Package io.envoyproxy.envoy.extensions.filters.network.rbac.v3

Class RBAC.Builder

java.lang.Object
com.google.protobuf.AbstractMessageLite.Builder
com.google.protobuf.AbstractMessage.Builder<BuilderT>
com.google.protobuf.GeneratedMessageV3.Builder<RBAC.Builder>
io.envoyproxy.envoy.extensions.filters.network.rbac.v3.RBAC.Builder
All Implemented Interfaces:
com.google.protobuf.Message.Builder, com.google.protobuf.MessageLite.Builder, com.google.protobuf.MessageLiteOrBuilder, com.google.protobuf.MessageOrBuilder, RBACOrBuilder, Cloneable
Enclosing class:
RBAC
public static final class RBAC.Builder extends com.google.protobuf.GeneratedMessageV3.Builder<RBAC.Builder> implements RBACOrBuilder
 RBAC network filter config.

 Header should not be used in rules/shadow_rules in RBAC network filter as
 this information is only available in :ref:`RBAC http filter <config_http_filters_rbac>`.
 [#next-free-field: 9]
Protobuf type envoy.extensions.filters.network.rbac.v3.RBAC

  • Method Details

    • getDescriptor

      public static final com.google.protobuf.Descriptors.Descriptor getDescriptor()

    • internalGetFieldAccessorTable

      protected com.google.protobuf.GeneratedMessageV3.FieldAccessorTable internalGetFieldAccessorTable()
      Specified by:
      internalGetFieldAccessorTable in class com.google.protobuf.GeneratedMessageV3.Builder<RBAC.Builder>

    • clear

      public RBAC.Builder clear()
      Specified by:
      clear in interface com.google.protobuf.Message.Builder
      Specified by:
      clear in interface com.google.protobuf.MessageLite.Builder
      Overrides:
      clear in class com.google.protobuf.GeneratedMessageV3.Builder<RBAC.Builder>

    • getDescriptorForType

      public com.google.protobuf.Descriptors.Descriptor getDescriptorForType()
      Specified by:
      getDescriptorForType in interface com.google.protobuf.Message.Builder
      Specified by:
      getDescriptorForType in interface com.google.protobuf.MessageOrBuilder
      Overrides:
      getDescriptorForType in class com.google.protobuf.GeneratedMessageV3.Builder<RBAC.Builder>

    • getDefaultInstanceForType

      public RBAC getDefaultInstanceForType()
      Specified by:
      getDefaultInstanceForType in interface com.google.protobuf.MessageLiteOrBuilder
      Specified by:
      getDefaultInstanceForType in interface com.google.protobuf.MessageOrBuilder

    • build

      public RBAC build()
      Specified by:
      build in interface com.google.protobuf.Message.Builder
      Specified by:
      build in interface com.google.protobuf.MessageLite.Builder

    • buildPartial

      public RBAC buildPartial()
      Specified by:
      buildPartial in interface com.google.protobuf.Message.Builder
      Specified by:
      buildPartial in interface com.google.protobuf.MessageLite.Builder

    • clone

      public RBAC.Builder clone()
      Specified by:
      clone in interface com.google.protobuf.Message.Builder
      Specified by:
      clone in interface com.google.protobuf.MessageLite.Builder
      Overrides:
      clone in class com.google.protobuf.GeneratedMessageV3.Builder<RBAC.Builder>

    • setField

      public RBAC.Builder setField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
      Specified by:
      setField in interface com.google.protobuf.Message.Builder
      Overrides:
      setField in class com.google.protobuf.GeneratedMessageV3.Builder<RBAC.Builder>

    • clearField

      public RBAC.Builder clearField(com.google.protobuf.Descriptors.FieldDescriptor field)
      Specified by:
      clearField in interface com.google.protobuf.Message.Builder
      Overrides:
      clearField in class com.google.protobuf.GeneratedMessageV3.Builder<RBAC.Builder>

    • clearOneof

      public RBAC.Builder clearOneof(com.google.protobuf.Descriptors.OneofDescriptor oneof)
      Specified by:
      clearOneof in interface com.google.protobuf.Message.Builder
      Overrides:
      clearOneof in class com.google.protobuf.GeneratedMessageV3.Builder<RBAC.Builder>

    • setRepeatedField

      public RBAC.Builder setRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, int index, Object value)
      Specified by:
      setRepeatedField in interface com.google.protobuf.Message.Builder
      Overrides:
      setRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<RBAC.Builder>

