var (
	CertificateIssuanceConfig_KeyAlgorithm_name = map[int32]string{
		0: "KEY_ALGORITHM_UNSPECIFIED",
		1: "RSA_2048",
		4: "ECDSA_P256",
	}
	CertificateIssuanceConfig_KeyAlgorithm_value = map[string]int32{
		"KEY_ALGORITHM_UNSPECIFIED": 0,
		"RSA_2048":                  1,
		"ECDSA_P256":                4,
	}
)

var (
	ServingState_name = map[int32]string{
		0: "SERVING_STATE_UNSPECIFIED",
		1: "ACTIVE",
		2: "PENDING",
	}
	ServingState_value = map[string]int32{
		"SERVING_STATE_UNSPECIFIED": 0,
		"ACTIVE":                    1,
		"PENDING":                   2,
	}
)

var (
	Certificate_Scope_name = map[int32]string{
		0: "DEFAULT",
		1: "EDGE_CACHE",
		2: "ALL_REGIONS",
	}
	Certificate_Scope_value = map[string]int32{
		"DEFAULT":     0,
		"EDGE_CACHE":  1,
		"ALL_REGIONS": 2,
	}
)

var (
	Certificate_ManagedCertificate_State_name = map[int32]string{
		0: "STATE_UNSPECIFIED",
		1: "PROVISIONING",
		2: "FAILED",
		3: "ACTIVE",
	}
	Certificate_ManagedCertificate_State_value = map[string]int32{
		"STATE_UNSPECIFIED": 0,
		"PROVISIONING":      1,
		"FAILED":            2,
		"ACTIVE":            3,
	}
)

var (
	Certificate_ManagedCertificate_ProvisioningIssue_Reason_name = map[int32]string{
		0: "REASON_UNSPECIFIED",
		1: "AUTHORIZATION_ISSUE",
		2: "RATE_LIMITED",
	}
	Certificate_ManagedCertificate_ProvisioningIssue_Reason_value = map[string]int32{
		"REASON_UNSPECIFIED":  0,
		"AUTHORIZATION_ISSUE": 1,
		"RATE_LIMITED":        2,
	}
)

var (
	Certificate_ManagedCertificate_AuthorizationAttemptInfo_State_name = map[int32]string{
		0: "STATE_UNSPECIFIED",
		1: "AUTHORIZING",
		6: "AUTHORIZED",
		7: "FAILED",
	}
	Certificate_ManagedCertificate_AuthorizationAttemptInfo_State_value = map[string]int32{
		"STATE_UNSPECIFIED": 0,
		"AUTHORIZING":       1,
		"AUTHORIZED":        6,
		"FAILED":            7,
	}
)

var (
	Certificate_ManagedCertificate_AuthorizationAttemptInfo_FailureReason_name = map[int32]string{
		0: "FAILURE_REASON_UNSPECIFIED",
		1: "CONFIG",
		2: "CAA",
		3: "RATE_LIMITED",
	}
	Certificate_ManagedCertificate_AuthorizationAttemptInfo_FailureReason_value = map[string]int32{
		"FAILURE_REASON_UNSPECIFIED": 0,
		"CONFIG":                     1,
		"CAA":                        2,
		"RATE_LIMITED":               3,
	}
)

var (
	CertificateMapEntry_Matcher_name = map[int32]string{
		0: "MATCHER_UNSPECIFIED",
		1: "PRIMARY",
	}
	CertificateMapEntry_Matcher_value = map[string]int32{
		"MATCHER_UNSPECIFIED": 0,
		"PRIMARY":             1,
	}
)

var (
	DnsAuthorization_Type_name = map[int32]string{
		0: "TYPE_UNSPECIFIED",
		1: "FIXED_RECORD",
		2: "PER_PROJECT_RECORD",
	}
	DnsAuthorization_Type_value = map[string]int32{
		"TYPE_UNSPECIFIED":   0,
		"FIXED_RECORD":       1,
		"PER_PROJECT_RECORD": 2,
	}
)

var File_google_cloud_certificatemanager_v1_certificate_issuance_config_proto protoreflect.FileDescriptor

var File_google_cloud_certificatemanager_v1_certificate_manager_proto protoreflect.FileDescriptor

var File_google_cloud_certificatemanager_v1_trust_config_proto protoreflect.FileDescriptor

type Certificate struct {

	// A user-defined name of the certificate. Certificate names must be unique
	// globally and match pattern `projects/*/locations/*/certificates/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// One or more paragraphs of text description of a certificate.
	Description string `protobuf:"bytes,8,opt,name=description,proto3" json:"description,omitempty"`
	// Output only. The creation timestamp of a Certificate.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Output only. The last update timestamp of a Certificate.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// Set of labels associated with a Certificate.
	Labels map[string]string `protobuf:"bytes,4,rep,name=labels,proto3" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
	// Types that are assignable to Type:
	//
	//	*Certificate_SelfManaged
	//	*Certificate_Managed
	Type isCertificate_Type `protobuf_oneof:"type"`
	// Output only. The list of Subject Alternative Names of dnsName type defined
	// in the certificate (see RFC 5280 4.2.1.6). Managed certificates that
	// haven't been provisioned yet have this field populated with a value of the
	// managed.domains field.
	SanDnsnames []string `protobuf:"bytes,6,rep,name=san_dnsnames,json=sanDnsnames,proto3" json:"san_dnsnames,omitempty"`
	// Output only. The PEM-encoded certificate chain.
	PemCertificate string `protobuf:"bytes,9,opt,name=pem_certificate,json=pemCertificate,proto3" json:"pem_certificate,omitempty"`
	// Output only. The expiry timestamp of a Certificate.
	ExpireTime *timestamppb.Timestamp `protobuf:"bytes,7,opt,name=expire_time,json=expireTime,proto3" json:"expire_time,omitempty"`
	// Immutable. The scope of the certificate.
	Scope Certificate_Scope `protobuf:"varint,12,opt,name=scope,proto3,enum=google.cloud.certificatemanager.v1.Certificate_Scope" json:"scope,omitempty"`
	// contains filtered or unexported fields
}

type CertificateIssuanceConfig struct {

	// A user-defined name of the certificate issuance config.
	// CertificateIssuanceConfig names must be unique globally and match pattern
	// `projects/*/locations/*/certificateIssuanceConfigs/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Output only. The creation timestamp of a CertificateIssuanceConfig.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Output only. The last update timestamp of a CertificateIssuanceConfig.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// Set of labels associated with a CertificateIssuanceConfig.
	Labels map[string]string `protobuf:"bytes,4,rep,name=labels,proto3" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
	// One or more paragraphs of text description of a CertificateIssuanceConfig.
	Description string `protobuf:"bytes,5,opt,name=description,proto3" json:"description,omitempty"`
	// Required. The CA that issues the workload certificate. It includes the CA
	// address, type, authentication to CA service, etc.
	CertificateAuthorityConfig *CertificateIssuanceConfig_CertificateAuthorityConfig `protobuf:"bytes,6,opt,name=certificate_authority_config,json=certificateAuthorityConfig,proto3" json:"certificate_authority_config,omitempty"`
	// Required. Workload certificate lifetime requested.
	Lifetime *durationpb.Duration `protobuf:"bytes,7,opt,name=lifetime,proto3" json:"lifetime,omitempty"`
	// Required. Specifies the percentage of elapsed time of the certificate
	// lifetime to wait before renewing the certificate. Must be a number between
	// 1-99, inclusive.
	RotationWindowPercentage int32 `protobuf:"varint,8,opt,name=rotation_window_percentage,json=rotationWindowPercentage,proto3" json:"rotation_window_percentage,omitempty"`
	// Required. The key algorithm to use when generating the private key.
	KeyAlgorithm CertificateIssuanceConfig_KeyAlgorithm `protobuf:"varint,9,opt,name=key_algorithm,json=keyAlgorithm,proto3,enum=google.cloud.certificatemanager.v1.CertificateIssuanceConfig_KeyAlgorithm" json:"key_algorithm,omitempty"`
	// contains filtered or unexported fields
}

type CertificateIssuanceConfig_CertificateAuthorityConfig struct {

	// Types that are assignable to Kind:
	//
	//	*CertificateIssuanceConfig_CertificateAuthorityConfig_CertificateAuthorityServiceConfig_
	Kind isCertificateIssuanceConfig_CertificateAuthorityConfig_Kind `protobuf_oneof:"kind"`
	// contains filtered or unexported fields
}

type CertificateIssuanceConfig_CertificateAuthorityConfig_CertificateAuthorityServiceConfig struct {

