diff --git a/.gitignore b/.gitignore
index c62067826..f5c5c2b92 100644
--- a/.gitignore
+++ b/.gitignore
@@ -2,3 +2,4 @@
 /bin
 profile.out
 coverage.txt
+.idea
diff --git a/Makefile b/Makefile
index b2f32f14c..001a7b9aa 100644
--- a/Makefile
+++ b/Makefile
@@ -121,6 +121,10 @@ build-kdmp:
 	-X github.com/portworx/kdmp/pkg/version.buildDate=${BUILD_DATE}" \
 	$(BASE_DIR)/cmd/kdmp
 
+build-encryptor:
+	@echo "Build encryptor"
+	@cd cmd/3ncryptor/ && go build -o ../../bin/3ncryptor -ldflags="-s" .
+
 container-kdmp:
 	@echo "Build kdmp docker image"
 	docker build --tag $(DOCKER_IMAGE) .
diff --git a/cmd/3ncryptor/3ncryptor.go b/cmd/3ncryptor/3ncryptor.go
new file mode 100644
index 000000000..b2afefaa6
--- /dev/null
+++ b/cmd/3ncryptor/3ncryptor.go
@@ -0,0 +1,610 @@
+package main
+
+import (
+	"flag"
+	"fmt"
+	"os"
+	"os/exec"
+	"path/filepath"
+	"strings"
+
+	"github.com/libopenstorage/openstorage/api"
+	"github.com/libopenstorage/openstorage/pkg/options"
+	"github.com/portworx/kdmp/cmd/3ncryptor/sdk"
+	"github.com/sirupsen/logrus"
+	"github.com/spf13/cobra"
+	"k8s.io/kubectl/pkg/cmd/util"
+)
+
+const (
+	baseMountPath = "/var/lib/osd/mounts/"
+)
+
+var (
+	namespace        string
+	port             string
+	auth_token       string
+	dryRun           bool
+	includeEncrypted bool
+	volume_ids       string
+	secret           string
+	secretNamespace  string
+	snapshot_suffix  string = "-encryptorsnap"
+	encrypted_suffix string = "-encrypted"
+)
+
+func getSnapName(volume_name string) string {
+	return volume_name + snapshot_suffix
+}
+
+func getEncryptedVolName(volume_name string) string {
+	return volume_name + encrypted_suffix
+}
+
+func listVolumes(namespace string) ([]*api.Volume, error) {
+	vd := sdk.GetVolumeDriver()
+	return vd.Enumerate(&api.VolumeLocator{VolumeLabels: map[string]string{"namespace": namespace}}, nil)
+}
+
+func inspectVolumes(volumeIds []string) ([]*api.Volume, error) {
+	vd := sdk.GetVolumeDriver()
+	return vd.Inspect(volumeIds)
+}
+
+func getSnapshot(vol *api.Volume) (*api.Volume, error) {
+	vd := sdk.GetVolumeDriver()
+	snapName := getSnapName(vol.Locator.Name)
+	snaps, err := vd.Inspect([]string{snapName})
+	if err != nil {
+		return nil, err
+	}
+
+	if len(snaps) == 0 {
+		return &api.Volume{}, fmt.Errorf("no snap found for: %v", snapName)
+
+	}
+	return snaps[0], err
+}
+
+func attachVol(vol *api.Volume, options map[string]string) error {
+	vd := sdk.GetVolumeDriver()
+	_, err := vd.Attach(vol.Id, options)
+	return err
+}
+
+func detachVol(vol *api.Volume, secret string) error {
+	vd := sdk.GetVolumeDriver()
+	return vd.Detach(vol.Id, map[string]string{})
+}
+
+func mountVol(vol *api.Volume, path string, secret string) error {
+	vd := sdk.GetVolumeDriver()
+	return vd.Mount(vol.Id, path, nil)
+}
+
+func unmountVol(vol *api.Volume, dir string, secret string) error {
+	vd := sdk.GetVolumeDriver()
+	return vd.Unmount(vol.Id, dir, map[string]string{})
+}
+
+func createVol(locator *api.VolumeLocator, spec *api.VolumeSpec, secretNamespace string) (*api.Volume, error) {
+	vd := sdk.GetVolumeDriver()
+
+	spec.Encrypted = true
+
+	if locator.VolumeLabels == nil {
+		locator.VolumeLabels = make(map[string]string)
+	}
+
+	locator.VolumeLabels["encryptor"] = "true"
+	locator.VolumeLabels["px/secret-name"] = spec.Passphrase
+
+	if secretNamespace != "" {
+		locator.VolumeLabels["px/secret-namespace"] = secretNamespace
+	}
+
+	vol_id, err := vd.Create(locator, nil, spec)
+	if err != nil {
+		return &api.Volume{}, err
+	}
+
+	vol, err := vd.Inspect([]string{vol_id})
+	if err != nil {
+		return &api.Volume{}, err
+	}
+
+	return vol[0], nil
+}
+
+func snapVolume(vol *api.Volume, readonly bool, noRetry bool) (*api.Volume, error) {
+	vd := sdk.GetVolumeDriver()
+
+	locator := &api.VolumeLocator{
+		Name:         getSnapName(vol.Locator.Name),
+		VolumeLabels: vol.Locator.VolumeLabels,
+	}
+
+	if locator.VolumeLabels == nil {
+		locator.VolumeLabels = make(map[string]string)
+	}
+
+	locator.VolumeLabels["encryptor"] = "true"
+
+	snap_id, err := vd.Snapshot(vol.Id, readonly, locator, noRetry)
+	if err != nil {
+		return &api.Volume{}, err
+	}
+
+	snap, err := vd.Inspect([]string{snap_id})
+	if err != nil {
+		return &api.Volume{}, err
+	}
+
+	return snap[0], nil
+}
+
+func cloneVol(vol *api.Volume, volName string) error {
+	vd := sdk.GetVolumeDriver()
+
+	locator := &api.VolumeLocator{
+		Name:         volName,
+		VolumeLabels: vol.Locator.VolumeLabels,
+	}
+
+	id, err := vd.Snapshot(vol.Id, false, locator, false)
+	if err != nil {
+		return err
+	}
+
+	vols, err := vd.Inspect([]string{id})
+	if err != nil {
+		return fmt.Errorf("failed to inspect cloned volume: %v", err)
+	}
+
+	if len(vols) != 0 {
+		vols[0].Locator.VolumeLabels = vol.Locator.VolumeLabels
+		err := vd.Set(id, vols[0].Locator, vols[0].Spec)
+		if err != nil {
+			return fmt.Errorf("failed to set volumelabels on clone: %v", err)
+		}
+	}
+
+	return nil
+}
+
+func deleteVol(vol *api.Volume) error {
+	vd := sdk.GetVolumeDriver()
+	return vd.Delete(vol.Id)
+}
+
+func addTrailingSlash(dir string) string {
+	return dir + "/"
+}
+
+func rsyncVol(src string, dest string) (string, error) {
+	output, err := exec.Command("rsync", "-acv", addTrailingSlash(src), addTrailingSlash(dest)).Output()
+	return string(output), err
+}
+
+func rollBack(snapVol, encVol *api.Volume, origVolName string) error {
+	if encVol != nil {
+		logrus.Infof("Deleting created encrypted volume: %v", encVol.Locator.Name)
+		enc_dir := filepath.Join(baseMountPath, encVol.Locator.Name)
+
+		if err := unmountVol(encVol, enc_dir, secret); err != nil {
+			logrus.Errorf("unmountVol failed to unmount snapshot %v with: %v", snapVol.Locator.Name, err)
+		}
+
+		if err := detachVol(encVol, secret); err != nil {
+			logrus.Errorf("detachVol failed to detach snapshot %v with: %v", snapVol.Locator.Name, err)
+		}
+
+		if err := deleteVol(encVol); err != nil {
+			logrus.Errorf("delete failed for %s with: %v", encVol.Locator.Name, err)
+		}
+	}
+
+	if snapVol != nil {
+		logrus.Infof("Restoring original volume %v from: %v", origVolName, snapVol.Locator.Name)
+		if err := cloneVol(snapVol, origVolName); err != nil {
+			return fmt.Errorf("restore original volume %s failed: %v", origVolName, err)
+		}
+	}
+	return nil
+}
+
+func main() {
+	if err := NewCommand().Execute(); err != nil {
+		os.Exit(1)
+	}
+}
+
+func NewCommand() *cobra.Command {
+	cmds := &cobra.Command{
+		Use:   "encryptor",
+		Short: "Encryptor tool for unencrypted portworx volumes",
+	}
+
+	cmds.PersistentFlags().StringVarP(&namespace, "namespace", "n", "", "Namespace for this command")
+	cmds.PersistentFlags().StringVarP(&port, "port", "p", "9001", "Port to talk (default: 9001)")
+	cmds.PersistentFlags().StringVarP(&auth_token, "auth_token", "t", "", "Auth token for this command")
+
+	cmds.AddCommand(
+		newEncryptCommand(),
+		newSnapCommand(),
+		newRollbackCommand(),
+	)
+	cmds.PersistentFlags().AddGoFlagSet(flag.CommandLine)
+	err := flag.CommandLine.Parse([]string{})
+	if err != nil {
+		util.CheckErr(err)
+		return nil
+	}
+
+	return cmds
+}
+
+func newSnapCommand() *cobra.Command {
+	snapCommand := &cobra.Command{
+		Use:   "snap",
+		Short: "Start snapshots",
+		Run: func(c *cobra.Command, args []string) {
+			if len(volume_ids) == 0 && len(namespace) == 0 {
+				logrus.Errorf("namespace is required")
+				os.Exit(1)
+				return
+			}
+
+			if len(volume_ids) == 0 && len(namespace) != 0 {
+				logrus.Infof("Using namespace: %s", namespace)
+			}
+
+			if err := sdk.InitVolDriver("127.0.0.1", port, auth_token); err != nil {
+				//util.CheckErr(err)
+				logrus.Errorf("failed to initialize SDK driver: %v", err)
+				return
+			}
+
+			var (
+				volumes []*api.Volume
+				err     error
+			)
+
+			if len(volume_ids) != 0 {
+				volumes, err = inspectVolumes(strings.Split(volume_ids, ","))
+				if err != nil {
+					logrus.Errorf("listvols failed with: %v", err)
+					return
+				}
+			} else {
+				volumes, err = listVolumes(namespace)
+				if err != nil {
+					logrus.Errorf("listvols failed with: %v", err)
+					return
+				}
+			}
+
+			for _, vol := range volumes {
+
+				if !includeEncrypted && vol.Spec.Encrypted {
+					continue
+				}
+
+				logrus.Infof("Snapshotting volume: %v", vol.Locator.Name)
+				if !dryRun {
+					_, err = snapVolume(vol, true, true)
+					if err != nil {
+						logrus.Errorf("snapVol failed with: %v", err)
+						return
+					}
+				}
+			}
+		},
+	}
+	snapCommand.PersistentFlags().StringVarP(&volume_ids, "volume_ids", "v", "", "if provided, will use volume id instead of namespace")
+	snapCommand.PersistentFlags().BoolVarP(&dryRun, "dryrun", "d", false, "if true, will dry-run operations")
+	snapCommand.PersistentFlags().BoolVarP(&includeEncrypted, "include_encrypted", "s", false, "if true, will include secure volumes for re-encryption")
+	return snapCommand
+}
+
+func newRollbackCommand() *cobra.Command {
+	rollbackCommand := &cobra.Command{
+		Use:   "rollback",
+		Short: "Start rollback",
+		Run: func(c *cobra.Command, args []string) {
+			var (
+				volumes []*api.Volume
+				err     error
+			)
+
+			if len(volume_ids) == 0 && len(namespace) == 0 {
+				logrus.Errorf("namespace is required")
+				os.Exit(1)
+				return
+			}
+
+			if len(volume_ids) == 0 && len(namespace) != 0 {
+				logrus.Infof("Using namespace: %s", namespace)
+			}
+
+			if err := sdk.InitVolDriver("127.0.0.1", port, auth_token); err != nil {
+				util.CheckErr(err)
+				return
+			}
+
+			if len(volume_ids) != 0 {
+				volumes, err = inspectVolumes(strings.Split(volume_ids, ","))
+				logrus.Infof("Inspect")
+				if err != nil {
+					logrus.Errorf("listvols failed with: %v", err)
+					return
+				}
+			} else {
+				volumes, err = listVolumes(namespace)
+				if err != nil {
+					logrus.Errorf("listvols failed with: %v", err)
+					return
+				}
+			}
+
+			for _, vol := range volumes {
+				var (
+					snapVol, encVol *api.Volume
+					origVolName     string = vol.Locator.Name
+				)
+
+				if len(volume_ids) == 0 && strings.Contains(vol.Locator.Name, snapshot_suffix) && strings.Contains(vol.Locator.Name, encrypted_suffix) {
+					continue
+				}
+
+				if strings.Contains(vol.Locator.Name, snapshot_suffix) {
+					origVolName = strings.Split(vol.Locator.Name, snapshot_suffix)[0]
+				} else if strings.Contains(vol.Locator.Name, encrypted_suffix) {
+					origVolName = strings.Split(vol.Locator.Name, encrypted_suffix)[0]
+				}
+
+				logrus.Infof("Rolling back volume: %v", origVolName)
+
+				snapVol = nil
+				if !strings.Contains(vol.Locator.Name, snapshot_suffix) && !strings.Contains(vol.Locator.Name, encrypted_suffix) {
+					snaps, err := inspectVolumes([]string{getSnapName(origVolName)})
+					if err != nil {
+						logrus.Errorf("Failed to find the encryptor snap for %v", origVolName)
+						return
+					}
+
+					if len(snaps) != 0 {
+						snapVol = snaps[0]
+					}
+				}
+				encVol = nil
+				encvols, err := inspectVolumes([]string{getEncryptedVolName(origVolName)})
+				if err != nil {
+					logrus.Errorf("Failed to find the encrypted volume for: %v", origVolName)
+					return
+				}
+
+				if len(encvols) != 0 {
+					encVol = encvols[0]
+				}
+
+				if snapVol != nil {
+					logrus.Infof("Deleting original volume")
+					err := deleteVol(vol)
+					if err != nil {
+						logrus.Errorf("Failed to delete original volume")
+						return
+					}
+
+					err = rollBack(snapVol, encVol, origVolName)
+					if err != nil {
+						logrus.Errorf("Failed to rollback volume %v", err)
+					}
+				}
+
+			}
+		},
+	}
+	rollbackCommand.PersistentFlags().StringVarP(&volume_ids, "volume_ids", "v", "", "if provided, will use volume id instead of namespace")
+	rollbackCommand.PersistentFlags().BoolVarP(&dryRun, "dryrun", "d", false, "if true, will dry-run operations")
+	rollbackCommand.PersistentFlags().BoolVarP(&includeEncrypted, "include_encrypted", "s", false, "if true, will include secure volumes for re-encryption")
+	return rollbackCommand
+}
+
+func newEncryptCommand() *cobra.Command {
+	encCommand := &cobra.Command{
+		Use:   "encrypt",
+		Short: "Start encryption",
+		Run: func(c *cobra.Command, args []string) {
+			if len(volume_ids) == 0 && len(namespace) == 0 {
+				logrus.Errorf("namespace is required")
+				os.Exit(1)
+				return
+			}
+
+			if len(volume_ids) == 0 && len(namespace) != 0 {
+				logrus.Infof("Using namespace: %s", namespace)
+			}
+
+			if err := sdk.InitVolDriver("127.0.0.1", port, auth_token); err != nil {
+				util.CheckErr(err)
+				return
+			}
+
+			var (
+				volumes []*api.Volume
+				err     error
+			)
+
+			if len(volume_ids) != 0 {
+				volumes, err = inspectVolumes(strings.Split(volume_ids, ","))
+				if err != nil {
+					logrus.Errorf("listvols failed with: %v", err)
+					return
+				}
+			} else {
+				volumes, err = listVolumes(namespace)
+				if err != nil {
+					logrus.Errorf("listvols failed with: %v", err)
+					return
+				}
+			}
+
+			for _, vol := range volumes {
+				if vol.AttachedOn != "" && vol.AttachedState != api.AttachState_ATTACH_STATE_INTERNAL {
+					logrus.Errorf("volume %v is attached, please make sure your apps are scaled down.", vol.Locator.Name)
+					return
+				}
+			}
+
+			for _, vol := range volumes {
+				var (
+					encVol, snapVol *api.Volume
+					origVolName     string = vol.Locator.Name
+				)
+
+				if !includeEncrypted && vol.Spec.Encrypted || strings.Contains(vol.Locator.Name, encrypted_suffix) || strings.Contains(vol.Locator.Name, snapshot_suffix) {
+					continue
+				}
+
+				logrus.Infof("Locating snapshot for vol: %v", vol.Locator.Name)
+				snapVol, err := getSnapshot(vol)
+				if err != nil {
+					logrus.Errorf("getSnapshot failed for %v with: %v", vol.Locator.Name, err)
+					return
+				}
+
+				logrus.Infof("Creating encrypted volume for: %v", vol.Locator.Name)
+				locator := &api.VolumeLocator{
+					Name:         getEncryptedVolName(vol.Locator.Name),
+					VolumeLabels: vol.Locator.VolumeLabels,
+				}
+
+				newSpec := vol.Spec
+				newSpec.Passphrase = secret
+
+				if !dryRun {
+					encVol, err = createVol(locator, newSpec, secretNamespace)
+					if err != nil {
+						logrus.Errorf("createVol failed with: %v", err)
+						return
+					}
+				}
+
+				logrus.Infof("Attaching snapshot: %v", snapVol.Locator.Name)
+				if !dryRun {
+					if err := attachVol(snapVol, map[string]string{options.OptionsSecret: secret}); err != nil {
+						logrus.Errorf("attachVol failed to attach snapshot %v with: %v", snapVol.Locator.Name, err)
+						return
+					}
+				}
+
+				logrus.Infof("Attaching encrypted volume: %v", encVol.Locator.Name)
+				if !dryRun {
+					if err := attachVol(encVol, map[string]string{options.OptionsSecret: secret}); err != nil {
+						logrus.Errorf("attachVol failed to attach encrypted vol %v with: %v", encVol.Locator.Name, err)
+						return
+					}
+				}
+
+				dir := filepath.Join(baseMountPath, snapVol.Locator.Name)
+				logrus.Infof("Creating directory: %v", dir)
+				if !dryRun {
+					if err := os.MkdirAll(dir, os.ModePerm); err != nil {
+						logrus.Errorf("Mkdir failed to create dir: %v with: %v", dir, err)
+						return
+					}
+				}
+
+				logrus.Infof("Mounting snapshot: %v at %v", snapVol.Locator.Name, dir)
+				if !dryRun {
+					if err := mountVol(snapVol, dir, secret); err != nil {
+						logrus.Errorf("mountVol failed to mount snapshot %v with: %v", snapVol.Locator.Name, err)
+						return
+					}
+				}
+
+				encDir := filepath.Join(baseMountPath, encVol.Locator.Name)
+				logrus.Infof("Creating directory: %v", encDir)
+				if !dryRun {
+					if err := os.MkdirAll(encDir, os.ModePerm); err != nil {
+						logrus.Errorf("Mkdir failed to create dir: %v with: %v", encDir, err)
+						return
+					}
+				}
+
+				logrus.Infof("Mounting volume: %v at %v", vol.Locator.Name, encDir)
+				if !dryRun {
+					if err := mountVol(encVol, encDir, secret); err != nil {
+						logrus.Errorf("mountVol failed to mount encrypted vol %v with: %v", encVol.Locator.Name, err)
+						return
+					}
+				}
+
+				logrus.Infof("Rsync snapshot %v into encrypted volume: %v", snapVol.Locator.Name, encVol.Locator.Name)
+				if !dryRun {
+					output, err := rsyncVol(dir, encDir)
+					logrus.Debugf("Output: %v", output)
+					if err != nil {
+						logrus.Errorf("rsyncVol failed to rsync data between '%s' and '%s'", dir, encDir)
+						return
+					}
+				}
+
+				logrus.Infof("Detaching and unmounting snapshot: %v", snapVol.Locator.Name)
+				if !dryRun {
+					if err := unmountVol(snapVol, dir, secret); err != nil {
+						logrus.Errorf("unmountVol failed to unmount snapshot %v with: %v", snapVol.Locator.Name, err)
+					}
+
+					if err := detachVol(snapVol, secret); err != nil {
+						logrus.Errorf("detachVol failed to detach snapshot %v with: %v", snapVol.Locator.Name, err)
+						return
+					}
+				}
+
+				logrus.Infof("Detaching and unmounting encrypted volume: %v", encVol.Locator.Name)
+				if !dryRun {
+					if err := unmountVol(encVol, encDir, secret); err != nil {
+						logrus.Errorf("unmountVol failed to unmount encrypted volume %v with: %v", snapVol.Locator.Name, err)
+					}
+
+					if err := detachVol(encVol, secret); err != nil {
+						logrus.Errorf("detachVol failed to detach encrypted volume %v with: %v", encVol.Locator.Name, err)
+						return
+					}
+				}
+
+				logrus.Infof("Deleting original volume: %v", vol.Locator.Name)
+				if !dryRun {
+					if err := deleteVol(vol); err != nil {
+						logrus.Errorf("deleteVol failed to delete volume: %v with %v", vol.Locator.Name, err)
+						return
+					}
+				}
+
+				logrus.Infof("Cloning encrypted volume: %v", encVol.Locator.Name)
+				if !dryRun {
+					if err := cloneVol(encVol, origVolName); err != nil {
+						logrus.Errorf("cloneVol  failed to clone volume: %v with %v", encVol.Locator.Name, err)
+						return
+					}
+				}
+
+				logrus.Infof("Deleting encrypted volume: %v", encVol.Locator.Name)
+				if !dryRun {
+					if err := deleteVol(encVol); err != nil {
+						logrus.Errorf("deleteVol failed to delete volume: %v with %v", encVol.Locator.Name, err)
+						return
+					}
+				}
+			}
+		},
+	}
+	encCommand.PersistentFlags().StringVarP(&volume_ids, "volume_ids", "", "", "if provided, will use volume id instead of namespace")
+	encCommand.PersistentFlags().StringVarP(&secret, "secret", "", "", "(required) encryption secret")
+	encCommand.PersistentFlags().StringVarP(&secretNamespace, "secretNamespace", "", "", "namespace encryption secret lives in (vault enterprise)")
+	encCommand.PersistentFlags().BoolVarP(&dryRun, "dryrun", "", false, "if true, will dry-run operations")
+	encCommand.PersistentFlags().BoolVarP(&includeEncrypted, "include_encrypted", "", false, "if true, will include secure volumes for re-encryption")
+	return encCommand
+}
diff --git a/cmd/3ncryptor/README.md b/cmd/3ncryptor/README.md
new file mode 100644
index 000000000..e2af97731
--- /dev/null
+++ b/cmd/3ncryptor/README.md
@@ -0,0 +1,59 @@
+# Building:
+make build-encryptor
+
+this will put a binary in the `bin` folder called `3ncryptor`
+
+Make sure to copy the binary to one of the px nodes.
+# Pre-requisites:
+
+First lets get the admin token from the kubernetes secrt
+`kubectl -n kubes-system get secret px-admin-token -o yaml`
+
+Now lets decode the actual auth-token and store it on a `token` variable for later use
+`token=echo "<token>" | base64 -d`
+
+We can also go take a look at our pvc specification for the encryption secret.
+You will need this during the encryption step.
+
+## Usage:
+### Step 1. Snapshot the volumes we want to snapshot. 
+
+We can either specify a namespace or volume_ids which is a comma-seperated string.
+These are valid for all 3 commands.
+
+entire namespace:
+`3ncryptor snap --namespace kube-system --auth_token $token`
+
+specific volumes:
+`3ncryptor snap --volume_ids="vol1,vol2" --auth_token $token`
+
+### Step 2. Encrypt the actual volumes.
+In this step we'll go through a couple steps to encrypt the actual volume.
+Also you'll see a --secret parameter which requires the encryption secret.
+
+The steps this process walks through are as followed:
+- Look for snapshots of the requested volume
+- creating a temporary encrypted volume
+- Attaching / Mounting both the snapshot and the temp volume.
+- Rsync all the data between the 2 volumes with checksum enabled
+- delete the original volume
+- clone the temp volume into the original volume name.
+- delete the temp volume.
+
+We now have an encrypted version of the original volume and an unencrypted snapshot of the original volume.
+
+entire namespace:
+`3ncryptor encrypt --namespace kube-system --auth_token $token --secret test-key`
+
+specific volumes:
+`3ncryptor encrypt volume_ids="vol1,vol2" --auth_token $token --secret test-key`
+
+### Rollback.
+The rollback feature allows for original volumes (if we might have encrypted it already) or snapshots of the original volume.
+In both cases we'll delete the original volume name (either encrypted or not) and we'll clone the snapshot back to get to the original state.
+
+entire namespace:
+`3ncryptor rollback --namespace kube-system --auth_token $token`
+
+specific volumes:
+`3ncryptor rollback volume_ids="vol1,vol2" --auth_token $token`
diff --git a/cmd/3ncryptor/sdk/sdk.go b/cmd/3ncryptor/sdk/sdk.go
new file mode 100644
index 000000000..00f2c95e8
--- /dev/null
+++ b/cmd/3ncryptor/sdk/sdk.go
@@ -0,0 +1,111 @@
+package sdk
+
+import (
+	"crypto/tls"
+	"fmt"
+	"net"
+	"net/url"
+	"os"
+
+	httpclient "github.com/libopenstorage/openstorage/api/client"
+	volumeclient "github.com/libopenstorage/openstorage/api/client/volume"
+	"github.com/libopenstorage/openstorage/volume"
+	"github.com/sirupsen/logrus"
+)
+
+var (
+	schedVolDriver volume.VolumeDriver
+	token          string
+	UseTLS         bool
+	tokenEndPoint  string
+	tlsConfig      *tls.Config
+)
+
+// InitVolDriver inits vol driver
+func InitVolDriver(host string, port string, auth_token string) error {
+	if len(auth_token) != 0 {
+		token = auth_token
+	}
+
+	schedClient, err := getNewVolumeclient(host, port, "pxd")
+	if err != nil {
+		logrus.Errorf("Error while initializing PX CLI for scheduler")
+		os.Exit(-1)
+	}
+
+	schedVolDriver = volumeclient.VolumeDriver(schedClient)
+	return nil
+}
+
+func getNewVolumeclient(endpoint, port, driverName string) (*httpclient.Client, error) {
+	return getNewAuthVolumeclient(endpoint, port, token, driverName)
+}
+
+// GetNewAuthVolumeclient create volume api client with auth token
+func getNewAuthVolumeclient(endpoint, port, bearerToken, driverName string) (*httpclient.Client, error) {
+	if len(endpoint) > 0 && len(port) > 0 {
+		endpoint = buildHTTPSEndpoint(endpoint, port)
+	} else if len(tokenEndPoint) > 0 {
+		endpoint = tokenEndPoint
+	}
+
+	driverVersion := "v1"
+
+	if driverName == "" {
+		driverName = "pxd"
+	}
+
+	var (
+		clnt *httpclient.Client
+		err  error
+	)
+	if len(bearerToken) != 0 {
+		clnt, err = volumeclient.NewAuthDriverClient(endpoint, driverName, driverVersion, bearerToken, "", driverName)
+	} else {
+		clnt, err = volumeclient.NewDriverClient(endpoint, driverName, driverVersion, driverName)
+	}
+	if err != nil {
+		return nil, err
+	}
+
+	if UseTLS && !IsUnixDomainSocket(endpoint) {
+		clnt.SetTLS(tlsConfig)
+	}
+
+	return clnt, nil
+}
+
+// BuildHTTPSEndpoint create http endpoint URL
+func buildHTTPSEndpoint(host string, port string) string {
+	if IsUnixDomainSocket(host) {
+		return host
+	}
+	endpoint := &url.URL{}
+	endpoint.Scheme = "http"
+	endpoint.Host = fmt.Sprintf("%s:%s", host, port)
+
+	if UseTLS {
+		endpoint.Scheme = "https"
+	}
+	return endpoint.String()
+}
+
+// IsUnixDomainSocket is a helper method that checks if the host is a unix DS endpoint in the format unix://<path>
+func IsUnixDomainSocket(host string) bool {
+	// Check if it is a unix:// URL
+	u, err := url.Parse(host)
+	if err == nil {
+		// Check if host just has an IP
+		if u.Scheme == "unix" {
+			return true
+		}
+		if !u.IsAbs() && net.ParseIP(host) == nil {
+			return true
+		}
+	}
+	return false
+}
+
+func GetVolumeDriver() volume.VolumeDriver {
+	return schedVolDriver
+}
diff --git a/go.mod b/go.mod
index 7fe214945..87c33be0b 100644
--- a/go.mod
+++ b/go.mod
@@ -5,6 +5,7 @@ go 1.13
 require (
 	github.com/cheynewallace/tabby v1.1.0 // indirect
 	github.com/kubernetes-incubator/external-storage v0.0.0-00010101000000-000000000000
+	github.com/libopenstorage/openstorage v8.0.0+incompatible
 	github.com/libopenstorage/openstorage-sdk-clients v0.69.27 // indirect
 	github.com/libopenstorage/stork v1.3.0-beta1.0.20200630005842-9255e7a98775
 	github.com/portworx/pxc v0.31.1
@@ -14,6 +15,7 @@ require (
 	github.com/spf13/pflag v1.0.5
 	github.com/stretchr/testify v1.4.0
 	github.com/urfave/cli v1.22.2
+	golang.org/x/mod v0.4.2 // indirect
 	golang.org/x/tools v0.0.0-20200408132156-9ee5ef7a2c0d // indirect
 	k8s.io/api v0.17.0
 	k8s.io/apiextensions-apiserver v0.16.6
diff --git a/go.sum b/go.sum
index fab9fd6b4..aa9d196c9 100644
--- a/go.sum
+++ b/go.sum
@@ -19,7 +19,6 @@ github.com/Azure/go-autorest/autorest/to v0.2.0/go.mod h1:GunWKJp1AEqgMaGLV+iocm
 github.com/Azure/go-autorest/autorest/validation v0.1.0/go.mod h1:Ha3z/SqBeaalWQvokg3NZAlQTalVMtOIAs1aGK7G6u8=
 github.com/Azure/go-autorest/logger v0.1.0/go.mod h1:oExouG+K6PryycPJfVSxi/koC6LSNgds39diKLz7Vrc=
 github.com/Azure/go-autorest/tracing v0.5.0/go.mod h1:r/s2XiOKccPW3HrqB+W0TQzfbtp2fGCgRFtBroKn4Dk=
-github.com/BurntSushi/toml v0.3.1 h1:WXkYYl6Yr3qBf1K79EBnL4mak0OimBfB0XUf9Vl28OQ=
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
 github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
 github.com/GoogleCloudPlatform/k8s-cloud-provider v0.0.0-20190822182118-27a4ced34534/go.mod h1:iroGtC8B3tQiqtds1l+mgk/BBOrxbqjH+eUfFQYRc14=
@@ -82,6 +81,7 @@ github.com/brancz/gojsontoyaml v0.0.0-20190425155809-e8bd32d46b3d/go.mod h1:IyUJ
 github.com/caddyserver/caddy v1.0.3/go.mod h1:G+ouvOY32gENkJC+jhgl62TyhvqEsFaDiZ4uw0RzP1E=
 github.com/campoy/embedmd v1.0.0/go.mod h1:oxyr9RCiSXg0M3VJ3ks0UGfp98BpSSGr0kpiX3MzVl8=
 github.com/cenk/backoff v2.0.0+incompatible/go.mod h1:7FtoeaSnHoZnmZzz47cM35Y9nSW7tNyaidugnHTaFDE=
+github.com/cenkalti/backoff v2.1.1+incompatible h1:tKJnvO2kl0zmb/jA5UKAt4VoEVw1qxKWjE/Bpp46npY=
 github.com/cenkalti/backoff v2.1.1+incompatible/go.mod h1:90ReRw6GdpyfrHakVjL/QHaoyV4aDUVVkXQJJJ3NXXM=
 github.com/census-instrumentation/opencensus-proto v0.2.0/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
 github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU=
@@ -114,6 +114,7 @@ github.com/coreos/etcd v3.3.10+incompatible/go.mod h1:uF7uidLiAD3TWHmW31ZFd/JWoc
 github.com/coreos/etcd v3.3.12+incompatible/go.mod h1:uF7uidLiAD3TWHmW31ZFd/JWoc32PjwdhPthX9715RE=
 github.com/coreos/etcd v3.3.17+incompatible/go.mod h1:uF7uidLiAD3TWHmW31ZFd/JWoc32PjwdhPthX9715RE=
 github.com/coreos/go-etcd v2.0.0+incompatible/go.mod h1:Jez6KQU2B/sWsbdaef3ED8NzMklzPG4d5KIOhIy30Tk=
+github.com/coreos/go-oidc v2.1.0+incompatible h1:sdJrfw8akMnCuUlaZU3tE/uYXFgfqom8DBE9so9EBsM=
 github.com/coreos/go-oidc v2.1.0+incompatible/go.mod h1:CgnwVTmzoESiwO9qyAFEMiHoZ1nMCKZlZ9V6mm3/LKc=
 github.com/coreos/go-semver v0.2.0/go.mod h1:nnelYz7RCh+5ahJtPPxZlU+153eP4D4r3EedlOD2RNk=
 github.com/coreos/go-semver v0.3.0/go.mod h1:nnelYz7RCh+5ahJtPPxZlU+153eP4D4r3EedlOD2RNk=
@@ -127,12 +128,12 @@ github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d h1:U+s90UTSY
 github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d/go.mod h1:maD7wRr/U5Z6m/iR4s+kqSMx2CaBsrgA7czyZG/E6dU=
 github.com/cyphar/filepath-securejoin v0.2.2/go.mod h1:FpkQEhXnPnOthhzymB7CGsFk2G9VLXONKD9G7QGMM+4=
 github.com/davecgh/go-spew v0.0.0-20151105211317-5215b55f46b2/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
-github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/daviddengcn/go-colortext v0.0.0-20160507010035-511bcaf42ccd/go.mod h1:dv4zxwHi5C/8AeI+4gX4dCWOIvNi7I6JCSX0HvlKPgE=
 github.com/dgrijalva/jwt-go v0.0.0-20161101193935-9ed569b5d1ac/go.mod h1:E3ru+11k8xSBh+hMPgOLZmtrrCbhqsmaPHjLKYnJCaQ=
+github.com/dgrijalva/jwt-go v3.2.0+incompatible h1:7qlOGliEKZXTDg6OTjfoBKDXWrumCAMpl/TFQ4/5kLM=
 github.com/dgrijalva/jwt-go v3.2.0+incompatible/go.mod h1:E3ru+11k8xSBh+hMPgOLZmtrrCbhqsmaPHjLKYnJCaQ=
 github.com/dgryski/go-sip13 v0.0.0-20181026042036-e10d5fee7954/go.mod h1:vAd38F8PWV+bWy6jNmig1y/TA+kYO4g3RSRF0IAv0no=
 github.com/dnaeon/go-vcr v1.0.1/go.mod h1:aBB1+wY4s93YsC3HHjMBMrwTj2R9FHDzUr9KyGc8n1E=
@@ -147,7 +148,6 @@ github.com/docker/spdystream v0.0.0-20160310174837-449fdfce4d96/go.mod h1:Qh8CwZ
 github.com/docker/spdystream v0.0.0-20181023171402-6480d4af844c h1:ZfSZ3P3BedhKGUhzj7BQlPSU4OvT6tfOKe3DVHzOA7s=
 github.com/docker/spdystream v0.0.0-20181023171402-6480d4af844c/go.mod h1:Qh8CwZgvJUkLughtfhJv5dyTYa91l1fOUCrgjqmcifM=
 github.com/docopt/docopt-go v0.0.0-20180111231733-ee0de3bc6815/go.mod h1:WwZ+bS3ebgob9U8Nd0kOddGdZWjyMGR8Wziv+TBNwSE=
-github.com/dustin/go-humanize v1.0.0 h1:VSnTsYCnlFHaM2/igO1h6X3HA71jcobQuxemgkq4zYo=
 github.com/dustin/go-humanize v1.0.0/go.mod h1:HtrtbFcZ19U5GC7JDqmcUSB87Iq5E25KnS6fMYU6eOk=
 github.com/eapache/go-resiliency v1.1.0/go.mod h1:kFI+JgMyC7bLPUVY133qvEBtVayf5mFgVsvEsIPBvNs=
 github.com/eapache/go-xerial-snappy v0.0.0-20180814174437-776d5712da21/go.mod h1:+020luEh2TKB4/GOp8oxxtq0Daoen/Cii55CzbTV6DU=
@@ -161,7 +161,6 @@ github.com/elazarl/goproxy/ext v0.0.0-20190711103511-473e67f1d7d2 h1:dWB6v3RcOy0
 github.com/elazarl/goproxy/ext v0.0.0-20190711103511-473e67f1d7d2/go.mod h1:gNh8nYJoAm43RfaxurUnxr+N1PwuFV3ZMl/efxlIlY8=
 github.com/emicklei/go-restful v0.0.0-20170410110728-ff4f55a20633/go.mod h1:otzb+WCGbkyDHkqmQmT5YD2WR4BBwUdeQoFo8l/7tVs=
 github.com/emicklei/go-restful v2.6.0+incompatible/go.mod h1:otzb+WCGbkyDHkqmQmT5YD2WR4BBwUdeQoFo8l/7tVs=
-github.com/emicklei/go-restful v2.9.5+incompatible h1:spTtZBk5DYEvbxMVutUuTyh1Ao2r4iyvLdACqsl/Ljk=
 github.com/emicklei/go-restful v2.9.5+incompatible/go.mod h1:otzb+WCGbkyDHkqmQmT5YD2WR4BBwUdeQoFo8l/7tVs=
 github.com/emicklei/go-restful v2.10.0+incompatible h1:l6Soi8WCOOVAeCo4W98iBFC6Og7/X8bpRt51oNLZ2C8=
 github.com/emicklei/go-restful v2.10.0+incompatible/go.mod h1:otzb+WCGbkyDHkqmQmT5YD2WR4BBwUdeQoFo8l/7tVs=
@@ -169,7 +168,6 @@ github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.m
 github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
 github.com/euank/go-kmsg-parser v2.0.0+incompatible/go.mod h1:MhmAMZ8V4CYH4ybgdRwPr2TU5ThnS43puaKEMpja1uw=
 github.com/evanphx/json-patch v4.1.0+incompatible/go.mod h1:50XU6AFN0ol/bzJsmQLiYLvXMP4fmwYFNcr97nuDLSk=
-github.com/evanphx/json-patch v4.2.0+incompatible h1:fUDGZCv/7iAN7u0puUVhvKCcsR6vRfwrJatElLBEf0I=
 github.com/evanphx/json-patch v4.2.0+incompatible/go.mod h1:50XU6AFN0ol/bzJsmQLiYLvXMP4fmwYFNcr97nuDLSk=
 github.com/evanphx/json-patch v4.5.0+incompatible h1:ouOWdg56aJriqS0huScTkVXPC5IcNrDCXZ6OoTAWu7M=
 github.com/evanphx/json-patch v4.5.0+incompatible/go.mod h1:50XU6AFN0ol/bzJsmQLiYLvXMP4fmwYFNcr97nuDLSk=
@@ -228,7 +226,6 @@ github.com/go-openapi/jsonreference v0.0.0-20160704190145-13c6e3589ad9/go.mod h1
 github.com/go-openapi/jsonreference v0.17.0/go.mod h1:g4xxGn04lDIRh0GJb5QlpE3HfopLOL6uZrK/VgnsK9I=
 github.com/go-openapi/jsonreference v0.18.0/go.mod h1:g4xxGn04lDIRh0GJb5QlpE3HfopLOL6uZrK/VgnsK9I=
 github.com/go-openapi/jsonreference v0.19.0/go.mod h1:g4xxGn04lDIRh0GJb5QlpE3HfopLOL6uZrK/VgnsK9I=
-github.com/go-openapi/jsonreference v0.19.2 h1:o20suLFB4Ri0tuzpWtyHlh7E7HnkqTNLq6aR6WVNS1w=
 github.com/go-openapi/jsonreference v0.19.2/go.mod h1:jMjeRr2HHw6nAVajTXJ4eiUwohSTlpa0o73RUL1owJc=
 github.com/go-openapi/jsonreference v0.19.3 h1:5cxNfTy0UVC3X8JL5ymxzyoUZmo8iZb+jeTWn7tUa8o=
 github.com/go-openapi/jsonreference v0.19.3/go.mod h1:rjx6GuL8TTa9VaixXglHmQmIL98+wF9xc8zWvFonSJ8=
@@ -242,7 +239,6 @@ github.com/go-openapi/spec v0.0.0-20160808142527-6aced65f8501/go.mod h1:J8+jY1nA
 github.com/go-openapi/spec v0.17.0/go.mod h1:XkF/MOi14NmjsfZ8VtAKf8pIlbZzyoTvZsdfssdxcBI=
 github.com/go-openapi/spec v0.17.2/go.mod h1:XkF/MOi14NmjsfZ8VtAKf8pIlbZzyoTvZsdfssdxcBI=
 github.com/go-openapi/spec v0.18.0/go.mod h1:XkF/MOi14NmjsfZ8VtAKf8pIlbZzyoTvZsdfssdxcBI=
-github.com/go-openapi/spec v0.19.2 h1:SStNd1jRcYtfKCN7R0laGNs80WYYvn5CbBjM2sOmCrE=
 github.com/go-openapi/spec v0.19.2/go.mod h1:sCxk3jxKgioEJikev4fgkNmwS+3kuYdJtcsZsD5zxMY=
 github.com/go-openapi/spec v0.19.3 h1:0XRyw8kguri6Yw4SxhsQA/atC88yqrk0+G4YhI2wabc=
 github.com/go-openapi/spec v0.19.3/go.mod h1:FpwSN1ksY1eteniUU7X0N/BgJ7a4WvBFVA8Lj9mJglo=
@@ -279,17 +275,13 @@ github.com/godbus/dbus v4.1.0+incompatible/go.mod h1:/YcGZj5zSblfDWMMoOzV4fas9FZ
 github.com/gogo/protobuf v1.1.1/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
 github.com/gogo/protobuf v1.2.0/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
 github.com/gogo/protobuf v1.2.1/go.mod h1:hp+jE20tsWTFYpLwKvXlhS1hjn+gTNwPg2I6zVXpSg4=
-github.com/gogo/protobuf v1.2.2-0.20190723190241-65acae22fc9d h1:3PaI8p3seN09VjbTYC/QWlUZdZ1qS1zGjy7LH2Wt07I=
 github.com/gogo/protobuf v1.2.2-0.20190723190241-65acae22fc9d/go.mod h1:SlYgWuQ5SjCEi6WLHjHCa1yvBfUnHcTbrrZtXPKa29o=
 github.com/gogo/protobuf v1.3.0 h1:G8O7TerXerS4F6sx9OV7/nRfJdnXgHZu/S/7F2SN+UE=
 github.com/gogo/protobuf v1.3.0/go.mod h1:SlYgWuQ5SjCEi6WLHjHCa1yvBfUnHcTbrrZtXPKa29o=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b h1:VKtxabqXZkF25pY9ekfRL6a582T4P37/31XEstQ5p58=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
-github.com/golang/groupcache v0.0.0-20160516000752-02826c3e7903 h1:LbsanbbD6LieFkXbj9YNNBupiGHJgFeLpO0j0Fza1h8=
 github.com/golang/groupcache v0.0.0-20160516000752-02826c3e7903/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
-github.com/golang/groupcache v0.0.0-20180513044358-24b0969c4cb7 h1:u4bArs140e9+AfE52mFHOXVFnOSBJBRlzTHrOPLOIhE=
 github.com/golang/groupcache v0.0.0-20180513044358-24b0969c4cb7/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
-github.com/golang/groupcache v0.0.0-20180924190550-6f2cf27854a4 h1:6UVLWz0fIIrv0UVj6t0A7cL48n8IyAdLVQqAYzEfsKI=
 github.com/golang/groupcache v0.0.0-20180924190550-6f2cf27854a4/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/groupcache v0.0.0-20190129154638-5b532d6fd5ef h1:veQD95Isof8w9/WXiA+pa3tz3fJXkt5B7QaRBrM62gk=
 github.com/golang/groupcache v0.0.0-20190129154638-5b532d6fd5ef/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
@@ -299,7 +291,6 @@ github.com/golang/mock v1.2.0/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfb
 github.com/golang/protobuf v0.0.0-20161109072736-4bd1920723d7/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.0.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
-github.com/golang/protobuf v1.3.1 h1:YF8+flBXS5eO826T4nzqPrxfhQThhXl0YzfuUPu4SBg=
 github.com/golang/protobuf v1.3.1/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.3.2 h1:6nsPYzhq5kReh6QImI3k5qWzO4PEbvbIW2cwSfR/6xs=
 github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
@@ -333,7 +324,6 @@ github.com/google/btree v0.0.0-20180813153112-4030bb1f1f0c/go.mod h1:lNA+9X1NB3Z
 github.com/google/cadvisor v0.34.0/go.mod h1:1nql6U13uTHaLYB8rLS5x9IJc2qT6Xd/Tr1sTX6NE48=
 github.com/google/certificate-transparency-go v1.0.21/go.mod h1:QeJfpSbVSfYc7RgB3gJFj9cbuQMMchQxrWXz8Ruopmg=
 github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
-github.com/google/go-cmp v0.3.0 h1:crn/baboCvb5fXaQ0IJ1SGTsTVrWpDsCWC8EGETZijY=
 github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
 github.com/google/go-cmp v0.3.1 h1:Xye71clBPdm5HgqGwUkwhbynsUJZhDbS20FvLhQ2izg=
 github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU=
@@ -352,7 +342,6 @@ github.com/google/uuid v1.1.1 h1:Gkbcsh/GbpXz7lPftLA3P6TYMwjCLYm83jiFQZF/3gY=
 github.com/google/uuid v1.1.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/googleapis/gax-go v2.0.2+incompatible/go.mod h1:SFVmujtThgffbyetf+mdk2eWhX2bMyUtNHzFKcPA9HY=
 github.com/googleapis/gax-go/v2 v2.0.4/go.mod h1:0Wqv26UfaUD9n4G6kQubkQ+KchISgw+vpHVxEJEs9eg=
-github.com/googleapis/gnostic v0.0.0-20170729233727-0c5108395e2d h1:7XGaL1e6bYS1yIonGp9761ExpPPV1ui0SAC59Yube9k=
 github.com/googleapis/gnostic v0.0.0-20170729233727-0c5108395e2d/go.mod h1:sJBsCZ4ayReDTBIg8b9dl28c5xFWyhBTVRp3pOg5EKY=
 github.com/googleapis/gnostic v0.0.0-20180520015035-48a0ecefe2e4/go.mod h1:sJBsCZ4ayReDTBIg8b9dl28c5xFWyhBTVRp3pOg5EKY=
 github.com/googleapis/gnostic v0.1.0/go.mod h1:sJBsCZ4ayReDTBIg8b9dl28c5xFWyhBTVRp3pOg5EKY=
@@ -372,7 +361,6 @@ github.com/gostaticanalysis/analysisutil v0.0.3/go.mod h1:eEOZF4jCKGi+aprrirO9e7
 github.com/gregjones/httpcache v0.0.0-20180305231024-9cad4c3443a7 h1:pdN6V1QBWetyv/0+wjACpqVH+eVULgEjkurDLq3goeM=
 github.com/gregjones/httpcache v0.0.0-20180305231024-9cad4c3443a7/go.mod h1:FecbI9+v66THATjSRHfNgh1IVFe/9kFxbXtjV0ctIMA=
 github.com/grpc-ecosystem/go-grpc-middleware v0.0.0-20190222133341-cfaf5686ec79/go.mod h1:FiyG127CGDf3tlThmgyCl78X/SZQqEOJBCDaAfeWzPs=
-github.com/grpc-ecosystem/go-grpc-middleware v1.0.0 h1:Iju5GlWwrvL6UBg4zJJt3btmonfrMlCDdsejg4CZE7c=
 github.com/grpc-ecosystem/go-grpc-middleware v1.0.0/go.mod h1:FiyG127CGDf3tlThmgyCl78X/SZQqEOJBCDaAfeWzPs=
 github.com/grpc-ecosystem/go-grpc-prometheus v0.0.0-20181025070259-68e3a13e4117/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk=
 github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0/go.mod h1:8NvIoxWQoOIhqOTXgfV/d3M/q6VIi02HzZEHgUlZvzk=
@@ -410,7 +398,6 @@ github.com/heketi/tests v0.0.0-20151005000721-f3775cbcefd6/go.mod h1:xGMAM8JLi7U
 github.com/hpcloud/tail v1.0.0 h1:nfCOvKYfkgYP8hkirhJocXT2+zOD8yUNjXaWfTlyFKI=
 github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU=
 github.com/imdario/mergo v0.3.5/go.mod h1:2EnlNZ0deacrJVfApfmtdGgDfMuh/nq6Ok1EcJh5FfA=
-github.com/imdario/mergo v0.3.6 h1:xTNEAn+kxVO7dTZGu0CegyqKZmoWFI0rF8UxjlB2d28=
 github.com/imdario/mergo v0.3.6/go.mod h1:2EnlNZ0deacrJVfApfmtdGgDfMuh/nq6Ok1EcJh5FfA=
 github.com/imdario/mergo v0.3.7/go.mod h1:2EnlNZ0deacrJVfApfmtdGgDfMuh/nq6Ok1EcJh5FfA=
 github.com/imdario/mergo v0.3.8 h1:CGgOkSJeqMRmt0D9XLWExdT4m4F1vd3FV3VPt+0VxkQ=
@@ -437,7 +424,6 @@ github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfV
 github.com/julienschmidt/httprouter v1.2.0/go.mod h1:SYymIcj16QtmaHHD7aYtjjsJG7VTCxuUUipMqKk8s4w=
 github.com/karrick/godirwalk v1.7.5/go.mod h1:2c9FRhkDxdIbgkOnCEvnSWs71Bhugbl46shStcFDJ34=
 github.com/kisielk/errcheck v1.1.0/go.mod h1:EZBBE59ingxPouuu3KfxchcWSUPOHkagtvWXihfKN4Q=
-github.com/kisielk/errcheck v1.2.0 h1:reN85Pxc5larApoH1keMBiu2GWtPqXQ1nc9gx+jOU+E=
 github.com/kisielk/errcheck v1.2.0/go.mod h1:/BMXB+zMLi60iA8Vv6Ksmxu/1UDYcXs4uQLJ+jE2L00=
 github.com/kisielk/gotool v0.0.0-20161130080628-0de1eaf82fa3/go.mod h1:jxZFDH7ILpTPQTk+E2s+z4CUas9lVNjIuKR4c5/zKgM=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
@@ -459,7 +445,6 @@ github.com/kr/text v0.1.0 h1:45sCR5RtlFHMR4UwH9sdQ5TC8v0qDQCHnXt+kaKSTVE=
 github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
 github.com/kubernetes-csi/csi-lib-utils v0.7.0/go.mod h1:bze+2G9+cmoHxN6+WyG1qT4MDxgZJMLGwc7V4acPNm0=
 github.com/kubernetes-csi/csi-test v2.0.0+incompatible/go.mod h1:YxJ4UiuPWIhMBkxUKY5c267DyA0uDZ/MtAimhx/2TA0=
-github.com/kubernetes-csi/external-snapshotter/v2 v2.1.1 h1:t5bmB3Y8nCaLA4aFrIpX0zjHEF/HUkJp6f5rm7BsVzM=
 github.com/kubernetes-csi/external-snapshotter/v2 v2.1.1/go.mod h1:dV5oB3U62KBdlf9ADWkMmjGd3USauqQtwIm2OZb5mqI=
 github.com/kylelemons/godebug v0.0.0-20170820004349-d65d576e9348/go.mod h1:B69LEHPfb2qLo0BaaOLcbitczOKLWTsrBG9LczfCD4k=
 github.com/leanovate/gopter v0.2.4/go.mod h1:gNcbPWNEWRe4lm+bycKqxUYoH5uoVje5SkOJ3uoLer8=
@@ -470,6 +455,7 @@ github.com/libopenstorage/external-storage v5.3.0-alpha.1.0.20200130041458-d2b33
 github.com/libopenstorage/external-storage v5.3.0-alpha.1.0.20200130041458-d2b33d4448ea+incompatible/go.mod h1:H0Gzy0h36rbJPxu3lKdrIPw1h0k0c4YFtTGGlBEBPc8=
 github.com/libopenstorage/external-storage v5.3.0-alpha.1.0.20200130041458-d2b33d4448ea+incompatible/go.mod h1:H0Gzy0h36rbJPxu3lKdrIPw1h0k0c4YFtTGGlBEBPc8=
 github.com/libopenstorage/openstorage v1.0.0/go.mod h1:Sp1sIObHjat1BeXhfMqLZ14wnOzEhNx2YQedreMcUyc=
+github.com/libopenstorage/openstorage v8.0.0+incompatible h1:C4cFpStNOhsqShZSDRtW+4t5uCHbcdyPszG5ADwIRTM=
 github.com/libopenstorage/openstorage v8.0.0+incompatible/go.mod h1:Sp1sIObHjat1BeXhfMqLZ14wnOzEhNx2YQedreMcUyc=
 github.com/libopenstorage/openstorage-sdk-clients v0.69.27 h1:EU3Jj+X5WUkDpLUKhHddR0CNS1XUxhuhPuaLRN4507Q=
 github.com/libopenstorage/openstorage-sdk-clients v0.69.27/go.mod h1:vo0c/nLG2HIyQva4Avwx61U1kWcw4HGQh3sjzV2DEEs=
@@ -493,7 +479,6 @@ github.com/mailru/easyjson v0.0.0-20160728113105-d5b7844b561a/go.mod h1:C1wdFJiN
 github.com/mailru/easyjson v0.0.0-20180823135443-60711f1a8329/go.mod h1:C1wdFJiN94OJF2b5HbByQZoLdCWB1Yqtg26g4irojpc=
 github.com/mailru/easyjson v0.0.0-20190312143242-1de009706dbe/go.mod h1:C1wdFJiN94OJF2b5HbByQZoLdCWB1Yqtg26g4irojpc=
 github.com/mailru/easyjson v0.0.0-20190614124828-94de47d64c63/go.mod h1:C1wdFJiN94OJF2b5HbByQZoLdCWB1Yqtg26g4irojpc=
-github.com/mailru/easyjson v0.0.0-20190626092158-b2ccc519800e h1:hB2xlXdHp/pmPZq0y3QnmWAArdw9PqbmotexnWx/FU8=
 github.com/mailru/easyjson v0.0.0-20190626092158-b2ccc519800e/go.mod h1:C1wdFJiN94OJF2b5HbByQZoLdCWB1Yqtg26g4irojpc=
 github.com/mailru/easyjson v0.7.0 h1:aizVhC/NAAcKWb+5QsU1iNOZb4Yws5UO2I+aIprQITM=
 github.com/mailru/easyjson v0.7.0/go.mod h1:KAzv3t3aY1NaHWoQz1+4F1ccyAH66Jk7yos7ldAVICs=
@@ -541,6 +526,7 @@ github.com/modern-go/reflect2 v0.0.0-20180701023420-4b7aa43c6742/go.mod h1:bx2lN
 github.com/modern-go/reflect2 v1.0.1 h1:9f412s+6RmYXLWZSEzVVgPGK7C2PphHj5RJrvfx9AWI=
 github.com/modern-go/reflect2 v1.0.1/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
 github.com/mohae/deepcopy v0.0.0-20170603005431-491d3605edfb/go.mod h1:TaXosZuwdSHYgviHp1DAtfrULt5eUgsSMsZf+YrPgl8=
+github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826 h1:RWengNIwukTxcDr9M+97sNutRR1RKhG96O6jWumTTnw=
 github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826/go.mod h1:TaXosZuwdSHYgviHp1DAtfrULt5eUgsSMsZf+YrPgl8=
 github.com/montanaflynn/stats v0.0.0-20180911141734-db72e6cae808/go.mod h1:wL8QJuTMNUDYhXwkmfOly8iTdp5TEcJFWZD2D7SIkUc=
 github.com/morikuni/aec v0.0.0-20170113033406-39771216ff4c/go.mod h1:BbKIizmSmc5MMPqRYbxO4ZU0S0+P200+tUnFx7PXmsc=
@@ -564,7 +550,6 @@ github.com/onsi/ginkgo v0.0.0-20170829012221-11459a886d9c/go.mod h1:lLunBs/Ym6LB
 github.com/onsi/ginkgo v1.4.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
 github.com/onsi/ginkgo v1.6.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
 github.com/onsi/ginkgo v1.7.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
-github.com/onsi/ginkgo v1.8.0 h1:VkHVNpR4iVnU8XQR6DBm8BqYjN7CRzw+xKUbVVbbW9w=
 github.com/onsi/ginkgo v1.8.0/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
 github.com/onsi/ginkgo v1.10.2 h1:uqH7bpe+ERSiDa34FDOF7RikN6RzXgduUF8yarlZp94=
 github.com/onsi/ginkgo v1.10.2/go.mod h1:lLunBs/Ym6LB5Z9jYTR76FiuTmxDTDusOGeTQH+WWjE=
@@ -608,28 +593,24 @@ github.com/portworx/sched-ops v0.0.0-20210129165423-2b83087e7388/go.mod h1:XN9iX
 github.com/portworx/talisman v0.0.0-20191007232806-837747f38224/go.mod h1:OjpMH9Uh5o9ntVGktm4FbjLNwubJ3ITih2OfYrAeWtA=
 github.com/posener/complete v1.1.1/go.mod h1:em0nMJCgc9GFtwrmVmEMR/ZL6WyhyjMBndrE9hABlRI=
 github.com/pquerna/cachecontrol v0.0.0-20171018203845-0dec1b30a021/go.mod h1:prYjPmNq4d1NPVmpShWobRqXY3q7Vp+80DqgxxUrUIA=
+github.com/pquerna/cachecontrol v0.0.0-20180517163645-1555304b9b35 h1:J9b7z+QKAmPf4YLrFg6oQUotqHQeUNWwkvo7jZp1GLU=
 github.com/pquerna/cachecontrol v0.0.0-20180517163645-1555304b9b35/go.mod h1:prYjPmNq4d1NPVmpShWobRqXY3q7Vp+80DqgxxUrUIA=
 github.com/pquerna/ffjson v0.0.0-20180717144149-af8b230fcd20/go.mod h1:YARuvh7BUWHNhzDq2OM5tzR2RiCcN2D7sapiKyCel/M=
 github.com/prometheus/client_golang v0.9.1/go.mod h1:7SWBe2y4D6OKWSNQJUaRYU/AaXPKyh/dDVn+NZz0KFw=
-github.com/prometheus/client_golang v0.9.2 h1:awm861/B8OKDd2I/6o1dy3ra4BamzKhYOiGItCeZ740=
 github.com/prometheus/client_golang v0.9.2/go.mod h1:OsXs2jCmiKlQ1lTBmv21f2mNfw4xf/QclQDMrYNZzcM=
 github.com/prometheus/client_golang v0.9.3-0.20190127221311-3c4408c8b829 h1:D+CiwcpGTW6pL6bv6KI3KbyEyCKyS+1JWS2h8PNDnGA=
 github.com/prometheus/client_golang v0.9.3-0.20190127221311-3c4408c8b829/go.mod h1:p2iRAGwDERtqlqzRXnrOVns+ignqQo//hLXqYxZYVNs=
-github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910 h1:idejC8f05m9MGOsuEi1ATq9shN03HrxNkD/luQvxCv8=
 github.com/prometheus/client_model v0.0.0-20180712105110-5c3871d89910/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
-github.com/prometheus/client_model v0.0.0-20190115171406-56726106282f h1:BVwpUVJDADN2ufcGik7W992pyps0wZ888b/y9GXcLTU=
 github.com/prometheus/client_model v0.0.0-20190115171406-56726106282f/go.mod h1:MbSGuTsp3dbXC40dX6PRTWyKYBIrTGTE9sqQNg2J8bo=
 github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4 h1:gQz4mCbXsO+nc9n1hCxHcGA3Zx3Eo+UHZoInFGUIXNM=
 github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
 github.com/prometheus/common v0.0.0-20181113130724-41aa239b4cce/go.mod h1:daVV7qP5qjZbuso7PdcryaAu0sAZbrN9i7WWcTMWvro=
-github.com/prometheus/common v0.0.0-20181126121408-4724e9255275 h1:PnBWHBf+6L0jOqq0gIVUe6Yk0/QMZ640k6NvkxcBf+8=
 github.com/prometheus/common v0.0.0-20181126121408-4724e9255275/go.mod h1:daVV7qP5qjZbuso7PdcryaAu0sAZbrN9i7WWcTMWvro=
 github.com/prometheus/common v0.2.0/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
 github.com/prometheus/common v0.3.0/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
 github.com/prometheus/common v0.4.0 h1:7etb9YClo3a6HjLzfl6rIQaU+FDfi0VSX39io3aQ+DM=
 github.com/prometheus/common v0.4.0/go.mod h1:TNfzLD0ON7rHzMJeJkieUDPYmFC7Snx/y86RQel1bk4=
 github.com/prometheus/procfs v0.0.0-20181005140218-185b4288413d/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
-github.com/prometheus/procfs v0.0.0-20181204211112-1dc9a6cbc91a h1:9a8MnZMP0X2nLJdBg+pBmGgkJlSaKC2KaQmTCk1XDtE=
 github.com/prometheus/procfs v0.0.0-20181204211112-1dc9a6cbc91a/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
 github.com/prometheus/procfs v0.0.0-20190117184657-bf6a532e95b1 h1:/K3IL0Z1quvmJ7X0A1AwNEK7CRkVK3YwfOU/QAL4WGg=
 github.com/prometheus/procfs v0.0.0-20190117184657-bf6a532e95b1/go.mod h1:c3At6R/oaqEKCNdg8wHV1ftS6bRYblBhIjjI8uT2IGk=
@@ -760,11 +741,8 @@ golang.org/x/crypto v0.0.0-20190320223903-b7391e95e576/go.mod h1:djNgcEr1/C05ACk
 golang.org/x/crypto v0.0.0-20190424203555-c05e17bb3b2d/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20190513172903-22d7a77e9e5f/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
-golang.org/x/crypto v0.0.0-20190611184440-5c40567a22f8 h1:1wopBVtVdWnn03fZelqdXTqk7U7zPQCb+T4rbU9ZEoU=
 golang.org/x/crypto v0.0.0-20190611184440-5c40567a22f8/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
-golang.org/x/crypto v0.0.0-20190820162420-60c769a6c586 h1:7KByu05hhLed2MO29w7p1XfZvZ13m8mub3shuVftRs0=
 golang.org/x/crypto v0.0.0-20190820162420-60c769a6c586/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
-golang.org/x/crypto v0.0.0-20191010185427-af544f31c8ac h1:/b4NMZurYfBIQyRMqaPGMDeUrSW6gU7/7Hv6owY1Vjk=
 golang.org/x/crypto v0.0.0-20191010185427-af544f31c8ac/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
 golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550 h1:ObdrDkeb4kJdCP557AjRjq69pTHfNouLtWZG7j9rPN8=
 golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
@@ -775,15 +753,15 @@ golang.org/x/exp v0.0.0-20190312203227-4b39c73a6495/go.mod h1:ZjyILWgesfNpC6sMxT
 golang.org/x/image v0.0.0-20190227222117-0694c2d4d067/go.mod h1:kZ7UVZpmo3dzQBMxlp+ypCbDeSB+sBbTgSJuh5dn5js=
 golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
 golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU=
-golang.org/x/lint v0.0.0-20190301231843-5614ed5bae6f h1:hX65Cu3JDlGH3uEdK7I99Ii+9kjD6mvnnpfLdEAH0x4=
 golang.org/x/lint v0.0.0-20190301231843-5614ed5bae6f/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE=
-golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3 h1:XQyxROzUlZH+WIQwySDgnISgOivlhjIEwaQaJEJrrN0=
 golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
 golang.org/x/lint v0.0.0-20190409202823-959b441ac422/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc=
 golang.org/x/mobile v0.0.0-20190312151609-d3739f865fa6/go.mod h1:z+o9i4GpDbdi3rU15maQ/Ox0txvL9dWGYEHz965HBQE=
 golang.org/x/mod v0.0.0-20190513183733-4bf6d317e70e/go.mod h1:mXi4GBBbnImb6dmsKGUJ2LatrhH/nqhxcFungHvyanc=
 golang.org/x/mod v0.2.0 h1:KU7oHjnv3XNWfa5COkzUifxZmxp1TyI7ImMXqFxLwvQ=
 golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
+golang.org/x/mod v0.4.2 h1:Gz96sIWK3OalVv/I/qNygP42zyoKp3xptRVCWRFEBvo=
+golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
 golang.org/x/net v0.0.0-20170114055629-f2499483f923/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20170915142106-8351a756f30f/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180112015858-5ccada7d0a7b/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -811,7 +789,6 @@ golang.org/x/net v0.0.0-20190603091049-60506f45cf65/go.mod h1:HSz+uSET+XFnRR8LxR
 golang.org/x/net v0.0.0-20190613194153-d28f0bde5980/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20190827160401-ba9fcec4b297/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.0.0-20191004110552-13f9640d40b9 h1:rjwSpXsdiK0dV8/Naq3kAw9ymfAeJIyd0upUIElB+lI=
 golang.org/x/net v0.0.0-20191004110552-13f9640d40b9/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20191209160850-c0dbc17a3553/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20200226121028-0de0cce0169b h1:0mm1VjtFUOIlE1SbDlwjYaDxZVDP2S5ou6y0gSgXHu8=
@@ -856,7 +833,6 @@ golang.org/x/sys v0.0.0-20190425145619-16072639606e/go.mod h1:h1NjWce9XRLGQEsW7w
 golang.org/x/sys v0.0.0-20190502175342-a43fa875dd82/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20190507160741-ecd444e8653b/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20190616124812-15dcb6c0061f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.0.0-20190813064441-fde4db37ae7a h1:aYOabOQFp6Vj6W1F80affTUvO9UxmJRx8K0gsfABByQ=
 golang.org/x/sys v0.0.0-20190813064441-fde4db37ae7a/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
 golang.org/x/sys v0.0.0-20191220220014-0732a990476f h1:72l8qCJ1nGxMGH26QVBVIxKd/D34cfGt0OvrPtpemyY=
 golang.org/x/sys v0.0.0-20191220220014-0732a990476f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
@@ -871,7 +847,6 @@ golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
 golang.org/x/time v0.0.0-20170424234030-8be79e1e0910/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20180412165947-fbb02b2291d2/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
-golang.org/x/time v0.0.0-20190308202827-9d24e82272b4 h1:SvFZT6jyqRaOeXpc5h/JSfZenJ2O330aBsf7JfSUXmQ=
 golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
 golang.org/x/time v0.0.0-20190921001708-c4c64cad1fd0 h1:xQwXv67TxFo9nC1GJFyab5eq/5B590r6RlnL/G8Sz7w=
 golang.org/x/time v0.0.0-20190921001708-c4c64cad1fd0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
@@ -902,12 +877,10 @@ golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBn
 golang.org/x/tools v0.0.0-20190614205625-5aca471b1d59/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc=
 golang.org/x/tools v0.0.0-20190621195816-6e04913cbbac/go.mod h1:/rFqwRUd4F7ZHNgwSSTFct+R/Kf4OFW1sUzUTQQTgfc=
 golang.org/x/tools v0.0.0-20190909030654-5b82db07426d/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
-golang.org/x/tools v0.0.0-20190920225731-5eefd052ad72 h1:bw9doJza/SFBEweII/rHQh338oozWyiFsBRHtrflcws=
 golang.org/x/tools v0.0.0-20190920225731-5eefd052ad72/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo=
 golang.org/x/tools v0.0.0-20200408132156-9ee5ef7a2c0d h1:2DXIdtvIYvvWOcAOsX81FwOUBoQoMZhosWn7KjXEl94=
 golang.org/x/tools v0.0.0-20200408132156-9ee5ef7a2c0d/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
-golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7 h1:9zdDQZ7Thm29KFXgAX/+yaf3eVbP7djjWp/dXAppNCc=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543 h1:E7g+9GITq07hpfrRu66IVDexMakfv52eLZ2CXBWiKr4=
@@ -925,7 +898,6 @@ google.golang.org/api v0.4.0/go.mod h1:8k5glujaEP+g9n7WNsDg8QP6cUVNI86fCNMcbazEt
 google.golang.org/api v0.6.1-0.20190607001116-5213b8090861/go.mod h1:btoxGiFvQNVUZQ8W08zLtrVS08CNpINPEfxXxgJL1Q4=
 google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
 google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
-google.golang.org/appengine v1.5.0 h1:KxkO13IPW4Lslp2bz+KHP2E3gtFlrIGNThxkZQ3g+4c=
 google.golang.org/appengine v1.5.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
 google.golang.org/appengine v1.6.5 h1:tycE03LOZYQNhDpS27tcQdAzLCVMaj7QT2SXxebnpCM=
 google.golang.org/appengine v1.6.5/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
@@ -945,10 +917,8 @@ google.golang.org/grpc v1.26.0 h1:2dTRdpdFEEhJYQD8EMLB61nnrzSCTbG38PhqdhvOltg=
 google.golang.org/grpc v1.26.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk=
 gopkg.in/airbrake/gobrake.v2 v2.0.9/go.mod h1:/h5ZAUhDkGaJfjzjKLSjv6zCL6O0LLBxU4K+aSYdM/U=
 gopkg.in/alecthomas/kingpin.v2 v2.2.6/go.mod h1:FMv+mEhP44yOT+4EoQTLFTRgOQ1FBLkstjWtayDeSgw=
-gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
-gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127 h1:qIbj1fsPNlZgppZ+VLlY7N33q108Sa+fhmuc+sWQYwY=
 gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 h1:YR8cESwS4TdDjEe65xsg0ogRM/Nc3DYOhEAlW+xobZo=
 gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
@@ -966,6 +936,7 @@ gopkg.in/mcuadros/go-syslog.v2 v2.2.1/go.mod h1:l5LPIyOOyIdQquNg+oU6Z3524YwrcqEm
 gopkg.in/natefinch/lumberjack.v2 v2.0.0/go.mod h1:l0ndWWf7gzL7RNwBG7wST/UCcT4T24xpD6X8LsfU/+k=
 gopkg.in/resty.v1 v1.12.0/go.mod h1:mDo4pnntr5jdWRML875a/NmxYqAlA73dVijT2AXvQQo=
 gopkg.in/square/go-jose.v2 v2.2.2/go.mod h1:M9dMgbHiYLoDGQrXy7OpJDJWiKiU//h+vD76mk0e1AI=
+gopkg.in/square/go-jose.v2 v2.3.1 h1:SK5KegNXmKmqE342YYN2qPHEnUYeoMiXXl1poUlI+o4=
 gopkg.in/square/go-jose.v2 v2.3.1/go.mod h1:M9dMgbHiYLoDGQrXy7OpJDJWiKiU//h+vD76mk0e1AI=
 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7 h1:uRGJdciOHaEIrze2W8Q3AKkepLTh2hOroT7a+7czfdQ=
 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw=
@@ -975,7 +946,6 @@ gopkg.in/yaml.v2 v2.0.0-20170812160011-eb3733d160e7/go.mod h1:JAlM8MvJe8wmxCU4Bl
 gopkg.in/yaml.v2 v2.0.0/go.mod h1:JAlM8MvJe8wmxCU4Bli9HhUf9+ttbYbLASfIpnQbh74=
 gopkg.in/yaml.v2 v2.1.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
-gopkg.in/yaml.v2 v2.2.2 h1:ZCJp+EgiOT7lHqUV2J862kp8Qj64Jo6az82+3Td9dZw=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.4 h1:/eiJrUcujPVeJ3xlSWaiNi3uSVmDGBK1pDHUHAnao1I=
 gopkg.in/yaml.v2 v2.2.4/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
@@ -986,10 +956,8 @@ gotest.tools/gotestsum v0.3.5/go.mod h1:Mnf3e5FUzXbkCfynWBGOwLssY7gTQgCHObK9tMpA
 grpc.go4.org v0.0.0-20170609214715-11d0a25b4919/go.mod h1:77eQGdRu53HpSqPFJFmuJdjuHRquDANNeA4x7B8WQ9o=
 honnef.co/go/tools v0.0.0-20180728063816-88497007e858/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
-honnef.co/go/tools v0.0.0-20190106161140-3f1c8253044a h1:/8zB6iBfHCl1qAnEAWwGPNrUvapuy6CPla1VM0k8hQw=
 honnef.co/go/tools v0.0.0-20190106161140-3f1c8253044a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190418001031-e561f6794a2a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
-honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc h1:/hemPrYIhOhy8zYrNj+069zDB68us2sMGsfkFJO0iZs=
 honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.1-2019.2.2/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg=
 k8s.io/api v0.16.6 h1:FyTv/Z4RBlddLGJXRjGXE40QtYGHOjdZKRFSW5rU1oE=
@@ -1024,7 +992,6 @@ k8s.io/kube-aggregator v0.16.6/go.mod h1:lRjo9e3xeyF8tjkIKEX+pErNOdE4yTazx9VPO6z
 k8s.io/kube-controller-manager v0.16.6/go.mod h1:7ovDaVMCHc4TBOQHzfb5w2XCib7rjx+QCMZTRVQteD4=
 k8s.io/kube-openapi v0.0.0-20180629012420-d83b052f768a/go.mod h1:BXM9ceUBTj2QnfH2MK1odQs778ajze1RxcmP6S8RVVc=
 k8s.io/kube-openapi v0.0.0-20190228160746-b3a7cee44a30/go.mod h1:BXM9ceUBTj2QnfH2MK1odQs778ajze1RxcmP6S8RVVc=
-k8s.io/kube-openapi v0.0.0-20190816220812-743ec37842bf h1:EYm5AW/UUDbnmnI+gK0TJDVK9qPLhM+sRHYanNKw0EQ=
 k8s.io/kube-openapi v0.0.0-20190816220812-743ec37842bf/go.mod h1:1TqjTSzOxsLGIKfj0lK8EeCP7K1iUG65v09OM0/WG5E=
 k8s.io/kube-openapi v0.0.0-20190918143330-0270cf2f1c1d h1:Xpe6sK+RY4ZgCTyZ3y273UmFmURhjtoJiwOMbQsXitY=
 k8s.io/kube-openapi v0.0.0-20190918143330-0270cf2f1c1d/go.mod h1:1TqjTSzOxsLGIKfj0lK8EeCP7K1iUG65v09OM0/WG5E=
@@ -1041,7 +1008,6 @@ k8s.io/metrics v0.16.6/go.mod h1:de0nJbsn2wX/fapLW0Yi7k+GwXvEv4/g54agaDjzmQY=
 k8s.io/repo-infra v0.0.1-alpha.1/go.mod h1:wO1t9WaB99V80ljbeENTnayuEEwNZt7gECYh/CEyOJ8=
 k8s.io/sample-apiserver v0.16.6/go.mod h1:fyN8DaZXgtcQKCtb/x2mr4TDTUkaAdgWNU7BaLnlSqg=
 k8s.io/utils v0.0.0-20190308190857-21c4ce38f2a7/go.mod h1:8k8uAuAQ0rXslZKaEWd0c3oVhZz7sSzSiPnVZayjIX0=
-k8s.io/utils v0.0.0-20190801114015-581e00157fb1 h1:+ySTxfHnfzZb9ys375PXNlLhkJPLKgHajBU0N62BDvE=
 k8s.io/utils v0.0.0-20190801114015-581e00157fb1/go.mod h1:sZAwmy6armz5eXlNoLmJcl4F1QuKu7sr+mFQ0byX7Ew=
 k8s.io/utils v0.0.0-20190923111123-69764acb6e8e h1:BXSmdH6S3YGLlhC89DZp+sNdYSmwNeDU6Xu5ZpzGOlM=
 k8s.io/utils v0.0.0-20190923111123-69764acb6e8e/go.mod h1:sZAwmy6armz5eXlNoLmJcl4F1QuKu7sr+mFQ0byX7Ew=
diff --git a/vendor/github.com/cenkalti/backoff/.gitignore b/vendor/github.com/cenkalti/backoff/.gitignore
new file mode 100644
index 000000000..00268614f
--- /dev/null
+++ b/vendor/github.com/cenkalti/backoff/.gitignore
@@ -0,0 +1,22 @@
+# Compiled Object files, Static and Dynamic libs (Shared Objects)
+*.o
+*.a
+*.so
+
+# Folders
+_obj
+_test
+
+# Architecture specific extensions/prefixes
+*.[568vq]
+[568vq].out
+
+*.cgo1.go
+*.cgo2.c
+_cgo_defun.c
+_cgo_gotypes.go
+_cgo_export.*
+
+_testmain.go
+
+*.exe
diff --git a/vendor/github.com/cenkalti/backoff/.travis.yml b/vendor/github.com/cenkalti/backoff/.travis.yml
new file mode 100644
index 000000000..47a6a46ec
--- /dev/null
+++ b/vendor/github.com/cenkalti/backoff/.travis.yml
@@ -0,0 +1,10 @@
+language: go
+go:
+  - 1.7
+  - 1.x
+  - tip
+before_install:
+  - go get github.com/mattn/goveralls
+  - go get golang.org/x/tools/cmd/cover
+script:
+  - $HOME/gopath/bin/goveralls -service=travis-ci
diff --git a/vendor/github.com/cenkalti/backoff/LICENSE b/vendor/github.com/cenkalti/backoff/LICENSE
new file mode 100644
index 000000000..89b817996
--- /dev/null
+++ b/vendor/github.com/cenkalti/backoff/LICENSE
@@ -0,0 +1,20 @@
+The MIT License (MIT)
+
+Copyright (c) 2014 Cenk Altı
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
diff --git a/vendor/github.com/cenkalti/backoff/README.md b/vendor/github.com/cenkalti/backoff/README.md
new file mode 100644
index 000000000..55ebc98fc
--- /dev/null
+++ b/vendor/github.com/cenkalti/backoff/README.md
@@ -0,0 +1,30 @@
+# Exponential Backoff [![GoDoc][godoc image]][godoc] [![Build Status][travis image]][travis] [![Coverage Status][coveralls image]][coveralls]
+
+This is a Go port of the exponential backoff algorithm from [Google's HTTP Client Library for Java][google-http-java-client].
+
+[Exponential backoff][exponential backoff wiki]
+is an algorithm that uses feedback to multiplicatively decrease the rate of some process,
+in order to gradually find an acceptable rate.
+The retries exponentially increase and stop increasing when a certain threshold is met.
+
+## Usage
+
+See https://godoc.org/github.com/cenkalti/backoff#pkg-examples
+
+## Contributing
+
+* I would like to keep this library as small as possible.
+* Please don't send a PR without opening an issue and discussing it first.
+* If proposed change is not a common use case, I will probably not accept it.
+
+[godoc]: https://godoc.org/github.com/cenkalti/backoff
+[godoc image]: https://godoc.org/github.com/cenkalti/backoff?status.png
+[travis]: https://travis-ci.org/cenkalti/backoff
+[travis image]: https://travis-ci.org/cenkalti/backoff.png?branch=master
+[coveralls]: https://coveralls.io/github/cenkalti/backoff?branch=master
+[coveralls image]: https://coveralls.io/repos/github/cenkalti/backoff/badge.svg?branch=master
+
+[google-http-java-client]: https://github.com/google/google-http-java-client/blob/da1aa993e90285ec18579f1553339b00e19b3ab5/google-http-client/src/main/java/com/google/api/client/util/ExponentialBackOff.java
+[exponential backoff wiki]: http://en.wikipedia.org/wiki/Exponential_backoff
+
+[advanced example]: https://godoc.org/github.com/cenkalti/backoff#example_
diff --git a/vendor/github.com/cenkalti/backoff/backoff.go b/vendor/github.com/cenkalti/backoff/backoff.go
new file mode 100644
index 000000000..3676ee405
--- /dev/null
+++ b/vendor/github.com/cenkalti/backoff/backoff.go
@@ -0,0 +1,66 @@
+// Package backoff implements backoff algorithms for retrying operations.
+//
+// Use Retry function for retrying operations that may fail.
+// If Retry does not meet your needs,
+// copy/paste the function into your project and modify as you wish.
+//
+// There is also Ticker type similar to time.Ticker.
+// You can use it if you need to work with channels.
+//
+// See Examples section below for usage examples.
+package backoff
+
+import "time"
+
+// BackOff is a backoff policy for retrying an operation.
+type BackOff interface {
+	// NextBackOff returns the duration to wait before retrying the operation,
+	// or backoff. Stop to indicate that no more retries should be made.
+	//
+	// Example usage:
+	//
+	// 	duration := backoff.NextBackOff();
+	// 	if (duration == backoff.Stop) {
+	// 		// Do not retry operation.
+	// 	} else {
+	// 		// Sleep for duration and retry operation.
+	// 	}
+	//
+	NextBackOff() time.Duration
+
+	// Reset to initial state.
+	Reset()
+}
+
+// Stop indicates that no more retries should be made for use in NextBackOff().
+const Stop time.Duration = -1
+
+// ZeroBackOff is a fixed backoff policy whose backoff time is always zero,
+// meaning that the operation is retried immediately without waiting, indefinitely.
+type ZeroBackOff struct{}
+
+func (b *ZeroBackOff) Reset() {}
+
+func (b *ZeroBackOff) NextBackOff() time.Duration { return 0 }
+
+// StopBackOff is a fixed backoff policy that always returns backoff.Stop for
+// NextBackOff(), meaning that the operation should never be retried.
+type StopBackOff struct{}
+
+func (b *StopBackOff) Reset() {}
+
+func (b *StopBackOff) NextBackOff() time.Duration { return Stop }
+
+// ConstantBackOff is a backoff policy that always returns the same backoff delay.
+// This is in contrast to an exponential backoff policy,
+// which returns a delay that grows longer as you call NextBackOff() over and over again.
+type ConstantBackOff struct {
+	Interval time.Duration
+}
+
+func (b *ConstantBackOff) Reset()                     {}
+func (b *ConstantBackOff) NextBackOff() time.Duration { return b.Interval }
+
+func NewConstantBackOff(d time.Duration) *ConstantBackOff {
+	return &ConstantBackOff{Interval: d}
+}
diff --git a/vendor/github.com/cenkalti/backoff/context.go b/vendor/github.com/cenkalti/backoff/context.go
new file mode 100644
index 000000000..7706faa2b
--- /dev/null
+++ b/vendor/github.com/cenkalti/backoff/context.go
@@ -0,0 +1,63 @@
+package backoff
+
+import (
+	"context"
+	"time"
+)
+
+// BackOffContext is a backoff policy that stops retrying after the context
+// is canceled.
+type BackOffContext interface {
+	BackOff
+	Context() context.Context
+}
+
+type backOffContext struct {
+	BackOff
+	ctx context.Context
+}
+
+// WithContext returns a BackOffContext with context ctx
+//
+// ctx must not be nil
+func WithContext(b BackOff, ctx context.Context) BackOffContext {
+	if ctx == nil {
+		panic("nil context")
+	}
+
+	if b, ok := b.(*backOffContext); ok {
+		return &backOffContext{
+			BackOff: b.BackOff,
+			ctx:     ctx,
+		}
+	}
+
+	return &backOffContext{
+		BackOff: b,
+		ctx:     ctx,
+	}
+}
+
+func ensureContext(b BackOff) BackOffContext {
+	if cb, ok := b.(BackOffContext); ok {
+		return cb
+	}
+	return WithContext(b, context.Background())
+}
+
+func (b *backOffContext) Context() context.Context {
+	return b.ctx
+}
+
+func (b *backOffContext) NextBackOff() time.Duration {
+	select {
+	case <-b.ctx.Done():
+		return Stop
+	default:
+	}
+	next := b.BackOff.NextBackOff()
+	if deadline, ok := b.ctx.Deadline(); ok && deadline.Sub(time.Now()) < next {
+		return Stop
+	}
+	return next
+}
diff --git a/vendor/github.com/cenkalti/backoff/exponential.go b/vendor/github.com/cenkalti/backoff/exponential.go
new file mode 100644
index 000000000..a031a6597
--- /dev/null
+++ b/vendor/github.com/cenkalti/backoff/exponential.go
@@ -0,0 +1,153 @@
+package backoff
+
+import (
+	"math/rand"
+	"time"
+)
+
+/*
+ExponentialBackOff is a backoff implementation that increases the backoff
+period for each retry attempt using a randomization function that grows exponentially.
+
+NextBackOff() is calculated using the following formula:
+
+ randomized interval =
+     RetryInterval * (random value in range [1 - RandomizationFactor, 1 + RandomizationFactor])
+
+In other words NextBackOff() will range between the randomization factor
+percentage below and above the retry interval.
+
+For example, given the following parameters:
+
+ RetryInterval = 2
+ RandomizationFactor = 0.5
+ Multiplier = 2
+
+the actual backoff period used in the next retry attempt will range between 1 and 3 seconds,
+multiplied by the exponential, that is, between 2 and 6 seconds.
+
+Note: MaxInterval caps the RetryInterval and not the randomized interval.
+
+If the time elapsed since an ExponentialBackOff instance is created goes past the
+MaxElapsedTime, then the method NextBackOff() starts returning backoff.Stop.
+
+The elapsed time can be reset by calling Reset().
+
+Example: Given the following default arguments, for 10 tries the sequence will be,
+and assuming we go over the MaxElapsedTime on the 10th try:
+
+ Request #  RetryInterval (seconds)  Randomized Interval (seconds)
+
+  1          0.5                     [0.25,   0.75]
+  2          0.75                    [0.375,  1.125]
+  3          1.125                   [0.562,  1.687]
+  4          1.687                   [0.8435, 2.53]
+  5          2.53                    [1.265,  3.795]
+  6          3.795                   [1.897,  5.692]
+  7          5.692                   [2.846,  8.538]
+  8          8.538                   [4.269, 12.807]
+  9         12.807                   [6.403, 19.210]
+ 10         19.210                   backoff.Stop
+
+Note: Implementation is not thread-safe.
+*/
+type ExponentialBackOff struct {
+	InitialInterval     time.Duration
+	RandomizationFactor float64
+	Multiplier          float64
+	MaxInterval         time.Duration
+	// After MaxElapsedTime the ExponentialBackOff stops.
+	// It never stops if MaxElapsedTime == 0.
+	MaxElapsedTime time.Duration
+	Clock          Clock
+
+	currentInterval time.Duration
+	startTime       time.Time
+}
+
+// Clock is an interface that returns current time for BackOff.
+type Clock interface {
+	Now() time.Time
+}
+
+// Default values for ExponentialBackOff.
+const (
+	DefaultInitialInterval     = 500 * time.Millisecond
+	DefaultRandomizationFactor = 0.5
+	DefaultMultiplier          = 1.5
+	DefaultMaxInterval         = 60 * time.Second
+	DefaultMaxElapsedTime      = 15 * time.Minute
+)
+
+// NewExponentialBackOff creates an instance of ExponentialBackOff using default values.
+func NewExponentialBackOff() *ExponentialBackOff {
+	b := &ExponentialBackOff{
+		InitialInterval:     DefaultInitialInterval,
+		RandomizationFactor: DefaultRandomizationFactor,
+		Multiplier:          DefaultMultiplier,
+		MaxInterval:         DefaultMaxInterval,
+		MaxElapsedTime:      DefaultMaxElapsedTime,
+		Clock:               SystemClock,
+	}
+	b.Reset()
+	return b
+}
+
+type systemClock struct{}
+
+func (t systemClock) Now() time.Time {
+	return time.Now()
+}
+
+// SystemClock implements Clock interface that uses time.Now().
+var SystemClock = systemClock{}
+
+// Reset the interval back to the initial retry interval and restarts the timer.
+func (b *ExponentialBackOff) Reset() {
+	b.currentInterval = b.InitialInterval
+	b.startTime = b.Clock.Now()
+}
+
+// NextBackOff calculates the next backoff interval using the formula:
+// 	Randomized interval = RetryInterval +/- (RandomizationFactor * RetryInterval)
+func (b *ExponentialBackOff) NextBackOff() time.Duration {
+	// Make sure we have not gone over the maximum elapsed time.
+	if b.MaxElapsedTime != 0 && b.GetElapsedTime() > b.MaxElapsedTime {
+		return Stop
+	}
+	defer b.incrementCurrentInterval()
+	return getRandomValueFromInterval(b.RandomizationFactor, rand.Float64(), b.currentInterval)
+}
+
+// GetElapsedTime returns the elapsed time since an ExponentialBackOff instance
+// is created and is reset when Reset() is called.
+//
+// The elapsed time is computed using time.Now().UnixNano(). It is
+// safe to call even while the backoff policy is used by a running
+// ticker.
+func (b *ExponentialBackOff) GetElapsedTime() time.Duration {
+	return b.Clock.Now().Sub(b.startTime)
+}
+
+// Increments the current interval by multiplying it with the multiplier.
+func (b *ExponentialBackOff) incrementCurrentInterval() {
+	// Check for overflow, if overflow is detected set the current interval to the max interval.
+	if float64(b.currentInterval) >= float64(b.MaxInterval)/b.Multiplier {
+		b.currentInterval = b.MaxInterval
+	} else {
+		b.currentInterval = time.Duration(float64(b.currentInterval) * b.Multiplier)
+	}
+}
+
+// Returns a random value from the following interval:
+// 	[randomizationFactor * currentInterval, randomizationFactor * currentInterval].
+func getRandomValueFromInterval(randomizationFactor, random float64, currentInterval time.Duration) time.Duration {
+	var delta = randomizationFactor * float64(currentInterval)
+	var minInterval = float64(currentInterval) - delta
+	var maxInterval = float64(currentInterval) + delta
+
+	// Get a random value from the range [minInterval, maxInterval].
+	// The formula used below has a +1 because if the minInterval is 1 and the maxInterval is 3 then
+	// we want a 33% chance for selecting either 1, 2 or 3.
+	return time.Duration(minInterval + (random * (maxInterval - minInterval + 1)))
+}
diff --git a/vendor/github.com/cenkalti/backoff/retry.go b/vendor/github.com/cenkalti/backoff/retry.go
new file mode 100644
index 000000000..e936a506f
--- /dev/null
+++ b/vendor/github.com/cenkalti/backoff/retry.go
@@ -0,0 +1,82 @@
+package backoff
+
+import "time"
+
+// An Operation is executing by Retry() or RetryNotify().
+// The operation will be retried using a backoff policy if it returns an error.
+type Operation func() error
+
+// Notify is a notify-on-error function. It receives an operation error and
+// backoff delay if the operation failed (with an error).
+//
+// NOTE that if the backoff policy stated to stop retrying,
+// the notify function isn't called.
+type Notify func(error, time.Duration)
+
+// Retry the operation o until it does not return error or BackOff stops.
+// o is guaranteed to be run at least once.
+//
+// If o returns a *PermanentError, the operation is not retried, and the
+// wrapped error is returned.
+//
+// Retry sleeps the goroutine for the duration returned by BackOff after a
+// failed operation returns.
+func Retry(o Operation, b BackOff) error { return RetryNotify(o, b, nil) }
+
+// RetryNotify calls notify function with the error and wait duration
+// for each failed attempt before sleep.
+func RetryNotify(operation Operation, b BackOff, notify Notify) error {
+	var err error
+	var next time.Duration
+	var t *time.Timer
+
+	cb := ensureContext(b)
+
+	b.Reset()
+	for {
+		if err = operation(); err == nil {
+			return nil
+		}
+
+		if permanent, ok := err.(*PermanentError); ok {
+			return permanent.Err
+		}
+
+		if next = cb.NextBackOff(); next == Stop {
+			return err
+		}
+
+		if notify != nil {
+			notify(err, next)
+		}
+
+		if t == nil {
+			t = time.NewTimer(next)
+			defer t.Stop()
+		} else {
+			t.Reset(next)
+		}
+
+		select {
+		case <-cb.Context().Done():
+			return err
+		case <-t.C:
+		}
+	}
+}
+
+// PermanentError signals that the operation should not be retried.
+type PermanentError struct {
+	Err error
+}
+
+func (e *PermanentError) Error() string {
+	return e.Err.Error()
+}
+
+// Permanent wraps the given err in a *PermanentError.
+func Permanent(err error) *PermanentError {
+	return &PermanentError{
+		Err: err,
+	}
+}
diff --git a/vendor/github.com/cenkalti/backoff/ticker.go b/vendor/github.com/cenkalti/backoff/ticker.go
new file mode 100644
index 000000000..e41084b0e
--- /dev/null
+++ b/vendor/github.com/cenkalti/backoff/ticker.go
@@ -0,0 +1,82 @@
+package backoff
+
+import (
+	"sync"
+	"time"
+)
+
+// Ticker holds a channel that delivers `ticks' of a clock at times reported by a BackOff.
+//
+// Ticks will continue to arrive when the previous operation is still running,
+// so operations that take a while to fail could run in quick succession.
+type Ticker struct {
+	C        <-chan time.Time
+	c        chan time.Time
+	b        BackOffContext
+	stop     chan struct{}
+	stopOnce sync.Once
+}
+
+// NewTicker returns a new Ticker containing a channel that will send
+// the time at times specified by the BackOff argument. Ticker is
+// guaranteed to tick at least once.  The channel is closed when Stop
+// method is called or BackOff stops. It is not safe to manipulate the
+// provided backoff policy (notably calling NextBackOff or Reset)
+// while the ticker is running.
+func NewTicker(b BackOff) *Ticker {
+	c := make(chan time.Time)
+	t := &Ticker{
+		C:    c,
+		c:    c,
+		b:    ensureContext(b),
+		stop: make(chan struct{}),
+	}
+	t.b.Reset()
+	go t.run()
+	return t
+}
+
+// Stop turns off a ticker. After Stop, no more ticks will be sent.
+func (t *Ticker) Stop() {
+	t.stopOnce.Do(func() { close(t.stop) })
+}
+
+func (t *Ticker) run() {
+	c := t.c
+	defer close(c)
+
+	// Ticker is guaranteed to tick at least once.
+	afterC := t.send(time.Now())
+
+	for {
+		if afterC == nil {
+			return
+		}
+
+		select {
+		case tick := <-afterC:
+			afterC = t.send(tick)
+		case <-t.stop:
+			t.c = nil // Prevent future ticks from being sent to the channel.
+			return
+		case <-t.b.Context().Done():
+			return
+		}
+	}
+}
+
+func (t *Ticker) send(tick time.Time) <-chan time.Time {
+	select {
+	case t.c <- tick:
+	case <-t.stop:
+		return nil
+	}
+
+	next := t.b.NextBackOff()
+	if next == Stop {
+		t.Stop()
+		return nil
+	}
+
+	return time.After(next)
+}
diff --git a/vendor/github.com/cenkalti/backoff/tries.go b/vendor/github.com/cenkalti/backoff/tries.go
new file mode 100644
index 000000000..cfeefd9b7
--- /dev/null
+++ b/vendor/github.com/cenkalti/backoff/tries.go
@@ -0,0 +1,35 @@
+package backoff
+
+import "time"
+
+/*
+WithMaxRetries creates a wrapper around another BackOff, which will
+return Stop if NextBackOff() has been called too many times since
+the last time Reset() was called
+
+Note: Implementation is not thread-safe.
+*/
+func WithMaxRetries(b BackOff, max uint64) BackOff {
+	return &backOffTries{delegate: b, maxTries: max}
+}
+
+type backOffTries struct {
+	delegate BackOff
+	maxTries uint64
+	numTries uint64
+}
+
+func (b *backOffTries) NextBackOff() time.Duration {
+	if b.maxTries > 0 {
+		if b.maxTries <= b.numTries {
+			return Stop
+		}
+		b.numTries++
+	}
+	return b.delegate.NextBackOff()
+}
+
+func (b *backOffTries) Reset() {
+	b.numTries = 0
+	b.delegate.Reset()
+}
diff --git a/vendor/github.com/coreos/go-oidc/.gitignore b/vendor/github.com/coreos/go-oidc/.gitignore
new file mode 100644
index 000000000..c96f2f47b
--- /dev/null
+++ b/vendor/github.com/coreos/go-oidc/.gitignore
@@ -0,0 +1,2 @@
+/bin
+/gopath
diff --git a/vendor/github.com/coreos/go-oidc/.travis.yml b/vendor/github.com/coreos/go-oidc/.travis.yml
new file mode 100644
index 000000000..6ff9dd965
--- /dev/null
+++ b/vendor/github.com/coreos/go-oidc/.travis.yml
@@ -0,0 +1,16 @@
+language: go
+
+go:
+  - "1.9"
+  - "1.10"
+
+install:
+ - go get -v -t github.com/coreos/go-oidc/...
+ - go get golang.org/x/tools/cmd/cover
+ - go get github.com/golang/lint/golint
+
+script:
+ - ./test
+
+notifications:
+  email: false
diff --git a/vendor/github.com/coreos/go-oidc/CONTRIBUTING.md b/vendor/github.com/coreos/go-oidc/CONTRIBUTING.md
new file mode 100644
index 000000000..6662073a8
--- /dev/null
+++ b/vendor/github.com/coreos/go-oidc/CONTRIBUTING.md
@@ -0,0 +1,71 @@
+# How to Contribute
+
+CoreOS projects are [Apache 2.0 licensed](LICENSE) and accept contributions via
+GitHub pull requests.  This document outlines some of the conventions on
+development workflow, commit message formatting, contact points and other
+resources to make it easier to get your contribution accepted.
+
+# Certificate of Origin
+
+By contributing to this project you agree to the Developer Certificate of
+Origin (DCO). This document was created by the Linux Kernel community and is a
+simple statement that you, as a contributor, have the legal right to make the
+contribution. See the [DCO](DCO) file for details.
+
+# Email and Chat
+
+The project currently uses the general CoreOS email list and IRC channel:
+- Email: [coreos-dev](https://groups.google.com/forum/#!forum/coreos-dev)
+- IRC: #[coreos](irc://irc.freenode.org:6667/#coreos) IRC channel on freenode.org
+
+Please avoid emailing maintainers found in the MAINTAINERS file directly. They
+are very busy and read the mailing lists.
+
+## Getting Started
+
+- Fork the repository on GitHub
+- Read the [README](README.md) for build and test instructions
+- Play with the project, submit bugs, submit patches!
+
+## Contribution Flow
+
+This is a rough outline of what a contributor's workflow looks like:
+
+- Create a topic branch from where you want to base your work (usually master).
+- Make commits of logical units.
+- Make sure your commit messages are in the proper format (see below).
+- Push your changes to a topic branch in your fork of the repository.
+- Make sure the tests pass, and add any new tests as appropriate.
+- Submit a pull request to the original repository.
+
+Thanks for your contributions!
+
+### Format of the Commit Message
+
+We follow a rough convention for commit messages that is designed to answer two
+questions: what changed and why. The subject line should feature the what and
+the body of the commit should describe the why.
+
+```
+scripts: add the test-cluster command
+
+this uses tmux to setup a test cluster that you can easily kill and
+start for debugging.
+
+Fixes #38
+```
+
+The format can be described more formally as follows:
+
+```
+<subsystem>: <what changed>
+<BLANK LINE>
+<why this change was made>
+<BLANK LINE>
+<footer>
+```
+
+The first line is the subject and should be no longer than 70 characters, the
+second line is always blank, and other lines should be wrapped at 80 characters.
+This allows the message to be easier to read on GitHub as well as in various
+git tools.
diff --git a/vendor/github.com/coreos/go-oidc/DCO b/vendor/github.com/coreos/go-oidc/DCO
new file mode 100644
index 000000000..716561d5d
--- /dev/null
+++ b/vendor/github.com/coreos/go-oidc/DCO
@@ -0,0 +1,36 @@
+Developer Certificate of Origin
+Version 1.1
+
+Copyright (C) 2004, 2006 The Linux Foundation and its contributors.
+660 York Street, Suite 102,
+San Francisco, CA 94110 USA
+
+Everyone is permitted to copy and distribute verbatim copies of this
+license document, but changing it is not allowed.
+
+
+Developer's Certificate of Origin 1.1
+
+By making a contribution to this project, I certify that:
+
+(a) The contribution was created in whole or in part by me and I
+    have the right to submit it under the open source license
+    indicated in the file; or
+
+(b) The contribution is based upon previous work that, to the best
+    of my knowledge, is covered under an appropriate open source
+    license and I have the right under that license to submit that
+    work with modifications, whether created in whole or in part
+    by me, under the same open source license (unless I am
+    permitted to submit under a different license), as indicated
+    in the file; or
+
+(c) The contribution was provided directly to me by some other
+    person who certified (a), (b) or (c) and I have not modified
+    it.
+
+(d) I understand and agree that this project and the contribution
+    are public and that a record of the contribution (including all
+    personal information I submit with it, including my sign-off) is
+    maintained indefinitely and may be redistributed consistent with
+    this project or the open source license(s) involved.
diff --git a/vendor/github.com/coreos/go-oidc/LICENSE b/vendor/github.com/coreos/go-oidc/LICENSE
new file mode 100644
index 000000000..e06d20818
--- /dev/null
+++ b/vendor/github.com/coreos/go-oidc/LICENSE
@@ -0,0 +1,202 @@
+Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "{}"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright {yyyy} {name of copyright owner}
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
diff --git a/vendor/github.com/coreos/go-oidc/MAINTAINERS b/vendor/github.com/coreos/go-oidc/MAINTAINERS
new file mode 100644
index 000000000..99bcaa3f5
--- /dev/null
+++ b/vendor/github.com/coreos/go-oidc/MAINTAINERS
@@ -0,0 +1,3 @@
+Eric Chiang <ericchiang@google.com> (@ericchiang)
+Mike Danese <mikedanese@google.com> (@mikedanese)
+Rithu Leena John <rjohn@redhat.com> (@rithujohn191)
diff --git a/vendor/github.com/coreos/go-oidc/NOTICE b/vendor/github.com/coreos/go-oidc/NOTICE
new file mode 100644
index 000000000..b39ddfa5c
--- /dev/null
+++ b/vendor/github.com/coreos/go-oidc/NOTICE
@@ -0,0 +1,5 @@
+CoreOS Project
+Copyright 2014 CoreOS, Inc
+
+This product includes software developed at CoreOS, Inc.
+(http://www.coreos.com/).
diff --git a/vendor/github.com/coreos/go-oidc/README.md b/vendor/github.com/coreos/go-oidc/README.md
new file mode 100644
index 000000000..520d7c87f
--- /dev/null
+++ b/vendor/github.com/coreos/go-oidc/README.md
@@ -0,0 +1,72 @@
+# go-oidc
+
+[![GoDoc](https://godoc.org/github.com/coreos/go-oidc?status.svg)](https://godoc.org/github.com/coreos/go-oidc)
+[![Build Status](https://travis-ci.org/coreos/go-oidc.png?branch=master)](https://travis-ci.org/coreos/go-oidc)
+
+## OpenID Connect support for Go
+
+This package enables OpenID Connect support for the [golang.org/x/oauth2](https://godoc.org/golang.org/x/oauth2) package.
+
+```go
+provider, err := oidc.NewProvider(ctx, "https://accounts.google.com")
+if err != nil {
+    // handle error
+}
+
+// Configure an OpenID Connect aware OAuth2 client.
+oauth2Config := oauth2.Config{
+    ClientID:     clientID,
+    ClientSecret: clientSecret,
+    RedirectURL:  redirectURL,
+
+    // Discovery returns the OAuth2 endpoints.
+    Endpoint: provider.Endpoint(),
+
+    // "openid" is a required scope for OpenID Connect flows.
+    Scopes: []string{oidc.ScopeOpenID, "profile", "email"},
+}
+```
+
+OAuth2 redirects are unchanged.
+
+```go
+func handleRedirect(w http.ResponseWriter, r *http.Request) {
+    http.Redirect(w, r, oauth2Config.AuthCodeURL(state), http.StatusFound)
+}
+```
+
+The on responses, the provider can be used to verify ID Tokens.
+
+```go
+var verifier = provider.Verifier(&oidc.Config{ClientID: clientID})
+
+func handleOAuth2Callback(w http.ResponseWriter, r *http.Request) {
+    // Verify state and errors.
+
+    oauth2Token, err := oauth2Config.Exchange(ctx, r.URL.Query().Get("code"))
+    if err != nil {
+        // handle error
+    }
+
+    // Extract the ID Token from OAuth2 token.
+    rawIDToken, ok := oauth2Token.Extra("id_token").(string)
+    if !ok {
+        // handle missing token
+    }
+
+    // Parse and verify ID Token payload.
+    idToken, err := verifier.Verify(ctx, rawIDToken)
+    if err != nil {
+        // handle error
+    }
+
+    // Extract custom claims
+    var claims struct {
+        Email    string `json:"email"`
+        Verified bool   `json:"email_verified"`
+    }
+    if err := idToken.Claims(&claims); err != nil {
+        // handle error
+    }
+}
+```
diff --git a/vendor/github.com/coreos/go-oidc/code-of-conduct.md b/vendor/github.com/coreos/go-oidc/code-of-conduct.md
new file mode 100644
index 000000000..a234f3609
--- /dev/null
+++ b/vendor/github.com/coreos/go-oidc/code-of-conduct.md
@@ -0,0 +1,61 @@
+## CoreOS Community Code of Conduct
+
+### Contributor Code of Conduct
+
+As contributors and maintainers of this project, and in the interest of
+fostering an open and welcoming community, we pledge to respect all people who
+contribute through reporting issues, posting feature requests, updating
+documentation, submitting pull requests or patches, and other activities.
+
+We are committed to making participation in this project a harassment-free
+experience for everyone, regardless of level of experience, gender, gender
+identity and expression, sexual orientation, disability, personal appearance,
+body size, race, ethnicity, age, religion, or nationality.
+
+Examples of unacceptable behavior by participants include:
+
+* The use of sexualized language or imagery
+* Personal attacks
+* Trolling or insulting/derogatory comments
+* Public or private harassment
+* Publishing others' private information, such as physical or electronic addresses, without explicit permission
+* Other unethical or unprofessional conduct.
+
+Project maintainers have the right and responsibility to remove, edit, or
+reject comments, commits, code, wiki edits, issues, and other contributions
+that are not aligned to this Code of Conduct. By adopting this Code of Conduct,
+project maintainers commit themselves to fairly and consistently applying these
+principles to every aspect of managing this project. Project maintainers who do
+not follow or enforce the Code of Conduct may be permanently removed from the
+project team.
+
+This code of conduct applies both within project spaces and in public spaces
+when an individual is representing the project or its community.
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported by contacting a project maintainer, Brandon Philips
+<brandon.philips@coreos.com>, and/or Rithu John <rithu.john@coreos.com>.
+
+This Code of Conduct is adapted from the Contributor Covenant
+(http://contributor-covenant.org), version 1.2.0, available at
+http://contributor-covenant.org/version/1/2/0/
+
+### CoreOS Events Code of Conduct
+
+CoreOS events are working conferences intended for professional networking and
+collaboration in the CoreOS community. Attendees are expected to behave
+according to professional standards and in accordance with their employer’s
+policies on appropriate workplace behavior.
+
+While at CoreOS events or related social networking opportunities, attendees
+should not engage in discriminatory or offensive speech or actions including
+but not limited to gender, sexuality, race, age, disability, or religion.
+Speakers should be especially aware of these concerns.
+
+CoreOS does not condone any statements by speakers contrary to these standards.
+CoreOS reserves the right to deny entrance and/or eject from an event (without
+refund) any individual found to be engaging in discriminatory or offensive
+speech or actions.
+
+Please bring any concerns to the immediate attention of designated on-site
+staff, Brandon Philips <brandon.philips@coreos.com>, and/or Rithu John <rithu.john@coreos.com>.
diff --git a/vendor/github.com/coreos/go-oidc/jose.go b/vendor/github.com/coreos/go-oidc/jose.go
new file mode 100644
index 000000000..f2e6bf432
--- /dev/null
+++ b/vendor/github.com/coreos/go-oidc/jose.go
@@ -0,0 +1,20 @@
+// +build !golint
+
+// Don't lint this file. We don't want to have to add a comment to each constant.
+
+package oidc
+
+const (
+	// JOSE asymmetric signing algorithm values as defined by RFC 7518
+	//
+	// see: https://tools.ietf.org/html/rfc7518#section-3.1
+	RS256 = "RS256" // RSASSA-PKCS-v1.5 using SHA-256
+	RS384 = "RS384" // RSASSA-PKCS-v1.5 using SHA-384
+	RS512 = "RS512" // RSASSA-PKCS-v1.5 using SHA-512
+	ES256 = "ES256" // ECDSA using P-256 and SHA-256
+	ES384 = "ES384" // ECDSA using P-384 and SHA-384
+	ES512 = "ES512" // ECDSA using P-521 and SHA-512
+	PS256 = "PS256" // RSASSA-PSS using SHA256 and MGF1-SHA256
+	PS384 = "PS384" // RSASSA-PSS using SHA384 and MGF1-SHA384
+	PS512 = "PS512" // RSASSA-PSS using SHA512 and MGF1-SHA512
+)
diff --git a/vendor/github.com/coreos/go-oidc/jwks.go b/vendor/github.com/coreos/go-oidc/jwks.go
new file mode 100644
index 000000000..e6a82c842
--- /dev/null
+++ b/vendor/github.com/coreos/go-oidc/jwks.go
@@ -0,0 +1,228 @@
+package oidc
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"io/ioutil"
+	"net/http"
+	"sync"
+	"time"
+
+	"github.com/pquerna/cachecontrol"
+	jose "gopkg.in/square/go-jose.v2"
+)
+
+// keysExpiryDelta is the allowed clock skew between a client and the OpenID Connect
+// server.
+//
+// When keys expire, they are valid for this amount of time after.
+//
+// If the keys have not expired, and an ID Token claims it was signed by a key not in
+// the cache, if and only if the keys expire in this amount of time, the keys will be
+// updated.
+const keysExpiryDelta = 30 * time.Second
+
+// NewRemoteKeySet returns a KeySet that can validate JSON web tokens by using HTTP
+// GETs to fetch JSON web token sets hosted at a remote URL. This is automatically
+// used by NewProvider using the URLs returned by OpenID Connect discovery, but is
+// exposed for providers that don't support discovery or to prevent round trips to the
+// discovery URL.
+//
+// The returned KeySet is a long lived verifier that caches keys based on cache-control
+// headers. Reuse a common remote key set instead of creating new ones as needed.
+//
+// The behavior of the returned KeySet is undefined once the context is canceled.
+func NewRemoteKeySet(ctx context.Context, jwksURL string) KeySet {
+	return newRemoteKeySet(ctx, jwksURL, time.Now)
+}
+
+func newRemoteKeySet(ctx context.Context, jwksURL string, now func() time.Time) *remoteKeySet {
+	if now == nil {
+		now = time.Now
+	}
+	return &remoteKeySet{jwksURL: jwksURL, ctx: ctx, now: now}
+}
+
+type remoteKeySet struct {
+	jwksURL string
+	ctx     context.Context
+	now     func() time.Time
+
+	// guard all other fields
+	mu sync.Mutex
+
+	// inflight suppresses parallel execution of updateKeys and allows
+	// multiple goroutines to wait for its result.
+	inflight *inflight
+
+	// A set of cached keys and their expiry.
+	cachedKeys []jose.JSONWebKey
+	expiry     time.Time
+}
+
+// inflight is used to wait on some in-flight request from multiple goroutines.
+type inflight struct {
+	doneCh chan struct{}
+
+	keys []jose.JSONWebKey
+	err  error
+}
+
+func newInflight() *inflight {
+	return &inflight{doneCh: make(chan struct{})}
+}
+
+// wait returns a channel that multiple goroutines can receive on. Once it returns
+// a value, the inflight request is done and result() can be inspected.
+func (i *inflight) wait() <-chan struct{} {
+	return i.doneCh
+}
+
+// done can only be called by a single goroutine. It records the result of the
+// inflight request and signals other goroutines that the result is safe to
+// inspect.
+func (i *inflight) done(keys []jose.JSONWebKey, err error) {
+	i.keys = keys
+	i.err = err
+	close(i.doneCh)
+}
+
+// result cannot be called until the wait() channel has returned a value.
+func (i *inflight) result() ([]jose.JSONWebKey, error) {
+	return i.keys, i.err
+}
+
+func (r *remoteKeySet) VerifySignature(ctx context.Context, jwt string) ([]byte, error) {
+	jws, err := jose.ParseSigned(jwt)
+	if err != nil {
+		return nil, fmt.Errorf("oidc: malformed jwt: %v", err)
+	}
+	return r.verify(ctx, jws)
+}
+
+func (r *remoteKeySet) verify(ctx context.Context, jws *jose.JSONWebSignature) ([]byte, error) {
+	// We don't support JWTs signed with multiple signatures.
+	keyID := ""
+	for _, sig := range jws.Signatures {
+		keyID = sig.Header.KeyID
+		break
+	}
+
+	keys, expiry := r.keysFromCache()
+
+	// Don't check expiry yet. This optimizes for when the provider is unavailable.
+	for _, key := range keys {
+		if keyID == "" || key.KeyID == keyID {
+			if payload, err := jws.Verify(&key); err == nil {
+				return payload, nil
+			}
+		}
+	}
+
+	if !r.now().Add(keysExpiryDelta).After(expiry) {
+		// Keys haven't expired, don't refresh.
+		return nil, errors.New("failed to verify id token signature")
+	}
+
+	keys, err := r.keysFromRemote(ctx)
+	if err != nil {
+		return nil, fmt.Errorf("fetching keys %v", err)
+	}
+
+	for _, key := range keys {
+		if keyID == "" || key.KeyID == keyID {
+			if payload, err := jws.Verify(&key); err == nil {
+				return payload, nil
+			}
+		}
+	}
+	return nil, errors.New("failed to verify id token signature")
+}
+
+func (r *remoteKeySet) keysFromCache() (keys []jose.JSONWebKey, expiry time.Time) {
+	r.mu.Lock()
+	defer r.mu.Unlock()
+	return r.cachedKeys, r.expiry
+}
+
+// keysFromRemote syncs the key set from the remote set, records the values in the
+// cache, and returns the key set.
+func (r *remoteKeySet) keysFromRemote(ctx context.Context) ([]jose.JSONWebKey, error) {
+	// Need to lock to inspect the inflight request field.
+	r.mu.Lock()
+	// If there's not a current inflight request, create one.
+	if r.inflight == nil {
+		r.inflight = newInflight()
+
+		// This goroutine has exclusive ownership over the current inflight
+		// request. It releases the resource by nil'ing the inflight field
+		// once the goroutine is done.
+		go func() {
+			// Sync keys and finish inflight when that's done.
+			keys, expiry, err := r.updateKeys()
+
+			r.inflight.done(keys, err)
+
+			// Lock to update the keys and indicate that there is no longer an
+			// inflight request.
+			r.mu.Lock()
+			defer r.mu.Unlock()
+
+			if err == nil {
+				r.cachedKeys = keys
+				r.expiry = expiry
+			}
+
+			// Free inflight so a different request can run.
+			r.inflight = nil
+		}()
+	}
+	inflight := r.inflight
+	r.mu.Unlock()
+
+	select {
+	case <-ctx.Done():
+		return nil, ctx.Err()
+	case <-inflight.wait():
+		return inflight.result()
+	}
+}
+
+func (r *remoteKeySet) updateKeys() ([]jose.JSONWebKey, time.Time, error) {
+	req, err := http.NewRequest("GET", r.jwksURL, nil)
+	if err != nil {
+		return nil, time.Time{}, fmt.Errorf("oidc: can't create request: %v", err)
+	}
+
+	resp, err := doRequest(r.ctx, req)
+	if err != nil {
+		return nil, time.Time{}, fmt.Errorf("oidc: get keys failed %v", err)
+	}
+	defer resp.Body.Close()
+
+	body, err := ioutil.ReadAll(resp.Body)
+	if err != nil {
+		return nil, time.Time{}, fmt.Errorf("unable to read response body: %v", err)
+	}
+
+	if resp.StatusCode != http.StatusOK {
+		return nil, time.Time{}, fmt.Errorf("oidc: get keys failed: %s %s", resp.Status, body)
+	}
+
+	var keySet jose.JSONWebKeySet
+	err = unmarshalResp(resp, body, &keySet)
+	if err != nil {
+		return nil, time.Time{}, fmt.Errorf("oidc: failed to decode keys: %v %s", err, body)
+	}
+
+	// If the server doesn't provide cache control headers, assume the
+	// keys expire immediately.
+	expiry := r.now()
+
+	_, e, err := cachecontrol.CachableResponse(req, resp, cachecontrol.Options{})
+	if err == nil && e.After(expiry) {
+		expiry = e
+	}
+	return keySet.Keys, expiry, nil
+}
diff --git a/vendor/github.com/coreos/go-oidc/oidc.go b/vendor/github.com/coreos/go-oidc/oidc.go
new file mode 100644
index 000000000..508b39d3c
--- /dev/null
+++ b/vendor/github.com/coreos/go-oidc/oidc.go
@@ -0,0 +1,385 @@
+// Package oidc implements OpenID Connect client logic for the golang.org/x/oauth2 package.
+package oidc
+
+import (
+	"context"
+	"crypto/sha256"
+	"crypto/sha512"
+	"encoding/base64"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"hash"
+	"io/ioutil"
+	"mime"
+	"net/http"
+	"strings"
+	"time"
+
+	"golang.org/x/oauth2"
+	jose "gopkg.in/square/go-jose.v2"
+)
+
+const (
+	// ScopeOpenID is the mandatory scope for all OpenID Connect OAuth2 requests.
+	ScopeOpenID = "openid"
+
+	// ScopeOfflineAccess is an optional scope defined by OpenID Connect for requesting
+	// OAuth2 refresh tokens.
+	//
+	// Support for this scope differs between OpenID Connect providers. For instance
+	// Google rejects it, favoring appending "access_type=offline" as part of the
+	// authorization request instead.
+	//
+	// See: https://openid.net/specs/openid-connect-core-1_0.html#OfflineAccess
+	ScopeOfflineAccess = "offline_access"
+)
+
+var (
+	errNoAtHash      = errors.New("id token did not have an access token hash")
+	errInvalidAtHash = errors.New("access token hash does not match value in ID token")
+)
+
+// ClientContext returns a new Context that carries the provided HTTP client.
+//
+// This method sets the same context key used by the golang.org/x/oauth2 package,
+// so the returned context works for that package too.
+//
+//    myClient := &http.Client{}
+//    ctx := oidc.ClientContext(parentContext, myClient)
+//
+//    // This will use the custom client
+//    provider, err := oidc.NewProvider(ctx, "https://accounts.example.com")
+//
+func ClientContext(ctx context.Context, client *http.Client) context.Context {
+	return context.WithValue(ctx, oauth2.HTTPClient, client)
+}
+
+func doRequest(ctx context.Context, req *http.Request) (*http.Response, error) {
+	client := http.DefaultClient
+	if c, ok := ctx.Value(oauth2.HTTPClient).(*http.Client); ok {
+		client = c
+	}
+	return client.Do(req.WithContext(ctx))
+}
+
+// Provider represents an OpenID Connect server's configuration.
+type Provider struct {
+	issuer      string
+	authURL     string
+	tokenURL    string
+	userInfoURL string
+
+	// Raw claims returned by the server.
+	rawClaims []byte
+
+	remoteKeySet KeySet
+}
+
+type cachedKeys struct {
+	keys   []jose.JSONWebKey
+	expiry time.Time
+}
+
+type providerJSON struct {
+	Issuer      string `json:"issuer"`
+	AuthURL     string `json:"authorization_endpoint"`
+	TokenURL    string `json:"token_endpoint"`
+	JWKSURL     string `json:"jwks_uri"`
+	UserInfoURL string `json:"userinfo_endpoint"`
+}
+
+// NewProvider uses the OpenID Connect discovery mechanism to construct a Provider.
+//
+// The issuer is the URL identifier for the service. For example: "https://accounts.google.com"
+// or "https://login.salesforce.com".
+func NewProvider(ctx context.Context, issuer string) (*Provider, error) {
+	wellKnown := strings.TrimSuffix(issuer, "/") + "/.well-known/openid-configuration"
+	req, err := http.NewRequest("GET", wellKnown, nil)
+	if err != nil {
+		return nil, err
+	}
+	resp, err := doRequest(ctx, req)
+	if err != nil {
+		return nil, err
+	}
+	defer resp.Body.Close()
+
+	body, err := ioutil.ReadAll(resp.Body)
+	if err != nil {
+		return nil, fmt.Errorf("unable to read response body: %v", err)
+	}
+
+	if resp.StatusCode != http.StatusOK {
+		return nil, fmt.Errorf("%s: %s", resp.Status, body)
+	}
+
+	var p providerJSON
+	err = unmarshalResp(resp, body, &p)
+	if err != nil {
+		return nil, fmt.Errorf("oidc: failed to decode provider discovery object: %v", err)
+	}
+
+	if p.Issuer != issuer {
+		return nil, fmt.Errorf("oidc: issuer did not match the issuer returned by provider, expected %q got %q", issuer, p.Issuer)
+	}
+	return &Provider{
+		issuer:       p.Issuer,
+		authURL:      p.AuthURL,
+		tokenURL:     p.TokenURL,
+		userInfoURL:  p.UserInfoURL,
+		rawClaims:    body,
+		remoteKeySet: NewRemoteKeySet(ctx, p.JWKSURL),
+	}, nil
+}
+
+// Claims unmarshals raw fields returned by the server during discovery.
+//
+//    var claims struct {
+//        ScopesSupported []string `json:"scopes_supported"`
+//        ClaimsSupported []string `json:"claims_supported"`
+//    }
+//
+//    if err := provider.Claims(&claims); err != nil {
+//        // handle unmarshaling error
+//    }
+//
+// For a list of fields defined by the OpenID Connect spec see:
+// https://openid.net/specs/openid-connect-discovery-1_0.html#ProviderMetadata
+func (p *Provider) Claims(v interface{}) error {
+	if p.rawClaims == nil {
+		return errors.New("oidc: claims not set")
+	}
+	return json.Unmarshal(p.rawClaims, v)
+}
+
+// Endpoint returns the OAuth2 auth and token endpoints for the given provider.
+func (p *Provider) Endpoint() oauth2.Endpoint {
+	return oauth2.Endpoint{AuthURL: p.authURL, TokenURL: p.tokenURL}
+}
+
+// UserInfo represents the OpenID Connect userinfo claims.
+type UserInfo struct {
+	Subject       string `json:"sub"`
+	Profile       string `json:"profile"`
+	Email         string `json:"email"`
+	EmailVerified bool   `json:"email_verified"`
+
+	claims []byte
+}
+
+// Claims unmarshals the raw JSON object claims into the provided object.
+func (u *UserInfo) Claims(v interface{}) error {
+	if u.claims == nil {
+		return errors.New("oidc: claims not set")
+	}
+	return json.Unmarshal(u.claims, v)
+}
+
+// UserInfo uses the token source to query the provider's user info endpoint.
+func (p *Provider) UserInfo(ctx context.Context, tokenSource oauth2.TokenSource) (*UserInfo, error) {
+	if p.userInfoURL == "" {
+		return nil, errors.New("oidc: user info endpoint is not supported by this provider")
+	}
+
+	req, err := http.NewRequest("GET", p.userInfoURL, nil)
+	if err != nil {
+		return nil, fmt.Errorf("oidc: create GET request: %v", err)
+	}
+
+	token, err := tokenSource.Token()
+	if err != nil {
+		return nil, fmt.Errorf("oidc: get access token: %v", err)
+	}
+	token.SetAuthHeader(req)
+
+	resp, err := doRequest(ctx, req)
+	if err != nil {
+		return nil, err
+	}
+	defer resp.Body.Close()
+	body, err := ioutil.ReadAll(resp.Body)
+	if err != nil {
+		return nil, err
+	}
+	if resp.StatusCode != http.StatusOK {
+		return nil, fmt.Errorf("%s: %s", resp.Status, body)
+	}
+
+	var userInfo UserInfo
+	if err := json.Unmarshal(body, &userInfo); err != nil {
+		return nil, fmt.Errorf("oidc: failed to decode userinfo: %v", err)
+	}
+	userInfo.claims = body
+	return &userInfo, nil
+}
+
+// IDToken is an OpenID Connect extension that provides a predictable representation
+// of an authorization event.
+//
+// The ID Token only holds fields OpenID Connect requires. To access additional
+// claims returned by the server, use the Claims method.
+type IDToken struct {
+	// The URL of the server which issued this token. OpenID Connect
+	// requires this value always be identical to the URL used for
+	// initial discovery.
+	//
+	// Note: Because of a known issue with Google Accounts' implementation
+	// this value may differ when using Google.
+	//
+	// See: https://developers.google.com/identity/protocols/OpenIDConnect#obtainuserinfo
+	Issuer string
+
+	// The client ID, or set of client IDs, that this token is issued for. For
+	// common uses, this is the client that initialized the auth flow.
+	//
+	// This package ensures the audience contains an expected value.
+	Audience []string
+
+	// A unique string which identifies the end user.
+	Subject string
+
+	// Expiry of the token. Ths package will not process tokens that have
+	// expired unless that validation is explicitly turned off.
+	Expiry time.Time
+	// When the token was issued by the provider.
+	IssuedAt time.Time
+
+	// Initial nonce provided during the authentication redirect.
+	//
+	// This package does NOT provided verification on the value of this field
+	// and it's the user's responsibility to ensure it contains a valid value.
+	Nonce string
+
+	// at_hash claim, if set in the ID token. Callers can verify an access token
+	// that corresponds to the ID token using the VerifyAccessToken method.
+	AccessTokenHash string
+
+	// signature algorithm used for ID token, needed to compute a verification hash of an
+	// access token
+	sigAlgorithm string
+
+	// Raw payload of the id_token.
+	claims []byte
+
+	// Map of distributed claim names to claim sources
+	distributedClaims map[string]claimSource
+}
+
+// Claims unmarshals the raw JSON payload of the ID Token into a provided struct.
+//
+//		idToken, err := idTokenVerifier.Verify(rawIDToken)
+//		if err != nil {
+//			// handle error
+//		}
+//		var claims struct {
+//			Email         string `json:"email"`
+//			EmailVerified bool   `json:"email_verified"`
+//		}
+//		if err := idToken.Claims(&claims); err != nil {
+//			// handle error
+//		}
+//
+func (i *IDToken) Claims(v interface{}) error {
+	if i.claims == nil {
+		return errors.New("oidc: claims not set")
+	}
+	return json.Unmarshal(i.claims, v)
+}
+
+// VerifyAccessToken verifies that the hash of the access token that corresponds to the iD token
+// matches the hash in the id token. It returns an error if the hashes  don't match.
+// It is the caller's responsibility to ensure that the optional access token hash is present for the ID token
+// before calling this method. See https://openid.net/specs/openid-connect-core-1_0.html#CodeIDToken
+func (i *IDToken) VerifyAccessToken(accessToken string) error {
+	if i.AccessTokenHash == "" {
+		return errNoAtHash
+	}
+	var h hash.Hash
+	switch i.sigAlgorithm {
+	case RS256, ES256, PS256:
+		h = sha256.New()
+	case RS384, ES384, PS384:
+		h = sha512.New384()
+	case RS512, ES512, PS512:
+		h = sha512.New()
+	default:
+		return fmt.Errorf("oidc: unsupported signing algorithm %q", i.sigAlgorithm)
+	}
+	h.Write([]byte(accessToken)) // hash documents that Write will never return an error
+	sum := h.Sum(nil)[:h.Size()/2]
+	actual := base64.RawURLEncoding.EncodeToString(sum)
+	if actual != i.AccessTokenHash {
+		return errInvalidAtHash
+	}
+	return nil
+}
+
+type idToken struct {
+	Issuer       string                 `json:"iss"`
+	Subject      string                 `json:"sub"`
+	Audience     audience               `json:"aud"`
+	Expiry       jsonTime               `json:"exp"`
+	IssuedAt     jsonTime               `json:"iat"`
+	NotBefore    *jsonTime              `json:"nbf"`
+	Nonce        string                 `json:"nonce"`
+	AtHash       string                 `json:"at_hash"`
+	ClaimNames   map[string]string      `json:"_claim_names"`
+	ClaimSources map[string]claimSource `json:"_claim_sources"`
+}
+
+type claimSource struct {
+	Endpoint    string `json:"endpoint"`
+	AccessToken string `json:"access_token"`
+}
+
+type audience []string
+
+func (a *audience) UnmarshalJSON(b []byte) error {
+	var s string
+	if json.Unmarshal(b, &s) == nil {
+		*a = audience{s}
+		return nil
+	}
+	var auds []string
+	if err := json.Unmarshal(b, &auds); err != nil {
+		return err
+	}
+	*a = audience(auds)
+	return nil
+}
+
+type jsonTime time.Time
+
+func (j *jsonTime) UnmarshalJSON(b []byte) error {
+	var n json.Number
+	if err := json.Unmarshal(b, &n); err != nil {
+		return err
+	}
+	var unix int64
+
+	if t, err := n.Int64(); err == nil {
+		unix = t
+	} else {
+		f, err := n.Float64()
+		if err != nil {
+			return err
+		}
+		unix = int64(f)
+	}
+	*j = jsonTime(time.Unix(unix, 0))
+	return nil
+}
+
+func unmarshalResp(r *http.Response, body []byte, v interface{}) error {
+	err := json.Unmarshal(body, &v)
+	if err == nil {
+		return nil
+	}
+	ct := r.Header.Get("Content-Type")
+	mediaType, _, parseErr := mime.ParseMediaType(ct)
+	if parseErr == nil && mediaType == "application/json" {
+		return fmt.Errorf("got Content-Type = application/json, but could not unmarshal as JSON: %v", err)
+	}
+	return fmt.Errorf("expected Content-Type = application/json, got %q: %v", ct, err)
+}
diff --git a/vendor/github.com/coreos/go-oidc/test b/vendor/github.com/coreos/go-oidc/test
new file mode 100644
index 000000000..b262d0e75
--- /dev/null
+++ b/vendor/github.com/coreos/go-oidc/test
@@ -0,0 +1,16 @@
+#!/bin/bash
+
+set -e
+
+# Filter out any files with a !golint build tag.
+LINTABLE=$( go list -tags=golint -f '
+  {{- range $i, $file := .GoFiles -}}
+    {{ $file }} {{ end }}
+  {{ range $i, $file := .TestGoFiles -}}
+    {{ $file }} {{ end }}' github.com/coreos/go-oidc )
+
+go test -v -i -race github.com/coreos/go-oidc/...
+go test -v -race github.com/coreos/go-oidc/...
+golint -set_exit_status $LINTABLE
+go vet github.com/coreos/go-oidc/...
+go build -v ./example/...
diff --git a/vendor/github.com/coreos/go-oidc/verify.go b/vendor/github.com/coreos/go-oidc/verify.go
new file mode 100644
index 000000000..ff7555db7
--- /dev/null
+++ b/vendor/github.com/coreos/go-oidc/verify.go
@@ -0,0 +1,327 @@
+package oidc
+
+import (
+	"bytes"
+	"context"
+	"encoding/base64"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"io/ioutil"
+	"net/http"
+	"strings"
+	"time"
+
+	"golang.org/x/oauth2"
+	jose "gopkg.in/square/go-jose.v2"
+)
+
+const (
+	issuerGoogleAccounts         = "https://accounts.google.com"
+	issuerGoogleAccountsNoScheme = "accounts.google.com"
+)
+
+// KeySet is a set of publc JSON Web Keys that can be used to validate the signature
+// of JSON web tokens. This is expected to be backed by a remote key set through
+// provider metadata discovery or an in-memory set of keys delivered out-of-band.
+type KeySet interface {
+	// VerifySignature parses the JSON web token, verifies the signature, and returns
+	// the raw payload. Header and claim fields are validated by other parts of the
+	// package. For example, the KeySet does not need to check values such as signature
+	// algorithm, issuer, and audience since the IDTokenVerifier validates these values
+	// independently.
+	//
+	// If VerifySignature makes HTTP requests to verify the token, it's expected to
+	// use any HTTP client associated with the context through ClientContext.
+	VerifySignature(ctx context.Context, jwt string) (payload []byte, err error)
+}
+
+// IDTokenVerifier provides verification for ID Tokens.
+type IDTokenVerifier struct {
+	keySet KeySet
+	config *Config
+	issuer string
+}
+
+// NewVerifier returns a verifier manually constructed from a key set and issuer URL.
+//
+// It's easier to use provider discovery to construct an IDTokenVerifier than creating
+// one directly. This method is intended to be used with provider that don't support
+// metadata discovery, or avoiding round trips when the key set URL is already known.
+//
+// This constructor can be used to create a verifier directly using the issuer URL and
+// JSON Web Key Set URL without using discovery:
+//
+//		keySet := oidc.NewRemoteKeySet(ctx, "https://www.googleapis.com/oauth2/v3/certs")
+//		verifier := oidc.NewVerifier("https://accounts.google.com", keySet, config)
+//
+// Since KeySet is an interface, this constructor can also be used to supply custom
+// public key sources. For example, if a user wanted to supply public keys out-of-band
+// and hold them statically in-memory:
+//
+//		// Custom KeySet implementation.
+//		keySet := newStatisKeySet(publicKeys...)
+//
+//		// Verifier uses the custom KeySet implementation.
+//		verifier := oidc.NewVerifier("https://auth.example.com", keySet, config)
+//
+func NewVerifier(issuerURL string, keySet KeySet, config *Config) *IDTokenVerifier {
+	return &IDTokenVerifier{keySet: keySet, config: config, issuer: issuerURL}
+}
+
+// Config is the configuration for an IDTokenVerifier.
+type Config struct {
+	// Expected audience of the token. For a majority of the cases this is expected to be
+	// the ID of the client that initialized the login flow. It may occasionally differ if
+	// the provider supports the authorizing party (azp) claim.
+	//
+	// If not provided, users must explicitly set SkipClientIDCheck.
+	ClientID string
+	// If specified, only this set of algorithms may be used to sign the JWT.
+	//
+	// Since many providers only support RS256, SupportedSigningAlgs defaults to this value.
+	SupportedSigningAlgs []string
+
+	// If true, no ClientID check performed. Must be true if ClientID field is empty.
+	SkipClientIDCheck bool
+	// If true, token expiry is not checked.
+	SkipExpiryCheck bool
+
+	// SkipIssuerCheck is intended for specialized cases where the the caller wishes to
+	// defer issuer validation. When enabled, callers MUST independently verify the Token's
+	// Issuer is a known good value.
+	//
+	// Mismatched issuers often indicate client mis-configuration. If mismatches are
+	// unexpected, evaluate if the provided issuer URL is incorrect instead of enabling
+	// this option.
+	SkipIssuerCheck bool
+
+	// Time function to check Token expiry. Defaults to time.Now
+	Now func() time.Time
+}
+
+// Verifier returns an IDTokenVerifier that uses the provider's key set to verify JWTs.
+//
+// The returned IDTokenVerifier is tied to the Provider's context and its behavior is
+// undefined once the Provider's context is canceled.
+func (p *Provider) Verifier(config *Config) *IDTokenVerifier {
+	return NewVerifier(p.issuer, p.remoteKeySet, config)
+}
+
+func parseJWT(p string) ([]byte, error) {
+	parts := strings.Split(p, ".")
+	if len(parts) < 2 {
+		return nil, fmt.Errorf("oidc: malformed jwt, expected 3 parts got %d", len(parts))
+	}
+	payload, err := base64.RawURLEncoding.DecodeString(parts[1])
+	if err != nil {
+		return nil, fmt.Errorf("oidc: malformed jwt payload: %v", err)
+	}
+	return payload, nil
+}
+
+func contains(sli []string, ele string) bool {
+	for _, s := range sli {
+		if s == ele {
+			return true
+		}
+	}
+	return false
+}
+
+// Returns the Claims from the distributed JWT token
+func resolveDistributedClaim(ctx context.Context, verifier *IDTokenVerifier, src claimSource) ([]byte, error) {
+	req, err := http.NewRequest("GET", src.Endpoint, nil)
+	if err != nil {
+		return nil, fmt.Errorf("malformed request: %v", err)
+	}
+	if src.AccessToken != "" {
+		req.Header.Set("Authorization", "Bearer "+src.AccessToken)
+	}
+
+	resp, err := doRequest(ctx, req)
+	if err != nil {
+		return nil, fmt.Errorf("oidc: Request to endpoint failed: %v", err)
+	}
+	defer resp.Body.Close()
+
+	body, err := ioutil.ReadAll(resp.Body)
+	if err != nil {
+		return nil, fmt.Errorf("unable to read response body: %v", err)
+	}
+
+	if resp.StatusCode != http.StatusOK {
+		return nil, fmt.Errorf("oidc: request failed: %v", resp.StatusCode)
+	}
+
+	token, err := verifier.Verify(ctx, string(body))
+	if err != nil {
+		return nil, fmt.Errorf("malformed response body: %v", err)
+	}
+
+	return token.claims, nil
+}
+
+func parseClaim(raw []byte, name string, v interface{}) error {
+	var parsed map[string]json.RawMessage
+	if err := json.Unmarshal(raw, &parsed); err != nil {
+		return err
+	}
+
+	val, ok := parsed[name]
+	if !ok {
+		return fmt.Errorf("claim doesn't exist: %s", name)
+	}
+
+	return json.Unmarshal([]byte(val), v)
+}
+
+// Verify parses a raw ID Token, verifies it's been signed by the provider, preforms
+// any additional checks depending on the Config, and returns the payload.
+//
+// Verify does NOT do nonce validation, which is the callers responsibility.
+//
+// See: https://openid.net/specs/openid-connect-core-1_0.html#IDTokenValidation
+//
+//    oauth2Token, err := oauth2Config.Exchange(ctx, r.URL.Query().Get("code"))
+//    if err != nil {
+//        // handle error
+//    }
+//
+//    // Extract the ID Token from oauth2 token.
+//    rawIDToken, ok := oauth2Token.Extra("id_token").(string)
+//    if !ok {
+//        // handle error
+//    }
+//
+//    token, err := verifier.Verify(ctx, rawIDToken)
+//
+func (v *IDTokenVerifier) Verify(ctx context.Context, rawIDToken string) (*IDToken, error) {
+	jws, err := jose.ParseSigned(rawIDToken)
+	if err != nil {
+		return nil, fmt.Errorf("oidc: malformed jwt: %v", err)
+	}
+
+	// Throw out tokens with invalid claims before trying to verify the token. This lets
+	// us do cheap checks before possibly re-syncing keys.
+	payload, err := parseJWT(rawIDToken)
+	if err != nil {
+		return nil, fmt.Errorf("oidc: malformed jwt: %v", err)
+	}
+	var token idToken
+	if err := json.Unmarshal(payload, &token); err != nil {
+		return nil, fmt.Errorf("oidc: failed to unmarshal claims: %v", err)
+	}
+
+	distributedClaims := make(map[string]claimSource)
+
+	//step through the token to map claim names to claim sources"
+	for cn, src := range token.ClaimNames {
+		if src == "" {
+			return nil, fmt.Errorf("oidc: failed to obtain source from claim name")
+		}
+		s, ok := token.ClaimSources[src]
+		if !ok {
+			return nil, fmt.Errorf("oidc: source does not exist")
+		}
+		distributedClaims[cn] = s
+	}
+
+	t := &IDToken{
+		Issuer:            token.Issuer,
+		Subject:           token.Subject,
+		Audience:          []string(token.Audience),
+		Expiry:            time.Time(token.Expiry),
+		IssuedAt:          time.Time(token.IssuedAt),
+		Nonce:             token.Nonce,
+		AccessTokenHash:   token.AtHash,
+		claims:            payload,
+		distributedClaims: distributedClaims,
+	}
+
+	// Check issuer.
+	if !v.config.SkipIssuerCheck && t.Issuer != v.issuer {
+		// Google sometimes returns "accounts.google.com" as the issuer claim instead of
+		// the required "https://accounts.google.com". Detect this case and allow it only
+		// for Google.
+		//
+		// We will not add hooks to let other providers go off spec like this.
+		if !(v.issuer == issuerGoogleAccounts && t.Issuer == issuerGoogleAccountsNoScheme) {
+			return nil, fmt.Errorf("oidc: id token issued by a different provider, expected %q got %q", v.issuer, t.Issuer)
+		}
+	}
+
+	// If a client ID has been provided, make sure it's part of the audience. SkipClientIDCheck must be true if ClientID is empty.
+	//
+	// This check DOES NOT ensure that the ClientID is the party to which the ID Token was issued (i.e. Authorized party).
+	if !v.config.SkipClientIDCheck {
+		if v.config.ClientID != "" {
+			if !contains(t.Audience, v.config.ClientID) {
+				return nil, fmt.Errorf("oidc: expected audience %q got %q", v.config.ClientID, t.Audience)
+			}
+		} else {
+			return nil, fmt.Errorf("oidc: invalid configuration, clientID must be provided or SkipClientIDCheck must be set")
+		}
+	}
+
+	// If a SkipExpiryCheck is false, make sure token is not expired.
+	if !v.config.SkipExpiryCheck {
+		now := time.Now
+		if v.config.Now != nil {
+			now = v.config.Now
+		}
+		nowTime := now()
+
+		if t.Expiry.Before(nowTime) {
+			return nil, fmt.Errorf("oidc: token is expired (Token Expiry: %v)", t.Expiry)
+		}
+
+		// If nbf claim is provided in token, ensure that it is indeed in the past.
+		if token.NotBefore != nil {
+			nbfTime := time.Time(*token.NotBefore)
+			leeway := 1 * time.Minute
+
+			if nowTime.Add(leeway).Before(nbfTime) {
+				return nil, fmt.Errorf("oidc: current time %v before the nbf (not before) time: %v", nowTime, nbfTime)
+			}
+		}
+	}
+
+	switch len(jws.Signatures) {
+	case 0:
+		return nil, fmt.Errorf("oidc: id token not signed")
+	case 1:
+	default:
+		return nil, fmt.Errorf("oidc: multiple signatures on id token not supported")
+	}
+
+	sig := jws.Signatures[0]
+	supportedSigAlgs := v.config.SupportedSigningAlgs
+	if len(supportedSigAlgs) == 0 {
+		supportedSigAlgs = []string{RS256}
+	}
+
+	if !contains(supportedSigAlgs, sig.Header.Algorithm) {
+		return nil, fmt.Errorf("oidc: id token signed with unsupported algorithm, expected %q got %q", supportedSigAlgs, sig.Header.Algorithm)
+	}
+
+	t.sigAlgorithm = sig.Header.Algorithm
+
+	gotPayload, err := v.keySet.VerifySignature(ctx, rawIDToken)
+	if err != nil {
+		return nil, fmt.Errorf("failed to verify signature: %v", err)
+	}
+
+	// Ensure that the payload returned by the square actually matches the payload parsed earlier.
+	if !bytes.Equal(gotPayload, payload) {
+		return nil, errors.New("oidc: internal error, payload parsed did not match previous payload")
+	}
+
+	return t, nil
+}
+
+// Nonce returns an auth code option which requires the ID Token created by the
+// OpenID Connect provider to contain the specified nonce.
+func Nonce(nonce string) oauth2.AuthCodeOption {
+	return oauth2.SetAuthURLParam("nonce", nonce)
+}
diff --git a/vendor/github.com/dgrijalva/jwt-go/.gitignore b/vendor/github.com/dgrijalva/jwt-go/.gitignore
new file mode 100644
index 000000000..80bed650e
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/.gitignore
@@ -0,0 +1,4 @@
+.DS_Store
+bin
+
+
diff --git a/vendor/github.com/dgrijalva/jwt-go/.travis.yml b/vendor/github.com/dgrijalva/jwt-go/.travis.yml
new file mode 100644
index 000000000..1027f56cd
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/.travis.yml
@@ -0,0 +1,13 @@
+language: go
+
+script:
+    - go vet ./...
+    - go test -v ./...
+
+go:
+  - 1.3
+  - 1.4
+  - 1.5
+  - 1.6
+  - 1.7
+  - tip
diff --git a/vendor/github.com/dgrijalva/jwt-go/LICENSE b/vendor/github.com/dgrijalva/jwt-go/LICENSE
new file mode 100644
index 000000000..df83a9c2f
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/LICENSE
@@ -0,0 +1,8 @@
+Copyright (c) 2012 Dave Grijalva
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
diff --git a/vendor/github.com/dgrijalva/jwt-go/MIGRATION_GUIDE.md b/vendor/github.com/dgrijalva/jwt-go/MIGRATION_GUIDE.md
new file mode 100644
index 000000000..7fc1f793c
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/MIGRATION_GUIDE.md
@@ -0,0 +1,97 @@
+## Migration Guide from v2 -> v3
+
+Version 3 adds several new, frequently requested features.  To do so, it introduces a few breaking changes.  We've worked to keep these as minimal as possible.  This guide explains the breaking changes and how you can quickly update your code.
+
+### `Token.Claims` is now an interface type
+
+The most requested feature from the 2.0 verison of this library was the ability to provide a custom type to the JSON parser for claims. This was implemented by introducing a new interface, `Claims`, to replace `map[string]interface{}`.  We also included two concrete implementations of `Claims`: `MapClaims` and `StandardClaims`.
+
+`MapClaims` is an alias for `map[string]interface{}` with built in validation behavior.  It is the default claims type when using `Parse`.  The usage is unchanged except you must type cast the claims property.
+
+The old example for parsing a token looked like this..
+
+```go
+	if token, err := jwt.Parse(tokenString, keyLookupFunc); err == nil {
+		fmt.Printf("Token for user %v expires %v", token.Claims["user"], token.Claims["exp"])
+	}
+```
+
+is now directly mapped to...
+
+```go
+	if token, err := jwt.Parse(tokenString, keyLookupFunc); err == nil {
+		claims := token.Claims.(jwt.MapClaims)
+		fmt.Printf("Token for user %v expires %v", claims["user"], claims["exp"])
+	}
+```
+
+`StandardClaims` is designed to be embedded in your custom type.  You can supply a custom claims type with the new `ParseWithClaims` function.  Here's an example of using a custom claims type.
+
+```go
+	type MyCustomClaims struct {
+		User string
+		*StandardClaims
+	}
+	
+	if token, err := jwt.ParseWithClaims(tokenString, &MyCustomClaims{}, keyLookupFunc); err == nil {
+		claims := token.Claims.(*MyCustomClaims)
+		fmt.Printf("Token for user %v expires %v", claims.User, claims.StandardClaims.ExpiresAt)
+	}
+```
+
+### `ParseFromRequest` has been moved
+
+To keep this library focused on the tokens without becoming overburdened with complex request processing logic, `ParseFromRequest` and its new companion `ParseFromRequestWithClaims` have been moved to a subpackage, `request`.  The method signatues have also been augmented to receive a new argument: `Extractor`.
+
+`Extractors` do the work of picking the token string out of a request.  The interface is simple and composable.
+
+This simple parsing example:
+
+```go
+	if token, err := jwt.ParseFromRequest(tokenString, req, keyLookupFunc); err == nil {
+		fmt.Printf("Token for user %v expires %v", token.Claims["user"], token.Claims["exp"])
+	}
+```
+
+is directly mapped to:
+
+```go
+	if token, err := request.ParseFromRequest(req, request.OAuth2Extractor, keyLookupFunc); err == nil {
+		claims := token.Claims.(jwt.MapClaims)
+		fmt.Printf("Token for user %v expires %v", claims["user"], claims["exp"])
+	}
+```
+
+There are several concrete `Extractor` types provided for your convenience:
+
+* `HeaderExtractor` will search a list of headers until one contains content.
+* `ArgumentExtractor` will search a list of keys in request query and form arguments until one contains content.
+* `MultiExtractor` will try a list of `Extractors` in order until one returns content.
+* `AuthorizationHeaderExtractor` will look in the `Authorization` header for a `Bearer` token.
+* `OAuth2Extractor` searches the places an OAuth2 token would be specified (per the spec): `Authorization` header and `access_token` argument
+* `PostExtractionFilter` wraps an `Extractor`, allowing you to process the content before it's parsed.  A simple example is stripping the `Bearer ` text from a header
+
+
+### RSA signing methods no longer accept `[]byte` keys
+
+Due to a [critical vulnerability](https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/), we've decided the convenience of accepting `[]byte` instead of `rsa.PublicKey` or `rsa.PrivateKey` isn't worth the risk of misuse.
+
+To replace this behavior, we've added two helper methods: `ParseRSAPrivateKeyFromPEM(key []byte) (*rsa.PrivateKey, error)` and `ParseRSAPublicKeyFromPEM(key []byte) (*rsa.PublicKey, error)`.  These are just simple helpers for unpacking PEM encoded PKCS1 and PKCS8 keys. If your keys are encoded any other way, all you need to do is convert them to the `crypto/rsa` package's types.
+
+```go 
+	func keyLookupFunc(*Token) (interface{}, error) {
+		// Don't forget to validate the alg is what you expect:
+		if _, ok := token.Method.(*jwt.SigningMethodRSA); !ok {
+			return nil, fmt.Errorf("Unexpected signing method: %v", token.Header["alg"])
+		}
+		
+		// Look up key 
+		key, err := lookupPublicKey(token.Header["kid"])
+		if err != nil {
+			return nil, err
+		}
+		
+		// Unpack key from PEM encoded PKCS8
+		return jwt.ParseRSAPublicKeyFromPEM(key)
+	}
+```
diff --git a/vendor/github.com/dgrijalva/jwt-go/README.md b/vendor/github.com/dgrijalva/jwt-go/README.md
new file mode 100644
index 000000000..d358d881b
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/README.md
@@ -0,0 +1,100 @@
+# jwt-go
+
+[![Build Status](https://travis-ci.org/dgrijalva/jwt-go.svg?branch=master)](https://travis-ci.org/dgrijalva/jwt-go)
+[![GoDoc](https://godoc.org/github.com/dgrijalva/jwt-go?status.svg)](https://godoc.org/github.com/dgrijalva/jwt-go)
+
+A [go](http://www.golang.org) (or 'golang' for search engine friendliness) implementation of [JSON Web Tokens](http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html)
+
+**NEW VERSION COMING:** There have been a lot of improvements suggested since the version 3.0.0 released in 2016. I'm working now on cutting two different releases: 3.2.0 will contain any non-breaking changes or enhancements. 4.0.0 will follow shortly which will include breaking changes. See the 4.0.0 milestone to get an idea of what's coming. If you have other ideas, or would like to participate in 4.0.0, now's the time. If you depend on this library and don't want to be interrupted, I recommend you use your dependency mangement tool to pin to version 3. 
+
+**SECURITY NOTICE:** Some older versions of Go have a security issue in the cryotp/elliptic. Recommendation is to upgrade to at least 1.8.3. See issue #216 for more detail.
+
+**SECURITY NOTICE:** It's important that you [validate the `alg` presented is what you expect](https://auth0.com/blog/2015/03/31/critical-vulnerabilities-in-json-web-token-libraries/). This library attempts to make it easy to do the right thing by requiring key types match the expected alg, but you should take the extra step to verify it in your usage.  See the examples provided.
+
+## What the heck is a JWT?
+
+JWT.io has [a great introduction](https://jwt.io/introduction) to JSON Web Tokens.
+
+In short, it's a signed JSON object that does something useful (for example, authentication).  It's commonly used for `Bearer` tokens in Oauth 2.  A token is made of three parts, separated by `.`'s.  The first two parts are JSON objects, that have been [base64url](http://tools.ietf.org/html/rfc4648) encoded.  The last part is the signature, encoded the same way.
+
+The first part is called the header.  It contains the necessary information for verifying the last part, the signature.  For example, which encryption method was used for signing and what key was used.
+
+The part in the middle is the interesting bit.  It's called the Claims and contains the actual stuff you care about.  Refer to [the RFC](http://self-issued.info/docs/draft-jones-json-web-token.html) for information about reserved keys and the proper way to add your own.
+
+## What's in the box?
+
+This library supports the parsing and verification as well as the generation and signing of JWTs.  Current supported signing algorithms are HMAC SHA, RSA, RSA-PSS, and ECDSA, though hooks are present for adding your own.
+
+## Examples
+
+See [the project documentation](https://godoc.org/github.com/dgrijalva/jwt-go) for examples of usage:
+
+* [Simple example of parsing and validating a token](https://godoc.org/github.com/dgrijalva/jwt-go#example-Parse--Hmac)
+* [Simple example of building and signing a token](https://godoc.org/github.com/dgrijalva/jwt-go#example-New--Hmac)
+* [Directory of Examples](https://godoc.org/github.com/dgrijalva/jwt-go#pkg-examples)
+
+## Extensions
+
+This library publishes all the necessary components for adding your own signing methods.  Simply implement the `SigningMethod` interface and register a factory method using `RegisterSigningMethod`.  
+
+Here's an example of an extension that integrates with the Google App Engine signing tools: https://github.com/someone1/gcp-jwt-go
+
+## Compliance
+
+This library was last reviewed to comply with [RTF 7519](http://www.rfc-editor.org/info/rfc7519) dated May 2015 with a few notable differences:
+
+* In order to protect against accidental use of [Unsecured JWTs](http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html#UnsecuredJWT), tokens using `alg=none` will only be accepted if the constant `jwt.UnsafeAllowNoneSignatureType` is provided as the key.
+
+## Project Status & Versioning
+
+This library is considered production ready.  Feedback and feature requests are appreciated.  The API should be considered stable.  There should be very few backwards-incompatible changes outside of major version updates (and only with good reason).
+
+This project uses [Semantic Versioning 2.0.0](http://semver.org).  Accepted pull requests will land on `master`.  Periodically, versions will be tagged from `master`.  You can find all the releases on [the project releases page](https://github.com/dgrijalva/jwt-go/releases).
+
+While we try to make it obvious when we make breaking changes, there isn't a great mechanism for pushing announcements out to users.  You may want to use this alternative package include: `gopkg.in/dgrijalva/jwt-go.v3`.  It will do the right thing WRT semantic versioning.
+
+**BREAKING CHANGES:*** 
+* Version 3.0.0 includes _a lot_ of changes from the 2.x line, including a few that break the API.  We've tried to break as few things as possible, so there should just be a few type signature changes.  A full list of breaking changes is available in `VERSION_HISTORY.md`.  See `MIGRATION_GUIDE.md` for more information on updating your code.
+
+## Usage Tips
+
+### Signing vs Encryption
+
+A token is simply a JSON object that is signed by its author. this tells you exactly two things about the data:
+
+* The author of the token was in the possession of the signing secret
+* The data has not been modified since it was signed
+
+It's important to know that JWT does not provide encryption, which means anyone who has access to the token can read its contents. If you need to protect (encrypt) the data, there is a companion spec, `JWE`, that provides this functionality. JWE is currently outside the scope of this library.
+
+### Choosing a Signing Method
+
+There are several signing methods available, and you should probably take the time to learn about the various options before choosing one.  The principal design decision is most likely going to be symmetric vs asymmetric.
+
+Symmetric signing methods, such as HSA, use only a single secret. This is probably the simplest signing method to use since any `[]byte` can be used as a valid secret. They are also slightly computationally faster to use, though this rarely is enough to matter. Symmetric signing methods work the best when both producers and consumers of tokens are trusted, or even the same system. Since the same secret is used to both sign and validate tokens, you can't easily distribute the key for validation.
+
+Asymmetric signing methods, such as RSA, use different keys for signing and verifying tokens. This makes it possible to produce tokens with a private key, and allow any consumer to access the public key for verification.
+
+### Signing Methods and Key Types
+
+Each signing method expects a different object type for its signing keys. See the package documentation for details. Here are the most common ones:
+
+* The [HMAC signing method](https://godoc.org/github.com/dgrijalva/jwt-go#SigningMethodHMAC) (`HS256`,`HS384`,`HS512`) expect `[]byte` values for signing and validation
+* The [RSA signing method](https://godoc.org/github.com/dgrijalva/jwt-go#SigningMethodRSA) (`RS256`,`RS384`,`RS512`) expect `*rsa.PrivateKey` for signing and `*rsa.PublicKey` for validation
+* The [ECDSA signing method](https://godoc.org/github.com/dgrijalva/jwt-go#SigningMethodECDSA) (`ES256`,`ES384`,`ES512`) expect `*ecdsa.PrivateKey` for signing and `*ecdsa.PublicKey` for validation
+
+### JWT and OAuth
+
+It's worth mentioning that OAuth and JWT are not the same thing. A JWT token is simply a signed JSON object. It can be used anywhere such a thing is useful. There is some confusion, though, as JWT is the most common type of bearer token used in OAuth2 authentication.
+
+Without going too far down the rabbit hole, here's a description of the interaction of these technologies:
+
+* OAuth is a protocol for allowing an identity provider to be separate from the service a user is logging in to. For example, whenever you use Facebook to log into a different service (Yelp, Spotify, etc), you are using OAuth.
+* OAuth defines several options for passing around authentication data. One popular method is called a "bearer token". A bearer token is simply a string that _should_ only be held by an authenticated user. Thus, simply presenting this token proves your identity. You can probably derive from here why a JWT might make a good bearer token.
+* Because bearer tokens are used for authentication, it's important they're kept secret. This is why transactions that use bearer tokens typically happen over SSL.
+
+## More
+
+Documentation can be found [on godoc.org](http://godoc.org/github.com/dgrijalva/jwt-go).
+
+The command line utility included in this project (cmd/jwt) provides a straightforward example of token creation and parsing as well as a useful tool for debugging your own integration. You'll also find several implementation examples in the documentation.
diff --git a/vendor/github.com/dgrijalva/jwt-go/VERSION_HISTORY.md b/vendor/github.com/dgrijalva/jwt-go/VERSION_HISTORY.md
new file mode 100644
index 000000000..637029831
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/VERSION_HISTORY.md
@@ -0,0 +1,118 @@
+## `jwt-go` Version History
+
+#### 3.2.0
+
+* Added method `ParseUnverified` to allow users to split up the tasks of parsing and validation
+* HMAC signing method returns `ErrInvalidKeyType` instead of `ErrInvalidKey` where appropriate
+* Added options to `request.ParseFromRequest`, which allows for an arbitrary list of modifiers to parsing behavior. Initial set include `WithClaims` and `WithParser`. Existing usage of this function will continue to work as before.
+* Deprecated `ParseFromRequestWithClaims` to simplify API in the future.
+
+#### 3.1.0
+
+* Improvements to `jwt` command line tool
+* Added `SkipClaimsValidation` option to `Parser`
+* Documentation updates
+
+#### 3.0.0
+
+* **Compatibility Breaking Changes**: See MIGRATION_GUIDE.md for tips on updating your code
+	* Dropped support for `[]byte` keys when using RSA signing methods.  This convenience feature could contribute to security vulnerabilities involving mismatched key types with signing methods.
+	* `ParseFromRequest` has been moved to `request` subpackage and usage has changed
+	* The `Claims` property on `Token` is now type `Claims` instead of `map[string]interface{}`.  The default value is type `MapClaims`, which is an alias to `map[string]interface{}`.  This makes it possible to use a custom type when decoding claims.
+* Other Additions and Changes
+	* Added `Claims` interface type to allow users to decode the claims into a custom type
+	* Added `ParseWithClaims`, which takes a third argument of type `Claims`.  Use this function instead of `Parse` if you have a custom type you'd like to decode into.
