// Code generated by protoc-gen-go. DO NOT EDIT.
// versions:
// 	protoc-gen-go v1.36.11-devel
// 	protoc        (unknown)
// source: resource/definitions/secrets/secrets.proto

package secrets

import (
	reflect "reflect"
	sync "sync"
	unsafe "unsafe"

	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
	protoimpl "google.golang.org/protobuf/runtime/protoimpl"

	common "github.com/siderolabs/talos/pkg/machinery/api/common"
)

const (
	// Verify that this generated code is sufficiently up-to-date.
	_ = protoimpl.EnforceVersion(20 - protoimpl.MinVersion)
	// Verify that runtime/protoimpl is sufficiently up-to-date.
	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
)

// APICertsSpec describes etcd certs secrets.
type APICertsSpec struct {
	state                   protoimpl.MessageState              `protogen:"open.v1"`
	Client                  *common.PEMEncodedCertificateAndKey `protobuf:"bytes,2,opt,name=client,proto3" json:"client,omitempty"`
	Server                  *common.PEMEncodedCertificateAndKey `protobuf:"bytes,3,opt,name=server,proto3" json:"server,omitempty"`
	AcceptedCAs             []*common.PEMEncodedCertificate     `protobuf:"bytes,4,rep,name=accepted_c_as,json=acceptedCAs,proto3" json:"accepted_c_as,omitempty"`
	SkipVerifyingClientCert bool                                `protobuf:"varint,5,opt,name=skip_verifying_client_cert,json=skipVerifyingClientCert,proto3" json:"skip_verifying_client_cert,omitempty"`
	unknownFields           protoimpl.UnknownFields
	sizeCache               protoimpl.SizeCache
}

func (x *APICertsSpec) Reset() {
	*x = APICertsSpec{}
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[0]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *APICertsSpec) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*APICertsSpec) ProtoMessage() {}

func (x *APICertsSpec) ProtoReflect() protoreflect.Message {
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[0]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use APICertsSpec.ProtoReflect.Descriptor instead.
func (*APICertsSpec) Descriptor() ([]byte, []int) {
	return file_resource_definitions_secrets_secrets_proto_rawDescGZIP(), []int{0}
}

func (x *APICertsSpec) GetClient() *common.PEMEncodedCertificateAndKey {
	if x != nil {
		return x.Client
	}
	return nil
}

func (x *APICertsSpec) GetServer() *common.PEMEncodedCertificateAndKey {
	if x != nil {
		return x.Server
	}
	return nil
}

func (x *APICertsSpec) GetAcceptedCAs() []*common.PEMEncodedCertificate {
	if x != nil {
		return x.AcceptedCAs
	}
	return nil
}

func (x *APICertsSpec) GetSkipVerifyingClientCert() bool {
	if x != nil {
		return x.SkipVerifyingClientCert
	}
	return false
}

// CertSANSpec describes fields of the cert SANs.
type CertSANSpec struct {
	state         protoimpl.MessageState `protogen:"open.v1"`
	IPs           []*common.NetIP        `protobuf:"bytes,1,rep,name=i_ps,json=iPs,proto3" json:"i_ps,omitempty"`
	DnsNames      []string               `protobuf:"bytes,2,rep,name=dns_names,json=dnsNames,proto3" json:"dns_names,omitempty"`
	Fqdn          string                 `protobuf:"bytes,3,opt,name=fqdn,proto3" json:"fqdn,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *CertSANSpec) Reset() {
	*x = CertSANSpec{}
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[1]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *CertSANSpec) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*CertSANSpec) ProtoMessage() {}

func (x *CertSANSpec) ProtoReflect() protoreflect.Message {
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[1]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use CertSANSpec.ProtoReflect.Descriptor instead.
func (*CertSANSpec) Descriptor() ([]byte, []int) {
	return file_resource_definitions_secrets_secrets_proto_rawDescGZIP(), []int{1}
}

func (x *CertSANSpec) GetIPs() []*common.NetIP {
	if x != nil {
		return x.IPs
	}
	return nil
}

func (x *CertSANSpec) GetDnsNames() []string {
	if x != nil {
		return x.DnsNames
	}
	return nil
}

func (x *CertSANSpec) GetFqdn() string {
	if x != nil {
		return x.Fqdn
	}
	return ""
}

// EncryptionSaltSpec describes the salt.
type EncryptionSaltSpec struct {
	state         protoimpl.MessageState `protogen:"open.v1"`
	DiskSalt      []byte                 `protobuf:"bytes,1,opt,name=disk_salt,json=diskSalt,proto3" json:"disk_salt,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *EncryptionSaltSpec) Reset() {
	*x = EncryptionSaltSpec{}
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[2]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *EncryptionSaltSpec) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*EncryptionSaltSpec) ProtoMessage() {}

func (x *EncryptionSaltSpec) ProtoReflect() protoreflect.Message {
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[2]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use EncryptionSaltSpec.ProtoReflect.Descriptor instead.
func (*EncryptionSaltSpec) Descriptor() ([]byte, []int) {
	return file_resource_definitions_secrets_secrets_proto_rawDescGZIP(), []int{2}
}

func (x *EncryptionSaltSpec) GetDiskSalt() []byte {
	if x != nil {
		return x.DiskSalt
	}
	return nil
}