	// Required. A CA pool resource used to issue a certificate.
	// The CA pool string has a relative resource path following the form
	// "projects/{project}/locations/{location}/caPools/{ca_pool}".
	CaPool string `protobuf:"bytes,1,opt,name=ca_pool,json=caPool,proto3" json:"ca_pool,omitempty"`
	// contains filtered or unexported fields
}

type CertificateIssuanceConfig_CertificateAuthorityConfig_CertificateAuthorityServiceConfig_ struct {
	// Defines a CertificateAuthorityServiceConfig.
	CertificateAuthorityServiceConfig *CertificateIssuanceConfig_CertificateAuthorityConfig_CertificateAuthorityServiceConfig `protobuf:"bytes,1,opt,name=certificate_authority_service_config,json=certificateAuthorityServiceConfig,proto3,oneof"`
}

type CertificateIssuanceConfig_KeyAlgorithm int32

const (
	// Unspecified key algorithm.
	CertificateIssuanceConfig_KEY_ALGORITHM_UNSPECIFIED CertificateIssuanceConfig_KeyAlgorithm = 0
	// Specifies RSA with a 2048-bit modulus.
	CertificateIssuanceConfig_RSA_2048 CertificateIssuanceConfig_KeyAlgorithm = 1
	// Specifies ECDSA with curve P256.
	CertificateIssuanceConfig_ECDSA_P256 CertificateIssuanceConfig_KeyAlgorithm = 4
)

type CertificateManagerClient interface {
	// Lists Certificates in a given project and location.
	ListCertificates(ctx context.Context, in *ListCertificatesRequest, opts ...grpc.CallOption) (*ListCertificatesResponse, error)
	// Gets details of a single Certificate.
	GetCertificate(ctx context.Context, in *GetCertificateRequest, opts ...grpc.CallOption) (*Certificate, error)
	// Creates a new Certificate in a given project and location.
	CreateCertificate(ctx context.Context, in *CreateCertificateRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Updates a Certificate.
	UpdateCertificate(ctx context.Context, in *UpdateCertificateRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Deletes a single Certificate.
	DeleteCertificate(ctx context.Context, in *DeleteCertificateRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Lists CertificateMaps in a given project and location.
	ListCertificateMaps(ctx context.Context, in *ListCertificateMapsRequest, opts ...grpc.CallOption) (*ListCertificateMapsResponse, error)
	// Gets details of a single CertificateMap.
	GetCertificateMap(ctx context.Context, in *GetCertificateMapRequest, opts ...grpc.CallOption) (*CertificateMap, error)
	// Creates a new CertificateMap in a given project and location.
	CreateCertificateMap(ctx context.Context, in *CreateCertificateMapRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Updates a CertificateMap.
	UpdateCertificateMap(ctx context.Context, in *UpdateCertificateMapRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Deletes a single CertificateMap. A Certificate Map can't be deleted
	// if it contains Certificate Map Entries. Remove all the entries from
	// the map before calling this method.
	DeleteCertificateMap(ctx context.Context, in *DeleteCertificateMapRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Lists CertificateMapEntries in a given project and location.
	ListCertificateMapEntries(ctx context.Context, in *ListCertificateMapEntriesRequest, opts ...grpc.CallOption) (*ListCertificateMapEntriesResponse, error)
	// Gets details of a single CertificateMapEntry.
	GetCertificateMapEntry(ctx context.Context, in *GetCertificateMapEntryRequest, opts ...grpc.CallOption) (*CertificateMapEntry, error)
	// Creates a new CertificateMapEntry in a given project and location.
	CreateCertificateMapEntry(ctx context.Context, in *CreateCertificateMapEntryRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Updates a CertificateMapEntry.
	UpdateCertificateMapEntry(ctx context.Context, in *UpdateCertificateMapEntryRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Deletes a single CertificateMapEntry.
	DeleteCertificateMapEntry(ctx context.Context, in *DeleteCertificateMapEntryRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Lists DnsAuthorizations in a given project and location.
	ListDnsAuthorizations(ctx context.Context, in *ListDnsAuthorizationsRequest, opts ...grpc.CallOption) (*ListDnsAuthorizationsResponse, error)
	// Gets details of a single DnsAuthorization.
	GetDnsAuthorization(ctx context.Context, in *GetDnsAuthorizationRequest, opts ...grpc.CallOption) (*DnsAuthorization, error)
	// Creates a new DnsAuthorization in a given project and location.
	CreateDnsAuthorization(ctx context.Context, in *CreateDnsAuthorizationRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Updates a DnsAuthorization.
	UpdateDnsAuthorization(ctx context.Context, in *UpdateDnsAuthorizationRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Deletes a single DnsAuthorization.
	DeleteDnsAuthorization(ctx context.Context, in *DeleteDnsAuthorizationRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Lists CertificateIssuanceConfigs in a given project and location.
	ListCertificateIssuanceConfigs(ctx context.Context, in *ListCertificateIssuanceConfigsRequest, opts ...grpc.CallOption) (*ListCertificateIssuanceConfigsResponse, error)
	// Gets details of a single CertificateIssuanceConfig.
	GetCertificateIssuanceConfig(ctx context.Context, in *GetCertificateIssuanceConfigRequest, opts ...grpc.CallOption) (*CertificateIssuanceConfig, error)
	// Creates a new CertificateIssuanceConfig in a given project and location.
	CreateCertificateIssuanceConfig(ctx context.Context, in *CreateCertificateIssuanceConfigRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Deletes a single CertificateIssuanceConfig.
	DeleteCertificateIssuanceConfig(ctx context.Context, in *DeleteCertificateIssuanceConfigRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Lists TrustConfigs in a given project and location.
	ListTrustConfigs(ctx context.Context, in *ListTrustConfigsRequest, opts ...grpc.CallOption) (*ListTrustConfigsResponse, error)
	// Gets details of a single TrustConfig.
	GetTrustConfig(ctx context.Context, in *GetTrustConfigRequest, opts ...grpc.CallOption) (*TrustConfig, error)
	// Creates a new TrustConfig in a given project and location.
	CreateTrustConfig(ctx context.Context, in *CreateTrustConfigRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Updates a TrustConfig.
	UpdateTrustConfig(ctx context.Context, in *UpdateTrustConfigRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
	// Deletes a single TrustConfig.
	DeleteTrustConfig(ctx context.Context, in *DeleteTrustConfigRequest, opts ...grpc.CallOption) (*longrunningpb.Operation, error)
}