    • addRepeatedField

      public RBAC.Builder addRepeatedField(com.google.protobuf.Descriptors.FieldDescriptor field, Object value)
      Specified by:
      addRepeatedField in interface com.google.protobuf.Message.Builder
      Overrides:
      addRepeatedField in class com.google.protobuf.GeneratedMessageV3.Builder<RBAC.Builder>

    • mergeFrom

      public RBAC.Builder mergeFrom(com.google.protobuf.Message other)
      Specified by:
      mergeFrom in interface com.google.protobuf.Message.Builder
      Overrides:
      mergeFrom in class com.google.protobuf.AbstractMessage.Builder<RBAC.Builder>

    • mergeFrom

      public RBAC.Builder mergeFrom(RBAC other)

    • isInitialized

      public final boolean isInitialized()
      Specified by:
      isInitialized in interface com.google.protobuf.MessageLiteOrBuilder
      Overrides:
      isInitialized in class com.google.protobuf.GeneratedMessageV3.Builder<RBAC.Builder>

    • mergeFrom

      public RBAC.Builder mergeFrom(com.google.protobuf.CodedInputStream input, com.google.protobuf.ExtensionRegistryLite extensionRegistry) throws IOException
      Specified by:
      mergeFrom in interface com.google.protobuf.Message.Builder
      Specified by:
      mergeFrom in interface com.google.protobuf.MessageLite.Builder
      Overrides:
      mergeFrom in class com.google.protobuf.AbstractMessage.Builder<RBAC.Builder>
      Throws:
      IOException

    • hasRules

      public boolean hasRules()
       Specify the RBAC rules to be applied globally.
 If absent, no enforcing RBAC policy will be applied.
 If present and empty, DENY.
 If both rules and matcher are configured, rules will be ignored.
      .envoy.config.rbac.v3.RBAC rules = 1 [(.udpa.annotations.field_migrate) = { ... }
      Specified by:
      hasRules in interface RBACOrBuilder
      Returns:
      Whether the rules field is set.

    • getRules

      public RBAC getRules()
       Specify the RBAC rules to be applied globally.
 If absent, no enforcing RBAC policy will be applied.
 If present and empty, DENY.
 If both rules and matcher are configured, rules will be ignored.
      .envoy.config.rbac.v3.RBAC rules = 1 [(.udpa.annotations.field_migrate) = { ... }
      Specified by:
      getRules in interface RBACOrBuilder
      Returns:
      The rules.

    • setRules

      public RBAC.Builder setRules(RBAC value)
       Specify the RBAC rules to be applied globally.
 If absent, no enforcing RBAC policy will be applied.
 If present and empty, DENY.
 If both rules and matcher are configured, rules will be ignored.
      .envoy.config.rbac.v3.RBAC rules = 1 [(.udpa.annotations.field_migrate) = { ... }

    • setRules

      public RBAC.Builder setRules(RBAC.Builder builderForValue)
       Specify the RBAC rules to be applied globally.
 If absent, no enforcing RBAC policy will be applied.
 If present and empty, DENY.
 If both rules and matcher are configured, rules will be ignored.
      .envoy.config.rbac.v3.RBAC rules = 1 [(.udpa.annotations.field_migrate) = { ... }

    • mergeRules

      public RBAC.Builder mergeRules(RBAC value)
       Specify the RBAC rules to be applied globally.
 If absent, no enforcing RBAC policy will be applied.
 If present and empty, DENY.
 If both rules and matcher are configured, rules will be ignored.
      .envoy.config.rbac.v3.RBAC rules = 1 [(.udpa.annotations.field_migrate) = { ... }

    • clearRules

      public RBAC.Builder clearRules()
       Specify the RBAC rules to be applied globally.
 If absent, no enforcing RBAC policy will be applied.
 If present and empty, DENY.
 If both rules and matcher are configured, rules will be ignored.
      .envoy.config.rbac.v3.RBAC rules = 1 [(.udpa.annotations.field_migrate) = { ... }

    • getRulesBuilder

      public RBAC.Builder getRulesBuilder()
       Specify the RBAC rules to be applied globally.
 If absent, no enforcing RBAC policy will be applied.
 If present and empty, DENY.
 If both rules and matcher are configured, rules will be ignored.
      .envoy.config.rbac.v3.RBAC rules = 1 [(.udpa.annotations.field_migrate) = { ... }