// EtcdCertsSpec describes etcd certs secrets.
type EtcdCertsSpec struct {
	state         protoimpl.MessageState              `protogen:"open.v1"`
	Etcd          *common.PEMEncodedCertificateAndKey `protobuf:"bytes,1,opt,name=etcd,proto3" json:"etcd,omitempty"`
	EtcdPeer      *common.PEMEncodedCertificateAndKey `protobuf:"bytes,2,opt,name=etcd_peer,json=etcdPeer,proto3" json:"etcd_peer,omitempty"`
	EtcdAdmin     *common.PEMEncodedCertificateAndKey `protobuf:"bytes,3,opt,name=etcd_admin,json=etcdAdmin,proto3" json:"etcd_admin,omitempty"`
	EtcdApiServer *common.PEMEncodedCertificateAndKey `protobuf:"bytes,4,opt,name=etcd_api_server,json=etcdApiServer,proto3" json:"etcd_api_server,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *EtcdCertsSpec) Reset() {
	*x = EtcdCertsSpec{}
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[3]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *EtcdCertsSpec) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*EtcdCertsSpec) ProtoMessage() {}

func (x *EtcdCertsSpec) ProtoReflect() protoreflect.Message {
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[3]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use EtcdCertsSpec.ProtoReflect.Descriptor instead.
func (*EtcdCertsSpec) Descriptor() ([]byte, []int) {
	return file_resource_definitions_secrets_secrets_proto_rawDescGZIP(), []int{3}
}

func (x *EtcdCertsSpec) GetEtcd() *common.PEMEncodedCertificateAndKey {
	if x != nil {
		return x.Etcd
	}
	return nil
}

func (x *EtcdCertsSpec) GetEtcdPeer() *common.PEMEncodedCertificateAndKey {
	if x != nil {
		return x.EtcdPeer
	}
	return nil
}

func (x *EtcdCertsSpec) GetEtcdAdmin() *common.PEMEncodedCertificateAndKey {
	if x != nil {
		return x.EtcdAdmin
	}
	return nil
}

func (x *EtcdCertsSpec) GetEtcdApiServer() *common.PEMEncodedCertificateAndKey {
	if x != nil {
		return x.EtcdApiServer
	}
	return nil
}

// EtcdRootSpec describes etcd CA secrets.
type EtcdRootSpec struct {
	state         protoimpl.MessageState              `protogen:"open.v1"`
	EtcdCa        *common.PEMEncodedCertificateAndKey `protobuf:"bytes,1,opt,name=etcd_ca,json=etcdCa,proto3" json:"etcd_ca,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *EtcdRootSpec) Reset() {
	*x = EtcdRootSpec{}
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[4]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *EtcdRootSpec) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*EtcdRootSpec) ProtoMessage() {}

func (x *EtcdRootSpec) ProtoReflect() protoreflect.Message {
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[4]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use EtcdRootSpec.ProtoReflect.Descriptor instead.
func (*EtcdRootSpec) Descriptor() ([]byte, []int) {
	return file_resource_definitions_secrets_secrets_proto_rawDescGZIP(), []int{4}
}

func (x *EtcdRootSpec) GetEtcdCa() *common.PEMEncodedCertificateAndKey {
	if x != nil {
		return x.EtcdCa
	}
	return nil
}

// KubeletSpec describes root Kubernetes secrets.
type KubeletSpec struct {
	state                protoimpl.MessageState          `protogen:"open.v1"`
	Endpoint             *common.URL                     `protobuf:"bytes,1,opt,name=endpoint,proto3" json:"endpoint,omitempty"`
	BootstrapTokenId     string                          `protobuf:"bytes,3,opt,name=bootstrap_token_id,json=bootstrapTokenId,proto3" json:"bootstrap_token_id,omitempty"`
	BootstrapTokenSecret string                          `protobuf:"bytes,4,opt,name=bootstrap_token_secret,json=bootstrapTokenSecret,proto3" json:"bootstrap_token_secret,omitempty"`
	AcceptedCAs          []*common.PEMEncodedCertificate `protobuf:"bytes,5,rep,name=accepted_c_as,json=acceptedCAs,proto3" json:"accepted_c_as,omitempty"`
	unknownFields        protoimpl.UnknownFields
	sizeCache            protoimpl.SizeCache
}

func (x *KubeletSpec) Reset() {
	*x = KubeletSpec{}
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[5]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *KubeletSpec) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*KubeletSpec) ProtoMessage() {}

func (x *KubeletSpec) ProtoReflect() protoreflect.Message {
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[5]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use KubeletSpec.ProtoReflect.Descriptor instead.
func (*KubeletSpec) Descriptor() ([]byte, []int) {
	return file_resource_definitions_secrets_secrets_proto_rawDescGZIP(), []int{5}
}

func (x *KubeletSpec) GetEndpoint() *common.URL {
	if x != nil {
		return x.Endpoint
	}
	return nil
}

func (x *KubeletSpec) GetBootstrapTokenId() string {
	if x != nil {
		return x.BootstrapTokenId
	}
	return ""
}

func (x *KubeletSpec) GetBootstrapTokenSecret() string {
	if x != nil {
		return x.BootstrapTokenSecret
	}
	return ""
}

func (x *KubeletSpec) GetAcceptedCAs() []*common.PEMEncodedCertificate {
	if x != nil {
		return x.AcceptedCAs
	}
	return nil
}