type CertificateManagerServer interface {
	// Lists Certificates in a given project and location.
	ListCertificates(context.Context, *ListCertificatesRequest) (*ListCertificatesResponse, error)
	// Gets details of a single Certificate.
	GetCertificate(context.Context, *GetCertificateRequest) (*Certificate, error)
	// Creates a new Certificate in a given project and location.
	CreateCertificate(context.Context, *CreateCertificateRequest) (*longrunningpb.Operation, error)
	// Updates a Certificate.
	UpdateCertificate(context.Context, *UpdateCertificateRequest) (*longrunningpb.Operation, error)
	// Deletes a single Certificate.
	DeleteCertificate(context.Context, *DeleteCertificateRequest) (*longrunningpb.Operation, error)
	// Lists CertificateMaps in a given project and location.
	ListCertificateMaps(context.Context, *ListCertificateMapsRequest) (*ListCertificateMapsResponse, error)
	// Gets details of a single CertificateMap.
	GetCertificateMap(context.Context, *GetCertificateMapRequest) (*CertificateMap, error)
	// Creates a new CertificateMap in a given project and location.
	CreateCertificateMap(context.Context, *CreateCertificateMapRequest) (*longrunningpb.Operation, error)
	// Updates a CertificateMap.
	UpdateCertificateMap(context.Context, *UpdateCertificateMapRequest) (*longrunningpb.Operation, error)
	// Deletes a single CertificateMap. A Certificate Map can't be deleted
	// if it contains Certificate Map Entries. Remove all the entries from
	// the map before calling this method.
	DeleteCertificateMap(context.Context, *DeleteCertificateMapRequest) (*longrunningpb.Operation, error)
	// Lists CertificateMapEntries in a given project and location.
	ListCertificateMapEntries(context.Context, *ListCertificateMapEntriesRequest) (*ListCertificateMapEntriesResponse, error)
	// Gets details of a single CertificateMapEntry.
	GetCertificateMapEntry(context.Context, *GetCertificateMapEntryRequest) (*CertificateMapEntry, error)
	// Creates a new CertificateMapEntry in a given project and location.
	CreateCertificateMapEntry(context.Context, *CreateCertificateMapEntryRequest) (*longrunningpb.Operation, error)
	// Updates a CertificateMapEntry.
	UpdateCertificateMapEntry(context.Context, *UpdateCertificateMapEntryRequest) (*longrunningpb.Operation, error)
	// Deletes a single CertificateMapEntry.
	DeleteCertificateMapEntry(context.Context, *DeleteCertificateMapEntryRequest) (*longrunningpb.Operation, error)
	// Lists DnsAuthorizations in a given project and location.
	ListDnsAuthorizations(context.Context, *ListDnsAuthorizationsRequest) (*ListDnsAuthorizationsResponse, error)
	// Gets details of a single DnsAuthorization.
	GetDnsAuthorization(context.Context, *GetDnsAuthorizationRequest) (*DnsAuthorization, error)
	// Creates a new DnsAuthorization in a given project and location.
	CreateDnsAuthorization(context.Context, *CreateDnsAuthorizationRequest) (*longrunningpb.Operation, error)
	// Updates a DnsAuthorization.
	UpdateDnsAuthorization(context.Context, *UpdateDnsAuthorizationRequest) (*longrunningpb.Operation, error)
	// Deletes a single DnsAuthorization.
	DeleteDnsAuthorization(context.Context, *DeleteDnsAuthorizationRequest) (*longrunningpb.Operation, error)
	// Lists CertificateIssuanceConfigs in a given project and location.
	ListCertificateIssuanceConfigs(context.Context, *ListCertificateIssuanceConfigsRequest) (*ListCertificateIssuanceConfigsResponse, error)
	// Gets details of a single CertificateIssuanceConfig.
	GetCertificateIssuanceConfig(context.Context, *GetCertificateIssuanceConfigRequest) (*CertificateIssuanceConfig, error)
	// Creates a new CertificateIssuanceConfig in a given project and location.
	CreateCertificateIssuanceConfig(context.Context, *CreateCertificateIssuanceConfigRequest) (*longrunningpb.Operation, error)
	// Deletes a single CertificateIssuanceConfig.
	DeleteCertificateIssuanceConfig(context.Context, *DeleteCertificateIssuanceConfigRequest) (*longrunningpb.Operation, error)
	// Lists TrustConfigs in a given project and location.
	ListTrustConfigs(context.Context, *ListTrustConfigsRequest) (*ListTrustConfigsResponse, error)
	// Gets details of a single TrustConfig.
	GetTrustConfig(context.Context, *GetTrustConfigRequest) (*TrustConfig, error)
	// Creates a new TrustConfig in a given project and location.
	CreateTrustConfig(context.Context, *CreateTrustConfigRequest) (*longrunningpb.Operation, error)
	// Updates a TrustConfig.
	UpdateTrustConfig(context.Context, *UpdateTrustConfigRequest) (*longrunningpb.Operation, error)
	// Deletes a single TrustConfig.
	DeleteTrustConfig(context.Context, *DeleteTrustConfigRequest) (*longrunningpb.Operation, error)
}

type CertificateMap struct {

	// A user-defined name of the Certificate Map. Certificate Map names must be
	// unique globally and match pattern
	// `projects/*/locations/*/certificateMaps/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// One or more paragraphs of text description of a certificate map.
	Description string `protobuf:"bytes,5,opt,name=description,proto3" json:"description,omitempty"`
	// Output only. The creation timestamp of a Certificate Map.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Output only. The update timestamp of a Certificate Map.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,6,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// Set of labels associated with a Certificate Map.
	Labels map[string]string `protobuf:"bytes,3,rep,name=labels,proto3" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
	// Output only. A list of GCLB targets that use this Certificate Map.
	// A Target Proxy is only present on this list if it's attached to a
	// Forwarding Rule.
	GclbTargets []*CertificateMap_GclbTarget `protobuf:"bytes,4,rep,name=gclb_targets,json=gclbTargets,proto3" json:"gclb_targets,omitempty"`
	// contains filtered or unexported fields
}

type CertificateMapEntry struct {

	// A user-defined name of the Certificate Map Entry. Certificate Map Entry
	// names must be unique globally and match pattern
	// `projects/*/locations/*/certificateMaps/*/certificateMapEntries/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// One or more paragraphs of text description of a certificate map entry.
	Description string `protobuf:"bytes,9,opt,name=description,proto3" json:"description,omitempty"`
	// Output only. The creation timestamp of a Certificate Map Entry.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Output only. The update timestamp of a Certificate Map Entry.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// Set of labels associated with a Certificate Map Entry.
	Labels map[string]string `protobuf:"bytes,4,rep,name=labels,proto3" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
	// Types that are assignable to Match:
	//
	//	*CertificateMapEntry_Hostname
	//	*CertificateMapEntry_Matcher_
	Match isCertificateMapEntry_Match `protobuf_oneof:"match"`
	// A set of Certificates defines for the given `hostname`. There can be
	// defined up to four certificates in each Certificate Map Entry. Each
	// certificate must match pattern `projects/*/locations/*/certificates/*`.
	Certificates []string `protobuf:"bytes,7,rep,name=certificates,proto3" json:"certificates,omitempty"`
	// Output only. A serving state of this Certificate Map Entry.
	State ServingState `protobuf:"varint,8,opt,name=state,proto3,enum=google.cloud.certificatemanager.v1.ServingState" json:"state,omitempty"`
	// contains filtered or unexported fields
}

type CertificateMapEntry_Hostname struct {
	// A Hostname (FQDN, e.g. `example.com`) or a wildcard hostname expression
	// (`*.example.com`) for a set of hostnames with common suffix. Used as
	// Server Name Indication (SNI) for selecting a proper certificate.
	Hostname string `protobuf:"bytes,5,opt,name=hostname,proto3,oneof"`
}

type CertificateMapEntry_Matcher int32

const (
	// A matcher has't been recognized.
	CertificateMapEntry_MATCHER_UNSPECIFIED CertificateMapEntry_Matcher = 0
	// A primary certificate that is served when SNI wasn't specified in the
	// request or SNI couldn't be found in the map.
	CertificateMapEntry_PRIMARY CertificateMapEntry_Matcher = 1
)