+	* Dramatically improved the functionality and flexibility of `ParseFromRequest`, which is now in the `request` subpackage
+	* Added `ParseFromRequestWithClaims` which is the `FromRequest` equivalent of `ParseWithClaims`
+	* Added new interface type `Extractor`, which is used for extracting JWT strings from http requests.  Used with `ParseFromRequest` and `ParseFromRequestWithClaims`.
+	* Added several new, more specific, validation errors to error type bitmask
+	* Moved examples from README to executable example files
+	* Signing method registry is now thread safe
+	* Added new property to `ValidationError`, which contains the raw error returned by calls made by parse/verify (such as those returned by keyfunc or json parser)
+
+#### 2.7.0
+
+This will likely be the last backwards compatible release before 3.0.0, excluding essential bug fixes.
+
+* Added new option `-show` to the `jwt` command that will just output the decoded token without verifying
+* Error text for expired tokens includes how long it's been expired
+* Fixed incorrect error returned from `ParseRSAPublicKeyFromPEM`
+* Documentation updates
+
+#### 2.6.0
+
+* Exposed inner error within ValidationError
+* Fixed validation errors when using UseJSONNumber flag
+* Added several unit tests
+
+#### 2.5.0
+
+* Added support for signing method none.  You shouldn't use this.  The API tries to make this clear.
+* Updated/fixed some documentation
+* Added more helpful error message when trying to parse tokens that begin with `BEARER `
+
+#### 2.4.0
+
+* Added new type, Parser, to allow for configuration of various parsing parameters
+	* You can now specify a list of valid signing methods.  Anything outside this set will be rejected.
+	* You can now opt to use the `json.Number` type instead of `float64` when parsing token JSON
+* Added support for [Travis CI](https://travis-ci.org/dgrijalva/jwt-go)
+* Fixed some bugs with ECDSA parsing
+
+#### 2.3.0
+
+* Added support for ECDSA signing methods
+* Added support for RSA PSS signing methods (requires go v1.4)
+
+#### 2.2.0
+
+* Gracefully handle a `nil` `Keyfunc` being passed to `Parse`.  Result will now be the parsed token and an error, instead of a panic.
+
+#### 2.1.0
+
+Backwards compatible API change that was missed in 2.0.0.
+
+* The `SignedString` method on `Token` now takes `interface{}` instead of `[]byte`
+
+#### 2.0.0
+
+There were two major reasons for breaking backwards compatibility with this update.  The first was a refactor required to expand the width of the RSA and HMAC-SHA signing implementations.  There will likely be no required code changes to support this change.
+
+The second update, while unfortunately requiring a small change in integration, is required to open up this library to other signing methods.  Not all keys used for all signing methods have a single standard on-disk representation.  Requiring `[]byte` as the type for all keys proved too limiting.  Additionally, this implementation allows for pre-parsed tokens to be reused, which might matter in an application that parses a high volume of tokens with a small set of keys.  Backwards compatibilty has been maintained for passing `[]byte` to the RSA signing methods, but they will also accept `*rsa.PublicKey` and `*rsa.PrivateKey`.
+
+It is likely the only integration change required here will be to change `func(t *jwt.Token) ([]byte, error)` to `func(t *jwt.Token) (interface{}, error)` when calling `Parse`.
+
+* **Compatibility Breaking Changes**
+	* `SigningMethodHS256` is now `*SigningMethodHMAC` instead of `type struct`
+	* `SigningMethodRS256` is now `*SigningMethodRSA` instead of `type struct`
+	* `KeyFunc` now returns `interface{}` instead of `[]byte`
+	* `SigningMethod.Sign` now takes `interface{}` instead of `[]byte` for the key
+	* `SigningMethod.Verify` now takes `interface{}` instead of `[]byte` for the key
+* Renamed type `SigningMethodHS256` to `SigningMethodHMAC`.  Specific sizes are now just instances of this type.
+    * Added public package global `SigningMethodHS256`
+    * Added public package global `SigningMethodHS384`
+    * Added public package global `SigningMethodHS512`
+* Renamed type `SigningMethodRS256` to `SigningMethodRSA`.  Specific sizes are now just instances of this type.
+    * Added public package global `SigningMethodRS256`
+    * Added public package global `SigningMethodRS384`
+    * Added public package global `SigningMethodRS512`
+* Moved sample private key for HMAC tests from an inline value to a file on disk.  Value is unchanged.
+* Refactored the RSA implementation to be easier to read
+* Exposed helper methods `ParseRSAPrivateKeyFromPEM` and `ParseRSAPublicKeyFromPEM`
+
+#### 1.0.2
+
+* Fixed bug in parsing public keys from certificates
+* Added more tests around the parsing of keys for RS256
+* Code refactoring in RS256 implementation.  No functional changes
+
+#### 1.0.1
+
+* Fixed panic if RS256 signing method was passed an invalid key
+
+#### 1.0.0
+
+* First versioned release
+* API stabilized
+* Supports creating, signing, parsing, and validating JWT tokens
+* Supports RS256 and HS256 signing methods
\ No newline at end of file
diff --git a/vendor/github.com/dgrijalva/jwt-go/claims.go b/vendor/github.com/dgrijalva/jwt-go/claims.go
new file mode 100644
index 000000000..f0228f02e
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/claims.go
@@ -0,0 +1,134 @@
+package jwt
+
+import (
+	"crypto/subtle"
+	"fmt"
+	"time"
+)
+
+// For a type to be a Claims object, it must just have a Valid method that determines
+// if the token is invalid for any supported reason
+type Claims interface {
+	Valid() error
+}
+
+// Structured version of Claims Section, as referenced at
+// https://tools.ietf.org/html/rfc7519#section-4.1
+// See examples for how to use this with your own claim types
+type StandardClaims struct {
+	Audience  string `json:"aud,omitempty"`
+	ExpiresAt int64  `json:"exp,omitempty"`
+	Id        string `json:"jti,omitempty"`
+	IssuedAt  int64  `json:"iat,omitempty"`
+	Issuer    string `json:"iss,omitempty"`
+	NotBefore int64  `json:"nbf,omitempty"`
+	Subject   string `json:"sub,omitempty"`
+}
+
+// Validates time based claims "exp, iat, nbf".
+// There is no accounting for clock skew.
+// As well, if any of the above claims are not in the token, it will still
+// be considered a valid claim.
+func (c StandardClaims) Valid() error {
+	vErr := new(ValidationError)
+	now := TimeFunc().Unix()
+
+	// The claims below are optional, by default, so if they are set to the
+	// default value in Go, let's not fail the verification for them.
+	if c.VerifyExpiresAt(now, false) == false {
+		delta := time.Unix(now, 0).Sub(time.Unix(c.ExpiresAt, 0))
+		vErr.Inner = fmt.Errorf("token is expired by %v", delta)
+		vErr.Errors |= ValidationErrorExpired
+	}
+
+	if c.VerifyIssuedAt(now, false) == false {
+		vErr.Inner = fmt.Errorf("Token used before issued")
+		vErr.Errors |= ValidationErrorIssuedAt
+	}
+
+	if c.VerifyNotBefore(now, false) == false {
+		vErr.Inner = fmt.Errorf("token is not valid yet")
+		vErr.Errors |= ValidationErrorNotValidYet
+	}
+
+	if vErr.valid() {
+		return nil
+	}
+
+	return vErr
+}
+
+// Compares the aud claim against cmp.
+// If required is false, this method will return true if the value matches or is unset
+func (c *StandardClaims) VerifyAudience(cmp string, req bool) bool {
+	return verifyAud(c.Audience, cmp, req)
+}
+
+// Compares the exp claim against cmp.
+// If required is false, this method will return true if the value matches or is unset
+func (c *StandardClaims) VerifyExpiresAt(cmp int64, req bool) bool {
+	return verifyExp(c.ExpiresAt, cmp, req)
+}
+
+// Compares the iat claim against cmp.
+// If required is false, this method will return true if the value matches or is unset
+func (c *StandardClaims) VerifyIssuedAt(cmp int64, req bool) bool {
+	return verifyIat(c.IssuedAt, cmp, req)
+}
+
+// Compares the iss claim against cmp.
+// If required is false, this method will return true if the value matches or is unset
+func (c *StandardClaims) VerifyIssuer(cmp string, req bool) bool {
+	return verifyIss(c.Issuer, cmp, req)
+}
+
+// Compares the nbf claim against cmp.
+// If required is false, this method will return true if the value matches or is unset
+func (c *StandardClaims) VerifyNotBefore(cmp int64, req bool) bool {
+	return verifyNbf(c.NotBefore, cmp, req)
+}
+
+// ----- helpers
+
+func verifyAud(aud string, cmp string, required bool) bool {
+	if aud == "" {
+		return !required
+	}
+	if subtle.ConstantTimeCompare([]byte(aud), []byte(cmp)) != 0 {
+		return true
+	} else {
+		return false
+	}
+}
+
+func verifyExp(exp int64, now int64, required bool) bool {
+	if exp == 0 {
+		return !required
+	}
+	return now <= exp
+}
+
+func verifyIat(iat int64, now int64, required bool) bool {
+	if iat == 0 {
+		return !required
+	}
+	return now >= iat
+}
+
+func verifyIss(iss string, cmp string, required bool) bool {
+	if iss == "" {
+		return !required
+	}
+	if subtle.ConstantTimeCompare([]byte(iss), []byte(cmp)) != 0 {
+		return true
+	} else {
+		return false
+	}
+}
+
+func verifyNbf(nbf int64, now int64, required bool) bool {
+	if nbf == 0 {
+		return !required
+	}
+	return now >= nbf
+}
diff --git a/vendor/github.com/dgrijalva/jwt-go/doc.go b/vendor/github.com/dgrijalva/jwt-go/doc.go
new file mode 100644
index 000000000..a86dc1a3b
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/doc.go
@@ -0,0 +1,4 @@
+// Package jwt is a Go implementation of JSON Web Tokens: http://self-issued.info/docs/draft-jones-json-web-token.html
+//
+// See README.md for more info.
+package jwt
diff --git a/vendor/github.com/dgrijalva/jwt-go/ecdsa.go b/vendor/github.com/dgrijalva/jwt-go/ecdsa.go
new file mode 100644
index 000000000..f97738124
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/ecdsa.go
@@ -0,0 +1,148 @@
+package jwt
+
+import (
+	"crypto"
+	"crypto/ecdsa"
+	"crypto/rand"
+	"errors"
+	"math/big"
+)
+
+var (
+	// Sadly this is missing from crypto/ecdsa compared to crypto/rsa
+	ErrECDSAVerification = errors.New("crypto/ecdsa: verification error")
+)
+
+// Implements the ECDSA family of signing methods signing methods
+// Expects *ecdsa.PrivateKey for signing and *ecdsa.PublicKey for verification
+type SigningMethodECDSA struct {
+	Name      string
+	Hash      crypto.Hash
+	KeySize   int
+	CurveBits int
+}
+
+// Specific instances for EC256 and company
+var (
+	SigningMethodES256 *SigningMethodECDSA
+	SigningMethodES384 *SigningMethodECDSA
+	SigningMethodES512 *SigningMethodECDSA
+)
+
+func init() {
+	// ES256
+	SigningMethodES256 = &SigningMethodECDSA{"ES256", crypto.SHA256, 32, 256}
+	RegisterSigningMethod(SigningMethodES256.Alg(), func() SigningMethod {
+		return SigningMethodES256
+	})
+
+	// ES384
+	SigningMethodES384 = &SigningMethodECDSA{"ES384", crypto.SHA384, 48, 384}
+	RegisterSigningMethod(SigningMethodES384.Alg(), func() SigningMethod {
+		return SigningMethodES384
+	})
+
+	// ES512
+	SigningMethodES512 = &SigningMethodECDSA{"ES512", crypto.SHA512, 66, 521}
+	RegisterSigningMethod(SigningMethodES512.Alg(), func() SigningMethod {
+		return SigningMethodES512
+	})
+}
+
+func (m *SigningMethodECDSA) Alg() string {
+	return m.Name
+}
+
+// Implements the Verify method from SigningMethod
+// For this verify method, key must be an ecdsa.PublicKey struct
+func (m *SigningMethodECDSA) Verify(signingString, signature string, key interface{}) error {
+	var err error
+
+	// Decode the signature
+	var sig []byte
+	if sig, err = DecodeSegment(signature); err != nil {
+		return err
+	}
+
+	// Get the key
+	var ecdsaKey *ecdsa.PublicKey
+	switch k := key.(type) {
+	case *ecdsa.PublicKey:
+		ecdsaKey = k
+	default:
+		return ErrInvalidKeyType
+	}
+
+	if len(sig) != 2*m.KeySize {
+		return ErrECDSAVerification
+	}
+
+	r := big.NewInt(0).SetBytes(sig[:m.KeySize])
+	s := big.NewInt(0).SetBytes(sig[m.KeySize:])
+
+	// Create hasher
+	if !m.Hash.Available() {
+		return ErrHashUnavailable
+	}
+	hasher := m.Hash.New()
+	hasher.Write([]byte(signingString))
+
+	// Verify the signature
+	if verifystatus := ecdsa.Verify(ecdsaKey, hasher.Sum(nil), r, s); verifystatus == true {
+		return nil
+	} else {
+		return ErrECDSAVerification
+	}
+}
+
+// Implements the Sign method from SigningMethod
+// For this signing method, key must be an ecdsa.PrivateKey struct
+func (m *SigningMethodECDSA) Sign(signingString string, key interface{}) (string, error) {
+	// Get the key
+	var ecdsaKey *ecdsa.PrivateKey
+	switch k := key.(type) {
+	case *ecdsa.PrivateKey:
+		ecdsaKey = k
+	default:
+		return "", ErrInvalidKeyType
+	}
+
+	// Create the hasher
+	if !m.Hash.Available() {
+		return "", ErrHashUnavailable
+	}
+
+	hasher := m.Hash.New()
+	hasher.Write([]byte(signingString))
+
+	// Sign the string and return r, s
+	if r, s, err := ecdsa.Sign(rand.Reader, ecdsaKey, hasher.Sum(nil)); err == nil {
+		curveBits := ecdsaKey.Curve.Params().BitSize
+
+		if m.CurveBits != curveBits {
+			return "", ErrInvalidKey
+		}
+
+		keyBytes := curveBits / 8
+		if curveBits%8 > 0 {
+			keyBytes += 1
+		}
+
+		// We serialize the outpus (r and s) into big-endian byte arrays and pad
+		// them with zeros on the left to make sure the sizes work out. Both arrays
+		// must be keyBytes long, and the output must be 2*keyBytes long.
+		rBytes := r.Bytes()
+		rBytesPadded := make([]byte, keyBytes)
+		copy(rBytesPadded[keyBytes-len(rBytes):], rBytes)
+
+		sBytes := s.Bytes()
+		sBytesPadded := make([]byte, keyBytes)
+		copy(sBytesPadded[keyBytes-len(sBytes):], sBytes)
+
+		out := append(rBytesPadded, sBytesPadded...)
+
+		return EncodeSegment(out), nil
+	} else {
+		return "", err
+	}
+}
diff --git a/vendor/github.com/dgrijalva/jwt-go/ecdsa_utils.go b/vendor/github.com/dgrijalva/jwt-go/ecdsa_utils.go
new file mode 100644
index 000000000..d19624b72
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/ecdsa_utils.go
@@ -0,0 +1,67 @@
+package jwt
+
+import (
+	"crypto/ecdsa"
+	"crypto/x509"
+	"encoding/pem"
+	"errors"
+)
+
+var (
+	ErrNotECPublicKey  = errors.New("Key is not a valid ECDSA public key")
+	ErrNotECPrivateKey = errors.New("Key is not a valid ECDSA private key")
+)
+
+// Parse PEM encoded Elliptic Curve Private Key Structure
+func ParseECPrivateKeyFromPEM(key []byte) (*ecdsa.PrivateKey, error) {
+	var err error
+
+	// Parse PEM block
+	var block *pem.Block
+	if block, _ = pem.Decode(key); block == nil {
+		return nil, ErrKeyMustBePEMEncoded
+	}
+
+	// Parse the key
+	var parsedKey interface{}
+	if parsedKey, err = x509.ParseECPrivateKey(block.Bytes); err != nil {
+		return nil, err
+	}
+
+	var pkey *ecdsa.PrivateKey
+	var ok bool
+	if pkey, ok = parsedKey.(*ecdsa.PrivateKey); !ok {
+		return nil, ErrNotECPrivateKey
+	}
+
+	return pkey, nil
+}
+
+// Parse PEM encoded PKCS1 or PKCS8 public key
+func ParseECPublicKeyFromPEM(key []byte) (*ecdsa.PublicKey, error) {
+	var err error
+
+	// Parse PEM block
+	var block *pem.Block
+	if block, _ = pem.Decode(key); block == nil {
+		return nil, ErrKeyMustBePEMEncoded
+	}
+
+	// Parse the key
+	var parsedKey interface{}
+	if parsedKey, err = x509.ParsePKIXPublicKey(block.Bytes); err != nil {
+		if cert, err := x509.ParseCertificate(block.Bytes); err == nil {
+			parsedKey = cert.PublicKey
+		} else {
+			return nil, err
+		}
+	}
+
+	var pkey *ecdsa.PublicKey
+	var ok bool
+	if pkey, ok = parsedKey.(*ecdsa.PublicKey); !ok {
+		return nil, ErrNotECPublicKey
+	}
+
+	return pkey, nil
+}
diff --git a/vendor/github.com/dgrijalva/jwt-go/errors.go b/vendor/github.com/dgrijalva/jwt-go/errors.go
new file mode 100644
index 000000000..1c93024aa
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/errors.go
@@ -0,0 +1,59 @@
+package jwt
+
+import (
+	"errors"
+)
+
+// Error constants
+var (
+	ErrInvalidKey      = errors.New("key is invalid")
+	ErrInvalidKeyType  = errors.New("key is of invalid type")
+	ErrHashUnavailable = errors.New("the requested hash function is unavailable")
+)
+
+// The errors that might occur when parsing and validating a token
+const (
+	ValidationErrorMalformed        uint32 = 1 << iota // Token is malformed
+	ValidationErrorUnverifiable                        // Token could not be verified because of signing problems
+	ValidationErrorSignatureInvalid                    // Signature validation failed
+
+	// Standard Claim validation errors
+	ValidationErrorAudience      // AUD validation failed
+	ValidationErrorExpired       // EXP validation failed
+	ValidationErrorIssuedAt      // IAT validation failed
+	ValidationErrorIssuer        // ISS validation failed
+	ValidationErrorNotValidYet   // NBF validation failed
+	ValidationErrorId            // JTI validation failed
+	ValidationErrorClaimsInvalid // Generic claims validation error
+)
+
+// Helper for constructing a ValidationError with a string error message
+func NewValidationError(errorText string, errorFlags uint32) *ValidationError {
+	return &ValidationError{
+		text:   errorText,
+		Errors: errorFlags,
+	}
+}
+
+// The error from Parse if token is not valid
+type ValidationError struct {
+	Inner  error  // stores the error returned by external dependencies, i.e.: KeyFunc
+	Errors uint32 // bitfield.  see ValidationError... constants
+	text   string // errors that do not have a valid error just have text
+}
+
+// Validation error is an error type
+func (e ValidationError) Error() string {
+	if e.Inner != nil {
+		return e.Inner.Error()
+	} else if e.text != "" {
+		return e.text
+	} else {
+		return "token is invalid"
+	}
+}
+
+// No errors
+func (e *ValidationError) valid() bool {
+	return e.Errors == 0
+}
diff --git a/vendor/github.com/dgrijalva/jwt-go/hmac.go b/vendor/github.com/dgrijalva/jwt-go/hmac.go
new file mode 100644
index 000000000..addbe5d40
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/hmac.go
@@ -0,0 +1,95 @@
+package jwt
+
+import (
+	"crypto"
+	"crypto/hmac"
+	"errors"
+)
+
+// Implements the HMAC-SHA family of signing methods signing methods
+// Expects key type of []byte for both signing and validation
+type SigningMethodHMAC struct {
+	Name string
+	Hash crypto.Hash
+}
+
+// Specific instances for HS256 and company
+var (
+	SigningMethodHS256  *SigningMethodHMAC
+	SigningMethodHS384  *SigningMethodHMAC
+	SigningMethodHS512  *SigningMethodHMAC
+	ErrSignatureInvalid = errors.New("signature is invalid")
+)
+
+func init() {
+	// HS256
+	SigningMethodHS256 = &SigningMethodHMAC{"HS256", crypto.SHA256}
+	RegisterSigningMethod(SigningMethodHS256.Alg(), func() SigningMethod {
+		return SigningMethodHS256
+	})
+
+	// HS384
+	SigningMethodHS384 = &SigningMethodHMAC{"HS384", crypto.SHA384}
+	RegisterSigningMethod(SigningMethodHS384.Alg(), func() SigningMethod {
+		return SigningMethodHS384
+	})
+
+	// HS512
+	SigningMethodHS512 = &SigningMethodHMAC{"HS512", crypto.SHA512}
+	RegisterSigningMethod(SigningMethodHS512.Alg(), func() SigningMethod {
+		return SigningMethodHS512
+	})
+}
+
+func (m *SigningMethodHMAC) Alg() string {
+	return m.Name
+}
+
+// Verify the signature of HSXXX tokens.  Returns nil if the signature is valid.
+func (m *SigningMethodHMAC) Verify(signingString, signature string, key interface{}) error {
+	// Verify the key is the right type
+	keyBytes, ok := key.([]byte)
+	if !ok {
+		return ErrInvalidKeyType
+	}
+
+	// Decode signature, for comparison
+	sig, err := DecodeSegment(signature)
+	if err != nil {
+		return err
+	}
+
+	// Can we use the specified hashing method?
+	if !m.Hash.Available() {
+		return ErrHashUnavailable
+	}
+
+	// This signing method is symmetric, so we validate the signature
+	// by reproducing the signature from the signing string and key, then
+	// comparing that against the provided signature.
+	hasher := hmac.New(m.Hash.New, keyBytes)
+	hasher.Write([]byte(signingString))
+	if !hmac.Equal(sig, hasher.Sum(nil)) {
+		return ErrSignatureInvalid
+	}
+
+	// No validation errors.  Signature is good.
+	return nil
+}
+
+// Implements the Sign method from SigningMethod for this signing method.
+// Key must be []byte
+func (m *SigningMethodHMAC) Sign(signingString string, key interface{}) (string, error) {
+	if keyBytes, ok := key.([]byte); ok {
+		if !m.Hash.Available() {
+			return "", ErrHashUnavailable
+		}
+
+		hasher := hmac.New(m.Hash.New, keyBytes)
+		hasher.Write([]byte(signingString))
+
+		return EncodeSegment(hasher.Sum(nil)), nil
+	}
+
+	return "", ErrInvalidKeyType
+}
diff --git a/vendor/github.com/dgrijalva/jwt-go/map_claims.go b/vendor/github.com/dgrijalva/jwt-go/map_claims.go
new file mode 100644
index 000000000..291213c46
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/map_claims.go
@@ -0,0 +1,94 @@
+package jwt
+
+import (
+	"encoding/json"
+	"errors"
+	// "fmt"
+)
+
+// Claims type that uses the map[string]interface{} for JSON decoding
+// This is the default claims type if you don't supply one
+type MapClaims map[string]interface{}
+
+// Compares the aud claim against cmp.
+// If required is false, this method will return true if the value matches or is unset
+func (m MapClaims) VerifyAudience(cmp string, req bool) bool {
+	aud, _ := m["aud"].(string)
+	return verifyAud(aud, cmp, req)
+}
+
+// Compares the exp claim against cmp.
+// If required is false, this method will return true if the value matches or is unset
+func (m MapClaims) VerifyExpiresAt(cmp int64, req bool) bool {
+	switch exp := m["exp"].(type) {
+	case float64:
+		return verifyExp(int64(exp), cmp, req)
+	case json.Number:
+		v, _ := exp.Int64()
+		return verifyExp(v, cmp, req)
+	}
+	return req == false
+}
+
+// Compares the iat claim against cmp.
+// If required is false, this method will return true if the value matches or is unset
+func (m MapClaims) VerifyIssuedAt(cmp int64, req bool) bool {
+	switch iat := m["iat"].(type) {
+	case float64:
+		return verifyIat(int64(iat), cmp, req)
+	case json.Number:
+		v, _ := iat.Int64()
+		return verifyIat(v, cmp, req)
+	}
+	return req == false
+}
+
+// Compares the iss claim against cmp.
+// If required is false, this method will return true if the value matches or is unset
+func (m MapClaims) VerifyIssuer(cmp string, req bool) bool {
+	iss, _ := m["iss"].(string)
+	return verifyIss(iss, cmp, req)
+}
+
+// Compares the nbf claim against cmp.
+// If required is false, this method will return true if the value matches or is unset
+func (m MapClaims) VerifyNotBefore(cmp int64, req bool) bool {
+	switch nbf := m["nbf"].(type) {
+	case float64:
+		return verifyNbf(int64(nbf), cmp, req)
+	case json.Number:
+		v, _ := nbf.Int64()
+		return verifyNbf(v, cmp, req)
+	}
+	return req == false
+}
+
+// Validates time based claims "exp, iat, nbf".
+// There is no accounting for clock skew.
+// As well, if any of the above claims are not in the token, it will still
+// be considered a valid claim.
+func (m MapClaims) Valid() error {
+	vErr := new(ValidationError)
+	now := TimeFunc().Unix()
+
+	if m.VerifyExpiresAt(now, false) == false {
+		vErr.Inner = errors.New("Token is expired")
+		vErr.Errors |= ValidationErrorExpired
+	}
+
+	if m.VerifyIssuedAt(now, false) == false {
+		vErr.Inner = errors.New("Token used before issued")
+		vErr.Errors |= ValidationErrorIssuedAt
+	}
+
+	if m.VerifyNotBefore(now, false) == false {
+		vErr.Inner = errors.New("Token is not valid yet")
+		vErr.Errors |= ValidationErrorNotValidYet
+	}
+
+	if vErr.valid() {
+		return nil
+	}
+
+	return vErr
+}
diff --git a/vendor/github.com/dgrijalva/jwt-go/none.go b/vendor/github.com/dgrijalva/jwt-go/none.go
new file mode 100644
index 000000000..f04d189d0
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/none.go
@@ -0,0 +1,52 @@
+package jwt
+
+// Implements the none signing method.  This is required by the spec
+// but you probably should never use it.
+var SigningMethodNone *signingMethodNone
+
+const UnsafeAllowNoneSignatureType unsafeNoneMagicConstant = "none signing method allowed"
+
+var NoneSignatureTypeDisallowedError error
+
+type signingMethodNone struct{}
+type unsafeNoneMagicConstant string
+
+func init() {
+	SigningMethodNone = &signingMethodNone{}
+	NoneSignatureTypeDisallowedError = NewValidationError("'none' signature type is not allowed", ValidationErrorSignatureInvalid)
+
+	RegisterSigningMethod(SigningMethodNone.Alg(), func() SigningMethod {
+		return SigningMethodNone
+	})
+}
+
+func (m *signingMethodNone) Alg() string {
+	return "none"
+}
+
+// Only allow 'none' alg type if UnsafeAllowNoneSignatureType is specified as the key
+func (m *signingMethodNone) Verify(signingString, signature string, key interface{}) (err error) {
+	// Key must be UnsafeAllowNoneSignatureType to prevent accidentally
+	// accepting 'none' signing method
+	if _, ok := key.(unsafeNoneMagicConstant); !ok {
+		return NoneSignatureTypeDisallowedError
+	}
+	// If signing method is none, signature must be an empty string
+	if signature != "" {
+		return NewValidationError(
+			"'none' signing method with non-empty signature",
+			ValidationErrorSignatureInvalid,
+		)
+	}
+
+	// Accept 'none' signing method.
+	return nil
+}
+
+// Only allow 'none' signing if UnsafeAllowNoneSignatureType is specified as the key
+func (m *signingMethodNone) Sign(signingString string, key interface{}) (string, error) {
+	if _, ok := key.(unsafeNoneMagicConstant); ok {
+		return "", nil
+	}
+	return "", NoneSignatureTypeDisallowedError
+}
diff --git a/vendor/github.com/dgrijalva/jwt-go/parser.go b/vendor/github.com/dgrijalva/jwt-go/parser.go
new file mode 100644
index 000000000..d6901d9ad
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/parser.go
@@ -0,0 +1,148 @@
+package jwt
+
+import (
+	"bytes"
+	"encoding/json"
+	"fmt"
+	"strings"
+)
+
+type Parser struct {
+	ValidMethods         []string // If populated, only these methods will be considered valid
+	UseJSONNumber        bool     // Use JSON Number format in JSON decoder
+	SkipClaimsValidation bool     // Skip claims validation during token parsing
+}
+
+// Parse, validate, and return a token.
+// keyFunc will receive the parsed token and should return the key for validating.
+// If everything is kosher, err will be nil
+func (p *Parser) Parse(tokenString string, keyFunc Keyfunc) (*Token, error) {
+	return p.ParseWithClaims(tokenString, MapClaims{}, keyFunc)
+}
+
+func (p *Parser) ParseWithClaims(tokenString string, claims Claims, keyFunc Keyfunc) (*Token, error) {
+	token, parts, err := p.ParseUnverified(tokenString, claims)
+	if err != nil {
+		return token, err
+	}
+
+	// Verify signing method is in the required set
+	if p.ValidMethods != nil {
+		var signingMethodValid = false
+		var alg = token.Method.Alg()
+		for _, m := range p.ValidMethods {
+			if m == alg {
+				signingMethodValid = true
+				break
+			}
+		}
+		if !signingMethodValid {
+			// signing method is not in the listed set
+			return token, NewValidationError(fmt.Sprintf("signing method %v is invalid", alg), ValidationErrorSignatureInvalid)
+		}
+	}
+
+	// Lookup key
+	var key interface{}
+	if keyFunc == nil {
+		// keyFunc was not provided.  short circuiting validation
+		return token, NewValidationError("no Keyfunc was provided.", ValidationErrorUnverifiable)
+	}
+	if key, err = keyFunc(token); err != nil {
+		// keyFunc returned an error
+		if ve, ok := err.(*ValidationError); ok {
+			return token, ve
+		}
+		return token, &ValidationError{Inner: err, Errors: ValidationErrorUnverifiable}
+	}
+
+	vErr := &ValidationError{}
+
+	// Validate Claims
+	if !p.SkipClaimsValidation {
+		if err := token.Claims.Valid(); err != nil {
+
+			// If the Claims Valid returned an error, check if it is a validation error,
+			// If it was another error type, create a ValidationError with a generic ClaimsInvalid flag set
+			if e, ok := err.(*ValidationError); !ok {
+				vErr = &ValidationError{Inner: err, Errors: ValidationErrorClaimsInvalid}
+			} else {
+				vErr = e
+			}
+		}
+	}
+
+	// Perform validation
+	token.Signature = parts[2]
+	if err = token.Method.Verify(strings.Join(parts[0:2], "."), token.Signature, key); err != nil {
+		vErr.Inner = err
+		vErr.Errors |= ValidationErrorSignatureInvalid
+	}
+
+	if vErr.valid() {
+		token.Valid = true
+		return token, nil
+	}
+
+	return token, vErr
+}
+
+// WARNING: Don't use this method unless you know what you're doing
+//
+// This method parses the token but doesn't validate the signature. It's only
+// ever useful in cases where you know the signature is valid (because it has
+// been checked previously in the stack) and you want to extract values from
+// it.
+func (p *Parser) ParseUnverified(tokenString string, claims Claims) (token *Token, parts []string, err error) {
+	parts = strings.Split(tokenString, ".")
+	if len(parts) != 3 {
+		return nil, parts, NewValidationError("token contains an invalid number of segments", ValidationErrorMalformed)
+	}
+
+	token = &Token{Raw: tokenString}
+
+	// parse Header
+	var headerBytes []byte
+	if headerBytes, err = DecodeSegment(parts[0]); err != nil {
+		if strings.HasPrefix(strings.ToLower(tokenString), "bearer ") {
+			return token, parts, NewValidationError("tokenstring should not contain 'bearer '", ValidationErrorMalformed)
+		}
+		return token, parts, &ValidationError{Inner: err, Errors: ValidationErrorMalformed}
+	}
+	if err = json.Unmarshal(headerBytes, &token.Header); err != nil {
+		return token, parts, &ValidationError{Inner: err, Errors: ValidationErrorMalformed}
+	}
+
+	// parse Claims
+	var claimBytes []byte
+	token.Claims = claims
+
+	if claimBytes, err = DecodeSegment(parts[1]); err != nil {
+		return token, parts, &ValidationError{Inner: err, Errors: ValidationErrorMalformed}
+	}
+	dec := json.NewDecoder(bytes.NewBuffer(claimBytes))
+	if p.UseJSONNumber {
+		dec.UseNumber()
+	}
+	// JSON Decode.  Special case for map type to avoid weird pointer behavior
+	if c, ok := token.Claims.(MapClaims); ok {
+		err = dec.Decode(&c)
+	} else {
+		err = dec.Decode(&claims)
+	}
+	// Handle decode error
+	if err != nil {
+		return token, parts, &ValidationError{Inner: err, Errors: ValidationErrorMalformed}
+	}
+
+	// Lookup signature method
+	if method, ok := token.Header["alg"].(string); ok {
+		if token.Method = GetSigningMethod(method); token.Method == nil {
+			return token, parts, NewValidationError("signing method (alg) is unavailable.", ValidationErrorUnverifiable)
+		}
+	} else {
+		return token, parts, NewValidationError("signing method (alg) is unspecified.", ValidationErrorUnverifiable)
+	}
+
+	return token, parts, nil
+}
diff --git a/vendor/github.com/dgrijalva/jwt-go/rsa.go b/vendor/github.com/dgrijalva/jwt-go/rsa.go
new file mode 100644
index 000000000..e4caf1ca4
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/rsa.go
@@ -0,0 +1,101 @@
+package jwt
+
+import (
+	"crypto"
+	"crypto/rand"
+	"crypto/rsa"
+)
+
+// Implements the RSA family of signing methods signing methods
+// Expects *rsa.PrivateKey for signing and *rsa.PublicKey for validation
+type SigningMethodRSA struct {
+	Name string
+	Hash crypto.Hash
+}
+
+// Specific instances for RS256 and company
+var (
+	SigningMethodRS256 *SigningMethodRSA
+	SigningMethodRS384 *SigningMethodRSA
+	SigningMethodRS512 *SigningMethodRSA
+)
+
+func init() {
+	// RS256
+	SigningMethodRS256 = &SigningMethodRSA{"RS256", crypto.SHA256}
+	RegisterSigningMethod(SigningMethodRS256.Alg(), func() SigningMethod {
+		return SigningMethodRS256
+	})
+
+	// RS384
+	SigningMethodRS384 = &SigningMethodRSA{"RS384", crypto.SHA384}
+	RegisterSigningMethod(SigningMethodRS384.Alg(), func() SigningMethod {
+		return SigningMethodRS384
+	})
+
+	// RS512
+	SigningMethodRS512 = &SigningMethodRSA{"RS512", crypto.SHA512}
+	RegisterSigningMethod(SigningMethodRS512.Alg(), func() SigningMethod {
+		return SigningMethodRS512
+	})
+}
+
+func (m *SigningMethodRSA) Alg() string {
+	return m.Name
+}
+
+// Implements the Verify method from SigningMethod
+// For this signing method, must be an *rsa.PublicKey structure.
+func (m *SigningMethodRSA) Verify(signingString, signature string, key interface{}) error {
+	var err error
+
+	// Decode the signature
+	var sig []byte
+	if sig, err = DecodeSegment(signature); err != nil {
+		return err
+	}
+
+	var rsaKey *rsa.PublicKey
+	var ok bool
+
+	if rsaKey, ok = key.(*rsa.PublicKey); !ok {
+		return ErrInvalidKeyType
+	}
+
+	// Create hasher
+	if !m.Hash.Available() {
+		return ErrHashUnavailable
+	}
+	hasher := m.Hash.New()
+	hasher.Write([]byte(signingString))
+
+	// Verify the signature
+	return rsa.VerifyPKCS1v15(rsaKey, m.Hash, hasher.Sum(nil), sig)
+}
+
+// Implements the Sign method from SigningMethod
+// For this signing method, must be an *rsa.PrivateKey structure.
+func (m *SigningMethodRSA) Sign(signingString string, key interface{}) (string, error) {
+	var rsaKey *rsa.PrivateKey
+	var ok bool
+
+	// Validate type of key
+	if rsaKey, ok = key.(*rsa.PrivateKey); !ok {
+		return "", ErrInvalidKey
+	}
+
+	// Create the hasher
+	if !m.Hash.Available() {
+		return "", ErrHashUnavailable
+	}
+
+	hasher := m.Hash.New()
+	hasher.Write([]byte(signingString))
+
+	// Sign the string and return the encoded bytes
+	if sigBytes, err := rsa.SignPKCS1v15(rand.Reader, rsaKey, m.Hash, hasher.Sum(nil)); err == nil {
+		return EncodeSegment(sigBytes), nil
+	} else {
+		return "", err
+	}
+}
diff --git a/vendor/github.com/dgrijalva/jwt-go/rsa_pss.go b/vendor/github.com/dgrijalva/jwt-go/rsa_pss.go
new file mode 100644
index 000000000..10ee9db8a
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/rsa_pss.go
@@ -0,0 +1,126 @@
+// +build go1.4
+
+package jwt
+
+import (
+	"crypto"
+	"crypto/rand"
+	"crypto/rsa"
+)
+
+// Implements the RSAPSS family of signing methods signing methods
+type SigningMethodRSAPSS struct {
+	*SigningMethodRSA
+	Options *rsa.PSSOptions
+}
+
+// Specific instances for RS/PS and company
+var (
+	SigningMethodPS256 *SigningMethodRSAPSS
+	SigningMethodPS384 *SigningMethodRSAPSS
+	SigningMethodPS512 *SigningMethodRSAPSS
+)
+
+func init() {
+	// PS256
+	SigningMethodPS256 = &SigningMethodRSAPSS{
+		&SigningMethodRSA{
+			Name: "PS256",
+			Hash: crypto.SHA256,
+		},
+		&rsa.PSSOptions{
+			SaltLength: rsa.PSSSaltLengthAuto,
+			Hash:       crypto.SHA256,
+		},
+	}
+	RegisterSigningMethod(SigningMethodPS256.Alg(), func() SigningMethod {
+		return SigningMethodPS256
+	})
+
+	// PS384
+	SigningMethodPS384 = &SigningMethodRSAPSS{
+		&SigningMethodRSA{
+			Name: "PS384",
+			Hash: crypto.SHA384,
+		},
+		&rsa.PSSOptions{
+			SaltLength: rsa.PSSSaltLengthAuto,
+			Hash:       crypto.SHA384,
+		},
+	}
+	RegisterSigningMethod(SigningMethodPS384.Alg(), func() SigningMethod {
+		return SigningMethodPS384
+	})
+
+	// PS512
+	SigningMethodPS512 = &SigningMethodRSAPSS{
+		&SigningMethodRSA{
+			Name: "PS512",
+			Hash: crypto.SHA512,
+		},
+		&rsa.PSSOptions{
+			SaltLength: rsa.PSSSaltLengthAuto,
+			Hash:       crypto.SHA512,
+		},
+	}
+	RegisterSigningMethod(SigningMethodPS512.Alg(), func() SigningMethod {
+		return SigningMethodPS512
+	})
+}
+
+// Implements the Verify method from SigningMethod
+// For this verify method, key must be an rsa.PublicKey struct
+func (m *SigningMethodRSAPSS) Verify(signingString, signature string, key interface{}) error {
+	var err error
+
+	// Decode the signature
+	var sig []byte
+	if sig, err = DecodeSegment(signature); err != nil {
+		return err
+	}
+
+	var rsaKey *rsa.PublicKey
+	switch k := key.(type) {
+	case *rsa.PublicKey:
+		rsaKey = k
+	default:
+		return ErrInvalidKey
+	}
+
+	// Create hasher
+	if !m.Hash.Available() {
+		return ErrHashUnavailable
+	}
+	hasher := m.Hash.New()
+	hasher.Write([]byte(signingString))
+
+	return rsa.VerifyPSS(rsaKey, m.Hash, hasher.Sum(nil), sig, m.Options)
+}
+
+// Implements the Sign method from SigningMethod
+// For this signing method, key must be an rsa.PrivateKey struct
+func (m *SigningMethodRSAPSS) Sign(signingString string, key interface{}) (string, error) {
+	var rsaKey *rsa.PrivateKey
+
+	switch k := key.(type) {
+	case *rsa.PrivateKey:
+		rsaKey = k
+	default:
+		return "", ErrInvalidKeyType
+	}
+
+	// Create the hasher
+	if !m.Hash.Available() {
+		return "", ErrHashUnavailable
+	}
+
+	hasher := m.Hash.New()
+	hasher.Write([]byte(signingString))
+
+	// Sign the string and return the encoded bytes
+	if sigBytes, err := rsa.SignPSS(rand.Reader, rsaKey, m.Hash, hasher.Sum(nil), m.Options); err == nil {
+		return EncodeSegment(sigBytes), nil
+	} else {
+		return "", err
+	}
+}
diff --git a/vendor/github.com/dgrijalva/jwt-go/rsa_utils.go b/vendor/github.com/dgrijalva/jwt-go/rsa_utils.go
new file mode 100644
index 000000000..a5ababf95
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/rsa_utils.go
@@ -0,0 +1,101 @@
+package jwt
+
+import (
+	"crypto/rsa"
+	"crypto/x509"
+	"encoding/pem"
+	"errors"
+)
+
+var (
+	ErrKeyMustBePEMEncoded = errors.New("Invalid Key: Key must be PEM encoded PKCS1 or PKCS8 private key")
+	ErrNotRSAPrivateKey    = errors.New("Key is not a valid RSA private key")
+	ErrNotRSAPublicKey     = errors.New("Key is not a valid RSA public key")
+)
+
+// Parse PEM encoded PKCS1 or PKCS8 private key
+func ParseRSAPrivateKeyFromPEM(key []byte) (*rsa.PrivateKey, error) {
+	var err error
+
+	// Parse PEM block
+	var block *pem.Block
+	if block, _ = pem.Decode(key); block == nil {
+		return nil, ErrKeyMustBePEMEncoded
+	}
+
+	var parsedKey interface{}
+	if parsedKey, err = x509.ParsePKCS1PrivateKey(block.Bytes); err != nil {
+		if parsedKey, err = x509.ParsePKCS8PrivateKey(block.Bytes); err != nil {
+			return nil, err
+		}
+	}
+
+	var pkey *rsa.PrivateKey
+	var ok bool
+	if pkey, ok = parsedKey.(*rsa.PrivateKey); !ok {
+		return nil, ErrNotRSAPrivateKey
+	}
+
+	return pkey, nil
+}
+
+// Parse PEM encoded PKCS1 or PKCS8 private key protected with password
+func ParseRSAPrivateKeyFromPEMWithPassword(key []byte, password string) (*rsa.PrivateKey, error) {
+	var err error
+
+	// Parse PEM block
+	var block *pem.Block
+	if block, _ = pem.Decode(key); block == nil {
+		return nil, ErrKeyMustBePEMEncoded
+	}
+
+	var parsedKey interface{}
+
+	var blockDecrypted []byte
+	if blockDecrypted, err = x509.DecryptPEMBlock(block, []byte(password)); err != nil {
+		return nil, err
+	}
+
+	if parsedKey, err = x509.ParsePKCS1PrivateKey(blockDecrypted); err != nil {
+		if parsedKey, err = x509.ParsePKCS8PrivateKey(blockDecrypted); err != nil {
+			return nil, err
+		}
+	}
+
+	var pkey *rsa.PrivateKey
+	var ok bool
+	if pkey, ok = parsedKey.(*rsa.PrivateKey); !ok {
+		return nil, ErrNotRSAPrivateKey
+	}
+
+	return pkey, nil
+}
+
+// Parse PEM encoded PKCS1 or PKCS8 public key
+func ParseRSAPublicKeyFromPEM(key []byte) (*rsa.PublicKey, error) {
+	var err error
+
+	// Parse PEM block
+	var block *pem.Block
+	if block, _ = pem.Decode(key); block == nil {
+		return nil, ErrKeyMustBePEMEncoded
+	}
+
+	// Parse the key
+	var parsedKey interface{}
+	if parsedKey, err = x509.ParsePKIXPublicKey(block.Bytes); err != nil {
+		if cert, err := x509.ParseCertificate(block.Bytes); err == nil {
+			parsedKey = cert.PublicKey
+		} else {
+			return nil, err
+		}
+	}
+
+	var pkey *rsa.PublicKey
+	var ok bool
+	if pkey, ok = parsedKey.(*rsa.PublicKey); !ok {
+		return nil, ErrNotRSAPublicKey
+	}
+
+	return pkey, nil
+}
diff --git a/vendor/github.com/dgrijalva/jwt-go/signing_method.go b/vendor/github.com/dgrijalva/jwt-go/signing_method.go
new file mode 100644
index 000000000..ed1f212b2
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/signing_method.go
@@ -0,0 +1,35 @@
+package jwt
+
+import (
+	"sync"
+)
+
+var signingMethods = map[string]func() SigningMethod{}
+var signingMethodLock = new(sync.RWMutex)
+
+// Implement SigningMethod to add new methods for signing or verifying tokens.
+type SigningMethod interface {
+	Verify(signingString, signature string, key interface{}) error // Returns nil if signature is valid
+	Sign(signingString string, key interface{}) (string, error)    // Returns encoded signature or error
+	Alg() string                                                   // returns the alg identifier for this method (example: 'HS256')
+}
+
+// Register the "alg" name and a factory function for signing method.
+// This is typically done during init() in the method's implementation
+func RegisterSigningMethod(alg string, f func() SigningMethod) {
+	signingMethodLock.Lock()
+	defer signingMethodLock.Unlock()
+
+	signingMethods[alg] = f
+}
+
+// Get a signing method from an "alg" string
+func GetSigningMethod(alg string) (method SigningMethod) {
+	signingMethodLock.RLock()
+	defer signingMethodLock.RUnlock()
+
+	if methodF, ok := signingMethods[alg]; ok {
+		method = methodF()
+	}
+	return
+}
diff --git a/vendor/github.com/dgrijalva/jwt-go/token.go b/vendor/github.com/dgrijalva/jwt-go/token.go
new file mode 100644
index 000000000..d637e0867
--- /dev/null
+++ b/vendor/github.com/dgrijalva/jwt-go/token.go
@@ -0,0 +1,108 @@
+package jwt
+
+import (
+	"encoding/base64"
+	"encoding/json"
+	"strings"
+	"time"
+)
+
+// TimeFunc provides the current time when parsing token to validate "exp" claim (expiration time).
+// You can override it to use another time value.  This is useful for testing or if your
+// server uses a different time zone than your tokens.
+var TimeFunc = time.Now
+
+// Parse methods use this callback function to supply
+// the key for verification.  The function receives the parsed,
+// but unverified Token.  This allows you to use properties in the
+// Header of the token (such as `kid`) to identify which key to use.
+type Keyfunc func(*Token) (interface{}, error)
+
+// A JWT Token.  Different fields will be used depending on whether you're
+// creating or parsing/verifying a token.
+type Token struct {
+	Raw       string                 // The raw token.  Populated when you Parse a token
+	Method    SigningMethod          // The signing method used or to be used
+	Header    map[string]interface{} // The first segment of the token
+	Claims    Claims                 // The second segment of the token
+	Signature string                 // The third segment of the token.  Populated when you Parse a token
+	Valid     bool                   // Is the token valid?  Populated when you Parse/Verify a token
+}
+
+// Create a new Token.  Takes a signing method
+func New(method SigningMethod) *Token {
+	return NewWithClaims(method, MapClaims{})
+}
+
+func NewWithClaims(method SigningMethod, claims Claims) *Token {
+	return &Token{
+		Header: map[string]interface{}{
+			"typ": "JWT",
+			"alg": method.Alg(),
+		},
+		Claims: claims,
+		Method: method,
+	}
+}
+
+// Get the complete, signed token
+func (t *Token) SignedString(key interface{}) (string, error) {
+	var sig, sstr string
+	var err error
+	if sstr, err = t.SigningString(); err != nil {
+		return "", err
+	}
+	if sig, err = t.Method.Sign(sstr, key); err != nil {
+		return "", err
+	}
+	return strings.Join([]string{sstr, sig}, "."), nil
+}
+
+// Generate the signing string.  This is the
+// most expensive part of the whole deal.  Unless you
+// need this for something special, just go straight for
+// the SignedString.
+func (t *Token) SigningString() (string, error) {
+	var err error
+	parts := make([]string, 2)
+	for i, _ := range parts {
+		var jsonValue []byte
+		if i == 0 {
+			if jsonValue, err = json.Marshal(t.Header); err != nil {
+				return "", err
+			}
+		} else {
+			if jsonValue, err = json.Marshal(t.Claims); err != nil {
+				return "", err
+			}
+		}
+
+		parts[i] = EncodeSegment(jsonValue)
+	}
+	return strings.Join(parts, "."), nil
+}
+
+// Parse, validate, and return a token.
+// keyFunc will receive the parsed token and should return the key for validating.
+// If everything is kosher, err will be nil
+func Parse(tokenString string, keyFunc Keyfunc) (*Token, error) {
+	return new(Parser).Parse(tokenString, keyFunc)
+}
+
+func ParseWithClaims(tokenString string, claims Claims, keyFunc Keyfunc) (*Token, error) {
+	return new(Parser).ParseWithClaims(tokenString, claims, keyFunc)
+}
+
+// Encode JWT specific base64url encoding with padding stripped
+func EncodeSegment(seg []byte) string {
+	return strings.TrimRight(base64.URLEncoding.EncodeToString(seg), "=")
+}
+
+// Decode JWT specific base64url encoding with padding stripped
+func DecodeSegment(seg string) ([]byte, error) {
+	if l := len(seg) % 4; l > 0 {
+		seg += strings.Repeat("=", 4-l)
+	}
+
+	return base64.URLEncoding.DecodeString(seg)
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/LICENSE b/vendor/github.com/libopenstorage/openstorage/LICENSE
new file mode 100644
index 000000000..bcab93af9
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/LICENSE
@@ -0,0 +1,191 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   Copyright 2015 Openstorage.org.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/vendor/github.com/libopenstorage/openstorage/api/README.md b/vendor/github.com/libopenstorage/openstorage/api/README.md
new file mode 100644
index 000000000..2b2a5ec54
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/api/README.md
@@ -0,0 +1,79 @@
+# OpenStorage API usage
+
+Any storage product that uses the openstorage API can be managed via this API.  Below are some examples of using this API.
+
+### Enumerate nodes in a cluster
+```go
+
+import (
+    ...
+    
+    "github.com/libopenstorage/gossip/types"
+    "github.com/libopenstorage/openstorage/api"
+    "github.com/libopenstorage/openstorage/api/client/cluster"
+)
+
+type myapp struct {
+    manager cluster.Cluster
+}
+
+func (c *myapp) init() {
+    // Choose the default version.
+    // Leave the host blank to use the local UNIX socket, or pass in an IP and a port at which the server is listening on.
+    clnt, err := cluster.NewClusterClient("", cluster.APIVersion)
+    if err != nil {
+        fmt.Printf("Failed to initialize client library: %v\n", err)
+        os.Exit(1)
+    }
+    c.manager = cluster.ClusterManager(clnt)
+}
+
+func (c *myapp) listNodes() {
+    cluster, err := c.manager.Enumerate()
+    if err != nil {
+        cmdError(context, fn, err)
+        return
+    }
+    
+    // cluster is now a hashmap of nodes... do something useful with it:
+    for _, n := range cluster.Nodes {
+    
+     }
+}
+```
+
+### Inspect a volume in a cluster
+```go
+
+import (
+    ...
+    
+    "github.com/libopenstorage/openstorage/api"
+    volumeclient "github.com/libopenstorage/openstorage/api/client/volume"
+    "github.com/libopenstorage/openstorage/volume"
+)
+
+type myapp struct {
+    volDriver volume.VolumeDriver
+}
+
+func (c *myapp) init() {
+    // Choose the default version.
+    // Leave the host blank to use the local UNIX socket, or pass in an IP and a port at which the server is listening on.
+    clnt, err := volumeclient.NewDriverClient("", v.name, volume.APIVersion)
+    if err != nil {
+        fmt.Printf("Failed to initialize client library: %v\n", err)
+        os.Exit(1)
+    }
+    v.volDriver = volumeclient.VolumeDriver(clnt)
+}
+
+func (c *myapp) inspect(id string) {
+    stats, err := v.volDriver.Stats(id, true)
+    if err != nil {
+        return
+    }
+    
+    // stats is an object that has various volume properties and statistics.
+}
+```
diff --git a/vendor/github.com/libopenstorage/openstorage/api/api.go b/vendor/github.com/libopenstorage/openstorage/api/api.go
new file mode 100644
index 000000000..23c8d93f7
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/api/api.go
@@ -0,0 +1,1112 @@
+package api
+
+import (
+	"context"
+	"fmt"
+	"math"
+	"strconv"
+	"strings"
+	"time"
+
+	"github.com/golang/protobuf/ptypes"
+	"github.com/libopenstorage/openstorage/pkg/auth"
+
+	"github.com/mohae/deepcopy"
+)
+
+// Strings for VolumeSpec
+const (
+	Name                     = "name"
+	Token                    = "token"
+	TokenSecret              = "token_secret"
+	SpecNodes                = "nodes"
+	SpecParent               = "parent"
+	SpecEphemeral            = "ephemeral"
+	SpecShared               = "shared"
+	SpecJournal              = "journal"
+	SpecSharedv4             = "sharedv4"
+	SpecCascaded             = "cascaded"
+	SpecSticky               = "sticky"
+	SpecSecure               = "secure"
+	SpecCompressed           = "compressed"
+	SpecSize                 = "size"
+	SpecScale                = "scale"
+	SpecFilesystem           = "fs"
+	SpecBlockSize            = "block_size"
+	SpecQueueDepth           = "queue_depth"
+	SpecHaLevel              = "repl"
+	SpecPriority             = "io_priority"
+	SpecSnapshotInterval     = "snap_interval"
+	SpecSnapshotSchedule     = "snap_schedule"
+	SpecAggregationLevel     = "aggregation_level"
+	SpecDedupe               = "dedupe"
+	SpecPassphrase           = "secret_key"
+	SpecAutoAggregationValue = "auto"
+	SpecGroup                = "group"
+	SpecGroupEnforce         = "fg"
+	SpecZones                = "zones"
+	SpecRacks                = "racks"
+	SpecRack                 = "rack"
+	SpecRegions              = "regions"
+	SpecLabels               = "labels"
+	SpecPriorityAlias        = "priority_io"
+	SpecIoProfile            = "io_profile"
+	SpecAsyncIo              = "async_io"
+	SpecEarlyAck             = "early_ack"
+	// SpecBestEffortLocationProvisioning default is false. If set provisioning request will succeed
+	// even if specified data location parameters could not be satisfied.
+	SpecBestEffortLocationProvisioning = "best_effort_location_provisioning"
+	// SpecForceUnsuppportedFsType is of type boolean and if true it sets
+	// the VolumeSpec.force_unsupported_fs_type. When set to true it asks
+	// the driver to use an unsupported value of VolumeSpec.format if possible
+	SpecForceUnsupportedFsType = "force_unsupported_fs_type"
+	SpecNodiscard              = "nodiscard"
+	StoragePolicy              = "storagepolicy"
+)
+
+// OptionKey specifies a set of recognized query params.
+const (
+	// OptName query parameter used to lookup volume by name.
+	OptName = "Name"
+	// OptVolumeID query parameter used to lookup volume by ID.
+	OptVolumeID = "VolumeID"
+	// OptSnapID query parameter used to lookup snapshot by ID.
+	OptSnapID = "SnapID"
+	// OptLabel query parameter used to lookup volume by set of labels.
+	OptLabel = "Label"
+	// OptConfigLabel query parameter used to lookup volume by set of labels.
+	OptConfigLabel = "ConfigLabel"
+	// OptCumulative query parameter used to request cumulative stats.
+	OptCumulative = "Cumulative"
+	// OptTimeout query parameter used to indicate timeout seconds
+	OptTimeoutSec = "TimeoutSec"
+	// OptQuiesceID query parameter use for quiesce
+	OptQuiesceID = "QuiesceID"
+	// OptCredUUID is the UUID of the credential
+	OptCredUUID = "CredUUID"
+	// OptCredName indicates unique name of credential
+	OptCredName = "CredName"
+	// OptCredType  indicates type of credential
+	OptCredType = "CredType"
+	// OptCredEncrKey is the key used to encrypt data
+	OptCredEncrKey = "CredEncrypt"
+	// OptCredRegion indicates the region for s3
+	OptCredRegion = "CredRegion"
+	// OptCredDisableSSL indicated if SSL should be disabled
+	OptCredDisableSSL = "CredDisableSSL"
+	// OptCredEndpoint indicate the cloud endpoint
+	OptCredEndpoint = "CredEndpoint"
+	// OptCredAccKey for s3
+	OptCredAccessKey = "CredAccessKey"
+	// OptCredSecretKey for s3
+	OptCredSecretKey = "CredSecretKey"
+	// OptCredBucket is the optional bucket name
+	OptCredBucket = "CredBucket"
+	// OptCredGoogleProjectID projectID for google cloud
+	OptCredGoogleProjectID = "CredProjectID"
+	// OptCredGoogleJsonKey for google cloud
+	OptCredGoogleJsonKey = "CredJsonKey"
+	// OptCredAzureAccountName is the account name for
+	// azure as the cloud provider
+	OptCredAzureAccountName = "CredAccountName"
+	// OptOptCredAzureAccountKey is the accountkey for
+	// azure as the cloud provider
+	OptCredAzureAccountKey = "CredAccountKey"
+	// Credential ownership key in params
+	OptCredOwnership = "CredOwnership"
+	// OptCloudBackupID is the backID in the cloud
+	OptCloudBackupID = "CloudBackID"
+	// OptSrcVolID is the source volume ID of the backup
+	OptSrcVolID = "SrcVolID"
+	// OptBkupOpState is the desired operational state
+	// (stop/pause/resume) of backup/restore
+	OptBkupOpState = "OpState"
+	// OptBackupSchedUUID is the UUID of the backup-schedule
+	OptBackupSchedUUID = "BkupSchedUUID"
+	// OptVolumeSubFolder query parameter used to catalog a particular path inside a volume
+	OptCatalogSubFolder = "subfolder"
+	// OptCatalogMaxDepth query parameter used to limit the depth we return
+	OptCatalogMaxDepth = "depth"
+)
+
+// Api clientserver Constants
+const (
+	OsdVolumePath        = "osd-volumes"
+	OsdSnapshotPath      = "osd-snapshot"
+	OsdCredsPath         = "osd-creds"
+	OsdBackupPath        = "osd-backup"
+	OsdMigratePath       = "osd-migrate"
+	OsdMigrateStartPath  = OsdMigratePath + "/start"
+	OsdMigrateCancelPath = OsdMigratePath + "/cancel"
+	OsdMigrateStatusPath = OsdMigratePath + "/status"
+	TimeLayout           = "Jan 2 15:04:05 UTC 2006"
+)
+
+const (
+	// AutoAggregation value indicates driver to select aggregation level.
+	AutoAggregation = math.MaxUint32
+)
+
+// Node describes the state of a node.
+// It includes the current physical state (CPU, memory, storage, network usage) as
+// well as the containers running on the system.
+//
+// swagger:model
+type Node struct {
+	// Id of the node.
+	Id string
+	// SchedulerNodeName is name of the node in scheduler context. It can be
+	// empty if unable to get the name from the scheduler.
+	SchedulerNodeName string
+	// Cpu usage of the node.
+	Cpu float64 // percentage.
+	// Total Memory of the node
+	MemTotal uint64
+	// Used Memory of the node
+	MemUsed uint64
+	// Free Memory of the node
+	MemFree uint64
+	// Average load (percentage)
+	Avgload int
+	// Node Status see (Status object)
+	Status Status
+	// GenNumber of the node
+	GenNumber uint64
+	// List of disks on this node.
+	Disks map[string]StorageResource
+	// List of storage pools this node supports
+	Pools []StoragePool
+	// Management IP
+	MgmtIp string
+	// Data IP
+	DataIp string
+	// Timestamp
+	Timestamp time.Time
+	// Start time of this node
+	StartTime time.Time
+	// Hostname of this node
+	Hostname string
+	// Node data for this node (EX: Public IP, Provider, City..)
+	NodeData map[string]interface{}
+	// User defined labels for node. Key Value pairs
+	NodeLabels map[string]string
+	// GossipPort is the port used by the gossip protocol
+	GossipPort string
+}
+
+// FluentDConfig describes ip and port of a fluentdhost.
+// DEPRECATED
+//
+// swagger:model
+type FluentDConfig struct {
+	IP   string `json:"ip"`
+	Port string `json:"port"`
+}
+
+// TunnelConfig describes key, cert and endpoint of a reverse proxy tunnel
+// DEPRECATED
+//
+// swagger:model
+type TunnelConfig struct {
+	Key      string `json:"key"`
+	Cert     string `json:"cert"`
+	Endpoint string `json:"tunnel_endpoint"`
+}
+
+// Cluster represents the state of the cluster.
+//
+// swagger:model
+type Cluster struct {
+	Status Status
+
+	// Id of the cluster.
+	//
+	// required: true
+	Id string
+
+	// Id of the node on which this cluster object is initialized
+	NodeId string
+
+	// array of all the nodes in the cluster.
+	Nodes []Node
+
+	// Logging url for the cluster.
+	LoggingURL string
+
+	// Management url for the cluster
+	ManagementURL string
+
+	// FluentD Host for the cluster
+	FluentDConfig FluentDConfig
+
+	// TunnelConfig for the cluster [key, cert, endpoint]
+	TunnelConfig TunnelConfig
+}
+
+// CredCreateRequest is the input for CredCreate command
+type CredCreateRequest struct {
+	// InputParams is map describing cloud provide
+	InputParams map[string]string
+}
+
+// CredCreateResponse is returned for CredCreate command
+type CredCreateResponse struct {
+	// UUID of the credential that was just created
+	UUID string
+}
+
+// StatPoint represents the basic structure of a single Stat reported
+// TODO: This is the first step to introduce stats in openstorage.
+//       Follow up task is to introduce an API for logging stats
+type StatPoint struct {
+	// Name of the Stat
+	Name string
+	// Tags for the Stat
+	Tags map[string]string
+	// Fields and values of the stat
+	Fields map[string]interface{}
+	// Timestamp in Unix format
+	Timestamp int64
+}
+
+type CloudBackupCreateRequest struct {
+	// VolumeID of the volume for which cloudbackup is requested
+	VolumeID string
+	// CredentialUUID is cloud credential to be used for backup
+	CredentialUUID string
+	// Full indicates if full backup is desired even though incremental is possible
+	Full bool
+	// Name is optional unique id to be used for this backup
+	// If not specified backup creates this by default
+	Name string
+	// Labels are list of key value pairs to tag the cloud backup. These labels
+	// are stored in the metadata associated with the backup.
+	Labels map[string]string
+}
+
+type CloudBackupCreateResponse struct {
+	// Name of the task performing this backup
+	Name string
+}
+
+type CloudBackupGroupCreateRequest struct {
+	// GroupID indicates backup request for a volumegroup with this group id
+	GroupID string
+	// Labels indicates backup request for a volume group with these labels
+	Labels map[string]string
+	// VolumeIDs are a list of volume IDs to use for the backup request
+	// If multiple of GroupID, Labels or VolumeIDs are specified, volumes matching all of
+	// them are backed up to cloud
+	VolumeIDs []string
+	// CredentialUUID is cloud credential to be used for backup
+	CredentialUUID string
+	// Full indicates if full backup is desired even though incremental is possible
+	Full bool
+}
+
+type CloudBackupRestoreRequest struct {
+	// ID is the backup ID being restored
+	ID string
+	// RestoreVolumeName is optional volume Name of the new volume to be created
+	// in the cluster for restoring the cloudbackup
+	RestoreVolumeName string
+	// CredentialUUID is the credential to be used for restore operation
+	CredentialUUID string
+	// NodeID is the optional NodeID for provisioning restore
+	// volume (ResoreVolumeName should not be specified)
+	NodeID string
+	// Name is optional unique id to be used for this restore op
+	// restore creates this by default
+	Name string
+}
+
+type CloudBackupGroupCreateResponse struct {
+	// ID for this group of backups
+	GroupCloudBackupID string
+	// Names of the tasks performing this group backup
+	Names []string
+}
+
+type CloudBackupRestoreResponse struct {
+	// RestoreVolumeID is the volumeID to which the backup is being restored
+	RestoreVolumeID string
+	// Name of the task performing this restore
+	Name string
+}
+
+type CloudBackupGenericRequest struct {
+	// SrcVolumeID is optional Source VolumeID for the request
+	SrcVolumeID string
+	// ClusterID is the optional clusterID for the request
+	ClusterID string
+	// CredentialUUID is the credential for cloud to be used for the request
+	CredentialUUID string
+	// All if set to true, backups for all clusters in the cloud are processed
+	All bool
+}
+
+type CloudBackupInfo struct {
+	// ID is the ID of the cloud backup
+	ID string
+	// SrcVolumeID is Source volumeID of the backup
+	SrcVolumeID string
+	// SrcvolumeName is name of the sourceVolume of the backup
+	SrcVolumeName string
+	// Timestamp is the timestamp at which the source volume
+	// was backed up to cloud
+	Timestamp time.Time
+	// Metadata associated with the backup
+	Metadata map[string]string
+	// Status indicates the status of the backup
+	Status string
+}
+
+type CloudBackupEnumerateRequest struct {
+	CloudBackupGenericRequest
+}
+
+type CloudBackupEnumerateResponse struct {
+	// Backups is list of backups in cloud for given volume/cluster/s
+	Backups []CloudBackupInfo
+}
+
+type CloudBackupDeleteRequest struct {
+	// ID is the ID of the cloud backup
+	ID string
+	// CredentialUUID is the credential for cloud to be used for the request
+	CredentialUUID string
+	// Force Delete cloudbackup even if there are dependencies
+	Force bool
+}
+
+type CloudBackupDeleteAllRequest struct {
+	CloudBackupGenericRequest
+}
+
+type CloudBackupStatusRequest struct {
+	// SrcVolumeID optional volumeID to list status of backup/restore
+	SrcVolumeID string
+	// Local indicates if only those backups/restores that are
+	// active on current node must be returned
+	Local bool
+	// ID of the backup/restore task. If this is specified, SrcVolumeID is
+	// ignored. This could be GroupCloudBackupId too, and in that case multiple
+	// statuses belonging to the groupCloudBackupID is returned.
+	ID string
+}
+
+type CloudBackupStatusRequestOld struct {
+	// Old field for task ID
+	Name string
+	// New structure
+	CloudBackupStatusRequest
+}
+
+type CloudBackupOpType string
+
+const (
+	CloudBackupOp  = CloudBackupOpType("Backup")
+	CloudRestoreOp = CloudBackupOpType("Restore")
+)
+
+type CloudBackupStatusType string
+
+const (
+	CloudBackupStatusNotStarted = CloudBackupStatusType("NotStarted")
+	CloudBackupStatusDone       = CloudBackupStatusType("Done")
+	CloudBackupStatusAborted    = CloudBackupStatusType("Aborted")
+	CloudBackupStatusPaused     = CloudBackupStatusType("Paused")
+	CloudBackupStatusStopped    = CloudBackupStatusType("Stopped")
+	CloudBackupStatusActive     = CloudBackupStatusType("Active")
+	CloudBackupStatusQueued     = CloudBackupStatusType("Queued")
+	CloudBackupStatusFailed     = CloudBackupStatusType("Failed")
+)
+
+const (
+	CloudBackupRequestedStatePause  = "pause"
+	CloudBackupRequestedStateResume = "resume"
+	CloudBackupRequestedStateStop   = "stop"
+)
+
+type CloudBackupStatus struct {
+	// ID is the ID for the operation
+	ID string
+	// OpType indicates if this is a backup or restore
+	OpType CloudBackupOpType
+	// State indicates if the op is currently active/done/failed
+	Status CloudBackupStatusType
+	// BytesDone indicates Bytes uploaded/downloaded so far
+	BytesDone uint64
+	// BytesTotal is the total number of bytes being transferred
+	BytesTotal uint64
+	// EtaSeconds estimated time in seconds for backup/restore completion
+	EtaSeconds int64
+	// StartTime indicates Op's start time
+	StartTime time.Time
+	// CompletedTime indicates Op's completed time
+	CompletedTime time.Time
+	// NodeID is the ID of the node where this Op is active
+	NodeID string
+	// SrcVolumeID is either the volume being backed-up or target volume to
+	// which a cloud backup is being restored
+	SrcVolumeID string
+	// Info currently indicates only failure cause in case of failed backup/restore
+	Info []string
+	// CredentialUUID used for this backup/restore op
+	CredentialUUID string
+	// GroupCloudBackupID is valid for backups that were started as part of group
+	// cloudbackup request
+	GroupCloudBackupID string
+}
+
+type CloudBackupStatusResponse struct {
+	// statuses is list of currently active/failed/done backup/restores
+	// map key is the id of the task
+	Statuses map[string]CloudBackupStatus
+}
+
+type CloudBackupCatalogRequest struct {
+	// ID is Backup ID in the cloud
+	ID string
+	// CredentialUUID is the credential for cloud
+	CredentialUUID string
+}
+
+type CloudBackupCatalogResponse struct {
+	// Contents is listing of backup contents
+	Contents []string
+}
+
+type CloudBackupHistoryRequest struct {
+	// SrcVolumeID is volumeID for which history of backup/restore
+	// is being requested
+	SrcVolumeID string
+}
+
+type CloudBackupHistoryItem struct {
+	// SrcVolumeID is volume ID which was backedup
+	SrcVolumeID string
+	// TimeStamp is the time at which either backup completed/failed
+	Timestamp time.Time
+	// Status indicates whether backup was completed/failed
+	Status string
+}
+
+type CloudBackupHistoryResponse struct {
+	// HistoryList is list of past backup/restores in the cluster
+	HistoryList []CloudBackupHistoryItem
+}
+
+type CloudBackupStateChangeRequest struct {
+	// Name of the backup/restore task for which state change
+	// is being requested
+	Name string
+	// RequestedState is desired state of the op
+	// can be pause/resume/stop
+	RequestedState string
+}
+
+type CloudBackupScheduleInfo struct {
+	// SrcVolumeID is the schedule's source volume
+	SrcVolumeID string
+	// CredentialUUID is the cloud credential used with this schedule
+	CredentialUUID string
+	// Schedule is the frequence of backup
+	Schedule string
+	// MaxBackups are the maximum number of backups retained
+	// in cloud.Older backups are deleted
+	MaxBackups uint
+	// GroupID indicates the group of volumes for this cloudbackup schedule
+	GroupID string
+	// Labels indicates a volume group for this cloudsnap schedule
+	Labels map[string]string
+	// Full indicates if scheduled backups must be full always
+	Full bool
+}
+
+type CloudBackupSchedCreateRequest struct {
+	CloudBackupScheduleInfo
+}
+
+type CloudBackupGroupSchedCreateRequest struct {
+	// GroupID indicates the group of volumes for which cloudbackup schedule is
+	// being created
+	GroupID string
+	// Labels indicates a volume group for which this group cloudsnap schedule is
+	// being created. If this is provided GroupId is not needed and vice-versa.
+	Labels map[string]string
+	// VolumeIDs are a list of volume IDs to use for the backup request
+	// If multiple of GroupID, Labels or VolumeIDs are specified, volumes matching all of
+	// them are backed up to cloud
+	VolumeIDs []string
+	// CredentialUUID is cloud credential to be used with this schedule
+	CredentialUUID string
+	// Schedule is the frequency of backup
+	Schedule string
+	// MaxBackups are the maximum number of backups retained
+	// in cloud.Older backups are deleted
+	MaxBackups uint
+	// Full indicates if scheduled backups must be full always
+	Full bool
+}
+
+type CloudBackupSchedCreateResponse struct {
+	// UUID is the UUID of the newly created schedule
+	UUID string
+}
+
+type CloudBackupSchedDeleteRequest struct {
+	// UUID is UUID of the schedule to be deleted
+	UUID string
+}
+
+type CloudBackupSchedEnumerateResponse struct {
+	// Schedule is map of schedule uuid to scheduleInfo
+	Schedules map[string]CloudBackupScheduleInfo
+}
+
+// Defines the response for CapacityUsage request
+type CapacityUsageResponse struct {
+	CapacityUsageInfo *CapacityUsageInfo
+	// Describes the err if all of the usage details could not be obtained
+	Error error
+}
+
+//
+// DriverTypeSimpleValueOf returns the string format of DriverType
+func DriverTypeSimpleValueOf(s string) (DriverType, error) {
+	obj, err := simpleValueOf("driver_type", DriverType_value, s)
+	return DriverType(obj), err
+}
+
+// SimpleString returns the string format of DriverType
+func (x DriverType) SimpleString() string {
+	return simpleString("driver_type", DriverType_name, int32(x))
+}
+
+// FSTypeSimpleValueOf returns the string format of FSType
+func FSTypeSimpleValueOf(s string) (FSType, error) {
+	obj, err := simpleValueOf("fs_type", FSType_value, s)
+	return FSType(obj), err
+}
+
+// SimpleString returns the string format of DriverType
+func (x FSType) SimpleString() string {
+	return simpleString("fs_type", FSType_name, int32(x))
+}
+
+// CosTypeSimpleValueOf returns the string format of CosType
+func CosTypeSimpleValueOf(s string) (CosType, error) {
+	obj, exists := CosType_value[strings.ToUpper(s)]
+	if !exists {
+		return -1, fmt.Errorf("Invalid cos value: %s", s)
+	}
+	return CosType(obj), nil
+}
+
+// SimpleString returns the string format of CosType
+func (x CosType) SimpleString() string {
+	return simpleString("cos_type", CosType_name, int32(x))
+}
+
+// GraphDriverChangeTypeSimpleValueOf returns the string format of GraphDriverChangeType
+func GraphDriverChangeTypeSimpleValueOf(s string) (GraphDriverChangeType, error) {
+	obj, err := simpleValueOf("graph_driver_change_type", GraphDriverChangeType_value, s)
+	return GraphDriverChangeType(obj), err
+}
+
+// SimpleString returns the string format of GraphDriverChangeType
+func (x GraphDriverChangeType) SimpleString() string {
+	return simpleString("graph_driver_change_type", GraphDriverChangeType_name, int32(x))
+}
+
+// VolumeActionParamSimpleValueOf returns the string format of VolumeAction
+func VolumeActionParamSimpleValueOf(s string) (VolumeActionParam, error) {
+	obj, err := simpleValueOf("volume_action_param", VolumeActionParam_value, s)
+	return VolumeActionParam(obj), err
+}
+
+// SimpleString returns the string format of VolumeAction
+func (x VolumeActionParam) SimpleString() string {
+	return simpleString("volume_action_param", VolumeActionParam_name, int32(x))
+}
+
+// VolumeStateSimpleValueOf returns the string format of VolumeState
+func VolumeStateSimpleValueOf(s string) (VolumeState, error) {
+	obj, err := simpleValueOf("volume_state", VolumeState_value, s)
+	return VolumeState(obj), err
+}
+
+// SimpleString returns the string format of VolumeState
+func (x VolumeState) SimpleString() string {
+	return simpleString("volume_state", VolumeState_name, int32(x))
+}
+
+// VolumeStatusSimpleValueOf returns the string format of VolumeStatus
+func VolumeStatusSimpleValueOf(s string) (VolumeStatus, error) {
+	obj, err := simpleValueOf("volume_status", VolumeStatus_value, s)
+	return VolumeStatus(obj), err
+}
+
+// SimpleString returns the string format of VolumeStatus
+func (x VolumeStatus) SimpleString() string {
+	return simpleString("volume_status", VolumeStatus_name, int32(x))
+}
+
+// IoProfileSimpleValueOf returns the string format of IoProfile
+func IoProfileSimpleValueOf(s string) (IoProfile, error) {
+	obj, err := simpleValueOf("io_profile", IoProfile_value, s)
+	return IoProfile(obj), err
+}
+
+// SimpleString returns the string format of IoProfile
+func (x IoProfile) SimpleString() string {
+	return simpleString("io_profile", IoProfile_name, int32(x))
+}
+
+func simpleValueOf(typeString string, valueMap map[string]int32, s string) (int32, error) {
+	obj, ok := valueMap[strings.ToUpper(fmt.Sprintf("%s_%s", typeString, s))]
+	if !ok {
+		return 0, fmt.Errorf("no openstorage.%s for %s", strings.ToUpper(typeString), s)
+	}
+	return obj, nil
+}
+
+func simpleString(typeString string, nameMap map[int32]string, v int32) string {
+	s, ok := nameMap[v]
+	if !ok {
+		return strconv.Itoa(int(v))
+	}
+	return strings.TrimPrefix(strings.ToLower(s), fmt.Sprintf("%s_", strings.ToLower(typeString)))
+}
+
+func toSec(ms uint64) uint64 {
+	return ms / 1000
+}
+
+// WriteThroughput returns the write throughput
+func (v *Stats) WriteThroughput() uint64 {
+	intv := toSec(v.IntervalMs)
+	if intv == 0 {
+		return 0
+	}
+	return (v.WriteBytes) / intv
+}
+
+// ReadThroughput returns the read throughput
+func (v *Stats) ReadThroughput() uint64 {
+	intv := toSec(v.IntervalMs)
+	if intv == 0 {
+		return 0
+	}
+	return (v.ReadBytes) / intv
+}
+
+// Latency returns latency
+func (v *Stats) Latency() uint64 {
+	ops := v.Writes + v.Reads
+	if ops == 0 {
+		return 0
+	}
+	return (uint64)((v.IoMs * 1000) / ops)
+}
+
+// Read latency returns avg. time required for read operation to complete
+func (v *Stats) ReadLatency() uint64 {
+	if v.Reads == 0 {
+		return 0
+	}
+	return (uint64)((v.ReadMs * 1000) / v.Reads)
+}
+
+// Write latency returns avg. time required for write operation to complete
+func (v *Stats) WriteLatency() uint64 {
+	if v.Writes == 0 {
+		return 0
+	}
+	return (uint64)((v.WriteMs * 1000) / v.Writes)
+}
+
+// Iops returns iops
+func (v *Stats) Iops() uint64 {
+	intv := toSec(v.IntervalMs)
+	if intv == 0 {
+		return 0
+	}
+	return (v.Writes + v.Reads) / intv
+}
+
+// Scaled returns true if the volume is scaled.
+func (v *Volume) Scaled() bool {
+	return v.Spec.Scale > 1
+}
+
+// Contains returns true if mid is a member of volume's replication set.
+func (m *Volume) Contains(mid string) bool {
+	rsets := m.GetReplicaSets()
+	for _, rset := range rsets {
+		for _, node := range rset.Nodes {
+			if node == mid {
+				return true
+			}
+		}
+	}
+	return false
+}
+
+// Copy makes a deep copy of VolumeSpec
+func (s *VolumeSpec) Copy() *VolumeSpec {
+	spec := *s
+	if s.ReplicaSet != nil {
+		spec.ReplicaSet = &ReplicaSet{Nodes: make([]string, len(s.ReplicaSet.Nodes))}
+		copy(spec.ReplicaSet.Nodes, s.ReplicaSet.Nodes)
+	}
+	return &spec
+}
+
+// Copy makes a deep copy of Node
+func (s *Node) Copy() *Node {
+	localCopy := deepcopy.Copy(*s)
+	nodeCopy := localCopy.(Node)
+	return &nodeCopy
+}
+
+func (v Volume) IsClone() bool {
+	return v.Source != nil && len(v.Source.Parent) != 0 && !v.Readonly
+}
+
+func (v Volume) IsSnapshot() bool {
+	return v.Source != nil && len(v.Source.Parent) != 0 && v.Readonly
+}
+
+func (v Volume) DisplayId() string {
+	if v.Locator != nil {
+		return fmt.Sprintf("%s (%s)", v.Locator.Name, v.Id)
+	} else {
+		return v.Id
+	}
+}
+
+// ToStorageNode converts a Node structure to an exported gRPC StorageNode struct
+func (s *Node) ToStorageNode() *StorageNode {
+	node := &StorageNode{
+		Id:                s.Id,
+		SchedulerNodeName: s.SchedulerNodeName,
+		Cpu:               s.Cpu,
+		MemTotal:          s.MemTotal,
+		MemUsed:           s.MemUsed,
+		MemFree:           s.MemFree,
+		AvgLoad:           int64(s.Avgload),
+		Status:            s.Status,
+		MgmtIp:            s.MgmtIp,
+		DataIp:            s.DataIp,
+		Hostname:          s.Hostname,
+	}
+
+	node.Disks = make(map[string]*StorageResource)
+	for k, v := range s.Disks {
+		node.Disks[k] = &v
+	}
+
+	node.NodeLabels = make(map[string]string)
+	for k, v := range s.NodeLabels {
+		node.NodeLabels[k] = v
+	}
+
+	node.Pools = make([]*StoragePool, len(s.Pools))
+	for i, v := range s.Pools {
+		node.Pools[i] = &v
+	}
+
+	return node
+}
+
+// ToStorageCluster converts a Cluster structure to an exported gRPC StorageCluster struct
+func (c *Cluster) ToStorageCluster() *StorageCluster {
+	cluster := &StorageCluster{
+		Status: c.Status,
+
+		// Due to history, the cluster ID is normally the name of the cluster, not the
+		// unique identifier
+		Name: c.Id,
+	}
+
+	return cluster
+}
+
+func CloudBackupStatusTypeToSdkCloudBackupStatusType(
+	t CloudBackupStatusType,
+) SdkCloudBackupStatusType {
+	switch t {
+	case CloudBackupStatusNotStarted:
+		return SdkCloudBackupStatusType_SdkCloudBackupStatusTypeNotStarted
+	case CloudBackupStatusDone:
+		return SdkCloudBackupStatusType_SdkCloudBackupStatusTypeDone
+	case CloudBackupStatusAborted:
+		return SdkCloudBackupStatusType_SdkCloudBackupStatusTypeAborted
+	case CloudBackupStatusPaused:
+		return SdkCloudBackupStatusType_SdkCloudBackupStatusTypePaused
+	case CloudBackupStatusStopped:
+		return SdkCloudBackupStatusType_SdkCloudBackupStatusTypeStopped
+	case CloudBackupStatusActive:
+		return SdkCloudBackupStatusType_SdkCloudBackupStatusTypeActive
+	case CloudBackupStatusFailed:
+		return SdkCloudBackupStatusType_SdkCloudBackupStatusTypeFailed
+	case CloudBackupStatusQueued:
+		return SdkCloudBackupStatusType_SdkCloudBackupStatusTypeQueued
+	default:
+		return SdkCloudBackupStatusType_SdkCloudBackupStatusTypeUnknown
+	}
+}
+
+func SdkCloudBackupStatusTypeToCloudBackupStatusString(
+	t SdkCloudBackupStatusType,
+) string {
+	switch t {
+	case SdkCloudBackupStatusType_SdkCloudBackupStatusTypeNotStarted:
+		return string(CloudBackupStatusNotStarted)
+	case SdkCloudBackupStatusType_SdkCloudBackupStatusTypeDone:
+		return string(CloudBackupStatusDone)
+	case SdkCloudBackupStatusType_SdkCloudBackupStatusTypeAborted:
+		return string(CloudBackupStatusAborted)
+	case SdkCloudBackupStatusType_SdkCloudBackupStatusTypePaused:
+		return string(CloudBackupStatusPaused)
+	case SdkCloudBackupStatusType_SdkCloudBackupStatusTypeStopped:
+		return string(CloudBackupStatusStopped)
+	case SdkCloudBackupStatusType_SdkCloudBackupStatusTypeActive:
+		return string(CloudBackupStatusActive)
+	case SdkCloudBackupStatusType_SdkCloudBackupStatusTypeFailed:
+		return string(CloudBackupStatusFailed)
+	case SdkCloudBackupStatusType_SdkCloudBackupStatusTypeQueued:
+		return string(CloudBackupStatusQueued)
+	default:
+		return string(CloudBackupStatusFailed)
+	}
+}
+
+func StringToSdkCloudBackupStatusType(s string) SdkCloudBackupStatusType {
+	return CloudBackupStatusTypeToSdkCloudBackupStatusType(CloudBackupStatusType(s))
+}
+
+func (b *CloudBackupInfo) ToSdkCloudBackupInfo() *SdkCloudBackupInfo {
+	info := &SdkCloudBackupInfo{
+		Id:            b.ID,
+		SrcVolumeId:   b.SrcVolumeID,
+		SrcVolumeName: b.SrcVolumeName,
+		Metadata:      b.Metadata,
+	}
+
+	info.Timestamp, _ = ptypes.TimestampProto(b.Timestamp)
+	info.Status = StringToSdkCloudBackupStatusType(b.Status)
+
+	return info
+}
+
+func (r *CloudBackupEnumerateResponse) ToSdkCloudBackupEnumerateWithFiltersResponse() *SdkCloudBackupEnumerateWithFiltersResponse {
+	resp := &SdkCloudBackupEnumerateWithFiltersResponse{
+		Backups: make([]*SdkCloudBackupInfo, len(r.Backups)),
+	}
+
+	for i, v := range r.Backups {
+		resp.Backups[i] = v.ToSdkCloudBackupInfo()
+	}
+
+	return resp
+}
+
+func CloudBackupOpTypeToSdkCloudBackupOpType(t CloudBackupOpType) SdkCloudBackupOpType {
+	switch t {
+	case CloudBackupOp:
+		return SdkCloudBackupOpType_SdkCloudBackupOpTypeBackupOp
+	case CloudRestoreOp:
+		return SdkCloudBackupOpType_SdkCloudBackupOpTypeRestoreOp
+	default:
+		return SdkCloudBackupOpType_SdkCloudBackupOpTypeUnknown
+	}
+}
+
+func StringToSdkCloudBackupOpType(s string) SdkCloudBackupOpType {
+	return CloudBackupOpTypeToSdkCloudBackupOpType(CloudBackupOpType(s))
+}
+
+func SdkCloudBackupOpTypeToCloudBackupOpType(t SdkCloudBackupOpType) CloudBackupOpType {
+	switch t {
+	case SdkCloudBackupOpType_SdkCloudBackupOpTypeBackupOp:
+		return CloudBackupOp
+	case SdkCloudBackupOpType_SdkCloudBackupOpTypeRestoreOp:
+		return CloudRestoreOp
+	default:
+		return CloudBackupOpType("Unknown")
+	}
+}
+
+func (s CloudBackupStatus) ToSdkCloudBackupStatus() *SdkCloudBackupStatus {
+	status := &SdkCloudBackupStatus{
+		BackupId:     s.ID,
+		Optype:       CloudBackupOpTypeToSdkCloudBackupOpType(s.OpType),
+		Status:       CloudBackupStatusTypeToSdkCloudBackupStatusType(s.Status),
+		BytesDone:    s.BytesDone,
+		NodeId:       s.NodeID,
+		Info:         s.Info,
+		CredentialId: s.CredentialUUID,
+		SrcVolumeId:  s.SrcVolumeID,
+		EtaSeconds:   s.EtaSeconds,
+		BytesTotal:   s.BytesTotal,
+	}
+
+	status.StartTime, _ = ptypes.TimestampProto(s.StartTime)
+	status.CompletedTime, _ = ptypes.TimestampProto(s.CompletedTime)
+
+	return status
+}
+
+func (r *CloudBackupStatusResponse) ToSdkCloudBackupStatusResponse() *SdkCloudBackupStatusResponse {
+	resp := &SdkCloudBackupStatusResponse{
+		Statuses: make(map[string]*SdkCloudBackupStatus),
+	}
+
+	for k, v := range r.Statuses {
+		resp.Statuses[k] = v.ToSdkCloudBackupStatus()
+	}
+
+	return resp
+}
+
+func (h CloudBackupHistoryItem) ToSdkCloudBackupHistoryItem() *SdkCloudBackupHistoryItem {
+	item := &SdkCloudBackupHistoryItem{
+		SrcVolumeId: h.SrcVolumeID,
+		Status:      StringToSdkCloudBackupStatusType(h.Status),
+	}
+
+	item.Timestamp, _ = ptypes.TimestampProto(h.Timestamp)
+	return item
+}
+
+func (r *CloudBackupHistoryResponse) ToSdkCloudBackupHistoryResponse() *SdkCloudBackupHistoryResponse {
+	resp := &SdkCloudBackupHistoryResponse{
+		HistoryList: make([]*SdkCloudBackupHistoryItem, len(r.HistoryList)),
+	}
+
+	for i, v := range r.HistoryList {
+		resp.HistoryList[i] = v.ToSdkCloudBackupHistoryItem()
+	}
+
+	return resp
+}
+
+func (l *VolumeLocator) MergeVolumeSpecLabels(s *VolumeSpec) *VolumeLocator {
+	for k, v := range s.GetVolumeLabels() {
+		l.VolumeLabels[k] = v
+	}
+
+	return l
+}
+
+func (v *Volume) IsPermitted(ctx context.Context, accessType Ownership_AccessType) bool {
+	return v.GetSpec().IsPermitted(ctx, accessType)
+}
+
+func (v *VolumeSpec) IsPermitted(ctx context.Context, accessType Ownership_AccessType) bool {
+	return v.GetOwnership().IsPermittedByContext(ctx, accessType)
+}
+
+func (v *VolumeSpec) IsPermittedFromUserInfo(user *auth.UserInfo, accessType Ownership_AccessType) bool {
+	if v.IsPublic() {
+		return true
+	}
+
+	if v.GetOwnership() != nil {
+		return v.GetOwnership().IsPermitted(user, accessType)
+	}
+	return true
+}
+
+func (v *VolumeSpec) IsPublic() bool {
+	return v.GetOwnership() == nil || v.GetOwnership().IsPublic()
+}
+
+// GetCloneCreatorOwnership returns the appropriate ownership for the
+// new snapshot and if an update is required
+func (v *VolumeSpec) GetCloneCreatorOwnership(ctx context.Context) (*Ownership, bool) {
+	o := v.GetOwnership()
+
+	// If there is user information, then auth is enabled
+	if userinfo, ok := auth.NewUserInfoFromContext(ctx); ok {
+
+		// Check if the owner is the one who cloned it
+		if o != nil && o.IsOwner(userinfo) {
+			return o, false
+		}
+
+		// Not the same owner, we now need new ownership.
+		// This works for public volumes also.
+		return OwnershipSetUsernameFromContext(ctx, nil), true
+	}
+
+	return o, false
+}
+
+// Check access permission of SdkStoragePolicy Objects
+
+func (s *SdkStoragePolicy) IsPermitted(ctx context.Context, accessType Ownership_AccessType) bool {
+	if s.IsPublic() {
+		return true
+	}
+
+	// Storage Policy is not public, check permission
+	if userinfo, ok := auth.NewUserInfoFromContext(ctx); ok {
+		// Check Access
+		return s.IsPermittedFromUserInfo(userinfo, accessType)
+	} else {
+		// There is no user information in the context so
+		// authorization is not running
+		return true
+	}
+}
+
+func (s *SdkStoragePolicy) IsPermittedFromUserInfo(user *auth.UserInfo, accessType Ownership_AccessType) bool {
+	if s.IsPublic() {
+		return true
+	}
+
+	if s.GetOwnership() != nil {
+		return s.GetOwnership().IsPermitted(user, accessType)
+	}
+	return true
+}
+
+func (s *SdkStoragePolicy) IsPublic() bool {
+	return s.GetOwnership() == nil || s.GetOwnership().IsPublic()
+}
+
+func CloudBackupRequestedStateToSdkCloudBackupRequestedState(
+	t string,
+) SdkCloudBackupRequestedState {
+	switch t {
+	case CloudBackupRequestedStateStop:
+		return SdkCloudBackupRequestedState_SdkCloudBackupRequestedStateStop
+	case CloudBackupRequestedStatePause:
+		return SdkCloudBackupRequestedState_SdkCloudBackupRequestedStatePause
+	case CloudBackupRequestedStateResume:
+		return SdkCloudBackupRequestedState_SdkCloudBackupRequestedStateResume
+	default:
+		return SdkCloudBackupRequestedState_SdkCloudBackupRequestedStateUnknown
+	}
+}
+
+// Helpers for volume state action
+func (m *VolumeStateAction) IsAttach() bool {
+	return m.GetAttach() == VolumeActionParam_VOLUME_ACTION_PARAM_ON
+}
+
+func (m *VolumeStateAction) IsDetach() bool {
+	return m.GetAttach() == VolumeActionParam_VOLUME_ACTION_PARAM_OFF
+}
+
+func (m *VolumeStateAction) IsMount() bool {
+	return m.GetMount() == VolumeActionParam_VOLUME_ACTION_PARAM_ON
+}
+
+func (m *VolumeStateAction) IsUnMount() bool {
+	return m.GetMount() == VolumeActionParam_VOLUME_ACTION_PARAM_OFF
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/api/api.pb.go b/vendor/github.com/libopenstorage/openstorage/api/api.pb.go
new file mode 100644
index 000000000..9db7dfbe0
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/api/api.pb.go
@@ -0,0 +1,21670 @@
+// Code generated by protoc-gen-go. DO NOT EDIT.
+// source: api/api.proto
+
+package api
+
+import proto "github.com/golang/protobuf/proto"
+import fmt "fmt"
+import math "math"
+import timestamp "github.com/golang/protobuf/ptypes/timestamp"
+import _ "google.golang.org/genproto/googleapis/api/annotations"
+
+import (
+	context "golang.org/x/net/context"
+	grpc "google.golang.org/grpc"
+)
+
+// Reference imports to suppress errors if they are not otherwise used.
+var _ = proto.Marshal
+var _ = fmt.Errorf
+var _ = math.Inf
+
+// This is a compile-time assertion to ensure that this generated file
+// is compatible with the proto package it is being compiled against.
+// A compilation error at this line likely means your copy of the
+// proto package needs to be updated.
+const _ = proto.ProtoPackageIsVersion2 // please upgrade the proto package
+
+type Status int32
+
+const (
+	Status_STATUS_NONE                     Status = 0
+	Status_STATUS_INIT                     Status = 1
+	Status_STATUS_OK                       Status = 2
+	Status_STATUS_OFFLINE                  Status = 3
+	Status_STATUS_ERROR                    Status = 4
+	Status_STATUS_NOT_IN_QUORUM            Status = 5
+	Status_STATUS_DECOMMISSION             Status = 6
+	Status_STATUS_MAINTENANCE              Status = 7
+	Status_STATUS_STORAGE_DOWN             Status = 8
+	Status_STATUS_STORAGE_DEGRADED         Status = 9
+	Status_STATUS_NEEDS_REBOOT             Status = 10
+	Status_STATUS_STORAGE_REBALANCE        Status = 11
+	Status_STATUS_STORAGE_DRIVE_REPLACE    Status = 12
+	Status_STATUS_NOT_IN_QUORUM_NO_STORAGE Status = 13
+	// Add statuses before MAX and update the number for MAX
+	Status_STATUS_MAX Status = 14
+)
+
+var Status_name = map[int32]string{
+	0:  "STATUS_NONE",
+	1:  "STATUS_INIT",
+	2:  "STATUS_OK",
+	3:  "STATUS_OFFLINE",
+	4:  "STATUS_ERROR",
+	5:  "STATUS_NOT_IN_QUORUM",
+	6:  "STATUS_DECOMMISSION",
+	7:  "STATUS_MAINTENANCE",
+	8:  "STATUS_STORAGE_DOWN",
+	9:  "STATUS_STORAGE_DEGRADED",
+	10: "STATUS_NEEDS_REBOOT",
+	11: "STATUS_STORAGE_REBALANCE",
+	12: "STATUS_STORAGE_DRIVE_REPLACE",
+	13: "STATUS_NOT_IN_QUORUM_NO_STORAGE",
+	14: "STATUS_MAX",
+}
+var Status_value = map[string]int32{
+	"STATUS_NONE":                     0,
+	"STATUS_INIT":                     1,
+	"STATUS_OK":                       2,
+	"STATUS_OFFLINE":                  3,
+	"STATUS_ERROR":                    4,
+	"STATUS_NOT_IN_QUORUM":            5,
+	"STATUS_DECOMMISSION":             6,
+	"STATUS_MAINTENANCE":              7,
+	"STATUS_STORAGE_DOWN":             8,
+	"STATUS_STORAGE_DEGRADED":         9,
+	"STATUS_NEEDS_REBOOT":             10,
+	"STATUS_STORAGE_REBALANCE":        11,
+	"STATUS_STORAGE_DRIVE_REPLACE":    12,
+	"STATUS_NOT_IN_QUORUM_NO_STORAGE": 13,
+	"STATUS_MAX":                      14,
+}
+
+func (x Status) String() string {
+	return proto.EnumName(Status_name, int32(x))
+}
+func (Status) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{0}
+}
+
+type DriverType int32
+
+const (
+	DriverType_DRIVER_TYPE_NONE      DriverType = 0
+	DriverType_DRIVER_TYPE_FILE      DriverType = 1
+	DriverType_DRIVER_TYPE_BLOCK     DriverType = 2
+	DriverType_DRIVER_TYPE_OBJECT    DriverType = 3
+	DriverType_DRIVER_TYPE_CLUSTERED DriverType = 4
+	DriverType_DRIVER_TYPE_GRAPH     DriverType = 5
+)
+
+var DriverType_name = map[int32]string{
+	0: "DRIVER_TYPE_NONE",
+	1: "DRIVER_TYPE_FILE",
+	2: "DRIVER_TYPE_BLOCK",
+	3: "DRIVER_TYPE_OBJECT",
+	4: "DRIVER_TYPE_CLUSTERED",
+	5: "DRIVER_TYPE_GRAPH",
+}
+var DriverType_value = map[string]int32{
+	"DRIVER_TYPE_NONE":      0,
+	"DRIVER_TYPE_FILE":      1,
+	"DRIVER_TYPE_BLOCK":     2,
+	"DRIVER_TYPE_OBJECT":    3,
+	"DRIVER_TYPE_CLUSTERED": 4,
+	"DRIVER_TYPE_GRAPH":     5,
+}
+
+func (x DriverType) String() string {
+	return proto.EnumName(DriverType_name, int32(x))
+}
+func (DriverType) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{1}
+}
+
+type FSType int32
+
+const (
+	FSType_FS_TYPE_NONE  FSType = 0
+	FSType_FS_TYPE_BTRFS FSType = 1
+	FSType_FS_TYPE_EXT4  FSType = 2
+	FSType_FS_TYPE_FUSE  FSType = 3
+	FSType_FS_TYPE_NFS   FSType = 4
+	FSType_FS_TYPE_VFS   FSType = 5
+	FSType_FS_TYPE_XFS   FSType = 6
+	FSType_FS_TYPE_ZFS   FSType = 7
+	FSType_FS_TYPE_XFSv2 FSType = 8
+)
+
+var FSType_name = map[int32]string{
+	0: "FS_TYPE_NONE",
+	1: "FS_TYPE_BTRFS",
+	2: "FS_TYPE_EXT4",
+	3: "FS_TYPE_FUSE",
+	4: "FS_TYPE_NFS",
+	5: "FS_TYPE_VFS",
+	6: "FS_TYPE_XFS",
+	7: "FS_TYPE_ZFS",
+	8: "FS_TYPE_XFSv2",
+}
+var FSType_value = map[string]int32{
+	"FS_TYPE_NONE":  0,
+	"FS_TYPE_BTRFS": 1,
+	"FS_TYPE_EXT4":  2,
+	"FS_TYPE_FUSE":  3,
+	"FS_TYPE_NFS":   4,
+	"FS_TYPE_VFS":   5,
+	"FS_TYPE_XFS":   6,
+	"FS_TYPE_ZFS":   7,
+	"FS_TYPE_XFSv2": 8,
+}
+
+func (x FSType) String() string {
+	return proto.EnumName(FSType_name, int32(x))
+}
+func (FSType) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{2}
+}
+
+type GraphDriverChangeType int32
+
+const (
+	GraphDriverChangeType_GRAPH_DRIVER_CHANGE_TYPE_NONE     GraphDriverChangeType = 0
+	GraphDriverChangeType_GRAPH_DRIVER_CHANGE_TYPE_MODIFIED GraphDriverChangeType = 1
+	GraphDriverChangeType_GRAPH_DRIVER_CHANGE_TYPE_ADDED    GraphDriverChangeType = 2
+	GraphDriverChangeType_GRAPH_DRIVER_CHANGE_TYPE_DELETED  GraphDriverChangeType = 3
+)
+
+var GraphDriverChangeType_name = map[int32]string{
+	0: "GRAPH_DRIVER_CHANGE_TYPE_NONE",
+	1: "GRAPH_DRIVER_CHANGE_TYPE_MODIFIED",
+	2: "GRAPH_DRIVER_CHANGE_TYPE_ADDED",
+	3: "GRAPH_DRIVER_CHANGE_TYPE_DELETED",
+}
+var GraphDriverChangeType_value = map[string]int32{
+	"GRAPH_DRIVER_CHANGE_TYPE_NONE":     0,
+	"GRAPH_DRIVER_CHANGE_TYPE_MODIFIED": 1,
+	"GRAPH_DRIVER_CHANGE_TYPE_ADDED":    2,
+	"GRAPH_DRIVER_CHANGE_TYPE_DELETED":  3,
+}
+
+func (x GraphDriverChangeType) String() string {
+	return proto.EnumName(GraphDriverChangeType_name, int32(x))
+}
+func (GraphDriverChangeType) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{3}
+}
+
+type SeverityType int32
+
+const (
+	SeverityType_SEVERITY_TYPE_NONE    SeverityType = 0
+	SeverityType_SEVERITY_TYPE_ALARM   SeverityType = 1
+	SeverityType_SEVERITY_TYPE_WARNING SeverityType = 2
+	SeverityType_SEVERITY_TYPE_NOTIFY  SeverityType = 3
+)
+
+var SeverityType_name = map[int32]string{
+	0: "SEVERITY_TYPE_NONE",
+	1: "SEVERITY_TYPE_ALARM",
+	2: "SEVERITY_TYPE_WARNING",
+	3: "SEVERITY_TYPE_NOTIFY",
+}
+var SeverityType_value = map[string]int32{
+	"SEVERITY_TYPE_NONE":    0,
+	"SEVERITY_TYPE_ALARM":   1,
+	"SEVERITY_TYPE_WARNING": 2,
+	"SEVERITY_TYPE_NOTIFY":  3,
+}
+
+func (x SeverityType) String() string {
+	return proto.EnumName(SeverityType_name, int32(x))
+}
+func (SeverityType) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{4}
+}
+
+type ResourceType int32
+
+const (
+	ResourceType_RESOURCE_TYPE_NONE    ResourceType = 0
+	ResourceType_RESOURCE_TYPE_VOLUME  ResourceType = 1
+	ResourceType_RESOURCE_TYPE_NODE    ResourceType = 2
+	ResourceType_RESOURCE_TYPE_CLUSTER ResourceType = 3
+	ResourceType_RESOURCE_TYPE_DRIVE   ResourceType = 4
+)
+
+var ResourceType_name = map[int32]string{
+	0: "RESOURCE_TYPE_NONE",
+	1: "RESOURCE_TYPE_VOLUME",
+	2: "RESOURCE_TYPE_NODE",
+	3: "RESOURCE_TYPE_CLUSTER",
+	4: "RESOURCE_TYPE_DRIVE",
+}
+var ResourceType_value = map[string]int32{
+	"RESOURCE_TYPE_NONE":    0,
+	"RESOURCE_TYPE_VOLUME":  1,
+	"RESOURCE_TYPE_NODE":    2,
+	"RESOURCE_TYPE_CLUSTER": 3,
+	"RESOURCE_TYPE_DRIVE":   4,
+}
+
+func (x ResourceType) String() string {
+	return proto.EnumName(ResourceType_name, int32(x))
+}
+func (ResourceType) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{5}
+}
+
+type AlertActionType int32
+
+const (
+	AlertActionType_ALERT_ACTION_TYPE_NONE   AlertActionType = 0
+	AlertActionType_ALERT_ACTION_TYPE_DELETE AlertActionType = 1
+	AlertActionType_ALERT_ACTION_TYPE_CREATE AlertActionType = 2
+	AlertActionType_ALERT_ACTION_TYPE_UPDATE AlertActionType = 3
+)
+
+var AlertActionType_name = map[int32]string{
+	0: "ALERT_ACTION_TYPE_NONE",
+	1: "ALERT_ACTION_TYPE_DELETE",
+	2: "ALERT_ACTION_TYPE_CREATE",
+	3: "ALERT_ACTION_TYPE_UPDATE",
+}
+var AlertActionType_value = map[string]int32{
+	"ALERT_ACTION_TYPE_NONE":   0,
+	"ALERT_ACTION_TYPE_DELETE": 1,
+	"ALERT_ACTION_TYPE_CREATE": 2,
+	"ALERT_ACTION_TYPE_UPDATE": 3,
+}
+
+func (x AlertActionType) String() string {
+	return proto.EnumName(AlertActionType_name, int32(x))
+}
+func (AlertActionType) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{6}
+}
+
+type VolumeActionParam int32
+
+const (
+	VolumeActionParam_VOLUME_ACTION_PARAM_NONE VolumeActionParam = 0
+	// Maps to the boolean value false
+	VolumeActionParam_VOLUME_ACTION_PARAM_OFF VolumeActionParam = 1
+	// Maps to the boolean value true.
+	VolumeActionParam_VOLUME_ACTION_PARAM_ON VolumeActionParam = 2
+)
+
+var VolumeActionParam_name = map[int32]string{
+	0: "VOLUME_ACTION_PARAM_NONE",
+	1: "VOLUME_ACTION_PARAM_OFF",
+	2: "VOLUME_ACTION_PARAM_ON",
+}
+var VolumeActionParam_value = map[string]int32{
+	"VOLUME_ACTION_PARAM_NONE": 0,
+	"VOLUME_ACTION_PARAM_OFF":  1,
+	"VOLUME_ACTION_PARAM_ON":   2,
+}
+
+func (x VolumeActionParam) String() string {
+	return proto.EnumName(VolumeActionParam_name, int32(x))
+}
+func (VolumeActionParam) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{7}
+}
+
+type CosType int32
+
+const (
+	CosType_NONE   CosType = 0
+	CosType_LOW    CosType = 1
+	CosType_MEDIUM CosType = 2
+	CosType_HIGH   CosType = 3
+)
+
+var CosType_name = map[int32]string{
+	0: "NONE",
+	1: "LOW",
+	2: "MEDIUM",
+	3: "HIGH",
+}
+var CosType_value = map[string]int32{
+	"NONE":   0,
+	"LOW":    1,
+	"MEDIUM": 2,
+	"HIGH":   3,
+}
+
+func (x CosType) String() string {
+	return proto.EnumName(CosType_name, int32(x))
+}
+func (CosType) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{8}
+}
+
+type IoProfile int32
+
+const (
+	IoProfile_IO_PROFILE_SEQUENTIAL IoProfile = 0
+	IoProfile_IO_PROFILE_RANDOM     IoProfile = 1
+	IoProfile_IO_PROFILE_DB         IoProfile = 2
+	IoProfile_IO_PROFILE_DB_REMOTE  IoProfile = 3
+	IoProfile_IO_PROFILE_CMS        IoProfile = 4
+)
+
+var IoProfile_name = map[int32]string{
+	0: "IO_PROFILE_SEQUENTIAL",
+	1: "IO_PROFILE_RANDOM",
+	2: "IO_PROFILE_DB",
+	3: "IO_PROFILE_DB_REMOTE",
+	4: "IO_PROFILE_CMS",
+}
+var IoProfile_value = map[string]int32{
+	"IO_PROFILE_SEQUENTIAL": 0,
+	"IO_PROFILE_RANDOM":     1,
+	"IO_PROFILE_DB":         2,
+	"IO_PROFILE_DB_REMOTE":  3,
+	"IO_PROFILE_CMS":        4,
+}
+
+func (x IoProfile) String() string {
+	return proto.EnumName(IoProfile_name, int32(x))
+}
+func (IoProfile) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{9}
+}
+
+// VolumeState represents the state of a volume.
+type VolumeState int32
+
+const (
+	VolumeState_VOLUME_STATE_NONE VolumeState = 0
+	// Volume is transitioning to new state
+	VolumeState_VOLUME_STATE_PENDING VolumeState = 1
+	// Volume is ready to be assigned to a container
+	VolumeState_VOLUME_STATE_AVAILABLE VolumeState = 2
+	// Volume is attached to container
+	VolumeState_VOLUME_STATE_ATTACHED VolumeState = 3
+	// Volume is detached but associated with a container
+	VolumeState_VOLUME_STATE_DETACHED VolumeState = 4
+	// Volume detach is in progress
+	VolumeState_VOLUME_STATE_DETATCHING VolumeState = 5
+	// Volume is in error state
+	VolumeState_VOLUME_STATE_ERROR VolumeState = 6
+	// Volume is deleted, it will remain in this state
+	// while resources are asynchronously reclaimed
+	VolumeState_VOLUME_STATE_DELETED VolumeState = 7
+	// Volume is trying to be detached
+	VolumeState_VOLUME_STATE_TRY_DETACHING VolumeState = 8
+	// Volume is undergoing restore
+	VolumeState_VOLUME_STATE_RESTORE VolumeState = 9
+)
+
+var VolumeState_name = map[int32]string{
+	0: "VOLUME_STATE_NONE",
+	1: "VOLUME_STATE_PENDING",
+	2: "VOLUME_STATE_AVAILABLE",
+	3: "VOLUME_STATE_ATTACHED",
+	4: "VOLUME_STATE_DETACHED",
+	5: "VOLUME_STATE_DETATCHING",
+	6: "VOLUME_STATE_ERROR",
+	7: "VOLUME_STATE_DELETED",
+	8: "VOLUME_STATE_TRY_DETACHING",
+	9: "VOLUME_STATE_RESTORE",
+}
+var VolumeState_value = map[string]int32{
+	"VOLUME_STATE_NONE":          0,
+	"VOLUME_STATE_PENDING":       1,
+	"VOLUME_STATE_AVAILABLE":     2,
+	"VOLUME_STATE_ATTACHED":      3,
+	"VOLUME_STATE_DETACHED":      4,
+	"VOLUME_STATE_DETATCHING":    5,
+	"VOLUME_STATE_ERROR":         6,
+	"VOLUME_STATE_DELETED":       7,
+	"VOLUME_STATE_TRY_DETACHING": 8,
+	"VOLUME_STATE_RESTORE":       9,
+}
+
+func (x VolumeState) String() string {
+	return proto.EnumName(VolumeState_name, int32(x))
+}
+func (VolumeState) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{10}
+}
+
+// VolumeStatus represents a health status for a volume.
+type VolumeStatus int32
+
+const (
+	VolumeStatus_VOLUME_STATUS_NONE VolumeStatus = 0
+	// Volume is not present
+	VolumeStatus_VOLUME_STATUS_NOT_PRESENT VolumeStatus = 1
+	// Volume is healthy
+	VolumeStatus_VOLUME_STATUS_UP VolumeStatus = 2
+	// Volume is in fail mode
+	VolumeStatus_VOLUME_STATUS_DOWN VolumeStatus = 3
+	// Volume is up but with degraded performance
+	// In a RAID group, this may indicate a problem with one or more drives
+	VolumeStatus_VOLUME_STATUS_DEGRADED VolumeStatus = 4
+)
+
+var VolumeStatus_name = map[int32]string{
+	0: "VOLUME_STATUS_NONE",
+	1: "VOLUME_STATUS_NOT_PRESENT",
+	2: "VOLUME_STATUS_UP",
+	3: "VOLUME_STATUS_DOWN",
+	4: "VOLUME_STATUS_DEGRADED",
+}
+var VolumeStatus_value = map[string]int32{
+	"VOLUME_STATUS_NONE":        0,
+	"VOLUME_STATUS_NOT_PRESENT": 1,
+	"VOLUME_STATUS_UP":          2,
+	"VOLUME_STATUS_DOWN":        3,
+	"VOLUME_STATUS_DEGRADED":    4,
+}
+
+func (x VolumeStatus) String() string {
+	return proto.EnumName(VolumeStatus_name, int32(x))
+}
+func (VolumeStatus) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{11}
+}
+
+type StorageMedium int32
+
+const (
+	// Magnetic spinning disk.
+	StorageMedium_STORAGE_MEDIUM_MAGNETIC StorageMedium = 0
+	// SSD disk
+	StorageMedium_STORAGE_MEDIUM_SSD StorageMedium = 1
+	// NVME disk
+	StorageMedium_STORAGE_MEDIUM_NVME StorageMedium = 2
+)
+
+var StorageMedium_name = map[int32]string{
+	0: "STORAGE_MEDIUM_MAGNETIC",
+	1: "STORAGE_MEDIUM_SSD",
+	2: "STORAGE_MEDIUM_NVME",
+}
+var StorageMedium_value = map[string]int32{
+	"STORAGE_MEDIUM_MAGNETIC": 0,
+	"STORAGE_MEDIUM_SSD":      1,
+	"STORAGE_MEDIUM_NVME":     2,
+}
+
+func (x StorageMedium) String() string {
+	return proto.EnumName(StorageMedium_name, int32(x))
+}
+func (StorageMedium) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{12}
+}
+
+type AttachState int32
+
+const (
+	// Attached and available externally
+	AttachState_ATTACH_STATE_EXTERNAL AttachState = 0
+	// Attached but only available internally
+	AttachState_ATTACH_STATE_INTERNAL AttachState = 1
+	// Switching from External to Internal
+	AttachState_ATTACH_STATE_INTERNAL_SWITCH AttachState = 2
+)
+
+var AttachState_name = map[int32]string{
+	0: "ATTACH_STATE_EXTERNAL",
+	1: "ATTACH_STATE_INTERNAL",
+	2: "ATTACH_STATE_INTERNAL_SWITCH",
+}
+var AttachState_value = map[string]int32{
+	"ATTACH_STATE_EXTERNAL":        0,
+	"ATTACH_STATE_INTERNAL":        1,
+	"ATTACH_STATE_INTERNAL_SWITCH": 2,
+}
+
+func (x AttachState) String() string {
+	return proto.EnumName(AttachState_name, int32(x))
+}
+func (AttachState) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{13}
+}
+
+type OperationFlags int32
+
+const (
+	OperationFlags_OP_FLAGS_UNKNOWN OperationFlags = 0
+	OperationFlags_OP_FLAGS_NONE    OperationFlags = 1
+	// Perform a force_detach during detach operation
+	OperationFlags_OP_FLAGS_DETACH_FORCE OperationFlags = 2
+)
+
+var OperationFlags_name = map[int32]string{
+	0: "OP_FLAGS_UNKNOWN",
+	1: "OP_FLAGS_NONE",
+	2: "OP_FLAGS_DETACH_FORCE",
+}
+var OperationFlags_value = map[string]int32{
+	"OP_FLAGS_UNKNOWN":      0,
+	"OP_FLAGS_NONE":         1,
+	"OP_FLAGS_DETACH_FORCE": 2,
+}
+
+func (x OperationFlags) String() string {
+	return proto.EnumName(OperationFlags_name, int32(x))
+}
+func (OperationFlags) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{14}
+}
+
+// Defines times of day
+type SdkTimeWeekday int32
+
+const (
+	// Sunday
+	SdkTimeWeekday_SdkTimeWeekdaySunday SdkTimeWeekday = 0
+	// Monday
+	SdkTimeWeekday_SdkTimeWeekdayMonday SdkTimeWeekday = 1
+	// Tuesday
+	SdkTimeWeekday_SdkTimeWeekdayTuesday SdkTimeWeekday = 2
+	// Wednesday
+	SdkTimeWeekday_SdkTimeWeekdayWednesday SdkTimeWeekday = 3
+	// Thursday
+	SdkTimeWeekday_SdkTimeWeekdayThursday SdkTimeWeekday = 4
+	// Friday
+	SdkTimeWeekday_SdkTimeWeekdayFriday SdkTimeWeekday = 5
+	// Saturday
+	SdkTimeWeekday_SdkTimeWeekdaySaturday SdkTimeWeekday = 6
+)
+
+var SdkTimeWeekday_name = map[int32]string{
+	0: "SdkTimeWeekdaySunday",
+	1: "SdkTimeWeekdayMonday",
+	2: "SdkTimeWeekdayTuesday",
+	3: "SdkTimeWeekdayWednesday",
+	4: "SdkTimeWeekdayThursday",
+	5: "SdkTimeWeekdayFriday",
+	6: "SdkTimeWeekdaySaturday",
+}
+var SdkTimeWeekday_value = map[string]int32{
+	"SdkTimeWeekdaySunday":    0,
+	"SdkTimeWeekdayMonday":    1,
+	"SdkTimeWeekdayTuesday":   2,
+	"SdkTimeWeekdayWednesday": 3,
+	"SdkTimeWeekdayThursday":  4,
+	"SdkTimeWeekdayFriday":    5,
+	"SdkTimeWeekdaySaturday":  6,
+}
+
+func (x SdkTimeWeekday) String() string {
+	return proto.EnumName(SdkTimeWeekday_name, int32(x))
+}
+func (SdkTimeWeekday) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{15}
+}
+
+// CloudBackup operations types
+type SdkCloudBackupOpType int32
+
+const (
+	// Unknown
+	SdkCloudBackupOpType_SdkCloudBackupOpTypeUnknown SdkCloudBackupOpType = 0
+	// Backup
+	SdkCloudBackupOpType_SdkCloudBackupOpTypeBackupOp SdkCloudBackupOpType = 1
+	// Restore
+	SdkCloudBackupOpType_SdkCloudBackupOpTypeRestoreOp SdkCloudBackupOpType = 2
+)
+
+var SdkCloudBackupOpType_name = map[int32]string{
+	0: "SdkCloudBackupOpTypeUnknown",
+	1: "SdkCloudBackupOpTypeBackupOp",
+	2: "SdkCloudBackupOpTypeRestoreOp",
+}
+var SdkCloudBackupOpType_value = map[string]int32{
+	"SdkCloudBackupOpTypeUnknown":   0,
+	"SdkCloudBackupOpTypeBackupOp":  1,
+	"SdkCloudBackupOpTypeRestoreOp": 2,
+}
+
+func (x SdkCloudBackupOpType) String() string {
+	return proto.EnumName(SdkCloudBackupOpType_name, int32(x))
+}
+func (SdkCloudBackupOpType) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{16}
+}
+
+// CloudBackup status types
+type SdkCloudBackupStatusType int32
+
+const (
+	// Unkonwn
+	SdkCloudBackupStatusType_SdkCloudBackupStatusTypeUnknown SdkCloudBackupStatusType = 0
+	// Not started
+	SdkCloudBackupStatusType_SdkCloudBackupStatusTypeNotStarted SdkCloudBackupStatusType = 1
+	// Done
+	SdkCloudBackupStatusType_SdkCloudBackupStatusTypeDone SdkCloudBackupStatusType = 2
+	// Aborted
+	SdkCloudBackupStatusType_SdkCloudBackupStatusTypeAborted SdkCloudBackupStatusType = 3
+	// Paused
+	SdkCloudBackupStatusType_SdkCloudBackupStatusTypePaused SdkCloudBackupStatusType = 4
+	// Stopped
+	SdkCloudBackupStatusType_SdkCloudBackupStatusTypeStopped SdkCloudBackupStatusType = 5
+	// Active
+	SdkCloudBackupStatusType_SdkCloudBackupStatusTypeActive SdkCloudBackupStatusType = 6
+	// Failed
+	SdkCloudBackupStatusType_SdkCloudBackupStatusTypeFailed SdkCloudBackupStatusType = 7
+	// Queued
+	SdkCloudBackupStatusType_SdkCloudBackupStatusTypeQueued SdkCloudBackupStatusType = 8
+)
+
+var SdkCloudBackupStatusType_name = map[int32]string{
+	0: "SdkCloudBackupStatusTypeUnknown",
+	1: "SdkCloudBackupStatusTypeNotStarted",
+	2: "SdkCloudBackupStatusTypeDone",
+	3: "SdkCloudBackupStatusTypeAborted",
+	4: "SdkCloudBackupStatusTypePaused",
+	5: "SdkCloudBackupStatusTypeStopped",
+	6: "SdkCloudBackupStatusTypeActive",
+	7: "SdkCloudBackupStatusTypeFailed",
+	8: "SdkCloudBackupStatusTypeQueued",
+}
+var SdkCloudBackupStatusType_value = map[string]int32{
+	"SdkCloudBackupStatusTypeUnknown":    0,
+	"SdkCloudBackupStatusTypeNotStarted": 1,
+	"SdkCloudBackupStatusTypeDone":       2,
+	"SdkCloudBackupStatusTypeAborted":    3,
+	"SdkCloudBackupStatusTypePaused":     4,
+	"SdkCloudBackupStatusTypeStopped":    5,
+	"SdkCloudBackupStatusTypeActive":     6,
+	"SdkCloudBackupStatusTypeFailed":     7,
+	"SdkCloudBackupStatusTypeQueued":     8,
+}
+
+func (x SdkCloudBackupStatusType) String() string {
+	return proto.EnumName(SdkCloudBackupStatusType_name, int32(x))
+}
+func (SdkCloudBackupStatusType) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{17}
+}
+
+// SdkCloudBackupRequestedState defines states to set a specified backup or restore
+// to or from a cloud provider
+type SdkCloudBackupRequestedState int32
+
+const (
+	// Unknown state
+	SdkCloudBackupRequestedState_SdkCloudBackupRequestedStateUnknown SdkCloudBackupRequestedState = 0
+	// Pause the backup or restore
+	SdkCloudBackupRequestedState_SdkCloudBackupRequestedStatePause SdkCloudBackupRequestedState = 1
+	// Resume the backup or restore
+	SdkCloudBackupRequestedState_SdkCloudBackupRequestedStateResume SdkCloudBackupRequestedState = 2
+	// Stop a backup or restore
+	SdkCloudBackupRequestedState_SdkCloudBackupRequestedStateStop SdkCloudBackupRequestedState = 3
+)
+
+var SdkCloudBackupRequestedState_name = map[int32]string{
+	0: "SdkCloudBackupRequestedStateUnknown",
+	1: "SdkCloudBackupRequestedStatePause",
+	2: "SdkCloudBackupRequestedStateResume",
+	3: "SdkCloudBackupRequestedStateStop",
+}
+var SdkCloudBackupRequestedState_value = map[string]int32{
+	"SdkCloudBackupRequestedStateUnknown": 0,
+	"SdkCloudBackupRequestedStatePause":   1,
+	"SdkCloudBackupRequestedStateResume":  2,
+	"SdkCloudBackupRequestedStateStop":    3,
+}
+
+func (x SdkCloudBackupRequestedState) String() string {
+	return proto.EnumName(SdkCloudBackupRequestedState_name, int32(x))
+}
+func (SdkCloudBackupRequestedState) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{18}
+}
+
+// This defines an operator for the policy comparisons
+type VolumeSpecPolicy_PolicyOp int32
+
+const (
+	// Policy will make sure the value must be equal
+	VolumeSpecPolicy_Equal VolumeSpecPolicy_PolicyOp = 0
+	// Policy will make sure the requested value must be greater than or equal
+	VolumeSpecPolicy_Minimum VolumeSpecPolicy_PolicyOp = 1
+	// Policy will make sure the requested value must be less than or equal
+	VolumeSpecPolicy_Maximum VolumeSpecPolicy_PolicyOp = 2
+)
+
+var VolumeSpecPolicy_PolicyOp_name = map[int32]string{
+	0: "Equal",
+	1: "Minimum",
+	2: "Maximum",
+}
+var VolumeSpecPolicy_PolicyOp_value = map[string]int32{
+	"Equal":   0,
+	"Minimum": 1,
+	"Maximum": 2,
+}
+
+func (x VolumeSpecPolicy_PolicyOp) String() string {
+	return proto.EnumName(VolumeSpecPolicy_PolicyOp_name, int32(x))
+}
+func (VolumeSpecPolicy_PolicyOp) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{9, 0}
+}
+
+// Access types can be set by owner to have different levels of access to
+// a resource.
+//
+// It is up to the resource to interpret what the types mean and are
+// used for.
+type Ownership_AccessType int32
+
+const (
+	// Read access only and cannot affect the resource.
+	Ownership_Read Ownership_AccessType = 0
+	// Write access and can affect the resource.
+	// This type automatically provides Read access also.
+	Ownership_Write Ownership_AccessType = 1
+	// Administrator access.
+	// This type automatically provides Read and Write access also.
+	Ownership_Admin Ownership_AccessType = 2
+)
+
+var Ownership_AccessType_name = map[int32]string{
+	0: "Read",
+	1: "Write",
+	2: "Admin",
+}
+var Ownership_AccessType_value = map[string]int32{
+	"Read":  0,
+	"Write": 1,
+	"Admin": 2,
+}
+
+func (x Ownership_AccessType) String() string {
+	return proto.EnumName(Ownership_AccessType_name, int32(x))
+}
+func (Ownership_AccessType) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{12, 0}
+}
+
+type SdkServiceCapability_OpenStorageService_Type int32
+
+const (
+	// Unknown service
+	SdkServiceCapability_OpenStorageService_UNKNOWN SdkServiceCapability_OpenStorageService_Type = 0
+	// Cluster management
+	SdkServiceCapability_OpenStorageService_CLUSTER SdkServiceCapability_OpenStorageService_Type = 1
+	// Cloud backup of volumes management
+	SdkServiceCapability_OpenStorageService_CLOUD_BACKUP SdkServiceCapability_OpenStorageService_Type = 2
+	// Credentials management
+	SdkServiceCapability_OpenStorageService_CREDENTIALS SdkServiceCapability_OpenStorageService_Type = 3
+	// Node management
+	SdkServiceCapability_OpenStorageService_NODE SdkServiceCapability_OpenStorageService_Type = 4
+	// Object Storage management
+	SdkServiceCapability_OpenStorageService_OBJECT_STORAGE SdkServiceCapability_OpenStorageService_Type = 5
+	// Schedule policy management
+	SdkServiceCapability_OpenStorageService_SCHEDULE_POLICY SdkServiceCapability_OpenStorageService_Type = 6
+	// Volume management
+	SdkServiceCapability_OpenStorageService_VOLUME SdkServiceCapability_OpenStorageService_Type = 7
+	// Alert enumeration
+	SdkServiceCapability_OpenStorageService_ALERTS SdkServiceCapability_OpenStorageService_Type = 8
+	// Mount/Attach Support
+	SdkServiceCapability_OpenStorageService_MOUNT_ATTACH SdkServiceCapability_OpenStorageService_Type = 9
+	// Role service
+	SdkServiceCapability_OpenStorageService_ROLE SdkServiceCapability_OpenStorageService_Type = 10
+	// Cluster Pair service
+	SdkServiceCapability_OpenStorageService_CLUSTER_PAIR SdkServiceCapability_OpenStorageService_Type = 11
+	// Migrate service
+	SdkServiceCapability_OpenStorageService_MIGRATE SdkServiceCapability_OpenStorageService_Type = 12
+	// StoragePolicy Service
+	SdkServiceCapability_OpenStorageService_STORAGE_POLICY SdkServiceCapability_OpenStorageService_Type = 13
+)
+
+var SdkServiceCapability_OpenStorageService_Type_name = map[int32]string{
+	0:  "UNKNOWN",
+	1:  "CLUSTER",
+	2:  "CLOUD_BACKUP",
+	3:  "CREDENTIALS",
+	4:  "NODE",
+	5:  "OBJECT_STORAGE",
+	6:  "SCHEDULE_POLICY",
+	7:  "VOLUME",
+	8:  "ALERTS",
+	9:  "MOUNT_ATTACH",
+	10: "ROLE",
+	11: "CLUSTER_PAIR",
+	12: "MIGRATE",
+	13: "STORAGE_POLICY",
+}
+var SdkServiceCapability_OpenStorageService_Type_value = map[string]int32{
+	"UNKNOWN":         0,
+	"CLUSTER":         1,
+	"CLOUD_BACKUP":    2,
+	"CREDENTIALS":     3,
+	"NODE":            4,
+	"OBJECT_STORAGE":  5,
+	"SCHEDULE_POLICY": 6,
+	"VOLUME":          7,
+	"ALERTS":          8,
+	"MOUNT_ATTACH":    9,
+	"ROLE":            10,
+	"CLUSTER_PAIR":    11,
+	"MIGRATE":         12,
+	"STORAGE_POLICY":  13,
+}
+
+func (x SdkServiceCapability_OpenStorageService_Type) String() string {
+	return proto.EnumName(SdkServiceCapability_OpenStorageService_Type_name, int32(x))
+}
+func (SdkServiceCapability_OpenStorageService_Type) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{206, 0, 0}
+}
+
+// These values are constants that can be used by the
+// client and server applications
+type SdkVersion_Version int32
+
+const (
+	// Must be set in the proto file; ignore.
+	SdkVersion_MUST_HAVE_ZERO_VALUE SdkVersion_Version = 0
+	// SDK version major value of this specification
+	SdkVersion_Major SdkVersion_Version = 0
+	// SDK version minor value of this specification
+	SdkVersion_Minor SdkVersion_Version = 52
+	// SDK version patch value of this specification
+	SdkVersion_Patch SdkVersion_Version = 0
+)
+
+var SdkVersion_Version_name = map[int32]string{
+	0: "MUST_HAVE_ZERO_VALUE",
+	// Duplicate value: 0: "Major",
+	52: "Minor",
+	// Duplicate value: 0: "Patch",
+}
+var SdkVersion_Version_value = map[string]int32{
+	"MUST_HAVE_ZERO_VALUE": 0,
+	"Major":                0,
+	"Minor":                52,
+	"Patch":                0,
+}
+
+func (x SdkVersion_Version) String() string {
+	return proto.EnumName(SdkVersion_Version_name, int32(x))
+}
+func (SdkVersion_Version) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{207, 0}
+}
+
+type CloudMigrate_OperationType int32
+
+const (
+	CloudMigrate_InvalidType CloudMigrate_OperationType = 0
+	// Migrate all volumes in the cluster
+	CloudMigrate_MigrateCluster CloudMigrate_OperationType = 1
+	// Migrate a single volume
+	CloudMigrate_MigrateVolume CloudMigrate_OperationType = 2
+	// Migrate a group of volumes
+	CloudMigrate_MigrateVolumeGroup CloudMigrate_OperationType = 3
+)
+
+var CloudMigrate_OperationType_name = map[int32]string{
+	0: "InvalidType",
+	1: "MigrateCluster",
+	2: "MigrateVolume",
+	3: "MigrateVolumeGroup",
+}
+var CloudMigrate_OperationType_value = map[string]int32{
+	"InvalidType":        0,
+	"MigrateCluster":     1,
+	"MigrateVolume":      2,
+	"MigrateVolumeGroup": 3,
+}
+
+func (x CloudMigrate_OperationType) String() string {
+	return proto.EnumName(CloudMigrate_OperationType_name, int32(x))
+}
+func (CloudMigrate_OperationType) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{209, 0}
+}
+
+type CloudMigrate_Stage int32
+
+const (
+	CloudMigrate_InvalidStage CloudMigrate_Stage = 0
+	CloudMigrate_Backup       CloudMigrate_Stage = 1
+	CloudMigrate_Restore      CloudMigrate_Stage = 2
+	CloudMigrate_VolumeUpdate CloudMigrate_Stage = 3
+	CloudMigrate_Done         CloudMigrate_Stage = 4
+)
+
+var CloudMigrate_Stage_name = map[int32]string{
+	0: "InvalidStage",
+	1: "Backup",
+	2: "Restore",
+	3: "VolumeUpdate",
+	4: "Done",
+}
+var CloudMigrate_Stage_value = map[string]int32{
+	"InvalidStage": 0,
+	"Backup":       1,
+	"Restore":      2,
+	"VolumeUpdate": 3,
+	"Done":         4,
+}
+
+func (x CloudMigrate_Stage) String() string {
+	return proto.EnumName(CloudMigrate_Stage_name, int32(x))
+}
+func (CloudMigrate_Stage) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{209, 1}
+}
+
+type CloudMigrate_Status int32
+
+const (
+	CloudMigrate_InvalidStatus CloudMigrate_Status = 0
+	CloudMigrate_Queued        CloudMigrate_Status = 1
+	CloudMigrate_Initialized   CloudMigrate_Status = 2
+	CloudMigrate_InProgress    CloudMigrate_Status = 3
+	CloudMigrate_Failed        CloudMigrate_Status = 4
+	CloudMigrate_Complete      CloudMigrate_Status = 5
+	CloudMigrate_Canceled      CloudMigrate_Status = 6
+)
+
+var CloudMigrate_Status_name = map[int32]string{
+	0: "InvalidStatus",
+	1: "Queued",
+	2: "Initialized",
+	3: "InProgress",
+	4: "Failed",
+	5: "Complete",
+	6: "Canceled",
+}
+var CloudMigrate_Status_value = map[string]int32{
+	"InvalidStatus": 0,
+	"Queued":        1,
+	"Initialized":   2,
+	"InProgress":    3,
+	"Failed":        4,
+	"Complete":      5,
+	"Canceled":      6,
+}
+
+func (x CloudMigrate_Status) String() string {
+	return proto.EnumName(CloudMigrate_Status_name, int32(x))
+}
+func (CloudMigrate_Status) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{209, 2}
+}
+
+type ClusterPairMode_Mode int32
+
+const (
+	// Default pairing mode
+	ClusterPairMode_Default ClusterPairMode_Mode = 0
+	// Paired for DisasterRecovery
+	ClusterPairMode_DisasterRecovery ClusterPairMode_Mode = 1
+)
+
+var ClusterPairMode_Mode_name = map[int32]string{
+	0: "Default",
+	1: "DisasterRecovery",
+}
+var ClusterPairMode_Mode_value = map[string]int32{
+	"Default":          0,
+	"DisasterRecovery": 1,
+}
+
+func (x ClusterPairMode_Mode) String() string {
+	return proto.EnumName(ClusterPairMode_Mode_name, int32(x))
+}
+func (ClusterPairMode_Mode) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{223, 0}
+}
+
+// Defines the types of enforcement on the given rules
+type VolumePlacementRule_EnforcementType int32
+
+const (
+	// This specifies that the rule is required and must be strictly enforced
+	VolumePlacementRule_required VolumePlacementRule_EnforcementType = 0
+	// This specifies that the rule is preferred and can be best effort
+	VolumePlacementRule_preferred VolumePlacementRule_EnforcementType = 1
+)
+
+var VolumePlacementRule_EnforcementType_name = map[int32]string{
+	0: "required",
+	1: "preferred",
+}
+var VolumePlacementRule_EnforcementType_value = map[string]int32{
+	"required":  0,
+	"preferred": 1,
+}
+
+func (x VolumePlacementRule_EnforcementType) String() string {
+	return proto.EnumName(VolumePlacementRule_EnforcementType_name, int32(x))
+}
+func (VolumePlacementRule_EnforcementType) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{249, 0}
+}
+
+// This specifies the type an affinity rule can take
+type VolumePlacementRule_AffinityRuleType int32
+
+const (
+	// Affinity means the rule specifies an affinity to objects that match the below label selector requirements
+	VolumePlacementRule_affinity VolumePlacementRule_AffinityRuleType = 0
+	// AntiAffinity means the rule specifies an anti-affinity to objects that match the below label selector requirements
+	VolumePlacementRule_antiAffinity VolumePlacementRule_AffinityRuleType = 1
+)
+
+var VolumePlacementRule_AffinityRuleType_name = map[int32]string{
+	0: "affinity",
+	1: "antiAffinity",
+}
+var VolumePlacementRule_AffinityRuleType_value = map[string]int32{
+	"affinity":     0,
+	"antiAffinity": 1,
+}
+
+func (x VolumePlacementRule_AffinityRuleType) String() string {
+	return proto.EnumName(VolumePlacementRule_AffinityRuleType_name, int32(x))
+}
+func (VolumePlacementRule_AffinityRuleType) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{249, 1}
+}
+
+// This defines operator types used in a label matching rule
+type LabelSelectorRequirement_Operator int32
+
+const (
+	// In means the value for 'key' should be in one of the given value(s)
+	LabelSelectorRequirement_In LabelSelectorRequirement_Operator = 0
+	// NotIn means the value for 'key' should NOT be in one of the given value(s)
+	LabelSelectorRequirement_NotIn LabelSelectorRequirement_Operator = 1
+	// Exists means the 'key' should just exist regardless of the value
+	LabelSelectorRequirement_Exists LabelSelectorRequirement_Operator = 2
+	// DoesNotExist means the 'key' should NOT exist
+	LabelSelectorRequirement_DoesNotExist LabelSelectorRequirement_Operator = 3
+	// Gt means the 'key' should be greater than the value(s)
+	LabelSelectorRequirement_Gt LabelSelectorRequirement_Operator = 4
+	// Lt means the 'key' should be less than the value(s)
+	LabelSelectorRequirement_Lt LabelSelectorRequirement_Operator = 5
+)
+
+var LabelSelectorRequirement_Operator_name = map[int32]string{
+	0: "In",
+	1: "NotIn",
+	2: "Exists",
+	3: "DoesNotExist",
+	4: "Gt",
+	5: "Lt",
+}
+var LabelSelectorRequirement_Operator_value = map[string]int32{
+	"In":           0,
+	"NotIn":        1,
+	"Exists":       2,
+	"DoesNotExist": 3,
+	"Gt":           4,
+	"Lt":           5,
+}
+
+func (x LabelSelectorRequirement_Operator) String() string {
+	return proto.EnumName(LabelSelectorRequirement_Operator_name, int32(x))
+}
+func (LabelSelectorRequirement_Operator) EnumDescriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{250, 0}
+}
+
+// StorageResource groups properties of a storage device.
+type StorageResource struct {
+	// Id is the LUN identifier.
+	Id string `protobuf:"bytes,1,opt,name=id" json:"id,omitempty"`
+	// Path device path for this storage resource.
+	Path string `protobuf:"bytes,2,opt,name=path" json:"path,omitempty"`
+	// Storage medium.
+	Medium StorageMedium `protobuf:"varint,3,opt,name=medium,enum=openstorage.api.StorageMedium" json:"medium,omitempty"`
+	// True if this device is online.
+	Online bool `protobuf:"varint,4,opt,name=online" json:"online,omitempty"`
+	// IOPS
+	Iops uint64 `protobuf:"varint,5,opt,name=iops" json:"iops,omitempty"`
+	// SeqWrite
+	SeqWrite float64 `protobuf:"fixed64,6,opt,name=seq_write,json=seqWrite" json:"seq_write,omitempty"`
+	// SeqRead
+	SeqRead float64 `protobuf:"fixed64,7,opt,name=seq_read,json=seqRead" json:"seq_read,omitempty"`
+	// RandRW
+	RandRW float64 `protobuf:"fixed64,8,opt,name=randRW" json:"randRW,omitempty"`
+	// Total size in bytes.
+	Size uint64 `protobuf:"varint,9,opt,name=size" json:"size,omitempty"`
+	// Physical Bytes used.
+	Used uint64 `protobuf:"varint,10,opt,name=used" json:"used,omitempty"`
+	// True if this device is rotational.
+	RotationSpeed string `protobuf:"bytes,11,opt,name=rotation_speed,json=rotationSpeed" json:"rotation_speed,omitempty"`
+	// Timestamp of last time this device was scanned.
+	LastScan *timestamp.Timestamp `protobuf:"bytes,12,opt,name=last_scan,json=lastScan" json:"last_scan,omitempty"`
+	// True if dedicated for metadata.
+	Metadata bool `protobuf:"varint,13,opt,name=metadata" json:"metadata,omitempty"`
+	// True if dedicated as cache
+	Cache                bool     `protobuf:"varint,14,opt,name=cache" json:"cache,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *StorageResource) Reset()         { *m = StorageResource{} }
+func (m *StorageResource) String() string { return proto.CompactTextString(m) }
+func (*StorageResource) ProtoMessage()    {}
+func (*StorageResource) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{0}
+}
+func (m *StorageResource) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_StorageResource.Unmarshal(m, b)
+}
+func (m *StorageResource) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_StorageResource.Marshal(b, m, deterministic)
+}
+func (dst *StorageResource) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_StorageResource.Merge(dst, src)
+}
+func (m *StorageResource) XXX_Size() int {
+	return xxx_messageInfo_StorageResource.Size(m)
+}
+func (m *StorageResource) XXX_DiscardUnknown() {
+	xxx_messageInfo_StorageResource.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_StorageResource proto.InternalMessageInfo
+
+func (m *StorageResource) GetId() string {
+	if m != nil {
+		return m.Id
+	}
+	return ""
+}
+
+func (m *StorageResource) GetPath() string {
+	if m != nil {
+		return m.Path
+	}
+	return ""
+}
+
+func (m *StorageResource) GetMedium() StorageMedium {
+	if m != nil {
+		return m.Medium
+	}
+	return StorageMedium_STORAGE_MEDIUM_MAGNETIC
+}
+
+func (m *StorageResource) GetOnline() bool {
+	if m != nil {
+		return m.Online
+	}
+	return false
+}
+
+func (m *StorageResource) GetIops() uint64 {
+	if m != nil {
+		return m.Iops
+	}
+	return 0
+}
+
+func (m *StorageResource) GetSeqWrite() float64 {
+	if m != nil {
+		return m.SeqWrite
+	}
+	return 0
+}
+
+func (m *StorageResource) GetSeqRead() float64 {
+	if m != nil {
+		return m.SeqRead
+	}
+	return 0
+}
+
+func (m *StorageResource) GetRandRW() float64 {
+	if m != nil {
+		return m.RandRW
+	}
+	return 0
+}
+
+func (m *StorageResource) GetSize() uint64 {
+	if m != nil {
+		return m.Size
+	}
+	return 0
+}
+
+func (m *StorageResource) GetUsed() uint64 {
+	if m != nil {
+		return m.Used
+	}
+	return 0
+}
+
+func (m *StorageResource) GetRotationSpeed() string {
+	if m != nil {
+		return m.RotationSpeed
+	}
+	return ""
+}
+
+func (m *StorageResource) GetLastScan() *timestamp.Timestamp {
+	if m != nil {
+		return m.LastScan
+	}
+	return nil
+}
+
+func (m *StorageResource) GetMetadata() bool {
+	if m != nil {
+		return m.Metadata
+	}
+	return false
+}
+
+func (m *StorageResource) GetCache() bool {
+	if m != nil {
+		return m.Cache
+	}
+	return false
+}
+
+// StoragePool groups different storage devices based on their CosType
+type StoragePool struct {
+	// ID pool ID
+	ID int32 `protobuf:"varint,1,opt,name=ID" json:"ID,omitempty"`
+	// Cos reflects the capabilities of this drive pool
+	Cos CosType `protobuf:"varint,2,opt,name=Cos,enum=openstorage.api.CosType" json:"Cos,omitempty"`
+	// Medium underlying storage type
+	Medium StorageMedium `protobuf:"varint,3,opt,name=Medium,enum=openstorage.api.StorageMedium" json:"Medium,omitempty"`
+	// RaidLevel storage raid level
+	RaidLevel string `protobuf:"bytes,4,opt,name=RaidLevel" json:"RaidLevel,omitempty"`
+	// TotalSize of the pool
+	TotalSize uint64 `protobuf:"varint,7,opt,name=TotalSize" json:"TotalSize,omitempty"`
+	// Used size of the pool
+	Used uint64 `protobuf:"varint,8,opt,name=Used" json:"Used,omitempty"`
+	// Labels is a list of user defined name-value pairs
+	Labels               map[string]string `protobuf:"bytes,9,rep,name=labels" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *StoragePool) Reset()         { *m = StoragePool{} }
+func (m *StoragePool) String() string { return proto.CompactTextString(m) }
+func (*StoragePool) ProtoMessage()    {}
+func (*StoragePool) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{1}
+}
+func (m *StoragePool) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_StoragePool.Unmarshal(m, b)
+}
+func (m *StoragePool) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_StoragePool.Marshal(b, m, deterministic)
+}
+func (dst *StoragePool) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_StoragePool.Merge(dst, src)
+}
+func (m *StoragePool) XXX_Size() int {
+	return xxx_messageInfo_StoragePool.Size(m)
+}
+func (m *StoragePool) XXX_DiscardUnknown() {
+	xxx_messageInfo_StoragePool.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_StoragePool proto.InternalMessageInfo
+
+func (m *StoragePool) GetID() int32 {
+	if m != nil {
+		return m.ID
+	}
+	return 0
+}
+
+func (m *StoragePool) GetCos() CosType {
+	if m != nil {
+		return m.Cos
+	}
+	return CosType_NONE
+}
+
+func (m *StoragePool) GetMedium() StorageMedium {
+	if m != nil {
+		return m.Medium
+	}
+	return StorageMedium_STORAGE_MEDIUM_MAGNETIC
+}
+
+func (m *StoragePool) GetRaidLevel() string {
+	if m != nil {
+		return m.RaidLevel
+	}
+	return ""
+}
+
+func (m *StoragePool) GetTotalSize() uint64 {
+	if m != nil {
+		return m.TotalSize
+	}
+	return 0
+}
+
+func (m *StoragePool) GetUsed() uint64 {
+	if m != nil {
+		return m.Used
+	}
+	return 0
+}
+
+func (m *StoragePool) GetLabels() map[string]string {
+	if m != nil {
+		return m.Labels
+	}
+	return nil
+}
+
+// VolumeLocator is a structure that is attached to a volume
+// and is used to carry opaque metadata.
+type VolumeLocator struct {
+	// User friendly identifier
+	Name string `protobuf:"bytes,1,opt,name=name" json:"name,omitempty"`
+	// A set of name-value pairs that acts as search filters
+	VolumeLabels map[string]string `protobuf:"bytes,2,rep,name=volume_labels,json=volumeLabels" json:"volume_labels,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	// Filter with ownership
+	Ownership *Ownership `protobuf:"bytes,3,opt,name=ownership" json:"ownership,omitempty"`
+	// Filter by group
+	Group *Group `protobuf:"bytes,4,opt,name=group" json:"group,omitempty"`
+	// Volume Ids to match
+	VolumeIds            []string `protobuf:"bytes,5,rep,name=volume_ids,json=volumeIds" json:"volume_ids,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *VolumeLocator) Reset()         { *m = VolumeLocator{} }
+func (m *VolumeLocator) String() string { return proto.CompactTextString(m) }
+func (*VolumeLocator) ProtoMessage()    {}
+func (*VolumeLocator) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{2}
+}
+func (m *VolumeLocator) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_VolumeLocator.Unmarshal(m, b)
+}
+func (m *VolumeLocator) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_VolumeLocator.Marshal(b, m, deterministic)
+}
+func (dst *VolumeLocator) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_VolumeLocator.Merge(dst, src)
+}
+func (m *VolumeLocator) XXX_Size() int {
+	return xxx_messageInfo_VolumeLocator.Size(m)
+}
+func (m *VolumeLocator) XXX_DiscardUnknown() {
+	xxx_messageInfo_VolumeLocator.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_VolumeLocator proto.InternalMessageInfo
+
+func (m *VolumeLocator) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+func (m *VolumeLocator) GetVolumeLabels() map[string]string {
+	if m != nil {
+		return m.VolumeLabels
+	}
+	return nil
+}
+
+func (m *VolumeLocator) GetOwnership() *Ownership {
+	if m != nil {
+		return m.Ownership
+	}
+	return nil
+}
+
+func (m *VolumeLocator) GetGroup() *Group {
+	if m != nil {
+		return m.Group
+	}
+	return nil
+}
+
+func (m *VolumeLocator) GetVolumeIds() []string {
+	if m != nil {
+		return m.VolumeIds
+	}
+	return nil
+}
+
+// Options used for volume inspection
+type VolumeInspectOptions struct {
+	// Deep inspection is used to collect more information about
+	// the volume. Setting this value may delay the request.
+	Deep                 bool     `protobuf:"varint,1,opt,name=deep" json:"deep,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *VolumeInspectOptions) Reset()         { *m = VolumeInspectOptions{} }
+func (m *VolumeInspectOptions) String() string { return proto.CompactTextString(m) }
+func (*VolumeInspectOptions) ProtoMessage()    {}
+func (*VolumeInspectOptions) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{3}
+}
+func (m *VolumeInspectOptions) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_VolumeInspectOptions.Unmarshal(m, b)
+}
+func (m *VolumeInspectOptions) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_VolumeInspectOptions.Marshal(b, m, deterministic)
+}
+func (dst *VolumeInspectOptions) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_VolumeInspectOptions.Merge(dst, src)
+}
+func (m *VolumeInspectOptions) XXX_Size() int {
+	return xxx_messageInfo_VolumeInspectOptions.Size(m)
+}
+func (m *VolumeInspectOptions) XXX_DiscardUnknown() {
+	xxx_messageInfo_VolumeInspectOptions.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_VolumeInspectOptions proto.InternalMessageInfo
+
+func (m *VolumeInspectOptions) GetDeep() bool {
+	if m != nil {
+		return m.Deep
+	}
+	return false
+}
+
+// Source is a structure that can be given to a volume
+// to seed the volume with data.
+type Source struct {
+	// A volume id, if specified will create a clone of the parent.
+	Parent string `protobuf:"bytes,1,opt,name=parent" json:"parent,omitempty"`
+	// Seed will seed the volume from the specified URI
+	// Any additional config for the source comes from the labels in the spec
+	Seed                 string   `protobuf:"bytes,2,opt,name=seed" json:"seed,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *Source) Reset()         { *m = Source{} }
+func (m *Source) String() string { return proto.CompactTextString(m) }
+func (*Source) ProtoMessage()    {}
+func (*Source) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{4}
+}
+func (m *Source) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_Source.Unmarshal(m, b)
+}
+func (m *Source) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_Source.Marshal(b, m, deterministic)
+}
+func (dst *Source) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_Source.Merge(dst, src)
+}
+func (m *Source) XXX_Size() int {
+	return xxx_messageInfo_Source.Size(m)
+}
+func (m *Source) XXX_DiscardUnknown() {
+	xxx_messageInfo_Source.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_Source proto.InternalMessageInfo
+
+func (m *Source) GetParent() string {
+	if m != nil {
+		return m.Parent
+	}
+	return ""
+}
+
+func (m *Source) GetSeed() string {
+	if m != nil {
+		return m.Seed
+	}
+	return ""
+}
+
+// Group represents VolumeGroup / namespace
+// All volumes in the same group share this object.
+type Group struct {
+	// Id common identifier across volumes that have the same group.
+	Id                   string   `protobuf:"bytes,1,opt,name=id" json:"id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *Group) Reset()         { *m = Group{} }
+func (m *Group) String() string { return proto.CompactTextString(m) }
+func (*Group) ProtoMessage()    {}
+func (*Group) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{5}
+}
+func (m *Group) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_Group.Unmarshal(m, b)
+}
+func (m *Group) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_Group.Marshal(b, m, deterministic)
+}
+func (dst *Group) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_Group.Merge(dst, src)
+}
+func (m *Group) XXX_Size() int {
+	return xxx_messageInfo_Group.Size(m)
+}
+func (m *Group) XXX_DiscardUnknown() {
+	xxx_messageInfo_Group.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_Group proto.InternalMessageInfo
+
+func (m *Group) GetId() string {
+	if m != nil {
+		return m.Id
+	}
+	return ""
+}
+
+// IoStrategy defines how I/O should be performed to backing storage media.
+type IoStrategy struct {
+	// AsyncIO enables kaio.
+	AsyncIo bool `protobuf:"varint,1,opt,name=async_io,json=asyncIo" json:"async_io,omitempty"`
+	// EarlyAck enables acks for async I/O at the source.
+	EarlyAck             bool     `protobuf:"varint,2,opt,name=early_ack,json=earlyAck" json:"early_ack,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *IoStrategy) Reset()         { *m = IoStrategy{} }
+func (m *IoStrategy) String() string { return proto.CompactTextString(m) }
+func (*IoStrategy) ProtoMessage()    {}
+func (*IoStrategy) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{6}
+}
+func (m *IoStrategy) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_IoStrategy.Unmarshal(m, b)
+}
+func (m *IoStrategy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_IoStrategy.Marshal(b, m, deterministic)
+}
+func (dst *IoStrategy) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_IoStrategy.Merge(dst, src)
+}
+func (m *IoStrategy) XXX_Size() int {
+	return xxx_messageInfo_IoStrategy.Size(m)
+}
+func (m *IoStrategy) XXX_DiscardUnknown() {
+	xxx_messageInfo_IoStrategy.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_IoStrategy proto.InternalMessageInfo
+
+func (m *IoStrategy) GetAsyncIo() bool {
+	if m != nil {
+		return m.AsyncIo
+	}
+	return false
+}
+
+func (m *IoStrategy) GetEarlyAck() bool {
+	if m != nil {
+		return m.EarlyAck
+	}
+	return false
+}
+
+// VolumeSpec has the properties needed to create a volume.
+type VolumeSpec struct {
+	// Ephemeral storage
+	Ephemeral bool `protobuf:"varint,1,opt,name=ephemeral" json:"ephemeral,omitempty"`
+	// Size specifies the thin provisioned volume size in bytes
+	Size uint64 `protobuf:"varint,2,opt,name=size" json:"size,omitempty"`
+	// Format specifies the filesystem for this volume.
+	Format FSType `protobuf:"varint,3,opt,name=format,enum=openstorage.api.FSType" json:"format,omitempty"`
+	// BlockSize for the filesystem.
+	BlockSize int64 `protobuf:"varint,4,opt,name=block_size,json=blockSize" json:"block_size,omitempty"`
+	// HaLevel specifies the number of copies of data.
+	HaLevel int64 `protobuf:"varint,5,opt,name=ha_level,json=haLevel" json:"ha_level,omitempty"`
+	// Cos specifies the relative class of service.
+	Cos CosType `protobuf:"varint,6,opt,name=cos,enum=openstorage.api.CosType" json:"cos,omitempty"`
+	// IoProfile provides a hint about application using this volume.
+	IoProfile IoProfile `protobuf:"varint,7,opt,name=io_profile,json=ioProfile,enum=openstorage.api.IoProfile" json:"io_profile,omitempty"`
+	// Dedupe specifies if the volume data is to be de-duplicated.
+	Dedupe bool `protobuf:"varint,8,opt,name=dedupe" json:"dedupe,omitempty"`
+	// SnapshotInterval in minutes, set to 0 to disable snapshots
+	SnapshotInterval uint32 `protobuf:"varint,9,opt,name=snapshot_interval,json=snapshotInterval" json:"snapshot_interval,omitempty"`
+	// (deprecated, do not use) VolumeLabels configuration labels
+	VolumeLabels map[string]string `protobuf:"bytes,10,rep,name=volume_labels,json=volumeLabels" json:"volume_labels,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	// Shared is true if this volume can be concurrently accessed by multiple users.
+	Shared bool `protobuf:"varint,11,opt,name=shared" json:"shared,omitempty"`
+	// ReplicaSet is the desired set of nodes for the volume data.
+	ReplicaSet *ReplicaSet `protobuf:"bytes,12,opt,name=replica_set,json=replicaSet" json:"replica_set,omitempty"`
+	// Aggregation level Specifies the number of parts the volume can be aggregated from.
+	AggregationLevel uint32 `protobuf:"varint,13,opt,name=aggregation_level,json=aggregationLevel" json:"aggregation_level,omitempty"`
+	// Encrypted is true if this volume will be cryptographically secured.
+	Encrypted bool `protobuf:"varint,14,opt,name=encrypted" json:"encrypted,omitempty"`
+	// Passphrase for an encrypted volume
+	Passphrase string `protobuf:"bytes,15,opt,name=passphrase" json:"passphrase,omitempty"`
+	// SnapshotSchedule a well known string that specifies when snapshots should be taken.
+	SnapshotSchedule string `protobuf:"bytes,16,opt,name=snapshot_schedule,json=snapshotSchedule" json:"snapshot_schedule,omitempty"`
+	// Scale allows autocreation of volumes.
+	Scale uint32 `protobuf:"varint,17,opt,name=scale" json:"scale,omitempty"`
+	// Sticky volumes cannot be deleted until the flag is removed.
+	Sticky bool `protobuf:"varint,18,opt,name=sticky" json:"sticky,omitempty"`
+	// Group identifies a consistency group
+	Group *Group `protobuf:"bytes,21,opt,name=group" json:"group,omitempty"`
+	// GroupEnforced is true if consistency group creation is enforced.
+	GroupEnforced bool `protobuf:"varint,22,opt,name=group_enforced,json=groupEnforced" json:"group_enforced,omitempty"`
+	// Compressed is true if this volume is to be compressed.
+	Compressed bool `protobuf:"varint,23,opt,name=compressed" json:"compressed,omitempty"`
+	// Cascaded is true if this volume can be populated on any node from an external source.
+	Cascaded bool `protobuf:"varint,24,opt,name=cascaded" json:"cascaded,omitempty"`
+	// Journal is true if data for the volume goes into the journal.
+	Journal bool `protobuf:"varint,25,opt,name=journal" json:"journal,omitempty"`
+	// Sharedv4 is true if this volume can be accessed via sharedv4.
+	Sharedv4 bool `protobuf:"varint,26,opt,name=sharedv4" json:"sharedv4,omitempty"`
+	// QueueDepth defines the desired block device queue depth
+	QueueDepth uint32 `protobuf:"varint,27,opt,name=queue_depth,json=queueDepth" json:"queue_depth,omitempty"`
+	// Use to force a file system type which is not recommended.
+	// The driver may still refuse to use the file system type.
+	ForceUnsupportedFsType bool `protobuf:"varint,28,opt,name=force_unsupported_fs_type,json=forceUnsupportedFsType" json:"force_unsupported_fs_type,omitempty"`
+	// Nodiscard specifies if the volume will be mounted with discard support disabled.
+	// i.e. FS will not release allocated blocks back to the backing storage pool.
+	Nodiscard bool `protobuf:"varint,29,opt,name=nodiscard" json:"nodiscard,omitempty"`
+	// IoStrategy preferred strategy for I/O.
+	IoStrategy *IoStrategy `protobuf:"bytes,30,opt,name=io_strategy,json=ioStrategy" json:"io_strategy,omitempty"`
+	// PlacementStrategy specifies a spec to indicate where to place the volume.
