@metal-stack/api 0.4.4 → 0.5.1

package/{js/metalstack → metalstack}/api/v2/token_pb.ts

@@ -19,12 +19,12 @@ export const file_metalstack_api_v2_token: GenFile = /*@__PURE__*/
   fileDesc("Ch1tZXRhbHN0YWNrL2FwaS92Mi90b2tlbi5wcm90bxIRbWV0YWxzdGFjay5hcGkudjIilQgKBVRva2VuEhYKBHV1aWQYASABKAlCCLpIBXIDsAEBEhkKBHVzZXIYAiABKAlCC7pICHIG+LOusQIBEiUKBG1ldGEYAyABKAsyFy5tZXRhbHN0YWNrLmFwaS52Mi5NZXRhEiAKC2Rlc2NyaXB0aW9uGAQgASgJQgu6SAhyBsizrrECARJDCgtwZXJtaXNzaW9ucxgFIAMoCzIjLm1ldGFsc3RhY2suYXBpLnYyLk1ldGhvZFBlcm1pc3Npb25CCbpIBpIBAxD0AxIrCgdleHBpcmVzGAYgASgLMhouZ29vZ2xlLnByb3RvYnVmLlRpbWVzdGFtcBItCglpc3N1ZWRfYXQYByABKAsyGi5nb29nbGUucHJvdG9idWYuVGltZXN0YW1wEjoKCnRva2VuX3R5cGUYCCABKA4yHC5tZXRhbHN0YWNrLmFwaS52Mi5Ub2tlblR5cGVCCLpIBYIBAhABElwKDXByb2plY3Rfcm9sZXMYCSADKAsyKi5tZXRhbHN0YWNrLmFwaS52Mi5Ub2tlbi5Qcm9qZWN0Um9sZXNFbnRyeUIZukgWmgETwJW4sQIByJW4sQIBKgWCAQIQARJaCgx0ZW5hbnRfcm9sZXMYCiADKAsyKS5tZXRhbHN0YWNrLmFwaS52Mi5Ub2tlbi5UZW5hbnRSb2xlc0VudHJ5Qhm6SBaaARPAlbixAgHQlbixAgEqBYIBAhABEj8KCmFkbWluX3JvbGUYCyABKA4yHC5tZXRhbHN0YWNrLmFwaS52Mi5BZG1pblJvbGVCCLpIBYIBAhABSACIAQESPwoKaW5mcmFfcm9sZRgMIAEoDjIcLm1ldGFsc3RhY2suYXBpLnYyLkluZnJhUm9sZUIIukgFggECEAFIAYgBARJcCg1tYWNoaW5lX3JvbGVzGA0gAygLMioubWV0YWxzdGFjay5hcGkudjIuVG9rZW4uTWFjaGluZVJvbGVzRW50cnlCGbpIFpoBE8CVuLECAdiVuLECASoFggECEAEaUwoRUHJvamVjdFJvbGVzRW50cnkSCwoDa2V5GAEgASgJEi0KBXZhbHVlGAIgASgOMh4ubWV0YWxzdGFjay5hcGkudjIuUHJvamVjdFJvbGU6AjgBGlEKEFRlbmFudFJvbGVzRW50cnkSCwoDa2V5GAEgASgJEiwKBXZhbHVlGAIgASgOMh0ubWV0YWxzdGFjay5hcGkudjIuVGVuYW50Um9sZToCOAEaUwoRTWFjaGluZVJvbGVzRW50cnkSCwoDa2V5GAEgASgJEi0KBXZhbHVlGAIgASgOMh4ubWV0YWxzdGFjay5hcGkudjIuTWFjaGluZVJvbGU6AjgBQg0KC19hZG1pbl9yb2xlQg0KC19pbmZyYV9yb2xlIuQHChlUb2tlblNlcnZpY2VDcmVhdGVSZXF1ZXN0EiAKC2Rlc2NyaXB0aW9uGAEgASgJQgu6SAhyBsizrrECARJJCgtwZXJtaXNzaW9ucxgCIAMoCzIqLm1ldGFsc3RhY2suYXBpLnYyLlBlcm1pc3Npb25zQnlWaXNpYmlsaXR5Qgi6SAWSAQIQZBI+CgdleHBpcmVzGAMgASgLMhkuZ29vZ2xlLnByb3RvYnVmLkR1cmF0aW9uQhK6SA+qAQwaBQiB54QPMgMI2AQScAoNcHJvamVjdF9yb2xlcxgEIAMoCzI+Lm1ldGFsc3RhY2suYXBpLnYyLlRva2VuU2VydmljZUNyZWF0ZVJlcXVlc3QuUHJvamVjdFJvbGVzRW50cnlCGbpIFpoBE8CVuLECAciVuLECASoFggECEAESbgoMdGVuYW50X3JvbGVzGAUgAygLMj0ubWV0YWxzdGFjay5hcGkudjIuVG9rZW5TZXJ2aWNlQ3JlYXRlUmVxdWVzdC5UZW5hbnRSb2xlc0VudHJ5Qhm6SBaaARPAlbixAgHQlbixAgEqBYIBAhABEj8KCmFkbWluX3JvbGUYBiABKA4yHC5tZXRhbHN0YWNrLmFwaS52Mi5BZG1pblJvbGVCCLpIBYIBAhABSACIAQESPwoKaW5mcmFfcm9sZRgHIAEoDjIcLm1ldGFsc3RhY2suYXBpLnYyLkluZnJhUm9sZUIIukgFggECEAFIAYgBARJwCg1tYWNoaW5lX3JvbGVzGAggAygLMj4ubWV0YWxzdGFjay5hcGkudjIuVG9rZW5TZXJ2aWNlQ3JlYXRlUmVxdWVzdC5NYWNoaW5lUm9sZXNFbnRyeUIZukgWmgETwJW4sQIB2JW4sQIBKgWCAQIQARIpCgZsYWJlbHMYCSABKAsyGS5tZXRhbHN0YWNrLmFwaS52Mi5MYWJlbHMaUwoRUHJvamVjdFJvbGVzRW50cnkSCwoDa2V5GAEgASgJEi0KBXZhbHVlGAIgASgOMh4ubWV0YWxzdGFjay5hcGkudjIuUHJvamVjdFJvbGU6AjgBGlEKEFRlbmFudFJvbGVzRW50cnkSCwoDa2V5GAEgASgJEiwKBXZhbHVlGAIgASgOMh0ubWV0YWxzdGFjay5hcGkudjIuVGVuYW50Um9sZToCOAEaUwoRTWFjaGluZVJvbGVzRW50cnkSCwoDa2V5GAEgASgJEi0KBXZhbHVlGAIgASgOMh4ubWV0YWxzdGFjay5hcGkudjIuTWFjaGluZVJvbGU6AjgBQg0KC19hZG1pbl9yb2xlQg0KC19pbmZyYV9yb2xlIkkKEE1ldGhvZFBlcm1pc3Npb24SGQoHc3ViamVjdBgBIAEoCUIIukgFcgMYgAISGgoHbWV0aG9kcxgCIAMoCUIJukgGkgEDEPQDIqsDChdQZXJtaXNzaW9uc0J5VmlzaWJpbGl0eRI2CgZwdWJsaWMYASABKAsyJC5tZXRhbHN0YWNrLmFwaS52Mi5QdWJsaWNQZXJtaXNzaW9uc0gAEjIKBHNlbGYYAiABKAsyIi5tZXRhbHN0YWNrLmFwaS52Mi5TZWxmUGVybWlzc2lvbnNIABI4Cgdwcm9qZWN0GAMgASgLMiUubWV0YWxzdGFjay5hcGkudjIuUHJvamVjdFBlcm1pc3Npb25zSAASNgoGdGVuYW50GAQgASgLMiQubWV0YWxzdGFjay5hcGkudjIuVGVuYW50UGVybWlzc2lvbnNIABI0CgVhZG1pbhgFIAEoCzIjLm1ldGFsc3RhY2suYXBpLnYyLkFkbWluUGVybWlzc2lvbnNIABI4CgdtYWNoaW5lGAYgASgLMiUubWV0YWxzdGFjay5hcGkudjIuTWFjaGluZVBlcm1pc3Npb25zSAASNAoFaW5mcmEYByABKAsyIy5tZXRhbHN0YWNrLmFwaS52Mi5JbmZyYVBlcm1pc3Npb25zSABCDAoKdmlzaWJpbGl0eSIvChFQdWJsaWNQZXJtaXNzaW9ucxIaCgdtZXRob2RzGAIgAygJQgm6SAaSAQMQ9AMiLQoPU2VsZlBlcm1pc3Npb25zEhoKB21ldGhvZHMYAiADKAlCCbpIBpIBAxD0AyJOChJQcm9qZWN0UGVybWlzc2lvbnMSHAoHcHJvamVjdBgBIAEoCUILukgIcgagtK6xAgESGgoHbWV0aG9kcxgCIAMoCUIJukgGkgEDEPQDIksKEVRlbmFudFBlcm1pc3Npb25zEhoKBWxvZ2luGAEgASgJQgu6SAhyBpi0rrECARIaCgdtZXRob2RzGAIgAygJQgm6SAaSAQMQ9AMiLgoQQWRtaW5QZXJtaXNzaW9ucxIaCgdtZXRob2RzGAIgAygJQgm6SAaSAQMQ9AMiSwoSTWFjaGluZVBlcm1pc3Npb25zEhkKBHV1aWQYASABKAlCC7pICHIGqLSusQIBEhoKB21ldGhvZHMYAiADKAlCCbpIBpIBAxD0AyIuChBJbmZyYVBlcm1pc3Npb25zEhoKB21ldGhvZHMYAiADKAlCCbpIBpIBAxD0AyJVChpUb2tlblNlcnZpY2VDcmVhdGVSZXNwb25zZRInCgV0b2tlbhgBIAEoCzIYLm1ldGFsc3RhY2suYXBpLnYyLlRva2VuEg4KBnNlY3JldBgCIAEoCSJHChdUb2tlblNlcnZpY2VMaXN0UmVxdWVzdBIsCgVxdWVyeRgBIAEoCzIdLm1ldGFsc3RhY2suYXBpLnYyLlRva2VuUXVlcnkiRAoYVG9rZW5TZXJ2aWNlTGlzdFJlc3BvbnNlEigKBnRva2VucxgBIAMoCzIYLm1ldGFsc3RhY2suYXBpLnYyLlRva2VuIjMKGVRva2VuU2VydmljZVJldm9rZVJlcXVlc3QSFgoEdXVpZBgBIAEoCUIIukgFcgOwAQEiHAoaVG9rZW5TZXJ2aWNlUmV2b2tlUmVzcG9uc2UiiQgKGVRva2VuU2VydmljZVVwZGF0ZVJlcXVlc3QSFgoEdXVpZBgBIAEoCUIIukgFcgOwAQESOgoLdXBkYXRlX21ldGEYAiABKAsyHS5tZXRhbHN0YWNrLmFwaS52Mi5VcGRhdGVNZXRhQga6SAPIAQASJQoLZGVzY3JpcHRpb24YAyABKAlCC7pICHIGyLOusQIBSACIAQESPwoLcGVybWlzc2lvbnMYBCADKAsyKi5tZXRhbHN0YWNrLmFwaS52Mi5QZXJtaXNzaW9uc0J5VmlzaWJpbGl0eRJwCg1wcm9qZWN0X3JvbGVzGAUgAygLMj4ubWV0YWxzdGFjay5hcGkudjIuVG9rZW5TZXJ2aWNlVXBkYXRlUmVxdWVzdC5Qcm9qZWN0Um9sZXNFbnRyeUIZukgWmgETwJW4sQIByJW4sQIBKgWCAQIQARJuCgx0ZW5hbnRfcm9sZXMYBiADKAsyPS5tZXRhbHN0YWNrLmFwaS52Mi5Ub2tlblNlcnZpY2VVcGRhdGVSZXF1ZXN0LlRlbmFudFJvbGVzRW50cnlCGbpIFpoBE8CVuLECAdCVuLECASoFggECEAESPwoKYWRtaW5fcm9sZRgHIAEoDjIcLm1ldGFsc3RhY2suYXBpLnYyLkFkbWluUm9sZUIIukgFggECEAFIAYgBARI/CgppbmZyYV9yb2xlGAggASgOMhwubWV0YWxzdGFjay5hcGkudjIuSW5mcmFSb2xlQgi6SAWCAQIQAUgCiAEBEnAKDW1hY2hpbmVfcm9sZXMYCSADKAsyPi5tZXRhbHN0YWNrLmFwaS52Mi5Ub2tlblNlcnZpY2VVcGRhdGVSZXF1ZXN0Lk1hY2hpbmVSb2xlc0VudHJ5Qhm6SBaaARPAlbixAgHYlbixAgEqBYIBAhABEi8KBmxhYmVscxgKIAEoCzIfLm1ldGFsc3RhY2suYXBpLnYyLlVwZGF0ZUxhYmVscxpTChFQcm9qZWN0Um9sZXNFbnRyeRILCgNrZXkYASABKAkSLQoFdmFsdWUYAiABKA4yHi5tZXRhbHN0YWNrLmFwaS52Mi5Qcm9qZWN0Um9sZToCOAEaUQoQVGVuYW50Um9sZXNFbnRyeRILCgNrZXkYASABKAkSLAoFdmFsdWUYAiABKA4yHS5tZXRhbHN0YWNrLmFwaS52Mi5UZW5hbnRSb2xlOgI4ARpTChFNYWNoaW5lUm9sZXNFbnRyeRILCgNrZXkYASABKAkSLQoFdmFsdWUYAiABKA4yHi5tZXRhbHN0YWNrLmFwaS52Mi5NYWNoaW5lUm9sZToCOAFCDgoMX2Rlc2NyaXB0aW9uQg0KC19hZG1pbl9yb2xlQg0KC19pbmZyYV9yb2xlIkUKGlRva2VuU2VydmljZVVwZGF0ZVJlc3BvbnNlEicKBXRva2VuGAEgASgLMhgubWV0YWxzdGFjay5hcGkudjIuVG9rZW4iMAoWVG9rZW5TZXJ2aWNlR2V0UmVxdWVzdBIWCgR1dWlkGAEgASgJQgi6SAVyA7ABASJCChdUb2tlblNlcnZpY2VHZXRSZXNwb25zZRInCgV0b2tlbhgBIAEoCzIYLm1ldGFsc3RhY2suYXBpLnYyLlRva2VuIhwKGlRva2VuU2VydmljZVJlZnJlc2hSZXF1ZXN0IlYKG1Rva2VuU2VydmljZVJlZnJlc2hSZXNwb25zZRInCgV0b2tlbhgBIAEoCzIYLm1ldGFsc3RhY2suYXBpLnYyLlRva2VuEg4KBnNlY3JldBgCIAEoCSKdAgoKVG9rZW5RdWVyeRIbCgR1dWlkGAEgASgJQgi6SAVyA7ABAUgAiAEBEh4KBHVzZXIYAiABKAlCC7pICHIG+LOusQIBSAGIAQESJQoLZGVzY3JpcHRpb24YAyABKAlCC7pICHIGyLOusQIBSAKIAQESLgoGbGFiZWxzGAQgASgLMhkubWV0YWxzdGFjay5hcGkudjIuTGFiZWxzSAOIAQESPwoKdG9rZW5fdHlwZRgFIAEoDjIcLm1ldGFsc3RhY2suYXBpLnYyLlRva2VuVHlwZUIIukgFggECEAFIBIgBAUIHCgVfdXVpZEIHCgVfdXNlckIOCgxfZGVzY3JpcHRpb25CCQoHX2xhYmVsc0INCgtfdG9rZW5fdHlwZSpQCglUb2tlblR5cGUSGgoWVE9LRU5fVFlQRV9VTlNQRUNJRklFRBAAEhIKDlRPS0VOX1RZUEVfQVBJEAESEwoPVE9LRU5fVFlQRV9VU0VSEAIyqAUKDFRva2VuU2VydmljZRJmCgNHZXQSKS5tZXRhbHN0YWNrLmFwaS52Mi5Ub2tlblNlcnZpY2VHZXRSZXF1ZXN0GioubWV0YWxzdGFjay5hcGkudjIuVG9rZW5TZXJ2aWNlR2V0UmVzcG9uc2UiCNjzGALg8xgBEm8KBkNyZWF0ZRIsLm1ldGFsc3RhY2suYXBpLnYyLlRva2VuU2VydmljZUNyZWF0ZVJlcXVlc3QaLS5tZXRhbHN0YWNrLmFwaS52Mi5Ub2tlblNlcnZpY2VDcmVhdGVSZXNwb25zZSII2PMYAuDzGAESbwoGVXBkYXRlEiwubWV0YWxzdGFjay5hcGkudjIuVG9rZW5TZXJ2aWNlVXBkYXRlUmVxdWVzdBotLm1ldGFsc3RhY2suYXBpLnYyLlRva2VuU2VydmljZVVwZGF0ZVJlc3BvbnNlIgjY8xgC4PMYARJpCgRMaXN0EioubWV0YWxzdGFjay5hcGkudjIuVG9rZW5TZXJ2aWNlTGlzdFJlcXVlc3QaKy5tZXRhbHN0YWNrLmFwaS52Mi5Ub2tlblNlcnZpY2VMaXN0UmVzcG9uc2UiCNjzGALg8xgBEm8KBlJldm9rZRIsLm1ldGFsc3RhY2suYXBpLnYyLlRva2VuU2VydmljZVJldm9rZVJlcXVlc3QaLS5tZXRhbHN0YWNrLmFwaS52Mi5Ub2tlblNlcnZpY2VSZXZva2VSZXNwb25zZSII2PMYAuDzGAEScgoHUmVmcmVzaBItLm1ldGFsc3RhY2suYXBpLnYyLlRva2VuU2VydmljZVJlZnJlc2hSZXF1ZXN0Gi4ubWV0YWxzdGFjay5hcGkudjIuVG9rZW5TZXJ2aWNlUmVmcmVzaFJlc3BvbnNlIgjY8xgC4PMYAULAAQoVY29tLm1ldGFsc3RhY2suYXBpLnYyQgpUb2tlblByb3RvUAFaNWdpdGh1Yi5jb20vbWV0YWwtc3RhY2svYXBpL2dvL21ldGFsc3RhY2svYXBpL3YyO2FwaXYyogIDTUFYqgIRTWV0YWxzdGFjay5BcGkuVjLKAhFNZXRhbHN0YWNrXEFwaVxWMuICHU1ldGFsc3RhY2tcQXBpXFYyXEdQQk1ldGFkYXRh6gITTWV0YWxzdGFjazo6QXBpOjpWMmIGcHJvdG8z", [file_buf_validate_validate, file_google_protobuf_duration, file_google_protobuf_timestamp, file_metalstack_api_v2_common, file_metalstack_api_v2_predefined_rules]);
 