type CertificateMapEntry_Matcher_ struct {
	// A predefined matcher for particular cases, other than SNI selection.
	Matcher CertificateMapEntry_Matcher `protobuf:"varint,10,opt,name=matcher,proto3,enum=google.cloud.certificatemanager.v1.CertificateMapEntry_Matcher,oneof"`
}

type CertificateMap_GclbTarget struct {

	// A Target Proxy to which this map is attached to.
	//
	// Types that are assignable to TargetProxy:
	//
	//	*CertificateMap_GclbTarget_TargetHttpsProxy
	//	*CertificateMap_GclbTarget_TargetSslProxy
	TargetProxy isCertificateMap_GclbTarget_TargetProxy `protobuf_oneof:"target_proxy"`
	// Output only. IP configurations for this Target Proxy where the
	// Certificate Map is serving.
	IpConfigs []*CertificateMap_GclbTarget_IpConfig `protobuf:"bytes,2,rep,name=ip_configs,json=ipConfigs,proto3" json:"ip_configs,omitempty"`
	// contains filtered or unexported fields
}

type CertificateMap_GclbTarget_IpConfig struct {

	// Output only. An external IP address.
	IpAddress string `protobuf:"bytes,1,opt,name=ip_address,json=ipAddress,proto3" json:"ip_address,omitempty"`
	// Output only. Ports.
	Ports []uint32 `protobuf:"varint,3,rep,packed,name=ports,proto3" json:"ports,omitempty"`
	// contains filtered or unexported fields
}

type CertificateMap_GclbTarget_TargetHttpsProxy struct {
	// Output only. This field returns the resource name in the following
	// format:
	// `//compute.googleapis.com/projects/*/global/targetHttpsProxies/*`.
	TargetHttpsProxy string `protobuf:"bytes,1,opt,name=target_https_proxy,json=targetHttpsProxy,proto3,oneof"`
}

type CertificateMap_GclbTarget_TargetSslProxy struct {
	// Output only. This field returns the resource name in the following
	// format:
	// `//compute.googleapis.com/projects/*/global/targetSslProxies/*`.
	TargetSslProxy string `protobuf:"bytes,3,opt,name=target_ssl_proxy,json=targetSslProxy,proto3,oneof"`
}

type Certificate_Managed struct {
	// If set, contains configuration and state of a managed certificate.
	Managed *Certificate_ManagedCertificate `protobuf:"bytes,11,opt,name=managed,proto3,oneof"`
}

type Certificate_ManagedCertificate struct {

	// Immutable. The domains for which a managed SSL certificate will be
	// generated. Wildcard domains are only supported with DNS challenge
	// resolution.
	Domains []string `protobuf:"bytes,1,rep,name=domains,proto3" json:"domains,omitempty"`
	// Immutable. Authorizations that will be used for performing domain
	// authorization.
	DnsAuthorizations []string `protobuf:"bytes,2,rep,name=dns_authorizations,json=dnsAuthorizations,proto3" json:"dns_authorizations,omitempty"`
	// Immutable. The resource name for a
	// [CertificateIssuanceConfig][google.cloud.certificatemanager.v1.CertificateIssuanceConfig]
	// used to configure private PKI certificates in the format
	// `projects/*/locations/*/certificateIssuanceConfigs/*`.
	// If this field is not set, the certificates will instead be publicly
	// signed as documented at
	// https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs#caa.
	IssuanceConfig string `protobuf:"bytes,6,opt,name=issuance_config,json=issuanceConfig,proto3" json:"issuance_config,omitempty"`
	// Output only. State of the managed certificate resource.
	State Certificate_ManagedCertificate_State `protobuf:"varint,4,opt,name=state,proto3,enum=google.cloud.certificatemanager.v1.Certificate_ManagedCertificate_State" json:"state,omitempty"`
	// Output only. Information about issues with provisioning a Managed
	// Certificate.
	ProvisioningIssue *Certificate_ManagedCertificate_ProvisioningIssue `protobuf:"bytes,3,opt,name=provisioning_issue,json=provisioningIssue,proto3" json:"provisioning_issue,omitempty"`
	// Output only. Detailed state of the latest authorization attempt for each
	// domain specified for managed certificate resource.
	AuthorizationAttemptInfo []*Certificate_ManagedCertificate_AuthorizationAttemptInfo `protobuf:"bytes,5,rep,name=authorization_attempt_info,json=authorizationAttemptInfo,proto3" json:"authorization_attempt_info,omitempty"`
	// contains filtered or unexported fields
}

type Certificate_ManagedCertificate_AuthorizationAttemptInfo struct {

	// Domain name of the authorization attempt.
	Domain string `protobuf:"bytes,1,opt,name=domain,proto3" json:"domain,omitempty"`
	// Output only. State of the domain for managed certificate issuance.
	State Certificate_ManagedCertificate_AuthorizationAttemptInfo_State `protobuf:"varint,2,opt,name=state,proto3,enum=google.cloud.certificatemanager.v1.Certificate_ManagedCertificate_AuthorizationAttemptInfo_State" json:"state,omitempty"`
	// Output only. Reason for failure of the authorization attempt for the
	// domain.
	FailureReason Certificate_ManagedCertificate_AuthorizationAttemptInfo_FailureReason `protobuf:"varint,3,opt,name=failure_reason,json=failureReason,proto3,enum=google.cloud.certificatemanager.v1.Certificate_ManagedCertificate_AuthorizationAttemptInfo_FailureReason" json:"failure_reason,omitempty"`
	// Output only. Human readable explanation for reaching the state.
	// Provided to help address the configuration issues. Not guaranteed to be
	// stable. For programmatic access use FailureReason enum.
	Details string `protobuf:"bytes,4,opt,name=details,proto3" json:"details,omitempty"`
	// contains filtered or unexported fields
}

type Certificate_ManagedCertificate_AuthorizationAttemptInfo_FailureReason int32

const (
	// FailureReason is unspecified.
	Certificate_ManagedCertificate_AuthorizationAttemptInfo_FAILURE_REASON_UNSPECIFIED Certificate_ManagedCertificate_AuthorizationAttemptInfo_FailureReason = 0
	// There was a problem with the user's DNS or load balancer
	// configuration for this domain.
	Certificate_ManagedCertificate_AuthorizationAttemptInfo_CONFIG Certificate_ManagedCertificate_AuthorizationAttemptInfo_FailureReason = 1
	// Certificate issuance forbidden by an explicit CAA record for the
	// domain or a failure to check CAA records for the domain.
	Certificate_ManagedCertificate_AuthorizationAttemptInfo_CAA Certificate_ManagedCertificate_AuthorizationAttemptInfo_FailureReason = 2
	// Reached a CA or internal rate-limit for the domain,
	// e.g. for certificates per top-level private domain.
	Certificate_ManagedCertificate_AuthorizationAttemptInfo_RATE_LIMITED Certificate_ManagedCertificate_AuthorizationAttemptInfo_FailureReason = 3
)