// KubernetesCertsSpec describes generated Kubernetes certificates.
type KubernetesCertsSpec struct {
	state                       protoimpl.MessageState `protogen:"open.v1"`
	SchedulerKubeconfig         string                 `protobuf:"bytes,4,opt,name=scheduler_kubeconfig,json=schedulerKubeconfig,proto3" json:"scheduler_kubeconfig,omitempty"`
	ControllerManagerKubeconfig string                 `protobuf:"bytes,5,opt,name=controller_manager_kubeconfig,json=controllerManagerKubeconfig,proto3" json:"controller_manager_kubeconfig,omitempty"`
	LocalhostAdminKubeconfig    string                 `protobuf:"bytes,6,opt,name=localhost_admin_kubeconfig,json=localhostAdminKubeconfig,proto3" json:"localhost_admin_kubeconfig,omitempty"`
	AdminKubeconfig             string                 `protobuf:"bytes,7,opt,name=admin_kubeconfig,json=adminKubeconfig,proto3" json:"admin_kubeconfig,omitempty"`
	unknownFields               protoimpl.UnknownFields
	sizeCache                   protoimpl.SizeCache
}

func (x *KubernetesCertsSpec) Reset() {
	*x = KubernetesCertsSpec{}
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[6]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *KubernetesCertsSpec) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*KubernetesCertsSpec) ProtoMessage() {}

func (x *KubernetesCertsSpec) ProtoReflect() protoreflect.Message {
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[6]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use KubernetesCertsSpec.ProtoReflect.Descriptor instead.
func (*KubernetesCertsSpec) Descriptor() ([]byte, []int) {
	return file_resource_definitions_secrets_secrets_proto_rawDescGZIP(), []int{6}
}

func (x *KubernetesCertsSpec) GetSchedulerKubeconfig() string {
	if x != nil {
		return x.SchedulerKubeconfig
	}
	return ""
}

func (x *KubernetesCertsSpec) GetControllerManagerKubeconfig() string {
	if x != nil {
		return x.ControllerManagerKubeconfig
	}
	return ""
}

func (x *KubernetesCertsSpec) GetLocalhostAdminKubeconfig() string {
	if x != nil {
		return x.LocalhostAdminKubeconfig
	}
	return ""
}

func (x *KubernetesCertsSpec) GetAdminKubeconfig() string {
	if x != nil {
		return x.AdminKubeconfig
	}
	return ""
}

// KubernetesDynamicCertsSpec describes generated KubernetesCerts certificates.
type KubernetesDynamicCertsSpec struct {
	state                  protoimpl.MessageState              `protogen:"open.v1"`
	ApiServer              *common.PEMEncodedCertificateAndKey `protobuf:"bytes,1,opt,name=api_server,json=apiServer,proto3" json:"api_server,omitempty"`
	ApiServerKubeletClient *common.PEMEncodedCertificateAndKey `protobuf:"bytes,2,opt,name=api_server_kubelet_client,json=apiServerKubeletClient,proto3" json:"api_server_kubelet_client,omitempty"`
	FrontProxy             *common.PEMEncodedCertificateAndKey `protobuf:"bytes,3,opt,name=front_proxy,json=frontProxy,proto3" json:"front_proxy,omitempty"`
	unknownFields          protoimpl.UnknownFields
	sizeCache              protoimpl.SizeCache
}

func (x *KubernetesDynamicCertsSpec) Reset() {
	*x = KubernetesDynamicCertsSpec{}
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[7]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *KubernetesDynamicCertsSpec) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*KubernetesDynamicCertsSpec) ProtoMessage() {}

func (x *KubernetesDynamicCertsSpec) ProtoReflect() protoreflect.Message {
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[7]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use KubernetesDynamicCertsSpec.ProtoReflect.Descriptor instead.
func (*KubernetesDynamicCertsSpec) Descriptor() ([]byte, []int) {
	return file_resource_definitions_secrets_secrets_proto_rawDescGZIP(), []int{7}
}

func (x *KubernetesDynamicCertsSpec) GetApiServer() *common.PEMEncodedCertificateAndKey {
	if x != nil {
		return x.ApiServer
	}
	return nil
}

func (x *KubernetesDynamicCertsSpec) GetApiServerKubeletClient() *common.PEMEncodedCertificateAndKey {
	if x != nil {
		return x.ApiServerKubeletClient
	}
	return nil
}

func (x *KubernetesDynamicCertsSpec) GetFrontProxy() *common.PEMEncodedCertificateAndKey {
	if x != nil {
		return x.FrontProxy
	}
	return nil
}

