metal-stack-api 0.2.5__tar.gz → 0.2.6__tar.gz

{metal_stack_api-0.2.5 → metal_stack_api-0.2.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: metal-stack-api
-Version: 0.2.5
+Version: 0.2.6
 Summary: Python API client for metal-stack api
 Home-page: https://github.com/metal-stack/api
 Author: metal-stack authors
@@ -10,10 +10,10 @@ Classifier: Intended Audience :: Developers
 Classifier: Natural Language :: English
 Classifier: Operating System :: POSIX
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.11
-Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
-Requires-Dist: connectrpc>=0.10.0
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: connectrpc==0.10.1
+Requires-Dist: protobuf>=7.0
 Requires-Dist: protovalidate>=1.2.0
 Dynamic: author
 Dynamic: classifier

{metal_stack_api-0.2.5 → metal_stack_api-0.2.6}/metal_stack_api.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: metal-stack-api
-Version: 0.2.5
+Version: 0.2.6
 Summary: Python API client for metal-stack api
 Home-page: https://github.com/metal-stack/api
 Author: metal-stack authors
@@ -10,10 +10,10 @@ Classifier: Intended Audience :: Developers
 Classifier: Natural Language :: English
 Classifier: Operating System :: POSIX
 Classifier: Programming Language :: Python :: 3
-Classifier: Programming Language :: Python :: 3.11
-Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
-Requires-Dist: connectrpc>=0.10.0
+Classifier: Programming Language :: Python :: 3.14
+Requires-Dist: connectrpc==0.10.1
+Requires-Dist: protobuf>=7.0
 Requires-Dist: protovalidate>=1.2.0
 Dynamic: author
 Dynamic: classifier

{metal_stack_api-0.2.5 → metal_stack_api-0.2.6}/metal_stack_api.egg-info/SOURCES.txt

@@ -124,6 +124,12 @@ metalstack/api/v2/vpn_pb2.py
 metalstack/api/v2/vpn_pb2.pyi
 metalstack/client/__init__.py
 metalstack/client/client.py
+metalstack/client/tests/__init__.py
+metalstack/client/tests/conftest.py
+metalstack/client/tests/test_client.py
+metalstack/client/tests/test_interceptor.py
+metalstack/client/tests/test_ping.py
+metalstack/client/tests/test_token_persistent.py
 metalstack/infra/__init__.py
 metalstack/infra/v2/__init__.py
 metalstack/infra/v2/bmc_connect.py

metal_stack_api-0.2.6/metal_stack_api.egg-info/requires.txt

@@ -0,0 +1,3 @@
+connectrpc==0.10.1
+protobuf>=7.0
+protovalidate>=1.2.0

{metal_stack_api-0.2.5 → metal_stack_api-0.2.6}/metalstack/api/v2/predefined_rules_pb2.py

@@ -25,7 +25,7 @@ _sym_db = _symbol_database.Default()
 from buf.validate import validate_pb2 as buf_dot_validate_dot_validate__pb2
 