type Certificate_ManagedCertificate_AuthorizationAttemptInfo_State int32

const (
	// State is unspecified.
	Certificate_ManagedCertificate_AuthorizationAttemptInfo_STATE_UNSPECIFIED Certificate_ManagedCertificate_AuthorizationAttemptInfo_State = 0
	// Certificate provisioning for this domain is under way. Google Cloud
	// will attempt to authorize the domain.
	Certificate_ManagedCertificate_AuthorizationAttemptInfo_AUTHORIZING Certificate_ManagedCertificate_AuthorizationAttemptInfo_State = 1
	// A managed certificate can be provisioned, no issues for this domain.
	Certificate_ManagedCertificate_AuthorizationAttemptInfo_AUTHORIZED Certificate_ManagedCertificate_AuthorizationAttemptInfo_State = 6
	// Attempt to authorize the domain failed. This prevents the Managed
	// Certificate from being issued.
	// See `failure_reason` and `details` fields for more information.
	Certificate_ManagedCertificate_AuthorizationAttemptInfo_FAILED Certificate_ManagedCertificate_AuthorizationAttemptInfo_State = 7
)

type Certificate_ManagedCertificate_ProvisioningIssue struct {

	// Output only. Reason for provisioning failures.
	Reason Certificate_ManagedCertificate_ProvisioningIssue_Reason `protobuf:"varint,1,opt,name=reason,proto3,enum=google.cloud.certificatemanager.v1.Certificate_ManagedCertificate_ProvisioningIssue_Reason" json:"reason,omitempty"`
	// Output only. Human readable explanation about the issue. Provided to
	// help address the configuration issues. Not guaranteed to be stable. For
	// programmatic access use Reason enum.
	Details string `protobuf:"bytes,2,opt,name=details,proto3" json:"details,omitempty"`
	// contains filtered or unexported fields
}

type Certificate_ManagedCertificate_ProvisioningIssue_Reason int32

const (
	// Reason is unspecified.
	Certificate_ManagedCertificate_ProvisioningIssue_REASON_UNSPECIFIED Certificate_ManagedCertificate_ProvisioningIssue_Reason = 0
	// Certificate provisioning failed due to an issue with one or more of
	// the domains on the certificate.
	// For details of which domains failed, consult the
	// `authorization_attempt_info` field.
	Certificate_ManagedCertificate_ProvisioningIssue_AUTHORIZATION_ISSUE Certificate_ManagedCertificate_ProvisioningIssue_Reason = 1
	// Exceeded Certificate Authority quotas or internal rate limits of the
	// system. Provisioning may take longer to complete.
	Certificate_ManagedCertificate_ProvisioningIssue_RATE_LIMITED Certificate_ManagedCertificate_ProvisioningIssue_Reason = 2
)

type Certificate_ManagedCertificate_State int32

const (
	// State is unspecified.
	Certificate_ManagedCertificate_STATE_UNSPECIFIED Certificate_ManagedCertificate_State = 0
	// Certificate Manager attempts to provision or renew the certificate.
	// If the process takes longer than expected, consult the
	// `provisioning_issue` field.
	Certificate_ManagedCertificate_PROVISIONING Certificate_ManagedCertificate_State = 1
	// Multiple certificate provisioning attempts failed and Certificate
	// Manager gave up. To try again, delete and create a new managed
	// Certificate resource.
	// For details see the `provisioning_issue` field.
	Certificate_ManagedCertificate_FAILED Certificate_ManagedCertificate_State = 2
	// The certificate management is working, and a certificate has been
	// provisioned.
	Certificate_ManagedCertificate_ACTIVE Certificate_ManagedCertificate_State = 3
)

type Certificate_Scope int32

const (
	// Certificates with default scope are served from core Google data centers.
	// If unsure, choose this option.
	Certificate_DEFAULT Certificate_Scope = 0
	// Certificates with scope EDGE_CACHE are special-purposed certificates,
	// served from Edge Points of Presence.
	// See https://cloud.google.com/vpc/docs/edge-locations.
	Certificate_EDGE_CACHE Certificate_Scope = 1
	// Certificates with ALL_REGIONS scope are served from all Google Cloud
	// regions. See https://cloud.google.com/compute/docs/regions-zones.
	Certificate_ALL_REGIONS Certificate_Scope = 2
)

type Certificate_SelfManaged struct {
	// If set, defines data of a self-managed certificate.
	SelfManaged *Certificate_SelfManagedCertificate `protobuf:"bytes,5,opt,name=self_managed,json=selfManaged,proto3,oneof"`
}

type Certificate_SelfManagedCertificate struct {

	// Input only. The PEM-encoded certificate chain.
	// Leaf certificate comes first, followed by intermediate ones if any.
	PemCertificate string `protobuf:"bytes,1,opt,name=pem_certificate,json=pemCertificate,proto3" json:"pem_certificate,omitempty"`
	// Input only. The PEM-encoded private key of the leaf certificate.
	PemPrivateKey string `protobuf:"bytes,2,opt,name=pem_private_key,json=pemPrivateKey,proto3" json:"pem_private_key,omitempty"`
	// contains filtered or unexported fields
}

type CreateCertificateIssuanceConfigRequest struct {

	// Required. The parent resource of the certificate issuance config. Must be
	// in the format `projects/*/locations/*`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. A user-provided name of the certificate config.
	CertificateIssuanceConfigId string `protobuf:"bytes,2,opt,name=certificate_issuance_config_id,json=certificateIssuanceConfigId,proto3" json:"certificate_issuance_config_id,omitempty"`
	// Required. A definition of the certificate issuance config to create.
	CertificateIssuanceConfig *CertificateIssuanceConfig `protobuf:"bytes,3,opt,name=certificate_issuance_config,json=certificateIssuanceConfig,proto3" json:"certificate_issuance_config,omitempty"`
	// contains filtered or unexported fields
}

type CreateCertificateMapEntryRequest struct {

	// Required. The parent resource of the certificate map entry. Must be in the
	// format `projects/*/locations/*/certificateMaps/*`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. A user-provided name of the certificate map entry.
	CertificateMapEntryId string `protobuf:"bytes,2,opt,name=certificate_map_entry_id,json=certificateMapEntryId,proto3" json:"certificate_map_entry_id,omitempty"`
	// Required. A definition of the certificate map entry to create.
	CertificateMapEntry *CertificateMapEntry `protobuf:"bytes,3,opt,name=certificate_map_entry,json=certificateMapEntry,proto3" json:"certificate_map_entry,omitempty"`
	// contains filtered or unexported fields
}

type CreateCertificateMapRequest struct {

	// Required. The parent resource of the certificate map. Must be in the format
	// `projects/*/locations/*`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. A user-provided name of the certificate map.
	CertificateMapId string `protobuf:"bytes,2,opt,name=certificate_map_id,json=certificateMapId,proto3" json:"certificate_map_id,omitempty"`
	// Required. A definition of the certificate map to create.
	CertificateMap *CertificateMap `protobuf:"bytes,3,opt,name=certificate_map,json=certificateMap,proto3" json:"certificate_map,omitempty"`
	// contains filtered or unexported fields
}

type CreateCertificateRequest struct {

	// Required. The parent resource of the certificate. Must be in the format
	// `projects/*/locations/*`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. A user-provided name of the certificate.
	CertificateId string `protobuf:"bytes,2,opt,name=certificate_id,json=certificateId,proto3" json:"certificate_id,omitempty"`
	// Required. A definition of the certificate to create.
	Certificate *Certificate `protobuf:"bytes,3,opt,name=certificate,proto3" json:"certificate,omitempty"`
	// contains filtered or unexported fields
}

type CreateDnsAuthorizationRequest struct {

	// Required. The parent resource of the dns authorization. Must be in the
	// format `projects/*/locations/*`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. A user-provided name of the dns authorization.
	DnsAuthorizationId string `protobuf:"bytes,2,opt,name=dns_authorization_id,json=dnsAuthorizationId,proto3" json:"dns_authorization_id,omitempty"`
	// Required. A definition of the dns authorization to create.
	DnsAuthorization *DnsAuthorization `protobuf:"bytes,3,opt,name=dns_authorization,json=dnsAuthorization,proto3" json:"dns_authorization,omitempty"`
	// contains filtered or unexported fields
}

type CreateTrustConfigRequest struct {

	// Required. The parent resource of the TrustConfig. Must be in the format
	// `projects/*/locations/*`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Required. A user-provided name of the TrustConfig. Must match the regexp
	// `[a-z0-9-]{1,63}`.
	TrustConfigId string `protobuf:"bytes,2,opt,name=trust_config_id,json=trustConfigId,proto3" json:"trust_config_id,omitempty"`
	// Required. A definition of the TrustConfig to create.
	TrustConfig *TrustConfig `protobuf:"bytes,3,opt,name=trust_config,json=trustConfig,proto3" json:"trust_config,omitempty"`
	// contains filtered or unexported fields
}

type DeleteCertificateIssuanceConfigRequest struct {

	// Required. A name of the certificate issuance config to delete. Must be in
	// the format `projects/*/locations/*/certificateIssuanceConfigs/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type DeleteCertificateMapEntryRequest struct {

