.ProtoReflect.Descriptor instead.
func (*IPAllowlistConfig_IPAllowlist) Descriptor() ([]byte, []int) {
	return file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescGZIP(), []int{2, 0}
}

func (x *IPAllowlistConfig_IPAllowlist) GetName() string {
	if x != nil {
		return x.Name
	}
	return ""
}

func (x *IPAllowlistConfig_IPAllowlist) GetSubnets() []string {
	if x != nil {
		return x.Subnets
	}
	return nil
}

func (x *IPAllowlistConfig_IPAllowlist) GetIncludes() []string {
	if x != nil {
		return x.Includes
	}
	return nil
}

type IPAllowlistConfig_Assignment struct {
	state         protoimpl.MessageState
	sizeCache     protoimpl.SizeCache
	unknownFields protoimpl.UnknownFields

	// Identity to restrict IPs to.
	Identity string `protobuf:"bytes,1,opt,name=identity,proto3" json:"identity,omitempty"`
	// Name of the corresponding IPAllowlist with a set of subnets.
	IpAllowlistName string `protobuf:"bytes,2,opt,name=ip_allowlist_name,json=ipAllowlistName,proto3" json:"ip_allowlist_name,omitempty"`
}

func (x *IPAllowlistConfig_Assignment) Reset() {
	*x = IPAllowlistConfig_Assignment{}
	if protoimpl.UnsafeEnabled {
		mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[9]
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		ms.StoreMessageInfo(mi)
	}
}

func (x *IPAllowlistConfig_Assignment) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*IPAllowlistConfig_Assignment) ProtoMessage() {}

func (x *IPAllowlistConfig_Assignment) ProtoReflect() protoreflect.Message {
	mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[9]
	if protoimpl.UnsafeEnabled && x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use IPAllowlistConfig_Assignment.ProtoReflect.Descriptor instead.
func (*IPAllowlistConfig_Assignment) Descriptor() ([]byte, []int) {
	return file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescGZIP(), []int{2, 1}
}

func (x *IPAllowlistConfig_Assignment) GetIdentity() string {
	if x != nil {
		return x.Identity
	}
	return ""
}

func (x *IPAllowlistConfig_Assignment) GetIpAllowlistName() string {
	if x != nil {
		return x.IpAllowlistName
	}
	return ""
}

// Defines a role that includes given permissions and other roles.
// The role should not have been defined before. To include this role into another
// role, you can specify this role by name.
type PermissionsConfig_Role struct {
	state         protoimpl.MessageState
	sizeCache     protoimpl.SizeCache
	unknownFields protoimpl.UnknownFields

	// Identifier for a role, will have the form <prefix><project>.<noun>
	//
	//	examples:
	//	  "role/exampleproject.reader"
	//	  "role/exampleproject.owner"
	//
	// Prefixes:
	//
	//	"role/" -- role names defined in Auth service code.
	//	"customRole/" -- role names that can be defined in user-supplied realms.cfg.
	//	"role/luci.internal." -- interally used roles that are forbidden in realms.cfg.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// List of permissions associated with this role, same permission may not be
	// declared more than once per role.
	// Permissions should be of the form: <service>.<subject>.<verb>
	Permissions []*protocol.Permission `protobuf:"bytes,2,rep,name=permissions,proto3" json:"permissions,omitempty"`
	// List of other roles to include in this role, includes all the permissions
	// that the included role contains. The referenced role should be defined already.
	Includes []string `protobuf:"bytes,3,rep,name=includes,proto3" json:"includes,omitempty"`
}

func (x *PermissionsConfig_Role) Reset() {
	*x = PermissionsConfig_Role{}
	if protoimpl.UnsafeEnabled {
		mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[10]
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		ms.StoreMessageInfo(mi)
	}
}

func (x *PermissionsConfig_Role) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*PermissionsConfig_Role) ProtoMessage() {}