 /**
- * Token generates a jwt authentication token to access the api
+ * Token generates a jwt authentication token to access the api.
  *
- * There are two different types of tokens, api- and user- tokens
+ * There are two different types of tokens, api- and user- tokens.
  *
  * A user token is used to authenticate end user requests for example from a cli.
- * The configured roles in a user token are expanded in the api server
+ * The configured roles in a user token are expanded in the api server.
  * based on the memberships in other projects and tenants based on the role granted there.
  * User tokens will never contain permissions.
  * Permissions are always derived from the tenant and project roles and memberships.
@@ -32,27 +32,27 @@ export const file_metalstack_api_v2_token: GenFile = /*@__PURE__*/
  * The api token should be used to authenticate services.
  * In contrast to a user token, the api token permissions and roles apply as configured during the token create process.
  *
- * Message level validation, can be developed using https://protovalidate.com/playground
+ * Message level validation, can be developed using https://protovalidate.com/playground.
  *
  * @generated from message metalstack.api.v2.Token
  */
 export type Token = Message<"metalstack.api.v2.Token"> & {
   /**
-   * Uuid of the jwt token, used to reference it by revoke
+   * Uuid of the jwt token, used to reference it by revoke.
    *
    * @generated from field: string uuid = 1;
    */
   uuid: string;
 