 
-DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n(metalstack/api/v2/predefined_rules.proto\x12\x11metalstack.api.v2\x1a\x1b\x62uf/validate/validate.proto:\xb8\x01\n\nmacaddress\x12\x19.buf.validate.StringRules\x18\xb7\xe6\x95& \x01(\x08\x42z\xc2Hw\nu\n\x11string.macaddress\x12&this string must be a valid macaddress\x1a\x38this.matches(\'^([0-9A-Fa-f]{2}[:]){5}([0-9A-Fa-f]{2})$\')R\nmacaddress:\x99\x01\n\x07is_name\x12\x19.buf.validate.StringRules\x18\xb8\xe6\x95& \x01(\x08\x42\x62\xc2H_\n]\n\x0estring.is_name\x12#must be within 2 and 128 characters\x1a&this.size() >= 2 && this.size() <= 128R\x06isName:\x9a\x01\n\x0eis_description\x12\x19.buf.validate.StringRules\x18\xb9\xe6\x95& \x01(\x08\x42U\xc2HR\nP\n\x15string.is_description\x12#must be shorter than 256 characters\x1a\x12this.size() <= 256R\risDescription:\xa8\x01\n\x0cis_partition\x12\x19.buf.validate.StringRules\x18\xba\xe6\x95& \x01(\x08\x42g\xc2Hd\nb\n\x13string.is_partition\x12#must be within 2 and 128 characters\x1a&this.size() >= 2 && this.size() <= 128R\x0bisPartition:\x82\x01\n\tis_prefix\x12\x19.buf.validate.StringRules\x18\xbb\xe6\x95& \x01(\x08\x42G\xc2HD\nB\n\x0fstring.prefixes\x12\x1cgiven prefixes must be valid\x1a\x11this.isIpPrefix()R\x08isPrefix:m\n\x06is_uri\x12\x19.buf.validate.StringRules\x18\xbc\xe6\x95& \x01(\x08\x42\x38\xc2H5\n3\n\nstring.uri\x12\x17given uri must be valid\x1a\x0cthis.isUri()R\x05isUri:\xa7\x01\n\x11is_ip_or_hostname\x12\x19.buf.validate.StringRules\x18\xbd\xe6\x95& \x01(\x08\x42^\xc2H[\nY\n\rvalid_address\x12&must be a valid IP address or hostname\x1a this.isIp() || this.isHostname()R\x0eisIpOrHostname:\x9d\x01\n\x07trimmed\x12\x19.buf.validate.StringRules\x18\xbe\xe6\x95& \x01(\x08\x42\x65\xc2Hb\n`\n\x0estring.trimmed\x12+value must not start or end with whitespace\x1a!this.trim().size() == this.size()R\x07trimmed:\x99\x01\n\x07is_user\x12\x19.buf.validate.StringRules\x18\xbf\xe6\x95& \x01(\x08\x42\x62\xc2H_\n]\n\x0estring.is_user\x12#must be within 2 and 512 characters\x1a&this.size() >= 2 && this.size() <= 512R\x06isUser:\x9f\x01\n\tis_option\x12\x19.buf.validate.StringRules\x18\xc0\xe6\x95& \x01(\x08\x42\x64\xc2Ha\n_\n\x10string.is_option\x12#must be within 1 and 128 characters\x1a&this.size() >= 1 && this.size() <= 128R\x08isOption:\x98\x01\n\x06is_key\x12\x19.buf.validate.StringRules\x18\xc1\xe6\x95& \x01(\x08\x42\x63\xc2H`\n^\n\rstring.is_key\x12$must be within 1 and 8192 characters\x1a\'this.size() >= 1 && this.size() <= 8192R\x05isKey:\xb0\x01\n\x0fis_tenant_login\x12\x19.buf.validate.StringRules\x18\xc2\xe6\x95& \x01(\x08\x42j\xc2Hg\ne\n\x16string.is_tenant_login\x12#must be within 2 and 256 characters\x1a&this.size() >= 2 && this.size() <= 256R\risTenantLogin:\x8f\x01\n\x08prefixes\x12\x1b.buf.validate.RepeatedRules\x18\xc7\xb4\x96& \x01(\x08\x42S\xc2HP\nN\n\x11repeated.prefixes\x12\x1cgiven prefixes must be valid\x1a\x1bthis.all(m, m.isIpPrefix())R\x08prefixes:u\n\x03ips\x12\x1b.buf.validate.RepeatedRules\x18\xc8\xb4\x96& \x01(\x08\x42\x43\xc2H@\n>\n\x0crepeated.ips\x12\x17given ips must be valid\x1a\x15this.all(m, m.isIp())R\x03ips:\xe6\x01\n\x11\x61re_host_and_port\x12\x1b.buf.validate.RepeatedRules\x18\xc9\xb4\x96& \x01(\x08\x42\x9a\x01\xc2H\x96\x01\n\x93\x01\n\x1arepeated.are_host_and_port\x12Pgiven entries must all be in the form of <ip | host>:<port> but port is optional\x1a#this.all(m, m.isHostAndPort(false))R\x0e\x61reHostAndPort:\xba\x01\n\x0b\x61ll_trimmed\x12\x1b.buf.validate.RepeatedRules\x18\xca\xb4\x96& \x01(\x08\x42y\xc2Hv\nt\n\x14repeated.all_trimmed\x12\x32given values must not start or end with whitespace\x1a(this.all(m, m.trim().size() == m.size())R\nallTrimmed:\x84\x02\n\x17keys_and_values_trimmed\x12\x16.buf.validate.MapRules\x18\xd7\x82\x97& \x01(\x08\x42\xb1\x01\xc2H\xad\x01\n\xaa\x01\n\x1bmap.keys_and_values_trimmed\x12\x35keys and values must not start or end with whitespace\x1aTthis.all(k, k.trim().size() == k.size()) && this.all(v, v.trim().size() == v.size())R\x14keysAndValuesTrimmed:\xab\x01\n\x0ckeys_trimmed\x12\x16.buf.validate.MapRules\x18\xd8\x82\x97& \x01(\x08\x42m\xc2Hj\nh\n\x10map.keys_trimmed\x12*keys must not start or end with whitespace\x1a(this.all(k, k.trim().size() == k.size())R\x0bkeysTrimmedB\xca\x01\n\x15\x63om.metalstack.api.v2B\x14PredefinedRulesProtoP\x01Z5github.com/metal-stack/api/go/metalstack/api/v2;apiv2\xa2\x02\x03MAX\xaa\x02\x11Metalstack.Api.V2\xca\x02\x11Metalstack\\Api\\V2\xe2\x02\x1dMetalstack\\Api\\V2\\GPBMetadata\xea\x02\x13Metalstack::Api::V2')
+DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n(metalstack/api/v2/predefined_rules.proto\x12\x11metalstack.api.v2\x1a\x1b\x62uf/validate/validate.proto:\xb8\x01\n\nmacaddress\x12\x19.buf.validate.StringRules\x18\xb7\xe6\x95& \x01(\x08\x42z\xc2Hw\nu\n\x11string.macaddress\x12&this string must be a valid macaddress\x1a\x38this.matches(\'^([0-9A-Fa-f]{2}[:]){5}([0-9A-Fa-f]{2})$\')R\nmacaddress:\x99\x01\n\x07is_name\x12\x19.buf.validate.StringRules\x18\xb8\xe6\x95& \x01(\x08\x42\x62\xc2H_\n]\n\x0estring.is_name\x12#must be within 2 and 128 characters\x1a&this.size() >= 2 && this.size() <= 128R\x06isName:\x9a\x01\n\x0eis_description\x12\x19.buf.validate.StringRules\x18\xb9\xe6\x95& \x01(\x08\x42U\xc2HR\nP\n\x15string.is_description\x12#must be shorter than 256 characters\x1a\x12this.size() <= 256R\risDescription:\xa8\x01\n\x0cis_partition\x12\x19.buf.validate.StringRules\x18\xba\xe6\x95& \x01(\x08\x42g\xc2Hd\nb\n\x13string.is_partition\x12#must be within 2 and 128 characters\x1a&this.size() >= 2 && this.size() <= 128R\x0bisPartition:\x82\x01\n\tis_prefix\x12\x19.buf.validate.StringRules\x18\xbb\xe6\x95& \x01(\x08\x42G\xc2HD\nB\n\x0fstring.prefixes\x12\x1cgiven prefixes must be valid\x1a\x11this.isIpPrefix()R\x08isPrefix:m\n\x06is_uri\x12\x19.buf.validate.StringRules\x18\xbc\xe6\x95& \x01(\x08\x42\x38\xc2H5\n3\n\nstring.uri\x12\x17given uri must be valid\x1a\x0cthis.isUri()R\x05isUri:\xa7\x01\n\x11is_ip_or_hostname\x12\x19.buf.validate.StringRules\x18\xbd\xe6\x95& \x01(\x08\x42^\xc2H[\nY\n\rvalid_address\x12&must be a valid IP address or hostname\x1a this.isIp() || this.isHostname()R\x0eisIpOrHostname:\x9d\x01\n\x07trimmed\x12\x19.buf.validate.StringRules\x18\xbe\xe6\x95& \x01(\x08\x42\x65\xc2Hb\n`\n\x0estring.trimmed\x12+value must not start or end with whitespace\x1a!this.trim().size() == this.size()R\x07trimmed:\x99\x01\n\x07is_user\x12\x19.buf.validate.StringRules\x18\xbf\xe6\x95& \x01(\x08\x42\x62\xc2H_\n]\n\x0estring.is_user\x12#must be within 2 and 512 characters\x1a&this.size() >= 2 && this.size() <= 512R\x06isUser:\x9f\x01\n\tis_option\x12\x19.buf.validate.StringRules\x18\xc0\xe6\x95& \x01(\x08\x42\x64\xc2Ha\n_\n\x10string.is_option\x12#must be within 1 and 128 characters\x1a&this.size() >= 1 && this.size() <= 128R\x08isOption:\x98\x01\n\x06is_key\x12\x19.buf.validate.StringRules\x18\xc1\xe6\x95& \x01(\x08\x42\x63\xc2H`\n^\n\rstring.is_key\x12$must be within 1 and 8192 characters\x1a\'this.size() >= 1 && this.size() <= 8192R\x05isKey:\xb0\x01\n\x0fis_tenant_login\x12\x19.buf.validate.StringRules\x18\xc2\xe6\x95& \x01(\x08\x42j\xc2Hg\ne\n\x16string.is_tenant_login\x12#must be within 2 and 256 characters\x1a&this.size() >= 2 && this.size() <= 256R\risTenantLogin:\x8f\x01\n\x08prefixes\x12\x1b.buf.validate.RepeatedRules\x18\xc7\xb4\x96& \x01(\x08\x42S\xc2HP\nN\n\x11repeated.prefixes\x12\x1cgiven prefixes must be valid\x1a\x1bthis.all(m, m.isIpPrefix())R\x08prefixes:u\n\x03ips\x12\x1b.buf.validate.RepeatedRules\x18\xc8\xb4\x96& \x01(\x08\x42\x43\xc2H@\n>\n\x0crepeated.ips\x12\x17given ips must be valid\x1a\x15this.all(m, m.isIp())R\x03ips:\xe6\x01\n\x11\x61re_host_and_port\x12\x1b.buf.validate.RepeatedRules\x18\xc9\xb4\x96& \x01(\x08\x42\x9a\x01\xc2H\x96\x01\n\x93\x01\n\x1arepeated.are_host_and_port\x12Pgiven entries must all be in the form of <ip | host>:<port> but port is optional\x1a#this.all(m, m.isHostAndPort(false))R\x0e\x61reHostAndPort:\xba\x01\n\x0b\x61ll_trimmed\x12\x1b.buf.validate.RepeatedRules\x18\xca\xb4\x96& \x01(\x08\x42y\xc2Hv\nt\n\x14repeated.all_trimmed\x12\x32given values must not start or end with whitespace\x1a(this.all(m, m.trim().size() == m.size())R\nallTrimmed:\x84\x02\n\x17keys_and_values_trimmed\x12\x16.buf.validate.MapRules\x18\xd7\x82\x97& \x01(\x08\x42\xb1\x01\xc2H\xad\x01\n\xaa\x01\n\x1bmap.keys_and_values_trimmed\x12\x35keys and values must not start or end with whitespace\x1aTthis.all(k, k.trim().size() == k.size()) && this.all(v, v.trim().size() == v.size())R\x14keysAndValuesTrimmed:\xab\x01\n\x0ckeys_trimmed\x12\x16.buf.validate.MapRules\x18\xd8\x82\x97& \x01(\x08\x42m\xc2Hj\nh\n\x10map.keys_trimmed\x12*keys must not start or end with whitespace\x1a(this.all(k, k.trim().size() == k.size())R\x0bkeysTrimmed:\x92\x02\n\x18project_roles_keys_valid\x12\x16.buf.validate.MapRules\x18\xd9\x82\x97& \x01(\x08\x42\xbd\x01\xc2H\xb9\x01\n\xb6\x01\n\x17project_roles.key.valid\x12&subject must be a \'*\', or a valid UUID\x1asthis.all(k, k == \'*\' || k.matches(\'^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$\'))R\x15projectRolesKeysValid:\xe8\x01\n\x17tenant_roles_keys_valid\x12\x16.buf.validate.MapRules\x18\xda\x82\x97& \x01(\x08\x42\x95\x01\xc2H\x91\x01\n\x8e\x01\n\x16tenant_roles.key.valid\x12\x33subject must be \'*\' or between 2 and 128 characters\x1a?this.all(k, k == \'*\' || this.size() >= 2 || this.size() <=128 )R\x14tenantRolesKeysValid:\xa9\x02\n\x18machine_roles_keys_valid\x12\x16.buf.validate.MapRules\x18\xdb\x82\x97& \x01(\x08\x42\xd4\x01\xc2H\xd0\x01\n\xcd\x01\n\x17machine_roles.key.valid\x12\x32subject must be empty string, \'*\', or a valid UUID\x1a~this.all(k, k == \'\' || k == \'*\' || k.matches(\'^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$\'))R\x15machineRolesKeysValidB\xca\x01\n\x15\x63om.metalstack.api.v2B\x14PredefinedRulesProtoP\x01Z5github.com/metal-stack/api/go/metalstack/api/v2;apiv2\xa2\x02\x03MAX\xaa\x02\x11Metalstack.Api.V2\xca\x02\x11Metalstack\\Api\\V2\xe2\x02\x1dMetalstack\\Api\\V2\\GPBMetadata\xea\x02\x13Metalstack::Api::V2')
 