func (x *PermissionsConfig_Role) ProtoReflect() protoreflect.Message {
	mi := &file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[10]
	if protoimpl.UnsafeEnabled && x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use PermissionsConfig_Role.ProtoReflect.Descriptor instead.
func (*PermissionsConfig_Role) Descriptor() ([]byte, []int) {
	return file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescGZIP(), []int{4, 0}
}

func (x *PermissionsConfig_Role) GetName() string {
	if x != nil {
		return x.Name
	}
	return ""
}

func (x *PermissionsConfig_Role) GetPermissions() []*protocol.Permission {
	if x != nil {
		return x.Permissions
	}
	return nil
}

func (x *PermissionsConfig_Role) GetIncludes() []string {
	if x != nil {
		return x.Includes
	}
	return nil
}

var File_go_chromium_org_luci_auth_service_api_configspb_config_proto protoreflect.FileDescriptor

var file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDesc = []byte{
	0x0a, 0x3c, 0x67, 0x6f, 0x2e, 0x63, 0x68, 0x72, 0x6f, 0x6d, 0x69, 0x75, 0x6d, 0x2e, 0x6f, 0x72,
	0x67, 0x2f, 0x6c, 0x75, 0x63, 0x69, 0x2f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x73, 0x65, 0x72, 0x76,
	0x69, 0x63, 0x65, 0x2f, 0x61, 0x70, 0x69, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x73, 0x70,
	0x62, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x0c,
	0x61, 0x75, 0x74, 0x68, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x73, 0x1a, 0x54, 0x67, 0x6f,
	0x2e, 0x63, 0x68, 0x72, 0x6f, 0x6d, 0x69, 0x75, 0x6d, 0x2e, 0x6f, 0x72, 0x67, 0x2f, 0x6c, 0x75,
	0x63, 0x69, 0x2f, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72, 0x2f, 0x61, 0x75, 0x74, 0x68, 0x2f, 0x73,
	0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x63, 0x6f, 0x6c, 0x2f,
	0x63, 0x6f, 0x6d, 0x70, 0x6f, 0x6e, 0x65, 0x6e, 0x74, 0x73, 0x2f, 0x61, 0x75, 0x74, 0x68, 0x2f,
	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2f, 0x72, 0x65, 0x61, 0x6c, 0x6d, 0x73, 0x2e, 0x70, 0x72, 0x6f,
	0x74, 0x6f, 0x22, 0x66, 0x0a, 0x0b, 0x53, 0x65, 0x74, 0x74, 0x69, 0x6e, 0x67, 0x73, 0x43, 0x66,
	0x67, 0x12, 0x30, 0x0a, 0x14, 0x65, 0x6e, 0x61, 0x62, 0x6c, 0x65, 0x5f, 0x74, 0x73, 0x5f, 0x6d,
	0x6f, 0x6e, 0x69, 0x74, 0x6f, 0x72, 0x69, 0x6e, 0x67, 0x18, 0x01, 0x20, 0x01, 0x28, 0x08, 0x52,
	0x12, 0x65, 0x6e, 0x61, 0x62, 0x6c, 0x65, 0x54, 0x73, 0x4d, 0x6f, 0x6e, 0x69, 0x74, 0x6f, 0x72,
	0x69, 0x6e, 0x67, 0x12, 0x25, 0x0a, 0x0f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x64, 0x62, 0x5f, 0x67,