// KubernetesRootSpec describes root Kubernetes secrets.
type KubernetesRootSpec struct {
	state                     protoimpl.MessageState              `protogen:"open.v1"`
	Name                      string                              `protobuf:"bytes,1,opt,name=name,proto3" json:"name,omitempty"`
	Endpoint                  *common.URL                         `protobuf:"bytes,2,opt,name=endpoint,proto3" json:"endpoint,omitempty"`
	LocalEndpoint             *common.URL                         `protobuf:"bytes,3,opt,name=local_endpoint,json=localEndpoint,proto3" json:"local_endpoint,omitempty"`
	CertSaNs                  []string                            `protobuf:"bytes,4,rep,name=cert_sa_ns,json=certSaNs,proto3" json:"cert_sa_ns,omitempty"`
	DnsDomain                 string                              `protobuf:"bytes,6,opt,name=dns_domain,json=dnsDomain,proto3" json:"dns_domain,omitempty"`
	IssuingCa                 *common.PEMEncodedCertificateAndKey `protobuf:"bytes,7,opt,name=issuing_ca,json=issuingCa,proto3" json:"issuing_ca,omitempty"`
	ServiceAccount            *common.PEMEncodedKey               `protobuf:"bytes,8,opt,name=service_account,json=serviceAccount,proto3" json:"service_account,omitempty"`
	AggregatorCa              *common.PEMEncodedCertificateAndKey `protobuf:"bytes,9,opt,name=aggregator_ca,json=aggregatorCa,proto3" json:"aggregator_ca,omitempty"`
	AescbcEncryptionSecret    string                              `protobuf:"bytes,10,opt,name=aescbc_encryption_secret,json=aescbcEncryptionSecret,proto3" json:"aescbc_encryption_secret,omitempty"`
	BootstrapTokenId          string                              `protobuf:"bytes,11,opt,name=bootstrap_token_id,json=bootstrapTokenId,proto3" json:"bootstrap_token_id,omitempty"`
	BootstrapTokenSecret      string                              `protobuf:"bytes,12,opt,name=bootstrap_token_secret,json=bootstrapTokenSecret,proto3" json:"bootstrap_token_secret,omitempty"`
	SecretboxEncryptionSecret string                              `protobuf:"bytes,13,opt,name=secretbox_encryption_secret,json=secretboxEncryptionSecret,proto3" json:"secretbox_encryption_secret,omitempty"`
	ApiServerIps              []*common.NetIP                     `protobuf:"bytes,14,rep,name=api_server_ips,json=apiServerIps,proto3" json:"api_server_ips,omitempty"`
	AcceptedCAs               []*common.PEMEncodedCertificate     `protobuf:"bytes,15,rep,name=accepted_c_as,json=acceptedCAs,proto3" json:"accepted_c_as,omitempty"`
	unknownFields             protoimpl.UnknownFields
	sizeCache                 protoimpl.SizeCache
}

func (x *KubernetesRootSpec) Reset() {
	*x = KubernetesRootSpec{}
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[8]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *KubernetesRootSpec) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*KubernetesRootSpec) ProtoMessage() {}

func (x *KubernetesRootSpec) ProtoReflect() protoreflect.Message {
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[8]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use KubernetesRootSpec.ProtoReflect.Descriptor instead.
func (*KubernetesRootSpec) Descriptor() ([]byte, []int) {
	return file_resource_definitions_secrets_secrets_proto_rawDescGZIP(), []int{8}
}

func (x *KubernetesRootSpec) GetName() string {
	if x != nil {
		return x.Name
	}
	return ""
}

func (x *KubernetesRootSpec) GetEndpoint() *common.URL {
	if x != nil {
		return x.Endpoint
	}
	return nil
}

func (x *KubernetesRootSpec) GetLocalEndpoint() *common.URL {
	if x != nil {
		return x.LocalEndpoint
	}
	return nil
}

func (x *KubernetesRootSpec) GetCertSaNs() []string {
	if x != nil {
		return x.CertSaNs
	}
	return nil
}

func (x *KubernetesRootSpec) GetDnsDomain() string {
	if x != nil {
		return x.DnsDomain
	}
	return ""
}

func (x *KubernetesRootSpec) GetIssuingCa() *common.PEMEncodedCertificateAndKey {
	if x != nil {
		return x.IssuingCa
	}
	return nil
}

func (x *KubernetesRootSpec) GetServiceAccount() *common.PEMEncodedKey {
	if x != nil {
		return x.ServiceAccount
	}
	return nil
}

func (x *KubernetesRootSpec) GetAggregatorCa() *common.PEMEncodedCertificateAndKey {
	if x != nil {
		return x.AggregatorCa
	}
	return nil
}

func (x *KubernetesRootSpec) GetAescbcEncryptionSecret() string {
	if x != nil {
		return x.AescbcEncryptionSecret
	}
	return ""
}

func (x *KubernetesRootSpec) GetBootstrapTokenId() string {
	if x != nil {
		return x.BootstrapTokenId
	}
	return ""
}

func (x *KubernetesRootSpec) GetBootstrapTokenSecret() string {
	if x != nil {
		return x.BootstrapTokenSecret
	}
	return ""
}

func (x *KubernetesRootSpec) GetSecretboxEncryptionSecret() string {
	if x != nil {
		return x.SecretboxEncryptionSecret
	}
	return ""
}

func (x *KubernetesRootSpec) GetApiServerIps() []*common.NetIP {
	if x != nil {
		return x.ApiServerIps
	}
	return nil
}

func (x *KubernetesRootSpec) GetAcceptedCAs() []*common.PEMEncodedCertificate {
	if x != nil {
		return x.AcceptedCAs
	}
	return nil
}