+	PlacementStrategy *VolumePlacementStrategy `protobuf:"bytes,31,opt,name=placement_strategy,json=placementStrategy" json:"placement_strategy,omitempty"`
+	// StoragePolicy if applied/specified while creating volume
+	StoragePolicy string `protobuf:"bytes,32,opt,name=storage_policy,json=storagePolicy" json:"storage_policy,omitempty"`
+	// Owner
+	Ownership            *Ownership `protobuf:"bytes,33,opt,name=ownership" json:"ownership,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}   `json:"-"`
+	XXX_unrecognized     []byte     `json:"-"`
+	XXX_sizecache        int32      `json:"-"`
+}
+
+func (m *VolumeSpec) Reset()         { *m = VolumeSpec{} }
+func (m *VolumeSpec) String() string { return proto.CompactTextString(m) }
+func (*VolumeSpec) ProtoMessage()    {}
+func (*VolumeSpec) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{7}
+}
+func (m *VolumeSpec) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_VolumeSpec.Unmarshal(m, b)
+}
+func (m *VolumeSpec) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_VolumeSpec.Marshal(b, m, deterministic)
+}
+func (dst *VolumeSpec) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_VolumeSpec.Merge(dst, src)
+}
+func (m *VolumeSpec) XXX_Size() int {
+	return xxx_messageInfo_VolumeSpec.Size(m)
+}
+func (m *VolumeSpec) XXX_DiscardUnknown() {
+	xxx_messageInfo_VolumeSpec.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_VolumeSpec proto.InternalMessageInfo
+
+func (m *VolumeSpec) GetEphemeral() bool {
+	if m != nil {
+		return m.Ephemeral
+	}
+	return false
+}
+
+func (m *VolumeSpec) GetSize() uint64 {
+	if m != nil {
+		return m.Size
+	}
+	return 0
+}
+
+func (m *VolumeSpec) GetFormat() FSType {
+	if m != nil {
+		return m.Format
+	}
+	return FSType_FS_TYPE_NONE
+}
+
+func (m *VolumeSpec) GetBlockSize() int64 {
+	if m != nil {
+		return m.BlockSize
+	}
+	return 0
+}
+
+func (m *VolumeSpec) GetHaLevel() int64 {
+	if m != nil {
+		return m.HaLevel
+	}
+	return 0
+}
+
+func (m *VolumeSpec) GetCos() CosType {
+	if m != nil {
+		return m.Cos
+	}
+	return CosType_NONE
+}
+
+func (m *VolumeSpec) GetIoProfile() IoProfile {
+	if m != nil {
+		return m.IoProfile
+	}
+	return IoProfile_IO_PROFILE_SEQUENTIAL
+}
+
+func (m *VolumeSpec) GetDedupe() bool {
+	if m != nil {
+		return m.Dedupe
+	}
+	return false
+}
+
+func (m *VolumeSpec) GetSnapshotInterval() uint32 {
+	if m != nil {
+		return m.SnapshotInterval
+	}
+	return 0
+}
+
+func (m *VolumeSpec) GetVolumeLabels() map[string]string {
+	if m != nil {
+		return m.VolumeLabels
+	}
+	return nil
+}
+
+func (m *VolumeSpec) GetShared() bool {
+	if m != nil {
+		return m.Shared
+	}
+	return false
+}
+
+func (m *VolumeSpec) GetReplicaSet() *ReplicaSet {
+	if m != nil {
+		return m.ReplicaSet
+	}
+	return nil
+}
+
+func (m *VolumeSpec) GetAggregationLevel() uint32 {
+	if m != nil {
+		return m.AggregationLevel
+	}
+	return 0
+}
+
+func (m *VolumeSpec) GetEncrypted() bool {
+	if m != nil {
+		return m.Encrypted
+	}
+	return false
+}
+
+func (m *VolumeSpec) GetPassphrase() string {
+	if m != nil {
+		return m.Passphrase
+	}
+	return ""
+}
+
+func (m *VolumeSpec) GetSnapshotSchedule() string {
+	if m != nil {
+		return m.SnapshotSchedule
+	}
+	return ""
+}
+
+func (m *VolumeSpec) GetScale() uint32 {
+	if m != nil {
+		return m.Scale
+	}
+	return 0
+}
+
+func (m *VolumeSpec) GetSticky() bool {
+	if m != nil {
+		return m.Sticky
+	}
+	return false
+}
+
+func (m *VolumeSpec) GetGroup() *Group {
+	if m != nil {
+		return m.Group
+	}
+	return nil
+}
+
+func (m *VolumeSpec) GetGroupEnforced() bool {
+	if m != nil {
+		return m.GroupEnforced
+	}
+	return false
+}
+
+func (m *VolumeSpec) GetCompressed() bool {
+	if m != nil {
+		return m.Compressed
+	}
+	return false
+}
+
+func (m *VolumeSpec) GetCascaded() bool {
+	if m != nil {
+		return m.Cascaded
+	}
+	return false
+}
+
+func (m *VolumeSpec) GetJournal() bool {
+	if m != nil {
+		return m.Journal
+	}
+	return false
+}
+
+func (m *VolumeSpec) GetSharedv4() bool {
+	if m != nil {
+		return m.Sharedv4
+	}
+	return false
+}
+
+func (m *VolumeSpec) GetQueueDepth() uint32 {
+	if m != nil {
+		return m.QueueDepth
+	}
+	return 0
+}
+
+func (m *VolumeSpec) GetForceUnsupportedFsType() bool {
+	if m != nil {
+		return m.ForceUnsupportedFsType
+	}
+	return false
+}
+
+func (m *VolumeSpec) GetNodiscard() bool {
+	if m != nil {
+		return m.Nodiscard
+	}
+	return false
+}
+
+func (m *VolumeSpec) GetIoStrategy() *IoStrategy {
+	if m != nil {
+		return m.IoStrategy
+	}
+	return nil
+}
+
+func (m *VolumeSpec) GetPlacementStrategy() *VolumePlacementStrategy {
+	if m != nil {
+		return m.PlacementStrategy
+	}
+	return nil
+}
+
+func (m *VolumeSpec) GetStoragePolicy() string {
+	if m != nil {
+		return m.StoragePolicy
+	}
+	return ""
+}
+
+func (m *VolumeSpec) GetOwnership() *Ownership {
+	if m != nil {
+		return m.Ownership
+	}
+	return nil
+}
+
+// VolumeSpecUpdate provides a method to set any of the VolumeSpec of an existing volume
+type VolumeSpecUpdate struct {
+	// Size specifies the thin provisioned volume size in bytes
+	//
+	// Types that are valid to be assigned to SizeOpt:
+	//	*VolumeSpecUpdate_Size
+	SizeOpt isVolumeSpecUpdate_SizeOpt `protobuf_oneof:"size_opt"`
+	// HaLevel specifies the number of copies of data.
+	//
+	// Types that are valid to be assigned to HaLevelOpt:
+	//	*VolumeSpecUpdate_HaLevel
+	HaLevelOpt isVolumeSpecUpdate_HaLevelOpt `protobuf_oneof:"ha_level_opt"`
+	// Cos specifies the relative class of service.
+	//
+	// Types that are valid to be assigned to CosOpt:
+	//	*VolumeSpecUpdate_Cos
+	CosOpt isVolumeSpecUpdate_CosOpt `protobuf_oneof:"cos_opt"`
+	// IoProfile provides a hint about application using this volume.
+	//
+	// Types that are valid to be assigned to IoProfileOpt:
+	//	*VolumeSpecUpdate_IoProfile
+	IoProfileOpt isVolumeSpecUpdate_IoProfileOpt `protobuf_oneof:"io_profile_opt"`
+	// Dedupe specifies if the volume data is to be de-duplicated.
+	//
+	// Types that are valid to be assigned to DedupeOpt:
+	//	*VolumeSpecUpdate_Dedupe
+	DedupeOpt isVolumeSpecUpdate_DedupeOpt `protobuf_oneof:"dedupe_opt"`
+	// SnapshotInterval in minutes, set to 0 to disable snapshots
+	//
+	// Types that are valid to be assigned to SnapshotIntervalOpt:
+	//	*VolumeSpecUpdate_SnapshotInterval
+	SnapshotIntervalOpt isVolumeSpecUpdate_SnapshotIntervalOpt `protobuf_oneof:"snapshot_interval_opt"`
+	// Shared is true if this volume can be remotely accessed.
+	//
+	// Types that are valid to be assigned to SharedOpt:
+	//	*VolumeSpecUpdate_Shared
+	SharedOpt isVolumeSpecUpdate_SharedOpt `protobuf_oneof:"shared_opt"`
+	// ReplicaSet is the desired set of nodes for the volume data.
+	ReplicaSet *ReplicaSet `protobuf:"bytes,12,opt,name=replica_set,json=replicaSet" json:"replica_set,omitempty"`
+	// Passphrase for an encrypted volume
+	//
+	// Types that are valid to be assigned to PassphraseOpt:
+	//	*VolumeSpecUpdate_Passphrase
+	PassphraseOpt isVolumeSpecUpdate_PassphraseOpt `protobuf_oneof:"passphrase_opt"`
+	// SnapshotSchedule a well known string that specifies when snapshots should be taken.
+	//
+	// Types that are valid to be assigned to SnapshotScheduleOpt:
+	//	*VolumeSpecUpdate_SnapshotSchedule
+	SnapshotScheduleOpt isVolumeSpecUpdate_SnapshotScheduleOpt `protobuf_oneof:"snapshot_schedule_opt"`
+	// Scale allows autocreation of volumes.
+	//
+	// Types that are valid to be assigned to ScaleOpt:
+	//	*VolumeSpecUpdate_Scale
+	ScaleOpt isVolumeSpecUpdate_ScaleOpt `protobuf_oneof:"scale_opt"`
+	// Sticky volumes cannot be deleted until the flag is removed.
+	//
+	// Types that are valid to be assigned to StickyOpt:
+	//	*VolumeSpecUpdate_Sticky
+	StickyOpt isVolumeSpecUpdate_StickyOpt `protobuf_oneof:"sticky_opt"`
+	// Group identifies a consistency group
+	//
+	// Types that are valid to be assigned to GroupOpt:
+	//	*VolumeSpecUpdate_Group
+	GroupOpt isVolumeSpecUpdate_GroupOpt `protobuf_oneof:"group_opt"`
+	// Journal is true if data for the volume goes into the journal.
+	//
+	// Types that are valid to be assigned to JournalOpt:
+	//	*VolumeSpecUpdate_Journal
+	JournalOpt isVolumeSpecUpdate_JournalOpt `protobuf_oneof:"journal_opt"`
+	// Sharedv4 is true if this volume can be accessed via sharedv4.
+	//
+	// Types that are valid to be assigned to Sharedv4Opt:
+	//	*VolumeSpecUpdate_Sharedv4
+	Sharedv4Opt isVolumeSpecUpdate_Sharedv4Opt `protobuf_oneof:"sharedv4_opt"`
+	// QueueDepth defines the desired block device queue depth
+	//
+	// Types that are valid to be assigned to QueueDepthOpt:
+	//	*VolumeSpecUpdate_QueueDepth
+	QueueDepthOpt isVolumeSpecUpdate_QueueDepthOpt `protobuf_oneof:"queue_depth_opt"`
+	// Ownership volume information to update. If the value of `owner` in the
+	// `ownership` message is an empty string then the value of `owner` in
+	// the `VolumeSpec.Ownership.owner` will not be updated.
+	Ownership *Ownership `protobuf:"bytes,26,opt,name=ownership" json:"ownership,omitempty"`
+	// Nodiscard specifies if the volume will be mounted with discard support disabled.
+	// i.e. FS will not release allocated blocks back to the backing storage pool.
+	//
+	// Types that are valid to be assigned to NodiscardOpt:
+	//	*VolumeSpecUpdate_Nodiscard
+	NodiscardOpt isVolumeSpecUpdate_NodiscardOpt `protobuf_oneof:"nodiscard_opt"`
+	// IoStrategy preferred strategy for I/O.
+	IoStrategy           *IoStrategy `protobuf:"bytes,28,opt,name=io_strategy,json=ioStrategy" json:"io_strategy,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}    `json:"-"`
+	XXX_unrecognized     []byte      `json:"-"`
+	XXX_sizecache        int32       `json:"-"`
+}
+
+func (m *VolumeSpecUpdate) Reset()         { *m = VolumeSpecUpdate{} }
+func (m *VolumeSpecUpdate) String() string { return proto.CompactTextString(m) }
+func (*VolumeSpecUpdate) ProtoMessage()    {}
+func (*VolumeSpecUpdate) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{8}
+}
+func (m *VolumeSpecUpdate) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_VolumeSpecUpdate.Unmarshal(m, b)
+}
+func (m *VolumeSpecUpdate) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_VolumeSpecUpdate.Marshal(b, m, deterministic)
+}
+func (dst *VolumeSpecUpdate) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_VolumeSpecUpdate.Merge(dst, src)
+}
+func (m *VolumeSpecUpdate) XXX_Size() int {
+	return xxx_messageInfo_VolumeSpecUpdate.Size(m)
+}
+func (m *VolumeSpecUpdate) XXX_DiscardUnknown() {
+	xxx_messageInfo_VolumeSpecUpdate.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_VolumeSpecUpdate proto.InternalMessageInfo
+
+type isVolumeSpecUpdate_SizeOpt interface {
+	isVolumeSpecUpdate_SizeOpt()
+}
+type isVolumeSpecUpdate_HaLevelOpt interface {
+	isVolumeSpecUpdate_HaLevelOpt()
+}
+type isVolumeSpecUpdate_CosOpt interface {
+	isVolumeSpecUpdate_CosOpt()
+}
+type isVolumeSpecUpdate_IoProfileOpt interface {
+	isVolumeSpecUpdate_IoProfileOpt()
+}
+type isVolumeSpecUpdate_DedupeOpt interface {
+	isVolumeSpecUpdate_DedupeOpt()
+}
+type isVolumeSpecUpdate_SnapshotIntervalOpt interface {
+	isVolumeSpecUpdate_SnapshotIntervalOpt()
+}
+type isVolumeSpecUpdate_SharedOpt interface {
+	isVolumeSpecUpdate_SharedOpt()
+}
+type isVolumeSpecUpdate_PassphraseOpt interface {
+	isVolumeSpecUpdate_PassphraseOpt()
+}
+type isVolumeSpecUpdate_SnapshotScheduleOpt interface {
+	isVolumeSpecUpdate_SnapshotScheduleOpt()
+}
+type isVolumeSpecUpdate_ScaleOpt interface {
+	isVolumeSpecUpdate_ScaleOpt()
+}
+type isVolumeSpecUpdate_StickyOpt interface {
+	isVolumeSpecUpdate_StickyOpt()
+}
+type isVolumeSpecUpdate_GroupOpt interface {
+	isVolumeSpecUpdate_GroupOpt()
+}
+type isVolumeSpecUpdate_JournalOpt interface {
+	isVolumeSpecUpdate_JournalOpt()
+}
+type isVolumeSpecUpdate_Sharedv4Opt interface {
+	isVolumeSpecUpdate_Sharedv4Opt()
+}
+type isVolumeSpecUpdate_QueueDepthOpt interface {
+	isVolumeSpecUpdate_QueueDepthOpt()
+}
+type isVolumeSpecUpdate_NodiscardOpt interface {
+	isVolumeSpecUpdate_NodiscardOpt()
+}
+
+type VolumeSpecUpdate_Size struct {
+	Size uint64 `protobuf:"varint,2,opt,name=size,oneof"`
+}
+type VolumeSpecUpdate_HaLevel struct {
+	HaLevel int64 `protobuf:"varint,5,opt,name=ha_level,json=haLevel,oneof"`
+}
+type VolumeSpecUpdate_Cos struct {
+	Cos CosType `protobuf:"varint,6,opt,name=cos,enum=openstorage.api.CosType,oneof"`
+}
+type VolumeSpecUpdate_IoProfile struct {
+	IoProfile IoProfile `protobuf:"varint,7,opt,name=io_profile,json=ioProfile,enum=openstorage.api.IoProfile,oneof"`
+}
+type VolumeSpecUpdate_Dedupe struct {
+	Dedupe bool `protobuf:"varint,8,opt,name=dedupe,oneof"`
+}
+type VolumeSpecUpdate_SnapshotInterval struct {
+	SnapshotInterval uint32 `protobuf:"varint,9,opt,name=snapshot_interval,json=snapshotInterval,oneof"`
+}
+type VolumeSpecUpdate_Shared struct {
+	Shared bool `protobuf:"varint,11,opt,name=shared,oneof"`
+}
+type VolumeSpecUpdate_Passphrase struct {
+	Passphrase string `protobuf:"bytes,15,opt,name=passphrase,oneof"`
+}
+type VolumeSpecUpdate_SnapshotSchedule struct {
+	SnapshotSchedule string `protobuf:"bytes,16,opt,name=snapshot_schedule,json=snapshotSchedule,oneof"`
+}
+type VolumeSpecUpdate_Scale struct {
+	Scale uint32 `protobuf:"varint,17,opt,name=scale,oneof"`
+}
+type VolumeSpecUpdate_Sticky struct {
+	Sticky bool `protobuf:"varint,18,opt,name=sticky,oneof"`
+}
+type VolumeSpecUpdate_Group struct {
+	Group *Group `protobuf:"bytes,19,opt,name=group,oneof"`
+}
+type VolumeSpecUpdate_Journal struct {
+	Journal bool `protobuf:"varint,23,opt,name=journal,oneof"`
+}
+type VolumeSpecUpdate_Sharedv4 struct {
+	Sharedv4 bool `protobuf:"varint,24,opt,name=sharedv4,oneof"`
+}
+type VolumeSpecUpdate_QueueDepth struct {
+	QueueDepth uint32 `protobuf:"varint,25,opt,name=queue_depth,json=queueDepth,oneof"`
+}
+type VolumeSpecUpdate_Nodiscard struct {
+	Nodiscard bool `protobuf:"varint,27,opt,name=nodiscard,oneof"`
+}
+
+func (*VolumeSpecUpdate_Size) isVolumeSpecUpdate_SizeOpt()                         {}
+func (*VolumeSpecUpdate_HaLevel) isVolumeSpecUpdate_HaLevelOpt()                   {}
+func (*VolumeSpecUpdate_Cos) isVolumeSpecUpdate_CosOpt()                           {}
+func (*VolumeSpecUpdate_IoProfile) isVolumeSpecUpdate_IoProfileOpt()               {}
+func (*VolumeSpecUpdate_Dedupe) isVolumeSpecUpdate_DedupeOpt()                     {}
+func (*VolumeSpecUpdate_SnapshotInterval) isVolumeSpecUpdate_SnapshotIntervalOpt() {}
+func (*VolumeSpecUpdate_Shared) isVolumeSpecUpdate_SharedOpt()                     {}
+func (*VolumeSpecUpdate_Passphrase) isVolumeSpecUpdate_PassphraseOpt()             {}
+func (*VolumeSpecUpdate_SnapshotSchedule) isVolumeSpecUpdate_SnapshotScheduleOpt() {}
+func (*VolumeSpecUpdate_Scale) isVolumeSpecUpdate_ScaleOpt()                       {}
+func (*VolumeSpecUpdate_Sticky) isVolumeSpecUpdate_StickyOpt()                     {}
+func (*VolumeSpecUpdate_Group) isVolumeSpecUpdate_GroupOpt()                       {}
+func (*VolumeSpecUpdate_Journal) isVolumeSpecUpdate_JournalOpt()                   {}
+func (*VolumeSpecUpdate_Sharedv4) isVolumeSpecUpdate_Sharedv4Opt()                 {}
+func (*VolumeSpecUpdate_QueueDepth) isVolumeSpecUpdate_QueueDepthOpt()             {}
+func (*VolumeSpecUpdate_Nodiscard) isVolumeSpecUpdate_NodiscardOpt()               {}
+
+func (m *VolumeSpecUpdate) GetSizeOpt() isVolumeSpecUpdate_SizeOpt {
+	if m != nil {
+		return m.SizeOpt
+	}
+	return nil
+}
+func (m *VolumeSpecUpdate) GetHaLevelOpt() isVolumeSpecUpdate_HaLevelOpt {
+	if m != nil {
+		return m.HaLevelOpt
+	}
+	return nil
+}
+func (m *VolumeSpecUpdate) GetCosOpt() isVolumeSpecUpdate_CosOpt {
+	if m != nil {
+		return m.CosOpt
+	}
+	return nil
+}
+func (m *VolumeSpecUpdate) GetIoProfileOpt() isVolumeSpecUpdate_IoProfileOpt {
+	if m != nil {
+		return m.IoProfileOpt
+	}
+	return nil
+}
+func (m *VolumeSpecUpdate) GetDedupeOpt() isVolumeSpecUpdate_DedupeOpt {
+	if m != nil {
+		return m.DedupeOpt
+	}
+	return nil
+}
+func (m *VolumeSpecUpdate) GetSnapshotIntervalOpt() isVolumeSpecUpdate_SnapshotIntervalOpt {
+	if m != nil {
+		return m.SnapshotIntervalOpt
+	}
+	return nil
+}
+func (m *VolumeSpecUpdate) GetSharedOpt() isVolumeSpecUpdate_SharedOpt {
+	if m != nil {
+		return m.SharedOpt
+	}
+	return nil
+}
+func (m *VolumeSpecUpdate) GetPassphraseOpt() isVolumeSpecUpdate_PassphraseOpt {
+	if m != nil {
+		return m.PassphraseOpt
+	}
+	return nil
+}
+func (m *VolumeSpecUpdate) GetSnapshotScheduleOpt() isVolumeSpecUpdate_SnapshotScheduleOpt {
+	if m != nil {
+		return m.SnapshotScheduleOpt
+	}
+	return nil
+}
+func (m *VolumeSpecUpdate) GetScaleOpt() isVolumeSpecUpdate_ScaleOpt {
+	if m != nil {
+		return m.ScaleOpt
+	}
+	return nil
+}
+func (m *VolumeSpecUpdate) GetStickyOpt() isVolumeSpecUpdate_StickyOpt {
+	if m != nil {
+		return m.StickyOpt
+	}
+	return nil
+}
+func (m *VolumeSpecUpdate) GetGroupOpt() isVolumeSpecUpdate_GroupOpt {
+	if m != nil {
+		return m.GroupOpt
+	}
+	return nil
+}
+func (m *VolumeSpecUpdate) GetJournalOpt() isVolumeSpecUpdate_JournalOpt {
+	if m != nil {
+		return m.JournalOpt
+	}
+	return nil
+}
+func (m *VolumeSpecUpdate) GetSharedv4Opt() isVolumeSpecUpdate_Sharedv4Opt {
+	if m != nil {
+		return m.Sharedv4Opt
+	}
+	return nil
+}
+func (m *VolumeSpecUpdate) GetQueueDepthOpt() isVolumeSpecUpdate_QueueDepthOpt {
+	if m != nil {
+		return m.QueueDepthOpt
+	}
+	return nil
+}
+func (m *VolumeSpecUpdate) GetNodiscardOpt() isVolumeSpecUpdate_NodiscardOpt {
+	if m != nil {
+		return m.NodiscardOpt
+	}
+	return nil
+}
+
+func (m *VolumeSpecUpdate) GetSize() uint64 {
+	if x, ok := m.GetSizeOpt().(*VolumeSpecUpdate_Size); ok {
+		return x.Size
+	}
+	return 0
+}
+
+func (m *VolumeSpecUpdate) GetHaLevel() int64 {
+	if x, ok := m.GetHaLevelOpt().(*VolumeSpecUpdate_HaLevel); ok {
+		return x.HaLevel
+	}
+	return 0
+}
+
+func (m *VolumeSpecUpdate) GetCos() CosType {
+	if x, ok := m.GetCosOpt().(*VolumeSpecUpdate_Cos); ok {
+		return x.Cos
+	}
+	return CosType_NONE
+}
+
+func (m *VolumeSpecUpdate) GetIoProfile() IoProfile {
+	if x, ok := m.GetIoProfileOpt().(*VolumeSpecUpdate_IoProfile); ok {
+		return x.IoProfile
+	}
+	return IoProfile_IO_PROFILE_SEQUENTIAL
+}
+
+func (m *VolumeSpecUpdate) GetDedupe() bool {
+	if x, ok := m.GetDedupeOpt().(*VolumeSpecUpdate_Dedupe); ok {
+		return x.Dedupe
+	}
+	return false
+}
+
+func (m *VolumeSpecUpdate) GetSnapshotInterval() uint32 {
+	if x, ok := m.GetSnapshotIntervalOpt().(*VolumeSpecUpdate_SnapshotInterval); ok {
+		return x.SnapshotInterval
+	}
+	return 0
+}
+
+func (m *VolumeSpecUpdate) GetShared() bool {
+	if x, ok := m.GetSharedOpt().(*VolumeSpecUpdate_Shared); ok {
+		return x.Shared
+	}
+	return false
+}
+
+func (m *VolumeSpecUpdate) GetReplicaSet() *ReplicaSet {
+	if m != nil {
+		return m.ReplicaSet
+	}
+	return nil
+}
+
+func (m *VolumeSpecUpdate) GetPassphrase() string {
+	if x, ok := m.GetPassphraseOpt().(*VolumeSpecUpdate_Passphrase); ok {
+		return x.Passphrase
+	}
+	return ""
+}
+
+func (m *VolumeSpecUpdate) GetSnapshotSchedule() string {
+	if x, ok := m.GetSnapshotScheduleOpt().(*VolumeSpecUpdate_SnapshotSchedule); ok {
+		return x.SnapshotSchedule
+	}
+	return ""
+}
+
+func (m *VolumeSpecUpdate) GetScale() uint32 {
+	if x, ok := m.GetScaleOpt().(*VolumeSpecUpdate_Scale); ok {
+		return x.Scale
+	}
+	return 0
+}
+
+func (m *VolumeSpecUpdate) GetSticky() bool {
+	if x, ok := m.GetStickyOpt().(*VolumeSpecUpdate_Sticky); ok {
+		return x.Sticky
+	}
+	return false
+}
+
+func (m *VolumeSpecUpdate) GetGroup() *Group {
+	if x, ok := m.GetGroupOpt().(*VolumeSpecUpdate_Group); ok {
+		return x.Group
+	}
+	return nil
+}
+
+func (m *VolumeSpecUpdate) GetJournal() bool {
+	if x, ok := m.GetJournalOpt().(*VolumeSpecUpdate_Journal); ok {
+		return x.Journal
+	}
+	return false
+}
+
+func (m *VolumeSpecUpdate) GetSharedv4() bool {
+	if x, ok := m.GetSharedv4Opt().(*VolumeSpecUpdate_Sharedv4); ok {
+		return x.Sharedv4
+	}
+	return false
+}
+
+func (m *VolumeSpecUpdate) GetQueueDepth() uint32 {
+	if x, ok := m.GetQueueDepthOpt().(*VolumeSpecUpdate_QueueDepth); ok {
+		return x.QueueDepth
+	}
+	return 0
+}
+
+func (m *VolumeSpecUpdate) GetOwnership() *Ownership {
+	if m != nil {
+		return m.Ownership
+	}
+	return nil
+}
+
+func (m *VolumeSpecUpdate) GetNodiscard() bool {
+	if x, ok := m.GetNodiscardOpt().(*VolumeSpecUpdate_Nodiscard); ok {
+		return x.Nodiscard
+	}
+	return false
+}
+
+func (m *VolumeSpecUpdate) GetIoStrategy() *IoStrategy {
+	if m != nil {
+		return m.IoStrategy
+	}
+	return nil
+}
+
+// XXX_OneofFuncs is for the internal use of the proto package.
+func (*VolumeSpecUpdate) XXX_OneofFuncs() (func(msg proto.Message, b *proto.Buffer) error, func(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error), func(msg proto.Message) (n int), []interface{}) {
+	return _VolumeSpecUpdate_OneofMarshaler, _VolumeSpecUpdate_OneofUnmarshaler, _VolumeSpecUpdate_OneofSizer, []interface{}{
+		(*VolumeSpecUpdate_Size)(nil),
+		(*VolumeSpecUpdate_HaLevel)(nil),
+		(*VolumeSpecUpdate_Cos)(nil),
+		(*VolumeSpecUpdate_IoProfile)(nil),
+		(*VolumeSpecUpdate_Dedupe)(nil),
+		(*VolumeSpecUpdate_SnapshotInterval)(nil),
+		(*VolumeSpecUpdate_Shared)(nil),
+		(*VolumeSpecUpdate_Passphrase)(nil),
+		(*VolumeSpecUpdate_SnapshotSchedule)(nil),
+		(*VolumeSpecUpdate_Scale)(nil),
+		(*VolumeSpecUpdate_Sticky)(nil),
+		(*VolumeSpecUpdate_Group)(nil),
+		(*VolumeSpecUpdate_Journal)(nil),
+		(*VolumeSpecUpdate_Sharedv4)(nil),
+		(*VolumeSpecUpdate_QueueDepth)(nil),
+		(*VolumeSpecUpdate_Nodiscard)(nil),
+	}
+}
+
+func _VolumeSpecUpdate_OneofMarshaler(msg proto.Message, b *proto.Buffer) error {
+	m := msg.(*VolumeSpecUpdate)
+	// size_opt
+	switch x := m.SizeOpt.(type) {
+	case *VolumeSpecUpdate_Size:
+		b.EncodeVarint(2<<3 | proto.WireVarint)
+		b.EncodeVarint(uint64(x.Size))
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecUpdate.SizeOpt has unexpected type %T", x)
+	}
+	// ha_level_opt
+	switch x := m.HaLevelOpt.(type) {
+	case *VolumeSpecUpdate_HaLevel:
+		b.EncodeVarint(5<<3 | proto.WireVarint)
+		b.EncodeVarint(uint64(x.HaLevel))
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecUpdate.HaLevelOpt has unexpected type %T", x)
+	}
+	// cos_opt
+	switch x := m.CosOpt.(type) {
+	case *VolumeSpecUpdate_Cos:
+		b.EncodeVarint(6<<3 | proto.WireVarint)
+		b.EncodeVarint(uint64(x.Cos))
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecUpdate.CosOpt has unexpected type %T", x)
+	}
+	// io_profile_opt
+	switch x := m.IoProfileOpt.(type) {
+	case *VolumeSpecUpdate_IoProfile:
+		b.EncodeVarint(7<<3 | proto.WireVarint)
+		b.EncodeVarint(uint64(x.IoProfile))
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecUpdate.IoProfileOpt has unexpected type %T", x)
+	}
+	// dedupe_opt
+	switch x := m.DedupeOpt.(type) {
+	case *VolumeSpecUpdate_Dedupe:
+		t := uint64(0)
+		if x.Dedupe {
+			t = 1
+		}
+		b.EncodeVarint(8<<3 | proto.WireVarint)
+		b.EncodeVarint(t)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecUpdate.DedupeOpt has unexpected type %T", x)
+	}
+	// snapshot_interval_opt
+	switch x := m.SnapshotIntervalOpt.(type) {
+	case *VolumeSpecUpdate_SnapshotInterval:
+		b.EncodeVarint(9<<3 | proto.WireVarint)
+		b.EncodeVarint(uint64(x.SnapshotInterval))
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecUpdate.SnapshotIntervalOpt has unexpected type %T", x)
+	}
+	// shared_opt
+	switch x := m.SharedOpt.(type) {
+	case *VolumeSpecUpdate_Shared:
+		t := uint64(0)
+		if x.Shared {
+			t = 1
+		}
+		b.EncodeVarint(11<<3 | proto.WireVarint)
+		b.EncodeVarint(t)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecUpdate.SharedOpt has unexpected type %T", x)
+	}
+	// passphrase_opt
+	switch x := m.PassphraseOpt.(type) {
+	case *VolumeSpecUpdate_Passphrase:
+		b.EncodeVarint(15<<3 | proto.WireBytes)
+		b.EncodeStringBytes(x.Passphrase)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecUpdate.PassphraseOpt has unexpected type %T", x)
+	}
+	// snapshot_schedule_opt
+	switch x := m.SnapshotScheduleOpt.(type) {
+	case *VolumeSpecUpdate_SnapshotSchedule:
+		b.EncodeVarint(16<<3 | proto.WireBytes)
+		b.EncodeStringBytes(x.SnapshotSchedule)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecUpdate.SnapshotScheduleOpt has unexpected type %T", x)
+	}
+	// scale_opt
+	switch x := m.ScaleOpt.(type) {
+	case *VolumeSpecUpdate_Scale:
+		b.EncodeVarint(17<<3 | proto.WireVarint)
+		b.EncodeVarint(uint64(x.Scale))
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecUpdate.ScaleOpt has unexpected type %T", x)
+	}
+	// sticky_opt
+	switch x := m.StickyOpt.(type) {
+	case *VolumeSpecUpdate_Sticky:
+		t := uint64(0)
+		if x.Sticky {
+			t = 1
+		}
+		b.EncodeVarint(18<<3 | proto.WireVarint)
+		b.EncodeVarint(t)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecUpdate.StickyOpt has unexpected type %T", x)
+	}
+	// group_opt
+	switch x := m.GroupOpt.(type) {
+	case *VolumeSpecUpdate_Group:
+		b.EncodeVarint(19<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.Group); err != nil {
+			return err
+		}
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecUpdate.GroupOpt has unexpected type %T", x)
+	}
+	// journal_opt
+	switch x := m.JournalOpt.(type) {
+	case *VolumeSpecUpdate_Journal:
+		t := uint64(0)
+		if x.Journal {
+			t = 1
+		}
+		b.EncodeVarint(23<<3 | proto.WireVarint)
+		b.EncodeVarint(t)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecUpdate.JournalOpt has unexpected type %T", x)
+	}
+	// sharedv4_opt
+	switch x := m.Sharedv4Opt.(type) {
+	case *VolumeSpecUpdate_Sharedv4:
+		t := uint64(0)
+		if x.Sharedv4 {
+			t = 1
+		}
+		b.EncodeVarint(24<<3 | proto.WireVarint)
+		b.EncodeVarint(t)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecUpdate.Sharedv4Opt has unexpected type %T", x)
+	}
+	// queue_depth_opt
+	switch x := m.QueueDepthOpt.(type) {
+	case *VolumeSpecUpdate_QueueDepth:
+		b.EncodeVarint(25<<3 | proto.WireVarint)
+		b.EncodeVarint(uint64(x.QueueDepth))
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecUpdate.QueueDepthOpt has unexpected type %T", x)
+	}
+	// nodiscard_opt
+	switch x := m.NodiscardOpt.(type) {
+	case *VolumeSpecUpdate_Nodiscard:
+		t := uint64(0)
+		if x.Nodiscard {
+			t = 1
+		}
+		b.EncodeVarint(27<<3 | proto.WireVarint)
+		b.EncodeVarint(t)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecUpdate.NodiscardOpt has unexpected type %T", x)
+	}
+	return nil
+}
+
+func _VolumeSpecUpdate_OneofUnmarshaler(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error) {
+	m := msg.(*VolumeSpecUpdate)
+	switch tag {
+	case 2: // size_opt.size
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.SizeOpt = &VolumeSpecUpdate_Size{x}
+		return true, err
+	case 5: // ha_level_opt.ha_level
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.HaLevelOpt = &VolumeSpecUpdate_HaLevel{int64(x)}
+		return true, err
+	case 6: // cos_opt.cos
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.CosOpt = &VolumeSpecUpdate_Cos{CosType(x)}
+		return true, err
+	case 7: // io_profile_opt.io_profile
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.IoProfileOpt = &VolumeSpecUpdate_IoProfile{IoProfile(x)}
+		return true, err
+	case 8: // dedupe_opt.dedupe
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.DedupeOpt = &VolumeSpecUpdate_Dedupe{x != 0}
+		return true, err
+	case 9: // snapshot_interval_opt.snapshot_interval
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.SnapshotIntervalOpt = &VolumeSpecUpdate_SnapshotInterval{uint32(x)}
+		return true, err
+	case 11: // shared_opt.shared
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.SharedOpt = &VolumeSpecUpdate_Shared{x != 0}
+		return true, err
+	case 15: // passphrase_opt.passphrase
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeStringBytes()
+		m.PassphraseOpt = &VolumeSpecUpdate_Passphrase{x}
+		return true, err
+	case 16: // snapshot_schedule_opt.snapshot_schedule
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeStringBytes()
+		m.SnapshotScheduleOpt = &VolumeSpecUpdate_SnapshotSchedule{x}
+		return true, err
+	case 17: // scale_opt.scale
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.ScaleOpt = &VolumeSpecUpdate_Scale{uint32(x)}
+		return true, err
+	case 18: // sticky_opt.sticky
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.StickyOpt = &VolumeSpecUpdate_Sticky{x != 0}
+		return true, err
+	case 19: // group_opt.group
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(Group)
+		err := b.DecodeMessage(msg)
+		m.GroupOpt = &VolumeSpecUpdate_Group{msg}
+		return true, err
+	case 23: // journal_opt.journal
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.JournalOpt = &VolumeSpecUpdate_Journal{x != 0}
+		return true, err
+	case 24: // sharedv4_opt.sharedv4
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.Sharedv4Opt = &VolumeSpecUpdate_Sharedv4{x != 0}
+		return true, err
+	case 25: // queue_depth_opt.queue_depth
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.QueueDepthOpt = &VolumeSpecUpdate_QueueDepth{uint32(x)}
+		return true, err
+	case 27: // nodiscard_opt.nodiscard
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.NodiscardOpt = &VolumeSpecUpdate_Nodiscard{x != 0}
+		return true, err
+	default:
+		return false, nil
+	}
+}
+
+func _VolumeSpecUpdate_OneofSizer(msg proto.Message) (n int) {
+	m := msg.(*VolumeSpecUpdate)
+	// size_opt
+	switch x := m.SizeOpt.(type) {
+	case *VolumeSpecUpdate_Size:
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(x.Size))
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// ha_level_opt
+	switch x := m.HaLevelOpt.(type) {
+	case *VolumeSpecUpdate_HaLevel:
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(x.HaLevel))
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// cos_opt
+	switch x := m.CosOpt.(type) {
+	case *VolumeSpecUpdate_Cos:
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(x.Cos))
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// io_profile_opt
+	switch x := m.IoProfileOpt.(type) {
+	case *VolumeSpecUpdate_IoProfile:
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(x.IoProfile))
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// dedupe_opt
+	switch x := m.DedupeOpt.(type) {
+	case *VolumeSpecUpdate_Dedupe:
+		n += 1 // tag and wire
+		n += 1
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// snapshot_interval_opt
+	switch x := m.SnapshotIntervalOpt.(type) {
+	case *VolumeSpecUpdate_SnapshotInterval:
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(x.SnapshotInterval))
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// shared_opt
+	switch x := m.SharedOpt.(type) {
+	case *VolumeSpecUpdate_Shared:
+		n += 1 // tag and wire
+		n += 1
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// passphrase_opt
+	switch x := m.PassphraseOpt.(type) {
+	case *VolumeSpecUpdate_Passphrase:
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(len(x.Passphrase)))
+		n += len(x.Passphrase)
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// snapshot_schedule_opt
+	switch x := m.SnapshotScheduleOpt.(type) {
+	case *VolumeSpecUpdate_SnapshotSchedule:
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(len(x.SnapshotSchedule)))
+		n += len(x.SnapshotSchedule)
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// scale_opt
+	switch x := m.ScaleOpt.(type) {
+	case *VolumeSpecUpdate_Scale:
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(x.Scale))
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// sticky_opt
+	switch x := m.StickyOpt.(type) {
+	case *VolumeSpecUpdate_Sticky:
+		n += 2 // tag and wire
+		n += 1
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// group_opt
+	switch x := m.GroupOpt.(type) {
+	case *VolumeSpecUpdate_Group:
+		s := proto.Size(x.Group)
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// journal_opt
+	switch x := m.JournalOpt.(type) {
+	case *VolumeSpecUpdate_Journal:
+		n += 2 // tag and wire
+		n += 1
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// sharedv4_opt
+	switch x := m.Sharedv4Opt.(type) {
+	case *VolumeSpecUpdate_Sharedv4:
+		n += 2 // tag and wire
+		n += 1
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// queue_depth_opt
+	switch x := m.QueueDepthOpt.(type) {
+	case *VolumeSpecUpdate_QueueDepth:
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(x.QueueDepth))
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// nodiscard_opt
+	switch x := m.NodiscardOpt.(type) {
+	case *VolumeSpecUpdate_Nodiscard:
+		n += 2 // tag and wire
+		n += 1
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	return n
+}
+
+// VolumeSpecPolicy provides a method to set volume storage policy
+type VolumeSpecPolicy struct {
+	// Size specifies the thin provisioned volume size in bytes.
+	// Use `size_operator` to show if this value is the min, max, or set.
+	//
+	// Types that are valid to be assigned to SizeOpt:
+	//	*VolumeSpecPolicy_Size
+	SizeOpt isVolumeSpecPolicy_SizeOpt `protobuf_oneof:"size_opt"`
+	// HaLevel specifies the number of copies of data.
+	// Use `ha_level_operator` to show if this value is the min, max, or set.
+	//
+	// Types that are valid to be assigned to HaLevelOpt:
+	//	*VolumeSpecPolicy_HaLevel
+	HaLevelOpt isVolumeSpecPolicy_HaLevelOpt `protobuf_oneof:"ha_level_opt"`
+	// Cos specifies the relative class of service.
+	//
+	// Types that are valid to be assigned to CosOpt:
+	//	*VolumeSpecPolicy_Cos
+	CosOpt isVolumeSpecPolicy_CosOpt `protobuf_oneof:"cos_opt"`
+	// IoProfile provides a hint about application using this volume.
+	//
+	// Types that are valid to be assigned to IoProfileOpt:
+	//	*VolumeSpecPolicy_IoProfile
+	IoProfileOpt isVolumeSpecPolicy_IoProfileOpt `protobuf_oneof:"io_profile_opt"`
+	// Dedupe specifies if the volume data is to be de-duplicated.
+	//
+	// Types that are valid to be assigned to DedupeOpt:
+	//	*VolumeSpecPolicy_Dedupe
+	DedupeOpt isVolumeSpecPolicy_DedupeOpt `protobuf_oneof:"dedupe_opt"`
+	// SnapshotInterval in minutes, set to 0 to disable snapshots
+	//
+	// Types that are valid to be assigned to SnapshotIntervalOpt:
+	//	*VolumeSpecPolicy_SnapshotInterval
+	SnapshotIntervalOpt isVolumeSpecPolicy_SnapshotIntervalOpt `protobuf_oneof:"snapshot_interval_opt"`
+	// VolumeLabels configuration labels
+	VolumeLabels map[string]string `protobuf:"bytes,7,rep,name=volume_labels,json=volumeLabels" json:"volume_labels,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	// Shared is true if this volume can be remotely accessed.
+	//
+	// Types that are valid to be assigned to SharedOpt:
+	//	*VolumeSpecPolicy_Shared
+	SharedOpt isVolumeSpecPolicy_SharedOpt `protobuf_oneof:"shared_opt"`
+	// ReplicaSet is the desired set of nodes for the volume data.
+	ReplicaSet *ReplicaSet `protobuf:"bytes,9,opt,name=replica_set,json=replicaSet" json:"replica_set,omitempty"`
+	// Passphrase for an encrypted volume
+	//
+	// Types that are valid to be assigned to PassphraseOpt:
+	//	*VolumeSpecPolicy_Passphrase
+	PassphraseOpt isVolumeSpecPolicy_PassphraseOpt `protobuf_oneof:"passphrase_opt"`
+	// SnapshotSchedule a well known string that specifies when snapshots should be taken.
+	//
+	// Types that are valid to be assigned to SnapshotScheduleOpt:
+	//	*VolumeSpecPolicy_SnapshotSchedule
+	SnapshotScheduleOpt isVolumeSpecPolicy_SnapshotScheduleOpt `protobuf_oneof:"snapshot_schedule_opt"`
+	// Scale allows autocreation of volumes.
+	//
+	// Types that are valid to be assigned to ScaleOpt:
+	//	*VolumeSpecPolicy_Scale
+	ScaleOpt isVolumeSpecPolicy_ScaleOpt `protobuf_oneof:"scale_opt"`
+	// Sticky volumes cannot be deleted until the flag is removed.
+	//
+	// Types that are valid to be assigned to StickyOpt:
+	//	*VolumeSpecPolicy_Sticky
+	StickyOpt isVolumeSpecPolicy_StickyOpt `protobuf_oneof:"sticky_opt"`
+	// Group identifies a consistency group
+	//
+	// Types that are valid to be assigned to GroupOpt:
+	//	*VolumeSpecPolicy_Group
+	GroupOpt isVolumeSpecPolicy_GroupOpt `protobuf_oneof:"group_opt"`
+	// Journal is true if data for the volume goes into the journal.
+	//
+	// Types that are valid to be assigned to JournalOpt:
+	//	*VolumeSpecPolicy_Journal
+	JournalOpt isVolumeSpecPolicy_JournalOpt `protobuf_oneof:"journal_opt"`
+	// Sharedv4 is true if this volume can be accessed via sharedv4.
+	//
+	// Types that are valid to be assigned to Sharedv4Opt:
+	//	*VolumeSpecPolicy_Sharedv4
+	Sharedv4Opt isVolumeSpecPolicy_Sharedv4Opt `protobuf_oneof:"sharedv4_opt"`
+	// QueueDepth defines the desired block device queue depth
+	//
+	// Types that are valid to be assigned to QueueDepthOpt:
+	//	*VolumeSpecPolicy_QueueDepth
+	QueueDepthOpt isVolumeSpecPolicy_QueueDepthOpt `protobuf_oneof:"queue_depth_opt"`
+	// Encrypted is true if this volume will be cryptographically secured.
+	//
+	// Types that are valid to be assigned to EncryptedOpt:
+	//	*VolumeSpecPolicy_Encrypted
+	EncryptedOpt isVolumeSpecPolicy_EncryptedOpt `protobuf_oneof:"encrypted_opt"`
+	// Aggregation level Specifies the number of parts the volume can be aggregated from.
+	//
+	// Types that are valid to be assigned to AggregationLevelOpt:
+	//	*VolumeSpecPolicy_AggregationLevel
+	AggregationLevelOpt isVolumeSpecPolicy_AggregationLevelOpt `protobuf_oneof:"aggregation_level_opt"`
+	// Operator to check size
+	SizeOperator VolumeSpecPolicy_PolicyOp `protobuf:"varint,50,opt,name=size_operator,json=sizeOperator,enum=openstorage.api.VolumeSpecPolicy_PolicyOp" json:"size_operator,omitempty"`
+	// Operator to check ha_level
+	HaLevelOperator VolumeSpecPolicy_PolicyOp `protobuf:"varint,51,opt,name=ha_level_operator,json=haLevelOperator,enum=openstorage.api.VolumeSpecPolicy_PolicyOp" json:"ha_level_operator,omitempty"`
+	// Operator to check scale
+	ScaleOperator VolumeSpecPolicy_PolicyOp `protobuf:"varint,52,opt,name=scale_operator,json=scaleOperator,enum=openstorage.api.VolumeSpecPolicy_PolicyOp" json:"scale_operator,omitempty"`
+	// Operator to check snapshot_interval
+	SnapshotIntervalOperator VolumeSpecPolicy_PolicyOp `protobuf:"varint,53,opt,name=snapshot_interval_operator,json=snapshotIntervalOperator,enum=openstorage.api.VolumeSpecPolicy_PolicyOp" json:"snapshot_interval_operator,omitempty"`
+	// Nodiscard specifies if the volume will be mounted with discard support disabled.
+	// i.e. FS will not release allocated blocks back to the backing storage pool.
+	//
+	// Types that are valid to be assigned to NodiscardOpt:
+	//	*VolumeSpecPolicy_Nodiscard
+	NodiscardOpt isVolumeSpecPolicy_NodiscardOpt `protobuf_oneof:"nodiscard_opt"`
+	// IoStrategy preferred strategy for I/O.
+	IoStrategy           *IoStrategy `protobuf:"bytes,55,opt,name=io_strategy,json=ioStrategy" json:"io_strategy,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}    `json:"-"`
+	XXX_unrecognized     []byte      `json:"-"`
+	XXX_sizecache        int32       `json:"-"`
+}
+
+func (m *VolumeSpecPolicy) Reset()         { *m = VolumeSpecPolicy{} }
+func (m *VolumeSpecPolicy) String() string { return proto.CompactTextString(m) }
+func (*VolumeSpecPolicy) ProtoMessage()    {}
+func (*VolumeSpecPolicy) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{9}
+}
+func (m *VolumeSpecPolicy) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_VolumeSpecPolicy.Unmarshal(m, b)
+}
+func (m *VolumeSpecPolicy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_VolumeSpecPolicy.Marshal(b, m, deterministic)
+}
+func (dst *VolumeSpecPolicy) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_VolumeSpecPolicy.Merge(dst, src)
+}
+func (m *VolumeSpecPolicy) XXX_Size() int {
+	return xxx_messageInfo_VolumeSpecPolicy.Size(m)
+}
+func (m *VolumeSpecPolicy) XXX_DiscardUnknown() {
+	xxx_messageInfo_VolumeSpecPolicy.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_VolumeSpecPolicy proto.InternalMessageInfo
+
+type isVolumeSpecPolicy_SizeOpt interface {
+	isVolumeSpecPolicy_SizeOpt()
+}
+type isVolumeSpecPolicy_HaLevelOpt interface {
+	isVolumeSpecPolicy_HaLevelOpt()
+}
+type isVolumeSpecPolicy_CosOpt interface {
+	isVolumeSpecPolicy_CosOpt()
+}
+type isVolumeSpecPolicy_IoProfileOpt interface {
+	isVolumeSpecPolicy_IoProfileOpt()
+}
+type isVolumeSpecPolicy_DedupeOpt interface {
+	isVolumeSpecPolicy_DedupeOpt()
+}
+type isVolumeSpecPolicy_SnapshotIntervalOpt interface {
+	isVolumeSpecPolicy_SnapshotIntervalOpt()
+}
+type isVolumeSpecPolicy_SharedOpt interface {
+	isVolumeSpecPolicy_SharedOpt()
+}
+type isVolumeSpecPolicy_PassphraseOpt interface {
+	isVolumeSpecPolicy_PassphraseOpt()
+}
+type isVolumeSpecPolicy_SnapshotScheduleOpt interface {
+	isVolumeSpecPolicy_SnapshotScheduleOpt()
+}
+type isVolumeSpecPolicy_ScaleOpt interface {
+	isVolumeSpecPolicy_ScaleOpt()
+}
+type isVolumeSpecPolicy_StickyOpt interface {
+	isVolumeSpecPolicy_StickyOpt()
+}
+type isVolumeSpecPolicy_GroupOpt interface {
+	isVolumeSpecPolicy_GroupOpt()
+}
+type isVolumeSpecPolicy_JournalOpt interface {
+	isVolumeSpecPolicy_JournalOpt()
+}
+type isVolumeSpecPolicy_Sharedv4Opt interface {
+	isVolumeSpecPolicy_Sharedv4Opt()
+}
+type isVolumeSpecPolicy_QueueDepthOpt interface {
+	isVolumeSpecPolicy_QueueDepthOpt()
+}
+type isVolumeSpecPolicy_EncryptedOpt interface {
+	isVolumeSpecPolicy_EncryptedOpt()
+}
+type isVolumeSpecPolicy_AggregationLevelOpt interface {
+	isVolumeSpecPolicy_AggregationLevelOpt()
+}
+type isVolumeSpecPolicy_NodiscardOpt interface {
+	isVolumeSpecPolicy_NodiscardOpt()
+}
+
+type VolumeSpecPolicy_Size struct {
+	Size uint64 `protobuf:"varint,1,opt,name=size,oneof"`
+}
+type VolumeSpecPolicy_HaLevel struct {
+	HaLevel int64 `protobuf:"varint,2,opt,name=ha_level,json=haLevel,oneof"`
+}
+type VolumeSpecPolicy_Cos struct {
+	Cos CosType `protobuf:"varint,3,opt,name=cos,enum=openstorage.api.CosType,oneof"`
+}
+type VolumeSpecPolicy_IoProfile struct {
+	IoProfile IoProfile `protobuf:"varint,4,opt,name=io_profile,json=ioProfile,enum=openstorage.api.IoProfile,oneof"`
+}
+type VolumeSpecPolicy_Dedupe struct {
+	Dedupe bool `protobuf:"varint,5,opt,name=dedupe,oneof"`
+}
+type VolumeSpecPolicy_SnapshotInterval struct {
+	SnapshotInterval uint32 `protobuf:"varint,6,opt,name=snapshot_interval,json=snapshotInterval,oneof"`
+}
+type VolumeSpecPolicy_Shared struct {
+	Shared bool `protobuf:"varint,8,opt,name=shared,oneof"`
+}
+type VolumeSpecPolicy_Passphrase struct {
+	Passphrase string `protobuf:"bytes,10,opt,name=passphrase,oneof"`
+}
+type VolumeSpecPolicy_SnapshotSchedule struct {
+	SnapshotSchedule string `protobuf:"bytes,11,opt,name=snapshot_schedule,json=snapshotSchedule,oneof"`
+}
+type VolumeSpecPolicy_Scale struct {
+	Scale uint32 `protobuf:"varint,12,opt,name=scale,oneof"`
+}
+type VolumeSpecPolicy_Sticky struct {
+	Sticky bool `protobuf:"varint,13,opt,name=sticky,oneof"`
+}
+type VolumeSpecPolicy_Group struct {
+	Group *Group `protobuf:"bytes,14,opt,name=group,oneof"`
+}
+type VolumeSpecPolicy_Journal struct {
+	Journal bool `protobuf:"varint,15,opt,name=journal,oneof"`
+}
+type VolumeSpecPolicy_Sharedv4 struct {
+	Sharedv4 bool `protobuf:"varint,16,opt,name=sharedv4,oneof"`
+}
+type VolumeSpecPolicy_QueueDepth struct {
+	QueueDepth uint32 `protobuf:"varint,17,opt,name=queue_depth,json=queueDepth,oneof"`
+}
+type VolumeSpecPolicy_Encrypted struct {
+	Encrypted bool `protobuf:"varint,18,opt,name=encrypted,oneof"`
+}
+type VolumeSpecPolicy_AggregationLevel struct {
+	AggregationLevel uint32 `protobuf:"varint,19,opt,name=aggregation_level,json=aggregationLevel,oneof"`
+}
+type VolumeSpecPolicy_Nodiscard struct {
+	Nodiscard bool `protobuf:"varint,54,opt,name=nodiscard,oneof"`
+}
+
+func (*VolumeSpecPolicy_Size) isVolumeSpecPolicy_SizeOpt()                         {}
+func (*VolumeSpecPolicy_HaLevel) isVolumeSpecPolicy_HaLevelOpt()                   {}
+func (*VolumeSpecPolicy_Cos) isVolumeSpecPolicy_CosOpt()                           {}
+func (*VolumeSpecPolicy_IoProfile) isVolumeSpecPolicy_IoProfileOpt()               {}
+func (*VolumeSpecPolicy_Dedupe) isVolumeSpecPolicy_DedupeOpt()                     {}
+func (*VolumeSpecPolicy_SnapshotInterval) isVolumeSpecPolicy_SnapshotIntervalOpt() {}
+func (*VolumeSpecPolicy_Shared) isVolumeSpecPolicy_SharedOpt()                     {}
+func (*VolumeSpecPolicy_Passphrase) isVolumeSpecPolicy_PassphraseOpt()             {}
+func (*VolumeSpecPolicy_SnapshotSchedule) isVolumeSpecPolicy_SnapshotScheduleOpt() {}
+func (*VolumeSpecPolicy_Scale) isVolumeSpecPolicy_ScaleOpt()                       {}
+func (*VolumeSpecPolicy_Sticky) isVolumeSpecPolicy_StickyOpt()                     {}
+func (*VolumeSpecPolicy_Group) isVolumeSpecPolicy_GroupOpt()                       {}
+func (*VolumeSpecPolicy_Journal) isVolumeSpecPolicy_JournalOpt()                   {}
+func (*VolumeSpecPolicy_Sharedv4) isVolumeSpecPolicy_Sharedv4Opt()                 {}
+func (*VolumeSpecPolicy_QueueDepth) isVolumeSpecPolicy_QueueDepthOpt()             {}
+func (*VolumeSpecPolicy_Encrypted) isVolumeSpecPolicy_EncryptedOpt()               {}
+func (*VolumeSpecPolicy_AggregationLevel) isVolumeSpecPolicy_AggregationLevelOpt() {}
+func (*VolumeSpecPolicy_Nodiscard) isVolumeSpecPolicy_NodiscardOpt()               {}
+
+func (m *VolumeSpecPolicy) GetSizeOpt() isVolumeSpecPolicy_SizeOpt {
+	if m != nil {
+		return m.SizeOpt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetHaLevelOpt() isVolumeSpecPolicy_HaLevelOpt {
+	if m != nil {
+		return m.HaLevelOpt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetCosOpt() isVolumeSpecPolicy_CosOpt {
+	if m != nil {
+		return m.CosOpt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetIoProfileOpt() isVolumeSpecPolicy_IoProfileOpt {
+	if m != nil {
+		return m.IoProfileOpt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetDedupeOpt() isVolumeSpecPolicy_DedupeOpt {
+	if m != nil {
+		return m.DedupeOpt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetSnapshotIntervalOpt() isVolumeSpecPolicy_SnapshotIntervalOpt {
+	if m != nil {
+		return m.SnapshotIntervalOpt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetSharedOpt() isVolumeSpecPolicy_SharedOpt {
+	if m != nil {
+		return m.SharedOpt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetPassphraseOpt() isVolumeSpecPolicy_PassphraseOpt {
+	if m != nil {
+		return m.PassphraseOpt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetSnapshotScheduleOpt() isVolumeSpecPolicy_SnapshotScheduleOpt {
+	if m != nil {
+		return m.SnapshotScheduleOpt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetScaleOpt() isVolumeSpecPolicy_ScaleOpt {
+	if m != nil {
+		return m.ScaleOpt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetStickyOpt() isVolumeSpecPolicy_StickyOpt {
+	if m != nil {
+		return m.StickyOpt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetGroupOpt() isVolumeSpecPolicy_GroupOpt {
+	if m != nil {
+		return m.GroupOpt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetJournalOpt() isVolumeSpecPolicy_JournalOpt {
+	if m != nil {
+		return m.JournalOpt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetSharedv4Opt() isVolumeSpecPolicy_Sharedv4Opt {
+	if m != nil {
+		return m.Sharedv4Opt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetQueueDepthOpt() isVolumeSpecPolicy_QueueDepthOpt {
+	if m != nil {
+		return m.QueueDepthOpt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetEncryptedOpt() isVolumeSpecPolicy_EncryptedOpt {
+	if m != nil {
+		return m.EncryptedOpt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetAggregationLevelOpt() isVolumeSpecPolicy_AggregationLevelOpt {
+	if m != nil {
+		return m.AggregationLevelOpt
+	}
+	return nil
+}
+func (m *VolumeSpecPolicy) GetNodiscardOpt() isVolumeSpecPolicy_NodiscardOpt {
+	if m != nil {
+		return m.NodiscardOpt
+	}
+	return nil
+}
+
+func (m *VolumeSpecPolicy) GetSize() uint64 {
+	if x, ok := m.GetSizeOpt().(*VolumeSpecPolicy_Size); ok {
+		return x.Size
+	}
+	return 0
+}
+
+func (m *VolumeSpecPolicy) GetHaLevel() int64 {
+	if x, ok := m.GetHaLevelOpt().(*VolumeSpecPolicy_HaLevel); ok {
+		return x.HaLevel
+	}
+	return 0
+}
+
+func (m *VolumeSpecPolicy) GetCos() CosType {
+	if x, ok := m.GetCosOpt().(*VolumeSpecPolicy_Cos); ok {
+		return x.Cos
+	}
+	return CosType_NONE
+}
+
+func (m *VolumeSpecPolicy) GetIoProfile() IoProfile {
+	if x, ok := m.GetIoProfileOpt().(*VolumeSpecPolicy_IoProfile); ok {
+		return x.IoProfile
+	}
+	return IoProfile_IO_PROFILE_SEQUENTIAL
+}
+
+func (m *VolumeSpecPolicy) GetDedupe() bool {
+	if x, ok := m.GetDedupeOpt().(*VolumeSpecPolicy_Dedupe); ok {
+		return x.Dedupe
+	}
+	return false
+}
+
+func (m *VolumeSpecPolicy) GetSnapshotInterval() uint32 {
+	if x, ok := m.GetSnapshotIntervalOpt().(*VolumeSpecPolicy_SnapshotInterval); ok {
+		return x.SnapshotInterval
+	}
+	return 0
+}
+
+func (m *VolumeSpecPolicy) GetVolumeLabels() map[string]string {
+	if m != nil {
+		return m.VolumeLabels
+	}
+	return nil
+}
+
+func (m *VolumeSpecPolicy) GetShared() bool {
+	if x, ok := m.GetSharedOpt().(*VolumeSpecPolicy_Shared); ok {
+		return x.Shared
+	}
+	return false
+}
+
+func (m *VolumeSpecPolicy) GetReplicaSet() *ReplicaSet {
+	if m != nil {
+		return m.ReplicaSet
+	}
+	return nil
+}
+
+func (m *VolumeSpecPolicy) GetPassphrase() string {
+	if x, ok := m.GetPassphraseOpt().(*VolumeSpecPolicy_Passphrase); ok {
+		return x.Passphrase
+	}
+	return ""
+}
+
+func (m *VolumeSpecPolicy) GetSnapshotSchedule() string {
+	if x, ok := m.GetSnapshotScheduleOpt().(*VolumeSpecPolicy_SnapshotSchedule); ok {
+		return x.SnapshotSchedule
+	}
+	return ""
+}
+
+func (m *VolumeSpecPolicy) GetScale() uint32 {
+	if x, ok := m.GetScaleOpt().(*VolumeSpecPolicy_Scale); ok {
+		return x.Scale
+	}
+	return 0
+}
+
+func (m *VolumeSpecPolicy) GetSticky() bool {
+	if x, ok := m.GetStickyOpt().(*VolumeSpecPolicy_Sticky); ok {
+		return x.Sticky
+	}
+	return false
+}
+
+func (m *VolumeSpecPolicy) GetGroup() *Group {
+	if x, ok := m.GetGroupOpt().(*VolumeSpecPolicy_Group); ok {
+		return x.Group
+	}
+	return nil
+}
+
+func (m *VolumeSpecPolicy) GetJournal() bool {
+	if x, ok := m.GetJournalOpt().(*VolumeSpecPolicy_Journal); ok {
+		return x.Journal
+	}
+	return false
+}
+
+func (m *VolumeSpecPolicy) GetSharedv4() bool {
+	if x, ok := m.GetSharedv4Opt().(*VolumeSpecPolicy_Sharedv4); ok {
+		return x.Sharedv4
+	}
+	return false
+}
+
+func (m *VolumeSpecPolicy) GetQueueDepth() uint32 {
+	if x, ok := m.GetQueueDepthOpt().(*VolumeSpecPolicy_QueueDepth); ok {
+		return x.QueueDepth
+	}
+	return 0
+}
+
+func (m *VolumeSpecPolicy) GetEncrypted() bool {
+	if x, ok := m.GetEncryptedOpt().(*VolumeSpecPolicy_Encrypted); ok {
+		return x.Encrypted
+	}
+	return false
+}
+
+func (m *VolumeSpecPolicy) GetAggregationLevel() uint32 {
+	if x, ok := m.GetAggregationLevelOpt().(*VolumeSpecPolicy_AggregationLevel); ok {
+		return x.AggregationLevel
+	}
+	return 0
+}
+
+func (m *VolumeSpecPolicy) GetSizeOperator() VolumeSpecPolicy_PolicyOp {
+	if m != nil {
+		return m.SizeOperator
+	}
+	return VolumeSpecPolicy_Equal
+}
+
+func (m *VolumeSpecPolicy) GetHaLevelOperator() VolumeSpecPolicy_PolicyOp {
+	if m != nil {
+		return m.HaLevelOperator
+	}
+	return VolumeSpecPolicy_Equal
+}
+
+func (m *VolumeSpecPolicy) GetScaleOperator() VolumeSpecPolicy_PolicyOp {
+	if m != nil {
+		return m.ScaleOperator
+	}
+	return VolumeSpecPolicy_Equal
+}
+
+func (m *VolumeSpecPolicy) GetSnapshotIntervalOperator() VolumeSpecPolicy_PolicyOp {
+	if m != nil {
+		return m.SnapshotIntervalOperator
+	}
+	return VolumeSpecPolicy_Equal
+}
+
+func (m *VolumeSpecPolicy) GetNodiscard() bool {
+	if x, ok := m.GetNodiscardOpt().(*VolumeSpecPolicy_Nodiscard); ok {
+		return x.Nodiscard
+	}
+	return false
+}
+
+func (m *VolumeSpecPolicy) GetIoStrategy() *IoStrategy {
+	if m != nil {
+		return m.IoStrategy
+	}
+	return nil
+}
+
+// XXX_OneofFuncs is for the internal use of the proto package.
+func (*VolumeSpecPolicy) XXX_OneofFuncs() (func(msg proto.Message, b *proto.Buffer) error, func(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error), func(msg proto.Message) (n int), []interface{}) {
+	return _VolumeSpecPolicy_OneofMarshaler, _VolumeSpecPolicy_OneofUnmarshaler, _VolumeSpecPolicy_OneofSizer, []interface{}{
+		(*VolumeSpecPolicy_Size)(nil),
+		(*VolumeSpecPolicy_HaLevel)(nil),
+		(*VolumeSpecPolicy_Cos)(nil),
+		(*VolumeSpecPolicy_IoProfile)(nil),
+		(*VolumeSpecPolicy_Dedupe)(nil),
+		(*VolumeSpecPolicy_SnapshotInterval)(nil),
+		(*VolumeSpecPolicy_Shared)(nil),
+		(*VolumeSpecPolicy_Passphrase)(nil),
+		(*VolumeSpecPolicy_SnapshotSchedule)(nil),
+		(*VolumeSpecPolicy_Scale)(nil),
+		(*VolumeSpecPolicy_Sticky)(nil),
+		(*VolumeSpecPolicy_Group)(nil),
+		(*VolumeSpecPolicy_Journal)(nil),
+		(*VolumeSpecPolicy_Sharedv4)(nil),
+		(*VolumeSpecPolicy_QueueDepth)(nil),
+		(*VolumeSpecPolicy_Encrypted)(nil),
+		(*VolumeSpecPolicy_AggregationLevel)(nil),
+		(*VolumeSpecPolicy_Nodiscard)(nil),
+	}
+}
+
+func _VolumeSpecPolicy_OneofMarshaler(msg proto.Message, b *proto.Buffer) error {
+	m := msg.(*VolumeSpecPolicy)
+	// size_opt
+	switch x := m.SizeOpt.(type) {
+	case *VolumeSpecPolicy_Size:
+		b.EncodeVarint(1<<3 | proto.WireVarint)
+		b.EncodeVarint(uint64(x.Size))
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.SizeOpt has unexpected type %T", x)
+	}
+	// ha_level_opt
+	switch x := m.HaLevelOpt.(type) {
+	case *VolumeSpecPolicy_HaLevel:
+		b.EncodeVarint(2<<3 | proto.WireVarint)
+		b.EncodeVarint(uint64(x.HaLevel))
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.HaLevelOpt has unexpected type %T", x)
+	}
+	// cos_opt
+	switch x := m.CosOpt.(type) {
+	case *VolumeSpecPolicy_Cos:
+		b.EncodeVarint(3<<3 | proto.WireVarint)
+		b.EncodeVarint(uint64(x.Cos))
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.CosOpt has unexpected type %T", x)
+	}
+	// io_profile_opt
+	switch x := m.IoProfileOpt.(type) {
+	case *VolumeSpecPolicy_IoProfile:
+		b.EncodeVarint(4<<3 | proto.WireVarint)
+		b.EncodeVarint(uint64(x.IoProfile))
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.IoProfileOpt has unexpected type %T", x)
+	}
+	// dedupe_opt
+	switch x := m.DedupeOpt.(type) {
+	case *VolumeSpecPolicy_Dedupe:
+		t := uint64(0)
+		if x.Dedupe {
+			t = 1
+		}
+		b.EncodeVarint(5<<3 | proto.WireVarint)
+		b.EncodeVarint(t)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.DedupeOpt has unexpected type %T", x)
+	}
+	// snapshot_interval_opt
+	switch x := m.SnapshotIntervalOpt.(type) {
+	case *VolumeSpecPolicy_SnapshotInterval:
+		b.EncodeVarint(6<<3 | proto.WireVarint)
+		b.EncodeVarint(uint64(x.SnapshotInterval))
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.SnapshotIntervalOpt has unexpected type %T", x)
+	}
+	// shared_opt
+	switch x := m.SharedOpt.(type) {
+	case *VolumeSpecPolicy_Shared:
+		t := uint64(0)
+		if x.Shared {
+			t = 1
+		}
+		b.EncodeVarint(8<<3 | proto.WireVarint)
+		b.EncodeVarint(t)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.SharedOpt has unexpected type %T", x)
+	}
+	// passphrase_opt
+	switch x := m.PassphraseOpt.(type) {
+	case *VolumeSpecPolicy_Passphrase:
+		b.EncodeVarint(10<<3 | proto.WireBytes)
+		b.EncodeStringBytes(x.Passphrase)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.PassphraseOpt has unexpected type %T", x)
+	}
+	// snapshot_schedule_opt
+	switch x := m.SnapshotScheduleOpt.(type) {
+	case *VolumeSpecPolicy_SnapshotSchedule:
+		b.EncodeVarint(11<<3 | proto.WireBytes)
+		b.EncodeStringBytes(x.SnapshotSchedule)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.SnapshotScheduleOpt has unexpected type %T", x)
+	}
+	// scale_opt
+	switch x := m.ScaleOpt.(type) {
+	case *VolumeSpecPolicy_Scale:
+		b.EncodeVarint(12<<3 | proto.WireVarint)
+		b.EncodeVarint(uint64(x.Scale))
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.ScaleOpt has unexpected type %T", x)
+	}
+	// sticky_opt
+	switch x := m.StickyOpt.(type) {
+	case *VolumeSpecPolicy_Sticky:
+		t := uint64(0)
+		if x.Sticky {
+			t = 1
+		}
+		b.EncodeVarint(13<<3 | proto.WireVarint)
+		b.EncodeVarint(t)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.StickyOpt has unexpected type %T", x)
+	}
+	// group_opt
+	switch x := m.GroupOpt.(type) {
+	case *VolumeSpecPolicy_Group:
+		b.EncodeVarint(14<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.Group); err != nil {
+			return err
+		}
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.GroupOpt has unexpected type %T", x)
+	}
+	// journal_opt
+	switch x := m.JournalOpt.(type) {
+	case *VolumeSpecPolicy_Journal:
+		t := uint64(0)
+		if x.Journal {
+			t = 1
+		}
+		b.EncodeVarint(15<<3 | proto.WireVarint)
+		b.EncodeVarint(t)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.JournalOpt has unexpected type %T", x)
+	}
+	// sharedv4_opt
+	switch x := m.Sharedv4Opt.(type) {
+	case *VolumeSpecPolicy_Sharedv4:
+		t := uint64(0)
+		if x.Sharedv4 {
+			t = 1
+		}
+		b.EncodeVarint(16<<3 | proto.WireVarint)
+		b.EncodeVarint(t)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.Sharedv4Opt has unexpected type %T", x)
+	}
+	// queue_depth_opt
+	switch x := m.QueueDepthOpt.(type) {
+	case *VolumeSpecPolicy_QueueDepth:
+		b.EncodeVarint(17<<3 | proto.WireVarint)
+		b.EncodeVarint(uint64(x.QueueDepth))
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.QueueDepthOpt has unexpected type %T", x)
+	}
+	// encrypted_opt
+	switch x := m.EncryptedOpt.(type) {
+	case *VolumeSpecPolicy_Encrypted:
+		t := uint64(0)
+		if x.Encrypted {
+			t = 1
+		}
+		b.EncodeVarint(18<<3 | proto.WireVarint)
+		b.EncodeVarint(t)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.EncryptedOpt has unexpected type %T", x)
+	}
+	// aggregation_level_opt
+	switch x := m.AggregationLevelOpt.(type) {
+	case *VolumeSpecPolicy_AggregationLevel:
+		b.EncodeVarint(19<<3 | proto.WireVarint)
+		b.EncodeVarint(uint64(x.AggregationLevel))
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.AggregationLevelOpt has unexpected type %T", x)
+	}
+	// nodiscard_opt
+	switch x := m.NodiscardOpt.(type) {
+	case *VolumeSpecPolicy_Nodiscard:
+		t := uint64(0)
+		if x.Nodiscard {
+			t = 1
+		}
+		b.EncodeVarint(54<<3 | proto.WireVarint)
+		b.EncodeVarint(t)
+	case nil:
+	default:
+		return fmt.Errorf("VolumeSpecPolicy.NodiscardOpt has unexpected type %T", x)
+	}
+	return nil
+}
+
+func _VolumeSpecPolicy_OneofUnmarshaler(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error) {
+	m := msg.(*VolumeSpecPolicy)
+	switch tag {
+	case 1: // size_opt.size
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.SizeOpt = &VolumeSpecPolicy_Size{x}
+		return true, err
+	case 2: // ha_level_opt.ha_level
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.HaLevelOpt = &VolumeSpecPolicy_HaLevel{int64(x)}
+		return true, err
+	case 3: // cos_opt.cos
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.CosOpt = &VolumeSpecPolicy_Cos{CosType(x)}
+		return true, err
+	case 4: // io_profile_opt.io_profile
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.IoProfileOpt = &VolumeSpecPolicy_IoProfile{IoProfile(x)}
+		return true, err
+	case 5: // dedupe_opt.dedupe
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.DedupeOpt = &VolumeSpecPolicy_Dedupe{x != 0}
+		return true, err
+	case 6: // snapshot_interval_opt.snapshot_interval
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.SnapshotIntervalOpt = &VolumeSpecPolicy_SnapshotInterval{uint32(x)}
+		return true, err
+	case 8: // shared_opt.shared
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.SharedOpt = &VolumeSpecPolicy_Shared{x != 0}
+		return true, err
+	case 10: // passphrase_opt.passphrase
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeStringBytes()
+		m.PassphraseOpt = &VolumeSpecPolicy_Passphrase{x}
+		return true, err
+	case 11: // snapshot_schedule_opt.snapshot_schedule
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeStringBytes()
+		m.SnapshotScheduleOpt = &VolumeSpecPolicy_SnapshotSchedule{x}
+		return true, err
+	case 12: // scale_opt.scale
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.ScaleOpt = &VolumeSpecPolicy_Scale{uint32(x)}
+		return true, err
+	case 13: // sticky_opt.sticky
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.StickyOpt = &VolumeSpecPolicy_Sticky{x != 0}
+		return true, err
+	case 14: // group_opt.group
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(Group)
+		err := b.DecodeMessage(msg)
+		m.GroupOpt = &VolumeSpecPolicy_Group{msg}
+		return true, err
+	case 15: // journal_opt.journal
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.JournalOpt = &VolumeSpecPolicy_Journal{x != 0}
+		return true, err
+	case 16: // sharedv4_opt.sharedv4
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.Sharedv4Opt = &VolumeSpecPolicy_Sharedv4{x != 0}
+		return true, err
+	case 17: // queue_depth_opt.queue_depth
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.QueueDepthOpt = &VolumeSpecPolicy_QueueDepth{uint32(x)}
+		return true, err
+	case 18: // encrypted_opt.encrypted
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.EncryptedOpt = &VolumeSpecPolicy_Encrypted{x != 0}
+		return true, err
+	case 19: // aggregation_level_opt.aggregation_level
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.AggregationLevelOpt = &VolumeSpecPolicy_AggregationLevel{uint32(x)}
+		return true, err
+	case 54: // nodiscard_opt.nodiscard
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.NodiscardOpt = &VolumeSpecPolicy_Nodiscard{x != 0}
+		return true, err
+	default:
+		return false, nil
+	}
+}
+
+func _VolumeSpecPolicy_OneofSizer(msg proto.Message) (n int) {
+	m := msg.(*VolumeSpecPolicy)
+	// size_opt
+	switch x := m.SizeOpt.(type) {
+	case *VolumeSpecPolicy_Size:
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(x.Size))
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// ha_level_opt
+	switch x := m.HaLevelOpt.(type) {
+	case *VolumeSpecPolicy_HaLevel:
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(x.HaLevel))
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// cos_opt
+	switch x := m.CosOpt.(type) {
+	case *VolumeSpecPolicy_Cos:
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(x.Cos))
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// io_profile_opt
+	switch x := m.IoProfileOpt.(type) {
+	case *VolumeSpecPolicy_IoProfile:
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(x.IoProfile))
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// dedupe_opt
+	switch x := m.DedupeOpt.(type) {
+	case *VolumeSpecPolicy_Dedupe:
+		n += 1 // tag and wire
+		n += 1
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// snapshot_interval_opt
+	switch x := m.SnapshotIntervalOpt.(type) {
+	case *VolumeSpecPolicy_SnapshotInterval:
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(x.SnapshotInterval))
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// shared_opt
+	switch x := m.SharedOpt.(type) {
+	case *VolumeSpecPolicy_Shared:
+		n += 1 // tag and wire
+		n += 1
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// passphrase_opt
+	switch x := m.PassphraseOpt.(type) {
+	case *VolumeSpecPolicy_Passphrase:
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(len(x.Passphrase)))
+		n += len(x.Passphrase)
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// snapshot_schedule_opt
+	switch x := m.SnapshotScheduleOpt.(type) {
+	case *VolumeSpecPolicy_SnapshotSchedule:
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(len(x.SnapshotSchedule)))
+		n += len(x.SnapshotSchedule)
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// scale_opt
+	switch x := m.ScaleOpt.(type) {
+	case *VolumeSpecPolicy_Scale:
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(x.Scale))
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// sticky_opt
+	switch x := m.StickyOpt.(type) {
+	case *VolumeSpecPolicy_Sticky:
+		n += 1 // tag and wire
+		n += 1
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// group_opt
+	switch x := m.GroupOpt.(type) {
+	case *VolumeSpecPolicy_Group:
+		s := proto.Size(x.Group)
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// journal_opt
+	switch x := m.JournalOpt.(type) {
+	case *VolumeSpecPolicy_Journal:
+		n += 1 // tag and wire
+		n += 1
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// sharedv4_opt
+	switch x := m.Sharedv4Opt.(type) {
+	case *VolumeSpecPolicy_Sharedv4:
+		n += 2 // tag and wire
+		n += 1
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// queue_depth_opt
+	switch x := m.QueueDepthOpt.(type) {
+	case *VolumeSpecPolicy_QueueDepth:
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(x.QueueDepth))
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// encrypted_opt
+	switch x := m.EncryptedOpt.(type) {
+	case *VolumeSpecPolicy_Encrypted:
+		n += 2 // tag and wire
+		n += 1
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// aggregation_level_opt
+	switch x := m.AggregationLevelOpt.(type) {
+	case *VolumeSpecPolicy_AggregationLevel:
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(x.AggregationLevel))
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	// nodiscard_opt
+	switch x := m.NodiscardOpt.(type) {
+	case *VolumeSpecPolicy_Nodiscard:
+		n += 2 // tag and wire
+		n += 1
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	return n
+}
+
+// ReplicaSet set of machine IDs (nodes) to which part of this volume is erasure
+// coded - for clustered storage arrays
+type ReplicaSet struct {
+	Nodes                []string `protobuf:"bytes,1,rep,name=nodes" json:"nodes,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *ReplicaSet) Reset()         { *m = ReplicaSet{} }
+func (m *ReplicaSet) String() string { return proto.CompactTextString(m) }
+func (*ReplicaSet) ProtoMessage()    {}
+func (*ReplicaSet) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{10}
+}
+func (m *ReplicaSet) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_ReplicaSet.Unmarshal(m, b)
+}
+func (m *ReplicaSet) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_ReplicaSet.Marshal(b, m, deterministic)
+}
+func (dst *ReplicaSet) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_ReplicaSet.Merge(dst, src)
+}
+func (m *ReplicaSet) XXX_Size() int {
+	return xxx_messageInfo_ReplicaSet.Size(m)
+}
+func (m *ReplicaSet) XXX_DiscardUnknown() {
+	xxx_messageInfo_ReplicaSet.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_ReplicaSet proto.InternalMessageInfo
+
+func (m *ReplicaSet) GetNodes() []string {
+	if m != nil {
+		return m.Nodes
+	}
+	return nil
+}
+
+// RuntimeStateMap is a list of name value mapping of driver specific runtime
+// information.
+type RuntimeStateMap struct {
+	RuntimeState         map[string]string `protobuf:"bytes,1,rep,name=runtime_state,json=runtimeState" json:"runtime_state,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *RuntimeStateMap) Reset()         { *m = RuntimeStateMap{} }
+func (m *RuntimeStateMap) String() string { return proto.CompactTextString(m) }
+func (*RuntimeStateMap) ProtoMessage()    {}
+func (*RuntimeStateMap) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{11}
+}
+func (m *RuntimeStateMap) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_RuntimeStateMap.Unmarshal(m, b)
+}
+func (m *RuntimeStateMap) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_RuntimeStateMap.Marshal(b, m, deterministic)
+}
+func (dst *RuntimeStateMap) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_RuntimeStateMap.Merge(dst, src)
+}
+func (m *RuntimeStateMap) XXX_Size() int {
+	return xxx_messageInfo_RuntimeStateMap.Size(m)
+}
+func (m *RuntimeStateMap) XXX_DiscardUnknown() {
+	xxx_messageInfo_RuntimeStateMap.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_RuntimeStateMap proto.InternalMessageInfo
+
+func (m *RuntimeStateMap) GetRuntimeState() map[string]string {
+	if m != nil {
+		return m.RuntimeState
+	}
+	return nil
+}
+
+// Ownership information for resource.
+// Administrators are users who belong to the group `*`, meaning, every group.
+type Ownership struct {
+	// Username of owner.
+	//
+	// The storage system uses the username taken from the security authorization
+	// token and is saved on this field. Only users with system administration
+	// can edit this value.
+	Owner string `protobuf:"bytes,1,opt,name=owner" json:"owner,omitempty"`
+	// Permissions to share resource which can be set by the owner.
+	//
+	// NOTE: To create an "admin" user which has access to any resource set the group value
+	// in the token of the user to `*`.
+	Acls                 *Ownership_AccessControl `protobuf:"bytes,2,opt,name=acls" json:"acls,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                 `json:"-"`
+	XXX_unrecognized     []byte                   `json:"-"`
+	XXX_sizecache        int32                    `json:"-"`
+}
+
+func (m *Ownership) Reset()         { *m = Ownership{} }
+func (m *Ownership) String() string { return proto.CompactTextString(m) }
+func (*Ownership) ProtoMessage()    {}
+func (*Ownership) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{12}
+}
+func (m *Ownership) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_Ownership.Unmarshal(m, b)
+}
+func (m *Ownership) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_Ownership.Marshal(b, m, deterministic)
+}
+func (dst *Ownership) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_Ownership.Merge(dst, src)
+}
+func (m *Ownership) XXX_Size() int {
+	return xxx_messageInfo_Ownership.Size(m)
+}
+func (m *Ownership) XXX_DiscardUnknown() {
+	xxx_messageInfo_Ownership.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_Ownership proto.InternalMessageInfo
+
+func (m *Ownership) GetOwner() string {
+	if m != nil {
+		return m.Owner
+	}
+	return ""
+}
+
+func (m *Ownership) GetAcls() *Ownership_AccessControl {
+	if m != nil {
+		return m.Acls
+	}
+	return nil
+}
+
+type Ownership_AccessControl struct {
+	// Group access to resource which must match the group set in the
+	// authorization token.
+	// Can be set by the owner or the system administrator only.
+	// Possible values are:
+	// 1. no groups: Means no groups are given access.
+	// 2. `["*"]`: All groups are allowed.
+	// 3. `["group1", "group2"]`: Only certain groups are allowed. In this example only
+	// _group1_ and _group2_ are allowed.
+	Groups map[string]Ownership_AccessType `protobuf:"bytes,1,rep,name=groups" json:"groups,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"varint,2,opt,name=value,enum=openstorage.api.Ownership_AccessType"`
+	// Collaborator access to resource gives access to other user.
+	// Must be the username (unique id) set in the authorization token.
+	// The owner or the administrator can set this value. Possible values are:
+	// 1. no collaborators: Means no users are given access.
+	// 2. `["*"]`: All users are allowed.
+	// 3. `["username1", "username2"]`: Only certain usernames are allowed. In this example only
+	// _username1_ and _username2_ are allowed.
+	Collaborators        map[string]Ownership_AccessType `protobuf:"bytes,2,rep,name=collaborators" json:"collaborators,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"varint,2,opt,name=value,enum=openstorage.api.Ownership_AccessType"`
+	XXX_NoUnkeyedLiteral struct{}                        `json:"-"`
+	XXX_unrecognized     []byte                          `json:"-"`
+	XXX_sizecache        int32                           `json:"-"`
+}
+
+func (m *Ownership_AccessControl) Reset()         { *m = Ownership_AccessControl{} }
+func (m *Ownership_AccessControl) String() string { return proto.CompactTextString(m) }
+func (*Ownership_AccessControl) ProtoMessage()    {}
+func (*Ownership_AccessControl) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{12, 0}
+}
+func (m *Ownership_AccessControl) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_Ownership_AccessControl.Unmarshal(m, b)
+}
+func (m *Ownership_AccessControl) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_Ownership_AccessControl.Marshal(b, m, deterministic)
+}
+func (dst *Ownership_AccessControl) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_Ownership_AccessControl.Merge(dst, src)
+}
+func (m *Ownership_AccessControl) XXX_Size() int {
+	return xxx_messageInfo_Ownership_AccessControl.Size(m)
+}
+func (m *Ownership_AccessControl) XXX_DiscardUnknown() {
+	xxx_messageInfo_Ownership_AccessControl.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_Ownership_AccessControl proto.InternalMessageInfo
+
+func (m *Ownership_AccessControl) GetGroups() map[string]Ownership_AccessType {
+	if m != nil {
+		return m.Groups
+	}
+	return nil
+}
+
+func (m *Ownership_AccessControl) GetCollaborators() map[string]Ownership_AccessType {
+	if m != nil {
+		return m.Collaborators
+	}
+	return nil
+}
+
+// Volume represents an abstract storage volume.
+type Volume struct {
+	// Self referential volume ID.
+	Id string `protobuf:"bytes,1,opt,name=id" json:"id,omitempty"`
+	// Source specified seed data for the volume.
+	Source *Source `protobuf:"bytes,2,opt,name=source" json:"source,omitempty"`
+	// Group volumes in the same group have the same group id.
+	Group *Group `protobuf:"bytes,3,opt,name=group" json:"group,omitempty"`
+	// Readonly is true if this volume is to be mounted with readonly access.
+	Readonly bool `protobuf:"varint,4,opt,name=readonly" json:"readonly,omitempty"`
+	// User specified locator
+	Locator *VolumeLocator `protobuf:"bytes,5,opt,name=locator" json:"locator,omitempty"`
+	// Volume creation time
+	Ctime *timestamp.Timestamp `protobuf:"bytes,6,opt,name=ctime" json:"ctime,omitempty"`
+	// User specified VolumeSpec
+	Spec *VolumeSpec `protobuf:"bytes,7,opt,name=spec" json:"spec,omitempty"`
+	// Usage is bytes consumed by vtheis volume.
+	Usage uint64 `protobuf:"varint,8,opt,name=usage" json:"usage,omitempty"`
+	// LastScan is the time when an integrity check was run.
+	LastScan *timestamp.Timestamp `protobuf:"bytes,9,opt,name=last_scan,json=lastScan" json:"last_scan,omitempty"`
+	// Format specifies the filesytem for this volume.
+	Format FSType `protobuf:"varint,10,opt,name=format,enum=openstorage.api.FSType" json:"format,omitempty"`
+	// Status is the availability status of this volume.
+	Status VolumeStatus `protobuf:"varint,11,opt,name=status,enum=openstorage.api.VolumeStatus" json:"status,omitempty"`
+	// State is the current runtime state of this volume.
+	State VolumeState `protobuf:"varint,12,opt,name=state,enum=openstorage.api.VolumeState" json:"state,omitempty"`
+	// AttachedOn is the node instance identifier for clustered systems.
+	AttachedOn string `protobuf:"bytes,13,opt,name=attached_on,json=attachedOn" json:"attached_on,omitempty"`
+	// AttachedState shows whether the device is attached for internal or external use.
+	AttachedState AttachState `protobuf:"varint,14,opt,name=attached_state,json=attachedState,enum=openstorage.api.AttachState" json:"attached_state,omitempty"`
+	// DevicePath is the device exported by block device implementations.
+	DevicePath string `protobuf:"bytes,15,opt,name=device_path,json=devicePath" json:"device_path,omitempty"`
+	// SecureDevicePath is the device path for an encrypted volume.
+	SecureDevicePath string `protobuf:"bytes,16,opt,name=secure_device_path,json=secureDevicePath" json:"secure_device_path,omitempty"`
+	// AttachPath is the mounted path in the host namespace.
+	AttachPath []string `protobuf:"bytes,17,rep,name=attach_path,json=attachPath" json:"attach_path,omitempty"`
+	// AttachInfo is a list of name value mappings that provides attach information.
+	AttachInfo map[string]string `protobuf:"bytes,18,rep,name=attach_info,json=attachInfo" json:"attach_info,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	// ReplicatSets storage for this volumefor clustered storage arrays.
+	ReplicaSets []*ReplicaSet `protobuf:"bytes,19,rep,name=replica_sets,json=replicaSets" json:"replica_sets,omitempty"`
+	// RuntimeState is a lst of name value mapping of driver specific runtime
+	// information.
+	RuntimeState []*RuntimeStateMap `protobuf:"bytes,20,rep,name=runtime_state,json=runtimeState" json:"runtime_state,omitempty"`
+	// Error is the Last recorded error.
+	Error string `protobuf:"bytes,21,opt,name=error" json:"error,omitempty"`
+	// VolumeConsumers are entities that consume this volume
+	VolumeConsumers []*VolumeConsumer `protobuf:"bytes,22,rep,name=volume_consumers,json=volumeConsumers" json:"volume_consumers,omitempty"`
+	// FsResizeRequired if an FS resize is required on the volume.
+	FsResizeRequired     bool     `protobuf:"varint,23,opt,name=fs_resize_required,json=fsResizeRequired" json:"fs_resize_required,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *Volume) Reset()         { *m = Volume{} }
+func (m *Volume) String() string { return proto.CompactTextString(m) }
+func (*Volume) ProtoMessage()    {}
+func (*Volume) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{13}
+}
+func (m *Volume) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_Volume.Unmarshal(m, b)
+}
+func (m *Volume) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_Volume.Marshal(b, m, deterministic)
+}
+func (dst *Volume) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_Volume.Merge(dst, src)
+}
+func (m *Volume) XXX_Size() int {
+	return xxx_messageInfo_Volume.Size(m)
+}
+func (m *Volume) XXX_DiscardUnknown() {
+	xxx_messageInfo_Volume.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_Volume proto.InternalMessageInfo
+
+func (m *Volume) GetId() string {
+	if m != nil {
+		return m.Id
+	}
+	return ""
+}
+
+func (m *Volume) GetSource() *Source {
+	if m != nil {
+		return m.Source
+	}
+	return nil
+}
+
+func (m *Volume) GetGroup() *Group {
+	if m != nil {
+		return m.Group
+	}
+	return nil
+}
+
+func (m *Volume) GetReadonly() bool {
+	if m != nil {
+		return m.Readonly
+	}
+	return false
+}
+
+func (m *Volume) GetLocator() *VolumeLocator {
+	if m != nil {
+		return m.Locator
+	}
+	return nil
+}
+
+func (m *Volume) GetCtime() *timestamp.Timestamp {
+	if m != nil {
+		return m.Ctime
+	}
+	return nil
+}
+
+func (m *Volume) GetSpec() *VolumeSpec {
+	if m != nil {
+		return m.Spec
+	}
+	return nil
+}
+
+func (m *Volume) GetUsage() uint64 {
+	if m != nil {
+		return m.Usage
+	}
+	return 0
+}
+
+func (m *Volume) GetLastScan() *timestamp.Timestamp {
+	if m != nil {
+		return m.LastScan
+	}
+	return nil
+}
+
+func (m *Volume) GetFormat() FSType {
+	if m != nil {
+		return m.Format
+	}
+	return FSType_FS_TYPE_NONE
+}
+
+func (m *Volume) GetStatus() VolumeStatus {
+	if m != nil {
+		return m.Status
+	}
+	return VolumeStatus_VOLUME_STATUS_NONE
+}
+
+func (m *Volume) GetState() VolumeState {
+	if m != nil {
+		return m.State
+	}
+	return VolumeState_VOLUME_STATE_NONE
+}
+
+func (m *Volume) GetAttachedOn() string {
+	if m != nil {
+		return m.AttachedOn
+	}
+	return ""
+}
+
+func (m *Volume) GetAttachedState() AttachState {
+	if m != nil {
+		return m.AttachedState
+	}
+	return AttachState_ATTACH_STATE_EXTERNAL
+}
+
+func (m *Volume) GetDevicePath() string {
+	if m != nil {
+		return m.DevicePath
+	}
+	return ""
+}
+
+func (m *Volume) GetSecureDevicePath() string {
+	if m != nil {
+		return m.SecureDevicePath
+	}
+	return ""
+}
+
+func (m *Volume) GetAttachPath() []string {
+	if m != nil {
+		return m.AttachPath
+	}
+	return nil
+}
+
+func (m *Volume) GetAttachInfo() map[string]string {
+	if m != nil {
+		return m.AttachInfo
+	}
+	return nil
+}
+
+func (m *Volume) GetReplicaSets() []*ReplicaSet {
+	if m != nil {
+		return m.ReplicaSets
+	}
+	return nil
+}
+
+func (m *Volume) GetRuntimeState() []*RuntimeStateMap {
+	if m != nil {
+		return m.RuntimeState
+	}
+	return nil
+}
+
+func (m *Volume) GetError() string {
+	if m != nil {
+		return m.Error
+	}
+	return ""
+}
+
+func (m *Volume) GetVolumeConsumers() []*VolumeConsumer {
+	if m != nil {
+		return m.VolumeConsumers
+	}
+	return nil
+}
+
+func (m *Volume) GetFsResizeRequired() bool {
+	if m != nil {
+		return m.FsResizeRequired
+	}
+	return false
+}
+
+// Stats is a structure that represents last collected stats for a volume
+type Stats struct {
+	// Reads completed successfully
+	Reads uint64 `protobuf:"varint,1,opt,name=reads" json:"reads,omitempty"`
+	// Time spent in reads in ms
+	ReadMs uint64 `protobuf:"varint,2,opt,name=read_ms,json=readMs" json:"read_ms,omitempty"`
+	// Number of bytes read
+	ReadBytes uint64 `protobuf:"varint,3,opt,name=read_bytes,json=readBytes" json:"read_bytes,omitempty"`
+	// Writes completed successfully
+	Writes uint64 `protobuf:"varint,4,opt,name=writes" json:"writes,omitempty"`
+	// Time spent in writes in ms
+	WriteMs uint64 `protobuf:"varint,5,opt,name=write_ms,json=writeMs" json:"write_ms,omitempty"`
+	// Number of bytes written
+	WriteBytes uint64 `protobuf:"varint,6,opt,name=write_bytes,json=writeBytes" json:"write_bytes,omitempty"`
+	// IOs curently in progress
+	IoProgress uint64 `protobuf:"varint,7,opt,name=io_progress,json=ioProgress" json:"io_progress,omitempty"`
+	// Time spent doing IOs ms
+	IoMs uint64 `protobuf:"varint,8,opt,name=io_ms,json=ioMs" json:"io_ms,omitempty"`
+	// BytesUsed
+	BytesUsed uint64 `protobuf:"varint,9,opt,name=bytes_used,json=bytesUsed" json:"bytes_used,omitempty"`
+	// Interval in ms during which stats were collected
+	IntervalMs           uint64   `protobuf:"varint,10,opt,name=interval_ms,json=intervalMs" json:"interval_ms,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *Stats) Reset()         { *m = Stats{} }
+func (m *Stats) String() string { return proto.CompactTextString(m) }
+func (*Stats) ProtoMessage()    {}
+func (*Stats) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{14}
+}
+func (m *Stats) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_Stats.Unmarshal(m, b)
+}
+func (m *Stats) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_Stats.Marshal(b, m, deterministic)
+}
+func (dst *Stats) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_Stats.Merge(dst, src)
+}
+func (m *Stats) XXX_Size() int {
+	return xxx_messageInfo_Stats.Size(m)
+}
+func (m *Stats) XXX_DiscardUnknown() {
+	xxx_messageInfo_Stats.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_Stats proto.InternalMessageInfo
+
+func (m *Stats) GetReads() uint64 {
+	if m != nil {
+		return m.Reads
+	}
+	return 0
+}
+
+func (m *Stats) GetReadMs() uint64 {
+	if m != nil {
+		return m.ReadMs
+	}
+	return 0
+}
+
+func (m *Stats) GetReadBytes() uint64 {
+	if m != nil {
+		return m.ReadBytes
+	}
+	return 0
+}
+
+func (m *Stats) GetWrites() uint64 {
+	if m != nil {
+		return m.Writes
+	}
+	return 0
+}
+
+func (m *Stats) GetWriteMs() uint64 {
+	if m != nil {
+		return m.WriteMs
+	}
+	return 0
+}
+
+func (m *Stats) GetWriteBytes() uint64 {
+	if m != nil {
+		return m.WriteBytes
+	}
+	return 0
+}
+
+func (m *Stats) GetIoProgress() uint64 {
+	if m != nil {
+		return m.IoProgress
+	}
+	return 0
+}
+
+func (m *Stats) GetIoMs() uint64 {
+	if m != nil {
+		return m.IoMs
+	}
+	return 0
+}
+
+func (m *Stats) GetBytesUsed() uint64 {
+	if m != nil {
+		return m.BytesUsed
+	}
+	return 0
+}
+
+func (m *Stats) GetIntervalMs() uint64 {
+	if m != nil {
+		return m.IntervalMs
+	}
+	return 0
+}
+
+// Provides details on exclusive and shared storage used by
+// snapshot/volume specifically for copy-on-write(COW) snapshots. Deletion
+// of snapshots and overwirte of volume will affect the exclusive storage
+// used by the other dependent snaps and parent volume.
+type CapacityUsageInfo struct {
+	// Storage consumed exclusively by this single snapshot. Deletion of this
+	// snapshot may increase the free storage available by this amount.
+	ExclusiveBytes int64 `protobuf:"varint,1,opt,name=exclusive_bytes,json=exclusiveBytes" json:"exclusive_bytes,omitempty"`
+	// Storage consumed by this snapshot that is shared with parent and children
+	SharedBytes int64 `protobuf:"varint,2,opt,name=shared_bytes,json=sharedBytes" json:"shared_bytes,omitempty"`
+	// TotalBytes used by this volume
+	TotalBytes           int64    `protobuf:"varint,3,opt,name=total_bytes,json=totalBytes" json:"total_bytes,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *CapacityUsageInfo) Reset()         { *m = CapacityUsageInfo{} }
+func (m *CapacityUsageInfo) String() string { return proto.CompactTextString(m) }
+func (*CapacityUsageInfo) ProtoMessage()    {}
+func (*CapacityUsageInfo) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{15}
+}
+func (m *CapacityUsageInfo) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_CapacityUsageInfo.Unmarshal(m, b)
+}
+func (m *CapacityUsageInfo) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_CapacityUsageInfo.Marshal(b, m, deterministic)
+}
+func (dst *CapacityUsageInfo) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_CapacityUsageInfo.Merge(dst, src)
+}
+func (m *CapacityUsageInfo) XXX_Size() int {
+	return xxx_messageInfo_CapacityUsageInfo.Size(m)
+}
+func (m *CapacityUsageInfo) XXX_DiscardUnknown() {
+	xxx_messageInfo_CapacityUsageInfo.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_CapacityUsageInfo proto.InternalMessageInfo
+
+func (m *CapacityUsageInfo) GetExclusiveBytes() int64 {
+	if m != nil {
+		return m.ExclusiveBytes
+	}
+	return 0
+}
+
+func (m *CapacityUsageInfo) GetSharedBytes() int64 {
+	if m != nil {
+		return m.SharedBytes
+	}
+	return 0
+}
+
+func (m *CapacityUsageInfo) GetTotalBytes() int64 {
+	if m != nil {
+		return m.TotalBytes
+	}
+	return 0
+}
+
+// A SdkStoragePolicy represents minimum set of volume specs to be
+// follow while creating volumes.
+// If storage policy is set default in OpenStoragePolicy service, VolumeSpecPolicy will be
+// used before creating volume to validate volume specs or ensure minimum volume creation
+// rules followed
+type SdkStoragePolicy struct {
+	// Name of storage policy.
+	Name string `protobuf:"bytes,1,opt,name=name" json:"name,omitempty"`
+	// VolumeSpecs to apply while creating volume.
+	Policy *VolumeSpecPolicy `protobuf:"bytes,2,opt,name=policy" json:"policy,omitempty"`
+	// Force if set to true volume specs will be overwritten, otherwise
+	// volume creation will fail if the volume specifications are not inline with storage policy
+	Force bool `protobuf:"varint,3,opt,name=force" json:"force,omitempty"`
+	// If set a volume can be updated without storage Policy
+	// restriction, otherwise volume update will be followed as per storage policy
+	// specification
+	AllowUpdate bool `protobuf:"varint,4,opt,name=allow_update,json=allowUpdate" json:"allow_update,omitempty"`
+	// Owner info of storage policy
+	Ownership            *Ownership `protobuf:"bytes,5,opt,name=ownership" json:"ownership,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}   `json:"-"`
+	XXX_unrecognized     []byte     `json:"-"`
+	XXX_sizecache        int32      `json:"-"`
+}
+
+func (m *SdkStoragePolicy) Reset()         { *m = SdkStoragePolicy{} }
+func (m *SdkStoragePolicy) String() string { return proto.CompactTextString(m) }
+func (*SdkStoragePolicy) ProtoMessage()    {}
+func (*SdkStoragePolicy) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{16}
+}
+func (m *SdkStoragePolicy) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkStoragePolicy.Unmarshal(m, b)
+}
+func (m *SdkStoragePolicy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkStoragePolicy.Marshal(b, m, deterministic)
+}
+func (dst *SdkStoragePolicy) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkStoragePolicy.Merge(dst, src)
+}
+func (m *SdkStoragePolicy) XXX_Size() int {
+	return xxx_messageInfo_SdkStoragePolicy.Size(m)
+}
+func (m *SdkStoragePolicy) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkStoragePolicy.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkStoragePolicy proto.InternalMessageInfo
+
+func (m *SdkStoragePolicy) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+func (m *SdkStoragePolicy) GetPolicy() *VolumeSpecPolicy {
+	if m != nil {
+		return m.Policy
+	}
+	return nil
+}
+
+func (m *SdkStoragePolicy) GetForce() bool {
+	if m != nil {
+		return m.Force
+	}
+	return false
+}
+
+func (m *SdkStoragePolicy) GetAllowUpdate() bool {
+	if m != nil {
+		return m.AllowUpdate
+	}
+	return false
+}
+
+func (m *SdkStoragePolicy) GetOwnership() *Ownership {
+	if m != nil {
+		return m.Ownership
+	}
+	return nil
+}
+
+// Alert is a structure that represents an alert object
+type Alert struct {
+	// Id for Alert
+	Id int64 `protobuf:"varint,1,opt,name=id" json:"id,omitempty"`
+	// Severity of the Alert
+	Severity SeverityType `protobuf:"varint,2,opt,name=severity,enum=openstorage.api.SeverityType" json:"severity,omitempty"`
+	// AlertType user defined alert type
+	AlertType int64 `protobuf:"varint,3,opt,name=alert_type,json=alertType" json:"alert_type,omitempty"`
+	// Message describing the Alert
+	Message string `protobuf:"bytes,4,opt,name=message" json:"message,omitempty"`
+	// Timestamp when Alert occured
+	Timestamp *timestamp.Timestamp `protobuf:"bytes,5,opt,name=timestamp" json:"timestamp,omitempty"`
+	// ResourceId where Alert occured
+	ResourceId string `protobuf:"bytes,6,opt,name=resource_id,json=resourceId" json:"resource_id,omitempty"`
+	// Resource where Alert occured
+	Resource ResourceType `protobuf:"varint,7,opt,name=resource,enum=openstorage.api.ResourceType" json:"resource,omitempty"`
+	// Cleared Flag
+	Cleared bool `protobuf:"varint,8,opt,name=cleared" json:"cleared,omitempty"`
+	// Time-to-live in seconds for this Alert
+	Ttl uint64 `protobuf:"varint,9,opt,name=ttl" json:"ttl,omitempty"`
+	// UniqueTag helps identify a unique alert for a given resouce
+	UniqueTag string `protobuf:"bytes,10,opt,name=unique_tag,json=uniqueTag" json:"unique_tag,omitempty"`
+	// Count of such alerts raised so far.
+	Count int64 `protobuf:"varint,11,opt,name=count" json:"count,omitempty"`
+	// Timestamp when such alert was raised the very first time.
+	FirstSeen            *timestamp.Timestamp `protobuf:"bytes,12,opt,name=first_seen,json=firstSeen" json:"first_seen,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}             `json:"-"`
+	XXX_unrecognized     []byte               `json:"-"`
+	XXX_sizecache        int32                `json:"-"`
+}
+
+func (m *Alert) Reset()         { *m = Alert{} }
+func (m *Alert) String() string { return proto.CompactTextString(m) }
+func (*Alert) ProtoMessage()    {}
+func (*Alert) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{17}
+}
+func (m *Alert) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_Alert.Unmarshal(m, b)
+}
+func (m *Alert) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_Alert.Marshal(b, m, deterministic)
+}
+func (dst *Alert) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_Alert.Merge(dst, src)
+}
+func (m *Alert) XXX_Size() int {
+	return xxx_messageInfo_Alert.Size(m)
+}
+func (m *Alert) XXX_DiscardUnknown() {
+	xxx_messageInfo_Alert.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_Alert proto.InternalMessageInfo
+
+func (m *Alert) GetId() int64 {
+	if m != nil {
+		return m.Id
+	}
+	return 0
+}
+
+func (m *Alert) GetSeverity() SeverityType {
+	if m != nil {
+		return m.Severity
+	}
+	return SeverityType_SEVERITY_TYPE_NONE
+}
+
+func (m *Alert) GetAlertType() int64 {
+	if m != nil {
+		return m.AlertType
+	}
+	return 0
+}
+
+func (m *Alert) GetMessage() string {
+	if m != nil {
+		return m.Message
+	}
+	return ""
+}
+
+func (m *Alert) GetTimestamp() *timestamp.Timestamp {
+	if m != nil {
+		return m.Timestamp
+	}
+	return nil
+}
+
+func (m *Alert) GetResourceId() string {
+	if m != nil {
+		return m.ResourceId
+	}
+	return ""
+}
+
+func (m *Alert) GetResource() ResourceType {
+	if m != nil {
+		return m.Resource
+	}
+	return ResourceType_RESOURCE_TYPE_NONE
+}
+
+func (m *Alert) GetCleared() bool {
+	if m != nil {
+		return m.Cleared
+	}
+	return false
+}
+
+func (m *Alert) GetTtl() uint64 {
+	if m != nil {
+		return m.Ttl
+	}
+	return 0
+}
+
+func (m *Alert) GetUniqueTag() string {
+	if m != nil {
+		return m.UniqueTag
+	}
+	return ""
+}
+
+func (m *Alert) GetCount() int64 {
+	if m != nil {
+		return m.Count
+	}
+	return 0
+}
+
+func (m *Alert) GetFirstSeen() *timestamp.Timestamp {
+	if m != nil {
+		return m.FirstSeen
+	}
+	return nil
+}
+
+// SdkAlertsTimeSpan to store time window information.
+type SdkAlertsTimeSpan struct {
+	// Start timestamp when Alert occured
+	StartTime *timestamp.Timestamp `protobuf:"bytes,1,opt,name=start_time,json=startTime" json:"start_time,omitempty"`
+	// End timestamp when Alert occured
+	EndTime              *timestamp.Timestamp `protobuf:"bytes,2,opt,name=end_time,json=endTime" json:"end_time,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}             `json:"-"`
+	XXX_unrecognized     []byte               `json:"-"`
+	XXX_sizecache        int32                `json:"-"`
+}
+
+func (m *SdkAlertsTimeSpan) Reset()         { *m = SdkAlertsTimeSpan{} }
+func (m *SdkAlertsTimeSpan) String() string { return proto.CompactTextString(m) }
+func (*SdkAlertsTimeSpan) ProtoMessage()    {}
+func (*SdkAlertsTimeSpan) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{18}
+}
+func (m *SdkAlertsTimeSpan) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkAlertsTimeSpan.Unmarshal(m, b)
+}
+func (m *SdkAlertsTimeSpan) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkAlertsTimeSpan.Marshal(b, m, deterministic)
+}
+func (dst *SdkAlertsTimeSpan) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkAlertsTimeSpan.Merge(dst, src)
+}
+func (m *SdkAlertsTimeSpan) XXX_Size() int {
+	return xxx_messageInfo_SdkAlertsTimeSpan.Size(m)
+}
+func (m *SdkAlertsTimeSpan) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkAlertsTimeSpan.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkAlertsTimeSpan proto.InternalMessageInfo
+
+func (m *SdkAlertsTimeSpan) GetStartTime() *timestamp.Timestamp {
+	if m != nil {
+		return m.StartTime
+	}
+	return nil
+}
+
+func (m *SdkAlertsTimeSpan) GetEndTime() *timestamp.Timestamp {
+	if m != nil {
+		return m.EndTime
+	}
+	return nil
+}
+
+// SdkAlertsCountSpan to store count range information.
+type SdkAlertsCountSpan struct {
+	// Min count of such alerts raised so far.
+	MinCount int64 `protobuf:"varint,1,opt,name=min_count,json=minCount" json:"min_count,omitempty"`
+	// Max count of such alerts raised so far.
+	MaxCount             int64    `protobuf:"varint,2,opt,name=max_count,json=maxCount" json:"max_count,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkAlertsCountSpan) Reset()         { *m = SdkAlertsCountSpan{} }
+func (m *SdkAlertsCountSpan) String() string { return proto.CompactTextString(m) }
+func (*SdkAlertsCountSpan) ProtoMessage()    {}
+func (*SdkAlertsCountSpan) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{19}
+}
+func (m *SdkAlertsCountSpan) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkAlertsCountSpan.Unmarshal(m, b)
+}
+func (m *SdkAlertsCountSpan) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkAlertsCountSpan.Marshal(b, m, deterministic)
+}
+func (dst *SdkAlertsCountSpan) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkAlertsCountSpan.Merge(dst, src)
+}
+func (m *SdkAlertsCountSpan) XXX_Size() int {
+	return xxx_messageInfo_SdkAlertsCountSpan.Size(m)
+}
+func (m *SdkAlertsCountSpan) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkAlertsCountSpan.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkAlertsCountSpan proto.InternalMessageInfo
+
+func (m *SdkAlertsCountSpan) GetMinCount() int64 {
+	if m != nil {
+		return m.MinCount
+	}
+	return 0
+}
+
+func (m *SdkAlertsCountSpan) GetMaxCount() int64 {
+	if m != nil {
+		return m.MaxCount
+	}
+	return 0
+}
+
+// SdkAlertsOption contains options for filtering alerts.
+type SdkAlertsOption struct {
+	// Types that are valid to be assigned to Opt:
+	//	*SdkAlertsOption_MinSeverityType
+	//	*SdkAlertsOption_IsCleared
+	//	*SdkAlertsOption_TimeSpan
+	//	*SdkAlertsOption_CountSpan
+	Opt                  isSdkAlertsOption_Opt `protobuf_oneof:"opt"`
+	XXX_NoUnkeyedLiteral struct{}              `json:"-"`
+	XXX_unrecognized     []byte                `json:"-"`
+	XXX_sizecache        int32                 `json:"-"`
+}
+
+func (m *SdkAlertsOption) Reset()         { *m = SdkAlertsOption{} }
+func (m *SdkAlertsOption) String() string { return proto.CompactTextString(m) }
+func (*SdkAlertsOption) ProtoMessage()    {}
+func (*SdkAlertsOption) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{20}
+}
+func (m *SdkAlertsOption) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkAlertsOption.Unmarshal(m, b)
+}
+func (m *SdkAlertsOption) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkAlertsOption.Marshal(b, m, deterministic)
+}
+func (dst *SdkAlertsOption) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkAlertsOption.Merge(dst, src)
+}
+func (m *SdkAlertsOption) XXX_Size() int {
+	return xxx_messageInfo_SdkAlertsOption.Size(m)
+}
+func (m *SdkAlertsOption) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkAlertsOption.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkAlertsOption proto.InternalMessageInfo
+
+type isSdkAlertsOption_Opt interface {
+	isSdkAlertsOption_Opt()
+}
+
+type SdkAlertsOption_MinSeverityType struct {
+	MinSeverityType SeverityType `protobuf:"varint,1,opt,name=min_severity_type,json=minSeverityType,enum=openstorage.api.SeverityType,oneof"`
+}
+type SdkAlertsOption_IsCleared struct {
+	IsCleared bool `protobuf:"varint,2,opt,name=is_cleared,json=isCleared,oneof"`
+}
+type SdkAlertsOption_TimeSpan struct {
+	TimeSpan *SdkAlertsTimeSpan `protobuf:"bytes,3,opt,name=time_span,json=timeSpan,oneof"`
+}
+type SdkAlertsOption_CountSpan struct {
+	CountSpan *SdkAlertsCountSpan `protobuf:"bytes,4,opt,name=count_span,json=countSpan,oneof"`
+}
+
+func (*SdkAlertsOption_MinSeverityType) isSdkAlertsOption_Opt() {}
+func (*SdkAlertsOption_IsCleared) isSdkAlertsOption_Opt()       {}
+func (*SdkAlertsOption_TimeSpan) isSdkAlertsOption_Opt()        {}
+func (*SdkAlertsOption_CountSpan) isSdkAlertsOption_Opt()       {}
+
+func (m *SdkAlertsOption) GetOpt() isSdkAlertsOption_Opt {
+	if m != nil {
+		return m.Opt
+	}
+	return nil
+}
+
+func (m *SdkAlertsOption) GetMinSeverityType() SeverityType {
+	if x, ok := m.GetOpt().(*SdkAlertsOption_MinSeverityType); ok {
+		return x.MinSeverityType
+	}
+	return SeverityType_SEVERITY_TYPE_NONE
+}
+
+func (m *SdkAlertsOption) GetIsCleared() bool {
+	if x, ok := m.GetOpt().(*SdkAlertsOption_IsCleared); ok {
+		return x.IsCleared
+	}
+	return false
+}
+
+func (m *SdkAlertsOption) GetTimeSpan() *SdkAlertsTimeSpan {
+	if x, ok := m.GetOpt().(*SdkAlertsOption_TimeSpan); ok {
+		return x.TimeSpan
+	}
+	return nil
+}
+
+func (m *SdkAlertsOption) GetCountSpan() *SdkAlertsCountSpan {
+	if x, ok := m.GetOpt().(*SdkAlertsOption_CountSpan); ok {
+		return x.CountSpan
+	}
+	return nil
+}
+
+// XXX_OneofFuncs is for the internal use of the proto package.
+func (*SdkAlertsOption) XXX_OneofFuncs() (func(msg proto.Message, b *proto.Buffer) error, func(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error), func(msg proto.Message) (n int), []interface{}) {
+	return _SdkAlertsOption_OneofMarshaler, _SdkAlertsOption_OneofUnmarshaler, _SdkAlertsOption_OneofSizer, []interface{}{
+		(*SdkAlertsOption_MinSeverityType)(nil),
+		(*SdkAlertsOption_IsCleared)(nil),
+		(*SdkAlertsOption_TimeSpan)(nil),
+		(*SdkAlertsOption_CountSpan)(nil),
+	}
+}
+
+func _SdkAlertsOption_OneofMarshaler(msg proto.Message, b *proto.Buffer) error {
+	m := msg.(*SdkAlertsOption)
+	// opt
+	switch x := m.Opt.(type) {
+	case *SdkAlertsOption_MinSeverityType:
+		b.EncodeVarint(1<<3 | proto.WireVarint)
+		b.EncodeVarint(uint64(x.MinSeverityType))
+	case *SdkAlertsOption_IsCleared:
+		t := uint64(0)
+		if x.IsCleared {
+			t = 1
+		}
+		b.EncodeVarint(2<<3 | proto.WireVarint)
+		b.EncodeVarint(t)
+	case *SdkAlertsOption_TimeSpan:
+		b.EncodeVarint(3<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.TimeSpan); err != nil {
+			return err
+		}
+	case *SdkAlertsOption_CountSpan:
+		b.EncodeVarint(4<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.CountSpan); err != nil {
+			return err
+		}
+	case nil:
+	default:
+		return fmt.Errorf("SdkAlertsOption.Opt has unexpected type %T", x)
+	}
+	return nil
+}
+
+func _SdkAlertsOption_OneofUnmarshaler(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error) {
+	m := msg.(*SdkAlertsOption)
+	switch tag {
+	case 1: // opt.min_severity_type
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.Opt = &SdkAlertsOption_MinSeverityType{SeverityType(x)}
+		return true, err
+	case 2: // opt.is_cleared
+		if wire != proto.WireVarint {
+			return true, proto.ErrInternalBadWireType
+		}
+		x, err := b.DecodeVarint()
+		m.Opt = &SdkAlertsOption_IsCleared{x != 0}
+		return true, err
+	case 3: // opt.time_span
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkAlertsTimeSpan)
+		err := b.DecodeMessage(msg)
+		m.Opt = &SdkAlertsOption_TimeSpan{msg}
+		return true, err
+	case 4: // opt.count_span
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkAlertsCountSpan)
+		err := b.DecodeMessage(msg)
+		m.Opt = &SdkAlertsOption_CountSpan{msg}
+		return true, err
+	default:
+		return false, nil
+	}
+}
+
+func _SdkAlertsOption_OneofSizer(msg proto.Message) (n int) {
+	m := msg.(*SdkAlertsOption)
+	// opt
+	switch x := m.Opt.(type) {
+	case *SdkAlertsOption_MinSeverityType:
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(x.MinSeverityType))
+	case *SdkAlertsOption_IsCleared:
+		n += 1 // tag and wire
+		n += 1
+	case *SdkAlertsOption_TimeSpan:
+		s := proto.Size(x.TimeSpan)
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case *SdkAlertsOption_CountSpan:
+		s := proto.Size(x.CountSpan)
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	return n
+}
+
+// SdkAlertsResourceTypeQuery queries for alerts using only resource id.
+type SdkAlertsResourceTypeQuery struct {
+	// Resource type used to build query.
+	ResourceType         ResourceType `protobuf:"varint,1,opt,name=resource_type,json=resourceType,enum=openstorage.api.ResourceType" json:"resource_type,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}     `json:"-"`
+	XXX_unrecognized     []byte       `json:"-"`
+	XXX_sizecache        int32        `json:"-"`
+}
+
+func (m *SdkAlertsResourceTypeQuery) Reset()         { *m = SdkAlertsResourceTypeQuery{} }
+func (m *SdkAlertsResourceTypeQuery) String() string { return proto.CompactTextString(m) }
+func (*SdkAlertsResourceTypeQuery) ProtoMessage()    {}
+func (*SdkAlertsResourceTypeQuery) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{21}
+}
+func (m *SdkAlertsResourceTypeQuery) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkAlertsResourceTypeQuery.Unmarshal(m, b)
+}
+func (m *SdkAlertsResourceTypeQuery) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkAlertsResourceTypeQuery.Marshal(b, m, deterministic)
+}
+func (dst *SdkAlertsResourceTypeQuery) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkAlertsResourceTypeQuery.Merge(dst, src)
+}
+func (m *SdkAlertsResourceTypeQuery) XXX_Size() int {
+	return xxx_messageInfo_SdkAlertsResourceTypeQuery.Size(m)
+}
+func (m *SdkAlertsResourceTypeQuery) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkAlertsResourceTypeQuery.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkAlertsResourceTypeQuery proto.InternalMessageInfo
+
+func (m *SdkAlertsResourceTypeQuery) GetResourceType() ResourceType {
+	if m != nil {
+		return m.ResourceType
+	}
+	return ResourceType_RESOURCE_TYPE_NONE
+}
+
+// SdkAlertsAlertTypeQuery queries for alerts using alert type
+// and it requires that resource type be provided as well.
+type SdkAlertsAlertTypeQuery struct {
+	// Resource type used to build query.
+	ResourceType ResourceType `protobuf:"varint,1,opt,name=resource_type,json=resourceType,enum=openstorage.api.ResourceType" json:"resource_type,omitempty"`
+	// Alert type used to build query.
+	AlertType            int64    `protobuf:"varint,2,opt,name=alert_type,json=alertType" json:"alert_type,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkAlertsAlertTypeQuery) Reset()         { *m = SdkAlertsAlertTypeQuery{} }
+func (m *SdkAlertsAlertTypeQuery) String() string { return proto.CompactTextString(m) }
+func (*SdkAlertsAlertTypeQuery) ProtoMessage()    {}
+func (*SdkAlertsAlertTypeQuery) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{22}
+}
+func (m *SdkAlertsAlertTypeQuery) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkAlertsAlertTypeQuery.Unmarshal(m, b)
+}
+func (m *SdkAlertsAlertTypeQuery) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkAlertsAlertTypeQuery.Marshal(b, m, deterministic)
+}
+func (dst *SdkAlertsAlertTypeQuery) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkAlertsAlertTypeQuery.Merge(dst, src)
+}
+func (m *SdkAlertsAlertTypeQuery) XXX_Size() int {
+	return xxx_messageInfo_SdkAlertsAlertTypeQuery.Size(m)
+}
+func (m *SdkAlertsAlertTypeQuery) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkAlertsAlertTypeQuery.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkAlertsAlertTypeQuery proto.InternalMessageInfo
+
+func (m *SdkAlertsAlertTypeQuery) GetResourceType() ResourceType {
+	if m != nil {
+		return m.ResourceType
+	}
+	return ResourceType_RESOURCE_TYPE_NONE
+}
+
+func (m *SdkAlertsAlertTypeQuery) GetAlertType() int64 {
+	if m != nil {
+		return m.AlertType
+	}
+	return 0
+}
+
+// SdkAlertsResourceIdQuery queries for alerts using resource id
+// and it requires that both alert type and resource type be provided
+// as well.
+type SdkAlertsResourceIdQuery struct {
+	// Resource type used to build query.
+	ResourceType ResourceType `protobuf:"varint,1,opt,name=resource_type,json=resourceType,enum=openstorage.api.ResourceType" json:"resource_type,omitempty"`
+	// Alert type used to build query.
+	AlertType int64 `protobuf:"varint,2,opt,name=alert_type,json=alertType" json:"alert_type,omitempty"`
+	// Resource ID used to build query.
+	ResourceId           string   `protobuf:"bytes,3,opt,name=resource_id,json=resourceId" json:"resource_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkAlertsResourceIdQuery) Reset()         { *m = SdkAlertsResourceIdQuery{} }
+func (m *SdkAlertsResourceIdQuery) String() string { return proto.CompactTextString(m) }
+func (*SdkAlertsResourceIdQuery) ProtoMessage()    {}
+func (*SdkAlertsResourceIdQuery) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{23}
+}
+func (m *SdkAlertsResourceIdQuery) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkAlertsResourceIdQuery.Unmarshal(m, b)
+}
+func (m *SdkAlertsResourceIdQuery) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkAlertsResourceIdQuery.Marshal(b, m, deterministic)
+}
+func (dst *SdkAlertsResourceIdQuery) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkAlertsResourceIdQuery.Merge(dst, src)
+}
+func (m *SdkAlertsResourceIdQuery) XXX_Size() int {
+	return xxx_messageInfo_SdkAlertsResourceIdQuery.Size(m)
+}
+func (m *SdkAlertsResourceIdQuery) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkAlertsResourceIdQuery.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkAlertsResourceIdQuery proto.InternalMessageInfo
+
+func (m *SdkAlertsResourceIdQuery) GetResourceType() ResourceType {
+	if m != nil {
+		return m.ResourceType
+	}
+	return ResourceType_RESOURCE_TYPE_NONE
+}
+
+func (m *SdkAlertsResourceIdQuery) GetAlertType() int64 {
+	if m != nil {
+		return m.AlertType
+	}
+	return 0
+}
+
+func (m *SdkAlertsResourceIdQuery) GetResourceId() string {
+	if m != nil {
+		return m.ResourceId
+	}
+	return ""
+}
+
+// SdkAlertsQuery is one of the query types and a list of options.
+// Each query object is one of the three query types and a list of
+// options.
+type SdkAlertsQuery struct {
+	// One of the query types can be used to build SdkAlertsQuery.
+	//
+	// Types that are valid to be assigned to Query:
+	//	*SdkAlertsQuery_ResourceTypeQuery
+	//	*SdkAlertsQuery_AlertTypeQuery
+	//	*SdkAlertsQuery_ResourceIdQuery
+	Query isSdkAlertsQuery_Query `protobuf_oneof:"query"`
+	// Opts is a list of options associated with one of the queries.
+	Opts                 []*SdkAlertsOption `protobuf:"bytes,4,rep,name=opts" json:"opts,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}           `json:"-"`
+	XXX_unrecognized     []byte             `json:"-"`
+	XXX_sizecache        int32              `json:"-"`
+}
+
+func (m *SdkAlertsQuery) Reset()         { *m = SdkAlertsQuery{} }
+func (m *SdkAlertsQuery) String() string { return proto.CompactTextString(m) }
+func (*SdkAlertsQuery) ProtoMessage()    {}
+func (*SdkAlertsQuery) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{24}
+}
+func (m *SdkAlertsQuery) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkAlertsQuery.Unmarshal(m, b)
+}
+func (m *SdkAlertsQuery) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkAlertsQuery.Marshal(b, m, deterministic)
+}
+func (dst *SdkAlertsQuery) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkAlertsQuery.Merge(dst, src)
+}
+func (m *SdkAlertsQuery) XXX_Size() int {
+	return xxx_messageInfo_SdkAlertsQuery.Size(m)
+}
+func (m *SdkAlertsQuery) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkAlertsQuery.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkAlertsQuery proto.InternalMessageInfo
+
+type isSdkAlertsQuery_Query interface {
+	isSdkAlertsQuery_Query()
+}
+
+type SdkAlertsQuery_ResourceTypeQuery struct {
+	ResourceTypeQuery *SdkAlertsResourceTypeQuery `protobuf:"bytes,1,opt,name=resource_type_query,json=resourceTypeQuery,oneof"`
+}
+type SdkAlertsQuery_AlertTypeQuery struct {
+	AlertTypeQuery *SdkAlertsAlertTypeQuery `protobuf:"bytes,2,opt,name=alert_type_query,json=alertTypeQuery,oneof"`
+}
+type SdkAlertsQuery_ResourceIdQuery struct {
+	ResourceIdQuery *SdkAlertsResourceIdQuery `protobuf:"bytes,3,opt,name=resource_id_query,json=resourceIdQuery,oneof"`
+}
+
+func (*SdkAlertsQuery_ResourceTypeQuery) isSdkAlertsQuery_Query() {}
+func (*SdkAlertsQuery_AlertTypeQuery) isSdkAlertsQuery_Query()    {}
+func (*SdkAlertsQuery_ResourceIdQuery) isSdkAlertsQuery_Query()   {}
+
+func (m *SdkAlertsQuery) GetQuery() isSdkAlertsQuery_Query {
+	if m != nil {
+		return m.Query
+	}
+	return nil
+}
+
+func (m *SdkAlertsQuery) GetResourceTypeQuery() *SdkAlertsResourceTypeQuery {
+	if x, ok := m.GetQuery().(*SdkAlertsQuery_ResourceTypeQuery); ok {
+		return x.ResourceTypeQuery
+	}
+	return nil
+}
+
+func (m *SdkAlertsQuery) GetAlertTypeQuery() *SdkAlertsAlertTypeQuery {
+	if x, ok := m.GetQuery().(*SdkAlertsQuery_AlertTypeQuery); ok {
+		return x.AlertTypeQuery
+	}
+	return nil
+}
+
+func (m *SdkAlertsQuery) GetResourceIdQuery() *SdkAlertsResourceIdQuery {
+	if x, ok := m.GetQuery().(*SdkAlertsQuery_ResourceIdQuery); ok {
+		return x.ResourceIdQuery
+	}
+	return nil
+}
+
+func (m *SdkAlertsQuery) GetOpts() []*SdkAlertsOption {
+	if m != nil {
+		return m.Opts
+	}
+	return nil
+}
+
+// XXX_OneofFuncs is for the internal use of the proto package.
+func (*SdkAlertsQuery) XXX_OneofFuncs() (func(msg proto.Message, b *proto.Buffer) error, func(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error), func(msg proto.Message) (n int), []interface{}) {
+	return _SdkAlertsQuery_OneofMarshaler, _SdkAlertsQuery_OneofUnmarshaler, _SdkAlertsQuery_OneofSizer, []interface{}{
+		(*SdkAlertsQuery_ResourceTypeQuery)(nil),
+		(*SdkAlertsQuery_AlertTypeQuery)(nil),
+		(*SdkAlertsQuery_ResourceIdQuery)(nil),
+	}
+}
+
+func _SdkAlertsQuery_OneofMarshaler(msg proto.Message, b *proto.Buffer) error {
+	m := msg.(*SdkAlertsQuery)
+	// query
+	switch x := m.Query.(type) {
+	case *SdkAlertsQuery_ResourceTypeQuery:
+		b.EncodeVarint(1<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.ResourceTypeQuery); err != nil {
+			return err
+		}
+	case *SdkAlertsQuery_AlertTypeQuery:
+		b.EncodeVarint(2<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.AlertTypeQuery); err != nil {
+			return err
+		}
+	case *SdkAlertsQuery_ResourceIdQuery:
+		b.EncodeVarint(3<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.ResourceIdQuery); err != nil {
+			return err
+		}
+	case nil:
+	default:
+		return fmt.Errorf("SdkAlertsQuery.Query has unexpected type %T", x)
+	}
+	return nil
+}
+
+func _SdkAlertsQuery_OneofUnmarshaler(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error) {
+	m := msg.(*SdkAlertsQuery)
+	switch tag {
+	case 1: // query.resource_type_query
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkAlertsResourceTypeQuery)
+		err := b.DecodeMessage(msg)
+		m.Query = &SdkAlertsQuery_ResourceTypeQuery{msg}
+		return true, err
+	case 2: // query.alert_type_query
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkAlertsAlertTypeQuery)
+		err := b.DecodeMessage(msg)
+		m.Query = &SdkAlertsQuery_AlertTypeQuery{msg}
+		return true, err
+	case 3: // query.resource_id_query
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkAlertsResourceIdQuery)
+		err := b.DecodeMessage(msg)
+		m.Query = &SdkAlertsQuery_ResourceIdQuery{msg}
+		return true, err
+	default:
+		return false, nil
+	}
+}
+
+func _SdkAlertsQuery_OneofSizer(msg proto.Message) (n int) {
+	m := msg.(*SdkAlertsQuery)
+	// query
+	switch x := m.Query.(type) {
+	case *SdkAlertsQuery_ResourceTypeQuery:
+		s := proto.Size(x.ResourceTypeQuery)
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case *SdkAlertsQuery_AlertTypeQuery:
+		s := proto.Size(x.AlertTypeQuery)
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case *SdkAlertsQuery_ResourceIdQuery:
+		s := proto.Size(x.ResourceIdQuery)
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	return n
+}
+
+// SdkAlertsEnumerateRequest is a request message to enumerate alerts.
+type SdkAlertsEnumerateWithFiltersRequest struct {
+	// It is a list of queries to find matching alerts.
+	// Output of each of these queries is added to a global pool
+	// and returned as output of an RPC call.
+	// In that sense alerts are fetched if they match any of the
+	// queries.
+	Queries              []*SdkAlertsQuery `protobuf:"bytes,1,rep,name=queries" json:"queries,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *SdkAlertsEnumerateWithFiltersRequest) Reset()         { *m = SdkAlertsEnumerateWithFiltersRequest{} }
+func (m *SdkAlertsEnumerateWithFiltersRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkAlertsEnumerateWithFiltersRequest) ProtoMessage()    {}
+func (*SdkAlertsEnumerateWithFiltersRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{25}
+}
+func (m *SdkAlertsEnumerateWithFiltersRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkAlertsEnumerateWithFiltersRequest.Unmarshal(m, b)
+}
+func (m *SdkAlertsEnumerateWithFiltersRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkAlertsEnumerateWithFiltersRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkAlertsEnumerateWithFiltersRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkAlertsEnumerateWithFiltersRequest.Merge(dst, src)
+}
+func (m *SdkAlertsEnumerateWithFiltersRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkAlertsEnumerateWithFiltersRequest.Size(m)
+}
+func (m *SdkAlertsEnumerateWithFiltersRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkAlertsEnumerateWithFiltersRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkAlertsEnumerateWithFiltersRequest proto.InternalMessageInfo
+
+func (m *SdkAlertsEnumerateWithFiltersRequest) GetQueries() []*SdkAlertsQuery {
+	if m != nil {
+		return m.Queries
+	}
+	return nil
+}
+
+// SdkAlertsEnumerateResponse is a list of alerts.
+type SdkAlertsEnumerateWithFiltersResponse struct {
+	// Response contains a list of alerts.
+	Alerts               []*Alert `protobuf:"bytes,1,rep,name=alerts" json:"alerts,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkAlertsEnumerateWithFiltersResponse) Reset()         { *m = SdkAlertsEnumerateWithFiltersResponse{} }
+func (m *SdkAlertsEnumerateWithFiltersResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkAlertsEnumerateWithFiltersResponse) ProtoMessage()    {}
+func (*SdkAlertsEnumerateWithFiltersResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{26}
+}
+func (m *SdkAlertsEnumerateWithFiltersResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkAlertsEnumerateWithFiltersResponse.Unmarshal(m, b)
+}
+func (m *SdkAlertsEnumerateWithFiltersResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkAlertsEnumerateWithFiltersResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkAlertsEnumerateWithFiltersResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkAlertsEnumerateWithFiltersResponse.Merge(dst, src)
+}
+func (m *SdkAlertsEnumerateWithFiltersResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkAlertsEnumerateWithFiltersResponse.Size(m)
+}
+func (m *SdkAlertsEnumerateWithFiltersResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkAlertsEnumerateWithFiltersResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkAlertsEnumerateWithFiltersResponse proto.InternalMessageInfo
+
+func (m *SdkAlertsEnumerateWithFiltersResponse) GetAlerts() []*Alert {
+	if m != nil {
+		return m.Alerts
+	}
+	return nil
+}
+
+// SdkAlertsDeleteRequest is a request message to delete alerts.
+type SdkAlertsDeleteRequest struct {
+	// It takes a list of queries to find matching alerts.
+	// Matching alerts are deleted.
+	Queries              []*SdkAlertsQuery `protobuf:"bytes,1,rep,name=queries" json:"queries,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *SdkAlertsDeleteRequest) Reset()         { *m = SdkAlertsDeleteRequest{} }
+func (m *SdkAlertsDeleteRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkAlertsDeleteRequest) ProtoMessage()    {}
+func (*SdkAlertsDeleteRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{27}
+}
+func (m *SdkAlertsDeleteRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkAlertsDeleteRequest.Unmarshal(m, b)
+}
+func (m *SdkAlertsDeleteRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkAlertsDeleteRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkAlertsDeleteRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkAlertsDeleteRequest.Merge(dst, src)
+}
+func (m *SdkAlertsDeleteRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkAlertsDeleteRequest.Size(m)
+}
+func (m *SdkAlertsDeleteRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkAlertsDeleteRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkAlertsDeleteRequest proto.InternalMessageInfo
+
+func (m *SdkAlertsDeleteRequest) GetQueries() []*SdkAlertsQuery {
+	if m != nil {
+		return m.Queries
+	}
+	return nil
+}
+
+// SdkAlertsDeleteResponse is empty.
+type SdkAlertsDeleteResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkAlertsDeleteResponse) Reset()         { *m = SdkAlertsDeleteResponse{} }
+func (m *SdkAlertsDeleteResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkAlertsDeleteResponse) ProtoMessage()    {}
+func (*SdkAlertsDeleteResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{28}
+}
+func (m *SdkAlertsDeleteResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkAlertsDeleteResponse.Unmarshal(m, b)
+}
+func (m *SdkAlertsDeleteResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkAlertsDeleteResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkAlertsDeleteResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkAlertsDeleteResponse.Merge(dst, src)
+}
+func (m *SdkAlertsDeleteResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkAlertsDeleteResponse.Size(m)
+}
+func (m *SdkAlertsDeleteResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkAlertsDeleteResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkAlertsDeleteResponse proto.InternalMessageInfo
+
+// Alerts is an array of Alert objects
+type Alerts struct {
+	Alert                []*Alert `protobuf:"bytes,1,rep,name=alert" json:"alert,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *Alerts) Reset()         { *m = Alerts{} }
+func (m *Alerts) String() string { return proto.CompactTextString(m) }
+func (*Alerts) ProtoMessage()    {}
+func (*Alerts) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{29}
+}
+func (m *Alerts) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_Alerts.Unmarshal(m, b)
+}
+func (m *Alerts) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_Alerts.Marshal(b, m, deterministic)
+}
+func (dst *Alerts) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_Alerts.Merge(dst, src)
+}
+func (m *Alerts) XXX_Size() int {
+	return xxx_messageInfo_Alerts.Size(m)
+}
+func (m *Alerts) XXX_DiscardUnknown() {
+	xxx_messageInfo_Alerts.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_Alerts proto.InternalMessageInfo
+
+func (m *Alerts) GetAlert() []*Alert {
+	if m != nil {
+		return m.Alert
+	}
+	return nil
+}
+
+// ObjectstoreInfo is a structure that has current objectstore info
+type ObjectstoreInfo struct {
+	// UUID of objectstore
+	Uuid string `protobuf:"bytes,1,opt,name=uuid" json:"uuid,omitempty"`
+	// VolumeID of volume used by object store
+	VolumeId string `protobuf:"bytes,2,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	// Enable/Disable created objectstore
+	Enabled bool `protobuf:"varint,3,opt,name=enabled" json:"enabled,omitempty"`
+	// Status of objectstore running/failed
+	Status string `protobuf:"bytes,4,opt,name=status" json:"status,omitempty"`
+	// Action being taken on this objectstore
+	Action int64 `protobuf:"varint,5,opt,name=action" json:"action,omitempty"`
+	// AccessKey for login into objectstore
+	AccessKey string `protobuf:"bytes,6,opt,name=access_key,json=accessKey" json:"access_key,omitempty"`
+	// SecretKey for login into objectstore
+	SecretKey string `protobuf:"bytes,7,opt,name=secret_key,json=secretKey" json:"secret_key,omitempty"`
+	// Endpoints for accessing objectstore
+	Endpoints []string `protobuf:"bytes,8,rep,name=endpoints" json:"endpoints,omitempty"`
+	// CurrentEndpoint on which objectstore server is accessible
+	CurrentEndpoint string `protobuf:"bytes,9,opt,name=current_endpoint,json=currentEndpoint" json:"current_endpoint,omitempty"`
+	// AccessPort is objectstore server port
+	AccessPort int64 `protobuf:"varint,10,opt,name=access_port,json=accessPort" json:"access_port,omitempty"`
+	// Region for this objectstore
+	Region               string   `protobuf:"bytes,11,opt,name=region" json:"region,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *ObjectstoreInfo) Reset()         { *m = ObjectstoreInfo{} }
+func (m *ObjectstoreInfo) String() string { return proto.CompactTextString(m) }
+func (*ObjectstoreInfo) ProtoMessage()    {}
+func (*ObjectstoreInfo) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{30}
+}
+func (m *ObjectstoreInfo) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_ObjectstoreInfo.Unmarshal(m, b)
+}
+func (m *ObjectstoreInfo) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_ObjectstoreInfo.Marshal(b, m, deterministic)
+}
+func (dst *ObjectstoreInfo) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_ObjectstoreInfo.Merge(dst, src)
+}
+func (m *ObjectstoreInfo) XXX_Size() int {
+	return xxx_messageInfo_ObjectstoreInfo.Size(m)
+}
+func (m *ObjectstoreInfo) XXX_DiscardUnknown() {
+	xxx_messageInfo_ObjectstoreInfo.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_ObjectstoreInfo proto.InternalMessageInfo
+
+func (m *ObjectstoreInfo) GetUuid() string {
+	if m != nil {
+		return m.Uuid
+	}
+	return ""
+}
+
+func (m *ObjectstoreInfo) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+func (m *ObjectstoreInfo) GetEnabled() bool {
+	if m != nil {
+		return m.Enabled
+	}
+	return false
+}
+
+func (m *ObjectstoreInfo) GetStatus() string {
+	if m != nil {
+		return m.Status
+	}
+	return ""
+}
+
+func (m *ObjectstoreInfo) GetAction() int64 {
+	if m != nil {
+		return m.Action
+	}
+	return 0
+}
+
+func (m *ObjectstoreInfo) GetAccessKey() string {
+	if m != nil {
+		return m.AccessKey
+	}
+	return ""
+}
+
+func (m *ObjectstoreInfo) GetSecretKey() string {
+	if m != nil {
+		return m.SecretKey
+	}
+	return ""
+}
+
+func (m *ObjectstoreInfo) GetEndpoints() []string {
+	if m != nil {
+		return m.Endpoints
+	}
+	return nil
+}
+
+func (m *ObjectstoreInfo) GetCurrentEndpoint() string {
+	if m != nil {
+		return m.CurrentEndpoint
+	}
+	return ""
+}
+
+func (m *ObjectstoreInfo) GetAccessPort() int64 {
+	if m != nil {
+		return m.AccessPort
+	}
+	return 0
+}
+
+func (m *ObjectstoreInfo) GetRegion() string {
+	if m != nil {
+		return m.Region
+	}
+	return ""
+}
+
+// VolumeCreateRequest is a structure that has the locator, source and spec
+// to create a volume
+type VolumeCreateRequest struct {
+	// User specified volume name and labels
+	Locator *VolumeLocator `protobuf:"bytes,1,opt,name=locator" json:"locator,omitempty"`
+	// Source to create volume
+	Source *Source `protobuf:"bytes,2,opt,name=source" json:"source,omitempty"`
+	// The storage spec for the volume
+	Spec                 *VolumeSpec `protobuf:"bytes,3,opt,name=spec" json:"spec,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}    `json:"-"`
+	XXX_unrecognized     []byte      `json:"-"`
+	XXX_sizecache        int32       `json:"-"`
+}
+
+func (m *VolumeCreateRequest) Reset()         { *m = VolumeCreateRequest{} }
+func (m *VolumeCreateRequest) String() string { return proto.CompactTextString(m) }
+func (*VolumeCreateRequest) ProtoMessage()    {}
+func (*VolumeCreateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{31}
+}
+func (m *VolumeCreateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_VolumeCreateRequest.Unmarshal(m, b)
+}
+func (m *VolumeCreateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_VolumeCreateRequest.Marshal(b, m, deterministic)
+}
+func (dst *VolumeCreateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_VolumeCreateRequest.Merge(dst, src)
+}
+func (m *VolumeCreateRequest) XXX_Size() int {
+	return xxx_messageInfo_VolumeCreateRequest.Size(m)
+}
+func (m *VolumeCreateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_VolumeCreateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_VolumeCreateRequest proto.InternalMessageInfo
+
+func (m *VolumeCreateRequest) GetLocator() *VolumeLocator {
+	if m != nil {
+		return m.Locator
+	}
+	return nil
+}
+
+func (m *VolumeCreateRequest) GetSource() *Source {
+	if m != nil {
+		return m.Source
+	}
+	return nil
+}
+
+func (m *VolumeCreateRequest) GetSpec() *VolumeSpec {
+	if m != nil {
+		return m.Spec
+	}
+	return nil
+}
+
+// VolumeResponse is a structure that wraps an error.
+type VolumeResponse struct {
+	// Error message
+	//
+	// in: body
+	// Required: true
+	Error                string   `protobuf:"bytes,1,opt,name=error" json:"error,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *VolumeResponse) Reset()         { *m = VolumeResponse{} }
+func (m *VolumeResponse) String() string { return proto.CompactTextString(m) }
+func (*VolumeResponse) ProtoMessage()    {}
+func (*VolumeResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{32}
+}
+func (m *VolumeResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_VolumeResponse.Unmarshal(m, b)
+}
+func (m *VolumeResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_VolumeResponse.Marshal(b, m, deterministic)
+}
+func (dst *VolumeResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_VolumeResponse.Merge(dst, src)
+}
+func (m *VolumeResponse) XXX_Size() int {
+	return xxx_messageInfo_VolumeResponse.Size(m)
+}
+func (m *VolumeResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_VolumeResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_VolumeResponse proto.InternalMessageInfo
+
+func (m *VolumeResponse) GetError() string {
+	if m != nil {
+		return m.Error
+	}
+	return ""
+}
+
+// VolumeCreateResponse
+type VolumeCreateResponse struct {
+	// ID of the newly created volume
+	//
+	// in: body
+	// Required: true
+	Id string `protobuf:"bytes,1,opt,name=id" json:"id,omitempty"`
+	// Volume Response
+	//
+	// in: body
+	// Required: true
+	VolumeResponse       *VolumeResponse `protobuf:"bytes,2,opt,name=volume_response,json=volumeResponse" json:"volume_response,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}        `json:"-"`
+	XXX_unrecognized     []byte          `json:"-"`
+	XXX_sizecache        int32           `json:"-"`
+}
+
+func (m *VolumeCreateResponse) Reset()         { *m = VolumeCreateResponse{} }
+func (m *VolumeCreateResponse) String() string { return proto.CompactTextString(m) }
+func (*VolumeCreateResponse) ProtoMessage()    {}
+func (*VolumeCreateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{33}
+}
+func (m *VolumeCreateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_VolumeCreateResponse.Unmarshal(m, b)
+}
+func (m *VolumeCreateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_VolumeCreateResponse.Marshal(b, m, deterministic)
+}
+func (dst *VolumeCreateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_VolumeCreateResponse.Merge(dst, src)
+}
+func (m *VolumeCreateResponse) XXX_Size() int {
+	return xxx_messageInfo_VolumeCreateResponse.Size(m)
+}
+func (m *VolumeCreateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_VolumeCreateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_VolumeCreateResponse proto.InternalMessageInfo
+
+func (m *VolumeCreateResponse) GetId() string {
+	if m != nil {
+		return m.Id
+	}
+	return ""
+}
+
+func (m *VolumeCreateResponse) GetVolumeResponse() *VolumeResponse {
+	if m != nil {
+		return m.VolumeResponse
+	}
+	return nil
+}
+
+// VolumeStateAction specifies desired actions.
+type VolumeStateAction struct {
+	// Attach or Detach volume
+	Attach VolumeActionParam `protobuf:"varint,1,opt,name=attach,enum=openstorage.api.VolumeActionParam" json:"attach,omitempty"`
+	// Mount or unmount volume
+	Mount VolumeActionParam `protobuf:"varint,2,opt,name=mount,enum=openstorage.api.VolumeActionParam" json:"mount,omitempty"`
+	// MountPath Path where the device is mounted
+	MountPath string `protobuf:"bytes,3,opt,name=mount_path,json=mountPath" json:"mount_path,omitempty"`
+	// DevicePath Path returned in attach
+	DevicePath           string   `protobuf:"bytes,4,opt,name=device_path,json=devicePath" json:"device_path,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *VolumeStateAction) Reset()         { *m = VolumeStateAction{} }
+func (m *VolumeStateAction) String() string { return proto.CompactTextString(m) }
+func (*VolumeStateAction) ProtoMessage()    {}
+func (*VolumeStateAction) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{34}
+}
+func (m *VolumeStateAction) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_VolumeStateAction.Unmarshal(m, b)
+}
+func (m *VolumeStateAction) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_VolumeStateAction.Marshal(b, m, deterministic)
+}
+func (dst *VolumeStateAction) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_VolumeStateAction.Merge(dst, src)
+}
+func (m *VolumeStateAction) XXX_Size() int {
+	return xxx_messageInfo_VolumeStateAction.Size(m)
+}
+func (m *VolumeStateAction) XXX_DiscardUnknown() {
+	xxx_messageInfo_VolumeStateAction.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_VolumeStateAction proto.InternalMessageInfo
+
+func (m *VolumeStateAction) GetAttach() VolumeActionParam {
+	if m != nil {
+		return m.Attach
+	}
+	return VolumeActionParam_VOLUME_ACTION_PARAM_NONE
+}
+
+func (m *VolumeStateAction) GetMount() VolumeActionParam {
+	if m != nil {
+		return m.Mount
+	}
+	return VolumeActionParam_VOLUME_ACTION_PARAM_NONE
+}
+
+func (m *VolumeStateAction) GetMountPath() string {
+	if m != nil {
+		return m.MountPath
+	}
+	return ""
+}
+
+func (m *VolumeStateAction) GetDevicePath() string {
+	if m != nil {
+		return m.DevicePath
+	}
+	return ""
+}
+
+// VolumeSet specifies a request to update a volume.
+type VolumeSetRequest struct {
+	// User specified volume name and labels
+	Locator *VolumeLocator `protobuf:"bytes,1,opt,name=locator" json:"locator,omitempty"`
+	// The storage spec for the volume
+	Spec *VolumeSpec `protobuf:"bytes,2,opt,name=spec" json:"spec,omitempty"`
+	// State modification on this volume.
+	Action *VolumeStateAction `protobuf:"bytes,3,opt,name=action" json:"action,omitempty"`
+	// additional options
+	// required for the Set operation.
+	Options              map[string]string `protobuf:"bytes,4,rep,name=options" json:"options,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *VolumeSetRequest) Reset()         { *m = VolumeSetRequest{} }
+func (m *VolumeSetRequest) String() string { return proto.CompactTextString(m) }
+func (*VolumeSetRequest) ProtoMessage()    {}
+func (*VolumeSetRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{35}
+}
+func (m *VolumeSetRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_VolumeSetRequest.Unmarshal(m, b)
+}
+func (m *VolumeSetRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_VolumeSetRequest.Marshal(b, m, deterministic)
+}
+func (dst *VolumeSetRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_VolumeSetRequest.Merge(dst, src)
+}
+func (m *VolumeSetRequest) XXX_Size() int {
+	return xxx_messageInfo_VolumeSetRequest.Size(m)
+}
+func (m *VolumeSetRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_VolumeSetRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_VolumeSetRequest proto.InternalMessageInfo
+
+func (m *VolumeSetRequest) GetLocator() *VolumeLocator {
+	if m != nil {
+		return m.Locator
+	}
+	return nil
+}
+
+func (m *VolumeSetRequest) GetSpec() *VolumeSpec {
+	if m != nil {
+		return m.Spec
+	}
+	return nil
+}
+
+func (m *VolumeSetRequest) GetAction() *VolumeStateAction {
+	if m != nil {
+		return m.Action
+	}
+	return nil
+}
+
+func (m *VolumeSetRequest) GetOptions() map[string]string {
+	if m != nil {
+		return m.Options
+	}
+	return nil
+}
+
+// VolumeSetResponse
+type VolumeSetResponse struct {
+	// Volume
+	Volume *Volume `protobuf:"bytes,1,opt,name=volume" json:"volume,omitempty"`
+	// VolumeResponse
+	VolumeResponse       *VolumeResponse `protobuf:"bytes,2,opt,name=volume_response,json=volumeResponse" json:"volume_response,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}        `json:"-"`
+	XXX_unrecognized     []byte          `json:"-"`
+	XXX_sizecache        int32           `json:"-"`
+}
+
+func (m *VolumeSetResponse) Reset()         { *m = VolumeSetResponse{} }
+func (m *VolumeSetResponse) String() string { return proto.CompactTextString(m) }
+func (*VolumeSetResponse) ProtoMessage()    {}
+func (*VolumeSetResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{36}
+}
+func (m *VolumeSetResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_VolumeSetResponse.Unmarshal(m, b)
+}
+func (m *VolumeSetResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_VolumeSetResponse.Marshal(b, m, deterministic)
+}
+func (dst *VolumeSetResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_VolumeSetResponse.Merge(dst, src)
+}
+func (m *VolumeSetResponse) XXX_Size() int {
+	return xxx_messageInfo_VolumeSetResponse.Size(m)
+}
+func (m *VolumeSetResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_VolumeSetResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_VolumeSetResponse proto.InternalMessageInfo
+
+func (m *VolumeSetResponse) GetVolume() *Volume {
+	if m != nil {
+		return m.Volume
+	}
+	return nil
+}
+
+func (m *VolumeSetResponse) GetVolumeResponse() *VolumeResponse {
+	if m != nil {
+		return m.VolumeResponse
+	}
+	return nil
+}
+
+// SnapCreateRequest specifies a request to create a snapshot of given volume.
+type SnapCreateRequest struct {
+	// volume id
+	Id       string         `protobuf:"bytes,1,opt,name=id" json:"id,omitempty"`
+	Locator  *VolumeLocator `protobuf:"bytes,2,opt,name=locator" json:"locator,omitempty"`
+	Readonly bool           `protobuf:"varint,3,opt,name=readonly" json:"readonly,omitempty"`
+	// NoRetry indicates not to retry snapshot creation in the background.
+	NoRetry              bool     `protobuf:"varint,4,opt,name=no_retry,json=noRetry" json:"no_retry,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SnapCreateRequest) Reset()         { *m = SnapCreateRequest{} }
+func (m *SnapCreateRequest) String() string { return proto.CompactTextString(m) }
+func (*SnapCreateRequest) ProtoMessage()    {}
+func (*SnapCreateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{37}
+}
+func (m *SnapCreateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SnapCreateRequest.Unmarshal(m, b)
+}
+func (m *SnapCreateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SnapCreateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SnapCreateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SnapCreateRequest.Merge(dst, src)
+}
+func (m *SnapCreateRequest) XXX_Size() int {
+	return xxx_messageInfo_SnapCreateRequest.Size(m)
+}
+func (m *SnapCreateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SnapCreateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SnapCreateRequest proto.InternalMessageInfo
+
+func (m *SnapCreateRequest) GetId() string {
+	if m != nil {
+		return m.Id
+	}
+	return ""
+}
+
+func (m *SnapCreateRequest) GetLocator() *VolumeLocator {
+	if m != nil {
+		return m.Locator
+	}
+	return nil
+}
+
+func (m *SnapCreateRequest) GetReadonly() bool {
+	if m != nil {
+		return m.Readonly
+	}
+	return false
+}
+
+func (m *SnapCreateRequest) GetNoRetry() bool {
+	if m != nil {
+		return m.NoRetry
+	}
+	return false
+}
+
+// SnapCreateRequest specifies a response that get's returned when creating a snapshot.
+type SnapCreateResponse struct {
+	// VolumeCreateResponse
+	//
+	// in: body
+	// Required: true
+	VolumeCreateResponse *VolumeCreateResponse `protobuf:"bytes,1,opt,name=volume_create_response,json=volumeCreateResponse" json:"volume_create_response,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}              `json:"-"`
+	XXX_unrecognized     []byte                `json:"-"`
+	XXX_sizecache        int32                 `json:"-"`
+}
+
+func (m *SnapCreateResponse) Reset()         { *m = SnapCreateResponse{} }
+func (m *SnapCreateResponse) String() string { return proto.CompactTextString(m) }
+func (*SnapCreateResponse) ProtoMessage()    {}
+func (*SnapCreateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{38}
+}
+func (m *SnapCreateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SnapCreateResponse.Unmarshal(m, b)
+}
+func (m *SnapCreateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SnapCreateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SnapCreateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SnapCreateResponse.Merge(dst, src)
+}
+func (m *SnapCreateResponse) XXX_Size() int {
+	return xxx_messageInfo_SnapCreateResponse.Size(m)
+}
+func (m *SnapCreateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SnapCreateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SnapCreateResponse proto.InternalMessageInfo
+
+func (m *SnapCreateResponse) GetVolumeCreateResponse() *VolumeCreateResponse {
+	if m != nil {
+		return m.VolumeCreateResponse
+	}
+	return nil
+}
+
+// VolumeInfo
+type VolumeInfo struct {
+	VolumeId             string      `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	Path                 string      `protobuf:"bytes,2,opt,name=path" json:"path,omitempty"`
+	Storage              *VolumeSpec `protobuf:"bytes,3,opt,name=storage" json:"storage,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}    `json:"-"`
+	XXX_unrecognized     []byte      `json:"-"`
+	XXX_sizecache        int32       `json:"-"`
+}
+
+func (m *VolumeInfo) Reset()         { *m = VolumeInfo{} }
+func (m *VolumeInfo) String() string { return proto.CompactTextString(m) }
+func (*VolumeInfo) ProtoMessage()    {}
+func (*VolumeInfo) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{39}
+}
+func (m *VolumeInfo) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_VolumeInfo.Unmarshal(m, b)
+}
+func (m *VolumeInfo) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_VolumeInfo.Marshal(b, m, deterministic)
+}
+func (dst *VolumeInfo) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_VolumeInfo.Merge(dst, src)
+}
+func (m *VolumeInfo) XXX_Size() int {
+	return xxx_messageInfo_VolumeInfo.Size(m)
+}
+func (m *VolumeInfo) XXX_DiscardUnknown() {
+	xxx_messageInfo_VolumeInfo.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_VolumeInfo proto.InternalMessageInfo
+
+func (m *VolumeInfo) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+func (m *VolumeInfo) GetPath() string {
+	if m != nil {
+		return m.Path
+	}
+	return ""
+}
+
+func (m *VolumeInfo) GetStorage() *VolumeSpec {
+	if m != nil {
+		return m.Storage
+	}
+	return nil
+}
+
+// VolumeConsumer identifies a consumer for a Volume. An example of a VolumeConsumer
+// would be a Pod in Kubernetes who has mounted the PersistentVolumeClaim for the
+// Volume
+type VolumeConsumer struct {
+	// Name is the name of the volume consumer
+	Name string `protobuf:"bytes,1,opt,name=name" json:"name,omitempty"`
+	// Namespace is the namespace of the volume consumer
+	Namespace string `protobuf:"bytes,2,opt,name=namespace" json:"namespace,omitempty"`
+	// Type is the type of the consumer. E.g a Kubernetes pod
+	Type string `protobuf:"bytes,3,opt,name=type" json:"type,omitempty"`
+	// NodeID is the identifier of the node on which the consumer is running. This
+	// identifier would be from the perspective of the container runtime or
+	// orchestrator under which the volume consumer resides. For example, NodeID
+	//  can be name of a minion in Kubernetes.
+	NodeId string `protobuf:"bytes,4,opt,name=node_id,json=nodeId" json:"node_id,omitempty"`
+	// OwnerName is the name of the entity who owns this volume consumer
+	OwnerName string `protobuf:"bytes,5,opt,name=owner_name,json=ownerName" json:"owner_name,omitempty"`
+	// OwnerType is the type of the entity who owns this volume consumer. The type would
+	// be from the perspective of the container runtime or the orchestrator under which
+	// the volume consumer resides. For e.g OwnerType can be a Deployment in Kubernetes.