	0x73, 0x5f, 0x70, 0x61, 0x74, 0x68, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0c, 0x61, 0x75,
	0x74, 0x68, 0x44, 0x62, 0x47, 0x73, 0x50, 0x61, 0x74, 0x68, 0x22, 0xb7, 0x05, 0x0a, 0x13, 0x47,
	0x72, 0x6f, 0x75, 0x70, 0x49, 0x6d, 0x70, 0x6f, 0x72, 0x74, 0x65, 0x72, 0x43, 0x6f, 0x6e, 0x66,
	0x69, 0x67, 0x12, 0x48, 0x0a, 0x07, 0x74, 0x61, 0x72, 0x62, 0x61, 0x6c, 0x6c, 0x18, 0x01, 0x20,
	0x03, 0x28, 0x0b, 0x32, 0x2e, 0x2e, 0x61, 0x75, 0x74, 0x68, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69,
	0x67, 0x73, 0x2e, 0x47, 0x72, 0x6f, 0x75, 0x70, 0x49, 0x6d, 0x70, 0x6f, 0x72, 0x74, 0x65, 0x72,
	0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x54, 0x61, 0x72, 0x62, 0x61, 0x6c, 0x6c, 0x45, 0x6e,
	0x74, 0x72, 0x79, 0x52, 0x07, 0x74, 0x61, 0x72, 0x62, 0x61, 0x6c, 0x6c, 0x12, 0x4e, 0x0a, 0x09,
	0x70, 0x6c, 0x61, 0x69, 0x6e, 0x6c, 0x69, 0x73, 0x74, 0x18, 0x02, 0x20, 0x03, 0x28, 0x0b, 0x32,
	0x30, 0x2e, 0x61, 0x75, 0x74, 0x68, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x73, 0x2e, 0x47,
	0x72, 0x6f, 0x75, 0x70, 0x49, 0x6d, 0x70, 0x6f, 0x72, 0x74, 0x65, 0x72, 0x43, 0x6f, 0x6e, 0x66,
	0x69, 0x67, 0x2e, 0x50, 0x6c, 0x61, 0x69, 0x6e, 0x6c, 0x69, 0x73, 0x74, 0x45, 0x6e, 0x74, 0x72,
	0x79, 0x52, 0x09, 0x70, 0x6c, 0x61, 0x69, 0x6e, 0x6c, 0x69, 0x73, 0x74, 0x12, 0x5b, 0x0a, 0x0e,
	0x74, 0x61, 0x72, 0x62, 0x61, 0x6c, 0x6c, 0x5f, 0x75, 0x70, 0x6c, 0x6f, 0x61, 0x64, 0x18, 0x03,
	0x20, 0x03, 0x28, 0x0b, 0x32, 0x34, 0x2e, 0x61, 0x75, 0x74, 0x68, 0x2e, 0x63, 0x6f, 0x6e, 0x66,
	0x69, 0x67, 0x73, 0x2e, 0x47, 0x72, 0x6f, 0x75, 0x70, 0x49, 0x6d, 0x70, 0x6f, 0x72, 0x74, 0x65,
	0x72, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x54, 0x61, 0x72, 0x62, 0x61, 0x6c, 0x6c, 0x55,
	0x70, 0x6c, 0x6f, 0x61, 0x64, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x0d, 0x74, 0x61, 0x72, 0x62,
	0x61, 0x6c, 0x6c, 0x55, 0x70, 0x6c, 0x6f, 0x61, 0x64, 0x1a, 0x8d, 0x01, 0x0a, 0x0c, 0x54, 0x61,
	0x72, 0x62, 0x61, 0x6c, 0x6c, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x75, 0x72,
	0x6c, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x75, 0x72, 0x6c, 0x12, 0x21, 0x0a, 0x0c,
	0x6f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x73, 0x63, 0x6f, 0x70, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03,
	0x28, 0x09, 0x52, 0x0b, 0x6f, 0x61, 0x75, 0x74, 0x68, 0x53, 0x63, 0x6f, 0x70, 0x65, 0x73, 0x12,
	0x16, 0x0a, 0x06, 0x64, 0x6f, 0x6d, 0x61, 0x69, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52,
	0x06, 0x64, 0x6f, 0x6d, 0x61, 0x69, 0x6e, 0x12, 0x18, 0x0a, 0x07, 0x73, 0x79, 0x73, 0x74, 0x65,
