update fabric.proto

Author: lionello

io/defang/v1/fabric.proto

@@ -6,7 +6,6 @@ option go_package = "github.com/DefangLabs/defang/src/protos/io/defang/v1";
 package io.defang.v1;
 
 import "google/protobuf/empty.proto";
-import "google/protobuf/struct.proto";
 import "google/protobuf/timestamp.proto";
 
 service FabricController {
@@ -27,11 +26,16 @@ service FabricController {
   rpc Deploy(DeployRequest) returns (DeployResponse);
   rpc Get(ServiceID) returns (ServiceInfo) {
     option idempotency_level = NO_SIDE_EFFECTS;
-  };                                                  // should be GetService
-  rpc Delete(DeleteRequest) returns (DeleteResponse){
+  }; // should be GetService
+  rpc Delete(DeleteRequest) returns (DeleteResponse) {
     option deprecated = true;
-  }; // used by pulumi-defang provider; should use Deploy
-  rpc Publish(PublishRequest) returns (google.protobuf.Empty);
+  }; // used by pulumi-defang provider; should use Deploy or Destroy
+  rpc Destroy(DestroyRequest) returns (DestroyResponse) {
+    option idempotency_level = IDEMPOTENT;
+  }
+  rpc Publish(PublishRequest) returns (google.protobuf.Empty) {
+    option deprecated = true;
+  }
   rpc Subscribe(SubscribeRequest) returns (stream SubscribeResponse);
   // rpc Promote(google.protobuf.Empty) returns (google.protobuf.Empty);
   rpc GetServices(google.protobuf.Empty) returns (ListServicesResponse) {
@@ -53,8 +57,12 @@ service FabricController {
   }
 
   // deprecate - change to use *Config functions
-  rpc PutSecret(SecretValue) returns (google.protobuf.Empty) {option deprecated = true;};
-  rpc DeleteSecrets(Secrets) returns (google.protobuf.Empty) {option deprecated = true;};
+  rpc PutSecret(PutConfigRequest) returns (google.protobuf.Empty) {
+    option deprecated = true;
+  };
+  rpc DeleteSecrets(Secrets) returns (google.protobuf.Empty) {
+    option deprecated = true;
+  };
   rpc ListSecrets(google.protobuf.Empty) returns (Secrets) {
     option idempotency_level = NO_SIDE_EFFECTS;
     option deprecated = true;
@@ -65,9 +73,10 @@ service FabricController {
   }; // no values
   rpc PutConfig(PutConfigRequest) returns (google.protobuf.Empty) {
     option idempotency_level = IDEMPOTENT;
-
   };
-  rpc DeleteConfigs(DeleteConfigsRequest) returns (google.protobuf.Empty);
+  rpc DeleteConfigs(DeleteConfigsRequest) returns (google.protobuf.Empty) {
+    option idempotency_level = IDEMPOTENT;
+  }
   rpc ListConfigs(ListConfigsRequest) returns (ListConfigsResponse) {
     option idempotency_level = NO_SIDE_EFFECTS;
   }; // no values
@@ -86,8 +95,28 @@ service FabricController {
     option idempotency_level = NO_SIDE_EFFECTS;
   };
   rpc Track(TrackRequest) returns (google.protobuf.Empty);
+
+  // Endpoint for GDPR compliance
+  rpc DeleteMe(google.protobuf.Empty) returns (google.protobuf.Empty) {
+    option idempotency_level = IDEMPOTENT;
+  }
+
+  rpc VerifyDNSSetup(VerifyDNSSetupRequest) returns (google.protobuf.Empty) {
+    option idempotency_level = NO_SIDE_EFFECTS;
+  }
+}
+
+message VerifyDNSSetupRequest {
+  string domain = 1;
+  repeated string targets = 2;
+}
+
+message DestroyRequest {
+  string project = 1; // defaults to tenant ID
 }
 
+message DestroyResponse { string etag = 1; }
+
 message DebugRequest {
   repeated File files = 1;
   string etag = 2;
@@ -123,17 +152,18 @@ message TrackRequest {
 }
 
 enum DeploymentMode {
-  UNSPECIFIED_MODE= 0;
+  UNSPECIFIED_MODE = 0;
   DEVELOPMENT = 1;
   STAGING = 2;
   PRODUCTION = 3;
 }
 
 message DeployRequest {
-  repeated Service services = 1 [deprecated = true]; // deprecated; use compose
-  string project = 2 [deprecated = true]; // deprecated; use compose.name
+  repeated Service services = 1
+      [ deprecated = true ];                // deprecated; use compose
+  string project = 2 [ deprecated = true ]; // deprecated; use compose.name
   DeploymentMode mode = 3;
-  google.protobuf.Struct compose = 4;
+  bytes compose = 4; // yaml (or json)
 }
 
 message DeployResponse {
@@ -169,7 +199,6 @@ message UploadURLRequest { string digest = 1; }
 
 message UploadURLResponse { string url = 1; }
 
-
 enum ServiceState {
   NOT_SPECIFIED = 0;
 