+	OwnerType            string   `protobuf:"bytes,6,opt,name=owner_type,json=ownerType" json:"owner_type,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *VolumeConsumer) Reset()         { *m = VolumeConsumer{} }
+func (m *VolumeConsumer) String() string { return proto.CompactTextString(m) }
+func (*VolumeConsumer) ProtoMessage()    {}
+func (*VolumeConsumer) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{40}
+}
+func (m *VolumeConsumer) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_VolumeConsumer.Unmarshal(m, b)
+}
+func (m *VolumeConsumer) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_VolumeConsumer.Marshal(b, m, deterministic)
+}
+func (dst *VolumeConsumer) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_VolumeConsumer.Merge(dst, src)
+}
+func (m *VolumeConsumer) XXX_Size() int {
+	return xxx_messageInfo_VolumeConsumer.Size(m)
+}
+func (m *VolumeConsumer) XXX_DiscardUnknown() {
+	xxx_messageInfo_VolumeConsumer.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_VolumeConsumer proto.InternalMessageInfo
+
+func (m *VolumeConsumer) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+func (m *VolumeConsumer) GetNamespace() string {
+	if m != nil {
+		return m.Namespace
+	}
+	return ""
+}
+
+func (m *VolumeConsumer) GetType() string {
+	if m != nil {
+		return m.Type
+	}
+	return ""
+}
+
+func (m *VolumeConsumer) GetNodeId() string {
+	if m != nil {
+		return m.NodeId
+	}
+	return ""
+}
+
+func (m *VolumeConsumer) GetOwnerName() string {
+	if m != nil {
+		return m.OwnerName
+	}
+	return ""
+}
+
+func (m *VolumeConsumer) GetOwnerType() string {
+	if m != nil {
+		return m.OwnerType
+	}
+	return ""
+}
+
+// GraphDriverChanges represent a list of changes between the filesystem layers
+// specified by the ID and Parent.  // Parent may be an empty string, in which
+// case there is no parent.
+// Where the Path is the filesystem path within the layered filesystem
+type GraphDriverChanges struct {
+	Path                 string                `protobuf:"bytes,1,opt,name=path" json:"path,omitempty"`
+	Kind                 GraphDriverChangeType `protobuf:"varint,2,opt,name=kind,enum=openstorage.api.GraphDriverChangeType" json:"kind,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}              `json:"-"`
+	XXX_unrecognized     []byte                `json:"-"`
+	XXX_sizecache        int32                 `json:"-"`
+}
+
+func (m *GraphDriverChanges) Reset()         { *m = GraphDriverChanges{} }
+func (m *GraphDriverChanges) String() string { return proto.CompactTextString(m) }
+func (*GraphDriverChanges) ProtoMessage()    {}
+func (*GraphDriverChanges) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{41}
+}
+func (m *GraphDriverChanges) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_GraphDriverChanges.Unmarshal(m, b)
+}
+func (m *GraphDriverChanges) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_GraphDriverChanges.Marshal(b, m, deterministic)
+}
+func (dst *GraphDriverChanges) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_GraphDriverChanges.Merge(dst, src)
+}
+func (m *GraphDriverChanges) XXX_Size() int {
+	return xxx_messageInfo_GraphDriverChanges.Size(m)
+}
+func (m *GraphDriverChanges) XXX_DiscardUnknown() {
+	xxx_messageInfo_GraphDriverChanges.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_GraphDriverChanges proto.InternalMessageInfo
+
+func (m *GraphDriverChanges) GetPath() string {
+	if m != nil {
+		return m.Path
+	}
+	return ""
+}
+
+func (m *GraphDriverChanges) GetKind() GraphDriverChangeType {
+	if m != nil {
+		return m.Kind
+	}
+	return GraphDriverChangeType_GRAPH_DRIVER_CHANGE_TYPE_NONE
+}
+
+// ClusterResponse specifies a response that gets returned when requesting the cluster
+type ClusterResponse struct {
+	// Error code
+	//
+	// in: body
+	Error                string   `protobuf:"bytes,1,opt,name=error" json:"error,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *ClusterResponse) Reset()         { *m = ClusterResponse{} }
+func (m *ClusterResponse) String() string { return proto.CompactTextString(m) }
+func (*ClusterResponse) ProtoMessage()    {}
+func (*ClusterResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{42}
+}
+func (m *ClusterResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_ClusterResponse.Unmarshal(m, b)
+}
+func (m *ClusterResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_ClusterResponse.Marshal(b, m, deterministic)
+}
+func (dst *ClusterResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_ClusterResponse.Merge(dst, src)
+}
+func (m *ClusterResponse) XXX_Size() int {
+	return xxx_messageInfo_ClusterResponse.Size(m)
+}
+func (m *ClusterResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_ClusterResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_ClusterResponse proto.InternalMessageInfo
+
+func (m *ClusterResponse) GetError() string {
+	if m != nil {
+		return m.Error
+	}
+	return ""
+}
+
+// Active Request
+type ActiveRequest struct {
+	ReqestKV             map[int64]string `protobuf:"bytes,1,rep,name=ReqestKV" json:"ReqestKV,omitempty" protobuf_key:"varint,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}         `json:"-"`
+	XXX_unrecognized     []byte           `json:"-"`
+	XXX_sizecache        int32            `json:"-"`
+}
+
+func (m *ActiveRequest) Reset()         { *m = ActiveRequest{} }
+func (m *ActiveRequest) String() string { return proto.CompactTextString(m) }
+func (*ActiveRequest) ProtoMessage()    {}
+func (*ActiveRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{43}
+}
+func (m *ActiveRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_ActiveRequest.Unmarshal(m, b)
+}
+func (m *ActiveRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_ActiveRequest.Marshal(b, m, deterministic)
+}
+func (dst *ActiveRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_ActiveRequest.Merge(dst, src)
+}
+func (m *ActiveRequest) XXX_Size() int {
+	return xxx_messageInfo_ActiveRequest.Size(m)
+}
+func (m *ActiveRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_ActiveRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_ActiveRequest proto.InternalMessageInfo
+
+func (m *ActiveRequest) GetReqestKV() map[int64]string {
+	if m != nil {
+		return m.ReqestKV
+	}
+	return nil
+}
+
+// Active Requests
+type ActiveRequests struct {
+	RequestCount         int64            `protobuf:"varint,1,opt,name=RequestCount" json:"RequestCount,omitempty"`
+	ActiveRequest        []*ActiveRequest `protobuf:"bytes,2,rep,name=ActiveRequest" json:"ActiveRequest,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}         `json:"-"`
+	XXX_unrecognized     []byte           `json:"-"`
+	XXX_sizecache        int32            `json:"-"`
+}
+
+func (m *ActiveRequests) Reset()         { *m = ActiveRequests{} }
+func (m *ActiveRequests) String() string { return proto.CompactTextString(m) }
+func (*ActiveRequests) ProtoMessage()    {}
+func (*ActiveRequests) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{44}
+}
+func (m *ActiveRequests) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_ActiveRequests.Unmarshal(m, b)
+}
+func (m *ActiveRequests) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_ActiveRequests.Marshal(b, m, deterministic)
+}
+func (dst *ActiveRequests) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_ActiveRequests.Merge(dst, src)
+}
+func (m *ActiveRequests) XXX_Size() int {
+	return xxx_messageInfo_ActiveRequests.Size(m)
+}
+func (m *ActiveRequests) XXX_DiscardUnknown() {
+	xxx_messageInfo_ActiveRequests.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_ActiveRequests proto.InternalMessageInfo
+
+func (m *ActiveRequests) GetRequestCount() int64 {
+	if m != nil {
+		return m.RequestCount
+	}
+	return 0
+}
+
+func (m *ActiveRequests) GetActiveRequest() []*ActiveRequest {
+	if m != nil {
+		return m.ActiveRequest
+	}
+	return nil
+}
+
+// GroupSnapCreateRequest specifies a request to create a snapshot of given group.
+type GroupSnapCreateRequest struct {
+	Id                   string            `protobuf:"bytes,1,opt,name=id" json:"id,omitempty"`
+	Labels               map[string]string `protobuf:"bytes,2,rep,name=Labels" json:"Labels,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	VolumeIds            []string          `protobuf:"bytes,3,rep,name=volume_ids,json=volumeIds" json:"volume_ids,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *GroupSnapCreateRequest) Reset()         { *m = GroupSnapCreateRequest{} }
+func (m *GroupSnapCreateRequest) String() string { return proto.CompactTextString(m) }
+func (*GroupSnapCreateRequest) ProtoMessage()    {}
+func (*GroupSnapCreateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{45}
+}
+func (m *GroupSnapCreateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_GroupSnapCreateRequest.Unmarshal(m, b)
+}
+func (m *GroupSnapCreateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_GroupSnapCreateRequest.Marshal(b, m, deterministic)
+}
+func (dst *GroupSnapCreateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_GroupSnapCreateRequest.Merge(dst, src)
+}
+func (m *GroupSnapCreateRequest) XXX_Size() int {
+	return xxx_messageInfo_GroupSnapCreateRequest.Size(m)
+}
+func (m *GroupSnapCreateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_GroupSnapCreateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_GroupSnapCreateRequest proto.InternalMessageInfo
+
+func (m *GroupSnapCreateRequest) GetId() string {
+	if m != nil {
+		return m.Id
+	}
+	return ""
+}
+
+func (m *GroupSnapCreateRequest) GetLabels() map[string]string {
+	if m != nil {
+		return m.Labels
+	}
+	return nil
+}
+
+func (m *GroupSnapCreateRequest) GetVolumeIds() []string {
+	if m != nil {
+		return m.VolumeIds
+	}
+	return nil
+}
+
+// GroupSnapCreateRequest specifies a response that get's returned when creating a group snapshot.
+type GroupSnapCreateResponse struct {
+	// Created snapshots
+	//
+	// in: body
+	// Required: true
+	Snapshots map[string]*SnapCreateResponse `protobuf:"bytes,1,rep,name=snapshots" json:"snapshots,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	// Error message
+	//
+	// in: body
+	// Required: true
+	Error                string   `protobuf:"bytes,2,opt,name=error" json:"error,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *GroupSnapCreateResponse) Reset()         { *m = GroupSnapCreateResponse{} }
+func (m *GroupSnapCreateResponse) String() string { return proto.CompactTextString(m) }
+func (*GroupSnapCreateResponse) ProtoMessage()    {}
+func (*GroupSnapCreateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{46}
+}
+func (m *GroupSnapCreateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_GroupSnapCreateResponse.Unmarshal(m, b)
+}
+func (m *GroupSnapCreateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_GroupSnapCreateResponse.Marshal(b, m, deterministic)
+}
+func (dst *GroupSnapCreateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_GroupSnapCreateResponse.Merge(dst, src)
+}
+func (m *GroupSnapCreateResponse) XXX_Size() int {
+	return xxx_messageInfo_GroupSnapCreateResponse.Size(m)
+}
+func (m *GroupSnapCreateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_GroupSnapCreateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_GroupSnapCreateResponse proto.InternalMessageInfo
+
+func (m *GroupSnapCreateResponse) GetSnapshots() map[string]*SnapCreateResponse {
+	if m != nil {
+		return m.Snapshots
+	}
+	return nil
+}
+
+func (m *GroupSnapCreateResponse) GetError() string {
+	if m != nil {
+		return m.Error
+	}
+	return ""
+}
+
+// StorageNode describes the state of the node
+type StorageNode struct {
+	// Id of the node
+	Id string `protobuf:"bytes,1,opt,name=id" json:"id,omitempty"`
+	// Cpu usage of the node
+	Cpu float64 `protobuf:"fixed64,2,opt,name=cpu" json:"cpu,omitempty"`
+	// Total memory of the node
+	MemTotal uint64 `protobuf:"varint,3,opt,name=mem_total,json=memTotal" json:"mem_total,omitempty"`
+	// Used memory of the node
+	MemUsed uint64 `protobuf:"varint,4,opt,name=mem_used,json=memUsed" json:"mem_used,omitempty"`
+	// Free memory of the node
+	MemFree uint64 `protobuf:"varint,5,opt,name=mem_free,json=memFree" json:"mem_free,omitempty"`
+	// Average load (percentage)
+	AvgLoad int64 `protobuf:"varint,6,opt,name=avg_load,json=avgLoad" json:"avg_load,omitempty"`
+	// Node status
+	Status Status `protobuf:"varint,7,opt,name=status,enum=openstorage.api.Status" json:"status,omitempty"`
+	// List of disks on the node
+	Disks map[string]*StorageResource `protobuf:"bytes,9,rep,name=disks" json:"disks,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	// List of storage pools this node supports
+	Pools []*StoragePool `protobuf:"bytes,10,rep,name=pools" json:"pools,omitempty"`
+	// Management IP
+	MgmtIp string `protobuf:"bytes,11,opt,name=mgmt_ip,json=mgmtIp" json:"mgmt_ip,omitempty"`
+	// Data IP
+	DataIp string `protobuf:"bytes,12,opt,name=data_ip,json=dataIp" json:"data_ip,omitempty"`
+	// Hostname of the node
+	Hostname string `protobuf:"bytes,15,opt,name=hostname" json:"hostname,omitempty"`
+	// User defined labels for the node
+	NodeLabels map[string]string `protobuf:"bytes,16,rep,name=node_labels,json=nodeLabels" json:"node_labels,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	// SchedulerNodeName is name of the node in scheduler context. It can be
+	// empty if unable to get the name from the scheduler.
+	SchedulerNodeName    string   `protobuf:"bytes,17,opt,name=scheduler_node_name,json=schedulerNodeName" json:"scheduler_node_name,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *StorageNode) Reset()         { *m = StorageNode{} }
+func (m *StorageNode) String() string { return proto.CompactTextString(m) }
+func (*StorageNode) ProtoMessage()    {}
+func (*StorageNode) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{47}
+}
+func (m *StorageNode) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_StorageNode.Unmarshal(m, b)
+}
+func (m *StorageNode) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_StorageNode.Marshal(b, m, deterministic)
+}
+func (dst *StorageNode) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_StorageNode.Merge(dst, src)
+}
+func (m *StorageNode) XXX_Size() int {
+	return xxx_messageInfo_StorageNode.Size(m)
+}
+func (m *StorageNode) XXX_DiscardUnknown() {
+	xxx_messageInfo_StorageNode.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_StorageNode proto.InternalMessageInfo
+
+func (m *StorageNode) GetId() string {
+	if m != nil {
+		return m.Id
+	}
+	return ""
+}
+
+func (m *StorageNode) GetCpu() float64 {
+	if m != nil {
+		return m.Cpu
+	}
+	return 0
+}
+
+func (m *StorageNode) GetMemTotal() uint64 {
+	if m != nil {
+		return m.MemTotal
+	}
+	return 0
+}
+
+func (m *StorageNode) GetMemUsed() uint64 {
+	if m != nil {
+		return m.MemUsed
+	}
+	return 0
+}
+
+func (m *StorageNode) GetMemFree() uint64 {
+	if m != nil {
+		return m.MemFree
+	}
+	return 0
+}
+
+func (m *StorageNode) GetAvgLoad() int64 {
+	if m != nil {
+		return m.AvgLoad
+	}
+	return 0
+}
+
+func (m *StorageNode) GetStatus() Status {
+	if m != nil {
+		return m.Status
+	}
+	return Status_STATUS_NONE
+}
+
+func (m *StorageNode) GetDisks() map[string]*StorageResource {
+	if m != nil {
+		return m.Disks
+	}
+	return nil
+}
+
+func (m *StorageNode) GetPools() []*StoragePool {
+	if m != nil {
+		return m.Pools
+	}
+	return nil
+}
+
+func (m *StorageNode) GetMgmtIp() string {
+	if m != nil {
+		return m.MgmtIp
+	}
+	return ""
+}
+
+func (m *StorageNode) GetDataIp() string {
+	if m != nil {
+		return m.DataIp
+	}
+	return ""
+}
+
+func (m *StorageNode) GetHostname() string {
+	if m != nil {
+		return m.Hostname
+	}
+	return ""
+}
+
+func (m *StorageNode) GetNodeLabels() map[string]string {
+	if m != nil {
+		return m.NodeLabels
+	}
+	return nil
+}
+
+func (m *StorageNode) GetSchedulerNodeName() string {
+	if m != nil {
+		return m.SchedulerNodeName
+	}
+	return ""
+}
+
+// StorageCluster represents the state and information about the cluster
+type StorageCluster struct {
+	// Status of the cluster
+	Status Status `protobuf:"varint,1,opt,name=status,enum=openstorage.api.Status" json:"status,omitempty"`
+	// Id of the cluster
+	Id string `protobuf:"bytes,2,opt,name=id" json:"id,omitempty"`
+	// Name of the cluster
+	Name                 string   `protobuf:"bytes,3,opt,name=name" json:"name,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *StorageCluster) Reset()         { *m = StorageCluster{} }
+func (m *StorageCluster) String() string { return proto.CompactTextString(m) }
+func (*StorageCluster) ProtoMessage()    {}
+func (*StorageCluster) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{48}
+}
+func (m *StorageCluster) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_StorageCluster.Unmarshal(m, b)
+}
+func (m *StorageCluster) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_StorageCluster.Marshal(b, m, deterministic)
+}
+func (dst *StorageCluster) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_StorageCluster.Merge(dst, src)
+}
+func (m *StorageCluster) XXX_Size() int {
+	return xxx_messageInfo_StorageCluster.Size(m)
+}
+func (m *StorageCluster) XXX_DiscardUnknown() {
+	xxx_messageInfo_StorageCluster.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_StorageCluster proto.InternalMessageInfo
+
+func (m *StorageCluster) GetStatus() Status {
+	if m != nil {
+		return m.Status
+	}
+	return Status_STATUS_NONE
+}
+
+func (m *StorageCluster) GetId() string {
+	if m != nil {
+		return m.Id
+	}
+	return ""
+}
+
+func (m *StorageCluster) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+// Define a request to create storage policy
+type SdkOpenStoragePolicyCreateRequest struct {
+	// storage policy to create
+	StoragePolicy        *SdkStoragePolicy `protobuf:"bytes,1,opt,name=storage_policy,json=storagePolicy" json:"storage_policy,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *SdkOpenStoragePolicyCreateRequest) Reset()         { *m = SdkOpenStoragePolicyCreateRequest{} }
+func (m *SdkOpenStoragePolicyCreateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkOpenStoragePolicyCreateRequest) ProtoMessage()    {}
+func (*SdkOpenStoragePolicyCreateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{49}
+}
+func (m *SdkOpenStoragePolicyCreateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkOpenStoragePolicyCreateRequest.Unmarshal(m, b)
+}
+func (m *SdkOpenStoragePolicyCreateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkOpenStoragePolicyCreateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkOpenStoragePolicyCreateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkOpenStoragePolicyCreateRequest.Merge(dst, src)
+}
+func (m *SdkOpenStoragePolicyCreateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkOpenStoragePolicyCreateRequest.Size(m)
+}
+func (m *SdkOpenStoragePolicyCreateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkOpenStoragePolicyCreateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkOpenStoragePolicyCreateRequest proto.InternalMessageInfo
+
+func (m *SdkOpenStoragePolicyCreateRequest) GetStoragePolicy() *SdkStoragePolicy {
+	if m != nil {
+		return m.StoragePolicy
+	}
+	return nil
+}
+
+// Empty response
+type SdkOpenStoragePolicyCreateResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkOpenStoragePolicyCreateResponse) Reset()         { *m = SdkOpenStoragePolicyCreateResponse{} }
+func (m *SdkOpenStoragePolicyCreateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkOpenStoragePolicyCreateResponse) ProtoMessage()    {}
+func (*SdkOpenStoragePolicyCreateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{50}
+}
+func (m *SdkOpenStoragePolicyCreateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkOpenStoragePolicyCreateResponse.Unmarshal(m, b)
+}
+func (m *SdkOpenStoragePolicyCreateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkOpenStoragePolicyCreateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkOpenStoragePolicyCreateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkOpenStoragePolicyCreateResponse.Merge(dst, src)
+}
+func (m *SdkOpenStoragePolicyCreateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkOpenStoragePolicyCreateResponse.Size(m)
+}
+func (m *SdkOpenStoragePolicyCreateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkOpenStoragePolicyCreateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkOpenStoragePolicyCreateResponse proto.InternalMessageInfo
+
+// Empty request
+type SdkOpenStoragePolicyEnumerateRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkOpenStoragePolicyEnumerateRequest) Reset()         { *m = SdkOpenStoragePolicyEnumerateRequest{} }
+func (m *SdkOpenStoragePolicyEnumerateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkOpenStoragePolicyEnumerateRequest) ProtoMessage()    {}
+func (*SdkOpenStoragePolicyEnumerateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{51}
+}
+func (m *SdkOpenStoragePolicyEnumerateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkOpenStoragePolicyEnumerateRequest.Unmarshal(m, b)
+}
+func (m *SdkOpenStoragePolicyEnumerateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkOpenStoragePolicyEnumerateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkOpenStoragePolicyEnumerateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkOpenStoragePolicyEnumerateRequest.Merge(dst, src)
+}
+func (m *SdkOpenStoragePolicyEnumerateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkOpenStoragePolicyEnumerateRequest.Size(m)
+}
+func (m *SdkOpenStoragePolicyEnumerateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkOpenStoragePolicyEnumerateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkOpenStoragePolicyEnumerateRequest proto.InternalMessageInfo
+
+// Define a storage policy enumerate response
+type SdkOpenStoragePolicyEnumerateResponse struct {
+	// List of storage policies
+	StoragePolicies      []*SdkStoragePolicy `protobuf:"bytes,1,rep,name=storage_policies,json=storagePolicies" json:"storage_policies,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}            `json:"-"`
+	XXX_unrecognized     []byte              `json:"-"`
+	XXX_sizecache        int32               `json:"-"`
+}
+
+func (m *SdkOpenStoragePolicyEnumerateResponse) Reset()         { *m = SdkOpenStoragePolicyEnumerateResponse{} }
+func (m *SdkOpenStoragePolicyEnumerateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkOpenStoragePolicyEnumerateResponse) ProtoMessage()    {}
+func (*SdkOpenStoragePolicyEnumerateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{52}
+}
+func (m *SdkOpenStoragePolicyEnumerateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkOpenStoragePolicyEnumerateResponse.Unmarshal(m, b)
+}
+func (m *SdkOpenStoragePolicyEnumerateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkOpenStoragePolicyEnumerateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkOpenStoragePolicyEnumerateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkOpenStoragePolicyEnumerateResponse.Merge(dst, src)
+}
+func (m *SdkOpenStoragePolicyEnumerateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkOpenStoragePolicyEnumerateResponse.Size(m)
+}
+func (m *SdkOpenStoragePolicyEnumerateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkOpenStoragePolicyEnumerateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkOpenStoragePolicyEnumerateResponse proto.InternalMessageInfo
+
+func (m *SdkOpenStoragePolicyEnumerateResponse) GetStoragePolicies() []*SdkStoragePolicy {
+	if m != nil {
+		return m.StoragePolicies
+	}
+	return nil
+}
+
+// Define a request to inspect storage policy
+type SdkOpenStoragePolicyInspectRequest struct {
+	// name of storage policy to retrive
+	Name                 string   `protobuf:"bytes,1,opt,name=name" json:"name,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkOpenStoragePolicyInspectRequest) Reset()         { *m = SdkOpenStoragePolicyInspectRequest{} }
+func (m *SdkOpenStoragePolicyInspectRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkOpenStoragePolicyInspectRequest) ProtoMessage()    {}
+func (*SdkOpenStoragePolicyInspectRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{53}
+}
+func (m *SdkOpenStoragePolicyInspectRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkOpenStoragePolicyInspectRequest.Unmarshal(m, b)
+}
+func (m *SdkOpenStoragePolicyInspectRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkOpenStoragePolicyInspectRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkOpenStoragePolicyInspectRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkOpenStoragePolicyInspectRequest.Merge(dst, src)
+}
+func (m *SdkOpenStoragePolicyInspectRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkOpenStoragePolicyInspectRequest.Size(m)
+}
+func (m *SdkOpenStoragePolicyInspectRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkOpenStoragePolicyInspectRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkOpenStoragePolicyInspectRequest proto.InternalMessageInfo
+
+func (m *SdkOpenStoragePolicyInspectRequest) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+// Define a storage policy inspect response
+type SdkOpenStoragePolicyInspectResponse struct {
+	// storage policy information requested by name
+	StoragePolicy        *SdkStoragePolicy `protobuf:"bytes,1,opt,name=storage_policy,json=storagePolicy" json:"storage_policy,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *SdkOpenStoragePolicyInspectResponse) Reset()         { *m = SdkOpenStoragePolicyInspectResponse{} }
+func (m *SdkOpenStoragePolicyInspectResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkOpenStoragePolicyInspectResponse) ProtoMessage()    {}
+func (*SdkOpenStoragePolicyInspectResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{54}
+}
+func (m *SdkOpenStoragePolicyInspectResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkOpenStoragePolicyInspectResponse.Unmarshal(m, b)
+}
+func (m *SdkOpenStoragePolicyInspectResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkOpenStoragePolicyInspectResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkOpenStoragePolicyInspectResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkOpenStoragePolicyInspectResponse.Merge(dst, src)
+}
+func (m *SdkOpenStoragePolicyInspectResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkOpenStoragePolicyInspectResponse.Size(m)
+}
+func (m *SdkOpenStoragePolicyInspectResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkOpenStoragePolicyInspectResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkOpenStoragePolicyInspectResponse proto.InternalMessageInfo
+
+func (m *SdkOpenStoragePolicyInspectResponse) GetStoragePolicy() *SdkStoragePolicy {
+	if m != nil {
+		return m.StoragePolicy
+	}
+	return nil
+}
+
+// Define a request to delete storage policy
+type SdkOpenStoragePolicyDeleteRequest struct {
+	// name of storage policy to delete
+	Name                 string   `protobuf:"bytes,1,opt,name=name" json:"name,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkOpenStoragePolicyDeleteRequest) Reset()         { *m = SdkOpenStoragePolicyDeleteRequest{} }
+func (m *SdkOpenStoragePolicyDeleteRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkOpenStoragePolicyDeleteRequest) ProtoMessage()    {}
+func (*SdkOpenStoragePolicyDeleteRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{55}
+}
+func (m *SdkOpenStoragePolicyDeleteRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkOpenStoragePolicyDeleteRequest.Unmarshal(m, b)
+}
+func (m *SdkOpenStoragePolicyDeleteRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkOpenStoragePolicyDeleteRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkOpenStoragePolicyDeleteRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkOpenStoragePolicyDeleteRequest.Merge(dst, src)
+}
+func (m *SdkOpenStoragePolicyDeleteRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkOpenStoragePolicyDeleteRequest.Size(m)
+}
+func (m *SdkOpenStoragePolicyDeleteRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkOpenStoragePolicyDeleteRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkOpenStoragePolicyDeleteRequest proto.InternalMessageInfo
+
+func (m *SdkOpenStoragePolicyDeleteRequest) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+// Empty Response
+type SdkOpenStoragePolicyDeleteResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkOpenStoragePolicyDeleteResponse) Reset()         { *m = SdkOpenStoragePolicyDeleteResponse{} }
+func (m *SdkOpenStoragePolicyDeleteResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkOpenStoragePolicyDeleteResponse) ProtoMessage()    {}
+func (*SdkOpenStoragePolicyDeleteResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{56}
+}
+func (m *SdkOpenStoragePolicyDeleteResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkOpenStoragePolicyDeleteResponse.Unmarshal(m, b)
+}
+func (m *SdkOpenStoragePolicyDeleteResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkOpenStoragePolicyDeleteResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkOpenStoragePolicyDeleteResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkOpenStoragePolicyDeleteResponse.Merge(dst, src)
+}
+func (m *SdkOpenStoragePolicyDeleteResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkOpenStoragePolicyDeleteResponse.Size(m)
+}
+func (m *SdkOpenStoragePolicyDeleteResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkOpenStoragePolicyDeleteResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkOpenStoragePolicyDeleteResponse proto.InternalMessageInfo
+
+// Define a request to update storage policy
+type SdkOpenStoragePolicyUpdateRequest struct {
+	// storage policy to update
+	StoragePolicy        *SdkStoragePolicy `protobuf:"bytes,1,opt,name=storage_policy,json=storagePolicy" json:"storage_policy,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *SdkOpenStoragePolicyUpdateRequest) Reset()         { *m = SdkOpenStoragePolicyUpdateRequest{} }
+func (m *SdkOpenStoragePolicyUpdateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkOpenStoragePolicyUpdateRequest) ProtoMessage()    {}
+func (*SdkOpenStoragePolicyUpdateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{57}
+}
+func (m *SdkOpenStoragePolicyUpdateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkOpenStoragePolicyUpdateRequest.Unmarshal(m, b)
+}
+func (m *SdkOpenStoragePolicyUpdateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkOpenStoragePolicyUpdateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkOpenStoragePolicyUpdateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkOpenStoragePolicyUpdateRequest.Merge(dst, src)
+}
+func (m *SdkOpenStoragePolicyUpdateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkOpenStoragePolicyUpdateRequest.Size(m)
+}
+func (m *SdkOpenStoragePolicyUpdateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkOpenStoragePolicyUpdateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkOpenStoragePolicyUpdateRequest proto.InternalMessageInfo
+
+func (m *SdkOpenStoragePolicyUpdateRequest) GetStoragePolicy() *SdkStoragePolicy {
+	if m != nil {
+		return m.StoragePolicy
+	}
+	return nil
+}
+
+// Empty Response
+type SdkOpenStoragePolicyUpdateResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkOpenStoragePolicyUpdateResponse) Reset()         { *m = SdkOpenStoragePolicyUpdateResponse{} }
+func (m *SdkOpenStoragePolicyUpdateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkOpenStoragePolicyUpdateResponse) ProtoMessage()    {}
+func (*SdkOpenStoragePolicyUpdateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{58}
+}
+func (m *SdkOpenStoragePolicyUpdateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkOpenStoragePolicyUpdateResponse.Unmarshal(m, b)
+}
+func (m *SdkOpenStoragePolicyUpdateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkOpenStoragePolicyUpdateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkOpenStoragePolicyUpdateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkOpenStoragePolicyUpdateResponse.Merge(dst, src)
+}
+func (m *SdkOpenStoragePolicyUpdateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkOpenStoragePolicyUpdateResponse.Size(m)
+}
+func (m *SdkOpenStoragePolicyUpdateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkOpenStoragePolicyUpdateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkOpenStoragePolicyUpdateResponse proto.InternalMessageInfo
+
+// Define a request to set default storage policy
+type SdkOpenStoragePolicySetDefaultRequest struct {
+	// name of policy to set as default storage policy
+	// for volume creation
+	// This policy will be used to validate/update volume configuration
+	Name                 string   `protobuf:"bytes,1,opt,name=name" json:"name,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkOpenStoragePolicySetDefaultRequest) Reset()         { *m = SdkOpenStoragePolicySetDefaultRequest{} }
+func (m *SdkOpenStoragePolicySetDefaultRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkOpenStoragePolicySetDefaultRequest) ProtoMessage()    {}
+func (*SdkOpenStoragePolicySetDefaultRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{59}
+}
+func (m *SdkOpenStoragePolicySetDefaultRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkOpenStoragePolicySetDefaultRequest.Unmarshal(m, b)
+}
+func (m *SdkOpenStoragePolicySetDefaultRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkOpenStoragePolicySetDefaultRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkOpenStoragePolicySetDefaultRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkOpenStoragePolicySetDefaultRequest.Merge(dst, src)
+}
+func (m *SdkOpenStoragePolicySetDefaultRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkOpenStoragePolicySetDefaultRequest.Size(m)
+}
+func (m *SdkOpenStoragePolicySetDefaultRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkOpenStoragePolicySetDefaultRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkOpenStoragePolicySetDefaultRequest proto.InternalMessageInfo
+
+func (m *SdkOpenStoragePolicySetDefaultRequest) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+// Empty Response
+type SdkOpenStoragePolicySetDefaultResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkOpenStoragePolicySetDefaultResponse) Reset() {
+	*m = SdkOpenStoragePolicySetDefaultResponse{}
+}
+func (m *SdkOpenStoragePolicySetDefaultResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkOpenStoragePolicySetDefaultResponse) ProtoMessage()    {}
+func (*SdkOpenStoragePolicySetDefaultResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{60}
+}
+func (m *SdkOpenStoragePolicySetDefaultResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkOpenStoragePolicySetDefaultResponse.Unmarshal(m, b)
+}
+func (m *SdkOpenStoragePolicySetDefaultResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkOpenStoragePolicySetDefaultResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkOpenStoragePolicySetDefaultResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkOpenStoragePolicySetDefaultResponse.Merge(dst, src)
+}
+func (m *SdkOpenStoragePolicySetDefaultResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkOpenStoragePolicySetDefaultResponse.Size(m)
+}
+func (m *SdkOpenStoragePolicySetDefaultResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkOpenStoragePolicySetDefaultResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkOpenStoragePolicySetDefaultResponse proto.InternalMessageInfo
+
+// Empty Request
+type SdkOpenStoragePolicyReleaseRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkOpenStoragePolicyReleaseRequest) Reset()         { *m = SdkOpenStoragePolicyReleaseRequest{} }
+func (m *SdkOpenStoragePolicyReleaseRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkOpenStoragePolicyReleaseRequest) ProtoMessage()    {}
+func (*SdkOpenStoragePolicyReleaseRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{61}
+}
+func (m *SdkOpenStoragePolicyReleaseRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkOpenStoragePolicyReleaseRequest.Unmarshal(m, b)
+}
+func (m *SdkOpenStoragePolicyReleaseRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkOpenStoragePolicyReleaseRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkOpenStoragePolicyReleaseRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkOpenStoragePolicyReleaseRequest.Merge(dst, src)
+}
+func (m *SdkOpenStoragePolicyReleaseRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkOpenStoragePolicyReleaseRequest.Size(m)
+}
+func (m *SdkOpenStoragePolicyReleaseRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkOpenStoragePolicyReleaseRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkOpenStoragePolicyReleaseRequest proto.InternalMessageInfo
+
+// Empty Response
+type SdkOpenStoragePolicyReleaseResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkOpenStoragePolicyReleaseResponse) Reset()         { *m = SdkOpenStoragePolicyReleaseResponse{} }
+func (m *SdkOpenStoragePolicyReleaseResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkOpenStoragePolicyReleaseResponse) ProtoMessage()    {}
+func (*SdkOpenStoragePolicyReleaseResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{62}
+}
+func (m *SdkOpenStoragePolicyReleaseResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkOpenStoragePolicyReleaseResponse.Unmarshal(m, b)
+}
+func (m *SdkOpenStoragePolicyReleaseResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkOpenStoragePolicyReleaseResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkOpenStoragePolicyReleaseResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkOpenStoragePolicyReleaseResponse.Merge(dst, src)
+}
+func (m *SdkOpenStoragePolicyReleaseResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkOpenStoragePolicyReleaseResponse.Size(m)
+}
+func (m *SdkOpenStoragePolicyReleaseResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkOpenStoragePolicyReleaseResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkOpenStoragePolicyReleaseResponse proto.InternalMessageInfo
+
+// Empty Request
+type SdkOpenStoragePolicyDefaultInspectRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkOpenStoragePolicyDefaultInspectRequest) Reset() {
+	*m = SdkOpenStoragePolicyDefaultInspectRequest{}
+}
+func (m *SdkOpenStoragePolicyDefaultInspectRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkOpenStoragePolicyDefaultInspectRequest) ProtoMessage()    {}
+func (*SdkOpenStoragePolicyDefaultInspectRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{63}
+}
+func (m *SdkOpenStoragePolicyDefaultInspectRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkOpenStoragePolicyDefaultInspectRequest.Unmarshal(m, b)
+}
+func (m *SdkOpenStoragePolicyDefaultInspectRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkOpenStoragePolicyDefaultInspectRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkOpenStoragePolicyDefaultInspectRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkOpenStoragePolicyDefaultInspectRequest.Merge(dst, src)
+}
+func (m *SdkOpenStoragePolicyDefaultInspectRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkOpenStoragePolicyDefaultInspectRequest.Size(m)
+}
+func (m *SdkOpenStoragePolicyDefaultInspectRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkOpenStoragePolicyDefaultInspectRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkOpenStoragePolicyDefaultInspectRequest proto.InternalMessageInfo
+
+// Define default storage policy response
+type SdkOpenStoragePolicyDefaultInspectResponse struct {
+	// storage policy information which is set as default
+	StoragePolicy        *SdkStoragePolicy `protobuf:"bytes,1,opt,name=storage_policy,json=storagePolicy" json:"storage_policy,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *SdkOpenStoragePolicyDefaultInspectResponse) Reset() {
+	*m = SdkOpenStoragePolicyDefaultInspectResponse{}
+}
+func (m *SdkOpenStoragePolicyDefaultInspectResponse) String() string {
+	return proto.CompactTextString(m)
+}
+func (*SdkOpenStoragePolicyDefaultInspectResponse) ProtoMessage() {}
+func (*SdkOpenStoragePolicyDefaultInspectResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{64}
+}
+func (m *SdkOpenStoragePolicyDefaultInspectResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkOpenStoragePolicyDefaultInspectResponse.Unmarshal(m, b)
+}
+func (m *SdkOpenStoragePolicyDefaultInspectResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkOpenStoragePolicyDefaultInspectResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkOpenStoragePolicyDefaultInspectResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkOpenStoragePolicyDefaultInspectResponse.Merge(dst, src)
+}
+func (m *SdkOpenStoragePolicyDefaultInspectResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkOpenStoragePolicyDefaultInspectResponse.Size(m)
+}
+func (m *SdkOpenStoragePolicyDefaultInspectResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkOpenStoragePolicyDefaultInspectResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkOpenStoragePolicyDefaultInspectResponse proto.InternalMessageInfo
+
+func (m *SdkOpenStoragePolicyDefaultInspectResponse) GetStoragePolicy() *SdkStoragePolicy {
+	if m != nil {
+		return m.StoragePolicy
+	}
+	return nil
+}
+
+// Define a schedule policy request
+type SdkSchedulePolicyCreateRequest struct {
+	// Schedule Policy
+	SchedulePolicy       *SdkSchedulePolicy `protobuf:"bytes,1,opt,name=schedule_policy,json=schedulePolicy" json:"schedule_policy,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}           `json:"-"`
+	XXX_unrecognized     []byte             `json:"-"`
+	XXX_sizecache        int32              `json:"-"`
+}
+
+func (m *SdkSchedulePolicyCreateRequest) Reset()         { *m = SdkSchedulePolicyCreateRequest{} }
+func (m *SdkSchedulePolicyCreateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkSchedulePolicyCreateRequest) ProtoMessage()    {}
+func (*SdkSchedulePolicyCreateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{65}
+}
+func (m *SdkSchedulePolicyCreateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkSchedulePolicyCreateRequest.Unmarshal(m, b)
+}
+func (m *SdkSchedulePolicyCreateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkSchedulePolicyCreateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkSchedulePolicyCreateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkSchedulePolicyCreateRequest.Merge(dst, src)
+}
+func (m *SdkSchedulePolicyCreateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkSchedulePolicyCreateRequest.Size(m)
+}
+func (m *SdkSchedulePolicyCreateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkSchedulePolicyCreateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkSchedulePolicyCreateRequest proto.InternalMessageInfo
+
+func (m *SdkSchedulePolicyCreateRequest) GetSchedulePolicy() *SdkSchedulePolicy {
+	if m != nil {
+		return m.SchedulePolicy
+	}
+	return nil
+}
+
+// Empty response
+type SdkSchedulePolicyCreateResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkSchedulePolicyCreateResponse) Reset()         { *m = SdkSchedulePolicyCreateResponse{} }
+func (m *SdkSchedulePolicyCreateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkSchedulePolicyCreateResponse) ProtoMessage()    {}
+func (*SdkSchedulePolicyCreateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{66}
+}
+func (m *SdkSchedulePolicyCreateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkSchedulePolicyCreateResponse.Unmarshal(m, b)
+}
+func (m *SdkSchedulePolicyCreateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkSchedulePolicyCreateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkSchedulePolicyCreateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkSchedulePolicyCreateResponse.Merge(dst, src)
+}
+func (m *SdkSchedulePolicyCreateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkSchedulePolicyCreateResponse.Size(m)
+}
+func (m *SdkSchedulePolicyCreateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkSchedulePolicyCreateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkSchedulePolicyCreateResponse proto.InternalMessageInfo
+
+// Define a request to update a schedule policy
+type SdkSchedulePolicyUpdateRequest struct {
+	// Schedule Policy
+	SchedulePolicy       *SdkSchedulePolicy `protobuf:"bytes,1,opt,name=schedule_policy,json=schedulePolicy" json:"schedule_policy,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}           `json:"-"`
+	XXX_unrecognized     []byte             `json:"-"`
+	XXX_sizecache        int32              `json:"-"`
+}
+
+func (m *SdkSchedulePolicyUpdateRequest) Reset()         { *m = SdkSchedulePolicyUpdateRequest{} }
+func (m *SdkSchedulePolicyUpdateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkSchedulePolicyUpdateRequest) ProtoMessage()    {}
+func (*SdkSchedulePolicyUpdateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{67}
+}
+func (m *SdkSchedulePolicyUpdateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkSchedulePolicyUpdateRequest.Unmarshal(m, b)
+}
+func (m *SdkSchedulePolicyUpdateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkSchedulePolicyUpdateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkSchedulePolicyUpdateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkSchedulePolicyUpdateRequest.Merge(dst, src)
+}
+func (m *SdkSchedulePolicyUpdateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkSchedulePolicyUpdateRequest.Size(m)
+}
+func (m *SdkSchedulePolicyUpdateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkSchedulePolicyUpdateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkSchedulePolicyUpdateRequest proto.InternalMessageInfo
+
+func (m *SdkSchedulePolicyUpdateRequest) GetSchedulePolicy() *SdkSchedulePolicy {
+	if m != nil {
+		return m.SchedulePolicy
+	}
+	return nil
+}
+
+// Empty response
+type SdkSchedulePolicyUpdateResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkSchedulePolicyUpdateResponse) Reset()         { *m = SdkSchedulePolicyUpdateResponse{} }
+func (m *SdkSchedulePolicyUpdateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkSchedulePolicyUpdateResponse) ProtoMessage()    {}
+func (*SdkSchedulePolicyUpdateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{68}
+}
+func (m *SdkSchedulePolicyUpdateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkSchedulePolicyUpdateResponse.Unmarshal(m, b)
+}
+func (m *SdkSchedulePolicyUpdateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkSchedulePolicyUpdateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkSchedulePolicyUpdateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkSchedulePolicyUpdateResponse.Merge(dst, src)
+}
+func (m *SdkSchedulePolicyUpdateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkSchedulePolicyUpdateResponse.Size(m)
+}
+func (m *SdkSchedulePolicyUpdateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkSchedulePolicyUpdateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkSchedulePolicyUpdateResponse proto.InternalMessageInfo
+
+// Empty request
+type SdkSchedulePolicyEnumerateRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkSchedulePolicyEnumerateRequest) Reset()         { *m = SdkSchedulePolicyEnumerateRequest{} }
+func (m *SdkSchedulePolicyEnumerateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkSchedulePolicyEnumerateRequest) ProtoMessage()    {}
+func (*SdkSchedulePolicyEnumerateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{69}
+}
+func (m *SdkSchedulePolicyEnumerateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkSchedulePolicyEnumerateRequest.Unmarshal(m, b)
+}
+func (m *SdkSchedulePolicyEnumerateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkSchedulePolicyEnumerateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkSchedulePolicyEnumerateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkSchedulePolicyEnumerateRequest.Merge(dst, src)
+}
+func (m *SdkSchedulePolicyEnumerateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkSchedulePolicyEnumerateRequest.Size(m)
+}
+func (m *SdkSchedulePolicyEnumerateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkSchedulePolicyEnumerateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkSchedulePolicyEnumerateRequest proto.InternalMessageInfo
+
+// Defines a schedule policy enumerate response
+type SdkSchedulePolicyEnumerateResponse struct {
+	// List of Schedule Policy
+	Policies             []*SdkSchedulePolicy `protobuf:"bytes,1,rep,name=policies" json:"policies,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}             `json:"-"`
+	XXX_unrecognized     []byte               `json:"-"`
+	XXX_sizecache        int32                `json:"-"`
+}
+
+func (m *SdkSchedulePolicyEnumerateResponse) Reset()         { *m = SdkSchedulePolicyEnumerateResponse{} }
+func (m *SdkSchedulePolicyEnumerateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkSchedulePolicyEnumerateResponse) ProtoMessage()    {}
+func (*SdkSchedulePolicyEnumerateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{70}
+}
+func (m *SdkSchedulePolicyEnumerateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkSchedulePolicyEnumerateResponse.Unmarshal(m, b)
+}
+func (m *SdkSchedulePolicyEnumerateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkSchedulePolicyEnumerateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkSchedulePolicyEnumerateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkSchedulePolicyEnumerateResponse.Merge(dst, src)
+}
+func (m *SdkSchedulePolicyEnumerateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkSchedulePolicyEnumerateResponse.Size(m)
+}
+func (m *SdkSchedulePolicyEnumerateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkSchedulePolicyEnumerateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkSchedulePolicyEnumerateResponse proto.InternalMessageInfo
+
+func (m *SdkSchedulePolicyEnumerateResponse) GetPolicies() []*SdkSchedulePolicy {
+	if m != nil {
+		return m.Policies
+	}
+	return nil
+}
+
+// Define a schedule policy inspection request
+type SdkSchedulePolicyInspectRequest struct {
+	// Name of the schedule Policy
+	Name                 string   `protobuf:"bytes,1,opt,name=name" json:"name,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkSchedulePolicyInspectRequest) Reset()         { *m = SdkSchedulePolicyInspectRequest{} }
+func (m *SdkSchedulePolicyInspectRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkSchedulePolicyInspectRequest) ProtoMessage()    {}
+func (*SdkSchedulePolicyInspectRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{71}
+}
+func (m *SdkSchedulePolicyInspectRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkSchedulePolicyInspectRequest.Unmarshal(m, b)
+}
+func (m *SdkSchedulePolicyInspectRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkSchedulePolicyInspectRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkSchedulePolicyInspectRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkSchedulePolicyInspectRequest.Merge(dst, src)
+}
+func (m *SdkSchedulePolicyInspectRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkSchedulePolicyInspectRequest.Size(m)
+}
+func (m *SdkSchedulePolicyInspectRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkSchedulePolicyInspectRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkSchedulePolicyInspectRequest proto.InternalMessageInfo
+
+func (m *SdkSchedulePolicyInspectRequest) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+// Defines a schedule policy inspection response
+type SdkSchedulePolicyInspectResponse struct {
+	// List of Schedule Policy
+	Policy               *SdkSchedulePolicy `protobuf:"bytes,1,opt,name=policy" json:"policy,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}           `json:"-"`
+	XXX_unrecognized     []byte             `json:"-"`
+	XXX_sizecache        int32              `json:"-"`
+}
+
+func (m *SdkSchedulePolicyInspectResponse) Reset()         { *m = SdkSchedulePolicyInspectResponse{} }
+func (m *SdkSchedulePolicyInspectResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkSchedulePolicyInspectResponse) ProtoMessage()    {}
+func (*SdkSchedulePolicyInspectResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{72}
+}
+func (m *SdkSchedulePolicyInspectResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkSchedulePolicyInspectResponse.Unmarshal(m, b)
+}
+func (m *SdkSchedulePolicyInspectResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkSchedulePolicyInspectResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkSchedulePolicyInspectResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkSchedulePolicyInspectResponse.Merge(dst, src)
+}
+func (m *SdkSchedulePolicyInspectResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkSchedulePolicyInspectResponse.Size(m)
+}
+func (m *SdkSchedulePolicyInspectResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkSchedulePolicyInspectResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkSchedulePolicyInspectResponse proto.InternalMessageInfo
+
+func (m *SdkSchedulePolicyInspectResponse) GetPolicy() *SdkSchedulePolicy {
+	if m != nil {
+		return m.Policy
+	}
+	return nil
+}
+
+// Define schedule policy deletion request
+type SdkSchedulePolicyDeleteRequest struct {
+	// Name of the schedule policy
+	Name                 string   `protobuf:"bytes,1,opt,name=name" json:"name,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkSchedulePolicyDeleteRequest) Reset()         { *m = SdkSchedulePolicyDeleteRequest{} }
+func (m *SdkSchedulePolicyDeleteRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkSchedulePolicyDeleteRequest) ProtoMessage()    {}
+func (*SdkSchedulePolicyDeleteRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{73}
+}
+func (m *SdkSchedulePolicyDeleteRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkSchedulePolicyDeleteRequest.Unmarshal(m, b)
+}
+func (m *SdkSchedulePolicyDeleteRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkSchedulePolicyDeleteRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkSchedulePolicyDeleteRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkSchedulePolicyDeleteRequest.Merge(dst, src)
+}
+func (m *SdkSchedulePolicyDeleteRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkSchedulePolicyDeleteRequest.Size(m)
+}
+func (m *SdkSchedulePolicyDeleteRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkSchedulePolicyDeleteRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkSchedulePolicyDeleteRequest proto.InternalMessageInfo
+
+func (m *SdkSchedulePolicyDeleteRequest) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+// Empty response
+type SdkSchedulePolicyDeleteResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkSchedulePolicyDeleteResponse) Reset()         { *m = SdkSchedulePolicyDeleteResponse{} }
+func (m *SdkSchedulePolicyDeleteResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkSchedulePolicyDeleteResponse) ProtoMessage()    {}
+func (*SdkSchedulePolicyDeleteResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{74}
+}
+func (m *SdkSchedulePolicyDeleteResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkSchedulePolicyDeleteResponse.Unmarshal(m, b)
+}
+func (m *SdkSchedulePolicyDeleteResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkSchedulePolicyDeleteResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkSchedulePolicyDeleteResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkSchedulePolicyDeleteResponse.Merge(dst, src)
+}
+func (m *SdkSchedulePolicyDeleteResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkSchedulePolicyDeleteResponse.Size(m)
+}
+func (m *SdkSchedulePolicyDeleteResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkSchedulePolicyDeleteResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkSchedulePolicyDeleteResponse proto.InternalMessageInfo
+
+// Defines a daily schedule
+type SdkSchedulePolicyIntervalDaily struct {
+	// Range: 0-23
+	Hour int32 `protobuf:"varint,1,opt,name=hour" json:"hour,omitempty"`
+	// Range: 0-59
+	Minute               int32    `protobuf:"varint,2,opt,name=minute" json:"minute,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkSchedulePolicyIntervalDaily) Reset()         { *m = SdkSchedulePolicyIntervalDaily{} }
+func (m *SdkSchedulePolicyIntervalDaily) String() string { return proto.CompactTextString(m) }
+func (*SdkSchedulePolicyIntervalDaily) ProtoMessage()    {}
+func (*SdkSchedulePolicyIntervalDaily) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{75}
+}
+func (m *SdkSchedulePolicyIntervalDaily) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkSchedulePolicyIntervalDaily.Unmarshal(m, b)
+}
+func (m *SdkSchedulePolicyIntervalDaily) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkSchedulePolicyIntervalDaily.Marshal(b, m, deterministic)
+}
+func (dst *SdkSchedulePolicyIntervalDaily) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkSchedulePolicyIntervalDaily.Merge(dst, src)
+}
+func (m *SdkSchedulePolicyIntervalDaily) XXX_Size() int {
+	return xxx_messageInfo_SdkSchedulePolicyIntervalDaily.Size(m)
+}
+func (m *SdkSchedulePolicyIntervalDaily) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkSchedulePolicyIntervalDaily.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkSchedulePolicyIntervalDaily proto.InternalMessageInfo
+
+func (m *SdkSchedulePolicyIntervalDaily) GetHour() int32 {
+	if m != nil {
+		return m.Hour
+	}
+	return 0
+}
+
+func (m *SdkSchedulePolicyIntervalDaily) GetMinute() int32 {
+	if m != nil {
+		return m.Minute
+	}
+	return 0
+}
+
+// Defines a weekly schedule
+type SdkSchedulePolicyIntervalWeekly struct {
+	Day SdkTimeWeekday `protobuf:"varint,1,opt,name=day,enum=openstorage.api.SdkTimeWeekday" json:"day,omitempty"`
+	// Range: 0-23
+	Hour int32 `protobuf:"varint,2,opt,name=hour" json:"hour,omitempty"`
+	// Range: 0-59
+	Minute               int32    `protobuf:"varint,3,opt,name=minute" json:"minute,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkSchedulePolicyIntervalWeekly) Reset()         { *m = SdkSchedulePolicyIntervalWeekly{} }
+func (m *SdkSchedulePolicyIntervalWeekly) String() string { return proto.CompactTextString(m) }
+func (*SdkSchedulePolicyIntervalWeekly) ProtoMessage()    {}
+func (*SdkSchedulePolicyIntervalWeekly) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{76}
+}
+func (m *SdkSchedulePolicyIntervalWeekly) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkSchedulePolicyIntervalWeekly.Unmarshal(m, b)
+}
+func (m *SdkSchedulePolicyIntervalWeekly) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkSchedulePolicyIntervalWeekly.Marshal(b, m, deterministic)
+}
+func (dst *SdkSchedulePolicyIntervalWeekly) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkSchedulePolicyIntervalWeekly.Merge(dst, src)
+}
+func (m *SdkSchedulePolicyIntervalWeekly) XXX_Size() int {
+	return xxx_messageInfo_SdkSchedulePolicyIntervalWeekly.Size(m)
+}
+func (m *SdkSchedulePolicyIntervalWeekly) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkSchedulePolicyIntervalWeekly.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkSchedulePolicyIntervalWeekly proto.InternalMessageInfo
+
+func (m *SdkSchedulePolicyIntervalWeekly) GetDay() SdkTimeWeekday {
+	if m != nil {
+		return m.Day
+	}
+	return SdkTimeWeekday_SdkTimeWeekdaySunday
+}
+
+func (m *SdkSchedulePolicyIntervalWeekly) GetHour() int32 {
+	if m != nil {
+		return m.Hour
+	}
+	return 0
+}
+
+func (m *SdkSchedulePolicyIntervalWeekly) GetMinute() int32 {
+	if m != nil {
+		return m.Minute
+	}
+	return 0
+}
+
+// Defines a monthly schedule
+type SdkSchedulePolicyIntervalMonthly struct {
+	// Range: 1-28
+	Day int32 `protobuf:"varint,1,opt,name=day" json:"day,omitempty"`
+	// Range: 0-59
+	Hour int32 `protobuf:"varint,2,opt,name=hour" json:"hour,omitempty"`
+	// Range: 0-59
+	Minute               int32    `protobuf:"varint,3,opt,name=minute" json:"minute,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkSchedulePolicyIntervalMonthly) Reset()         { *m = SdkSchedulePolicyIntervalMonthly{} }
+func (m *SdkSchedulePolicyIntervalMonthly) String() string { return proto.CompactTextString(m) }
+func (*SdkSchedulePolicyIntervalMonthly) ProtoMessage()    {}
+func (*SdkSchedulePolicyIntervalMonthly) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{77}
+}
+func (m *SdkSchedulePolicyIntervalMonthly) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkSchedulePolicyIntervalMonthly.Unmarshal(m, b)
+}
+func (m *SdkSchedulePolicyIntervalMonthly) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkSchedulePolicyIntervalMonthly.Marshal(b, m, deterministic)
+}
+func (dst *SdkSchedulePolicyIntervalMonthly) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkSchedulePolicyIntervalMonthly.Merge(dst, src)
+}
+func (m *SdkSchedulePolicyIntervalMonthly) XXX_Size() int {
+	return xxx_messageInfo_SdkSchedulePolicyIntervalMonthly.Size(m)
+}
+func (m *SdkSchedulePolicyIntervalMonthly) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkSchedulePolicyIntervalMonthly.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkSchedulePolicyIntervalMonthly proto.InternalMessageInfo
+
+func (m *SdkSchedulePolicyIntervalMonthly) GetDay() int32 {
+	if m != nil {
+		return m.Day
+	}
+	return 0
+}
+
+func (m *SdkSchedulePolicyIntervalMonthly) GetHour() int32 {
+	if m != nil {
+		return m.Hour
+	}
+	return 0
+}
+
+func (m *SdkSchedulePolicyIntervalMonthly) GetMinute() int32 {
+	if m != nil {
+		return m.Minute
+	}
+	return 0
+}
+
+// Defines a periodic schedule
+type SdkSchedulePolicyIntervalPeriodic struct {
+	// Specify the number of seconds between intervals
+	Seconds              int64    `protobuf:"varint,1,opt,name=seconds" json:"seconds,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkSchedulePolicyIntervalPeriodic) Reset()         { *m = SdkSchedulePolicyIntervalPeriodic{} }
+func (m *SdkSchedulePolicyIntervalPeriodic) String() string { return proto.CompactTextString(m) }
+func (*SdkSchedulePolicyIntervalPeriodic) ProtoMessage()    {}
+func (*SdkSchedulePolicyIntervalPeriodic) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{78}
+}
+func (m *SdkSchedulePolicyIntervalPeriodic) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkSchedulePolicyIntervalPeriodic.Unmarshal(m, b)
+}
+func (m *SdkSchedulePolicyIntervalPeriodic) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkSchedulePolicyIntervalPeriodic.Marshal(b, m, deterministic)
+}
+func (dst *SdkSchedulePolicyIntervalPeriodic) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkSchedulePolicyIntervalPeriodic.Merge(dst, src)
+}
+func (m *SdkSchedulePolicyIntervalPeriodic) XXX_Size() int {
+	return xxx_messageInfo_SdkSchedulePolicyIntervalPeriodic.Size(m)
+}
+func (m *SdkSchedulePolicyIntervalPeriodic) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkSchedulePolicyIntervalPeriodic.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkSchedulePolicyIntervalPeriodic proto.InternalMessageInfo
+
+func (m *SdkSchedulePolicyIntervalPeriodic) GetSeconds() int64 {
+	if m != nil {
+		return m.Seconds
+	}
+	return 0
+}
+
+// Defines a schedule policy interval
+type SdkSchedulePolicyInterval struct {
+	// Number of instances to retain
+	Retain int64 `protobuf:"varint,1,opt,name=retain" json:"retain,omitempty"`
+	// Start oneof at field number 200 to allow for expansion
+	//
+	// Types that are valid to be assigned to PeriodType:
+	//	*SdkSchedulePolicyInterval_Daily
+	//	*SdkSchedulePolicyInterval_Weekly
+	//	*SdkSchedulePolicyInterval_Monthly
+	//	*SdkSchedulePolicyInterval_Periodic
+	PeriodType           isSdkSchedulePolicyInterval_PeriodType `protobuf_oneof:"period_type"`
+	XXX_NoUnkeyedLiteral struct{}                               `json:"-"`
+	XXX_unrecognized     []byte                                 `json:"-"`
+	XXX_sizecache        int32                                  `json:"-"`
+}
+
+func (m *SdkSchedulePolicyInterval) Reset()         { *m = SdkSchedulePolicyInterval{} }
+func (m *SdkSchedulePolicyInterval) String() string { return proto.CompactTextString(m) }
+func (*SdkSchedulePolicyInterval) ProtoMessage()    {}
+func (*SdkSchedulePolicyInterval) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{79}
+}
+func (m *SdkSchedulePolicyInterval) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkSchedulePolicyInterval.Unmarshal(m, b)
+}
+func (m *SdkSchedulePolicyInterval) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkSchedulePolicyInterval.Marshal(b, m, deterministic)
+}
+func (dst *SdkSchedulePolicyInterval) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkSchedulePolicyInterval.Merge(dst, src)
+}
+func (m *SdkSchedulePolicyInterval) XXX_Size() int {
+	return xxx_messageInfo_SdkSchedulePolicyInterval.Size(m)
+}
+func (m *SdkSchedulePolicyInterval) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkSchedulePolicyInterval.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkSchedulePolicyInterval proto.InternalMessageInfo
+
+type isSdkSchedulePolicyInterval_PeriodType interface {
+	isSdkSchedulePolicyInterval_PeriodType()
+}
+
+type SdkSchedulePolicyInterval_Daily struct {
+	Daily *SdkSchedulePolicyIntervalDaily `protobuf:"bytes,200,opt,name=daily,oneof"`
+}
+type SdkSchedulePolicyInterval_Weekly struct {
+	Weekly *SdkSchedulePolicyIntervalWeekly `protobuf:"bytes,201,opt,name=weekly,oneof"`
+}
+type SdkSchedulePolicyInterval_Monthly struct {
+	Monthly *SdkSchedulePolicyIntervalMonthly `protobuf:"bytes,202,opt,name=monthly,oneof"`
+}
+type SdkSchedulePolicyInterval_Periodic struct {
+	Periodic *SdkSchedulePolicyIntervalPeriodic `protobuf:"bytes,203,opt,name=periodic,oneof"`
+}
+
+func (*SdkSchedulePolicyInterval_Daily) isSdkSchedulePolicyInterval_PeriodType()    {}
+func (*SdkSchedulePolicyInterval_Weekly) isSdkSchedulePolicyInterval_PeriodType()   {}
+func (*SdkSchedulePolicyInterval_Monthly) isSdkSchedulePolicyInterval_PeriodType()  {}
+func (*SdkSchedulePolicyInterval_Periodic) isSdkSchedulePolicyInterval_PeriodType() {}
+
+func (m *SdkSchedulePolicyInterval) GetPeriodType() isSdkSchedulePolicyInterval_PeriodType {
+	if m != nil {
+		return m.PeriodType
+	}
+	return nil
+}
+
+func (m *SdkSchedulePolicyInterval) GetRetain() int64 {
+	if m != nil {
+		return m.Retain
+	}
+	return 0
+}
+
+func (m *SdkSchedulePolicyInterval) GetDaily() *SdkSchedulePolicyIntervalDaily {
+	if x, ok := m.GetPeriodType().(*SdkSchedulePolicyInterval_Daily); ok {
+		return x.Daily
+	}
+	return nil
+}
+
+func (m *SdkSchedulePolicyInterval) GetWeekly() *SdkSchedulePolicyIntervalWeekly {
+	if x, ok := m.GetPeriodType().(*SdkSchedulePolicyInterval_Weekly); ok {
+		return x.Weekly
+	}
+	return nil
+}
+
+func (m *SdkSchedulePolicyInterval) GetMonthly() *SdkSchedulePolicyIntervalMonthly {
+	if x, ok := m.GetPeriodType().(*SdkSchedulePolicyInterval_Monthly); ok {
+		return x.Monthly
+	}
+	return nil
+}
+
+func (m *SdkSchedulePolicyInterval) GetPeriodic() *SdkSchedulePolicyIntervalPeriodic {
+	if x, ok := m.GetPeriodType().(*SdkSchedulePolicyInterval_Periodic); ok {
+		return x.Periodic
+	}
+	return nil
+}
+
+// XXX_OneofFuncs is for the internal use of the proto package.
+func (*SdkSchedulePolicyInterval) XXX_OneofFuncs() (func(msg proto.Message, b *proto.Buffer) error, func(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error), func(msg proto.Message) (n int), []interface{}) {
+	return _SdkSchedulePolicyInterval_OneofMarshaler, _SdkSchedulePolicyInterval_OneofUnmarshaler, _SdkSchedulePolicyInterval_OneofSizer, []interface{}{
+		(*SdkSchedulePolicyInterval_Daily)(nil),
+		(*SdkSchedulePolicyInterval_Weekly)(nil),
+		(*SdkSchedulePolicyInterval_Monthly)(nil),
+		(*SdkSchedulePolicyInterval_Periodic)(nil),
+	}
+}
+
+func _SdkSchedulePolicyInterval_OneofMarshaler(msg proto.Message, b *proto.Buffer) error {
+	m := msg.(*SdkSchedulePolicyInterval)
+	// period_type
+	switch x := m.PeriodType.(type) {
+	case *SdkSchedulePolicyInterval_Daily:
+		b.EncodeVarint(200<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.Daily); err != nil {
+			return err
+		}
+	case *SdkSchedulePolicyInterval_Weekly:
+		b.EncodeVarint(201<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.Weekly); err != nil {
+			return err
+		}
+	case *SdkSchedulePolicyInterval_Monthly:
+		b.EncodeVarint(202<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.Monthly); err != nil {
+			return err
+		}
+	case *SdkSchedulePolicyInterval_Periodic:
+		b.EncodeVarint(203<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.Periodic); err != nil {
+			return err
+		}
+	case nil:
+	default:
+		return fmt.Errorf("SdkSchedulePolicyInterval.PeriodType has unexpected type %T", x)
+	}
+	return nil
+}
+
+func _SdkSchedulePolicyInterval_OneofUnmarshaler(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error) {
+	m := msg.(*SdkSchedulePolicyInterval)
+	switch tag {
+	case 200: // period_type.daily
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkSchedulePolicyIntervalDaily)
+		err := b.DecodeMessage(msg)
+		m.PeriodType = &SdkSchedulePolicyInterval_Daily{msg}
+		return true, err
+	case 201: // period_type.weekly
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkSchedulePolicyIntervalWeekly)
+		err := b.DecodeMessage(msg)
+		m.PeriodType = &SdkSchedulePolicyInterval_Weekly{msg}
+		return true, err
+	case 202: // period_type.monthly
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkSchedulePolicyIntervalMonthly)
+		err := b.DecodeMessage(msg)
+		m.PeriodType = &SdkSchedulePolicyInterval_Monthly{msg}
+		return true, err
+	case 203: // period_type.periodic
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkSchedulePolicyIntervalPeriodic)
+		err := b.DecodeMessage(msg)
+		m.PeriodType = &SdkSchedulePolicyInterval_Periodic{msg}
+		return true, err
+	default:
+		return false, nil
+	}
+}
+
+func _SdkSchedulePolicyInterval_OneofSizer(msg proto.Message) (n int) {
+	m := msg.(*SdkSchedulePolicyInterval)
+	// period_type
+	switch x := m.PeriodType.(type) {
+	case *SdkSchedulePolicyInterval_Daily:
+		s := proto.Size(x.Daily)
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case *SdkSchedulePolicyInterval_Weekly:
+		s := proto.Size(x.Weekly)
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case *SdkSchedulePolicyInterval_Monthly:
+		s := proto.Size(x.Monthly)
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case *SdkSchedulePolicyInterval_Periodic:
+		s := proto.Size(x.Periodic)
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	return n
+}
+
+// Defines a schedule policy
+type SdkSchedulePolicy struct {
+	// Name of the schedule policy
+	Name string `protobuf:"bytes,1,opt,name=name" json:"name,omitempty"`
+	// Schedule policies
+	Schedules            []*SdkSchedulePolicyInterval `protobuf:"bytes,2,rep,name=schedules" json:"schedules,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                     `json:"-"`
+	XXX_unrecognized     []byte                       `json:"-"`
+	XXX_sizecache        int32                        `json:"-"`
+}
+
+func (m *SdkSchedulePolicy) Reset()         { *m = SdkSchedulePolicy{} }
+func (m *SdkSchedulePolicy) String() string { return proto.CompactTextString(m) }
+func (*SdkSchedulePolicy) ProtoMessage()    {}
+func (*SdkSchedulePolicy) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{80}
+}
+func (m *SdkSchedulePolicy) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkSchedulePolicy.Unmarshal(m, b)
+}
+func (m *SdkSchedulePolicy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkSchedulePolicy.Marshal(b, m, deterministic)
+}
+func (dst *SdkSchedulePolicy) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkSchedulePolicy.Merge(dst, src)
+}
+func (m *SdkSchedulePolicy) XXX_Size() int {
+	return xxx_messageInfo_SdkSchedulePolicy.Size(m)
+}
+func (m *SdkSchedulePolicy) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkSchedulePolicy.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkSchedulePolicy proto.InternalMessageInfo
+
+func (m *SdkSchedulePolicy) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+func (m *SdkSchedulePolicy) GetSchedules() []*SdkSchedulePolicyInterval {
+	if m != nil {
+		return m.Schedules
+	}
+	return nil
+}
+
+// Defines a request to create credentials
+type SdkCredentialCreateRequest struct {
+	// Name of the credential
+	Name string `protobuf:"bytes,1,opt,name=name" json:"name,omitempty"`
+	// (optional) Name of bucket
+	Bucket string `protobuf:"bytes,2,opt,name=bucket" json:"bucket,omitempty"`
+	// (optional) Key used to encrypt the data
+	EncryptionKey string `protobuf:"bytes,3,opt,name=encryption_key,json=encryptionKey" json:"encryption_key,omitempty"`
+	// Ownership of the credential. Collaborators and groups may be
+	// added here with their appropriate ACLS.
+	Ownership *Ownership `protobuf:"bytes,4,opt,name=ownership" json:"ownership,omitempty"`
+	// Start at field number 200 to allow for expansion
+	//
+	// Types that are valid to be assigned to CredentialType:
+	//	*SdkCredentialCreateRequest_AwsCredential
+	//	*SdkCredentialCreateRequest_AzureCredential
+	//	*SdkCredentialCreateRequest_GoogleCredential
+	CredentialType       isSdkCredentialCreateRequest_CredentialType `protobuf_oneof:"credential_type"`
+	XXX_NoUnkeyedLiteral struct{}                                    `json:"-"`
+	XXX_unrecognized     []byte                                      `json:"-"`
+	XXX_sizecache        int32                                       `json:"-"`
+}
+
+func (m *SdkCredentialCreateRequest) Reset()         { *m = SdkCredentialCreateRequest{} }
+func (m *SdkCredentialCreateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCredentialCreateRequest) ProtoMessage()    {}
+func (*SdkCredentialCreateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{81}
+}
+func (m *SdkCredentialCreateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCredentialCreateRequest.Unmarshal(m, b)
+}
+func (m *SdkCredentialCreateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCredentialCreateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCredentialCreateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCredentialCreateRequest.Merge(dst, src)
+}
+func (m *SdkCredentialCreateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCredentialCreateRequest.Size(m)
+}
+func (m *SdkCredentialCreateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCredentialCreateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCredentialCreateRequest proto.InternalMessageInfo
+
+type isSdkCredentialCreateRequest_CredentialType interface {
+	isSdkCredentialCreateRequest_CredentialType()
+}
+
+type SdkCredentialCreateRequest_AwsCredential struct {
+	AwsCredential *SdkAwsCredentialRequest `protobuf:"bytes,200,opt,name=aws_credential,json=awsCredential,oneof"`
+}
+type SdkCredentialCreateRequest_AzureCredential struct {
+	AzureCredential *SdkAzureCredentialRequest `protobuf:"bytes,201,opt,name=azure_credential,json=azureCredential,oneof"`
+}
+type SdkCredentialCreateRequest_GoogleCredential struct {
+	GoogleCredential *SdkGoogleCredentialRequest `protobuf:"bytes,202,opt,name=google_credential,json=googleCredential,oneof"`
+}
+
+func (*SdkCredentialCreateRequest_AwsCredential) isSdkCredentialCreateRequest_CredentialType()    {}
+func (*SdkCredentialCreateRequest_AzureCredential) isSdkCredentialCreateRequest_CredentialType()  {}
+func (*SdkCredentialCreateRequest_GoogleCredential) isSdkCredentialCreateRequest_CredentialType() {}
+
+func (m *SdkCredentialCreateRequest) GetCredentialType() isSdkCredentialCreateRequest_CredentialType {
+	if m != nil {
+		return m.CredentialType
+	}
+	return nil
+}
+
+func (m *SdkCredentialCreateRequest) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+func (m *SdkCredentialCreateRequest) GetBucket() string {
+	if m != nil {
+		return m.Bucket
+	}
+	return ""
+}
+
+func (m *SdkCredentialCreateRequest) GetEncryptionKey() string {
+	if m != nil {
+		return m.EncryptionKey
+	}
+	return ""
+}
+
+func (m *SdkCredentialCreateRequest) GetOwnership() *Ownership {
+	if m != nil {
+		return m.Ownership
+	}
+	return nil
+}
+
+func (m *SdkCredentialCreateRequest) GetAwsCredential() *SdkAwsCredentialRequest {
+	if x, ok := m.GetCredentialType().(*SdkCredentialCreateRequest_AwsCredential); ok {
+		return x.AwsCredential
+	}
+	return nil
+}
+
+func (m *SdkCredentialCreateRequest) GetAzureCredential() *SdkAzureCredentialRequest {
+	if x, ok := m.GetCredentialType().(*SdkCredentialCreateRequest_AzureCredential); ok {
+		return x.AzureCredential
+	}
+	return nil
+}
+
+func (m *SdkCredentialCreateRequest) GetGoogleCredential() *SdkGoogleCredentialRequest {
+	if x, ok := m.GetCredentialType().(*SdkCredentialCreateRequest_GoogleCredential); ok {
+		return x.GoogleCredential
+	}
+	return nil
+}
+
+// XXX_OneofFuncs is for the internal use of the proto package.
+func (*SdkCredentialCreateRequest) XXX_OneofFuncs() (func(msg proto.Message, b *proto.Buffer) error, func(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error), func(msg proto.Message) (n int), []interface{}) {
+	return _SdkCredentialCreateRequest_OneofMarshaler, _SdkCredentialCreateRequest_OneofUnmarshaler, _SdkCredentialCreateRequest_OneofSizer, []interface{}{
+		(*SdkCredentialCreateRequest_AwsCredential)(nil),
+		(*SdkCredentialCreateRequest_AzureCredential)(nil),
+		(*SdkCredentialCreateRequest_GoogleCredential)(nil),
+	}
+}
+
+func _SdkCredentialCreateRequest_OneofMarshaler(msg proto.Message, b *proto.Buffer) error {
+	m := msg.(*SdkCredentialCreateRequest)
+	// credential_type
+	switch x := m.CredentialType.(type) {
+	case *SdkCredentialCreateRequest_AwsCredential:
+		b.EncodeVarint(200<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.AwsCredential); err != nil {
+			return err
+		}
+	case *SdkCredentialCreateRequest_AzureCredential:
+		b.EncodeVarint(201<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.AzureCredential); err != nil {
+			return err
+		}
+	case *SdkCredentialCreateRequest_GoogleCredential:
+		b.EncodeVarint(202<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.GoogleCredential); err != nil {
+			return err
+		}
+	case nil:
+	default:
+		return fmt.Errorf("SdkCredentialCreateRequest.CredentialType has unexpected type %T", x)
+	}
+	return nil
+}
+
+func _SdkCredentialCreateRequest_OneofUnmarshaler(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error) {
+	m := msg.(*SdkCredentialCreateRequest)
+	switch tag {
+	case 200: // credential_type.aws_credential
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkAwsCredentialRequest)
+		err := b.DecodeMessage(msg)
+		m.CredentialType = &SdkCredentialCreateRequest_AwsCredential{msg}
+		return true, err
+	case 201: // credential_type.azure_credential
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkAzureCredentialRequest)
+		err := b.DecodeMessage(msg)
+		m.CredentialType = &SdkCredentialCreateRequest_AzureCredential{msg}
+		return true, err
+	case 202: // credential_type.google_credential
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkGoogleCredentialRequest)
+		err := b.DecodeMessage(msg)
+		m.CredentialType = &SdkCredentialCreateRequest_GoogleCredential{msg}
+		return true, err
+	default:
+		return false, nil
+	}
+}
+
+func _SdkCredentialCreateRequest_OneofSizer(msg proto.Message) (n int) {
+	m := msg.(*SdkCredentialCreateRequest)
+	// credential_type
+	switch x := m.CredentialType.(type) {
+	case *SdkCredentialCreateRequest_AwsCredential:
+		s := proto.Size(x.AwsCredential)
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case *SdkCredentialCreateRequest_AzureCredential:
+		s := proto.Size(x.AzureCredential)
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case *SdkCredentialCreateRequest_GoogleCredential:
+		s := proto.Size(x.GoogleCredential)
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	return n
+}
+
+// Defines a response from creating a credential
+type SdkCredentialCreateResponse struct {
+	// Id of the credentials
+	CredentialId         string   `protobuf:"bytes,1,opt,name=credential_id,json=credentialId" json:"credential_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCredentialCreateResponse) Reset()         { *m = SdkCredentialCreateResponse{} }
+func (m *SdkCredentialCreateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCredentialCreateResponse) ProtoMessage()    {}
+func (*SdkCredentialCreateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{82}
+}
+func (m *SdkCredentialCreateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCredentialCreateResponse.Unmarshal(m, b)
+}
+func (m *SdkCredentialCreateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCredentialCreateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCredentialCreateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCredentialCreateResponse.Merge(dst, src)
+}
+func (m *SdkCredentialCreateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCredentialCreateResponse.Size(m)
+}
+func (m *SdkCredentialCreateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCredentialCreateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCredentialCreateResponse proto.InternalMessageInfo
+
+func (m *SdkCredentialCreateResponse) GetCredentialId() string {
+	if m != nil {
+		return m.CredentialId
+	}
+	return ""
+}
+
+// Defines credentials for Aws/S3 endpoints
+type SdkAwsCredentialRequest struct {
+	// Access key
+	AccessKey string `protobuf:"bytes,1,opt,name=access_key,json=accessKey" json:"access_key,omitempty"`
+	// Secret key
+	SecretKey string `protobuf:"bytes,2,opt,name=secret_key,json=secretKey" json:"secret_key,omitempty"`
+	// Endpoint
+	Endpoint string `protobuf:"bytes,3,opt,name=endpoint" json:"endpoint,omitempty"`
+	// Region
+	Region string `protobuf:"bytes,4,opt,name=region" json:"region,omitempty"`
+	// (optional) Disable SSL connection
+	DisableSsl           bool     `protobuf:"varint,5,opt,name=disable_ssl,json=disableSsl" json:"disable_ssl,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkAwsCredentialRequest) Reset()         { *m = SdkAwsCredentialRequest{} }
+func (m *SdkAwsCredentialRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkAwsCredentialRequest) ProtoMessage()    {}
+func (*SdkAwsCredentialRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{83}
+}
+func (m *SdkAwsCredentialRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkAwsCredentialRequest.Unmarshal(m, b)
+}
+func (m *SdkAwsCredentialRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkAwsCredentialRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkAwsCredentialRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkAwsCredentialRequest.Merge(dst, src)
+}
+func (m *SdkAwsCredentialRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkAwsCredentialRequest.Size(m)
+}
+func (m *SdkAwsCredentialRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkAwsCredentialRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkAwsCredentialRequest proto.InternalMessageInfo
+
+func (m *SdkAwsCredentialRequest) GetAccessKey() string {
+	if m != nil {
+		return m.AccessKey
+	}
+	return ""
+}
+
+func (m *SdkAwsCredentialRequest) GetSecretKey() string {
+	if m != nil {
+		return m.SecretKey
+	}
+	return ""
+}
+
+func (m *SdkAwsCredentialRequest) GetEndpoint() string {
+	if m != nil {
+		return m.Endpoint
+	}
+	return ""
+}
+
+func (m *SdkAwsCredentialRequest) GetRegion() string {
+	if m != nil {
+		return m.Region
+	}
+	return ""
+}
+
+func (m *SdkAwsCredentialRequest) GetDisableSsl() bool {
+	if m != nil {
+		return m.DisableSsl
+	}
+	return false
+}
+
+// Defines credentials for Azure
+type SdkAzureCredentialRequest struct {
+	// Account name
+	AccountName string `protobuf:"bytes,1,opt,name=account_name,json=accountName" json:"account_name,omitempty"`
+	// Account key
+	AccountKey           string   `protobuf:"bytes,2,opt,name=account_key,json=accountKey" json:"account_key,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkAzureCredentialRequest) Reset()         { *m = SdkAzureCredentialRequest{} }
+func (m *SdkAzureCredentialRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkAzureCredentialRequest) ProtoMessage()    {}
+func (*SdkAzureCredentialRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{84}
+}
+func (m *SdkAzureCredentialRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkAzureCredentialRequest.Unmarshal(m, b)
+}
+func (m *SdkAzureCredentialRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkAzureCredentialRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkAzureCredentialRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkAzureCredentialRequest.Merge(dst, src)
+}
+func (m *SdkAzureCredentialRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkAzureCredentialRequest.Size(m)
+}
+func (m *SdkAzureCredentialRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkAzureCredentialRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkAzureCredentialRequest proto.InternalMessageInfo
+
+func (m *SdkAzureCredentialRequest) GetAccountName() string {
+	if m != nil {
+		return m.AccountName
+	}
+	return ""
+}
+
+func (m *SdkAzureCredentialRequest) GetAccountKey() string {
+	if m != nil {
+		return m.AccountKey
+	}
+	return ""
+}
+
+// Defines credentials for Google
+type SdkGoogleCredentialRequest struct {
+	// Project ID
+	ProjectId string `protobuf:"bytes,1,opt,name=project_id,json=projectId" json:"project_id,omitempty"`
+	// JSON Key
+	JsonKey              string   `protobuf:"bytes,2,opt,name=json_key,json=jsonKey" json:"json_key,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkGoogleCredentialRequest) Reset()         { *m = SdkGoogleCredentialRequest{} }
+func (m *SdkGoogleCredentialRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkGoogleCredentialRequest) ProtoMessage()    {}
+func (*SdkGoogleCredentialRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{85}
+}
+func (m *SdkGoogleCredentialRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkGoogleCredentialRequest.Unmarshal(m, b)
+}
+func (m *SdkGoogleCredentialRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkGoogleCredentialRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkGoogleCredentialRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkGoogleCredentialRequest.Merge(dst, src)
+}
+func (m *SdkGoogleCredentialRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkGoogleCredentialRequest.Size(m)
+}
+func (m *SdkGoogleCredentialRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkGoogleCredentialRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkGoogleCredentialRequest proto.InternalMessageInfo
+
+func (m *SdkGoogleCredentialRequest) GetProjectId() string {
+	if m != nil {
+		return m.ProjectId
+	}
+	return ""
+}
+
+func (m *SdkGoogleCredentialRequest) GetJsonKey() string {
+	if m != nil {
+		return m.JsonKey
+	}
+	return ""
+}
+
+// Defines the response for AWS/S3 credentials
+type SdkAwsCredentialResponse struct {
+	// Access key
+	AccessKey string `protobuf:"bytes,2,opt,name=access_key,json=accessKey" json:"access_key,omitempty"`
+	// Endpoint
+	Endpoint string `protobuf:"bytes,3,opt,name=endpoint" json:"endpoint,omitempty"`
+	// Region
+	Region string `protobuf:"bytes,4,opt,name=region" json:"region,omitempty"`
+	// (optional) Disable SSL connection
+	DisableSsl           bool     `protobuf:"varint,5,opt,name=disable_ssl,json=disableSsl" json:"disable_ssl,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkAwsCredentialResponse) Reset()         { *m = SdkAwsCredentialResponse{} }
+func (m *SdkAwsCredentialResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkAwsCredentialResponse) ProtoMessage()    {}
+func (*SdkAwsCredentialResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{86}
+}
+func (m *SdkAwsCredentialResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkAwsCredentialResponse.Unmarshal(m, b)
+}
+func (m *SdkAwsCredentialResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkAwsCredentialResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkAwsCredentialResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkAwsCredentialResponse.Merge(dst, src)
+}
+func (m *SdkAwsCredentialResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkAwsCredentialResponse.Size(m)
+}
+func (m *SdkAwsCredentialResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkAwsCredentialResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkAwsCredentialResponse proto.InternalMessageInfo
+
+func (m *SdkAwsCredentialResponse) GetAccessKey() string {
+	if m != nil {
+		return m.AccessKey
+	}
+	return ""
+}
+
+func (m *SdkAwsCredentialResponse) GetEndpoint() string {
+	if m != nil {
+		return m.Endpoint
+	}
+	return ""
+}
+
+func (m *SdkAwsCredentialResponse) GetRegion() string {
+	if m != nil {
+		return m.Region
+	}
+	return ""
+}
+
+func (m *SdkAwsCredentialResponse) GetDisableSsl() bool {
+	if m != nil {
+		return m.DisableSsl
+	}
+	return false
+}
+
+// Defines the response for Azure credentials
+type SdkAzureCredentialResponse struct {
+	// Account name
+	AccountName          string   `protobuf:"bytes,2,opt,name=account_name,json=accountName" json:"account_name,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkAzureCredentialResponse) Reset()         { *m = SdkAzureCredentialResponse{} }
+func (m *SdkAzureCredentialResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkAzureCredentialResponse) ProtoMessage()    {}
+func (*SdkAzureCredentialResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{87}
+}
+func (m *SdkAzureCredentialResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkAzureCredentialResponse.Unmarshal(m, b)
+}
+func (m *SdkAzureCredentialResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkAzureCredentialResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkAzureCredentialResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkAzureCredentialResponse.Merge(dst, src)
+}
+func (m *SdkAzureCredentialResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkAzureCredentialResponse.Size(m)
+}
+func (m *SdkAzureCredentialResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkAzureCredentialResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkAzureCredentialResponse proto.InternalMessageInfo
+
+func (m *SdkAzureCredentialResponse) GetAccountName() string {
+	if m != nil {
+		return m.AccountName
+	}
+	return ""
+}
+
+// Defines the response for Google credentials
+type SdkGoogleCredentialResponse struct {
+	// Project ID
+	ProjectId            string   `protobuf:"bytes,2,opt,name=project_id,json=projectId" json:"project_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkGoogleCredentialResponse) Reset()         { *m = SdkGoogleCredentialResponse{} }
+func (m *SdkGoogleCredentialResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkGoogleCredentialResponse) ProtoMessage()    {}
+func (*SdkGoogleCredentialResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{88}
+}
+func (m *SdkGoogleCredentialResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkGoogleCredentialResponse.Unmarshal(m, b)
+}
+func (m *SdkGoogleCredentialResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkGoogleCredentialResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkGoogleCredentialResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkGoogleCredentialResponse.Merge(dst, src)
+}
+func (m *SdkGoogleCredentialResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkGoogleCredentialResponse.Size(m)
+}
+func (m *SdkGoogleCredentialResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkGoogleCredentialResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkGoogleCredentialResponse proto.InternalMessageInfo
+
+func (m *SdkGoogleCredentialResponse) GetProjectId() string {
+	if m != nil {
+		return m.ProjectId
+	}
+	return ""
+}
+
+// Empty request
+type SdkCredentialEnumerateRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCredentialEnumerateRequest) Reset()         { *m = SdkCredentialEnumerateRequest{} }
+func (m *SdkCredentialEnumerateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCredentialEnumerateRequest) ProtoMessage()    {}
+func (*SdkCredentialEnumerateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{89}
+}
+func (m *SdkCredentialEnumerateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCredentialEnumerateRequest.Unmarshal(m, b)
+}
+func (m *SdkCredentialEnumerateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCredentialEnumerateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCredentialEnumerateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCredentialEnumerateRequest.Merge(dst, src)
+}
+func (m *SdkCredentialEnumerateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCredentialEnumerateRequest.Size(m)
+}
+func (m *SdkCredentialEnumerateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCredentialEnumerateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCredentialEnumerateRequest proto.InternalMessageInfo
+
+// Defines response for a enumeration of credentials
+type SdkCredentialEnumerateResponse struct {
+	// List of credentials
+	CredentialIds        []string `protobuf:"bytes,1,rep,name=credential_ids,json=credentialIds" json:"credential_ids,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCredentialEnumerateResponse) Reset()         { *m = SdkCredentialEnumerateResponse{} }
+func (m *SdkCredentialEnumerateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCredentialEnumerateResponse) ProtoMessage()    {}
+func (*SdkCredentialEnumerateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{90}
+}
+func (m *SdkCredentialEnumerateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCredentialEnumerateResponse.Unmarshal(m, b)
+}
+func (m *SdkCredentialEnumerateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCredentialEnumerateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCredentialEnumerateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCredentialEnumerateResponse.Merge(dst, src)
+}
+func (m *SdkCredentialEnumerateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCredentialEnumerateResponse.Size(m)
+}
+func (m *SdkCredentialEnumerateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCredentialEnumerateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCredentialEnumerateResponse proto.InternalMessageInfo
+
+func (m *SdkCredentialEnumerateResponse) GetCredentialIds() []string {
+	if m != nil {
+		return m.CredentialIds
+	}
+	return nil
+}
+
+// Defines the request to inspection for credentials
+type SdkCredentialInspectRequest struct {
+	// Id of the credential
+	CredentialId         string   `protobuf:"bytes,1,opt,name=credential_id,json=credentialId" json:"credential_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCredentialInspectRequest) Reset()         { *m = SdkCredentialInspectRequest{} }
+func (m *SdkCredentialInspectRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCredentialInspectRequest) ProtoMessage()    {}
+func (*SdkCredentialInspectRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{91}
+}
+func (m *SdkCredentialInspectRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCredentialInspectRequest.Unmarshal(m, b)
+}
+func (m *SdkCredentialInspectRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCredentialInspectRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCredentialInspectRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCredentialInspectRequest.Merge(dst, src)
+}
+func (m *SdkCredentialInspectRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCredentialInspectRequest.Size(m)
+}
+func (m *SdkCredentialInspectRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCredentialInspectRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCredentialInspectRequest proto.InternalMessageInfo
+
+func (m *SdkCredentialInspectRequest) GetCredentialId() string {
+	if m != nil {
+		return m.CredentialId
+	}
+	return ""
+}
+
+// Defines the response to an inspection of a credential.
+// This response uses OneOf proto style. Depending on your programming language
+// you will need to check if the value of credential_type is one of the ones below.
+type SdkCredentialInspectResponse struct {
+	// Credential id
+	CredentialId string `protobuf:"bytes,1,opt,name=credential_id,json=credentialId" json:"credential_id,omitempty"`
+	// Name of the credential
+	Name string `protobuf:"bytes,2,opt,name=name" json:"name,omitempty"`
+	// (optional) Name of bucket
+	Bucket string `protobuf:"bytes,3,opt,name=bucket" json:"bucket,omitempty"`
+	// Ownership of the credential
+	Ownership *Ownership `protobuf:"bytes,4,opt,name=ownership" json:"ownership,omitempty"`
+	// Start at field number 200 for expansion support
+	//
+	// Types that are valid to be assigned to CredentialType:
+	//	*SdkCredentialInspectResponse_AwsCredential
+	//	*SdkCredentialInspectResponse_AzureCredential
+	//	*SdkCredentialInspectResponse_GoogleCredential
+	CredentialType       isSdkCredentialInspectResponse_CredentialType `protobuf_oneof:"credential_type"`
+	XXX_NoUnkeyedLiteral struct{}                                      `json:"-"`
+	XXX_unrecognized     []byte                                        `json:"-"`
+	XXX_sizecache        int32                                         `json:"-"`
+}
+
+func (m *SdkCredentialInspectResponse) Reset()         { *m = SdkCredentialInspectResponse{} }
+func (m *SdkCredentialInspectResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCredentialInspectResponse) ProtoMessage()    {}
+func (*SdkCredentialInspectResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{92}
+}
+func (m *SdkCredentialInspectResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCredentialInspectResponse.Unmarshal(m, b)
+}
+func (m *SdkCredentialInspectResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCredentialInspectResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCredentialInspectResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCredentialInspectResponse.Merge(dst, src)
+}
+func (m *SdkCredentialInspectResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCredentialInspectResponse.Size(m)
+}
+func (m *SdkCredentialInspectResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCredentialInspectResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCredentialInspectResponse proto.InternalMessageInfo
+
+type isSdkCredentialInspectResponse_CredentialType interface {
+	isSdkCredentialInspectResponse_CredentialType()
+}
+
+type SdkCredentialInspectResponse_AwsCredential struct {
+	AwsCredential *SdkAwsCredentialResponse `protobuf:"bytes,200,opt,name=aws_credential,json=awsCredential,oneof"`
+}
+type SdkCredentialInspectResponse_AzureCredential struct {
+	AzureCredential *SdkAzureCredentialResponse `protobuf:"bytes,201,opt,name=azure_credential,json=azureCredential,oneof"`
+}
+type SdkCredentialInspectResponse_GoogleCredential struct {
+	GoogleCredential *SdkGoogleCredentialResponse `protobuf:"bytes,202,opt,name=google_credential,json=googleCredential,oneof"`
+}
+
+func (*SdkCredentialInspectResponse_AwsCredential) isSdkCredentialInspectResponse_CredentialType()   {}
+func (*SdkCredentialInspectResponse_AzureCredential) isSdkCredentialInspectResponse_CredentialType() {}
+func (*SdkCredentialInspectResponse_GoogleCredential) isSdkCredentialInspectResponse_CredentialType() {
+}
+
+func (m *SdkCredentialInspectResponse) GetCredentialType() isSdkCredentialInspectResponse_CredentialType {
+	if m != nil {
+		return m.CredentialType
+	}
+	return nil
+}
+
+func (m *SdkCredentialInspectResponse) GetCredentialId() string {
+	if m != nil {
+		return m.CredentialId
+	}
+	return ""
+}
+
+func (m *SdkCredentialInspectResponse) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+func (m *SdkCredentialInspectResponse) GetBucket() string {
+	if m != nil {
+		return m.Bucket
+	}
+	return ""
+}
+
+func (m *SdkCredentialInspectResponse) GetOwnership() *Ownership {
+	if m != nil {
+		return m.Ownership
+	}
+	return nil
+}
+
+func (m *SdkCredentialInspectResponse) GetAwsCredential() *SdkAwsCredentialResponse {
+	if x, ok := m.GetCredentialType().(*SdkCredentialInspectResponse_AwsCredential); ok {
+		return x.AwsCredential
+	}
+	return nil
+}
+
+func (m *SdkCredentialInspectResponse) GetAzureCredential() *SdkAzureCredentialResponse {
+	if x, ok := m.GetCredentialType().(*SdkCredentialInspectResponse_AzureCredential); ok {
+		return x.AzureCredential
+	}
+	return nil
+}
+
+func (m *SdkCredentialInspectResponse) GetGoogleCredential() *SdkGoogleCredentialResponse {
+	if x, ok := m.GetCredentialType().(*SdkCredentialInspectResponse_GoogleCredential); ok {
+		return x.GoogleCredential
+	}
+	return nil
+}
+
+// XXX_OneofFuncs is for the internal use of the proto package.
+func (*SdkCredentialInspectResponse) XXX_OneofFuncs() (func(msg proto.Message, b *proto.Buffer) error, func(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error), func(msg proto.Message) (n int), []interface{}) {
+	return _SdkCredentialInspectResponse_OneofMarshaler, _SdkCredentialInspectResponse_OneofUnmarshaler, _SdkCredentialInspectResponse_OneofSizer, []interface{}{
+		(*SdkCredentialInspectResponse_AwsCredential)(nil),
+		(*SdkCredentialInspectResponse_AzureCredential)(nil),
+		(*SdkCredentialInspectResponse_GoogleCredential)(nil),
+	}
+}
+
+func _SdkCredentialInspectResponse_OneofMarshaler(msg proto.Message, b *proto.Buffer) error {
+	m := msg.(*SdkCredentialInspectResponse)
+	// credential_type
+	switch x := m.CredentialType.(type) {
+	case *SdkCredentialInspectResponse_AwsCredential:
+		b.EncodeVarint(200<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.AwsCredential); err != nil {
+			return err
+		}
+	case *SdkCredentialInspectResponse_AzureCredential:
+		b.EncodeVarint(201<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.AzureCredential); err != nil {
+			return err
+		}
+	case *SdkCredentialInspectResponse_GoogleCredential:
+		b.EncodeVarint(202<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.GoogleCredential); err != nil {
+			return err
+		}
+	case nil:
+	default:
+		return fmt.Errorf("SdkCredentialInspectResponse.CredentialType has unexpected type %T", x)
+	}
+	return nil
+}
+
+func _SdkCredentialInspectResponse_OneofUnmarshaler(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error) {
+	m := msg.(*SdkCredentialInspectResponse)
+	switch tag {
+	case 200: // credential_type.aws_credential
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkAwsCredentialResponse)
+		err := b.DecodeMessage(msg)
+		m.CredentialType = &SdkCredentialInspectResponse_AwsCredential{msg}
+		return true, err
+	case 201: // credential_type.azure_credential
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkAzureCredentialResponse)
+		err := b.DecodeMessage(msg)
+		m.CredentialType = &SdkCredentialInspectResponse_AzureCredential{msg}
+		return true, err
+	case 202: // credential_type.google_credential
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkGoogleCredentialResponse)
+		err := b.DecodeMessage(msg)
+		m.CredentialType = &SdkCredentialInspectResponse_GoogleCredential{msg}
+		return true, err
+	default:
+		return false, nil
+	}
+}
+
+func _SdkCredentialInspectResponse_OneofSizer(msg proto.Message) (n int) {
+	m := msg.(*SdkCredentialInspectResponse)
+	// credential_type
+	switch x := m.CredentialType.(type) {
+	case *SdkCredentialInspectResponse_AwsCredential:
+		s := proto.Size(x.AwsCredential)
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case *SdkCredentialInspectResponse_AzureCredential:
+		s := proto.Size(x.AzureCredential)
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case *SdkCredentialInspectResponse_GoogleCredential:
+		s := proto.Size(x.GoogleCredential)
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	return n
+}
+
+// Defines the request to delete credentials
+type SdkCredentialDeleteRequest struct {
+	// Id for credentials
+	CredentialId         string   `protobuf:"bytes,1,opt,name=credential_id,json=credentialId" json:"credential_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCredentialDeleteRequest) Reset()         { *m = SdkCredentialDeleteRequest{} }
+func (m *SdkCredentialDeleteRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCredentialDeleteRequest) ProtoMessage()    {}
+func (*SdkCredentialDeleteRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{93}
+}
+func (m *SdkCredentialDeleteRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCredentialDeleteRequest.Unmarshal(m, b)
+}
+func (m *SdkCredentialDeleteRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCredentialDeleteRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCredentialDeleteRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCredentialDeleteRequest.Merge(dst, src)
+}
+func (m *SdkCredentialDeleteRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCredentialDeleteRequest.Size(m)
+}
+func (m *SdkCredentialDeleteRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCredentialDeleteRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCredentialDeleteRequest proto.InternalMessageInfo
+
+func (m *SdkCredentialDeleteRequest) GetCredentialId() string {
+	if m != nil {
+		return m.CredentialId
+	}
+	return ""
+}
+
+// Empty response
+type SdkCredentialDeleteResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCredentialDeleteResponse) Reset()         { *m = SdkCredentialDeleteResponse{} }
+func (m *SdkCredentialDeleteResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCredentialDeleteResponse) ProtoMessage()    {}
+func (*SdkCredentialDeleteResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{94}
+}
+func (m *SdkCredentialDeleteResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCredentialDeleteResponse.Unmarshal(m, b)
+}
+func (m *SdkCredentialDeleteResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCredentialDeleteResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCredentialDeleteResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCredentialDeleteResponse.Merge(dst, src)
+}
+func (m *SdkCredentialDeleteResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCredentialDeleteResponse.Size(m)
+}
+func (m *SdkCredentialDeleteResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCredentialDeleteResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCredentialDeleteResponse proto.InternalMessageInfo
+
+// Defines a request to validate credentials
+type SdkCredentialValidateRequest struct {
+	// Id of the credentials
+	CredentialId         string   `protobuf:"bytes,1,opt,name=credential_id,json=credentialId" json:"credential_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCredentialValidateRequest) Reset()         { *m = SdkCredentialValidateRequest{} }
+func (m *SdkCredentialValidateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCredentialValidateRequest) ProtoMessage()    {}
+func (*SdkCredentialValidateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{95}
+}
+func (m *SdkCredentialValidateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCredentialValidateRequest.Unmarshal(m, b)
+}
+func (m *SdkCredentialValidateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCredentialValidateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCredentialValidateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCredentialValidateRequest.Merge(dst, src)
+}
+func (m *SdkCredentialValidateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCredentialValidateRequest.Size(m)
+}
+func (m *SdkCredentialValidateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCredentialValidateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCredentialValidateRequest proto.InternalMessageInfo
+
+func (m *SdkCredentialValidateRequest) GetCredentialId() string {
+	if m != nil {
+		return m.CredentialId
+	}
+	return ""
+}
+
+// Empty response
+type SdkCredentialValidateResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCredentialValidateResponse) Reset()         { *m = SdkCredentialValidateResponse{} }
+func (m *SdkCredentialValidateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCredentialValidateResponse) ProtoMessage()    {}
+func (*SdkCredentialValidateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{96}
+}
+func (m *SdkCredentialValidateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCredentialValidateResponse.Unmarshal(m, b)
+}
+func (m *SdkCredentialValidateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCredentialValidateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCredentialValidateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCredentialValidateResponse.Merge(dst, src)
+}
+func (m *SdkCredentialValidateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCredentialValidateResponse.Size(m)
+}
+func (m *SdkCredentialValidateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCredentialValidateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCredentialValidateResponse proto.InternalMessageInfo
+
+// Options to attach device
+type SdkVolumeAttachOptions struct {
+	// Indicates the name of the secret stored in a secret store
+	// In case of Hashicorp's Vault, it will be the key from the key-value pair stored in its kv backend.
+	// In case of Kubernetes secret, it is the name of the secret object itself
+	SecretName string `protobuf:"bytes,1,opt,name=secret_name,json=secretName" json:"secret_name,omitempty"`
+	// In case of Kubernetes, this will be the key stored in the Kubernetes secret
+	SecretKey string `protobuf:"bytes,2,opt,name=secret_key,json=secretKey" json:"secret_key,omitempty"`
+	// It indicates the additional context which could be used to retrieve the secret.
+	// In case of Kubernetes, this is the namespace in which the secret is created.
+	SecretContext        string   `protobuf:"bytes,3,opt,name=secret_context,json=secretContext" json:"secret_context,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeAttachOptions) Reset()         { *m = SdkVolumeAttachOptions{} }
+func (m *SdkVolumeAttachOptions) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeAttachOptions) ProtoMessage()    {}
+func (*SdkVolumeAttachOptions) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{97}
+}
+func (m *SdkVolumeAttachOptions) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeAttachOptions.Unmarshal(m, b)
+}
+func (m *SdkVolumeAttachOptions) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeAttachOptions.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeAttachOptions) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeAttachOptions.Merge(dst, src)
+}
+func (m *SdkVolumeAttachOptions) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeAttachOptions.Size(m)
+}
+func (m *SdkVolumeAttachOptions) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeAttachOptions.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeAttachOptions proto.InternalMessageInfo
+
+func (m *SdkVolumeAttachOptions) GetSecretName() string {
+	if m != nil {
+		return m.SecretName
+	}
+	return ""
+}
+
+func (m *SdkVolumeAttachOptions) GetSecretKey() string {
+	if m != nil {
+		return m.SecretKey
+	}
+	return ""
+}
+
+func (m *SdkVolumeAttachOptions) GetSecretContext() string {
+	if m != nil {
+		return m.SecretContext
+	}
+	return ""
+}
+
+// Defines a request to mount a volume to the node receiving this request
+type SdkVolumeMountRequest struct {
+	// Id of the volume
+	VolumeId string `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	// Mount path for mounting the volume.
+	MountPath string `protobuf:"bytes,2,opt,name=mount_path,json=mountPath" json:"mount_path,omitempty"`
+	// Options to attach device
+	Options *SdkVolumeAttachOptions `protobuf:"bytes,3,opt,name=options" json:"options,omitempty"`
+	// The following options are private to the driver plugin running the
+	// OpenStorage SDK. Contact your driver developer for any special
+	// values that need to be provided here.
+	DriverOptions        map[string]string `protobuf:"bytes,4,rep,name=driver_options,json=driverOptions" json:"driver_options,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *SdkVolumeMountRequest) Reset()         { *m = SdkVolumeMountRequest{} }
+func (m *SdkVolumeMountRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeMountRequest) ProtoMessage()    {}
+func (*SdkVolumeMountRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{98}
+}
+func (m *SdkVolumeMountRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeMountRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeMountRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeMountRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeMountRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeMountRequest.Merge(dst, src)
+}
+func (m *SdkVolumeMountRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeMountRequest.Size(m)
+}
+func (m *SdkVolumeMountRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeMountRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeMountRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeMountRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+func (m *SdkVolumeMountRequest) GetMountPath() string {
+	if m != nil {
+		return m.MountPath
+	}
+	return ""
+}
+
+func (m *SdkVolumeMountRequest) GetOptions() *SdkVolumeAttachOptions {
+	if m != nil {
+		return m.Options
+	}
+	return nil
+}
+
+func (m *SdkVolumeMountRequest) GetDriverOptions() map[string]string {
+	if m != nil {
+		return m.DriverOptions
+	}
+	return nil
+}
+
+// Empty response
+type SdkVolumeMountResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeMountResponse) Reset()         { *m = SdkVolumeMountResponse{} }
+func (m *SdkVolumeMountResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeMountResponse) ProtoMessage()    {}
+func (*SdkVolumeMountResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{99}
+}
+func (m *SdkVolumeMountResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeMountResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeMountResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeMountResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeMountResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeMountResponse.Merge(dst, src)
+}
+func (m *SdkVolumeMountResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeMountResponse.Size(m)
+}
+func (m *SdkVolumeMountResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeMountResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeMountResponse proto.InternalMessageInfo
+
+// Options to unmount device
+type SdkVolumeUnmountOptions struct {
+	// Delete the mount path on the node after unmounting
+	DeleteMountPath bool `protobuf:"varint,1,opt,name=delete_mount_path,json=deleteMountPath" json:"delete_mount_path,omitempty"`
+	// Do not wait for a delay before deleting path.
+	// Normally a storage driver may delay before deleting the mount path,
+	// which may be necessary to reduce the risk of race conditions. This
+	// choice will remove that delay. This value is only usable when
+	// `delete_mount_path` is set.
+	NoDelayBeforeDeletingMountPath bool     `protobuf:"varint,2,opt,name=no_delay_before_deleting_mount_path,json=noDelayBeforeDeletingMountPath" json:"no_delay_before_deleting_mount_path,omitempty"`
+	XXX_NoUnkeyedLiteral           struct{} `json:"-"`
+	XXX_unrecognized               []byte   `json:"-"`
+	XXX_sizecache                  int32    `json:"-"`
+}
+
+func (m *SdkVolumeUnmountOptions) Reset()         { *m = SdkVolumeUnmountOptions{} }
+func (m *SdkVolumeUnmountOptions) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeUnmountOptions) ProtoMessage()    {}
+func (*SdkVolumeUnmountOptions) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{100}
+}
+func (m *SdkVolumeUnmountOptions) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeUnmountOptions.Unmarshal(m, b)
+}
+func (m *SdkVolumeUnmountOptions) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeUnmountOptions.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeUnmountOptions) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeUnmountOptions.Merge(dst, src)
+}
+func (m *SdkVolumeUnmountOptions) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeUnmountOptions.Size(m)
+}
+func (m *SdkVolumeUnmountOptions) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeUnmountOptions.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeUnmountOptions proto.InternalMessageInfo
+
+func (m *SdkVolumeUnmountOptions) GetDeleteMountPath() bool {
+	if m != nil {
+		return m.DeleteMountPath
+	}
+	return false
+}
+
+func (m *SdkVolumeUnmountOptions) GetNoDelayBeforeDeletingMountPath() bool {
+	if m != nil {
+		return m.NoDelayBeforeDeletingMountPath
+	}
+	return false
+}
+
+// Defines a request to unmount a volume on the node receiving this request
+type SdkVolumeUnmountRequest struct {
+	// Id of volume
+	VolumeId string `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	// MountPath for device
+	MountPath string `protobuf:"bytes,2,opt,name=mount_path,json=mountPath" json:"mount_path,omitempty"`
+	// Options to unmount device
+	Options *SdkVolumeUnmountOptions `protobuf:"bytes,3,opt,name=options" json:"options,omitempty"`
+	// The following options are private to the driver plugin running the
+	// OpenStorage SDK. Contact your driver developer for any special
+	// values that need to be provided here.
+	DriverOptions        map[string]string `protobuf:"bytes,4,rep,name=driver_options,json=driverOptions" json:"driver_options,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *SdkVolumeUnmountRequest) Reset()         { *m = SdkVolumeUnmountRequest{} }
+func (m *SdkVolumeUnmountRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeUnmountRequest) ProtoMessage()    {}
+func (*SdkVolumeUnmountRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{101}
+}
+func (m *SdkVolumeUnmountRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeUnmountRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeUnmountRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeUnmountRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeUnmountRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeUnmountRequest.Merge(dst, src)
+}
+func (m *SdkVolumeUnmountRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeUnmountRequest.Size(m)
+}
+func (m *SdkVolumeUnmountRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeUnmountRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeUnmountRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeUnmountRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+func (m *SdkVolumeUnmountRequest) GetMountPath() string {
+	if m != nil {
+		return m.MountPath
+	}
+	return ""
+}
+
+func (m *SdkVolumeUnmountRequest) GetOptions() *SdkVolumeUnmountOptions {
+	if m != nil {
+		return m.Options
+	}
+	return nil
+}
+
+func (m *SdkVolumeUnmountRequest) GetDriverOptions() map[string]string {
+	if m != nil {
+		return m.DriverOptions
+	}
+	return nil
+}
+
+// Empty response
+type SdkVolumeUnmountResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeUnmountResponse) Reset()         { *m = SdkVolumeUnmountResponse{} }
+func (m *SdkVolumeUnmountResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeUnmountResponse) ProtoMessage()    {}
+func (*SdkVolumeUnmountResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{102}
+}
+func (m *SdkVolumeUnmountResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeUnmountResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeUnmountResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeUnmountResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeUnmountResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeUnmountResponse.Merge(dst, src)
+}
+func (m *SdkVolumeUnmountResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeUnmountResponse.Size(m)
+}
+func (m *SdkVolumeUnmountResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeUnmountResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeUnmountResponse proto.InternalMessageInfo
+
+// Defines a request to attach a volume to the node receiving this request
+type SdkVolumeAttachRequest struct {
+	// Id of volume
+	VolumeId string `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	// Options to attach device
+	Options *SdkVolumeAttachOptions `protobuf:"bytes,2,opt,name=options" json:"options,omitempty"`
+	// The following options are private to the driver plugin running the
+	// OpenStorage SDK. Contact your driver developer for any special
+	// values that need to be provided here.
+	DriverOptions        map[string]string `protobuf:"bytes,3,rep,name=driver_options,json=driverOptions" json:"driver_options,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *SdkVolumeAttachRequest) Reset()         { *m = SdkVolumeAttachRequest{} }
+func (m *SdkVolumeAttachRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeAttachRequest) ProtoMessage()    {}
+func (*SdkVolumeAttachRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{103}
+}
+func (m *SdkVolumeAttachRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeAttachRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeAttachRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeAttachRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeAttachRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeAttachRequest.Merge(dst, src)
+}
+func (m *SdkVolumeAttachRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeAttachRequest.Size(m)
+}
+func (m *SdkVolumeAttachRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeAttachRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeAttachRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeAttachRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+func (m *SdkVolumeAttachRequest) GetOptions() *SdkVolumeAttachOptions {
+	if m != nil {
+		return m.Options
+	}
+	return nil
+}
+
+func (m *SdkVolumeAttachRequest) GetDriverOptions() map[string]string {
+	if m != nil {
+		return m.DriverOptions
+	}
+	return nil
+}
+
+// Defines a response from the node which received the request to attach
+type SdkVolumeAttachResponse struct {
+	// Device path where device is exported
+	DevicePath           string   `protobuf:"bytes,1,opt,name=device_path,json=devicePath" json:"device_path,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeAttachResponse) Reset()         { *m = SdkVolumeAttachResponse{} }
+func (m *SdkVolumeAttachResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeAttachResponse) ProtoMessage()    {}
+func (*SdkVolumeAttachResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{104}
+}
+func (m *SdkVolumeAttachResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeAttachResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeAttachResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeAttachResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeAttachResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeAttachResponse.Merge(dst, src)
+}
+func (m *SdkVolumeAttachResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeAttachResponse.Size(m)
+}
+func (m *SdkVolumeAttachResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeAttachResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeAttachResponse proto.InternalMessageInfo
+
+func (m *SdkVolumeAttachResponse) GetDevicePath() string {
+	if m != nil {
+		return m.DevicePath
+	}
+	return ""
+}
+
+type SdkVolumeDetachOptions struct {
+	// Forcefully detach device from the kernel
+	Force bool `protobuf:"varint,1,opt,name=force" json:"force,omitempty"`
+	// Unmount the volume before detaching
+	UnmountBeforeDetach  bool     `protobuf:"varint,2,opt,name=unmount_before_detach,json=unmountBeforeDetach" json:"unmount_before_detach,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeDetachOptions) Reset()         { *m = SdkVolumeDetachOptions{} }
+func (m *SdkVolumeDetachOptions) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeDetachOptions) ProtoMessage()    {}
+func (*SdkVolumeDetachOptions) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{105}
+}
+func (m *SdkVolumeDetachOptions) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeDetachOptions.Unmarshal(m, b)
+}
+func (m *SdkVolumeDetachOptions) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeDetachOptions.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeDetachOptions) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeDetachOptions.Merge(dst, src)
+}
+func (m *SdkVolumeDetachOptions) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeDetachOptions.Size(m)
+}
+func (m *SdkVolumeDetachOptions) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeDetachOptions.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeDetachOptions proto.InternalMessageInfo
+
+func (m *SdkVolumeDetachOptions) GetForce() bool {
+	if m != nil {
+		return m.Force
+	}
+	return false
+}
+
+func (m *SdkVolumeDetachOptions) GetUnmountBeforeDetach() bool {
+	if m != nil {
+		return m.UnmountBeforeDetach
+	}
+	return false
+}
+
+// Defines a request to detach a volume
+type SdkVolumeDetachRequest struct {
+	// Id of the volume
+	VolumeId string `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	// Options to detach device
+	Options *SdkVolumeDetachOptions `protobuf:"bytes,2,opt,name=options" json:"options,omitempty"`
+	// The following options are private to the driver plugin running the
+	// OpenStorage SDK. Contact your driver developer for any special
+	// values that need to be provided here.
+	DriverOptions        map[string]string `protobuf:"bytes,3,rep,name=driver_options,json=driverOptions" json:"driver_options,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *SdkVolumeDetachRequest) Reset()         { *m = SdkVolumeDetachRequest{} }
+func (m *SdkVolumeDetachRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeDetachRequest) ProtoMessage()    {}
+func (*SdkVolumeDetachRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{106}
+}
+func (m *SdkVolumeDetachRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeDetachRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeDetachRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeDetachRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeDetachRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeDetachRequest.Merge(dst, src)
+}
+func (m *SdkVolumeDetachRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeDetachRequest.Size(m)
+}
+func (m *SdkVolumeDetachRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeDetachRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeDetachRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeDetachRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+func (m *SdkVolumeDetachRequest) GetOptions() *SdkVolumeDetachOptions {
+	if m != nil {
+		return m.Options
+	}
+	return nil
+}
+
+func (m *SdkVolumeDetachRequest) GetDriverOptions() map[string]string {
+	if m != nil {
+		return m.DriverOptions
+	}
+	return nil
+}
+
+// Empty response
+type SdkVolumeDetachResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeDetachResponse) Reset()         { *m = SdkVolumeDetachResponse{} }
+func (m *SdkVolumeDetachResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeDetachResponse) ProtoMessage()    {}
+func (*SdkVolumeDetachResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{107}
+}
+func (m *SdkVolumeDetachResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeDetachResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeDetachResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeDetachResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeDetachResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeDetachResponse.Merge(dst, src)
+}
+func (m *SdkVolumeDetachResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeDetachResponse.Size(m)
+}
+func (m *SdkVolumeDetachResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeDetachResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeDetachResponse proto.InternalMessageInfo
+
+// Defines a request to create a volume. Use OpenStorageVolume.Update()
+// to update any labels on the volume.
+type SdkVolumeCreateRequest struct {
+	// Unique name of the volume. This will be used for idempotency.
+	Name string `protobuf:"bytes,1,opt,name=name" json:"name,omitempty"`
+	// Volume specification
+	Spec *VolumeSpec `protobuf:"bytes,2,opt,name=spec" json:"spec,omitempty"`
+	// Labels to apply to the volume
+	Labels               map[string]string `protobuf:"bytes,3,rep,name=labels" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *SdkVolumeCreateRequest) Reset()         { *m = SdkVolumeCreateRequest{} }
+func (m *SdkVolumeCreateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeCreateRequest) ProtoMessage()    {}
+func (*SdkVolumeCreateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{108}
+}
+func (m *SdkVolumeCreateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeCreateRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeCreateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeCreateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeCreateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeCreateRequest.Merge(dst, src)
+}
+func (m *SdkVolumeCreateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeCreateRequest.Size(m)
+}
+func (m *SdkVolumeCreateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeCreateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeCreateRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeCreateRequest) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+func (m *SdkVolumeCreateRequest) GetSpec() *VolumeSpec {
+	if m != nil {
+		return m.Spec
+	}
+	return nil
+}
+
+func (m *SdkVolumeCreateRequest) GetLabels() map[string]string {
+	if m != nil {
+		return m.Labels
+	}
+	return nil
+}
+
+// Defines a response to the creation of a volume
+type SdkVolumeCreateResponse struct {
+	// Id of new volume
+	VolumeId             string   `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeCreateResponse) Reset()         { *m = SdkVolumeCreateResponse{} }
+func (m *SdkVolumeCreateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeCreateResponse) ProtoMessage()    {}
+func (*SdkVolumeCreateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{109}
+}
+func (m *SdkVolumeCreateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeCreateResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeCreateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeCreateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeCreateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeCreateResponse.Merge(dst, src)
+}
+func (m *SdkVolumeCreateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeCreateResponse.Size(m)
+}
+func (m *SdkVolumeCreateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeCreateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeCreateResponse proto.InternalMessageInfo
+
+func (m *SdkVolumeCreateResponse) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+// Defines a request to clone a volume or create a volume from a snapshot
+type SdkVolumeCloneRequest struct {
+	// Unique name of the volume. This will be used for idempotency.
+	Name string `protobuf:"bytes,1,opt,name=name" json:"name,omitempty"`
+	// Parent volume id or snapshot id will create a new volume as a clone of the parent.
+	ParentId             string   `protobuf:"bytes,2,opt,name=parent_id,json=parentId" json:"parent_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeCloneRequest) Reset()         { *m = SdkVolumeCloneRequest{} }
+func (m *SdkVolumeCloneRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeCloneRequest) ProtoMessage()    {}
+func (*SdkVolumeCloneRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{110}
+}
+func (m *SdkVolumeCloneRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeCloneRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeCloneRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeCloneRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeCloneRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeCloneRequest.Merge(dst, src)
+}
+func (m *SdkVolumeCloneRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeCloneRequest.Size(m)
+}
+func (m *SdkVolumeCloneRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeCloneRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeCloneRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeCloneRequest) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+func (m *SdkVolumeCloneRequest) GetParentId() string {
+	if m != nil {
+		return m.ParentId
+	}
+	return ""
+}
+
+// Defines the response when creating a clone from a volume or a snapshot
+type SdkVolumeCloneResponse struct {
+	// Id of new volume
+	VolumeId             string   `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeCloneResponse) Reset()         { *m = SdkVolumeCloneResponse{} }
+func (m *SdkVolumeCloneResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeCloneResponse) ProtoMessage()    {}
+func (*SdkVolumeCloneResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{111}
+}
+func (m *SdkVolumeCloneResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeCloneResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeCloneResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeCloneResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeCloneResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeCloneResponse.Merge(dst, src)
+}
+func (m *SdkVolumeCloneResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeCloneResponse.Size(m)
+}
+func (m *SdkVolumeCloneResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeCloneResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeCloneResponse proto.InternalMessageInfo
+
+func (m *SdkVolumeCloneResponse) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+// Defines the request to delete a volume
+type SdkVolumeDeleteRequest struct {
+	// Id of volume to delete
+	VolumeId             string   `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeDeleteRequest) Reset()         { *m = SdkVolumeDeleteRequest{} }
+func (m *SdkVolumeDeleteRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeDeleteRequest) ProtoMessage()    {}
+func (*SdkVolumeDeleteRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{112}
+}
+func (m *SdkVolumeDeleteRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeDeleteRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeDeleteRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeDeleteRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeDeleteRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeDeleteRequest.Merge(dst, src)
+}
+func (m *SdkVolumeDeleteRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeDeleteRequest.Size(m)
+}
+func (m *SdkVolumeDeleteRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeDeleteRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeDeleteRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeDeleteRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+// Empty response
+type SdkVolumeDeleteResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeDeleteResponse) Reset()         { *m = SdkVolumeDeleteResponse{} }
+func (m *SdkVolumeDeleteResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeDeleteResponse) ProtoMessage()    {}
+func (*SdkVolumeDeleteResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{113}
+}
+func (m *SdkVolumeDeleteResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeDeleteResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeDeleteResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeDeleteResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeDeleteResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeDeleteResponse.Merge(dst, src)
+}
+func (m *SdkVolumeDeleteResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeDeleteResponse.Size(m)
+}
+func (m *SdkVolumeDeleteResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeDeleteResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeDeleteResponse proto.InternalMessageInfo
+
+// Defines the request to inspect a volume
+type SdkVolumeInspectRequest struct {
+	// Id of volume to inspect
+	VolumeId string `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	// Options during inspection
+	Options              *VolumeInspectOptions `protobuf:"bytes,2,opt,name=options" json:"options,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}              `json:"-"`
+	XXX_unrecognized     []byte                `json:"-"`
+	XXX_sizecache        int32                 `json:"-"`
+}
+
+func (m *SdkVolumeInspectRequest) Reset()         { *m = SdkVolumeInspectRequest{} }
+func (m *SdkVolumeInspectRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeInspectRequest) ProtoMessage()    {}
+func (*SdkVolumeInspectRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{114}
+}
+func (m *SdkVolumeInspectRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeInspectRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeInspectRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeInspectRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeInspectRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeInspectRequest.Merge(dst, src)
+}
+func (m *SdkVolumeInspectRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeInspectRequest.Size(m)
+}
+func (m *SdkVolumeInspectRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeInspectRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeInspectRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeInspectRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+func (m *SdkVolumeInspectRequest) GetOptions() *VolumeInspectOptions {
+	if m != nil {
+		return m.Options
+	}
+	return nil
+}
+
+// Defines the response when inspecting a volume
+type SdkVolumeInspectResponse struct {
+	// Information about the volume
+	Volume *Volume `protobuf:"bytes,1,opt,name=volume" json:"volume,omitempty"`
+	// Name of volume
+	Name string `protobuf:"bytes,2,opt,name=name" json:"name,omitempty"`
+	// Volume labels
+	Labels               map[string]string `protobuf:"bytes,3,rep,name=labels" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *SdkVolumeInspectResponse) Reset()         { *m = SdkVolumeInspectResponse{} }
+func (m *SdkVolumeInspectResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeInspectResponse) ProtoMessage()    {}
+func (*SdkVolumeInspectResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{115}
+}
+func (m *SdkVolumeInspectResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeInspectResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeInspectResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeInspectResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeInspectResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeInspectResponse.Merge(dst, src)
+}
+func (m *SdkVolumeInspectResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeInspectResponse.Size(m)
+}
+func (m *SdkVolumeInspectResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeInspectResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeInspectResponse proto.InternalMessageInfo
+
+func (m *SdkVolumeInspectResponse) GetVolume() *Volume {
+	if m != nil {
+		return m.Volume
+	}
+	return nil
+}
+
+func (m *SdkVolumeInspectResponse) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+func (m *SdkVolumeInspectResponse) GetLabels() map[string]string {
+	if m != nil {
+		return m.Labels
+	}
+	return nil
+}
+
+// Defines the request to inspect volumes using a filter
+type SdkVolumeInspectWithFiltersRequest struct {
+	// (optional) Name to search
+	Name string `protobuf:"bytes,2,opt,name=name" json:"name,omitempty"`
+	// (optional) Labels to search
+	Labels map[string]string `protobuf:"bytes,3,rep,name=labels" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	// (optional) Ownership to match
+	Ownership *Ownership `protobuf:"bytes,4,opt,name=ownership" json:"ownership,omitempty"`
+	// (optional) Group to match
+	Group *Group `protobuf:"bytes,5,opt,name=group" json:"group,omitempty"`
+	// Options during inspection
+	Options              *VolumeInspectOptions `protobuf:"bytes,6,opt,name=options" json:"options,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}              `json:"-"`
+	XXX_unrecognized     []byte                `json:"-"`
+	XXX_sizecache        int32                 `json:"-"`
+}
+
+func (m *SdkVolumeInspectWithFiltersRequest) Reset()         { *m = SdkVolumeInspectWithFiltersRequest{} }
+func (m *SdkVolumeInspectWithFiltersRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeInspectWithFiltersRequest) ProtoMessage()    {}
+func (*SdkVolumeInspectWithFiltersRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{116}
+}
+func (m *SdkVolumeInspectWithFiltersRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeInspectWithFiltersRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeInspectWithFiltersRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeInspectWithFiltersRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeInspectWithFiltersRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeInspectWithFiltersRequest.Merge(dst, src)
+}
+func (m *SdkVolumeInspectWithFiltersRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeInspectWithFiltersRequest.Size(m)
+}
+func (m *SdkVolumeInspectWithFiltersRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeInspectWithFiltersRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeInspectWithFiltersRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeInspectWithFiltersRequest) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+func (m *SdkVolumeInspectWithFiltersRequest) GetLabels() map[string]string {
+	if m != nil {
+		return m.Labels
+	}
+	return nil
+}
+
+func (m *SdkVolumeInspectWithFiltersRequest) GetOwnership() *Ownership {
+	if m != nil {
+		return m.Ownership
+	}
+	return nil
+}
+
+func (m *SdkVolumeInspectWithFiltersRequest) GetGroup() *Group {
+	if m != nil {
+		return m.Group
+	}
+	return nil
+}
+
+func (m *SdkVolumeInspectWithFiltersRequest) GetOptions() *VolumeInspectOptions {
+	if m != nil {
+		return m.Options
+	}
+	return nil
+}
+
+// Defines the response when inspecting volumes using a filter
+type SdkVolumeInspectWithFiltersResponse struct {
+	// List of `SdkVolumeInspectResponse` objects describing the volumes
+	Volumes              []*SdkVolumeInspectResponse `protobuf:"bytes,1,rep,name=volumes" json:"volumes,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                    `json:"-"`
+	XXX_unrecognized     []byte                      `json:"-"`
+	XXX_sizecache        int32                       `json:"-"`
+}
+
+func (m *SdkVolumeInspectWithFiltersResponse) Reset()         { *m = SdkVolumeInspectWithFiltersResponse{} }
+func (m *SdkVolumeInspectWithFiltersResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeInspectWithFiltersResponse) ProtoMessage()    {}
+func (*SdkVolumeInspectWithFiltersResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{117}
+}
+func (m *SdkVolumeInspectWithFiltersResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeInspectWithFiltersResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeInspectWithFiltersResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeInspectWithFiltersResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeInspectWithFiltersResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeInspectWithFiltersResponse.Merge(dst, src)
+}
+func (m *SdkVolumeInspectWithFiltersResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeInspectWithFiltersResponse.Size(m)
+}
+func (m *SdkVolumeInspectWithFiltersResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeInspectWithFiltersResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeInspectWithFiltersResponse proto.InternalMessageInfo
+
+func (m *SdkVolumeInspectWithFiltersResponse) GetVolumes() []*SdkVolumeInspectResponse {
+	if m != nil {
+		return m.Volumes
+	}
+	return nil
+}
+
+// This request is used to adjust or set new values in the volume
+type SdkVolumeUpdateRequest struct {
+	// Id of the volume to update
+	VolumeId string `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	// Change label values. Some of these values may not be able to be changed.
+	// New labels will be added to the current volume labels. To delete a label, set the
+	// value of the label to an empty string.
+	Labels map[string]string `protobuf:"bytes,3,rep,name=labels" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	// VolumeSpecUpdate provides a method to request that certain values
+	// in the VolumeSpec are changed. This is necessary as a separate variable
+	// because values like int and bool in the VolumeSpec cannot be determined
+	// if they are being requested to change in gRPC proto3. Some of these
+	// values may not be able to be changed.
+	//
+	// Here are a few examples of actions that can be accomplished using the VolumeSpec:
+	//
+	// * To resize the volume: Set a new value in spec.size_opt.size.
+	// * To change number of replicas: Adjust spec.ha_level_opt.ha_level.
+	// * To change the I/O Profile: Adjust spec.io_profile_opt.io_profile.
+	Spec                 *VolumeSpecUpdate `protobuf:"bytes,4,opt,name=spec" json:"spec,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *SdkVolumeUpdateRequest) Reset()         { *m = SdkVolumeUpdateRequest{} }
+func (m *SdkVolumeUpdateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeUpdateRequest) ProtoMessage()    {}
+func (*SdkVolumeUpdateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{118}
+}
+func (m *SdkVolumeUpdateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeUpdateRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeUpdateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeUpdateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeUpdateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeUpdateRequest.Merge(dst, src)
+}
+func (m *SdkVolumeUpdateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeUpdateRequest.Size(m)
+}
+func (m *SdkVolumeUpdateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeUpdateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeUpdateRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeUpdateRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+func (m *SdkVolumeUpdateRequest) GetLabels() map[string]string {
+	if m != nil {
+		return m.Labels
+	}
+	return nil
+}
+
+func (m *SdkVolumeUpdateRequest) GetSpec() *VolumeSpecUpdate {
+	if m != nil {
+		return m.Spec
+	}
+	return nil
+}
+
+// Empty response
+type SdkVolumeUpdateResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeUpdateResponse) Reset()         { *m = SdkVolumeUpdateResponse{} }
+func (m *SdkVolumeUpdateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeUpdateResponse) ProtoMessage()    {}
+func (*SdkVolumeUpdateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{119}
+}
+func (m *SdkVolumeUpdateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeUpdateResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeUpdateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeUpdateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeUpdateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeUpdateResponse.Merge(dst, src)
+}
+func (m *SdkVolumeUpdateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeUpdateResponse.Size(m)
+}
+func (m *SdkVolumeUpdateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeUpdateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeUpdateResponse proto.InternalMessageInfo
+
+// Defines a request to retreive volume statistics
+type SdkVolumeStatsRequest struct {
+	// Id of the volume to get statistics
+	VolumeId string `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	// When set to false the stats are in /proc/diskstats style stats.
+	// When set to true the stats are stats for a specific duration.
+	NotCumulative        bool     `protobuf:"varint,2,opt,name=not_cumulative,json=notCumulative" json:"not_cumulative,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeStatsRequest) Reset()         { *m = SdkVolumeStatsRequest{} }
+func (m *SdkVolumeStatsRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeStatsRequest) ProtoMessage()    {}
+func (*SdkVolumeStatsRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{120}
+}
+func (m *SdkVolumeStatsRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeStatsRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeStatsRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeStatsRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeStatsRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeStatsRequest.Merge(dst, src)
+}
+func (m *SdkVolumeStatsRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeStatsRequest.Size(m)
+}
+func (m *SdkVolumeStatsRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeStatsRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeStatsRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeStatsRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+func (m *SdkVolumeStatsRequest) GetNotCumulative() bool {
+	if m != nil {
+		return m.NotCumulative
+	}
+	return false
+}
+
+// Defines a response containing drive statistics
+type SdkVolumeStatsResponse struct {
+	// Statistics for a single volume
+	Stats                *Stats   `protobuf:"bytes,1,opt,name=stats" json:"stats,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeStatsResponse) Reset()         { *m = SdkVolumeStatsResponse{} }
+func (m *SdkVolumeStatsResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeStatsResponse) ProtoMessage()    {}
+func (*SdkVolumeStatsResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{121}
+}
+func (m *SdkVolumeStatsResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeStatsResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeStatsResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeStatsResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeStatsResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeStatsResponse.Merge(dst, src)
+}
+func (m *SdkVolumeStatsResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeStatsResponse.Size(m)
+}
+func (m *SdkVolumeStatsResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeStatsResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeStatsResponse proto.InternalMessageInfo
+
+func (m *SdkVolumeStatsResponse) GetStats() *Stats {
+	if m != nil {
+		return m.Stats
+	}
+	return nil
+}
+
+// Defines request to retrieve volume/snapshot capacity usage details
+type SdkVolumeCapacityUsageRequest struct {
+	// Id of the snapshot/volume to get capacity usage details
+	VolumeId             string   `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeCapacityUsageRequest) Reset()         { *m = SdkVolumeCapacityUsageRequest{} }
+func (m *SdkVolumeCapacityUsageRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeCapacityUsageRequest) ProtoMessage()    {}
+func (*SdkVolumeCapacityUsageRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{122}
+}
+func (m *SdkVolumeCapacityUsageRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeCapacityUsageRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeCapacityUsageRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeCapacityUsageRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeCapacityUsageRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeCapacityUsageRequest.Merge(dst, src)
+}
+func (m *SdkVolumeCapacityUsageRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeCapacityUsageRequest.Size(m)
+}
+func (m *SdkVolumeCapacityUsageRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeCapacityUsageRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeCapacityUsageRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeCapacityUsageRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+// Defines response containing volume/snapshot capacity usage details
+type SdkVolumeCapacityUsageResponse struct {
+	// CapacityUsage details
+	CapacityUsageInfo    *CapacityUsageInfo `protobuf:"bytes,1,opt,name=capacity_usage_info,json=capacityUsageInfo" json:"capacity_usage_info,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}           `json:"-"`
+	XXX_unrecognized     []byte             `json:"-"`
+	XXX_sizecache        int32              `json:"-"`
+}
+
+func (m *SdkVolumeCapacityUsageResponse) Reset()         { *m = SdkVolumeCapacityUsageResponse{} }
+func (m *SdkVolumeCapacityUsageResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeCapacityUsageResponse) ProtoMessage()    {}
+func (*SdkVolumeCapacityUsageResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{123}
+}
+func (m *SdkVolumeCapacityUsageResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeCapacityUsageResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeCapacityUsageResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeCapacityUsageResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeCapacityUsageResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeCapacityUsageResponse.Merge(dst, src)
+}
+func (m *SdkVolumeCapacityUsageResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeCapacityUsageResponse.Size(m)
+}
+func (m *SdkVolumeCapacityUsageResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeCapacityUsageResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeCapacityUsageResponse proto.InternalMessageInfo
+
+func (m *SdkVolumeCapacityUsageResponse) GetCapacityUsageInfo() *CapacityUsageInfo {
+	if m != nil {
+		return m.CapacityUsageInfo
+	}
+	return nil
+}
+
+// Defines a request to list volumes
+type SdkVolumeEnumerateRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeEnumerateRequest) Reset()         { *m = SdkVolumeEnumerateRequest{} }
+func (m *SdkVolumeEnumerateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeEnumerateRequest) ProtoMessage()    {}
+func (*SdkVolumeEnumerateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{124}
+}
+func (m *SdkVolumeEnumerateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeEnumerateRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeEnumerateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeEnumerateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeEnumerateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeEnumerateRequest.Merge(dst, src)
+}
+func (m *SdkVolumeEnumerateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeEnumerateRequest.Size(m)
+}
+func (m *SdkVolumeEnumerateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeEnumerateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeEnumerateRequest proto.InternalMessageInfo
+
+// Defines the response when listing volumes
+type SdkVolumeEnumerateResponse struct {
+	// List of volumes matching label
+	VolumeIds            []string `protobuf:"bytes,1,rep,name=volume_ids,json=volumeIds" json:"volume_ids,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeEnumerateResponse) Reset()         { *m = SdkVolumeEnumerateResponse{} }
+func (m *SdkVolumeEnumerateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeEnumerateResponse) ProtoMessage()    {}
+func (*SdkVolumeEnumerateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{125}
+}
+func (m *SdkVolumeEnumerateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeEnumerateResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeEnumerateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeEnumerateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeEnumerateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeEnumerateResponse.Merge(dst, src)
+}
+func (m *SdkVolumeEnumerateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeEnumerateResponse.Size(m)
+}
+func (m *SdkVolumeEnumerateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeEnumerateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeEnumerateResponse proto.InternalMessageInfo
+
+func (m *SdkVolumeEnumerateResponse) GetVolumeIds() []string {
+	if m != nil {
+		return m.VolumeIds
+	}
+	return nil
+}
+
+// Defines a request to list volumes
+type SdkVolumeEnumerateWithFiltersRequest struct {
+	// (optional) Name to search
+	Name string `protobuf:"bytes,2,opt,name=name" json:"name,omitempty"`
+	// (optional) Labels to search
+	Labels map[string]string `protobuf:"bytes,3,rep,name=labels" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	// (optional) Ownership to match
+	Ownership *Ownership `protobuf:"bytes,4,opt,name=ownership" json:"ownership,omitempty"`
+	// (optional) Group to match
+	Group                *Group   `protobuf:"bytes,5,opt,name=group" json:"group,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeEnumerateWithFiltersRequest) Reset()         { *m = SdkVolumeEnumerateWithFiltersRequest{} }
+func (m *SdkVolumeEnumerateWithFiltersRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeEnumerateWithFiltersRequest) ProtoMessage()    {}
+func (*SdkVolumeEnumerateWithFiltersRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{126}
+}
+func (m *SdkVolumeEnumerateWithFiltersRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeEnumerateWithFiltersRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeEnumerateWithFiltersRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeEnumerateWithFiltersRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeEnumerateWithFiltersRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeEnumerateWithFiltersRequest.Merge(dst, src)
+}
+func (m *SdkVolumeEnumerateWithFiltersRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeEnumerateWithFiltersRequest.Size(m)
+}
+func (m *SdkVolumeEnumerateWithFiltersRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeEnumerateWithFiltersRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeEnumerateWithFiltersRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeEnumerateWithFiltersRequest) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+func (m *SdkVolumeEnumerateWithFiltersRequest) GetLabels() map[string]string {
+	if m != nil {
+		return m.Labels
+	}
+	return nil
+}
+
+func (m *SdkVolumeEnumerateWithFiltersRequest) GetOwnership() *Ownership {
+	if m != nil {
+		return m.Ownership
+	}
+	return nil
+}
+
+func (m *SdkVolumeEnumerateWithFiltersRequest) GetGroup() *Group {
+	if m != nil {
+		return m.Group
+	}
+	return nil
+}
+
+// Defines the response when listing volumes
+type SdkVolumeEnumerateWithFiltersResponse struct {
+	// List of volumes matching label
+	VolumeIds            []string `protobuf:"bytes,1,rep,name=volume_ids,json=volumeIds" json:"volume_ids,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeEnumerateWithFiltersResponse) Reset()         { *m = SdkVolumeEnumerateWithFiltersResponse{} }
+func (m *SdkVolumeEnumerateWithFiltersResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeEnumerateWithFiltersResponse) ProtoMessage()    {}
+func (*SdkVolumeEnumerateWithFiltersResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{127}
+}
+func (m *SdkVolumeEnumerateWithFiltersResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeEnumerateWithFiltersResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeEnumerateWithFiltersResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeEnumerateWithFiltersResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeEnumerateWithFiltersResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeEnumerateWithFiltersResponse.Merge(dst, src)
+}
+func (m *SdkVolumeEnumerateWithFiltersResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeEnumerateWithFiltersResponse.Size(m)
+}
+func (m *SdkVolumeEnumerateWithFiltersResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeEnumerateWithFiltersResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeEnumerateWithFiltersResponse proto.InternalMessageInfo
+
+func (m *SdkVolumeEnumerateWithFiltersResponse) GetVolumeIds() []string {
+	if m != nil {
+		return m.VolumeIds
+	}
+	return nil
+}
+
+// Defines the request when creating a snapshot from a volume.
+type SdkVolumeSnapshotCreateRequest struct {
+	// Id of volume to take the snapshot from
+	VolumeId string `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	// Name of the snapshot.