// MaintenanceRootSpec describes maintenance service CA.
type MaintenanceRootSpec struct {
	state         protoimpl.MessageState              `protogen:"open.v1"`
	Ca            *common.PEMEncodedCertificateAndKey `protobuf:"bytes,1,opt,name=ca,proto3" json:"ca,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *MaintenanceRootSpec) Reset() {
	*x = MaintenanceRootSpec{}
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[9]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *MaintenanceRootSpec) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*MaintenanceRootSpec) ProtoMessage() {}

func (x *MaintenanceRootSpec) ProtoReflect() protoreflect.Message {
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[9]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use MaintenanceRootSpec.ProtoReflect.Descriptor instead.
func (*MaintenanceRootSpec) Descriptor() ([]byte, []int) {
	return file_resource_definitions_secrets_secrets_proto_rawDescGZIP(), []int{9}
}

func (x *MaintenanceRootSpec) GetCa() *common.PEMEncodedCertificateAndKey {
	if x != nil {
		return x.Ca
	}
	return nil
}

// OSRootSpec describes operating system CA.
type OSRootSpec struct {
	state           protoimpl.MessageState              `protogen:"open.v1"`
	IssuingCa       *common.PEMEncodedCertificateAndKey `protobuf:"bytes,1,opt,name=issuing_ca,json=issuingCa,proto3" json:"issuing_ca,omitempty"`
	CertSaniPs      []*common.NetIP                     `protobuf:"bytes,2,rep,name=cert_sani_ps,json=certSaniPs,proto3" json:"cert_sani_ps,omitempty"`
	CertSandnsNames []string                            `protobuf:"bytes,3,rep,name=cert_sandns_names,json=certSandnsNames,proto3" json:"cert_sandns_names,omitempty"`
	Token           string                              `protobuf:"bytes,4,opt,name=token,proto3" json:"token,omitempty"`
	AcceptedCAs     []*common.PEMEncodedCertificate     `protobuf:"bytes,5,rep,name=accepted_c_as,json=acceptedCAs,proto3" json:"accepted_c_as,omitempty"`
	unknownFields   protoimpl.UnknownFields
	sizeCache       protoimpl.SizeCache
}

func (x *OSRootSpec) Reset() {
	*x = OSRootSpec{}
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[10]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *OSRootSpec) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*OSRootSpec) ProtoMessage() {}

func (x *OSRootSpec) ProtoReflect() protoreflect.Message {
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[10]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use OSRootSpec.ProtoReflect.Descriptor instead.
func (*OSRootSpec) Descriptor() ([]byte, []int) {
	return file_resource_definitions_secrets_secrets_proto_rawDescGZIP(), []int{10}
}

func (x *OSRootSpec) GetIssuingCa() *common.PEMEncodedCertificateAndKey {
	if x != nil {
		return x.IssuingCa
	}
	return nil
}

func (x *OSRootSpec) GetCertSaniPs() []*common.NetIP {
	if x != nil {
		return x.CertSaniPs
	}
	return nil
}

func (x *OSRootSpec) GetCertSandnsNames() []string {
	if x != nil {
		return x.CertSandnsNames
	}
	return nil
}

func (x *OSRootSpec) GetToken() string {
	if x != nil {
		return x.Token
	}
	return ""
}

func (x *OSRootSpec) GetAcceptedCAs() []*common.PEMEncodedCertificate {
	if x != nil {
		return x.AcceptedCAs
	}
	return nil
}

// TrustdCertsSpec describes etcd certs secrets.
type TrustdCertsSpec struct {
	state         protoimpl.MessageState              `protogen:"open.v1"`
	Server        *common.PEMEncodedCertificateAndKey `protobuf:"bytes,2,opt,name=server,proto3" json:"server,omitempty"`
	AcceptedCAs   []*common.PEMEncodedCertificate     `protobuf:"bytes,3,rep,name=accepted_c_as,json=acceptedCAs,proto3" json:"accepted_c_as,omitempty"`
	unknownFields protoimpl.UnknownFields
	sizeCache     protoimpl.SizeCache
}

func (x *TrustdCertsSpec) Reset() {
	*x = TrustdCertsSpec{}
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[11]
	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
	ms.StoreMessageInfo(mi)
}

func (x *TrustdCertsSpec) String() string {
	return protoimpl.X.MessageStringOf(x)
}

func (*TrustdCertsSpec) ProtoMessage() {}

func (x *TrustdCertsSpec) ProtoReflect() protoreflect.Message {
	mi := &file_resource_definitions_secrets_secrets_proto_msgTypes[11]
	if x != nil {
		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
		if ms.LoadMessageInfo() == nil {
			ms.StoreMessageInfo(mi)
		}
		return ms
	}
	return mi.MessageOf(x)
}