 _globals = globals()
 _builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
@@ -69,4 +69,10 @@ if not _descriptor._USE_C_DESCRIPTORS:
   _globals['keys_and_values_trimmed']._serialized_options = b'\302H\255\001\n\252\001\n\033map.keys_and_values_trimmed\0225keys and values must not start or end with whitespace\032Tthis.all(k, k.trim().size() == k.size()) && this.all(v, v.trim().size() == v.size())'
   _globals['keys_trimmed']._loaded_options = None
   _globals['keys_trimmed']._serialized_options = b'\302Hj\nh\n\020map.keys_trimmed\022*keys must not start or end with whitespace\032(this.all(k, k.trim().size() == k.size())'
+  _globals['project_roles_keys_valid']._loaded_options = None
+  _globals['project_roles_keys_valid']._serialized_options = b'\302H\271\001\n\266\001\n\027project_roles.key.valid\022&subject must be a \'*\', or a valid UUID\032sthis.all(k, k == \'*\' || k.matches(\'^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$\'))'
+  _globals['tenant_roles_keys_valid']._loaded_options = None
+  _globals['tenant_roles_keys_valid']._serialized_options = b'\302H\221\001\n\216\001\n\026tenant_roles.key.valid\0223subject must be \'*\' or between 2 and 128 characters\032?this.all(k, k == \'*\' || this.size() >= 2 || this.size() <=128 )'
+  _globals['machine_roles_keys_valid']._loaded_options = None
+  _globals['machine_roles_keys_valid']._serialized_options = b'\302H\320\001\n\315\001\n\027machine_roles.key.valid\0222subject must be empty string, \'*\', or a valid UUID\032~this.all(k, k == \'\' || k == \'*\' || k.matches(\'^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$\'))'
 # @@protoc_insertion_point(module_scope)

{metal_stack_api-0.2.5 → metal_stack_api-0.2.6}/metalstack/api/v2/predefined_rules_pb2.pyi

@@ -39,3 +39,9 @@ KEYS_AND_VALUES_TRIMMED_FIELD_NUMBER: _ClassVar[int]
 keys_and_values_trimmed: _descriptor.FieldDescriptor
 KEYS_TRIMMED_FIELD_NUMBER: _ClassVar[int]
 keys_trimmed: _descriptor.FieldDescriptor
+PROJECT_ROLES_KEYS_VALID_FIELD_NUMBER: _ClassVar[int]
+project_roles_keys_valid: _descriptor.FieldDescriptor
+TENANT_ROLES_KEYS_VALID_FIELD_NUMBER: _ClassVar[int]
+tenant_roles_keys_valid: _descriptor.FieldDescriptor
+MACHINE_ROLES_KEYS_VALID_FIELD_NUMBER: _ClassVar[int]
+machine_roles_keys_valid: _descriptor.FieldDescriptor