+	Name string `protobuf:"bytes,2,opt,name=name" json:"name,omitempty"`
+	// Labels to apply to snapshot
+	Labels               map[string]string `protobuf:"bytes,3,rep,name=labels" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *SdkVolumeSnapshotCreateRequest) Reset()         { *m = SdkVolumeSnapshotCreateRequest{} }
+func (m *SdkVolumeSnapshotCreateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeSnapshotCreateRequest) ProtoMessage()    {}
+func (*SdkVolumeSnapshotCreateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{128}
+}
+func (m *SdkVolumeSnapshotCreateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeSnapshotCreateRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeSnapshotCreateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeSnapshotCreateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeSnapshotCreateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeSnapshotCreateRequest.Merge(dst, src)
+}
+func (m *SdkVolumeSnapshotCreateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeSnapshotCreateRequest.Size(m)
+}
+func (m *SdkVolumeSnapshotCreateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeSnapshotCreateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeSnapshotCreateRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeSnapshotCreateRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+func (m *SdkVolumeSnapshotCreateRequest) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+func (m *SdkVolumeSnapshotCreateRequest) GetLabels() map[string]string {
+	if m != nil {
+		return m.Labels
+	}
+	return nil
+}
+
+// Defines a response after creating a snapshot of a volume
+type SdkVolumeSnapshotCreateResponse struct {
+	// Id of immutable snapshot
+	SnapshotId           string   `protobuf:"bytes,1,opt,name=snapshot_id,json=snapshotId" json:"snapshot_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeSnapshotCreateResponse) Reset()         { *m = SdkVolumeSnapshotCreateResponse{} }
+func (m *SdkVolumeSnapshotCreateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeSnapshotCreateResponse) ProtoMessage()    {}
+func (*SdkVolumeSnapshotCreateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{129}
+}
+func (m *SdkVolumeSnapshotCreateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeSnapshotCreateResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeSnapshotCreateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeSnapshotCreateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeSnapshotCreateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeSnapshotCreateResponse.Merge(dst, src)
+}
+func (m *SdkVolumeSnapshotCreateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeSnapshotCreateResponse.Size(m)
+}
+func (m *SdkVolumeSnapshotCreateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeSnapshotCreateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeSnapshotCreateResponse proto.InternalMessageInfo
+
+func (m *SdkVolumeSnapshotCreateResponse) GetSnapshotId() string {
+	if m != nil {
+		return m.SnapshotId
+	}
+	return ""
+}
+
+// Defines a request to restore a volume to a snapshot
+type SdkVolumeSnapshotRestoreRequest struct {
+	// Id of volume
+	VolumeId string `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	// Snapshot id to apply to `volume_id`
+	SnapshotId           string   `protobuf:"bytes,2,opt,name=snapshot_id,json=snapshotId" json:"snapshot_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeSnapshotRestoreRequest) Reset()         { *m = SdkVolumeSnapshotRestoreRequest{} }
+func (m *SdkVolumeSnapshotRestoreRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeSnapshotRestoreRequest) ProtoMessage()    {}
+func (*SdkVolumeSnapshotRestoreRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{130}
+}
+func (m *SdkVolumeSnapshotRestoreRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeSnapshotRestoreRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeSnapshotRestoreRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeSnapshotRestoreRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeSnapshotRestoreRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeSnapshotRestoreRequest.Merge(dst, src)
+}
+func (m *SdkVolumeSnapshotRestoreRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeSnapshotRestoreRequest.Size(m)
+}
+func (m *SdkVolumeSnapshotRestoreRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeSnapshotRestoreRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeSnapshotRestoreRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeSnapshotRestoreRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+func (m *SdkVolumeSnapshotRestoreRequest) GetSnapshotId() string {
+	if m != nil {
+		return m.SnapshotId
+	}
+	return ""
+}
+
+// Empty response
+type SdkVolumeSnapshotRestoreResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeSnapshotRestoreResponse) Reset()         { *m = SdkVolumeSnapshotRestoreResponse{} }
+func (m *SdkVolumeSnapshotRestoreResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeSnapshotRestoreResponse) ProtoMessage()    {}
+func (*SdkVolumeSnapshotRestoreResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{131}
+}
+func (m *SdkVolumeSnapshotRestoreResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeSnapshotRestoreResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeSnapshotRestoreResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeSnapshotRestoreResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeSnapshotRestoreResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeSnapshotRestoreResponse.Merge(dst, src)
+}
+func (m *SdkVolumeSnapshotRestoreResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeSnapshotRestoreResponse.Size(m)
+}
+func (m *SdkVolumeSnapshotRestoreResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeSnapshotRestoreResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeSnapshotRestoreResponse proto.InternalMessageInfo
+
+// Defines a request to list the snaphots
+type SdkVolumeSnapshotEnumerateRequest struct {
+	// Get the snapshots for this volume id
+	VolumeId             string   `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeSnapshotEnumerateRequest) Reset()         { *m = SdkVolumeSnapshotEnumerateRequest{} }
+func (m *SdkVolumeSnapshotEnumerateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeSnapshotEnumerateRequest) ProtoMessage()    {}
+func (*SdkVolumeSnapshotEnumerateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{132}
+}
+func (m *SdkVolumeSnapshotEnumerateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeSnapshotEnumerateRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeSnapshotEnumerateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeSnapshotEnumerateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeSnapshotEnumerateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeSnapshotEnumerateRequest.Merge(dst, src)
+}
+func (m *SdkVolumeSnapshotEnumerateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeSnapshotEnumerateRequest.Size(m)
+}
+func (m *SdkVolumeSnapshotEnumerateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeSnapshotEnumerateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeSnapshotEnumerateRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeSnapshotEnumerateRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+// Defines a response when listing snapshots
+type SdkVolumeSnapshotEnumerateResponse struct {
+	// List of immutable snapshots
+	VolumeSnapshotIds    []string `protobuf:"bytes,1,rep,name=volume_snapshot_ids,json=volumeSnapshotIds" json:"volume_snapshot_ids,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeSnapshotEnumerateResponse) Reset()         { *m = SdkVolumeSnapshotEnumerateResponse{} }
+func (m *SdkVolumeSnapshotEnumerateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeSnapshotEnumerateResponse) ProtoMessage()    {}
+func (*SdkVolumeSnapshotEnumerateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{133}
+}
+func (m *SdkVolumeSnapshotEnumerateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeSnapshotEnumerateResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeSnapshotEnumerateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeSnapshotEnumerateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeSnapshotEnumerateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeSnapshotEnumerateResponse.Merge(dst, src)
+}
+func (m *SdkVolumeSnapshotEnumerateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeSnapshotEnumerateResponse.Size(m)
+}
+func (m *SdkVolumeSnapshotEnumerateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeSnapshotEnumerateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeSnapshotEnumerateResponse proto.InternalMessageInfo
+
+func (m *SdkVolumeSnapshotEnumerateResponse) GetVolumeSnapshotIds() []string {
+	if m != nil {
+		return m.VolumeSnapshotIds
+	}
+	return nil
+}
+
+// Defines a request to list the snaphots
+type SdkVolumeSnapshotEnumerateWithFiltersRequest struct {
+	// (optional) Get the snapshots for this volume id
+	VolumeId string `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	// (optional) Get snapshots that match these labels
+	Labels               map[string]string `protobuf:"bytes,2,rep,name=labels" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *SdkVolumeSnapshotEnumerateWithFiltersRequest) Reset() {
+	*m = SdkVolumeSnapshotEnumerateWithFiltersRequest{}
+}
+func (m *SdkVolumeSnapshotEnumerateWithFiltersRequest) String() string {
+	return proto.CompactTextString(m)
+}
+func (*SdkVolumeSnapshotEnumerateWithFiltersRequest) ProtoMessage() {}
+func (*SdkVolumeSnapshotEnumerateWithFiltersRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{134}
+}
+func (m *SdkVolumeSnapshotEnumerateWithFiltersRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeSnapshotEnumerateWithFiltersRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeSnapshotEnumerateWithFiltersRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeSnapshotEnumerateWithFiltersRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeSnapshotEnumerateWithFiltersRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeSnapshotEnumerateWithFiltersRequest.Merge(dst, src)
+}
+func (m *SdkVolumeSnapshotEnumerateWithFiltersRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeSnapshotEnumerateWithFiltersRequest.Size(m)
+}
+func (m *SdkVolumeSnapshotEnumerateWithFiltersRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeSnapshotEnumerateWithFiltersRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeSnapshotEnumerateWithFiltersRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeSnapshotEnumerateWithFiltersRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+func (m *SdkVolumeSnapshotEnumerateWithFiltersRequest) GetLabels() map[string]string {
+	if m != nil {
+		return m.Labels
+	}
+	return nil
+}
+
+// Defines a response when listing snapshots
+type SdkVolumeSnapshotEnumerateWithFiltersResponse struct {
+	// List of immutable snapshots
+	VolumeSnapshotIds    []string `protobuf:"bytes,1,rep,name=volume_snapshot_ids,json=volumeSnapshotIds" json:"volume_snapshot_ids,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeSnapshotEnumerateWithFiltersResponse) Reset() {
+	*m = SdkVolumeSnapshotEnumerateWithFiltersResponse{}
+}
+func (m *SdkVolumeSnapshotEnumerateWithFiltersResponse) String() string {
+	return proto.CompactTextString(m)
+}
+func (*SdkVolumeSnapshotEnumerateWithFiltersResponse) ProtoMessage() {}
+func (*SdkVolumeSnapshotEnumerateWithFiltersResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{135}
+}
+func (m *SdkVolumeSnapshotEnumerateWithFiltersResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeSnapshotEnumerateWithFiltersResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeSnapshotEnumerateWithFiltersResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeSnapshotEnumerateWithFiltersResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeSnapshotEnumerateWithFiltersResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeSnapshotEnumerateWithFiltersResponse.Merge(dst, src)
+}
+func (m *SdkVolumeSnapshotEnumerateWithFiltersResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeSnapshotEnumerateWithFiltersResponse.Size(m)
+}
+func (m *SdkVolumeSnapshotEnumerateWithFiltersResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeSnapshotEnumerateWithFiltersResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeSnapshotEnumerateWithFiltersResponse proto.InternalMessageInfo
+
+func (m *SdkVolumeSnapshotEnumerateWithFiltersResponse) GetVolumeSnapshotIds() []string {
+	if m != nil {
+		return m.VolumeSnapshotIds
+	}
+	return nil
+}
+
+// Defines a request to update the snapshot schedule of a volume
+type SdkVolumeSnapshotScheduleUpdateRequest struct {
+	// Id of volume
+	VolumeId string `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	// Names of schedule policies
+	SnapshotScheduleNames []string `protobuf:"bytes,2,rep,name=snapshot_schedule_names,json=snapshotScheduleNames" json:"snapshot_schedule_names,omitempty"`
+	XXX_NoUnkeyedLiteral  struct{} `json:"-"`
+	XXX_unrecognized      []byte   `json:"-"`
+	XXX_sizecache         int32    `json:"-"`
+}
+
+func (m *SdkVolumeSnapshotScheduleUpdateRequest) Reset() {
+	*m = SdkVolumeSnapshotScheduleUpdateRequest{}
+}
+func (m *SdkVolumeSnapshotScheduleUpdateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeSnapshotScheduleUpdateRequest) ProtoMessage()    {}
+func (*SdkVolumeSnapshotScheduleUpdateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{136}
+}
+func (m *SdkVolumeSnapshotScheduleUpdateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeSnapshotScheduleUpdateRequest.Unmarshal(m, b)
+}
+func (m *SdkVolumeSnapshotScheduleUpdateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeSnapshotScheduleUpdateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeSnapshotScheduleUpdateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeSnapshotScheduleUpdateRequest.Merge(dst, src)
+}
+func (m *SdkVolumeSnapshotScheduleUpdateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeSnapshotScheduleUpdateRequest.Size(m)
+}
+func (m *SdkVolumeSnapshotScheduleUpdateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeSnapshotScheduleUpdateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeSnapshotScheduleUpdateRequest proto.InternalMessageInfo
+
+func (m *SdkVolumeSnapshotScheduleUpdateRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+func (m *SdkVolumeSnapshotScheduleUpdateRequest) GetSnapshotScheduleNames() []string {
+	if m != nil {
+		return m.SnapshotScheduleNames
+	}
+	return nil
+}
+
+// Empty response
+type SdkVolumeSnapshotScheduleUpdateResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVolumeSnapshotScheduleUpdateResponse) Reset() {
+	*m = SdkVolumeSnapshotScheduleUpdateResponse{}
+}
+func (m *SdkVolumeSnapshotScheduleUpdateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkVolumeSnapshotScheduleUpdateResponse) ProtoMessage()    {}
+func (*SdkVolumeSnapshotScheduleUpdateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{137}
+}
+func (m *SdkVolumeSnapshotScheduleUpdateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVolumeSnapshotScheduleUpdateResponse.Unmarshal(m, b)
+}
+func (m *SdkVolumeSnapshotScheduleUpdateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVolumeSnapshotScheduleUpdateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkVolumeSnapshotScheduleUpdateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVolumeSnapshotScheduleUpdateResponse.Merge(dst, src)
+}
+func (m *SdkVolumeSnapshotScheduleUpdateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkVolumeSnapshotScheduleUpdateResponse.Size(m)
+}
+func (m *SdkVolumeSnapshotScheduleUpdateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVolumeSnapshotScheduleUpdateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVolumeSnapshotScheduleUpdateResponse proto.InternalMessageInfo
+
+// Empty request
+type SdkClusterDomainsEnumerateRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkClusterDomainsEnumerateRequest) Reset()         { *m = SdkClusterDomainsEnumerateRequest{} }
+func (m *SdkClusterDomainsEnumerateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterDomainsEnumerateRequest) ProtoMessage()    {}
+func (*SdkClusterDomainsEnumerateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{138}
+}
+func (m *SdkClusterDomainsEnumerateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterDomainsEnumerateRequest.Unmarshal(m, b)
+}
+func (m *SdkClusterDomainsEnumerateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterDomainsEnumerateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterDomainsEnumerateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterDomainsEnumerateRequest.Merge(dst, src)
+}
+func (m *SdkClusterDomainsEnumerateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterDomainsEnumerateRequest.Size(m)
+}
+func (m *SdkClusterDomainsEnumerateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterDomainsEnumerateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterDomainsEnumerateRequest proto.InternalMessageInfo
+
+// Defines a response when enumerating cluster domains
+type SdkClusterDomainsEnumerateResponse struct {
+	// List of names of all the cluster domains in a cluster
+	ClusterDomainNames   []string `protobuf:"bytes,1,rep,name=cluster_domain_names,json=clusterDomainNames" json:"cluster_domain_names,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkClusterDomainsEnumerateResponse) Reset()         { *m = SdkClusterDomainsEnumerateResponse{} }
+func (m *SdkClusterDomainsEnumerateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterDomainsEnumerateResponse) ProtoMessage()    {}
+func (*SdkClusterDomainsEnumerateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{139}
+}
+func (m *SdkClusterDomainsEnumerateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterDomainsEnumerateResponse.Unmarshal(m, b)
+}
+func (m *SdkClusterDomainsEnumerateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterDomainsEnumerateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterDomainsEnumerateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterDomainsEnumerateResponse.Merge(dst, src)
+}
+func (m *SdkClusterDomainsEnumerateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterDomainsEnumerateResponse.Size(m)
+}
+func (m *SdkClusterDomainsEnumerateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterDomainsEnumerateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterDomainsEnumerateResponse proto.InternalMessageInfo
+
+func (m *SdkClusterDomainsEnumerateResponse) GetClusterDomainNames() []string {
+	if m != nil {
+		return m.ClusterDomainNames
+	}
+	return nil
+}
+
+// Defines a request to inspect a cluster domain
+type SdkClusterDomainInspectRequest struct {
+	// Name of the cluster domain to inspect
+	ClusterDomainName    string   `protobuf:"bytes,1,opt,name=cluster_domain_name,json=clusterDomainName" json:"cluster_domain_name,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkClusterDomainInspectRequest) Reset()         { *m = SdkClusterDomainInspectRequest{} }
+func (m *SdkClusterDomainInspectRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterDomainInspectRequest) ProtoMessage()    {}
+func (*SdkClusterDomainInspectRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{140}
+}
+func (m *SdkClusterDomainInspectRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterDomainInspectRequest.Unmarshal(m, b)
+}
+func (m *SdkClusterDomainInspectRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterDomainInspectRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterDomainInspectRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterDomainInspectRequest.Merge(dst, src)
+}
+func (m *SdkClusterDomainInspectRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterDomainInspectRequest.Size(m)
+}
+func (m *SdkClusterDomainInspectRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterDomainInspectRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterDomainInspectRequest proto.InternalMessageInfo
+
+func (m *SdkClusterDomainInspectRequest) GetClusterDomainName() string {
+	if m != nil {
+		return m.ClusterDomainName
+	}
+	return ""
+}
+
+// Defines a response to inspecting a cluster domain
+type SdkClusterDomainInspectResponse struct {
+	// Name of the cluster domain
+	ClusterDomainName string `protobuf:"bytes,1,opt,name=cluster_domain_name,json=clusterDomainName" json:"cluster_domain_name,omitempty"`
+	// IsActive indicates whether this cluster domain is active
+	IsActive             bool     `protobuf:"varint,2,opt,name=is_active,json=isActive" json:"is_active,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkClusterDomainInspectResponse) Reset()         { *m = SdkClusterDomainInspectResponse{} }
+func (m *SdkClusterDomainInspectResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterDomainInspectResponse) ProtoMessage()    {}
+func (*SdkClusterDomainInspectResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{141}
+}
+func (m *SdkClusterDomainInspectResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterDomainInspectResponse.Unmarshal(m, b)
+}
+func (m *SdkClusterDomainInspectResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterDomainInspectResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterDomainInspectResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterDomainInspectResponse.Merge(dst, src)
+}
+func (m *SdkClusterDomainInspectResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterDomainInspectResponse.Size(m)
+}
+func (m *SdkClusterDomainInspectResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterDomainInspectResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterDomainInspectResponse proto.InternalMessageInfo
+
+func (m *SdkClusterDomainInspectResponse) GetClusterDomainName() string {
+	if m != nil {
+		return m.ClusterDomainName
+	}
+	return ""
+}
+
+func (m *SdkClusterDomainInspectResponse) GetIsActive() bool {
+	if m != nil {
+		return m.IsActive
+	}
+	return false
+}
+
+// Defines a request to activate a cluster domain
+type SdkClusterDomainActivateRequest struct {
+	// Name of the cluster domain to activate
+	ClusterDomainName    string   `protobuf:"bytes,1,opt,name=cluster_domain_name,json=clusterDomainName" json:"cluster_domain_name,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkClusterDomainActivateRequest) Reset()         { *m = SdkClusterDomainActivateRequest{} }
+func (m *SdkClusterDomainActivateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterDomainActivateRequest) ProtoMessage()    {}
+func (*SdkClusterDomainActivateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{142}
+}
+func (m *SdkClusterDomainActivateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterDomainActivateRequest.Unmarshal(m, b)
+}
+func (m *SdkClusterDomainActivateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterDomainActivateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterDomainActivateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterDomainActivateRequest.Merge(dst, src)
+}
+func (m *SdkClusterDomainActivateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterDomainActivateRequest.Size(m)
+}
+func (m *SdkClusterDomainActivateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterDomainActivateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterDomainActivateRequest proto.InternalMessageInfo
+
+func (m *SdkClusterDomainActivateRequest) GetClusterDomainName() string {
+	if m != nil {
+		return m.ClusterDomainName
+	}
+	return ""
+}
+
+// Empty response
+type SdkClusterDomainActivateResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkClusterDomainActivateResponse) Reset()         { *m = SdkClusterDomainActivateResponse{} }
+func (m *SdkClusterDomainActivateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterDomainActivateResponse) ProtoMessage()    {}
+func (*SdkClusterDomainActivateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{143}
+}
+func (m *SdkClusterDomainActivateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterDomainActivateResponse.Unmarshal(m, b)
+}
+func (m *SdkClusterDomainActivateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterDomainActivateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterDomainActivateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterDomainActivateResponse.Merge(dst, src)
+}
+func (m *SdkClusterDomainActivateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterDomainActivateResponse.Size(m)
+}
+func (m *SdkClusterDomainActivateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterDomainActivateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterDomainActivateResponse proto.InternalMessageInfo
+
+// Defines a request to deactivate a cluster domain
+type SdkClusterDomainDeactivateRequest struct {
+	// Name of the cluster domain to deactivate
+	ClusterDomainName    string   `protobuf:"bytes,1,opt,name=cluster_domain_name,json=clusterDomainName" json:"cluster_domain_name,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkClusterDomainDeactivateRequest) Reset()         { *m = SdkClusterDomainDeactivateRequest{} }
+func (m *SdkClusterDomainDeactivateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterDomainDeactivateRequest) ProtoMessage()    {}
+func (*SdkClusterDomainDeactivateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{144}
+}
+func (m *SdkClusterDomainDeactivateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterDomainDeactivateRequest.Unmarshal(m, b)
+}
+func (m *SdkClusterDomainDeactivateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterDomainDeactivateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterDomainDeactivateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterDomainDeactivateRequest.Merge(dst, src)
+}
+func (m *SdkClusterDomainDeactivateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterDomainDeactivateRequest.Size(m)
+}
+func (m *SdkClusterDomainDeactivateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterDomainDeactivateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterDomainDeactivateRequest proto.InternalMessageInfo
+
+func (m *SdkClusterDomainDeactivateRequest) GetClusterDomainName() string {
+	if m != nil {
+		return m.ClusterDomainName
+	}
+	return ""
+}
+
+// Empty response
+type SdkClusterDomainDeactivateResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkClusterDomainDeactivateResponse) Reset()         { *m = SdkClusterDomainDeactivateResponse{} }
+func (m *SdkClusterDomainDeactivateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterDomainDeactivateResponse) ProtoMessage()    {}
+func (*SdkClusterDomainDeactivateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{145}
+}
+func (m *SdkClusterDomainDeactivateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterDomainDeactivateResponse.Unmarshal(m, b)
+}
+func (m *SdkClusterDomainDeactivateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterDomainDeactivateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterDomainDeactivateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterDomainDeactivateResponse.Merge(dst, src)
+}
+func (m *SdkClusterDomainDeactivateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterDomainDeactivateResponse.Size(m)
+}
+func (m *SdkClusterDomainDeactivateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterDomainDeactivateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterDomainDeactivateResponse proto.InternalMessageInfo
+
+// Empty request
+type SdkClusterInspectCurrentRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkClusterInspectCurrentRequest) Reset()         { *m = SdkClusterInspectCurrentRequest{} }
+func (m *SdkClusterInspectCurrentRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterInspectCurrentRequest) ProtoMessage()    {}
+func (*SdkClusterInspectCurrentRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{146}
+}
+func (m *SdkClusterInspectCurrentRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterInspectCurrentRequest.Unmarshal(m, b)
+}
+func (m *SdkClusterInspectCurrentRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterInspectCurrentRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterInspectCurrentRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterInspectCurrentRequest.Merge(dst, src)
+}
+func (m *SdkClusterInspectCurrentRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterInspectCurrentRequest.Size(m)
+}
+func (m *SdkClusterInspectCurrentRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterInspectCurrentRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterInspectCurrentRequest proto.InternalMessageInfo
+
+// Defines a response when inspecting the current cluster
+type SdkClusterInspectCurrentResponse struct {
+	// Cluster information
+	Cluster              *StorageCluster `protobuf:"bytes,1,opt,name=cluster" json:"cluster,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}        `json:"-"`
+	XXX_unrecognized     []byte          `json:"-"`
+	XXX_sizecache        int32           `json:"-"`
+}
+
+func (m *SdkClusterInspectCurrentResponse) Reset()         { *m = SdkClusterInspectCurrentResponse{} }
+func (m *SdkClusterInspectCurrentResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterInspectCurrentResponse) ProtoMessage()    {}
+func (*SdkClusterInspectCurrentResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{147}
+}
+func (m *SdkClusterInspectCurrentResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterInspectCurrentResponse.Unmarshal(m, b)
+}
+func (m *SdkClusterInspectCurrentResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterInspectCurrentResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterInspectCurrentResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterInspectCurrentResponse.Merge(dst, src)
+}
+func (m *SdkClusterInspectCurrentResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterInspectCurrentResponse.Size(m)
+}
+func (m *SdkClusterInspectCurrentResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterInspectCurrentResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterInspectCurrentResponse proto.InternalMessageInfo
+
+func (m *SdkClusterInspectCurrentResponse) GetCluster() *StorageCluster {
+	if m != nil {
+		return m.Cluster
+	}
+	return nil
+}
+
+// Defines a request when inspecting a node
+type SdkNodeInspectRequest struct {
+	// Id of node to inspect
+	NodeId               string   `protobuf:"bytes,1,opt,name=node_id,json=nodeId" json:"node_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkNodeInspectRequest) Reset()         { *m = SdkNodeInspectRequest{} }
+func (m *SdkNodeInspectRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkNodeInspectRequest) ProtoMessage()    {}
+func (*SdkNodeInspectRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{148}
+}
+func (m *SdkNodeInspectRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkNodeInspectRequest.Unmarshal(m, b)
+}
+func (m *SdkNodeInspectRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkNodeInspectRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkNodeInspectRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkNodeInspectRequest.Merge(dst, src)
+}
+func (m *SdkNodeInspectRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkNodeInspectRequest.Size(m)
+}
+func (m *SdkNodeInspectRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkNodeInspectRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkNodeInspectRequest proto.InternalMessageInfo
+
+func (m *SdkNodeInspectRequest) GetNodeId() string {
+	if m != nil {
+		return m.NodeId
+	}
+	return ""
+}
+
+// Defines a response when inspecting a node
+type SdkNodeInspectResponse struct {
+	// Node information
+	Node                 *StorageNode `protobuf:"bytes,1,opt,name=node" json:"node,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}     `json:"-"`
+	XXX_unrecognized     []byte       `json:"-"`
+	XXX_sizecache        int32        `json:"-"`
+}
+
+func (m *SdkNodeInspectResponse) Reset()         { *m = SdkNodeInspectResponse{} }
+func (m *SdkNodeInspectResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkNodeInspectResponse) ProtoMessage()    {}
+func (*SdkNodeInspectResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{149}
+}
+func (m *SdkNodeInspectResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkNodeInspectResponse.Unmarshal(m, b)
+}
+func (m *SdkNodeInspectResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkNodeInspectResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkNodeInspectResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkNodeInspectResponse.Merge(dst, src)
+}
+func (m *SdkNodeInspectResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkNodeInspectResponse.Size(m)
+}
+func (m *SdkNodeInspectResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkNodeInspectResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkNodeInspectResponse proto.InternalMessageInfo
+
+func (m *SdkNodeInspectResponse) GetNode() *StorageNode {
+	if m != nil {
+		return m.Node
+	}
+	return nil
+}
+
+// Empty request
+type SdkNodeInspectCurrentRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkNodeInspectCurrentRequest) Reset()         { *m = SdkNodeInspectCurrentRequest{} }
+func (m *SdkNodeInspectCurrentRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkNodeInspectCurrentRequest) ProtoMessage()    {}
+func (*SdkNodeInspectCurrentRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{150}
+}
+func (m *SdkNodeInspectCurrentRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkNodeInspectCurrentRequest.Unmarshal(m, b)
+}
+func (m *SdkNodeInspectCurrentRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkNodeInspectCurrentRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkNodeInspectCurrentRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkNodeInspectCurrentRequest.Merge(dst, src)
+}
+func (m *SdkNodeInspectCurrentRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkNodeInspectCurrentRequest.Size(m)
+}
+func (m *SdkNodeInspectCurrentRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkNodeInspectCurrentRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkNodeInspectCurrentRequest proto.InternalMessageInfo
+
+// Defines a response when inspecting a node
+type SdkNodeInspectCurrentResponse struct {
+	// Node information
+	Node                 *StorageNode `protobuf:"bytes,1,opt,name=node" json:"node,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}     `json:"-"`
+	XXX_unrecognized     []byte       `json:"-"`
+	XXX_sizecache        int32        `json:"-"`
+}
+
+func (m *SdkNodeInspectCurrentResponse) Reset()         { *m = SdkNodeInspectCurrentResponse{} }
+func (m *SdkNodeInspectCurrentResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkNodeInspectCurrentResponse) ProtoMessage()    {}
+func (*SdkNodeInspectCurrentResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{151}
+}
+func (m *SdkNodeInspectCurrentResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkNodeInspectCurrentResponse.Unmarshal(m, b)
+}
+func (m *SdkNodeInspectCurrentResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkNodeInspectCurrentResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkNodeInspectCurrentResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkNodeInspectCurrentResponse.Merge(dst, src)
+}
+func (m *SdkNodeInspectCurrentResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkNodeInspectCurrentResponse.Size(m)
+}
+func (m *SdkNodeInspectCurrentResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkNodeInspectCurrentResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkNodeInspectCurrentResponse proto.InternalMessageInfo
+
+func (m *SdkNodeInspectCurrentResponse) GetNode() *StorageNode {
+	if m != nil {
+		return m.Node
+	}
+	return nil
+}
+
+// Empty request
+type SdkNodeEnumerateRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkNodeEnumerateRequest) Reset()         { *m = SdkNodeEnumerateRequest{} }
+func (m *SdkNodeEnumerateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkNodeEnumerateRequest) ProtoMessage()    {}
+func (*SdkNodeEnumerateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{152}
+}
+func (m *SdkNodeEnumerateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkNodeEnumerateRequest.Unmarshal(m, b)
+}
+func (m *SdkNodeEnumerateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkNodeEnumerateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkNodeEnumerateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkNodeEnumerateRequest.Merge(dst, src)
+}
+func (m *SdkNodeEnumerateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkNodeEnumerateRequest.Size(m)
+}
+func (m *SdkNodeEnumerateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkNodeEnumerateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkNodeEnumerateRequest proto.InternalMessageInfo
+
+// Defines a response with a list of nodes
+type SdkNodeEnumerateResponse struct {
+	// List of all the node ids in the cluster
+	NodeIds              []string `protobuf:"bytes,1,rep,name=node_ids,json=nodeIds" json:"node_ids,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkNodeEnumerateResponse) Reset()         { *m = SdkNodeEnumerateResponse{} }
+func (m *SdkNodeEnumerateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkNodeEnumerateResponse) ProtoMessage()    {}
+func (*SdkNodeEnumerateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{153}
+}
+func (m *SdkNodeEnumerateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkNodeEnumerateResponse.Unmarshal(m, b)
+}
+func (m *SdkNodeEnumerateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkNodeEnumerateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkNodeEnumerateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkNodeEnumerateResponse.Merge(dst, src)
+}
+func (m *SdkNodeEnumerateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkNodeEnumerateResponse.Size(m)
+}
+func (m *SdkNodeEnumerateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkNodeEnumerateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkNodeEnumerateResponse proto.InternalMessageInfo
+
+func (m *SdkNodeEnumerateResponse) GetNodeIds() []string {
+	if m != nil {
+		return m.NodeIds
+	}
+	return nil
+}
+
+// Defines a request to get information about an object store endpoint
+type SdkObjectstoreInspectRequest struct {
+	// Id of the object store
+	ObjectstoreId        string   `protobuf:"bytes,1,opt,name=objectstore_id,json=objectstoreId" json:"objectstore_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkObjectstoreInspectRequest) Reset()         { *m = SdkObjectstoreInspectRequest{} }
+func (m *SdkObjectstoreInspectRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkObjectstoreInspectRequest) ProtoMessage()    {}
+func (*SdkObjectstoreInspectRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{154}
+}
+func (m *SdkObjectstoreInspectRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkObjectstoreInspectRequest.Unmarshal(m, b)
+}
+func (m *SdkObjectstoreInspectRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkObjectstoreInspectRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkObjectstoreInspectRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkObjectstoreInspectRequest.Merge(dst, src)
+}
+func (m *SdkObjectstoreInspectRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkObjectstoreInspectRequest.Size(m)
+}
+func (m *SdkObjectstoreInspectRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkObjectstoreInspectRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkObjectstoreInspectRequest proto.InternalMessageInfo
+
+func (m *SdkObjectstoreInspectRequest) GetObjectstoreId() string {
+	if m != nil {
+		return m.ObjectstoreId
+	}
+	return ""
+}
+
+// Defines a response when inspecting an object store endpoint
+type SdkObjectstoreInspectResponse struct {
+	// Contains information about the object store requested
+	ObjectstoreStatus    *ObjectstoreInfo `protobuf:"bytes,1,opt,name=objectstore_status,json=objectstoreStatus" json:"objectstore_status,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}         `json:"-"`
+	XXX_unrecognized     []byte           `json:"-"`
+	XXX_sizecache        int32            `json:"-"`
+}
+
+func (m *SdkObjectstoreInspectResponse) Reset()         { *m = SdkObjectstoreInspectResponse{} }
+func (m *SdkObjectstoreInspectResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkObjectstoreInspectResponse) ProtoMessage()    {}
+func (*SdkObjectstoreInspectResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{155}
+}
+func (m *SdkObjectstoreInspectResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkObjectstoreInspectResponse.Unmarshal(m, b)
+}
+func (m *SdkObjectstoreInspectResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkObjectstoreInspectResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkObjectstoreInspectResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkObjectstoreInspectResponse.Merge(dst, src)
+}
+func (m *SdkObjectstoreInspectResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkObjectstoreInspectResponse.Size(m)
+}
+func (m *SdkObjectstoreInspectResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkObjectstoreInspectResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkObjectstoreInspectResponse proto.InternalMessageInfo
+
+func (m *SdkObjectstoreInspectResponse) GetObjectstoreStatus() *ObjectstoreInfo {
+	if m != nil {
+		return m.ObjectstoreStatus
+	}
+	return nil
+}
+
+// Defines a request to create an object store
+type SdkObjectstoreCreateRequest struct {
+	// Volume on which objectstore will be running
+	VolumeId             string   `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkObjectstoreCreateRequest) Reset()         { *m = SdkObjectstoreCreateRequest{} }
+func (m *SdkObjectstoreCreateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkObjectstoreCreateRequest) ProtoMessage()    {}
+func (*SdkObjectstoreCreateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{156}
+}
+func (m *SdkObjectstoreCreateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkObjectstoreCreateRequest.Unmarshal(m, b)
+}
+func (m *SdkObjectstoreCreateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkObjectstoreCreateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkObjectstoreCreateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkObjectstoreCreateRequest.Merge(dst, src)
+}
+func (m *SdkObjectstoreCreateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkObjectstoreCreateRequest.Size(m)
+}
+func (m *SdkObjectstoreCreateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkObjectstoreCreateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkObjectstoreCreateRequest proto.InternalMessageInfo
+
+func (m *SdkObjectstoreCreateRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+// Defines a response when an object store has been created for a
+// specified volume
+type SdkObjectstoreCreateResponse struct {
+	// Created objecstore status
+	ObjectstoreStatus    *ObjectstoreInfo `protobuf:"bytes,1,opt,name=objectstore_status,json=objectstoreStatus" json:"objectstore_status,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}         `json:"-"`
+	XXX_unrecognized     []byte           `json:"-"`
+	XXX_sizecache        int32            `json:"-"`
+}
+
+func (m *SdkObjectstoreCreateResponse) Reset()         { *m = SdkObjectstoreCreateResponse{} }
+func (m *SdkObjectstoreCreateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkObjectstoreCreateResponse) ProtoMessage()    {}
+func (*SdkObjectstoreCreateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{157}
+}
+func (m *SdkObjectstoreCreateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkObjectstoreCreateResponse.Unmarshal(m, b)
+}
+func (m *SdkObjectstoreCreateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkObjectstoreCreateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkObjectstoreCreateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkObjectstoreCreateResponse.Merge(dst, src)
+}
+func (m *SdkObjectstoreCreateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkObjectstoreCreateResponse.Size(m)
+}
+func (m *SdkObjectstoreCreateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkObjectstoreCreateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkObjectstoreCreateResponse proto.InternalMessageInfo
+
+func (m *SdkObjectstoreCreateResponse) GetObjectstoreStatus() *ObjectstoreInfo {
+	if m != nil {
+		return m.ObjectstoreStatus
+	}
+	return nil
+}
+
+// Defines a request to delete an object store service from a volume
+type SdkObjectstoreDeleteRequest struct {
+	// Id of the object store to delete
+	ObjectstoreId        string   `protobuf:"bytes,1,opt,name=objectstore_id,json=objectstoreId" json:"objectstore_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkObjectstoreDeleteRequest) Reset()         { *m = SdkObjectstoreDeleteRequest{} }
+func (m *SdkObjectstoreDeleteRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkObjectstoreDeleteRequest) ProtoMessage()    {}
+func (*SdkObjectstoreDeleteRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{158}
+}
+func (m *SdkObjectstoreDeleteRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkObjectstoreDeleteRequest.Unmarshal(m, b)
+}
+func (m *SdkObjectstoreDeleteRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkObjectstoreDeleteRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkObjectstoreDeleteRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkObjectstoreDeleteRequest.Merge(dst, src)
+}
+func (m *SdkObjectstoreDeleteRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkObjectstoreDeleteRequest.Size(m)
+}
+func (m *SdkObjectstoreDeleteRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkObjectstoreDeleteRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkObjectstoreDeleteRequest proto.InternalMessageInfo
+
+func (m *SdkObjectstoreDeleteRequest) GetObjectstoreId() string {
+	if m != nil {
+		return m.ObjectstoreId
+	}
+	return ""
+}
+
+// Empty response
+type SdkObjectstoreDeleteResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkObjectstoreDeleteResponse) Reset()         { *m = SdkObjectstoreDeleteResponse{} }
+func (m *SdkObjectstoreDeleteResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkObjectstoreDeleteResponse) ProtoMessage()    {}
+func (*SdkObjectstoreDeleteResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{159}
+}
+func (m *SdkObjectstoreDeleteResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkObjectstoreDeleteResponse.Unmarshal(m, b)
+}
+func (m *SdkObjectstoreDeleteResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkObjectstoreDeleteResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkObjectstoreDeleteResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkObjectstoreDeleteResponse.Merge(dst, src)
+}
+func (m *SdkObjectstoreDeleteResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkObjectstoreDeleteResponse.Size(m)
+}
+func (m *SdkObjectstoreDeleteResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkObjectstoreDeleteResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkObjectstoreDeleteResponse proto.InternalMessageInfo
+
+// Defines a request to update an object store
+type SdkObjectstoreUpdateRequest struct {
+	// Objectstore Id to update
+	ObjectstoreId string `protobuf:"bytes,1,opt,name=objectstore_id,json=objectstoreId" json:"objectstore_id,omitempty"`
+	// enable/disable objectstore
+	Enable               bool     `protobuf:"varint,2,opt,name=enable" json:"enable,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkObjectstoreUpdateRequest) Reset()         { *m = SdkObjectstoreUpdateRequest{} }
+func (m *SdkObjectstoreUpdateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkObjectstoreUpdateRequest) ProtoMessage()    {}
+func (*SdkObjectstoreUpdateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{160}
+}
+func (m *SdkObjectstoreUpdateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkObjectstoreUpdateRequest.Unmarshal(m, b)
+}
+func (m *SdkObjectstoreUpdateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkObjectstoreUpdateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkObjectstoreUpdateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkObjectstoreUpdateRequest.Merge(dst, src)
+}
+func (m *SdkObjectstoreUpdateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkObjectstoreUpdateRequest.Size(m)
+}
+func (m *SdkObjectstoreUpdateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkObjectstoreUpdateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkObjectstoreUpdateRequest proto.InternalMessageInfo
+
+func (m *SdkObjectstoreUpdateRequest) GetObjectstoreId() string {
+	if m != nil {
+		return m.ObjectstoreId
+	}
+	return ""
+}
+
+func (m *SdkObjectstoreUpdateRequest) GetEnable() bool {
+	if m != nil {
+		return m.Enable
+	}
+	return false
+}
+
+// Empty response
+type SdkObjectstoreUpdateResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkObjectstoreUpdateResponse) Reset()         { *m = SdkObjectstoreUpdateResponse{} }
+func (m *SdkObjectstoreUpdateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkObjectstoreUpdateResponse) ProtoMessage()    {}
+func (*SdkObjectstoreUpdateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{161}
+}
+func (m *SdkObjectstoreUpdateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkObjectstoreUpdateResponse.Unmarshal(m, b)
+}
+func (m *SdkObjectstoreUpdateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkObjectstoreUpdateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkObjectstoreUpdateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkObjectstoreUpdateResponse.Merge(dst, src)
+}
+func (m *SdkObjectstoreUpdateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkObjectstoreUpdateResponse.Size(m)
+}
+func (m *SdkObjectstoreUpdateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkObjectstoreUpdateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkObjectstoreUpdateResponse proto.InternalMessageInfo
+
+// Defines a request to create a backup of a volume to the cloud
+type SdkCloudBackupCreateRequest struct {
+	// VolumeID of the volume for which cloudbackup is requested
+	VolumeId string `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	// Credential id refers to the cloud credentials needed to backup
+	CredentialId string `protobuf:"bytes,2,opt,name=credential_id,json=credentialId" json:"credential_id,omitempty"`
+	// Full indicates if full backup is desired even though incremental is possible
+	Full bool `protobuf:"varint,3,opt,name=full" json:"full,omitempty"`
+	// TaskId of the task performing this backup. This value can be used for
+	// idempotency.
+	TaskId string `protobuf:"bytes,4,opt,name=task_id,json=taskId" json:"task_id,omitempty"`
+	// Labels are list of key value pairs to tag the cloud backup. These labels
+	// are stored in the metadata associated with the backup.
+	Labels               map[string]string `protobuf:"bytes,5,rep,name=labels" json:"labels,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *SdkCloudBackupCreateRequest) Reset()         { *m = SdkCloudBackupCreateRequest{} }
+func (m *SdkCloudBackupCreateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupCreateRequest) ProtoMessage()    {}
+func (*SdkCloudBackupCreateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{162}
+}
+func (m *SdkCloudBackupCreateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupCreateRequest.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupCreateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupCreateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupCreateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupCreateRequest.Merge(dst, src)
+}
+func (m *SdkCloudBackupCreateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupCreateRequest.Size(m)
+}
+func (m *SdkCloudBackupCreateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupCreateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupCreateRequest proto.InternalMessageInfo
+
+func (m *SdkCloudBackupCreateRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupCreateRequest) GetCredentialId() string {
+	if m != nil {
+		return m.CredentialId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupCreateRequest) GetFull() bool {
+	if m != nil {
+		return m.Full
+	}
+	return false
+}
+
+func (m *SdkCloudBackupCreateRequest) GetTaskId() string {
+	if m != nil {
+		return m.TaskId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupCreateRequest) GetLabels() map[string]string {
+	if m != nil {
+		return m.Labels
+	}
+	return nil
+}
+
+// Empty response
+type SdkCloudBackupCreateResponse struct {
+	// TaskId of the task performing the backup
+	TaskId               string   `protobuf:"bytes,1,opt,name=task_id,json=taskId" json:"task_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupCreateResponse) Reset()         { *m = SdkCloudBackupCreateResponse{} }
+func (m *SdkCloudBackupCreateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupCreateResponse) ProtoMessage()    {}
+func (*SdkCloudBackupCreateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{163}
+}
+func (m *SdkCloudBackupCreateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupCreateResponse.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupCreateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupCreateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupCreateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupCreateResponse.Merge(dst, src)
+}
+func (m *SdkCloudBackupCreateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupCreateResponse.Size(m)
+}
+func (m *SdkCloudBackupCreateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupCreateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupCreateResponse proto.InternalMessageInfo
+
+func (m *SdkCloudBackupCreateResponse) GetTaskId() string {
+	if m != nil {
+		return m.TaskId
+	}
+	return ""
+}
+
+// Defines a request to restore a volume from an existing backup stored by
+// a cloud provider
+type SdkCloudBackupRestoreRequest struct {
+	// Backup ID being restored
+	BackupId string `protobuf:"bytes,1,opt,name=backup_id,json=backupId" json:"backup_id,omitempty"`
+	// Optional volume Name of the new volume to be created
+	// in the cluster for restoring the cloudbackup
+	RestoreVolumeName string `protobuf:"bytes,2,opt,name=restore_volume_name,json=restoreVolumeName" json:"restore_volume_name,omitempty"`
+	// The credential to be used for restore operation
+	CredentialId string `protobuf:"bytes,3,opt,name=credential_id,json=credentialId" json:"credential_id,omitempty"`
+	// Optional for provisioning restore
+	// volume (ResoreVolumeName should not be specified)
+	NodeId string `protobuf:"bytes,4,opt,name=node_id,json=nodeId" json:"node_id,omitempty"`
+	// TaskId of the task performing this restore
+	TaskId               string   `protobuf:"bytes,5,opt,name=task_id,json=taskId" json:"task_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupRestoreRequest) Reset()         { *m = SdkCloudBackupRestoreRequest{} }
+func (m *SdkCloudBackupRestoreRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupRestoreRequest) ProtoMessage()    {}
+func (*SdkCloudBackupRestoreRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{164}
+}
+func (m *SdkCloudBackupRestoreRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupRestoreRequest.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupRestoreRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupRestoreRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupRestoreRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupRestoreRequest.Merge(dst, src)
+}
+func (m *SdkCloudBackupRestoreRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupRestoreRequest.Size(m)
+}
+func (m *SdkCloudBackupRestoreRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupRestoreRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupRestoreRequest proto.InternalMessageInfo
+
+func (m *SdkCloudBackupRestoreRequest) GetBackupId() string {
+	if m != nil {
+		return m.BackupId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupRestoreRequest) GetRestoreVolumeName() string {
+	if m != nil {
+		return m.RestoreVolumeName
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupRestoreRequest) GetCredentialId() string {
+	if m != nil {
+		return m.CredentialId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupRestoreRequest) GetNodeId() string {
+	if m != nil {
+		return m.NodeId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupRestoreRequest) GetTaskId() string {
+	if m != nil {
+		return m.TaskId
+	}
+	return ""
+}
+
+// Defines a response when restoring a volume from a backup stored by
+// a cloud provider
+type SdkCloudBackupRestoreResponse struct {
+	// VolumeID to which the backup is being restored
+	RestoreVolumeId string `protobuf:"bytes,1,opt,name=restore_volume_id,json=restoreVolumeId" json:"restore_volume_id,omitempty"`
+	// TaskId of the task performing the restore
+	TaskId               string   `protobuf:"bytes,2,opt,name=task_id,json=taskId" json:"task_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupRestoreResponse) Reset()         { *m = SdkCloudBackupRestoreResponse{} }
+func (m *SdkCloudBackupRestoreResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupRestoreResponse) ProtoMessage()    {}
+func (*SdkCloudBackupRestoreResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{165}
+}
+func (m *SdkCloudBackupRestoreResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupRestoreResponse.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupRestoreResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupRestoreResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupRestoreResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupRestoreResponse.Merge(dst, src)
+}
+func (m *SdkCloudBackupRestoreResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupRestoreResponse.Size(m)
+}
+func (m *SdkCloudBackupRestoreResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupRestoreResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupRestoreResponse proto.InternalMessageInfo
+
+func (m *SdkCloudBackupRestoreResponse) GetRestoreVolumeId() string {
+	if m != nil {
+		return m.RestoreVolumeId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupRestoreResponse) GetTaskId() string {
+	if m != nil {
+		return m.TaskId
+	}
+	return ""
+}
+
+// Defines a request to delete a single backup stored by a cloud provider
+type SdkCloudBackupDeleteRequest struct {
+	// ID is the ID of the cloud backup
+	BackupId string `protobuf:"bytes,1,opt,name=backup_id,json=backupId" json:"backup_id,omitempty"`
+	// Credential id is the credential for cloud to be used for the request
+	CredentialId string `protobuf:"bytes,2,opt,name=credential_id,json=credentialId" json:"credential_id,omitempty"`
+	// Force Delete cloudbackup even if there are dependencies. This may be
+	// needed if the backup is an incremental backup and subsequent backups
+	// depend on this backup specified by `backup_id`.
+	Force                bool     `protobuf:"varint,3,opt,name=force" json:"force,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupDeleteRequest) Reset()         { *m = SdkCloudBackupDeleteRequest{} }
+func (m *SdkCloudBackupDeleteRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupDeleteRequest) ProtoMessage()    {}
+func (*SdkCloudBackupDeleteRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{166}
+}
+func (m *SdkCloudBackupDeleteRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupDeleteRequest.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupDeleteRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupDeleteRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupDeleteRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupDeleteRequest.Merge(dst, src)
+}
+func (m *SdkCloudBackupDeleteRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupDeleteRequest.Size(m)
+}
+func (m *SdkCloudBackupDeleteRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupDeleteRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupDeleteRequest proto.InternalMessageInfo
+
+func (m *SdkCloudBackupDeleteRequest) GetBackupId() string {
+	if m != nil {
+		return m.BackupId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupDeleteRequest) GetCredentialId() string {
+	if m != nil {
+		return m.CredentialId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupDeleteRequest) GetForce() bool {
+	if m != nil {
+		return m.Force
+	}
+	return false
+}
+
+// Empty response
+type SdkCloudBackupDeleteResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupDeleteResponse) Reset()         { *m = SdkCloudBackupDeleteResponse{} }
+func (m *SdkCloudBackupDeleteResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupDeleteResponse) ProtoMessage()    {}
+func (*SdkCloudBackupDeleteResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{167}
+}
+func (m *SdkCloudBackupDeleteResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupDeleteResponse.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupDeleteResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupDeleteResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupDeleteResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupDeleteResponse.Merge(dst, src)
+}
+func (m *SdkCloudBackupDeleteResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupDeleteResponse.Size(m)
+}
+func (m *SdkCloudBackupDeleteResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupDeleteResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupDeleteResponse proto.InternalMessageInfo
+
+// Defines a request to delete all the backups stored by a cloud provider
+// for a specified volume
+type SdkCloudBackupDeleteAllRequest struct {
+	// id of the volume for the request
+	SrcVolumeId string `protobuf:"bytes,1,opt,name=src_volume_id,json=srcVolumeId" json:"src_volume_id,omitempty"`
+	// Credential id is the credential for cloud to be used for the request
+	CredentialId         string   `protobuf:"bytes,2,opt,name=credential_id,json=credentialId" json:"credential_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupDeleteAllRequest) Reset()         { *m = SdkCloudBackupDeleteAllRequest{} }
+func (m *SdkCloudBackupDeleteAllRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupDeleteAllRequest) ProtoMessage()    {}
+func (*SdkCloudBackupDeleteAllRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{168}
+}
+func (m *SdkCloudBackupDeleteAllRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupDeleteAllRequest.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupDeleteAllRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupDeleteAllRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupDeleteAllRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupDeleteAllRequest.Merge(dst, src)
+}
+func (m *SdkCloudBackupDeleteAllRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupDeleteAllRequest.Size(m)
+}
+func (m *SdkCloudBackupDeleteAllRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupDeleteAllRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupDeleteAllRequest proto.InternalMessageInfo
+
+func (m *SdkCloudBackupDeleteAllRequest) GetSrcVolumeId() string {
+	if m != nil {
+		return m.SrcVolumeId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupDeleteAllRequest) GetCredentialId() string {
+	if m != nil {
+		return m.CredentialId
+	}
+	return ""
+}
+
+// Empty response
+type SdkCloudBackupDeleteAllResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupDeleteAllResponse) Reset()         { *m = SdkCloudBackupDeleteAllResponse{} }
+func (m *SdkCloudBackupDeleteAllResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupDeleteAllResponse) ProtoMessage()    {}
+func (*SdkCloudBackupDeleteAllResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{169}
+}
+func (m *SdkCloudBackupDeleteAllResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupDeleteAllResponse.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupDeleteAllResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupDeleteAllResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupDeleteAllResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupDeleteAllResponse.Merge(dst, src)
+}
+func (m *SdkCloudBackupDeleteAllResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupDeleteAllResponse.Size(m)
+}
+func (m *SdkCloudBackupDeleteAllResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupDeleteAllResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupDeleteAllResponse proto.InternalMessageInfo
+
+// Defines a request to list the backups stored by a cloud provider.
+// The following combinations can be used to get cloud backup information:
+//
+// * For a specific volume in current cluster: Set `src_volume_id` to your desired volume id
+// and do not provide `cluster_id` and `all`.
+// * For a specific volume in a specific cluster: Set `src_volume_id` to your desired volume id
+// and specify `cluster_id`.
+// * For a specific volume in all clusters: Set `src_volume_id` to your desired volume id
+// and set `all` to true, do not provide `cluster_id`.
+// * For all volumes in current cluster: do not provide `cluster_id`, `volume_id` and `all`.
+// * For all volumes in a specific cluster: Set `cluster_id` to your desired cluster id
+// and do not provide `volume_id` and `all`.
+// * For all volumes in all clusters: Set `all` to true do not provide `volume_id` and `cluster_id`.
+type SdkCloudBackupEnumerateWithFiltersRequest struct {
+	// (optional) Source id of the volume for the request.
+	SrcVolumeId string `protobuf:"bytes,1,opt,name=src_volume_id,json=srcVolumeId" json:"src_volume_id,omitempty"`
+	// (optional) Cluster id specifies the cluster for the request
+	ClusterId string `protobuf:"bytes,2,opt,name=cluster_id,json=clusterId" json:"cluster_id,omitempty"`
+	// Credential id is the credential for cloud to be used for the request
+	CredentialId string `protobuf:"bytes,3,opt,name=credential_id,json=credentialId" json:"credential_id,omitempty"`
+	// (optional) All indicates if the request should show cloud backups for all clusters or the current cluster.
+	All                  bool     `protobuf:"varint,4,opt,name=all" json:"all,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupEnumerateWithFiltersRequest) Reset() {
+	*m = SdkCloudBackupEnumerateWithFiltersRequest{}
+}
+func (m *SdkCloudBackupEnumerateWithFiltersRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupEnumerateWithFiltersRequest) ProtoMessage()    {}
+func (*SdkCloudBackupEnumerateWithFiltersRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{170}
+}
+func (m *SdkCloudBackupEnumerateWithFiltersRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupEnumerateWithFiltersRequest.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupEnumerateWithFiltersRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupEnumerateWithFiltersRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupEnumerateWithFiltersRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupEnumerateWithFiltersRequest.Merge(dst, src)
+}
+func (m *SdkCloudBackupEnumerateWithFiltersRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupEnumerateWithFiltersRequest.Size(m)
+}
+func (m *SdkCloudBackupEnumerateWithFiltersRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupEnumerateWithFiltersRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupEnumerateWithFiltersRequest proto.InternalMessageInfo
+
+func (m *SdkCloudBackupEnumerateWithFiltersRequest) GetSrcVolumeId() string {
+	if m != nil {
+		return m.SrcVolumeId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupEnumerateWithFiltersRequest) GetClusterId() string {
+	if m != nil {
+		return m.ClusterId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupEnumerateWithFiltersRequest) GetCredentialId() string {
+	if m != nil {
+		return m.CredentialId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupEnumerateWithFiltersRequest) GetAll() bool {
+	if m != nil {
+		return m.All
+	}
+	return false
+}
+
+// SdkCloudBackupInfo has information about a backup stored by a cloud provider
+type SdkCloudBackupInfo struct {
+	// This is the id as represented by the cloud provider
+	Id string `protobuf:"bytes,1,opt,name=id" json:"id,omitempty"`
+	// Source volumeID of the backup
+	SrcVolumeId string `protobuf:"bytes,2,opt,name=src_volume_id,json=srcVolumeId" json:"src_volume_id,omitempty"`
+	// Name of the sourceVolume of the backup
+	SrcVolumeName string `protobuf:"bytes,3,opt,name=src_volume_name,json=srcVolumeName" json:"src_volume_name,omitempty"`
+	// Timestamp is the timestamp at which the source volume
+	// was backed up to cloud
+	Timestamp *timestamp.Timestamp `protobuf:"bytes,4,opt,name=timestamp" json:"timestamp,omitempty"`
+	// Metadata associated with the backup
+	Metadata map[string]string `protobuf:"bytes,5,rep,name=metadata" json:"metadata,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	// Status indicates the status of the backup
+	Status               SdkCloudBackupStatusType `protobuf:"varint,6,opt,name=status,enum=openstorage.api.SdkCloudBackupStatusType" json:"status,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                 `json:"-"`
+	XXX_unrecognized     []byte                   `json:"-"`
+	XXX_sizecache        int32                    `json:"-"`
+}
+
+func (m *SdkCloudBackupInfo) Reset()         { *m = SdkCloudBackupInfo{} }
+func (m *SdkCloudBackupInfo) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupInfo) ProtoMessage()    {}
+func (*SdkCloudBackupInfo) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{171}
+}
+func (m *SdkCloudBackupInfo) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupInfo.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupInfo) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupInfo.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupInfo) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupInfo.Merge(dst, src)
+}
+func (m *SdkCloudBackupInfo) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupInfo.Size(m)
+}
+func (m *SdkCloudBackupInfo) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupInfo.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupInfo proto.InternalMessageInfo
+
+func (m *SdkCloudBackupInfo) GetId() string {
+	if m != nil {
+		return m.Id
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupInfo) GetSrcVolumeId() string {
+	if m != nil {
+		return m.SrcVolumeId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupInfo) GetSrcVolumeName() string {
+	if m != nil {
+		return m.SrcVolumeName
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupInfo) GetTimestamp() *timestamp.Timestamp {
+	if m != nil {
+		return m.Timestamp
+	}
+	return nil
+}
+
+func (m *SdkCloudBackupInfo) GetMetadata() map[string]string {
+	if m != nil {
+		return m.Metadata
+	}
+	return nil
+}
+
+func (m *SdkCloudBackupInfo) GetStatus() SdkCloudBackupStatusType {
+	if m != nil {
+		return m.Status
+	}
+	return SdkCloudBackupStatusType_SdkCloudBackupStatusTypeUnknown
+}
+
+// Defines a response which lists all the backups stored by a cloud provider
+type SdkCloudBackupEnumerateWithFiltersResponse struct {
+	Backups              []*SdkCloudBackupInfo `protobuf:"bytes,1,rep,name=backups" json:"backups,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}              `json:"-"`
+	XXX_unrecognized     []byte                `json:"-"`
+	XXX_sizecache        int32                 `json:"-"`
+}
+
+func (m *SdkCloudBackupEnumerateWithFiltersResponse) Reset() {
+	*m = SdkCloudBackupEnumerateWithFiltersResponse{}
+}
+func (m *SdkCloudBackupEnumerateWithFiltersResponse) String() string {
+	return proto.CompactTextString(m)
+}
+func (*SdkCloudBackupEnumerateWithFiltersResponse) ProtoMessage() {}
+func (*SdkCloudBackupEnumerateWithFiltersResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{172}
+}
+func (m *SdkCloudBackupEnumerateWithFiltersResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupEnumerateWithFiltersResponse.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupEnumerateWithFiltersResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupEnumerateWithFiltersResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupEnumerateWithFiltersResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupEnumerateWithFiltersResponse.Merge(dst, src)
+}
+func (m *SdkCloudBackupEnumerateWithFiltersResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupEnumerateWithFiltersResponse.Size(m)
+}
+func (m *SdkCloudBackupEnumerateWithFiltersResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupEnumerateWithFiltersResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupEnumerateWithFiltersResponse proto.InternalMessageInfo
+
+func (m *SdkCloudBackupEnumerateWithFiltersResponse) GetBackups() []*SdkCloudBackupInfo {
+	if m != nil {
+		return m.Backups
+	}
+	return nil
+}
+
+// SdkCloudBackupStatus defines the status of a backup stored by a cloud provider
+type SdkCloudBackupStatus struct {
+	// This is the id as represented by the cloud provider
+	BackupId string `protobuf:"bytes,1,opt,name=backup_id,json=backupId" json:"backup_id,omitempty"`
+	// OpType indicates if this is a backup or restore
+	Optype SdkCloudBackupOpType `protobuf:"varint,2,opt,name=optype,enum=openstorage.api.SdkCloudBackupOpType" json:"optype,omitempty"`
+	// State indicates if the op is currently active/done/failed
+	Status SdkCloudBackupStatusType `protobuf:"varint,3,opt,name=status,enum=openstorage.api.SdkCloudBackupStatusType" json:"status,omitempty"`
+	// BytesDone indicates total Bytes uploaded/downloaded
+	BytesDone uint64 `protobuf:"varint,4,opt,name=bytes_done,json=bytesDone" json:"bytes_done,omitempty"`
+	// StartTime indicates Op's start time
+	StartTime *timestamp.Timestamp `protobuf:"bytes,5,opt,name=start_time,json=startTime" json:"start_time,omitempty"`
+	// CompletedTime indicates Op's completed time
+	CompletedTime *timestamp.Timestamp `protobuf:"bytes,6,opt,name=completed_time,json=completedTime" json:"completed_time,omitempty"`
+	// NodeID is the ID of the node where this Op is active
+	NodeId string `protobuf:"bytes,7,opt,name=node_id,json=nodeId" json:"node_id,omitempty"`
+	// SourceVolumeID is the the volume that is either being backed up to cloud
+	// or target volume to which a backup is being restored
+	SrcVolumeId string `protobuf:"bytes,8,opt,name=src_volume_id,json=srcVolumeId" json:"src_volume_id,omitempty"`
+	// Info currently indicates the failure cause for failed backup/restore
+	Info []string `protobuf:"bytes,9,rep,name=info" json:"info,omitempty"`
+	// CredentialId is the credential used for cloud with this backup/restore op
+	CredentialId string `protobuf:"bytes,10,opt,name=credential_id,json=credentialId" json:"credential_id,omitempty"`
+	// BytesTotal is the total number of bytes being transferred
+	BytesTotal uint64 `protobuf:"varint,11,opt,name=bytes_total,json=bytesTotal" json:"bytes_total,omitempty"`
+	// ETASeconds is the number of seconds for cloud backup completion
+	EtaSeconds int64 `protobuf:"varint,12,opt,name=eta_seconds,json=etaSeconds" json:"eta_seconds,omitempty"`
+	// string group_id volume's group id if this was group cloud backup
+	GroupId              string   `protobuf:"bytes,13,opt,name=group_id,json=groupId" json:"group_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupStatus) Reset()         { *m = SdkCloudBackupStatus{} }
+func (m *SdkCloudBackupStatus) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupStatus) ProtoMessage()    {}
+func (*SdkCloudBackupStatus) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{173}
+}
+func (m *SdkCloudBackupStatus) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupStatus.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupStatus) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupStatus.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupStatus) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupStatus.Merge(dst, src)
+}
+func (m *SdkCloudBackupStatus) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupStatus.Size(m)
+}
+func (m *SdkCloudBackupStatus) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupStatus.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupStatus proto.InternalMessageInfo
+
+func (m *SdkCloudBackupStatus) GetBackupId() string {
+	if m != nil {
+		return m.BackupId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupStatus) GetOptype() SdkCloudBackupOpType {
+	if m != nil {
+		return m.Optype
+	}
+	return SdkCloudBackupOpType_SdkCloudBackupOpTypeUnknown
+}
+
+func (m *SdkCloudBackupStatus) GetStatus() SdkCloudBackupStatusType {
+	if m != nil {
+		return m.Status
+	}
+	return SdkCloudBackupStatusType_SdkCloudBackupStatusTypeUnknown
+}
+
+func (m *SdkCloudBackupStatus) GetBytesDone() uint64 {
+	if m != nil {
+		return m.BytesDone
+	}
+	return 0
+}
+
+func (m *SdkCloudBackupStatus) GetStartTime() *timestamp.Timestamp {
+	if m != nil {
+		return m.StartTime
+	}
+	return nil
+}
+
+func (m *SdkCloudBackupStatus) GetCompletedTime() *timestamp.Timestamp {
+	if m != nil {
+		return m.CompletedTime
+	}
+	return nil
+}
+
+func (m *SdkCloudBackupStatus) GetNodeId() string {
+	if m != nil {
+		return m.NodeId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupStatus) GetSrcVolumeId() string {
+	if m != nil {
+		return m.SrcVolumeId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupStatus) GetInfo() []string {
+	if m != nil {
+		return m.Info
+	}
+	return nil
+}
+
+func (m *SdkCloudBackupStatus) GetCredentialId() string {
+	if m != nil {
+		return m.CredentialId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupStatus) GetBytesTotal() uint64 {
+	if m != nil {
+		return m.BytesTotal
+	}
+	return 0
+}
+
+func (m *SdkCloudBackupStatus) GetEtaSeconds() int64 {
+	if m != nil {
+		return m.EtaSeconds
+	}
+	return 0
+}
+
+func (m *SdkCloudBackupStatus) GetGroupId() string {
+	if m != nil {
+		return m.GroupId
+	}
+	return ""
+}
+
+// Defines a request to retreive the status of a backup or restore for a
+// specified volume
+type SdkCloudBackupStatusRequest struct {
+	// (optional) VolumeId is a value which is used to get information on the
+	// status of a backup for the specified volume. If no volume id and task_id
+	// is provided, then status for all volumes is returned.
+	VolumeId string `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	// Local indicates if only those backups/restores that are
+	// active on current node must be returned
+	Local bool `protobuf:"varint,2,opt,name=local" json:"local,omitempty"`
+	// TaskId of the backup/restore task, if this is specified,
+	// volume_id is ignored.
+	TaskId               string   `protobuf:"bytes,3,opt,name=task_id,json=taskId" json:"task_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupStatusRequest) Reset()         { *m = SdkCloudBackupStatusRequest{} }
+func (m *SdkCloudBackupStatusRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupStatusRequest) ProtoMessage()    {}
+func (*SdkCloudBackupStatusRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{174}
+}
+func (m *SdkCloudBackupStatusRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupStatusRequest.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupStatusRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupStatusRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupStatusRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupStatusRequest.Merge(dst, src)
+}
+func (m *SdkCloudBackupStatusRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupStatusRequest.Size(m)
+}
+func (m *SdkCloudBackupStatusRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupStatusRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupStatusRequest proto.InternalMessageInfo
+
+func (m *SdkCloudBackupStatusRequest) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupStatusRequest) GetLocal() bool {
+	if m != nil {
+		return m.Local
+	}
+	return false
+}
+
+func (m *SdkCloudBackupStatusRequest) GetTaskId() string {
+	if m != nil {
+		return m.TaskId
+	}
+	return ""
+}
+
+// Defines a response containing the status of the backups for a specified volume
+type SdkCloudBackupStatusResponse struct {
+	// Statuses is list of currently active/failed/done backup/restores where
+	// the key is the id of the task performing backup/restore.
+	Statuses             map[string]*SdkCloudBackupStatus `protobuf:"bytes,1,rep,name=statuses" json:"statuses,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}                         `json:"-"`
+	XXX_unrecognized     []byte                           `json:"-"`
+	XXX_sizecache        int32                            `json:"-"`
+}
+
+func (m *SdkCloudBackupStatusResponse) Reset()         { *m = SdkCloudBackupStatusResponse{} }
+func (m *SdkCloudBackupStatusResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupStatusResponse) ProtoMessage()    {}
+func (*SdkCloudBackupStatusResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{175}
+}
+func (m *SdkCloudBackupStatusResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupStatusResponse.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupStatusResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupStatusResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupStatusResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupStatusResponse.Merge(dst, src)
+}
+func (m *SdkCloudBackupStatusResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupStatusResponse.Size(m)
+}
+func (m *SdkCloudBackupStatusResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupStatusResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupStatusResponse proto.InternalMessageInfo
+
+func (m *SdkCloudBackupStatusResponse) GetStatuses() map[string]*SdkCloudBackupStatus {
+	if m != nil {
+		return m.Statuses
+	}
+	return nil
+}
+
+// Defines a request to get catalog of a backup stored by a cloud provider
+type SdkCloudBackupCatalogRequest struct {
+	// Id of the backup
+	BackupId string `protobuf:"bytes,1,opt,name=backup_id,json=backupId" json:"backup_id,omitempty"`
+	// Credential id describe the credentials for the cloud
+	CredentialId         string   `protobuf:"bytes,2,opt,name=credential_id,json=credentialId" json:"credential_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupCatalogRequest) Reset()         { *m = SdkCloudBackupCatalogRequest{} }
+func (m *SdkCloudBackupCatalogRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupCatalogRequest) ProtoMessage()    {}
+func (*SdkCloudBackupCatalogRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{176}
+}
+func (m *SdkCloudBackupCatalogRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupCatalogRequest.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupCatalogRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupCatalogRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupCatalogRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupCatalogRequest.Merge(dst, src)
+}
+func (m *SdkCloudBackupCatalogRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupCatalogRequest.Size(m)
+}
+func (m *SdkCloudBackupCatalogRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupCatalogRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupCatalogRequest proto.InternalMessageInfo
+
+func (m *SdkCloudBackupCatalogRequest) GetBackupId() string {
+	if m != nil {
+		return m.BackupId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupCatalogRequest) GetCredentialId() string {
+	if m != nil {
+		return m.CredentialId
+	}
+	return ""
+}
+
+// Defines a response containing the contents of a backup stored by a cloud provider
+type SdkCloudBackupCatalogResponse struct {
+	// Contents is listing of backup contents
+	Contents             []string `protobuf:"bytes,1,rep,name=contents" json:"contents,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupCatalogResponse) Reset()         { *m = SdkCloudBackupCatalogResponse{} }
+func (m *SdkCloudBackupCatalogResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupCatalogResponse) ProtoMessage()    {}
+func (*SdkCloudBackupCatalogResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{177}
+}
+func (m *SdkCloudBackupCatalogResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupCatalogResponse.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupCatalogResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupCatalogResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupCatalogResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupCatalogResponse.Merge(dst, src)
+}
+func (m *SdkCloudBackupCatalogResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupCatalogResponse.Size(m)
+}
+func (m *SdkCloudBackupCatalogResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupCatalogResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupCatalogResponse proto.InternalMessageInfo
+
+func (m *SdkCloudBackupCatalogResponse) GetContents() []string {
+	if m != nil {
+		return m.Contents
+	}
+	return nil
+}
+
+// SdkCloudBackupHistoryItem contains information about a backup for a
+// specific volume
+type SdkCloudBackupHistoryItem struct {
+	// SrcVolumeID is volume ID which was backedup
+	SrcVolumeId string `protobuf:"bytes,1,opt,name=src_volume_id,json=srcVolumeId" json:"src_volume_id,omitempty"`
+	// TimeStamp is the time at which either backup completed/failed
+	Timestamp *timestamp.Timestamp `protobuf:"bytes,2,opt,name=timestamp" json:"timestamp,omitempty"`
+	// Status indicates whether backup was completed/failed
+	Status               SdkCloudBackupStatusType `protobuf:"varint,3,opt,name=status,enum=openstorage.api.SdkCloudBackupStatusType" json:"status,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                 `json:"-"`
+	XXX_unrecognized     []byte                   `json:"-"`
+	XXX_sizecache        int32                    `json:"-"`
+}
+
+func (m *SdkCloudBackupHistoryItem) Reset()         { *m = SdkCloudBackupHistoryItem{} }
+func (m *SdkCloudBackupHistoryItem) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupHistoryItem) ProtoMessage()    {}
+func (*SdkCloudBackupHistoryItem) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{178}
+}
+func (m *SdkCloudBackupHistoryItem) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupHistoryItem.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupHistoryItem) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupHistoryItem.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupHistoryItem) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupHistoryItem.Merge(dst, src)
+}
+func (m *SdkCloudBackupHistoryItem) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupHistoryItem.Size(m)
+}
+func (m *SdkCloudBackupHistoryItem) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupHistoryItem.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupHistoryItem proto.InternalMessageInfo
+
+func (m *SdkCloudBackupHistoryItem) GetSrcVolumeId() string {
+	if m != nil {
+		return m.SrcVolumeId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupHistoryItem) GetTimestamp() *timestamp.Timestamp {
+	if m != nil {
+		return m.Timestamp
+	}
+	return nil
+}
+
+func (m *SdkCloudBackupHistoryItem) GetStatus() SdkCloudBackupStatusType {
+	if m != nil {
+		return m.Status
+	}
+	return SdkCloudBackupStatusType_SdkCloudBackupStatusTypeUnknown
+}
+
+// Defines a request to retreive the history of the backups for
+// a specific volume to a cloud provider
+type SdkCloudBackupHistoryRequest struct {
+	// This optional value defines which history of backups is being
+	// requested. If not provided, it will return the history for all volumes.
+	SrcVolumeId          string   `protobuf:"bytes,1,opt,name=src_volume_id,json=srcVolumeId" json:"src_volume_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupHistoryRequest) Reset()         { *m = SdkCloudBackupHistoryRequest{} }
+func (m *SdkCloudBackupHistoryRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupHistoryRequest) ProtoMessage()    {}
+func (*SdkCloudBackupHistoryRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{179}
+}
+func (m *SdkCloudBackupHistoryRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupHistoryRequest.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupHistoryRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupHistoryRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupHistoryRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupHistoryRequest.Merge(dst, src)
+}
+func (m *SdkCloudBackupHistoryRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupHistoryRequest.Size(m)
+}
+func (m *SdkCloudBackupHistoryRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupHistoryRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupHistoryRequest proto.InternalMessageInfo
+
+func (m *SdkCloudBackupHistoryRequest) GetSrcVolumeId() string {
+	if m != nil {
+		return m.SrcVolumeId
+	}
+	return ""
+}
+
+// Defines a response containing a list of history of backups to a cloud provider
+type SdkCloudBackupHistoryResponse struct {
+	// HistoryList is list of past backups on this volume
+	HistoryList          []*SdkCloudBackupHistoryItem `protobuf:"bytes,1,rep,name=history_list,json=historyList" json:"history_list,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                     `json:"-"`
+	XXX_unrecognized     []byte                       `json:"-"`
+	XXX_sizecache        int32                        `json:"-"`
+}
+
+func (m *SdkCloudBackupHistoryResponse) Reset()         { *m = SdkCloudBackupHistoryResponse{} }
+func (m *SdkCloudBackupHistoryResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupHistoryResponse) ProtoMessage()    {}
+func (*SdkCloudBackupHistoryResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{180}
+}
+func (m *SdkCloudBackupHistoryResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupHistoryResponse.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupHistoryResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupHistoryResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupHistoryResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupHistoryResponse.Merge(dst, src)
+}
+func (m *SdkCloudBackupHistoryResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupHistoryResponse.Size(m)
+}
+func (m *SdkCloudBackupHistoryResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupHistoryResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupHistoryResponse proto.InternalMessageInfo
+
+func (m *SdkCloudBackupHistoryResponse) GetHistoryList() []*SdkCloudBackupHistoryItem {
+	if m != nil {
+		return m.HistoryList
+	}
+	return nil
+}
+
+// Defines a request to change the state of a backup or restore to or
+// from a cloud provider
+type SdkCloudBackupStateChangeRequest struct {
+	// Describes the backup/restore task
+	// state change is being requested
+	TaskId string `protobuf:"bytes,1,opt,name=task_id,json=taskId" json:"task_id,omitempty"`
+	// The desired state of the operation
+	RequestedState       SdkCloudBackupRequestedState `protobuf:"varint,2,opt,name=requested_state,json=requestedState,enum=openstorage.api.SdkCloudBackupRequestedState" json:"requested_state,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                     `json:"-"`
+	XXX_unrecognized     []byte                       `json:"-"`
+	XXX_sizecache        int32                        `json:"-"`
+}
+
+func (m *SdkCloudBackupStateChangeRequest) Reset()         { *m = SdkCloudBackupStateChangeRequest{} }
+func (m *SdkCloudBackupStateChangeRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupStateChangeRequest) ProtoMessage()    {}
+func (*SdkCloudBackupStateChangeRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{181}
+}
+func (m *SdkCloudBackupStateChangeRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupStateChangeRequest.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupStateChangeRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupStateChangeRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupStateChangeRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupStateChangeRequest.Merge(dst, src)
+}
+func (m *SdkCloudBackupStateChangeRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupStateChangeRequest.Size(m)
+}
+func (m *SdkCloudBackupStateChangeRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupStateChangeRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupStateChangeRequest proto.InternalMessageInfo
+
+func (m *SdkCloudBackupStateChangeRequest) GetTaskId() string {
+	if m != nil {
+		return m.TaskId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupStateChangeRequest) GetRequestedState() SdkCloudBackupRequestedState {
+	if m != nil {
+		return m.RequestedState
+	}
+	return SdkCloudBackupRequestedState_SdkCloudBackupRequestedStateUnknown
+}
+
+// Empty response
+type SdkCloudBackupStateChangeResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupStateChangeResponse) Reset()         { *m = SdkCloudBackupStateChangeResponse{} }
+func (m *SdkCloudBackupStateChangeResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupStateChangeResponse) ProtoMessage()    {}
+func (*SdkCloudBackupStateChangeResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{182}
+}
+func (m *SdkCloudBackupStateChangeResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupStateChangeResponse.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupStateChangeResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupStateChangeResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupStateChangeResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupStateChangeResponse.Merge(dst, src)
+}
+func (m *SdkCloudBackupStateChangeResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupStateChangeResponse.Size(m)
+}
+func (m *SdkCloudBackupStateChangeResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupStateChangeResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupStateChangeResponse proto.InternalMessageInfo
+
+// SdkCloudBackupScheduleInfo describes a schedule for volume backups to
+// a cloud provider
+type SdkCloudBackupScheduleInfo struct {
+	// The schedule's source volume
+	SrcVolumeId string `protobuf:"bytes,1,opt,name=src_volume_id,json=srcVolumeId" json:"src_volume_id,omitempty"`
+	// The cloud credential used with this schedule
+	CredentialId string `protobuf:"bytes,2,opt,name=credential_id,json=credentialId" json:"credential_id,omitempty"`
+	// Schedules are the frequencies of the backup
+	Schedules []*SdkSchedulePolicyInterval `protobuf:"bytes,3,rep,name=schedules" json:"schedules,omitempty"`
+	// MaxBackups are the maximum number of backups retained
+	// in cloud.Older backups are deleted
+	MaxBackups uint64 `protobuf:"varint,4,opt,name=max_backups,json=maxBackups" json:"max_backups,omitempty"`
+	// Full indicates if scheduled backups should always be full and never incremental.
+	Full                 bool     `protobuf:"varint,5,opt,name=full" json:"full,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupScheduleInfo) Reset()         { *m = SdkCloudBackupScheduleInfo{} }
+func (m *SdkCloudBackupScheduleInfo) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupScheduleInfo) ProtoMessage()    {}
+func (*SdkCloudBackupScheduleInfo) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{183}
+}
+func (m *SdkCloudBackupScheduleInfo) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupScheduleInfo.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupScheduleInfo) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupScheduleInfo.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupScheduleInfo) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupScheduleInfo.Merge(dst, src)
+}
+func (m *SdkCloudBackupScheduleInfo) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupScheduleInfo.Size(m)
+}
+func (m *SdkCloudBackupScheduleInfo) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupScheduleInfo.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupScheduleInfo proto.InternalMessageInfo
+
+func (m *SdkCloudBackupScheduleInfo) GetSrcVolumeId() string {
+	if m != nil {
+		return m.SrcVolumeId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupScheduleInfo) GetCredentialId() string {
+	if m != nil {
+		return m.CredentialId
+	}
+	return ""
+}
+
+func (m *SdkCloudBackupScheduleInfo) GetSchedules() []*SdkSchedulePolicyInterval {
+	if m != nil {
+		return m.Schedules
+	}
+	return nil
+}
+
+func (m *SdkCloudBackupScheduleInfo) GetMaxBackups() uint64 {
+	if m != nil {
+		return m.MaxBackups
+	}
+	return 0
+}
+
+func (m *SdkCloudBackupScheduleInfo) GetFull() bool {
+	if m != nil {
+		return m.Full
+	}
+	return false
+}
+
+// Defines a request to create a schedule for volume backups to a
+// cloud provider
+type SdkCloudBackupSchedCreateRequest struct {
+	// Cloud Backup Schedule info
+	CloudSchedInfo       *SdkCloudBackupScheduleInfo `protobuf:"bytes,1,opt,name=cloud_sched_info,json=cloudSchedInfo" json:"cloud_sched_info,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                    `json:"-"`
+	XXX_unrecognized     []byte                      `json:"-"`
+	XXX_sizecache        int32                       `json:"-"`
+}
+
+func (m *SdkCloudBackupSchedCreateRequest) Reset()         { *m = SdkCloudBackupSchedCreateRequest{} }
+func (m *SdkCloudBackupSchedCreateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupSchedCreateRequest) ProtoMessage()    {}
+func (*SdkCloudBackupSchedCreateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{184}
+}
+func (m *SdkCloudBackupSchedCreateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupSchedCreateRequest.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupSchedCreateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupSchedCreateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupSchedCreateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupSchedCreateRequest.Merge(dst, src)
+}
+func (m *SdkCloudBackupSchedCreateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupSchedCreateRequest.Size(m)
+}
+func (m *SdkCloudBackupSchedCreateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupSchedCreateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupSchedCreateRequest proto.InternalMessageInfo
+
+func (m *SdkCloudBackupSchedCreateRequest) GetCloudSchedInfo() *SdkCloudBackupScheduleInfo {
+	if m != nil {
+		return m.CloudSchedInfo
+	}
+	return nil
+}
+
+// Defines a response containing the id of a schedule for a volume backup
+// to a cloud provider
+type SdkCloudBackupSchedCreateResponse struct {
+	// Id of newly created backup schedule
+	BackupScheduleId     string   `protobuf:"bytes,1,opt,name=backup_schedule_id,json=backupScheduleId" json:"backup_schedule_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupSchedCreateResponse) Reset()         { *m = SdkCloudBackupSchedCreateResponse{} }
+func (m *SdkCloudBackupSchedCreateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupSchedCreateResponse) ProtoMessage()    {}
+func (*SdkCloudBackupSchedCreateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{185}
+}
+func (m *SdkCloudBackupSchedCreateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupSchedCreateResponse.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupSchedCreateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupSchedCreateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupSchedCreateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupSchedCreateResponse.Merge(dst, src)
+}
+func (m *SdkCloudBackupSchedCreateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupSchedCreateResponse.Size(m)
+}
+func (m *SdkCloudBackupSchedCreateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupSchedCreateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupSchedCreateResponse proto.InternalMessageInfo
+
+func (m *SdkCloudBackupSchedCreateResponse) GetBackupScheduleId() string {
+	if m != nil {
+		return m.BackupScheduleId
+	}
+	return ""
+}
+
+// Defines a request to delete a backup schedule
+type SdkCloudBackupSchedDeleteRequest struct {
+	// Id of cloud backup to delete
+	BackupScheduleId     string   `protobuf:"bytes,1,opt,name=backup_schedule_id,json=backupScheduleId" json:"backup_schedule_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupSchedDeleteRequest) Reset()         { *m = SdkCloudBackupSchedDeleteRequest{} }
+func (m *SdkCloudBackupSchedDeleteRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupSchedDeleteRequest) ProtoMessage()    {}
+func (*SdkCloudBackupSchedDeleteRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{186}
+}
+func (m *SdkCloudBackupSchedDeleteRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupSchedDeleteRequest.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupSchedDeleteRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupSchedDeleteRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupSchedDeleteRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupSchedDeleteRequest.Merge(dst, src)
+}
+func (m *SdkCloudBackupSchedDeleteRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupSchedDeleteRequest.Size(m)
+}
+func (m *SdkCloudBackupSchedDeleteRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupSchedDeleteRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupSchedDeleteRequest proto.InternalMessageInfo
+
+func (m *SdkCloudBackupSchedDeleteRequest) GetBackupScheduleId() string {
+	if m != nil {
+		return m.BackupScheduleId
+	}
+	return ""
+}
+
+// Empty response
+type SdkCloudBackupSchedDeleteResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupSchedDeleteResponse) Reset()         { *m = SdkCloudBackupSchedDeleteResponse{} }
+func (m *SdkCloudBackupSchedDeleteResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupSchedDeleteResponse) ProtoMessage()    {}
+func (*SdkCloudBackupSchedDeleteResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{187}
+}
+func (m *SdkCloudBackupSchedDeleteResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupSchedDeleteResponse.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupSchedDeleteResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupSchedDeleteResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupSchedDeleteResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupSchedDeleteResponse.Merge(dst, src)
+}
+func (m *SdkCloudBackupSchedDeleteResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupSchedDeleteResponse.Size(m)
+}
+func (m *SdkCloudBackupSchedDeleteResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupSchedDeleteResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupSchedDeleteResponse proto.InternalMessageInfo
+
+// Empty request
+type SdkCloudBackupSchedEnumerateRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudBackupSchedEnumerateRequest) Reset()         { *m = SdkCloudBackupSchedEnumerateRequest{} }
+func (m *SdkCloudBackupSchedEnumerateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupSchedEnumerateRequest) ProtoMessage()    {}
+func (*SdkCloudBackupSchedEnumerateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{188}
+}
+func (m *SdkCloudBackupSchedEnumerateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupSchedEnumerateRequest.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupSchedEnumerateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupSchedEnumerateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupSchedEnumerateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupSchedEnumerateRequest.Merge(dst, src)
+}
+func (m *SdkCloudBackupSchedEnumerateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupSchedEnumerateRequest.Size(m)
+}
+func (m *SdkCloudBackupSchedEnumerateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupSchedEnumerateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupSchedEnumerateRequest proto.InternalMessageInfo
+
+// Defines a response containing a map listing the schedules for volume
+// backups to a cloud provider
+type SdkCloudBackupSchedEnumerateResponse struct {
+	// Returns list of backup schedules
+	CloudSchedList       map[string]*SdkCloudBackupScheduleInfo `protobuf:"bytes,1,rep,name=cloud_sched_list,json=cloudSchedList" json:"cloud_sched_list,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}                               `json:"-"`
+	XXX_unrecognized     []byte                                 `json:"-"`
+	XXX_sizecache        int32                                  `json:"-"`
+}
+
+func (m *SdkCloudBackupSchedEnumerateResponse) Reset()         { *m = SdkCloudBackupSchedEnumerateResponse{} }
+func (m *SdkCloudBackupSchedEnumerateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudBackupSchedEnumerateResponse) ProtoMessage()    {}
+func (*SdkCloudBackupSchedEnumerateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{189}
+}
+func (m *SdkCloudBackupSchedEnumerateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudBackupSchedEnumerateResponse.Unmarshal(m, b)
+}
+func (m *SdkCloudBackupSchedEnumerateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudBackupSchedEnumerateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudBackupSchedEnumerateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudBackupSchedEnumerateResponse.Merge(dst, src)
+}
+func (m *SdkCloudBackupSchedEnumerateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudBackupSchedEnumerateResponse.Size(m)
+}
+func (m *SdkCloudBackupSchedEnumerateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudBackupSchedEnumerateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudBackupSchedEnumerateResponse proto.InternalMessageInfo
+
+func (m *SdkCloudBackupSchedEnumerateResponse) GetCloudSchedList() map[string]*SdkCloudBackupScheduleInfo {
+	if m != nil {
+		return m.CloudSchedList
+	}
+	return nil
+}
+
+//
+// SdkRule is the message used to construct custom roles in the OpenStorage SDK.
+//
+// ### Format
+// The following shows the supported format for SdkRule:
+//
+// * Services: Is the gRPC service name in `OpenStorage<service name>` in lowercase
+// * Apis: Is the API name in the service in lowercase
+//
+// Values can also be set to `*`, or start or end with `*` to allow multiple matches in services or apis.
+//
+// ### Examples
+//
+// * Allow any call:
+//
+// ```yaml
+// SdkRule:
+//   - Services: ["*"]
+//     Apis: ["*"]
+// ```
+//
+// * Allow only cluster operations:
+//
+// ```yaml
+// SdkRule:
+//   - services: ["cluster"]
+//     apis: ["*"]
+// ```
+//
+// * Allow inspection of any object and listings of only volumes
+//
+// ```yaml
+// SdkRule:
+//   - Services: ["volumes"]
+//     Apis: ["*enumerate*"]
+//   - Services: ["*"]
+//     Apis: ["inspect*"]
+// ```
+//
+type SdkRule struct {
+	// The gRPC service name in `OpenStorage<service name>` in lowercase
+	Services []string `protobuf:"bytes,1,rep,name=services" json:"services,omitempty"`
+	// The API name in the service in lowercase
+	Apis                 []string `protobuf:"bytes,2,rep,name=apis" json:"apis,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkRule) Reset()         { *m = SdkRule{} }
+func (m *SdkRule) String() string { return proto.CompactTextString(m) }
+func (*SdkRule) ProtoMessage()    {}
+func (*SdkRule) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{190}
+}
+func (m *SdkRule) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkRule.Unmarshal(m, b)
+}
+func (m *SdkRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkRule.Marshal(b, m, deterministic)
+}
+func (dst *SdkRule) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkRule.Merge(dst, src)
+}
+func (m *SdkRule) XXX_Size() int {
+	return xxx_messageInfo_SdkRule.Size(m)
+}
+func (m *SdkRule) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkRule.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkRule proto.InternalMessageInfo
+
+func (m *SdkRule) GetServices() []string {
+	if m != nil {
+		return m.Services
+	}
+	return nil
+}
+
+func (m *SdkRule) GetApis() []string {
+	if m != nil {
+		return m.Apis
+	}
+	return nil
+}
+
+type SdkRole struct {
+	Name                 string     `protobuf:"bytes,1,opt,name=name" json:"name,omitempty"`
+	Rules                []*SdkRule `protobuf:"bytes,2,rep,name=rules" json:"rules,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}   `json:"-"`
+	XXX_unrecognized     []byte     `json:"-"`
+	XXX_sizecache        int32      `json:"-"`
+}
+
+func (m *SdkRole) Reset()         { *m = SdkRole{} }
+func (m *SdkRole) String() string { return proto.CompactTextString(m) }
+func (*SdkRole) ProtoMessage()    {}
+func (*SdkRole) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{191}
+}
+func (m *SdkRole) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkRole.Unmarshal(m, b)
+}
+func (m *SdkRole) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkRole.Marshal(b, m, deterministic)
+}
+func (dst *SdkRole) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkRole.Merge(dst, src)
+}
+func (m *SdkRole) XXX_Size() int {
+	return xxx_messageInfo_SdkRole.Size(m)
+}
+func (m *SdkRole) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkRole.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkRole proto.InternalMessageInfo
+
+func (m *SdkRole) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+func (m *SdkRole) GetRules() []*SdkRule {
+	if m != nil {
+		return m.Rules
+	}
+	return nil
+}
+
+// Defines a request for creating a role
+type SdkRoleCreateRequest struct {
+	// Role
+	Role                 *SdkRole `protobuf:"bytes,1,opt,name=role" json:"role,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkRoleCreateRequest) Reset()         { *m = SdkRoleCreateRequest{} }
+func (m *SdkRoleCreateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkRoleCreateRequest) ProtoMessage()    {}
+func (*SdkRoleCreateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{192}
+}
+func (m *SdkRoleCreateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkRoleCreateRequest.Unmarshal(m, b)
+}
+func (m *SdkRoleCreateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkRoleCreateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkRoleCreateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkRoleCreateRequest.Merge(dst, src)
+}
+func (m *SdkRoleCreateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkRoleCreateRequest.Size(m)
+}
+func (m *SdkRoleCreateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkRoleCreateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkRoleCreateRequest proto.InternalMessageInfo
+
+func (m *SdkRoleCreateRequest) GetRole() *SdkRole {
+	if m != nil {
+		return m.Role
+	}
+	return nil
+}
+
+// Response contains informaiton about the creation of the role
+type SdkRoleCreateResponse struct {
+	// Role created
+	Role                 *SdkRole `protobuf:"bytes,1,opt,name=role" json:"role,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkRoleCreateResponse) Reset()         { *m = SdkRoleCreateResponse{} }
+func (m *SdkRoleCreateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkRoleCreateResponse) ProtoMessage()    {}
+func (*SdkRoleCreateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{193}
+}
+func (m *SdkRoleCreateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkRoleCreateResponse.Unmarshal(m, b)
+}
+func (m *SdkRoleCreateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkRoleCreateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkRoleCreateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkRoleCreateResponse.Merge(dst, src)
+}
+func (m *SdkRoleCreateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkRoleCreateResponse.Size(m)
+}
+func (m *SdkRoleCreateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkRoleCreateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkRoleCreateResponse proto.InternalMessageInfo
+
+func (m *SdkRoleCreateResponse) GetRole() *SdkRole {
+	if m != nil {
+		return m.Role
+	}
+	return nil
+}
+
+// Empty request
+type SdkRoleEnumerateRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkRoleEnumerateRequest) Reset()         { *m = SdkRoleEnumerateRequest{} }
+func (m *SdkRoleEnumerateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkRoleEnumerateRequest) ProtoMessage()    {}
+func (*SdkRoleEnumerateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{194}
+}
+func (m *SdkRoleEnumerateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkRoleEnumerateRequest.Unmarshal(m, b)
+}
+func (m *SdkRoleEnumerateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkRoleEnumerateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkRoleEnumerateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkRoleEnumerateRequest.Merge(dst, src)
+}
+func (m *SdkRoleEnumerateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkRoleEnumerateRequest.Size(m)
+}
+func (m *SdkRoleEnumerateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkRoleEnumerateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkRoleEnumerateRequest proto.InternalMessageInfo
+
+// Respose to enumerate all roles
+type SdkRoleEnumerateResponse struct {
+	// List of role names
+	Names                []string `protobuf:"bytes,1,rep,name=names" json:"names,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkRoleEnumerateResponse) Reset()         { *m = SdkRoleEnumerateResponse{} }
+func (m *SdkRoleEnumerateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkRoleEnumerateResponse) ProtoMessage()    {}
+func (*SdkRoleEnumerateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{195}
+}
+func (m *SdkRoleEnumerateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkRoleEnumerateResponse.Unmarshal(m, b)
+}
+func (m *SdkRoleEnumerateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkRoleEnumerateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkRoleEnumerateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkRoleEnumerateResponse.Merge(dst, src)
+}
+func (m *SdkRoleEnumerateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkRoleEnumerateResponse.Size(m)
+}
+func (m *SdkRoleEnumerateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkRoleEnumerateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkRoleEnumerateResponse proto.InternalMessageInfo
+
+func (m *SdkRoleEnumerateResponse) GetNames() []string {
+	if m != nil {
+		return m.Names
+	}
+	return nil
+}
+
+// Defines a request to inspect a role
+type SdkRoleInspectRequest struct {
+	// Name of role
+	Name                 string   `protobuf:"bytes,1,opt,name=name" json:"name,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkRoleInspectRequest) Reset()         { *m = SdkRoleInspectRequest{} }
+func (m *SdkRoleInspectRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkRoleInspectRequest) ProtoMessage()    {}
+func (*SdkRoleInspectRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{196}
+}
+func (m *SdkRoleInspectRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkRoleInspectRequest.Unmarshal(m, b)
+}
+func (m *SdkRoleInspectRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkRoleInspectRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkRoleInspectRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkRoleInspectRequest.Merge(dst, src)
+}
+func (m *SdkRoleInspectRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkRoleInspectRequest.Size(m)
+}
+func (m *SdkRoleInspectRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkRoleInspectRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkRoleInspectRequest proto.InternalMessageInfo
+
+func (m *SdkRoleInspectRequest) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+// Response to inspection request
+type SdkRoleInspectResponse struct {
+	// Role requested
+	Role                 *SdkRole `protobuf:"bytes,1,opt,name=role" json:"role,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkRoleInspectResponse) Reset()         { *m = SdkRoleInspectResponse{} }
+func (m *SdkRoleInspectResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkRoleInspectResponse) ProtoMessage()    {}
+func (*SdkRoleInspectResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{197}
+}
+func (m *SdkRoleInspectResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkRoleInspectResponse.Unmarshal(m, b)
+}
+func (m *SdkRoleInspectResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkRoleInspectResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkRoleInspectResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkRoleInspectResponse.Merge(dst, src)
+}
+func (m *SdkRoleInspectResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkRoleInspectResponse.Size(m)
+}
+func (m *SdkRoleInspectResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkRoleInspectResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkRoleInspectResponse proto.InternalMessageInfo
+
+func (m *SdkRoleInspectResponse) GetRole() *SdkRole {
+	if m != nil {
+		return m.Role
+	}
+	return nil
+}
+
+// Defines a request to delete a role
+type SdkRoleDeleteRequest struct {
+	Name                 string   `protobuf:"bytes,1,opt,name=name" json:"name,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkRoleDeleteRequest) Reset()         { *m = SdkRoleDeleteRequest{} }
+func (m *SdkRoleDeleteRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkRoleDeleteRequest) ProtoMessage()    {}
+func (*SdkRoleDeleteRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{198}
+}
+func (m *SdkRoleDeleteRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkRoleDeleteRequest.Unmarshal(m, b)
+}
+func (m *SdkRoleDeleteRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkRoleDeleteRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkRoleDeleteRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkRoleDeleteRequest.Merge(dst, src)
+}
+func (m *SdkRoleDeleteRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkRoleDeleteRequest.Size(m)
+}
+func (m *SdkRoleDeleteRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkRoleDeleteRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkRoleDeleteRequest proto.InternalMessageInfo
+
+func (m *SdkRoleDeleteRequest) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+// Empty response
+type SdkRoleDeleteResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkRoleDeleteResponse) Reset()         { *m = SdkRoleDeleteResponse{} }
+func (m *SdkRoleDeleteResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkRoleDeleteResponse) ProtoMessage()    {}
+func (*SdkRoleDeleteResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{199}
+}
+func (m *SdkRoleDeleteResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkRoleDeleteResponse.Unmarshal(m, b)
+}
+func (m *SdkRoleDeleteResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkRoleDeleteResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkRoleDeleteResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkRoleDeleteResponse.Merge(dst, src)
+}
+func (m *SdkRoleDeleteResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkRoleDeleteResponse.Size(m)
+}
+func (m *SdkRoleDeleteResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkRoleDeleteResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkRoleDeleteResponse proto.InternalMessageInfo
+
+// Defines a request to update an existing role
+type SdkRoleUpdateRequest struct {
+	// New role update
+	Role                 *SdkRole `protobuf:"bytes,1,opt,name=role" json:"role,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkRoleUpdateRequest) Reset()         { *m = SdkRoleUpdateRequest{} }
+func (m *SdkRoleUpdateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkRoleUpdateRequest) ProtoMessage()    {}
+func (*SdkRoleUpdateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{200}
+}
+func (m *SdkRoleUpdateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkRoleUpdateRequest.Unmarshal(m, b)
+}
+func (m *SdkRoleUpdateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkRoleUpdateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkRoleUpdateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkRoleUpdateRequest.Merge(dst, src)
+}
+func (m *SdkRoleUpdateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkRoleUpdateRequest.Size(m)
+}
+func (m *SdkRoleUpdateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkRoleUpdateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkRoleUpdateRequest proto.InternalMessageInfo
+
+func (m *SdkRoleUpdateRequest) GetRole() *SdkRole {
+	if m != nil {
+		return m.Role
+	}
+	return nil
+}
+
+// Response contains information about the updated role
+type SdkRoleUpdateResponse struct {
+	// Role updated
+	Role                 *SdkRole `protobuf:"bytes,1,opt,name=role" json:"role,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkRoleUpdateResponse) Reset()         { *m = SdkRoleUpdateResponse{} }
+func (m *SdkRoleUpdateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkRoleUpdateResponse) ProtoMessage()    {}
+func (*SdkRoleUpdateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{201}
+}
+func (m *SdkRoleUpdateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkRoleUpdateResponse.Unmarshal(m, b)
+}
+func (m *SdkRoleUpdateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkRoleUpdateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkRoleUpdateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkRoleUpdateResponse.Merge(dst, src)
+}
+func (m *SdkRoleUpdateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkRoleUpdateResponse.Size(m)
+}
+func (m *SdkRoleUpdateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkRoleUpdateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkRoleUpdateResponse proto.InternalMessageInfo
+
+func (m *SdkRoleUpdateResponse) GetRole() *SdkRole {
+	if m != nil {
+		return m.Role
+	}
+	return nil
+}
+
+// Empty request
+type SdkIdentityCapabilitiesRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkIdentityCapabilitiesRequest) Reset()         { *m = SdkIdentityCapabilitiesRequest{} }
+func (m *SdkIdentityCapabilitiesRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkIdentityCapabilitiesRequest) ProtoMessage()    {}
+func (*SdkIdentityCapabilitiesRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{202}
+}
+func (m *SdkIdentityCapabilitiesRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkIdentityCapabilitiesRequest.Unmarshal(m, b)
+}
+func (m *SdkIdentityCapabilitiesRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkIdentityCapabilitiesRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkIdentityCapabilitiesRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkIdentityCapabilitiesRequest.Merge(dst, src)
+}
+func (m *SdkIdentityCapabilitiesRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkIdentityCapabilitiesRequest.Size(m)
+}
+func (m *SdkIdentityCapabilitiesRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkIdentityCapabilitiesRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkIdentityCapabilitiesRequest proto.InternalMessageInfo
+
+// Defines a response containing the capabilites of the cluster
+type SdkIdentityCapabilitiesResponse struct {
+	// Provides all the capabilites supported by the cluster
+	Capabilities         []*SdkServiceCapability `protobuf:"bytes,1,rep,name=capabilities" json:"capabilities,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                `json:"-"`
+	XXX_unrecognized     []byte                  `json:"-"`
+	XXX_sizecache        int32                   `json:"-"`
+}
+
+func (m *SdkIdentityCapabilitiesResponse) Reset()         { *m = SdkIdentityCapabilitiesResponse{} }
+func (m *SdkIdentityCapabilitiesResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkIdentityCapabilitiesResponse) ProtoMessage()    {}
+func (*SdkIdentityCapabilitiesResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{203}
+}
+func (m *SdkIdentityCapabilitiesResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkIdentityCapabilitiesResponse.Unmarshal(m, b)
+}
+func (m *SdkIdentityCapabilitiesResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkIdentityCapabilitiesResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkIdentityCapabilitiesResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkIdentityCapabilitiesResponse.Merge(dst, src)
+}
+func (m *SdkIdentityCapabilitiesResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkIdentityCapabilitiesResponse.Size(m)
+}
+func (m *SdkIdentityCapabilitiesResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkIdentityCapabilitiesResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkIdentityCapabilitiesResponse proto.InternalMessageInfo
+
+func (m *SdkIdentityCapabilitiesResponse) GetCapabilities() []*SdkServiceCapability {
+	if m != nil {
+		return m.Capabilities
+	}
+	return nil
+}
+
+// Empty request
+type SdkIdentityVersionRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkIdentityVersionRequest) Reset()         { *m = SdkIdentityVersionRequest{} }
+func (m *SdkIdentityVersionRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkIdentityVersionRequest) ProtoMessage()    {}
+func (*SdkIdentityVersionRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{204}
+}
+func (m *SdkIdentityVersionRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkIdentityVersionRequest.Unmarshal(m, b)
+}
+func (m *SdkIdentityVersionRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkIdentityVersionRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkIdentityVersionRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkIdentityVersionRequest.Merge(dst, src)
+}
+func (m *SdkIdentityVersionRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkIdentityVersionRequest.Size(m)
+}
+func (m *SdkIdentityVersionRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkIdentityVersionRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkIdentityVersionRequest proto.InternalMessageInfo
+
+// Defines a response containing version information
+type SdkIdentityVersionResponse struct {
+	// OpenStorage SDK version used by the server
+	SdkVersion *SdkVersion `protobuf:"bytes,1,opt,name=sdk_version,json=sdkVersion" json:"sdk_version,omitempty"`
+	// Version information about the storage system
+	Version              *StorageVersion `protobuf:"bytes,2,opt,name=version" json:"version,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}        `json:"-"`
+	XXX_unrecognized     []byte          `json:"-"`
+	XXX_sizecache        int32           `json:"-"`
+}
+
+func (m *SdkIdentityVersionResponse) Reset()         { *m = SdkIdentityVersionResponse{} }
+func (m *SdkIdentityVersionResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkIdentityVersionResponse) ProtoMessage()    {}
+func (*SdkIdentityVersionResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{205}
+}
+func (m *SdkIdentityVersionResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkIdentityVersionResponse.Unmarshal(m, b)
+}
+func (m *SdkIdentityVersionResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkIdentityVersionResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkIdentityVersionResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkIdentityVersionResponse.Merge(dst, src)
+}
+func (m *SdkIdentityVersionResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkIdentityVersionResponse.Size(m)
+}
+func (m *SdkIdentityVersionResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkIdentityVersionResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkIdentityVersionResponse proto.InternalMessageInfo
+
+func (m *SdkIdentityVersionResponse) GetSdkVersion() *SdkVersion {
+	if m != nil {
+		return m.SdkVersion
+	}
+	return nil
+}
+
+func (m *SdkIdentityVersionResponse) GetVersion() *StorageVersion {
+	if m != nil {
+		return m.Version
+	}
+	return nil
+}
+
+// Defines a capability of he cluster
+type SdkServiceCapability struct {
+	// Use oneof to have only one type of service defined making it
+	// future proof to add other types.
+	//
+	// Types that are valid to be assigned to Type:
+	//	*SdkServiceCapability_Service
+	Type                 isSdkServiceCapability_Type `protobuf_oneof:"type"`
+	XXX_NoUnkeyedLiteral struct{}                    `json:"-"`
+	XXX_unrecognized     []byte                      `json:"-"`
+	XXX_sizecache        int32                       `json:"-"`
+}
+
+func (m *SdkServiceCapability) Reset()         { *m = SdkServiceCapability{} }
+func (m *SdkServiceCapability) String() string { return proto.CompactTextString(m) }
+func (*SdkServiceCapability) ProtoMessage()    {}
+func (*SdkServiceCapability) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{206}
+}
+func (m *SdkServiceCapability) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkServiceCapability.Unmarshal(m, b)
+}
+func (m *SdkServiceCapability) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkServiceCapability.Marshal(b, m, deterministic)
+}
+func (dst *SdkServiceCapability) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkServiceCapability.Merge(dst, src)
+}
+func (m *SdkServiceCapability) XXX_Size() int {
+	return xxx_messageInfo_SdkServiceCapability.Size(m)
+}
+func (m *SdkServiceCapability) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkServiceCapability.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkServiceCapability proto.InternalMessageInfo
+
+type isSdkServiceCapability_Type interface {
+	isSdkServiceCapability_Type()
+}
+
+type SdkServiceCapability_Service struct {
+	Service *SdkServiceCapability_OpenStorageService `protobuf:"bytes,1,opt,name=service,oneof"`
+}
+
+func (*SdkServiceCapability_Service) isSdkServiceCapability_Type() {}
+
+func (m *SdkServiceCapability) GetType() isSdkServiceCapability_Type {
+	if m != nil {
+		return m.Type
+	}
+	return nil
+}
+
+func (m *SdkServiceCapability) GetService() *SdkServiceCapability_OpenStorageService {
+	if x, ok := m.GetType().(*SdkServiceCapability_Service); ok {
+		return x.Service
+	}
+	return nil
+}
+
+// XXX_OneofFuncs is for the internal use of the proto package.
+func (*SdkServiceCapability) XXX_OneofFuncs() (func(msg proto.Message, b *proto.Buffer) error, func(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error), func(msg proto.Message) (n int), []interface{}) {
+	return _SdkServiceCapability_OneofMarshaler, _SdkServiceCapability_OneofUnmarshaler, _SdkServiceCapability_OneofSizer, []interface{}{
+		(*SdkServiceCapability_Service)(nil),
+	}
+}
+
+func _SdkServiceCapability_OneofMarshaler(msg proto.Message, b *proto.Buffer) error {
+	m := msg.(*SdkServiceCapability)
+	// type
+	switch x := m.Type.(type) {
+	case *SdkServiceCapability_Service:
+		b.EncodeVarint(1<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.Service); err != nil {
+			return err
+		}
+	case nil:
+	default:
+		return fmt.Errorf("SdkServiceCapability.Type has unexpected type %T", x)
+	}
+	return nil
+}
+
+func _SdkServiceCapability_OneofUnmarshaler(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error) {
+	m := msg.(*SdkServiceCapability)
+	switch tag {
+	case 1: // type.service
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkServiceCapability_OpenStorageService)
+		err := b.DecodeMessage(msg)
+		m.Type = &SdkServiceCapability_Service{msg}
+		return true, err
+	default:
+		return false, nil
+	}
+}
+
+func _SdkServiceCapability_OneofSizer(msg proto.Message) (n int) {
+	m := msg.(*SdkServiceCapability)
+	// type
+	switch x := m.Type.(type) {
+	case *SdkServiceCapability_Service:
+		s := proto.Size(x.Service)
+		n += 1 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	return n
+}
+
+type SdkServiceCapability_OpenStorageService struct {
+	// Type of service supported
+	Type                 SdkServiceCapability_OpenStorageService_Type `protobuf:"varint,1,opt,name=type,enum=openstorage.api.SdkServiceCapability_OpenStorageService_Type" json:"type,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                                     `json:"-"`
+	XXX_unrecognized     []byte                                       `json:"-"`
+	XXX_sizecache        int32                                        `json:"-"`
+}
+
+func (m *SdkServiceCapability_OpenStorageService) Reset() {
+	*m = SdkServiceCapability_OpenStorageService{}
+}
+func (m *SdkServiceCapability_OpenStorageService) String() string { return proto.CompactTextString(m) }
+func (*SdkServiceCapability_OpenStorageService) ProtoMessage()    {}
+func (*SdkServiceCapability_OpenStorageService) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{206, 0}
+}
+func (m *SdkServiceCapability_OpenStorageService) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkServiceCapability_OpenStorageService.Unmarshal(m, b)
+}
+func (m *SdkServiceCapability_OpenStorageService) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkServiceCapability_OpenStorageService.Marshal(b, m, deterministic)
+}
+func (dst *SdkServiceCapability_OpenStorageService) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkServiceCapability_OpenStorageService.Merge(dst, src)
+}
+func (m *SdkServiceCapability_OpenStorageService) XXX_Size() int {
+	return xxx_messageInfo_SdkServiceCapability_OpenStorageService.Size(m)
+}
+func (m *SdkServiceCapability_OpenStorageService) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkServiceCapability_OpenStorageService.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkServiceCapability_OpenStorageService proto.InternalMessageInfo
+
+func (m *SdkServiceCapability_OpenStorageService) GetType() SdkServiceCapability_OpenStorageService_Type {
+	if m != nil {
+		return m.Type
+	}
+	return SdkServiceCapability_OpenStorageService_UNKNOWN
+}
+
+// SDK version in Major.Minor.Patch format. The goal of this
+// message is to provide clients a method to determine the SDK
+// version run by an SDK server.
+type SdkVersion struct {
+	// SDK version major number
+	Major int32 `protobuf:"varint,1,opt,name=major" json:"major,omitempty"`
+	// SDK version minor number
+	Minor int32 `protobuf:"varint,2,opt,name=minor" json:"minor,omitempty"`
+	// SDK version patch number
+	Patch int32 `protobuf:"varint,3,opt,name=patch" json:"patch,omitempty"`
+	// String representation of the SDK version. Must be
+	// in `major.minor.patch` format.
+	Version              string   `protobuf:"bytes,4,opt,name=version" json:"version,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkVersion) Reset()         { *m = SdkVersion{} }
+func (m *SdkVersion) String() string { return proto.CompactTextString(m) }
+func (*SdkVersion) ProtoMessage()    {}
+func (*SdkVersion) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{207}
+}
+func (m *SdkVersion) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkVersion.Unmarshal(m, b)
+}
+func (m *SdkVersion) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkVersion.Marshal(b, m, deterministic)
+}
+func (dst *SdkVersion) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkVersion.Merge(dst, src)
+}
+func (m *SdkVersion) XXX_Size() int {
+	return xxx_messageInfo_SdkVersion.Size(m)
+}
+func (m *SdkVersion) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkVersion.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkVersion proto.InternalMessageInfo
+
+func (m *SdkVersion) GetMajor() int32 {
+	if m != nil {
+		return m.Major
+	}
+	return 0
+}
+
+func (m *SdkVersion) GetMinor() int32 {
+	if m != nil {
+		return m.Minor
+	}
+	return 0
+}
+
+func (m *SdkVersion) GetPatch() int32 {
+	if m != nil {
+		return m.Patch
+	}
+	return 0
+}
+
+func (m *SdkVersion) GetVersion() string {
+	if m != nil {
+		return m.Version
+	}
+	return ""
+}
+
+// Version information about the storage system
+type StorageVersion struct {
+	// OpenStorage driver name
+	Driver string `protobuf:"bytes,1,opt,name=driver" json:"driver,omitempty"`
+	// Version of the server
+	Version string `protobuf:"bytes,2,opt,name=version" json:"version,omitempty"`
+	// Extra information provided by the storage system
+	Details              map[string]string `protobuf:"bytes,3,rep,name=details" json:"details,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *StorageVersion) Reset()         { *m = StorageVersion{} }
+func (m *StorageVersion) String() string { return proto.CompactTextString(m) }
+func (*StorageVersion) ProtoMessage()    {}
+func (*StorageVersion) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{208}
+}
+func (m *StorageVersion) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_StorageVersion.Unmarshal(m, b)
+}
+func (m *StorageVersion) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_StorageVersion.Marshal(b, m, deterministic)
+}
+func (dst *StorageVersion) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_StorageVersion.Merge(dst, src)
+}
+func (m *StorageVersion) XXX_Size() int {
+	return xxx_messageInfo_StorageVersion.Size(m)
+}
+func (m *StorageVersion) XXX_DiscardUnknown() {
+	xxx_messageInfo_StorageVersion.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_StorageVersion proto.InternalMessageInfo
+
+func (m *StorageVersion) GetDriver() string {
+	if m != nil {
+		return m.Driver
+	}
+	return ""
+}
+
+func (m *StorageVersion) GetVersion() string {
+	if m != nil {
+		return m.Version
+	}
+	return ""
+}
+
+func (m *StorageVersion) GetDetails() map[string]string {
+	if m != nil {
+		return m.Details
+	}
+	return nil
+}
+
+type CloudMigrate struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *CloudMigrate) Reset()         { *m = CloudMigrate{} }
+func (m *CloudMigrate) String() string { return proto.CompactTextString(m) }
+func (*CloudMigrate) ProtoMessage()    {}
+func (*CloudMigrate) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{209}
+}
+func (m *CloudMigrate) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_CloudMigrate.Unmarshal(m, b)
+}
+func (m *CloudMigrate) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_CloudMigrate.Marshal(b, m, deterministic)
+}
+func (dst *CloudMigrate) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_CloudMigrate.Merge(dst, src)
+}
+func (m *CloudMigrate) XXX_Size() int {
+	return xxx_messageInfo_CloudMigrate.Size(m)
+}
+func (m *CloudMigrate) XXX_DiscardUnknown() {
+	xxx_messageInfo_CloudMigrate.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_CloudMigrate proto.InternalMessageInfo
+
+// Request to start a cloud migration
+type CloudMigrateStartRequest struct {
+	// The type of operation to start
+	Operation CloudMigrate_OperationType `protobuf:"varint,1,opt,name=operation,enum=openstorage.api.CloudMigrate_OperationType" json:"operation,omitempty"`
+	// ID of the cluster to which volumes are to be migrated
+	ClusterId string `protobuf:"bytes,2,opt,name=cluster_id,json=clusterId" json:"cluster_id,omitempty"`
+	// Depending on the operation type this can be a VolumeID or VolumeGroupID
+	TargetId string `protobuf:"bytes,3,opt,name=target_id,json=targetId" json:"target_id,omitempty"`
+	// (Optional) Unique TaskId assocaiated with this migration. If not provided one will
+	// be generated and returned in the response
+	TaskId               string   `protobuf:"bytes,4,opt,name=task_id,json=taskId" json:"task_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *CloudMigrateStartRequest) Reset()         { *m = CloudMigrateStartRequest{} }
+func (m *CloudMigrateStartRequest) String() string { return proto.CompactTextString(m) }
+func (*CloudMigrateStartRequest) ProtoMessage()    {}
+func (*CloudMigrateStartRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{210}
+}
+func (m *CloudMigrateStartRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_CloudMigrateStartRequest.Unmarshal(m, b)
+}
+func (m *CloudMigrateStartRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_CloudMigrateStartRequest.Marshal(b, m, deterministic)
+}
+func (dst *CloudMigrateStartRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_CloudMigrateStartRequest.Merge(dst, src)
+}
+func (m *CloudMigrateStartRequest) XXX_Size() int {
+	return xxx_messageInfo_CloudMigrateStartRequest.Size(m)
+}
+func (m *CloudMigrateStartRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_CloudMigrateStartRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_CloudMigrateStartRequest proto.InternalMessageInfo
+
+func (m *CloudMigrateStartRequest) GetOperation() CloudMigrate_OperationType {
+	if m != nil {
+		return m.Operation
+	}
+	return CloudMigrate_InvalidType
+}
+
+func (m *CloudMigrateStartRequest) GetClusterId() string {
+	if m != nil {
+		return m.ClusterId
+	}
+	return ""
+}
+
+func (m *CloudMigrateStartRequest) GetTargetId() string {
+	if m != nil {
+		return m.TargetId
+	}
+	return ""
+}
+
+func (m *CloudMigrateStartRequest) GetTaskId() string {
+	if m != nil {
+		return m.TaskId
+	}
+	return ""
+}
+
+// Defines a migration request
+type SdkCloudMigrateStartRequest struct {
+	// ID of the cluster to which volumes are to be migrated
+	ClusterId string `protobuf:"bytes,1,opt,name=cluster_id,json=clusterId" json:"cluster_id,omitempty"`
+	// Unique name assocaiated with this migration.
+	// This is a Optional field for idempotency
+	TaskId string `protobuf:"bytes,2,opt,name=task_id,json=taskId" json:"task_id,omitempty"`
+	// Types that are valid to be assigned to Opt:
+	//	*SdkCloudMigrateStartRequest_Volume
+	//	*SdkCloudMigrateStartRequest_VolumeGroup
+	//	*SdkCloudMigrateStartRequest_AllVolumes
+	Opt                  isSdkCloudMigrateStartRequest_Opt `protobuf_oneof:"opt"`
+	XXX_NoUnkeyedLiteral struct{}                          `json:"-"`
+	XXX_unrecognized     []byte                            `json:"-"`
+	XXX_sizecache        int32                             `json:"-"`
+}
+
+func (m *SdkCloudMigrateStartRequest) Reset()         { *m = SdkCloudMigrateStartRequest{} }
+func (m *SdkCloudMigrateStartRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudMigrateStartRequest) ProtoMessage()    {}
+func (*SdkCloudMigrateStartRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{211}
+}
+func (m *SdkCloudMigrateStartRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudMigrateStartRequest.Unmarshal(m, b)
+}
+func (m *SdkCloudMigrateStartRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudMigrateStartRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudMigrateStartRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudMigrateStartRequest.Merge(dst, src)
+}
+func (m *SdkCloudMigrateStartRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudMigrateStartRequest.Size(m)
+}
+func (m *SdkCloudMigrateStartRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudMigrateStartRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudMigrateStartRequest proto.InternalMessageInfo
+
+type isSdkCloudMigrateStartRequest_Opt interface {
+	isSdkCloudMigrateStartRequest_Opt()
+}
+
+type SdkCloudMigrateStartRequest_Volume struct {
+	Volume *SdkCloudMigrateStartRequest_MigrateVolume `protobuf:"bytes,200,opt,name=volume,oneof"`
+}
+type SdkCloudMigrateStartRequest_VolumeGroup struct {
+	VolumeGroup *SdkCloudMigrateStartRequest_MigrateVolumeGroup `protobuf:"bytes,201,opt,name=volume_group,json=volumeGroup,oneof"`
+}
+type SdkCloudMigrateStartRequest_AllVolumes struct {
+	AllVolumes *SdkCloudMigrateStartRequest_MigrateAllVolumes `protobuf:"bytes,202,opt,name=all_volumes,json=allVolumes,oneof"`
+}
+
+func (*SdkCloudMigrateStartRequest_Volume) isSdkCloudMigrateStartRequest_Opt()      {}
+func (*SdkCloudMigrateStartRequest_VolumeGroup) isSdkCloudMigrateStartRequest_Opt() {}
+func (*SdkCloudMigrateStartRequest_AllVolumes) isSdkCloudMigrateStartRequest_Opt()  {}
+
+func (m *SdkCloudMigrateStartRequest) GetOpt() isSdkCloudMigrateStartRequest_Opt {
+	if m != nil {
+		return m.Opt
+	}
+	return nil
+}
+
+func (m *SdkCloudMigrateStartRequest) GetClusterId() string {
+	if m != nil {
+		return m.ClusterId
+	}
+	return ""
+}
+
+func (m *SdkCloudMigrateStartRequest) GetTaskId() string {
+	if m != nil {
+		return m.TaskId
+	}
+	return ""
+}
+
+func (m *SdkCloudMigrateStartRequest) GetVolume() *SdkCloudMigrateStartRequest_MigrateVolume {
+	if x, ok := m.GetOpt().(*SdkCloudMigrateStartRequest_Volume); ok {
+		return x.Volume
+	}
+	return nil
+}
+
+func (m *SdkCloudMigrateStartRequest) GetVolumeGroup() *SdkCloudMigrateStartRequest_MigrateVolumeGroup {
+	if x, ok := m.GetOpt().(*SdkCloudMigrateStartRequest_VolumeGroup); ok {
+		return x.VolumeGroup
+	}
+	return nil
+}
+
+func (m *SdkCloudMigrateStartRequest) GetAllVolumes() *SdkCloudMigrateStartRequest_MigrateAllVolumes {
+	if x, ok := m.GetOpt().(*SdkCloudMigrateStartRequest_AllVolumes); ok {
+		return x.AllVolumes
+	}
+	return nil
+}
+
+// XXX_OneofFuncs is for the internal use of the proto package.
+func (*SdkCloudMigrateStartRequest) XXX_OneofFuncs() (func(msg proto.Message, b *proto.Buffer) error, func(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error), func(msg proto.Message) (n int), []interface{}) {
+	return _SdkCloudMigrateStartRequest_OneofMarshaler, _SdkCloudMigrateStartRequest_OneofUnmarshaler, _SdkCloudMigrateStartRequest_OneofSizer, []interface{}{
+		(*SdkCloudMigrateStartRequest_Volume)(nil),
+		(*SdkCloudMigrateStartRequest_VolumeGroup)(nil),
+		(*SdkCloudMigrateStartRequest_AllVolumes)(nil),
+	}
+}
+
+func _SdkCloudMigrateStartRequest_OneofMarshaler(msg proto.Message, b *proto.Buffer) error {
+	m := msg.(*SdkCloudMigrateStartRequest)
+	// opt
+	switch x := m.Opt.(type) {
+	case *SdkCloudMigrateStartRequest_Volume:
+		b.EncodeVarint(200<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.Volume); err != nil {
+			return err
+		}
+	case *SdkCloudMigrateStartRequest_VolumeGroup:
+		b.EncodeVarint(201<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.VolumeGroup); err != nil {
+			return err
+		}
+	case *SdkCloudMigrateStartRequest_AllVolumes:
+		b.EncodeVarint(202<<3 | proto.WireBytes)
+		if err := b.EncodeMessage(x.AllVolumes); err != nil {
+			return err
+		}
+	case nil:
+	default:
+		return fmt.Errorf("SdkCloudMigrateStartRequest.Opt has unexpected type %T", x)
+	}
+	return nil
+}
+
+func _SdkCloudMigrateStartRequest_OneofUnmarshaler(msg proto.Message, tag, wire int, b *proto.Buffer) (bool, error) {
+	m := msg.(*SdkCloudMigrateStartRequest)
+	switch tag {
+	case 200: // opt.volume
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkCloudMigrateStartRequest_MigrateVolume)
+		err := b.DecodeMessage(msg)
+		m.Opt = &SdkCloudMigrateStartRequest_Volume{msg}
+		return true, err
+	case 201: // opt.volume_group
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkCloudMigrateStartRequest_MigrateVolumeGroup)
+		err := b.DecodeMessage(msg)
+		m.Opt = &SdkCloudMigrateStartRequest_VolumeGroup{msg}
+		return true, err
+	case 202: // opt.all_volumes
+		if wire != proto.WireBytes {
+			return true, proto.ErrInternalBadWireType
+		}
+		msg := new(SdkCloudMigrateStartRequest_MigrateAllVolumes)
+		err := b.DecodeMessage(msg)
+		m.Opt = &SdkCloudMigrateStartRequest_AllVolumes{msg}
+		return true, err
+	default:
+		return false, nil
+	}
+}
+
+func _SdkCloudMigrateStartRequest_OneofSizer(msg proto.Message) (n int) {
+	m := msg.(*SdkCloudMigrateStartRequest)
+	// opt
+	switch x := m.Opt.(type) {
+	case *SdkCloudMigrateStartRequest_Volume:
+		s := proto.Size(x.Volume)
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case *SdkCloudMigrateStartRequest_VolumeGroup:
+		s := proto.Size(x.VolumeGroup)
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case *SdkCloudMigrateStartRequest_AllVolumes:
+		s := proto.Size(x.AllVolumes)
+		n += 2 // tag and wire
+		n += proto.SizeVarint(uint64(s))
+		n += s
+	case nil:
+	default:
+		panic(fmt.Sprintf("proto: unexpected type %T in oneof", x))
+	}
+	return n
+}
+
+// Defines a migration request for a volume
+type SdkCloudMigrateStartRequest_MigrateVolume struct {
+	VolumeId             string   `protobuf:"bytes,1,opt,name=volume_id,json=volumeId" json:"volume_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudMigrateStartRequest_MigrateVolume) Reset() {
+	*m = SdkCloudMigrateStartRequest_MigrateVolume{}
+}
+func (m *SdkCloudMigrateStartRequest_MigrateVolume) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudMigrateStartRequest_MigrateVolume) ProtoMessage()    {}
+func (*SdkCloudMigrateStartRequest_MigrateVolume) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{211, 0}
+}
+func (m *SdkCloudMigrateStartRequest_MigrateVolume) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateVolume.Unmarshal(m, b)
+}
+func (m *SdkCloudMigrateStartRequest_MigrateVolume) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateVolume.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudMigrateStartRequest_MigrateVolume) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateVolume.Merge(dst, src)
+}
+func (m *SdkCloudMigrateStartRequest_MigrateVolume) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateVolume.Size(m)
+}
+func (m *SdkCloudMigrateStartRequest_MigrateVolume) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateVolume.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateVolume proto.InternalMessageInfo
+
+func (m *SdkCloudMigrateStartRequest_MigrateVolume) GetVolumeId() string {
+	if m != nil {
+		return m.VolumeId
+	}
+	return ""
+}
+
+// Defines a migration request for a volume group
+type SdkCloudMigrateStartRequest_MigrateVolumeGroup struct {
+	GroupId              string   `protobuf:"bytes,1,opt,name=group_id,json=groupId" json:"group_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudMigrateStartRequest_MigrateVolumeGroup) Reset() {
+	*m = SdkCloudMigrateStartRequest_MigrateVolumeGroup{}
+}
+func (m *SdkCloudMigrateStartRequest_MigrateVolumeGroup) String() string {
+	return proto.CompactTextString(m)
+}
+func (*SdkCloudMigrateStartRequest_MigrateVolumeGroup) ProtoMessage() {}
+func (*SdkCloudMigrateStartRequest_MigrateVolumeGroup) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{211, 1}
+}
+func (m *SdkCloudMigrateStartRequest_MigrateVolumeGroup) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateVolumeGroup.Unmarshal(m, b)
+}
+func (m *SdkCloudMigrateStartRequest_MigrateVolumeGroup) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateVolumeGroup.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudMigrateStartRequest_MigrateVolumeGroup) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateVolumeGroup.Merge(dst, src)
+}
+func (m *SdkCloudMigrateStartRequest_MigrateVolumeGroup) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateVolumeGroup.Size(m)
+}
+func (m *SdkCloudMigrateStartRequest_MigrateVolumeGroup) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateVolumeGroup.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateVolumeGroup proto.InternalMessageInfo
+
+func (m *SdkCloudMigrateStartRequest_MigrateVolumeGroup) GetGroupId() string {
+	if m != nil {
+		return m.GroupId
+	}
+	return ""
+}
+
+// Defines a migration request for all volumes in a cluster
+type SdkCloudMigrateStartRequest_MigrateAllVolumes struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudMigrateStartRequest_MigrateAllVolumes) Reset() {
+	*m = SdkCloudMigrateStartRequest_MigrateAllVolumes{}
+}
+func (m *SdkCloudMigrateStartRequest_MigrateAllVolumes) String() string {
+	return proto.CompactTextString(m)
+}
+func (*SdkCloudMigrateStartRequest_MigrateAllVolumes) ProtoMessage() {}
+func (*SdkCloudMigrateStartRequest_MigrateAllVolumes) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{211, 2}
+}
+func (m *SdkCloudMigrateStartRequest_MigrateAllVolumes) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateAllVolumes.Unmarshal(m, b)
+}
+func (m *SdkCloudMigrateStartRequest_MigrateAllVolumes) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateAllVolumes.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudMigrateStartRequest_MigrateAllVolumes) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateAllVolumes.Merge(dst, src)
+}
+func (m *SdkCloudMigrateStartRequest_MigrateAllVolumes) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateAllVolumes.Size(m)
+}
+func (m *SdkCloudMigrateStartRequest_MigrateAllVolumes) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateAllVolumes.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudMigrateStartRequest_MigrateAllVolumes proto.InternalMessageInfo
+
+// Response to start a cloud migration
+type CloudMigrateStartResponse struct {
+	// TaskId assocaiated with the migration that was started
+	TaskId               string   `protobuf:"bytes,1,opt,name=task_id,json=taskId" json:"task_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *CloudMigrateStartResponse) Reset()         { *m = CloudMigrateStartResponse{} }
+func (m *CloudMigrateStartResponse) String() string { return proto.CompactTextString(m) }
+func (*CloudMigrateStartResponse) ProtoMessage()    {}
+func (*CloudMigrateStartResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{212}
+}
+func (m *CloudMigrateStartResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_CloudMigrateStartResponse.Unmarshal(m, b)
+}
+func (m *CloudMigrateStartResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_CloudMigrateStartResponse.Marshal(b, m, deterministic)
+}
+func (dst *CloudMigrateStartResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_CloudMigrateStartResponse.Merge(dst, src)
+}
+func (m *CloudMigrateStartResponse) XXX_Size() int {
+	return xxx_messageInfo_CloudMigrateStartResponse.Size(m)
+}
+func (m *CloudMigrateStartResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_CloudMigrateStartResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_CloudMigrateStartResponse proto.InternalMessageInfo
+
+func (m *CloudMigrateStartResponse) GetTaskId() string {
+	if m != nil {
+		return m.TaskId
+	}
+	return ""
+}
+
+// Defines a response for the migration that was started
+type SdkCloudMigrateStartResponse struct {
+	// Result assocaiated with the migration that was started
+	Result               *CloudMigrateStartResponse `protobuf:"bytes,1,opt,name=result" json:"result,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                   `json:"-"`
+	XXX_unrecognized     []byte                     `json:"-"`
+	XXX_sizecache        int32                      `json:"-"`
+}
+
+func (m *SdkCloudMigrateStartResponse) Reset()         { *m = SdkCloudMigrateStartResponse{} }
+func (m *SdkCloudMigrateStartResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudMigrateStartResponse) ProtoMessage()    {}
+func (*SdkCloudMigrateStartResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{213}
+}
+func (m *SdkCloudMigrateStartResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudMigrateStartResponse.Unmarshal(m, b)
+}
+func (m *SdkCloudMigrateStartResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudMigrateStartResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudMigrateStartResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudMigrateStartResponse.Merge(dst, src)
+}
+func (m *SdkCloudMigrateStartResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudMigrateStartResponse.Size(m)
+}
+func (m *SdkCloudMigrateStartResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudMigrateStartResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudMigrateStartResponse proto.InternalMessageInfo
+
+func (m *SdkCloudMigrateStartResponse) GetResult() *CloudMigrateStartResponse {
+	if m != nil {
+		return m.Result
+	}
+	return nil
+}
+
+// Request to stop a cloud migration
+type CloudMigrateCancelRequest struct {
+	// The id of the task to cancel
+	TaskId               string   `protobuf:"bytes,1,opt,name=task_id,json=taskId" json:"task_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *CloudMigrateCancelRequest) Reset()         { *m = CloudMigrateCancelRequest{} }
+func (m *CloudMigrateCancelRequest) String() string { return proto.CompactTextString(m) }
+func (*CloudMigrateCancelRequest) ProtoMessage()    {}
+func (*CloudMigrateCancelRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{214}
+}
+func (m *CloudMigrateCancelRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_CloudMigrateCancelRequest.Unmarshal(m, b)
+}
+func (m *CloudMigrateCancelRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_CloudMigrateCancelRequest.Marshal(b, m, deterministic)
+}
+func (dst *CloudMigrateCancelRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_CloudMigrateCancelRequest.Merge(dst, src)
+}
+func (m *CloudMigrateCancelRequest) XXX_Size() int {
+	return xxx_messageInfo_CloudMigrateCancelRequest.Size(m)
+}
+func (m *CloudMigrateCancelRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_CloudMigrateCancelRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_CloudMigrateCancelRequest proto.InternalMessageInfo
+
+func (m *CloudMigrateCancelRequest) GetTaskId() string {
+	if m != nil {
+		return m.TaskId
+	}
+	return ""
+}
+
+// Defines a request to stop a cloud migration
+type SdkCloudMigrateCancelRequest struct {
+	// Request containing the task id to be cancelled
+	Request              *CloudMigrateCancelRequest `protobuf:"bytes,1,opt,name=request" json:"request,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                   `json:"-"`
+	XXX_unrecognized     []byte                     `json:"-"`
+	XXX_sizecache        int32                      `json:"-"`
+}
+
+func (m *SdkCloudMigrateCancelRequest) Reset()         { *m = SdkCloudMigrateCancelRequest{} }
+func (m *SdkCloudMigrateCancelRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudMigrateCancelRequest) ProtoMessage()    {}
+func (*SdkCloudMigrateCancelRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{215}
+}
+func (m *SdkCloudMigrateCancelRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudMigrateCancelRequest.Unmarshal(m, b)
+}
+func (m *SdkCloudMigrateCancelRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudMigrateCancelRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudMigrateCancelRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudMigrateCancelRequest.Merge(dst, src)
+}
+func (m *SdkCloudMigrateCancelRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudMigrateCancelRequest.Size(m)
+}
+func (m *SdkCloudMigrateCancelRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudMigrateCancelRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudMigrateCancelRequest proto.InternalMessageInfo
+
+func (m *SdkCloudMigrateCancelRequest) GetRequest() *CloudMigrateCancelRequest {
+	if m != nil {
+		return m.Request
+	}
+	return nil
+}
+
+// Empty Response
+type SdkCloudMigrateCancelResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkCloudMigrateCancelResponse) Reset()         { *m = SdkCloudMigrateCancelResponse{} }
+func (m *SdkCloudMigrateCancelResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudMigrateCancelResponse) ProtoMessage()    {}
+func (*SdkCloudMigrateCancelResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{216}
+}
+func (m *SdkCloudMigrateCancelResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudMigrateCancelResponse.Unmarshal(m, b)
+}
+func (m *SdkCloudMigrateCancelResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudMigrateCancelResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudMigrateCancelResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudMigrateCancelResponse.Merge(dst, src)
+}
+func (m *SdkCloudMigrateCancelResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudMigrateCancelResponse.Size(m)
+}
+func (m *SdkCloudMigrateCancelResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudMigrateCancelResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudMigrateCancelResponse proto.InternalMessageInfo
+
+type CloudMigrateInfo struct {
+	// Task id associated with this migration
+	TaskId string `protobuf:"bytes,1,opt,name=task_id,json=taskId" json:"task_id,omitempty"`
+	// ID of the cluster where the volume is being migrated
+	ClusterId string `protobuf:"bytes,2,opt,name=cluster_id,json=clusterId" json:"cluster_id,omitempty"`
+	// ID of the volume on the local cluster
+	LocalVolumeId string `protobuf:"bytes,3,opt,name=local_volume_id,json=localVolumeId" json:"local_volume_id,omitempty"`
+	// Name of the volume on the local cluster
+	LocalVolumeName string `protobuf:"bytes,4,opt,name=local_volume_name,json=localVolumeName" json:"local_volume_name,omitempty"`
+	// ID of the volume on the remote cluster
+	RemoteVolumeId string `protobuf:"bytes,5,opt,name=remote_volume_id,json=remoteVolumeId" json:"remote_volume_id,omitempty"`
+	// ID of the cloudbackup used for the migration
+	CloudbackupId string `protobuf:"bytes,6,opt,name=cloudbackup_id,json=cloudbackupId" json:"cloudbackup_id,omitempty"`
+	// Current stage of the volume migration
+	CurrentStage CloudMigrate_Stage `protobuf:"varint,7,opt,name=current_stage,json=currentStage,enum=openstorage.api.CloudMigrate_Stage" json:"current_stage,omitempty"`
+	// Status of the current stage
+	Status CloudMigrate_Status `protobuf:"varint,8,opt,name=status,enum=openstorage.api.CloudMigrate_Status" json:"status,omitempty"`
+	// Last time the status was updated
+	LastUpdate *timestamp.Timestamp `protobuf:"bytes,9,opt,name=last_update,json=lastUpdate" json:"last_update,omitempty"`
+	// Contains the reason for the migration error
+	ErrorReason string `protobuf:"bytes,10,opt,name=error_reason,json=errorReason" json:"error_reason,omitempty"`
+	// StartTime indicates Op's start time
+	StartTime *timestamp.Timestamp `protobuf:"bytes,11,opt,name=start_time,json=startTime" json:"start_time,omitempty"`
+	// CompletedTime indicates Op's completed time
+	CompletedTime *timestamp.Timestamp `protobuf:"bytes,12,opt,name=completed_time,json=completedTime" json:"completed_time,omitempty"`
+	// BytesTotal is the number of bytes being transferred
+	BytesTotal uint64 `protobuf:"varint,13,opt,name=bytes_total,json=bytesTotal" json:"bytes_total,omitempty"`
+	// BytesDone is the number of bytes already transferred
+	BytesDone uint64 `protobuf:"varint,14,opt,name=bytes_done,json=bytesDone" json:"bytes_done,omitempty"`
+	// ETASeconds the time duration in seconds for cloud migration completion
+	EtaSeconds           int64    `protobuf:"varint,15,opt,name=eta_seconds,json=etaSeconds" json:"eta_seconds,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *CloudMigrateInfo) Reset()         { *m = CloudMigrateInfo{} }
+func (m *CloudMigrateInfo) String() string { return proto.CompactTextString(m) }
+func (*CloudMigrateInfo) ProtoMessage()    {}
+func (*CloudMigrateInfo) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{217}
+}
+func (m *CloudMigrateInfo) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_CloudMigrateInfo.Unmarshal(m, b)
+}
+func (m *CloudMigrateInfo) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_CloudMigrateInfo.Marshal(b, m, deterministic)
+}
+func (dst *CloudMigrateInfo) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_CloudMigrateInfo.Merge(dst, src)
+}
+func (m *CloudMigrateInfo) XXX_Size() int {
+	return xxx_messageInfo_CloudMigrateInfo.Size(m)
+}
+func (m *CloudMigrateInfo) XXX_DiscardUnknown() {
+	xxx_messageInfo_CloudMigrateInfo.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_CloudMigrateInfo proto.InternalMessageInfo
+
+func (m *CloudMigrateInfo) GetTaskId() string {
+	if m != nil {
+		return m.TaskId
+	}
+	return ""
+}
+
+func (m *CloudMigrateInfo) GetClusterId() string {
+	if m != nil {
+		return m.ClusterId
+	}
+	return ""
+}
+
+func (m *CloudMigrateInfo) GetLocalVolumeId() string {
+	if m != nil {
+		return m.LocalVolumeId
+	}
+	return ""
+}
+
+func (m *CloudMigrateInfo) GetLocalVolumeName() string {
+	if m != nil {
+		return m.LocalVolumeName
+	}
+	return ""
+}
+
+func (m *CloudMigrateInfo) GetRemoteVolumeId() string {
+	if m != nil {
+		return m.RemoteVolumeId
+	}
+	return ""
+}
+
+func (m *CloudMigrateInfo) GetCloudbackupId() string {
+	if m != nil {
+		return m.CloudbackupId
+	}
+	return ""
+}
+
+func (m *CloudMigrateInfo) GetCurrentStage() CloudMigrate_Stage {
+	if m != nil {
+		return m.CurrentStage
+	}
+	return CloudMigrate_InvalidStage
+}
+
+func (m *CloudMigrateInfo) GetStatus() CloudMigrate_Status {
+	if m != nil {
+		return m.Status
+	}
+	return CloudMigrate_InvalidStatus
+}
+
+func (m *CloudMigrateInfo) GetLastUpdate() *timestamp.Timestamp {
+	if m != nil {
+		return m.LastUpdate
+	}
+	return nil
+}
+
+func (m *CloudMigrateInfo) GetErrorReason() string {
+	if m != nil {
+		return m.ErrorReason
+	}
+	return ""
+}
+
+func (m *CloudMigrateInfo) GetStartTime() *timestamp.Timestamp {
+	if m != nil {
+		return m.StartTime
+	}
+	return nil
+}
+
+func (m *CloudMigrateInfo) GetCompletedTime() *timestamp.Timestamp {
+	if m != nil {
+		return m.CompletedTime
+	}
+	return nil
+}
+
+func (m *CloudMigrateInfo) GetBytesTotal() uint64 {
+	if m != nil {
+		return m.BytesTotal
+	}
+	return 0
+}
+
+func (m *CloudMigrateInfo) GetBytesDone() uint64 {
+	if m != nil {
+		return m.BytesDone
+	}
+	return 0
+}
+
+func (m *CloudMigrateInfo) GetEtaSeconds() int64 {
+	if m != nil {
+		return m.EtaSeconds
+	}
+	return 0
+}
+
+type CloudMigrateInfoList struct {
+	List                 []*CloudMigrateInfo `protobuf:"bytes,1,rep,name=list" json:"list,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}            `json:"-"`
+	XXX_unrecognized     []byte              `json:"-"`
+	XXX_sizecache        int32               `json:"-"`
+}
+
+func (m *CloudMigrateInfoList) Reset()         { *m = CloudMigrateInfoList{} }
+func (m *CloudMigrateInfoList) String() string { return proto.CompactTextString(m) }
+func (*CloudMigrateInfoList) ProtoMessage()    {}
+func (*CloudMigrateInfoList) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{218}
+}
+func (m *CloudMigrateInfoList) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_CloudMigrateInfoList.Unmarshal(m, b)
+}
+func (m *CloudMigrateInfoList) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_CloudMigrateInfoList.Marshal(b, m, deterministic)
+}
+func (dst *CloudMigrateInfoList) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_CloudMigrateInfoList.Merge(dst, src)
+}
+func (m *CloudMigrateInfoList) XXX_Size() int {
+	return xxx_messageInfo_CloudMigrateInfoList.Size(m)
+}
+func (m *CloudMigrateInfoList) XXX_DiscardUnknown() {
+	xxx_messageInfo_CloudMigrateInfoList.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_CloudMigrateInfoList proto.InternalMessageInfo
+
+func (m *CloudMigrateInfoList) GetList() []*CloudMigrateInfo {
+	if m != nil {
+		return m.List
+	}
+	return nil
+}
+
+// Request for cloud migration operation status
+type SdkCloudMigrateStatusRequest struct {
+	// Request contains the task id and cluster id for which status should be
+	// returned
+	Request              *CloudMigrateStatusRequest `protobuf:"bytes,1,opt,name=request" json:"request,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                   `json:"-"`
+	XXX_unrecognized     []byte                     `json:"-"`
+	XXX_sizecache        int32                      `json:"-"`
+}
+
+func (m *SdkCloudMigrateStatusRequest) Reset()         { *m = SdkCloudMigrateStatusRequest{} }
+func (m *SdkCloudMigrateStatusRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudMigrateStatusRequest) ProtoMessage()    {}
+func (*SdkCloudMigrateStatusRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{219}
+}
+func (m *SdkCloudMigrateStatusRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudMigrateStatusRequest.Unmarshal(m, b)
+}
+func (m *SdkCloudMigrateStatusRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudMigrateStatusRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudMigrateStatusRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudMigrateStatusRequest.Merge(dst, src)
+}
+func (m *SdkCloudMigrateStatusRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudMigrateStatusRequest.Size(m)
+}
+func (m *SdkCloudMigrateStatusRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudMigrateStatusRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudMigrateStatusRequest proto.InternalMessageInfo
+
+func (m *SdkCloudMigrateStatusRequest) GetRequest() *CloudMigrateStatusRequest {
+	if m != nil {
+		return m.Request
+	}
+	return nil
+}
+
+// Request for cloud migration operation status
+type CloudMigrateStatusRequest struct {
+	// Task id for which to return status
+	TaskId string `protobuf:"bytes,1,opt,name=task_id,json=taskId" json:"task_id,omitempty"`
+	// ID of the cluster for which to return migration statuses
+	ClusterId            string   `protobuf:"bytes,2,opt,name=cluster_id,json=clusterId" json:"cluster_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *CloudMigrateStatusRequest) Reset()         { *m = CloudMigrateStatusRequest{} }
+func (m *CloudMigrateStatusRequest) String() string { return proto.CompactTextString(m) }
+func (*CloudMigrateStatusRequest) ProtoMessage()    {}
+func (*CloudMigrateStatusRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{220}
+}
+func (m *CloudMigrateStatusRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_CloudMigrateStatusRequest.Unmarshal(m, b)
+}
+func (m *CloudMigrateStatusRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_CloudMigrateStatusRequest.Marshal(b, m, deterministic)
+}
+func (dst *CloudMigrateStatusRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_CloudMigrateStatusRequest.Merge(dst, src)
+}
+func (m *CloudMigrateStatusRequest) XXX_Size() int {
+	return xxx_messageInfo_CloudMigrateStatusRequest.Size(m)
+}
+func (m *CloudMigrateStatusRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_CloudMigrateStatusRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_CloudMigrateStatusRequest proto.InternalMessageInfo
+
+func (m *CloudMigrateStatusRequest) GetTaskId() string {
+	if m != nil {
+		return m.TaskId
+	}
+	return ""
+}
+
+func (m *CloudMigrateStatusRequest) GetClusterId() string {
+	if m != nil {
+		return m.ClusterId
+	}
+	return ""
+}
+
+// Response with a status of the cloud migration operations
+type CloudMigrateStatusResponse struct {
+	// Map of cluster id to the status of volumes being migrated
+	Info                 map[string]*CloudMigrateInfoList `protobuf:"bytes,1,rep,name=info" json:"info,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}                         `json:"-"`
+	XXX_unrecognized     []byte                           `json:"-"`
+	XXX_sizecache        int32                            `json:"-"`
+}
+
+func (m *CloudMigrateStatusResponse) Reset()         { *m = CloudMigrateStatusResponse{} }
+func (m *CloudMigrateStatusResponse) String() string { return proto.CompactTextString(m) }
+func (*CloudMigrateStatusResponse) ProtoMessage()    {}
+func (*CloudMigrateStatusResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{221}
+}
+func (m *CloudMigrateStatusResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_CloudMigrateStatusResponse.Unmarshal(m, b)
+}
+func (m *CloudMigrateStatusResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_CloudMigrateStatusResponse.Marshal(b, m, deterministic)
+}
+func (dst *CloudMigrateStatusResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_CloudMigrateStatusResponse.Merge(dst, src)
+}
+func (m *CloudMigrateStatusResponse) XXX_Size() int {
+	return xxx_messageInfo_CloudMigrateStatusResponse.Size(m)
+}
+func (m *CloudMigrateStatusResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_CloudMigrateStatusResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_CloudMigrateStatusResponse proto.InternalMessageInfo
+
+func (m *CloudMigrateStatusResponse) GetInfo() map[string]*CloudMigrateInfoList {
+	if m != nil {
+		return m.Info
+	}
+	return nil
+}
+
+// Defines a response for the status request
+type SdkCloudMigrateStatusResponse struct {
+	// Status of all migration requests
+	Result               *CloudMigrateStatusResponse `protobuf:"bytes,1,opt,name=result" json:"result,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                    `json:"-"`
+	XXX_unrecognized     []byte                      `json:"-"`
+	XXX_sizecache        int32                       `json:"-"`
+}
+
+func (m *SdkCloudMigrateStatusResponse) Reset()         { *m = SdkCloudMigrateStatusResponse{} }
+func (m *SdkCloudMigrateStatusResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkCloudMigrateStatusResponse) ProtoMessage()    {}
+func (*SdkCloudMigrateStatusResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{222}
+}
+func (m *SdkCloudMigrateStatusResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkCloudMigrateStatusResponse.Unmarshal(m, b)
+}
+func (m *SdkCloudMigrateStatusResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkCloudMigrateStatusResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkCloudMigrateStatusResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkCloudMigrateStatusResponse.Merge(dst, src)
+}
+func (m *SdkCloudMigrateStatusResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkCloudMigrateStatusResponse.Size(m)
+}
+func (m *SdkCloudMigrateStatusResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkCloudMigrateStatusResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkCloudMigrateStatusResponse proto.InternalMessageInfo
+
+func (m *SdkCloudMigrateStatusResponse) GetResult() *CloudMigrateStatusResponse {
+	if m != nil {
+		return m.Result
+	}
+	return nil
+}
+
+type ClusterPairMode struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *ClusterPairMode) Reset()         { *m = ClusterPairMode{} }
+func (m *ClusterPairMode) String() string { return proto.CompactTextString(m) }
+func (*ClusterPairMode) ProtoMessage()    {}
+func (*ClusterPairMode) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{223}
+}
+func (m *ClusterPairMode) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_ClusterPairMode.Unmarshal(m, b)
+}
+func (m *ClusterPairMode) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_ClusterPairMode.Marshal(b, m, deterministic)
+}
+func (dst *ClusterPairMode) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_ClusterPairMode.Merge(dst, src)
+}
+func (m *ClusterPairMode) XXX_Size() int {
+	return xxx_messageInfo_ClusterPairMode.Size(m)
+}
+func (m *ClusterPairMode) XXX_DiscardUnknown() {
+	xxx_messageInfo_ClusterPairMode.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_ClusterPairMode proto.InternalMessageInfo
+
+// Used to send a request to create a cluster pair
+type ClusterPairCreateRequest struct {
+	// IP of the remote cluster
+	RemoteClusterIp string `protobuf:"bytes,1,opt,name=remote_cluster_ip,json=remoteClusterIp" json:"remote_cluster_ip,omitempty"`
+	// Port for the remote cluster
+	RemoteClusterPort uint32 `protobuf:"varint,2,opt,name=remote_cluster_port,json=remoteClusterPort" json:"remote_cluster_port,omitempty"`
+	// Token used to authenticate with the remote cluster
+	RemoteClusterToken string `protobuf:"bytes,3,opt,name=remote_cluster_token,json=remoteClusterToken" json:"remote_cluster_token,omitempty"`
+	// Set the new pair as the default
+	SetDefault bool `protobuf:"varint,4,opt,name=set_default,json=setDefault" json:"set_default,omitempty"`
+	// The mode to use for the cluster pair
+	Mode                 ClusterPairMode_Mode `protobuf:"varint,5,opt,name=mode,enum=openstorage.api.ClusterPairMode_Mode" json:"mode,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}             `json:"-"`
+	XXX_unrecognized     []byte               `json:"-"`
+	XXX_sizecache        int32                `json:"-"`
+}
+
+func (m *ClusterPairCreateRequest) Reset()         { *m = ClusterPairCreateRequest{} }
+func (m *ClusterPairCreateRequest) String() string { return proto.CompactTextString(m) }
+func (*ClusterPairCreateRequest) ProtoMessage()    {}
+func (*ClusterPairCreateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{224}
+}
+func (m *ClusterPairCreateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_ClusterPairCreateRequest.Unmarshal(m, b)
+}
+func (m *ClusterPairCreateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_ClusterPairCreateRequest.Marshal(b, m, deterministic)
+}
+func (dst *ClusterPairCreateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_ClusterPairCreateRequest.Merge(dst, src)
+}
+func (m *ClusterPairCreateRequest) XXX_Size() int {
+	return xxx_messageInfo_ClusterPairCreateRequest.Size(m)
+}
+func (m *ClusterPairCreateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_ClusterPairCreateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_ClusterPairCreateRequest proto.InternalMessageInfo
+
+func (m *ClusterPairCreateRequest) GetRemoteClusterIp() string {
+	if m != nil {
+		return m.RemoteClusterIp
+	}
+	return ""
+}
+
+func (m *ClusterPairCreateRequest) GetRemoteClusterPort() uint32 {
+	if m != nil {
+		return m.RemoteClusterPort
+	}
+	return 0
+}
+
+func (m *ClusterPairCreateRequest) GetRemoteClusterToken() string {
+	if m != nil {
+		return m.RemoteClusterToken
+	}
+	return ""
+}
+
+func (m *ClusterPairCreateRequest) GetSetDefault() bool {
+	if m != nil {
+		return m.SetDefault
+	}
+	return false
+}
+
+func (m *ClusterPairCreateRequest) GetMode() ClusterPairMode_Mode {
+	if m != nil {
+		return m.Mode
+	}
+	return ClusterPairMode_Default
+}
+
+// Response for a pair request
+type ClusterPairCreateResponse struct {
+	// ID of the remote cluster
+	RemoteClusterId string `protobuf:"bytes,1,opt,name=remote_cluster_id,json=remoteClusterId" json:"remote_cluster_id,omitempty"`
+	// Name of the remote cluster
+	RemoteClusterName    string   `protobuf:"bytes,2,opt,name=remote_cluster_name,json=remoteClusterName" json:"remote_cluster_name,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *ClusterPairCreateResponse) Reset()         { *m = ClusterPairCreateResponse{} }
+func (m *ClusterPairCreateResponse) String() string { return proto.CompactTextString(m) }
+func (*ClusterPairCreateResponse) ProtoMessage()    {}
+func (*ClusterPairCreateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{225}
+}
+func (m *ClusterPairCreateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_ClusterPairCreateResponse.Unmarshal(m, b)
+}
+func (m *ClusterPairCreateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_ClusterPairCreateResponse.Marshal(b, m, deterministic)
+}
+func (dst *ClusterPairCreateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_ClusterPairCreateResponse.Merge(dst, src)
+}
+func (m *ClusterPairCreateResponse) XXX_Size() int {
+	return xxx_messageInfo_ClusterPairCreateResponse.Size(m)
+}
+func (m *ClusterPairCreateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_ClusterPairCreateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_ClusterPairCreateResponse proto.InternalMessageInfo
+
+func (m *ClusterPairCreateResponse) GetRemoteClusterId() string {
+	if m != nil {
+		return m.RemoteClusterId
+	}
+	return ""
+}
+
+func (m *ClusterPairCreateResponse) GetRemoteClusterName() string {
+	if m != nil {
+		return m.RemoteClusterName
+	}
+	return ""
+}
+
+// Defines a request for creating a cluster pair
+type SdkClusterPairCreateRequest struct {
+	Request              *ClusterPairCreateRequest `protobuf:"bytes,1,opt,name=request" json:"request,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                  `json:"-"`
+	XXX_unrecognized     []byte                    `json:"-"`
+	XXX_sizecache        int32                     `json:"-"`
+}
+
+func (m *SdkClusterPairCreateRequest) Reset()         { *m = SdkClusterPairCreateRequest{} }
+func (m *SdkClusterPairCreateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterPairCreateRequest) ProtoMessage()    {}
+func (*SdkClusterPairCreateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{226}
+}
+func (m *SdkClusterPairCreateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterPairCreateRequest.Unmarshal(m, b)
+}
+func (m *SdkClusterPairCreateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterPairCreateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterPairCreateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterPairCreateRequest.Merge(dst, src)
+}
+func (m *SdkClusterPairCreateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterPairCreateRequest.Size(m)
+}
+func (m *SdkClusterPairCreateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterPairCreateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterPairCreateRequest proto.InternalMessageInfo
+
+func (m *SdkClusterPairCreateRequest) GetRequest() *ClusterPairCreateRequest {
+	if m != nil {
+		return m.Request
+	}
+	return nil
+}
+
+// Defines a result of the cluster pair
+type SdkClusterPairCreateResponse struct {
+	// Contains the information about cluster pair
+	Result               *ClusterPairCreateResponse `protobuf:"bytes,1,opt,name=result" json:"result,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                   `json:"-"`
+	XXX_unrecognized     []byte                     `json:"-"`
+	XXX_sizecache        int32                      `json:"-"`
+}
+
+func (m *SdkClusterPairCreateResponse) Reset()         { *m = SdkClusterPairCreateResponse{} }
+func (m *SdkClusterPairCreateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterPairCreateResponse) ProtoMessage()    {}
+func (*SdkClusterPairCreateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{227}
+}
+func (m *SdkClusterPairCreateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterPairCreateResponse.Unmarshal(m, b)
+}
+func (m *SdkClusterPairCreateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterPairCreateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterPairCreateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterPairCreateResponse.Merge(dst, src)
+}
+func (m *SdkClusterPairCreateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterPairCreateResponse.Size(m)
+}
+func (m *SdkClusterPairCreateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterPairCreateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterPairCreateResponse proto.InternalMessageInfo
+
+func (m *SdkClusterPairCreateResponse) GetResult() *ClusterPairCreateResponse {
+	if m != nil {
+		return m.Result
+	}
+	return nil
+}
+
+// Used to process a pair request from a remote cluster
+type ClusterPairProcessRequest struct {
+	// ID of the cluster requesting the pairing
+	SourceClusterId string `protobuf:"bytes,1,opt,name=source_cluster_id,json=sourceClusterId" json:"source_cluster_id,omitempty"`
+	// Token used to authenticate with the remote cluster
+	RemoteClusterToken string `protobuf:"bytes,2,opt,name=remote_cluster_token,json=remoteClusterToken" json:"remote_cluster_token,omitempty"`
+	// The mode to use for the cluster pair
+	Mode                 ClusterPairMode_Mode `protobuf:"varint,3,opt,name=mode,enum=openstorage.api.ClusterPairMode_Mode" json:"mode,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}             `json:"-"`
+	XXX_unrecognized     []byte               `json:"-"`
+	XXX_sizecache        int32                `json:"-"`
+}
+
+func (m *ClusterPairProcessRequest) Reset()         { *m = ClusterPairProcessRequest{} }
+func (m *ClusterPairProcessRequest) String() string { return proto.CompactTextString(m) }
+func (*ClusterPairProcessRequest) ProtoMessage()    {}
+func (*ClusterPairProcessRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{228}
+}
+func (m *ClusterPairProcessRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_ClusterPairProcessRequest.Unmarshal(m, b)
+}
+func (m *ClusterPairProcessRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_ClusterPairProcessRequest.Marshal(b, m, deterministic)
+}
+func (dst *ClusterPairProcessRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_ClusterPairProcessRequest.Merge(dst, src)
+}
+func (m *ClusterPairProcessRequest) XXX_Size() int {
+	return xxx_messageInfo_ClusterPairProcessRequest.Size(m)
+}
+func (m *ClusterPairProcessRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_ClusterPairProcessRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_ClusterPairProcessRequest proto.InternalMessageInfo
+
+func (m *ClusterPairProcessRequest) GetSourceClusterId() string {
+	if m != nil {
+		return m.SourceClusterId
+	}
+	return ""
+}
+
+func (m *ClusterPairProcessRequest) GetRemoteClusterToken() string {
+	if m != nil {
+		return m.RemoteClusterToken
+	}
+	return ""
+}
+
+func (m *ClusterPairProcessRequest) GetMode() ClusterPairMode_Mode {
+	if m != nil {
+		return m.Mode
+	}
+	return ClusterPairMode_Default
+}
+
+// Response after a pairing has been processed
+type ClusterPairProcessResponse struct {
+	// ID of the cluster which processed the pair request
+	RemoteClusterId string `protobuf:"bytes,1,opt,name=remote_cluster_id,json=remoteClusterId" json:"remote_cluster_id,omitempty"`
+	// Name of the cluster which processed the pair request
+	RemoteClusterName string `protobuf:"bytes,2,opt,name=remote_cluster_name,json=remoteClusterName" json:"remote_cluster_name,omitempty"`
+	// List of endpoints that can be used to communicate with the cluster
+	RemoteClusterEndpoints []string `protobuf:"bytes,3,rep,name=remote_cluster_endpoints,json=remoteClusterEndpoints" json:"remote_cluster_endpoints,omitempty"`
+	// Key/value pair of options returned on successful pairing.
+	// Opaque to openstorage and interpreted by the drivers
+	Options              map[string]string `protobuf:"bytes,4,rep,name=options" json:"options,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *ClusterPairProcessResponse) Reset()         { *m = ClusterPairProcessResponse{} }
+func (m *ClusterPairProcessResponse) String() string { return proto.CompactTextString(m) }
+func (*ClusterPairProcessResponse) ProtoMessage()    {}
+func (*ClusterPairProcessResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{229}
+}
+func (m *ClusterPairProcessResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_ClusterPairProcessResponse.Unmarshal(m, b)
+}
+func (m *ClusterPairProcessResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_ClusterPairProcessResponse.Marshal(b, m, deterministic)
+}
+func (dst *ClusterPairProcessResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_ClusterPairProcessResponse.Merge(dst, src)
+}
+func (m *ClusterPairProcessResponse) XXX_Size() int {
+	return xxx_messageInfo_ClusterPairProcessResponse.Size(m)
+}
+func (m *ClusterPairProcessResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_ClusterPairProcessResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_ClusterPairProcessResponse proto.InternalMessageInfo
+
+func (m *ClusterPairProcessResponse) GetRemoteClusterId() string {
+	if m != nil {
+		return m.RemoteClusterId
+	}
+	return ""
+}
+
+func (m *ClusterPairProcessResponse) GetRemoteClusterName() string {
+	if m != nil {
+		return m.RemoteClusterName
+	}
+	return ""
+}
+
+func (m *ClusterPairProcessResponse) GetRemoteClusterEndpoints() []string {
+	if m != nil {
+		return m.RemoteClusterEndpoints
+	}
+	return nil
+}
+
+func (m *ClusterPairProcessResponse) GetOptions() map[string]string {
+	if m != nil {
+		return m.Options
+	}
+	return nil
+}
+
+// Defines a delete request for a cluster pair
+type SdkClusterPairDeleteRequest struct {
+	// ID of the cluster pair to be deleted
+	ClusterId            string   `protobuf:"bytes,1,opt,name=cluster_id,json=clusterId" json:"cluster_id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkClusterPairDeleteRequest) Reset()         { *m = SdkClusterPairDeleteRequest{} }
+func (m *SdkClusterPairDeleteRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterPairDeleteRequest) ProtoMessage()    {}
+func (*SdkClusterPairDeleteRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{230}
+}
+func (m *SdkClusterPairDeleteRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterPairDeleteRequest.Unmarshal(m, b)
+}
+func (m *SdkClusterPairDeleteRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterPairDeleteRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterPairDeleteRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterPairDeleteRequest.Merge(dst, src)
+}
+func (m *SdkClusterPairDeleteRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterPairDeleteRequest.Size(m)
+}
+func (m *SdkClusterPairDeleteRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterPairDeleteRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterPairDeleteRequest proto.InternalMessageInfo
+
+func (m *SdkClusterPairDeleteRequest) GetClusterId() string {
+	if m != nil {
+		return m.ClusterId
+	}
+	return ""
+}
+
+// Empty response
+type SdkClusterPairDeleteResponse struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkClusterPairDeleteResponse) Reset()         { *m = SdkClusterPairDeleteResponse{} }
+func (m *SdkClusterPairDeleteResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterPairDeleteResponse) ProtoMessage()    {}
+func (*SdkClusterPairDeleteResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{231}
+}
+func (m *SdkClusterPairDeleteResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterPairDeleteResponse.Unmarshal(m, b)
+}
+func (m *SdkClusterPairDeleteResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterPairDeleteResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterPairDeleteResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterPairDeleteResponse.Merge(dst, src)
+}
+func (m *SdkClusterPairDeleteResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterPairDeleteResponse.Size(m)
+}
+func (m *SdkClusterPairDeleteResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterPairDeleteResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterPairDeleteResponse proto.InternalMessageInfo
+
+// Response to get the cluster token
+type ClusterPairTokenGetResponse struct {
+	// Token used to authenticate clusters
+	Token                string   `protobuf:"bytes,1,opt,name=token" json:"token,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *ClusterPairTokenGetResponse) Reset()         { *m = ClusterPairTokenGetResponse{} }
+func (m *ClusterPairTokenGetResponse) String() string { return proto.CompactTextString(m) }
+func (*ClusterPairTokenGetResponse) ProtoMessage()    {}
+func (*ClusterPairTokenGetResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{232}
+}
+func (m *ClusterPairTokenGetResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_ClusterPairTokenGetResponse.Unmarshal(m, b)
+}
+func (m *ClusterPairTokenGetResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_ClusterPairTokenGetResponse.Marshal(b, m, deterministic)
+}
+func (dst *ClusterPairTokenGetResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_ClusterPairTokenGetResponse.Merge(dst, src)
+}
+func (m *ClusterPairTokenGetResponse) XXX_Size() int {
+	return xxx_messageInfo_ClusterPairTokenGetResponse.Size(m)
+}
+func (m *ClusterPairTokenGetResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_ClusterPairTokenGetResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_ClusterPairTokenGetResponse proto.InternalMessageInfo
+
+func (m *ClusterPairTokenGetResponse) GetToken() string {
+	if m != nil {
+		return m.Token
+	}
+	return ""
+}
+
+// Empty request
+type SdkClusterPairGetTokenRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkClusterPairGetTokenRequest) Reset()         { *m = SdkClusterPairGetTokenRequest{} }
+func (m *SdkClusterPairGetTokenRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterPairGetTokenRequest) ProtoMessage()    {}
+func (*SdkClusterPairGetTokenRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{233}
+}
+func (m *SdkClusterPairGetTokenRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterPairGetTokenRequest.Unmarshal(m, b)
+}
+func (m *SdkClusterPairGetTokenRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterPairGetTokenRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterPairGetTokenRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterPairGetTokenRequest.Merge(dst, src)
+}
+func (m *SdkClusterPairGetTokenRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterPairGetTokenRequest.Size(m)
+}
+func (m *SdkClusterPairGetTokenRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterPairGetTokenRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterPairGetTokenRequest proto.InternalMessageInfo
+
+// Defines a response for the token request
+type SdkClusterPairGetTokenResponse struct {
+	// Contains authentication token for the cluster
+	Result               *ClusterPairTokenGetResponse `protobuf:"bytes,1,opt,name=result" json:"result,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                     `json:"-"`
+	XXX_unrecognized     []byte                       `json:"-"`
+	XXX_sizecache        int32                        `json:"-"`
+}
+
+func (m *SdkClusterPairGetTokenResponse) Reset()         { *m = SdkClusterPairGetTokenResponse{} }
+func (m *SdkClusterPairGetTokenResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterPairGetTokenResponse) ProtoMessage()    {}
+func (*SdkClusterPairGetTokenResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{234}
+}
+func (m *SdkClusterPairGetTokenResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterPairGetTokenResponse.Unmarshal(m, b)
+}
+func (m *SdkClusterPairGetTokenResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterPairGetTokenResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterPairGetTokenResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterPairGetTokenResponse.Merge(dst, src)
+}
+func (m *SdkClusterPairGetTokenResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterPairGetTokenResponse.Size(m)
+}
+func (m *SdkClusterPairGetTokenResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterPairGetTokenResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterPairGetTokenResponse proto.InternalMessageInfo
+
+func (m *SdkClusterPairGetTokenResponse) GetResult() *ClusterPairTokenGetResponse {
+	if m != nil {
+		return m.Result
+	}
+	return nil
+}
+
+// Empty request
+type SdkClusterPairResetTokenRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkClusterPairResetTokenRequest) Reset()         { *m = SdkClusterPairResetTokenRequest{} }
+func (m *SdkClusterPairResetTokenRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterPairResetTokenRequest) ProtoMessage()    {}
+func (*SdkClusterPairResetTokenRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{235}
+}
+func (m *SdkClusterPairResetTokenRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterPairResetTokenRequest.Unmarshal(m, b)
+}
+func (m *SdkClusterPairResetTokenRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterPairResetTokenRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterPairResetTokenRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterPairResetTokenRequest.Merge(dst, src)
+}
+func (m *SdkClusterPairResetTokenRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterPairResetTokenRequest.Size(m)
+}
+func (m *SdkClusterPairResetTokenRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterPairResetTokenRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterPairResetTokenRequest proto.InternalMessageInfo
+
+// Defines a response for the token request
+type SdkClusterPairResetTokenResponse struct {
+	// Contains authentication token for the cluster
+	Result               *ClusterPairTokenGetResponse `protobuf:"bytes,1,opt,name=result" json:"result,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                     `json:"-"`
+	XXX_unrecognized     []byte                       `json:"-"`
+	XXX_sizecache        int32                        `json:"-"`
+}
+
+func (m *SdkClusterPairResetTokenResponse) Reset()         { *m = SdkClusterPairResetTokenResponse{} }
+func (m *SdkClusterPairResetTokenResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterPairResetTokenResponse) ProtoMessage()    {}
+func (*SdkClusterPairResetTokenResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{236}
+}
+func (m *SdkClusterPairResetTokenResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterPairResetTokenResponse.Unmarshal(m, b)
+}
+func (m *SdkClusterPairResetTokenResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterPairResetTokenResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterPairResetTokenResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterPairResetTokenResponse.Merge(dst, src)
+}
+func (m *SdkClusterPairResetTokenResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterPairResetTokenResponse.Size(m)
+}
+func (m *SdkClusterPairResetTokenResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterPairResetTokenResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterPairResetTokenResponse proto.InternalMessageInfo
+
+func (m *SdkClusterPairResetTokenResponse) GetResult() *ClusterPairTokenGetResponse {
+	if m != nil {
+		return m.Result
+	}
+	return nil
+}
+
+// Information about a cluster pair
+type ClusterPairInfo struct {
+	// ID of the cluster
+	Id string `protobuf:"bytes,1,opt,name=id" json:"id,omitempty"`
+	// Name of the cluster
+	Name string `protobuf:"bytes,2,opt,name=name" json:"name,omitempty"`
+	// The endpoint used for creating the pair
+	Endpoint string `protobuf:"bytes,3,opt,name=endpoint" json:"endpoint,omitempty"`
+	// Current endpoints of the cluster
+	CurrentEndpoints []string `protobuf:"bytes,4,rep,name=current_endpoints,json=currentEndpoints" json:"current_endpoints,omitempty"`
+	// Flag used to determine if communication is over a secure channel
+	Secure bool `protobuf:"varint,5,opt,name=secure" json:"secure,omitempty"`
+	// Token associated with cluster
+	Token string `protobuf:"bytes,6,opt,name=token" json:"token,omitempty"`
+	// Key/value pair of options associated with the cluster
+	// Opaque to openstorage and interpreted by the drivers
+	Options map[string]string `protobuf:"bytes,7,rep,name=options" json:"options,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	// Mode for the cluster pair
+	Mode                 ClusterPairMode_Mode `protobuf:"varint,8,opt,name=mode,enum=openstorage.api.ClusterPairMode_Mode" json:"mode,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}             `json:"-"`
+	XXX_unrecognized     []byte               `json:"-"`
+	XXX_sizecache        int32                `json:"-"`
+}
+
+func (m *ClusterPairInfo) Reset()         { *m = ClusterPairInfo{} }
+func (m *ClusterPairInfo) String() string { return proto.CompactTextString(m) }
+func (*ClusterPairInfo) ProtoMessage()    {}
+func (*ClusterPairInfo) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{237}
+}
+func (m *ClusterPairInfo) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_ClusterPairInfo.Unmarshal(m, b)
+}
+func (m *ClusterPairInfo) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_ClusterPairInfo.Marshal(b, m, deterministic)
+}
+func (dst *ClusterPairInfo) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_ClusterPairInfo.Merge(dst, src)
+}
+func (m *ClusterPairInfo) XXX_Size() int {
+	return xxx_messageInfo_ClusterPairInfo.Size(m)
+}
+func (m *ClusterPairInfo) XXX_DiscardUnknown() {
+	xxx_messageInfo_ClusterPairInfo.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_ClusterPairInfo proto.InternalMessageInfo
+
+func (m *ClusterPairInfo) GetId() string {
+	if m != nil {
+		return m.Id
+	}
+	return ""
+}
+
+func (m *ClusterPairInfo) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+func (m *ClusterPairInfo) GetEndpoint() string {
+	if m != nil {
+		return m.Endpoint
+	}
+	return ""
+}
+
+func (m *ClusterPairInfo) GetCurrentEndpoints() []string {
+	if m != nil {
+		return m.CurrentEndpoints
+	}
+	return nil
+}
+
+func (m *ClusterPairInfo) GetSecure() bool {
+	if m != nil {
+		return m.Secure
+	}
+	return false
+}
+
+func (m *ClusterPairInfo) GetToken() string {
+	if m != nil {
+		return m.Token
+	}
+	return ""
+}
+
+func (m *ClusterPairInfo) GetOptions() map[string]string {
+	if m != nil {
+		return m.Options
+	}
+	return nil
+}
+
+func (m *ClusterPairInfo) GetMode() ClusterPairMode_Mode {
+	if m != nil {
+		return m.Mode
+	}
+	return ClusterPairMode_Default
+}
+
+// Defines a cluster pair inspect request
+type SdkClusterPairInspectRequest struct {
+	// ID of the cluster, if empty gets the default pair
+	Id                   string   `protobuf:"bytes,1,opt,name=id" json:"id,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkClusterPairInspectRequest) Reset()         { *m = SdkClusterPairInspectRequest{} }
+func (m *SdkClusterPairInspectRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterPairInspectRequest) ProtoMessage()    {}
+func (*SdkClusterPairInspectRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{238}
+}
+func (m *SdkClusterPairInspectRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterPairInspectRequest.Unmarshal(m, b)
+}
+func (m *SdkClusterPairInspectRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterPairInspectRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterPairInspectRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterPairInspectRequest.Merge(dst, src)
+}
+func (m *SdkClusterPairInspectRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterPairInspectRequest.Size(m)
+}
+func (m *SdkClusterPairInspectRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterPairInspectRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterPairInspectRequest proto.InternalMessageInfo
+
+func (m *SdkClusterPairInspectRequest) GetId() string {
+	if m != nil {
+		return m.Id
+	}
+	return ""
+}
+
+// Reponse to get a cluster pair
+type ClusterPairGetResponse struct {
+	// Info about the cluster pair
+	PairInfo             *ClusterPairInfo `protobuf:"bytes,1,opt,name=pair_info,json=pairInfo" json:"pair_info,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}         `json:"-"`
+	XXX_unrecognized     []byte           `json:"-"`
+	XXX_sizecache        int32            `json:"-"`
+}
+
+func (m *ClusterPairGetResponse) Reset()         { *m = ClusterPairGetResponse{} }
+func (m *ClusterPairGetResponse) String() string { return proto.CompactTextString(m) }
+func (*ClusterPairGetResponse) ProtoMessage()    {}
+func (*ClusterPairGetResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{239}
+}
+func (m *ClusterPairGetResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_ClusterPairGetResponse.Unmarshal(m, b)
+}
+func (m *ClusterPairGetResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_ClusterPairGetResponse.Marshal(b, m, deterministic)
+}
+func (dst *ClusterPairGetResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_ClusterPairGetResponse.Merge(dst, src)
+}
+func (m *ClusterPairGetResponse) XXX_Size() int {
+	return xxx_messageInfo_ClusterPairGetResponse.Size(m)
+}
+func (m *ClusterPairGetResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_ClusterPairGetResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_ClusterPairGetResponse proto.InternalMessageInfo
+
+func (m *ClusterPairGetResponse) GetPairInfo() *ClusterPairInfo {
+	if m != nil {
+		return m.PairInfo
+	}
+	return nil
+}
+
+// Defines a cluster pair inspect response
+type SdkClusterPairInspectResponse struct {
+	// Information about cluster pair
+	Result               *ClusterPairGetResponse `protobuf:"bytes,1,opt,name=result" json:"result,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                `json:"-"`
+	XXX_unrecognized     []byte                  `json:"-"`
+	XXX_sizecache        int32                   `json:"-"`
+}
+
+func (m *SdkClusterPairInspectResponse) Reset()         { *m = SdkClusterPairInspectResponse{} }
+func (m *SdkClusterPairInspectResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterPairInspectResponse) ProtoMessage()    {}
+func (*SdkClusterPairInspectResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{240}
+}
+func (m *SdkClusterPairInspectResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterPairInspectResponse.Unmarshal(m, b)
+}
+func (m *SdkClusterPairInspectResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterPairInspectResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterPairInspectResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterPairInspectResponse.Merge(dst, src)
+}
+func (m *SdkClusterPairInspectResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterPairInspectResponse.Size(m)
+}
+func (m *SdkClusterPairInspectResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterPairInspectResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterPairInspectResponse proto.InternalMessageInfo
+
+func (m *SdkClusterPairInspectResponse) GetResult() *ClusterPairGetResponse {
+	if m != nil {
+		return m.Result
+	}
+	return nil
+}
+
+// Empty Request
+type SdkClusterPairEnumerateRequest struct {
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *SdkClusterPairEnumerateRequest) Reset()         { *m = SdkClusterPairEnumerateRequest{} }
+func (m *SdkClusterPairEnumerateRequest) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterPairEnumerateRequest) ProtoMessage()    {}
+func (*SdkClusterPairEnumerateRequest) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{241}
+}
+func (m *SdkClusterPairEnumerateRequest) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterPairEnumerateRequest.Unmarshal(m, b)
+}
+func (m *SdkClusterPairEnumerateRequest) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterPairEnumerateRequest.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterPairEnumerateRequest) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterPairEnumerateRequest.Merge(dst, src)
+}
+func (m *SdkClusterPairEnumerateRequest) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterPairEnumerateRequest.Size(m)
+}
+func (m *SdkClusterPairEnumerateRequest) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterPairEnumerateRequest.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterPairEnumerateRequest proto.InternalMessageInfo
+
+// Response to enumerate all the cluster pairs
+type ClusterPairsEnumerateResponse struct {
+	// ID of the default cluster pair
+	DefaultId string `protobuf:"bytes,1,opt,name=default_id,json=defaultId" json:"default_id,omitempty"`
+	// Pairs Info about the cluster pairs
+	Pairs                map[string]*ClusterPairInfo `protobuf:"bytes,2,rep,name=pairs" json:"pairs,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}                    `json:"-"`
+	XXX_unrecognized     []byte                      `json:"-"`
+	XXX_sizecache        int32                       `json:"-"`
+}
+
+func (m *ClusterPairsEnumerateResponse) Reset()         { *m = ClusterPairsEnumerateResponse{} }
+func (m *ClusterPairsEnumerateResponse) String() string { return proto.CompactTextString(m) }
+func (*ClusterPairsEnumerateResponse) ProtoMessage()    {}
+func (*ClusterPairsEnumerateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{242}
+}
+func (m *ClusterPairsEnumerateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_ClusterPairsEnumerateResponse.Unmarshal(m, b)
+}
+func (m *ClusterPairsEnumerateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_ClusterPairsEnumerateResponse.Marshal(b, m, deterministic)
+}
+func (dst *ClusterPairsEnumerateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_ClusterPairsEnumerateResponse.Merge(dst, src)
+}
+func (m *ClusterPairsEnumerateResponse) XXX_Size() int {
+	return xxx_messageInfo_ClusterPairsEnumerateResponse.Size(m)
+}
+func (m *ClusterPairsEnumerateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_ClusterPairsEnumerateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_ClusterPairsEnumerateResponse proto.InternalMessageInfo
+
+func (m *ClusterPairsEnumerateResponse) GetDefaultId() string {
+	if m != nil {
+		return m.DefaultId
+	}
+	return ""
+}
+
+func (m *ClusterPairsEnumerateResponse) GetPairs() map[string]*ClusterPairInfo {
+	if m != nil {
+		return m.Pairs
+	}
+	return nil
+}
+
+// Defines a list of cluster pair
+type SdkClusterPairEnumerateResponse struct {
+	// List of all the cluster pairs
+	Result               *ClusterPairsEnumerateResponse `protobuf:"bytes,1,opt,name=result" json:"result,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                       `json:"-"`
+	XXX_unrecognized     []byte                         `json:"-"`
+	XXX_sizecache        int32                          `json:"-"`
+}
+
+func (m *SdkClusterPairEnumerateResponse) Reset()         { *m = SdkClusterPairEnumerateResponse{} }
+func (m *SdkClusterPairEnumerateResponse) String() string { return proto.CompactTextString(m) }
+func (*SdkClusterPairEnumerateResponse) ProtoMessage()    {}
+func (*SdkClusterPairEnumerateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{243}
+}
+func (m *SdkClusterPairEnumerateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_SdkClusterPairEnumerateResponse.Unmarshal(m, b)
+}
+func (m *SdkClusterPairEnumerateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_SdkClusterPairEnumerateResponse.Marshal(b, m, deterministic)
+}
+func (dst *SdkClusterPairEnumerateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_SdkClusterPairEnumerateResponse.Merge(dst, src)
+}
+func (m *SdkClusterPairEnumerateResponse) XXX_Size() int {
+	return xxx_messageInfo_SdkClusterPairEnumerateResponse.Size(m)
+}
+func (m *SdkClusterPairEnumerateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_SdkClusterPairEnumerateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_SdkClusterPairEnumerateResponse proto.InternalMessageInfo
+
+func (m *SdkClusterPairEnumerateResponse) GetResult() *ClusterPairsEnumerateResponse {
+	if m != nil {
+		return m.Result
+	}
+	return nil
+}
+
+type Catalog struct {
+	// Name of the Directory/File
+	Name string `protobuf:"bytes,1,opt,name=name" json:"name,omitempty"`
+	// Full Path of the Directory/File
+	Path string `protobuf:"bytes,2,opt,name=path" json:"path,omitempty"`
+	// Type Directory or File
+	Type string `protobuf:"bytes,3,opt,name=type" json:"type,omitempty"`
+	// File or Directory Size
+	Size uint64 `protobuf:"varint,4,opt,name=size" json:"size,omitempty"`
+	// Last Modified
+	LastModified *timestamp.Timestamp `protobuf:"bytes,5,opt,name=LastModified" json:"LastModified,omitempty"`
+	// Children
+	Children             []*Catalog `protobuf:"bytes,6,rep,name=children" json:"children,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}   `json:"-"`
+	XXX_unrecognized     []byte     `json:"-"`
+	XXX_sizecache        int32      `json:"-"`
+}
+
+func (m *Catalog) Reset()         { *m = Catalog{} }
+func (m *Catalog) String() string { return proto.CompactTextString(m) }
+func (*Catalog) ProtoMessage()    {}
+func (*Catalog) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{244}
+}
+func (m *Catalog) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_Catalog.Unmarshal(m, b)
+}
+func (m *Catalog) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_Catalog.Marshal(b, m, deterministic)
+}
+func (dst *Catalog) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_Catalog.Merge(dst, src)
+}
+func (m *Catalog) XXX_Size() int {
+	return xxx_messageInfo_Catalog.Size(m)
+}
+func (m *Catalog) XXX_DiscardUnknown() {
+	xxx_messageInfo_Catalog.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_Catalog proto.InternalMessageInfo
+
+func (m *Catalog) GetName() string {
+	if m != nil {
+		return m.Name
+	}
+	return ""
+}
+
+func (m *Catalog) GetPath() string {
+	if m != nil {
+		return m.Path
+	}
+	return ""
+}
+
+func (m *Catalog) GetType() string {
+	if m != nil {
+		return m.Type
+	}
+	return ""
+}
+
+func (m *Catalog) GetSize() uint64 {
+	if m != nil {
+		return m.Size
+	}
+	return 0
+}
+
+func (m *Catalog) GetLastModified() *timestamp.Timestamp {
+	if m != nil {
+		return m.LastModified
+	}
+	return nil
+}
+
+func (m *Catalog) GetChildren() []*Catalog {
+	if m != nil {
+		return m.Children
+	}
+	return nil
+}
+
+type Report struct {
+	// Directory count
+	Directories int64 `protobuf:"varint,2,opt,name=directories" json:"directories,omitempty"`
+	// File count
+	Files                int64    `protobuf:"varint,3,opt,name=files" json:"files,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *Report) Reset()         { *m = Report{} }
+func (m *Report) String() string { return proto.CompactTextString(m) }
+func (*Report) ProtoMessage()    {}
+func (*Report) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{245}
+}
+func (m *Report) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_Report.Unmarshal(m, b)
+}
+func (m *Report) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_Report.Marshal(b, m, deterministic)
+}
+func (dst *Report) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_Report.Merge(dst, src)
+}
+func (m *Report) XXX_Size() int {
+	return xxx_messageInfo_Report.Size(m)
+}
+func (m *Report) XXX_DiscardUnknown() {
+	xxx_messageInfo_Report.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_Report proto.InternalMessageInfo
+
+func (m *Report) GetDirectories() int64 {
+	if m != nil {
+		return m.Directories
+	}
+	return 0
+}
+
+func (m *Report) GetFiles() int64 {
+	if m != nil {
+		return m.Files
+	}
+	return 0
+}
+
+type CatalogResponse struct {
+	// Root Catalog
+	Root *Catalog `protobuf:"bytes,1,opt,name=root" json:"root,omitempty"`
+	// Report of total directories and files count
+	Report               *Report  `protobuf:"bytes,2,opt,name=report" json:"report,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *CatalogResponse) Reset()         { *m = CatalogResponse{} }
+func (m *CatalogResponse) String() string { return proto.CompactTextString(m) }
+func (*CatalogResponse) ProtoMessage()    {}
+func (*CatalogResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{246}
+}
+func (m *CatalogResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_CatalogResponse.Unmarshal(m, b)
+}
+func (m *CatalogResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_CatalogResponse.Marshal(b, m, deterministic)
+}
+func (dst *CatalogResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_CatalogResponse.Merge(dst, src)
+}
+func (m *CatalogResponse) XXX_Size() int {
+	return xxx_messageInfo_CatalogResponse.Size(m)
+}
+func (m *CatalogResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_CatalogResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_CatalogResponse proto.InternalMessageInfo
+
+func (m *CatalogResponse) GetRoot() *Catalog {
+	if m != nil {
+		return m.Root
+	}
+	return nil
+}
+
+func (m *CatalogResponse) GetReport() *Report {
+	if m != nil {
+		return m.Report
+	}
+	return nil
+}
+
+// Locate response would be used to return a set of mounts
+// and/or Container IDs and their mount paths
+type LocateResponse struct {
+	// Map of mounts
+	// <host>: /var/lib/osd/<volumemount>
+	Mounts map[string]string `protobuf:"bytes,1,rep,name=mounts" json:"mounts,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	// Map of docker id's and their mounts
+	// <containerid>: /var/www
+	Dockerids            map[string]string `protobuf:"bytes,2,rep,name=dockerids" json:"dockerids,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`
+	XXX_NoUnkeyedLiteral struct{}          `json:"-"`
+	XXX_unrecognized     []byte            `json:"-"`
+	XXX_sizecache        int32             `json:"-"`
+}
+
+func (m *LocateResponse) Reset()         { *m = LocateResponse{} }
+func (m *LocateResponse) String() string { return proto.CompactTextString(m) }
+func (*LocateResponse) ProtoMessage()    {}
+func (*LocateResponse) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{247}
+}
+func (m *LocateResponse) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_LocateResponse.Unmarshal(m, b)
+}
+func (m *LocateResponse) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_LocateResponse.Marshal(b, m, deterministic)
+}
+func (dst *LocateResponse) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_LocateResponse.Merge(dst, src)
+}
+func (m *LocateResponse) XXX_Size() int {
+	return xxx_messageInfo_LocateResponse.Size(m)
+}
+func (m *LocateResponse) XXX_DiscardUnknown() {
+	xxx_messageInfo_LocateResponse.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_LocateResponse proto.InternalMessageInfo
+
+func (m *LocateResponse) GetMounts() map[string]string {
+	if m != nil {
+		return m.Mounts
+	}
+	return nil
+}
+
+func (m *LocateResponse) GetDockerids() map[string]string {
+	if m != nil {
+		return m.Dockerids
+	}
+	return nil
+}
+
+// VolumePlacementStrategy defines a strategy for placing volumes in the cluster which will be a series of rules
+type VolumePlacementStrategy struct {
+	// Rules defines a list of rules as part of the placement spec. All the rules specified will
+	// be applied for volume placement.