	0x6d, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x09, 0x52, 0x07, 0x73, 0x79, 0x73, 0x74, 0x65, 0x6d,
	0x73, 0x12, 0x16, 0x0a, 0x06, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x18, 0x05, 0x20, 0x03, 0x28,
	0x09, 0x52, 0x06, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x1a, 0xa3, 0x01, 0x0a, 0x12, 0x54, 0x61,
	0x72, 0x62, 0x61, 0x6c, 0x6c, 0x55, 0x70, 0x6c, 0x6f, 0x61, 0x64, 0x45, 0x6e, 0x74, 0x72, 0x79,
	0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04,
	0x6e, 0x61, 0x6d, 0x65, 0x12, 0x2f, 0x0a, 0x13, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a,
	0x65, 0x64, 0x5f, 0x75, 0x70, 0x6c, 0x6f, 0x61, 0x64, 0x65, 0x72, 0x18, 0x02, 0x20, 0x03, 0x28,
	0x09, 0x52, 0x12, 0x61, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x65, 0x64, 0x55, 0x70, 0x6c,
	0x6f, 0x61, 0x64, 0x65, 0x72, 0x12, 0x16, 0x0a, 0x06, 0x64, 0x6f, 0x6d, 0x61, 0x69, 0x6e, 0x18,
	0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x64, 0x6f, 0x6d, 0x61, 0x69, 0x6e, 0x12, 0x18, 0x0a,
	0x07, 0x73, 0x79, 0x73, 0x74, 0x65, 0x6d, 0x73, 0x18, 0x04, 0x20, 0x03, 0x28, 0x09, 0x52, 0x07,
	0x73, 0x79, 0x73, 0x74, 0x65, 0x6d, 0x73, 0x12, 0x16, 0x0a, 0x06, 0x67, 0x72, 0x6f, 0x75, 0x70,
	0x73, 0x18, 0x05, 0x20, 0x03, 0x28, 0x09, 0x52, 0x06, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x73, 0x1a,
	0x73, 0x0a, 0x0e, 0x50, 0x6c, 0x61, 0x69, 0x6e, 0x6c, 0x69, 0x73, 0x74, 0x45, 0x6e, 0x74, 0x72,
	0x79, 0x12, 0x10, 0x0a, 0x03, 0x75, 0x72, 0x6c, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03,
	0x75, 0x72, 0x6c, 0x12, 0x21, 0x0a, 0x0c, 0x6f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x73, 0x63, 0x6f,
	0x70, 0x65, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x09, 0x52, 0x0b, 0x6f, 0x61, 0x75, 0x74, 0x68,
	0x53, 0x63, 0x6f, 0x70, 0x65, 0x73, 0x12, 0x16, 0x0a, 0x06, 0x64, 0x6f, 0x6d, 0x61, 0x69, 0x6e,
	0x18, 0x03, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x64, 0x6f, 0x6d, 0x61, 0x69, 0x6e, 0x12, 0x14,
	0x0a, 0x05, 0x67, 0x72, 0x6f, 0x75, 0x70, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x67,
	0x72, 0x6f, 0x75, 0x70, 0x22, 0xe2, 0x02, 0x0a, 0x11, 0x49, 0x50, 0x41, 0x6c, 0x6c, 0x6f, 0x77,
	0x6c, 0x69, 0x73, 0x74, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x12, 0x50, 0x0a, 0x0d, 0x69, 0x70,
	0x5f, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x6c, 0x69, 0x73, 0x74, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28,