metal_stack_api-0.2.6/metalstack/api/v2/token_pb2.py

@@ -0,0 +1,190 @@
+# -*- coding: utf-8 -*-
+# Generated by the protocol buffer compiler.  DO NOT EDIT!
+# NO CHECKED-IN PROTOBUF GENCODE
+# source: metalstack/api/v2/token.proto
+# Protobuf Python Version: 7.35.1
+"""Generated protocol buffer code."""
+from google.protobuf import descriptor as _descriptor
+from google.protobuf import descriptor_pool as _descriptor_pool
+from google.protobuf import runtime_version as _runtime_version
+from google.protobuf import symbol_database as _symbol_database
+from google.protobuf.internal import builder as _builder
+_runtime_version.ValidateProtobufRuntimeVersion(
+    _runtime_version.Domain.PUBLIC,
+    7,
+    35,
+    1,
+    '',
+    'metalstack/api/v2/token.proto'
+)
+# @@protoc_insertion_point(imports)
+
+_sym_db = _symbol_database.Default()
+
+
+from buf.validate import validate_pb2 as buf_dot_validate_dot_validate__pb2
+from google.protobuf import duration_pb2 as google_dot_protobuf_dot_duration__pb2
+from google.protobuf import timestamp_pb2 as google_dot_protobuf_dot_timestamp__pb2
+from metalstack.api.v2 import common_pb2 as metalstack_dot_api_dot_v2_dot_common__pb2
+from metalstack.api.v2 import predefined_rules_pb2 as metalstack_dot_api_dot_v2_dot_predefined__rules__pb2
+
+
+DESCRIPTOR = _descriptor_pool.Default().AddSerializedFile(b'\n\x1dmetalstack/api/v2/token.proto\x12\x11metalstack.api.v2\x1a\x1b\x62uf/validate/validate.proto\x1a\x1egoogle/protobuf/duration.proto\x1a\x1fgoogle/protobuf/timestamp.proto\x1a\x1emetalstack/api/v2/common.proto\x1a(metalstack/api/v2/predefined_rules.proto\"\xc2\t\n\x05Token\x12\x1c\n\x04uuid\x18\x01 \x01(\tB\x08\xbaH\x05r\x03\xb0\x01\x01R\x04uuid\x12\x1f\n\x04user\x18\x02 \x01(\tB\x0b\xbaH\x08r\x06\xf8\xb3\xae\xb1\x02\x01R\x04user\x12+\n\x04meta\x18\x03 \x01(\x0b\x32\x17.metalstack.api.v2.MetaR\x04meta\x12-\n\x0b\x64\x65scription\x18\x04 \x01(\tB\x0b\xbaH\x08r\x06\xc8\xb3\xae\xb1\x02\x01R\x0b\x64\x65scription\x12P\n\x0bpermissions\x18\x05 \x03(\x0b\x32#.metalstack.api.v2.MethodPermissionB\t\xbaH\x06\x92\x01\x03\x10\xf4\x03R\x0bpermissions\x12\x34\n\x07\x65xpires\x18\x06 \x01(\x0b\x32\x1a.google.protobuf.TimestampR\x07\x65xpires\x12\x37\n\tissued_at\x18\x07 \x01(\x0b\x32\x1a.google.protobuf.TimestampR\x08issuedAt\x12\x45\n\ntoken_type\x18\x08 \x01(\x0e\x32\x1c.metalstack.api.v2.TokenTypeB\x08\xbaH\x05\x82\x01\x02\x10\x01R\ttokenType\x12j\n\rproject_roles\x18\t \x03(\x0b\x32*.metalstack.api.v2.Token.ProjectRolesEntryB\x19\xbaH\x16\x9a\x01\x13*\x05\x82\x01\x02\x10\x01\xc0\x95\xb8\xb1\x02\x01\xc8\x95\xb8\xb1\x02\x01R\x0cprojectRoles\x12g\n\x0ctenant_roles\x18\n \x03(\x0b\x32).metalstack.api.v2.Token.TenantRolesEntryB\x19\xbaH\x16\x9a\x01\x13*\x05\x82\x01\x02\x10\x01\xc0\x95\xb8\xb1\x02\x01\xd0\x95\xb8\xb1\x02\x01R\x0btenantRoles\x12J\n\nadmin_role\x18\x0b \x01(\x0e\x32\x1c.metalstack.api.v2.AdminRoleB\x08\xbaH\x05\x82\x01\x02\x10\x01H\x00R\tadminRole\x88\x01\x01\x12J\n\ninfra_role\x18\x0c \x01(\x0e\x32\x1c.metalstack.api.v2.InfraRoleB\x08\xbaH\x05\x82\x01\x02\x10\x01H\x01R\tinfraRole\x88\x01\x01\x12j\n\rmachine_roles\x18\r \x03(\x0b\x32*.metalstack.api.v2.Token.MachineRolesEntryB\x19\xbaH\x16\x9a\x01\x13*\x05\x82\x01\x02\x10\x01\xc0\x95\xb8\xb1\x02\x01\xd8\x95\xb8\xb1\x02\x01R\x0cmachineRoles\x1a_\n\x11ProjectRolesEntry\x12\x10\n\x03key\x18\x01 \x01(\tR\x03key\x12\x34\n\x05value\x18\x02 \x01(\x0e\x32\x1e.metalstack.api.v2.ProjectRoleR\x05value:\x02\x38\x01\x1a]\n\x10TenantRolesEntry\x12\x10\n\x03key\x18\x01 \x01(\tR\x03key\x12\x33\n\x05value\x18\x02 \x01(\x0e\x32\x1d.metalstack.api.v2.TenantRoleR\x05value:\x02\x38\x01\x1a_\n\x11MachineRolesEntry\x12\x10\n\x03key\x18\x01 \x01(\tR\x03key\x12\x34\n\x05value\x18\x02 \x01(\x0e\x32\x1e.metalstack.api.v2.MachineRoleR\x05value:\x02\x38\x01\x42\r\n\x0b_admin_roleB\r\n\x0b_infra_role\"\xeb\x08\n\x19TokenServiceCreateRequest\x12-\n\x0b\x64\x65scription\x18\x01 \x01(\tB\x0b\xbaH\x08r\x06\xc8\xb3\xae\xb1\x02\x01R\x0b\x64\x65scription\x12O\n\x0bpermissions\x18\x02 \x03(\x0b\x32#.metalstack.api.v2.MethodPermissionB\x08\xbaH\x05\x92\x01\x02\x10\x64R\x0bpermissions\x12G\n\x07\x65xpires\x18\x03 \x01(\x0b\x32\x19.google.protobuf.DurationB\x12\xbaH\x0f\xaa\x01\x0c\x1a\x05\x08\x81\xe7\x84\x0f\x32\x03\x08\xd8\x04R\x07\x65xpires\x12~\n\rproject_roles\x18\x04 \x03(\x0b\x32>.metalstack.api.v2.TokenServiceCreateRequest.ProjectRolesEntryB\x19\xbaH\x16\x9a\x01\x13*\x05\x82\x01\x02\x10\x01\xc0\x95\xb8\xb1\x02\x01\xc8\x95\xb8\xb1\x02\x01R\x0cprojectRoles\x12{\n\x0ctenant_roles\x18\x05 \x03(\x0b\x32=.metalstack.api.v2.TokenServiceCreateRequest.TenantRolesEntryB\x19\xbaH\x16\x9a\x01\x13*\x05\x82\x01\x02\x10\x01\xc0\x95\xb8\xb1\x02\x01\xd0\x95\xb8\xb1\x02\x01R\x0btenantRoles\x12J\n\nadmin_role\x18\x06 \x01(\x0e\x32\x1c.metalstack.api.v2.AdminRoleB\x08\xbaH\x05\x82\x01\x02\x10\x01H\x00R\tadminRole\x88\x01\x01\x12J\n\ninfra_role\x18\x07 \x01(\x0e\x32\x1c.metalstack.api.v2.InfraRoleB\x08\xbaH\x05\x82\x01\x02\x10\x01H\x01R\tinfraRole\x88\x01\x01\x12~\n\rmachine_roles\x18\x08 \x03(\x0b\x32>.metalstack.api.v2.TokenServiceCreateRequest.MachineRolesEntryB\x19\xbaH\x16\x9a\x01\x13*\x05\x82\x01\x02\x10\x01\xc0\x95\xb8\xb1\x02\x01\xd8\x95\xb8\xb1\x02\x01R\x0cmachineRoles\x12\x31\n\x06labels\x18\t \x01(\x0b\x32\x19.metalstack.api.v2.LabelsR\x06labels\x1a_\n\x11ProjectRolesEntry\x12\x10\n\x03key\x18\x01 \x01(\tR\x03key\x12\x34\n\x05value\x18\x02 \x01(\x0e\x32\x1e.metalstack.api.v2.ProjectRoleR\x05value:\x02\x38\x01\x1a]\n\x10TenantRolesEntry\x12\x10\n\x03key\x18\x01 \x01(\tR\x03key\x12\x33\n\x05value\x18\x02 \x01(\x0e\x32\x1d.metalstack.api.v2.TenantRoleR\x05value:\x02\x38\x01\x1a_\n\x11MachineRolesEntry\x12\x10\n\x03key\x18\x01 \x01(\tR\x03key\x12\x34\n\x05value\x18\x02 \x01(\x0e\x32\x1e.metalstack.api.v2.MachineRoleR\x05value:\x02\x38\x01\x42\r\n\x0b_admin_roleB\r\n\x0b_infra_role\"[\n\x10MethodPermission\x12\"\n\x07subject\x18\x01 \x01(\tB\x08\xbaH\x05r\x03\x18\x80\x02R\x07subject\x12#\n\x07methods\x18\x02 \x03(\tB\t\xbaH\x06\x92\x01\x03\x10\xf4\x03R\x07methods\"d\n\x1aTokenServiceCreateResponse\x12.