	// Required. A name of the certificate map entry to delete. Must be in the
	// format `projects/*/locations/*/certificateMaps/*/certificateMapEntries/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type DeleteCertificateMapRequest struct {

	// Required. A name of the certificate map to delete. Must be in the format
	// `projects/*/locations/*/certificateMaps/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type DeleteCertificateRequest struct {

	// Required. A name of the certificate to delete. Must be in the format
	// `projects/*/locations/*/certificates/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type DeleteDnsAuthorizationRequest struct {

	// Required. A name of the dns authorization to delete. Must be in the format
	// `projects/*/locations/*/dnsAuthorizations/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type DeleteTrustConfigRequest struct {

	// Required. A name of the TrustConfig to delete. Must be in the format
	// `projects/*/locations/*/trustConfigs/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The current etag of the TrustConfig.
	// If an etag is provided and does not match the current etag of the resource,
	// deletion will be blocked and an ABORTED error will be returned.
	Etag string `protobuf:"bytes,2,opt,name=etag,proto3" json:"etag,omitempty"`
	// contains filtered or unexported fields
}

type DnsAuthorization struct {

	// A user-defined name of the dns authorization. DnsAuthorization names must
	// be unique globally and match pattern
	// `projects/*/locations/*/dnsAuthorizations/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Output only. The creation timestamp of a DnsAuthorization.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Output only. The last update timestamp of a DnsAuthorization.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// Set of labels associated with a DnsAuthorization.
	Labels map[string]string `protobuf:"bytes,4,rep,name=labels,proto3" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
	// One or more paragraphs of text description of a DnsAuthorization.
	Description string `protobuf:"bytes,5,opt,name=description,proto3" json:"description,omitempty"`
	// Required. Immutable. A domain that is being authorized. A DnsAuthorization
	// resource covers a single domain and its wildcard, e.g. authorization for
	// `example.com` can be used to issue certificates for `example.com` and
	// `*.example.com`.
	Domain string `protobuf:"bytes,6,opt,name=domain,proto3" json:"domain,omitempty"`
	// Output only. DNS Resource Record that needs to be added to DNS
	// configuration.
	DnsResourceRecord *DnsAuthorization_DnsResourceRecord `protobuf:"bytes,10,opt,name=dns_resource_record,json=dnsResourceRecord,proto3" json:"dns_resource_record,omitempty"`
	// Immutable. Type of DnsAuthorization. If unset during resource creation the
	// following default will be used:
	// - in location global: FIXED_RECORD.
	Type DnsAuthorization_Type `protobuf:"varint,11,opt,name=type,proto3,enum=google.cloud.certificatemanager.v1.DnsAuthorization_Type" json:"type,omitempty"`
	// contains filtered or unexported fields
}

type DnsAuthorization_DnsResourceRecord struct {

	// Output only. Fully qualified name of the DNS Resource Record.
	// e.g. `_acme-challenge.example.com`
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Output only. Type of the DNS Resource Record.
	// Currently always set to "CNAME".
	Type string `protobuf:"bytes,2,opt,name=type,proto3" json:"type,omitempty"`
	// Output only. Data of the DNS Resource Record.
	Data string `protobuf:"bytes,3,opt,name=data,proto3" json:"data,omitempty"`
	// contains filtered or unexported fields
}

type DnsAuthorization_Type int32

const (
	// Type is unspecified.
	DnsAuthorization_TYPE_UNSPECIFIED DnsAuthorization_Type = 0
	// FIXED_RECORD DNS authorization uses DNS-01 validation method.
	DnsAuthorization_FIXED_RECORD DnsAuthorization_Type = 1
	// PER_PROJECT_RECORD DNS authorization allows for independent management
	// of Google-managed certificates with DNS authorization across multiple
	// projects.
	DnsAuthorization_PER_PROJECT_RECORD DnsAuthorization_Type = 2
)

type GetCertificateIssuanceConfigRequest struct {

	// Required. A name of the certificate issuance config to describe. Must be in
	// the format `projects/*/locations/*/certificateIssuanceConfigs/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetCertificateMapEntryRequest struct {

	// Required. A name of the certificate map entry to describe. Must be in the
	// format `projects/*/locations/*/certificateMaps/*/certificateMapEntries/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetCertificateMapRequest struct {

	// Required. A name of the certificate map to describe. Must be in the format
	// `projects/*/locations/*/certificateMaps/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetCertificateRequest struct {

	// Required. A name of the certificate to describe. Must be in the format
	// `projects/*/locations/*/certificates/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetDnsAuthorizationRequest struct {

	// Required. A name of the dns authorization to describe. Must be in the
	// format `projects/*/locations/*/dnsAuthorizations/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type GetTrustConfigRequest struct {

	// Required. A name of the TrustConfig to describe. Must be in the format
	// `projects/*/locations/*/trustConfigs/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// contains filtered or unexported fields
}

type ListCertificateIssuanceConfigsRequest struct {

	// Required. The project and location from which the certificate should be
	// listed, specified in the format `projects/*/locations/*`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Maximum number of certificate configs to return per call.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// The value returned by the last `ListCertificateIssuanceConfigsResponse`.
	// Indicates that this is a continuation of a prior
	// `ListCertificateIssuanceConfigs` call, and that the system should return
	// the next page of data.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Filter expression to restrict the Certificates Configs returned.
	Filter string `protobuf:"bytes,4,opt,name=filter,proto3" json:"filter,omitempty"`
	// A list of Certificate Config field names used to specify the order of the
	// returned results. The default sorting order is ascending. To specify
	// descending order for a field, add a suffix `" desc"`.
	OrderBy string `protobuf:"bytes,5,opt,name=order_by,json=orderBy,proto3" json:"order_by,omitempty"`
	// contains filtered or unexported fields
}

type ListCertificateIssuanceConfigsResponse struct {

	// A list of certificate configs for the parent resource.
	CertificateIssuanceConfigs []*CertificateIssuanceConfig `protobuf:"bytes,1,rep,name=certificate_issuance_configs,json=certificateIssuanceConfigs,proto3" json:"certificate_issuance_configs,omitempty"`
	// If there might be more results than those appearing in this response, then
	// `next_page_token` is included. To get the next set of results, call this
	// method again using the value of `next_page_token` as `page_token`.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// Locations that could not be reached.
	Unreachable []string `protobuf:"bytes,3,rep,name=unreachable,proto3" json:"unreachable,omitempty"`
	// contains filtered or unexported fields
}