    • getRulesOrBuilder

      public RBACOrBuilder getRulesOrBuilder()
       Specify the RBAC rules to be applied globally.
 If absent, no enforcing RBAC policy will be applied.
 If present and empty, DENY.
 If both rules and matcher are configured, rules will be ignored.
      .envoy.config.rbac.v3.RBAC rules = 1 [(.udpa.annotations.field_migrate) = { ... }
      Specified by:
      getRulesOrBuilder in interface RBACOrBuilder

    • hasMatcher

      public boolean hasMatcher()
       The match tree to use when resolving RBAC action for incoming connections. Connections do
 not match any matcher will be denied.
 If absent, no enforcing RBAC matcher will be applied.
 If present and empty, deny all connections.
      .xds.type.matcher.v3.Matcher matcher = 6 [(.udpa.annotations.field_migrate) = { ... }
      Specified by:
      hasMatcher in interface RBACOrBuilder
      Returns:
      Whether the matcher field is set.

    • getMatcher

      public Matcher getMatcher()
       The match tree to use when resolving RBAC action for incoming connections. Connections do
 not match any matcher will be denied.
 If absent, no enforcing RBAC matcher will be applied.
 If present and empty, deny all connections.
      .xds.type.matcher.v3.Matcher matcher = 6 [(.udpa.annotations.field_migrate) = { ... }
      Specified by:
      getMatcher in interface RBACOrBuilder
      Returns:
      The matcher.

    • setMatcher

      public RBAC.Builder setMatcher(Matcher value)
       The match tree to use when resolving RBAC action for incoming connections. Connections do
 not match any matcher will be denied.
 If absent, no enforcing RBAC matcher will be applied.
 If present and empty, deny all connections.
      .xds.type.matcher.v3.Matcher matcher = 6 [(.udpa.annotations.field_migrate) = { ... }

    • setMatcher

      public RBAC.Builder setMatcher(Matcher.Builder builderForValue)
       The match tree to use when resolving RBAC action for incoming connections. Connections do
 not match any matcher will be denied.
 If absent, no enforcing RBAC matcher will be applied.
 If present and empty, deny all connections.
      .xds.type.matcher.v3.Matcher matcher = 6 [(.udpa.annotations.field_migrate) = { ... }

    • mergeMatcher

      public RBAC.Builder mergeMatcher(Matcher value)
       The match tree to use when resolving RBAC action for incoming connections. Connections do
 not match any matcher will be denied.
 If absent, no enforcing RBAC matcher will be applied.
 If present and empty, deny all connections.
      .xds.type.matcher.v3.Matcher matcher = 6 [(.udpa.annotations.field_migrate) = { ... }

    • clearMatcher

      public RBAC.Builder clearMatcher()
       The match tree to use when resolving RBAC action for incoming connections. Connections do
 not match any matcher will be denied.
 If absent, no enforcing RBAC matcher will be applied.
 If present and empty, deny all connections.
      .xds.type.matcher.v3.Matcher matcher = 6 [(.udpa.annotations.field_migrate) = { ... }

    • getMatcherBuilder

      public Matcher.Builder getMatcherBuilder()
       The match tree to use when resolving RBAC action for incoming connections. Connections do
 not match any matcher will be denied.
 If absent, no enforcing RBAC matcher will be applied.
 If present and empty, deny all connections.
      .xds.type.matcher.v3.Matcher matcher = 6 [(.udpa.annotations.field_migrate) = { ... }

    • getMatcherOrBuilder

      public MatcherOrBuilder getMatcherOrBuilder()
       The match tree to use when resolving RBAC action for incoming connections. Connections do
 not match any matcher will be denied.
 If absent, no enforcing RBAC matcher will be applied.
 If present and empty, deny all connections.
      .xds.type.matcher.v3.Matcher matcher = 6 [(.udpa.annotations.field_migrate) = { ... }
      Specified by:
      getMatcherOrBuilder in interface RBACOrBuilder

    • hasShadowRules

      public boolean hasShadowRules()
       Shadow rules are not enforced by the filter but will emit stats and logs
 and can be used for rule testing.
 If absent, no shadow RBAC policy will be applied.
 If both shadow rules and shadow matcher are configured, shadow rules will be ignored.
      .envoy.config.rbac.v3.RBAC shadow_rules = 2 [(.udpa.annotations.field_migrate) = { ... }
      Specified by:
      hasShadowRules in interface RBACOrBuilder
      Returns:
      Whether the shadowRules field is set.