\n\x05token\x18\x01 \x01(\x0b\x32\x18.metalstack.api.v2.TokenR\x05token\x12\x16\n\x06secret\x18\x02 \x01(\tR\x06secret\"N\n\x17TokenServiceListRequest\x12\x33\n\x05query\x18\x01 \x01(\x0b\x32\x1d.metalstack.api.v2.TokenQueryR\x05query\"L\n\x18TokenServiceListResponse\x12\x30\n\x06tokens\x18\x01 \x03(\x0b\x32\x18.metalstack.api.v2.TokenR\x06tokens\"9\n\x19TokenServiceRevokeRequest\x12\x1c\n\x04uuid\x18\x01 \x01(\tB\x08\xbaH\x05r\x03\xb0\x01\x01R\x04uuid\"\x1c\n\x1aTokenServiceRevokeResponse\"\x99\t\n\x19TokenServiceUpdateRequest\x12\x1c\n\x04uuid\x18\x01 \x01(\tB\x08\xbaH\x05r\x03\xb0\x01\x01R\x04uuid\x12\x46\n\x0bupdate_meta\x18\x02 \x01(\x0b\x32\x1d.metalstack.api.v2.UpdateMetaB\x06\xbaH\x03\xc8\x01\x00R\nupdateMeta\x12\x32\n\x0b\x64\x65scription\x18\x03 \x01(\tB\x0b\xbaH\x08r\x06\xc8\xb3\xae\xb1\x02\x01H\x00R\x0b\x64\x65scription\x88\x01\x01\x12\x45\n\x0bpermissions\x18\x04 \x03(\x0b\x32#.metalstack.api.v2.MethodPermissionR\x0bpermissions\x12~\n\rproject_roles\x18\x05 \x03(\x0b\x32>.metalstack.api.v2.TokenServiceUpdateRequest.ProjectRolesEntryB\x19\xbaH\x16\x9a\x01\x13*\x05\x82\x01\x02\x10\x01\xc0\x95\xb8\xb1\x02\x01\xc8\x95\xb8\xb1\x02\x01R\x0cprojectRoles\x12{\n\x0ctenant_roles\x18\x06 \x03(\x0b\x32=.metalstack.api.v2.TokenServiceUpdateRequest.TenantRolesEntryB\x19\xbaH\x16\x9a\x01\x13*\x05\x82\x01\x02\x10\x01\xc0\x95\xb8\xb1\x02\x01\xd0\x95\xb8\xb1\x02\x01R\x0btenantRoles\x12J\n\nadmin_role\x18\x07 \x01(\x0e\x32\x1c.metalstack.api.v2.AdminRoleB\x08\xbaH\x05\x82\x01\x02\x10\x01H\x01R\tadminRole\x88\x01\x01\x12J\n\ninfra_role\x18\x08 \x01(\x0e\x32\x1c.metalstack.api.v2.InfraRoleB\x08\xbaH\x05\x82\x01\x02\x10\x01H\x02R\tinfraRole\x88\x01\x01\x12~\n\rmachine_roles\x18\t \x03(\x0b\x32>.metalstack.api.v2.TokenServiceUpdateRequest.MachineRolesEntryB\x19\xbaH\x16\x9a\x01\x13*\x05\x82\x01\x02\x10\x01\xc0\x95\xb8\xb1\x02\x01\xd8\x95\xb8\xb1\x02\x01R\x0cmachineRoles\x12\x37\n\x06labels\x18\n \x01(\x0b\x32\x1f.metalstack.api.v2.UpdateLabelsR\x06labels\x1a_\n\x11ProjectRolesEntry\x12\x10\n\x03key\x18\x01 \x01(\tR\x03key\x12\x34\n\x05value\x18\x02 \x01(\x0e\x32\x1e.metalstack.api.v2.ProjectRoleR\x05value:\x02\x38\x01\x1a]\n\x10TenantRolesEntry\x12\x10\n\x03key\x18\x01 \x01(\tR\x03key\x12\x33\n\x05value\x18\x02 \x01(\x0e\x32\x1d.metalstack.api.v2.TenantRoleR\x05value:\x02\x38\x01\x1a_\n\x11MachineRolesEntry\x12\x10\n\x03key\x18\x01 \x01(\tR\x03key\x12\x34\n\x05value\x18\x02 \x01(\x0e\x32\x1e.metalstack.api.v2.MachineRoleR\x05value:\x02\x38\x01\x42\x0e\n\x0c_descriptionB\r\n\x0b_admin_roleB\r\n\x0b_infra_role\"L\n\x1aTokenServiceUpdateResponse\x12.\n\x05token\x18\x01 \x01(\x0b\x32\x18.metalstack.api.v2.TokenR\x05token\"6\n\x16TokenServiceGetRequest\x12\x1c\n\x04uuid\x18\x01 \x01(\tB\x08\xbaH\x05r\x03\xb0\x01\x01R\x04uuid\"I\n\x17TokenServiceGetResponse\x12.\n\x05token\x18\x01 \x01(\x0b\x32\x18.metalstack.api.v2.TokenR\x05token\"\x1c\n\x1aTokenServiceRefreshRequest\"e\n\x1bTokenServiceRefreshResponse\x12.\n\x05token\x18\x01 \x01(\x0b\x32\x18.metalstack.api.v2.TokenR\x05token\x12\x16\n\x06secret\x18\x02 \x01(\tR\x06secret\"\xc9\x02\n\nTokenQuery\x12!\n\x04uuid\x18\x01 \x01(\tB\x08\xbaH\x05r\x03\xb0\x01\x01H\x00R\x04uuid\x88\x01\x01\x12$\n\x04user\x18\x02 \x01(\tB\x0b\xbaH\x08r\x06\xf8\xb3\xae\xb1\x02\x01H\x01R\x04user\x88\x01\x01\x12\x32\n\x0b\x64\x65scription\x18\x03 \x01(\tB\x0b\xbaH\x08r\x06\xc8\xb3\xae\xb1\x02\x01H\x02R\x0b\x64\x65scription\x88\x01\x01\x12\x36\n\x06labels\x18\x04 \x01(\x0b\x32\x19.metalstack.api.v2.LabelsH\x03R\x06labels\x88\x01\x01\x12J\n\ntoken_type\x18\x05 \x01(\x0e\x32\x1c.metalstack.api.v2.TokenTypeB\x08\xbaH\x05\x82\x01\x02\x10\x01H\x04R\ttokenType\x88\x01\x01\x42\x07\n\x05_uuidB\x07\n\x05_userB\x0e\n\x0c_descriptionB\t\n\x07_labelsB\r\n\x0b_token_type*P\n\tTokenType\x12\x1a\n\x16TOKEN_TYPE_UNSPECIFIED\x10\x00\x12\x12\n\x0eTOKEN_TYPE_API\x10\x01\x12\x13\n\x0fTOKEN_TYPE_USER\x10\x02\x32\xa8\x05\n\x0cTokenService\x12\x66\n\x03Get\x12).metalstack.api.v2.TokenServiceGetRequest\x1a*.metalstack.api.v2.TokenServiceGetResponse\"\x08\xd8\xf3\x18\x02\xe0\xf3\x18\x01\x12o\n\x06\x43reate\x12,.metalstack.api.v2.TokenServiceCreateRequest\x1a-.metalstack.api.v2.TokenServiceCreateResponse\"\x08\xd8\xf3\x18\x02\xe0\xf3\x18\x01\x12o\n\x06Update\x12,.metalstack.api.v2.TokenServiceUpdateRequest\x1a-.metalstack.api.v2.TokenServiceUpdateResponse\"\x08\xd8\xf3\x18\x02\xe0\xf3\x18\x01\x12i\n\x04List\x12*.metalstack.api.v2.TokenServiceListRequest\x1a+.metalstack.api.v2.TokenServiceListResponse\"\x08\xd8\xf3\x18\x02\xe0\xf3\x18\x01\x12o\n\x06Revoke\x12,.metalstack.api.v2.TokenServiceRevokeRequest\x1a-.metalstack.api.v2.TokenServiceRevokeResponse\"\x08\xd8\xf3\x18\x02\xe0\xf3\x18\x01\x12r\n\x07Refresh\x12-.metalstack.api.v2.TokenServiceRefreshRequest\x1a..metalstack.api.v2.TokenServiceRefreshResponse\"\x08\xd8\xf3\x18\x02\xe0\xf3\x18\x01\x42\xc0\x01\n\x15\x63om.metalstack.api.v2B\nTokenProtoP\x01Z5github.com/metal-stack/api/go/metalstack/api/v2;apiv2\xa2\x02\x03MAX\xaa\x02\x11Metalstack.Api.V2\xca\x02\x11Metalstack\\Api\\V2\xe2\x02\x1dMetalstack\\Api\\V2\\GPBMetadata\xea\x02\x13Metalstack::Api::V2b\x06proto3')
+
+_globals = globals()
+_builder.BuildMessageAndEnumDescriptors(DESCRIPTOR, _globals)
+_builder.BuildTopDescriptorsAndMessages(DESCRIPTOR, 'metalstack.api.v2.token_pb2', _globals)
+if not _descriptor._USE_C_DESCRIPTORS:
+  _globals['DESCRIPTOR']._loaded_options = None
+  _globals['DESCRIPTOR']._serialized_options = b'\n\025com.metalstack.api.v2B\nTokenProtoP\001Z5github.com/metal-stack/api/go/metalstack/api/v2;apiv2\242\002\003MAX\252\002\021Metalstack.Api.V2\312\002\021Metalstack\\Api\\V2\342\002\035Metalstack\\Api\\V2\\GPBMetadata\352\002\023Metalstack::Api::V2'
+  _globals['_TOKEN_PROJECTROLESENTRY']._loaded_options = None
+  _globals['_TOKEN_PROJECTROLESENTRY']._serialized_options = b'8\001'
+  _globals['_TOKEN_TENANTROLESENTRY']._loaded_options = None
+  _globals['_TOKEN_TENANTROLESENTRY']._serialized_options = b'8\001'
+  _globals['_TOKEN_MACHINEROLESENTRY']._loaded_options = None
+  _globals['_TOKEN_MACHINEROLESENTRY']._serialized_options = b'8\001'
+  _globals['_TOKEN'].fields_by_name['uuid']._loaded_options = None
+  _globals['_TOKEN'].fields_by_name['uuid']._serialized_options = b'\272H\005r\003\260\001\001'
+  _globals['_TOKEN'].fields_by_name['user']._loaded_options = None
+  _globals['_TOKEN'].fields_by_name['user']._serialized_options = b'\272H\010r\006\370\263\256\261\002\001'
+  _globals['_TOKEN'].fields_by_name['description']._loaded_options = None
+  _globals['_TOKEN'].fields_by_name['description']._serialized_options = b'\272H\010r\006\310\263\256\261\002\001'