   /**
-   * User who created this token
+   * User who created this token.
    *
    * @generated from field: string user = 2;
    */
   user: string;
 
   /**
-   * Meta for this token
+   * Meta for this token.
    *
    * @generated from field: metalstack.api.v2.Meta meta = 3;
    */
@@ -66,64 +66,64 @@ export type Token = Message<"metalstack.api.v2.Token"> & {
   description: string;
 
   /**
-   * Permissions is a list of service methods this token can be used for
+   * Permissions is a list of service methods this token can be used for.
    *
    * @generated from field: repeated metalstack.api.v2.MethodPermission permissions = 5;
    */
   permissions: MethodPermission[];
 
   /**
-   * Expires gives the date in the future after which this token can not be used anymore
+   * Expires gives the date in the future after which this token can not be used anymore.
    *
    * @generated from field: google.protobuf.Timestamp expires = 6;
    */
   expires?: Timestamp | undefined;
 
   /**
-   * IssuedAt gives the date when this token was created
+   * IssuedAt gives the date when this token was created.
    *
    * @generated from field: google.protobuf.Timestamp issued_at = 7;
    */
   issuedAt?: Timestamp | undefined;
 
   /**
-   * TokenType describes the type of this token
+   * TokenType describes the type of this token.
    *
    * @generated from field: metalstack.api.v2.TokenType token_type = 8;
    */
   tokenType: TokenType;
 
   /**
-   * ProjectRoles associates a project id with the corresponding role of the token owner
+   * ProjectRoles associates a project id with the corresponding role of the token owner.
    *
    * @generated from field: map<string, metalstack.api.v2.ProjectRole> project_roles = 9;
    */
   projectRoles: { [key: string]: ProjectRole };
 
   /**
-   * TenantRoles associates a tenant id with the corresponding role of the token owner
+   * TenantRoles associates a tenant id with the corresponding role of the token owner.
    *
    * @generated from field: map<string, metalstack.api.v2.TenantRole> tenant_roles = 10;
    */
   tenantRoles: { [key: string]: TenantRole };
 
   /**
-   * AdminRole defines the admin role of the token owner
+   * AdminRole defines the admin role of the token owner.
    *
    * @generated from field: optional metalstack.api.v2.AdminRole admin_role = 11;
    */
   adminRole?: AdminRole | undefined;
 
   /**
-   * InfraRole defines the infrastructure role of the token owner
+   * InfraRole defines the infrastructure role of the token owner.
    *
    * @generated from field: optional metalstack.api.v2.InfraRole infra_role = 12;
    */
   infraRole?: InfraRole | undefined;
 
   /**
-   * MachineRoles associates a machine uuid with the corresponding role of the token owner
-   * TODO: decide if we need this map from machine.uuid->role, we could instead use the subject in the token instead
+   * MachineRoles associates a machine uuid with the corresponding role of the token owner.
+   * TODO: decide if we need this map from machine.uuid->role, we could instead use the subject in the token instead.
    *
    * @generated from field: map<string, metalstack.api.v2.MachineRole> machine_roles = 13;
    */
@@ -138,69 +138,69 @@ export const TokenSchema: GenMessage<Token> = /*@__PURE__*/
   messageDesc(file_metalstack_api_v2_token, 0);
 
 /**
- * TokenServiceCreateRequest is the request payload to create a token
+ * TokenServiceCreateRequest is the request payload to create a token.
  *
  * @generated from message metalstack.api.v2.TokenServiceCreateRequest
  */
 export type TokenServiceCreateRequest = Message<"metalstack.api.v2.TokenServiceCreateRequest"> & {
   /**
-   * Description of the token
+   * Description of the token.
    *
    * @generated from field: string description = 1;
    */
   description: string;
 