+	// Rules that have enforcement as "required" are strictly enforced while "preferred" are best effort.
+	// In situations, where 2 or more rules conflict, the weight of the rules will dictate which wins.
+	Rules                []*VolumePlacementRule `protobuf:"bytes,1,rep,name=rules" json:"rules,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}               `json:"-"`
+	XXX_unrecognized     []byte                 `json:"-"`
+	XXX_sizecache        int32                  `json:"-"`
+}
+
+func (m *VolumePlacementStrategy) Reset()         { *m = VolumePlacementStrategy{} }
+func (m *VolumePlacementStrategy) String() string { return proto.CompactTextString(m) }
+func (*VolumePlacementStrategy) ProtoMessage()    {}
+func (*VolumePlacementStrategy) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{248}
+}
+func (m *VolumePlacementStrategy) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_VolumePlacementStrategy.Unmarshal(m, b)
+}
+func (m *VolumePlacementStrategy) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_VolumePlacementStrategy.Marshal(b, m, deterministic)
+}
+func (dst *VolumePlacementStrategy) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_VolumePlacementStrategy.Merge(dst, src)
+}
+func (m *VolumePlacementStrategy) XXX_Size() int {
+	return xxx_messageInfo_VolumePlacementStrategy.Size(m)
+}
+func (m *VolumePlacementStrategy) XXX_DiscardUnknown() {
+	xxx_messageInfo_VolumePlacementStrategy.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_VolumePlacementStrategy proto.InternalMessageInfo
+
+func (m *VolumePlacementStrategy) GetRules() []*VolumePlacementRule {
+	if m != nil {
+		return m.Rules
+	}
+	return nil
+}
+
+// VolumePlacementRule defines a single placement rule
+type VolumePlacementRule struct {
+	// AffectedReplicas defines the number of volume replicas affected by this rule. If not provided,
+	// rule would affect all replicas
+	// (optional)
+	AffectedReplicas int32 `protobuf:"varint,1,opt,name=affected_replicas,json=affectedReplicas" json:"affected_replicas,omitempty"`
+	// Weight defines the weight of the rule which allows to break the tie with other matching rules. A rule with
+	// higher weight wins over a rule with lower weight.
+	// (optional)
+	Weight int64 `protobuf:"varint,2,opt,name=weight" json:"weight,omitempty"`
+	// Enforcement specifies the rule enforcement policy. Can take values: required or preferred.
+	// (optional)
+	Enforcement VolumePlacementRule_EnforcementType `protobuf:"varint,3,opt,name=enforcement,enum=openstorage.api.VolumePlacementRule_EnforcementType" json:"enforcement,omitempty"`
+	// Type is the type of the affinity rule
+	Type VolumePlacementRule_AffinityRuleType `protobuf:"varint,4,opt,name=type,enum=openstorage.api.VolumePlacementRule_AffinityRuleType" json:"type,omitempty"`
+	// MatchExpressions is a list of label selector requirements. The requirements are ANDed.
+	MatchExpressions     []*LabelSelectorRequirement `protobuf:"bytes,5,rep,name=match_expressions,json=matchExpressions" json:"match_expressions,omitempty"`
+	XXX_NoUnkeyedLiteral struct{}                    `json:"-"`
+	XXX_unrecognized     []byte                      `json:"-"`
+	XXX_sizecache        int32                       `json:"-"`
+}
+
+func (m *VolumePlacementRule) Reset()         { *m = VolumePlacementRule{} }
+func (m *VolumePlacementRule) String() string { return proto.CompactTextString(m) }
+func (*VolumePlacementRule) ProtoMessage()    {}
+func (*VolumePlacementRule) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{249}
+}
+func (m *VolumePlacementRule) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_VolumePlacementRule.Unmarshal(m, b)
+}
+func (m *VolumePlacementRule) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_VolumePlacementRule.Marshal(b, m, deterministic)
+}
+func (dst *VolumePlacementRule) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_VolumePlacementRule.Merge(dst, src)
+}
+func (m *VolumePlacementRule) XXX_Size() int {
+	return xxx_messageInfo_VolumePlacementRule.Size(m)
+}
+func (m *VolumePlacementRule) XXX_DiscardUnknown() {
+	xxx_messageInfo_VolumePlacementRule.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_VolumePlacementRule proto.InternalMessageInfo
+
+func (m *VolumePlacementRule) GetAffectedReplicas() int32 {
+	if m != nil {
+		return m.AffectedReplicas
+	}
+	return 0
+}
+
+func (m *VolumePlacementRule) GetWeight() int64 {
+	if m != nil {
+		return m.Weight
+	}
+	return 0
+}
+
+func (m *VolumePlacementRule) GetEnforcement() VolumePlacementRule_EnforcementType {
+	if m != nil {
+		return m.Enforcement
+	}
+	return VolumePlacementRule_required
+}
+
+func (m *VolumePlacementRule) GetType() VolumePlacementRule_AffinityRuleType {
+	if m != nil {
+		return m.Type
+	}
+	return VolumePlacementRule_affinity
+}
+
+func (m *VolumePlacementRule) GetMatchExpressions() []*LabelSelectorRequirement {
+	if m != nil {
+		return m.MatchExpressions
+	}
+	return nil
+}
+
+// LabelSelectorRequirement is a selector that contains values, a key, and an operator that
+// relates the key and values.
+type LabelSelectorRequirement struct {
+	// Key is the label key that the selector applies to.
+	Key string `protobuf:"bytes,1,opt,name=key" json:"key,omitempty"`
+	// Operator represents a key's relationship to a set of values.
+	// Valid operators are In, NotIn, Exists and DoesNotExist.
+	Operator LabelSelectorRequirement_Operator `protobuf:"varint,2,opt,name=operator,enum=openstorage.api.LabelSelectorRequirement_Operator" json:"operator,omitempty"`
+	// Values is an array of string values. If the operator is In or NotIn,
+	// the values array must be non-empty. If the operator is Exists or DoesNotExist,
+	// the values array must be empty. This array is replaced during a strategic
+	// merge patch.
+	Values               []string `protobuf:"bytes,3,rep,name=values" json:"values,omitempty"`
+	XXX_NoUnkeyedLiteral struct{} `json:"-"`
+	XXX_unrecognized     []byte   `json:"-"`
+	XXX_sizecache        int32    `json:"-"`
+}
+
+func (m *LabelSelectorRequirement) Reset()         { *m = LabelSelectorRequirement{} }
+func (m *LabelSelectorRequirement) String() string { return proto.CompactTextString(m) }
+func (*LabelSelectorRequirement) ProtoMessage()    {}
+func (*LabelSelectorRequirement) Descriptor() ([]byte, []int) {
+	return fileDescriptor_api_05b7199aa6331e09, []int{250}
+}
+func (m *LabelSelectorRequirement) XXX_Unmarshal(b []byte) error {
+	return xxx_messageInfo_LabelSelectorRequirement.Unmarshal(m, b)
+}
+func (m *LabelSelectorRequirement) XXX_Marshal(b []byte, deterministic bool) ([]byte, error) {
+	return xxx_messageInfo_LabelSelectorRequirement.Marshal(b, m, deterministic)
+}
+func (dst *LabelSelectorRequirement) XXX_Merge(src proto.Message) {
+	xxx_messageInfo_LabelSelectorRequirement.Merge(dst, src)
+}
+func (m *LabelSelectorRequirement) XXX_Size() int {
+	return xxx_messageInfo_LabelSelectorRequirement.Size(m)
+}
+func (m *LabelSelectorRequirement) XXX_DiscardUnknown() {
+	xxx_messageInfo_LabelSelectorRequirement.DiscardUnknown(m)
+}
+
+var xxx_messageInfo_LabelSelectorRequirement proto.InternalMessageInfo
+
+func (m *LabelSelectorRequirement) GetKey() string {
+	if m != nil {
+		return m.Key
+	}
+	return ""
+}
+
+func (m *LabelSelectorRequirement) GetOperator() LabelSelectorRequirement_Operator {
+	if m != nil {
+		return m.Operator
+	}
+	return LabelSelectorRequirement_In
+}
+
+func (m *LabelSelectorRequirement) GetValues() []string {
+	if m != nil {
+		return m.Values
+	}
+	return nil
+}
+
+func init() {
+	proto.RegisterType((*StorageResource)(nil), "openstorage.api.StorageResource")
+	proto.RegisterType((*StoragePool)(nil), "openstorage.api.StoragePool")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.StoragePool.LabelsEntry")
+	proto.RegisterType((*VolumeLocator)(nil), "openstorage.api.VolumeLocator")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.VolumeLocator.VolumeLabelsEntry")
+	proto.RegisterType((*VolumeInspectOptions)(nil), "openstorage.api.VolumeInspectOptions")
+	proto.RegisterType((*Source)(nil), "openstorage.api.Source")
+	proto.RegisterType((*Group)(nil), "openstorage.api.Group")
+	proto.RegisterType((*IoStrategy)(nil), "openstorage.api.IoStrategy")
+	proto.RegisterType((*VolumeSpec)(nil), "openstorage.api.VolumeSpec")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.VolumeSpec.VolumeLabelsEntry")
+	proto.RegisterType((*VolumeSpecUpdate)(nil), "openstorage.api.VolumeSpecUpdate")
+	proto.RegisterType((*VolumeSpecPolicy)(nil), "openstorage.api.VolumeSpecPolicy")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.VolumeSpecPolicy.VolumeLabelsEntry")
+	proto.RegisterType((*ReplicaSet)(nil), "openstorage.api.ReplicaSet")
+	proto.RegisterType((*RuntimeStateMap)(nil), "openstorage.api.RuntimeStateMap")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.RuntimeStateMap.RuntimeStateEntry")
+	proto.RegisterType((*Ownership)(nil), "openstorage.api.Ownership")
+	proto.RegisterType((*Ownership_AccessControl)(nil), "openstorage.api.Ownership.AccessControl")
+	proto.RegisterMapType((map[string]Ownership_AccessType)(nil), "openstorage.api.Ownership.AccessControl.CollaboratorsEntry")
+	proto.RegisterMapType((map[string]Ownership_AccessType)(nil), "openstorage.api.Ownership.AccessControl.GroupsEntry")
+	proto.RegisterType((*Volume)(nil), "openstorage.api.Volume")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.Volume.AttachInfoEntry")
+	proto.RegisterType((*Stats)(nil), "openstorage.api.Stats")
+	proto.RegisterType((*CapacityUsageInfo)(nil), "openstorage.api.CapacityUsageInfo")
+	proto.RegisterType((*SdkStoragePolicy)(nil), "openstorage.api.SdkStoragePolicy")
+	proto.RegisterType((*Alert)(nil), "openstorage.api.Alert")
+	proto.RegisterType((*SdkAlertsTimeSpan)(nil), "openstorage.api.SdkAlertsTimeSpan")
+	proto.RegisterType((*SdkAlertsCountSpan)(nil), "openstorage.api.SdkAlertsCountSpan")
+	proto.RegisterType((*SdkAlertsOption)(nil), "openstorage.api.SdkAlertsOption")
+	proto.RegisterType((*SdkAlertsResourceTypeQuery)(nil), "openstorage.api.SdkAlertsResourceTypeQuery")
+	proto.RegisterType((*SdkAlertsAlertTypeQuery)(nil), "openstorage.api.SdkAlertsAlertTypeQuery")
+	proto.RegisterType((*SdkAlertsResourceIdQuery)(nil), "openstorage.api.SdkAlertsResourceIdQuery")
+	proto.RegisterType((*SdkAlertsQuery)(nil), "openstorage.api.SdkAlertsQuery")
+	proto.RegisterType((*SdkAlertsEnumerateWithFiltersRequest)(nil), "openstorage.api.SdkAlertsEnumerateWithFiltersRequest")
+	proto.RegisterType((*SdkAlertsEnumerateWithFiltersResponse)(nil), "openstorage.api.SdkAlertsEnumerateWithFiltersResponse")
+	proto.RegisterType((*SdkAlertsDeleteRequest)(nil), "openstorage.api.SdkAlertsDeleteRequest")
+	proto.RegisterType((*SdkAlertsDeleteResponse)(nil), "openstorage.api.SdkAlertsDeleteResponse")
+	proto.RegisterType((*Alerts)(nil), "openstorage.api.Alerts")
+	proto.RegisterType((*ObjectstoreInfo)(nil), "openstorage.api.ObjectstoreInfo")
+	proto.RegisterType((*VolumeCreateRequest)(nil), "openstorage.api.VolumeCreateRequest")
+	proto.RegisterType((*VolumeResponse)(nil), "openstorage.api.VolumeResponse")
+	proto.RegisterType((*VolumeCreateResponse)(nil), "openstorage.api.VolumeCreateResponse")
+	proto.RegisterType((*VolumeStateAction)(nil), "openstorage.api.VolumeStateAction")
+	proto.RegisterType((*VolumeSetRequest)(nil), "openstorage.api.VolumeSetRequest")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.VolumeSetRequest.OptionsEntry")
+	proto.RegisterType((*VolumeSetResponse)(nil), "openstorage.api.VolumeSetResponse")
+	proto.RegisterType((*SnapCreateRequest)(nil), "openstorage.api.SnapCreateRequest")
+	proto.RegisterType((*SnapCreateResponse)(nil), "openstorage.api.SnapCreateResponse")
+	proto.RegisterType((*VolumeInfo)(nil), "openstorage.api.VolumeInfo")
+	proto.RegisterType((*VolumeConsumer)(nil), "openstorage.api.VolumeConsumer")
+	proto.RegisterType((*GraphDriverChanges)(nil), "openstorage.api.GraphDriverChanges")
+	proto.RegisterType((*ClusterResponse)(nil), "openstorage.api.ClusterResponse")
+	proto.RegisterType((*ActiveRequest)(nil), "openstorage.api.ActiveRequest")
+	proto.RegisterMapType((map[int64]string)(nil), "openstorage.api.ActiveRequest.ReqestKVEntry")
+	proto.RegisterType((*ActiveRequests)(nil), "openstorage.api.ActiveRequests")
+	proto.RegisterType((*GroupSnapCreateRequest)(nil), "openstorage.api.GroupSnapCreateRequest")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.GroupSnapCreateRequest.LabelsEntry")
+	proto.RegisterType((*GroupSnapCreateResponse)(nil), "openstorage.api.GroupSnapCreateResponse")
+	proto.RegisterMapType((map[string]*SnapCreateResponse)(nil), "openstorage.api.GroupSnapCreateResponse.SnapshotsEntry")
+	proto.RegisterType((*StorageNode)(nil), "openstorage.api.StorageNode")
+	proto.RegisterMapType((map[string]*StorageResource)(nil), "openstorage.api.StorageNode.DisksEntry")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.StorageNode.NodeLabelsEntry")
+	proto.RegisterType((*StorageCluster)(nil), "openstorage.api.StorageCluster")
+	proto.RegisterType((*SdkOpenStoragePolicyCreateRequest)(nil), "openstorage.api.SdkOpenStoragePolicyCreateRequest")
+	proto.RegisterType((*SdkOpenStoragePolicyCreateResponse)(nil), "openstorage.api.SdkOpenStoragePolicyCreateResponse")
+	proto.RegisterType((*SdkOpenStoragePolicyEnumerateRequest)(nil), "openstorage.api.SdkOpenStoragePolicyEnumerateRequest")
+	proto.RegisterType((*SdkOpenStoragePolicyEnumerateResponse)(nil), "openstorage.api.SdkOpenStoragePolicyEnumerateResponse")
+	proto.RegisterType((*SdkOpenStoragePolicyInspectRequest)(nil), "openstorage.api.SdkOpenStoragePolicyInspectRequest")
+	proto.RegisterType((*SdkOpenStoragePolicyInspectResponse)(nil), "openstorage.api.SdkOpenStoragePolicyInspectResponse")
+	proto.RegisterType((*SdkOpenStoragePolicyDeleteRequest)(nil), "openstorage.api.SdkOpenStoragePolicyDeleteRequest")
+	proto.RegisterType((*SdkOpenStoragePolicyDeleteResponse)(nil), "openstorage.api.SdkOpenStoragePolicyDeleteResponse")
+	proto.RegisterType((*SdkOpenStoragePolicyUpdateRequest)(nil), "openstorage.api.SdkOpenStoragePolicyUpdateRequest")
+	proto.RegisterType((*SdkOpenStoragePolicyUpdateResponse)(nil), "openstorage.api.SdkOpenStoragePolicyUpdateResponse")
+	proto.RegisterType((*SdkOpenStoragePolicySetDefaultRequest)(nil), "openstorage.api.SdkOpenStoragePolicySetDefaultRequest")
+	proto.RegisterType((*SdkOpenStoragePolicySetDefaultResponse)(nil), "openstorage.api.SdkOpenStoragePolicySetDefaultResponse")
+	proto.RegisterType((*SdkOpenStoragePolicyReleaseRequest)(nil), "openstorage.api.SdkOpenStoragePolicyReleaseRequest")
+	proto.RegisterType((*SdkOpenStoragePolicyReleaseResponse)(nil), "openstorage.api.SdkOpenStoragePolicyReleaseResponse")
+	proto.RegisterType((*SdkOpenStoragePolicyDefaultInspectRequest)(nil), "openstorage.api.SdkOpenStoragePolicyDefaultInspectRequest")
+	proto.RegisterType((*SdkOpenStoragePolicyDefaultInspectResponse)(nil), "openstorage.api.SdkOpenStoragePolicyDefaultInspectResponse")
+	proto.RegisterType((*SdkSchedulePolicyCreateRequest)(nil), "openstorage.api.SdkSchedulePolicyCreateRequest")
+	proto.RegisterType((*SdkSchedulePolicyCreateResponse)(nil), "openstorage.api.SdkSchedulePolicyCreateResponse")
+	proto.RegisterType((*SdkSchedulePolicyUpdateRequest)(nil), "openstorage.api.SdkSchedulePolicyUpdateRequest")
+	proto.RegisterType((*SdkSchedulePolicyUpdateResponse)(nil), "openstorage.api.SdkSchedulePolicyUpdateResponse")
+	proto.RegisterType((*SdkSchedulePolicyEnumerateRequest)(nil), "openstorage.api.SdkSchedulePolicyEnumerateRequest")
+	proto.RegisterType((*SdkSchedulePolicyEnumerateResponse)(nil), "openstorage.api.SdkSchedulePolicyEnumerateResponse")
+	proto.RegisterType((*SdkSchedulePolicyInspectRequest)(nil), "openstorage.api.SdkSchedulePolicyInspectRequest")
+	proto.RegisterType((*SdkSchedulePolicyInspectResponse)(nil), "openstorage.api.SdkSchedulePolicyInspectResponse")
+	proto.RegisterType((*SdkSchedulePolicyDeleteRequest)(nil), "openstorage.api.SdkSchedulePolicyDeleteRequest")
+	proto.RegisterType((*SdkSchedulePolicyDeleteResponse)(nil), "openstorage.api.SdkSchedulePolicyDeleteResponse")
+	proto.RegisterType((*SdkSchedulePolicyIntervalDaily)(nil), "openstorage.api.SdkSchedulePolicyIntervalDaily")
+	proto.RegisterType((*SdkSchedulePolicyIntervalWeekly)(nil), "openstorage.api.SdkSchedulePolicyIntervalWeekly")
+	proto.RegisterType((*SdkSchedulePolicyIntervalMonthly)(nil), "openstorage.api.SdkSchedulePolicyIntervalMonthly")
+	proto.RegisterType((*SdkSchedulePolicyIntervalPeriodic)(nil), "openstorage.api.SdkSchedulePolicyIntervalPeriodic")
+	proto.RegisterType((*SdkSchedulePolicyInterval)(nil), "openstorage.api.SdkSchedulePolicyInterval")
+	proto.RegisterType((*SdkSchedulePolicy)(nil), "openstorage.api.SdkSchedulePolicy")
+	proto.RegisterType((*SdkCredentialCreateRequest)(nil), "openstorage.api.SdkCredentialCreateRequest")
+	proto.RegisterType((*SdkCredentialCreateResponse)(nil), "openstorage.api.SdkCredentialCreateResponse")
+	proto.RegisterType((*SdkAwsCredentialRequest)(nil), "openstorage.api.SdkAwsCredentialRequest")
+	proto.RegisterType((*SdkAzureCredentialRequest)(nil), "openstorage.api.SdkAzureCredentialRequest")
+	proto.RegisterType((*SdkGoogleCredentialRequest)(nil), "openstorage.api.SdkGoogleCredentialRequest")
+	proto.RegisterType((*SdkAwsCredentialResponse)(nil), "openstorage.api.SdkAwsCredentialResponse")
+	proto.RegisterType((*SdkAzureCredentialResponse)(nil), "openstorage.api.SdkAzureCredentialResponse")
+	proto.RegisterType((*SdkGoogleCredentialResponse)(nil), "openstorage.api.SdkGoogleCredentialResponse")
+	proto.RegisterType((*SdkCredentialEnumerateRequest)(nil), "openstorage.api.SdkCredentialEnumerateRequest")
+	proto.RegisterType((*SdkCredentialEnumerateResponse)(nil), "openstorage.api.SdkCredentialEnumerateResponse")
+	proto.RegisterType((*SdkCredentialInspectRequest)(nil), "openstorage.api.SdkCredentialInspectRequest")
+	proto.RegisterType((*SdkCredentialInspectResponse)(nil), "openstorage.api.SdkCredentialInspectResponse")
+	proto.RegisterType((*SdkCredentialDeleteRequest)(nil), "openstorage.api.SdkCredentialDeleteRequest")
+	proto.RegisterType((*SdkCredentialDeleteResponse)(nil), "openstorage.api.SdkCredentialDeleteResponse")
+	proto.RegisterType((*SdkCredentialValidateRequest)(nil), "openstorage.api.SdkCredentialValidateRequest")
+	proto.RegisterType((*SdkCredentialValidateResponse)(nil), "openstorage.api.SdkCredentialValidateResponse")
+	proto.RegisterType((*SdkVolumeAttachOptions)(nil), "openstorage.api.SdkVolumeAttachOptions")
+	proto.RegisterType((*SdkVolumeMountRequest)(nil), "openstorage.api.SdkVolumeMountRequest")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.SdkVolumeMountRequest.DriverOptionsEntry")
+	proto.RegisterType((*SdkVolumeMountResponse)(nil), "openstorage.api.SdkVolumeMountResponse")
+	proto.RegisterType((*SdkVolumeUnmountOptions)(nil), "openstorage.api.SdkVolumeUnmountOptions")
+	proto.RegisterType((*SdkVolumeUnmountRequest)(nil), "openstorage.api.SdkVolumeUnmountRequest")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.SdkVolumeUnmountRequest.DriverOptionsEntry")
+	proto.RegisterType((*SdkVolumeUnmountResponse)(nil), "openstorage.api.SdkVolumeUnmountResponse")
+	proto.RegisterType((*SdkVolumeAttachRequest)(nil), "openstorage.api.SdkVolumeAttachRequest")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.SdkVolumeAttachRequest.DriverOptionsEntry")
+	proto.RegisterType((*SdkVolumeAttachResponse)(nil), "openstorage.api.SdkVolumeAttachResponse")
+	proto.RegisterType((*SdkVolumeDetachOptions)(nil), "openstorage.api.SdkVolumeDetachOptions")
+	proto.RegisterType((*SdkVolumeDetachRequest)(nil), "openstorage.api.SdkVolumeDetachRequest")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.SdkVolumeDetachRequest.DriverOptionsEntry")
+	proto.RegisterType((*SdkVolumeDetachResponse)(nil), "openstorage.api.SdkVolumeDetachResponse")
+	proto.RegisterType((*SdkVolumeCreateRequest)(nil), "openstorage.api.SdkVolumeCreateRequest")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.SdkVolumeCreateRequest.LabelsEntry")
+	proto.RegisterType((*SdkVolumeCreateResponse)(nil), "openstorage.api.SdkVolumeCreateResponse")
+	proto.RegisterType((*SdkVolumeCloneRequest)(nil), "openstorage.api.SdkVolumeCloneRequest")
+	proto.RegisterType((*SdkVolumeCloneResponse)(nil), "openstorage.api.SdkVolumeCloneResponse")
+	proto.RegisterType((*SdkVolumeDeleteRequest)(nil), "openstorage.api.SdkVolumeDeleteRequest")
+	proto.RegisterType((*SdkVolumeDeleteResponse)(nil), "openstorage.api.SdkVolumeDeleteResponse")
+	proto.RegisterType((*SdkVolumeInspectRequest)(nil), "openstorage.api.SdkVolumeInspectRequest")
+	proto.RegisterType((*SdkVolumeInspectResponse)(nil), "openstorage.api.SdkVolumeInspectResponse")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.SdkVolumeInspectResponse.LabelsEntry")
+	proto.RegisterType((*SdkVolumeInspectWithFiltersRequest)(nil), "openstorage.api.SdkVolumeInspectWithFiltersRequest")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.SdkVolumeInspectWithFiltersRequest.LabelsEntry")
+	proto.RegisterType((*SdkVolumeInspectWithFiltersResponse)(nil), "openstorage.api.SdkVolumeInspectWithFiltersResponse")
+	proto.RegisterType((*SdkVolumeUpdateRequest)(nil), "openstorage.api.SdkVolumeUpdateRequest")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.SdkVolumeUpdateRequest.LabelsEntry")
+	proto.RegisterType((*SdkVolumeUpdateResponse)(nil), "openstorage.api.SdkVolumeUpdateResponse")
+	proto.RegisterType((*SdkVolumeStatsRequest)(nil), "openstorage.api.SdkVolumeStatsRequest")
+	proto.RegisterType((*SdkVolumeStatsResponse)(nil), "openstorage.api.SdkVolumeStatsResponse")
+	proto.RegisterType((*SdkVolumeCapacityUsageRequest)(nil), "openstorage.api.SdkVolumeCapacityUsageRequest")
+	proto.RegisterType((*SdkVolumeCapacityUsageResponse)(nil), "openstorage.api.SdkVolumeCapacityUsageResponse")
+	proto.RegisterType((*SdkVolumeEnumerateRequest)(nil), "openstorage.api.SdkVolumeEnumerateRequest")
+	proto.RegisterType((*SdkVolumeEnumerateResponse)(nil), "openstorage.api.SdkVolumeEnumerateResponse")
+	proto.RegisterType((*SdkVolumeEnumerateWithFiltersRequest)(nil), "openstorage.api.SdkVolumeEnumerateWithFiltersRequest")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.SdkVolumeEnumerateWithFiltersRequest.LabelsEntry")
+	proto.RegisterType((*SdkVolumeEnumerateWithFiltersResponse)(nil), "openstorage.api.SdkVolumeEnumerateWithFiltersResponse")
+	proto.RegisterType((*SdkVolumeSnapshotCreateRequest)(nil), "openstorage.api.SdkVolumeSnapshotCreateRequest")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.SdkVolumeSnapshotCreateRequest.LabelsEntry")
+	proto.RegisterType((*SdkVolumeSnapshotCreateResponse)(nil), "openstorage.api.SdkVolumeSnapshotCreateResponse")
+	proto.RegisterType((*SdkVolumeSnapshotRestoreRequest)(nil), "openstorage.api.SdkVolumeSnapshotRestoreRequest")
+	proto.RegisterType((*SdkVolumeSnapshotRestoreResponse)(nil), "openstorage.api.SdkVolumeSnapshotRestoreResponse")
+	proto.RegisterType((*SdkVolumeSnapshotEnumerateRequest)(nil), "openstorage.api.SdkVolumeSnapshotEnumerateRequest")
+	proto.RegisterType((*SdkVolumeSnapshotEnumerateResponse)(nil), "openstorage.api.SdkVolumeSnapshotEnumerateResponse")
+	proto.RegisterType((*SdkVolumeSnapshotEnumerateWithFiltersRequest)(nil), "openstorage.api.SdkVolumeSnapshotEnumerateWithFiltersRequest")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.SdkVolumeSnapshotEnumerateWithFiltersRequest.LabelsEntry")
+	proto.RegisterType((*SdkVolumeSnapshotEnumerateWithFiltersResponse)(nil), "openstorage.api.SdkVolumeSnapshotEnumerateWithFiltersResponse")
+	proto.RegisterType((*SdkVolumeSnapshotScheduleUpdateRequest)(nil), "openstorage.api.SdkVolumeSnapshotScheduleUpdateRequest")
+	proto.RegisterType((*SdkVolumeSnapshotScheduleUpdateResponse)(nil), "openstorage.api.SdkVolumeSnapshotScheduleUpdateResponse")
+	proto.RegisterType((*SdkClusterDomainsEnumerateRequest)(nil), "openstorage.api.SdkClusterDomainsEnumerateRequest")
+	proto.RegisterType((*SdkClusterDomainsEnumerateResponse)(nil), "openstorage.api.SdkClusterDomainsEnumerateResponse")
+	proto.RegisterType((*SdkClusterDomainInspectRequest)(nil), "openstorage.api.SdkClusterDomainInspectRequest")
+	proto.RegisterType((*SdkClusterDomainInspectResponse)(nil), "openstorage.api.SdkClusterDomainInspectResponse")
+	proto.RegisterType((*SdkClusterDomainActivateRequest)(nil), "openstorage.api.SdkClusterDomainActivateRequest")
+	proto.RegisterType((*SdkClusterDomainActivateResponse)(nil), "openstorage.api.SdkClusterDomainActivateResponse")
+	proto.RegisterType((*SdkClusterDomainDeactivateRequest)(nil), "openstorage.api.SdkClusterDomainDeactivateRequest")
+	proto.RegisterType((*SdkClusterDomainDeactivateResponse)(nil), "openstorage.api.SdkClusterDomainDeactivateResponse")
+	proto.RegisterType((*SdkClusterInspectCurrentRequest)(nil), "openstorage.api.SdkClusterInspectCurrentRequest")
+	proto.RegisterType((*SdkClusterInspectCurrentResponse)(nil), "openstorage.api.SdkClusterInspectCurrentResponse")
+	proto.RegisterType((*SdkNodeInspectRequest)(nil), "openstorage.api.SdkNodeInspectRequest")
+	proto.RegisterType((*SdkNodeInspectResponse)(nil), "openstorage.api.SdkNodeInspectResponse")
+	proto.RegisterType((*SdkNodeInspectCurrentRequest)(nil), "openstorage.api.SdkNodeInspectCurrentRequest")
+	proto.RegisterType((*SdkNodeInspectCurrentResponse)(nil), "openstorage.api.SdkNodeInspectCurrentResponse")
+	proto.RegisterType((*SdkNodeEnumerateRequest)(nil), "openstorage.api.SdkNodeEnumerateRequest")
+	proto.RegisterType((*SdkNodeEnumerateResponse)(nil), "openstorage.api.SdkNodeEnumerateResponse")
+	proto.RegisterType((*SdkObjectstoreInspectRequest)(nil), "openstorage.api.SdkObjectstoreInspectRequest")
+	proto.RegisterType((*SdkObjectstoreInspectResponse)(nil), "openstorage.api.SdkObjectstoreInspectResponse")
+	proto.RegisterType((*SdkObjectstoreCreateRequest)(nil), "openstorage.api.SdkObjectstoreCreateRequest")
+	proto.RegisterType((*SdkObjectstoreCreateResponse)(nil), "openstorage.api.SdkObjectstoreCreateResponse")
+	proto.RegisterType((*SdkObjectstoreDeleteRequest)(nil), "openstorage.api.SdkObjectstoreDeleteRequest")
+	proto.RegisterType((*SdkObjectstoreDeleteResponse)(nil), "openstorage.api.SdkObjectstoreDeleteResponse")
+	proto.RegisterType((*SdkObjectstoreUpdateRequest)(nil), "openstorage.api.SdkObjectstoreUpdateRequest")
+	proto.RegisterType((*SdkObjectstoreUpdateResponse)(nil), "openstorage.api.SdkObjectstoreUpdateResponse")
+	proto.RegisterType((*SdkCloudBackupCreateRequest)(nil), "openstorage.api.SdkCloudBackupCreateRequest")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.SdkCloudBackupCreateRequest.LabelsEntry")
+	proto.RegisterType((*SdkCloudBackupCreateResponse)(nil), "openstorage.api.SdkCloudBackupCreateResponse")
+	proto.RegisterType((*SdkCloudBackupRestoreRequest)(nil), "openstorage.api.SdkCloudBackupRestoreRequest")
+	proto.RegisterType((*SdkCloudBackupRestoreResponse)(nil), "openstorage.api.SdkCloudBackupRestoreResponse")
+	proto.RegisterType((*SdkCloudBackupDeleteRequest)(nil), "openstorage.api.SdkCloudBackupDeleteRequest")
+	proto.RegisterType((*SdkCloudBackupDeleteResponse)(nil), "openstorage.api.SdkCloudBackupDeleteResponse")
+	proto.RegisterType((*SdkCloudBackupDeleteAllRequest)(nil), "openstorage.api.SdkCloudBackupDeleteAllRequest")
+	proto.RegisterType((*SdkCloudBackupDeleteAllResponse)(nil), "openstorage.api.SdkCloudBackupDeleteAllResponse")
+	proto.RegisterType((*SdkCloudBackupEnumerateWithFiltersRequest)(nil), "openstorage.api.SdkCloudBackupEnumerateWithFiltersRequest")
+	proto.RegisterType((*SdkCloudBackupInfo)(nil), "openstorage.api.SdkCloudBackupInfo")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.SdkCloudBackupInfo.MetadataEntry")
+	proto.RegisterType((*SdkCloudBackupEnumerateWithFiltersResponse)(nil), "openstorage.api.SdkCloudBackupEnumerateWithFiltersResponse")
+	proto.RegisterType((*SdkCloudBackupStatus)(nil), "openstorage.api.SdkCloudBackupStatus")
+	proto.RegisterType((*SdkCloudBackupStatusRequest)(nil), "openstorage.api.SdkCloudBackupStatusRequest")
+	proto.RegisterType((*SdkCloudBackupStatusResponse)(nil), "openstorage.api.SdkCloudBackupStatusResponse")
+	proto.RegisterMapType((map[string]*SdkCloudBackupStatus)(nil), "openstorage.api.SdkCloudBackupStatusResponse.StatusesEntry")
+	proto.RegisterType((*SdkCloudBackupCatalogRequest)(nil), "openstorage.api.SdkCloudBackupCatalogRequest")
+	proto.RegisterType((*SdkCloudBackupCatalogResponse)(nil), "openstorage.api.SdkCloudBackupCatalogResponse")
+	proto.RegisterType((*SdkCloudBackupHistoryItem)(nil), "openstorage.api.SdkCloudBackupHistoryItem")
+	proto.RegisterType((*SdkCloudBackupHistoryRequest)(nil), "openstorage.api.SdkCloudBackupHistoryRequest")
+	proto.RegisterType((*SdkCloudBackupHistoryResponse)(nil), "openstorage.api.SdkCloudBackupHistoryResponse")
+	proto.RegisterType((*SdkCloudBackupStateChangeRequest)(nil), "openstorage.api.SdkCloudBackupStateChangeRequest")
+	proto.RegisterType((*SdkCloudBackupStateChangeResponse)(nil), "openstorage.api.SdkCloudBackupStateChangeResponse")
+	proto.RegisterType((*SdkCloudBackupScheduleInfo)(nil), "openstorage.api.SdkCloudBackupScheduleInfo")
+	proto.RegisterType((*SdkCloudBackupSchedCreateRequest)(nil), "openstorage.api.SdkCloudBackupSchedCreateRequest")
+	proto.RegisterType((*SdkCloudBackupSchedCreateResponse)(nil), "openstorage.api.SdkCloudBackupSchedCreateResponse")
+	proto.RegisterType((*SdkCloudBackupSchedDeleteRequest)(nil), "openstorage.api.SdkCloudBackupSchedDeleteRequest")
+	proto.RegisterType((*SdkCloudBackupSchedDeleteResponse)(nil), "openstorage.api.SdkCloudBackupSchedDeleteResponse")
+	proto.RegisterType((*SdkCloudBackupSchedEnumerateRequest)(nil), "openstorage.api.SdkCloudBackupSchedEnumerateRequest")
+	proto.RegisterType((*SdkCloudBackupSchedEnumerateResponse)(nil), "openstorage.api.SdkCloudBackupSchedEnumerateResponse")
+	proto.RegisterMapType((map[string]*SdkCloudBackupScheduleInfo)(nil), "openstorage.api.SdkCloudBackupSchedEnumerateResponse.CloudSchedListEntry")
+	proto.RegisterType((*SdkRule)(nil), "openstorage.api.SdkRule")
+	proto.RegisterType((*SdkRole)(nil), "openstorage.api.SdkRole")
+	proto.RegisterType((*SdkRoleCreateRequest)(nil), "openstorage.api.SdkRoleCreateRequest")
+	proto.RegisterType((*SdkRoleCreateResponse)(nil), "openstorage.api.SdkRoleCreateResponse")
+	proto.RegisterType((*SdkRoleEnumerateRequest)(nil), "openstorage.api.SdkRoleEnumerateRequest")
+	proto.RegisterType((*SdkRoleEnumerateResponse)(nil), "openstorage.api.SdkRoleEnumerateResponse")
+	proto.RegisterType((*SdkRoleInspectRequest)(nil), "openstorage.api.SdkRoleInspectRequest")
+	proto.RegisterType((*SdkRoleInspectResponse)(nil), "openstorage.api.SdkRoleInspectResponse")
+	proto.RegisterType((*SdkRoleDeleteRequest)(nil), "openstorage.api.SdkRoleDeleteRequest")
+	proto.RegisterType((*SdkRoleDeleteResponse)(nil), "openstorage.api.SdkRoleDeleteResponse")
+	proto.RegisterType((*SdkRoleUpdateRequest)(nil), "openstorage.api.SdkRoleUpdateRequest")
+	proto.RegisterType((*SdkRoleUpdateResponse)(nil), "openstorage.api.SdkRoleUpdateResponse")
+	proto.RegisterType((*SdkIdentityCapabilitiesRequest)(nil), "openstorage.api.SdkIdentityCapabilitiesRequest")
+	proto.RegisterType((*SdkIdentityCapabilitiesResponse)(nil), "openstorage.api.SdkIdentityCapabilitiesResponse")
+	proto.RegisterType((*SdkIdentityVersionRequest)(nil), "openstorage.api.SdkIdentityVersionRequest")
+	proto.RegisterType((*SdkIdentityVersionResponse)(nil), "openstorage.api.SdkIdentityVersionResponse")
+	proto.RegisterType((*SdkServiceCapability)(nil), "openstorage.api.SdkServiceCapability")
+	proto.RegisterType((*SdkServiceCapability_OpenStorageService)(nil), "openstorage.api.SdkServiceCapability.OpenStorageService")
+	proto.RegisterType((*SdkVersion)(nil), "openstorage.api.SdkVersion")
+	proto.RegisterType((*StorageVersion)(nil), "openstorage.api.StorageVersion")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.StorageVersion.DetailsEntry")
+	proto.RegisterType((*CloudMigrate)(nil), "openstorage.api.CloudMigrate")
+	proto.RegisterType((*CloudMigrateStartRequest)(nil), "openstorage.api.CloudMigrateStartRequest")
+	proto.RegisterType((*SdkCloudMigrateStartRequest)(nil), "openstorage.api.SdkCloudMigrateStartRequest")
+	proto.RegisterType((*SdkCloudMigrateStartRequest_MigrateVolume)(nil), "openstorage.api.SdkCloudMigrateStartRequest.MigrateVolume")
+	proto.RegisterType((*SdkCloudMigrateStartRequest_MigrateVolumeGroup)(nil), "openstorage.api.SdkCloudMigrateStartRequest.MigrateVolumeGroup")
+	proto.RegisterType((*SdkCloudMigrateStartRequest_MigrateAllVolumes)(nil), "openstorage.api.SdkCloudMigrateStartRequest.MigrateAllVolumes")
+	proto.RegisterType((*CloudMigrateStartResponse)(nil), "openstorage.api.CloudMigrateStartResponse")
+	proto.RegisterType((*SdkCloudMigrateStartResponse)(nil), "openstorage.api.SdkCloudMigrateStartResponse")
+	proto.RegisterType((*CloudMigrateCancelRequest)(nil), "openstorage.api.CloudMigrateCancelRequest")
+	proto.RegisterType((*SdkCloudMigrateCancelRequest)(nil), "openstorage.api.SdkCloudMigrateCancelRequest")
+	proto.RegisterType((*SdkCloudMigrateCancelResponse)(nil), "openstorage.api.SdkCloudMigrateCancelResponse")
+	proto.RegisterType((*CloudMigrateInfo)(nil), "openstorage.api.CloudMigrateInfo")
+	proto.RegisterType((*CloudMigrateInfoList)(nil), "openstorage.api.CloudMigrateInfoList")
+	proto.RegisterType((*SdkCloudMigrateStatusRequest)(nil), "openstorage.api.SdkCloudMigrateStatusRequest")
+	proto.RegisterType((*CloudMigrateStatusRequest)(nil), "openstorage.api.CloudMigrateStatusRequest")
+	proto.RegisterType((*CloudMigrateStatusResponse)(nil), "openstorage.api.CloudMigrateStatusResponse")
+	proto.RegisterMapType((map[string]*CloudMigrateInfoList)(nil), "openstorage.api.CloudMigrateStatusResponse.InfoEntry")
+	proto.RegisterType((*SdkCloudMigrateStatusResponse)(nil), "openstorage.api.SdkCloudMigrateStatusResponse")
+	proto.RegisterType((*ClusterPairMode)(nil), "openstorage.api.ClusterPairMode")
+	proto.RegisterType((*ClusterPairCreateRequest)(nil), "openstorage.api.ClusterPairCreateRequest")
+	proto.RegisterType((*ClusterPairCreateResponse)(nil), "openstorage.api.ClusterPairCreateResponse")
+	proto.RegisterType((*SdkClusterPairCreateRequest)(nil), "openstorage.api.SdkClusterPairCreateRequest")
+	proto.RegisterType((*SdkClusterPairCreateResponse)(nil), "openstorage.api.SdkClusterPairCreateResponse")
+	proto.RegisterType((*ClusterPairProcessRequest)(nil), "openstorage.api.ClusterPairProcessRequest")
+	proto.RegisterType((*ClusterPairProcessResponse)(nil), "openstorage.api.ClusterPairProcessResponse")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.ClusterPairProcessResponse.OptionsEntry")
+	proto.RegisterType((*SdkClusterPairDeleteRequest)(nil), "openstorage.api.SdkClusterPairDeleteRequest")
+	proto.RegisterType((*SdkClusterPairDeleteResponse)(nil), "openstorage.api.SdkClusterPairDeleteResponse")
+	proto.RegisterType((*ClusterPairTokenGetResponse)(nil), "openstorage.api.ClusterPairTokenGetResponse")
+	proto.RegisterType((*SdkClusterPairGetTokenRequest)(nil), "openstorage.api.SdkClusterPairGetTokenRequest")
+	proto.RegisterType((*SdkClusterPairGetTokenResponse)(nil), "openstorage.api.SdkClusterPairGetTokenResponse")
+	proto.RegisterType((*SdkClusterPairResetTokenRequest)(nil), "openstorage.api.SdkClusterPairResetTokenRequest")
+	proto.RegisterType((*SdkClusterPairResetTokenResponse)(nil), "openstorage.api.SdkClusterPairResetTokenResponse")
+	proto.RegisterType((*ClusterPairInfo)(nil), "openstorage.api.ClusterPairInfo")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.ClusterPairInfo.OptionsEntry")
+	proto.RegisterType((*SdkClusterPairInspectRequest)(nil), "openstorage.api.SdkClusterPairInspectRequest")
+	proto.RegisterType((*ClusterPairGetResponse)(nil), "openstorage.api.ClusterPairGetResponse")
+	proto.RegisterType((*SdkClusterPairInspectResponse)(nil), "openstorage.api.SdkClusterPairInspectResponse")
+	proto.RegisterType((*SdkClusterPairEnumerateRequest)(nil), "openstorage.api.SdkClusterPairEnumerateRequest")
+	proto.RegisterType((*ClusterPairsEnumerateResponse)(nil), "openstorage.api.ClusterPairsEnumerateResponse")
+	proto.RegisterMapType((map[string]*ClusterPairInfo)(nil), "openstorage.api.ClusterPairsEnumerateResponse.PairsEntry")
+	proto.RegisterType((*SdkClusterPairEnumerateResponse)(nil), "openstorage.api.SdkClusterPairEnumerateResponse")
+	proto.RegisterType((*Catalog)(nil), "openstorage.api.Catalog")
+	proto.RegisterType((*Report)(nil), "openstorage.api.Report")
+	proto.RegisterType((*CatalogResponse)(nil), "openstorage.api.CatalogResponse")
+	proto.RegisterType((*LocateResponse)(nil), "openstorage.api.LocateResponse")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.LocateResponse.DockeridsEntry")
+	proto.RegisterMapType((map[string]string)(nil), "openstorage.api.LocateResponse.MountsEntry")
+	proto.RegisterType((*VolumePlacementStrategy)(nil), "openstorage.api.VolumePlacementStrategy")
+	proto.RegisterType((*VolumePlacementRule)(nil), "openstorage.api.VolumePlacementRule")
+	proto.RegisterType((*LabelSelectorRequirement)(nil), "openstorage.api.LabelSelectorRequirement")
+	proto.RegisterEnum("openstorage.api.Status", Status_name, Status_value)
+	proto.RegisterEnum("openstorage.api.DriverType", DriverType_name, DriverType_value)
+	proto.RegisterEnum("openstorage.api.FSType", FSType_name, FSType_value)
+	proto.RegisterEnum("openstorage.api.GraphDriverChangeType", GraphDriverChangeType_name, GraphDriverChangeType_value)
+	proto.RegisterEnum("openstorage.api.SeverityType", SeverityType_name, SeverityType_value)
+	proto.RegisterEnum("openstorage.api.ResourceType", ResourceType_name, ResourceType_value)
+	proto.RegisterEnum("openstorage.api.AlertActionType", AlertActionType_name, AlertActionType_value)
+	proto.RegisterEnum("openstorage.api.VolumeActionParam", VolumeActionParam_name, VolumeActionParam_value)
+	proto.RegisterEnum("openstorage.api.CosType", CosType_name, CosType_value)
+	proto.RegisterEnum("openstorage.api.IoProfile", IoProfile_name, IoProfile_value)
+	proto.RegisterEnum("openstorage.api.VolumeState", VolumeState_name, VolumeState_value)
+	proto.RegisterEnum("openstorage.api.VolumeStatus", VolumeStatus_name, VolumeStatus_value)
+	proto.RegisterEnum("openstorage.api.StorageMedium", StorageMedium_name, StorageMedium_value)
+	proto.RegisterEnum("openstorage.api.AttachState", AttachState_name, AttachState_value)
+	proto.RegisterEnum("openstorage.api.OperationFlags", OperationFlags_name, OperationFlags_value)
+	proto.RegisterEnum("openstorage.api.SdkTimeWeekday", SdkTimeWeekday_name, SdkTimeWeekday_value)
+	proto.RegisterEnum("openstorage.api.SdkCloudBackupOpType", SdkCloudBackupOpType_name, SdkCloudBackupOpType_value)
+	proto.RegisterEnum("openstorage.api.SdkCloudBackupStatusType", SdkCloudBackupStatusType_name, SdkCloudBackupStatusType_value)
+	proto.RegisterEnum("openstorage.api.SdkCloudBackupRequestedState", SdkCloudBackupRequestedState_name, SdkCloudBackupRequestedState_value)
+	proto.RegisterEnum("openstorage.api.VolumeSpecPolicy_PolicyOp", VolumeSpecPolicy_PolicyOp_name, VolumeSpecPolicy_PolicyOp_value)
+	proto.RegisterEnum("openstorage.api.Ownership_AccessType", Ownership_AccessType_name, Ownership_AccessType_value)
+	proto.RegisterEnum("openstorage.api.SdkServiceCapability_OpenStorageService_Type", SdkServiceCapability_OpenStorageService_Type_name, SdkServiceCapability_OpenStorageService_Type_value)
+	proto.RegisterEnum("openstorage.api.SdkVersion_Version", SdkVersion_Version_name, SdkVersion_Version_value)
+	proto.RegisterEnum("openstorage.api.CloudMigrate_OperationType", CloudMigrate_OperationType_name, CloudMigrate_OperationType_value)
+	proto.RegisterEnum("openstorage.api.CloudMigrate_Stage", CloudMigrate_Stage_name, CloudMigrate_Stage_value)
+	proto.RegisterEnum("openstorage.api.CloudMigrate_Status", CloudMigrate_Status_name, CloudMigrate_Status_value)
+	proto.RegisterEnum("openstorage.api.ClusterPairMode_Mode", ClusterPairMode_Mode_name, ClusterPairMode_Mode_value)
+	proto.RegisterEnum("openstorage.api.VolumePlacementRule_EnforcementType", VolumePlacementRule_EnforcementType_name, VolumePlacementRule_EnforcementType_value)
+	proto.RegisterEnum("openstorage.api.VolumePlacementRule_AffinityRuleType", VolumePlacementRule_AffinityRuleType_name, VolumePlacementRule_AffinityRuleType_value)
+	proto.RegisterEnum("openstorage.api.LabelSelectorRequirement_Operator", LabelSelectorRequirement_Operator_name, LabelSelectorRequirement_Operator_value)
+}
+
+// Reference imports to suppress errors if they are not otherwise used.
+var _ context.Context
+var _ grpc.ClientConn
+
+// This is a compile-time assertion to ensure that this generated file
+// is compatible with the grpc package it is being compiled against.
+const _ = grpc.SupportPackageIsVersion4
+
+// Client API for OpenStorageAlerts service
+
+type OpenStorageAlertsClient interface {
+	// Allows querying alerts.
+	//
+	// EnumerateWithFilters allows 3 different types of queries as defined below:
+	//
+	// * Query that takes only resource type as input
+	// * Query that takes resource type and alert type as input and
+	// * Query that takes resource id, alert type and resource type as input.
+	//
+	// #### Input
+	// SdkAlertsEnumerateRequest takes a list of such queries and the returned
+	// output is a collective ouput from each of these queries. In that sense,
+	// the filtering of these queries has a behavior of OR operation.
+	// Each query also has a list of optional options. These options allow
+	// narrowing down the scope of alerts search. These options have a
+	// behavior of an AND operation.
+	//
+	// #### Examples
+	// To search by a resource type in a given time window would require
+	// initializing SdkAlertsResourceTypeQuery query and pass in
+	// SdkAlertsTimeSpan option into SdkAlertsQuery struct and finally
+	// packing any other such queries into SdkAlertsEnumerateRequest object.
+	// Alternatively, to search by both resource type and alert type, use
+	// SdkAlertsAlertTypeQuery as query builder.
+	// Finally to search all alerts of a given resource type and some
+	// alerts of another resource type but with specific alert type,
+	// use two queries, first initialized with SdkAlertsResourceTypeQuery
+	// and second initialized with SdkAlertsAlertTypeQuery and both
+	// eventually packed as list in SdkAlertsEnumerateRequest.
+	EnumerateWithFilters(ctx context.Context, in *SdkAlertsEnumerateWithFiltersRequest, opts ...grpc.CallOption) (OpenStorageAlerts_EnumerateWithFiltersClient, error)
+	// Delete alerts
+	//
+	// #### Delete
+	// Delete allows 3 different types of queries as defined below:
+	//
+	// * Query that takes only resource type as input
+	// * Query that takes resource type and alert type as input and
+	// * Query that takes resource id, alert type and resource type as input.
+	//
+	// #### Input
+	// SdkAlertsDeleteRequest takes a list of such queries and all alerts
+	// that match at least one of the queries are deleted.
+	Delete(ctx context.Context, in *SdkAlertsDeleteRequest, opts ...grpc.CallOption) (*SdkAlertsDeleteResponse, error)
+}
+
+type openStorageAlertsClient struct {
+	cc *grpc.ClientConn
+}
+
+func NewOpenStorageAlertsClient(cc *grpc.ClientConn) OpenStorageAlertsClient {
+	return &openStorageAlertsClient{cc}
+}
+
+func (c *openStorageAlertsClient) EnumerateWithFilters(ctx context.Context, in *SdkAlertsEnumerateWithFiltersRequest, opts ...grpc.CallOption) (OpenStorageAlerts_EnumerateWithFiltersClient, error) {
+	stream, err := grpc.NewClientStream(ctx, &_OpenStorageAlerts_serviceDesc.Streams[0], c.cc, "/openstorage.api.OpenStorageAlerts/EnumerateWithFilters", opts...)
+	if err != nil {
+		return nil, err
+	}
+	x := &openStorageAlertsEnumerateWithFiltersClient{stream}
+	if err := x.ClientStream.SendMsg(in); err != nil {
+		return nil, err
+	}
+	if err := x.ClientStream.CloseSend(); err != nil {
+		return nil, err
+	}
+	return x, nil
+}
+
+type OpenStorageAlerts_EnumerateWithFiltersClient interface {
+	Recv() (*SdkAlertsEnumerateWithFiltersResponse, error)
+	grpc.ClientStream
+}
+
+type openStorageAlertsEnumerateWithFiltersClient struct {
+	grpc.ClientStream
+}
+
+func (x *openStorageAlertsEnumerateWithFiltersClient) Recv() (*SdkAlertsEnumerateWithFiltersResponse, error) {
+	m := new(SdkAlertsEnumerateWithFiltersResponse)
+	if err := x.ClientStream.RecvMsg(m); err != nil {
+		return nil, err
+	}
+	return m, nil
+}
+
+func (c *openStorageAlertsClient) Delete(ctx context.Context, in *SdkAlertsDeleteRequest, opts ...grpc.CallOption) (*SdkAlertsDeleteResponse, error) {
+	out := new(SdkAlertsDeleteResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageAlerts/Delete", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// Server API for OpenStorageAlerts service
+
+type OpenStorageAlertsServer interface {
+	// Allows querying alerts.
+	//
+	// EnumerateWithFilters allows 3 different types of queries as defined below:
+	//
+	// * Query that takes only resource type as input
+	// * Query that takes resource type and alert type as input and
+	// * Query that takes resource id, alert type and resource type as input.
+	//
+	// #### Input
+	// SdkAlertsEnumerateRequest takes a list of such queries and the returned
+	// output is a collective ouput from each of these queries. In that sense,
+	// the filtering of these queries has a behavior of OR operation.
+	// Each query also has a list of optional options. These options allow
+	// narrowing down the scope of alerts search. These options have a
+	// behavior of an AND operation.
+	//
+	// #### Examples
+	// To search by a resource type in a given time window would require
+	// initializing SdkAlertsResourceTypeQuery query and pass in
+	// SdkAlertsTimeSpan option into SdkAlertsQuery struct and finally
+	// packing any other such queries into SdkAlertsEnumerateRequest object.
+	// Alternatively, to search by both resource type and alert type, use
+	// SdkAlertsAlertTypeQuery as query builder.
+	// Finally to search all alerts of a given resource type and some
+	// alerts of another resource type but with specific alert type,
+	// use two queries, first initialized with SdkAlertsResourceTypeQuery
+	// and second initialized with SdkAlertsAlertTypeQuery and both
+	// eventually packed as list in SdkAlertsEnumerateRequest.
+	EnumerateWithFilters(*SdkAlertsEnumerateWithFiltersRequest, OpenStorageAlerts_EnumerateWithFiltersServer) error
+	// Delete alerts
+	//
+	// #### Delete
+	// Delete allows 3 different types of queries as defined below:
+	//
+	// * Query that takes only resource type as input
+	// * Query that takes resource type and alert type as input and
+	// * Query that takes resource id, alert type and resource type as input.
+	//
+	// #### Input
+	// SdkAlertsDeleteRequest takes a list of such queries and all alerts
+	// that match at least one of the queries are deleted.
+	Delete(context.Context, *SdkAlertsDeleteRequest) (*SdkAlertsDeleteResponse, error)
+}
+
+func RegisterOpenStorageAlertsServer(s *grpc.Server, srv OpenStorageAlertsServer) {
+	s.RegisterService(&_OpenStorageAlerts_serviceDesc, srv)
+}
+
+func _OpenStorageAlerts_EnumerateWithFilters_Handler(srv interface{}, stream grpc.ServerStream) error {
+	m := new(SdkAlertsEnumerateWithFiltersRequest)
+	if err := stream.RecvMsg(m); err != nil {
+		return err
+	}
+	return srv.(OpenStorageAlertsServer).EnumerateWithFilters(m, &openStorageAlertsEnumerateWithFiltersServer{stream})
+}
+
+type OpenStorageAlerts_EnumerateWithFiltersServer interface {
+	Send(*SdkAlertsEnumerateWithFiltersResponse) error
+	grpc.ServerStream
+}
+
+type openStorageAlertsEnumerateWithFiltersServer struct {
+	grpc.ServerStream
+}
+
+func (x *openStorageAlertsEnumerateWithFiltersServer) Send(m *SdkAlertsEnumerateWithFiltersResponse) error {
+	return x.ServerStream.SendMsg(m)
+}
+
+func _OpenStorageAlerts_Delete_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkAlertsDeleteRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageAlertsServer).Delete(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageAlerts/Delete",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageAlertsServer).Delete(ctx, req.(*SdkAlertsDeleteRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+var _OpenStorageAlerts_serviceDesc = grpc.ServiceDesc{
+	ServiceName: "openstorage.api.OpenStorageAlerts",
+	HandlerType: (*OpenStorageAlertsServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "Delete",
+			Handler:    _OpenStorageAlerts_Delete_Handler,
+		},
+	},
+	Streams: []grpc.StreamDesc{
+		{
+			StreamName:    "EnumerateWithFilters",
+			Handler:       _OpenStorageAlerts_EnumerateWithFilters_Handler,
+			ServerStreams: true,
+		},
+	},
+	Metadata: "api/api.proto",
+}
+
+// Client API for OpenStorageRole service
+
+type OpenStorageRoleClient interface {
+	// Create a role for users in the system
+	Create(ctx context.Context, in *SdkRoleCreateRequest, opts ...grpc.CallOption) (*SdkRoleCreateResponse, error)
+	// List all roles
+	Enumerate(ctx context.Context, in *SdkRoleEnumerateRequest, opts ...grpc.CallOption) (*SdkRoleEnumerateResponse, error)
+	// Get information about a role
+	Inspect(ctx context.Context, in *SdkRoleInspectRequest, opts ...grpc.CallOption) (*SdkRoleInspectResponse, error)
+	// Delete an existing role
+	Delete(ctx context.Context, in *SdkRoleDeleteRequest, opts ...grpc.CallOption) (*SdkRoleDeleteResponse, error)
+	// Update an existing role
+	Update(ctx context.Context, in *SdkRoleUpdateRequest, opts ...grpc.CallOption) (*SdkRoleUpdateResponse, error)
+}
+
+type openStorageRoleClient struct {
+	cc *grpc.ClientConn
+}
+
+func NewOpenStorageRoleClient(cc *grpc.ClientConn) OpenStorageRoleClient {
+	return &openStorageRoleClient{cc}
+}
+
+func (c *openStorageRoleClient) Create(ctx context.Context, in *SdkRoleCreateRequest, opts ...grpc.CallOption) (*SdkRoleCreateResponse, error) {
+	out := new(SdkRoleCreateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageRole/Create", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageRoleClient) Enumerate(ctx context.Context, in *SdkRoleEnumerateRequest, opts ...grpc.CallOption) (*SdkRoleEnumerateResponse, error) {
+	out := new(SdkRoleEnumerateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageRole/Enumerate", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageRoleClient) Inspect(ctx context.Context, in *SdkRoleInspectRequest, opts ...grpc.CallOption) (*SdkRoleInspectResponse, error) {
+	out := new(SdkRoleInspectResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageRole/Inspect", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageRoleClient) Delete(ctx context.Context, in *SdkRoleDeleteRequest, opts ...grpc.CallOption) (*SdkRoleDeleteResponse, error) {
+	out := new(SdkRoleDeleteResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageRole/Delete", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageRoleClient) Update(ctx context.Context, in *SdkRoleUpdateRequest, opts ...grpc.CallOption) (*SdkRoleUpdateResponse, error) {
+	out := new(SdkRoleUpdateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageRole/Update", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// Server API for OpenStorageRole service
+
+type OpenStorageRoleServer interface {
+	// Create a role for users in the system
+	Create(context.Context, *SdkRoleCreateRequest) (*SdkRoleCreateResponse, error)
+	// List all roles
+	Enumerate(context.Context, *SdkRoleEnumerateRequest) (*SdkRoleEnumerateResponse, error)
+	// Get information about a role
+	Inspect(context.Context, *SdkRoleInspectRequest) (*SdkRoleInspectResponse, error)
+	// Delete an existing role
+	Delete(context.Context, *SdkRoleDeleteRequest) (*SdkRoleDeleteResponse, error)
+	// Update an existing role
+	Update(context.Context, *SdkRoleUpdateRequest) (*SdkRoleUpdateResponse, error)
+}
+
+func RegisterOpenStorageRoleServer(s *grpc.Server, srv OpenStorageRoleServer) {
+	s.RegisterService(&_OpenStorageRole_serviceDesc, srv)
+}
+
+func _OpenStorageRole_Create_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkRoleCreateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageRoleServer).Create(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageRole/Create",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageRoleServer).Create(ctx, req.(*SdkRoleCreateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageRole_Enumerate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkRoleEnumerateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageRoleServer).Enumerate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageRole/Enumerate",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageRoleServer).Enumerate(ctx, req.(*SdkRoleEnumerateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageRole_Inspect_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkRoleInspectRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageRoleServer).Inspect(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageRole/Inspect",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageRoleServer).Inspect(ctx, req.(*SdkRoleInspectRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageRole_Delete_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkRoleDeleteRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageRoleServer).Delete(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageRole/Delete",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageRoleServer).Delete(ctx, req.(*SdkRoleDeleteRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageRole_Update_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkRoleUpdateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageRoleServer).Update(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageRole/Update",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageRoleServer).Update(ctx, req.(*SdkRoleUpdateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+var _OpenStorageRole_serviceDesc = grpc.ServiceDesc{
+	ServiceName: "openstorage.api.OpenStorageRole",
+	HandlerType: (*OpenStorageRoleServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "Create",
+			Handler:    _OpenStorageRole_Create_Handler,
+		},
+		{
+			MethodName: "Enumerate",
+			Handler:    _OpenStorageRole_Enumerate_Handler,
+		},
+		{
+			MethodName: "Inspect",
+			Handler:    _OpenStorageRole_Inspect_Handler,
+		},
+		{
+			MethodName: "Delete",
+			Handler:    _OpenStorageRole_Delete_Handler,
+		},
+		{
+			MethodName: "Update",
+			Handler:    _OpenStorageRole_Update_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "api/api.proto",
+}
+
+// Client API for OpenStorageIdentity service
+
+type OpenStorageIdentityClient interface {
+	// Capabilities returns the supported services by the cluster.
+	// This allows SDK implementations to advertise their supported
+	// services as the API matures. With this information, clients
+	// can determine supported services from storage clusters at
+	// different versions.
+	Capabilities(ctx context.Context, in *SdkIdentityCapabilitiesRequest, opts ...grpc.CallOption) (*SdkIdentityCapabilitiesResponse, error)
+	// Version returns version information about the system.
+	Version(ctx context.Context, in *SdkIdentityVersionRequest, opts ...grpc.CallOption) (*SdkIdentityVersionResponse, error)
+}
+
+type openStorageIdentityClient struct {
+	cc *grpc.ClientConn
+}
+
+func NewOpenStorageIdentityClient(cc *grpc.ClientConn) OpenStorageIdentityClient {
+	return &openStorageIdentityClient{cc}
+}
+
+func (c *openStorageIdentityClient) Capabilities(ctx context.Context, in *SdkIdentityCapabilitiesRequest, opts ...grpc.CallOption) (*SdkIdentityCapabilitiesResponse, error) {
+	out := new(SdkIdentityCapabilitiesResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageIdentity/Capabilities", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageIdentityClient) Version(ctx context.Context, in *SdkIdentityVersionRequest, opts ...grpc.CallOption) (*SdkIdentityVersionResponse, error) {
+	out := new(SdkIdentityVersionResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageIdentity/Version", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// Server API for OpenStorageIdentity service
+
+type OpenStorageIdentityServer interface {
+	// Capabilities returns the supported services by the cluster.
+	// This allows SDK implementations to advertise their supported
+	// services as the API matures. With this information, clients
+	// can determine supported services from storage clusters at
+	// different versions.
+	Capabilities(context.Context, *SdkIdentityCapabilitiesRequest) (*SdkIdentityCapabilitiesResponse, error)
+	// Version returns version information about the system.
+	Version(context.Context, *SdkIdentityVersionRequest) (*SdkIdentityVersionResponse, error)
+}
+
+func RegisterOpenStorageIdentityServer(s *grpc.Server, srv OpenStorageIdentityServer) {
+	s.RegisterService(&_OpenStorageIdentity_serviceDesc, srv)
+}
+
+func _OpenStorageIdentity_Capabilities_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkIdentityCapabilitiesRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageIdentityServer).Capabilities(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageIdentity/Capabilities",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageIdentityServer).Capabilities(ctx, req.(*SdkIdentityCapabilitiesRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageIdentity_Version_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkIdentityVersionRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageIdentityServer).Version(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageIdentity/Version",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageIdentityServer).Version(ctx, req.(*SdkIdentityVersionRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+var _OpenStorageIdentity_serviceDesc = grpc.ServiceDesc{
+	ServiceName: "openstorage.api.OpenStorageIdentity",
+	HandlerType: (*OpenStorageIdentityServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "Capabilities",
+			Handler:    _OpenStorageIdentity_Capabilities_Handler,
+		},
+		{
+			MethodName: "Version",
+			Handler:    _OpenStorageIdentity_Version_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "api/api.proto",
+}
+
+// Client API for OpenStorageCluster service
+
+type OpenStorageClusterClient interface {
+	// InspectCurrent returns information about the current cluster
+	InspectCurrent(ctx context.Context, in *SdkClusterInspectCurrentRequest, opts ...grpc.CallOption) (*SdkClusterInspectCurrentResponse, error)
+}
+
+type openStorageClusterClient struct {
+	cc *grpc.ClientConn
+}
+
+func NewOpenStorageClusterClient(cc *grpc.ClientConn) OpenStorageClusterClient {
+	return &openStorageClusterClient{cc}
+}
+
+func (c *openStorageClusterClient) InspectCurrent(ctx context.Context, in *SdkClusterInspectCurrentRequest, opts ...grpc.CallOption) (*SdkClusterInspectCurrentResponse, error) {
+	out := new(SdkClusterInspectCurrentResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCluster/InspectCurrent", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// Server API for OpenStorageCluster service
+
+type OpenStorageClusterServer interface {
+	// InspectCurrent returns information about the current cluster
+	InspectCurrent(context.Context, *SdkClusterInspectCurrentRequest) (*SdkClusterInspectCurrentResponse, error)
+}
+
+func RegisterOpenStorageClusterServer(s *grpc.Server, srv OpenStorageClusterServer) {
+	s.RegisterService(&_OpenStorageCluster_serviceDesc, srv)
+}
+
+func _OpenStorageCluster_InspectCurrent_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkClusterInspectCurrentRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageClusterServer).InspectCurrent(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCluster/InspectCurrent",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageClusterServer).InspectCurrent(ctx, req.(*SdkClusterInspectCurrentRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+var _OpenStorageCluster_serviceDesc = grpc.ServiceDesc{
+	ServiceName: "openstorage.api.OpenStorageCluster",
+	HandlerType: (*OpenStorageClusterServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "InspectCurrent",
+			Handler:    _OpenStorageCluster_InspectCurrent_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "api/api.proto",
+}
+
+// Client API for OpenStorageClusterPair service
+
+type OpenStorageClusterPairClient interface {
+	// Creates Pair with a remote cluster and returns details about the remote cluster
+	//
+	// ##### Example
+	// {% codetabs name="Golang", type="go" -%}
+	// id, err := client.Create(context.Background(), &api.SdkClusterPairCreateRequest {
+	//   Request : &api.ClusterPairCreateRequest {
+	//                  RemoteClusterIp: "127.0.0.1",
+	//                  RemoteClusterPort: 12345,
+	//                  RemoteClusterToken: "<Auth-Token>",
+	//                  SetDefault: true,
+	//              }
+	//        })
+	// {%- endcodetabs %}
+	Create(ctx context.Context, in *SdkClusterPairCreateRequest, opts ...grpc.CallOption) (*SdkClusterPairCreateResponse, error)
+	// Inspect information about a cluster pair
+	Inspect(ctx context.Context, in *SdkClusterPairInspectRequest, opts ...grpc.CallOption) (*SdkClusterPairInspectResponse, error)
+	// Enumerate returns list of cluster pairs
+	Enumerate(ctx context.Context, in *SdkClusterPairEnumerateRequest, opts ...grpc.CallOption) (*SdkClusterPairEnumerateResponse, error)
+	// GetToken returns a auth token
+	GetToken(ctx context.Context, in *SdkClusterPairGetTokenRequest, opts ...grpc.CallOption) (*SdkClusterPairGetTokenResponse, error)
+	// ResetToken returns a auth token
+	ResetToken(ctx context.Context, in *SdkClusterPairResetTokenRequest, opts ...grpc.CallOption) (*SdkClusterPairResetTokenResponse, error)
+	// Delete a cluster pair
+	Delete(ctx context.Context, in *SdkClusterPairDeleteRequest, opts ...grpc.CallOption) (*SdkClusterPairDeleteResponse, error)
+}
+
+type openStorageClusterPairClient struct {
+	cc *grpc.ClientConn
+}
+
+func NewOpenStorageClusterPairClient(cc *grpc.ClientConn) OpenStorageClusterPairClient {
+	return &openStorageClusterPairClient{cc}
+}
+
+func (c *openStorageClusterPairClient) Create(ctx context.Context, in *SdkClusterPairCreateRequest, opts ...grpc.CallOption) (*SdkClusterPairCreateResponse, error) {
+	out := new(SdkClusterPairCreateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageClusterPair/Create", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageClusterPairClient) Inspect(ctx context.Context, in *SdkClusterPairInspectRequest, opts ...grpc.CallOption) (*SdkClusterPairInspectResponse, error) {
+	out := new(SdkClusterPairInspectResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageClusterPair/Inspect", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageClusterPairClient) Enumerate(ctx context.Context, in *SdkClusterPairEnumerateRequest, opts ...grpc.CallOption) (*SdkClusterPairEnumerateResponse, error) {
+	out := new(SdkClusterPairEnumerateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageClusterPair/Enumerate", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageClusterPairClient) GetToken(ctx context.Context, in *SdkClusterPairGetTokenRequest, opts ...grpc.CallOption) (*SdkClusterPairGetTokenResponse, error) {
+	out := new(SdkClusterPairGetTokenResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageClusterPair/GetToken", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageClusterPairClient) ResetToken(ctx context.Context, in *SdkClusterPairResetTokenRequest, opts ...grpc.CallOption) (*SdkClusterPairResetTokenResponse, error) {
+	out := new(SdkClusterPairResetTokenResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageClusterPair/ResetToken", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageClusterPairClient) Delete(ctx context.Context, in *SdkClusterPairDeleteRequest, opts ...grpc.CallOption) (*SdkClusterPairDeleteResponse, error) {
+	out := new(SdkClusterPairDeleteResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageClusterPair/Delete", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// Server API for OpenStorageClusterPair service
+
+type OpenStorageClusterPairServer interface {
+	// Creates Pair with a remote cluster and returns details about the remote cluster
+	//
+	// ##### Example
+	// {% codetabs name="Golang", type="go" -%}
+	// id, err := client.Create(context.Background(), &api.SdkClusterPairCreateRequest {
+	//   Request : &api.ClusterPairCreateRequest {
+	//                  RemoteClusterIp: "127.0.0.1",
+	//                  RemoteClusterPort: 12345,
+	//                  RemoteClusterToken: "<Auth-Token>",
+	//                  SetDefault: true,
+	//              }
+	//        })
+	// {%- endcodetabs %}
+	Create(context.Context, *SdkClusterPairCreateRequest) (*SdkClusterPairCreateResponse, error)
+	// Inspect information about a cluster pair
+	Inspect(context.Context, *SdkClusterPairInspectRequest) (*SdkClusterPairInspectResponse, error)
+	// Enumerate returns list of cluster pairs
+	Enumerate(context.Context, *SdkClusterPairEnumerateRequest) (*SdkClusterPairEnumerateResponse, error)
+	// GetToken returns a auth token
+	GetToken(context.Context, *SdkClusterPairGetTokenRequest) (*SdkClusterPairGetTokenResponse, error)
+	// ResetToken returns a auth token
+	ResetToken(context.Context, *SdkClusterPairResetTokenRequest) (*SdkClusterPairResetTokenResponse, error)
+	// Delete a cluster pair
+	Delete(context.Context, *SdkClusterPairDeleteRequest) (*SdkClusterPairDeleteResponse, error)
+}
+
+func RegisterOpenStorageClusterPairServer(s *grpc.Server, srv OpenStorageClusterPairServer) {
+	s.RegisterService(&_OpenStorageClusterPair_serviceDesc, srv)
+}
+
+func _OpenStorageClusterPair_Create_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkClusterPairCreateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageClusterPairServer).Create(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageClusterPair/Create",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageClusterPairServer).Create(ctx, req.(*SdkClusterPairCreateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageClusterPair_Inspect_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkClusterPairInspectRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageClusterPairServer).Inspect(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageClusterPair/Inspect",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageClusterPairServer).Inspect(ctx, req.(*SdkClusterPairInspectRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageClusterPair_Enumerate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkClusterPairEnumerateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageClusterPairServer).Enumerate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageClusterPair/Enumerate",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageClusterPairServer).Enumerate(ctx, req.(*SdkClusterPairEnumerateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageClusterPair_GetToken_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkClusterPairGetTokenRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageClusterPairServer).GetToken(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageClusterPair/GetToken",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageClusterPairServer).GetToken(ctx, req.(*SdkClusterPairGetTokenRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageClusterPair_ResetToken_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkClusterPairResetTokenRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageClusterPairServer).ResetToken(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageClusterPair/ResetToken",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageClusterPairServer).ResetToken(ctx, req.(*SdkClusterPairResetTokenRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageClusterPair_Delete_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkClusterPairDeleteRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageClusterPairServer).Delete(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageClusterPair/Delete",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageClusterPairServer).Delete(ctx, req.(*SdkClusterPairDeleteRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+var _OpenStorageClusterPair_serviceDesc = grpc.ServiceDesc{
+	ServiceName: "openstorage.api.OpenStorageClusterPair",
+	HandlerType: (*OpenStorageClusterPairServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "Create",
+			Handler:    _OpenStorageClusterPair_Create_Handler,
+		},
+		{
+			MethodName: "Inspect",
+			Handler:    _OpenStorageClusterPair_Inspect_Handler,
+		},
+		{
+			MethodName: "Enumerate",
+			Handler:    _OpenStorageClusterPair_Enumerate_Handler,
+		},
+		{
+			MethodName: "GetToken",
+			Handler:    _OpenStorageClusterPair_GetToken_Handler,
+		},
+		{
+			MethodName: "ResetToken",
+			Handler:    _OpenStorageClusterPair_ResetToken_Handler,
+		},
+		{
+			MethodName: "Delete",
+			Handler:    _OpenStorageClusterPair_Delete_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "api/api.proto",
+}
+
+// Client API for OpenStorageClusterDomains service
+
+type OpenStorageClusterDomainsClient interface {
+	// Enumerate returns names of all the cluster domains in the cluster
+	Enumerate(ctx context.Context, in *SdkClusterDomainsEnumerateRequest, opts ...grpc.CallOption) (*SdkClusterDomainsEnumerateResponse, error)
+	// Inspect returns information about a cluster domain and a
+	// status indicating whether the cluster domain is active
+	Inspect(ctx context.Context, in *SdkClusterDomainInspectRequest, opts ...grpc.CallOption) (*SdkClusterDomainInspectResponse, error)
+	// Activates a cluster domain in the cluster.
+	// All the nodes which are part of an active cluster domain
+	// will participate in cluster quorum calculation
+	Activate(ctx context.Context, in *SdkClusterDomainActivateRequest, opts ...grpc.CallOption) (*SdkClusterDomainActivateResponse, error)
+	// Deactivates a cluster domain in the cluster.
+	// All the nodes which are part of a deactivated cluster domain.
+	// will not participate in cluster quorum calculation
+	Deactivate(ctx context.Context, in *SdkClusterDomainDeactivateRequest, opts ...grpc.CallOption) (*SdkClusterDomainDeactivateResponse, error)
+}
+
+type openStorageClusterDomainsClient struct {
+	cc *grpc.ClientConn
+}
+
+func NewOpenStorageClusterDomainsClient(cc *grpc.ClientConn) OpenStorageClusterDomainsClient {
+	return &openStorageClusterDomainsClient{cc}
+}
+
+func (c *openStorageClusterDomainsClient) Enumerate(ctx context.Context, in *SdkClusterDomainsEnumerateRequest, opts ...grpc.CallOption) (*SdkClusterDomainsEnumerateResponse, error) {
+	out := new(SdkClusterDomainsEnumerateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageClusterDomains/Enumerate", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageClusterDomainsClient) Inspect(ctx context.Context, in *SdkClusterDomainInspectRequest, opts ...grpc.CallOption) (*SdkClusterDomainInspectResponse, error) {
+	out := new(SdkClusterDomainInspectResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageClusterDomains/Inspect", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageClusterDomainsClient) Activate(ctx context.Context, in *SdkClusterDomainActivateRequest, opts ...grpc.CallOption) (*SdkClusterDomainActivateResponse, error) {
+	out := new(SdkClusterDomainActivateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageClusterDomains/Activate", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageClusterDomainsClient) Deactivate(ctx context.Context, in *SdkClusterDomainDeactivateRequest, opts ...grpc.CallOption) (*SdkClusterDomainDeactivateResponse, error) {
+	out := new(SdkClusterDomainDeactivateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageClusterDomains/Deactivate", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// Server API for OpenStorageClusterDomains service
+
+type OpenStorageClusterDomainsServer interface {
+	// Enumerate returns names of all the cluster domains in the cluster
+	Enumerate(context.Context, *SdkClusterDomainsEnumerateRequest) (*SdkClusterDomainsEnumerateResponse, error)
+	// Inspect returns information about a cluster domain and a
+	// status indicating whether the cluster domain is active
+	Inspect(context.Context, *SdkClusterDomainInspectRequest) (*SdkClusterDomainInspectResponse, error)
+	// Activates a cluster domain in the cluster.
+	// All the nodes which are part of an active cluster domain
+	// will participate in cluster quorum calculation
+	Activate(context.Context, *SdkClusterDomainActivateRequest) (*SdkClusterDomainActivateResponse, error)
+	// Deactivates a cluster domain in the cluster.
+	// All the nodes which are part of a deactivated cluster domain.
+	// will not participate in cluster quorum calculation
+	Deactivate(context.Context, *SdkClusterDomainDeactivateRequest) (*SdkClusterDomainDeactivateResponse, error)
+}
+
+func RegisterOpenStorageClusterDomainsServer(s *grpc.Server, srv OpenStorageClusterDomainsServer) {
+	s.RegisterService(&_OpenStorageClusterDomains_serviceDesc, srv)
+}
+
+func _OpenStorageClusterDomains_Enumerate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkClusterDomainsEnumerateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageClusterDomainsServer).Enumerate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageClusterDomains/Enumerate",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageClusterDomainsServer).Enumerate(ctx, req.(*SdkClusterDomainsEnumerateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageClusterDomains_Inspect_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkClusterDomainInspectRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageClusterDomainsServer).Inspect(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageClusterDomains/Inspect",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageClusterDomainsServer).Inspect(ctx, req.(*SdkClusterDomainInspectRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageClusterDomains_Activate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkClusterDomainActivateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageClusterDomainsServer).Activate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageClusterDomains/Activate",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageClusterDomainsServer).Activate(ctx, req.(*SdkClusterDomainActivateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageClusterDomains_Deactivate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkClusterDomainDeactivateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageClusterDomainsServer).Deactivate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageClusterDomains/Deactivate",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageClusterDomainsServer).Deactivate(ctx, req.(*SdkClusterDomainDeactivateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+var _OpenStorageClusterDomains_serviceDesc = grpc.ServiceDesc{
+	ServiceName: "openstorage.api.OpenStorageClusterDomains",
+	HandlerType: (*OpenStorageClusterDomainsServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "Enumerate",
+			Handler:    _OpenStorageClusterDomains_Enumerate_Handler,
+		},
+		{
+			MethodName: "Inspect",
+			Handler:    _OpenStorageClusterDomains_Inspect_Handler,
+		},
+		{
+			MethodName: "Activate",
+			Handler:    _OpenStorageClusterDomains_Activate_Handler,
+		},
+		{
+			MethodName: "Deactivate",
+			Handler:    _OpenStorageClusterDomains_Deactivate_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "api/api.proto",
+}
+
+// Client API for OpenStorageNode service
+
+type OpenStorageNodeClient interface {
+	// Inspect returns information about the specified node
+	Inspect(ctx context.Context, in *SdkNodeInspectRequest, opts ...grpc.CallOption) (*SdkNodeInspectResponse, error)
+	// InspectCurrent returns information about the storage node
+	// where the client is currently connected to.
+	InspectCurrent(ctx context.Context, in *SdkNodeInspectCurrentRequest, opts ...grpc.CallOption) (*SdkNodeInspectCurrentResponse, error)
+	// Enumerate returns the ids of all the nodes in the current cluster
+	Enumerate(ctx context.Context, in *SdkNodeEnumerateRequest, opts ...grpc.CallOption) (*SdkNodeEnumerateResponse, error)
+}
+
+type openStorageNodeClient struct {
+	cc *grpc.ClientConn
+}
+
+func NewOpenStorageNodeClient(cc *grpc.ClientConn) OpenStorageNodeClient {
+	return &openStorageNodeClient{cc}
+}
+
+func (c *openStorageNodeClient) Inspect(ctx context.Context, in *SdkNodeInspectRequest, opts ...grpc.CallOption) (*SdkNodeInspectResponse, error) {
+	out := new(SdkNodeInspectResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageNode/Inspect", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageNodeClient) InspectCurrent(ctx context.Context, in *SdkNodeInspectCurrentRequest, opts ...grpc.CallOption) (*SdkNodeInspectCurrentResponse, error) {
+	out := new(SdkNodeInspectCurrentResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageNode/InspectCurrent", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageNodeClient) Enumerate(ctx context.Context, in *SdkNodeEnumerateRequest, opts ...grpc.CallOption) (*SdkNodeEnumerateResponse, error) {
+	out := new(SdkNodeEnumerateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageNode/Enumerate", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// Server API for OpenStorageNode service
+
+type OpenStorageNodeServer interface {
+	// Inspect returns information about the specified node
+	Inspect(context.Context, *SdkNodeInspectRequest) (*SdkNodeInspectResponse, error)
+	// InspectCurrent returns information about the storage node
+	// where the client is currently connected to.
+	InspectCurrent(context.Context, *SdkNodeInspectCurrentRequest) (*SdkNodeInspectCurrentResponse, error)
+	// Enumerate returns the ids of all the nodes in the current cluster
+	Enumerate(context.Context, *SdkNodeEnumerateRequest) (*SdkNodeEnumerateResponse, error)
+}
+
+func RegisterOpenStorageNodeServer(s *grpc.Server, srv OpenStorageNodeServer) {
+	s.RegisterService(&_OpenStorageNode_serviceDesc, srv)
+}
+
+func _OpenStorageNode_Inspect_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkNodeInspectRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageNodeServer).Inspect(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageNode/Inspect",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageNodeServer).Inspect(ctx, req.(*SdkNodeInspectRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageNode_InspectCurrent_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkNodeInspectCurrentRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageNodeServer).InspectCurrent(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageNode/InspectCurrent",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageNodeServer).InspectCurrent(ctx, req.(*SdkNodeInspectCurrentRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageNode_Enumerate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkNodeEnumerateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageNodeServer).Enumerate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageNode/Enumerate",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageNodeServer).Enumerate(ctx, req.(*SdkNodeEnumerateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+var _OpenStorageNode_serviceDesc = grpc.ServiceDesc{
+	ServiceName: "openstorage.api.OpenStorageNode",
+	HandlerType: (*OpenStorageNodeServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "Inspect",
+			Handler:    _OpenStorageNode_Inspect_Handler,
+		},
+		{
+			MethodName: "InspectCurrent",
+			Handler:    _OpenStorageNode_InspectCurrent_Handler,
+		},
+		{
+			MethodName: "Enumerate",
+			Handler:    _OpenStorageNode_Enumerate_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "api/api.proto",
+}
+
+// Client API for OpenStorageVolume service
+
+type OpenStorageVolumeClient interface {
+	// Create creates a volume according to the specification provided
+	//
+	// Requires access AccessType.Read when cloning from a parent volume.
+	//
+	// ##### Example
+	// {% codetabs name="Golang", type="go" -%}
+	// id, err := client.Create(context.Background(), &api.SdkVolumeCreateRequest{
+	//   Name: "volume-12345-east",
+	//   Spec: &api.VolumeSpec {
+	//     Size: 1234567,
+	//   },
+	// })
+	// {%- language name="Python", type="py" -%}
+	// en_resp = client.Create(api_pb2.SdkVolumeCreateRequest(
+	//   name="volume-12345-east",
+	//   spec=api_pb2.VolumeSpec(size=1234567)))
+	// {%- endcodetabs %}
+	Create(ctx context.Context, in *SdkVolumeCreateRequest, opts ...grpc.CallOption) (*SdkVolumeCreateResponse, error)
+	// Clone creates a new writable volume cloned from an existing volume
+	//
+	// Requires access AccessType.Read of volume
+	Clone(ctx context.Context, in *SdkVolumeCloneRequest, opts ...grpc.CallOption) (*SdkVolumeCloneResponse, error)
+	// Delete deletes the provided volume
+	//
+	// Requires access AccessType.Admin of volume
+	Delete(ctx context.Context, in *SdkVolumeDeleteRequest, opts ...grpc.CallOption) (*SdkVolumeDeleteResponse, error)
+	// Inspect returns information about a volume
+	//
+	// Requires access AccessType.Read of volume
+	Inspect(ctx context.Context, in *SdkVolumeInspectRequest, opts ...grpc.CallOption) (*SdkVolumeInspectResponse, error)
+	// Returns information for a list of volumes that match a filter.
+	// This call is a helper function like calling
+	// `OpenStorageVolume.EnumerateWithFilters` then having it
+	// return the contents of each of those volumes
+	// `OpenStorageVolume.Inspect()`. Take care in using this call
+	// when requesting large number of volumes because it will
+	// block until it has all the information requested before
+	// returning.
+	InspectWithFilters(ctx context.Context, in *SdkVolumeInspectWithFiltersRequest, opts ...grpc.CallOption) (*SdkVolumeInspectWithFiltersResponse, error)
+	// Update provides a method for manipulating the specification and attributes of a volume.
+	// Set can be used to resize a volume, update labels, change replica count, and much more.
+	//
+	// Requires access AccessType.Write of volume
+	Update(ctx context.Context, in *SdkVolumeUpdateRequest, opts ...grpc.CallOption) (*SdkVolumeUpdateResponse, error)
+	// Stats returns the statistics for the requested volume
+	//
+	// Requires access AccessType.Read of volume
+	Stats(ctx context.Context, in *SdkVolumeStatsRequest, opts ...grpc.CallOption) (*SdkVolumeStatsResponse, error)
+	// CapacityUsage returns volume/snapshot's capacity usage details
+	//
+	// Requires access AccessType.Read of volume
+	//
+	// ##### Error codes:
+	//
+	// * codes.Aborted : Command was aborted and only total_bytes field is valid
+	// * code.Unimmplemented : Command is not suported this kernel.Only total_bytes
+	// field is valid;
+	CapacityUsage(ctx context.Context, in *SdkVolumeCapacityUsageRequest, opts ...grpc.CallOption) (*SdkVolumeCapacityUsageResponse, error)
+	// Enumerate returns a list of volume ids
+	Enumerate(ctx context.Context, in *SdkVolumeEnumerateRequest, opts ...grpc.CallOption) (*SdkVolumeEnumerateResponse, error)
+	// Enumerate returns a list of volume ids that match the labels if any are provided.
+	EnumerateWithFilters(ctx context.Context, in *SdkVolumeEnumerateWithFiltersRequest, opts ...grpc.CallOption) (*SdkVolumeEnumerateWithFiltersResponse, error)
+	// SnapshotCreate creates a snapshot of a volume. This creates an immutable (read-only),
+	// point-in-time snapshot of a volume. To create a new writable volume from
+	// a snapshot, please use OpenStorageVolume.Clone().
+	//
+	// Requires access AccessType.Read of volume
+	SnapshotCreate(ctx context.Context, in *SdkVolumeSnapshotCreateRequest, opts ...grpc.CallOption) (*SdkVolumeSnapshotCreateResponse, error)
+	// SnapshotRestore restores a volume to a specified snapshot
+	//
+	// Requires access AccessType.Write of volume
+	SnapshotRestore(ctx context.Context, in *SdkVolumeSnapshotRestoreRequest, opts ...grpc.CallOption) (*SdkVolumeSnapshotRestoreResponse, error)
+	// SnapshotEnumerate returns a list of snapshots for a specific volume
+	SnapshotEnumerate(ctx context.Context, in *SdkVolumeSnapshotEnumerateRequest, opts ...grpc.CallOption) (*SdkVolumeSnapshotEnumerateResponse, error)
+	// SnapshotEnumerate returns a list of snapshots.
+	// To filter all the snapshots for a specific volume which may no longer exist,
+	// specifiy a volume id.
+	// Labels can also be used to filter the snapshot list.
+	// If neither are provided all snapshots will be returned.
+	SnapshotEnumerateWithFilters(ctx context.Context, in *SdkVolumeSnapshotEnumerateWithFiltersRequest, opts ...grpc.CallOption) (*SdkVolumeSnapshotEnumerateWithFiltersResponse, error)
+	// Sets the snapshot schedules. This information is saved in the VolumeSpec.snapshot_schedule
+	// as `policy=<name>,...`. This function will overwrite any policy values
+	// in the volume. To delete the policies in the volume send no policies.
+	//
+	// Requires access AccessType.Write of volume
+	SnapshotScheduleUpdate(ctx context.Context, in *SdkVolumeSnapshotScheduleUpdateRequest, opts ...grpc.CallOption) (*SdkVolumeSnapshotScheduleUpdateResponse, error)
+}
+
+type openStorageVolumeClient struct {
+	cc *grpc.ClientConn
+}
+
+func NewOpenStorageVolumeClient(cc *grpc.ClientConn) OpenStorageVolumeClient {
+	return &openStorageVolumeClient{cc}
+}
+
+func (c *openStorageVolumeClient) Create(ctx context.Context, in *SdkVolumeCreateRequest, opts ...grpc.CallOption) (*SdkVolumeCreateResponse, error) {
+	out := new(SdkVolumeCreateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageVolume/Create", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageVolumeClient) Clone(ctx context.Context, in *SdkVolumeCloneRequest, opts ...grpc.CallOption) (*SdkVolumeCloneResponse, error) {
+	out := new(SdkVolumeCloneResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageVolume/Clone", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageVolumeClient) Delete(ctx context.Context, in *SdkVolumeDeleteRequest, opts ...grpc.CallOption) (*SdkVolumeDeleteResponse, error) {
+	out := new(SdkVolumeDeleteResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageVolume/Delete", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageVolumeClient) Inspect(ctx context.Context, in *SdkVolumeInspectRequest, opts ...grpc.CallOption) (*SdkVolumeInspectResponse, error) {
+	out := new(SdkVolumeInspectResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageVolume/Inspect", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageVolumeClient) InspectWithFilters(ctx context.Context, in *SdkVolumeInspectWithFiltersRequest, opts ...grpc.CallOption) (*SdkVolumeInspectWithFiltersResponse, error) {
+	out := new(SdkVolumeInspectWithFiltersResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageVolume/InspectWithFilters", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageVolumeClient) Update(ctx context.Context, in *SdkVolumeUpdateRequest, opts ...grpc.CallOption) (*SdkVolumeUpdateResponse, error) {
+	out := new(SdkVolumeUpdateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageVolume/Update", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageVolumeClient) Stats(ctx context.Context, in *SdkVolumeStatsRequest, opts ...grpc.CallOption) (*SdkVolumeStatsResponse, error) {
+	out := new(SdkVolumeStatsResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageVolume/Stats", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageVolumeClient) CapacityUsage(ctx context.Context, in *SdkVolumeCapacityUsageRequest, opts ...grpc.CallOption) (*SdkVolumeCapacityUsageResponse, error) {
+	out := new(SdkVolumeCapacityUsageResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageVolume/CapacityUsage", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageVolumeClient) Enumerate(ctx context.Context, in *SdkVolumeEnumerateRequest, opts ...grpc.CallOption) (*SdkVolumeEnumerateResponse, error) {
+	out := new(SdkVolumeEnumerateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageVolume/Enumerate", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageVolumeClient) EnumerateWithFilters(ctx context.Context, in *SdkVolumeEnumerateWithFiltersRequest, opts ...grpc.CallOption) (*SdkVolumeEnumerateWithFiltersResponse, error) {
+	out := new(SdkVolumeEnumerateWithFiltersResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageVolume/EnumerateWithFilters", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageVolumeClient) SnapshotCreate(ctx context.Context, in *SdkVolumeSnapshotCreateRequest, opts ...grpc.CallOption) (*SdkVolumeSnapshotCreateResponse, error) {
+	out := new(SdkVolumeSnapshotCreateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageVolume/SnapshotCreate", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageVolumeClient) SnapshotRestore(ctx context.Context, in *SdkVolumeSnapshotRestoreRequest, opts ...grpc.CallOption) (*SdkVolumeSnapshotRestoreResponse, error) {
+	out := new(SdkVolumeSnapshotRestoreResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageVolume/SnapshotRestore", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageVolumeClient) SnapshotEnumerate(ctx context.Context, in *SdkVolumeSnapshotEnumerateRequest, opts ...grpc.CallOption) (*SdkVolumeSnapshotEnumerateResponse, error) {
+	out := new(SdkVolumeSnapshotEnumerateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageVolume/SnapshotEnumerate", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageVolumeClient) SnapshotEnumerateWithFilters(ctx context.Context, in *SdkVolumeSnapshotEnumerateWithFiltersRequest, opts ...grpc.CallOption) (*SdkVolumeSnapshotEnumerateWithFiltersResponse, error) {
+	out := new(SdkVolumeSnapshotEnumerateWithFiltersResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageVolume/SnapshotEnumerateWithFilters", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageVolumeClient) SnapshotScheduleUpdate(ctx context.Context, in *SdkVolumeSnapshotScheduleUpdateRequest, opts ...grpc.CallOption) (*SdkVolumeSnapshotScheduleUpdateResponse, error) {
+	out := new(SdkVolumeSnapshotScheduleUpdateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageVolume/SnapshotScheduleUpdate", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// Server API for OpenStorageVolume service
+
+type OpenStorageVolumeServer interface {
+	// Create creates a volume according to the specification provided
+	//
+	// Requires access AccessType.Read when cloning from a parent volume.
+	//
+	// ##### Example
+	// {% codetabs name="Golang", type="go" -%}
+	// id, err := client.Create(context.Background(), &api.SdkVolumeCreateRequest{
+	//   Name: "volume-12345-east",
+	//   Spec: &api.VolumeSpec {
+	//     Size: 1234567,
+	//   },
+	// })
+	// {%- language name="Python", type="py" -%}
+	// en_resp = client.Create(api_pb2.SdkVolumeCreateRequest(
+	//   name="volume-12345-east",
+	//   spec=api_pb2.VolumeSpec(size=1234567)))
+	// {%- endcodetabs %}
+	Create(context.Context, *SdkVolumeCreateRequest) (*SdkVolumeCreateResponse, error)
+	// Clone creates a new writable volume cloned from an existing volume
+	//
+	// Requires access AccessType.Read of volume
+	Clone(context.Context, *SdkVolumeCloneRequest) (*SdkVolumeCloneResponse, error)
+	// Delete deletes the provided volume
+	//
+	// Requires access AccessType.Admin of volume
+	Delete(context.Context, *SdkVolumeDeleteRequest) (*SdkVolumeDeleteResponse, error)
+	// Inspect returns information about a volume
+	//
+	// Requires access AccessType.Read of volume
+	Inspect(context.Context, *SdkVolumeInspectRequest) (*SdkVolumeInspectResponse, error)
+	// Returns information for a list of volumes that match a filter.
+	// This call is a helper function like calling
+	// `OpenStorageVolume.EnumerateWithFilters` then having it
+	// return the contents of each of those volumes
+	// `OpenStorageVolume.Inspect()`. Take care in using this call
+	// when requesting large number of volumes because it will
+	// block until it has all the information requested before
+	// returning.
+	InspectWithFilters(context.Context, *SdkVolumeInspectWithFiltersRequest) (*SdkVolumeInspectWithFiltersResponse, error)
+	// Update provides a method for manipulating the specification and attributes of a volume.
+	// Set can be used to resize a volume, update labels, change replica count, and much more.
+	//
+	// Requires access AccessType.Write of volume
+	Update(context.Context, *SdkVolumeUpdateRequest) (*SdkVolumeUpdateResponse, error)
+	// Stats returns the statistics for the requested volume
+	//
+	// Requires access AccessType.Read of volume
+	Stats(context.Context, *SdkVolumeStatsRequest) (*SdkVolumeStatsResponse, error)
+	// CapacityUsage returns volume/snapshot's capacity usage details
+	//
+	// Requires access AccessType.Read of volume
+	//
+	// ##### Error codes:
+	//
+	// * codes.Aborted : Command was aborted and only total_bytes field is valid
+	// * code.Unimmplemented : Command is not suported this kernel.Only total_bytes
+	// field is valid;
+	CapacityUsage(context.Context, *SdkVolumeCapacityUsageRequest) (*SdkVolumeCapacityUsageResponse, error)
+	// Enumerate returns a list of volume ids
+	Enumerate(context.Context, *SdkVolumeEnumerateRequest) (*SdkVolumeEnumerateResponse, error)
+	// Enumerate returns a list of volume ids that match the labels if any are provided.
+	EnumerateWithFilters(context.Context, *SdkVolumeEnumerateWithFiltersRequest) (*SdkVolumeEnumerateWithFiltersResponse, error)
+	// SnapshotCreate creates a snapshot of a volume. This creates an immutable (read-only),
+	// point-in-time snapshot of a volume. To create a new writable volume from
+	// a snapshot, please use OpenStorageVolume.Clone().
+	//
+	// Requires access AccessType.Read of volume
+	SnapshotCreate(context.Context, *SdkVolumeSnapshotCreateRequest) (*SdkVolumeSnapshotCreateResponse, error)
+	// SnapshotRestore restores a volume to a specified snapshot
+	//
+	// Requires access AccessType.Write of volume
+	SnapshotRestore(context.Context, *SdkVolumeSnapshotRestoreRequest) (*SdkVolumeSnapshotRestoreResponse, error)
+	// SnapshotEnumerate returns a list of snapshots for a specific volume
+	SnapshotEnumerate(context.Context, *SdkVolumeSnapshotEnumerateRequest) (*SdkVolumeSnapshotEnumerateResponse, error)
+	// SnapshotEnumerate returns a list of snapshots.
+	// To filter all the snapshots for a specific volume which may no longer exist,
+	// specifiy a volume id.
+	// Labels can also be used to filter the snapshot list.
+	// If neither are provided all snapshots will be returned.
+	SnapshotEnumerateWithFilters(context.Context, *SdkVolumeSnapshotEnumerateWithFiltersRequest) (*SdkVolumeSnapshotEnumerateWithFiltersResponse, error)
+	// Sets the snapshot schedules. This information is saved in the VolumeSpec.snapshot_schedule
+	// as `policy=<name>,...`. This function will overwrite any policy values
+	// in the volume. To delete the policies in the volume send no policies.
+	//
+	// Requires access AccessType.Write of volume
+	SnapshotScheduleUpdate(context.Context, *SdkVolumeSnapshotScheduleUpdateRequest) (*SdkVolumeSnapshotScheduleUpdateResponse, error)
+}
+
+func RegisterOpenStorageVolumeServer(s *grpc.Server, srv OpenStorageVolumeServer) {
+	s.RegisterService(&_OpenStorageVolume_serviceDesc, srv)
+}
+
+func _OpenStorageVolume_Create_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeCreateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageVolumeServer).Create(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageVolume/Create",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageVolumeServer).Create(ctx, req.(*SdkVolumeCreateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageVolume_Clone_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeCloneRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageVolumeServer).Clone(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageVolume/Clone",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageVolumeServer).Clone(ctx, req.(*SdkVolumeCloneRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageVolume_Delete_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeDeleteRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageVolumeServer).Delete(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageVolume/Delete",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageVolumeServer).Delete(ctx, req.(*SdkVolumeDeleteRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageVolume_Inspect_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeInspectRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageVolumeServer).Inspect(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageVolume/Inspect",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageVolumeServer).Inspect(ctx, req.(*SdkVolumeInspectRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageVolume_InspectWithFilters_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeInspectWithFiltersRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageVolumeServer).InspectWithFilters(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageVolume/InspectWithFilters",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageVolumeServer).InspectWithFilters(ctx, req.(*SdkVolumeInspectWithFiltersRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageVolume_Update_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeUpdateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageVolumeServer).Update(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageVolume/Update",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageVolumeServer).Update(ctx, req.(*SdkVolumeUpdateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageVolume_Stats_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeStatsRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageVolumeServer).Stats(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageVolume/Stats",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageVolumeServer).Stats(ctx, req.(*SdkVolumeStatsRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageVolume_CapacityUsage_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeCapacityUsageRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageVolumeServer).CapacityUsage(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageVolume/CapacityUsage",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageVolumeServer).CapacityUsage(ctx, req.(*SdkVolumeCapacityUsageRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageVolume_Enumerate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeEnumerateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageVolumeServer).Enumerate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageVolume/Enumerate",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageVolumeServer).Enumerate(ctx, req.(*SdkVolumeEnumerateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageVolume_EnumerateWithFilters_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeEnumerateWithFiltersRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageVolumeServer).EnumerateWithFilters(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageVolume/EnumerateWithFilters",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageVolumeServer).EnumerateWithFilters(ctx, req.(*SdkVolumeEnumerateWithFiltersRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageVolume_SnapshotCreate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeSnapshotCreateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageVolumeServer).SnapshotCreate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageVolume/SnapshotCreate",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageVolumeServer).SnapshotCreate(ctx, req.(*SdkVolumeSnapshotCreateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageVolume_SnapshotRestore_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeSnapshotRestoreRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageVolumeServer).SnapshotRestore(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageVolume/SnapshotRestore",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageVolumeServer).SnapshotRestore(ctx, req.(*SdkVolumeSnapshotRestoreRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageVolume_SnapshotEnumerate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeSnapshotEnumerateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageVolumeServer).SnapshotEnumerate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageVolume/SnapshotEnumerate",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageVolumeServer).SnapshotEnumerate(ctx, req.(*SdkVolumeSnapshotEnumerateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageVolume_SnapshotEnumerateWithFilters_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeSnapshotEnumerateWithFiltersRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageVolumeServer).SnapshotEnumerateWithFilters(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageVolume/SnapshotEnumerateWithFilters",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageVolumeServer).SnapshotEnumerateWithFilters(ctx, req.(*SdkVolumeSnapshotEnumerateWithFiltersRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageVolume_SnapshotScheduleUpdate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeSnapshotScheduleUpdateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageVolumeServer).SnapshotScheduleUpdate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageVolume/SnapshotScheduleUpdate",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageVolumeServer).SnapshotScheduleUpdate(ctx, req.(*SdkVolumeSnapshotScheduleUpdateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+var _OpenStorageVolume_serviceDesc = grpc.ServiceDesc{
+	ServiceName: "openstorage.api.OpenStorageVolume",
+	HandlerType: (*OpenStorageVolumeServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "Create",
+			Handler:    _OpenStorageVolume_Create_Handler,
+		},
+		{
+			MethodName: "Clone",
+			Handler:    _OpenStorageVolume_Clone_Handler,
+		},
+		{
+			MethodName: "Delete",
+			Handler:    _OpenStorageVolume_Delete_Handler,
+		},
+		{
+			MethodName: "Inspect",
+			Handler:    _OpenStorageVolume_Inspect_Handler,
+		},
+		{
+			MethodName: "InspectWithFilters",
+			Handler:    _OpenStorageVolume_InspectWithFilters_Handler,
+		},
+		{
+			MethodName: "Update",
+			Handler:    _OpenStorageVolume_Update_Handler,
+		},
+		{
+			MethodName: "Stats",
+			Handler:    _OpenStorageVolume_Stats_Handler,
+		},
+		{
+			MethodName: "CapacityUsage",
+			Handler:    _OpenStorageVolume_CapacityUsage_Handler,
+		},
+		{
+			MethodName: "Enumerate",
+			Handler:    _OpenStorageVolume_Enumerate_Handler,
+		},
+		{
+			MethodName: "EnumerateWithFilters",
+			Handler:    _OpenStorageVolume_EnumerateWithFilters_Handler,
+		},
+		{
+			MethodName: "SnapshotCreate",
+			Handler:    _OpenStorageVolume_SnapshotCreate_Handler,
+		},
+		{
+			MethodName: "SnapshotRestore",
+			Handler:    _OpenStorageVolume_SnapshotRestore_Handler,
+		},
+		{
+			MethodName: "SnapshotEnumerate",
+			Handler:    _OpenStorageVolume_SnapshotEnumerate_Handler,
+		},
+		{
+			MethodName: "SnapshotEnumerateWithFilters",
+			Handler:    _OpenStorageVolume_SnapshotEnumerateWithFilters_Handler,
+		},
+		{
+			MethodName: "SnapshotScheduleUpdate",
+			Handler:    _OpenStorageVolume_SnapshotScheduleUpdate_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "api/api.proto",
+}
+
+// Client API for OpenStorageMountAttach service
+
+type OpenStorageMountAttachClient interface {
+	// Attach attaches device to the host that the client is communicating with.
+	//
+	// Requires access AccessType.Write of volume
+	Attach(ctx context.Context, in *SdkVolumeAttachRequest, opts ...grpc.CallOption) (*SdkVolumeAttachResponse, error)
+	// Detaches a the volume from the host
+	//
+	// Requires access AccessType.Write of volume
+	Detach(ctx context.Context, in *SdkVolumeDetachRequest, opts ...grpc.CallOption) (*SdkVolumeDetachResponse, error)
+	// Mount mounts an attached volume in the host that the client is communicating with
+	//
+	// Requires access AccessType.Write of volume
+	Mount(ctx context.Context, in *SdkVolumeMountRequest, opts ...grpc.CallOption) (*SdkVolumeMountResponse, error)
+	// Unmount unmounts a mounted volume in the host that the client is communicating with
+	//
+	// Requires access AccessType.Write of volume
+	Unmount(ctx context.Context, in *SdkVolumeUnmountRequest, opts ...grpc.CallOption) (*SdkVolumeUnmountResponse, error)
+}
+
+type openStorageMountAttachClient struct {
+	cc *grpc.ClientConn
+}
+
+func NewOpenStorageMountAttachClient(cc *grpc.ClientConn) OpenStorageMountAttachClient {
+	return &openStorageMountAttachClient{cc}
+}
+
+func (c *openStorageMountAttachClient) Attach(ctx context.Context, in *SdkVolumeAttachRequest, opts ...grpc.CallOption) (*SdkVolumeAttachResponse, error) {
+	out := new(SdkVolumeAttachResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageMountAttach/Attach", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageMountAttachClient) Detach(ctx context.Context, in *SdkVolumeDetachRequest, opts ...grpc.CallOption) (*SdkVolumeDetachResponse, error) {
+	out := new(SdkVolumeDetachResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageMountAttach/Detach", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageMountAttachClient) Mount(ctx context.Context, in *SdkVolumeMountRequest, opts ...grpc.CallOption) (*SdkVolumeMountResponse, error) {
+	out := new(SdkVolumeMountResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageMountAttach/Mount", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageMountAttachClient) Unmount(ctx context.Context, in *SdkVolumeUnmountRequest, opts ...grpc.CallOption) (*SdkVolumeUnmountResponse, error) {
+	out := new(SdkVolumeUnmountResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageMountAttach/Unmount", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// Server API for OpenStorageMountAttach service
+
+type OpenStorageMountAttachServer interface {
+	// Attach attaches device to the host that the client is communicating with.
+	//
+	// Requires access AccessType.Write of volume
+	Attach(context.Context, *SdkVolumeAttachRequest) (*SdkVolumeAttachResponse, error)
+	// Detaches a the volume from the host
+	//
+	// Requires access AccessType.Write of volume
+	Detach(context.Context, *SdkVolumeDetachRequest) (*SdkVolumeDetachResponse, error)
+	// Mount mounts an attached volume in the host that the client is communicating with
+	//
+	// Requires access AccessType.Write of volume
+	Mount(context.Context, *SdkVolumeMountRequest) (*SdkVolumeMountResponse, error)
+	// Unmount unmounts a mounted volume in the host that the client is communicating with
+	//
+	// Requires access AccessType.Write of volume
+	Unmount(context.Context, *SdkVolumeUnmountRequest) (*SdkVolumeUnmountResponse, error)
+}
+
+func RegisterOpenStorageMountAttachServer(s *grpc.Server, srv OpenStorageMountAttachServer) {
+	s.RegisterService(&_OpenStorageMountAttach_serviceDesc, srv)
+}
+
+func _OpenStorageMountAttach_Attach_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeAttachRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageMountAttachServer).Attach(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageMountAttach/Attach",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageMountAttachServer).Attach(ctx, req.(*SdkVolumeAttachRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageMountAttach_Detach_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeDetachRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageMountAttachServer).Detach(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageMountAttach/Detach",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageMountAttachServer).Detach(ctx, req.(*SdkVolumeDetachRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageMountAttach_Mount_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeMountRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageMountAttachServer).Mount(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageMountAttach/Mount",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageMountAttachServer).Mount(ctx, req.(*SdkVolumeMountRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageMountAttach_Unmount_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkVolumeUnmountRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageMountAttachServer).Unmount(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageMountAttach/Unmount",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageMountAttachServer).Unmount(ctx, req.(*SdkVolumeUnmountRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+var _OpenStorageMountAttach_serviceDesc = grpc.ServiceDesc{
+	ServiceName: "openstorage.api.OpenStorageMountAttach",
+	HandlerType: (*OpenStorageMountAttachServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "Attach",
+			Handler:    _OpenStorageMountAttach_Attach_Handler,
+		},
+		{
+			MethodName: "Detach",
+			Handler:    _OpenStorageMountAttach_Detach_Handler,
+		},
+		{
+			MethodName: "Mount",
+			Handler:    _OpenStorageMountAttach_Mount_Handler,
+		},
+		{
+			MethodName: "Unmount",
+			Handler:    _OpenStorageMountAttach_Unmount_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "api/api.proto",
+}
+
+// Client API for OpenStorageMigrate service
+
+type OpenStorageMigrateClient interface {
+	// Start a migration operation
+	Start(ctx context.Context, in *SdkCloudMigrateStartRequest, opts ...grpc.CallOption) (*SdkCloudMigrateStartResponse, error)
+	// Cancel a migration operation
+	Cancel(ctx context.Context, in *SdkCloudMigrateCancelRequest, opts ...grpc.CallOption) (*SdkCloudMigrateCancelResponse, error)
+	// Inspect the status of migration operation
+	Status(ctx context.Context, in *SdkCloudMigrateStatusRequest, opts ...grpc.CallOption) (*SdkCloudMigrateStatusResponse, error)
+}
+
+type openStorageMigrateClient struct {
+	cc *grpc.ClientConn
+}
+
+func NewOpenStorageMigrateClient(cc *grpc.ClientConn) OpenStorageMigrateClient {
+	return &openStorageMigrateClient{cc}
+}
+
+func (c *openStorageMigrateClient) Start(ctx context.Context, in *SdkCloudMigrateStartRequest, opts ...grpc.CallOption) (*SdkCloudMigrateStartResponse, error) {
+	out := new(SdkCloudMigrateStartResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageMigrate/Start", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageMigrateClient) Cancel(ctx context.Context, in *SdkCloudMigrateCancelRequest, opts ...grpc.CallOption) (*SdkCloudMigrateCancelResponse, error) {
+	out := new(SdkCloudMigrateCancelResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageMigrate/Cancel", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageMigrateClient) Status(ctx context.Context, in *SdkCloudMigrateStatusRequest, opts ...grpc.CallOption) (*SdkCloudMigrateStatusResponse, error) {
+	out := new(SdkCloudMigrateStatusResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageMigrate/Status", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// Server API for OpenStorageMigrate service
+
+type OpenStorageMigrateServer interface {
+	// Start a migration operation
+	Start(context.Context, *SdkCloudMigrateStartRequest) (*SdkCloudMigrateStartResponse, error)
+	// Cancel a migration operation
+	Cancel(context.Context, *SdkCloudMigrateCancelRequest) (*SdkCloudMigrateCancelResponse, error)
+	// Inspect the status of migration operation
+	Status(context.Context, *SdkCloudMigrateStatusRequest) (*SdkCloudMigrateStatusResponse, error)
+}
+
+func RegisterOpenStorageMigrateServer(s *grpc.Server, srv OpenStorageMigrateServer) {
+	s.RegisterService(&_OpenStorageMigrate_serviceDesc, srv)
+}
+
+func _OpenStorageMigrate_Start_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCloudMigrateStartRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageMigrateServer).Start(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageMigrate/Start",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageMigrateServer).Start(ctx, req.(*SdkCloudMigrateStartRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageMigrate_Cancel_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCloudMigrateCancelRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageMigrateServer).Cancel(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageMigrate/Cancel",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageMigrateServer).Cancel(ctx, req.(*SdkCloudMigrateCancelRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageMigrate_Status_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCloudMigrateStatusRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageMigrateServer).Status(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageMigrate/Status",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageMigrateServer).Status(ctx, req.(*SdkCloudMigrateStatusRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+var _OpenStorageMigrate_serviceDesc = grpc.ServiceDesc{
+	ServiceName: "openstorage.api.OpenStorageMigrate",
+	HandlerType: (*OpenStorageMigrateServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "Start",
+			Handler:    _OpenStorageMigrate_Start_Handler,
+		},
+		{
+			MethodName: "Cancel",
+			Handler:    _OpenStorageMigrate_Cancel_Handler,
+		},
+		{
+			MethodName: "Status",
+			Handler:    _OpenStorageMigrate_Status_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "api/api.proto",
+}
+
+// Client API for OpenStorageObjectstore service
+
+type OpenStorageObjectstoreClient interface {
+	// Inspect returns information about the object store endpoint
+	Inspect(ctx context.Context, in *SdkObjectstoreInspectRequest, opts ...grpc.CallOption) (*SdkObjectstoreInspectResponse, error)
+	// Creates creates an object store endpoint on specified volume
+	Create(ctx context.Context, in *SdkObjectstoreCreateRequest, opts ...grpc.CallOption) (*SdkObjectstoreCreateResponse, error)
+	// Delete destroys the object store endpoint on the volume
+	Delete(ctx context.Context, in *SdkObjectstoreDeleteRequest, opts ...grpc.CallOption) (*SdkObjectstoreDeleteResponse, error)
+	// Updates provided objectstore status.
+	// This call can be used to stop and start the server while maintaining the same
+	// object storage id.
+	Update(ctx context.Context, in *SdkObjectstoreUpdateRequest, opts ...grpc.CallOption) (*SdkObjectstoreUpdateResponse, error)
+}
+
+type openStorageObjectstoreClient struct {
+	cc *grpc.ClientConn
+}
+
+func NewOpenStorageObjectstoreClient(cc *grpc.ClientConn) OpenStorageObjectstoreClient {
+	return &openStorageObjectstoreClient{cc}
+}
+
+func (c *openStorageObjectstoreClient) Inspect(ctx context.Context, in *SdkObjectstoreInspectRequest, opts ...grpc.CallOption) (*SdkObjectstoreInspectResponse, error) {
+	out := new(SdkObjectstoreInspectResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageObjectstore/Inspect", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageObjectstoreClient) Create(ctx context.Context, in *SdkObjectstoreCreateRequest, opts ...grpc.CallOption) (*SdkObjectstoreCreateResponse, error) {
+	out := new(SdkObjectstoreCreateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageObjectstore/Create", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageObjectstoreClient) Delete(ctx context.Context, in *SdkObjectstoreDeleteRequest, opts ...grpc.CallOption) (*SdkObjectstoreDeleteResponse, error) {
+	out := new(SdkObjectstoreDeleteResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageObjectstore/Delete", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageObjectstoreClient) Update(ctx context.Context, in *SdkObjectstoreUpdateRequest, opts ...grpc.CallOption) (*SdkObjectstoreUpdateResponse, error) {
+	out := new(SdkObjectstoreUpdateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageObjectstore/Update", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// Server API for OpenStorageObjectstore service
+
+type OpenStorageObjectstoreServer interface {
+	// Inspect returns information about the object store endpoint
+	Inspect(context.Context, *SdkObjectstoreInspectRequest) (*SdkObjectstoreInspectResponse, error)
+	// Creates creates an object store endpoint on specified volume
+	Create(context.Context, *SdkObjectstoreCreateRequest) (*SdkObjectstoreCreateResponse, error)
+	// Delete destroys the object store endpoint on the volume
+	Delete(context.Context, *SdkObjectstoreDeleteRequest) (*SdkObjectstoreDeleteResponse, error)
+	// Updates provided objectstore status.
+	// This call can be used to stop and start the server while maintaining the same
+	// object storage id.
+	Update(context.Context, *SdkObjectstoreUpdateRequest) (*SdkObjectstoreUpdateResponse, error)
+}
+
+func RegisterOpenStorageObjectstoreServer(s *grpc.Server, srv OpenStorageObjectstoreServer) {
+	s.RegisterService(&_OpenStorageObjectstore_serviceDesc, srv)
+}
+
+func _OpenStorageObjectstore_Inspect_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkObjectstoreInspectRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageObjectstoreServer).Inspect(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageObjectstore/Inspect",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageObjectstoreServer).Inspect(ctx, req.(*SdkObjectstoreInspectRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageObjectstore_Create_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkObjectstoreCreateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageObjectstoreServer).Create(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageObjectstore/Create",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageObjectstoreServer).Create(ctx, req.(*SdkObjectstoreCreateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageObjectstore_Delete_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkObjectstoreDeleteRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageObjectstoreServer).Delete(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageObjectstore/Delete",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageObjectstoreServer).Delete(ctx, req.(*SdkObjectstoreDeleteRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageObjectstore_Update_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkObjectstoreUpdateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageObjectstoreServer).Update(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageObjectstore/Update",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageObjectstoreServer).Update(ctx, req.(*SdkObjectstoreUpdateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+var _OpenStorageObjectstore_serviceDesc = grpc.ServiceDesc{
+	ServiceName: "openstorage.api.OpenStorageObjectstore",
+	HandlerType: (*OpenStorageObjectstoreServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "Inspect",
+			Handler:    _OpenStorageObjectstore_Inspect_Handler,
+		},
+		{
+			MethodName: "Create",
+			Handler:    _OpenStorageObjectstore_Create_Handler,
+		},
+		{
+			MethodName: "Delete",
+			Handler:    _OpenStorageObjectstore_Delete_Handler,
+		},
+		{
+			MethodName: "Update",
+			Handler:    _OpenStorageObjectstore_Update_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "api/api.proto",
+}
+
+// Client API for OpenStorageCredentials service
+
+type OpenStorageCredentialsClient interface {
+	// Create is used to submit cloud credentials. It will return an
+	// id of the credentials once they are verified to work.
+	//
+	// ##### Example
+	// {% codetabs name="Golang", type="go" -%}
+	// id, err := client.Create(context.Background(), &api.SdkCredentialCreateRequest{
+	//     Name: "awscred",
+	//     CredentialType: &api.SdkCredentialCreateRequest_AwsCredential{
+	//       AwsCredential: &api.SdkAwsCredentialRequest{
+	//       AccessKey: "dummy-access",
+	//       SecretKey: "dummy-secret",
+	//       Endpoint:  "dummy-endpoint",
+	//       Region:    "dummy-region",
+	//     },
+	//   },
+	// })
+	// {%- language name="Python", type="py" -%}
+	// en_resp = client.Create(api_pb2.SdkCredentialCreateRequest(
+	//   name='awscred',
+	//   aws_credential=api_pb2.SdkAwsCredentialRequest(
+	//     access_key='dummy-access',
+	//     secret_key='dumm-secret',
+	//     endpoint='dummy-endpoint',
+	//     region='dummy-region')))
+	// {%- endcodetabs %}
+	Create(ctx context.Context, in *SdkCredentialCreateRequest, opts ...grpc.CallOption) (*SdkCredentialCreateResponse, error)
+	// Enumerate returns a list of credential ids
+	Enumerate(ctx context.Context, in *SdkCredentialEnumerateRequest, opts ...grpc.CallOption) (*SdkCredentialEnumerateResponse, error)
+	// Inspect returns the information about a credential, but does not return the secret key.
+	Inspect(ctx context.Context, in *SdkCredentialInspectRequest, opts ...grpc.CallOption) (*SdkCredentialInspectResponse, error)
+	// Delete a specified credential
+	Delete(ctx context.Context, in *SdkCredentialDeleteRequest, opts ...grpc.CallOption) (*SdkCredentialDeleteResponse, error)
+	// Validate is used to validate credentials
+	Validate(ctx context.Context, in *SdkCredentialValidateRequest, opts ...grpc.CallOption) (*SdkCredentialValidateResponse, error)
+}
+
+type openStorageCredentialsClient struct {
+	cc *grpc.ClientConn
+}
+
+func NewOpenStorageCredentialsClient(cc *grpc.ClientConn) OpenStorageCredentialsClient {
+	return &openStorageCredentialsClient{cc}
+}
+
+func (c *openStorageCredentialsClient) Create(ctx context.Context, in *SdkCredentialCreateRequest, opts ...grpc.CallOption) (*SdkCredentialCreateResponse, error) {
+	out := new(SdkCredentialCreateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCredentials/Create", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageCredentialsClient) Enumerate(ctx context.Context, in *SdkCredentialEnumerateRequest, opts ...grpc.CallOption) (*SdkCredentialEnumerateResponse, error) {
+	out := new(SdkCredentialEnumerateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCredentials/Enumerate", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageCredentialsClient) Inspect(ctx context.Context, in *SdkCredentialInspectRequest, opts ...grpc.CallOption) (*SdkCredentialInspectResponse, error) {
+	out := new(SdkCredentialInspectResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCredentials/Inspect", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageCredentialsClient) Delete(ctx context.Context, in *SdkCredentialDeleteRequest, opts ...grpc.CallOption) (*SdkCredentialDeleteResponse, error) {
+	out := new(SdkCredentialDeleteResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCredentials/Delete", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageCredentialsClient) Validate(ctx context.Context, in *SdkCredentialValidateRequest, opts ...grpc.CallOption) (*SdkCredentialValidateResponse, error) {
+	out := new(SdkCredentialValidateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCredentials/Validate", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// Server API for OpenStorageCredentials service
+
+type OpenStorageCredentialsServer interface {
+	// Create is used to submit cloud credentials. It will return an
+	// id of the credentials once they are verified to work.
+	//
+	// ##### Example
+	// {% codetabs name="Golang", type="go" -%}
+	// id, err := client.Create(context.Background(), &api.SdkCredentialCreateRequest{
+	//     Name: "awscred",
+	//     CredentialType: &api.SdkCredentialCreateRequest_AwsCredential{
+	//       AwsCredential: &api.SdkAwsCredentialRequest{
+	//       AccessKey: "dummy-access",
+	//       SecretKey: "dummy-secret",
+	//       Endpoint:  "dummy-endpoint",
+	//       Region:    "dummy-region",
+	//     },
+	//   },
+	// })
+	// {%- language name="Python", type="py" -%}
+	// en_resp = client.Create(api_pb2.SdkCredentialCreateRequest(
+	//   name='awscred',
+	//   aws_credential=api_pb2.SdkAwsCredentialRequest(
+	//     access_key='dummy-access',
+	//     secret_key='dumm-secret',
+	//     endpoint='dummy-endpoint',
+	//     region='dummy-region')))
+	// {%- endcodetabs %}
+	Create(context.Context, *SdkCredentialCreateRequest) (*SdkCredentialCreateResponse, error)
+	// Enumerate returns a list of credential ids
+	Enumerate(context.Context, *SdkCredentialEnumerateRequest) (*SdkCredentialEnumerateResponse, error)
+	// Inspect returns the information about a credential, but does not return the secret key.
+	Inspect(context.Context, *SdkCredentialInspectRequest) (*SdkCredentialInspectResponse, error)
+	// Delete a specified credential
+	Delete(context.Context, *SdkCredentialDeleteRequest) (*SdkCredentialDeleteResponse, error)
+	// Validate is used to validate credentials
+	Validate(context.Context, *SdkCredentialValidateRequest) (*SdkCredentialValidateResponse, error)
+}
+
+func RegisterOpenStorageCredentialsServer(s *grpc.Server, srv OpenStorageCredentialsServer) {
+	s.RegisterService(&_OpenStorageCredentials_serviceDesc, srv)
+}
+
+func _OpenStorageCredentials_Create_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCredentialCreateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCredentialsServer).Create(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCredentials/Create",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCredentialsServer).Create(ctx, req.(*SdkCredentialCreateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageCredentials_Enumerate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCredentialEnumerateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCredentialsServer).Enumerate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCredentials/Enumerate",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCredentialsServer).Enumerate(ctx, req.(*SdkCredentialEnumerateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageCredentials_Inspect_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCredentialInspectRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCredentialsServer).Inspect(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCredentials/Inspect",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCredentialsServer).Inspect(ctx, req.(*SdkCredentialInspectRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageCredentials_Delete_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCredentialDeleteRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCredentialsServer).Delete(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCredentials/Delete",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCredentialsServer).Delete(ctx, req.(*SdkCredentialDeleteRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageCredentials_Validate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCredentialValidateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCredentialsServer).Validate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCredentials/Validate",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCredentialsServer).Validate(ctx, req.(*SdkCredentialValidateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+var _OpenStorageCredentials_serviceDesc = grpc.ServiceDesc{
+	ServiceName: "openstorage.api.OpenStorageCredentials",
+	HandlerType: (*OpenStorageCredentialsServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "Create",
+			Handler:    _OpenStorageCredentials_Create_Handler,
+		},
+		{
+			MethodName: "Enumerate",
+			Handler:    _OpenStorageCredentials_Enumerate_Handler,
+		},
+		{
+			MethodName: "Inspect",
+			Handler:    _OpenStorageCredentials_Inspect_Handler,
+		},
+		{
+			MethodName: "Delete",
+			Handler:    _OpenStorageCredentials_Delete_Handler,
+		},
+		{
+			MethodName: "Validate",
+			Handler:    _OpenStorageCredentials_Validate_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "api/api.proto",
+}
+
+// Client API for OpenStorageSchedulePolicy service
+
+type OpenStorageSchedulePolicyClient interface {
+	// Create creates a new snapshot schedule. They can be setup daily,
+	// weekly, or monthly.
+	Create(ctx context.Context, in *SdkSchedulePolicyCreateRequest, opts ...grpc.CallOption) (*SdkSchedulePolicyCreateResponse, error)
+	// Update a snapshot schedule
+	Update(ctx context.Context, in *SdkSchedulePolicyUpdateRequest, opts ...grpc.CallOption) (*SdkSchedulePolicyUpdateResponse, error)
+	// Enumerate returns a list of schedules
+	Enumerate(ctx context.Context, in *SdkSchedulePolicyEnumerateRequest, opts ...grpc.CallOption) (*SdkSchedulePolicyEnumerateResponse, error)
+	// Inspect returns information about a specified schedule
+	Inspect(ctx context.Context, in *SdkSchedulePolicyInspectRequest, opts ...grpc.CallOption) (*SdkSchedulePolicyInspectResponse, error)
+	// Delete removes a snapshot schedule
+	Delete(ctx context.Context, in *SdkSchedulePolicyDeleteRequest, opts ...grpc.CallOption) (*SdkSchedulePolicyDeleteResponse, error)
+}
+
+type openStorageSchedulePolicyClient struct {
+	cc *grpc.ClientConn
+}
+
+func NewOpenStorageSchedulePolicyClient(cc *grpc.ClientConn) OpenStorageSchedulePolicyClient {
+	return &openStorageSchedulePolicyClient{cc}
+}
+
+func (c *openStorageSchedulePolicyClient) Create(ctx context.Context, in *SdkSchedulePolicyCreateRequest, opts ...grpc.CallOption) (*SdkSchedulePolicyCreateResponse, error) {
+	out := new(SdkSchedulePolicyCreateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageSchedulePolicy/Create", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageSchedulePolicyClient) Update(ctx context.Context, in *SdkSchedulePolicyUpdateRequest, opts ...grpc.CallOption) (*SdkSchedulePolicyUpdateResponse, error) {
+	out := new(SdkSchedulePolicyUpdateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageSchedulePolicy/Update", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageSchedulePolicyClient) Enumerate(ctx context.Context, in *SdkSchedulePolicyEnumerateRequest, opts ...grpc.CallOption) (*SdkSchedulePolicyEnumerateResponse, error) {
+	out := new(SdkSchedulePolicyEnumerateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageSchedulePolicy/Enumerate", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageSchedulePolicyClient) Inspect(ctx context.Context, in *SdkSchedulePolicyInspectRequest, opts ...grpc.CallOption) (*SdkSchedulePolicyInspectResponse, error) {
+	out := new(SdkSchedulePolicyInspectResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageSchedulePolicy/Inspect", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageSchedulePolicyClient) Delete(ctx context.Context, in *SdkSchedulePolicyDeleteRequest, opts ...grpc.CallOption) (*SdkSchedulePolicyDeleteResponse, error) {
+	out := new(SdkSchedulePolicyDeleteResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageSchedulePolicy/Delete", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// Server API for OpenStorageSchedulePolicy service
+
+type OpenStorageSchedulePolicyServer interface {
+	// Create creates a new snapshot schedule. They can be setup daily,
+	// weekly, or monthly.
+	Create(context.Context, *SdkSchedulePolicyCreateRequest) (*SdkSchedulePolicyCreateResponse, error)
+	// Update a snapshot schedule
+	Update(context.Context, *SdkSchedulePolicyUpdateRequest) (*SdkSchedulePolicyUpdateResponse, error)
+	// Enumerate returns a list of schedules
+	Enumerate(context.Context, *SdkSchedulePolicyEnumerateRequest) (*SdkSchedulePolicyEnumerateResponse, error)
+	// Inspect returns information about a specified schedule
+	Inspect(context.Context, *SdkSchedulePolicyInspectRequest) (*SdkSchedulePolicyInspectResponse, error)
+	// Delete removes a snapshot schedule
+	Delete(context.Context, *SdkSchedulePolicyDeleteRequest) (*SdkSchedulePolicyDeleteResponse, error)
+}
+
+func RegisterOpenStorageSchedulePolicyServer(s *grpc.Server, srv OpenStorageSchedulePolicyServer) {
+	s.RegisterService(&_OpenStorageSchedulePolicy_serviceDesc, srv)
+}
+
+func _OpenStorageSchedulePolicy_Create_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkSchedulePolicyCreateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageSchedulePolicyServer).Create(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageSchedulePolicy/Create",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageSchedulePolicyServer).Create(ctx, req.(*SdkSchedulePolicyCreateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageSchedulePolicy_Update_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkSchedulePolicyUpdateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageSchedulePolicyServer).Update(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageSchedulePolicy/Update",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageSchedulePolicyServer).Update(ctx, req.(*SdkSchedulePolicyUpdateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageSchedulePolicy_Enumerate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkSchedulePolicyEnumerateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageSchedulePolicyServer).Enumerate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageSchedulePolicy/Enumerate",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageSchedulePolicyServer).Enumerate(ctx, req.(*SdkSchedulePolicyEnumerateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageSchedulePolicy_Inspect_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkSchedulePolicyInspectRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageSchedulePolicyServer).Inspect(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageSchedulePolicy/Inspect",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageSchedulePolicyServer).Inspect(ctx, req.(*SdkSchedulePolicyInspectRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageSchedulePolicy_Delete_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkSchedulePolicyDeleteRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageSchedulePolicyServer).Delete(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageSchedulePolicy/Delete",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageSchedulePolicyServer).Delete(ctx, req.(*SdkSchedulePolicyDeleteRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+var _OpenStorageSchedulePolicy_serviceDesc = grpc.ServiceDesc{
+	ServiceName: "openstorage.api.OpenStorageSchedulePolicy",
+	HandlerType: (*OpenStorageSchedulePolicyServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "Create",
+			Handler:    _OpenStorageSchedulePolicy_Create_Handler,
+		},
+		{
+			MethodName: "Update",
+			Handler:    _OpenStorageSchedulePolicy_Update_Handler,
+		},
+		{
+			MethodName: "Enumerate",
+			Handler:    _OpenStorageSchedulePolicy_Enumerate_Handler,
+		},
+		{
+			MethodName: "Inspect",
+			Handler:    _OpenStorageSchedulePolicy_Inspect_Handler,
+		},
+		{
+			MethodName: "Delete",
+			Handler:    _OpenStorageSchedulePolicy_Delete_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "api/api.proto",
+}
+
+// Client API for OpenStorageCloudBackup service
+
+type OpenStorageCloudBackupClient interface {
+	// Creates a backup request for a specified volume. Use
+	// OpenStorageCloudBackup.Status() to get the current status of the
+	// backup request.
+	//
+	// Requires access AccessType.Read of volume
+	Create(ctx context.Context, in *SdkCloudBackupCreateRequest, opts ...grpc.CallOption) (*SdkCloudBackupCreateResponse, error)
+	// Restore creates a new volume from a backup id. The newly created volume
+	// has an ha_level (number of replicas) of only 1. To increase the number of
+	// replicas, use OpenStorageVolume.Set() to change the ha_level.
+	Restore(ctx context.Context, in *SdkCloudBackupRestoreRequest, opts ...grpc.CallOption) (*SdkCloudBackupRestoreResponse, error)
+	// Deletes a backup stored in the cloud. If the backup is an incremental
+	// backup and other backups are dependent on it, it will not be able to be deleted.
+	Delete(ctx context.Context, in *SdkCloudBackupDeleteRequest, opts ...grpc.CallOption) (*SdkCloudBackupDeleteResponse, error)
+	// DeleteAll deletes all the backups in the cloud for the specified volume.
+	DeleteAll(ctx context.Context, in *SdkCloudBackupDeleteAllRequest, opts ...grpc.CallOption) (*SdkCloudBackupDeleteAllResponse, error)
+	// Return a list of backups for the specified volume
+	EnumerateWithFilters(ctx context.Context, in *SdkCloudBackupEnumerateWithFiltersRequest, opts ...grpc.CallOption) (*SdkCloudBackupEnumerateWithFiltersResponse, error)
+	// Status returns the status of any cloud backups of a volume
+	Status(ctx context.Context, in *SdkCloudBackupStatusRequest, opts ...grpc.CallOption) (*SdkCloudBackupStatusResponse, error)
+	// Catalog returns a list of the contents in the backup
+	Catalog(ctx context.Context, in *SdkCloudBackupCatalogRequest, opts ...grpc.CallOption) (*SdkCloudBackupCatalogResponse, error)
+	// History returns a list of backups for a specified volume
+	History(ctx context.Context, in *SdkCloudBackupHistoryRequest, opts ...grpc.CallOption) (*SdkCloudBackupHistoryResponse, error)
+	// StateChange can be used to stop, pause, and restart a backup
+	StateChange(ctx context.Context, in *SdkCloudBackupStateChangeRequest, opts ...grpc.CallOption) (*SdkCloudBackupStateChangeResponse, error)
+	// Create cloud backup schedule
+	SchedCreate(ctx context.Context, in *SdkCloudBackupSchedCreateRequest, opts ...grpc.CallOption) (*SdkCloudBackupSchedCreateResponse, error)
+	// Delete cloud backup schedule
+	SchedDelete(ctx context.Context, in *SdkCloudBackupSchedDeleteRequest, opts ...grpc.CallOption) (*SdkCloudBackupSchedDeleteResponse, error)
+	// Enumerate cloud backup schedules
+	SchedEnumerate(ctx context.Context, in *SdkCloudBackupSchedEnumerateRequest, opts ...grpc.CallOption) (*SdkCloudBackupSchedEnumerateResponse, error)
+}
+
+type openStorageCloudBackupClient struct {
+	cc *grpc.ClientConn
+}
+
+func NewOpenStorageCloudBackupClient(cc *grpc.ClientConn) OpenStorageCloudBackupClient {
+	return &openStorageCloudBackupClient{cc}
+}
+
+func (c *openStorageCloudBackupClient) Create(ctx context.Context, in *SdkCloudBackupCreateRequest, opts ...grpc.CallOption) (*SdkCloudBackupCreateResponse, error) {
+	out := new(SdkCloudBackupCreateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCloudBackup/Create", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageCloudBackupClient) Restore(ctx context.Context, in *SdkCloudBackupRestoreRequest, opts ...grpc.CallOption) (*SdkCloudBackupRestoreResponse, error) {
+	out := new(SdkCloudBackupRestoreResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCloudBackup/Restore", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageCloudBackupClient) Delete(ctx context.Context, in *SdkCloudBackupDeleteRequest, opts ...grpc.CallOption) (*SdkCloudBackupDeleteResponse, error) {
+	out := new(SdkCloudBackupDeleteResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCloudBackup/Delete", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageCloudBackupClient) DeleteAll(ctx context.Context, in *SdkCloudBackupDeleteAllRequest, opts ...grpc.CallOption) (*SdkCloudBackupDeleteAllResponse, error) {
+	out := new(SdkCloudBackupDeleteAllResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCloudBackup/DeleteAll", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageCloudBackupClient) EnumerateWithFilters(ctx context.Context, in *SdkCloudBackupEnumerateWithFiltersRequest, opts ...grpc.CallOption) (*SdkCloudBackupEnumerateWithFiltersResponse, error) {
+	out := new(SdkCloudBackupEnumerateWithFiltersResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCloudBackup/EnumerateWithFilters", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageCloudBackupClient) Status(ctx context.Context, in *SdkCloudBackupStatusRequest, opts ...grpc.CallOption) (*SdkCloudBackupStatusResponse, error) {
+	out := new(SdkCloudBackupStatusResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCloudBackup/Status", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageCloudBackupClient) Catalog(ctx context.Context, in *SdkCloudBackupCatalogRequest, opts ...grpc.CallOption) (*SdkCloudBackupCatalogResponse, error) {
+	out := new(SdkCloudBackupCatalogResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCloudBackup/Catalog", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageCloudBackupClient) History(ctx context.Context, in *SdkCloudBackupHistoryRequest, opts ...grpc.CallOption) (*SdkCloudBackupHistoryResponse, error) {
+	out := new(SdkCloudBackupHistoryResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCloudBackup/History", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageCloudBackupClient) StateChange(ctx context.Context, in *SdkCloudBackupStateChangeRequest, opts ...grpc.CallOption) (*SdkCloudBackupStateChangeResponse, error) {
+	out := new(SdkCloudBackupStateChangeResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCloudBackup/StateChange", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageCloudBackupClient) SchedCreate(ctx context.Context, in *SdkCloudBackupSchedCreateRequest, opts ...grpc.CallOption) (*SdkCloudBackupSchedCreateResponse, error) {
+	out := new(SdkCloudBackupSchedCreateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCloudBackup/SchedCreate", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageCloudBackupClient) SchedDelete(ctx context.Context, in *SdkCloudBackupSchedDeleteRequest, opts ...grpc.CallOption) (*SdkCloudBackupSchedDeleteResponse, error) {
+	out := new(SdkCloudBackupSchedDeleteResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCloudBackup/SchedDelete", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStorageCloudBackupClient) SchedEnumerate(ctx context.Context, in *SdkCloudBackupSchedEnumerateRequest, opts ...grpc.CallOption) (*SdkCloudBackupSchedEnumerateResponse, error) {
+	out := new(SdkCloudBackupSchedEnumerateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStorageCloudBackup/SchedEnumerate", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// Server API for OpenStorageCloudBackup service
+
+type OpenStorageCloudBackupServer interface {
+	// Creates a backup request for a specified volume. Use
+	// OpenStorageCloudBackup.Status() to get the current status of the
+	// backup request.
+	//
+	// Requires access AccessType.Read of volume
+	Create(context.Context, *SdkCloudBackupCreateRequest) (*SdkCloudBackupCreateResponse, error)
+	// Restore creates a new volume from a backup id. The newly created volume
+	// has an ha_level (number of replicas) of only 1. To increase the number of
+	// replicas, use OpenStorageVolume.Set() to change the ha_level.
+	Restore(context.Context, *SdkCloudBackupRestoreRequest) (*SdkCloudBackupRestoreResponse, error)
+	// Deletes a backup stored in the cloud. If the backup is an incremental
+	// backup and other backups are dependent on it, it will not be able to be deleted.
+	Delete(context.Context, *SdkCloudBackupDeleteRequest) (*SdkCloudBackupDeleteResponse, error)
+	// DeleteAll deletes all the backups in the cloud for the specified volume.