+  _globals['_TOKEN'].fields_by_name['permissions']._loaded_options = None
+  _globals['_TOKEN'].fields_by_name['permissions']._serialized_options = b'\272H\006\222\001\003\020\364\003'
+  _globals['_TOKEN'].fields_by_name['token_type']._loaded_options = None
+  _globals['_TOKEN'].fields_by_name['token_type']._serialized_options = b'\272H\005\202\001\002\020\001'
+  _globals['_TOKEN'].fields_by_name['project_roles']._loaded_options = None
+  _globals['_TOKEN'].fields_by_name['project_roles']._serialized_options = b'\272H\026\232\001\023*\005\202\001\002\020\001\300\225\270\261\002\001\310\225\270\261\002\001'
+  _globals['_TOKEN'].fields_by_name['tenant_roles']._loaded_options = None
+  _globals['_TOKEN'].fields_by_name['tenant_roles']._serialized_options = b'\272H\026\232\001\023*\005\202\001\002\020\001\300\225\270\261\002\001\320\225\270\261\002\001'
+  _globals['_TOKEN'].fields_by_name['admin_role']._loaded_options = None
+  _globals['_TOKEN'].fields_by_name['admin_role']._serialized_options = b'\272H\005\202\001\002\020\001'
+  _globals['_TOKEN'].fields_by_name['infra_role']._loaded_options = None
+  _globals['_TOKEN'].fields_by_name['infra_role']._serialized_options = b'\272H\005\202\001\002\020\001'
+  _globals['_TOKEN'].fields_by_name['machine_roles']._loaded_options = None
+  _globals['_TOKEN'].fields_by_name['machine_roles']._serialized_options = b'\272H\026\232\001\023*\005\202\001\002\020\001\300\225\270\261\002\001\330\225\270\261\002\001'
+  _globals['_TOKENSERVICECREATEREQUEST_PROJECTROLESENTRY']._loaded_options = None
+  _globals['_TOKENSERVICECREATEREQUEST_PROJECTROLESENTRY']._serialized_options = b'8\001'
+  _globals['_TOKENSERVICECREATEREQUEST_TENANTROLESENTRY']._loaded_options = None
+  _globals['_TOKENSERVICECREATEREQUEST_TENANTROLESENTRY']._serialized_options = b'8\001'
+  _globals['_TOKENSERVICECREATEREQUEST_MACHINEROLESENTRY']._loaded_options = None
+  _globals['_TOKENSERVICECREATEREQUEST_MACHINEROLESENTRY']._serialized_options = b'8\001'
+  _globals['_TOKENSERVICECREATEREQUEST'].fields_by_name['description']._loaded_options = None
+  _globals['_TOKENSERVICECREATEREQUEST'].fields_by_name['description']._serialized_options = b'\272H\010r\006\310\263\256\261\002\001'
+  _globals['_TOKENSERVICECREATEREQUEST'].fields_by_name['permissions']._loaded_options = None
+  _globals['_TOKENSERVICECREATEREQUEST'].fields_by_name['permissions']._serialized_options = b'\272H\005\222\001\002\020d'
+  _globals['_TOKENSERVICECREATEREQUEST'].fields_by_name['expires']._loaded_options = None
+  _globals['_TOKENSERVICECREATEREQUEST'].fields_by_name['expires']._serialized_options = b'\272H\017\252\001\014\032\005\010\201\347\204\0172\003\010\330\004'
+  _globals['_TOKENSERVICECREATEREQUEST'].fields_by_name['project_roles']._loaded_options = None
+  _globals['_TOKENSERVICECREATEREQUEST'].fields_by_name['project_roles']._serialized_options = b'\272H\026\232\001\023*\005\202\001\002\020\001\300\225\270\261\002\001\310\225\270\261\002\001'
+  _globals['_TOKENSERVICECREATEREQUEST'].fields_by_name['tenant_roles']._loaded_options = None
+  _globals['_TOKENSERVICECREATEREQUEST'].fields_by_name['tenant_roles']._serialized_options = b'\272H\026\232\001\023*\005\202\001\002\020\001\300\225\270\261\002\001\320\225\270\261\002\001'
+  _globals['_TOKENSERVICECREATEREQUEST'].fields_by_name['admin_role']._loaded_options = None
+  _globals['_TOKENSERVICECREATEREQUEST'].fields_by_name['admin_role']._serialized_options = b'\272H\005\202\001\002\020\001'
+  _globals['_TOKENSERVICECREATEREQUEST'].fields_by_name['infra_role']._loaded_options = None
+  _globals['_TOKENSERVICECREATEREQUEST'].fields_by_name['infra_role']._serialized_options = b'\272H\005\202\001\002\020\001'
+  _globals['_TOKENSERVICECREATEREQUEST'].fields_by_name['machine_roles']._loaded_options = None
+  _globals['_TOKENSERVICECREATEREQUEST'].fields_by_name['machine_roles']._serialized_options = b'\272H\026\232\001\023*\005\202\001\002\020\001\300\225\270\261\002\001\330\225\270\261\002\001'
+  _globals['_METHODPERMISSION'].fields_by_name['subject']._loaded_options = None
+  _globals['_METHODPERMISSION'].fields_by_name['subject']._serialized_options = b'\272H\005r\003\030\200\002'
+  _globals['_METHODPERMISSION'].fields_by_name['methods']._loaded_options = None
+  _globals['_METHODPERMISSION'].fields_by_name['methods']._serialized_options = b'\272H\006\222\001\003\020\364\003'
+  _globals['_TOKENSERVICEREVOKEREQUEST'].fields_by_name['uuid']._loaded_options = None
+  _globals['_TOKENSERVICEREVOKEREQUEST'].fields_by_name['uuid']._serialized_options = b'\272H\005r\003\260\001\001'
+  _globals['_TOKENSERVICEUPDATEREQUEST_PROJECTROLESENTRY']._loaded_options = None
+  _globals['_TOKENSERVICEUPDATEREQUEST_PROJECTROLESENTRY']._serialized_options = b'8\001'
+  _globals['_TOKENSERVICEUPDATEREQUEST_TENANTROLESENTRY']._loaded_options = None
+  _globals['_TOKENSERVICEUPDATEREQUEST_TENANTROLESENTRY']._serialized_options = b'8\001'
+  _globals['_TOKENSERVICEUPDATEREQUEST_MACHINEROLESENTRY']._loaded_options = None
+  _globals['_TOKENSERVICEUPDATEREQUEST_MACHINEROLESENTRY']._serialized_options = b'8\001'
+  _globals['_TOKENSERVICEUPDATEREQUEST'].fields_by_name['uuid']._loaded_options = None
+  _globals['_TOKENSERVICEUPDATEREQUEST'].fields_by_name['uuid']._serialized_options = b'\272H\005r\003\260\001\001'
+  _globals['_TOKENSERVICEUPDATEREQUEST'].fields_by_name['update_meta']._loaded_options = None
+  _globals['_TOKENSERVICEUPDATEREQUEST'].fields_by_name['update_meta']._serialized_options = b'\272H\003\310\001\000'
+  _globals['_TOKENSERVICEUPDATEREQUEST'].fields_by_name['description']._loaded_options = None
+  _globals['_TOKENSERVICEUPDATEREQUEST'].fields_by_name['description']._serialized_options = b'\272H\010r\006\310\263\256\261\002\001'
+  _globals['_TOKENSERVICEUPDATEREQUEST'].fields_by_name['project_roles']._loaded_options = None
+  _globals['_TOKENSERVICEUPDATEREQUEST'].fields_by_name['project_roles']._serialized_options = b'\272H\026\232\001\023*\005\202\001\002\020\001\300\225\270\261\002\001\310\225\270\261\002\001'
+  _globals['_TOKENSERVICEUPDATEREQUEST'].fields_by_name['tenant_roles']._loaded_options = None
+  _globals['_TOKENSERVICEUPDATEREQUEST'].fields_by_name['tenant_roles']._serialized_options = b'\272H\026\232\001\023*\005\202\001\002\020\001\300\225\270\261\002\001\320\225\270\261\002\001'