// Deprecated: Use TrustdCertsSpec.ProtoReflect.Descriptor instead.
func (*TrustdCertsSpec) Descriptor() ([]byte, []int) {
	return file_resource_definitions_secrets_secrets_proto_rawDescGZIP(), []int{11}
}

func (x *TrustdCertsSpec) GetServer() *common.PEMEncodedCertificateAndKey {
	if x != nil {
		return x.Server
	}
	return nil
}

func (x *TrustdCertsSpec) GetAcceptedCAs() []*common.PEMEncodedCertificate {
	if x != nil {
		return x.AcceptedCAs
	}
	return nil
}

var File_resource_definitions_secrets_secrets_proto protoreflect.FileDescriptor

const file_resource_definitions_secrets_secrets_proto_rawDesc = "" +
	"\n" +
	"*resource/definitions/secrets/secrets.proto\x12\"talos.resource.definitions.secrets\x1a\x13common/common.proto\"\x88\x02\n" +
	"\fAPICertsSpec\x12;\n" +
	"\x06client\x18\x02 \x01(\v2#.common.PEMEncodedCertificateAndKeyR\x06client\x12;\n" +
	"\x06server\x18\x03 \x01(\v2#.common.PEMEncodedCertificateAndKeyR\x06server\x12A\n" +
	"\raccepted_c_as\x18\x04 \x03(\v2\x1d.common.PEMEncodedCertificateR\vacceptedCAs\x12;\n" +
	"\x1askip_verifying_client_cert\x18\x05 \x01(\bR\x17skipVerifyingClientCert\"`\n" +
	"\vCertSANSpec\x12 \n" +
	"\x04i_ps\x18\x01 \x03(\v2\r.common.NetIPR\x03iPs\x12\x1b\n" +
	"\tdns_names\x18\x02 \x03(\tR\bdnsNames\x12\x12\n" +
	"\x04fqdn\x18\x03 \x01(\tR\x04fqdn\"1\n" +
	"\x12EncryptionSaltSpec\x12\x1b\n" +
	"\tdisk_salt\x18\x01 \x01(\fR\bdiskSalt\"\x9b\x02\n" +
	"\rEtcdCertsSpec\x127\n" +
	"\x04etcd\x18\x01 \x01(\v2#.common.PEMEncodedCertificateAndKeyR\x04etcd\x12@\n" +
	"\tetcd_peer\x18\x02 \x01(\v2#.common.PEMEncodedCertificateAndKeyR\betcdPeer\x12B\n" +
	"\n" +
	"etcd_admin\x18\x03 \x01(\v2#.common.PEMEncodedCertificateAndKeyR\tetcdAdmin\x12K\n" +
	"\x0fetcd_api_server\x18\x04 \x01(\v2#.common.PEMEncodedCertificateAndKeyR\retcdApiServer\"L\n" +
	"\fEtcdRootSpec\x12<\n" +
	"\aetcd_ca\x18\x01 \x01(\v2#.common.PEMEncodedCertificateAndKeyR\x06etcdCa\"\xdd\x01\n" +
	"\vKubeletSpec\x12'\n" +
	"\bendpoint\x18\x01 \x01(\v2\v.common.URLR\bendpoint\x12,\n" +
	"\x12bootstrap_token_id\x18\x03 \x01(\tR\x10bootstrapTokenId\x124\n" +
	"\x16bootstrap_token_secret\x18\x04 \x01(\tR\x14bootstrapTokenSecret\x12A\n" +
	"\raccepted_c_as\x18\x05 \x03(\v2\x1d.common.PEMEncodedCertificateR\vacceptedCAs\"\xf5\x01\n" +
	"\x13KubernetesCertsSpec\x121\n" +
	"\x14scheduler_kubeconfig\x18\x04 \x01(\tR\x13schedulerKubeconfig\x12B\n" +
	"\x1dcontroller_manager_kubeconfig\x18\x05 \x01(\tR\x1bcontrollerManagerKubeconfig\x12<\n" +
