// Source of truth: guildhouse monorepo
// services/qm-proto/proto/quartermaster/v1/credentials.proto
// This file is a copy for Go code generation. Do not edit here.

syntax = "proto3";
package quartermaster.v1;

option go_package = "github.com/guildhouse-cooperative/guildhouse-spire-plugins/gen/quartermaster/v1;quartermasterv1";

import "google/protobuf/timestamp.proto";

service QuartermasterCredentials {
    rpc ProvisionDatabase (ProvisionDatabaseRequest) returns (ProvisionDatabaseResponse);
    rpc RotateCredential (RotateCredentialRequest) returns (RotateCredentialResponse);
    rpc RevokeCredential (RevokeCredentialRequest) returns (RevokeCredentialResponse);
    rpc GetCredentialRef (GetCredentialRefRequest) returns (GetCredentialRefResponse);
    rpc ListCredentials (ListCredentialsRequest) returns (ListCredentialsResponse);
}

message ProvisionDatabaseRequest {
    string cluster_id = 1;
    string service_name = 2;
    string database_name = 3;
}

message ProvisionDatabaseResponse {
    string credential_id = 1;
    string secret_ref = 2;
    string secret_namespace = 3;
    google.protobuf.Timestamp issued_at = 4;
    bytes merkle_leaf = 5;
}

message RotateCredentialRequest {
    string credential_id = 1;
}

message RotateCredentialResponse {
    string new_credential_id = 1;
    string secret_ref = 2;
    google.protobuf.Timestamp issued_at = 3;
    bytes merkle_leaf = 4;
}

message RevokeCredentialRequest {
    string credential_id = 1;
}

message RevokeCredentialResponse {
    google.protobuf.Timestamp revoked_at = 1;
}

message GetCredentialRefRequest {
    string credential_id = 1;
}

message GetCredentialRefResponse {
    string credential_id = 1;
    string cluster_id = 2;
    string service_name = 3;
    string credential_type = 4;
    string username = 5;
    string database_name = 6;
    string secret_ref = 7;
    string secret_namespace = 8;
    google.protobuf.Timestamp issued_at = 9;
    google.protobuf.Timestamp expires_at = 10;
    bool revoked = 11;
}

message ListCredentialsRequest {
    string cluster_id = 1;
}

message ListCredentialsResponse {
    repeated GetCredentialRefResponse credentials = 1;
}