+  _globals['_TOKENSERVICEUPDATEREQUEST'].fields_by_name['admin_role']._loaded_options = None
+  _globals['_TOKENSERVICEUPDATEREQUEST'].fields_by_name['admin_role']._serialized_options = b'\272H\005\202\001\002\020\001'
+  _globals['_TOKENSERVICEUPDATEREQUEST'].fields_by_name['infra_role']._loaded_options = None
+  _globals['_TOKENSERVICEUPDATEREQUEST'].fields_by_name['infra_role']._serialized_options = b'\272H\005\202\001\002\020\001'
+  _globals['_TOKENSERVICEUPDATEREQUEST'].fields_by_name['machine_roles']._loaded_options = None
+  _globals['_TOKENSERVICEUPDATEREQUEST'].fields_by_name['machine_roles']._serialized_options = b'\272H\026\232\001\023*\005\202\001\002\020\001\300\225\270\261\002\001\330\225\270\261\002\001'
+  _globals['_TOKENSERVICEGETREQUEST'].fields_by_name['uuid']._loaded_options = None
+  _globals['_TOKENSERVICEGETREQUEST'].fields_by_name['uuid']._serialized_options = b'\272H\005r\003\260\001\001'
+  _globals['_TOKENQUERY'].fields_by_name['uuid']._loaded_options = None
+  _globals['_TOKENQUERY'].fields_by_name['uuid']._serialized_options = b'\272H\005r\003\260\001\001'
+  _globals['_TOKENQUERY'].fields_by_name['user']._loaded_options = None
+  _globals['_TOKENQUERY'].fields_by_name['user']._serialized_options = b'\272H\010r\006\370\263\256\261\002\001'
+  _globals['_TOKENQUERY'].fields_by_name['description']._loaded_options = None
+  _globals['_TOKENQUERY'].fields_by_name['description']._serialized_options = b'\272H\010r\006\310\263\256\261\002\001'
+  _globals['_TOKENQUERY'].fields_by_name['token_type']._loaded_options = None
+  _globals['_TOKENQUERY'].fields_by_name['token_type']._serialized_options = b'\272H\005\202\001\002\020\001'
+  _globals['_TOKENSERVICE'].methods_by_name['Get']._loaded_options = None
+  _globals['_TOKENSERVICE'].methods_by_name['Get']._serialized_options = b'\330\363\030\002\340\363\030\001'
+  _globals['_TOKENSERVICE'].methods_by_name['Create']._loaded_options = None
+  _globals['_TOKENSERVICE'].methods_by_name['Create']._serialized_options = b'\330\363\030\002\340\363\030\001'
+  _globals['_TOKENSERVICE'].methods_by_name['Update']._loaded_options = None
+  _globals['_TOKENSERVICE'].methods_by_name['Update']._serialized_options = b'\330\363\030\002\340\363\030\001'
+  _globals['_TOKENSERVICE'].methods_by_name['List']._loaded_options = None
+  _globals['_TOKENSERVICE'].methods_by_name['List']._serialized_options = b'\330\363\030\002\340\363\030\001'
+  _globals['_TOKENSERVICE'].methods_by_name['Revoke']._loaded_options = None
+  _globals['_TOKENSERVICE'].methods_by_name['Revoke']._serialized_options = b'\330\363\030\002\340\363\030\001'
+  _globals['_TOKENSERVICE'].methods_by_name['Refresh']._loaded_options = None
+  _globals['_TOKENSERVICE'].methods_by_name['Refresh']._serialized_options = b'\330\363\030\002\340\363\030\001'
+  _globals['_TOKENTYPE']._serialized_start=4871
+  _globals['_TOKENTYPE']._serialized_end=4951
+  _globals['_TOKEN']._serialized_start=221
+  _globals['_TOKEN']._serialized_end=1439
+  _globals['_TOKEN_PROJECTROLESENTRY']._serialized_start=1122
+  _globals['_TOKEN_PROJECTROLESENTRY']._serialized_end=1217
+  _globals['_TOKEN_TENANTROLESENTRY']._serialized_start=1219
+  _globals['_TOKEN_TENANTROLESENTRY']._serialized_end=1312
+  _globals['_TOKEN_MACHINEROLESENTRY']._serialized_start=1314
+  _globals['_TOKEN_MACHINEROLESENTRY']._serialized_end=1409
+  _globals['_TOKENSERVICECREATEREQUEST']._serialized_start=1442
+  _globals['_TOKENSERVICECREATEREQUEST']._serialized_end=2573
+  _globals['_TOKENSERVICECREATEREQUEST_PROJECTROLESENTRY']._serialized_start=1122
+  _globals['_TOKENSERVICECREATEREQUEST_PROJECTROLESENTRY']._serialized_end=1217
+  _globals['_TOKENSERVICECREATEREQUEST_TENANTROLESENTRY']._serialized_start=1219
+  _globals['_TOKENSERVICECREATEREQUEST_TENANTROLESENTRY']._serialized_end=1312
+  _globals['_TOKENSERVICECREATEREQUEST_MACHINEROLESENTRY']._serialized_start=1314
+  _globals['_TOKENSERVICECREATEREQUEST_MACHINEROLESENTRY']._serialized_end=1409
+  _globals['_METHODPERMISSION']._serialized_start=2575
+  _globals['_METHODPERMISSION']._serialized_end=2666
+  _globals['_TOKENSERVICECREATERESPONSE']._serialized_start=2668
+  _globals['_TOKENSERVICECREATERESPONSE']._serialized_end=2768
+  _globals['_TOKENSERVICELISTREQUEST']._serialized_start=2770
+  _globals['_TOKENSERVICELISTREQUEST']._serialized_end=2848
+  _globals['_TOKENSERVICELISTRESPONSE']._serialized_start=2850
+  _globals['_TOKENSERVICELISTRESPONSE']._serialized_end=2926
+  _globals['_TOKENSERVICEREVOKEREQUEST']._serialized_start=2928
+  _globals['_TOKENSERVICEREVOKEREQUEST']._serialized_end=2985
+  _globals['_TOKENSERVICEREVOKERESPONSE']._serialized_start=2987
+  _globals['_TOKENSERVICEREVOKERESPONSE']._serialized_end=3015
+  _globals['_TOKENSERVICEUPDATEREQUEST']._serialized_start=3018
+  _globals['_TOKENSERVICEUPDATEREQUEST']._serialized_end=4195
+  _globals['_TOKENSERVICEUPDATEREQUEST_PROJECTROLESENTRY']._serialized_start=1122
+  _globals['_TOKENSERVICEUPDATEREQUEST_PROJECTROLESENTRY']._serialized_end=1217
+  _globals['_TOKENSERVICEUPDATEREQUEST_TENANTROLESENTRY']._serialized_start=1219
+  _globals['_TOKENSERVICEUPDATEREQUEST_TENANTROLESENTRY']._serialized_end=1312
+  _globals['_TOKENSERVICEUPDATEREQUEST_MACHINEROLESENTRY']._serialized_start=1314
+  _globals['_TOKENSERVICEUPDATEREQUEST_MACHINEROLESENTRY']._serialized_end=1409
+  _globals['_TOKENSERVICEUPDATERESPONSE']._serialized_start=4197
+  _globals['_TOKENSERVICEUPDATERESPONSE']._serialized_end=4273
+  _globals['_TOKENSERVICEGETREQUEST']._serialized_start=4275
+  _globals['_TOKENSERVICEGETREQUEST']._serialized_end=4329
+  _globals['_TOKENSERVICEGETRESPONSE']._serialized_start=4331
+  _globals['_TOKENSERVICEGETRESPONSE']._serialized_end=4404
+  _globals['_TOKENSERVICEREFRESHREQUEST']._serialized_start=4406
+  _globals['_TOKENSERVICEREFRESHREQUEST']._serialized_end=4434
+  _globals['_TOKENSERVICEREFRESHRESPONSE']._serialized_start=4436
+  _globals['_TOKENSERVICEREFRESHRESPONSE']._serialized_end=4537
+  _globals['_TOKENQUERY']._serialized_start=4540
+  _globals['_TOKENQUERY']._serialized_end=4869
+  _globals['_TOKENSERVICE']._serialized_start=4954
+  _globals['_TOKENSERVICE']._serialized_end=5634
+# @@protoc_insertion_point(module_scope)