	0x0b, 0x32, 0x2b, 0x2e, 0x61, 0x75, 0x74, 0x68, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x73,
	0x2e, 0x49, 0x50, 0x41, 0x6c, 0x6c, 0x6f, 0x77, 0x6c, 0x69, 0x73, 0x74, 0x43, 0x6f, 0x6e, 0x66,
	0x69, 0x67, 0x2e, 0x49, 0x50, 0x41, 0x6c, 0x6c, 0x6f, 0x77, 0x6c, 0x69, 0x73, 0x74, 0x52, 0x0c,
	0x69, 0x70, 0x41, 0x6c, 0x6c, 0x6f, 0x77, 0x6c, 0x69, 0x73, 0x74, 0x73, 0x12, 0x4c, 0x0a, 0x0b,
	0x61, 0x73, 0x73, 0x69, 0x67, 0x6e, 0x6d, 0x65, 0x6e, 0x74, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28,
	0x0b, 0x32, 0x2a, 0x2e, 0x61, 0x75, 0x74, 0x68, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x73,
	0x2e, 0x49, 0x50, 0x41, 0x6c, 0x6c, 0x6f, 0x77, 0x6c, 0x69, 0x73, 0x74, 0x43, 0x6f, 0x6e, 0x66,
	0x69, 0x67, 0x2e, 0x41, 0x73, 0x73, 0x69, 0x67, 0x6e, 0x6d, 0x65, 0x6e, 0x74, 0x52, 0x0b, 0x61,
	0x73, 0x73, 0x69, 0x67, 0x6e, 0x6d, 0x65, 0x6e, 0x74, 0x73, 0x1a, 0x57, 0x0a, 0x0b, 0x49, 0x50,
	0x41, 0x6c, 0x6c, 0x6f, 0x77, 0x6c, 0x69, 0x73, 0x74, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d,
	0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x18, 0x0a,
	0x07, 0x73, 0x75, 0x62, 0x6e, 0x65, 0x74, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28, 0x09, 0x52, 0x07,
	0x73, 0x75, 0x62, 0x6e, 0x65, 0x74, 0x73, 0x12, 0x1a, 0x0a, 0x08, 0x69, 0x6e, 0x63, 0x6c, 0x75,
	0x64, 0x65, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x09, 0x52, 0x08, 0x69, 0x6e, 0x63, 0x6c, 0x75,
	0x64, 0x65, 0x73, 0x1a, 0x54, 0x0a, 0x0a, 0x41, 0x73, 0x73, 0x69, 0x67, 0x6e, 0x6d, 0x65, 0x6e,
	0x74, 0x12, 0x1a, 0x0a, 0x08, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x74, 0x79, 0x18, 0x01, 0x20,
	0x01, 0x28, 0x09, 0x52, 0x08, 0x69, 0x64, 0x65, 0x6e, 0x74, 0x69, 0x74, 0x79, 0x12, 0x2a, 0x0a,
	0x11, 0x69, 0x70, 0x5f, 0x61, 0x6c, 0x6c, 0x6f, 0x77, 0x6c, 0x69, 0x73, 0x74, 0x5f, 0x6e, 0x61,
	0x6d, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x0f, 0x69, 0x70, 0x41, 0x6c, 0x6c, 0x6f,
	0x77, 0x6c, 0x69, 0x73, 0x74, 0x4e, 0x61, 0x6d, 0x65, 0x22, 0xb6, 0x01, 0x0a, 0x0b, 0x4f, 0x41,
	0x75, 0x74, 0x68, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x12, 0x2a, 0x0a, 0x11, 0x70, 0x72, 0x69,
	0x6d, 0x61, 0x72, 0x79, 0x5f, 0x63, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x5f, 0x69, 0x64, 0x18, 0x01,
	0x20, 0x01, 0x28, 0x09, 0x52, 0x0f, 0x70, 0x72, 0x69, 0x6d, 0x61, 0x72, 0x79, 0x43, 0x6c, 0x69,
	0x65, 0x6e, 0x74, 0x49, 0x64, 0x12, 0x32, 0x0a, 0x15, 0x70, 0x72, 0x69, 0x6d, 0x61, 0x72, 0x79,
	0x5f, 0x63, 0x6c, 0x69, 0x65, 0x6e, 0x74, 0x5f, 0x73, 0x65, 0x63, 0x72, 0x65, 0x74, 0x18, 0x02,