+	DeleteAll(context.Context, *SdkCloudBackupDeleteAllRequest) (*SdkCloudBackupDeleteAllResponse, error)
+	// Return a list of backups for the specified volume
+	EnumerateWithFilters(context.Context, *SdkCloudBackupEnumerateWithFiltersRequest) (*SdkCloudBackupEnumerateWithFiltersResponse, error)
+	// Status returns the status of any cloud backups of a volume
+	Status(context.Context, *SdkCloudBackupStatusRequest) (*SdkCloudBackupStatusResponse, error)
+	// Catalog returns a list of the contents in the backup
+	Catalog(context.Context, *SdkCloudBackupCatalogRequest) (*SdkCloudBackupCatalogResponse, error)
+	// History returns a list of backups for a specified volume
+	History(context.Context, *SdkCloudBackupHistoryRequest) (*SdkCloudBackupHistoryResponse, error)
+	// StateChange can be used to stop, pause, and restart a backup
+	StateChange(context.Context, *SdkCloudBackupStateChangeRequest) (*SdkCloudBackupStateChangeResponse, error)
+	// Create cloud backup schedule
+	SchedCreate(context.Context, *SdkCloudBackupSchedCreateRequest) (*SdkCloudBackupSchedCreateResponse, error)
+	// Delete cloud backup schedule
+	SchedDelete(context.Context, *SdkCloudBackupSchedDeleteRequest) (*SdkCloudBackupSchedDeleteResponse, error)
+	// Enumerate cloud backup schedules
+	SchedEnumerate(context.Context, *SdkCloudBackupSchedEnumerateRequest) (*SdkCloudBackupSchedEnumerateResponse, error)
+}
+
+func RegisterOpenStorageCloudBackupServer(s *grpc.Server, srv OpenStorageCloudBackupServer) {
+	s.RegisterService(&_OpenStorageCloudBackup_serviceDesc, srv)
+}
+
+func _OpenStorageCloudBackup_Create_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCloudBackupCreateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCloudBackupServer).Create(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCloudBackup/Create",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCloudBackupServer).Create(ctx, req.(*SdkCloudBackupCreateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageCloudBackup_Restore_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCloudBackupRestoreRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCloudBackupServer).Restore(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCloudBackup/Restore",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCloudBackupServer).Restore(ctx, req.(*SdkCloudBackupRestoreRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageCloudBackup_Delete_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCloudBackupDeleteRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCloudBackupServer).Delete(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCloudBackup/Delete",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCloudBackupServer).Delete(ctx, req.(*SdkCloudBackupDeleteRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageCloudBackup_DeleteAll_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCloudBackupDeleteAllRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCloudBackupServer).DeleteAll(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCloudBackup/DeleteAll",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCloudBackupServer).DeleteAll(ctx, req.(*SdkCloudBackupDeleteAllRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageCloudBackup_EnumerateWithFilters_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCloudBackupEnumerateWithFiltersRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCloudBackupServer).EnumerateWithFilters(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCloudBackup/EnumerateWithFilters",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCloudBackupServer).EnumerateWithFilters(ctx, req.(*SdkCloudBackupEnumerateWithFiltersRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageCloudBackup_Status_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCloudBackupStatusRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCloudBackupServer).Status(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCloudBackup/Status",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCloudBackupServer).Status(ctx, req.(*SdkCloudBackupStatusRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageCloudBackup_Catalog_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCloudBackupCatalogRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCloudBackupServer).Catalog(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCloudBackup/Catalog",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCloudBackupServer).Catalog(ctx, req.(*SdkCloudBackupCatalogRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageCloudBackup_History_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCloudBackupHistoryRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCloudBackupServer).History(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCloudBackup/History",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCloudBackupServer).History(ctx, req.(*SdkCloudBackupHistoryRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageCloudBackup_StateChange_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCloudBackupStateChangeRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCloudBackupServer).StateChange(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCloudBackup/StateChange",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCloudBackupServer).StateChange(ctx, req.(*SdkCloudBackupStateChangeRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageCloudBackup_SchedCreate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCloudBackupSchedCreateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCloudBackupServer).SchedCreate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCloudBackup/SchedCreate",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCloudBackupServer).SchedCreate(ctx, req.(*SdkCloudBackupSchedCreateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageCloudBackup_SchedDelete_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCloudBackupSchedDeleteRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCloudBackupServer).SchedDelete(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCloudBackup/SchedDelete",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCloudBackupServer).SchedDelete(ctx, req.(*SdkCloudBackupSchedDeleteRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStorageCloudBackup_SchedEnumerate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkCloudBackupSchedEnumerateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStorageCloudBackupServer).SchedEnumerate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStorageCloudBackup/SchedEnumerate",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStorageCloudBackupServer).SchedEnumerate(ctx, req.(*SdkCloudBackupSchedEnumerateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+var _OpenStorageCloudBackup_serviceDesc = grpc.ServiceDesc{
+	ServiceName: "openstorage.api.OpenStorageCloudBackup",
+	HandlerType: (*OpenStorageCloudBackupServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "Create",
+			Handler:    _OpenStorageCloudBackup_Create_Handler,
+		},
+		{
+			MethodName: "Restore",
+			Handler:    _OpenStorageCloudBackup_Restore_Handler,
+		},
+		{
+			MethodName: "Delete",
+			Handler:    _OpenStorageCloudBackup_Delete_Handler,
+		},
+		{
+			MethodName: "DeleteAll",
+			Handler:    _OpenStorageCloudBackup_DeleteAll_Handler,
+		},
+		{
+			MethodName: "EnumerateWithFilters",
+			Handler:    _OpenStorageCloudBackup_EnumerateWithFilters_Handler,
+		},
+		{
+			MethodName: "Status",
+			Handler:    _OpenStorageCloudBackup_Status_Handler,
+		},
+		{
+			MethodName: "Catalog",
+			Handler:    _OpenStorageCloudBackup_Catalog_Handler,
+		},
+		{
+			MethodName: "History",
+			Handler:    _OpenStorageCloudBackup_History_Handler,
+		},
+		{
+			MethodName: "StateChange",
+			Handler:    _OpenStorageCloudBackup_StateChange_Handler,
+		},
+		{
+			MethodName: "SchedCreate",
+			Handler:    _OpenStorageCloudBackup_SchedCreate_Handler,
+		},
+		{
+			MethodName: "SchedDelete",
+			Handler:    _OpenStorageCloudBackup_SchedDelete_Handler,
+		},
+		{
+			MethodName: "SchedEnumerate",
+			Handler:    _OpenStorageCloudBackup_SchedEnumerate_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "api/api.proto",
+}
+
+// Client API for OpenStoragePolicy service
+
+type OpenStoragePolicyClient interface {
+	// Creates a storage policy
+	Create(ctx context.Context, in *SdkOpenStoragePolicyCreateRequest, opts ...grpc.CallOption) (*SdkOpenStoragePolicyCreateResponse, error)
+	// Enumerate returns a list of storage policies
+	Enumerate(ctx context.Context, in *SdkOpenStoragePolicyEnumerateRequest, opts ...grpc.CallOption) (*SdkOpenStoragePolicyEnumerateResponse, error)
+	// Inspect returns information about a specified storage policy
+	Inspect(ctx context.Context, in *SdkOpenStoragePolicyInspectRequest, opts ...grpc.CallOption) (*SdkOpenStoragePolicyInspectResponse, error)
+	// Updates specified storage policy
+	Update(ctx context.Context, in *SdkOpenStoragePolicyUpdateRequest, opts ...grpc.CallOption) (*SdkOpenStoragePolicyUpdateResponse, error)
+	// Deletes specified storage policy
+	Delete(ctx context.Context, in *SdkOpenStoragePolicyDeleteRequest, opts ...grpc.CallOption) (*SdkOpenStoragePolicyDeleteResponse, error)
+	// Set specified storage policy as default policy
+	SetDefault(ctx context.Context, in *SdkOpenStoragePolicySetDefaultRequest, opts ...grpc.CallOption) (*SdkOpenStoragePolicySetDefaultResponse, error)
+	// DefaultInspect return default storage policy if any, otherwise
+	// empty response
+	DefaultInspect(ctx context.Context, in *SdkOpenStoragePolicyDefaultInspectRequest, opts ...grpc.CallOption) (*SdkOpenStoragePolicyDefaultInspectResponse, error)
+	// Release specified storage policy constraint for volume
+	// creation
+	Release(ctx context.Context, in *SdkOpenStoragePolicyReleaseRequest, opts ...grpc.CallOption) (*SdkOpenStoragePolicyReleaseResponse, error)
+}
+
+type openStoragePolicyClient struct {
+	cc *grpc.ClientConn
+}
+
+func NewOpenStoragePolicyClient(cc *grpc.ClientConn) OpenStoragePolicyClient {
+	return &openStoragePolicyClient{cc}
+}
+
+func (c *openStoragePolicyClient) Create(ctx context.Context, in *SdkOpenStoragePolicyCreateRequest, opts ...grpc.CallOption) (*SdkOpenStoragePolicyCreateResponse, error) {
+	out := new(SdkOpenStoragePolicyCreateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStoragePolicy/Create", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStoragePolicyClient) Enumerate(ctx context.Context, in *SdkOpenStoragePolicyEnumerateRequest, opts ...grpc.CallOption) (*SdkOpenStoragePolicyEnumerateResponse, error) {
+	out := new(SdkOpenStoragePolicyEnumerateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStoragePolicy/Enumerate", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStoragePolicyClient) Inspect(ctx context.Context, in *SdkOpenStoragePolicyInspectRequest, opts ...grpc.CallOption) (*SdkOpenStoragePolicyInspectResponse, error) {
+	out := new(SdkOpenStoragePolicyInspectResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStoragePolicy/Inspect", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStoragePolicyClient) Update(ctx context.Context, in *SdkOpenStoragePolicyUpdateRequest, opts ...grpc.CallOption) (*SdkOpenStoragePolicyUpdateResponse, error) {
+	out := new(SdkOpenStoragePolicyUpdateResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStoragePolicy/Update", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStoragePolicyClient) Delete(ctx context.Context, in *SdkOpenStoragePolicyDeleteRequest, opts ...grpc.CallOption) (*SdkOpenStoragePolicyDeleteResponse, error) {
+	out := new(SdkOpenStoragePolicyDeleteResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStoragePolicy/Delete", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStoragePolicyClient) SetDefault(ctx context.Context, in *SdkOpenStoragePolicySetDefaultRequest, opts ...grpc.CallOption) (*SdkOpenStoragePolicySetDefaultResponse, error) {
+	out := new(SdkOpenStoragePolicySetDefaultResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStoragePolicy/SetDefault", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStoragePolicyClient) DefaultInspect(ctx context.Context, in *SdkOpenStoragePolicyDefaultInspectRequest, opts ...grpc.CallOption) (*SdkOpenStoragePolicyDefaultInspectResponse, error) {
+	out := new(SdkOpenStoragePolicyDefaultInspectResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStoragePolicy/DefaultInspect", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *openStoragePolicyClient) Release(ctx context.Context, in *SdkOpenStoragePolicyReleaseRequest, opts ...grpc.CallOption) (*SdkOpenStoragePolicyReleaseResponse, error) {
+	out := new(SdkOpenStoragePolicyReleaseResponse)
+	err := grpc.Invoke(ctx, "/openstorage.api.OpenStoragePolicy/Release", in, out, c.cc, opts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+// Server API for OpenStoragePolicy service
+
+type OpenStoragePolicyServer interface {
+	// Creates a storage policy
+	Create(context.Context, *SdkOpenStoragePolicyCreateRequest) (*SdkOpenStoragePolicyCreateResponse, error)
+	// Enumerate returns a list of storage policies
+	Enumerate(context.Context, *SdkOpenStoragePolicyEnumerateRequest) (*SdkOpenStoragePolicyEnumerateResponse, error)
+	// Inspect returns information about a specified storage policy
+	Inspect(context.Context, *SdkOpenStoragePolicyInspectRequest) (*SdkOpenStoragePolicyInspectResponse, error)
+	// Updates specified storage policy
+	Update(context.Context, *SdkOpenStoragePolicyUpdateRequest) (*SdkOpenStoragePolicyUpdateResponse, error)
+	// Deletes specified storage policy
+	Delete(context.Context, *SdkOpenStoragePolicyDeleteRequest) (*SdkOpenStoragePolicyDeleteResponse, error)
+	// Set specified storage policy as default policy
+	SetDefault(context.Context, *SdkOpenStoragePolicySetDefaultRequest) (*SdkOpenStoragePolicySetDefaultResponse, error)
+	// DefaultInspect return default storage policy if any, otherwise
+	// empty response
+	DefaultInspect(context.Context, *SdkOpenStoragePolicyDefaultInspectRequest) (*SdkOpenStoragePolicyDefaultInspectResponse, error)
+	// Release specified storage policy constraint for volume
+	// creation
+	Release(context.Context, *SdkOpenStoragePolicyReleaseRequest) (*SdkOpenStoragePolicyReleaseResponse, error)
+}
+
+func RegisterOpenStoragePolicyServer(s *grpc.Server, srv OpenStoragePolicyServer) {
+	s.RegisterService(&_OpenStoragePolicy_serviceDesc, srv)
+}
+
+func _OpenStoragePolicy_Create_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkOpenStoragePolicyCreateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStoragePolicyServer).Create(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStoragePolicy/Create",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStoragePolicyServer).Create(ctx, req.(*SdkOpenStoragePolicyCreateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStoragePolicy_Enumerate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkOpenStoragePolicyEnumerateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStoragePolicyServer).Enumerate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStoragePolicy/Enumerate",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStoragePolicyServer).Enumerate(ctx, req.(*SdkOpenStoragePolicyEnumerateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStoragePolicy_Inspect_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkOpenStoragePolicyInspectRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStoragePolicyServer).Inspect(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStoragePolicy/Inspect",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStoragePolicyServer).Inspect(ctx, req.(*SdkOpenStoragePolicyInspectRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStoragePolicy_Update_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkOpenStoragePolicyUpdateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStoragePolicyServer).Update(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStoragePolicy/Update",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStoragePolicyServer).Update(ctx, req.(*SdkOpenStoragePolicyUpdateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStoragePolicy_Delete_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkOpenStoragePolicyDeleteRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStoragePolicyServer).Delete(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStoragePolicy/Delete",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStoragePolicyServer).Delete(ctx, req.(*SdkOpenStoragePolicyDeleteRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStoragePolicy_SetDefault_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkOpenStoragePolicySetDefaultRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStoragePolicyServer).SetDefault(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStoragePolicy/SetDefault",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStoragePolicyServer).SetDefault(ctx, req.(*SdkOpenStoragePolicySetDefaultRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStoragePolicy_DefaultInspect_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkOpenStoragePolicyDefaultInspectRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStoragePolicyServer).DefaultInspect(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStoragePolicy/DefaultInspect",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStoragePolicyServer).DefaultInspect(ctx, req.(*SdkOpenStoragePolicyDefaultInspectRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _OpenStoragePolicy_Release_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(SdkOpenStoragePolicyReleaseRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(OpenStoragePolicyServer).Release(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: "/openstorage.api.OpenStoragePolicy/Release",
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(OpenStoragePolicyServer).Release(ctx, req.(*SdkOpenStoragePolicyReleaseRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+var _OpenStoragePolicy_serviceDesc = grpc.ServiceDesc{
+	ServiceName: "openstorage.api.OpenStoragePolicy",
+	HandlerType: (*OpenStoragePolicyServer)(nil),
+	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "Create",
+			Handler:    _OpenStoragePolicy_Create_Handler,
+		},
+		{
+			MethodName: "Enumerate",
+			Handler:    _OpenStoragePolicy_Enumerate_Handler,
+		},
+		{
+			MethodName: "Inspect",
+			Handler:    _OpenStoragePolicy_Inspect_Handler,
+		},
+		{
+			MethodName: "Update",
+			Handler:    _OpenStoragePolicy_Update_Handler,
+		},
+		{
+			MethodName: "Delete",
+			Handler:    _OpenStoragePolicy_Delete_Handler,
+		},
+		{
+			MethodName: "SetDefault",
+			Handler:    _OpenStoragePolicy_SetDefault_Handler,
+		},
+		{
+			MethodName: "DefaultInspect",
+			Handler:    _OpenStoragePolicy_DefaultInspect_Handler,
+		},
+		{
+			MethodName: "Release",
+			Handler:    _OpenStoragePolicy_Release_Handler,
+		},
+	},
+	Streams:  []grpc.StreamDesc{},
+	Metadata: "api/api.proto",
+}
+
+func init() { proto.RegisterFile("api/api.proto", fileDescriptor_api_05b7199aa6331e09) }
+
+var fileDescriptor_api_05b7199aa6331e09 = []byte{
+	// 12995 bytes of a gzipped FileDescriptorProto
+	0x1f, 0x8b, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0xff, 0xe4, 0xbd, 0x5b, 0x8c, 0x1c, 0x49,
+	0x76, 0x18, 0xca, 0xac, 0xea, 0x47, 0xf5, 0xe9, 0x57, 0x76, 0x90, 0xd3, 0x2c, 0x16, 0xdf, 0x39,
+	0xc3, 0x21, 0xa7, 0x87, 0xec, 0xe6, 0xf4, 0x90, 0x33, 0x43, 0x72, 0x66, 0x77, 0x9b, 0xdd, 0xd5,
+	0xec, 0x12, 0xfb, 0x35, 0x59, 0xdd, 0xe4, 0xcc, 0xea, 0x51, 0x9b, 0xac, 0x0a, 0xb2, 0x73, 0x58,
+	0x55, 0x59, 0x53, 0x99, 0xd5, 0x33, 0xbd, 0xbb, 0x23, 0x09, 0xc2, 0x15, 0x74, 0x2f, 0xb4, 0x57,
+	0xab, 0x95, 0xb4, 0x12, 0x56, 0x2b, 0xdd, 0x2b, 0xc3, 0x90, 0x60, 0xeb, 0x61, 0x58, 0xb2, 0x61,
+	0x58, 0x82, 0x2c, 0x01, 0xfb, 0x61, 0x59, 0xb2, 0x21, 0x7d, 0xc8, 0xfe, 0x32, 0xf4, 0x21, 0x58,
+	0x36, 0x24, 0xd8, 0xd0, 0x87, 0x61, 0x7f, 0x18, 0xb0, 0x61, 0x23, 0x4e, 0x44, 0x66, 0x46, 0xe4,
+	0xa3, 0x2a, 0x8b, 0xe4, 0xae, 0x3f, 0xfc, 0xd3, 0x5d, 0x11, 0x71, 0xe2, 0xc4, 0x89, 0x13, 0x27,
+	0x4e, 0x9c, 0x38, 0x11, 0x71, 0x12, 0xa6, 0xad, 0x8e, 0xbd, 0x64, 0x75, 0xec, 0xc5, 0x4e, 0xd7,
+	0xf1, 0x1c, 0x32, 0xeb, 0x74, 0x68, 0xdb, 0xf5, 0x9c, 0xae, 0xf5, 0x84, 0x2e, 0x5a, 0x1d, 0xbb,
+	0x74, 0xfe, 0x89, 0xe3, 0x3c, 0x69, 0xd2, 0x25, 0x2c, 0x7e, 0xd4, 0x7b, 0xbc, 0xe4, 0xd9, 0x2d,
+	0xea, 0x7a, 0x56, 0xab, 0xc3, 0x6b, 0x94, 0xce, 0x08, 0x00, 0xc4, 0xd3, 0x6e, 0x3b, 0x9e, 0xe5,
+	0xd9, 0x4e, 0xdb, 0xe5, 0xa5, 0xc6, 0xdf, 0xcd, 0xc3, 0x6c, 0x95, 0xa3, 0x33, 0xa9, 0xeb, 0xf4,
+	0xba, 0x75, 0x4a, 0x66, 0x20, 0x67, 0x37, 0x8a, 0xda, 0x05, 0xed, 0xca, 0x84, 0x99, 0xb3, 0x1b,
+	0x84, 0xc0, 0x48, 0xc7, 0xf2, 0x0e, 0x8a, 0x39, 0xcc, 0xc1, 0xdf, 0xe4, 0x2d, 0x18, 0x6b, 0xd1,
+	0x86, 0xdd, 0x6b, 0x15, 0xf3, 0x17, 0xb4, 0x2b, 0x33, 0xcb, 0xe7, 0x16, 0x23, 0x84, 0x2d, 0x0a,
+	0xac, 0x5b, 0x08, 0x65, 0x0a, 0x68, 0x32, 0x0f, 0x63, 0x4e, 0xbb, 0x69, 0xb7, 0x69, 0x71, 0xe4,
+	0x82, 0x76, 0xa5, 0x60, 0x8a, 0x14, 0x6b, 0xc3, 0x76, 0x3a, 0x6e, 0x71, 0xf4, 0x82, 0x76, 0x65,
+	0xc4, 0xc4, 0xdf, 0xe4, 0x34, 0x4c, 0xb8, 0xf4, 0xe3, 0xda, 0x27, 0x5d, 0xdb, 0xa3, 0xc5, 0xb1,
+	0x0b, 0xda, 0x15, 0xcd, 0x2c, 0xb8, 0xf4, 0xe3, 0x87, 0x2c, 0x4d, 0x4e, 0x01, 0xfb, 0x5d, 0xeb,
+	0x52, 0xab, 0x51, 0x1c, 0xc7, 0xb2, 0x71, 0x97, 0x7e, 0x6c, 0x52, 0xab, 0xc1, 0xda, 0xe8, 0x5a,
+	0xed, 0x86, 0xf9, 0xb0, 0x58, 0xc0, 0x02, 0x91, 0x62, 0x6d, 0xb8, 0xf6, 0x97, 0x69, 0x71, 0x82,
+	0xb7, 0xc1, 0x7e, 0xb3, 0xbc, 0x9e, 0x4b, 0x1b, 0x45, 0xe0, 0x79, 0xec, 0x37, 0xb9, 0x04, 0x33,
+	0x5d, 0xc1, 0xa6, 0x9a, 0xdb, 0xa1, 0xb4, 0x51, 0x9c, 0xc4, 0x9e, 0x4f, 0xfb, 0xb9, 0x55, 0x96,
+	0x49, 0xde, 0x86, 0x89, 0xa6, 0xe5, 0x7a, 0x35, 0xb7, 0x6e, 0xb5, 0x8b, 0x53, 0x17, 0xb4, 0x2b,
+	0x93, 0xcb, 0xa5, 0x45, 0xce, 0xec, 0x45, 0x7f, 0x34, 0x16, 0xf7, 0xfc, 0xd1, 0x30, 0x0b, 0x0c,
+	0xb8, 0x5a, 0xb7, 0xda, 0xa4, 0x04, 0x85, 0x16, 0xf5, 0xac, 0x86, 0xe5, 0x59, 0xc5, 0x69, 0xe4,
+	0x42, 0x90, 0x26, 0x27, 0x60, 0xb4, 0x6e, 0xd5, 0x0f, 0x68, 0x71, 0x06, 0x0b, 0x78, 0xc2, 0xf8,
+	0xd3, 0x1c, 0x4c, 0x0a, 0x7e, 0xee, 0x3a, 0x4e, 0x93, 0x8d, 0x50, 0x65, 0x0d, 0x47, 0x68, 0xd4,
+	0xcc, 0x55, 0xd6, 0xc8, 0x02, 0xe4, 0x57, 0x1d, 0x17, 0x07, 0x68, 0x66, 0xb9, 0x18, 0x1b, 0x8a,
+	0x55, 0xc7, 0xdd, 0x3b, 0xea, 0x50, 0x93, 0x01, 0xb1, 0x91, 0xdb, 0x1a, 0x6a, 0xe4, 0xf8, 0x7f,
+	0x72, 0x06, 0x26, 0x4c, 0xcb, 0x6e, 0x6c, 0xd2, 0x43, 0xda, 0xc4, 0xc1, 0x9b, 0x30, 0xc3, 0x0c,
+	0x56, 0xba, 0xe7, 0x78, 0x56, 0xb3, 0xca, 0x18, 0x3c, 0x8e, 0xcc, 0x0c, 0x33, 0x18, 0x97, 0xf7,
+	0x19, 0x97, 0x0b, 0x9c, 0xcb, 0xec, 0x37, 0xf9, 0x02, 0x8c, 0x35, 0xad, 0x47, 0xb4, 0xe9, 0x16,
+	0x27, 0x2e, 0xe4, 0xaf, 0x4c, 0x2e, 0x5f, 0x49, 0xa3, 0x83, 0xf5, 0x78, 0x71, 0x13, 0x41, 0xcb,
+	0x6d, 0xaf, 0x7b, 0x64, 0x8a, 0x7a, 0xa5, 0x5b, 0x30, 0x29, 0x65, 0x13, 0x1d, 0xf2, 0x4f, 0xe9,
+	0x91, 0x90, 0x5b, 0xf6, 0x93, 0x31, 0xf3, 0xd0, 0x6a, 0xf6, 0xa8, 0x90, 0x5c, 0x9e, 0xb8, 0x9d,
+	0x7b, 0x47, 0x33, 0xbe, 0x93, 0x83, 0xe9, 0x07, 0x4e, 0xb3, 0xd7, 0xa2, 0x9b, 0x4e, 0xdd, 0xf2,
+	0x9c, 0x2e, 0x23, 0xb1, 0x6d, 0xb5, 0xa8, 0xa8, 0x8e, 0xbf, 0xc9, 0x3e, 0x4c, 0x1f, 0x22, 0x50,
+	0x4d, 0x50, 0x9a, 0x43, 0x4a, 0xaf, 0xc7, 0x28, 0x55, 0x50, 0xf9, 0x29, 0x89, 0xe2, 0xa9, 0x43,
+	0x29, 0x8b, 0xbc, 0x03, 0x13, 0xce, 0x27, 0x6d, 0xda, 0x75, 0x0f, 0xec, 0x0e, 0x0e, 0x02, 0x13,
+	0x9c, 0x28, 0xca, 0x1d, 0x1f, 0xc2, 0x0c, 0x81, 0xc9, 0x55, 0x18, 0x7d, 0xd2, 0x75, 0x7a, 0x1d,
+	0xe4, 0xff, 0xe4, 0xf2, 0x7c, 0xac, 0xd6, 0x3d, 0x56, 0x6a, 0x72, 0x20, 0x72, 0x16, 0x40, 0x90,
+	0x6f, 0x37, 0xd8, 0xcc, 0xca, 0xb3, 0x21, 0xe3, 0x39, 0x95, 0x86, 0x5b, 0xfa, 0x3c, 0xcc, 0xc5,
+	0x28, 0x1d, 0x8a, 0x89, 0x0b, 0x70, 0x82, 0x23, 0xa8, 0xb4, 0xdd, 0x0e, 0xad, 0x7b, 0x3b, 0x1d,
+	0xd4, 0x2c, 0x8c, 0x95, 0x0d, 0x4a, 0x3b, 0x88, 0xa4, 0x60, 0xe2, 0x6f, 0xe3, 0x06, 0x8c, 0x55,
+	0xb9, 0x76, 0x99, 0x87, 0xb1, 0x8e, 0xd5, 0xa5, 0x6d, 0x4f, 0x34, 0x22, 0x52, 0x38, 0x3b, 0xd9,
+	0x5c, 0x13, 0x5a, 0x86, 0xfd, 0x36, 0x4e, 0xc2, 0x28, 0xf6, 0x28, 0xaa, 0x92, 0x8c, 0x35, 0x80,
+	0x8a, 0x53, 0xf5, 0xba, 0x96, 0x47, 0x9f, 0x1c, 0x31, 0x5d, 0x60, 0xb9, 0x47, 0xed, 0x7a, 0xcd,
+	0x76, 0x44, 0xa3, 0xe3, 0x98, 0xae, 0x38, 0x4c, 0x87, 0x50, 0xab, 0xdb, 0x3c, 0xaa, 0x59, 0xf5,
+	0xa7, 0x88, 0xba, 0x60, 0x16, 0x30, 0x63, 0xa5, 0xfe, 0xd4, 0xf8, 0x43, 0x00, 0xe0, 0x3d, 0xa8,
+	0x76, 0x68, 0x9d, 0xc9, 0x30, 0xed, 0x1c, 0xd0, 0x16, 0xed, 0x5a, 0x4d, 0x81, 0x27, 0xcc, 0x08,
+	0xb4, 0x47, 0x4e, 0xd2, 0x1e, 0x4b, 0x30, 0xf6, 0xd8, 0xe9, 0xb6, 0x2c, 0x4f, 0xcc, 0xa5, 0x93,
+	0xb1, 0x01, 0x59, 0xaf, 0xe2, 0xcc, 0x13, 0x60, 0x6c, 0x48, 0x1e, 0x35, 0x9d, 0xfa, 0xd3, 0x1a,
+	0xa2, 0x62, 0xa3, 0x98, 0x37, 0x27, 0x30, 0x07, 0xe7, 0xc9, 0x29, 0x28, 0x1c, 0x58, 0xb5, 0x26,
+	0x4e, 0xb1, 0x51, 0x2c, 0x1c, 0x3f, 0xb0, 0xf8, 0x04, 0x5b, 0x80, 0x7c, 0xdd, 0x71, 0x51, 0x0d,
+	0xf6, 0x9d, 0xe2, 0x75, 0xc7, 0x25, 0xb7, 0x00, 0x6c, 0xa7, 0xd6, 0xe9, 0x3a, 0x8f, 0xed, 0x26,
+	0x9f, 0x8d, 0x33, 0x09, 0x12, 0x56, 0x71, 0x76, 0x39, 0x84, 0x39, 0x61, 0xfb, 0x3f, 0xd9, 0xe8,
+	0x34, 0x68, 0xa3, 0xd7, 0xa1, 0x38, 0x57, 0x0b, 0xa6, 0x48, 0x91, 0xd7, 0x61, 0xce, 0x6d, 0x5b,
+	0x1d, 0xf7, 0xc0, 0xf1, 0x6a, 0x76, 0xdb, 0xa3, 0xdd, 0x43, 0xab, 0x89, 0x8a, 0x74, 0xda, 0xd4,
+	0xfd, 0x82, 0x8a, 0xc8, 0x27, 0x66, 0x74, 0xde, 0x00, 0xce, 0x9b, 0x6b, 0x29, 0xf3, 0x86, 0x31,
+	0x7f, 0xe0, 0xa4, 0x99, 0x87, 0x31, 0xf7, 0xc0, 0xea, 0x0a, 0x65, 0x5c, 0x30, 0x45, 0x8a, 0xbc,
+	0x0b, 0x93, 0x5d, 0xda, 0x69, 0xda, 0x75, 0xab, 0xe6, 0x52, 0x4f, 0xe8, 0xe1, 0xd3, 0xb1, 0x96,
+	0x4c, 0x0e, 0x53, 0xa5, 0x9e, 0x09, 0xdd, 0xe0, 0x37, 0xeb, 0x96, 0xf5, 0xe4, 0x49, 0x97, 0x3e,
+	0xe1, 0xda, 0x9e, 0x73, 0x7e, 0x9a, 0x77, 0x4b, 0x2a, 0x08, 0x74, 0x1c, 0x6d, 0xd7, 0xbb, 0x47,
+	0x1d, 0x8f, 0x36, 0x84, 0x7e, 0x0e, 0x33, 0xc8, 0x39, 0x80, 0x8e, 0xe5, 0xba, 0x9d, 0x83, 0xae,
+	0xe5, 0xd2, 0xe2, 0x2c, 0x8a, 0xaa, 0x94, 0xa3, 0x70, 0xd0, 0xad, 0x1f, 0xd0, 0x46, 0xaf, 0x49,
+	0x8b, 0x3a, 0x82, 0x05, 0x1c, 0xac, 0x8a, 0x7c, 0x36, 0xe9, 0xdc, 0xba, 0xd5, 0xa4, 0xc5, 0x39,
+	0xa4, 0x85, 0x27, 0x90, 0x07, 0x9e, 0x5d, 0x7f, 0x7a, 0x54, 0x24, 0x82, 0x07, 0x98, 0x0a, 0xd5,
+	0xc2, 0x4b, 0x59, 0xd4, 0xc2, 0x25, 0x98, 0xc1, 0x1f, 0x35, 0xda, 0x7e, 0xec, 0x74, 0xeb, 0xb4,
+	0x51, 0x9c, 0x47, 0x6c, 0xd3, 0x98, 0x5b, 0x16, 0x99, 0xac, 0x3f, 0x75, 0xa7, 0xd5, 0xe9, 0x52,
+	0x97, 0x69, 0xee, 0x93, 0x08, 0x22, 0xe5, 0xb0, 0x55, 0xac, 0x6e, 0xb9, 0x75, 0xab, 0x41, 0x1b,
+	0xc5, 0x22, 0x9f, 0x58, 0x7e, 0x9a, 0x14, 0x61, 0xfc, 0x23, 0xa7, 0xd7, 0x6d, 0x5b, 0xcd, 0xe2,
+	0x29, 0x3e, 0x1f, 0x45, 0x92, 0xd5, 0xe2, 0x03, 0x77, 0x78, 0xa3, 0x58, 0xe2, 0xb5, 0xfc, 0x34,
+	0x39, 0x0f, 0x93, 0x1f, 0xf7, 0x68, 0x8f, 0xd6, 0x1a, 0xb4, 0xe3, 0x1d, 0x14, 0x4f, 0x63, 0xd7,
+	0x01, 0xb3, 0xd6, 0x58, 0x0e, 0xb9, 0x05, 0xa7, 0x90, 0xb8, 0x5a, 0xaf, 0xed, 0xf6, 0x3a, 0x1d,
+	0xa7, 0xeb, 0xd1, 0x46, 0xed, 0xb1, 0x5b, 0xf3, 0x8e, 0x3a, 0xb4, 0x78, 0x06, 0xb1, 0xcd, 0x23,
+	0xc0, 0x7e, 0x58, 0xbe, 0x8e, 0xf3, 0x82, 0x8d, 0x5d, 0xdb, 0x69, 0xd8, 0x6e, 0xdd, 0xea, 0x36,
+	0x8a, 0x67, 0xf9, 0xd8, 0x05, 0x19, 0x4c, 0x88, 0x6c, 0xa7, 0xe6, 0x0a, 0x7d, 0x52, 0x3c, 0x97,
+	0x22, 0x44, 0xa1, 0xca, 0x31, 0xc1, 0x0e, 0xd5, 0xcf, 0x43, 0x20, 0x9d, 0xa6, 0x55, 0xa7, 0x2d,
+	0xda, 0xf6, 0x42, 0x24, 0xe7, 0x11, 0xc9, 0x95, 0x14, 0x99, 0xdf, 0xf5, 0x2b, 0x04, 0x18, 0xe7,
+	0x3a, 0xd1, 0x2c, 0x36, 0x52, 0xa2, 0x66, 0xad, 0xe3, 0x34, 0xed, 0xfa, 0x51, 0xf1, 0x02, 0x37,
+	0x44, 0x5c, 0x7f, 0x65, 0x64, 0x99, 0xea, 0x7a, 0x72, 0x71, 0x88, 0xf5, 0xe4, 0xf9, 0x97, 0x80,
+	0xff, 0x31, 0x0e, 0x7a, 0x38, 0x89, 0xf7, 0x3b, 0x0d, 0xcb, 0x63, 0xc2, 0x2b, 0x69, 0xca, 0x8d,
+	0x63, 0x42, 0x57, 0x9e, 0x8e, 0xea, 0xb6, 0x0d, 0x2d, 0xd4, 0x6e, 0x57, 0x33, 0x69, 0xb7, 0x8d,
+	0x1c, 0xd7, 0x6f, 0x77, 0x86, 0xd3, 0x6f, 0x1b, 0x79, 0x59, 0xc3, 0x15, 0x55, 0x0d, 0xb7, 0x31,
+	0x12, 0xe8, 0xb8, 0x6b, 0xa9, 0x3a, 0x6e, 0x63, 0x34, 0x41, 0xcb, 0x15, 0x55, 0x8d, 0xb4, 0x31,
+	0xf6, 0x82, 0x74, 0xd2, 0x85, 0xb8, 0x22, 0xd9, 0x18, 0x57, 0x54, 0xc9, 0xb5, 0x54, 0x55, 0xb2,
+	0x51, 0x48, 0x50, 0x26, 0xf3, 0x8a, 0x32, 0xd9, 0x98, 0xf0, 0xd5, 0x49, 0x51, 0x55, 0x27, 0x1b,
+	0x10, 0x28, 0x94, 0x45, 0x5f, 0xa1, 0x1c, 0xef, 0xa7, 0x50, 0x36, 0x26, 0x7d, 0x95, 0x52, 0x0a,
+	0xe7, 0x3b, 0x2a, 0x8a, 0x8d, 0xa9, 0x70, 0xc6, 0x9f, 0x91, 0x66, 0x3c, 0xea, 0x89, 0x8d, 0x69,
+	0x69, 0xce, 0x5f, 0x54, 0xe7, 0xfc, 0x29, 0xa4, 0x70, 0x46, 0x99, 0xf5, 0x8a, 0x78, 0x97, 0x86,
+	0x31, 0x97, 0xce, 0xc9, 0x93, 0xfe, 0x34, 0xb6, 0x3d, 0xdb, 0x67, 0xda, 0x9f, 0x19, 0x6a, 0xda,
+	0xdf, 0x05, 0x28, 0x30, 0xc1, 0xae, 0x39, 0x1d, 0xef, 0xee, 0x0c, 0x4c, 0xf9, 0xc2, 0x8d, 0xe9,
+	0x09, 0x18, 0xaf, 0x3b, 0x2e, 0xfe, 0xd4, 0x61, 0x26, 0x14, 0x56, 0xcc, 0x99, 0x02, 0xe0, 0x12,
+	0x87, 0xa9, 0x93, 0xf0, 0x52, 0x4c, 0xea, 0x7c, 0x30, 0xce, 0x26, 0x1f, 0x4d, 0x28, 0x01, 0xb1,
+	0x8a, 0xbe, 0x14, 0x60, 0xc1, 0x24, 0x4c, 0xe0, 0x00, 0x07, 0x58, 0x70, 0x50, 0xfd, 0x22, 0xae,
+	0xfb, 0x59, 0x62, 0x1a, 0x26, 0xc5, 0x20, 0xf9, 0x7d, 0xf0, 0x87, 0x05, 0xd3, 0x73, 0x30, 0x2b,
+	0x0d, 0x0d, 0x66, 0xcd, 0xc2, 0x74, 0xc0, 0x3d, 0x96, 0x61, 0xfc, 0xed, 0x94, 0x3c, 0xff, 0x85,
+	0x3e, 0xf2, 0xe7, 0xbf, 0x96, 0x3a, 0xff, 0x73, 0x29, 0xf3, 0x3f, 0xff, 0x2c, 0xf3, 0x7f, 0xe4,
+	0x59, 0xe7, 0xff, 0x68, 0x96, 0xf9, 0x3f, 0x96, 0x3a, 0xff, 0x3f, 0x88, 0x5a, 0x39, 0xe3, 0x68,
+	0xe5, 0xbc, 0xd9, 0xc7, 0xca, 0xe1, 0x0c, 0x1a, 0x68, 0xeb, 0x84, 0x9a, 0xa5, 0xd0, 0x5f, 0xb3,
+	0x4c, 0x3c, 0x8f, 0x66, 0x81, 0xac, 0x9a, 0x65, 0x72, 0xb0, 0x66, 0x99, 0x4a, 0xd3, 0x2c, 0xd3,
+	0x69, 0x9a, 0x65, 0x66, 0x68, 0xcd, 0x32, 0xdb, 0x4f, 0xb3, 0xe8, 0x83, 0x34, 0xcb, 0x5c, 0x82,
+	0x66, 0x39, 0x27, 0x1b, 0x74, 0xc4, 0xd7, 0x0f, 0xa1, 0x49, 0x77, 0x2d, 0xc9, 0x3a, 0x3c, 0x8e,
+	0x88, 0xf4, 0x04, 0xfb, 0x70, 0x07, 0xa6, 0x85, 0x42, 0xa0, 0x5d, 0xb6, 0x11, 0x2c, 0x2e, 0xa3,
+	0x64, 0x2e, 0x0c, 0x16, 0x08, 0xfe, 0x6f, 0xa7, 0x63, 0x4e, 0x31, 0x04, 0x3b, 0xa2, 0x3e, 0x79,
+	0x00, 0x73, 0x92, 0x56, 0x11, 0x48, 0xdf, 0x1c, 0x1a, 0xe9, 0xac, 0x98, 0x65, 0x01, 0xde, 0xf7,
+	0x61, 0xc6, 0x57, 0x10, 0x02, 0xe9, 0x8d, 0xa1, 0x91, 0x4e, 0x23, 0x86, 0x00, 0xe5, 0x01, 0x94,
+	0x92, 0xb4, 0x98, 0x40, 0x7f, 0x73, 0x68, 0xf4, 0xc5, 0xe8, 0x74, 0x0b, 0x5a, 0x52, 0x94, 0xfa,
+	0x5b, 0x38, 0x68, 0x73, 0x7d, 0x94, 0xfa, 0xdb, 0x43, 0x29, 0xf5, 0xe7, 0xb7, 0x88, 0x96, 0xa0,
+	0xe0, 0x77, 0x82, 0x4c, 0xc0, 0x68, 0xf9, 0xe3, 0x9e, 0xd5, 0xd4, 0x8f, 0x91, 0x49, 0x18, 0xdf,
+	0xb2, 0xdb, 0x76, 0xab, 0xd7, 0xd2, 0x35, 0x4c, 0x58, 0x9f, 0x62, 0x22, 0xf7, 0x7f, 0xe8, 0x32,
+	0x12, 0x4c, 0x32, 0x9f, 0x86, 0xd8, 0x44, 0x4b, 0x5e, 0x70, 0x0c, 0x80, 0x50, 0xb9, 0xb1, 0x61,
+	0x68, 0x3b, 0x0d, 0xea, 0x16, 0x35, 0x74, 0x6e, 0xf0, 0x84, 0xf1, 0x1b, 0x1a, 0xcc, 0x9a, 0xbd,
+	0xb6, 0x67, 0xb7, 0x68, 0xd5, 0xb3, 0x3c, 0xba, 0x65, 0x75, 0xc8, 0x43, 0x98, 0xee, 0xf2, 0xac,
+	0x9a, 0xcb, 0xf2, 0xb0, 0xc6, 0xe4, 0xf2, 0x72, 0x5c, 0x75, 0xaa, 0x15, 0x95, 0xb4, 0xd0, 0xd5,
+	0x5d, 0x29, 0x8b, 0x09, 0x4c, 0x0c, 0x64, 0x28, 0x81, 0xf9, 0xf6, 0x08, 0x4c, 0x04, 0xd6, 0x0b,
+	0x83, 0x43, 0xfb, 0x45, 0xd4, 0xe5, 0x09, 0xf2, 0x2e, 0x8c, 0x58, 0xf5, 0x26, 0x77, 0xf0, 0x25,
+	0xed, 0x29, 0x82, 0xfa, 0x8b, 0x2b, 0xf5, 0x3a, 0x75, 0xdd, 0x55, 0xa7, 0xed, 0x75, 0x9d, 0xa6,
+	0x89, 0xb5, 0x4a, 0x3f, 0x99, 0x87, 0x69, 0x25, 0x9f, 0x6c, 0xc2, 0x18, 0x8e, 0x9f, 0x2b, 0xd8,
+	0x70, 0x23, 0x2b, 0x46, 0xae, 0x9e, 0x7d, 0x3f, 0x1c, 0xc7, 0x41, 0x2c, 0x98, 0xae, 0x3b, 0xcd,
+	0xa6, 0xf5, 0xc8, 0xc1, 0x19, 0xea, 0xbb, 0xc9, 0xee, 0x64, 0x46, 0xba, 0x2a, 0xd7, 0xe6, 0xb8,
+	0x55, 0x8c, 0xa5, 0x2f, 0xc1, 0xa4, 0xd4, 0x72, 0x02, 0x7f, 0xef, 0xc8, 0xfc, 0x9d, 0x59, 0xbe,
+	0x34, 0xb0, 0x6d, 0xf4, 0x96, 0x84, 0xc3, 0x50, 0x7a, 0x02, 0x24, 0x4e, 0xc6, 0x77, 0xa1, 0x21,
+	0xe3, 0x2a, 0x40, 0x58, 0x40, 0x0a, 0x30, 0x62, 0x52, 0xab, 0xa1, 0x1f, 0x63, 0xca, 0x02, 0x3d,
+	0xdb, 0xba, 0xc6, 0x7e, 0xae, 0x34, 0x5a, 0x76, 0x5b, 0xcf, 0x19, 0xdf, 0x98, 0x80, 0x31, 0xae,
+	0x90, 0x62, 0x6e, 0xf9, 0x25, 0x18, 0xe3, 0x0e, 0x7b, 0x21, 0x16, 0x71, 0xe7, 0x13, 0xf7, 0xb8,
+	0x99, 0x02, 0x2c, 0x74, 0x13, 0xe4, 0xb3, 0xb8, 0x09, 0x4a, 0x50, 0xe8, 0x52, 0xab, 0xe1, 0xb4,
+	0x9b, 0x47, 0xc2, 0x57, 0x1f, 0xa4, 0xc9, 0x3b, 0x30, 0xde, 0xe4, 0xce, 0x4e, 0x34, 0xa2, 0x26,
+	0x13, 0x9c, 0xc8, 0x8a, 0x4b, 0xd4, 0xf4, 0xc1, 0xc9, 0x75, 0x18, 0xad, 0xb3, 0xc9, 0x82, 0x76,
+	0x55, 0x7f, 0x87, 0x39, 0x07, 0x24, 0x4b, 0x30, 0xe2, 0x76, 0x68, 0x1d, 0xb7, 0x79, 0x49, 0x8a,
+	0x3c, 0x5c, 0x43, 0x4c, 0x04, 0x64, 0x53, 0xa8, 0xe7, 0x5a, 0x4f, 0xa8, 0xf0, 0x36, 0xf3, 0x84,
+	0xea, 0xad, 0x9f, 0x18, 0xc2, 0x5b, 0x1f, 0xfa, 0xf8, 0x20, 0x9b, 0x8f, 0xef, 0x26, 0x33, 0x7e,
+	0x2c, 0xaf, 0xe7, 0xa2, 0xe1, 0x34, 0xb3, 0x7c, 0x36, 0x8d, 0x64, 0x04, 0x32, 0x05, 0x30, 0x59,
+	0x86, 0x51, 0xae, 0x99, 0xa6, 0xb0, 0xd6, 0x99, 0x3e, 0xb5, 0xa8, 0xc9, 0x41, 0xc9, 0x79, 0x98,
+	0xb4, 0x3c, 0xcf, 0x62, 0x5a, 0xbb, 0xe6, 0xb4, 0xd1, 0xd8, 0x9a, 0x30, 0xc1, 0xcf, 0xda, 0x69,
+	0x93, 0x55, 0x98, 0x09, 0x00, 0x38, 0xf6, 0x99, 0x14, 0xec, 0x2b, 0x08, 0xc6, 0xb1, 0x4f, 0xfb,
+	0x75, 0xaa, 0x7e, 0x2b, 0x0d, 0x7a, 0x68, 0xd7, 0x69, 0x0d, 0x8f, 0x81, 0x84, 0x6b, 0x8b, 0x67,
+	0xed, 0x5a, 0xde, 0x01, 0xb9, 0x0a, 0xc4, 0xa5, 0xf5, 0x5e, 0x97, 0xe9, 0xf8, 0x10, 0xce, 0xf7,
+	0x6d, 0x61, 0xc9, 0x5a, 0x08, 0x1d, 0x10, 0xcd, 0xc1, 0xe6, 0x50, 0x75, 0x0b, 0xa2, 0x11, 0x60,
+	0x23, 0x00, 0xb0, 0xdb, 0x8f, 0x9d, 0x22, 0x41, 0x6d, 0x72, 0x39, 0x85, 0x1f, 0x82, 0xf0, 0x4a,
+	0xfb, 0xb1, 0xc3, 0x35, 0x87, 0xc0, 0xc4, 0x32, 0xc8, 0xe7, 0x60, 0x4a, 0x32, 0x97, 0xdd, 0xe2,
+	0x71, 0x44, 0xd5, 0xd7, 0x5e, 0x9e, 0x0c, 0xed, 0x65, 0x97, 0x94, 0xa3, 0xab, 0xc6, 0x09, 0x44,
+	0x70, 0x61, 0xd0, 0xaa, 0xa1, 0xae, 0x11, 0x4c, 0x22, 0x69, 0xb7, 0xeb, 0x74, 0xd1, 0x3f, 0x37,
+	0x61, 0xf2, 0x04, 0xf9, 0x3e, 0xd0, 0xc5, 0xfe, 0xa1, 0xee, 0xb4, 0xdd, 0x5e, 0x8b, 0x76, 0xdd,
+	0xe2, 0x3c, 0xe2, 0x3f, 0x9f, 0xd2, 0xd7, 0x55, 0x01, 0x67, 0xce, 0x1e, 0x2a, 0x69, 0x97, 0x8d,
+	0xc0, 0x63, 0xb7, 0xd6, 0xa5, 0x68, 0x49, 0x74, 0xe9, 0xc7, 0x3d, 0xbb, 0x1b, 0x38, 0xed, 0xf4,
+	0xc7, 0xae, 0x89, 0x05, 0xa6, 0xc8, 0x2f, 0xbd, 0x07, 0xb3, 0x11, 0xae, 0x0d, 0xb5, 0x62, 0xfd,
+	0xff, 0x39, 0x18, 0x65, 0x1d, 0x73, 0x19, 0x0c, 0xd3, 0x09, 0x2e, 0xdf, 0xea, 0x99, 0x3c, 0x41,
+	0x4e, 0xc2, 0x38, 0xfb, 0x51, 0x6b, 0xb9, 0xc2, 0x59, 0x3e, 0xc6, 0x92, 0x5b, 0x2e, 0x39, 0x0b,
+	0x80, 0x05, 0x8f, 0x8e, 0x3c, 0xca, 0x37, 0x7b, 0x23, 0xe6, 0x04, 0xcb, 0xb9, 0xcb, 0x32, 0xc8,
+	0x3c, 0x8c, 0xe1, 0x59, 0x9f, 0x8b, 0xfa, 0x66, 0xc4, 0x14, 0x29, 0x72, 0x0a, 0x0a, 0xf8, 0x8b,
+	0x21, 0xe4, 0xe7, 0x83, 0xe3, 0x98, 0xde, 0x72, 0x99, 0x2c, 0xf1, 0x22, 0x8e, 0x72, 0x0c, 0x4b,
+	0x01, 0xb3, 0x38, 0xce, 0xf3, 0x68, 0x0d, 0x76, 0xba, 0xce, 0x93, 0x2e, 0x75, 0x5d, 0x71, 0x32,
+	0x05, 0xb8, 0x1b, 0xc4, 0x1c, 0x72, 0x1c, 0x46, 0x6d, 0x87, 0x61, 0x2e, 0xf8, 0x27, 0x8f, 0x9c,
+	0x50, 0x44, 0x58, 0xc3, 0xb3, 0x41, 0x7e, 0x5e, 0x38, 0x81, 0x39, 0x78, 0x74, 0xc5, 0x90, 0xfa,
+	0x26, 0x56, 0xcb, 0x15, 0x67, 0x87, 0xe0, 0x67, 0x6d, 0xb9, 0xc6, 0x8f, 0x6a, 0x30, 0xb7, 0x6a,
+	0x75, 0xac, 0xba, 0xed, 0x1d, 0xed, 0x33, 0xf5, 0x83, 0xd2, 0x78, 0x19, 0x66, 0xe9, 0xa7, 0xf5,
+	0x66, 0xcf, 0xb5, 0x0f, 0x7d, 0x82, 0x35, 0x74, 0xf2, 0xcf, 0x04, 0xd9, 0x9c, 0xe8, 0x8b, 0xbe,
+	0x09, 0x25, 0xa0, 0x70, 0xbb, 0x6c, 0x4e, 0xf2, 0xbc, 0xa0, 0x5f, 0x9e, 0xe3, 0x59, 0x4d, 0x89,
+	0x97, 0x79, 0x13, 0x30, 0x0b, 0x01, 0x8c, 0x7f, 0xad, 0x81, 0x5e, 0x6d, 0x3c, 0xad, 0x2a, 0x9e,
+	0xc2, 0xa4, 0x43, 0xae, 0x5b, 0x30, 0x26, 0x9c, 0x8b, 0x7c, 0x19, 0xb9, 0x38, 0xd0, 0x4a, 0x37,
+	0x45, 0x05, 0x36, 0xfc, 0xe8, 0x6e, 0xc5, 0xe6, 0x0b, 0x26, 0x4f, 0x30, 0xea, 0xad, 0x66, 0xd3,
+	0xf9, 0xa4, 0xd6, 0x43, 0x77, 0xa0, 0x58, 0x3c, 0x26, 0x31, 0x4f, 0x78, 0x08, 0x15, 0x97, 0xce,
+	0xe8, 0x10, 0x2e, 0x1d, 0xe3, 0x9f, 0xe5, 0x61, 0x74, 0xa5, 0x49, 0xbb, 0x9e, 0xb4, 0x1c, 0xe6,
+	0x71, 0x39, 0xbc, 0x05, 0x05, 0x97, 0x1e, 0xd2, 0xae, 0xed, 0x1d, 0x89, 0xb5, 0x39, 0xae, 0x78,
+	0xab, 0x02, 0x00, 0xf5, 0x75, 0x00, 0xce, 0x86, 0xdb, 0x62, 0x38, 0xb9, 0x23, 0x99, 0xf3, 0x72,
+	0x02, 0x73, 0x70, 0x8d, 0x2e, 0xc2, 0x78, 0x8b, 0xba, 0xb8, 0xa4, 0xf0, 0x73, 0x4f, 0x3f, 0xc9,
+	0xfa, 0x11, 0x1c, 0xb7, 0x07, 0xfd, 0x48, 0x5f, 0x54, 0x42, 0x60, 0x36, 0x7e, 0x5d, 0x71, 0xde,
+	0x5e, 0xb3, 0x1b, 0x28, 0xb8, 0x13, 0x6c, 0xaf, 0xce, 0xb3, 0x2a, 0xd8, 0x1d, 0x3f, 0x25, 0x3c,
+	0x9c, 0x67, 0x13, 0xd4, 0x16, 0x07, 0xe0, 0xdd, 0xf1, 0xc1, 0x19, 0xbd, 0xf5, 0x26, 0x0d, 0xfd,
+	0x07, 0xa6, 0x9f, 0x64, 0xb3, 0xdc, 0xf3, 0x9a, 0x42, 0xa0, 0xd9, 0x4f, 0xd6, 0xf5, 0x5e, 0xdb,
+	0xfe, 0xb8, 0x47, 0x6b, 0x9e, 0xf5, 0x84, 0xbb, 0x04, 0xcc, 0x09, 0x9e, 0xb3, 0x67, 0x3d, 0xc1,
+	0xe3, 0x68, 0xa7, 0xd7, 0xf6, 0x70, 0x29, 0xcb, 0x9b, 0x3c, 0x41, 0x6e, 0x01, 0x3c, 0xb6, 0xbb,
+	0x6c, 0x31, 0xa5, 0x34, 0xcb, 0xd1, 0xf7, 0x04, 0x42, 0x57, 0x29, 0x6d, 0x1b, 0x3f, 0xae, 0xc1,
+	0x5c, 0xb5, 0xf1, 0x14, 0x87, 0xd0, 0x65, 0x10, 0xd5, 0x8e, 0xd5, 0x66, 0x08, 0x5d, 0xcf, 0x62,
+	0x03, 0x60, 0x0b, 0xe9, 0x1c, 0x80, 0x10, 0xa1, 0x59, 0x9a, 0xdc, 0x84, 0x02, 0x6d, 0x37, 0x78,
+	0xc5, 0xdc, 0xc0, 0x8a, 0xe3, 0xb4, 0xdd, 0x60, 0x29, 0x63, 0x1b, 0x48, 0x40, 0xc6, 0x2a, 0xeb,
+	0x14, 0xd2, 0x71, 0x1a, 0x26, 0x5a, 0x76, 0xbb, 0xc6, 0xbb, 0xcc, 0x45, 0xab, 0xd0, 0xb2, 0xdb,
+	0x08, 0x80, 0x85, 0xd6, 0xa7, 0xa2, 0x30, 0x27, 0x0a, 0xad, 0x4f, 0xb1, 0xd0, 0xf8, 0x7a, 0x0e,
+	0x66, 0x03, 0x84, 0xfc, 0x20, 0x94, 0xdc, 0x87, 0x39, 0x86, 0xcd, 0x17, 0x33, 0x2e, 0x5d, 0x5a,
+	0x06, 0xd1, 0xdc, 0x38, 0x66, 0xce, 0xb6, 0xec, 0xb6, 0x9c, 0x45, 0xce, 0x03, 0xd8, 0x6e, 0xcd,
+	0x1f, 0x57, 0x3c, 0xc9, 0xdc, 0x38, 0x66, 0x4e, 0xd8, 0xee, 0xaa, 0x18, 0xdb, 0x15, 0x2e, 0x8b,
+	0x35, 0xb7, 0x63, 0xb5, 0x85, 0x85, 0x67, 0xc4, 0x5b, 0x89, 0xb2, 0x7e, 0xe3, 0x98, 0x59, 0xf0,
+	0xfc, 0x61, 0x58, 0x03, 0xc0, 0xde, 0x71, 0x1c, 0xfc, 0x8c, 0xf9, 0xe5, 0x74, 0x1c, 0x01, 0xdf,
+	0x18, 0x21, 0x75, 0x3f, 0x71, 0x77, 0x14, 0xf2, 0x6c, 0xa7, 0xf6, 0x25, 0x28, 0x05, 0x90, 0xb2,
+	0xa0, 0xbe, 0xdf, 0xa3, 0xdd, 0x23, 0x72, 0x17, 0xa6, 0x03, 0xf9, 0xef, 0xcb, 0x17, 0x45, 0xc6,
+	0xa7, 0xba, 0x52, 0xca, 0xf8, 0x2a, 0x9c, 0x0c, 0x5a, 0x58, 0xf1, 0x67, 0xeb, 0x0b, 0x43, 0x1f,
+	0xd1, 0x0a, 0xb9, 0x88, 0x56, 0x30, 0xfe, 0x3f, 0x0d, 0x8a, 0xb1, 0x0e, 0x56, 0x1a, 0xdf, 0xab,
+	0xf6, 0xa3, 0x1a, 0x24, 0x1f, 0xd5, 0x20, 0xc6, 0x5f, 0xe4, 0x60, 0x26, 0x20, 0x90, 0x93, 0xf5,
+	0x83, 0x70, 0x5c, 0x21, 0xab, 0xf6, 0x31, 0xcb, 0x16, 0x13, 0xee, 0xf5, 0xf4, 0x91, 0x8e, 0x8d,
+	0xdf, 0xc6, 0x31, 0x73, 0xae, 0x1b, 0x1b, 0xd4, 0x3d, 0xd0, 0x43, 0x8a, 0x05, 0xee, 0xb4, 0x2d,
+	0x6b, 0xca, 0xc8, 0x6d, 0x1c, 0x33, 0x67, 0x2c, 0x75, 0x2c, 0x1f, 0xc2, 0x9c, 0xd4, 0x51, 0x81,
+	0x96, 0x0b, 0xf8, 0x6b, 0x83, 0x49, 0x16, 0x23, 0xc2, 0xa6, 0x54, 0x37, 0x32, 0x48, 0x37, 0x60,
+	0xc4, 0xe9, 0x78, 0xcc, 0xda, 0x48, 0x36, 0xea, 0x22, 0xf3, 0xd9, 0x44, 0xe8, 0xbb, 0xe3, 0x30,
+	0x8a, 0x24, 0x18, 0x16, 0xbc, 0x12, 0x40, 0x94, 0xdb, 0xcc, 0x0e, 0xb3, 0x3c, 0xfa, 0xd0, 0xf6,
+	0x0e, 0xd6, 0xed, 0xa6, 0x47, 0xbb, 0x2e, 0x33, 0xb7, 0xa8, 0xcb, 0xb4, 0xe5, 0x38, 0xab, 0x60,
+	0x53, 0x7f, 0xb7, 0x7d, 0x3e, 0xbd, 0x25, 0x24, 0xcc, 0xf4, 0xe1, 0x8d, 0x87, 0x70, 0x69, 0x40,
+	0x13, 0x6e, 0xc7, 0x69, 0xbb, 0x94, 0x2c, 0xc2, 0x18, 0x72, 0xcd, 0x6f, 0x22, 0xbe, 0xb7, 0x43,
+	0x24, 0xa6, 0x80, 0x32, 0xaa, 0x30, 0x1f, 0x20, 0x5e, 0xa3, 0x4d, 0xea, 0xd1, 0x17, 0x40, 0xed,
+	0x29, 0x69, 0x3e, 0xfa, 0x48, 0x39, 0x7d, 0xc6, 0x5b, 0x30, 0xc6, 0xf3, 0xd9, 0x26, 0x14, 0x69,
+	0x18, 0x40, 0x28, 0x07, 0x32, 0xfe, 0x55, 0x0e, 0x66, 0x77, 0x1e, 0x7d, 0x44, 0xeb, 0x1e, 0x03,
+	0xe1, 0x66, 0x14, 0x81, 0x91, 0x5e, 0x2f, 0xd8, 0x09, 0xe3, 0x6f, 0xa6, 0x9b, 0x83, 0xab, 0x2e,
+	0xc2, 0x60, 0x2d, 0xf8, 0x37, 0x5d, 0xd8, 0x7a, 0x48, 0xdb, 0xd6, 0xa3, 0x26, 0x6d, 0x08, 0x43,
+	0xc5, 0x4f, 0xf2, 0x03, 0x75, 0xdc, 0xaa, 0xf1, 0x85, 0xdd, 0xdf, 0x8b, 0xcd, 0xc3, 0x98, 0x55,
+	0x67, 0x63, 0x2e, 0x6e, 0x61, 0x88, 0x14, 0x4e, 0x49, 0xdc, 0xbb, 0xd7, 0x98, 0xb1, 0xcc, 0x17,
+	0xed, 0x09, 0x9e, 0x73, 0x9f, 0xa2, 0x1d, 0xe1, 0xd2, 0x7a, 0x97, 0x7a, 0x58, 0x3c, 0xce, 0x8b,
+	0x79, 0x0e, 0x2b, 0xc6, 0xfb, 0x03, 0x8d, 0x8e, 0x63, 0xb7, 0x3d, 0x66, 0x6e, 0xe2, 0x75, 0x9c,
+	0x20, 0x83, 0xbc, 0x06, 0x7a, 0xbd, 0xd7, 0xed, 0xd2, 0xb6, 0x57, 0xf3, 0x33, 0x71, 0xa1, 0x9e,
+	0x30, 0x67, 0x45, 0x7e, 0x59, 0x64, 0xe3, 0x0e, 0x8a, 0x93, 0xd1, 0x71, 0xba, 0x7c, 0x5f, 0x9a,
+	0x37, 0x05, 0x65, 0xbb, 0x4e, 0xd7, 0xc3, 0x1b, 0x70, 0xf4, 0x09, 0xa3, 0x9f, 0xdf, 0x5c, 0x13,
+	0x29, 0xe3, 0xb7, 0x35, 0x38, 0x2e, 0xb6, 0x12, 0x5d, 0x6a, 0x85, 0x83, 0x2e, 0xed, 0xe7, 0xb5,
+	0xe1, 0xf6, 0xf3, 0x43, 0x3b, 0x21, 0xfc, 0xed, 0x7c, 0x3e, 0xe3, 0x76, 0xde, 0x78, 0x15, 0x66,
+	0x78, 0x5e, 0x20, 0xec, 0xc1, 0x76, 0x4a, 0x93, 0xb6, 0x53, 0x46, 0xc7, 0xbf, 0x8d, 0xe4, 0x77,
+	0x4d, 0x40, 0x47, 0xdd, 0x26, 0x1b, 0x20, 0x76, 0x4f, 0x6c, 0xbb, 0x84, 0x20, 0x82, 0xf4, 0xb4,
+	0x5d, 0x97, 0x8f, 0xc9, 0x9c, 0x39, 0x54, 0xd2, 0xc6, 0x1f, 0x6b, 0xbe, 0xb3, 0x18, 0xb7, 0x79,
+	0x2b, 0x5c, 0x46, 0x6e, 0xc3, 0x18, 0xdf, 0x81, 0x0a, 0x9d, 0x6f, 0xa4, 0xa0, 0xe5, 0xe0, 0xbb,
+	0x56, 0xd7, 0x6a, 0x99, 0xa2, 0x06, 0x79, 0x07, 0x46, 0x5b, 0x81, 0x79, 0x91, 0xad, 0x2a, 0xaf,
+	0xc0, 0x44, 0x0f, 0x7f, 0xf0, 0x3d, 0x35, 0x5f, 0x0c, 0x26, 0x30, 0xc7, 0xdf, 0x73, 0xcb, 0x5b,
+	0xf3, 0x91, 0xe8, 0x16, 0xde, 0xf8, 0xc3, 0x5c, 0x70, 0x90, 0x47, 0xbd, 0x17, 0x21, 0x16, 0x7c,
+	0x94, 0x73, 0x59, 0x9d, 0x36, 0xb7, 0x83, 0x19, 0x97, 0x66, 0xba, 0xc4, 0x38, 0x1d, 0xcc, 0xca,
+	0x0d, 0x18, 0x77, 0xf8, 0xd5, 0x33, 0xa1, 0xca, 0x17, 0xd3, 0x2a, 0x07, 0x5d, 0x5b, 0x14, 0x77,
+	0xd5, 0xb8, 0xcb, 0xc0, 0xaf, 0x5e, 0xba, 0x0d, 0x53, 0x72, 0xc1, 0x50, 0xbb, 0xe2, 0x9f, 0x0a,
+	0xa5, 0x81, 0x35, 0x23, 0xa4, 0x6f, 0x09, 0xc6, 0xb8, 0xd4, 0x08, 0x0e, 0x9e, 0x4c, 0x13, 0x32,
+	0x01, 0xf6, 0x02, 0xc5, 0xf3, 0xe7, 0x98, 0xa9, 0xdd, 0xb6, 0x3a, 0xea, 0x54, 0x8f, 0x4e, 0x07,
+	0x69, 0x8c, 0x73, 0xc3, 0x8d, 0xb1, 0xec, 0x20, 0xcc, 0x47, 0x1c, 0x84, 0xa7, 0xa0, 0xd0, 0x76,
+	0x6a, 0x5d, 0xea, 0x75, 0x7d, 0xe7, 0xe1, 0x78, 0xdb, 0x31, 0x59, 0xd2, 0xf8, 0x18, 0x88, 0x4c,
+	0x95, 0xe0, 0xd3, 0xf7, 0xc3, 0xbc, 0xef, 0x0c, 0xc1, 0x82, 0xb0, 0xf7, 0x9c, 0x6f, 0x97, 0xd2,
+	0x5c, 0x22, 0x0a, 0x1a, 0xf3, 0xc4, 0x61, 0x42, 0xae, 0xe1, 0xf9, 0xd7, 0xfc, 0x70, 0xfd, 0x50,
+	0xd6, 0x0a, 0x2d, 0xb2, 0x56, 0x24, 0xdd, 0x75, 0xbe, 0x09, 0xe3, 0xa2, 0xe1, 0x2c, 0x5a, 0xcb,
+	0x87, 0x35, 0x7e, 0x4b, 0xf3, 0x35, 0x97, 0xef, 0xa7, 0x49, 0xdc, 0x7f, 0x9f, 0x81, 0x09, 0xf6,
+	0xdf, 0xed, 0x58, 0x75, 0x5f, 0xaa, 0xc2, 0x0c, 0x56, 0x23, 0xd8, 0x94, 0x4e, 0x98, 0xf8, 0x9b,
+	0x9c, 0x84, 0xf1, 0xb6, 0xd3, 0x40, 0xf2, 0xc5, 0xb2, 0xc5, 0x92, 0x95, 0x06, 0x53, 0x02, 0xb8,
+	0x53, 0xae, 0x61, 0x23, 0xa3, 0x1c, 0x17, 0xe6, 0x6c, 0xb3, 0x96, 0x82, 0x62, 0xc4, 0x38, 0x26,
+	0x15, 0xa3, 0x41, 0xdb, 0x00, 0x72, 0xaf, 0x6b, 0x75, 0x0e, 0xd6, 0xba, 0xf6, 0x21, 0xed, 0xae,
+	0x1e, 0x58, 0xed, 0x27, 0xd4, 0x0d, 0x18, 0xa2, 0x49, 0x0c, 0xb9, 0x0d, 0x23, 0x4f, 0xed, 0x76,
+	0x43, 0x68, 0xa9, 0x57, 0x13, 0xfc, 0xc8, 0x11, 0x34, 0x68, 0xdd, 0x62, 0x1d, 0xe3, 0x32, 0xcc,
+	0xae, 0x36, 0x7b, 0xae, 0x47, 0xbb, 0x03, 0xf4, 0xf9, 0xcf, 0x6b, 0x30, 0xcd, 0x26, 0xfa, 0x61,
+	0x20, 0xba, 0x1b, 0x50, 0x30, 0xe9, 0xc7, 0xd4, 0xf5, 0xee, 0x3f, 0x10, 0xd6, 0xc3, 0xd5, 0xb8,
+	0xf5, 0x20, 0xd7, 0x58, 0xf4, 0xc1, 0xf9, 0x34, 0x0f, 0x6a, 0x97, 0xee, 0xc0, 0xb4, 0x52, 0x24,
+	0x4f, 0xf4, 0xfc, 0xa0, 0x89, 0xfe, 0x65, 0x98, 0x51, 0x5a, 0x71, 0x89, 0x01, 0x53, 0xe2, 0xf7,
+	0xaa, 0xb4, 0x73, 0x54, 0xf2, 0xc8, 0x5a, 0xa4, 0x37, 0xe2, 0x90, 0xe4, 0x5c, 0xff, 0x1e, 0x98,
+	0x6a, 0x25, 0xe3, 0xcf, 0x34, 0x98, 0x47, 0x2f, 0xfd, 0xe0, 0x89, 0x7d, 0x1f, 0xc6, 0x36, 0xe5,
+	0x5b, 0xcb, 0x6f, 0x26, 0xbb, 0xfb, 0x63, 0x88, 0xd4, 0xab, 0xd6, 0xe2, 0x46, 0x82, 0x7a, 0x95,
+	0x38, 0x1f, 0xbd, 0x4a, 0xfc, 0x1c, 0x37, 0xb1, 0xff, 0x46, 0x83, 0x93, 0x31, 0x42, 0x84, 0x60,
+	0xec, 0xc3, 0x84, 0x7f, 0x34, 0xe9, 0x5b, 0xa3, 0x6f, 0x0f, 0xee, 0x05, 0xaf, 0xbc, 0x58, 0xf5,
+	0x6b, 0xf2, 0x9e, 0x84, 0x98, 0x42, 0x79, 0xcb, 0x49, 0xf2, 0x56, 0xb2, 0x60, 0x46, 0xad, 0x92,
+	0xd0, 0x8d, 0x5b, 0x72, 0x37, 0x12, 0xf7, 0xc6, 0x31, 0x3a, 0xe4, 0xbe, 0xfe, 0xfd, 0xd1, 0xe0,
+	0x1a, 0xff, 0xb6, 0xd3, 0x88, 0x9b, 0x26, 0x3a, 0xe4, 0xeb, 0x9d, 0x1e, 0x22, 0xd7, 0x4c, 0xf6,
+	0x13, 0x7d, 0x0e, 0xb4, 0x55, 0x43, 0xbf, 0x9e, 0x70, 0x98, 0x16, 0x5a, 0xb4, 0x85, 0x37, 0xeb,
+	0x99, 0x92, 0x65, 0x85, 0xe8, 0xa3, 0xe4, 0x1e, 0xd3, 0xf1, 0x16, 0x6d, 0xa1, 0x87, 0x52, 0x14,
+	0x3d, 0xee, 0x52, 0xea, 0xbb, 0x4c, 0x5b, 0xb4, 0xb5, 0xde, 0xa5, 0x78, 0xc7, 0xd8, 0x3a, 0x7c,
+	0x52, 0x6b, 0x3a, 0x16, 0x77, 0x3b, 0xe5, 0xcd, 0x71, 0xeb, 0xf0, 0xc9, 0xa6, 0x63, 0xf1, 0x13,
+	0x25, 0x6e, 0x0e, 0x8f, 0xa7, 0x1c, 0x75, 0x44, 0xce, 0x2c, 0xde, 0x83, 0xd1, 0x86, 0xed, 0x3e,
+	0xf5, 0xaf, 0xf0, 0x5f, 0x4e, 0xbb, 0xc2, 0xcf, 0x7a, 0xbb, 0xb8, 0xc6, 0x20, 0xf9, 0x60, 0xf0,
+	0x5a, 0x64, 0x19, 0x46, 0x3b, 0x8e, 0x13, 0xdc, 0x0f, 0x3e, 0xd3, 0xef, 0x05, 0x80, 0xc9, 0x41,
+	0x99, 0xf2, 0x6b, 0x3d, 0x69, 0x79, 0x35, 0xbb, 0xe3, 0xdb, 0xb6, 0x2c, 0x59, 0xe9, 0xb0, 0x82,
+	0x86, 0xe5, 0x59, 0xac, 0x60, 0x8a, 0x17, 0xb0, 0x64, 0x05, 0x0f, 0xb2, 0x0e, 0x1c, 0xd7, 0x43,
+	0x9d, 0xc8, 0xcf, 0x2e, 0x82, 0x34, 0xd9, 0x82, 0x49, 0x54, 0xa5, 0xe2, 0x06, 0x8f, 0x9e, 0xa2,
+	0x55, 0xe4, 0x6e, 0xb0, 0x3f, 0xf2, 0x14, 0x81, 0x76, 0x90, 0x41, 0x16, 0xe1, 0xb8, 0x7f, 0x84,
+	0xde, 0xad, 0x21, 0x62, 0x6c, 0x75, 0x0e, 0x5b, 0x9d, 0x0b, 0x8a, 0x18, 0x0a, 0xa6, 0x91, 0x4b,
+	0x5f, 0x04, 0x08, 0xb9, 0x92, 0x20, 0x6f, 0x6f, 0xa9, 0xf2, 0x76, 0x21, 0x8d, 0x30, 0x7f, 0xb3,
+	0x2b, 0x1f, 0x68, 0xbe, 0x07, 0xb3, 0x11, 0x52, 0x87, 0x9a, 0x97, 0x14, 0x66, 0x04, 0x72, 0xa1,
+	0xae, 0x25, 0xe9, 0xd0, 0xb2, 0x49, 0x07, 0x17, 0xef, 0x9c, 0xfc, 0x8e, 0x08, 0xd9, 0x91, 0x0f,
+	0x57, 0x3f, 0xa3, 0x05, 0x17, 0xab, 0x8d, 0xa7, 0x3b, 0x1d, 0xda, 0x56, 0x3c, 0xd5, 0xaa, 0x6a,
+	0xdb, 0x88, 0xdd, 0x83, 0xd5, 0x52, 0x5c, 0xd5, 0x51, 0x8f, 0x77, 0xe4, 0xaa, 0xac, 0xf1, 0x0a,
+	0x18, 0xfd, 0x9a, 0x13, 0xf6, 0xc2, 0xab, 0xb8, 0xb3, 0x8f, 0x41, 0x05, 0x3b, 0x70, 0x5f, 0x1b,
+	0xf7, 0x70, 0x7b, 0xde, 0x0f, 0x4e, 0x28, 0xb2, 0x4d, 0xd0, 0x95, 0x0e, 0x84, 0xbb, 0xeb, 0x0c,
+	0x5d, 0x98, 0x95, 0xbb, 0xc0, 0xf6, 0xd9, 0xef, 0x24, 0x77, 0x42, 0xbc, 0xc2, 0xf0, 0x99, 0x96,
+	0x60, 0x6b, 0x18, 0x0e, 0xbc, 0xdc, 0xb7, 0xa6, 0x20, 0xf7, 0xc5, 0xf1, 0xfb, 0xed, 0xe4, 0xe1,
+	0x55, 0x5d, 0x0e, 0x49, 0x94, 0xa6, 0x0c, 0x54, 0xc4, 0xad, 0x90, 0x22, 0x3d, 0xfc, 0x94, 0xe1,
+	0x7b, 0x26, 0x3d, 0x7e, 0x73, 0x82, 0xa8, 0x3b, 0xc9, 0x52, 0x51, 0xa5, 0xde, 0x1a, 0x7d, 0x6c,
+	0xf5, 0x9a, 0x7d, 0x47, 0xe8, 0x0a, 0xbc, 0x3a, 0xa8, 0xb2, 0x68, 0x26, 0x85, 0x18, 0x93, 0x36,
+	0xa9, 0xe5, 0x06, 0x22, 0x7a, 0x29, 0x79, 0xc4, 0x03, 0x28, 0x81, 0xec, 0x75, 0x78, 0x2d, 0x99,
+	0xdd, 0xd8, 0xa6, 0x2a, 0x59, 0xc6, 0x21, 0x2c, 0x64, 0x01, 0x7e, 0xe1, 0xc2, 0xd4, 0x82, 0x73,
+	0x0c, 0x44, 0x68, 0xd1, 0x24, 0x45, 0x71, 0x1f, 0x66, 0x83, 0x2b, 0x4c, 0x4a, 0x63, 0x89, 0x9e,
+	0x70, 0x15, 0x93, 0x39, 0xe3, 0x2a, 0x69, 0xe3, 0x22, 0x9c, 0x4f, 0x6d, 0x2e, 0x90, 0xbf, 0x38,
+	0x45, 0xaa, 0xf0, 0x7d, 0xd7, 0x29, 0x8a, 0x08, 0xdf, 0xcb, 0x38, 0x23, 0x54, 0x90, 0x98, 0xde,
+	0x6a, 0xa0, 0xe8, 0xa4, 0x02, 0x89, 0x81, 0xfb, 0x1c, 0x14, 0x22, 0xca, 0x2a, 0x0b, 0xcd, 0x41,
+	0x1d, 0xe3, 0x66, 0x02, 0xb5, 0x19, 0x74, 0xd4, 0x0f, 0xc1, 0x85, 0xf4, 0x6a, 0x82, 0xb4, 0xdb,
+	0xc1, 0x99, 0x65, 0x76, 0x66, 0x8a, 0x1a, 0xc6, 0x8d, 0x84, 0x31, 0x1b, 0xac, 0x8f, 0x92, 0x58,
+	0x1f, 0x51, 0x46, 0x9b, 0x09, 0x88, 0xfd, 0xdb, 0x8b, 0x6b, 0x96, 0xdd, 0xc4, 0xe3, 0xd7, 0x03,
+	0xa7, 0xd7, 0x15, 0x0f, 0x37, 0xf1, 0x37, 0x99, 0x87, 0xb1, 0x96, 0xdd, 0xee, 0x79, 0x7c, 0x09,
+	0x1e, 0x35, 0x45, 0xca, 0xf8, 0x51, 0x2d, 0x91, 0x7d, 0x1c, 0xdd, 0x43, 0x4a, 0x9f, 0x36, 0x8f,
+	0xc8, 0x1b, 0x90, 0x6f, 0x58, 0x47, 0x62, 0x39, 0x4e, 0xf4, 0xd3, 0xee, 0xd9, 0x2d, 0xca, 0x80,
+	0x1b, 0xd6, 0x91, 0xc9, 0x60, 0x03, 0x12, 0x72, 0x89, 0x24, 0xe4, 0x15, 0x12, 0xbe, 0x94, 0x38,
+	0x12, 0xe2, 0x90, 0xdb, 0x69, 0x7b, 0x07, 0x4d, 0x34, 0x29, 0x7c, 0x12, 0x46, 0x87, 0x6f, 0xe1,
+	0xbd, 0x04, 0x69, 0xf5, 0x5b, 0xd8, 0xa5, 0x5d, 0xdb, 0x69, 0xd8, 0x75, 0x52, 0x84, 0x71, 0x97,
+	0xd6, 0x9d, 0x76, 0xc3, 0x3f, 0x2e, 0xf7, 0x93, 0xc6, 0x7f, 0xcf, 0xc1, 0xa9, 0xd4, 0xfa, 0xdc,
+	0x09, 0xea, 0x59, 0x76, 0x5b, 0x54, 0x13, 0x29, 0xb2, 0x01, 0xa3, 0x0d, 0x36, 0x1c, 0xc5, 0x7f,
+	0xc1, 0x85, 0x67, 0x69, 0xb0, 0xf0, 0x28, 0xc3, 0xb8, 0x71, 0xcc, 0xe4, 0x08, 0xd8, 0x16, 0xeb,
+	0x13, 0x1c, 0x89, 0xe2, 0x1f, 0x73, 0x54, 0xd7, 0xb3, 0xa3, 0xe2, 0x43, 0xb8, 0x71, 0xcc, 0x14,
+	0x28, 0xc8, 0x36, 0x8c, 0xb7, 0x38, 0x53, 0x8b, 0x7f, 0xc2, 0xb1, 0xbd, 0x91, 0x1d, 0x9b, 0x18,
+	0x8e, 0x8d, 0x63, 0xa6, 0x8f, 0x84, 0xbc, 0x0f, 0x85, 0x8e, 0x60, 0x61, 0xf1, 0x5f, 0x72, 0x84,
+	0xcb, 0xd9, 0x11, 0xfa, 0xdc, 0xdf, 0x38, 0x66, 0x06, 0x68, 0xee, 0x4e, 0xc3, 0x24, 0xff, 0x8d,
+	0x1e, 0x04, 0xe3, 0x63, 0x3c, 0xca, 0x55, 0xeb, 0x27, 0xba, 0x38, 0x36, 0x60, 0xc2, 0xd7, 0x64,
+	0xfe, 0x6e, 0x74, 0x21, 0x3b, 0x29, 0x66, 0x58, 0xd9, 0xf8, 0xa3, 0x3c, 0x9e, 0x2a, 0xae, 0x76,
+	0x69, 0x83, 0xb6, 0x3d, 0xdb, 0x6a, 0xaa, 0xfa, 0x3f, 0xa9, 0xf1, 0x79, 0x18, 0x7b, 0xd4, 0xab,
+	0x3f, 0xa5, 0x9e, 0xb0, 0x44, 0x45, 0x8a, 0x5c, 0x82, 0x19, 0x71, 0x09, 0xd5, 0x76, 0xda, 0xe8,
+	0xb0, 0xe7, 0x76, 0xe9, 0x74, 0x98, 0x7b, 0x9f, 0x46, 0x1e, 0x57, 0x8d, 0x0c, 0xf3, 0xfa, 0xc4,
+	0x84, 0x19, 0xeb, 0x13, 0xb7, 0x56, 0x0f, 0x68, 0xf5, 0x05, 0x2e, 0xf9, 0x30, 0xec, 0x13, 0x37,
+	0xec, 0x95, 0xe8, 0xcf, 0xc6, 0x31, 0x73, 0xda, 0x92, 0xf3, 0xc9, 0x07, 0xa0, 0x5b, 0x5f, 0xee,
+	0x75, 0xa9, 0x8c, 0x55, 0xc8, 0x5e, 0x22, 0x47, 0x57, 0x18, 0x70, 0x12, 0xde, 0x59, 0x4b, 0x2d,
+	0x21, 0xdf, 0x0f, 0x73, 0xfc, 0xd8, 0x5c, 0x46, 0xfd, 0x27, 0x7d, 0x4e, 0x06, 0xef, 0x21, 0x74,
+	0x12, 0x6e, 0xfd, 0x49, 0xa4, 0xe8, 0xee, 0x1c, 0xcc, 0x86, 0x58, 0xb9, 0xf0, 0xdc, 0x85, 0xd3,
+	0x89, 0x03, 0x29, 0x34, 0xfc, 0xcb, 0x30, 0x2d, 0xd5, 0x08, 0x76, 0xc9, 0x53, 0x61, 0x66, 0xa5,
+	0x61, 0xfc, 0xa6, 0xc6, 0x4f, 0x9c, 0x12, 0x58, 0x17, 0x39, 0xaa, 0xd1, 0xfa, 0x1f, 0xd5, 0xe4,
+	0xa2, 0x47, 0x35, 0x25, 0xbc, 0x55, 0xc0, 0x0f, 0x61, 0xb8, 0x58, 0x04, 0x69, 0xe9, 0x70, 0x65,
+	0x44, 0x3e, 0x5c, 0x41, 0x1f, 0xbb, 0xed, 0x5a, 0x8f, 0x9a, 0xb4, 0xe6, 0xba, 0xfc, 0x8d, 0x5b,
+	0xc1, 0x04, 0x91, 0x55, 0x75, 0x9b, 0x46, 0x0d, 0xb5, 0x55, 0xf2, 0x90, 0xe0, 0xad, 0x99, 0x3a,
+	0x3f, 0x7d, 0x97, 0x44, 0x78, 0x52, 0xe4, 0xa1, 0xff, 0x8e, 0x1f, 0xfb, 0x20, 0x48, 0x48, 0x34,
+	0x88, 0xac, 0xfb, 0xf4, 0xc8, 0x78, 0x80, 0x93, 0x23, 0x65, 0x60, 0x58, 0x97, 0x3b, 0x5d, 0xe7,
+	0x23, 0x5a, 0xf7, 0x42, 0x7e, 0x4e, 0x88, 0x9c, 0x0a, 0xba, 0x0c, 0x3e, 0x72, 0xc5, 0x4c, 0xe0,
+	0xa8, 0xc7, 0x59, 0x9a, 0xe1, 0xfd, 0x29, 0x71, 0xd4, 0xad, 0xf2, 0x59, 0x8c, 0x94, 0xca, 0xe8,
+	0x5c, 0x94, 0xd1, 0xdf, 0x15, 0x4e, 0x7e, 0x9e, 0xdf, 0x2d, 0x88, 0x72, 0x52, 0x50, 0x14, 0x65,
+	0x65, 0x2e, 0xc6, 0x4a, 0xe3, 0x5d, 0x94, 0xbe, 0x38, 0xa7, 0xc2, 0x3e, 0x49, 0xac, 0xca, 0x45,
+	0x58, 0x65, 0x9c, 0x87, 0xb3, 0x8a, 0xec, 0xc6, 0x0c, 0xac, 0x7b, 0x68, 0x0a, 0x24, 0x02, 0x88,
+	0x16, 0x2e, 0xc1, 0x8c, 0x22, 0xdf, 0xfe, 0x15, 0xf6, 0x69, 0x59, 0xc0, 0xdd, 0xd8, 0x2c, 0x89,
+	0xd8, 0x4f, 0x99, 0x66, 0xc9, 0x9f, 0xe4, 0xe1, 0x4c, 0x32, 0x92, 0x21, 0xe6, 0x5a, 0xa0, 0x5a,
+	0x73, 0x89, 0xaa, 0x35, 0xaf, 0xa8, 0xd6, 0x67, 0xd7, 0x99, 0xd5, 0x34, 0x9d, 0xf9, 0x5a, 0x06,
+	0x9d, 0xc9, 0xbb, 0x13, 0x57, 0x9a, 0x1f, 0xa6, 0x2b, 0xcd, 0xd7, 0x33, 0x29, 0xcd, 0x00, 0x71,
+	0x4c, 0x6b, 0xfe, 0x40, 0x1f, 0xad, 0x79, 0x35, 0x9b, 0xd6, 0x0c, 0x90, 0x67, 0x52, 0x9b, 0x2b,
+	0x91, 0xf5, 0x4f, 0xb5, 0x5c, 0x33, 0xc9, 0xc3, 0xd9, 0x88, 0x4c, 0x45, 0xcc, 0xd8, 0xd5, 0x88,
+	0xb4, 0x3c, 0xb0, 0x9a, 0xb6, 0xbc, 0xa3, 0xc9, 0xd4, 0x46, 0x74, 0x86, 0x84, 0x48, 0x44, 0x2b,
+	0x3f, 0x82, 0x17, 0x10, 0xc4, 0x71, 0x26, 0x1e, 0x7e, 0xfa, 0xd1, 0x23, 0xce, 0xc3, 0xa4, 0xd0,
+	0xcc, 0x92, 0x1e, 0x14, 0xca, 0xda, 0x3f, 0xc6, 0xe8, 0xa7, 0xba, 0x2f, 0xc1, 0x8c, 0x28, 0xae,
+	0x3b, 0x6d, 0x8f, 0x7e, 0xea, 0x0b, 0xe7, 0x34, 0xcf, 0x5d, 0xe5, 0x99, 0xc6, 0xef, 0xe5, 0xe0,
+	0xa5, 0x80, 0x82, 0x2d, 0xa6, 0x18, 0xfc, 0x0e, 0xf6, 0x3d, 0x1f, 0x52, 0xcf, 0x59, 0x73, 0xd1,
+	0x73, 0xd6, 0x95, 0xf0, 0x28, 0x92, 0x1f, 0x15, 0x5d, 0x4e, 0x12, 0x82, 0x84, 0x6e, 0x07, 0x67,
+	0x90, 0xe4, 0x4b, 0x30, 0xd3, 0xc0, 0xa3, 0x93, 0x9a, 0x7a, 0xa8, 0x79, 0x2b, 0x1d, 0x93, 0x4c,
+	0xfe, 0x22, 0x3f, 0x77, 0x51, 0xce, 0x37, 0xa7, 0x1b, 0x72, 0x5e, 0xe9, 0x0b, 0x40, 0xe2, 0x40,
+	0x43, 0x39, 0x07, 0x8b, 0xd2, 0xe8, 0x89, 0xc6, 0xc5, 0xb8, 0xfe, 0x0c, 0x5f, 0x92, 0x79, 0xd1,
+	0x7e, 0x1b, 0x39, 0xe3, 0x8f, 0xec, 0x02, 0xcc, 0x35, 0x50, 0xd6, 0x6a, 0x12, 0x0b, 0x79, 0x9c,
+	0x8d, 0x59, 0x5e, 0xb0, 0x15, 0x30, 0xf2, 0x3e, 0xbc, 0xdc, 0x76, 0x6a, 0x0d, 0xda, 0xb4, 0x8e,
+	0x6a, 0x8f, 0xe8, 0x63, 0x07, 0xef, 0x96, 0x37, 0xa9, 0x67, 0xb7, 0x9f, 0xd4, 0x22, 0x03, 0x50,
+	0x30, 0xcf, 0xb5, 0x9d, 0x35, 0x06, 0x79, 0x17, 0x01, 0xd7, 0x04, 0x5c, 0x80, 0xcc, 0xf8, 0xc3,
+	0x5c, 0x9c, 0xa8, 0x17, 0x31, 0xda, 0x77, 0xa3, 0xa3, 0x7d, 0x25, 0x7d, 0x8c, 0x54, 0x5e, 0x84,
+	0xc3, 0xfd, 0x28, 0x65, 0xb8, 0xef, 0x0c, 0x44, 0xf5, 0xbd, 0x1c, 0xf0, 0x12, 0x1a, 0x00, 0x91,
+	0xe6, 0xc5, 0x90, 0xff, 0x72, 0x2e, 0x36, 0x97, 0x33, 0x31, 0x57, 0x9a, 0x2b, 0xb9, 0x67, 0x9c,
+	0x2b, 0x56, 0x8c, 0x79, 0x79, 0x64, 0xde, 0xed, 0x41, 0x98, 0xbe, 0x97, 0xbc, 0xbb, 0x2d, 0x09,
+	0x9f, 0xdf, 0xba, 0x58, 0x79, 0x23, 0xd7, 0x32, 0xb4, 0xd8, 0xb5, 0x8c, 0x47, 0x12, 0x6b, 0xd7,
+	0xa8, 0xac, 0x26, 0x83, 0xbb, 0xd7, 0x9a, 0x7c, 0xf7, 0x7a, 0x19, 0x5e, 0xea, 0xf1, 0xe1, 0x09,
+	0x67, 0x0d, 0xde, 0x45, 0xe1, 0x13, 0xe5, 0xb8, 0x28, 0xf4, 0x27, 0x0a, 0x2b, 0x52, 0xc7, 0x8f,
+	0xe7, 0xbd, 0xf0, 0xf1, 0x53, 0x68, 0x7f, 0xae, 0xf1, 0x53, 0x08, 0xfc, 0x9e, 0x8c, 0xdf, 0x29,
+	0x69, 0xfc, 0xfc, 0xd6, 0x85, 0xe8, 0xff, 0x7b, 0x4d, 0x62, 0xdd, 0xe0, 0xad, 0xe8, 0xd0, 0xb7,
+	0x62, 0xee, 0x07, 0x31, 0xb2, 0xf2, 0x29, 0x67, 0xb8, 0xc9, 0xad, 0xbf, 0xe8, 0x70, 0x59, 0x6f,
+	0x49, 0x2c, 0x88, 0x6c, 0xd4, 0xfa, 0x89, 0x88, 0xb1, 0x21, 0xad, 0xb1, 0xab, 0x4d, 0xa7, 0xdd,
+	0x97, 0x3b, 0xa7, 0x61, 0x82, 0x87, 0x82, 0x92, 0xee, 0xf0, 0xf1, 0x8c, 0x4a, 0xc3, 0xb8, 0x29,
+	0x33, 0x9a, 0x63, 0xca, 0x42, 0xc0, 0x4d, 0x45, 0xb4, 0x65, 0x53, 0xa9, 0x6f, 0x35, 0x75, 0xc8,
+	0x15, 0xf3, 0xe8, 0x13, 0xa9, 0x28, 0x62, 0x8d, 0xf7, 0x9d, 0x2d, 0x9f, 0x8f, 0xce, 0x96, 0xb4,
+	0x1b, 0x2d, 0x6a, 0x30, 0xad, 0x60, 0xae, 0x18, 0x7f, 0xa3, 0x49, 0x3a, 0x38, 0x6a, 0xc2, 0x0f,
+	0x7d, 0xcd, 0x28, 0xc9, 0x9c, 0xdf, 0x8a, 0x48, 0xdb, 0xcd, 0x74, 0x69, 0x8b, 0xb4, 0xff, 0xa2,
+	0xe5, 0xed, 0xbf, 0xe6, 0xd0, 0x43, 0xad, 0xb4, 0x95, 0x70, 0xb3, 0x36, 0xa9, 0x13, 0x0f, 0x23,
+	0x9d, 0xf8, 0xfc, 0xc0, 0x4e, 0xc4, 0x11, 0x27, 0x75, 0xe7, 0x39, 0x36, 0x35, 0xc1, 0xbb, 0xcb,
+	0xd1, 0x2c, 0xef, 0x2e, 0x25, 0x41, 0x19, 0x7b, 0x16, 0x41, 0x79, 0x1e, 0xbe, 0x7f, 0x84, 0xa7,
+	0x45, 0xe9, 0xdc, 0x11, 0xd2, 0xb6, 0x0a, 0xe3, 0x5c, 0x8c, 0xfc, 0x83, 0x81, 0xd7, 0x32, 0x4b,
+	0x8a, 0xe9, 0xd7, 0x34, 0xfe, 0x8b, 0xac, 0x3b, 0xd5, 0x43, 0x93, 0xbe, 0x13, 0x69, 0x08, 0x9d,
+	0xa8, 0x60, 0x4d, 0x1c, 0xd4, 0x9b, 0x42, 0x23, 0x8f, 0x0c, 0x7c, 0xfa, 0x24, 0x70, 0x21, 0xf8,
+	0xf3, 0xb0, 0x58, 0x56, 0x2d, 0x91, 0xb3, 0x9b, 0xef, 0x97, 0xb4, 0x25, 0xbe, 0xaf, 0xcb, 0xc4,
+	0x8f, 0x4b, 0x30, 0xd3, 0x76, 0xbc, 0x5a, 0xbd, 0xd7, 0xea, 0x35, 0x2d, 0xcf, 0x3e, 0xa4, 0x62,
+	0xad, 0x9f, 0x6e, 0x3b, 0xde, 0x6a, 0x90, 0x69, 0xac, 0x4b, 0xdc, 0x16, 0xc8, 0xc5, 0x68, 0x5e,
+	0xe5, 0x0f, 0x4f, 0x5d, 0xa1, 0x3a, 0xe6, 0x13, 0x8f, 0xf5, 0x5d, 0xfe, 0xe4, 0xd4, 0x35, 0xde,
+	0xc5, 0x9d, 0x9d, 0x50, 0xc4, 0xf2, 0x13, 0xb7, 0x4c, 0x8a, 0xd5, 0x43, 0xc7, 0x48, 0x62, 0x6d,
+	0x41, 0x8d, 0x09, 0xc7, 0xeb, 0xa2, 0xa0, 0x86, 0x2f, 0x77, 0xf9, 0x23, 0xd0, 0xb4, 0x73, 0x9e,
+	0xd8, 0x2b, 0x3b, 0x73, 0xae, 0x1e, 0xcd, 0x32, 0x4e, 0xa3, 0xe3, 0x8d, 0xb7, 0x1a, 0xf3, 0xd5,
+	0xdc, 0xc1, 0x1d, 0x75, 0xac, 0x30, 0xf4, 0x04, 0x49, 0x17, 0x9f, 0xb4, 0xc8, 0xc5, 0x27, 0xe3,
+	0x9f, 0xe6, 0xf0, 0xaa, 0x40, 0xa4, 0x76, 0x46, 0x55, 0xf5, 0x61, 0x44, 0x92, 0x57, 0xd2, 0x25,
+	0xb9, 0x0f, 0xea, 0xff, 0x9d, 0xca, 0xea, 0x79, 0x26, 0xc2, 0x3a, 0x1e, 0x93, 0xf7, 0xeb, 0x5e,
+	0xb6, 0x21, 0xf8, 0x4b, 0x4d, 0x92, 0x29, 0xff, 0x06, 0x97, 0x6a, 0x8b, 0x0d, 0xba, 0xf1, 0x19,
+	0x1b, 0x99, 0x6a, 0x64, 0x64, 0xfa, 0x6c, 0xc6, 0x12, 0x5b, 0x7c, 0xd1, 0xeb, 0xe1, 0x5d, 0x3c,
+	0x0b, 0x4c, 0x6e, 0x30, 0xdc, 0x4a, 0x84, 0xf1, 0x3f, 0x1a, 0x81, 0xdb, 0xc4, 0x8f, 0xa2, 0xd2,
+	0x30, 0x6a, 0x09, 0x38, 0x4c, 0x8a, 0xcf, 0x2a, 0x32, 0xf1, 0x29, 0xd2, 0x40, 0x2e, 0xd6, 0x80,
+	0x81, 0xc7, 0x85, 0x29, 0x0d, 0x08, 0x15, 0xf7, 0x05, 0x3c, 0xf0, 0x53, 0x61, 0xa2, 0x33, 0xb2,
+	0xbf, 0x06, 0xd9, 0x93, 0x2c, 0x83, 0x04, 0x0c, 0xc1, 0x7b, 0x98, 0xe3, 0x02, 0x85, 0x44, 0xb3,
+	0x2f, 0x3c, 0x73, 0x87, 0x4a, 0x6d, 0x26, 0x44, 0x7f, 0xa3, 0xc1, 0xd5, 0x74, 0xb4, 0x09, 0xf3,
+	0xb9, 0x2f, 0xab, 0xac, 0x40, 0x7c, 0xf8, 0x61, 0x57, 0x65, 0xb0, 0xf8, 0x0c, 0x39, 0xc1, 0x9f,
+	0x47, 0x98, 0x6a, 0x70, 0x2d, 0x63, 0xf3, 0xcf, 0xc8, 0xcc, 0xcf, 0xf0, 0x0e, 0x8b, 0xda, 0x80,
+	0x7f, 0xb4, 0x37, 0xc4, 0x42, 0xff, 0x16, 0x9c, 0x8c, 0x07, 0xa6, 0xc1, 0x9b, 0xd1, 0xc8, 0xd6,
+	0x09, 0xf3, 0xa5, 0x68, 0x3c, 0xaa, 0x6d, 0x56, 0x68, 0xbc, 0x06, 0x97, 0x07, 0x36, 0xaf, 0xdc,
+	0x96, 0x10, 0x17, 0xdc, 0xd6, 0x9c, 0x96, 0x65, 0xb7, 0xdd, 0xd8, 0x02, 0xf1, 0x00, 0x25, 0x2e,
+	0x15, 0x48, 0x30, 0xe9, 0x3a, 0x9c, 0xa8, 0x73, 0x90, 0x5a, 0x03, 0x61, 0x04, 0xa9, 0x9c, 0x4b,
+	0xa4, 0x2e, 0x57, 0xe7, 0x74, 0xee, 0xf2, 0x43, 0x02, 0xb9, 0x20, 0xb2, 0xa1, 0x58, 0x84, 0xe3,
+	0x09, 0x38, 0x05, 0xa3, 0xe6, 0x62, 0x28, 0x8d, 0x36, 0x4e, 0xf1, 0x64, 0x8c, 0xe1, 0x58, 0x0e,
+	0x83, 0x92, 0x8d, 0x90, 0xed, 0xd6, 0xac, 0xba, 0x64, 0x58, 0x14, 0x6c, 0x97, 0x5f, 0x4a, 0x36,
+	0xde, 0x8f, 0xb7, 0x87, 0x25, 0xd2, 0x08, 0x0f, 0xdb, 0x05, 0xae, 0x44, 0x52, 0x50, 0x8a, 0x51,
+	0xab, 0xc6, 0x47, 0x6d, 0x8d, 0x5a, 0xcf, 0xd9, 0xf0, 0x2b, 0xf1, 0x51, 0x96, 0x91, 0x8a, 0xa6,
+	0x2f, 0xca, 0x3d, 0x16, 0xbc, 0x5d, 0xe5, 0xaf, 0xb3, 0x7c, 0x71, 0xf9, 0x41, 0xb9, 0x07, 0x51,
+	0x10, 0x31, 0x0a, 0xb7, 0x60, 0x5c, 0x50, 0x20, 0x0c, 0x9b, 0xf3, 0x69, 0x37, 0x3b, 0xfd, 0xbb,
+	0xf2, 0x3e, 0xbc, 0x71, 0x1d, 0x8d, 0xc4, 0x6d, 0xa7, 0x11, 0xdd, 0x7d, 0x4a, 0xaf, 0x02, 0x34,
+	0xf9, 0x55, 0x80, 0xf1, 0x7d, 0x68, 0xf9, 0x29, 0x35, 0x02, 0x99, 0x1d, 0x61, 0x30, 0x82, 0x86,
+	0x33, 0xfd, 0xae, 0xbd, 0x9a, 0x08, 0x69, 0x9c, 0xc3, 0xc3, 0x01, 0x09, 0x57, 0xa4, 0xf3, 0xef,
+	0xa3, 0x75, 0x98, 0x54, 0xfe, 0xcc, 0x4d, 0x72, 0x83, 0x99, 0x65, 0xc4, 0x66, 0xe6, 0x4d, 0xdc,
+	0x11, 0x47, 0x8a, 0x44, 0x43, 0xf8, 0x02, 0xa5, 0x21, 0xdb, 0x0c, 0xe3, 0x9c, 0x1f, 0xae, 0x51,
+	0xc6, 0x4e, 0x28, 0xcf, 0x0a, 0x15, 0x4e, 0x5e, 0x82, 0x19, 0x27, 0x2c, 0x0c, 0x19, 0x3a, 0x2d,
+	0xe5, 0x56, 0x1a, 0x46, 0x07, 0xfb, 0x9a, 0x84, 0x46, 0x90, 0xb0, 0x03, 0x44, 0xc6, 0x23, 0x5d,
+	0x9e, 0x4d, 0xba, 0xca, 0x1b, 0x79, 0xe6, 0x68, 0xce, 0x49, 0x75, 0xf9, 0xc5, 0x5a, 0xe3, 0x36,
+	0x9e, 0xdc, 0x48, 0x80, 0xd9, 0xcd, 0x1c, 0xc3, 0x89, 0x76, 0x3a, 0x62, 0x3f, 0xbc, 0x70, 0x62,
+	0xd7, 0xa2, 0xc4, 0xaa, 0xfe, 0x97, 0x8c, 0x4c, 0x3e, 0x17, 0x25, 0x3b, 0xe2, 0x8e, 0xf9, 0x81,
+	0x68, 0x2b, 0xea, 0x02, 0x93, 0xad, 0x15, 0x32, 0x0f, 0x63, 0xfc, 0x49, 0xa8, 0x50, 0x71, 0x22,
+	0x15, 0x6f, 0x3d, 0xb2, 0x7e, 0x7c, 0x2b, 0xc7, 0xcf, 0xd2, 0x9a, 0x4e, 0xaf, 0x71, 0xd7, 0xaa,
+	0x3f, 0xed, 0x75, 0x86, 0x30, 0x3c, 0x63, 0x07, 0x69, 0xb9, 0xe4, 0x63, 0xd7, 0xc7, 0xbd, 0x66,
+	0x53, 0x3c, 0xb0, 0xc2, 0xdf, 0x6c, 0xa6, 0x7b, 0x96, 0xfb, 0x54, 0x7a, 0xff, 0xc3, 0x92, 0x95,
+	0x06, 0xd9, 0x0d, 0xec, 0x8e, 0x51, 0xb4, 0x3b, 0xde, 0x49, 0xb2, 0x3b, 0xd2, 0x88, 0x7d, 0xd1,
+	0x66, 0xc6, 0xdb, 0xfc, 0x1c, 0x31, 0xde, 0x9a, 0x10, 0x38, 0xa9, 0x17, 0x9a, 0xdc, 0x0b, 0xe3,
+	0x3b, 0x5a, 0xb4, 0x66, 0xdc, 0x4c, 0x7d, 0x84, 0xf9, 0x12, 0x57, 0x79, 0x46, 0xa5, 0xc1, 0xf4,
+	0x7e, 0x97, 0x83, 0xd7, 0x04, 0xeb, 0x25, 0xeb, 0x7e, 0x4e, 0x14, 0x71, 0xe3, 0x00, 0x17, 0xb8,
+	0xd8, 0x28, 0xe4, 0x13, 0x46, 0x21, 0xf5, 0xc5, 0x95, 0xd4, 0x89, 0x51, 0xa5, 0x13, 0x0d, 0x7e,
+	0x00, 0x9a, 0xd0, 0x07, 0xd1, 0xfd, 0x05, 0x98, 0x8b, 0xd0, 0x19, 0x74, 0x66, 0x56, 0xa1, 0x52,
+	0x6d, 0x25, 0xa7, 0xb4, 0xd2, 0x8b, 0x8a, 0x5f, 0xcc, 0xc7, 0x99, 0xce, 0xa8, 0x4c, 0xe2, 0x97,
+	0x18, 0xe1, 0x45, 0x4c, 0x8b, 0x84, 0x66, 0xc5, 0xb4, 0xb0, 0x85, 0x65, 0x13, 0x29, 0x5f, 0x69,
+	0x06, 0x77, 0x51, 0x0c, 0x98, 0x76, 0xbb, 0xf5, 0x58, 0xcf, 0x27, 0xdd, 0x6e, 0xfd, 0xc1, 0x30,
+	0xf3, 0x23, 0x58, 0x90, 0x93, 0x9a, 0x12, 0xd4, 0xfc, 0xaa, 0x86, 0x97, 0x9b, 0x25, 0x98, 0x7e,
+	0x86, 0x7d, 0x16, 0xca, 0xce, 0x02, 0xf8, 0xb6, 0x45, 0x78, 0x3d, 0x44, 0xe4, 0x24, 0x11, 0x9e,
+	0x24, 0x52, 0x3a, 0xe4, 0xad, 0x66, 0x53, 0x3c, 0x8e, 0x64, 0x3f, 0x8d, 0xff, 0x96, 0xc3, 0x98,
+	0x24, 0x12, 0x9d, 0xf8, 0x5c, 0x31, 0xfa, 0x48, 0x28, 0x46, 0x60, 0x2e, 0x4e, 0xe0, 0xab, 0x30,
+	0x2b, 0xc1, 0x48, 0x8f, 0x2e, 0xa6, 0x03, 0x28, 0x14, 0x7e, 0x25, 0x7e, 0xcd, 0xc8, 0x30, 0xf1,
+	0x6b, 0xb6, 0xa4, 0x6f, 0x98, 0x70, 0x65, 0xf3, 0xc6, 0x00, 0x65, 0xc3, 0x3a, 0xb3, 0xb8, 0x25,
+	0xea, 0x88, 0x07, 0x79, 0xc1, 0x67, 0x4f, 0x56, 0x82, 0xb7, 0x25, 0x3c, 0x04, 0xf8, 0x6b, 0x03,
+	0x90, 0xf1, 0x35, 0x86, 0x87, 0x5d, 0xe3, 0x15, 0x4b, 0x77, 0x60, 0x5a, 0xc1, 0x3e, 0x94, 0xb2,
+	0x7a, 0x8a, 0x57, 0xda, 0x07, 0x8a, 0x88, 0x98, 0xbb, 0xef, 0xc1, 0x38, 0x9f, 0x46, 0xbe, 0xff,
+	0xf3, 0xe5, 0x0c, 0x7d, 0x37, 0xfd, 0x3a, 0xc6, 0xaf, 0x8e, 0xc0, 0x89, 0xa4, 0xee, 0xf4, 0x9f,
+	0xaf, 0xef, 0xc1, 0x98, 0xd3, 0x09, 0x42, 0x81, 0x24, 0x45, 0x1e, 0x54, 0x71, 0xee, 0x74, 0x38,
+	0x7b, 0x78, 0x25, 0x89, 0xc3, 0xf9, 0x67, 0xe4, 0x70, 0x18, 0x15, 0xab, 0xe1, 0x88, 0xef, 0xf7,
+	0xf8, 0x51, 0xb1, 0xd6, 0x9c, 0x36, 0x8d, 0x04, 0xf1, 0x19, 0x1d, 0x26, 0x88, 0xcf, 0x0a, 0xcc,
+	0xd4, 0x9d, 0x56, 0x87, 0xcd, 0x5c, 0x11, 0xca, 0x67, 0x70, 0x78, 0xc0, 0xe9, 0xa0, 0x06, 0xa2,
+	0x90, 0x54, 0xf4, 0xb8, 0xa2, 0xa2, 0x63, 0xf3, 0xa5, 0x10, 0x9f, 0x2f, 0x04, 0x46, 0xd0, 0xcb,
+	0x38, 0x81, 0x86, 0x22, 0xfe, 0x8e, 0xcf, 0x62, 0x48, 0x98, 0xc5, 0xe7, 0x61, 0x92, 0xb3, 0x84,
+	0xbf, 0xd0, 0x9b, 0xe4, 0x91, 0xc0, 0x30, 0x8b, 0xbf, 0xd1, 0x3b, 0x0f, 0x93, 0xd4, 0xb3, 0x6a,
+	0xfe, 0x05, 0xe6, 0x29, 0x1e, 0xaa, 0x81, 0x7a, 0x56, 0x95, 0xe7, 0x30, 0x3b, 0x95, 0x87, 0x52,
+	0xb5, 0x1b, 0x22, 0x7e, 0xdf, 0x38, 0xa6, 0x2b, 0x0d, 0xc3, 0x8e, 0x6a, 0x77, 0xf1, 0xbe, 0x2a,
+	0x8b, 0x71, 0x71, 0x02, 0x46, 0x9b, 0x4e, 0xdd, 0x6a, 0x0a, 0x83, 0x86, 0x27, 0xe4, 0x85, 0x24,
+	0xaf, 0x2c, 0x24, 0xff, 0x36, 0xb6, 0xe6, 0xfa, 0x6d, 0x09, 0x91, 0x7f, 0x08, 0x05, 0x2e, 0x05,
+	0x81, 0xcf, 0xff, 0x4e, 0x26, 0x01, 0x0a, 0x9f, 0x63, 0x8a, 0xda, 0x62, 0xe6, 0xfb, 0xc8, 0x4a,
+	0x8f, 0x60, 0x5a, 0x29, 0x1a, 0x14, 0x72, 0x73, 0x72, 0xa0, 0xe0, 0x8b, 0x86, 0xa5, 0xd9, 0xfd,
+	0xa5, 0x98, 0x29, 0x62, 0x79, 0x56, 0xd3, 0x79, 0xf2, 0xc2, 0xd6, 0x49, 0xe3, 0x4e, 0x74, 0xb9,
+	0x0f, 0x5a, 0x10, 0xfc, 0x2b, 0x41, 0x01, 0xaf, 0x23, 0xb5, 0x3d, 0x7f, 0x3b, 0x12, 0xa4, 0x8d,
+	0xdf, 0xd7, 0xd0, 0x3f, 0x2d, 0xd5, 0xde, 0xb0, 0x59, 0xf7, 0x8e, 0x2a, 0x1e, 0x6d, 0x65, 0x5a,
+	0x90, 0x14, 0x3d, 0x9e, 0x1b, 0x46, 0x8f, 0x3f, 0xbf, 0x5a, 0x30, 0xee, 0x46, 0xb9, 0x2b, 0xa8,
+	0x1f, 0x62, 0x45, 0x35, 0xda, 0x51, 0xfe, 0x05, 0x38, 0x04, 0xff, 0xb6, 0x60, 0xea, 0x80, 0x67,
+	0xd5, 0x9a, 0xb6, 0xeb, 0x47, 0x8f, 0x59, 0x18, 0x40, 0xad, 0xc4, 0x47, 0x73, 0x52, 0xd4, 0xdf,
+	0xb4, 0x5d, 0xcf, 0xf8, 0x59, 0x4d, 0xec, 0xd2, 0x95, 0x8e, 0x51, 0xfe, 0x5a, 0x5d, 0xda, 0x51,
+	0x27, 0x5a, 0xa8, 0xe4, 0x01, 0xcc, 0x76, 0x39, 0x4c, 0x10, 0x56, 0x93, 0xeb, 0xe4, 0x6b, 0x03,
+	0xe8, 0x31, 0xfd, 0x5a, 0x3c, 0xce, 0xe6, 0x4c, 0x57, 0x49, 0x07, 0xee, 0xa8, 0x64, 0xa2, 0x84,
+	0x39, 0xf3, 0x57, 0x1a, 0xbf, 0x02, 0x28, 0x41, 0x09, 0xe7, 0x16, 0x9a, 0x0b, 0x2f, 0xca, 0xb2,
+	0x52, 0x2f, 0xed, 0xe7, 0x9f, 0xe3, 0xd2, 0x3e, 0xd3, 0x81, 0x2d, 0xeb, 0xd3, 0x9a, 0xbf, 0x64,
+	0xf2, 0x85, 0x03, 0x5a, 0xd6, 0xa7, 0x9c, 0x7c, 0x37, 0xd8, 0xe4, 0x8c, 0x86, 0x9b, 0x1c, 0xe3,
+	0x28, 0x36, 0x40, 0x0c, 0x9f, 0xba, 0xbd, 0xda, 0x07, 0xbd, 0xce, 0x00, 0xb8, 0x7b, 0x50, 0x3e,
+	0x28, 0x7a, 0x7d, 0x90, 0x18, 0x4b, 0x2c, 0x33, 0x67, 0x10, 0x09, 0x66, 0xe1, 0x71, 0xd1, 0xfb,
+	0xb1, 0x61, 0x90, 0x9b, 0x0e, 0x4e, 0xcd, 0x88, 0xd0, 0x19, 0x81, 0x6f, 0x32, 0x60, 0xb6, 0xfe,
+	0x48, 0x6d, 0xa4, 0x61, 0xec, 0x26, 0xf6, 0x46, 0xb5, 0xd6, 0x87, 0xc3, 0xf8, 0x72, 0x22, 0x91,
+	0x11, 0x43, 0x9c, 0xbf, 0xfe, 0x8b, 0x02, 0xc5, 0xfc, 0x28, 0x3f, 0xc9, 0x4f, 0xb1, 0xfa, 0xc0,
+	0x89, 0x4e, 0xbb, 0x2a, 0xc3, 0xa5, 0x99, 0x58, 0xc9, 0xc2, 0xf0, 0x18, 0xc2, 0xc5, 0xd5, 0x80,
+	0xf3, 0x6c, 0x5a, 0xf2, 0xb5, 0x41, 0x1a, 0x0e, 0x96, 0x59, 0x6a, 0xc3, 0xf1, 0x04, 0xb0, 0x84,
+	0x75, 0x62, 0x45, 0x5d, 0x27, 0x86, 0x92, 0x01, 0x69, 0xb5, 0xb8, 0x05, 0xe3, 0xd5, 0xc6, 0x53,
+	0xb3, 0xd7, 0x44, 0xad, 0xed, 0xd2, 0xee, 0xa1, 0x5d, 0x0f, 0x1c, 0xb9, 0x41, 0x9a, 0x09, 0xad,
+	0xd5, 0xb1, 0x7d, 0x5f, 0x34, 0xfe, 0x36, 0xb6, 0x78, 0x55, 0xa7, 0x49, 0x13, 0x6f, 0xb8, 0x2c,
+	0xc2, 0x68, 0x57, 0x7a, 0x03, 0x53, 0x4c, 0x22, 0x90, 0xb5, 0x6b, 0x72, 0x30, 0x63, 0x0d, 0xed,
+	0x44, 0x86, 0x4e, 0x95, 0xfb, 0xab, 0x30, 0xd2, 0x75, 0x9a, 0xbe, 0x13, 0x2d, 0x19, 0x8d, 0xd3,
+	0xa4, 0x26, 0x42, 0x19, 0x65, 0xf4, 0x18, 0xca, 0x58, 0x02, 0x11, 0x1e, 0x06, 0x0d, 0xf7, 0xc3,
+	0xb1, 0x8c, 0x98, 0xfc, 0x5c, 0x47, 0x3f, 0x5c, 0xa4, 0x28, 0x0c, 0xee, 0x21, 0x3b, 0xc2, 0x79,
+	0xc2, 0x78, 0x3d, 0xa0, 0x29, 0xc3, 0x8b, 0x40, 0x7e, 0x74, 0xad, 0x00, 0x3f, 0x53, 0x0f, 0x16,
+	0x02, 0x76, 0x0e, 0x7e, 0xef, 0x77, 0x32, 0x20, 0x30, 0x32, 0xa5, 0xc2, 0x31, 0x51, 0x3d, 0x4d,
+	0xcf, 0x3a, 0x26, 0xaa, 0x47, 0x69, 0x48, 0x34, 0x17, 0x70, 0xa3, 0x5d, 0x41, 0xa5, 0xed, 0x1d,
+	0xad, 0x5a, 0x1d, 0xeb, 0x91, 0xdd, 0xb4, 0x3d, 0x9b, 0xfa, 0x46, 0xa2, 0xd1, 0xc4, 0xfd, 0x71,
+	0x32, 0x84, 0x68, 0xb2, 0x02, 0x53, 0x75, 0x29, 0x5f, 0x4c, 0xe8, 0x44, 0x2b, 0xab, 0xca, 0x85,
+	0x3f, 0x40, 0x73, 0x64, 0x2a, 0x55, 0xc5, 0x41, 0xbb, 0xdf, 0xda, 0x03, 0xda, 0x75, 0x6d, 0xa7,
+	0xed, 0x93, 0xf2, 0x4d, 0xbe, 0x70, 0xc5, 0x4a, 0x05, 0x19, 0xef, 0xc2, 0xa4, 0xdb, 0x78, 0x5a,
+	0x3b, 0xe4, 0xd9, 0x82, 0x01, 0xa7, 0x13, 0x4f, 0xce, 0x44, 0x4d, 0x70, 0x83, 0xdf, 0xe4, 0x16,
+	0x8c, 0xfb, 0x35, 0x73, 0xfd, 0x3d, 0xea, 0x7e, 0x6d, 0x1f, 0xde, 0xf8, 0x83, 0x3c, 0x0e, 0x69,
+	0xac, 0x6f, 0x64, 0x0f, 0xc6, 0xc5, 0x6c, 0x17, 0xd4, 0xbc, 0x93, 0x89, 0x27, 0x8b, 0xd2, 0xcb,
+	0x68, 0x51, 0xb8, 0x71, 0xcc, 0xf4, 0x51, 0x95, 0xfe, 0x28, 0x07, 0x24, 0x0e, 0x41, 0xde, 0x17,
+	0x81, 0x7e, 0xf8, 0x63, 0xce, 0xf7, 0x9e, 0xb5, 0xa5, 0x45, 0x1e, 0x6a, 0x07, 0xdf, 0x0a, 0xfc,
+	0x85, 0x06, 0x23, 0x18, 0x2a, 0x72, 0x12, 0xc6, 0xf7, 0xb7, 0xef, 0x6f, 0xef, 0x3c, 0xdc, 0xe6,
+	0x5f, 0xa2, 0x58, 0xdd, 0xdc, 0xaf, 0xee, 0x95, 0x4d, 0x5d, 0x23, 0x3a, 0x4c, 0xad, 0x6e, 0xee,
+	0xec, 0xaf, 0xd5, 0xee, 0xae, 0xac, 0xde, 0xdf, 0xdf, 0xd5, 0x73, 0x64, 0x16, 0x26, 0x57, 0xcd,
+	0xf2, 0x5a, 0x79, 0x7b, 0xaf, 0xb2, 0xb2, 0x59, 0xd5, 0xf3, 0xa4, 0x00, 0x23, 0xdb, 0x3b, 0x6b,
+	0x65, 0x7d, 0x84, 0x10, 0x98, 0xd9, 0xb9, 0xfb, 0x7d, 0xe5, 0xd5, 0xbd, 0x5a, 0x75, 0x6f, 0xc7,
+	0x5c, 0xb9, 0x57, 0xd6, 0x47, 0xc9, 0x71, 0x98, 0xad, 0xae, 0x6e, 0x94, 0xd7, 0xf6, 0x37, 0xcb,
+	0xb5, 0xdd, 0x9d, 0xcd, 0xca, 0xea, 0x87, 0xfa, 0x18, 0x01, 0x18, 0x7b, 0xb0, 0xb3, 0xb9, 0xbf,
+	0x55, 0xd6, 0xc7, 0xd9, 0xef, 0x95, 0xcd, 0xb2, 0xb9, 0x57, 0xd5, 0x0b, 0xac, 0xb5, 0xad, 0x9d,
+	0xfd, 0xed, 0xbd, 0xda, 0xca, 0xde, 0xde, 0xca, 0xea, 0x86, 0x3e, 0x81, 0xe1, 0xef, 0x77, 0x36,
+	0xcb, 0x3a, 0x70, 0x4a, 0x90, 0xac, 0xda, 0xee, 0x4a, 0xc5, 0xd4, 0x27, 0xf1, 0x2b, 0x19, 0x95,
+	0x7b, 0xe6, 0xca, 0x5e, 0x59, 0x9f, 0x62, 0x6d, 0x8b, 0x46, 0xfd, 0x66, 0xa6, 0xef, 0x8e, 0x71,
+	0x96, 0x19, 0xbf, 0xa3, 0x01, 0x84, 0x62, 0xc1, 0x34, 0x4e, 0xcb, 0xfa, 0xc8, 0xf1, 0x9f, 0xd9,
+	0xf2, 0x04, 0xe6, 0xda, 0x6d, 0xc7, 0x7f, 0x97, 0xca, 0x13, 0x2c, 0xb7, 0x63, 0x79, 0xf5, 0x03,
+	0xf1, 0x2e, 0x95, 0x27, 0x48, 0x31, 0x14, 0x26, 0x11, 0xf0, 0xd7, 0x97, 0x95, 0x0d, 0x18, 0xf7,
+	0x9b, 0x29, 0xc2, 0x89, 0xad, 0xfd, 0xea, 0x5e, 0x6d, 0x63, 0xe5, 0x41, 0xb9, 0xf6, 0xc5, 0xb2,
+	0xb9, 0x53, 0x7b, 0xb0, 0xb2, 0xb9, 0x5f, 0xe6, 0x91, 0xfc, 0xb7, 0x58, 0x9b, 0xe2, 0x27, 0x6b,
+	0x48, 0xbf, 0xc1, 0x7e, 0xee, 0x32, 0xec, 0xfa, 0xb1, 0x52, 0x4e, 0xd7, 0x8c, 0x7f, 0xae, 0x05,
+	0x01, 0x36, 0x7c, 0x8c, 0xf3, 0x30, 0xc6, 0xef, 0xae, 0xfa, 0xe6, 0x26, 0x4f, 0xc9, 0xe4, 0xe4,
+	0x14, 0x72, 0xc8, 0x3a, 0x8c, 0x37, 0xa8, 0x67, 0xd9, 0xc1, 0x45, 0x85, 0xab, 0x03, 0xa4, 0x7e,
+	0x71, 0x8d, 0x83, 0x8b, 0xb8, 0x67, 0xa2, 0x72, 0xe9, 0x36, 0x4c, 0xc9, 0x05, 0x43, 0xb9, 0x4e,
+	0x7e, 0x3b, 0x07, 0x53, 0xb8, 0xaa, 0x6e, 0xd9, 0x4f, 0x98, 0xe6, 0x37, 0x6a, 0x30, 0xcd, 0x3f,
+	0xd6, 0x62, 0x3b, 0x6d, 0x14, 0xbf, 0x59, 0x98, 0xac, 0xb4, 0x0f, 0xad, 0xa6, 0xdd, 0x60, 0x49,
+	0xfd, 0x18, 0x1b, 0x4c, 0x01, 0x2c, 0x8e, 0xb7, 0x74, 0x8d, 0xcc, 0xc1, 0xb4, 0xc8, 0xe3, 0x66,
+	0xaa, 0x9e, 0x23, 0xf3, 0x40, 0x94, 0x2c, 0xbc, 0x79, 0xa2, 0xe7, 0x8d, 0x6d, 0x0c, 0x3f, 0xfe,
+	0x84, 0x32, 0x99, 0x11, 0x88, 0x31, 0xad, 0x1f, 0x63, 0xd2, 0xc6, 0x17, 0x77, 0xfe, 0x95, 0x15,
+	0xe1, 0x74, 0xd5, 0x73, 0x0c, 0x54, 0xbe, 0x73, 0xc5, 0xe5, 0x7a, 0xcd, 0x69, 0x53, 0x7d, 0xc4,
+	0xe8, 0xc0, 0x98, 0x70, 0xc0, 0xcc, 0xc1, 0x74, 0x88, 0xd0, 0xeb, 0xb9, 0x1c, 0xe3, 0xfb, 0x3d,
+	0xda, 0xa3, 0x0d, 0x5d, 0xe3, 0x1d, 0xb1, 0x99, 0x7d, 0x6c, 0x7f, 0x99, 0x36, 0xf4, 0x1c, 0x99,
+	0x01, 0xa8, 0xb4, 0xfd, 0x50, 0xe2, 0x7a, 0x9e, 0x01, 0xaf, 0x5b, 0x76, 0x93, 0x36, 0xf4, 0x11,
+	0x32, 0x05, 0x85, 0x55, 0xe1, 0xa1, 0xd0, 0x47, 0x31, 0x65, 0xb5, 0xeb, 0x94, 0x95, 0x8d, 0x19,
+	0xbf, 0xa7, 0x41, 0x51, 0xe6, 0x59, 0xd5, 0xb3, 0xba, 0xc1, 0x12, 0x58, 0x81, 0x09, 0xc7, 0xe7,
+	0x9f, 0x50, 0x07, 0x71, 0x53, 0x46, 0xae, 0xbd, 0xa8, 0xb0, 0xdb, 0x0c, 0x6b, 0x0f, 0x72, 0x54,
+	0x9e, 0x86, 0x09, 0xcf, 0xea, 0x3e, 0xa1, 0x5e, 0xe8, 0x10, 0x28, 0xf0, 0x0c, 0xd5, 0xe9, 0xac,
+	0x9c, 0x32, 0x18, 0xff, 0x39, 0x1f, 0xfa, 0x25, 0x92, 0xe8, 0x57, 0x1b, 0xd5, 0xa2, 0x8d, 0xa6,
+	0x39, 0xb3, 0xc9, 0x7e, 0x70, 0x87, 0x55, 0xbc, 0xf9, 0xba, 0x9d, 0x6a, 0xc0, 0x25, 0x34, 0xbb,
+	0xa8, 0x88, 0xca, 0xc6, 0xb1, 0xe0, 0xa6, 0x2b, 0x05, 0xf1, 0x71, 0xad, 0x1a, 0xbf, 0xd7, 0x24,
+	0x5e, 0x7e, 0x7d, 0xfe, 0xd9, 0x91, 0xf3, 0x4f, 0x54, 0x1d, 0x33, 0x27, 0x0f, 0xc3, 0x24, 0x79,
+	0x04, 0x93, 0x56, 0xb3, 0x59, 0xf3, 0xef, 0x45, 0x8a, 0x37, 0x60, 0x9f, 0x7b, 0x96, 0x56, 0x56,
+	0x9a, 0x4d, 0xde, 0x90, 0xbb, 0x71, 0xcc, 0x04, 0x2b, 0x48, 0x95, 0xae, 0x46, 0xe6, 0x48, 0x5f,
+	0x17, 0x50, 0x69, 0x29, 0x69, 0xfa, 0x28, 0xfe, 0x26, 0x4d, 0xf1, 0x37, 0x95, 0x8e, 0xc3, 0x5c,
+	0x8c, 0x02, 0x3f, 0x9a, 0xf3, 0x0d, 0x38, 0x95, 0x40, 0xf6, 0xa0, 0xa3, 0x9c, 0x47, 0xa1, 0x6b,
+	0x20, 0xb1, 0xe2, 0x5d, 0x18, 0xeb, 0x52, 0xb7, 0xd7, 0xf4, 0x8a, 0x69, 0x6f, 0x98, 0x53, 0xeb,
+	0x9a, 0xa2, 0x66, 0x94, 0x32, 0x3e, 0xcb, 0x06, 0x6d, 0xe1, 0x8d, 0x46, 0x8c, 0x32, 0xb5, 0xe2,
+	0x1a, 0x8c, 0x8b, 0xcd, 0x79, 0x26, 0xd2, 0x94, 0xca, 0xa6, 0x5f, 0xd5, 0x7f, 0x06, 0x97, 0x00,
+	0x28, 0xac, 0xc9, 0x7f, 0x32, 0x0a, 0xba, 0x5c, 0x8c, 0x5b, 0xf8, 0x54, 0xbf, 0xc3, 0x80, 0xe9,
+	0xfc, 0x2a, 0xcc, 0xa2, 0x9b, 0x4f, 0xda, 0xfc, 0x0b, 0xaf, 0x3f, 0x66, 0x07, 0xdb, 0xff, 0x05,
+	0x98, 0x53, 0xe0, 0xd0, 0xf8, 0xe5, 0x73, 0x7c, 0x56, 0x82, 0xc4, 0x13, 0x82, 0x2b, 0xa0, 0x77,
+	0x69, 0xcb, 0xf1, 0xe4, 0x53, 0x2a, 0x7e, 0xd2, 0x35, 0xc3, 0xf3, 0x1f, 0x48, 0xf7, 0x50, 0x71,
+	0xe3, 0x16, 0x7a, 0xd2, 0x78, 0x84, 0xc1, 0x69, 0x29, 0x17, 0xdd, 0x0a, 0xd3, 0x7e, 0x98, 0x5b,
+	0x97, 0x29, 0x6d, 0x11, 0x6a, 0xec, 0xe5, 0xfe, 0x1a, 0x0e, 0xf5, 0xbb, 0x39, 0x25, 0x6a, 0x72,
+	0xed, 0xff, 0x6e, 0xe0, 0xba, 0x2a, 0x20, 0x8a, 0x57, 0x06, 0xa2, 0x90, 0x83, 0x53, 0xdd, 0x81,
+	0x49, 0xfc, 0x1e, 0x8c, 0xf8, 0x48, 0xc1, 0xe0, 0x2f, 0xc2, 0x00, 0x03, 0x17, 0xdf, 0x2f, 0xb8,
+	0x08, 0x53, 0x18, 0x34, 0xae, 0xd6, 0xa5, 0x96, 0xeb, 0xb4, 0x85, 0x6b, 0x78, 0x12, 0xf3, 0x4c,
+	0xcc, 0x8a, 0x78, 0xc3, 0x27, 0x9f, 0xcf, 0x1b, 0x3e, 0x35, 0xac, 0x37, 0x3c, 0xe2, 0x97, 0x9e,
+	0x8e, 0xf9, 0xa5, 0x55, 0x5f, 0xfe, 0x4c, 0xd4, 0x97, 0x1f, 0x71, 0x5b, 0xcf, 0x46, 0xdd, 0xd6,
+	0xc6, 0x16, 0x9c, 0x88, 0xca, 0x2d, 0xdb, 0x9a, 0x93, 0x9b, 0x30, 0x22, 0x79, 0x05, 0x2e, 0xf6,
+	0x1d, 0x12, 0xdc, 0x78, 0x23, 0x78, 0xc2, 0x74, 0x54, 0x7d, 0xdd, 0x43, 0x4e, 0x47, 0xa5, 0x72,
+	0x38, 0x1d, 0xab, 0x31, 0x25, 0x26, 0x35, 0xf1, 0x8c, 0xb3, 0xce, 0xf8, 0x23, 0x0d, 0x4a, 0x49,
+	0x58, 0x83, 0xdd, 0xd5, 0x88, 0xf0, 0x4b, 0x25, 0x3f, 0xa9, 0x48, 0xaf, 0xba, 0x18, 0x7e, 0xd3,
+	0x06, 0x51, 0x94, 0x7e, 0x08, 0x26, 0xfa, 0x7d, 0xb0, 0x65, 0xa0, 0x9b, 0x3c, 0x69, 0xc0, 0x64,
+	0x4b, 0xae, 0x11, 0xd3, 0x56, 0x91, 0xbe, 0xac, 0x46, 0xd4, 0xf5, 0xeb, 0x43, 0xf4, 0x26, 0xd0,
+	0xd7, 0xef, 0x06, 0x01, 0x40, 0x77, 0x2d, 0xbb, 0xbb, 0xe5, 0x34, 0xa8, 0xf1, 0x1a, 0x8c, 0xb0,
+	0xff, 0xcc, 0x62, 0x13, 0x41, 0xa4, 0xf4, 0x63, 0xe4, 0x04, 0xe8, 0x6b, 0xb6, 0x6b, 0xf1, 0x48,
+	0xa1, 0x75, 0xe7, 0x90, 0x76, 0x8f, 0x74, 0xcd, 0xf8, 0xbf, 0x72, 0xcc, 0x72, 0x0a, 0xaa, 0xab,
+	0x7e, 0x11, 0x3c, 0x53, 0x47, 0x65, 0x15, 0x0c, 0x58, 0x27, 0x3c, 0x53, 0x67, 0x05, 0xfe, 0xb5,
+	0xac, 0x0e, 0xbf, 0x27, 0xa0, 0xc0, 0x62, 0x2c, 0xed, 0x1c, 0x7e, 0x74, 0x7a, 0x4e, 0x81, 0xc6,
+	0x90, 0xda, 0xd7, 0xe1, 0x44, 0x04, 0xde, 0x73, 0x9e, 0xd2, 0xb6, 0xd0, 0xb0, 0x44, 0xa9, 0xb0,
+	0xc7, 0x4a, 0xf8, 0x43, 0x66, 0xaf, 0xd6, 0xe0, 0x3d, 0x12, 0x27, 0xbd, 0xe0, 0x06, 0x91, 0xbc,
+	0xc8, 0x2d, 0x18, 0x69, 0x39, 0x0d, 0x7e, 0x54, 0x36, 0x93, 0x38, 0x5e, 0x0a, 0x9b, 0x16, 0xb7,
+	0xf0, 0x52, 0x14, 0xab, 0x62, 0x7c, 0xc2, 0x24, 0x39, 0xc6, 0x05, 0xf9, 0x6a, 0x81, 0xca, 0x86,
+	0x46, 0x32, 0x1b, 0x1a, 0x09, 0x6c, 0x50, 0xaf, 0x4b, 0x48, 0xd0, 0x78, 0x4d, 0xee, 0x91, 0xb0,
+	0xfd, 0x52, 0x46, 0x60, 0x35, 0x3a, 0x4f, 0x5f, 0xeb, 0xd7, 0x2b, 0xa5, 0x6e, 0x38, 0x4d, 0x7d,
+	0xab, 0x21, 0xad, 0x7f, 0x59, 0xac, 0x86, 0x94, 0xba, 0x81, 0x14, 0xfe, 0x63, 0x4d, 0xe1, 0xe0,
+	0x6e, 0xd7, 0xa9, 0x53, 0xd7, 0x95, 0x04, 0x49, 0x7c, 0x70, 0x20, 0xce, 0x41, 0x5e, 0x10, 0x72,
+	0x30, 0x4d, 0x30, 0x72, 0xa9, 0x82, 0xe1, 0x8f, 0x7b, 0x7e, 0xf8, 0x71, 0xff, 0x4e, 0x8e, 0x29,
+	0x9b, 0x38, 0xd9, 0xdf, 0xfd, 0x91, 0x27, 0xef, 0x40, 0x31, 0x02, 0x1f, 0x06, 0xb3, 0xe7, 0x01,
+	0x61, 0xe7, 0x95, 0x4a, 0xe5, 0x20, 0xb2, 0xbd, 0x19, 0x8d, 0xcf, 0xfd, 0x4e, 0xbf, 0x2e, 0x47,
+	0xfa, 0xf4, 0x5d, 0x88, 0xd4, 0xfd, 0x6e, 0x54, 0x86, 0x55, 0x77, 0x60, 0xff, 0xfd, 0x4b, 0x70,
+	0xf9, 0x25, 0x56, 0x5b, 0x98, 0x74, 0x6f, 0xc2, 0x69, 0xa9, 0x10, 0x47, 0xfc, 0x9e, 0x14, 0x10,
+	0xfc, 0x04, 0x8c, 0x72, 0xf9, 0x10, 0xc1, 0x8e, 0x31, 0x11, 0x18, 0x8a, 0x41, 0xbd, 0x7b, 0xd4,
+	0xc3, 0xaa, 0xbe, 0xf3, 0xec, 0xb1, 0x7c, 0x59, 0x58, 0x05, 0x10, 0x88, 0xd7, 0x22, 0xb3, 0xe2,
+	0x6a, 0x3f, 0x26, 0x47, 0xc9, 0x0a, 0xe6, 0x85, 0x72, 0xc1, 0x95, 0x41, 0x9a, 0xd4, 0x8d, 0x90,
+	0x72, 0x20, 0x5f, 0x70, 0x8d, 0x82, 0xbc, 0x50, 0x62, 0xfe, 0x53, 0x4e, 0x59, 0x2b, 0x12, 0xaf,
+	0xc3, 0x24, 0x3d, 0xdf, 0xe8, 0x17, 0x73, 0xe6, 0x75, 0x98, 0x8b, 0x7e, 0x66, 0x81, 0x8b, 0xe5,
+	0x84, 0xa9, 0x47, 0xbe, 0xb3, 0x80, 0xdf, 0x81, 0xe0, 0x9f, 0xaf, 0x13, 0x47, 0x53, 0x22, 0x15,
+	0x0e, 0xe2, 0x98, 0x34, 0x88, 0xe4, 0x5e, 0x28, 0xe7, 0xfc, 0x53, 0xd0, 0xd7, 0xfa, 0xf5, 0x1a,
+	0xef, 0xc3, 0x24, 0x0a, 0x77, 0xa0, 0x20, 0x0a, 0x43, 0x2b, 0x88, 0xe7, 0x9a, 0x17, 0x8b, 0x51,
+	0xc9, 0x8e, 0xf8, 0xe6, 0x23, 0xac, 0x37, 0x1e, 0xc2, 0xbc, 0x2a, 0x90, 0xd2, 0x05, 0x99, 0x89,
+	0x8e, 0x65, 0x77, 0xe5, 0x13, 0xb9, 0x0b, 0x83, 0x78, 0x61, 0x16, 0x3a, 0xe2, 0x97, 0xf1, 0xa5,
+	0xe8, 0x6c, 0x88, 0xfa, 0xfd, 0x3f, 0x1f, 0x11, 0xaf, 0xcb, 0xfd, 0x90, 0x27, 0x49, 0xd6, 0x85,
+	0xe8, 0x74, 0x8a, 0x9d, 0x69, 0xfc, 0x47, 0x0d, 0xce, 0x4a, 0xe5, 0x6e, 0xe2, 0xd3, 0x30, 0xb1,
+	0xb6, 0x4b, 0x7a, 0x42, 0xe4, 0x54, 0x1a, 0x64, 0x07, 0x46, 0x59, 0x87, 0xfc, 0xc3, 0x9e, 0x5b,
+	0xfd, 0x48, 0x8c, 0x63, 0x5f, 0x14, 0xd9, 0x18, 0x2d, 0x19, 0xf1, 0x94, 0xbe, 0x08, 0x10, 0x66,
+	0x3e, 0x4b, 0xb0, 0xe0, 0x28, 0xc3, 0xa5, 0xa1, 0xb7, 0xa3, 0xd3, 0x3e, 0xde, 0xdd, 0xf5, 0x08,
+	0xcf, 0x17, 0x87, 0xeb, 0x50, 0xc0, 0xfa, 0x3f, 0xd3, 0x60, 0x5c, 0xdc, 0x8e, 0x48, 0x3c, 0x24,
+	0x4b, 0x8a, 0xc0, 0x9f, 0x14, 0x05, 0x9f, 0x88, 0xaf, 0xcc, 0xf3, 0xe3, 0x64, 0xfe, 0x8d, 0xf9,
+	0xcf, 0xc1, 0xd4, 0xa6, 0xe5, 0x7a, 0x5b, 0x4e, 0xc3, 0x7e, 0x6c, 0xd3, 0x46, 0x86, 0x4b, 0x48,
+	0x0a, 0x3c, 0xb9, 0x01, 0x85, 0xfa, 0x81, 0xdd, 0x6c, 0x74, 0x71, 0x6a, 0x27, 0x9f, 0xd1, 0xf9,
+	0x37, 0x3b, 0x02, 0x48, 0xe3, 0x0b, 0x30, 0x66, 0x52, 0x66, 0x3d, 0x92, 0x0b, 0x30, 0xd9, 0xb0,
+	0xbb, 0xb4, 0xee, 0x39, 0xf8, 0x01, 0x1d, 0xf1, 0xdd, 0x3e, 0x29, 0x0b, 0x2f, 0x54, 0xda, 0xcd,
+	0xe0, 0x8b, 0x7d, 0x3c, 0x61, 0x74, 0x60, 0x36, 0x7a, 0x61, 0x04, 0x0f, 0x82, 0x1c, 0x2f, 0xf5,
+	0x20, 0xc8, 0x87, 0x47, 0x28, 0xb2, 0xc4, 0x06, 0x27, 0x30, 0x60, 0x93, 0xde, 0x7f, 0x73, 0x0a,
+	0x4d, 0x01, 0x66, 0xfc, 0x52, 0x0e, 0x66, 0xf0, 0x8b, 0x0e, 0x54, 0xb6, 0xee, 0x31, 0x38, 0x84,
+	0x7f, 0x02, 0x14, 0xb7, 0xee, 0xd5, 0x0a, 0x8b, 0x18, 0x60, 0xc5, 0xbf, 0x30, 0xcc, 0xab, 0x92,
+	0x4d, 0x98, 0x68, 0x38, 0xf5, 0xa7, 0xb4, 0x6b, 0x37, 0x7c, 0xc9, 0x5f, 0x1c, 0x84, 0x67, 0xcd,
+	0xaf, 0x20, 0x22, 0xb5, 0x07, 0x08, 0x4a, 0xb7, 0x60, 0x52, 0x6a, 0x64, 0x18, 0x65, 0x56, 0x7a,
+	0x17, 0x66, 0x54, 0xbc, 0x43, 0xa9, 0xc2, 0x7d, 0x38, 0xc9, 0x1d, 0x1b, 0xbb, 0x4d, 0xab, 0x4e,
+	0x5b, 0xe8, 0x73, 0xe0, 0x5f, 0x08, 0x27, 0xb7, 0xfd, 0x43, 0x5c, 0xce, 0xa5, 0x57, 0x52, 0xde,
+	0x0c, 0x07, 0x15, 0xe5, 0x03, 0xdd, 0xdf, 0xcd, 0xfb, 0xdf, 0xdf, 0x51, 0x8a, 0xd9, 0xa2, 0x64,
+	0x3d, 0x7e, 0x4c, 0xeb, 0x6c, 0xc3, 0x2f, 0xbe, 0x3f, 0xea, 0x8a, 0xe3, 0x0b, 0xdd, 0x2f, 0x10,
+	0xdf, 0x28, 0xe5, 0x9f, 0xc9, 0xa4, 0xf6, 0x93, 0x03, 0xff, 0x23, 0x74, 0x22, 0x45, 0x1e, 0xc0,
+	0x24, 0x6d, 0xe3, 0x05, 0x5d, 0x86, 0x57, 0x58, 0x97, 0x37, 0xb2, 0x90, 0xb7, 0x58, 0x0e, 0xeb,
+	0xa1, 0x0b, 0x59, 0x46, 0xc4, 0x76, 0xb0, 0x38, 0xf9, 0x46, 0x10, 0xe1, 0xcd, 0x4c, 0x08, 0x57,
+	0x1e, 0x3f, 0xb6, 0xdb, 0xb6, 0x77, 0xc4, 0x12, 0xe1, 0x89, 0x14, 0x79, 0x00, 0x73, 0x2d, 0xcb,
+	0xab, 0x1f, 0xd4, 0xe8, 0xa7, 0x9d, 0x2e, 0x75, 0x5d, 0x5c, 0x2b, 0x47, 0x53, 0x9e, 0x90, 0xe3,
+	0xc5, 0xf3, 0x2a, 0x6d, 0xe2, 0xdc, 0x11, 0xdf, 0x2e, 0xc5, 0x06, 0x74, 0xc4, 0x51, 0x0e, 0x51,
+	0x18, 0x8b, 0x30, 0x1b, 0xe9, 0x02, 0x99, 0x82, 0x82, 0xff, 0x1d, 0x54, 0xfd, 0x18, 0x99, 0x86,
+	0x89, 0x4e, 0x97, 0x3e, 0xa6, 0x5d, 0x96, 0xd4, 0x8c, 0x65, 0xd0, 0xa3, 0x14, 0xb2, 0x0a, 0x96,
+	0xc8, 0xd3, 0x8f, 0x11, 0x1d, 0xa6, 0xac, 0xb6, 0x67, 0xfb, 0x50, 0xba, 0x66, 0xfc, 0xa5, 0x06,
+	0xc5, 0x34, 0x92, 0x12, 0x64, 0x6b, 0x1b, 0x0a, 0xc1, 0xe7, 0xef, 0xf9, 0xe5, 0xa0, 0xe5, 0xcc,
+	0x3d, 0x5c, 0xf4, 0x3f, 0x76, 0x6f, 0x06, 0x38, 0xd8, 0xa8, 0xa3, 0x78, 0xfa, 0xc6, 0xb6, 0x48,
+	0x19, 0xf7, 0xa1, 0x10, 0x7c, 0x1a, 0x7f, 0x0c, 0x72, 0x95, 0x36, 0x3f, 0x75, 0xda, 0x76, 0xbc,
+	0x4a, 0x5b, 0xd7, 0x08, 0xc0, 0x58, 0xf9, 0x53, 0xdb, 0xf5, 0x5c, 0x7e, 0x06, 0xb2, 0xe6, 0x50,
+	0x77, 0xdb, 0xf1, 0x30, 0x4b, 0xcf, 0xb3, 0x0a, 0xf7, 0x3c, 0x7d, 0x84, 0xfd, 0xdf, 0xf4, 0xf4,
+	0xd1, 0x85, 0xbf, 0xcd, 0x05, 0x47, 0x21, 0xb3, 0x30, 0x59, 0xdd, 0x5b, 0xd9, 0xdb, 0xaf, 0xd6,
+	0xb6, 0x77, 0xb6, 0xcb, 0xfa, 0x31, 0x29, 0xa3, 0xb2, 0x5d, 0xd9, 0xd3, 0x35, 0xc6, 0x53, 0x91,
+	0xb1, 0x73, 0x5f, 0xcf, 0xf1, 0x13, 0x3a, 0x9e, 0x5c, 0x5f, 0xdf, 0xac, 0x6c, 0x97, 0xf5, 0x3c,
+	0x6b, 0x51, 0xe4, 0x95, 0x4d, 0x73, 0xc7, 0xd4, 0x47, 0x48, 0x11, 0x4e, 0x04, 0x68, 0xf7, 0x6a,
+	0x95, 0xed, 0xda, 0xfb, 0xfb, 0x3b, 0xe6, 0xfe, 0x96, 0x3e, 0x4a, 0x4e, 0xc2, 0x71, 0x51, 0xb2,
+	0x56, 0x5e, 0xdd, 0xd9, 0xda, 0xaa, 0x54, 0xab, 0x95, 0x9d, 0x6d, 0x7d, 0x8c, 0xcc, 0x03, 0x11,
+	0x05, 0x5b, 0x2b, 0x95, 0xed, 0xbd, 0xf2, 0xf6, 0xca, 0xf6, 0x6a, 0x59, 0x1f, 0x97, 0x2a, 0xf8,
+	0x27, 0x83, 0x6b, 0x3b, 0x0f, 0xb7, 0xf5, 0x02, 0x39, 0x0d, 0x27, 0xa3, 0x05, 0xe5, 0x7b, 0xe6,
+	0xca, 0x5a, 0x79, 0x4d, 0x9f, 0x90, 0x6a, 0x6d, 0x97, 0xcb, 0x6b, 0xd5, 0x9a, 0x59, 0xbe, 0xbb,
+	0xb3, 0xb3, 0xa7, 0x03, 0x39, 0x03, 0xc5, 0x48, 0x2d, 0xb3, 0x7c, 0x77, 0x65, 0x13, 0x1b, 0x9b,
+	0x24, 0x17, 0xe0, 0x4c, 0x14, 0xa7, 0x59, 0x79, 0xc0, 0x60, 0x76, 0x37, 0x57, 0x56, 0xcb, 0xfa,
+	0x14, 0x79, 0x19, 0xce, 0x27, 0xf5, 0xac, 0xb6, 0xbd, 0x13, 0x1c, 0x97, 0x4e, 0x93, 0x19, 0x80,
+	0xa0, 0x2f, 0x1f, 0xe8, 0x33, 0x0b, 0xdf, 0xd2, 0x00, 0x78, 0x78, 0x1a, 0x94, 0xc1, 0x13, 0xa0,
+	0x23, 0x5a, 0xb3, 0xb6, 0xf7, 0xe1, 0x6e, 0xd9, 0xe7, 0x7c, 0x24, 0x77, 0xbd, 0xb2, 0x59, 0xd6,
+	0x35, 0xf2, 0x12, 0xcc, 0xc9, 0xb9, 0x77, 0x37, 0x77, 0x56, 0xef, 0xf3, 0x43, 0x33, 0x39, 0x9b,
+	0x1f, 0xd8, 0xea, 0x79, 0x72, 0x0a, 0x5e, 0x92, 0xf3, 0xc5, 0x59, 0x6b, 0x79, 0x4d, 0x1f, 0x89,
+	0x62, 0xba, 0x67, 0xae, 0xec, 0x6e, 0xe8, 0xa3, 0x0b, 0x7f, 0x4f, 0x83, 0x31, 0xfe, 0x69, 0x6b,
+	0x36, 0x8e, 0xeb, 0x55, 0x85, 0xa6, 0x39, 0x98, 0xf6, 0x73, 0xee, 0xee, 0x99, 0xeb, 0x55, 0x7e,
+	0x96, 0xec, 0x67, 0x95, 0x3f, 0xd8, 0xbb, 0xc1, 0x05, 0xce, 0xcf, 0x59, 0xdf, 0xaf, 0x32, 0x81,
+	0x98, 0x85, 0xc9, 0x00, 0xd1, 0x7a, 0x55, 0x1f, 0x91, 0x33, 0x1e, 0xac, 0x57, 0xf5, 0x51, 0x39,
+	0xe3, 0x83, 0xf5, 0xaa, 0x3e, 0x26, 0x67, 0x7c, 0x71, 0xbd, 0xaa, 0x8f, 0xcb, 0x4d, 0x7f, 0xb0,
+	0x5e, 0x3d, 0x5c, 0xd6, 0x0b, 0x0b, 0xbf, 0xa1, 0xc1, 0x4b, 0x89, 0x1f, 0x9d, 0x21, 0x17, 0xe1,
+	0x2c, 0xf6, 0xa7, 0x26, 0x7a, 0xb8, 0xba, 0xb1, 0xb2, 0x7d, 0xaf, 0xac, 0x74, 0xe5, 0x12, 0x5c,
+	0x4c, 0x05, 0xd9, 0xda, 0x59, 0xab, 0xac, 0x57, 0xca, 0x6b, 0xba, 0x46, 0x0c, 0x38, 0x97, 0x0a,
+	0xb6, 0xb2, 0xc6, 0x84, 0x2b, 0x47, 0x5e, 0x81, 0x0b, 0xa9, 0x30, 0x6b, 0xe5, 0xcd, 0xf2, 0x5e,
+	0x79, 0x4d, 0xcf, 0x2f, 0x78, 0x30, 0xa5, 0x7c, 0xda, 0x93, 0x09, 0x78, 0xf9, 0x41, 0xd9, 0xac,
+	0xec, 0x7d, 0xa8, 0x10, 0xc6, 0x44, 0x55, 0xc9, 0x5f, 0xd9, 0x5c, 0x31, 0xb7, 0x74, 0x8d, 0x8d,
+	0xa5, 0x5a, 0xf0, 0x70, 0xc5, 0xdc, 0xae, 0x6c, 0xdf, 0xd3, 0x73, 0x38, 0xbf, 0x22, 0xb8, 0xf6,
+	0x2a, 0xeb, 0x1f, 0xea, 0xf9, 0x85, 0xaf, 0x69, 0x30, 0x25, 0x7f, 0xc7, 0x91, 0x35, 0x6b, 0x96,
+	0xab, 0x3b, 0xfb, 0xe6, 0xaa, 0xca, 0x8f, 0x22, 0x9c, 0x50, 0xf3, 0xc5, 0x59, 0xbe, 0x96, 0x54,
+	0x63, 0xad, 0xac, 0xe7, 0x18, 0x3d, 0x6a, 0xbe, 0x7f, 0xc1, 0x20, 0xcf, 0xfa, 0xa0, 0x16, 0x21,
+	0x67, 0xf4, 0x91, 0x85, 0x9f, 0xd0, 0x60, 0x16, 0x3f, 0xf5, 0xc7, 0x3f, 0xe6, 0x85, 0x14, 0x95,
+	0x60, 0x1e, 0xef, 0x0a, 0xd4, 0x56, 0x56, 0xf7, 0x2a, 0x3b, 0xdb, 0x0a, 0x55, 0x67, 0xa0, 0x18,
+	0x2f, 0xe3, 0x3c, 0xd5, 0xb5, 0xe4, 0xd2, 0x55, 0xb3, 0xbc, 0xb2, 0xc7, 0xe8, 0x4b, 0x2c, 0xdd,
+	0xdf, 0x5d, 0x63, 0xa5, 0xf9, 0x85, 0x8f, 0xfc, 0xef, 0x76, 0x49, 0x9f, 0x55, 0x63, 0x55, 0x78,
+	0xb7, 0xfd, 0x3a, 0xbb, 0x2b, 0xe6, 0xca, 0x96, 0x4f, 0xcc, 0x69, 0x38, 0x99, 0x54, 0xba, 0xb3,
+	0xbe, 0xae, 0x6b, 0xac, 0x17, 0x89, 0x85, 0xdb, 0x7a, 0x6e, 0x61, 0x19, 0xc6, 0x57, 0x9d, 0xe0,
+	0xcb, 0xff, 0x02, 0xdb, 0x38, 0xe4, 0x37, 0x77, 0x1e, 0x72, 0x65, 0xbd, 0x55, 0x5e, 0xab, 0xec,
+	0x6f, 0xe9, 0x39, 0x56, 0xbc, 0x51, 0xb9, 0xb7, 0xa1, 0xe7, 0x17, 0x7e, 0x18, 0x26, 0x2a, 0xce,
+	0x6e, 0xd7, 0x61, 0xa6, 0x22, 0x63, 0x75, 0x65, 0xa7, 0xb6, 0x6b, 0xee, 0x30, 0x2d, 0x50, 0xab,
+	0x96, 0xdf, 0xdf, 0xe7, 0x37, 0x35, 0xf4, 0x63, 0x6c, 0x1a, 0x4b, 0x45, 0xe6, 0xca, 0xf6, 0xda,
+	0xce, 0x16, 0x3f, 0x58, 0x97, 0xb2, 0xd7, 0xee, 0x72, 0x21, 0x51, 0xb2, 0x6a, 0x66, 0x79, 0x6b,
+	0x87, 0xf1, 0x82, 0x29, 0x71, 0xa9, 0x64, 0x75, 0xab, 0xaa, 0x8f, 0x2c, 0x7c, 0x2b, 0x07, 0x93,
+	0xd2, 0xc7, 0xd7, 0x58, 0x3b, 0xa2, 0x7f, 0x4c, 0x95, 0xc9, 0x62, 0xa3, 0x64, 0xef, 0x96, 0xb7,
+	0xd7, 0x98, 0x4c, 0xca, 0x0c, 0xe1, 0x25, 0x2b, 0x0f, 0x56, 0x2a, 0x9b, 0x2b, 0x77, 0x37, 0x85,
+	0xe8, 0xa8, 0x65, 0x78, 0x33, 0x84, 0x4d, 0x93, 0x58, 0xd1, 0x5a, 0x59, 0x14, 0x8d, 0x48, 0xfc,
+	0x0f, 0x8b, 0xf6, 0x56, 0x37, 0x58, 0x73, 0xa3, 0x4c, 0x4a, 0x95, 0x42, 0xbe, 0xf4, 0x8c, 0xc5,
+	0x08, 0xf4, 0x27, 0xe4, 0x38, 0x39, 0x07, 0x25, 0xa5, 0x64, 0xcf, 0xfc, 0x50, 0xb4, 0xc6, 0x30,
+	0x16, 0x62, 0x35, 0xcd, 0x32, 0xd3, 0xe8, 0x65, 0x7d, 0x62, 0xe1, 0xeb, 0x9a, 0x7f, 0xaf, 0xa0,
+	0xea, 0x7f, 0x39, 0x52, 0x6e, 0x3c, 0x5c, 0x3d, 0xcf, 0xc2, 0xa9, 0x68, 0xfe, 0x5e, 0x6d, 0xd7,
+	0x2c, 0x57, 0xcb, 0xdb, 0x6c, 0x2d, 0x3d, 0x01, 0xba, 0x5a, 0x8c, 0x77, 0x71, 0x62, 0xc8, 0x70,
+	0x81, 0xcb, 0x47, 0x18, 0x8a, 0x2b, 0xa6, 0x58, 0xdf, 0x46, 0x16, 0x7e, 0x10, 0xa6, 0xc5, 0x95,
+	0x8f, 0x2d, 0xda, 0xb0, 0x7b, 0x2d, 0xbe, 0x1a, 0xf2, 0x25, 0x8b, 0x0b, 0x57, 0x6d, 0x6b, 0xe5,
+	0xde, 0x76, 0x79, 0xaf, 0xb2, 0xaa, 0x1f, 0xe3, 0x6b, 0xab, 0x52, 0x58, 0xad, 0x32, 0x65, 0x87,
+	0xab, 0xa4, 0x92, 0xbf, 0xfd, 0x60, 0xab, 0xac, 0xe7, 0x16, 0x28, 0x4c, 0xf2, 0x18, 0x76, 0x5c,
+	0x16, 0x4e, 0xc1, 0x4b, 0x7c, 0xc4, 0x7c, 0x5e, 0x7f, 0xb0, 0x57, 0x36, 0xb7, 0x51, 0x1c, 0xa3,
+	0x45, 0x6c, 0xe9, 0xc6, 0x22, 0x8d, 0x2d, 0xa6, 0x89, 0x45, 0xb5, 0xea, 0xc3, 0xca, 0xde, 0xea,
+	0x86, 0x9e, 0x5b, 0xd8, 0x83, 0x99, 0xe0, 0x52, 0xc3, 0x7a, 0xd3, 0x7a, 0xc2, 0x36, 0x4e, 0xfa,
+	0xce, 0x6e, 0x6d, 0x7d, 0x73, 0xe5, 0x5e, 0xb5, 0x16, 0x5e, 0x66, 0x9a, 0x83, 0xe9, 0x20, 0x17,
+	0x39, 0x8d, 0xca, 0x31, 0xc8, 0xe2, 0x83, 0x58, 0x5b, 0xdf, 0x31, 0x57, 0x19, 0xf1, 0x7f, 0xaa,
+	0xe1, 0x17, 0x71, 0xa5, 0xa0, 0xf8, 0xa8, 0x2f, 0x95, 0x9c, 0x6a, 0xaf, 0xdd, 0xb0, 0x8e, 0xb8,
+	0x3c, 0xab, 0x25, 0x5b, 0x0e, 0x96, 0x70, 0xf5, 0xab, 0x94, 0xec, 0xf5, 0xa8, 0xcb, 0x8a, 0x72,
+	0xc8, 0x6c, 0xa5, 0xe8, 0x21, 0x6d, 0xb4, 0x79, 0x21, 0x0e, 0x5b, 0xa4, 0xde, 0x41, 0xaf, 0x8b,
+	0x65, 0x23, 0xf1, 0xd6, 0xd6, 0xbb, 0x36, 0x2b, 0x19, 0x8d, 0xd7, 0xaa, 0x5a, 0x5e, 0xaf, 0xcb,
+	0xca, 0xc6, 0x16, 0xbe, 0x1a, 0x7d, 0x48, 0xc4, 0x1f, 0xfd, 0x90, 0xf3, 0xd1, 0x97, 0x23, 0x3c,
+	0x7f, 0xbf, 0xfd, 0xb4, 0xed, 0x7c, 0xc2, 0x2c, 0xc4, 0x0b, 0xd1, 0x3b, 0xfb, 0x1c, 0xc0, 0xff,
+	0xad, 0x6b, 0x6c, 0xe1, 0x4c, 0x7c, 0x4f, 0xc4, 0x6f, 0xd4, 0xec, 0x74, 0xf4, 0xdc, 0xc2, 0xbf,
+	0xcb, 0xe1, 0xbd, 0xcf, 0xc4, 0xd7, 0x01, 0x68, 0x0e, 0xa5, 0x94, 0x85, 0x64, 0xbc, 0x2a, 0x1e,
+	0xdd, 0x27, 0x00, 0x6d, 0x3b, 0x1e, 0x9e, 0xf7, 0xe3, 0xc5, 0x9b, 0x0b, 0xc9, 0xaf, 0x53, 0x18,
+	0x1c, 0xde, 0xe1, 0xc9, 0xf5, 0x6b, 0x6e, 0xe5, 0x91, 0x83, 0x68, 0xf2, 0x6c, 0x09, 0x4f, 0x03,
+	0xda, 0xb5, 0x7a, 0x2e, 0x5e, 0xdb, 0xe9, 0x83, 0xa8, 0xea, 0x39, 0x9d, 0x0e, 0x6d, 0xe8, 0xa3,
+	0xfd, 0x10, 0xf1, 0xd0, 0x08, 0xfa, 0x58, 0x3f, 0x18, 0x71, 0x47, 0x68, 0xbc, 0x1f, 0x8c, 0xb8,
+	0x74, 0x54, 0x58, 0xf8, 0xfd, 0x84, 0xe7, 0xb0, 0xf2, 0xab, 0x01, 0x72, 0x39, 0x7a, 0xc9, 0x5b,
+	0x2d, 0x0f, 0xb9, 0x7d, 0x29, 0x7a, 0x65, 0x5c, 0x05, 0x44, 0x16, 0xe8, 0x5a, 0x7c, 0x50, 0x22,
+	0xaf, 0x16, 0xa8, 0xcb, 0xaf, 0x67, 0xbd, 0x12, 0xbd, 0xd3, 0xae, 0xc2, 0x31, 0x6e, 0xe9, 0xf9,
+	0xe5, 0x7f, 0x98, 0x83, 0x39, 0xe9, 0x9a, 0xa2, 0xf8, 0x0a, 0xf0, 0xaf, 0x69, 0x70, 0x22, 0xe9,
+	0x89, 0x1d, 0xb9, 0x99, 0xfe, 0xb5, 0xe1, 0x3e, 0xaf, 0x36, 0x4b, 0x6f, 0x0d, 0x5b, 0x4d, 0x38,
+	0xeb, 0xcf, 0xfe, 0xd8, 0x9f, 0xff, 0xd5, 0xcf, 0xe6, 0x4e, 0x1a, 0x64, 0xe9, 0xf0, 0x8d, 0x25,
+	0xfe, 0x6d, 0xe4, 0xa5, 0xc7, 0x1c, 0xe6, 0xb6, 0xb6, 0x70, 0x5d, 0x23, 0x5d, 0x18, 0xe3, 0xfe,
+	0x7d, 0x72, 0x39, 0xbd, 0x09, 0xe5, 0xfc, 0xa0, 0x74, 0x65, 0x30, 0xa0, 0x68, 0xfd, 0x25, 0x6c,
+	0x7d, 0xd6, 0x80, 0xb0, 0xf5, 0xdb, 0xda, 0xc2, 0xf2, 0xbf, 0x19, 0x81, 0x59, 0x89, 0x65, 0x78,
+	0x9d, 0xbc, 0x05, 0x63, 0xfc, 0x24, 0x8b, 0x5c, 0x4a, 0xbb, 0x13, 0xac, 0x9c, 0xa6, 0x95, 0x5e,
+	0x1d, 0x04, 0x26, 0x68, 0x38, 0x81, 0x34, 0xcc, 0x18, 0x13, 0x8c, 0x86, 0xae, 0xd3, 0xa4, 0x8c,
+	0x04, 0xe2, 0xc2, 0x44, 0xc0, 0x37, 0x72, 0x25, 0x0d, 0x55, 0xd4, 0x69, 0x5a, 0x7a, 0x2d, 0x03,
+	0xa4, 0x68, 0x77, 0x0e, 0xdb, 0x9d, 0x24, 0x61, 0xbb, 0xe4, 0xab, 0x30, 0x2e, 0x1c, 0xbd, 0x24,
+	0x95, 0x7a, 0xd5, 0x25, 0x5d, 0xba, 0x3c, 0x10, 0x4e, 0x34, 0x77, 0x01, 0x9b, 0x2b, 0x91, 0x62,
+	0xd0, 0xdc, 0x92, 0xcd, 0x41, 0x96, 0xbe, 0xd2, 0xb6, 0x5a, 0xf4, 0x33, 0xf2, 0x71, 0x30, 0xd2,
+	0xa9, 0x1c, 0x56, 0xc7, 0xf9, 0xd5, 0x41, 0x60, 0xa2, 0xe9, 0x22, 0x36, 0x4d, 0x16, 0xf4, 0xb0,
+	0x69, 0xd1, 0x64, 0x0b, 0xc6, 0xc4, 0x85, 0x92, 0xd4, 0x26, 0x95, 0x4b, 0xe6, 0xe9, 0x4d, 0x46,
+	0xe2, 0x12, 0x88, 0x41, 0x2d, 0x29, 0x83, 0xba, 0xfc, 0x8f, 0x72, 0x70, 0x5c, 0x92, 0x2b, 0xff,
+	0x22, 0x36, 0xf9, 0x79, 0x0d, 0xa6, 0xe4, 0x9b, 0xe1, 0x24, 0xf1, 0x8b, 0x28, 0x7d, 0x6e, 0x99,
+	0x97, 0xae, 0x67, 0xaf, 0xe0, 0x47, 0xde, 0x41, 0x0a, 0xcf, 0x92, 0xd3, 0x8c, 0x42, 0x9b, 0x43,
+	0xda, 0xd4, 0x5d, 0x92, 0xaf, 0x93, 0x93, 0x1f, 0xd3, 0xc2, 0xeb, 0xb6, 0x0b, 0xfd, 0x9a, 0x50,
+	0x6f, 0x9a, 0x97, 0x5e, 0xcf, 0x04, 0x2b, 0x28, 0x39, 0x87, 0x94, 0x14, 0xc9, 0x7c, 0x84, 0x12,
+	0x71, 0xc7, 0x76, 0xf9, 0xb7, 0x35, 0xe5, 0xbe, 0xb6, 0xff, 0x35, 0xbc, 0x5f, 0xd4, 0x60, 0x46,
+	0x8d, 0x71, 0x42, 0xae, 0x27, 0x5f, 0xf6, 0x4b, 0x8f, 0x15, 0x53, 0x7a, 0x63, 0x88, 0x1a, 0x49,
+	0x8c, 0x13, 0xa7, 0x92, 0x81, 0x2c, 0x8b, 0x03, 0xac, 0xe5, 0xbf, 0x1d, 0x83, 0xf9, 0x38, 0xcd,
+	0xbb, 0x96, 0xdd, 0x65, 0x3c, 0xf5, 0x35, 0xc9, 0xd5, 0x3e, 0xad, 0xc7, 0x8e, 0xe7, 0x4b, 0xd7,
+	0x32, 0x42, 0x0b, 0x3a, 0x4f, 0x23, 0x9d, 0x2f, 0x19, 0xba, 0x44, 0x27, 0x9e, 0x63, 0x30, 0xf5,
+	0xf2, 0x75, 0x2d, 0x9c, 0xea, 0x83, 0xf0, 0x46, 0x66, 0xfc, 0x62, 0x56, 0x70, 0xff, 0x09, 0x14,
+	0xd2, 0x71, 0x9e, 0x9c, 0x8d, 0xd2, 0x11, 0xce, 0x7f, 0xbb, 0xf1, 0x19, 0xf9, 0xbf, 0x35, 0x59,
+	0xe3, 0x2d, 0x0d, 0x68, 0x24, 0xa6, 0xf8, 0xae, 0x67, 0xaf, 0xa0, 0x6a, 0x05, 0x12, 0xe3, 0x0f,
+	0xf9, 0x49, 0x0d, 0x0a, 0xfe, 0xe9, 0x2e, 0x19, 0xd4, 0xdd, 0xc8, 0x39, 0x71, 0x69, 0x29, 0x33,
+	0x7c, 0x92, 0xf8, 0x2b, 0xfc, 0xe1, 0x87, 0x9a, 0x3f, 0xa7, 0x01, 0x84, 0x07, 0xbc, 0x64, 0x50,
+	0x47, 0x63, 0xc7, 0xc5, 0x7d, 0x65, 0x3c, 0xf9, 0xf4, 0xd8, 0xb8, 0x88, 0x34, 0x9d, 0x36, 0x52,
+	0x68, 0x62, 0x12, 0xf4, 0x35, 0x2d, 0x50, 0xd7, 0x83, 0xc4, 0x58, 0xd5, 0xda, 0xd7, 0x32, 0x42,
+	0xab, 0xe2, 0xb3, 0x10, 0x17, 0x9f, 0xaf, 0x84, 0x97, 0x04, 0x3e, 0x5b, 0xfe, 0xdd, 0x51, 0x38,
+	0x15, 0x9f, 0x70, 0x22, 0x58, 0x18, 0xf9, 0x69, 0x45, 0xb8, 0x96, 0xfb, 0x50, 0x90, 0x12, 0x83,
+	0xac, 0xf4, 0xe6, 0x50, 0x75, 0x04, 0xed, 0x25, 0xa4, 0xfd, 0x04, 0x21, 0x12, 0xed, 0x0d, 0x41,
+	0xd2, 0xaf, 0x49, 0x33, 0x70, 0x69, 0x20, 0xf2, 0xc8, 0x1c, 0xbc, 0x9e, 0xbd, 0x82, 0x20, 0xe5,
+	0x1d, 0x24, 0x65, 0x99, 0x5c, 0x8f, 0x93, 0x12, 0xce, 0xc3, 0x84, 0x78, 0x5d, 0x9f, 0x91, 0x5f,
+	0xd7, 0xa0, 0xe0, 0x47, 0x00, 0x23, 0x83, 0x1b, 0x8e, 0xc4, 0x1f, 0xeb, 0x2b, 0x7d, 0x29, 0xe1,
+	0xc5, 0x6e, 0x21, 0xad, 0x6f, 0x1a, 0x6f, 0x24, 0xd0, 0xea, 0x07, 0x04, 0x4b, 0x21, 0xf6, 0x77,
+	0x34, 0x80, 0x30, 0x6a, 0x58, 0x86, 0x91, 0x8e, 0xc5, 0x2d, 0xcb, 0x30, 0xd2, 0x09, 0x61, 0xc9,
+	0xee, 0x20, 0xc9, 0x37, 0x8d, 0x37, 0x13, 0x48, 0x6e, 0xd0, 0xfe, 0x44, 0x2f, 0x7f, 0x3b, 0xaf,
+	0x98, 0x9b, 0xf8, 0x65, 0xe2, 0x1f, 0x19, 0x60, 0x8a, 0xc5, 0xe3, 0x8f, 0x25, 0x9b, 0x62, 0x09,
+	0x51, 0xc7, 0xd4, 0x15, 0xac, 0xed, 0x34, 0x14, 0x53, 0x8c, 0x87, 0x70, 0xf8, 0x8c, 0x7c, 0x23,
+	0xbe, 0xbc, 0x5e, 0x1b, 0xd0, 0x40, 0x64, 0x6d, 0x5d, 0xcc, 0x0a, 0x9e, 0x64, 0x21, 0x2a, 0x64,
+	0x89, 0x55, 0x35, 0x83, 0x51, 0x9c, 0x14, 0xa5, 0x2c, 0xd9, 0x28, 0x4e, 0x0c, 0x5a, 0xa6, 0x1a,
+	0xc5, 0x48, 0xc3, 0xf2, 0x5f, 0xcf, 0x29, 0xfb, 0x27, 0x71, 0xf1, 0xdf, 0x0d, 0x16, 0xf1, 0xcb,
+	0x19, 0x43, 0xc2, 0x97, 0xae, 0x0c, 0x06, 0x14, 0x54, 0xcc, 0x23, 0x15, 0xba, 0x31, 0xc9, 0xa8,
+	0x10, 0x0f, 0x1a, 0x98, 0xce, 0x3d, 0x84, 0x51, 0x0c, 0xbd, 0x9e, 0x2c, 0x12, 0xf1, 0x28, 0xef,
+	0xa5, 0xcb, 0x03, 0xe1, 0x44, 0x8b, 0x67, 0xb0, 0xc5, 0x79, 0x63, 0x4e, 0x6a, 0x71, 0xa9, 0xce,
+	0x40, 0x58, 0xbb, 0x5f, 0xed, 0xbf, 0x07, 0x4b, 0x88, 0xee, 0xde, 0xaf, 0xb3, 0x11, 0x05, 0x7f,
+	0x1e, 0x9b, 0x3e, 0xb5, 0x70, 0x52, 0x6e, 0xfa, 0x2b, 0xc1, 0x65, 0xf7, 0xcf, 0xc8, 0x4f, 0x48,
+	0x9a, 0xf2, 0x4a, 0x86, 0x38, 0xd7, 0x7d, 0x06, 0x3d, 0x31, 0x22, 0xb6, 0x71, 0x19, 0x29, 0xb8,
+	0x48, 0xce, 0xcb, 0x14, 0x04, 0x33, 0x42, 0xa2, 0xe4, 0xd7, 0x35, 0x20, 0xf1, 0xa8, 0xdc, 0xe4,
+	0xcd, 0x67, 0x88, 0x70, 0x5e, 0xba, 0x31, 0x5c, 0x25, 0x41, 0xea, 0x6b, 0x48, 0xea, 0xcb, 0xc6,
+	0xb9, 0x04, 0x52, 0x3f, 0xb1, 0xbd, 0x83, 0x70, 0xeb, 0x4c, 0x7e, 0x24, 0xd8, 0xdb, 0x5c, 0xce,
+	0x18, 0xa0, 0xbb, 0xdf, 0xa0, 0x45, 0xf6, 0x37, 0x06, 0xd2, 0x71, 0xa6, 0x94, 0x36, 0x68, 0x9c,
+	0x80, 0x51, 0x0c, 0x5c, 0xdd, 0x4f, 0x5a, 0xe5, 0x28, 0xdb, 0xfd, 0xa4, 0x55, 0x09, 0x98, 0xad,
+	0x9a, 0x94, 0x7e, 0xeb, 0x18, 0x1d, 0x5b, 0x19, 0xae, 0x5f, 0xd0, 0x60, 0x5a, 0x09, 0x4f, 0x9d,
+	0x6c, 0xcc, 0xa5, 0x87, 0xd2, 0x4e, 0x36, 0xe6, 0xfa, 0x04, 0xcf, 0x4e, 0xa6, 0x0c, 0xa3, 0x68,
+	0x2b, 0x94, 0x1d, 0xc9, 0x8a, 0x6c, 0x21, 0x43, 0xd4, 0xe9, 0xbe, 0x1b, 0xab, 0x94, 0xd0, 0xd9,
+	0xc6, 0x71, 0x24, 0x66, 0x9a, 0xc8, 0x6a, 0x84, 0xfc, 0xea, 0x50, 0x8e, 0x9f, 0x81, 0xc1, 0xaf,
+	0x93, 0x1d, 0x3f, 0x83, 0x83, 0x4a, 0xfb, 0x66, 0xaf, 0x71, 0x5c, 0xe6, 0x94, 0x24, 0xbe, 0xdf,
+	0xd4, 0x60, 0x46, 0x8d, 0xb4, 0x4c, 0x96, 0x86, 0x0c, 0x02, 0x9d, 0x6c, 0x26, 0xf5, 0x0b, 0xe2,
+	0xec, 0xaf, 0x41, 0xc6, 0x4b, 0x8a, 0x64, 0x09, 0x58, 0xa4, 0xeb, 0x57, 0x34, 0x98, 0x8d, 0x04,
+	0x57, 0x26, 0x19, 0xda, 0x51, 0x23, 0xe8, 0x25, 0x5b, 0x45, 0xfd, 0x23, 0x37, 0x5f, 0x41, 0xd2,
+	0x0c, 0xe3, 0x6c, 0x22, 0x69, 0x4b, 0x22, 0x64, 0x1d, 0x23, 0xf1, 0xdb, 0x1a, 0xcc, 0xc5, 0xe2,
+	0x0a, 0x27, 0xdb, 0x42, 0xfd, 0x03, 0x41, 0x97, 0xde, 0x1c, 0xaa, 0x8e, 0xea, 0xd2, 0x23, 0xc9,
+	0x3c, 0x24, 0x7f, 0xae, 0xc1, 0x99, 0x7e, 0x51, 0x8f, 0xc9, 0x7b, 0xcf, 0x15, 0xac, 0xb9, 0xf4,
+	0xb9, 0x67, 0xad, 0x2e, 0xc8, 0xbf, 0x81, 0xe4, 0x2f, 0x1a, 0xaf, 0x25, 0xf3, 0x59, 0x88, 0x68,
+	0x54, 0xd9, 0x7d, 0x47, 0x83, 0xf9, 0xe4, 0x58, 0xc7, 0xe4, 0xed, 0xc1, 0x04, 0x25, 0x06, 0x67,
+	0x2e, 0xbd, 0x33, 0x7c, 0x45, 0xd1, 0x87, 0x9b, 0xd8, 0x87, 0x25, 0x63, 0x21, 0xa9, 0x0f, 0x4b,
+	0x41, 0x60, 0x98, 0x48, 0x27, 0x96, 0xbf, 0x35, 0xa2, 0x78, 0x2d, 0xf0, 0xe6, 0x17, 0x3f, 0x6c,
+	0x22, 0x3f, 0x0c, 0x63, 0xe2, 0xd7, 0xe5, 0x8c, 0x9f, 0x76, 0xea, 0xb7, 0x9a, 0xa8, 0x5f, 0x61,
+	0x52, 0xb7, 0x9b, 0x78, 0x8f, 0xcd, 0x42, 0x80, 0x25, 0xfe, 0x8f, 0xf1, 0xf7, 0x87, 0x99, 0x09,
+	0x32, 0xa8, 0x7d, 0xe5, 0xd3, 0x44, 0xfd, 0x4d, 0x90, 0x6c, 0xed, 0xf3, 0x6f, 0x37, 0xb1, 0xf6,
+	0xbf, 0x0c, 0xa3, 0xc8, 0x8e, 0x7e, 0x8b, 0x99, 0xfc, 0x15, 0xb8, 0x7e, 0x8b, 0x99, 0xfa, 0xc1,
+	0x36, 0x45, 0xe5, 0xc8, 0x8d, 0xe3, 0x6f, 0xd6, 0xf6, 0x8f, 0x69, 0x30, 0x2e, 0xbe, 0xf9, 0x45,
+	0xae, 0x64, 0xfd, 0x2a, 0x59, 0x3f, 0x03, 0x28, 0xfa, 0x01, 0x31, 0xb1, 0x9a, 0x1b, 0x27, 0xa3,
+	0x24, 0x88, 0xaf, 0x55, 0x31, 0xd9, 0xf8, 0xad, 0xbc, 0xe2, 0x85, 0x13, 0x4f, 0x8c, 0x18, 0x6d,
+	0xa3, 0x78, 0x4c, 0x94, 0xe6, 0x05, 0x48, 0x7e, 0x69, 0x5b, 0xba, 0x96, 0x11, 0x3a, 0xdd, 0x3e,
+	0x6d, 0x71, 0x38, 0xdf, 0x17, 0xc1, 0xdf, 0x75, 0x92, 0x81, 0x78, 0x95, 0x87, 0xa2, 0x69, 0xce,
+	0xac, 0xd4, 0xe7, 0xa2, 0x62, 0xeb, 0x64, 0x14, 0x63, 0x74, 0x2c, 0xd5, 0x11, 0x52, 0x8c, 0x97,
+	0x7f, 0x89, 0x2b, 0x4b, 0x37, 0xc3, 0x27, 0x70, 0x83, 0xc9, 0x51, 0x9f, 0x74, 0x19, 0xa7, 0x90,
+	0x9c, 0xe3, 0x24, 0xce, 0x96, 0xe5, 0xbf, 0x52, 0xe7, 0xb2, 0x14, 0x42, 0x97, 0xad, 0x0f, 0xfd,
+	0x9d, 0x7f, 0xa9, 0x91, 0x99, 0x93, 0x09, 0x4c, 0x8f, 0xc0, 0x6c, 0xbc, 0x81, 0x04, 0xbe, 0x4e,
+	0x50, 0x99, 0x4a, 0x21, 0x7f, 0x25, 0xfb, 0x5a, 0x0d, 0x0f, 0xfc, 0xd9, 0x40, 0xff, 0x68, 0x5a,
+	0xf4, 0xe5, 0xd2, 0xb5, 0x8c, 0xd0, 0x49, 0xfe, 0x51, 0x99, 0x34, 0x36, 0x84, 0x3f, 0x3d, 0xc0,
+	0xbb, 0x95, 0x16, 0x55, 0x79, 0x20, 0x11, 0x91, 0xcd, 0x8f, 0xb0, 0xe7, 0x17, 0x2e, 0xc6, 0xf8,
+	0x13, 0xe3, 0xcb, 0xcf, 0x6a, 0x81, 0x41, 0x3f, 0x88, 0x24, 0x75, 0x19, 0xb9, 0x96, 0x11, 0x5a,
+	0x90, 0x74, 0x15, 0x49, 0x7a, 0xb5, 0x34, 0x98, 0x24, 0xa6, 0x16, 0xfe, 0x7a, 0x54, 0x75, 0x74,
+	0x07, 0x01, 0xcc, 0x5c, 0xb6, 0x01, 0x11, 0xe3, 0x98, 0x1c, 0x08, 0x2a, 0xf9, 0x13, 0xe2, 0xa5,
+	0xab, 0xd9, 0x80, 0x55, 0x17, 0x9b, 0x31, 0x8b, 0x8e, 0x97, 0xb0, 0x75, 0x36, 0x88, 0x3f, 0xae,
+	0x78, 0xfd, 0x16, 0xfb, 0xe3, 0x8d, 0xd9, 0x3e, 0x4b, 0x99, 0xe1, 0x05, 0x29, 0x27, 0x91, 0x94,
+	0x39, 0x12, 0x25, 0x85, 0xed, 0x43, 0x82, 0xf9, 0x36, 0xa0, 0x77, 0x91, 0xe9, 0x76, 0x2d, 0x23,
+	0xb4, 0xa0, 0x60, 0x09, 0x29, 0x78, 0x8d, 0x5c, 0x8e, 0x50, 0x20, 0x79, 0xf8, 0xe4, 0xa8, 0x73,
+	0x9f, 0xc9, 0x4e, 0xdc, 0x01, 0x63, 0xa4, 0x4a, 0xf9, 0xd5, 0x6c, 0xc0, 0xea, 0xfe, 0x7a, 0xe1,
+	0x7c, 0x94, 0xac, 0x28, 0x39, 0xdf, 0xd6, 0xa0, 0xe0, 0x7f, 0xa8, 0x96, 0x0c, 0xe8, 0x7b, 0xe4,
+	0xab, 0xb8, 0xa5, 0xc5, 0xac, 0xe0, 0x82, 0xa8, 0xeb, 0x48, 0xd4, 0x02, 0xb9, 0x12, 0x25, 0xea,
+	0x50, 0x40, 0x46, 0xa9, 0x5b, 0xfe, 0x9f, 0xaa, 0x8b, 0x39, 0xf2, 0xd9, 0xfd, 0xaf, 0x85, 0x6a,
+	0x6b, 0x69, 0x70, 0x94, 0xbe, 0x0c, 0xfb, 0x94, 0xe4, 0x0a, 0xaa, 0xd3, 0xc4, 0x38, 0xc1, 0xa8,
+	0xf7, 0xed, 0xb9, 0x0e, 0x83, 0xb4, 0xb9, 0x02, 0xfb, 0x5a, 0xa8, 0x2d, 0x32, 0x90, 0xa3, 0x2a,
+	0x8c, 0xeb, 0xd9, 0x2b, 0xa8, 0xe4, 0x94, 0x52, 0xc9, 0xf9, 0x99, 0xc1, 0x0e, 0x78, 0xb5, 0x81,
+	0x6c, 0x5b, 0x91, 0xd4, 0x3a, 0xaa, 0xd9, 0x40, 0x12, 0xe9, 0x52, 0xd6, 0xc1, 0xeb, 0x59, 0x22,
+	0x2b, 0x2a, 0x73, 0xf3, 0x8d, 0x21, 0x6a, 0x08, 0x72, 0x5e, 0x47, 0x72, 0x2e, 0x91, 0x97, 0x93,
+	0xc8, 0x89, 0x1e, 0x87, 0x4b, 0x4b, 0x50, 0x86, 0x11, 0x54, 0xe7, 0xe7, 0xf5, 0xec, 0x15, 0x54,
+	0xc3, 0x66, 0xe1, 0x74, 0x22, 0x69, 0x9c, 0xa4, 0xe5, 0xff, 0x30, 0x13, 0x39, 0xd5, 0x0c, 0x6e,
+	0x9e, 0x64, 0x38, 0xd5, 0x4c, 0x0e, 0x7a, 0x5f, 0xba, 0x96, 0x11, 0x3a, 0xf9, 0x54, 0x33, 0x08,
+	0x6c, 0x81, 0x52, 0xf6, 0xff, 0x6a, 0x41, 0xc4, 0x21, 0x32, 0x38, 0x12, 0xa8, 0xb2, 0x21, 0x5f,
+	0xcc, 0x0a, 0x9e, 0x64, 0x08, 0xca, 0x74, 0xc8, 0x1b, 0xf1, 0x9f, 0x19, 0x78, 0x46, 0x96, 0x1c,
+	0x37, 0x7e, 0x20, 0x53, 0x22, 0x83, 0x27, 0xe4, 0x6a, 0xe1, 0xe5, 0x18, 0x31, 0xfc, 0xff, 0xd2,
+	0x57, 0x82, 0x98, 0x20, 0x9f, 0x91, 0x6f, 0x6a, 0x30, 0x11, 0xc4, 0x68, 0x4f, 0x3b, 0x7a, 0x4a,
+	0x0d, 0x1c, 0x9f, 0x76, 0xf4, 0xd4, 0x27, 0xfc, 0xbb, 0xf0, 0x89, 0x19, 0xa5, 0x18, 0x75, 0xfc,
+	0x9b, 0xd3, 0x56, 0x13, 0xad, 0xe6, 0x3f, 0x48, 0x73, 0x4c, 0xdd, 0x1e, 0xd0, 0x62, 0x3f, 0x67,
+	0xc0, 0x9d, 0x67, 0xaa, 0x2b, 0x08, 0xbf, 0x86, 0x84, 0x5f, 0x36, 0x8c, 0x18, 0xe1, 0xd4, 0xaf,
+	0x26, 0x7b, 0xac, 0xfe, 0x9f, 0xd0, 0xec, 0xbf, 0x9a, 0x31, 0x34, 0x73, 0xb6, 0xd1, 0x8e, 0x18,
+	0xfd, 0xca, 0x6e, 0x4d, 0x21, 0x8b, 0x47, 0x56, 0xf1, 0x67, 0x82, 0xff, 0xc6, 0x6f, 0xe0, 0x0c,
+	0x53, 0x62, 0x31, 0x0f, 0x9c, 0x09, 0x91, 0x77, 0x72, 0x7d, 0x66, 0x42, 0x9d, 0x43, 0x32, 0x7a,
+	0x7e, 0x51, 0x83, 0x71, 0x11, 0x0b, 0x78, 0x20, 0x3d, 0x6a, 0xf4, 0xe2, 0x81, 0xf4, 0x44, 0x02,
+	0x15, 0x47, 0x16, 0x76, 0x99, 0x1e, 0x11, 0x7f, 0x78, 0xe9, 0x2b, 0x4a, 0x7c, 0xde, 0xcf, 0xc8,
+	0x2f, 0x6b, 0x30, 0x29, 0x05, 0xfa, 0x25, 0x6f, 0x64, 0x18, 0x0f, 0x35, 0x52, 0x71, 0x69, 0x79,
+	0x98, 0x2a, 0xaa, 0x59, 0x64, 0x9c, 0x49, 0x1c, 0x47, 0x5a, 0x47, 0x68, 0xe1, 0xcf, 0x9b, 0x94,
+	0x22, 0xe0, 0x0e, 0xa6, 0x2f, 0x16, 0xa8, 0x77, 0x30, 0x7d, 0xf1, 0x00, 0xbb, 0x7d, 0xe6, 0x6d,
+	0xe0, 0x40, 0x62, 0xd4, 0xfd, 0x96, 0x4f, 0x9d, 0xd0, 0x74, 0x99, 0xa8, 0x53, 0xd5, 0xdd, 0xf2,
+	0x30, 0x55, 0x04, 0x75, 0x6f, 0x23, 0x75, 0x6f, 0x2c, 0x2c, 0xa5, 0x53, 0x17, 0xa8, 0x3d, 0x29,
+	0x9c, 0xef, 0x67, 0xe4, 0xef, 0x68, 0x30, 0xa3, 0x06, 0xc3, 0x25, 0x37, 0x86, 0x8c, 0x9d, 0xcb,
+	0xa9, 0xbe, 0xf9, 0x4c, 0x11, 0x77, 0xfd, 0xe9, 0x4b, 0xfa, 0xb0, 0x75, 0xf9, 0xeb, 0xa0, 0x9c,
+	0x39, 0x0a, 0x13, 0xf3, 0x1b, 0xe1, 0x1a, 0x9b, 0xc8, 0xb1, 0x58, 0x0d, 0x55, 0x06, 0xde, 0x1c,
+	0xaa, 0x4e, 0x92, 0x9b, 0x5e, 0xd4, 0x95, 0x0d, 0xbb, 0x5f, 0x50, 0x0c, 0xbb, 0x9b, 0x99, 0x9a,
+	0x88, 0x71, 0xf2, 0xad, 0x61, 0xab, 0xa9, 0xc6, 0x00, 0x49, 0x22, 0x8e, 0xfc, 0x8a, 0x64, 0xdd,
+	0x65, 0xeb, 0x7a, 0xc4, 0xc0, 0xbb, 0x31, 0x5c, 0x25, 0x41, 0xd3, 0x02, 0xd2, 0xf4, 0x0a, 0x31,
+	0x12, 0x68, 0x8a, 0x9a, 0x78, 0xdf, 0x08, 0x8d, 0xf4, 0x6c, 0x03, 0xaa, 0xda, 0xe9, 0x6f, 0x0e,
+	0x55, 0x47, 0x1d, 0xd0, 0x52, 0xda, 0x80, 0x7e, 0x33, 0xb4, 0x59, 0xb2, 0xd1, 0xa4, 0x4e, 0xe5,
+	0x37, 0x87, 0xaa, 0xa3, 0x4e, 0x89, 0x85, 0x52, 0x12, 0xcf, 0x04, 0xaf, 0x7e, 0x53, 0x03, 0xa8,
+	0x86, 0xa1, 0x7b, 0xb2, 0x89, 0x4c, 0x58, 0xc1, 0xa7, 0xef, 0xed, 0xa1, 0xeb, 0x25, 0x19, 0x03,
+	0x51, 0x1a, 0x45, 0xd0, 0x01, 0x41, 0x2b, 0x63, 0xe3, 0x3f, 0xd0, 0x60, 0x46, 0xa0, 0xf0, 0x85,
+	0xf0, 0x76, 0x46, 0xd6, 0xc8, 0x95, 0xfa, 0xda, 0x31, 0x03, 0xeb, 0x26, 0xdd, 0xf7, 0x48, 0x21,
+	0x9d, 0xfc, 0x12, 0xda, 0xce, 0x4d, 0x6a, 0xb9, 0x34, 0xe3, 0x74, 0x11, 0xd0, 0xc3, 0x4d, 0x97,
+	0xa0, 0x92, 0xa0, 0xed, 0x55, 0xa4, 0xed, 0x82, 0x91, 0x48, 0x5b, 0x97, 0x03, 0xdf, 0xd6, 0x16,
+	0xee, 0x9e, 0x81, 0xe3, 0x75, 0xa7, 0x15, 0x6d, 0x62, 0x57, 0xfb, 0x62, 0xde, 0xea, 0xd8, 0x8f,
+	0xc6, 0x30, 0xb0, 0xc0, 0x9b, 0xff, 0x2b, 0x00, 0x00, 0xff, 0xff, 0xb3, 0x77, 0x22, 0xf8, 0xac,
+	0xcd, 0x00, 0x00,
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/api/api.pb.gw.go b/vendor/github.com/libopenstorage/openstorage/api/api.pb.gw.go
new file mode 100644
index 000000000..7f3e5d2e6
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/api/api.pb.gw.go
@@ -0,0 +1,4744 @@
+// Code generated by protoc-gen-grpc-gateway. DO NOT EDIT.
