# Generated by the protocol buffer compiler.  DO NOT EDIT!
# source: google/identity/accesscontextmanager/v1/service_perimeter.proto

require 'google/protobuf'

require 'google/api/resource_pb'
require 'google/protobuf/timestamp_pb'
require 'google/api/annotations_pb'
Google::Protobuf::DescriptorPool.generated_pool.build do
  add_file("google/identity/accesscontextmanager/v1/service_perimeter.proto", :syntax => :proto3) do
    add_message "google.identity.accesscontextmanager.v1.ServicePerimeter" do
      optional :name, :string, 1
      optional :title, :string, 2
      optional :description, :string, 3
      optional :create_time, :message, 4, "google.protobuf.Timestamp"
      optional :update_time, :message, 5, "google.protobuf.Timestamp"
      optional :perimeter_type, :enum, 6, "google.identity.accesscontextmanager.v1.ServicePerimeter.PerimeterType"
      optional :status, :message, 7, "google.identity.accesscontextmanager.v1.ServicePerimeterConfig"
      optional :spec, :message, 8, "google.identity.accesscontextmanager.v1.ServicePerimeterConfig"
      optional :use_explicit_dry_run_spec, :bool, 9
    end
    add_enum "google.identity.accesscontextmanager.v1.ServicePerimeter.PerimeterType" do
      value :PERIMETER_TYPE_REGULAR, 0
      value :PERIMETER_TYPE_BRIDGE, 1
    end
    add_message "google.identity.accesscontextmanager.v1.ServicePerimeterConfig" do
      repeated :resources, :string, 1
      repeated :access_levels, :string, 2
      repeated :restricted_services, :string, 4
      optional :vpc_accessible_services, :message, 10, "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.VpcAccessibleServices"
      repeated :ingress_policies, :message, 8, "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy"
      repeated :egress_policies, :message, 9, "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy"
    end
    add_message "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.VpcAccessibleServices" do
      optional :enable_restriction, :bool, 1
      repeated :allowed_services, :string, 2
    end
    add_message "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.MethodSelector" do
      oneof :kind do
        optional :method, :string, 1
        optional :permission, :string, 2
      end
    end
    add_message "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation" do
      optional :service_name, :string, 1
      repeated :method_selectors, :message, 2, "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.MethodSelector"
    end
    add_message "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressSource" do
      oneof :source do
        optional :access_level, :string, 1
        optional :resource, :string, 2
      end
    end
    add_message "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressTo" do
      repeated :resources, :string, 1
      repeated :operations, :message, 2, "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation"
    end
    add_message "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressFrom" do
      repeated :sources, :message, 1, "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressSource"
      repeated :identities, :string, 2
      optional :identity_type, :enum, 3, "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IdentityType"
    end
    add_message "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressTo" do
      repeated :operations, :message, 1, "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation"
      repeated :resources, :string, 2
    end
    add_message "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy" do
      optional :ingress_from, :message, 1, "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressFrom"
      optional :ingress_to, :message, 2, "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressTo"
    end
    add_message "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy" do
      optional :egress_from, :message, 1, "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressFrom"
      optional :egress_to, :message, 2, "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressTo"
    end
    add_message "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressFrom" do
      repeated :identities, :string, 1
      optional :identity_type, :enum, 2, "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IdentityType"
    end
    add_enum "google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IdentityType" do
      value :IDENTITY_TYPE_UNSPECIFIED, 0
      value :ANY_IDENTITY, 1
      value :ANY_USER_ACCOUNT, 2
      value :ANY_SERVICE_ACCOUNT, 3
    end
  end
end

module Google
  module Identity
    module AccessContextManager
      module V1
        ServicePerimeter = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.identity.accesscontextmanager.v1.ServicePerimeter").msgclass
        ServicePerimeter::PerimeterType = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.identity.accesscontextmanager.v1.ServicePerimeter.PerimeterType").enummodule
        ServicePerimeterConfig = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.identity.accesscontextmanager.v1.ServicePerimeterConfig").msgclass
        ServicePerimeterConfig::VpcAccessibleServices = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.identity.accesscontextmanager.v1.ServicePerimeterConfig.VpcAccessibleServices").msgclass
        ServicePerimeterConfig::MethodSelector = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.identity.accesscontextmanager.v1.ServicePerimeterConfig.MethodSelector").msgclass
        ServicePerimeterConfig::ApiOperation = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.identity.accesscontextmanager.v1.ServicePerimeterConfig.ApiOperation").msgclass
        ServicePerimeterConfig::IngressSource = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressSource").msgclass
        ServicePerimeterConfig::EgressTo = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressTo").msgclass
        ServicePerimeterConfig::IngressFrom = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressFrom").msgclass
        ServicePerimeterConfig::IngressTo = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressTo").msgclass
        ServicePerimeterConfig::IngressPolicy = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IngressPolicy").msgclass
        ServicePerimeterConfig::EgressPolicy = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressPolicy").msgclass
        ServicePerimeterConfig::EgressFrom = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.identity.accesscontextmanager.v1.ServicePerimeterConfig.EgressFrom").msgclass
        ServicePerimeterConfig::IdentityType = ::Google::Protobuf::DescriptorPool.generated_pool.lookup("google.identity.accesscontextmanager.v1.ServicePerimeterConfig.IdentityType").enummodule
      end
    end
  end
end