    • getShadowRules

      public RBAC getShadowRules()
       Shadow rules are not enforced by the filter but will emit stats and logs
 and can be used for rule testing.
 If absent, no shadow RBAC policy will be applied.
 If both shadow rules and shadow matcher are configured, shadow rules will be ignored.
      .envoy.config.rbac.v3.RBAC shadow_rules = 2 [(.udpa.annotations.field_migrate) = { ... }
      Specified by:
      getShadowRules in interface RBACOrBuilder
      Returns:
      The shadowRules.

    • setShadowRules

      public RBAC.Builder setShadowRules(RBAC value)
       Shadow rules are not enforced by the filter but will emit stats and logs
 and can be used for rule testing.
 If absent, no shadow RBAC policy will be applied.
 If both shadow rules and shadow matcher are configured, shadow rules will be ignored.
      .envoy.config.rbac.v3.RBAC shadow_rules = 2 [(.udpa.annotations.field_migrate) = { ... }

    • setShadowRules

      public RBAC.Builder setShadowRules(RBAC.Builder builderForValue)
       Shadow rules are not enforced by the filter but will emit stats and logs
 and can be used for rule testing.
 If absent, no shadow RBAC policy will be applied.
 If both shadow rules and shadow matcher are configured, shadow rules will be ignored.
      .envoy.config.rbac.v3.RBAC shadow_rules = 2 [(.udpa.annotations.field_migrate) = { ... }

    • mergeShadowRules

      public RBAC.Builder mergeShadowRules(RBAC value)
       Shadow rules are not enforced by the filter but will emit stats and logs
 and can be used for rule testing.
 If absent, no shadow RBAC policy will be applied.
 If both shadow rules and shadow matcher are configured, shadow rules will be ignored.
      .envoy.config.rbac.v3.RBAC shadow_rules = 2 [(.udpa.annotations.field_migrate) = { ... }

    • clearShadowRules

      public RBAC.Builder clearShadowRules()
       Shadow rules are not enforced by the filter but will emit stats and logs
 and can be used for rule testing.
 If absent, no shadow RBAC policy will be applied.
 If both shadow rules and shadow matcher are configured, shadow rules will be ignored.
      .envoy.config.rbac.v3.RBAC shadow_rules = 2 [(.udpa.annotations.field_migrate) = { ... }

    • getShadowRulesBuilder

      public RBAC.Builder getShadowRulesBuilder()
       Shadow rules are not enforced by the filter but will emit stats and logs
 and can be used for rule testing.
 If absent, no shadow RBAC policy will be applied.
 If both shadow rules and shadow matcher are configured, shadow rules will be ignored.
      .envoy.config.rbac.v3.RBAC shadow_rules = 2 [(.udpa.annotations.field_migrate) = { ... }

    • getShadowRulesOrBuilder

      public RBACOrBuilder getShadowRulesOrBuilder()
       Shadow rules are not enforced by the filter but will emit stats and logs
 and can be used for rule testing.
 If absent, no shadow RBAC policy will be applied.
 If both shadow rules and shadow matcher are configured, shadow rules will be ignored.
      .envoy.config.rbac.v3.RBAC shadow_rules = 2 [(.udpa.annotations.field_migrate) = { ... }
      Specified by:
      getShadowRulesOrBuilder in interface RBACOrBuilder

    • hasShadowMatcher

      public boolean hasShadowMatcher()
       The match tree to use for emitting stats and logs which can be used for rule testing for
 incoming connections.
 If absent, no shadow matcher will be applied.
      .xds.type.matcher.v3.Matcher shadow_matcher = 7 [(.udpa.annotations.field_migrate) = { ... }
      Specified by:
      hasShadowMatcher in interface RBACOrBuilder
      Returns:
      Whether the shadowMatcher field is set.

    • getShadowMatcher

      public Matcher getShadowMatcher()
       The match tree to use for emitting stats and logs which can be used for rule testing for
 incoming connections.
 If absent, no shadow matcher will be applied.
      .xds.type.matcher.v3.Matcher shadow_matcher = 7 [(.udpa.annotations.field_migrate) = { ... }
      Specified by:
      getShadowMatcher in interface RBACOrBuilder
      Returns:
      The shadowMatcher.