@@ -198,70 +227,70 @@ message ServiceInfo {
   string etag = 4;
   string status = 5;
   repeated string nat_ips = 6; // comma-separated list of NAT IPs
-  repeated string lb_ips = 7; // comma-separated list of internal CIDRs for the load-balancer
+  repeated string lb_ips =
+      7; // comma-separated list of internal CIDRs for the load-balancer
   string private_fqdn = 8; // fully qualified domain name (host)
   string public_fqdn = 9;  // fully qualified domain name (ingress)
   google.protobuf.Timestamp created_at = 10;
   google.protobuf.Timestamp updated_at = 11;
   string zone_id = 12; // zone ID for byod domain
-  bool use_acme_cert = 13; // If we should setup the facilities to use ACME(let's encrypt) certs
-  reserved 14; // was: string lb_dns
+  bool use_acme_cert =
+      13; // If we should setup the facilities to use ACME(let's encrypt) certs
+  reserved 14;             // was: string lb_dns
   ServiceState state = 15; // enumerated status of the service
-  string domainname = 16; // domain name for the service
+  string domainname = 16;  // domain name for the service
 
   // bool is_function = 5; // true if service is a function
 }
 
 message Secrets {
+  option deprecated = true;
   repeated string names = 1;
   string project = 2; // defaults to tenant ID
 }
 
 message SecretValue {
+  option deprecated = true;
   string name = 1;
   string value = 2;
   string project = 3; // defaults to tenant ID
 }
 
+enum ConfigType {
+  CONFIGTYPE_UNSPECIFIED = 0;
+  CONFIGTYPE_SENSITIVE = 1;
+}
+
 message Config {
   string name = 1;
   string value = 2;
   string project = 3;
-  bool is_sensitive = 4;
+  ConfigType type = 4;
 }
 
 message ConfigKey {
   string name = 1;
   string project = 2; // defaults to tenant ID
 }
 
-message GetConfigsRequest {
-  repeated ConfigKey configs = 1;
-}
-
-message GetConfigsResponse {
-  repeated Config configs = 1;
-}
-
-
-message DeleteConfigsRequest {
-  repeated ConfigKey configs = 1;
-}
-
 message PutConfigRequest {
   string name = 1;
   string value = 2;
   string project = 3;
-  bool is_sensitive = 4;
+  ConfigType type = 4;
 }
 
+message GetConfigsRequest { repeated ConfigKey configs = 1; }
+
+message GetConfigsResponse { repeated Config configs = 1; }
+
+message DeleteConfigsRequest { repeated ConfigKey configs = 1; }
+
 message ListConfigsRequest {
   string project = 1; // defaults to tenant ID
 }
 
-message ListConfigsResponse {
-  repeated ConfigKey configs = 1;
-}
+message ListConfigsResponse { repeated ConfigKey configs = 1; }
 
 message TokenRequest {
   string tenant = 1;
@@ -305,6 +334,7 @@ message LogEntry {
   string service = 4;
   string etag = 5;
   string host = 6;
+  string job = 7;
 }
 
 message TailResponse {
@@ -320,12 +350,12 @@ message ListServicesResponse {
   string project = 2;
 }
 
-// TODO: internal message; move to a separate proto file
 message ProjectUpdate {
   repeated ServiceInfo services = 1;
   string alb_arn = 2;
-  string project = 3; // should we use compose.name?
-  google.protobuf.Struct compose = 4;
+  string project = 3 [deprecated = true]; // deprecated; use compose.name
+  bytes compose = 4;
+  string cd_version = 5;
 }
 
 enum Platform {
@@ -434,7 +464,7 @@ message Service {
   string name = 1;
   string image = 2;
   Platform platform = 3;
-  bool internal = 4 [deprecated = true]; // deprecated: use networks
+  bool internal = 4 [ deprecated = true ]; // deprecated: use networks
   Deploy deploy = 5;
   repeated Port ports = 6;
   map<string, string> environment = 7;
@@ -444,12 +474,13 @@ message Service {
   repeated string command = 11;
   string domainname = 12;
   bool init = 13;
-  string dns_role = 14; // x-defang-dns-role: role arn used to access route53 to create dns records
+  string dns_role = 14; // x-defang-dns-role: role arn used to access route53 to
+                        // create dns records
   StaticFiles static_files = 15; // x-defang-static-files: use a managed CDN
   Network networks = 16;         // currently only 1 network is supported
-  Redis redis = 18; // x-defang-redis: use a managed redis
-  Postgres postgres = 19; // x-defang-postgres: use a managed
-  string project = 20; // defaults to tenant ID
+  Redis redis = 18;              // x-defang-redis: use a managed redis
+  Postgres postgres = 19;        // x-defang-postgres: use a managed
+  string project = 20;           // defaults to tenant ID
 }
 
 message StaticFiles {
@@ -458,14 +489,24 @@ message StaticFiles {
   repeated string redirects = 2;
 }
 
-message Redis {
-  option deprecated = true;
-}
-message Postgres {
-  option deprecated = true;
+message Redis { option deprecated = true; }
+message Postgres { option deprecated = true; }
+
+// TODO: internal message; move to a separate proto file; was Event
+message DeployEvent {
+  DeploymentMode mode = 1;
+  string type = 2; // required
+  string source = 3;
+  string id = 4; // etag
+  string datacontenttype = 5;
+  string dataschema = 6;
+  string subject = 7; // tenant|stack; also used as SQS group ID
+  google.protobuf.Timestamp time = 8;
+  bytes data = 9;
 }
 
 message Event {
+  option deprecated = true;
   string specversion = 1; // required (but we don't care)
   string type = 2;        // required
   string source = 3;      // required
@@ -485,7 +526,7 @@ message SubscribeRequest {
 }
 
 message SubscribeResponse {
-  ServiceInfo service = 1 [deprecated = true];
+  ServiceInfo service = 1 [ deprecated = true ];
   string name = 2;
   string status = 3;
   ServiceState state = 4;