package cerbos.engine.v1

Get desktop application:
View/edit binary Protocol Buffers messages

Used in: CheckInput, PlanResourcesInput, Request, policy.v1.TestFixture.AuxData, policy.v1.TestSuite

• map<string, google.protobuf.Value> jwt = 1

Used in: audit.v1.DecisionLogEntry, audit.v1.DecisionLogEntry.CheckResources, policy.v1.Test

• string request_id = 1

• optional Resource resource = 2

• optional Principal principal = 3

• repeated string actions = 4

• optional AuxData aux_data = 5

Used in: audit.v1.DecisionLogEntry, audit.v1.DecisionLogEntry.CheckResources

• string request_id = 1

• string resource_id = 2

• map<string, CheckOutput.ActionEffect> actions = 3

• repeated string effective_derived_roles = 4

• repeated schema.v1.ValidationError validation_errors = 5

• repeated OutputEntry outputs = 6

Used in: CheckOutput

• effect.v1.Effect effect = 1

• string policy = 2

• string scope = 3

Used in: CheckOutput, policy.v1.TestResults.Success, policy.v1.TestTable.OutputExpectations, response.v1.CheckResourcesResponse.ResultEntry, response.v1.PlaygroundEvaluateResponse.EvalResultList

• string src = 1

• optional google.protobuf.Value val = 2

• string action = 3

• string error = 4

• optional PlanResourcesAst.Node filter_ast = 1

Used in: Node

• LogicalOperation.Operator operator = 1

• repeated Node nodes = 2

Used in: LogicalOperation

• OPERATOR_UNSPECIFIED = 0

• OPERATOR_AND = 1

• OPERATOR_OR = 2

• OPERATOR_NOT = 3

Used in: PlanResourcesAst, LogicalOperation

• oneof node

  • LogicalOperation logical_operation = 1

  • google.api.expr.v1alpha1.CheckedExpr expression = 2

Used in: PlanResourcesOutput, response.v1.PlanResourcesResponse

• PlanResourcesFilter.Kind kind = 1

• optional PlanResourcesFilter.Expression.Operand condition = 2

Used in: Expression.Operand

• string operator = 1

• repeated Expression.Operand operands = 2

Used in: PlanResourcesFilter, Expression

• oneof node

  • google.protobuf.Value value = 1

  • Expression expression = 2

  • string variable = 3

Used in: PlanResourcesFilter

• KIND_UNSPECIFIED = 0

• KIND_ALWAYS_ALLOWED = 1

• KIND_ALWAYS_DENIED = 2

• KIND_CONDITIONAL = 3

Used in: audit.v1.DecisionLogEntry.PlanResources

• string request_id = 1

• string action = 2

• repeated string actions = 7

• optional Principal principal = 3

• optional PlanResourcesInput.Resource resource = 4

• optional AuxData aux_data = 5

• bool include_meta = 6

Used in: PlanResourcesInput, request.v1.PlanResourcesRequest

• string kind = 1

• map<string, google.protobuf.Value> attr = 2

• string policy_version = 3

• string scope = 4

Used in: audit.v1.DecisionLogEntry.PlanResources

• string request_id = 1

• string action = 2

• string kind = 3

• string policy_version = 4

• string scope = 5

• optional PlanResourcesFilter filter = 6

• string filter_debug = 7

• repeated schema.v1.ValidationError validation_errors = 8

• repeated string actions = 9

• map<string, string> matched_scopes = 10

Used in: CheckInput, PlanResourcesInput, policy.v1.TestFixture.Principals, policy.v1.TestSuite, request.v1.CheckResourceBatchRequest, request.v1.CheckResourceSetRequest, request.v1.CheckResourcesRequest, request.v1.PlanResourcesRequest, request.v1.PlaygroundEvaluateRequest

• string id = 1

• string policy_version = 2

• repeated string roles = 3

• map<string, google.protobuf.Value> attr = 4

• string scope = 5

Data from the request, provided to expressions as the top-level `request` variable.

• optional Request.Principal principal = 1

• optional Request.Resource resource = 2

• optional AuxData aux_data = 3

Used in: Request

• string id = 1

• repeated string roles = 2

• map<string, google.protobuf.Value> attr = 3

• string policy_version = 4

• string scope = 5

Used in: Request

• string kind = 1

• string id = 2

• map<string, google.protobuf.Value> attr = 3

• string policy_version = 4

• string scope = 5

Used in: CheckInput, policy.v1.TestFixture.Resources, policy.v1.TestSuite, request.v1.CheckResourceBatchRequest.BatchEntry, request.v1.CheckResourcesRequest.ResourceEntry, request.v1.PlaygroundEvaluateRequest

• string kind = 1

• string policy_version = 2

• string id = 3

• map<string, google.protobuf.Value> attr = 4

• string scope = 5

Data from the runtime, provided to expressions as the top-level `runtime` variable.

• repeated string effective_derived_roles = 1

Used in: policy.v1.TestResults.Details

• repeated Trace.Component components = 1

• optional Trace.Event event = 2

Used in: Trace, TraceBatch

• Component.Kind kind = 1

• oneof details

  • string action = 2

  • string derived_role = 3

  • string expr = 4

  • uint32 index = 5

  • string policy = 6

  • string resource = 7

  • string rule = 8

  • string scope = 9

  • Component.Variable variable = 10

  • string output = 11

  • string role_policy_scope = 12

  • string role = 13

Used in: Component

• KIND_UNSPECIFIED = 0

• KIND_ACTION = 1

• KIND_CONDITION_ALL = 2

• KIND_CONDITION_ANY = 3

• KIND_CONDITION_NONE = 4

• KIND_CONDITION = 5

• KIND_DERIVED_ROLE = 6

• KIND_EXPR = 7

• KIND_POLICY = 8

• KIND_RESOURCE = 9

• KIND_RULE = 10

• KIND_SCOPE = 11

• KIND_VARIABLE = 12

• KIND_VARIABLES = 13

• KIND_OUTPUT = 14

• KIND_ROLE_POLICY_SCOPE = 15

• KIND_ROLE = 16

Used in: Component

• string name = 1

• string expr = 2

Used in: Trace, TraceEntry

• Event.Status status = 1

• effect.v1.Effect effect = 2

• string error = 3

• string message = 4

• optional google.protobuf.Value result = 5

Used in: Event

• STATUS_UNSPECIFIED = 0

• STATUS_ACTIVATED = 1

• STATUS_SKIPPED = 2

Used in: policy.v1.TestResults.Details

• repeated Trace.Component definitions = 1

• repeated TraceEntry entries = 2

Used in: TraceBatch

• repeated uint32 component_indices = 1

• optional Trace.Event event = 2