	0x20, 0x01, 0x28, 0x09, 0x52, 0x13, 0x70, 0x72, 0x69, 0x6d, 0x61, 0x72, 0x79, 0x43, 0x6c, 0x69,
	0x65, 0x6e, 0x74, 0x53, 0x65, 0x63, 0x72, 0x65, 0x74, 0x12, 0x1d, 0x0a, 0x0a, 0x63, 0x6c, 0x69,
	0x65, 0x6e, 0x74, 0x5f, 0x69, 0x64, 0x73, 0x18, 0x03, 0x20, 0x03, 0x28, 0x09, 0x52, 0x09, 0x63,
	0x6c, 0x69, 0x65, 0x6e, 0x74, 0x49, 0x64, 0x73, 0x12, 0x28, 0x0a, 0x10, 0x74, 0x6f, 0x6b, 0x65,
	0x6e, 0x5f, 0x73, 0x65, 0x72, 0x76, 0x65, 0x72, 0x5f, 0x75, 0x72, 0x6c, 0x18, 0x04, 0x20, 0x01,
	0x28, 0x09, 0x52, 0x0e, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x53, 0x65, 0x72, 0x76, 0x65, 0x72, 0x55,
	0x72, 0x6c, 0x22, 0xe9, 0x01, 0x0a, 0x11, 0x50, 0x65, 0x72, 0x6d, 0x69, 0x73, 0x73, 0x69, 0x6f,
	0x6e, 0x73, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x12, 0x38, 0x0a, 0x04, 0x72, 0x6f, 0x6c, 0x65,
	0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x61, 0x75, 0x74, 0x68, 0x2e, 0x63, 0x6f,
	0x6e, 0x66, 0x69, 0x67, 0x73, 0x2e, 0x50, 0x65, 0x72, 0x6d, 0x69, 0x73, 0x73, 0x69, 0x6f, 0x6e,
	0x73, 0x43, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x2e, 0x52, 0x6f, 0x6c, 0x65, 0x52, 0x04, 0x72, 0x6f,
	0x6c, 0x65, 0x12, 0x1c, 0x0a, 0x09, 0x61, 0x74, 0x74, 0x72, 0x69, 0x62, 0x75, 0x74, 0x65, 0x18,
	0x02, 0x20, 0x03, 0x28, 0x09, 0x52, 0x09, 0x61, 0x74, 0x74, 0x72, 0x69, 0x62, 0x75, 0x74, 0x65,
	0x1a, 0x7c, 0x0a, 0x04, 0x52, 0x6f, 0x6c, 0x65, 0x12, 0x12, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65,
	0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x12, 0x44, 0x0a, 0x0b,
	0x70, 0x65, 0x72, 0x6d, 0x69, 0x73, 0x73, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x02, 0x20, 0x03, 0x28,
	0x0b, 0x32, 0x22, 0x2e, 0x63, 0x6f, 0x6d, 0x70, 0x6f, 0x6e, 0x65, 0x6e, 0x74, 0x73, 0x2e, 0x61,
	0x75, 0x74, 0x68, 0x2e, 0x72, 0x65, 0x61, 0x6c, 0x6d, 0x73, 0x2e, 0x50, 0x65, 0x72, 0x6d, 0x69,
	0x73, 0x73, 0x69, 0x6f, 0x6e, 0x52, 0x0b, 0x70, 0x65, 0x72, 0x6d, 0x69, 0x73, 0x73, 0x69, 0x6f,
	0x6e, 0x73, 0x12, 0x1a, 0x0a, 0x08, 0x69, 0x6e, 0x63, 0x6c, 0x75, 0x64, 0x65, 0x73, 0x18, 0x03,
	0x20, 0x03, 0x28, 0x09, 0x52, 0x08, 0x69, 0x6e, 0x63, 0x6c, 0x75, 0x64, 0x65, 0x73, 0x42, 0x31,
	0x5a, 0x2f, 0x67, 0x6f, 0x2e, 0x63, 0x68, 0x72, 0x6f, 0x6d, 0x69, 0x75, 0x6d, 0x2e, 0x6f, 0x72,
	0x67, 0x2f, 0x6c, 0x75, 0x63, 0x69, 0x2f, 0x61, 0x75, 0x74, 0x68, 0x5f, 0x73, 0x65, 0x72, 0x76,
	0x69, 0x63, 0x65, 0x2f, 0x61, 0x70, 0x69, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x69, 0x67, 0x73, 0x70,
	0x62, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
}