	"\x1alocalhost_admin_kubeconfig\x18\x06 \x01(\tR\x18localhostAdminKubeconfig\x12)\n" +
	"\x10admin_kubeconfig\x18\a \x01(\tR\x0fadminKubeconfig\"\x86\x02\n" +
	"\x1aKubernetesDynamicCertsSpec\x12B\n" +
	"\n" +
	"api_server\x18\x01 \x01(\v2#.common.PEMEncodedCertificateAndKeyR\tapiServer\x12^\n" +
	"\x19api_server_kubelet_client\x18\x02 \x01(\v2#.common.PEMEncodedCertificateAndKeyR\x16apiServerKubeletClient\x12D\n" +
	"\vfront_proxy\x18\x03 \x01(\v2#.common.PEMEncodedCertificateAndKeyR\n" +
	"frontProxy\"\xe6\x05\n" +
	"\x12KubernetesRootSpec\x12\x12\n" +
	"\x04name\x18\x01 \x01(\tR\x04name\x12'\n" +
	"\bendpoint\x18\x02 \x01(\v2\v.common.URLR\bendpoint\x122\n" +
	"\x0elocal_endpoint\x18\x03 \x01(\v2\v.common.URLR\rlocalEndpoint\x12\x1c\n" +
	"\n" +
	"cert_sa_ns\x18\x04 \x03(\tR\bcertSaNs\x12\x1d\n" +
	"\n" +
	"dns_domain\x18\x06 \x01(\tR\tdnsDomain\x12B\n" +
	"\n" +
	"issuing_ca\x18\a \x01(\v2#.common.PEMEncodedCertificateAndKeyR\tissuingCa\x12>\n" +
	"\x0fservice_account\x18\b \x01(\v2\x15.common.PEMEncodedKeyR\x0eserviceAccount\x12H\n" +
	"\raggregator_ca\x18\t \x01(\v2#.common.PEMEncodedCertificateAndKeyR\faggregatorCa\x128\n" +
	"\x18aescbc_encryption_secret\x18\n" +
	" \x01(\tR\x16aescbcEncryptionSecret\x12,\n" +
	"\x12bootstrap_token_id\x18\v \x01(\tR\x10bootstrapTokenId\x124\n" +
	"\x16bootstrap_token_secret\x18\f \x01(\tR\x14bootstrapTokenSecret\x12>\n" +
	"\x1bsecretbox_encryption_secret\x18\r \x01(\tR\x19secretboxEncryptionSecret\x123\n" +
	"\x0eapi_server_ips\x18\x0e \x03(\v2\r.common.NetIPR\fapiServerIps\x12A\n" +
	"\raccepted_c_as\x18\x0f \x03(\v2\x1d.common.PEMEncodedCertificateR\vacceptedCAs\"J\n" +
	"\x13MaintenanceRootSpec\x123\n" +
	"\x02ca\x18\x01 \x01(\v2#.common.PEMEncodedCertificateAndKeyR\x02ca\"\x86\x02\n" +
	"\n" +
	"OSRootSpec\x12B\n" +
	"\n" +
	"issuing_ca\x18\x01 \x01(\v2#.common.PEMEncodedCertificateAndKeyR\tissuingCa\x12/\n" +
	"\fcert_sani_ps\x18\x02 \x03(\v2\r.common.NetIPR\n" +
	"certSaniPs\x12*\n" +
	"\x11cert_sandns_names\x18\x03 \x03(\tR\x0fcertSandnsNames\x12\x14\n" +
	"\x05token\x18\x04 \x01(\tR\x05token\x12A\n" +
	"\raccepted_c_as\x18\x05 \x03(\v2\x1d.common.PEMEncodedCertificateR\vacceptedCAs\"\x91\x01\n" +
	"\x0fTrustdCertsSpec\x12;\n" +
	"\x06server\x18\x02 \x01(\v2#.common.PEMEncodedCertificateAndKeyR\x06server\x12A\n" +
	"\raccepted_c_as\x18\x03 \x03(\v2\x1d.common.PEMEncodedCertificateR\vacceptedCAsBx\n" +
	"*dev.talos.api.resource.definitions.secretsZJgithub.com/siderolabs/talos/pkg/machinery/api/resource/definitions/secretsb\x06proto3"