type ListCertificateMapEntriesRequest struct {

	// Required. The project, location and certificate map from which the
	// certificate map entries should be listed, specified in the format
	// `projects/*/locations/*/certificateMaps/*`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Maximum number of certificate map entries to return. The service may return
	// fewer than this value.
	// If unspecified, at most 50 certificate map entries will be returned.
	// The maximum value is 1000; values above 1000 will be coerced to 1000.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// The value returned by the last `ListCertificateMapEntriesResponse`.
	// Indicates that this is a continuation of a prior
	// `ListCertificateMapEntries` call, and that the system should return the
	// next page of data.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Filter expression to restrict the returned Certificate Map Entries.
	Filter string `protobuf:"bytes,4,opt,name=filter,proto3" json:"filter,omitempty"`
	// A list of Certificate Map Entry field names used to specify
	// the order of the returned results. The default sorting order is ascending.
	// To specify descending order for a field, add a suffix `" desc"`.
	OrderBy string `protobuf:"bytes,5,opt,name=order_by,json=orderBy,proto3" json:"order_by,omitempty"`
	// contains filtered or unexported fields
}

type ListCertificateMapEntriesResponse struct {

	// A list of certificate map entries for the parent resource.
	CertificateMapEntries []*CertificateMapEntry `protobuf:"bytes,1,rep,name=certificate_map_entries,json=certificateMapEntries,proto3" json:"certificate_map_entries,omitempty"`
	// If there might be more results than those appearing in this response, then
	// `next_page_token` is included. To get the next set of results, call this
	// method again using the value of `next_page_token` as `page_token`.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// Locations that could not be reached.
	Unreachable []string `protobuf:"bytes,3,rep,name=unreachable,proto3" json:"unreachable,omitempty"`
	// contains filtered or unexported fields
}

type ListCertificateMapsRequest struct {

	// Required. The project and location from which the certificate maps should
	// be listed, specified in the format `projects/*/locations/*`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Maximum number of certificate maps to return per call.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// The value returned by the last `ListCertificateMapsResponse`. Indicates
	// that this is a continuation of a prior `ListCertificateMaps` call, and that
	// the system should return the next page of data.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Filter expression to restrict the Certificates Maps returned.
	Filter string `protobuf:"bytes,4,opt,name=filter,proto3" json:"filter,omitempty"`
	// A list of Certificate Map field names used to specify the order of the
	// returned results. The default sorting order is ascending. To specify
	// descending order for a field, add a suffix `" desc"`.
	OrderBy string `protobuf:"bytes,5,opt,name=order_by,json=orderBy,proto3" json:"order_by,omitempty"`
	// contains filtered or unexported fields
}

type ListCertificateMapsResponse struct {

	// A list of certificate maps for the parent resource.
	CertificateMaps []*CertificateMap `protobuf:"bytes,1,rep,name=certificate_maps,json=certificateMaps,proto3" json:"certificate_maps,omitempty"`
	// If there might be more results than those appearing in this response, then
	// `next_page_token` is included. To get the next set of results, call this
	// method again using the value of `next_page_token` as `page_token`.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// Locations that could not be reached.
	Unreachable []string `protobuf:"bytes,3,rep,name=unreachable,proto3" json:"unreachable,omitempty"`
	// contains filtered or unexported fields
}

type ListCertificatesRequest struct {

	// Required. The project and location from which the certificate should be
	// listed, specified in the format `projects/*/locations/*`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Maximum number of certificates to return per call.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// The value returned by the last `ListCertificatesResponse`. Indicates that
	// this is a continuation of a prior `ListCertificates` call, and that the
	// system should return the next page of data.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Filter expression to restrict the Certificates returned.
	Filter string `protobuf:"bytes,4,opt,name=filter,proto3" json:"filter,omitempty"`
	// A list of Certificate field names used to specify the order of the returned
	// results. The default sorting order is ascending. To specify descending
	// order for a field, add a suffix `" desc"`.
	OrderBy string `protobuf:"bytes,5,opt,name=order_by,json=orderBy,proto3" json:"order_by,omitempty"`
	// contains filtered or unexported fields
}

type ListCertificatesResponse struct {

	// A list of certificates for the parent resource.
	Certificates []*Certificate `protobuf:"bytes,1,rep,name=certificates,proto3" json:"certificates,omitempty"`
	// If there might be more results than those appearing in this response, then
	// `next_page_token` is included. To get the next set of results, call this
	// method again using the value of `next_page_token` as `page_token`.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// A list of locations that could not be reached.
	Unreachable []string `protobuf:"bytes,3,rep,name=unreachable,proto3" json:"unreachable,omitempty"`
	// contains filtered or unexported fields
}

type ListDnsAuthorizationsRequest struct {

	// Required. The project and location from which the dns authorizations should
	// be listed, specified in the format `projects/*/locations/*`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Maximum number of dns authorizations to return per call.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// The value returned by the last `ListDnsAuthorizationsResponse`. Indicates
	// that this is a continuation of a prior `ListDnsAuthorizations` call, and
	// that the system should return the next page of data.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Filter expression to restrict the Dns Authorizations returned.
	Filter string `protobuf:"bytes,4,opt,name=filter,proto3" json:"filter,omitempty"`
	// A list of Dns Authorization field names used to specify the order of the
	// returned results. The default sorting order is ascending. To specify
	// descending order for a field, add a suffix `" desc"`.
	OrderBy string `protobuf:"bytes,5,opt,name=order_by,json=orderBy,proto3" json:"order_by,omitempty"`
	// contains filtered or unexported fields
}

type ListDnsAuthorizationsResponse struct {

	// A list of dns authorizations for the parent resource.
	DnsAuthorizations []*DnsAuthorization `protobuf:"bytes,1,rep,name=dns_authorizations,json=dnsAuthorizations,proto3" json:"dns_authorizations,omitempty"`
	// If there might be more results than those appearing in this response, then
	// `next_page_token` is included. To get the next set of results, call this
	// method again using the value of `next_page_token` as `page_token`.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// Locations that could not be reached.
	Unreachable []string `protobuf:"bytes,3,rep,name=unreachable,proto3" json:"unreachable,omitempty"`
	// contains filtered or unexported fields
}

type ListTrustConfigsRequest struct {

	// Required. The project and location from which the TrustConfigs should be
	// listed, specified in the format `projects/*/locations/*`.
	Parent string `protobuf:"bytes,1,opt,name=parent,proto3" json:"parent,omitempty"`
	// Maximum number of TrustConfigs to return per call.
	PageSize int32 `protobuf:"varint,2,opt,name=page_size,json=pageSize,proto3" json:"page_size,omitempty"`
	// The value returned by the last `ListTrustConfigsResponse`. Indicates
	// that this is a continuation of a prior `ListTrustConfigs` call, and that
	// the system should return the next page of data.
	PageToken string `protobuf:"bytes,3,opt,name=page_token,json=pageToken,proto3" json:"page_token,omitempty"`
	// Filter expression to restrict the TrustConfigs returned.
	Filter string `protobuf:"bytes,4,opt,name=filter,proto3" json:"filter,omitempty"`
	// A list of TrustConfig field names used to specify the order of the
	// returned results. The default sorting order is ascending. To specify
	// descending order for a field, add a suffix `" desc"`.
	OrderBy string `protobuf:"bytes,5,opt,name=order_by,json=orderBy,proto3" json:"order_by,omitempty"`
	// contains filtered or unexported fields
}

type ListTrustConfigsResponse struct {

	// A list of TrustConfigs for the parent resource.
	TrustConfigs []*TrustConfig `protobuf:"bytes,1,rep,name=trust_configs,json=trustConfigs,proto3" json:"trust_configs,omitempty"`
	// If there might be more results than those appearing in this response, then
	// `next_page_token` is included. To get the next set of results, call this
	// method again using the value of `next_page_token` as `page_token`.
	NextPageToken string `protobuf:"bytes,2,opt,name=next_page_token,json=nextPageToken,proto3" json:"next_page_token,omitempty"`
	// Locations that could not be reached.
	Unreachable []string `protobuf:"bytes,3,rep,name=unreachable,proto3" json:"unreachable,omitempty"`
	// contains filtered or unexported fields
}