var (
	file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescOnce sync.Once
	file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescData = file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDesc
)

func file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescGZIP() []byte {
	file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescOnce.Do(func() {
		file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescData = protoimpl.X.CompressGZIP(file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescData)
	})
	return file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDescData
}

var file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes = make([]protoimpl.MessageInfo, 11)
var file_go_chromium_org_luci_auth_service_api_configspb_config_proto_goTypes = []interface{}{
	(*SettingsCfg)(nil),                            // 0: auth.configs.SettingsCfg
	(*GroupImporterConfig)(nil),                    // 1: auth.configs.GroupImporterConfig
	(*IPAllowlistConfig)(nil),                      // 2: auth.configs.IPAllowlistConfig
	(*OAuthConfig)(nil),                            // 3: auth.configs.OAuthConfig
	(*PermissionsConfig)(nil),                      // 4: auth.configs.PermissionsConfig
	(*GroupImporterConfig_TarballEntry)(nil),       // 5: auth.configs.GroupImporterConfig.TarballEntry
	(*GroupImporterConfig_TarballUploadEntry)(nil), // 6: auth.configs.GroupImporterConfig.TarballUploadEntry
	(*GroupImporterConfig_PlainlistEntry)(nil),     // 7: auth.configs.GroupImporterConfig.PlainlistEntry
	(*IPAllowlistConfig_IPAllowlist)(nil),          // 8: auth.configs.IPAllowlistConfig.IPAllowlist
	(*IPAllowlistConfig_Assignment)(nil),           // 9: auth.configs.IPAllowlistConfig.Assignment
	(*PermissionsConfig_Role)(nil),                 // 10: auth.configs.PermissionsConfig.Role
	(*protocol.Permission)(nil),                    // 11: components.auth.realms.Permission
}
var file_go_chromium_org_luci_auth_service_api_configspb_config_proto_depIdxs = []int32{
	5,  // 0: auth.configs.GroupImporterConfig.tarball:type_name -> auth.configs.GroupImporterConfig.TarballEntry
	7,  // 1: auth.configs.GroupImporterConfig.plainlist:type_name -> auth.configs.GroupImporterConfig.PlainlistEntry
	6,  // 2: auth.configs.GroupImporterConfig.tarball_upload:type_name -> auth.configs.GroupImporterConfig.TarballUploadEntry
	8,  // 3: auth.configs.IPAllowlistConfig.ip_allowlists:type_name -> auth.configs.IPAllowlistConfig.IPAllowlist
	9,  // 4: auth.configs.IPAllowlistConfig.assignments:type_name -> auth.configs.IPAllowlistConfig.Assignment
	10, // 5: auth.configs.PermissionsConfig.role:type_name -> auth.configs.PermissionsConfig.Role
	11, // 6: auth.configs.PermissionsConfig.Role.permissions:type_name -> components.auth.realms.Permission
	7,  // [7:7] is the sub-list for method output_type
	7,  // [7:7] is the sub-list for method input_type
	7,  // [7:7] is the sub-list for extension type_name
	7,  // [7:7] is the sub-list for extension extendee
	0,  // [0:7] is the sub-list for field type_name
}

