var File_google_api_servicecontrol_v2_service_controller_proto protoreflect.FileDescriptor

type CheckRequest struct {

	// The service name as specified in its service configuration. For example,
	// `"pubsub.googleapis.com"`.
	//
	// See
	// [google.api.Service](https://cloud.google.com/service-management/reference/rpc/google.api#google.api.Service)
	// for the definition of a service name.
	ServiceName string `protobuf:"bytes,1,opt,name=service_name,json=serviceName,proto3" json:"service_name,omitempty"`
	// Specifies the version of the service configuration that should be used to
	// process the request. Must not be empty. Set this field to 'latest' to
	// specify using the latest configuration.
	ServiceConfigId string `protobuf:"bytes,2,opt,name=service_config_id,json=serviceConfigId,proto3" json:"service_config_id,omitempty"`
	// Describes attributes about the operation being executed by the service.
	Attributes *attribute_context.AttributeContext `protobuf:"bytes,3,opt,name=attributes,proto3" json:"attributes,omitempty"`
	// Describes the resources and the policies applied to each resource.
	Resources []*ResourceInfo `protobuf:"bytes,4,rep,name=resources,proto3" json:"resources,omitempty"`
	// Optional. Contains a comma-separated list of flags.
	Flags string `protobuf:"bytes,5,opt,name=flags,proto3" json:"flags,omitempty"`
	// contains filtered or unexported fields
}

type CheckResponse struct {

	// Operation is allowed when this field is not set. Any non-'OK' status
	// indicates a denial; [google.rpc.Status.details][google.rpc.Status.details]
	// would contain additional details about the denial.
	Status *status.Status `protobuf:"bytes,1,opt,name=status,proto3" json:"status,omitempty"`
	// Returns a set of request contexts generated from the `CheckRequest`.
	Headers map[string]string `protobuf:"bytes,2,rep,name=headers,proto3" json:"headers,omitempty" protobuf_key:"bytes,1,opt,name=key,proto3" protobuf_val:"bytes,2,opt,name=value,proto3"`
	// contains filtered or unexported fields
}

type ReportRequest struct {

	// The service name as specified in its service configuration. For example,
	// `"pubsub.googleapis.com"`.
	//
	// See
	// [google.api.Service](https://cloud.google.com/service-management/reference/rpc/google.api#google.api.Service)
	// for the definition of a service name.
	ServiceName string `protobuf:"bytes,1,opt,name=service_name,json=serviceName,proto3" json:"service_name,omitempty"`
	// Specifies the version of the service configuration that should be used to
	// process the request. Must not be empty. Set this field to 'latest' to
	// specify using the latest configuration.
	ServiceConfigId string `protobuf:"bytes,2,opt,name=service_config_id,json=serviceConfigId,proto3" json:"service_config_id,omitempty"`
	// Describes the list of operations to be reported. Each operation is
	// represented as an AttributeContext, and contains all attributes around an
	// API access.
	Operations []*attribute_context.AttributeContext `protobuf:"bytes,3,rep,name=operations,proto3" json:"operations,omitempty"`
	// contains filtered or unexported fields
}

type ReportResponse struct {
	// contains filtered or unexported fields
}

type ResourceInfo struct {

	// The name of the resource referenced in the request.
	Name string `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	// The resource type in the format of "{service}/{kind}".
	Type string `protobuf:"bytes,2,opt,name=type,proto3" json:"type,omitempty"`
	// The resource permission needed for this request.
	// The format must be "{service}/{plural}.{verb}".
	Permission string `protobuf:"bytes,3,opt,name=permission,proto3" json:"permission,omitempty"`
	// Optional. The identifier of the container of this resource. For Google
	// Cloud APIs, the resource container must be one of the following formats:
	//     - `projects/<project-id or project-number>`
	//     - `folders/<folder-id>`
	//     - `organizations/<organization-id>`
	// For the policy enforcement on the container level (VPCSC and Location
	// Policy check), this field takes precedence on the container extracted from
	// name when presents.
	Container string `protobuf:"bytes,4,opt,name=container,proto3" json:"container,omitempty"`
	// Optional. The location of the resource. The value must be a valid zone,
	// region or multiregion. For example: "europe-west4" or
	// "northamerica-northeast1-a"
	Location string `protobuf:"bytes,5,opt,name=location,proto3" json:"location,omitempty"`
	// contains filtered or unexported fields
}