type OperationMetadata struct {

	// The time the operation was created.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,1,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// The time the operation finished running.
	EndTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=end_time,json=endTime,proto3" json:"end_time,omitempty"`
	// Server-defined resource path for the target of the operation.
	Target string `protobuf:"bytes,3,opt,name=target,proto3" json:"target,omitempty"`
	// Name of the verb executed by the operation.
	Verb string `protobuf:"bytes,4,opt,name=verb,proto3" json:"verb,omitempty"`
	// Human-readable status of the operation, if any.
	StatusMessage string `protobuf:"bytes,5,opt,name=status_message,json=statusMessage,proto3" json:"status_message,omitempty"`
	// Identifies whether the user has requested cancellation
	// of the operation. Operations that have successfully been cancelled
	// have [Operation.error][] value with a
	// [google.rpc.Status.code][google.rpc.Status.code] of 1, corresponding to
	// `Code.CANCELLED`.
	RequestedCancellation bool `protobuf:"varint,6,opt,name=requested_cancellation,json=requestedCancellation,proto3" json:"requested_cancellation,omitempty"`
	// API version used to start the operation.
	ApiVersion string `protobuf:"bytes,7,opt,name=api_version,json=apiVersion,proto3" json:"api_version,omitempty"`
	// contains filtered or unexported fields
}

type ServingState int32

const (
	// The status is undefined.
	ServingState_SERVING_STATE_UNSPECIFIED ServingState = 0
	// The configuration is serving.
	ServingState_ACTIVE ServingState = 1
	// Update is in progress. Some frontends may serve this configuration.
	ServingState_PENDING ServingState = 2
)

type TrustConfig struct {

	// A user-defined name of the trust config. TrustConfig names must be
	// unique globally and match pattern
	// `projects/*/locations/*/trustConfigs/*`.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// Output only. The creation timestamp of a TrustConfig.
	CreateTime *timestamppb.Timestamp `protobuf:"bytes,2,opt,name=create_time,json=createTime,proto3" json:"create_time,omitempty"`
	// Output only. The last update timestamp of a TrustConfig.
	UpdateTime *timestamppb.Timestamp `protobuf:"bytes,3,opt,name=update_time,json=updateTime,proto3" json:"update_time,omitempty"`
	// Set of labels associated with a TrustConfig.
	Labels map[string]string `protobuf:"bytes,4,rep,name=labels,proto3" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
	// One or more paragraphs of text description of a TrustConfig.
	Description string `protobuf:"bytes,5,opt,name=description,proto3" json:"description,omitempty"`
	// This checksum is computed by the server based on the value of other
	// fields, and may be sent on update and delete requests to ensure the
	// client has an up-to-date value before proceeding.
	Etag string `protobuf:"bytes,6,opt,name=etag,proto3" json:"etag,omitempty"`
	// Set of trust stores to perform validation against.
	//
	// This field is supported when TrustConfig is configured with Load Balancers,
	// currently not supported for SPIFFE certificate validation.
	//
	// Only one TrustStore specified is currently allowed.
	TrustStores []*TrustConfig_TrustStore `protobuf:"bytes,8,rep,name=trust_stores,json=trustStores,proto3" json:"trust_stores,omitempty"`
	// contains filtered or unexported fields
}

type TrustConfig_IntermediateCA struct {

	// Types that are assignable to Kind:
	//
	//	*TrustConfig_IntermediateCA_PemCertificate
	Kind isTrustConfig_IntermediateCA_Kind `protobuf_oneof:"kind"`
	// contains filtered or unexported fields
}

type TrustConfig_IntermediateCA_PemCertificate struct {
	// PEM intermediate certificate used for building up paths
	// for validation.
	//
	// Each certificate provided in PEM format may occupy up to 5kB.
	PemCertificate string `protobuf:"bytes,1,opt,name=pem_certificate,json=pemCertificate,proto3,oneof"`
}

type TrustConfig_TrustAnchor struct {

	// Types that are assignable to Kind:
	//
	//	*TrustConfig_TrustAnchor_PemCertificate
	Kind isTrustConfig_TrustAnchor_Kind `protobuf_oneof:"kind"`
	// contains filtered or unexported fields
}

type TrustConfig_TrustAnchor_PemCertificate struct {
	// PEM root certificate of the PKI used for validation.
	//
	// Each certificate provided in PEM format may occupy up to 5kB.
	PemCertificate string `protobuf:"bytes,1,opt,name=pem_certificate,json=pemCertificate,proto3,oneof"`
}

type TrustConfig_TrustStore struct {

	// List of Trust Anchors to be used while performing validation
	// against a given TrustStore.
	TrustAnchors []*TrustConfig_TrustAnchor `protobuf:"bytes,1,rep,name=trust_anchors,json=trustAnchors,proto3" json:"trust_anchors,omitempty"`
	// Set of intermediate CA certificates used for the path building
	// phase of chain validation.
	//
	// The field is currently not supported if TrustConfig is used for the
	// workload certificate feature.
	IntermediateCas []*TrustConfig_IntermediateCA `protobuf:"bytes,2,rep,name=intermediate_cas,json=intermediateCas,proto3" json:"intermediate_cas,omitempty"`
	// contains filtered or unexported fields
}

type UnimplementedCertificateManagerServer struct {
}

type UpdateCertificateMapEntryRequest struct {

	// Required. A definition of the certificate map entry to create map entry.
	CertificateMapEntry *CertificateMapEntry `protobuf:"bytes,1,opt,name=certificate_map_entry,json=certificateMapEntry,proto3" json:"certificate_map_entry,omitempty"`
	// Required. The update mask applies to the resource. For the `FieldMask`
	// definition, see
	// https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask.
	UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,2,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	// contains filtered or unexported fields
}

type UpdateCertificateMapRequest struct {

	// Required. A definition of the certificate map to update.
	CertificateMap *CertificateMap `protobuf:"bytes,1,opt,name=certificate_map,json=certificateMap,proto3" json:"certificate_map,omitempty"`
	// Required. The update mask applies to the resource. For the `FieldMask`
	// definition, see
	// https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask.
	UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,2,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	// contains filtered or unexported fields
}

type UpdateCertificateRequest struct {

	// Required. A definition of the certificate to update.
	Certificate *Certificate `protobuf:"bytes,1,opt,name=certificate,proto3" json:"certificate,omitempty"`
	// Required. The update mask applies to the resource. For the `FieldMask`
	// definition, see
	// https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask.
	UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,2,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	// contains filtered or unexported fields
}

type UpdateDnsAuthorizationRequest struct {

	// Required. A definition of the dns authorization to update.
	DnsAuthorization *DnsAuthorization `protobuf:"bytes,1,opt,name=dns_authorization,json=dnsAuthorization,proto3" json:"dns_authorization,omitempty"`
	// Required. The update mask applies to the resource. For the `FieldMask`
	// definition, see
	// https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask.
	UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,2,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	// contains filtered or unexported fields
}

type UpdateTrustConfigRequest struct {

	// Required. A definition of the TrustConfig to update.
	TrustConfig *TrustConfig `protobuf:"bytes,1,opt,name=trust_config,json=trustConfig,proto3" json:"trust_config,omitempty"`
	// Required. The update mask applies to the resource. For the `FieldMask`
	// definition, see
	// https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask.
	UpdateMask *fieldmaskpb.FieldMask `protobuf:"bytes,2,opt,name=update_mask,json=updateMask,proto3" json:"update_mask,omitempty"`
	// contains filtered or unexported fields
}