func init() { file_go_chromium_org_luci_auth_service_api_configspb_config_proto_init() }
func file_go_chromium_org_luci_auth_service_api_configspb_config_proto_init() {
	if File_go_chromium_org_luci_auth_service_api_configspb_config_proto != nil {
		return
	}
	if !protoimpl.UnsafeEnabled {
		file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[0].Exporter = func(v interface{}, i int) interface{} {
			switch v := v.(*SettingsCfg); i {
			case 0:
				return &v.state
			case 1:
				return &v.sizeCache
			case 2:
				return &v.unknownFields
			default:
				return nil
			}
		}
		file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[1].Exporter = func(v interface{}, i int) interface{} {
			switch v := v.(*GroupImporterConfig); i {
			case 0:
				return &v.state
			case 1:
				return &v.sizeCache
			case 2:
				return &v.unknownFields
			default:
				return nil
			}
		}
		file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[2].Exporter = func(v interface{}, i int) interface{} {
			switch v := v.(*IPAllowlistConfig); i {
			case 0:
				return &v.state
			case 1:
				return &v.sizeCache
			case 2:
				return &v.unknownFields
			default:
				return nil
			}
		}
		file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[3].Exporter = func(v interface{}, i int) interface{} {
			switch v := v.(*OAuthConfig); i {
			case 0:
				return &v.state
			case 1:
				return &v.sizeCache
			case 2:
				return &v.unknownFields
			default:
				return nil
			}
		}
		file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[4].Exporter = func(v interface{}, i int) interface{} {
			switch v := v.(*PermissionsConfig); i {
			case 0:
				return &v.state
			case 1:
				return &v.sizeCache
			case 2:
				return &v.unknownFields
			default:
				return nil
			}
		}
		file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[5].Exporter = func(v interface{}, i int) interface{} {
			switch v := v.(*GroupImporterConfig_TarballEntry); i {
			case 0:
				return &v.state
			case 1:
				return &v.sizeCache
			case 2:
				return &v.unknownFields
			default:
				return nil
			}
		}
		file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[6].Exporter = func(v interface{}, i int) interface{} {
			switch v := v.(*GroupImporterConfig_TarballUploadEntry); i {
			case 0:
				return &v.state
			case 1:
				return &v.sizeCache
			case 2:
				return &v.unknownFields
			default:
				return nil
			}
		}
		file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[7].Exporter = func(v interface{}, i int) interface{} {
			switch v := v.(*GroupImporterConfig_PlainlistEntry); i {
			case 0:
				return &v.state
			case 1:
				return &v.sizeCache
			case 2:
				return &v.unknownFields
			default:
				return nil
			}
		}
		file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[8].Exporter = func(v interface{}, i int) interface{} {
			switch v := v.(*IPAllowlistConfig_IPAllowlist); i {
			case 0:
				return &v.state
			case 1:
				return &v.sizeCache
			case 2:
				return &v.unknownFields
			default:
				return nil
			}
		}
		file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[9].Exporter = func(v interface{}, i int) interface{} {
			switch v := v.(*IPAllowlistConfig_Assignment); i {
			case 0:
				return &v.state
			case 1:
				return &v.sizeCache
			case 2:
				return &v.unknownFields
			default:
				return nil
			}
		}
		file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes[10].Exporter = func(v interface{}, i int) interface{} {
			switch v := v.(*PermissionsConfig_Role); i {
			case 0:
				return &v.state
			case 1:
				return &v.sizeCache
			case 2:
				return &v.unknownFields
			default:
				return nil
			}
		}
	}
	type x struct{}
	out := protoimpl.TypeBuilder{
		File: protoimpl.DescBuilder{
			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
			RawDescriptor: file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDesc,
			NumEnums:      0,
			NumMessages:   11,
			NumExtensions: 0,
			NumServices:   0,
		},
		GoTypes:           file_go_chromium_org_luci_auth_service_api_configspb_config_proto_goTypes,
		DependencyIndexes: file_go_chromium_org_luci_auth_service_api_configspb_config_proto_depIdxs,
		MessageInfos:      file_go_chromium_org_luci_auth_service_api_configspb_config_proto_msgTypes,
	}.Build()
	File_go_chromium_org_luci_auth_service_api_configspb_config_proto = out.File
	file_go_chromium_org_luci_auth_service_api_configspb_config_proto_rawDesc = nil
	file_go_chromium_org_luci_auth_service_api_configspb_config_proto_goTypes = nil
	file_go_chromium_org_luci_auth_service_api_configspb_config_proto_depIdxs = nil
}