    • setShadowMatcher

      public RBAC.Builder setShadowMatcher(Matcher value)
       The match tree to use for emitting stats and logs which can be used for rule testing for
 incoming connections.
 If absent, no shadow matcher will be applied.
      .xds.type.matcher.v3.Matcher shadow_matcher = 7 [(.udpa.annotations.field_migrate) = { ... }

    • setShadowMatcher

      public RBAC.Builder setShadowMatcher(Matcher.Builder builderForValue)
       The match tree to use for emitting stats and logs which can be used for rule testing for
 incoming connections.
 If absent, no shadow matcher will be applied.
      .xds.type.matcher.v3.Matcher shadow_matcher = 7 [(.udpa.annotations.field_migrate) = { ... }

    • mergeShadowMatcher

      public RBAC.Builder mergeShadowMatcher(Matcher value)
       The match tree to use for emitting stats and logs which can be used for rule testing for
 incoming connections.
 If absent, no shadow matcher will be applied.
      .xds.type.matcher.v3.Matcher shadow_matcher = 7 [(.udpa.annotations.field_migrate) = { ... }

    • clearShadowMatcher

      public RBAC.Builder clearShadowMatcher()
       The match tree to use for emitting stats and logs which can be used for rule testing for
 incoming connections.
 If absent, no shadow matcher will be applied.
      .xds.type.matcher.v3.Matcher shadow_matcher = 7 [(.udpa.annotations.field_migrate) = { ... }

    • getShadowMatcherBuilder

      public Matcher.Builder getShadowMatcherBuilder()
       The match tree to use for emitting stats and logs which can be used for rule testing for
 incoming connections.
 If absent, no shadow matcher will be applied.
      .xds.type.matcher.v3.Matcher shadow_matcher = 7 [(.udpa.annotations.field_migrate) = { ... }

    • getShadowMatcherOrBuilder

      public MatcherOrBuilder getShadowMatcherOrBuilder()
       The match tree to use for emitting stats and logs which can be used for rule testing for
 incoming connections.
 If absent, no shadow matcher will be applied.
      .xds.type.matcher.v3.Matcher shadow_matcher = 7 [(.udpa.annotations.field_migrate) = { ... }
      Specified by:
      getShadowMatcherOrBuilder in interface RBACOrBuilder

    • getShadowRulesStatPrefix

      public String getShadowRulesStatPrefix()
       If specified, shadow rules will emit stats with the given prefix.
 This is useful to distinguish the stat when there are more than 1 RBAC filter configured with
 shadow rules.
      string shadow_rules_stat_prefix = 5;
      Specified by:
      getShadowRulesStatPrefix in interface RBACOrBuilder
      Returns:
      The shadowRulesStatPrefix.

    • getShadowRulesStatPrefixBytes

      public com.google.protobuf.ByteString getShadowRulesStatPrefixBytes()
       If specified, shadow rules will emit stats with the given prefix.
 This is useful to distinguish the stat when there are more than 1 RBAC filter configured with
 shadow rules.
      string shadow_rules_stat_prefix = 5;
      Specified by:
      getShadowRulesStatPrefixBytes in interface RBACOrBuilder
      Returns:
      The bytes for shadowRulesStatPrefix.

    • setShadowRulesStatPrefix

      public RBAC.Builder setShadowRulesStatPrefix(String value)
       If specified, shadow rules will emit stats with the given prefix.
 This is useful to distinguish the stat when there are more than 1 RBAC filter configured with
 shadow rules.
      string shadow_rules_stat_prefix = 5;
      Parameters:
      value - The shadowRulesStatPrefix to set.
      Returns:
      This builder for chaining.

    • clearShadowRulesStatPrefix

      public RBAC.Builder clearShadowRulesStatPrefix()
       If specified, shadow rules will emit stats with the given prefix.
 This is useful to distinguish the stat when there are more than 1 RBAC filter configured with
 shadow rules.
      string shadow_rules_stat_prefix = 5;
      Returns:
      This builder for chaining.

    • setShadowRulesStatPrefixBytes

      public RBAC.Builder setShadowRulesStatPrefixBytes(com.google.protobuf.ByteString value)
       If specified, shadow rules will emit stats with the given prefix.
 This is useful to distinguish the stat when there are more than 1 RBAC filter configured with
 shadow rules.
      string shadow_rules_stat_prefix = 5;
      Parameters:
      value - The bytes for shadowRulesStatPrefix to set.
      Returns:
      This builder for chaining.