   /**
-   * Permissions is a list of service methods this token can be used for
+   * Permissions is a list of service methods this token can be used for.
    *
    * @generated from field: repeated metalstack.api.v2.PermissionsByVisibility permissions = 2;
    */
   permissions: PermissionsByVisibility[];
 
   /**
-   * Expires gives the duration since now, after which this token can not be used anymore
+   * Expires gives the duration since now, after which this token can not be used anymore.
    *
    * @generated from field: google.protobuf.Duration expires = 3;
    */
   expires?: Duration | undefined;
 
   /**
-   * ProjectRoles associates a project id with the corresponding role of the token owner
+   * ProjectRoles associates a project id with the corresponding role of the token owner.
    *
    * @generated from field: map<string, metalstack.api.v2.ProjectRole> project_roles = 4;
    */
   projectRoles: { [key: string]: ProjectRole };
 
   /**
-   * TenantRoles associates a tenant id with the corresponding role of the token owner
+   * TenantRoles associates a tenant id with the corresponding role of the token owner.
    *
    * @generated from field: map<string, metalstack.api.v2.TenantRole> tenant_roles = 5;
    */
   tenantRoles: { [key: string]: TenantRole };
 
   /**
-   * AdminRole defines the admin role of the token owner
+   * AdminRole defines the admin role of the token owner.
    *
    * @generated from field: optional metalstack.api.v2.AdminRole admin_role = 6;
    */
   adminRole?: AdminRole | undefined;
 
   /**
-   * InfraRole defines the infrastructure role of the token owner
+   * InfraRole defines the infrastructure role of the token owner.
    *
    * @generated from field: optional metalstack.api.v2.InfraRole infra_role = 7;
    */
   infraRole?: InfraRole | undefined;
 
   /**
-   * MachineRoles associates a machine uuid with the corresponding role of the token owner
+   * MachineRoles associates a machine uuid with the corresponding role of the token owner.
    *
    * @generated from field: map<string, metalstack.api.v2.MachineRole> machine_roles = 8;
    */
   machineRoles: { [key: string]: MachineRole };
 
   /**
-   * Labels on this token
+   * Labels on this token.
    *
    * @generated from field: metalstack.api.v2.Labels labels = 9;
    */
@@ -215,25 +215,24 @@ export const TokenServiceCreateRequestSchema: GenMessage<TokenServiceCreateReque
   messageDesc(file_metalstack_api_v2_token, 1);
 
 /**
- * MethodPermission is a mapping from a subject/project to a service method
+ * MethodPermission is a mapping from a subject/project to a service method.
  *
  * @generated from message metalstack.api.v2.MethodPermission
  */
 export type MethodPermission = Message<"metalstack.api.v2.MethodPermission"> & {
   /**
-   * Subject maybe either the project or the tenant
-   * for which the methods should be allowed
+   * Subject may be either the project or the tenant for which the methods should be allowed.
    *
-   * asterisk (*) can be specified to match any subject
-   * empty string ("") can be specified for requests that do not require a subject, e.g. partition list
-   * otherwise either a projectid or a tenant login should be specified
+   * Asterisk (*) can be specified to match any subject.
+   * Empty string ("") can be specified for requests that do not require a subject, e.g. partition list.
+   * Otherwise either a projectid or a tenant login should be specified.
    *
    * @generated from field: string subject = 1;
    */
   subject: string;
 
   /**
-   * Methods which should be accessible
+   * Methods which should be accessible.
    *
    * @generated from field: repeated string methods = 2;
    */
@@ -248,19 +247,19 @@ export const MethodPermissionSchema: GenMessage<MethodPermission> = /*@__PURE__*
   messageDesc(file_metalstack_api_v2_token, 2);
 
 /**
- * PermissionsByVisibility contains method permissions by visibility
+ * PermissionsByVisibility contains method permissions by visibility.
  *
  * @generated from message metalstack.api.v2.PermissionsByVisibility
  */
 export type PermissionsByVisibility = Message<"metalstack.api.v2.PermissionsByVisibility"> & {
   /**
-   * Visibility defines the visibility of the requested method permissions
+   * Visibility defines the visibility of the requested method permissions.
    *
    * @generated from oneof metalstack.api.v2.PermissionsByVisibility.visibility
    */
   visibility: {
     /**
-     * PublicPermissions carries public method permissions
+     * PublicPermissions carries public method permissions.
      *
      * @generated from field: metalstack.api.v2.PublicPermissions public = 1;
      */
@@ -268,7 +267,7 @@ export type PermissionsByVisibility = Message<"metalstack.api.v2.PermissionsByVi
     case: "public";
   } | {
     /**
-     * SelfPermissions carries self method permissions
+     * SelfPermissions carries self method permissions.
      *
      * @generated from field: metalstack.api.v2.SelfPermissions self = 2;
      */
@@ -276,7 +275,7 @@ export type PermissionsByVisibility = Message<"metalstack.api.v2.PermissionsByVi
     case: "self";
   } | {
     /**
-     * ProjectPermissions carries project method permissions
+     * ProjectPermissions carries project method permissions.
      *
      * @generated from field: metalstack.api.v2.ProjectPermissions project = 3;
      */
@@ -284,7 +283,7 @@ export type PermissionsByVisibility = Message<"metalstack.api.v2.PermissionsByVi
     case: "project";
   } | {
     /**
-     * TenantPermissions carries tenant method permissions
+     * TenantPermissions carries tenant method permissions.
      *
      * @generated from field: metalstack.api.v2.TenantPermissions tenant = 4;
      */
@@ -292,7 +291,7 @@ export type PermissionsByVisibility = Message<"metalstack.api.v2.PermissionsByVi
     case: "tenant";
   } | {
     /**
-     * AdminPermissions carries admin method permissions
+     * AdminPermissions carries admin method permissions.
      *
      * @generated from field: metalstack.api.v2.AdminPermissions admin = 5;
      */
@@ -300,7 +299,7 @@ export type PermissionsByVisibility = Message<"metalstack.api.v2.PermissionsByVi
     case: "admin";
   } | {
     /**
-     * MachinePermissions carries machine method permissions
+     * MachinePermissions carries machine method permissions.
      *
      * @generated from field: metalstack.api.v2.MachinePermissions machine = 6;
      */
@@ -308,7 +307,7 @@ export type PermissionsByVisibility = Message<"metalstack.api.v2.PermissionsByVi
     case: "machine";
   } | {
     /**
-     * InfraPermissions carries infra method permissions
+     * InfraPermissions carries infra method permissions.
      *
      * @generated from field: metalstack.api.v2.InfraPermissions infra = 7;
      */
@@ -325,13 +324,13 @@ export const PermissionsByVisibilitySchema: GenMessage<PermissionsByVisibility>
   messageDesc(file_metalstack_api_v2_token, 3);
 