metal_stack_api-0.2.6/metalstack/client/tests/conftest.py

@@ -0,0 +1,172 @@
+from collections.abc import Iterator
+from typing import Any
+
+import pyqwest
+import pytest
+from connectrpc.request import RequestContext
+from pyqwest.testing import WSGITransport
+
+from metalstack.api.v2 import ip_pb2
+from metalstack.api.v2 import version_pb2
+from metalstack.api.v2.ip_connect import (
+    IPServiceWSGIApplication,
+)
+from metalstack.api.v2.version_connect import (
+    VersionServiceWSGIApplication,
+)
+from metalstack.client.client import Client
+from metalstack.infra.v2 import bmc_pb2
+from metalstack.infra.v2 import component_pb2 as infra_component_pb2
+from metalstack.infra.v2.bmc_connect import (
+    BMCServiceWSGIApplication,
+)
+from metalstack.infra.v2.component_connect import (
+    ComponentServiceWSGIApplication,
+)
+
+
+class MockVersionService:
+    def __init__(self, version: str = "1.0"):
+        self._version = version
+
+    def get(
+        self, request: version_pb2.VersionServiceGetRequest, ctx: RequestContext
+    ) -> version_pb2.VersionServiceGetResponse:
+        return version_pb2.VersionServiceGetResponse(
+            version=version_pb2.Version(version=self._version)
+        )
+
+
+class MockIPService:
+    def __init__(self):
+        self.received_auth: str | None = None
+
+    def get(
+        self, request: ip_pb2.IPServiceGetRequest, ctx: RequestContext
+    ) -> ip_pb2.IPServiceGetResponse:
+        self.received_auth = ctx.request_headers().get("authorization")
+        return ip_pb2.IPServiceGetResponse(
+            ip=ip_pb2.IP(ip=request.ip, project=request.project)
+        )
+
+    def create(
+        self, request: ip_pb2.IPServiceCreateRequest, ctx: RequestContext
+    ) -> ip_pb2.IPServiceCreateResponse:
+        return ip_pb2.IPServiceCreateResponse()
+
+    def update(
+        self, request: ip_pb2.IPServiceUpdateRequest, ctx: RequestContext
+    ) -> ip_pb2.IPServiceUpdateResponse:
+        return ip_pb2.IPServiceUpdateResponse()
+
+    def list(
+        self, request: ip_pb2.IPServiceListRequest, ctx: RequestContext
+    ) -> ip_pb2.IPServiceListResponse:
+        return ip_pb2.IPServiceListResponse()
+
+    def delete(
+        self, request: ip_pb2.IPServiceDeleteRequest, ctx: RequestContext
+    ) -> ip_pb2.IPServiceDeleteResponse:
+        return ip_pb2.IPServiceDeleteResponse()
+
+
+class MockBMCService:
+    def __init__(self):
+        self.received_auth: str | None = None
+
+    def update_b_m_c_info(
+        self, request: bmc_pb2.UpdateBMCInfoRequest, ctx: RequestContext
+    ) -> bmc_pb2.UpdateBMCInfoResponse:
+        self.received_auth = ctx.request_headers().get("authorization")
+        return bmc_pb2.UpdateBMCInfoResponse()
+
+    def wait_for_b_m_c_command(
+        self, request: bmc_pb2.WaitForBMCCommandRequest, ctx: RequestContext
+    ) -> Iterator[bmc_pb2.WaitForBMCCommandResponse]:
+        self.received_auth = ctx.request_headers().get("authorization")
+        yield bmc_pb2.WaitForBMCCommandResponse(uuid="test-uuid", command_id="cmd-1")
+
+    def b_m_c_command_done(
+        self, request: bmc_pb2.BMCCommandDoneRequest, ctx: RequestContext
+    ) -> bmc_pb2.BMCCommandDoneResponse:
+        return bmc_pb2.BMCCommandDoneResponse()
+
+
+class MockComponentService:
+    def __init__(self):
+        self.pings: list[infra_component_pb2.ComponentServicePingRequest] = []
+
+    def ping(
+        self,
+        request: infra_component_pb2.ComponentServicePingRequest,
+        ctx: RequestContext,
+    ) -> infra_component_pb2.ComponentServicePingResponse:
+        self.pings.append(
+            infra_component_pb2.ComponentServicePingRequest(
+                type=request.type,
+                identifier=request.identifier,
+                started_at=request.started_at,
+                interval=request.interval,
+                version=request.version,
+            )
+        )
+        return infra_component_pb2.ComponentServicePingResponse()
+
+
+def _build_combined_wsgi_app(services: dict[str, Any]):
+    """Build a combined WSGI app that dispatches by path prefix."""
+
+    def application(environ, start_response):
+        path = environ.get("PATH_INFO", "/")
+        for prefix, app in services.items():
+            if path.startswith(prefix):
+                return app(environ, start_response)
+        from werkzeug.exceptions import NotFound
+
+        return NotFound()(environ, start_response)
+
+    return application
+
+
+@pytest.fixture
+def mock_version_service():
+    return MockVersionService()
+
+
+@pytest.fixture
+def mock_ip_service():
+    return MockIPService()
+
+
+@pytest.fixture
+def mock_bmc_service():
+    return MockBMCService()
+
+
+@pytest.fixture
+def mock_component_service():
+    return MockComponentService()
+
+
+@pytest.fixture
+def test_client(
+    mock_version_service,
+    mock_ip_service,
+    mock_bmc_service,
+    mock_component_service,
+):
+    """Create a Client with WSGI-backed transport for testing."""
+    services = {
+        "/metalstack.api.v2.VersionService": VersionServiceWSGIApplication(
+            mock_version_service
+        ),
+        "/metalstack.api.v2.IPService": IPServiceWSGIApplication(mock_ip_service),
+        "/metalstack.infra.v2.BMCService": BMCServiceWSGIApplication(mock_bmc_service),
+        "/metalstack.infra.v2.ComponentService": ComponentServiceWSGIApplication(
+            mock_component_service
+        ),
+    }
+    transport = WSGITransport(_build_combined_wsgi_app(services))
+    c = Client(baseurl="http://test", timeout=10)
+    c._client = pyqwest.SyncClient(transport=transport)
+    return c

metal_stack_api-0.2.6/metalstack/client/tests/test_client.py

@@ -0,0 +1,122 @@
+"""Tests mirroring go/client/client_test.go.
+
+Test_Client -> test_client_apiv2_version_get
+Test_ClientInterceptors -> test_client_auth_header_unary, test_client_auth_header_streaming
+"""
+
+import pyqwest
+import pytest
+from pyqwest.testing import WSGITransport
+
+from metalstack.api.v2 import ip_pb2
+from metalstack.api.v2 import version_pb2
+from metalstack.api.v2.ip_connect import (
+    IPServiceClientSync,
+    IPServiceWSGIApplication,
+)
+from metalstack.api.v2.version_connect import (
+    VersionServiceClientSync,
+    VersionServiceWSGIApplication,
+)
+from metalstack.client.client import Client
+from metalstack.infra.v2 import bmc_pb2
+from metalstack.infra.v2.bmc_connect import (
+    BMCServiceClientSync,
+    BMCServiceWSGIApplication,
+)
+from metalstack.infra.v2 import component_pb2 as infra_component_pb2
+from metalstack.infra.v2.component_connect import (
+    ComponentServiceClientSync,
+    ComponentServiceWSGIApplication,
+)
+
+from .conftest import (
+    MockBMCService,
+    MockComponentService,
+    MockIPService,
+    MockVersionService,
+    _build_combined_wsgi_app,
+)
+
+
+class TestClient:
+    """Mirrors Test_Client from client_test.go.
+
+    Tests client instantiation and basic RPC calls through the generated Client wrapper.
+    """
+
+    def test_client_creates_service_groups(self, test_client):
+        """Client exposes adminv2, apiv2, infrav2 service groups."""
+        assert test_client.apiv2() is not None
+        assert test_client.infrav2() is not None
+
+    def test_client_apiv2_version_get(self, test_client, mock_version_service):
+        """Version.Get returns the expected version through the Client wrapper."""
+        resp = test_client.apiv2().version().get(
+            request=version_pb2.VersionServiceGetRequest()
+        )
+        assert resp is not None
+        assert resp.version.version == "1.0"
+
+    def test_client_apiv2_version_get_custom_version(self, mock_version_service):
+        """Client can be configured with a custom version response."""
+        mock_version_service._version = "2.5.3"
+        vs = MockVersionService(version="2.5.3")
+        ips = MockIPService()
+        bmc = MockBMCService()
+        cs = MockComponentService()
+
+        services = {
+            "/metalstack.api.v2.VersionService": VersionServiceWSGIApplication(vs),
+            "/metalstack.api.v2.IPService": IPServiceWSGIApplication(ips),
+            "/metalstack.infra.v2.BMCService": BMCServiceWSGIApplication(bmc),
+            "/metalstack.infra.v2.ComponentService": ComponentServiceWSGIApplication(cs),
+        }
+        transport = WSGITransport(_build_combined_wsgi_app(services))
+        c = Client(baseurl="http://test", timeout=10)
+        c._client = pyqwest.SyncClient(transport=transport)
+
+        resp = c.apiv2().version().get(
+            request=version_pb2.VersionServiceGetRequest()
+        )
+        assert resp.version.version == "2.5.3"
+
+
+class TestClientInterceptors:
+    """Mirrors Test_ClientInterceptors from client_test.go.
+
+    Tests that auth headers are correctly passed for both unary and streaming calls.
+    """
+
+    def test_client_auth_header_unary(self, test_client, mock_bmc_service):
+        """Unary call has Authorization header set."""
+        token = "test-bearer-token"
+        resp = test_client.infrav2().bmc().update_b_m_c_info(
+            request=bmc_pb2.UpdateBMCInfoRequest(),
+            headers={"authorization": f"Bearer {token}"},
+        )
+        assert resp is not None
+        assert mock_bmc_service.received_auth == f"Bearer {token}"
+
+    def test_client_auth_header_streaming(self, test_client, mock_bmc_service):
+        """Streaming call has Authorization header set."""
+        token = "test-stream-token"
+        stream = test_client.infrav2().bmc().wait_for_b_m_c_command(
+            request=bmc_pb2.WaitForBMCCommandRequest(),
+            headers={"authorization": f"Bearer {token}"},
+        )
+        assert stream is not None
+        for cmd in stream:
+            assert cmd.uuid == "test-uuid"
+        assert mock_bmc_service.received_auth == f"Bearer {token}"
+
+    def test_client_auth_header_ip_get(self, test_client, mock_ip_service):
+        """IP Get call has Authorization header set."""
+        token = "ip-service-token"
+        resp = test_client.apiv2().ip().get(
+            request=ip_pb2.IPServiceGetRequest(ip="10.0.0.1"),
+            headers={"authorization": f"Bearer {token}"},
+        )
+        assert resp is not None
+        assert resp.ip.ip == "10.0.0.1"
+        assert mock_ip_service.received_auth == f"Bearer {token}"