    • getStatPrefix

      public String getStatPrefix()
       The prefix to use when emitting statistics.
      string stat_prefix = 3 [(.validate.rules) = { ... }
      Specified by:
      getStatPrefix in interface RBACOrBuilder
      Returns:
      The statPrefix.

    • getStatPrefixBytes

      public com.google.protobuf.ByteString getStatPrefixBytes()
       The prefix to use when emitting statistics.
      string stat_prefix = 3 [(.validate.rules) = { ... }
      Specified by:
      getStatPrefixBytes in interface RBACOrBuilder
      Returns:
      The bytes for statPrefix.

    • setStatPrefix

      public RBAC.Builder setStatPrefix(String value)
       The prefix to use when emitting statistics.
      string stat_prefix = 3 [(.validate.rules) = { ... }
      Parameters:
      value - The statPrefix to set.
      Returns:
      This builder for chaining.

    • clearStatPrefix

      public RBAC.Builder clearStatPrefix()
       The prefix to use when emitting statistics.
      string stat_prefix = 3 [(.validate.rules) = { ... }
      Returns:
      This builder for chaining.

    • setStatPrefixBytes

      public RBAC.Builder setStatPrefixBytes(com.google.protobuf.ByteString value)
       The prefix to use when emitting statistics.
      string stat_prefix = 3 [(.validate.rules) = { ... }
      Parameters:
      value - The bytes for statPrefix to set.
      Returns:
      This builder for chaining.

    • getEnforcementTypeValue

      public int getEnforcementTypeValue()
       RBAC enforcement strategy. By default RBAC will be enforced only once
 when the first byte of data arrives from the downstream. When used in
 conjunction with filters that emit dynamic metadata after decoding
 every payload (e.g., Mongo, MySQL, Kafka) set the enforcement type to
 CONTINUOUS to enforce RBAC policies on every message boundary.
      .envoy.extensions.filters.network.rbac.v3.RBAC.EnforcementType enforcement_type = 4;
      Specified by:
      getEnforcementTypeValue in interface RBACOrBuilder
      Returns:
      The enum numeric value on the wire for enforcementType.

    • setEnforcementTypeValue

      public RBAC.Builder setEnforcementTypeValue(int value)
       RBAC enforcement strategy. By default RBAC will be enforced only once
 when the first byte of data arrives from the downstream. When used in
 conjunction with filters that emit dynamic metadata after decoding
 every payload (e.g., Mongo, MySQL, Kafka) set the enforcement type to
 CONTINUOUS to enforce RBAC policies on every message boundary.
      .envoy.extensions.filters.network.rbac.v3.RBAC.EnforcementType enforcement_type = 4;
      Parameters:
      value - The enum numeric value on the wire for enforcementType to set.
      Returns:
      This builder for chaining.

    • getEnforcementType

      public RBAC.EnforcementType getEnforcementType()
       RBAC enforcement strategy. By default RBAC will be enforced only once
 when the first byte of data arrives from the downstream. When used in
 conjunction with filters that emit dynamic metadata after decoding
 every payload (e.g., Mongo, MySQL, Kafka) set the enforcement type to
 CONTINUOUS to enforce RBAC policies on every message boundary.
      .envoy.extensions.filters.network.rbac.v3.RBAC.EnforcementType enforcement_type = 4;
      Specified by:
      getEnforcementType in interface RBACOrBuilder
      Returns:
      The enforcementType.

    • setEnforcementType

      public RBAC.Builder setEnforcementType(RBAC.EnforcementType value)
       RBAC enforcement strategy. By default RBAC will be enforced only once
 when the first byte of data arrives from the downstream. When used in
 conjunction with filters that emit dynamic metadata after decoding
 every payload (e.g., Mongo, MySQL, Kafka) set the enforcement type to
 CONTINUOUS to enforce RBAC policies on every message boundary.
      .envoy.extensions.filters.network.rbac.v3.RBAC.EnforcementType enforcement_type = 4;
      Parameters:
      value - The enforcementType to set.
      Returns:
      This builder for chaining.

    • clearEnforcementType

      public RBAC.Builder clearEnforcementType()
       RBAC enforcement strategy. By default RBAC will be enforced only once
 when the first byte of data arrives from the downstream. When used in
 conjunction with filters that emit dynamic metadata after decoding
 every payload (e.g., Mongo, MySQL, Kafka) set the enforcement type to
 CONTINUOUS to enforce RBAC policies on every message boundary.
      .envoy.extensions.filters.network.rbac.v3.RBAC.EnforcementType enforcement_type = 4;
      Returns:
      This builder for chaining.