 /**
- * PublicPermissions carries public method permissions
+ * PublicPermissions carries public method permissions.
  *
  * @generated from message metalstack.api.v2.PublicPermissions
  */
 export type PublicPermissions = Message<"metalstack.api.v2.PublicPermissions"> & {
   /**
-   * Methods which should be accessible
+   * Methods which should be accessible.
    *
    * @generated from field: repeated string methods = 2;
    */
@@ -346,13 +345,13 @@ export const PublicPermissionsSchema: GenMessage<PublicPermissions> = /*@__PURE_
   messageDesc(file_metalstack_api_v2_token, 4);
 
 /**
- * SelfPermissions carries self method permissions
+ * SelfPermissions carries self method permissions.
  *
  * @generated from message metalstack.api.v2.SelfPermissions
  */
 export type SelfPermissions = Message<"metalstack.api.v2.SelfPermissions"> & {
   /**
-   * Methods which should be accessible
+   * Methods which should be accessible.
    *
    * @generated from field: repeated string methods = 2;
    */
@@ -367,20 +366,21 @@ export const SelfPermissionsSchema: GenMessage<SelfPermissions> = /*@__PURE__*/
   messageDesc(file_metalstack_api_v2_token, 5);
 
 /**
- * ProjectPermissions carries project method permissions
+ * ProjectPermissions carries project method permissions.
  *
  * @generated from message metalstack.api.v2.ProjectPermissions
  */
 export type ProjectPermissions = Message<"metalstack.api.v2.ProjectPermissions"> & {
   /**
-   * asterisk (*) can be specified to match any subject
+   * Project scope for the permissions.
+   * Asterisk (*) can be specified to match any subject.
    *
    * @generated from field: string project = 1;
    */
   project: string;
 
   /**
-   * Methods which should be accessible
+   * Methods which should be accessible.
    *
    * @generated from field: repeated string methods = 2;
    */
@@ -395,21 +395,21 @@ export const ProjectPermissionsSchema: GenMessage<ProjectPermissions> = /*@__PUR
   messageDesc(file_metalstack_api_v2_token, 6);
 
 /**
- * TenantPermissions carries tenant method permissions
+ * TenantPermissions carries tenant method permissions.
  *
  * @generated from message metalstack.api.v2.TenantPermissions
  */
 export type TenantPermissions = Message<"metalstack.api.v2.TenantPermissions"> & {
   /**
-   * Login of the tenant
-   * asterisk (*) can be specified to match any subject
+   * Login of the tenant.
+   * Asterisk (*) can be specified to match any subject.
    *
    * @generated from field: string login = 1;
    */
   login: string;
 
   /**
-   * Methods which should be accessible
+   * Methods which should be accessible.
    *
    * @generated from field: repeated string methods = 2;
    */
@@ -424,13 +424,13 @@ export const TenantPermissionsSchema: GenMessage<TenantPermissions> = /*@__PURE_
   messageDesc(file_metalstack_api_v2_token, 7);
 
 /**
- * AdminPermissions carries admin method permissions
+ * AdminPermissions carries admin method permissions.
  *
  * @generated from message metalstack.api.v2.AdminPermissions
  */
 export type AdminPermissions = Message<"metalstack.api.v2.AdminPermissions"> & {
   /**
-   * Methods which should be accessible
+   * Methods which should be accessible.
    *
    * @generated from field: repeated string methods = 2;
    */
@@ -445,21 +445,21 @@ export const AdminPermissionsSchema: GenMessage<AdminPermissions> = /*@__PURE__*
   messageDesc(file_metalstack_api_v2_token, 8);
 
 /**
- * MachinePermissions carries machine method permissions
+ * MachinePermissions carries machine method permissions.
  *
  * @generated from message metalstack.api.v2.MachinePermissions
  */
 export type MachinePermissions = Message<"metalstack.api.v2.MachinePermissions"> & {
   /**
-   * UUID of this machine
-   * asterisk (*) can be specified to match any subject
+   * UUID of this machine.
+   * Asterisk (*) can be specified to match any subject.
    *
    * @generated from field: string uuid = 1;
    */
   uuid: string;
 
   /**
-   * Methods which should be accessible
+   * Methods which should be accessible.
    *
    * @generated from field: repeated string methods = 2;
    */
@@ -474,13 +474,13 @@ export const MachinePermissionsSchema: GenMessage<MachinePermissions> = /*@__PUR
   messageDesc(file_metalstack_api_v2_token, 9);
 
 /**
- * InfraPermissions carries infra method permissions
+ * InfraPermissions carries infra method permissions.
  *
  * @generated from message metalstack.api.v2.InfraPermissions
  */
 export type InfraPermissions = Message<"metalstack.api.v2.InfraPermissions"> & {
   /**
-   * Methods which should be accessible
+   * Methods which should be accessible.
    *
    * @generated from field: repeated string methods = 2;
    */
@@ -495,20 +495,20 @@ export const InfraPermissionsSchema: GenMessage<InfraPermissions> = /*@__PURE__*
   messageDesc(file_metalstack_api_v2_token, 10);
 
 /**
- * TokenServiceCreateResponse is the response payload of a token create request
+ * TokenServiceCreateResponse is the response payload of a token create request.
  *
  * @generated from message metalstack.api.v2.TokenServiceCreateResponse
  */
 export type TokenServiceCreateResponse = Message<"metalstack.api.v2.TokenServiceCreateResponse"> & {
   /**
-   * Token which was created
+   * Token which was created.
    *
    * @generated from field: metalstack.api.v2.Token token = 1;
    */
   token?: Token | undefined;
 