var (
	file_resource_definitions_secrets_secrets_proto_rawDescOnce sync.Once
	file_resource_definitions_secrets_secrets_proto_rawDescData []byte
)

func file_resource_definitions_secrets_secrets_proto_rawDescGZIP() []byte {
	file_resource_definitions_secrets_secrets_proto_rawDescOnce.Do(func() {
		file_resource_definitions_secrets_secrets_proto_rawDescData = protoimpl.X.CompressGZIP(unsafe.Slice(unsafe.StringData(file_resource_definitions_secrets_secrets_proto_rawDesc), len(file_resource_definitions_secrets_secrets_proto_rawDesc)))
	})
	return file_resource_definitions_secrets_secrets_proto_rawDescData
}

var file_resource_definitions_secrets_secrets_proto_msgTypes = make([]protoimpl.MessageInfo, 12)
var file_resource_definitions_secrets_secrets_proto_goTypes = []any{
	(*APICertsSpec)(nil),                       // 0: talos.resource.definitions.secrets.APICertsSpec
	(*CertSANSpec)(nil),                        // 1: talos.resource.definitions.secrets.CertSANSpec
	(*EncryptionSaltSpec)(nil),                 // 2: talos.resource.definitions.secrets.EncryptionSaltSpec
	(*EtcdCertsSpec)(nil),                      // 3: talos.resource.definitions.secrets.EtcdCertsSpec
	(*EtcdRootSpec)(nil),                       // 4: talos.resource.definitions.secrets.EtcdRootSpec
	(*KubeletSpec)(nil),                        // 5: talos.resource.definitions.secrets.KubeletSpec
	(*KubernetesCertsSpec)(nil),                // 6: talos.resource.definitions.secrets.KubernetesCertsSpec
	(*KubernetesDynamicCertsSpec)(nil),         // 7: talos.resource.definitions.secrets.KubernetesDynamicCertsSpec
	(*KubernetesRootSpec)(nil),                 // 8: talos.resource.definitions.secrets.KubernetesRootSpec
	(*MaintenanceRootSpec)(nil),                // 9: talos.resource.definitions.secrets.MaintenanceRootSpec
	(*OSRootSpec)(nil),                         // 10: talos.resource.definitions.secrets.OSRootSpec
	(*TrustdCertsSpec)(nil),                    // 11: talos.resource.definitions.secrets.TrustdCertsSpec
	(*common.PEMEncodedCertificateAndKey)(nil), // 12: common.PEMEncodedCertificateAndKey
	(*common.PEMEncodedCertificate)(nil),       // 13: common.PEMEncodedCertificate
	(*common.NetIP)(nil),                       // 14: common.NetIP
	(*common.URL)(nil),                         // 15: common.URL
	(*common.PEMEncodedKey)(nil),               // 16: common.PEMEncodedKey
}
var file_resource_definitions_secrets_secrets_proto_depIdxs = []int32{
	12, // 0: talos.resource.definitions.secrets.APICertsSpec.client:type_name -> common.PEMEncodedCertificateAndKey
	12, // 1: talos.resource.definitions.secrets.APICertsSpec.server:type_name -> common.PEMEncodedCertificateAndKey
	13, // 2: talos.resource.definitions.secrets.APICertsSpec.accepted_c_as:type_name -> common.PEMEncodedCertificate
	14, // 3: talos.resource.definitions.secrets.CertSANSpec.i_ps:type_name -> common.NetIP
	12, // 4: talos.resource.definitions.secrets.EtcdCertsSpec.etcd:type_name -> common.PEMEncodedCertificateAndKey
	12, // 5: talos.resource.definitions.secrets.EtcdCertsSpec.etcd_peer:type_name -> common.PEMEncodedCertificateAndKey
	12, // 6: talos.resource.definitions.secrets.EtcdCertsSpec.etcd_admin:type_name -> common.PEMEncodedCertificateAndKey
	12, // 7: talos.resource.definitions.secrets.EtcdCertsSpec.etcd_api_server:type_name -> common.PEMEncodedCertificateAndKey
	12, // 8: talos.resource.definitions.secrets.EtcdRootSpec.etcd_ca:type_name -> common.PEMEncodedCertificateAndKey
	15, // 9: talos.resource.definitions.secrets.KubeletSpec.endpoint:type_name -> common.URL
	13, // 10: talos.resource.definitions.secrets.KubeletSpec.accepted_c_as:type_name -> common.PEMEncodedCertificate
	12, // 11: talos.resource.definitions.secrets.KubernetesDynamicCertsSpec.api_server:type_name -> common.PEMEncodedCertificateAndKey
	12, // 12: talos.resource.definitions.secrets.KubernetesDynamicCertsSpec.api_server_kubelet_client:type_name -> common.PEMEncodedCertificateAndKey
	12, // 13: talos.resource.definitions.secrets.KubernetesDynamicCertsSpec.front_proxy:type_name -> common.PEMEncodedCertificateAndKey
	15, // 14: talos.resource.definitions.secrets.KubernetesRootSpec.endpoint:type_name -> common.URL
	15, // 15: talos.resource.definitions.secrets.KubernetesRootSpec.local_endpoint:type_name -> common.URL
	12, // 16: talos.resource.definitions.secrets.KubernetesRootSpec.issuing_ca:type_name -> common.PEMEncodedCertificateAndKey
	16, // 17: talos.resource.definitions.secrets.KubernetesRootSpec.service_account:type_name -> common.PEMEncodedKey
	12, // 18: talos.resource.definitions.secrets.KubernetesRootSpec.aggregator_ca:type_name -> common.PEMEncodedCertificateAndKey
	14, // 19: talos.resource.definitions.secrets.KubernetesRootSpec.api_server_ips:type_name -> common.NetIP
	13, // 20: talos.resource.definitions.secrets.KubernetesRootSpec.accepted_c_as:type_name -> common.PEMEncodedCertificate
	12, // 21: talos.resource.definitions.secrets.MaintenanceRootSpec.ca:type_name -> common.PEMEncodedCertificateAndKey
	12, // 22: talos.resource.definitions.secrets.OSRootSpec.issuing_ca:type_name -> common.PEMEncodedCertificateAndKey
	14, // 23: talos.resource.definitions.secrets.OSRootSpec.cert_sani_ps:type_name -> common.NetIP
	13, // 24: talos.resource.definitions.secrets.OSRootSpec.accepted_c_as:type_name -> common.PEMEncodedCertificate
	12, // 25: talos.resource.definitions.secrets.TrustdCertsSpec.server:type_name -> common.PEMEncodedCertificateAndKey
	13, // 26: talos.resource.definitions.secrets.TrustdCertsSpec.accepted_c_as:type_name -> common.PEMEncodedCertificate
	27, // [27:27] is the sub-list for method output_type
	27, // [27:27] is the sub-list for method input_type
	27, // [27:27] is the sub-list for extension type_name
	27, // [27:27] is the sub-list for extension extendee
	0,  // [0:27] is the sub-list for field type_name
}

func init() { file_resource_definitions_secrets_secrets_proto_init() }
func file_resource_definitions_secrets_secrets_proto_init() {
	if File_resource_definitions_secrets_secrets_proto != nil {
		return
	}
	type x struct{}
	out := protoimpl.TypeBuilder{
		File: protoimpl.DescBuilder{
			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
			RawDescriptor: unsafe.Slice(unsafe.StringData(file_resource_definitions_secrets_secrets_proto_rawDesc), len(file_resource_definitions_secrets_secrets_proto_rawDesc)),
			NumEnums:      0,
			NumMessages:   12,
			NumExtensions: 0,
			NumServices:   0,
		},
		GoTypes:           file_resource_definitions_secrets_secrets_proto_goTypes,
		DependencyIndexes: file_resource_definitions_secrets_secrets_proto_depIdxs,
		MessageInfos:      file_resource_definitions_secrets_secrets_proto_msgTypes,
	}.Build()
	File_resource_definitions_secrets_secrets_proto = out.File
	file_resource_definitions_secrets_secrets_proto_goTypes = nil
	file_resource_definitions_secrets_secrets_proto_depIdxs = nil
}