    • hasDelayDeny

      public boolean hasDelayDeny()
       Delay the specified duration before closing the connection when the policy evaluation
 result is ``DENY``. If this is not present, the connection will be closed immediately.
 This is useful to provide a better protection for Envoy against clients that retries
 aggressively when the connection is rejected by the RBAC filter.
      .google.protobuf.Duration delay_deny = 8;
      Specified by:
      hasDelayDeny in interface RBACOrBuilder
      Returns:
      Whether the delayDeny field is set.

    • getDelayDeny

      public com.google.protobuf.Duration getDelayDeny()
       Delay the specified duration before closing the connection when the policy evaluation
 result is ``DENY``. If this is not present, the connection will be closed immediately.
 This is useful to provide a better protection for Envoy against clients that retries
 aggressively when the connection is rejected by the RBAC filter.
      .google.protobuf.Duration delay_deny = 8;
      Specified by:
      getDelayDeny in interface RBACOrBuilder
      Returns:
      The delayDeny.

    • setDelayDeny

      public RBAC.Builder setDelayDeny(com.google.protobuf.Duration value)
       Delay the specified duration before closing the connection when the policy evaluation
 result is ``DENY``. If this is not present, the connection will be closed immediately.
 This is useful to provide a better protection for Envoy against clients that retries
 aggressively when the connection is rejected by the RBAC filter.
      .google.protobuf.Duration delay_deny = 8;

    • setDelayDeny

      public RBAC.Builder setDelayDeny(com.google.protobuf.Duration.Builder builderForValue)
       Delay the specified duration before closing the connection when the policy evaluation
 result is ``DENY``. If this is not present, the connection will be closed immediately.
 This is useful to provide a better protection for Envoy against clients that retries
 aggressively when the connection is rejected by the RBAC filter.
      .google.protobuf.Duration delay_deny = 8;

    • mergeDelayDeny

      public RBAC.Builder mergeDelayDeny(com.google.protobuf.Duration value)
       Delay the specified duration before closing the connection when the policy evaluation
 result is ``DENY``. If this is not present, the connection will be closed immediately.
 This is useful to provide a better protection for Envoy against clients that retries
 aggressively when the connection is rejected by the RBAC filter.
      .google.protobuf.Duration delay_deny = 8;

    • clearDelayDeny

      public RBAC.Builder clearDelayDeny()
       Delay the specified duration before closing the connection when the policy evaluation
 result is ``DENY``. If this is not present, the connection will be closed immediately.
 This is useful to provide a better protection for Envoy against clients that retries
 aggressively when the connection is rejected by the RBAC filter.
      .google.protobuf.Duration delay_deny = 8;

    • getDelayDenyBuilder

      public com.google.protobuf.Duration.Builder getDelayDenyBuilder()
       Delay the specified duration before closing the connection when the policy evaluation
 result is ``DENY``. If this is not present, the connection will be closed immediately.
 This is useful to provide a better protection for Envoy against clients that retries
 aggressively when the connection is rejected by the RBAC filter.
      .google.protobuf.Duration delay_deny = 8;

    • getDelayDenyOrBuilder

      public com.google.protobuf.DurationOrBuilder getDelayDenyOrBuilder()
       Delay the specified duration before closing the connection when the policy evaluation
 result is ``DENY``. If this is not present, the connection will be closed immediately.
 This is useful to provide a better protection for Envoy against clients that retries
 aggressively when the connection is rejected by the RBAC filter.
      .google.protobuf.Duration delay_deny = 8;
      Specified by:
      getDelayDenyOrBuilder in interface RBACOrBuilder

    • setUnknownFields

      public final RBAC.Builder setUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
      Specified by:
      setUnknownFields in interface com.google.protobuf.Message.Builder
      Overrides:
      setUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<RBAC.Builder>

    • mergeUnknownFields

      public final RBAC.Builder mergeUnknownFields(com.google.protobuf.UnknownFieldSet unknownFields)
      Specified by:
      mergeUnknownFields in interface com.google.protobuf.Message.Builder
      Overrides:
      mergeUnknownFields in class com.google.protobuf.GeneratedMessageV3.Builder<RBAC.Builder>