   /**
-   * Secret is the body of the JWT token, should be used in API requests as bearer token
+   * Secret is the body of the JWT token, should be used in API requests as bearer token.
    *
    * @generated from field: string secret = 2;
    */
@@ -523,13 +523,13 @@ export const TokenServiceCreateResponseSchema: GenMessage<TokenServiceCreateResp
   messageDesc(file_metalstack_api_v2_token, 11);
 
 /**
- * TokenServiceListRequest is the request payload to list tokens
+ * TokenServiceListRequest is the request payload to list tokens.
  *
  * @generated from message metalstack.api.v2.TokenServiceListRequest
  */
 export type TokenServiceListRequest = Message<"metalstack.api.v2.TokenServiceListRequest"> & {
   /**
-   * Query for tokens
+   * Query for tokens.
    *
    * @generated from field: metalstack.api.v2.TokenQuery query = 1;
    */
@@ -544,13 +544,13 @@ export const TokenServiceListRequestSchema: GenMessage<TokenServiceListRequest>
   messageDesc(file_metalstack_api_v2_token, 12);
 
 /**
- * TokenServiceListResponse is the response payload of a token list request
+ * TokenServiceListResponse is the response payload of a token list request.
  *
  * @generated from message metalstack.api.v2.TokenServiceListResponse
  */
 export type TokenServiceListResponse = Message<"metalstack.api.v2.TokenServiceListResponse"> & {
   /**
-   * Tokens is a list of tokens without the secrets
+   * Tokens is a list of tokens without the secrets.
    *
    * @generated from field: repeated metalstack.api.v2.Token tokens = 1;
    */
@@ -565,13 +565,13 @@ export const TokenServiceListResponseSchema: GenMessage<TokenServiceListResponse
   messageDesc(file_metalstack_api_v2_token, 13);
 
 /**
- * TokenServiceRevokeRequest is the request payload of a token revoke request
+ * TokenServiceRevokeRequest is the request payload of a token revoke request.
  *
  * @generated from message metalstack.api.v2.TokenServiceRevokeRequest
  */
 export type TokenServiceRevokeRequest = Message<"metalstack.api.v2.TokenServiceRevokeRequest"> & {
   /**
-   * Uuid of the token to revoke
+   * Uuid of the token to revoke.
    *
    * @generated from field: string uuid = 1;
    */
@@ -586,7 +586,7 @@ export const TokenServiceRevokeRequestSchema: GenMessage<TokenServiceRevokeReque
   messageDesc(file_metalstack_api_v2_token, 14);
 
 /**
- * TokenServiceRevokeResponse is the response payload of a token revoke request
+ * TokenServiceRevokeResponse is the response payload of a token revoke request.
  *
  * @generated from message metalstack.api.v2.TokenServiceRevokeResponse
  */
@@ -601,21 +601,21 @@ export const TokenServiceRevokeResponseSchema: GenMessage<TokenServiceRevokeResp
   messageDesc(file_metalstack_api_v2_token, 15);
 
 /**
- * TokenServiceUpdateRequest is the request payload of a token update request
+ * TokenServiceUpdateRequest is the request payload of a token update request.
  *
  * @generated from message metalstack.api.v2.TokenServiceUpdateRequest
  */
 export type TokenServiceUpdateRequest = Message<"metalstack.api.v2.TokenServiceUpdateRequest"> & {
   /**
-   * Uuid of the token to update
+   * Uuid of the token to update.
    *
    * @generated from field: string uuid = 1;
    */
   uuid: string;
 
   /**
-   * UpdateMeta contains the timestamp and strategy to be used in this update request
-   * TokenUpdate is not guarded with optlock in the backend
+   * UpdateMeta contains the timestamp and strategy to be used in this update request.
+   * TokenUpdate is not guarded with optlock in the backend.
    *
    * @generated from field: metalstack.api.v2.UpdateMeta update_meta = 2;
    */
@@ -629,49 +629,49 @@ export type TokenServiceUpdateRequest = Message<"metalstack.api.v2.TokenServiceU
   description?: string | undefined;
 
   /**
-   * Permissions is a list of service methods this token can be used for
+   * Permissions is a list of service methods this token can be used for.
    *
    * @generated from field: repeated metalstack.api.v2.PermissionsByVisibility permissions = 4;
    */
   permissions: PermissionsByVisibility[];
 
   /**
-   * ProjectRoles associates a project id with the corresponding role of the token owner
+   * ProjectRoles associates a project id with the corresponding role of the token owner.
    *
    * @generated from field: map<string, metalstack.api.v2.ProjectRole> project_roles = 5;
    */
   projectRoles: { [key: string]: ProjectRole };
 
   /**
-   * TenantRoles associates a tenant id with the corresponding role of the token owner
+   * TenantRoles associates a tenant id with the corresponding role of the token owner.
    *
    * @generated from field: map<string, metalstack.api.v2.TenantRole> tenant_roles = 6;
    */
   tenantRoles: { [key: string]: TenantRole };
 
   /**
-   * AdminRole defines the admin role of the token owner
+   * AdminRole defines the admin role of the token owner.
    *
    * @generated from field: optional metalstack.api.v2.AdminRole admin_role = 7;
    */
   adminRole?: AdminRole | undefined;
 
   /**
-   * InfraRole defines the infrastructure role of the token owner
+   * InfraRole defines the infrastructure role of the token owner.
    *
    * @generated from field: optional metalstack.api.v2.InfraRole infra_role = 8;
    */
   infraRole?: InfraRole | undefined;
 
   /**
-   * MachineRoles associates a machine uuid with the corresponding role of the token owner
+   * MachineRoles associates a machine uuid with the corresponding role of the token owner.
    *
    * @generated from field: map<string, metalstack.api.v2.MachineRole> machine_roles = 9;
    */
   machineRoles: { [key: string]: MachineRole };
 
