gRPC services

    gRPC service configuration. This is used by and filter configurations.

    envoy_grpc

    (core.GrpcService.EnvoyGrpc) Envoy’s in-built gRPC client. See the documentation for discussion on gRPC client selection.

    Precisely one of envoy_grpc, must be set.

    google_grpc

    (core.GrpcService.GoogleGrpc) See the gRPC services overview documentation for discussion on gRPC client selection.

    Precisely one of , google_grpc must be set.

    timeout

    () The timeout for the gRPC request. This is the timeout for a specific request.

    initial_metadata

    (core.HeaderValue) Additional metadata to include in streams initiated to the GrpcService. This can be used for scenarios in which additional ad hoc authorization headers (e.g. x-foo-bar: baz-key) are to be injected.

    core.GrpcService.EnvoyGrpc

    2.   "cluster_name": "..."
    3. }

    cluster_name

    (string, REQUIRED) The name of the upstream gRPC cluster. SSL credentials will be supplied in the tls_context.

    core.GrpcService.GoogleGrpc

    Warning

    This message type has draft status.

    1.   "target_uri": "...",
    2.   "channel_credentials": "{...}",
    3.   "call_credentials": [],
    4.   "stat_prefix": "...",
    5.   "credentials_factory_name": "...",
    6.   "config": "{...}"

    target_uri

    (, REQUIRED) The target URI when using the Google C++ gRPC client. SSL credentials will be supplied in .

    channel_credentials

    (core.GrpcService.GoogleGrpc.ChannelCredentials)

    call_credentials

    () A set of call credentials that can be composed with channel credentials.

    stat_prefix

    (, REQUIRED) The human readable prefix to use when emitting statistics for the gRPC service.

    (string) The name of the Google gRPC credentials factory to use. This must have been registered with Envoy. If this is empty, a default credentials factory will be used that sets up channel credentials based on other configuration parameters.

    config

    () Additional configuration for site-specific customizations of the Google gRPC library.

    [core.GrpcService.GoogleGrpc.SslCredentials proto]

    See .

    root_certs

    (core.DataSource) PEM encoded server root certificates.

    private_key

    () PEM encoded client private key.

    cert_chain

    (core.DataSource) PEM encoded client certificate chain.

    core.GrpcService.GoogleGrpc.ChannelCredentials

    See https://grpc.io/docs/guides/auth.html#credential-types to understand Channel and Call credential types.

    1. {
    2.   "ssl_credentials": "{...}",
    3.   "google_default": "{...}"
    4. }

    ssl_credentials

    ()

    Precisely one of ssl_credentials, must be set.

    google_default

    (Empty)

    Precisely one of ssl_credentials, must be set.

    core.GrpcService.GoogleGrpc.CallCredentials

    [core.GrpcService.GoogleGrpc.CallCredentials proto]

    1. {
    2.   "google_compute_engine": "{...}",
    3.   "google_refresh_token": "...",
    4.   "service_account_jwt_access": "{...}",
    6.   "from_plugin": "{...}"
    7. }

    access_token

    () Access token credentials. https://grpc.io/grpc/cpp/namespacegrpc.html#ad3a80da696ffdaea943f0f858d7a360d.

    Precisely one of , google_compute_engine, , service_account_jwt_access, , from_plugin must be set.

    google_compute_engine

    () Google Compute Engine credentials. https://grpc.io/grpc/cpp/namespacegrpc.html#a6beb3ac70ff94bd2ebbd89b8f21d1f61

    google_refresh_token

    () Google refresh token credentials. https://grpc.io/grpc/cpp/namespacegrpc.html#a96901c997b91bc6513b08491e0dca37c.

    Precisely one of , google_compute_engine, , service_account_jwt_access, , from_plugin must be set.

    service_account_jwt_access

    () Service Account JWT Access credentials. https://grpc.io/grpc/cpp/namespacegrpc.html#a92a9f959d6102461f66ee973d8e9d3aa.

    Precisely one of , google_compute_engine, , service_account_jwt_access, , from_plugin must be set.

    google_iam

    () Google IAM credentials. https://grpc.io/grpc/cpp/namespacegrpc.html#a9fc1fc101b41e680d47028166e76f9d0.

    Precisely one of , google_compute_engine, , service_account_jwt_access, , from_plugin must be set.

    from_plugin

    () Custom authenticator credentials. https://grpc.io/grpc/cpp/namespacegrpc.html#a823c6a4b19ffc71fb33e90154ee2ad07. .

    Precisely one of access_token, , google_refresh_token, , google_iam, must be set.

    [core.GrpcService.GoogleGrpc.CallCredentials.ServiceAccountJWTAccessCredentials proto]

    json_key

    ()

    token_lifetime_seconds

    (uint64)

    core.GrpcService.GoogleGrpc.CallCredentials.GoogleIAMCredentials

    1. {
    2.   "authorization_token": "...",
    3.   "authority_selector": "..."
    4. }

    authorization_token

    (string)

    authority_selector

    ()

    core.GrpcService.GoogleGrpc.CallCredentials.MetadataCredentialsFromPlugin

    [core.GrpcService.GoogleGrpc.CallCredentials.MetadataCredentialsFromPlugin proto]

    1. {
    2.   "name": "...",

    name

    ()

    (Struct)