package mondoo.mql.upstream.v1

Get desktop application:
View/edit binary Protocol Buffers messages

• rpc HealthCheck (AgentInfo, AgentCheckinResponse)

  upstream.proto:49

  Health Check for Managed Agents

  message AgentCheckinResponse

  upstream.proto:60

  (message has no fields)

• rpc PingPong (Ping, Pong)

  upstream.proto:46

  Service Account Credential Test Endpoint

  message Ping

  upstream.proto:52

  (message has no fields)

  message Pong

  upstream.proto:56

  (message has no fields)

• rpc RegisterAgent (AgentRegistrationRequest, AgentRegistrationConfirmation)

  upstream.proto:39

  RegisterAgent registers a new managed agent

  message AgentRegistrationRequest

  upstream.proto:64

  • string token = 1

  • string name = 2

  • optional AgentInfo agent_info = 3

  message AgentRegistrationConfirmation

  upstream.proto:83

  • string agent_mrn = 1

  • optional ServiceAccountCredentials credential = 2

• rpc UnRegisterAgent (Mrn, Confirmation)

  upstream.proto:43

  UnRegister removes the managed agent from management

  message Mrn

  upstream.proto:88

  • string mrn = 1

  message Confirmation

  upstream.proto:92

  • string mrn = 1

• rpc ExchangeExternalToken (ExchangeExternalTokenRequest, ExchangeExternalTokenResponse)

  upstream.proto:98

  message ExchangeExternalTokenRequest

  upstream.proto:131

  • string issuer_uri = 1

    Issuer URI of the external identity provider

  • string audience = 2

    Audience for the service account

  • string jwt_token = 3

    Token provided by the external identity provider to exchange

  • string response_type = 4

    Optional. When set to "TOKEN", the server returns a short-lived bearer token inside base64_credential instead of service-account credentials.

  message ExchangeExternalTokenResponse

  upstream.proto:143

  • string base64_credential = 1

    Base64 encoded service account credential

• rpc ExchangeSSH (ExchangeSSHKeyRequest, ExchangeSSHKeyResponse)

  upstream.proto:97

  message ExchangeSSHKeyRequest

  upstream.proto:102

  • optional Claims claims = 1

  • repeated SshSignature signatures = 2

  message ExchangeSSHKeyResponse

  upstream.proto:107

  • string mrn = 1

  • string parent_mrn = 2

  • string private_key = 3

  • string certificate = 4

  • string api_endpoint = 5

Used as request type in: AgentManager.HealthCheck

Used as field type in: AgentRegistrationRequest

• string mrn = 1

• string version = 2

• string build = 3

• string platform_name = 4

• string platform_release = 5

• string platform_arch = 6

• string platform_ip = 7

• string platform_hostname = 8

• map<string, string> labels = 18

• string platform_id = 20

Claims follow https://datatracker.ietf.org/doc/html/rfc8693#section-2.1

Used in: ExchangeSSHKeyRequest

• string subject = 1

• string exp = 2

  NumericDate as defined in RFC 7519, which uses RFC 3339

• string iat = 3

  NumericDate as defined in RFC 7519, which uses RFC 3339

• string resource = 4

ServiceAccountCredentials are used to authenticate with Mondoo Platform

Used in: cnquery.providers.v1.InventorySpec, AgentRegistrationConfirmation, UpstreamConfig

• string mrn = 1

  MRN of the service account

• string parent_mrn = 2

  Deprecated: use scope_mrn instead

• string private_key = 3

  PEM-encoded private key

• string certificate = 4

  PEM-encoded certificate

• string api_endpoint = 5

  API Endpoint for the service account

• string scope_mrn = 6

  Scope MRN for the service account, either organization or a space

• string token = 7

  Platform-signed JWT token for bearer authentication (WIF token exchange)

Used in: ExchangeSSHKeyRequest

• string alg = 1

• string kid = 2

• string sig = 3

Used in: cnquery.providers.v1.ConnectReq

• string asset_mrn = 1

• string space_mrn = 2

• string api_endpoint = 3

• bool incognito = 4

• optional ServiceAccountCredentials creds = 5

• string api_proxy = 6