   /**
-   * Labels on this token
+   * Labels on this token.
    *
    * @generated from field: metalstack.api.v2.UpdateLabels labels = 10;
    */
@@ -686,13 +686,13 @@ export const TokenServiceUpdateRequestSchema: GenMessage<TokenServiceUpdateReque
   messageDesc(file_metalstack_api_v2_token, 16);
 
 /**
- * TokenServiceUpdateResponse is the response payload of a token update request
+ * TokenServiceUpdateResponse is the response payload of a token update request.
  *
  * @generated from message metalstack.api.v2.TokenServiceUpdateResponse
  */
 export type TokenServiceUpdateResponse = Message<"metalstack.api.v2.TokenServiceUpdateResponse"> & {
   /**
-   * Token is the updated token
+   * Token is the updated token.
    *
    * @generated from field: metalstack.api.v2.Token token = 1;
    */
@@ -707,13 +707,13 @@ export const TokenServiceUpdateResponseSchema: GenMessage<TokenServiceUpdateResp
   messageDesc(file_metalstack_api_v2_token, 17);
 
 /**
- * TokenServiceGetRequest is the request payload of a token get request
+ * TokenServiceGetRequest is the request payload of a token get request.
  *
  * @generated from message metalstack.api.v2.TokenServiceGetRequest
  */
 export type TokenServiceGetRequest = Message<"metalstack.api.v2.TokenServiceGetRequest"> & {
   /**
-   * Uuid of the token to get
+   * Uuid of the token to get.
    *
    * @generated from field: string uuid = 1;
    */
@@ -728,13 +728,13 @@ export const TokenServiceGetRequestSchema: GenMessage<TokenServiceGetRequest> =
   messageDesc(file_metalstack_api_v2_token, 18);
 
 /**
- * TokenServiceGetResponse is the response payload of a token get request
+ * TokenServiceGetResponse is the response payload of a token get request.
  *
  * @generated from message metalstack.api.v2.TokenServiceGetResponse
  */
 export type TokenServiceGetResponse = Message<"metalstack.api.v2.TokenServiceGetResponse"> & {
   /**
-   * Token is the token
+   * Token is the token.
    *
    * @generated from field: metalstack.api.v2.Token token = 1;
    */
@@ -749,9 +749,9 @@ export const TokenServiceGetResponseSchema: GenMessage<TokenServiceGetResponse>
   messageDesc(file_metalstack_api_v2_token, 19);
 
 /**
- * TokenServiceRefreshRequest is the request payload of a token refresh request
+ * TokenServiceRefreshRequest is the request payload of a token refresh request.
  * Permissions, Roles and Expiration duration and all other properties are inherited from the calling token.
- * The expiration duration will be calculated from the existing token (exp - iat)
+ * The expiration duration will be calculated from the existing token (exp - iat).
  *
  * @generated from message metalstack.api.v2.TokenServiceRefreshRequest
  */
@@ -766,20 +766,20 @@ export const TokenServiceRefreshRequestSchema: GenMessage<TokenServiceRefreshReq
   messageDesc(file_metalstack_api_v2_token, 20);
 
 /**
- * TokenServiceRefreshResponse is the response payload of a token refresh request
+ * TokenServiceRefreshResponse is the response payload of a token refresh request.
  *
  * @generated from message metalstack.api.v2.TokenServiceRefreshResponse
  */
 export type TokenServiceRefreshResponse = Message<"metalstack.api.v2.TokenServiceRefreshResponse"> & {
   /**
-   * Token which was refreshed
+   * Token which was refreshed.
    *
    * @generated from field: metalstack.api.v2.Token token = 1;
    */
   token?: Token | undefined;
 
   /**
-   * Secret is the body of the JWT token, should be used in API requests as bearer token
+   * Secret is the body of the JWT token, should be used in API requests as bearer token.
    *
    * @generated from field: string secret = 2;
    */
@@ -794,20 +794,20 @@ export const TokenServiceRefreshResponseSchema: GenMessage<TokenServiceRefreshRe
   messageDesc(file_metalstack_api_v2_token, 21);
 
 /**
- * TokenQuery is used to search tokens
+ * TokenQuery is used to search tokens.
  *
  * @generated from message metalstack.api.v2.TokenQuery
  */
 export type TokenQuery = Message<"metalstack.api.v2.TokenQuery"> & {
   /**
-   * UUID of the token to get
+   * UUID of the token to get.
    *
    * @generated from field: optional string uuid = 1;
    */
   uuid?: string | undefined;
 
   /**
-   * Name of the token user to query
+   * Name of the token user to query.
    * Only useful for admins.
    *
    * @generated from field: optional string user = 2;
@@ -815,21 +815,21 @@ export type TokenQuery = Message<"metalstack.api.v2.TokenQuery"> & {
   user?: string | undefined;
 
   /**
-   * Description of the token to query
+   * Description of the token to query.
    *
    * @generated from field: optional string description = 3;
    */
   description?: string | undefined;
 
   /**
-   * Labels lists only tokens containing the given labels
+   * Labels lists only tokens containing the given labels.
    *
    * @generated from field: optional metalstack.api.v2.Labels labels = 4;
    */
   labels?: Labels | undefined;
 
   /**
-   * Token type of the token to query
+   * Token type of the token to query.
    *
    * @generated from field: optional metalstack.api.v2.TokenType token_type = 5;
    */
@@ -844,20 +844,20 @@ export const TokenQuerySchema: GenMessage<TokenQuery> = /*@__PURE__*/
   messageDesc(file_metalstack_api_v2_token, 22);
 
 /**
- * TokenType specifies different use cases of tokens
+ * TokenType specifies different use cases of tokens.
  *
  * @generated from enum metalstack.api.v2.TokenType
  */
 export enum TokenType {
   /**
-   * TOKEN_TYPE_UNSPECIFIED is not specified
+   * TOKEN_TYPE_UNSPECIFIED is not specified.
    *
    * @generated from enum value: TOKEN_TYPE_UNSPECIFIED = 0;
    */
   UNSPECIFIED = 0,
 
   /**
-   * TOKEN_TYPE_API is a token for api usage
+   * TOKEN_TYPE_API is a token for api usage.
    *
    * @generated from enum value: TOKEN_TYPE_API = 1;
    */