mirror of
https://github.com/GoogleContainerTools/kaniko
synced 2026-10-04 13:11:45 +02:00
Joe Kimmel
906cc96b59
* somehow now the only thing that doesnt work is devices.Device Signed-off-by: Joe Kimmel <jkimmel@vmware.com> * this gets rid of all the compiler errors in the vendored code Signed-off-by: Joe Kimmel <jkimmel@vmware.com> * fixed some things but a bunch of tests and maybe some compiler steps are still failing Signed-off-by: Joe Kimmel <jkimmel@vmware.com> * all the things i figured out how to fix so far Signed-off-by: Joe Kimmel <jkimmel@vmware.com> * guess i had to redo go mods after rebasing again Signed-off-by: Joe Kimmel <jkimmel@vmware.com> * update docker constants to be SHOUTY CASE now Signed-off-by: Joe Kimmel <jkimmel@vmware.com> * include DestPath in resolveEnv Signed-off-by: Joe Kimmel <jkimmel@vmware.com> * fix one mistake in Docker lib upgrade and some typos/deprecations in the file Signed-off-by: Joe Kimmel <jkimmel@vmware.com> * last changes (hopefully) to update to new docker libs Signed-off-by: Joe Kimmel <jkimmel@vmware.com> --------- Signed-off-by: Joe Kimmel <jkimmel@vmware.com>
73 lines
2.1 KiB
Protocol Buffer
73 lines
2.1 KiB
Protocol Buffer
syntax = "proto3";
|
|
|
|
package docker.swarmkit.v1;
|
|
|
|
import "github.com/docker/swarmkit/api/types.proto";
|
|
import "github.com/docker/swarmkit/api/specs.proto";
|
|
import "gogoproto/gogo.proto";
|
|
import "github.com/docker/swarmkit/protobuf/plugin/plugin.proto";
|
|
|
|
// CA defines the RPC methods for requesting certificates from a CA.
|
|
|
|
service CA {
|
|
rpc GetRootCACertificate(GetRootCACertificateRequest) returns (GetRootCACertificateResponse) {
|
|
option (docker.protobuf.plugin.tls_authorization) = { insecure: true };
|
|
};
|
|
// GetUnlockKey returns the current unlock key for the cluster for the role of the client
|
|
// asking.
|
|
rpc GetUnlockKey(GetUnlockKeyRequest) returns (GetUnlockKeyResponse) {
|
|
option (docker.protobuf.plugin.tls_authorization) = { roles: ["swarm-manager"] };
|
|
};
|
|
}
|
|
|
|
service NodeCA {
|
|
rpc IssueNodeCertificate(IssueNodeCertificateRequest) returns (IssueNodeCertificateResponse) {
|
|
option (docker.protobuf.plugin.tls_authorization) = { insecure: true };
|
|
};
|
|
rpc NodeCertificateStatus(NodeCertificateStatusRequest) returns (NodeCertificateStatusResponse) {
|
|
option (docker.protobuf.plugin.tls_authorization) = { insecure: true };
|
|
};
|
|
}
|
|
|
|
message NodeCertificateStatusRequest {
|
|
string node_id = 1;
|
|
}
|
|
|
|
message NodeCertificateStatusResponse {
|
|
IssuanceStatus status = 1;
|
|
Certificate certificate = 2;
|
|
}
|
|
|
|
message IssueNodeCertificateRequest {
|
|
// DEPRECATED: Role is now selected based on which secret is matched.
|
|
NodeRole role = 1 [deprecated=true];
|
|
|
|
// CSR is the certificate signing request.
|
|
bytes csr = 2 [(gogoproto.customname) = "CSR"];
|
|
|
|
// Token represents a user-provided string that is necessary for new
|
|
// nodes to join the cluster
|
|
string token = 3;
|
|
|
|
// Availability allows a user to control the current scheduling status of a node
|
|
NodeSpec.Availability availability = 4;
|
|
}
|
|
|
|
message IssueNodeCertificateResponse {
|
|
string node_id = 1;
|
|
NodeSpec.Membership node_membership = 2;
|
|
}
|
|
|
|
message GetRootCACertificateRequest {}
|
|
|
|
message GetRootCACertificateResponse {
|
|
bytes certificate = 1;
|
|
}
|
|
|
|
message GetUnlockKeyRequest {}
|
|
|
|
message GetUnlockKeyResponse {
|
|
bytes unlock_key = 1;
|
|
Version version = 2 [(gogoproto.nullable) = false];
|
|
}
|