type ServiceControllerClient interface {
	// Private Preview. This feature is only available for approved services.
	//
	// This method provides admission control for services that are integrated
	// with [Service
	// Infrastructure](https://cloud.google.com/service-infrastructure). It checks
	// whether an operation should be allowed based on the service configuration
	// and relevant policies. It must be called before the operation is executed.
	// For more information, see
	// [Admission
	// Control](https://cloud.google.com/service-infrastructure/docs/admission-control).
	//
	// NOTE: The admission control has an expected policy propagation delay of
	// 60s. The caller **must** not depend on the most recent policy changes.
	//
	// NOTE: The admission control has a hard limit of 1 referenced resources
	// per call. If an operation refers to more than 1 resources, the caller
	// must call the Check method multiple times.
	//
	// This method requires the `servicemanagement.services.check` permission
	// on the specified service. For more information, see
	// [Service Control API Access
	// Control](https://cloud.google.com/service-infrastructure/docs/service-control/access-control).
	Check(ctx context.Context, in *CheckRequest, opts ...grpc.CallOption) (*CheckResponse, error)
	// Private Preview. This feature is only available for approved services.
	//
	// This method provides telemetry reporting for services that are integrated
	// with [Service
	// Infrastructure](https://cloud.google.com/service-infrastructure). It
	// reports a list of operations that have occurred on a service. It must be
	// called after the operations have been executed. For more information, see
	// [Telemetry
	// Reporting](https://cloud.google.com/service-infrastructure/docs/telemetry-reporting).
	//
	// NOTE: The telemetry reporting has a hard limit of 1000 operations and 1MB
	// per Report call. It is recommended to have no more than 100 operations per
	// call.
	//
	// This method requires the `servicemanagement.services.report` permission
	// on the specified service. For more information, see
	// [Service Control API Access
	// Control](https://cloud.google.com/service-infrastructure/docs/service-control/access-control).
	Report(ctx context.Context, in *ReportRequest, opts ...grpc.CallOption) (*ReportResponse, error)
}

type ServiceControllerServer interface {
	// Private Preview. This feature is only available for approved services.
	//
	// This method provides admission control for services that are integrated
	// with [Service
	// Infrastructure](https://cloud.google.com/service-infrastructure). It checks
	// whether an operation should be allowed based on the service configuration
	// and relevant policies. It must be called before the operation is executed.
	// For more information, see
	// [Admission
	// Control](https://cloud.google.com/service-infrastructure/docs/admission-control).
	//
	// NOTE: The admission control has an expected policy propagation delay of
	// 60s. The caller **must** not depend on the most recent policy changes.
	//
	// NOTE: The admission control has a hard limit of 1 referenced resources
	// per call. If an operation refers to more than 1 resources, the caller
	// must call the Check method multiple times.
	//
	// This method requires the `servicemanagement.services.check` permission
	// on the specified service. For more information, see
	// [Service Control API Access
	// Control](https://cloud.google.com/service-infrastructure/docs/service-control/access-control).
	Check(context.Context, *CheckRequest) (*CheckResponse, error)
	// Private Preview. This feature is only available for approved services.
	//
	// This method provides telemetry reporting for services that are integrated
	// with [Service
	// Infrastructure](https://cloud.google.com/service-infrastructure). It
	// reports a list of operations that have occurred on a service. It must be
	// called after the operations have been executed. For more information, see
	// [Telemetry
	// Reporting](https://cloud.google.com/service-infrastructure/docs/telemetry-reporting).
	//
	// NOTE: The telemetry reporting has a hard limit of 1000 operations and 1MB
	// per Report call. It is recommended to have no more than 100 operations per
	// call.
	//
	// This method requires the `servicemanagement.services.report` permission
	// on the specified service. For more information, see
	// [Service Control API Access
	// Control](https://cloud.google.com/service-infrastructure/docs/service-control/access-control).
	Report(context.Context, *ReportRequest) (*ReportResponse, error)
}

type UnimplementedServiceControllerServer struct {
}