+// source: api/api.proto
+
+/*
+Package api is a reverse proxy.
+
+It translates gRPC into RESTful JSON APIs.
+*/
+package api
+
+import (
+	"io"
+	"net/http"
+
+	"github.com/golang/protobuf/proto"
+	"github.com/grpc-ecosystem/grpc-gateway/runtime"
+	"github.com/grpc-ecosystem/grpc-gateway/utilities"
+	"golang.org/x/net/context"
+	"google.golang.org/grpc"
+	"google.golang.org/grpc/codes"
+	"google.golang.org/grpc/grpclog"
+	"google.golang.org/grpc/status"
+)
+
+var _ codes.Code
+var _ io.Reader
+var _ status.Status
+var _ = runtime.String
+var _ = utilities.NewDoubleArray
+
+func request_OpenStorageAlerts_EnumerateWithFilters_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageAlertsClient, req *http.Request, pathParams map[string]string) (OpenStorageAlerts_EnumerateWithFiltersClient, runtime.ServerMetadata, error) {
+	var protoReq SdkAlertsEnumerateWithFiltersRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	stream, err := client.EnumerateWithFilters(ctx, &protoReq)
+	if err != nil {
+		return nil, metadata, err
+	}
+	header, err := stream.Header()
+	if err != nil {
+		return nil, metadata, err
+	}
+	metadata.HeaderMD = header
+	return stream, metadata, nil
+
+}
+
+func request_OpenStorageAlerts_Delete_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageAlertsClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkAlertsDeleteRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Delete(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageRole_Create_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageRoleClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkRoleCreateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Create(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageRole_Enumerate_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageRoleClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkRoleEnumerateRequest
+	var metadata runtime.ServerMetadata
+
+	msg, err := client.Enumerate(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageRole_Inspect_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageRoleClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkRoleInspectRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["name"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "name")
+	}
+
+	protoReq.Name, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "name", err)
+	}
+
+	msg, err := client.Inspect(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageRole_Delete_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageRoleClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkRoleDeleteRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["name"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "name")
+	}
+
+	protoReq.Name, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "name", err)
+	}
+
+	msg, err := client.Delete(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageRole_Update_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageRoleClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkRoleUpdateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Update(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageIdentity_Capabilities_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageIdentityClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkIdentityCapabilitiesRequest
+	var metadata runtime.ServerMetadata
+
+	msg, err := client.Capabilities(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageIdentity_Version_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageIdentityClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkIdentityVersionRequest
+	var metadata runtime.ServerMetadata
+
+	msg, err := client.Version(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCluster_InspectCurrent_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageClusterClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkClusterInspectCurrentRequest
+	var metadata runtime.ServerMetadata
+
+	msg, err := client.InspectCurrent(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageClusterPair_Create_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageClusterPairClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkClusterPairCreateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Create(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageClusterPair_Inspect_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageClusterPairClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkClusterPairInspectRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "id")
+	}
+
+	protoReq.Id, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "id", err)
+	}
+
+	msg, err := client.Inspect(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageClusterPair_Enumerate_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageClusterPairClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkClusterPairEnumerateRequest
+	var metadata runtime.ServerMetadata
+
+	msg, err := client.Enumerate(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageClusterPair_GetToken_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageClusterPairClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkClusterPairGetTokenRequest
+	var metadata runtime.ServerMetadata
+
+	msg, err := client.GetToken(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageClusterPair_ResetToken_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageClusterPairClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkClusterPairResetTokenRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.ResetToken(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageClusterPair_Delete_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageClusterPairClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkClusterPairDeleteRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["cluster_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "cluster_id")
+	}
+
+	protoReq.ClusterId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "cluster_id", err)
+	}
+
+	msg, err := client.Delete(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageClusterDomains_Enumerate_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageClusterDomainsClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkClusterDomainsEnumerateRequest
+	var metadata runtime.ServerMetadata
+
+	msg, err := client.Enumerate(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageClusterDomains_Inspect_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageClusterDomainsClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkClusterDomainInspectRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["cluster_domain_name"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "cluster_domain_name")
+	}
+
+	protoReq.ClusterDomainName, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "cluster_domain_name", err)
+	}
+
+	msg, err := client.Inspect(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageClusterDomains_Activate_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageClusterDomainsClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkClusterDomainActivateRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["cluster_domain_name"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "cluster_domain_name")
+	}
+
+	protoReq.ClusterDomainName, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "cluster_domain_name", err)
+	}
+
+	msg, err := client.Activate(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageClusterDomains_Deactivate_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageClusterDomainsClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkClusterDomainDeactivateRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["cluster_domain_name"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "cluster_domain_name")
+	}
+
+	protoReq.ClusterDomainName, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "cluster_domain_name", err)
+	}
+
+	msg, err := client.Deactivate(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageNode_Inspect_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageNodeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkNodeInspectRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["node_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "node_id")
+	}
+
+	protoReq.NodeId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "node_id", err)
+	}
+
+	msg, err := client.Inspect(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageNode_InspectCurrent_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageNodeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkNodeInspectCurrentRequest
+	var metadata runtime.ServerMetadata
+
+	msg, err := client.InspectCurrent(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageNode_Enumerate_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageNodeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkNodeEnumerateRequest
+	var metadata runtime.ServerMetadata
+
+	msg, err := client.Enumerate(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageVolume_Create_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageVolumeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeCreateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Create(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageVolume_Clone_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageVolumeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeCloneRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Clone(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageVolume_Delete_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageVolumeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeDeleteRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["volume_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "volume_id")
+	}
+
+	protoReq.VolumeId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "volume_id", err)
+	}
+
+	msg, err := client.Delete(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+var (
+	filter_OpenStorageVolume_Inspect_0 = &utilities.DoubleArray{Encoding: map[string]int{"volume_id": 0}, Base: []int{1, 1, 0}, Check: []int{0, 1, 2}}
+)
+
+func request_OpenStorageVolume_Inspect_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageVolumeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeInspectRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["volume_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "volume_id")
+	}
+
+	protoReq.VolumeId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "volume_id", err)
+	}
+
+	if err := runtime.PopulateQueryParameters(&protoReq, req.URL.Query(), filter_OpenStorageVolume_Inspect_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Inspect(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageVolume_InspectWithFilters_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageVolumeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeInspectWithFiltersRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.InspectWithFilters(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageVolume_Update_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageVolumeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeUpdateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["volume_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "volume_id")
+	}
+
+	protoReq.VolumeId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "volume_id", err)
+	}
+
+	msg, err := client.Update(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+var (
+	filter_OpenStorageVolume_Stats_0 = &utilities.DoubleArray{Encoding: map[string]int{"volume_id": 0}, Base: []int{1, 1, 0}, Check: []int{0, 1, 2}}
+)
+
+func request_OpenStorageVolume_Stats_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageVolumeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeStatsRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["volume_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "volume_id")
+	}
+
+	protoReq.VolumeId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "volume_id", err)
+	}
+
+	if err := runtime.PopulateQueryParameters(&protoReq, req.URL.Query(), filter_OpenStorageVolume_Stats_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Stats(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageVolume_CapacityUsage_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageVolumeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeCapacityUsageRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["volume_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "volume_id")
+	}
+
+	protoReq.VolumeId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "volume_id", err)
+	}
+
+	msg, err := client.CapacityUsage(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageVolume_Enumerate_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageVolumeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeEnumerateRequest
+	var metadata runtime.ServerMetadata
+
+	msg, err := client.Enumerate(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageVolume_EnumerateWithFilters_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageVolumeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeEnumerateWithFiltersRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.EnumerateWithFilters(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageVolume_SnapshotCreate_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageVolumeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeSnapshotCreateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.SnapshotCreate(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageVolume_SnapshotRestore_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageVolumeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeSnapshotRestoreRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.SnapshotRestore(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+var (
+	filter_OpenStorageVolume_SnapshotEnumerate_0 = &utilities.DoubleArray{Encoding: map[string]int{}, Base: []int(nil), Check: []int(nil)}
+)
+
+func request_OpenStorageVolume_SnapshotEnumerate_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageVolumeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeSnapshotEnumerateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := runtime.PopulateQueryParameters(&protoReq, req.URL.Query(), filter_OpenStorageVolume_SnapshotEnumerate_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.SnapshotEnumerate(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageVolume_SnapshotEnumerateWithFilters_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageVolumeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeSnapshotEnumerateWithFiltersRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["volume_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "volume_id")
+	}
+
+	protoReq.VolumeId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "volume_id", err)
+	}
+
+	msg, err := client.SnapshotEnumerateWithFilters(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageVolume_SnapshotScheduleUpdate_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageVolumeClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeSnapshotScheduleUpdateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["volume_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "volume_id")
+	}
+
+	protoReq.VolumeId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "volume_id", err)
+	}
+
+	msg, err := client.SnapshotScheduleUpdate(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageMountAttach_Attach_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageMountAttachClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeAttachRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Attach(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageMountAttach_Detach_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageMountAttachClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeDetachRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Detach(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageMountAttach_Mount_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageMountAttachClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeMountRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Mount(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageMountAttach_Unmount_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageMountAttachClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkVolumeUnmountRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Unmount(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageMigrate_Start_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageMigrateClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCloudMigrateStartRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Start(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageMigrate_Cancel_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageMigrateClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCloudMigrateCancelRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Cancel(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+var (
+	filter_OpenStorageMigrate_Status_0 = &utilities.DoubleArray{Encoding: map[string]int{}, Base: []int(nil), Check: []int(nil)}
+)
+
+func request_OpenStorageMigrate_Status_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageMigrateClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCloudMigrateStatusRequest
+	var metadata runtime.ServerMetadata
+
+	if err := runtime.PopulateQueryParameters(&protoReq, req.URL.Query(), filter_OpenStorageMigrate_Status_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Status(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageObjectstore_Inspect_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageObjectstoreClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkObjectstoreInspectRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["objectstore_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "objectstore_id")
+	}
+
+	protoReq.ObjectstoreId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "objectstore_id", err)
+	}
+
+	msg, err := client.Inspect(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageObjectstore_Create_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageObjectstoreClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkObjectstoreCreateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Create(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageObjectstore_Delete_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageObjectstoreClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkObjectstoreDeleteRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["objectstore_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "objectstore_id")
+	}
+
+	protoReq.ObjectstoreId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "objectstore_id", err)
+	}
+
+	msg, err := client.Delete(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageObjectstore_Update_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageObjectstoreClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkObjectstoreUpdateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["objectstore_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "objectstore_id")
+	}
+
+	protoReq.ObjectstoreId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "objectstore_id", err)
+	}
+
+	msg, err := client.Update(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCredentials_Create_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCredentialsClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCredentialCreateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Create(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCredentials_Enumerate_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCredentialsClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCredentialEnumerateRequest
+	var metadata runtime.ServerMetadata
+
+	msg, err := client.Enumerate(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCredentials_Inspect_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCredentialsClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCredentialInspectRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["credential_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "credential_id")
+	}
+
+	protoReq.CredentialId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "credential_id", err)
+	}
+
+	msg, err := client.Inspect(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCredentials_Delete_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCredentialsClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCredentialDeleteRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["credential_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "credential_id")
+	}
+
+	protoReq.CredentialId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "credential_id", err)
+	}
+
+	msg, err := client.Delete(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCredentials_Validate_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCredentialsClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCredentialValidateRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["credential_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "credential_id")
+	}
+
+	protoReq.CredentialId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "credential_id", err)
+	}
+
+	msg, err := client.Validate(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageSchedulePolicy_Create_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageSchedulePolicyClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkSchedulePolicyCreateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Create(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageSchedulePolicy_Update_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageSchedulePolicyClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkSchedulePolicyUpdateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Update(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageSchedulePolicy_Enumerate_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageSchedulePolicyClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkSchedulePolicyEnumerateRequest
+	var metadata runtime.ServerMetadata
+
+	msg, err := client.Enumerate(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageSchedulePolicy_Inspect_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageSchedulePolicyClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkSchedulePolicyInspectRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["name"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "name")
+	}
+
+	protoReq.Name, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "name", err)
+	}
+
+	msg, err := client.Inspect(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageSchedulePolicy_Delete_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageSchedulePolicyClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkSchedulePolicyDeleteRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["name"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "name")
+	}
+
+	protoReq.Name, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "name", err)
+	}
+
+	msg, err := client.Delete(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCloudBackup_Create_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCloudBackupClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCloudBackupCreateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Create(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCloudBackup_Restore_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCloudBackupClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCloudBackupRestoreRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Restore(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+var (
+	filter_OpenStorageCloudBackup_Delete_0 = &utilities.DoubleArray{Encoding: map[string]int{"backup_id": 0}, Base: []int{1, 1, 0}, Check: []int{0, 1, 2}}
+)
+
+func request_OpenStorageCloudBackup_Delete_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCloudBackupClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCloudBackupDeleteRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["backup_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "backup_id")
+	}
+
+	protoReq.BackupId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "backup_id", err)
+	}
+
+	if err := runtime.PopulateQueryParameters(&protoReq, req.URL.Query(), filter_OpenStorageCloudBackup_Delete_0); err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Delete(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCloudBackup_DeleteAll_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCloudBackupClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCloudBackupDeleteAllRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.DeleteAll(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCloudBackup_EnumerateWithFilters_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCloudBackupClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCloudBackupEnumerateWithFiltersRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.EnumerateWithFilters(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCloudBackup_Status_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCloudBackupClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCloudBackupStatusRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Status(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCloudBackup_Catalog_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCloudBackupClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCloudBackupCatalogRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Catalog(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCloudBackup_History_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCloudBackupClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCloudBackupHistoryRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["src_volume_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "src_volume_id")
+	}
+
+	protoReq.SrcVolumeId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "src_volume_id", err)
+	}
+
+	msg, err := client.History(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCloudBackup_StateChange_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCloudBackupClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCloudBackupStateChangeRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.StateChange(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCloudBackup_SchedCreate_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCloudBackupClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCloudBackupSchedCreateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.SchedCreate(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCloudBackup_SchedDelete_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCloudBackupClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCloudBackupSchedDeleteRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["backup_schedule_id"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "backup_schedule_id")
+	}
+
+	protoReq.BackupScheduleId, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "backup_schedule_id", err)
+	}
+
+	msg, err := client.SchedDelete(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStorageCloudBackup_SchedEnumerate_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStorageCloudBackupClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkCloudBackupSchedEnumerateRequest
+	var metadata runtime.ServerMetadata
+
+	msg, err := client.SchedEnumerate(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStoragePolicy_Create_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStoragePolicyClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkOpenStoragePolicyCreateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Create(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStoragePolicy_Enumerate_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStoragePolicyClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkOpenStoragePolicyEnumerateRequest
+	var metadata runtime.ServerMetadata
+
+	msg, err := client.Enumerate(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStoragePolicy_Inspect_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStoragePolicyClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkOpenStoragePolicyInspectRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["name"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "name")
+	}
+
+	protoReq.Name, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "name", err)
+	}
+
+	msg, err := client.Inspect(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStoragePolicy_Update_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStoragePolicyClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkOpenStoragePolicyUpdateRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Update(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStoragePolicy_Delete_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStoragePolicyClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkOpenStoragePolicyDeleteRequest
+	var metadata runtime.ServerMetadata
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["name"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "name")
+	}
+
+	protoReq.Name, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "name", err)
+	}
+
+	msg, err := client.Delete(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStoragePolicy_SetDefault_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStoragePolicyClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkOpenStoragePolicySetDefaultRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	var (
+		val string
+		ok  bool
+		err error
+		_   = err
+	)
+
+	val, ok = pathParams["name"]
+	if !ok {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "missing parameter %s", "name")
+	}
+
+	protoReq.Name, err = runtime.String(val)
+
+	if err != nil {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "type mismatch, parameter: %s, error: %v", "name", err)
+	}
+
+	msg, err := client.SetDefault(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStoragePolicy_DefaultInspect_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStoragePolicyClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkOpenStoragePolicyDefaultInspectRequest
+	var metadata runtime.ServerMetadata
+
+	msg, err := client.DefaultInspect(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+func request_OpenStoragePolicy_Release_0(ctx context.Context, marshaler runtime.Marshaler, client OpenStoragePolicyClient, req *http.Request, pathParams map[string]string) (proto.Message, runtime.ServerMetadata, error) {
+	var protoReq SdkOpenStoragePolicyReleaseRequest
+	var metadata runtime.ServerMetadata
+
+	if err := marshaler.NewDecoder(req.Body).Decode(&protoReq); err != nil && err != io.EOF {
+		return nil, metadata, status.Errorf(codes.InvalidArgument, "%v", err)
+	}
+
+	msg, err := client.Release(ctx, &protoReq, grpc.Header(&metadata.HeaderMD), grpc.Trailer(&metadata.TrailerMD))
+	return msg, metadata, err
+
+}
+
+// RegisterOpenStorageAlertsHandlerFromEndpoint is same as RegisterOpenStorageAlertsHandler but
+// automatically dials to "endpoint" and closes the connection when "ctx" gets done.
+func RegisterOpenStorageAlertsHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error) {
+	conn, err := grpc.Dial(endpoint, opts...)
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err != nil {
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+			return
+		}
+		go func() {
+			<-ctx.Done()
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+		}()
+	}()
+
+	return RegisterOpenStorageAlertsHandler(ctx, mux, conn)
+}
+
+// RegisterOpenStorageAlertsHandler registers the http handlers for service OpenStorageAlerts to "mux".
+// The handlers forward requests to the grpc endpoint over "conn".
+func RegisterOpenStorageAlertsHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error {
+	return RegisterOpenStorageAlertsHandlerClient(ctx, mux, NewOpenStorageAlertsClient(conn))
+}
+
+// RegisterOpenStorageAlertsHandler registers the http handlers for service OpenStorageAlerts to "mux".
+// The handlers forward requests to the grpc endpoint over the given implementation of "OpenStorageAlertsClient".
+// Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "OpenStorageAlertsClient"
+// doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in
+// "OpenStorageAlertsClient" to call the correct interceptors.
+func RegisterOpenStorageAlertsHandlerClient(ctx context.Context, mux *runtime.ServeMux, client OpenStorageAlertsClient) error {
+
+	mux.Handle("POST", pattern_OpenStorageAlerts_EnumerateWithFilters_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageAlerts_EnumerateWithFilters_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageAlerts_EnumerateWithFilters_0(ctx, mux, outboundMarshaler, w, req, func() (proto.Message, error) { return resp.Recv() }, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageAlerts_Delete_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageAlerts_Delete_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageAlerts_Delete_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	return nil
+}
+
+var (
+	pattern_OpenStorageAlerts_EnumerateWithFilters_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "alerts", "filters"}, ""))
+
+	pattern_OpenStorageAlerts_Delete_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "alerts"}, ""))
+)
+
+var (
+	forward_OpenStorageAlerts_EnumerateWithFilters_0 = runtime.ForwardResponseStream
+
+	forward_OpenStorageAlerts_Delete_0 = runtime.ForwardResponseMessage
+)
+
+// RegisterOpenStorageRoleHandlerFromEndpoint is same as RegisterOpenStorageRoleHandler but
+// automatically dials to "endpoint" and closes the connection when "ctx" gets done.
+func RegisterOpenStorageRoleHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error) {
+	conn, err := grpc.Dial(endpoint, opts...)
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err != nil {
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+			return
+		}
+		go func() {
+			<-ctx.Done()
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+		}()
+	}()
+
+	return RegisterOpenStorageRoleHandler(ctx, mux, conn)
+}
+
+// RegisterOpenStorageRoleHandler registers the http handlers for service OpenStorageRole to "mux".
+// The handlers forward requests to the grpc endpoint over "conn".
+func RegisterOpenStorageRoleHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error {
+	return RegisterOpenStorageRoleHandlerClient(ctx, mux, NewOpenStorageRoleClient(conn))
+}
+
+// RegisterOpenStorageRoleHandler registers the http handlers for service OpenStorageRole to "mux".
+// The handlers forward requests to the grpc endpoint over the given implementation of "OpenStorageRoleClient".
+// Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "OpenStorageRoleClient"
+// doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in
+// "OpenStorageRoleClient" to call the correct interceptors.
+func RegisterOpenStorageRoleHandlerClient(ctx context.Context, mux *runtime.ServeMux, client OpenStorageRoleClient) error {
+
+	mux.Handle("POST", pattern_OpenStorageRole_Create_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageRole_Create_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageRole_Create_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageRole_Enumerate_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageRole_Enumerate_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageRole_Enumerate_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageRole_Inspect_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageRole_Inspect_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageRole_Inspect_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("DELETE", pattern_OpenStorageRole_Delete_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageRole_Delete_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageRole_Delete_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("PUT", pattern_OpenStorageRole_Update_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageRole_Update_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageRole_Update_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	return nil
+}
+
+var (
+	pattern_OpenStorageRole_Create_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "roles"}, ""))
+
+	pattern_OpenStorageRole_Enumerate_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "roles"}, ""))
+
+	pattern_OpenStorageRole_Inspect_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "roles", "inspect", "name"}, ""))
+
+	pattern_OpenStorageRole_Delete_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 1, 0, 4, 1, 5, 2}, []string{"v1", "roles", "name"}, ""))
+
+	pattern_OpenStorageRole_Update_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "roles"}, ""))
+)
+
+var (
+	forward_OpenStorageRole_Create_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageRole_Enumerate_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageRole_Inspect_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageRole_Delete_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageRole_Update_0 = runtime.ForwardResponseMessage
+)
+
+// RegisterOpenStorageIdentityHandlerFromEndpoint is same as RegisterOpenStorageIdentityHandler but
+// automatically dials to "endpoint" and closes the connection when "ctx" gets done.
+func RegisterOpenStorageIdentityHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error) {
+	conn, err := grpc.Dial(endpoint, opts...)
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err != nil {
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+			return
+		}
+		go func() {
+			<-ctx.Done()
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+		}()
+	}()
+
+	return RegisterOpenStorageIdentityHandler(ctx, mux, conn)
+}
+
+// RegisterOpenStorageIdentityHandler registers the http handlers for service OpenStorageIdentity to "mux".
+// The handlers forward requests to the grpc endpoint over "conn".
+func RegisterOpenStorageIdentityHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error {
+	return RegisterOpenStorageIdentityHandlerClient(ctx, mux, NewOpenStorageIdentityClient(conn))
+}
+
+// RegisterOpenStorageIdentityHandler registers the http handlers for service OpenStorageIdentity to "mux".
+// The handlers forward requests to the grpc endpoint over the given implementation of "OpenStorageIdentityClient".
+// Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "OpenStorageIdentityClient"
+// doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in
+// "OpenStorageIdentityClient" to call the correct interceptors.
+func RegisterOpenStorageIdentityHandlerClient(ctx context.Context, mux *runtime.ServeMux, client OpenStorageIdentityClient) error {
+
+	mux.Handle("GET", pattern_OpenStorageIdentity_Capabilities_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageIdentity_Capabilities_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageIdentity_Capabilities_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageIdentity_Version_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageIdentity_Version_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageIdentity_Version_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	return nil
+}
+
+var (
+	pattern_OpenStorageIdentity_Capabilities_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "identities", "capabilities"}, ""))
+
+	pattern_OpenStorageIdentity_Version_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "identities", "version"}, ""))
+)
+
+var (
+	forward_OpenStorageIdentity_Capabilities_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageIdentity_Version_0 = runtime.ForwardResponseMessage
+)
+
+// RegisterOpenStorageClusterHandlerFromEndpoint is same as RegisterOpenStorageClusterHandler but
+// automatically dials to "endpoint" and closes the connection when "ctx" gets done.
+func RegisterOpenStorageClusterHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error) {
+	conn, err := grpc.Dial(endpoint, opts...)
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err != nil {
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+			return
+		}
+		go func() {
+			<-ctx.Done()
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+		}()
+	}()
+
+	return RegisterOpenStorageClusterHandler(ctx, mux, conn)
+}
+
+// RegisterOpenStorageClusterHandler registers the http handlers for service OpenStorageCluster to "mux".
+// The handlers forward requests to the grpc endpoint over "conn".
+func RegisterOpenStorageClusterHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error {
+	return RegisterOpenStorageClusterHandlerClient(ctx, mux, NewOpenStorageClusterClient(conn))
+}
+
+// RegisterOpenStorageClusterHandler registers the http handlers for service OpenStorageCluster to "mux".
+// The handlers forward requests to the grpc endpoint over the given implementation of "OpenStorageClusterClient".
+// Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "OpenStorageClusterClient"
+// doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in
+// "OpenStorageClusterClient" to call the correct interceptors.
+func RegisterOpenStorageClusterHandlerClient(ctx context.Context, mux *runtime.ServeMux, client OpenStorageClusterClient) error {
+
+	mux.Handle("GET", pattern_OpenStorageCluster_InspectCurrent_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCluster_InspectCurrent_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCluster_InspectCurrent_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	return nil
+}
+
+var (
+	pattern_OpenStorageCluster_InspectCurrent_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "clusters", "inspectcurrent"}, ""))
+)
+
+var (
+	forward_OpenStorageCluster_InspectCurrent_0 = runtime.ForwardResponseMessage
+)
+
+// RegisterOpenStorageClusterPairHandlerFromEndpoint is same as RegisterOpenStorageClusterPairHandler but
+// automatically dials to "endpoint" and closes the connection when "ctx" gets done.
+func RegisterOpenStorageClusterPairHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error) {
+	conn, err := grpc.Dial(endpoint, opts...)
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err != nil {
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+			return
+		}
+		go func() {
+			<-ctx.Done()
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+		}()
+	}()
+
+	return RegisterOpenStorageClusterPairHandler(ctx, mux, conn)
+}
+
+// RegisterOpenStorageClusterPairHandler registers the http handlers for service OpenStorageClusterPair to "mux".
+// The handlers forward requests to the grpc endpoint over "conn".
+func RegisterOpenStorageClusterPairHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error {
+	return RegisterOpenStorageClusterPairHandlerClient(ctx, mux, NewOpenStorageClusterPairClient(conn))
+}
+
+// RegisterOpenStorageClusterPairHandler registers the http handlers for service OpenStorageClusterPair to "mux".
+// The handlers forward requests to the grpc endpoint over the given implementation of "OpenStorageClusterPairClient".
+// Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "OpenStorageClusterPairClient"
+// doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in
+// "OpenStorageClusterPairClient" to call the correct interceptors.
+func RegisterOpenStorageClusterPairHandlerClient(ctx context.Context, mux *runtime.ServeMux, client OpenStorageClusterPairClient) error {
+
+	mux.Handle("POST", pattern_OpenStorageClusterPair_Create_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageClusterPair_Create_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageClusterPair_Create_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageClusterPair_Inspect_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageClusterPair_Inspect_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageClusterPair_Inspect_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageClusterPair_Enumerate_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageClusterPair_Enumerate_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageClusterPair_Enumerate_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageClusterPair_GetToken_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageClusterPair_GetToken_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageClusterPair_GetToken_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageClusterPair_ResetToken_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageClusterPair_ResetToken_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageClusterPair_ResetToken_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("DELETE", pattern_OpenStorageClusterPair_Delete_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageClusterPair_Delete_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageClusterPair_Delete_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	return nil
+}
+
+var (
+	pattern_OpenStorageClusterPair_Create_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "clusterpairs"}, ""))
+
+	pattern_OpenStorageClusterPair_Inspect_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "clusterpairs", "inspect", "id"}, ""))
+
+	pattern_OpenStorageClusterPair_Enumerate_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "clusterpairs"}, ""))
+
+	pattern_OpenStorageClusterPair_GetToken_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "clusterpairs", "token"}, ""))
+
+	pattern_OpenStorageClusterPair_ResetToken_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "clusterpairs", "token"}, ""))
+
+	pattern_OpenStorageClusterPair_Delete_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 1, 0, 4, 1, 5, 2}, []string{"v1", "clusterpairs", "cluster_id"}, ""))
+)
+
+var (
+	forward_OpenStorageClusterPair_Create_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageClusterPair_Inspect_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageClusterPair_Enumerate_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageClusterPair_GetToken_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageClusterPair_ResetToken_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageClusterPair_Delete_0 = runtime.ForwardResponseMessage
+)
+
+// RegisterOpenStorageClusterDomainsHandlerFromEndpoint is same as RegisterOpenStorageClusterDomainsHandler but
+// automatically dials to "endpoint" and closes the connection when "ctx" gets done.
+func RegisterOpenStorageClusterDomainsHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error) {
+	conn, err := grpc.Dial(endpoint, opts...)
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err != nil {
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+			return
+		}
+		go func() {
+			<-ctx.Done()
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+		}()
+	}()
+
+	return RegisterOpenStorageClusterDomainsHandler(ctx, mux, conn)
+}
+
+// RegisterOpenStorageClusterDomainsHandler registers the http handlers for service OpenStorageClusterDomains to "mux".
+// The handlers forward requests to the grpc endpoint over "conn".
+func RegisterOpenStorageClusterDomainsHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error {
+	return RegisterOpenStorageClusterDomainsHandlerClient(ctx, mux, NewOpenStorageClusterDomainsClient(conn))
+}
+
+// RegisterOpenStorageClusterDomainsHandler registers the http handlers for service OpenStorageClusterDomains to "mux".
+// The handlers forward requests to the grpc endpoint over the given implementation of "OpenStorageClusterDomainsClient".
+// Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "OpenStorageClusterDomainsClient"
+// doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in
+// "OpenStorageClusterDomainsClient" to call the correct interceptors.
+func RegisterOpenStorageClusterDomainsHandlerClient(ctx context.Context, mux *runtime.ServeMux, client OpenStorageClusterDomainsClient) error {
+
+	mux.Handle("GET", pattern_OpenStorageClusterDomains_Enumerate_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageClusterDomains_Enumerate_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageClusterDomains_Enumerate_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageClusterDomains_Inspect_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageClusterDomains_Inspect_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageClusterDomains_Inspect_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageClusterDomains_Activate_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageClusterDomains_Activate_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageClusterDomains_Activate_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageClusterDomains_Deactivate_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageClusterDomains_Deactivate_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageClusterDomains_Deactivate_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	return nil
+}
+
+var (
+	pattern_OpenStorageClusterDomains_Enumerate_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "clusterdomains"}, ""))
+
+	pattern_OpenStorageClusterDomains_Inspect_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "clusterdomains", "inspect", "cluster_domain_name"}, ""))
+
+	pattern_OpenStorageClusterDomains_Activate_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "clusterdomains", "activate", "cluster_domain_name"}, ""))
+
+	pattern_OpenStorageClusterDomains_Deactivate_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "clusterdomains", "deactivate", "cluster_domain_name"}, ""))
+)
+
+var (
+	forward_OpenStorageClusterDomains_Enumerate_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageClusterDomains_Inspect_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageClusterDomains_Activate_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageClusterDomains_Deactivate_0 = runtime.ForwardResponseMessage
+)
+
+// RegisterOpenStorageNodeHandlerFromEndpoint is same as RegisterOpenStorageNodeHandler but
+// automatically dials to "endpoint" and closes the connection when "ctx" gets done.
+func RegisterOpenStorageNodeHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error) {
+	conn, err := grpc.Dial(endpoint, opts...)
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err != nil {
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+			return
+		}
+		go func() {
+			<-ctx.Done()
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+		}()
+	}()
+
+	return RegisterOpenStorageNodeHandler(ctx, mux, conn)
+}
+
+// RegisterOpenStorageNodeHandler registers the http handlers for service OpenStorageNode to "mux".
+// The handlers forward requests to the grpc endpoint over "conn".
+func RegisterOpenStorageNodeHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error {
+	return RegisterOpenStorageNodeHandlerClient(ctx, mux, NewOpenStorageNodeClient(conn))
+}
+
+// RegisterOpenStorageNodeHandler registers the http handlers for service OpenStorageNode to "mux".
+// The handlers forward requests to the grpc endpoint over the given implementation of "OpenStorageNodeClient".
+// Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "OpenStorageNodeClient"
+// doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in
+// "OpenStorageNodeClient" to call the correct interceptors.
+func RegisterOpenStorageNodeHandlerClient(ctx context.Context, mux *runtime.ServeMux, client OpenStorageNodeClient) error {
+
+	mux.Handle("GET", pattern_OpenStorageNode_Inspect_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageNode_Inspect_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageNode_Inspect_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageNode_InspectCurrent_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageNode_InspectCurrent_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageNode_InspectCurrent_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageNode_Enumerate_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageNode_Enumerate_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageNode_Enumerate_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	return nil
+}
+
+var (
+	pattern_OpenStorageNode_Inspect_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "nodes", "inspect", "node_id"}, ""))
+
+	pattern_OpenStorageNode_InspectCurrent_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "nodes", "inspectcurrent"}, ""))
+
+	pattern_OpenStorageNode_Enumerate_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "nodes"}, ""))
+)
+
+var (
+	forward_OpenStorageNode_Inspect_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageNode_InspectCurrent_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageNode_Enumerate_0 = runtime.ForwardResponseMessage
+)
+
+// RegisterOpenStorageVolumeHandlerFromEndpoint is same as RegisterOpenStorageVolumeHandler but
+// automatically dials to "endpoint" and closes the connection when "ctx" gets done.
+func RegisterOpenStorageVolumeHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error) {
+	conn, err := grpc.Dial(endpoint, opts...)
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err != nil {
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+			return
+		}
+		go func() {
+			<-ctx.Done()
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+		}()
+	}()
+
+	return RegisterOpenStorageVolumeHandler(ctx, mux, conn)
+}
+
+// RegisterOpenStorageVolumeHandler registers the http handlers for service OpenStorageVolume to "mux".
+// The handlers forward requests to the grpc endpoint over "conn".
+func RegisterOpenStorageVolumeHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error {
+	return RegisterOpenStorageVolumeHandlerClient(ctx, mux, NewOpenStorageVolumeClient(conn))
+}
+
+// RegisterOpenStorageVolumeHandler registers the http handlers for service OpenStorageVolume to "mux".
+// The handlers forward requests to the grpc endpoint over the given implementation of "OpenStorageVolumeClient".
+// Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "OpenStorageVolumeClient"
+// doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in
+// "OpenStorageVolumeClient" to call the correct interceptors.
+func RegisterOpenStorageVolumeHandlerClient(ctx context.Context, mux *runtime.ServeMux, client OpenStorageVolumeClient) error {
+
+	mux.Handle("POST", pattern_OpenStorageVolume_Create_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageVolume_Create_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageVolume_Create_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageVolume_Clone_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageVolume_Clone_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageVolume_Clone_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("DELETE", pattern_OpenStorageVolume_Delete_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageVolume_Delete_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageVolume_Delete_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageVolume_Inspect_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageVolume_Inspect_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageVolume_Inspect_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageVolume_InspectWithFilters_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageVolume_InspectWithFilters_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageVolume_InspectWithFilters_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("PUT", pattern_OpenStorageVolume_Update_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageVolume_Update_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageVolume_Update_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageVolume_Stats_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageVolume_Stats_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageVolume_Stats_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageVolume_CapacityUsage_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageVolume_CapacityUsage_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageVolume_CapacityUsage_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageVolume_Enumerate_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageVolume_Enumerate_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageVolume_Enumerate_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageVolume_EnumerateWithFilters_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageVolume_EnumerateWithFilters_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageVolume_EnumerateWithFilters_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageVolume_SnapshotCreate_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageVolume_SnapshotCreate_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageVolume_SnapshotCreate_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageVolume_SnapshotRestore_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageVolume_SnapshotRestore_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageVolume_SnapshotRestore_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageVolume_SnapshotEnumerate_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageVolume_SnapshotEnumerate_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageVolume_SnapshotEnumerate_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageVolume_SnapshotEnumerateWithFilters_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageVolume_SnapshotEnumerateWithFilters_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageVolume_SnapshotEnumerateWithFilters_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageVolume_SnapshotScheduleUpdate_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageVolume_SnapshotScheduleUpdate_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageVolume_SnapshotScheduleUpdate_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	return nil
+}
+
+var (
+	pattern_OpenStorageVolume_Create_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "volumes"}, ""))
+
+	pattern_OpenStorageVolume_Clone_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "volumes", "clone"}, ""))
+
+	pattern_OpenStorageVolume_Delete_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 1, 0, 4, 1, 5, 2}, []string{"v1", "volumes", "volume_id"}, ""))
+
+	pattern_OpenStorageVolume_Inspect_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "volumes", "inspect", "volume_id"}, ""))
+
+	pattern_OpenStorageVolume_InspectWithFilters_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "volumes", "inspectwithfilters"}, ""))
+
+	pattern_OpenStorageVolume_Update_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 1, 0, 4, 1, 5, 2}, []string{"v1", "volumes", "volume_id"}, ""))
+
+	pattern_OpenStorageVolume_Stats_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "volumes", "stats", "volume_id"}, ""))
+
+	pattern_OpenStorageVolume_CapacityUsage_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "volumes", "usage", "volume_id"}, ""))
+
+	pattern_OpenStorageVolume_Enumerate_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "volumes"}, ""))
+
+	pattern_OpenStorageVolume_EnumerateWithFilters_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "volumes", "filters"}, ""))
+
+	pattern_OpenStorageVolume_SnapshotCreate_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "volumes", "snapshots"}, ""))
+
+	pattern_OpenStorageVolume_SnapshotRestore_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 2, 3}, []string{"v1", "volumes", "snapshots", "restore"}, ""))
+
+	pattern_OpenStorageVolume_SnapshotEnumerate_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "volumes", "snapshots"}, ""))
+
+	pattern_OpenStorageVolume_SnapshotEnumerateWithFilters_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 2, 3, 1, 0, 4, 1, 5, 4}, []string{"v1", "volumes", "snapshots", "filters", "volume_id"}, ""))
+
+	pattern_OpenStorageVolume_SnapshotScheduleUpdate_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 2, 3, 1, 0, 4, 1, 5, 4}, []string{"v1", "volumes", "snapshot", "schedules", "volume_id"}, ""))
+)
+
+var (
+	forward_OpenStorageVolume_Create_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageVolume_Clone_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageVolume_Delete_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageVolume_Inspect_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageVolume_InspectWithFilters_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageVolume_Update_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageVolume_Stats_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageVolume_CapacityUsage_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageVolume_Enumerate_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageVolume_EnumerateWithFilters_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageVolume_SnapshotCreate_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageVolume_SnapshotRestore_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageVolume_SnapshotEnumerate_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageVolume_SnapshotEnumerateWithFilters_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageVolume_SnapshotScheduleUpdate_0 = runtime.ForwardResponseMessage
+)
+
+// RegisterOpenStorageMountAttachHandlerFromEndpoint is same as RegisterOpenStorageMountAttachHandler but
+// automatically dials to "endpoint" and closes the connection when "ctx" gets done.
+func RegisterOpenStorageMountAttachHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error) {
+	conn, err := grpc.Dial(endpoint, opts...)
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err != nil {
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+			return
+		}
+		go func() {
+			<-ctx.Done()
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+		}()
+	}()
+
+	return RegisterOpenStorageMountAttachHandler(ctx, mux, conn)
+}
+
+// RegisterOpenStorageMountAttachHandler registers the http handlers for service OpenStorageMountAttach to "mux".
+// The handlers forward requests to the grpc endpoint over "conn".
+func RegisterOpenStorageMountAttachHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error {
+	return RegisterOpenStorageMountAttachHandlerClient(ctx, mux, NewOpenStorageMountAttachClient(conn))
+}
+
+// RegisterOpenStorageMountAttachHandler registers the http handlers for service OpenStorageMountAttach to "mux".
+// The handlers forward requests to the grpc endpoint over the given implementation of "OpenStorageMountAttachClient".
+// Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "OpenStorageMountAttachClient"
+// doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in
+// "OpenStorageMountAttachClient" to call the correct interceptors.
+func RegisterOpenStorageMountAttachHandlerClient(ctx context.Context, mux *runtime.ServeMux, client OpenStorageMountAttachClient) error {
+
+	mux.Handle("POST", pattern_OpenStorageMountAttach_Attach_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageMountAttach_Attach_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageMountAttach_Attach_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageMountAttach_Detach_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageMountAttach_Detach_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageMountAttach_Detach_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageMountAttach_Mount_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageMountAttach_Mount_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageMountAttach_Mount_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageMountAttach_Unmount_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageMountAttach_Unmount_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageMountAttach_Unmount_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	return nil
+}
+
+var (
+	pattern_OpenStorageMountAttach_Attach_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "mountattach", "attach"}, ""))
+
+	pattern_OpenStorageMountAttach_Detach_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "mountattach", "detach"}, ""))
+
+	pattern_OpenStorageMountAttach_Mount_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "mountattach", "mount"}, ""))
+
+	pattern_OpenStorageMountAttach_Unmount_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "mountattach", "unmount"}, ""))
+)
+
+var (
+	forward_OpenStorageMountAttach_Attach_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageMountAttach_Detach_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageMountAttach_Mount_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageMountAttach_Unmount_0 = runtime.ForwardResponseMessage
+)
+
+// RegisterOpenStorageMigrateHandlerFromEndpoint is same as RegisterOpenStorageMigrateHandler but
+// automatically dials to "endpoint" and closes the connection when "ctx" gets done.
+func RegisterOpenStorageMigrateHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error) {
+	conn, err := grpc.Dial(endpoint, opts...)
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err != nil {
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+			return
+		}
+		go func() {
+			<-ctx.Done()
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+		}()
+	}()
+
+	return RegisterOpenStorageMigrateHandler(ctx, mux, conn)
+}
+
+// RegisterOpenStorageMigrateHandler registers the http handlers for service OpenStorageMigrate to "mux".
+// The handlers forward requests to the grpc endpoint over "conn".
+func RegisterOpenStorageMigrateHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error {
+	return RegisterOpenStorageMigrateHandlerClient(ctx, mux, NewOpenStorageMigrateClient(conn))
+}
+
+// RegisterOpenStorageMigrateHandler registers the http handlers for service OpenStorageMigrate to "mux".
+// The handlers forward requests to the grpc endpoint over the given implementation of "OpenStorageMigrateClient".
+// Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "OpenStorageMigrateClient"
+// doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in
+// "OpenStorageMigrateClient" to call the correct interceptors.
+func RegisterOpenStorageMigrateHandlerClient(ctx context.Context, mux *runtime.ServeMux, client OpenStorageMigrateClient) error {
+
+	mux.Handle("POST", pattern_OpenStorageMigrate_Start_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageMigrate_Start_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageMigrate_Start_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageMigrate_Cancel_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageMigrate_Cancel_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageMigrate_Cancel_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageMigrate_Status_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageMigrate_Status_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageMigrate_Status_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	return nil
+}
+
+var (
+	pattern_OpenStorageMigrate_Start_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "volumemigrate"}, ""))
+
+	pattern_OpenStorageMigrate_Cancel_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "volumemigrate", "cancel"}, ""))
+
+	pattern_OpenStorageMigrate_Status_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "volumemigrate"}, ""))
+)
+
+var (
+	forward_OpenStorageMigrate_Start_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageMigrate_Cancel_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageMigrate_Status_0 = runtime.ForwardResponseMessage
+)
+
+// RegisterOpenStorageObjectstoreHandlerFromEndpoint is same as RegisterOpenStorageObjectstoreHandler but
+// automatically dials to "endpoint" and closes the connection when "ctx" gets done.
+func RegisterOpenStorageObjectstoreHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error) {
+	conn, err := grpc.Dial(endpoint, opts...)
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err != nil {
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+			return
+		}
+		go func() {
+			<-ctx.Done()
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+		}()
+	}()
+
+	return RegisterOpenStorageObjectstoreHandler(ctx, mux, conn)
+}
+
+// RegisterOpenStorageObjectstoreHandler registers the http handlers for service OpenStorageObjectstore to "mux".
+// The handlers forward requests to the grpc endpoint over "conn".
+func RegisterOpenStorageObjectstoreHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error {
+	return RegisterOpenStorageObjectstoreHandlerClient(ctx, mux, NewOpenStorageObjectstoreClient(conn))
+}
+
+// RegisterOpenStorageObjectstoreHandler registers the http handlers for service OpenStorageObjectstore to "mux".
+// The handlers forward requests to the grpc endpoint over the given implementation of "OpenStorageObjectstoreClient".
+// Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "OpenStorageObjectstoreClient"
+// doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in
+// "OpenStorageObjectstoreClient" to call the correct interceptors.
+func RegisterOpenStorageObjectstoreHandlerClient(ctx context.Context, mux *runtime.ServeMux, client OpenStorageObjectstoreClient) error {
+
+	mux.Handle("GET", pattern_OpenStorageObjectstore_Inspect_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageObjectstore_Inspect_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageObjectstore_Inspect_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageObjectstore_Create_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageObjectstore_Create_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageObjectstore_Create_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("DELETE", pattern_OpenStorageObjectstore_Delete_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageObjectstore_Delete_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageObjectstore_Delete_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("PUT", pattern_OpenStorageObjectstore_Update_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageObjectstore_Update_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageObjectstore_Update_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	return nil
+}
+
+var (
+	pattern_OpenStorageObjectstore_Inspect_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "objectstores", "inspect", "objectstore_id"}, ""))
+
+	pattern_OpenStorageObjectstore_Create_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "objectstores"}, ""))
+
+	pattern_OpenStorageObjectstore_Delete_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 1, 0, 4, 1, 5, 2}, []string{"v1", "objectstores", "objectstore_id"}, ""))
+
+	pattern_OpenStorageObjectstore_Update_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 1, 0, 4, 1, 5, 2}, []string{"v1", "objectstores", "objectstore_id"}, ""))
+)
+
+var (
+	forward_OpenStorageObjectstore_Inspect_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageObjectstore_Create_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageObjectstore_Delete_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageObjectstore_Update_0 = runtime.ForwardResponseMessage
+)
+
+// RegisterOpenStorageCredentialsHandlerFromEndpoint is same as RegisterOpenStorageCredentialsHandler but
+// automatically dials to "endpoint" and closes the connection when "ctx" gets done.
+func RegisterOpenStorageCredentialsHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error) {
+	conn, err := grpc.Dial(endpoint, opts...)
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err != nil {
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+			return
+		}
+		go func() {
+			<-ctx.Done()
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+		}()
+	}()
+
+	return RegisterOpenStorageCredentialsHandler(ctx, mux, conn)
+}
+
+// RegisterOpenStorageCredentialsHandler registers the http handlers for service OpenStorageCredentials to "mux".
+// The handlers forward requests to the grpc endpoint over "conn".
+func RegisterOpenStorageCredentialsHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error {
+	return RegisterOpenStorageCredentialsHandlerClient(ctx, mux, NewOpenStorageCredentialsClient(conn))
+}
+
+// RegisterOpenStorageCredentialsHandler registers the http handlers for service OpenStorageCredentials to "mux".
+// The handlers forward requests to the grpc endpoint over the given implementation of "OpenStorageCredentialsClient".
+// Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "OpenStorageCredentialsClient"
+// doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in
+// "OpenStorageCredentialsClient" to call the correct interceptors.
+func RegisterOpenStorageCredentialsHandlerClient(ctx context.Context, mux *runtime.ServeMux, client OpenStorageCredentialsClient) error {
+
+	mux.Handle("POST", pattern_OpenStorageCredentials_Create_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCredentials_Create_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCredentials_Create_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageCredentials_Enumerate_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCredentials_Enumerate_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCredentials_Enumerate_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageCredentials_Inspect_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCredentials_Inspect_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCredentials_Inspect_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("DELETE", pattern_OpenStorageCredentials_Delete_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCredentials_Delete_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCredentials_Delete_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageCredentials_Validate_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCredentials_Validate_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCredentials_Validate_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	return nil
+}
+
+var (
+	pattern_OpenStorageCredentials_Create_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "credentials"}, ""))
+
+	pattern_OpenStorageCredentials_Enumerate_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "credentials"}, ""))
+
+	pattern_OpenStorageCredentials_Inspect_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "credentials", "inspect", "credential_id"}, ""))
+
+	pattern_OpenStorageCredentials_Delete_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 1, 0, 4, 1, 5, 2}, []string{"v1", "credentials", "credential_id"}, ""))
+
+	pattern_OpenStorageCredentials_Validate_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "credentials", "validate", "credential_id"}, ""))
+)
+
+var (
+	forward_OpenStorageCredentials_Create_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageCredentials_Enumerate_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageCredentials_Inspect_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageCredentials_Delete_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageCredentials_Validate_0 = runtime.ForwardResponseMessage
+)
+
+// RegisterOpenStorageSchedulePolicyHandlerFromEndpoint is same as RegisterOpenStorageSchedulePolicyHandler but
+// automatically dials to "endpoint" and closes the connection when "ctx" gets done.
+func RegisterOpenStorageSchedulePolicyHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error) {
+	conn, err := grpc.Dial(endpoint, opts...)
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err != nil {
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+			return
+		}
+		go func() {
+			<-ctx.Done()
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+		}()
+	}()
+
+	return RegisterOpenStorageSchedulePolicyHandler(ctx, mux, conn)
+}
+
+// RegisterOpenStorageSchedulePolicyHandler registers the http handlers for service OpenStorageSchedulePolicy to "mux".
+// The handlers forward requests to the grpc endpoint over "conn".
+func RegisterOpenStorageSchedulePolicyHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error {
+	return RegisterOpenStorageSchedulePolicyHandlerClient(ctx, mux, NewOpenStorageSchedulePolicyClient(conn))
+}
+
+// RegisterOpenStorageSchedulePolicyHandler registers the http handlers for service OpenStorageSchedulePolicy to "mux".
+// The handlers forward requests to the grpc endpoint over the given implementation of "OpenStorageSchedulePolicyClient".
+// Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "OpenStorageSchedulePolicyClient"
+// doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in
+// "OpenStorageSchedulePolicyClient" to call the correct interceptors.
+func RegisterOpenStorageSchedulePolicyHandlerClient(ctx context.Context, mux *runtime.ServeMux, client OpenStorageSchedulePolicyClient) error {
+
+	mux.Handle("POST", pattern_OpenStorageSchedulePolicy_Create_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageSchedulePolicy_Create_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageSchedulePolicy_Create_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("PUT", pattern_OpenStorageSchedulePolicy_Update_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageSchedulePolicy_Update_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageSchedulePolicy_Update_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageSchedulePolicy_Enumerate_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageSchedulePolicy_Enumerate_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageSchedulePolicy_Enumerate_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageSchedulePolicy_Inspect_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageSchedulePolicy_Inspect_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageSchedulePolicy_Inspect_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("DELETE", pattern_OpenStorageSchedulePolicy_Delete_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageSchedulePolicy_Delete_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageSchedulePolicy_Delete_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	return nil
+}
+
+var (
+	pattern_OpenStorageSchedulePolicy_Create_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "schedulepolicies"}, ""))
+
+	pattern_OpenStorageSchedulePolicy_Update_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "schedulepolicies"}, ""))
+
+	pattern_OpenStorageSchedulePolicy_Enumerate_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "schedulepolicies"}, ""))
+
+	pattern_OpenStorageSchedulePolicy_Inspect_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "schedulepolicies", "inspect", "name"}, ""))
+
+	pattern_OpenStorageSchedulePolicy_Delete_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 1, 0, 4, 1, 5, 2}, []string{"v1", "schedulepolicies", "name"}, ""))
+)
+
+var (
+	forward_OpenStorageSchedulePolicy_Create_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageSchedulePolicy_Update_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageSchedulePolicy_Enumerate_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageSchedulePolicy_Inspect_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageSchedulePolicy_Delete_0 = runtime.ForwardResponseMessage
+)
+
+// RegisterOpenStorageCloudBackupHandlerFromEndpoint is same as RegisterOpenStorageCloudBackupHandler but
+// automatically dials to "endpoint" and closes the connection when "ctx" gets done.
+func RegisterOpenStorageCloudBackupHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error) {
+	conn, err := grpc.Dial(endpoint, opts...)
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err != nil {
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+			return
+		}
+		go func() {
+			<-ctx.Done()
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+		}()
+	}()
+
+	return RegisterOpenStorageCloudBackupHandler(ctx, mux, conn)
+}
+
+// RegisterOpenStorageCloudBackupHandler registers the http handlers for service OpenStorageCloudBackup to "mux".
+// The handlers forward requests to the grpc endpoint over "conn".
+func RegisterOpenStorageCloudBackupHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error {
+	return RegisterOpenStorageCloudBackupHandlerClient(ctx, mux, NewOpenStorageCloudBackupClient(conn))
+}
+
+// RegisterOpenStorageCloudBackupHandler registers the http handlers for service OpenStorageCloudBackup to "mux".
+// The handlers forward requests to the grpc endpoint over the given implementation of "OpenStorageCloudBackupClient".
+// Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "OpenStorageCloudBackupClient"
+// doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in
+// "OpenStorageCloudBackupClient" to call the correct interceptors.
+func RegisterOpenStorageCloudBackupHandlerClient(ctx context.Context, mux *runtime.ServeMux, client OpenStorageCloudBackupClient) error {
+
+	mux.Handle("POST", pattern_OpenStorageCloudBackup_Create_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCloudBackup_Create_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCloudBackup_Create_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageCloudBackup_Restore_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCloudBackup_Restore_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCloudBackup_Restore_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("DELETE", pattern_OpenStorageCloudBackup_Delete_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCloudBackup_Delete_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCloudBackup_Delete_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageCloudBackup_DeleteAll_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCloudBackup_DeleteAll_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCloudBackup_DeleteAll_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageCloudBackup_EnumerateWithFilters_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCloudBackup_EnumerateWithFilters_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCloudBackup_EnumerateWithFilters_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageCloudBackup_Status_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCloudBackup_Status_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCloudBackup_Status_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageCloudBackup_Catalog_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCloudBackup_Catalog_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCloudBackup_Catalog_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageCloudBackup_History_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCloudBackup_History_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCloudBackup_History_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageCloudBackup_StateChange_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCloudBackup_StateChange_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCloudBackup_StateChange_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStorageCloudBackup_SchedCreate_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCloudBackup_SchedCreate_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCloudBackup_SchedCreate_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("DELETE", pattern_OpenStorageCloudBackup_SchedDelete_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCloudBackup_SchedDelete_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCloudBackup_SchedDelete_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStorageCloudBackup_SchedEnumerate_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStorageCloudBackup_SchedEnumerate_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStorageCloudBackup_SchedEnumerate_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	return nil
+}
+
+var (
+	pattern_OpenStorageCloudBackup_Create_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "cloudbackups"}, ""))
+
+	pattern_OpenStorageCloudBackup_Restore_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "cloudbackups", "restore"}, ""))
+
+	pattern_OpenStorageCloudBackup_Delete_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "cloudbackups", "backup", "backup_id"}, ""))
+
+	pattern_OpenStorageCloudBackup_DeleteAll_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "cloudbackups", "deleteall"}, ""))
+
+	pattern_OpenStorageCloudBackup_EnumerateWithFilters_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 2, 3}, []string{"v1", "cloudbackups", "enumerate", "filters"}, ""))
+
+	pattern_OpenStorageCloudBackup_Status_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "cloudbackups", "status"}, ""))
+
+	pattern_OpenStorageCloudBackup_Catalog_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "cloudbackups", "catalog"}, ""))
+
+	pattern_OpenStorageCloudBackup_History_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "cloudbackups", "history", "src_volume_id"}, ""))
+
+	pattern_OpenStorageCloudBackup_StateChange_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "cloudbackups", "statechange"}, ""))
+
+	pattern_OpenStorageCloudBackup_SchedCreate_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "cloudbackups", "schedules"}, ""))
+
+	pattern_OpenStorageCloudBackup_SchedDelete_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "cloudbackups", "schedules", "backup_schedule_id"}, ""))
+
+	pattern_OpenStorageCloudBackup_SchedEnumerate_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "cloudbackups", "schedules"}, ""))
+)
+
+var (
+	forward_OpenStorageCloudBackup_Create_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageCloudBackup_Restore_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageCloudBackup_Delete_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageCloudBackup_DeleteAll_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageCloudBackup_EnumerateWithFilters_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageCloudBackup_Status_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageCloudBackup_Catalog_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageCloudBackup_History_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageCloudBackup_StateChange_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageCloudBackup_SchedCreate_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageCloudBackup_SchedDelete_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStorageCloudBackup_SchedEnumerate_0 = runtime.ForwardResponseMessage
+)
+
+// RegisterOpenStoragePolicyHandlerFromEndpoint is same as RegisterOpenStoragePolicyHandler but
+// automatically dials to "endpoint" and closes the connection when "ctx" gets done.
+func RegisterOpenStoragePolicyHandlerFromEndpoint(ctx context.Context, mux *runtime.ServeMux, endpoint string, opts []grpc.DialOption) (err error) {
+	conn, err := grpc.Dial(endpoint, opts...)
+	if err != nil {
+		return err
+	}
+	defer func() {
+		if err != nil {
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+			return
+		}
+		go func() {
+			<-ctx.Done()
+			if cerr := conn.Close(); cerr != nil {
+				grpclog.Printf("Failed to close conn to %s: %v", endpoint, cerr)
+			}
+		}()
+	}()
+
+	return RegisterOpenStoragePolicyHandler(ctx, mux, conn)
+}
+
+// RegisterOpenStoragePolicyHandler registers the http handlers for service OpenStoragePolicy to "mux".
+// The handlers forward requests to the grpc endpoint over "conn".
+func RegisterOpenStoragePolicyHandler(ctx context.Context, mux *runtime.ServeMux, conn *grpc.ClientConn) error {
+	return RegisterOpenStoragePolicyHandlerClient(ctx, mux, NewOpenStoragePolicyClient(conn))
+}
+
+// RegisterOpenStoragePolicyHandler registers the http handlers for service OpenStoragePolicy to "mux".
+// The handlers forward requests to the grpc endpoint over the given implementation of "OpenStoragePolicyClient".
+// Note: the gRPC framework executes interceptors within the gRPC handler. If the passed in "OpenStoragePolicyClient"
+// doesn't go through the normal gRPC flow (creating a gRPC client etc.) then it will be up to the passed in
+// "OpenStoragePolicyClient" to call the correct interceptors.
+func RegisterOpenStoragePolicyHandlerClient(ctx context.Context, mux *runtime.ServeMux, client OpenStoragePolicyClient) error {
+
+	mux.Handle("POST", pattern_OpenStoragePolicy_Create_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStoragePolicy_Create_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStoragePolicy_Create_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStoragePolicy_Enumerate_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStoragePolicy_Enumerate_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStoragePolicy_Enumerate_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStoragePolicy_Inspect_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStoragePolicy_Inspect_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStoragePolicy_Inspect_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("PUT", pattern_OpenStoragePolicy_Update_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStoragePolicy_Update_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStoragePolicy_Update_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("DELETE", pattern_OpenStoragePolicy_Delete_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStoragePolicy_Delete_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStoragePolicy_Delete_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStoragePolicy_SetDefault_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStoragePolicy_SetDefault_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStoragePolicy_SetDefault_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("GET", pattern_OpenStoragePolicy_DefaultInspect_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStoragePolicy_DefaultInspect_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStoragePolicy_DefaultInspect_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	mux.Handle("POST", pattern_OpenStoragePolicy_Release_0, func(w http.ResponseWriter, req *http.Request, pathParams map[string]string) {
+		ctx, cancel := context.WithCancel(req.Context())
+		defer cancel()
+		if cn, ok := w.(http.CloseNotifier); ok {
+			go func(done <-chan struct{}, closed <-chan bool) {
+				select {
+				case <-done:
+				case <-closed:
+					cancel()
+				}
+			}(ctx.Done(), cn.CloseNotify())
+		}
+		inboundMarshaler, outboundMarshaler := runtime.MarshalerForRequest(mux, req)
+		rctx, err := runtime.AnnotateContext(ctx, mux, req)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+		resp, md, err := request_OpenStoragePolicy_Release_0(rctx, inboundMarshaler, client, req, pathParams)
+		ctx = runtime.NewServerMetadataContext(ctx, md)
+		if err != nil {
+			runtime.HTTPError(ctx, mux, outboundMarshaler, w, req, err)
+			return
+		}
+
+		forward_OpenStoragePolicy_Release_0(ctx, mux, outboundMarshaler, w, req, resp, mux.GetForwardResponseOptions()...)
+
+	})
+
+	return nil
+}
+
+var (
+	pattern_OpenStoragePolicy_Create_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "storagepolicies"}, ""))
+
+	pattern_OpenStoragePolicy_Enumerate_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "storagepolicies"}, ""))
+
+	pattern_OpenStoragePolicy_Inspect_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "storagepolicies", "inspect", "name"}, ""))
+
+	pattern_OpenStoragePolicy_Update_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1}, []string{"v1", "storagepolicies"}, ""))
+
+	pattern_OpenStoragePolicy_Delete_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 1, 0, 4, 1, 5, 2}, []string{"v1", "storagepolicies", "name"}, ""))
+
+	pattern_OpenStoragePolicy_SetDefault_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2, 1, 0, 4, 1, 5, 3}, []string{"v1", "storagepolicies", "default", "name"}, ""))
+
+	pattern_OpenStoragePolicy_DefaultInspect_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "storagepolicies", "default"}, ""))
+
+	pattern_OpenStoragePolicy_Release_0 = runtime.MustPattern(runtime.NewPattern(1, []int{2, 0, 2, 1, 2, 2}, []string{"v1", "storagepolicies", "release"}, ""))
+)
+
+var (
+	forward_OpenStoragePolicy_Create_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStoragePolicy_Enumerate_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStoragePolicy_Inspect_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStoragePolicy_Update_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStoragePolicy_Delete_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStoragePolicy_SetDefault_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStoragePolicy_DefaultInspect_0 = runtime.ForwardResponseMessage
+
+	forward_OpenStoragePolicy_Release_0 = runtime.ForwardResponseMessage
+)
diff --git a/vendor/github.com/libopenstorage/openstorage/api/api.proto b/vendor/github.com/libopenstorage/openstorage/api/api.proto
new file mode 100644
index 000000000..489b58674
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/api/api.proto
@@ -0,0 +1,3744 @@
+/// Please use the following editor setup for this file:
+// Tab size=2; Tabs as spaces; Clean up trailing whitepsace
+//
+// In vim add: au FileType proto setl sw=2 ts=2 expandtab list
+//
+// Note, the documentation provided here for can be created in
+// markdown format plus the use of 'codetabs' are supported. The documentation
+// will then be rendered by github.com/openstoreage/libopenstoreage.github.io and
+// provided on https://libopenstorage.github.io
+//
+syntax = "proto3";
+
+import "google/protobuf/timestamp.proto";
+import "google/api/annotations.proto";
+
+package openstorage.api;
+
+option go_package = "api";
+option java_multiple_files = true;
+option java_package = "com.openstorage.api";
+
+enum Status {
+  STATUS_NONE = 0;
+  STATUS_INIT = 1;
+  STATUS_OK = 2;
+  STATUS_OFFLINE = 3;
+  STATUS_ERROR = 4;
+  STATUS_NOT_IN_QUORUM = 5;
+  STATUS_DECOMMISSION = 6;
+  STATUS_MAINTENANCE = 7;
+  STATUS_STORAGE_DOWN = 8;
+  STATUS_STORAGE_DEGRADED = 9;
+  STATUS_NEEDS_REBOOT = 10;
+  STATUS_STORAGE_REBALANCE = 11;
+  STATUS_STORAGE_DRIVE_REPLACE = 12;
+  STATUS_NOT_IN_QUORUM_NO_STORAGE = 13;
+  // Add statuses before MAX and update the number for MAX
+  STATUS_MAX = 14;
+}
+
+enum DriverType {
+  DRIVER_TYPE_NONE = 0;
+  DRIVER_TYPE_FILE = 1;
+  DRIVER_TYPE_BLOCK = 2;
+  DRIVER_TYPE_OBJECT = 3;
+  DRIVER_TYPE_CLUSTERED = 4;
+  DRIVER_TYPE_GRAPH = 5;
+}
+
+enum FSType {
+  FS_TYPE_NONE = 0;
+  FS_TYPE_BTRFS = 1;
+  FS_TYPE_EXT4 = 2;
+  FS_TYPE_FUSE = 3;
+  FS_TYPE_NFS = 4;
+  FS_TYPE_VFS = 5;
+  FS_TYPE_XFS = 6;
+  FS_TYPE_ZFS = 7;
+  FS_TYPE_XFSv2 = 8;
+}
+
+enum GraphDriverChangeType {
+  GRAPH_DRIVER_CHANGE_TYPE_NONE = 0;
+  GRAPH_DRIVER_CHANGE_TYPE_MODIFIED = 1;
+  GRAPH_DRIVER_CHANGE_TYPE_ADDED = 2;
+  GRAPH_DRIVER_CHANGE_TYPE_DELETED = 3;
+}
+
+enum SeverityType {
+  SEVERITY_TYPE_NONE = 0;
+  SEVERITY_TYPE_ALARM = 1;
+  SEVERITY_TYPE_WARNING = 2;
+  SEVERITY_TYPE_NOTIFY = 3;
+}
+
+enum ResourceType {
+  RESOURCE_TYPE_NONE = 0;
+  RESOURCE_TYPE_VOLUME = 1;
+  RESOURCE_TYPE_NODE = 2;
+  RESOURCE_TYPE_CLUSTER = 3;
+  RESOURCE_TYPE_DRIVE = 4;
+}
+
+enum AlertActionType {
+  ALERT_ACTION_TYPE_NONE = 0;
+  ALERT_ACTION_TYPE_DELETE = 1;
+  ALERT_ACTION_TYPE_CREATE = 2;
+  ALERT_ACTION_TYPE_UPDATE = 3;
+}
+
+enum VolumeActionParam {
+  VOLUME_ACTION_PARAM_NONE = 0;
+  // Maps to the boolean value false
+  VOLUME_ACTION_PARAM_OFF = 1;
+  // Maps to the boolean value true.
+  VOLUME_ACTION_PARAM_ON = 2;
+}
+
+enum CosType {
+  NONE = 0;
+  LOW = 1;
+  MEDIUM = 2;
+  HIGH = 3;
+}
+
+enum IoProfile {
+  IO_PROFILE_SEQUENTIAL = 0;
+  IO_PROFILE_RANDOM= 1;
+  IO_PROFILE_DB = 2;
+  IO_PROFILE_DB_REMOTE = 3;
+  IO_PROFILE_CMS = 4;
+}
+
+// VolumeState represents the state of a volume.
+enum VolumeState {
+  VOLUME_STATE_NONE = 0;
+  // Volume is transitioning to new state
+  VOLUME_STATE_PENDING = 1;
+  // Volume is ready to be assigned to a container
+  VOLUME_STATE_AVAILABLE = 2;
+  // Volume is attached to container
+  VOLUME_STATE_ATTACHED = 3;
+  // Volume is detached but associated with a container
+  VOLUME_STATE_DETACHED = 4;
+  // Volume detach is in progress
+  VOLUME_STATE_DETATCHING = 5;
+  // Volume is in error state
+  VOLUME_STATE_ERROR = 6;
+  // Volume is deleted, it will remain in this state
+  // while resources are asynchronously reclaimed
+  VOLUME_STATE_DELETED = 7;
+  // Volume is trying to be detached
+  VOLUME_STATE_TRY_DETACHING = 8;
+  // Volume is undergoing restore
+  VOLUME_STATE_RESTORE = 9;
+}
+
+// VolumeStatus represents a health status for a volume.
+enum VolumeStatus {
+  VOLUME_STATUS_NONE = 0;
+  // Volume is not present
+  VOLUME_STATUS_NOT_PRESENT = 1;
+  // Volume is healthy
+  VOLUME_STATUS_UP = 2;
+  // Volume is in fail mode
+  VOLUME_STATUS_DOWN = 3;
+  // Volume is up but with degraded performance
+  // In a RAID group, this may indicate a problem with one or more drives
+  VOLUME_STATUS_DEGRADED = 4;
+}
+
+enum StorageMedium {
+  // Magnetic spinning disk.
+  STORAGE_MEDIUM_MAGNETIC = 0;
+  // SSD disk
+  STORAGE_MEDIUM_SSD = 1;
+  // NVME disk
+  STORAGE_MEDIUM_NVME = 2;
+}
+
+enum AttachState {
+    // Attached and available externally
+    ATTACH_STATE_EXTERNAL = 0;
+    // Attached but only available internally
+    ATTACH_STATE_INTERNAL = 1;
+    // Switching from External to Internal
+    ATTACH_STATE_INTERNAL_SWITCH = 2;
+}
+
+enum OperationFlags {
+  OP_FLAGS_UNKNOWN = 0;
+  OP_FLAGS_NONE = 1;
+  // Perform a force_detach during detach operation
+  OP_FLAGS_DETACH_FORCE = 2;
+}
+
+// StorageResource groups properties of a storage device.
+message StorageResource {
+  // Id is the LUN identifier.
+  string id = 1;
+  // Path device path for this storage resource.
+  string path = 2;
+  // Storage medium.
+  StorageMedium medium = 3;
+  // True if this device is online.
+  bool online = 4;
+  // IOPS
+  uint64 iops = 5;
+  // SeqWrite
+  double seq_write = 6;
+  // SeqRead
+  double seq_read = 7;
+  // RandRW
+  double randRW  = 8;
+  // Total size in bytes.
+  uint64 size = 9;
+  // Physical Bytes used.
+  uint64 used = 10;
+  // True if this device is rotational.
+  string rotation_speed = 11;
+  // Timestamp of last time this device was scanned.
+  google.protobuf.Timestamp last_scan = 12;
+  // True if dedicated for metadata.
+  bool metadata = 13;
+  // True if dedicated as cache
+  bool cache = 14;
+}
+
+// StoragePool groups different storage devices based on their CosType
+message StoragePool {
+  // ID pool ID
+  int32 ID = 1;
+  // Cos reflects the capabilities of this drive pool
+  CosType Cos = 2;
+  // Medium underlying storage type
+  StorageMedium Medium = 3;
+  // RaidLevel storage raid level
+  string RaidLevel = 4;
+  // TotalSize of the pool
+  uint64 TotalSize = 7;
+  // Used size of the pool
+  uint64 Used = 8;
+  // Labels is a list of user defined name-value pairs
+  map<string, string> labels = 9;
+}
+
+// VolumeLocator is a structure that is attached to a volume
+// and is used to carry opaque metadata.
+message VolumeLocator {
+  // User friendly identifier
+  string name = 1;
+  // A set of name-value pairs that acts as search filters
+  map<string, string> volume_labels = 2;
+  // Filter with ownership
+  Ownership ownership = 3;
+  // Filter by group
+  Group group = 4;
+  // Volume Ids to match
+  repeated string volume_ids = 5;
+}
+
+// Options used for volume inspection
+message VolumeInspectOptions {
+  // Deep inspection is used to collect more information about
+  // the volume. Setting this value may delay the request.
+  bool deep = 1;
+}
+
+// Source is a structure that can be given to a volume
+// to seed the volume with data.
+message Source {
+  // A volume id, if specified will create a clone of the parent.
+  string parent = 1;
+  // Seed will seed the volume from the specified URI
+  // Any additional config for the source comes from the labels in the spec
+  string seed = 2;
+}
+
+// Group represents VolumeGroup / namespace
+// All volumes in the same group share this object.
+message Group {
+  // Id common identifier across volumes that have the same group.
+  string id = 1;
+}
+
+// IoStrategy defines how I/O should be performed to backing storage media.
+message IoStrategy {
+  // AsyncIO enables kaio.
+  bool async_io = 1;
+  // EarlyAck enables acks for async I/O at the source.
+  bool early_ack = 2;
+}
+
+// VolumeSpec has the properties needed to create a volume.
+message VolumeSpec {
+  // Ephemeral storage
+  bool ephemeral = 1;
+  // Size specifies the thin provisioned volume size in bytes
+  uint64 size = 2;
+  // Format specifies the filesystem for this volume.
+  FSType format = 3;
+  // BlockSize for the filesystem.
+  int64 block_size = 4;
+  // HaLevel specifies the number of copies of data.
+  int64 ha_level = 5;
+  // Cos specifies the relative class of service.
+  CosType cos = 6;
+  // IoProfile provides a hint about application using this volume.
+  IoProfile io_profile = 7;
+  // Dedupe specifies if the volume data is to be de-duplicated.
+  bool dedupe = 8;
+  // SnapshotInterval in minutes, set to 0 to disable snapshots
+  uint32 snapshot_interval = 9;
+  // (deprecated, do not use) VolumeLabels configuration labels
+  map<string, string> volume_labels = 10;
+  // Shared is true if this volume can be concurrently accessed by multiple users.
+  bool shared = 11;
+  // ReplicaSet is the desired set of nodes for the volume data.
+  ReplicaSet replica_set = 12;
+  // Aggregation level Specifies the number of parts the volume can be aggregated from.
+  uint32 aggregation_level = 13;
+  // Encrypted is true if this volume will be cryptographically secured.
+  bool encrypted = 14;
+  // Passphrase for an encrypted volume
+  string passphrase = 15;
+  // SnapshotSchedule a well known string that specifies when snapshots should be taken.
+  string snapshot_schedule = 16;
+  // Scale allows autocreation of volumes.
+  uint32 scale = 17;
+  // Sticky volumes cannot be deleted until the flag is removed.
+  bool sticky = 18;
+  // Group identifies a consistency group
+  Group group = 21;
+  // GroupEnforced is true if consistency group creation is enforced.
+  bool group_enforced = 22;
+  // Compressed is true if this volume is to be compressed.
+  bool compressed = 23;
+  // Cascaded is true if this volume can be populated on any node from an external source.
+  bool cascaded = 24;
+  // Journal is true if data for the volume goes into the journal.
+  bool journal = 25;
+  // Sharedv4 is true if this volume can be accessed via sharedv4.
+  bool sharedv4 = 26;
+  // QueueDepth defines the desired block device queue depth
+  uint32 queue_depth = 27;
+  // Use to force a file system type which is not recommended.
+  // The driver may still refuse to use the file system type.
+  bool force_unsupported_fs_type = 28;
+  // Nodiscard specifies if the volume will be mounted with discard support disabled.
+  // i.e. FS will not release allocated blocks back to the backing storage pool.
+  bool nodiscard = 29;
+  // IoStrategy preferred strategy for I/O.
+  IoStrategy io_strategy = 30;
+  // PlacementStrategy specifies a spec to indicate where to place the volume.
+  VolumePlacementStrategy placement_strategy = 31;
+  // StoragePolicy if applied/specified while creating volume
+  string storage_policy = 32;
+  // Owner
+  Ownership ownership = 33;
+}
+
+// VolumeSpecUpdate provides a method to set any of the VolumeSpec of an existing volume
+message VolumeSpecUpdate {
+  // Size specifies the thin provisioned volume size in bytes
+  oneof size_opt { uint64 size = 2; }
+  // HaLevel specifies the number of copies of data.
+  oneof ha_level_opt { int64 ha_level = 5; }
+  // Cos specifies the relative class of service.
+  oneof cos_opt { CosType cos = 6; }
+  // IoProfile provides a hint about application using this volume.
+  oneof io_profile_opt { IoProfile io_profile = 7; }
+  // Dedupe specifies if the volume data is to be de-duplicated.
+  oneof dedupe_opt { bool dedupe = 8; }
+  // SnapshotInterval in minutes, set to 0 to disable snapshots
+  oneof snapshot_interval_opt { uint32 snapshot_interval = 9; }
+  // Shared is true if this volume can be remotely accessed.
+  oneof shared_opt { bool shared = 11; }
+  // ReplicaSet is the desired set of nodes for the volume data.
+  ReplicaSet replica_set = 12;
+  // Passphrase for an encrypted volume
+  oneof passphrase_opt { string passphrase = 15; }
+  // SnapshotSchedule a well known string that specifies when snapshots should be taken.
+  oneof snapshot_schedule_opt { string snapshot_schedule = 16; }
+  // Scale allows autocreation of volumes.
+  oneof scale_opt { uint32 scale = 17; }
+  // Sticky volumes cannot be deleted until the flag is removed.
+  oneof sticky_opt { bool sticky = 18; }
+  // Group identifies a consistency group
+  oneof group_opt { Group group = 19; }
+  // Journal is true if data for the volume goes into the journal.
+  oneof journal_opt { bool journal = 23; }
+  // Sharedv4 is true if this volume can be accessed via sharedv4.
+  oneof sharedv4_opt { bool sharedv4 = 24; }
+  // QueueDepth defines the desired block device queue depth
+  oneof queue_depth_opt { uint32 queue_depth = 25; }
+  // Ownership volume information to update. If the value of `owner` in the
+  // `ownership` message is an empty string then the value of `owner` in
+  // the `VolumeSpec.Ownership.owner` will not be updated.
+  Ownership ownership = 26;
+  // Nodiscard specifies if the volume will be mounted with discard support disabled.
+  // i.e. FS will not release allocated blocks back to the backing storage pool.
+  oneof nodiscard_opt { bool nodiscard = 27; }
+  // IoStrategy preferred strategy for I/O.
+  IoStrategy io_strategy = 28;
+}
+
+// VolumeSpecPolicy provides a method to set volume storage policy
+message VolumeSpecPolicy {
+  // This defines an operator for the policy comparisons
+  enum PolicyOp {
+    // Policy will make sure the value must be equal
+    Equal = 0;
+    // Policy will make sure the requested value must be greater than or equal
+    Minimum = 1;
+    // Policy will make sure the requested value must be less than or equal
+    Maximum = 2;
+  }
+
+  // Size specifies the thin provisioned volume size in bytes.
+  // Use `size_operator` to show if this value is the min, max, or set.
+  oneof size_opt { uint64 size = 1; }
+  // HaLevel specifies the number of copies of data.
+  // Use `ha_level_operator` to show if this value is the min, max, or set.
+  oneof ha_level_opt { int64 ha_level = 2; }
+  // Cos specifies the relative class of service.
+  oneof cos_opt { CosType cos = 3; }
+  // IoProfile provides a hint about application using this volume.
+  oneof io_profile_opt { IoProfile io_profile = 4; }
+  // Dedupe specifies if the volume data is to be de-duplicated.
+  oneof dedupe_opt { bool dedupe = 5; }
+  // SnapshotInterval in minutes, set to 0 to disable snapshots
+  oneof snapshot_interval_opt { uint32 snapshot_interval = 6; }
+  // VolumeLabels configuration labels
+  map<string, string> volume_labels = 7;
+  // Shared is true if this volume can be remotely accessed.
+  oneof shared_opt { bool shared = 8; }
+  // ReplicaSet is the desired set of nodes for the volume data.
+  ReplicaSet replica_set = 9;
+  // Passphrase for an encrypted volume
+  oneof passphrase_opt { string passphrase = 10; }
+  // SnapshotSchedule a well known string that specifies when snapshots should be taken.
+  oneof snapshot_schedule_opt { string snapshot_schedule = 11; }
+  // Scale allows autocreation of volumes.
+  oneof scale_opt { uint32 scale = 12; }
+  // Sticky volumes cannot be deleted until the flag is removed.
+  oneof sticky_opt { bool sticky = 13; }
+  // Group identifies a consistency group
+  oneof group_opt { Group group = 14; }
+  // Journal is true if data for the volume goes into the journal.
+  oneof journal_opt { bool journal = 15; }
+  // Sharedv4 is true if this volume can be accessed via sharedv4.
+  oneof sharedv4_opt { bool sharedv4 = 16; }
+  // QueueDepth defines the desired block device queue depth
+  oneof queue_depth_opt { uint32 queue_depth = 17; }
+  // Encrypted is true if this volume will be cryptographically secured.
+  oneof encrypted_opt { bool encrypted = 18; }
+  // Aggregation level Specifies the number of parts the volume can be aggregated from.
+  oneof aggregation_level_opt { uint32 aggregation_level = 19; }
+  // Operator to check size
+  PolicyOp size_operator = 50;
+  // Operator to check ha_level
+  PolicyOp ha_level_operator = 51;
+  // Operator to check scale
+  PolicyOp scale_operator = 52;
+  // Operator to check snapshot_interval
+  PolicyOp snapshot_interval_operator = 53;
+  // Nodiscard specifies if the volume will be mounted with discard support disabled.
+  // i.e. FS will not release allocated blocks back to the backing storage pool.
+  oneof nodiscard_opt { bool nodiscard = 54; }
+  // IoStrategy preferred strategy for I/O.
+  IoStrategy io_strategy = 55;
+}
+
+// ReplicaSet set of machine IDs (nodes) to which part of this volume is erasure
+// coded - for clustered storage arrays
+message ReplicaSet {
+  repeated string nodes = 1;
+}
+
+// RuntimeStateMap is a list of name value mapping of driver specific runtime
+// information.
+message RuntimeStateMap {
+  map<string, string> runtime_state = 1;
+}
+
+// Ownership information for resource.
+// Administrators are users who belong to the group `*`, meaning, every group.
+message Ownership {
+
+  // Access types can be set by owner to have different levels of access to
+  // a resource.
+  //
+  // It is up to the resource to interpret what the types mean and are
+  // used for.
+  enum AccessType {
+    // Read access only and cannot affect the resource.
+    Read = 0;
+    // Write access and can affect the resource.
+    // This type automatically provides Read access also.
+    Write = 1;
+    // Administrator access.
+    // This type automatically provides Read and Write access also.
+    Admin = 2;
+  }
+
+  message AccessControl {
+    // Group access to resource which must match the group set in the
+    // authorization token.
+    // Can be set by the owner or the system administrator only.
+    // Possible values are:
+    // 1. no groups: Means no groups are given access.
+    // 2. `["*"]`: All groups are allowed.
+    // 3. `["group1", "group2"]`: Only certain groups are allowed. In this example only
+    // _group1_ and _group2_ are allowed.
+    map <string, AccessType> groups = 1;
+    // Collaborator access to resource gives access to other user.
+    // Must be the username (unique id) set in the authorization token.
+    // The owner or the administrator can set this value. Possible values are:
+    // 1. no collaborators: Means no users are given access.
+    // 2. `["*"]`: All users are allowed.
+    // 3. `["username1", "username2"]`: Only certain usernames are allowed. In this example only
+    // _username1_ and _username2_ are allowed.
+    map <string, AccessType> collaborators = 2;
+  }
+
+  // Username of owner.
+  //
+  // The storage system uses the username taken from the security authorization
+  // token and is saved on this field. Only users with system administration
+  // can edit this value.
+  string owner = 1;
+  // Permissions to share resource which can be set by the owner.
+  //
+  // NOTE: To create an "admin" user which has access to any resource set the group value
+  // in the token of the user to `*`.
+  AccessControl acls = 2;
+}
+
+// Volume represents an abstract storage volume.
+message Volume {
+  // Self referential volume ID.
+  string id = 1;
+  // Source specified seed data for the volume.
+  Source source = 2;
+  // Group volumes in the same group have the same group id.
+  Group group = 3;
+  // Readonly is true if this volume is to be mounted with readonly access.
+  bool readonly = 4;
+  // User specified locator
+  VolumeLocator locator = 5;
+  // Volume creation time
+  google.protobuf.Timestamp ctime = 6;
+  // User specified VolumeSpec
+  VolumeSpec spec = 7;
+  // Usage is bytes consumed by vtheis volume.
+  uint64 usage = 8;
+  // LastScan is the time when an integrity check was run.
+  google.protobuf.Timestamp last_scan = 9;
+  // Format specifies the filesytem for this volume.
+  FSType format = 10;
+  // Status is the availability status of this volume.
+  VolumeStatus status = 11;
+  // State is the current runtime state of this volume.
+  VolumeState state = 12;
+  // AttachedOn is the node instance identifier for clustered systems.
+  string attached_on = 13;
+  // AttachedState shows whether the device is attached for internal or external use.
+  AttachState attached_state = 14;
+  // DevicePath is the device exported by block device implementations.
+  string device_path = 15;
+  // SecureDevicePath is the device path for an encrypted volume.
+  string secure_device_path = 16;
+  // AttachPath is the mounted path in the host namespace.
+  repeated string attach_path = 17;
+  // AttachInfo is a list of name value mappings that provides attach information.
+  map<string, string> attach_info = 18;
+  // ReplicatSets storage for this volumefor clustered storage arrays.
+  repeated ReplicaSet replica_sets = 19;
+  // RuntimeState is a lst of name value mapping of driver specific runtime
+  // information.
+  repeated RuntimeStateMap runtime_state = 20;
+  // Error is the Last recorded error.
+  string error = 21;
+  // VolumeConsumers are entities that consume this volume
+  repeated VolumeConsumer volume_consumers = 22;
+  // FsResizeRequired if an FS resize is required on the volume.
+  bool fs_resize_required = 23;
+}
+
+// Stats is a structure that represents last collected stats for a volume
+message Stats {
+  // Reads completed successfully
+  uint64 reads = 1;
+  // Time spent in reads in ms
+  uint64 read_ms = 2;
+  // Number of bytes read
+  uint64 read_bytes = 3;
+  // Writes completed successfully
+  uint64 writes = 4;
+  // Time spent in writes in ms
+  uint64 write_ms = 5;
+  // Number of bytes written
+  uint64 write_bytes = 6;
+  // IOs curently in progress
+  uint64 io_progress = 7;
+  // Time spent doing IOs ms
+  uint64 io_ms = 8;
+  // BytesUsed
+  uint64 bytes_used = 9;
+  // Interval in ms during which stats were collected
+  uint64 interval_ms = 10;
+}
+
+// Provides details on exclusive and shared storage used by
+// snapshot/volume specifically for copy-on-write(COW) snapshots. Deletion
+// of snapshots and overwirte of volume will affect the exclusive storage
+// used by the other dependent snaps and parent volume.
+message CapacityUsageInfo {
+  // Storage consumed exclusively by this single snapshot. Deletion of this
+  // snapshot may increase the free storage available by this amount.
+  int64 exclusive_bytes = 1;
+  // Storage consumed by this snapshot that is shared with parent and children
+  int64 shared_bytes = 2;
+  // TotalBytes used by this volume
+  int64 total_bytes = 3;
+}
+
+// A SdkStoragePolicy represents minimum set of volume specs to be
+// follow while creating volumes.
+// If storage policy is set default in OpenStoragePolicy service, VolumeSpecPolicy will be
+// used before creating volume to validate volume specs or ensure minimum volume creation
+// rules followed
+message SdkStoragePolicy {
+  // Name of storage policy.
+  string name = 1;
+  // VolumeSpecs to apply while creating volume.
+  VolumeSpecPolicy policy = 2;
+  // Force if set to true volume specs will be overwritten, otherwise
+  // volume creation will fail if the volume specifications are not inline with storage policy
+  bool force = 3;
+  // If set a volume can be updated without storage Policy
+  // restriction, otherwise volume update will be followed as per storage policy
+  // specification
+  bool allow_update = 4;
+  // Owner info of storage policy
+  Ownership ownership = 5;
+}
+
+// Alert is a structure that represents an alert object
+message Alert {
+  // Id for Alert
+  int64 id = 1;
+  // Severity of the Alert
+  SeverityType severity = 2;
+  // AlertType user defined alert type
+  int64 alert_type = 3;
+  // Message describing the Alert
+  string message = 4;
+  //Timestamp when Alert occured
+  google.protobuf.Timestamp timestamp = 5;
+  // ResourceId where Alert occured
+  string resource_id = 6;
+  // Resource where Alert occured
+  ResourceType resource = 7;
+  // Cleared Flag
+  bool cleared = 8;
+  // Time-to-live in seconds for this Alert
+  uint64 ttl = 9;
+  // UniqueTag helps identify a unique alert for a given resouce
+  string unique_tag = 10;
+  // Count of such alerts raised so far.
+  int64 count = 11;
+  // Timestamp when such alert was raised the very first time.
+  google.protobuf.Timestamp first_seen = 12;
+}
+
+// SdkAlertsTimeSpan to store time window information.
+message SdkAlertsTimeSpan {
+    //Start timestamp when Alert occured
+    google.protobuf.Timestamp start_time = 1;
+    //End timestamp when Alert occured
+    google.protobuf.Timestamp end_time = 2;
+}
+
+// SdkAlertsCountSpan to store count range information.
+message SdkAlertsCountSpan {
+    // Min count of such alerts raised so far.
+    int64 min_count = 1;
+    // Max count of such alerts raised so far.
+    int64 max_count = 2;
+}
+
+// SdkAlertsOption contains options for filtering alerts.
+message SdkAlertsOption {
+    oneof opt {
+        // Query using minimum severity type.
+        SeverityType min_severity_type = 1;
+        // Query using cleared flag.
+        bool is_cleared = 2;
+        // Query using a time span during which alert was last seen.
+        SdkAlertsTimeSpan time_span = 3;
+        // Query using a count span in which alert count exists.
+        SdkAlertsCountSpan count_span = 4;
+    }
+}
+
+// SdkAlertsResourceTypeQuery queries for alerts using only resource id.
+message SdkAlertsResourceTypeQuery {
+    // Resource type used to build query.
+    ResourceType resource_type = 1;
+}
+
+// SdkAlertsAlertTypeQuery queries for alerts using alert type
+// and it requires that resource type be provided as well.
+message SdkAlertsAlertTypeQuery {
+    // Resource type used to build query.
+    ResourceType resource_type = 1;
+    // Alert type used to build query.
+    int64 alert_type = 2;
+}
+
+// SdkAlertsResourceIdQuery queries for alerts using resource id
+// and it requires that both alert type and resource type be provided
+// as well.
+message SdkAlertsResourceIdQuery {
+    // Resource type used to build query.
+    ResourceType resource_type = 1;
+    // Alert type used to build query.
+    int64 alert_type = 2;
+    // Resource ID used to build query.
+    string resource_id = 3;
+}
+
+// SdkAlertsQuery is one of the query types and a list of options.
+// Each query object is one of the three query types and a list of
+// options.
+message SdkAlertsQuery {
+    // One of the query types can be used to build SdkAlertsQuery.
+    oneof query {
+        // Query only using resource type.
+        SdkAlertsResourceTypeQuery resource_type_query = 1;
+        // Query using alert type and resource type.
+        SdkAlertsAlertTypeQuery alert_type_query = 2;
+        // Query using resource id, alert type and resource type.
+        SdkAlertsResourceIdQuery resource_id_query = 3;
+    }
+    // Opts is a list of options associated with one of the queries.
+    repeated SdkAlertsOption opts = 4;
+}
+
+// SdkAlertsEnumerateRequest is a request message to enumerate alerts.
+message SdkAlertsEnumerateWithFiltersRequest {
+    // It is a list of queries to find matching alerts.
+    // Output of each of these queries is added to a global pool
+    // and returned as output of an RPC call.
+    // In that sense alerts are fetched if they match any of the
+    // queries.
+    repeated SdkAlertsQuery queries = 1;
+}
+
+// SdkAlertsEnumerateResponse is a list of alerts.
+message SdkAlertsEnumerateWithFiltersResponse {
+    // Response contains a list of alerts.
+    repeated Alert alerts = 1;
+}
+
+// SdkAlertsDeleteRequest is a request message to delete alerts.
+message SdkAlertsDeleteRequest {
+  // It takes a list of queries to find matching alerts.
+  // Matching alerts are deleted.
+  repeated SdkAlertsQuery queries = 1;
+}
+
+// SdkAlertsDeleteResponse is empty.
+message SdkAlertsDeleteResponse {}
+
+// OpenStorageAlerts defines rpc's for alerts.
+service OpenStorageAlerts {
+    // Allows querying alerts.
+    //
+    // EnumerateWithFilters allows 3 different types of queries as defined below:
+    //
+    // * Query that takes only resource type as input
+    // * Query that takes resource type and alert type as input and
+    // * Query that takes resource id, alert type and resource type as input.
+    //
+    // #### Input
+    // SdkAlertsEnumerateRequest takes a list of such queries and the returned
+    // output is a collective ouput from each of these queries. In that sense,
+    // the filtering of these queries has a behavior of OR operation.
+    // Each query also has a list of optional options. These options allow
+    // narrowing down the scope of alerts search. These options have a
+    // behavior of an AND operation.
+    //
+    // #### Examples
+    // To search by a resource type in a given time window would require
+    // initializing SdkAlertsResourceTypeQuery query and pass in
+    // SdkAlertsTimeSpan option into SdkAlertsQuery struct and finally
+    // packing any other such queries into SdkAlertsEnumerateRequest object.
+    // Alternatively, to search by both resource type and alert type, use
+    // SdkAlertsAlertTypeQuery as query builder.
+    // Finally to search all alerts of a given resource type and some
+    // alerts of another resource type but with specific alert type,
+    // use two queries, first initialized with SdkAlertsResourceTypeQuery
+    // and second initialized with SdkAlertsAlertTypeQuery and both
+    // eventually packed as list in SdkAlertsEnumerateRequest.
+    rpc EnumerateWithFilters(SdkAlertsEnumerateWithFiltersRequest)
+      returns (stream SdkAlertsEnumerateWithFiltersResponse) {
+        option(google.api.http) = {
+          post: "/v1/alerts/filters"
+          body: "*"
+        };
+    }
+
+    // Delete alerts
+    //
+    // #### Delete
+    // Delete allows 3 different types of queries as defined below:
+    //
+    // * Query that takes only resource type as input
+    // * Query that takes resource type and alert type as input and
+    // * Query that takes resource id, alert type and resource type as input.
+    //
+    // #### Input
+    // SdkAlertsDeleteRequest takes a list of such queries and all alerts
+    // that match at least one of the queries are deleted.
+    rpc Delete(SdkAlertsDeleteRequest)
+      returns (SdkAlertsDeleteResponse) {
+        option(google.api.http) = {
+          post: "/v1/alerts"
+          body: "*"
+        };
+    }
+}
+
+// Alerts is an array of Alert objects
+message Alerts {
+  repeated Alert alert = 1;
+}
+
+// ObjectstoreInfo is a structure that has current objectstore info
+message ObjectstoreInfo {
+    // UUID of objectstore
+    string uuid = 1;
+    // VolumeID of volume used by object store
+    string volume_id = 2;
+    // Enable/Disable created objectstore
+    bool enabled = 3;
+    // Status of objectstore running/failed
+    string status = 4;
+    // Action being taken on this objectstore
+    int64 action = 5;
+    // AccessKey for login into objectstore
+    string access_key = 6;
+    // SecretKey for login into objectstore
+    string secret_key = 7;
+    // Endpoints for accessing objectstore
+    repeated string endpoints = 8;
+    // CurrentEndpoint on which objectstore server is accessible
+    string current_endpoint = 9;
+    // AccessPort is objectstore server port
+    int64 access_port = 10;
+    // Region for this objectstore
+    string region = 11;
+}
+
+// VolumeCreateRequest is a structure that has the locator, source and spec
+// to create a volume
+message VolumeCreateRequest {
+  // User specified volume name and labels
+  VolumeLocator locator = 1;
+  // Source to create volume
+  Source source = 2;
+  // The storage spec for the volume
+  VolumeSpec spec = 3;
+}
+
+// VolumeResponse is a structure that wraps an error.
+message VolumeResponse {
+  // Error message
+  //
+  // in: body
+  // Required: true
+  string error = 1;
+}
+
+// VolumeCreateResponse
+message VolumeCreateResponse {
+  // ID of the newly created volume
+  //
+  // in: body
+  // Required: true
+  string id = 1;
+  // Volume Response
+  //
+  // in: body
+  // Required: true
+  VolumeResponse volume_response = 2;
+}
+
+// VolumeStateAction specifies desired actions.
+message VolumeStateAction {
+  // Attach or Detach volume
+  VolumeActionParam attach = 1;
+  // Mount or unmount volume
+  VolumeActionParam mount = 2;
+  // MountPath Path where the device is mounted
+  string mount_path = 3;
+  // DevicePath Path returned in attach
+  string device_path = 4;
+}
+
+// VolumeSet specifies a request to update a volume.
+message VolumeSetRequest {
+  // User specified volume name and labels
+  VolumeLocator locator = 1;
+  // The storage spec for the volume
+  VolumeSpec spec = 2;
+  // State modification on this volume.
+  VolumeStateAction action = 3;
+  // additional options
+  // required for the Set operation.
+  map<string, string> options = 4;
+}
+
+// VolumeSetResponse
+message VolumeSetResponse {
+  // Volume
+  Volume volume = 1;
+  //VolumeResponse
+  VolumeResponse volume_response = 2;
+}
+
+// SnapCreateRequest specifies a request to create a snapshot of given volume.
+message SnapCreateRequest {
+  // volume id
+  string id = 1;
+  VolumeLocator locator = 2;
+  bool readonly = 3;
+  // NoRetry indicates not to retry snapshot creation in the background.
+  bool no_retry = 4;
+}
+
+// SnapCreateRequest specifies a response that get's returned when creating a snapshot.
+message SnapCreateResponse {
+  // VolumeCreateResponse
+  //
+  // in: body
+  // Required: true
+  VolumeCreateResponse volume_create_response = 1;
+}
+
+// VolumeInfo
+message VolumeInfo {
+  string volume_id = 1;
+  string path = 2;
+  VolumeSpec storage = 3;
+}
+
+// VolumeConsumer identifies a consumer for a Volume. An example of a VolumeConsumer
+// would be a Pod in Kubernetes who has mounted the PersistentVolumeClaim for the
+// Volume
+message VolumeConsumer {
+  // Name is the name of the volume consumer
+  string name = 1;
+  // Namespace is the namespace of the volume consumer
+  string namespace = 2;
+  // Type is the type of the consumer. E.g a Kubernetes pod
+  string type = 3;
+  // NodeID is the identifier of the node on which the consumer is running. This
+  // identifier would be from the perspective of the container runtime or
+  // orchestrator under which the volume consumer resides. For example, NodeID
+  //  can be name of a minion in Kubernetes.
+  string node_id = 4;
+  // OwnerName is the name of the entity who owns this volume consumer
+  string owner_name = 5;
+  // OwnerType is the type of the entity who owns this volume consumer. The type would
+  // be from the perspective of the container runtime or the orchestrator under which
+  // the volume consumer resides. For e.g OwnerType can be a Deployment in Kubernetes.
+  string owner_type = 6;
+}
+
+// GraphDriverChanges represent a list of changes between the filesystem layers
+// specified by the ID and Parent.  // Parent may be an empty string, in which
+// case there is no parent.
+// Where the Path is the filesystem path within the layered filesystem
+message GraphDriverChanges {
+  string path = 1;
+  GraphDriverChangeType kind = 2;
+}
+
+// ClusterResponse specifies a response that gets returned when requesting the cluster
+message ClusterResponse {
+  // Error code
+  //
+  // in: body
+  string error = 1;
+}
+
+// Active Request
+message ActiveRequest {
+  map<int64, string> ReqestKV = 1;
+}
+
+// Active Requests
+message ActiveRequests {
+  int64 RequestCount = 1;
+  repeated ActiveRequest ActiveRequest = 2;
+}
+
+// GroupSnapCreateRequest specifies a request to create a snapshot of given group.
+message GroupSnapCreateRequest {
+  string id = 1;
+  map<string, string> Labels = 2;
+  repeated string volume_ids = 3;
+}
+
+// GroupSnapCreateRequest specifies a response that get's returned when creating a group snapshot.
+message GroupSnapCreateResponse {
+  // Created snapshots
+  //
+  // in: body
+  // Required: true
+  map<string, SnapCreateResponse> snapshots = 1;
+  // Error message
+  //
+  // in: body
+  // Required: true
+  string error = 2;
+}
+
+// StorageNode describes the state of the node
+message StorageNode {
+  // Id of the node
+  string id = 1;
+  // Cpu usage of the node
+  double cpu = 2;
+  // Total memory of the node
+  uint64 mem_total = 3;
+  // Used memory of the node
+  uint64 mem_used = 4;
+  // Free memory of the node
+  uint64 mem_free = 5;
+  // Average load (percentage)
+  int64 avg_load = 6;
+  // Node status
+  Status status = 7;
+  // List of disks on the node
+  map<string, StorageResource> disks = 9;
+  // List of storage pools this node supports
+  repeated StoragePool pools = 10;
+  // Management IP
+  string mgmt_ip = 11;
+  // Data IP
+  string data_ip = 12;
+  // Hostname of the node
+  string hostname = 15;
+  // User defined labels for the node
+  map<string, string> node_labels = 16;
+  // SchedulerNodeName is name of the node in scheduler context. It can be
+  // empty if unable to get the name from the scheduler.
+  string scheduler_node_name = 17;
+}
+
+// StorageCluster represents the state and information about the cluster
+message StorageCluster {
+  // Status of the cluster
+  Status status = 1;
+  // Id of the cluster
+  string id = 2;
+  // Name of the cluster
+  string name = 3;
+}
+
+// OpenStorageRole service provides methods to manage user roles
+//
+// ### Custom roles
+// The OpenStorage SDK server is equipped to handle customized authorization
+// roles. Using this model it allows administrators to customize the permission
+// rules of a role to be used by a user.
+//
+// Creating a custom role, or an SdkRole, is done by setting up a set of allowed _rules_,
+// or SdkRules, directives which are sequentially scanned until a match is found. Rules
+// are created using the names of OpenStorage SDK services and APIs as follows:
+//
+// The message SdkRules has the following properties:
+//
+// * Services: Is the gRPC service name in `OpenStorage<service name>` in lowercase
+// * Apis: Is the API name in the service in lowercase
+//
+// Please see SdkRule for more information on the format.
+service OpenStorageRole {
+
+  // Create a role for users in the system
+  rpc Create(SdkRoleCreateRequest)
+    returns (SdkRoleCreateResponse){
+      option(google.api.http) = {
+        post: "/v1/roles"
+        body: "*"
+      };
+    }
+
+  // List all roles
+  rpc Enumerate(SdkRoleEnumerateRequest)
+    returns (SdkRoleEnumerateResponse){
+      option(google.api.http) = {
+        get: "/v1/roles"
+      };
+    }
+
+  // Get information about a role
+  rpc Inspect(SdkRoleInspectRequest)
+    returns (SdkRoleInspectResponse){
+      option(google.api.http) = {
+        get: "/v1/roles/inspect/{name}"
+      };
+    }
+
+  // Delete an existing role
+  rpc Delete(SdkRoleDeleteRequest)
+    returns (SdkRoleDeleteResponse){
+      option(google.api.http) = {
+        delete: "/v1/roles/{name}"
+      };
+    }
+
+  // Update an existing role
+  rpc Update(SdkRoleUpdateRequest)
+    returns (SdkRoleUpdateResponse){
+      option(google.api.http) = {
+        put: "/v1/roles"
+        body: "*"
+      };
+    }
+}
+// OpenStorageIdentity service provides methods to obtain information
+// about the cluster
+service OpenStorageIdentity {
+
+  // Capabilities returns the supported services by the cluster.
+  // This allows SDK implementations to advertise their supported
+  // services as the API matures. With this information, clients
+  // can determine supported services from storage clusters at
+  // different versions.
+  rpc Capabilities(SdkIdentityCapabilitiesRequest)
+    returns (SdkIdentityCapabilitiesResponse) {
+      option(google.api.http) = {
+        get: "/v1/identities/capabilities"
+      };
+    }
+
+  // Version returns version information about the system.
+  rpc Version(SdkIdentityVersionRequest)
+    returns (SdkIdentityVersionResponse) {
+      option(google.api.http) = {
+        get: "/v1/identities/version"
+      };
+    }
+
+}
+
+// OpenStorageCluster service provides the methods to manage the cluster
+service OpenStorageCluster {
+  // InspectCurrent returns information about the current cluster
+  rpc InspectCurrent(SdkClusterInspectCurrentRequest)
+    returns (SdkClusterInspectCurrentResponse) {
+      option(google.api.http) = {
+        get: "/v1/clusters/inspectcurrent"
+      };
+    }
+}
+
+// OpenStorageClusterPair service provides the methods to manage a cluster pair
+service OpenStorageClusterPair{
+  // Creates Pair with a remote cluster and returns details about the remote cluster
+  //
+  // ##### Example
+  // {% codetabs name="Golang", type="go" -%}
+  // id, err := client.Create(context.Background(), &api.SdkClusterPairCreateRequest {
+  //   Request : &api.ClusterPairCreateRequest {
+  //                  RemoteClusterIp: "127.0.0.1",
+  //                  RemoteClusterPort: 12345,
+  //                  RemoteClusterToken: "<Auth-Token>",
+  //                  SetDefault: true,
+  //              }
+  //        })
+  // {%- endcodetabs %}
+  rpc Create(SdkClusterPairCreateRequest)
+    returns (SdkClusterPairCreateResponse){
+      option(google.api.http) = {
+        post: "/v1/clusterpairs"
+        body: "*"
+      };
+    }
+
+  // Inspect information about a cluster pair
+  rpc Inspect(SdkClusterPairInspectRequest)
+    returns (SdkClusterPairInspectResponse){
+      option(google.api.http) = {
+        get: "/v1/clusterpairs/inspect/{id}"
+      };
+    }
+
+  // Enumerate returns list of cluster pairs
+  rpc Enumerate(SdkClusterPairEnumerateRequest)
+    returns (SdkClusterPairEnumerateResponse){
+      option(google.api.http) = {
+        get: "/v1/clusterpairs"
+      };
+    }
+
+  // GetToken returns a auth token
+  rpc GetToken(SdkClusterPairGetTokenRequest)
+    returns(SdkClusterPairGetTokenResponse){
+      option(google.api.http)={
+        get: "/v1/clusterpairs/token"
+      };
+    }
+
+  // ResetToken returns a auth token
+  rpc ResetToken(SdkClusterPairResetTokenRequest)
+    returns(SdkClusterPairResetTokenResponse){
+      option(google.api.http)={
+        post: "/v1/clusterpairs/token"
+        body: "*"
+      };
+    }
+
+  // Delete a cluster pair
+  rpc Delete(SdkClusterPairDeleteRequest)
+    returns (SdkClusterPairDeleteResponse){
+      option(google.api.http) = {
+        delete: "/v1/clusterpairs/{cluster_id}"
+      };
+    }
+}
+
+// OpenStorageClusterDomains is a service used to manage cluster domains in an openstorage cluster.
+// A single openstorage cluster can stretch across multiple cluster domains. In other words it can
+// span across multiple Container Orchestrator clusters. Each node in the cluster is assigned a
+// a cluster domain to start with. A cluster domain and in turn the nodes which are a part of it
+// are assigned a status indicating whether the cluster domain is actively participating in the
+// cluster or whether it is inactive.
+service OpenStorageClusterDomains {
+  // Enumerate returns names of all the cluster domains in the cluster
+  rpc Enumerate(SdkClusterDomainsEnumerateRequest)
+    returns (SdkClusterDomainsEnumerateResponse) {
+      option(google.api.http) = {
+        get: "/v1/clusterdomains"
+      };
+    }
+
+  // Inspect returns information about a cluster domain and a
+  // status indicating whether the cluster domain is active
+  rpc Inspect(SdkClusterDomainInspectRequest)
+    returns (SdkClusterDomainInspectResponse) {
+      option(google.api.http) = {
+        get: "/v1/clusterdomains/inspect/{cluster_domain_name}"
+      };
+    }
+
+
+  // Activates a cluster domain in the cluster.
+  // All the nodes which are part of an active cluster domain
+  // will participate in cluster quorum calculation
+  rpc Activate(SdkClusterDomainActivateRequest)
+    returns (SdkClusterDomainActivateResponse) {
+      option(google.api.http) = {
+        post: "/v1/clusterdomains/activate/{cluster_domain_name}"
+      };
+    }
+
+  // Deactivates a cluster domain in the cluster.
+  // All the nodes which are part of a deactivated cluster domain.
+  // will not participate in cluster quorum calculation
+  rpc Deactivate(SdkClusterDomainDeactivateRequest)
+    returns (SdkClusterDomainDeactivateResponse) {
+      option(google.api.http) = {
+        post: "/v1/clusterdomains/deactivate/{cluster_domain_name}"
+      };
+    }
+
+}
+
+
+// OpenStorageNode is a service used to manage nodes in the cluster
+service OpenStorageNode {
+  // Inspect returns information about the specified node
+  rpc Inspect(SdkNodeInspectRequest)
+    returns (SdkNodeInspectResponse) {
+      option(google.api.http) = {
+        get: "/v1/nodes/inspect/{node_id}"
+      };
+    }
+
+  // InspectCurrent returns information about the storage node
+  // where the client is currently connected to.
+  rpc InspectCurrent(SdkNodeInspectCurrentRequest)
+    returns (SdkNodeInspectCurrentResponse) {
+      option(google.api.http) = {
+        get: "/v1/nodes/inspectcurrent"
+      };
+    }
+
+  // Enumerate returns the ids of all the nodes in the current cluster
+  rpc Enumerate(SdkNodeEnumerateRequest)
+    returns (SdkNodeEnumerateResponse) {
+      option(google.api.http) = {
+        get: "/v1/nodes"
+      };
+    }
+}
+
+// OpenStorageVolume is a service used to manage the volumes of a storage system
+service OpenStorageVolume {
+
+  // Create creates a volume according to the specification provided
+  //
+  // Requires access AccessType.Read when cloning from a parent volume.
+  //
+  // ##### Example
+  // {% codetabs name="Golang", type="go" -%}
+  // id, err := client.Create(context.Background(), &api.SdkVolumeCreateRequest{
+  //   Name: "volume-12345-east",
+  //   Spec: &api.VolumeSpec {
+  //     Size: 1234567,
+  //   },
+  // })
+  // {%- language name="Python", type="py" -%}
+  // en_resp = client.Create(api_pb2.SdkVolumeCreateRequest(
+  //   name="volume-12345-east",
+  //   spec=api_pb2.VolumeSpec(size=1234567)))
+  // {%- endcodetabs %}
+  rpc Create(SdkVolumeCreateRequest)
+    returns (SdkVolumeCreateResponse) {
+      option(google.api.http) = {
+        post: "/v1/volumes"
+        body: "*"
+      };
+    }
+
+  // Clone creates a new writable volume cloned from an existing volume
+  //
+  // Requires access AccessType.Read of volume
+  rpc Clone(SdkVolumeCloneRequest)
+    returns (SdkVolumeCloneResponse) {
+      option(google.api.http) = {
+        post: "/v1/volumes/clone"
+        body: "*"
+      };
+    }
+
+  // Delete deletes the provided volume
+  //
+  // Requires access AccessType.Admin of volume
+  rpc Delete(SdkVolumeDeleteRequest)
+    returns (SdkVolumeDeleteResponse) {
+      option(google.api.http) = {
+        delete: "/v1/volumes/{volume_id}"
+      };
+    }
+
+  // Inspect returns information about a volume
+  //
+  // Requires access AccessType.Read of volume
+  rpc Inspect(SdkVolumeInspectRequest)
+    returns (SdkVolumeInspectResponse) {
+      option(google.api.http) = {
+        get: "/v1/volumes/inspect/{volume_id}"
+      };
+    }
+
+  // Returns information for a list of volumes that match a filter.
+  // This call is a helper function like calling
+  // `OpenStorageVolume.EnumerateWithFilters` then having it
+  // return the contents of each of those volumes
+  // `OpenStorageVolume.Inspect()`. Take care in using this call
+  // when requesting large number of volumes because it will
+  // block until it has all the information requested before
+  // returning.
+  rpc InspectWithFilters(SdkVolumeInspectWithFiltersRequest)
+    returns (SdkVolumeInspectWithFiltersResponse) {
+      option(google.api.http) = {
+        post: "/v1/volumes/inspectwithfilters"
+        body: "*"
+      };
+    }
+
+  // Update provides a method for manipulating the specification and attributes of a volume.
+  // Set can be used to resize a volume, update labels, change replica count, and much more.
+  //
+  // Requires access AccessType.Write of volume
+  rpc Update(SdkVolumeUpdateRequest)
+    returns (SdkVolumeUpdateResponse) {
+      option(google.api.http) = {
+        put: "/v1/volumes/{volume_id}"
+        body: "*"
+      };
+    }
+
+  // Stats returns the statistics for the requested volume
+  //
+  // Requires access AccessType.Read of volume
+  rpc Stats(SdkVolumeStatsRequest)
+    returns (SdkVolumeStatsResponse) {
+      option(google.api.http) = {
+        get: "/v1/volumes/stats/{volume_id}"
+      };
+    }
+
+  // CapacityUsage returns volume/snapshot's capacity usage details
+  //
+  // Requires access AccessType.Read of volume
+  //
+  // ##### Error codes:
+  //
+  // * codes.Aborted : Command was aborted and only total_bytes field is valid
+  // * code.Unimmplemented : Command is not suported this kernel.Only total_bytes
+  // field is valid;
+  rpc CapacityUsage(SdkVolumeCapacityUsageRequest)
+    returns (SdkVolumeCapacityUsageResponse) {
+      option(google.api.http) = {
+        get: "/v1/volumes/usage/{volume_id}"
+      };
+    }
+
+  // Enumerate returns a list of volume ids
+  rpc Enumerate(SdkVolumeEnumerateRequest)
+    returns (SdkVolumeEnumerateResponse) {
+      option(google.api.http) = {
+        get: "/v1/volumes"
+      };
+    }
+
+  // Enumerate returns a list of volume ids that match the labels if any are provided.
+  rpc EnumerateWithFilters(SdkVolumeEnumerateWithFiltersRequest)
+    returns (SdkVolumeEnumerateWithFiltersResponse) {
+      option(google.api.http) = {
+        post: "/v1/volumes/filters"
+        body: "*"
+      };
+    }
+
+  // SnapshotCreate creates a snapshot of a volume. This creates an immutable (read-only),
+  // point-in-time snapshot of a volume. To create a new writable volume from
+  // a snapshot, please use OpenStorageVolume.Clone().
+  //
+  // Requires access AccessType.Read of volume
+  rpc SnapshotCreate(SdkVolumeSnapshotCreateRequest)
+    returns (SdkVolumeSnapshotCreateResponse) {
+      option(google.api.http) = {
+        post: "/v1/volumes/snapshots"
+        body: "*"
+      };
+    }
+
+  // SnapshotRestore restores a volume to a specified snapshot
+  //
+  // Requires access AccessType.Write of volume
+  rpc SnapshotRestore(SdkVolumeSnapshotRestoreRequest)
+    returns (SdkVolumeSnapshotRestoreResponse) {
+      option(google.api.http) = {
+        post: "/v1/volumes/snapshots/restore"
+        body: "*"
+      };
+    }
+
+  // SnapshotEnumerate returns a list of snapshots for a specific volume
+  rpc SnapshotEnumerate(SdkVolumeSnapshotEnumerateRequest)
+    returns (SdkVolumeSnapshotEnumerateResponse) {
+      option(google.api.http) = {
+        get: "/v1/volumes/snapshots"
+      };
+    }
+
+  // SnapshotEnumerate returns a list of snapshots.
+  // To filter all the snapshots for a specific volume which may no longer exist,
+  // specifiy a volume id.
+  // Labels can also be used to filter the snapshot list.
+  // If neither are provided all snapshots will be returned.
+  rpc SnapshotEnumerateWithFilters(SdkVolumeSnapshotEnumerateWithFiltersRequest)
+    returns (SdkVolumeSnapshotEnumerateWithFiltersResponse) {
+      option(google.api.http) = {
+        post: "/v1/volumes/snapshots/filters/{volume_id}"
+        body: "*"
+      };
+    }
+
+  // Sets the snapshot schedules. This information is saved in the VolumeSpec.snapshot_schedule
+  // as `policy=<name>,...`. This function will overwrite any policy values
+  // in the volume. To delete the policies in the volume send no policies.
+  //
+  // Requires access AccessType.Write of volume
+  rpc SnapshotScheduleUpdate(SdkVolumeSnapshotScheduleUpdateRequest)
+    returns (SdkVolumeSnapshotScheduleUpdateResponse) {
+      option(google.api.http) = {
+        post: "/v1/volumes/snapshot/schedules/{volume_id}"
+        body: "*"
+      };
+    }
+}
+
+// OpenStorageMountAttach is a service used to manage node access to a volume.
+// Note, these APIs are here for testing or diagnostics purposes only. In normal
+// operations, the Container Orchestration (CO) system is managing all mount
+// and attach calls through the CSI interface. The normal usage is once volumes
+// are created, to let the CO manage the node access functions to the volume.
+service OpenStorageMountAttach {
+
+  // Attach attaches device to the host that the client is communicating with.
+  //
+  // Requires access AccessType.Write of volume
+  rpc Attach(SdkVolumeAttachRequest)
+    returns (SdkVolumeAttachResponse) {
+      option(google.api.http) = {
+        post: "/v1/mountattach/attach"
+        body: "*"
+      };
+    }
+
+  // Detaches a the volume from the host
+  //
+  // Requires access AccessType.Write of volume
+  rpc Detach(SdkVolumeDetachRequest)
+    returns (SdkVolumeDetachResponse) {
+      option(google.api.http) = {
+        post: "/v1/mountattach/detach"
+        body: "*"
+      };
+    }
+
+  // Mount mounts an attached volume in the host that the client is communicating with
+  //
+  // Requires access AccessType.Write of volume
+  rpc Mount(SdkVolumeMountRequest)
+    returns(SdkVolumeMountResponse) {
+      option(google.api.http) = {
+        post: "/v1/mountattach/mount"
+        body: "*"
+      };
+    }
+
+  // Unmount unmounts a mounted volume in the host that the client is communicating with
+  //
+  // Requires access AccessType.Write of volume
+  rpc Unmount(SdkVolumeUnmountRequest)
+      returns(SdkVolumeUnmountResponse) {
+      option(google.api.http) = {
+        post: "/v1/mountattach/unmount"
+        body: "*"
+      };
+    }
+}
+
+// OpenStorageMigrate is a service used to manage migration of volumes
+service OpenStorageMigrate {
+  // Start a migration operation
+  rpc Start(SdkCloudMigrateStartRequest)
+    returns (SdkCloudMigrateStartResponse) {
+      option(google.api.http) = {
+        post: "/v1/volumemigrate"
+        body: "*"
+      };
+    }
+
+  // Cancel a migration operation
+  rpc Cancel(SdkCloudMigrateCancelRequest)
+    returns (SdkCloudMigrateCancelResponse) {
+      option(google.api.http) = {
+        post: "/v1/volumemigrate/cancel"
+        body: "*"
+      };
+    }
+
+  // Inspect the status of migration operation
+  rpc Status(SdkCloudMigrateStatusRequest)
+    returns (SdkCloudMigrateStatusResponse) {
+      option(google.api.http) = {
+        get: "/v1/volumemigrate"
+      };
+    }
+}
+
+// OpenStorageObjectstore is a service used to manage object store services on volumes
+service OpenStorageObjectstore {
+
+  // Inspect returns information about the object store endpoint
+  rpc Inspect(SdkObjectstoreInspectRequest)
+    returns(SdkObjectstoreInspectResponse){
+      option(google.api.http) = {
+        get: "/v1/objectstores/inspect/{objectstore_id}"
+      };
+    }
+
+  // Creates creates an object store endpoint on specified volume
+  rpc Create(SdkObjectstoreCreateRequest)
+    returns(SdkObjectstoreCreateResponse){
+      option(google.api.http) = {
+        post: "/v1/objectstores"
+        body: "*"
+      };
+    }
+
+  // Delete destroys the object store endpoint on the volume
+  rpc Delete(SdkObjectstoreDeleteRequest)
+    returns(SdkObjectstoreDeleteResponse){
+      option(google.api.http) = {
+        delete: "/v1/objectstores/{objectstore_id}"
+      };
+    }
+
+  // Updates provided objectstore status.
+  // This call can be used to stop and start the server while maintaining the same
+  // object storage id.
+  rpc Update(SdkObjectstoreUpdateRequest)
+    returns(SdkObjectstoreUpdateResponse){
+      option(google.api.http) ={
+        put: "/v1/objectstores/{objectstore_id}"
+        body: "*"
+      };
+  }
+}
+
+// OpenStorageCredentials is a service used to manage the cloud credentials
+// which can then be used by the OpenStorageCloudBackup service
+service OpenStorageCredentials {
+
+  // Create is used to submit cloud credentials. It will return an
+  // id of the credentials once they are verified to work.
+  //
+  // ##### Example
+  // {% codetabs name="Golang", type="go" -%}
+  // id, err := client.Create(context.Background(), &api.SdkCredentialCreateRequest{
+  //     Name: "awscred",
+  //     CredentialType: &api.SdkCredentialCreateRequest_AwsCredential{
+  //       AwsCredential: &api.SdkAwsCredentialRequest{
+  //       AccessKey: "dummy-access",
+  //       SecretKey: "dummy-secret",
+  //       Endpoint:  "dummy-endpoint",
+  //       Region:    "dummy-region",
+  //     },
+  //   },
+  // })
+  // {%- language name="Python", type="py" -%}
+  // en_resp = client.Create(api_pb2.SdkCredentialCreateRequest(
+  //   name='awscred',
+  //   aws_credential=api_pb2.SdkAwsCredentialRequest(
+  //     access_key='dummy-access',
+  //     secret_key='dumm-secret',
+  //     endpoint='dummy-endpoint',
+  //     region='dummy-region')))
+  // {%- endcodetabs %}
+  rpc Create(SdkCredentialCreateRequest)
+    returns (SdkCredentialCreateResponse) {
+      option(google.api.http) = {
+        post: "/v1/credentials"
+        body: "*"
+      };
+    }
+
+  // Enumerate returns a list of credential ids
+  rpc Enumerate(SdkCredentialEnumerateRequest)
+    returns (SdkCredentialEnumerateResponse) {
+      option(google.api.http) = {
+        get: "/v1/credentials"
+      };
+    }
+
+  // Inspect returns the information about a credential, but does not return the secret key.
+  rpc Inspect(SdkCredentialInspectRequest)
+    returns (SdkCredentialInspectResponse) {
+      option(google.api.http) = {
+        get: "/v1/credentials/inspect/{credential_id}"
+      };
+    }
+
+  // Delete a specified credential
+  rpc Delete(SdkCredentialDeleteRequest)
+    returns (SdkCredentialDeleteResponse){
+      option(google.api.http) = {
+        delete: "/v1/credentials/{credential_id}"
+      };
+    }
+
+  // Validate is used to validate credentials
+  rpc Validate(SdkCredentialValidateRequest)
+    returns (SdkCredentialValidateResponse) {
+      option(google.api.http) = {
+        get: "/v1/credentials/validate/{credential_id}"
+      };
+    }
+}
+
+// OpenStorageSchedulePolicy service is used to manage the automated
+// snapshots for a volume
+service OpenStorageSchedulePolicy {
+
+  // Create creates a new snapshot schedule. They can be setup daily,
+  // weekly, or monthly.
+  rpc Create(SdkSchedulePolicyCreateRequest)
+    returns (SdkSchedulePolicyCreateResponse) {
+      option(google.api.http) = {
+        post: "/v1/schedulepolicies"
+        body: "*"
+      };
+    }
+
+  // Update a snapshot schedule
+  rpc Update(SdkSchedulePolicyUpdateRequest)
+    returns (SdkSchedulePolicyUpdateResponse) {
+      option(google.api.http) = {
+        put: "/v1/schedulepolicies"
+        body: "*"
+      };
+    }
+
+  // Enumerate returns a list of schedules
+  rpc Enumerate(SdkSchedulePolicyEnumerateRequest)
+    returns (SdkSchedulePolicyEnumerateResponse) {
+      option(google.api.http) = {
+        get: "/v1/schedulepolicies"
+      };
+    }
+
+  // Inspect returns information about a specified schedule
+  rpc Inspect(SdkSchedulePolicyInspectRequest)
+  returns (SdkSchedulePolicyInspectResponse) {
+    option(google.api.http) = {
+      get: "/v1/schedulepolicies/inspect/{name}"
+    };
+  }
+
+  // Delete removes a snapshot schedule
+  rpc Delete(SdkSchedulePolicyDeleteRequest)
+    returns (SdkSchedulePolicyDeleteResponse) {
+      option(google.api.http) = {
+        delete: "/v1/schedulepolicies/{name}"
+      };
+    }
+}
+
+// OpenStorageCloudBackup service manages backing up volumes to a cloud
+// location like Amazon, Google, or Azure.
+//
+// #### Backup
+// To create a backup, you must first call the Create() call for a specified
+// volume. To see the status of this request, use Status() which returns
+// a map where the keys are the source volume id.
+//
+// #### Restore
+// To restore, you would pass a `backup_id` of a successful backup.
+// `backup_id` can be retreived by calling Enumerate() for a specified volume.
+// Pass this `backup_id` and a new volume name to Restore() to start
+// restoring a new volume from an existing backup. To see the status of this
+// restore, pass volume id returned by Restore() to input to Status()
+//
+service OpenStorageCloudBackup {
+
+  // Creates a backup request for a specified volume. Use
+  // OpenStorageCloudBackup.Status() to get the current status of the
+  // backup request.
+  //
+  // Requires access AccessType.Read of volume
+  rpc Create(SdkCloudBackupCreateRequest)
+    returns (SdkCloudBackupCreateResponse) {
+      option(google.api.http) = {
+        post: "/v1/cloudbackups"
+        body: "*"
+      };
+    }
+
+  // Restore creates a new volume from a backup id. The newly created volume
+  // has an ha_level (number of replicas) of only 1. To increase the number of
+  // replicas, use OpenStorageVolume.Set() to change the ha_level.
+  rpc Restore(SdkCloudBackupRestoreRequest)
+    returns (SdkCloudBackupRestoreResponse) {
+      option(google.api.http) = {
+        post: "/v1/cloudbackups/restore"
+        body: "*"
+      };
+    }
+
+  // Deletes a backup stored in the cloud. If the backup is an incremental
+  // backup and other backups are dependent on it, it will not be able to be deleted.
+  rpc Delete(SdkCloudBackupDeleteRequest)
+    returns (SdkCloudBackupDeleteResponse) {
+      option(google.api.http) = {
+        delete: "/v1/cloudbackups/backup/{backup_id}"
+      };
+    }
+
+  // DeleteAll deletes all the backups in the cloud for the specified volume.
+  rpc DeleteAll(SdkCloudBackupDeleteAllRequest)
+    returns (SdkCloudBackupDeleteAllResponse) {
+      option(google.api.http) = {
+        post: "/v1/cloudbackups/deleteall"
+        body: "*"
+      };
+    }
+
+  // Return a list of backups for the specified volume
+  rpc EnumerateWithFilters(SdkCloudBackupEnumerateWithFiltersRequest)
+    returns (SdkCloudBackupEnumerateWithFiltersResponse) {
+      option(google.api.http) = {
+        post: "/v1/cloudbackups/enumerate/filters"
+        body: "*"
+      };
+    }
+
+  // Status returns the status of any cloud backups of a volume
+  rpc Status(SdkCloudBackupStatusRequest)
+    returns (SdkCloudBackupStatusResponse) {
+      option(google.api.http) = {
+        post: "/v1/cloudbackups/status"
+        body: "*"
+      };
+    }
+
+  // Catalog returns a list of the contents in the backup
+  rpc Catalog(SdkCloudBackupCatalogRequest)
+    returns (SdkCloudBackupCatalogResponse) {
+      option(google.api.http) = {
+        post: "/v1/cloudbackups/catalog"
+        body: "*"
+      };
+    }
+
+  // History returns a list of backups for a specified volume
+  rpc History(SdkCloudBackupHistoryRequest)
+    returns (SdkCloudBackupHistoryResponse) {
+      option(google.api.http) = {
+        get: "/v1/cloudbackups/history/{src_volume_id}"
+      };
+    }
+
+  // StateChange can be used to stop, pause, and restart a backup
+  rpc StateChange(SdkCloudBackupStateChangeRequest)
+    returns (SdkCloudBackupStateChangeResponse) {
+      option(google.api.http) = {
+        post: "/v1/cloudbackups/statechange"
+        body: "*"
+      };
+    }
+
+  // Create cloud backup schedule
+  rpc SchedCreate(SdkCloudBackupSchedCreateRequest)
+    returns (SdkCloudBackupSchedCreateResponse) {
+      option(google.api.http) = {
+        post: "/v1/cloudbackups/schedules"
+        body: "*"
+      };
+    }
+
+  // Delete cloud backup schedule
+  rpc SchedDelete(SdkCloudBackupSchedDeleteRequest)
+    returns (SdkCloudBackupSchedDeleteResponse) {
+      option(google.api.http) = {
+        delete: "/v1/cloudbackups/schedules/{backup_schedule_id}"
+      };
+    }
+
+  // Enumerate cloud backup schedules
+  rpc SchedEnumerate(SdkCloudBackupSchedEnumerateRequest)
+    returns (SdkCloudBackupSchedEnumerateResponse) {
+      option(google.api.http) = {
+        get: "/v1/cloudbackups/schedules"
+      };
+    }
+}
+
+// OpenStoragePolicy service provides methods to manager storage policies.
+//
+// Policies can be used to validate/ensure a set of volume configurations to be followed
+// while creating volumes.
+service OpenStoragePolicy {
+
+  // Creates a storage policy
+  rpc Create(SdkOpenStoragePolicyCreateRequest)
+    returns (SdkOpenStoragePolicyCreateResponse) {
+      option(google.api.http) = {
+        post: "/v1/storagepolicies"
+        body: "*"
+      };
+    }
+
+  // Enumerate returns a list of storage policies
+  rpc Enumerate(SdkOpenStoragePolicyEnumerateRequest)
+    returns (SdkOpenStoragePolicyEnumerateResponse) {
+      option(google.api.http) = {
+        get: "/v1/storagepolicies"
+      };
+    }
+
+  // Inspect returns information about a specified storage policy
+  rpc Inspect(SdkOpenStoragePolicyInspectRequest)
+    returns (SdkOpenStoragePolicyInspectResponse) {
+      option(google.api.http) = {
+        get: "/v1/storagepolicies/inspect/{name}"
+      };
+    }
+
+  // Updates specified storage policy
+  rpc Update(SdkOpenStoragePolicyUpdateRequest)
+    returns (SdkOpenStoragePolicyUpdateResponse) {
+      option(google.api.http) = {
+        put: "/v1/storagepolicies"
+        body: "*"
+      };
+    }
+
+  // Deletes specified storage policy
+  rpc Delete(SdkOpenStoragePolicyDeleteRequest)
+    returns (SdkOpenStoragePolicyDeleteResponse) {
+      option(google.api.http) = {
+        delete: "/v1/storagepolicies/{name}"
+      };
+    }
+
+  // Set specified storage policy as default policy
+  rpc SetDefault(SdkOpenStoragePolicySetDefaultRequest)
+    returns (SdkOpenStoragePolicySetDefaultResponse) {
+      option(google.api.http) = {
+        post: "/v1/storagepolicies/default/{name}"
+        body: "*"
+      };
+    }
+
+  // DefaultInspect return default storage policy if any, otherwise
+  // empty response
+  rpc DefaultInspect(SdkOpenStoragePolicyDefaultInspectRequest)
+    returns (SdkOpenStoragePolicyDefaultInspectResponse) {
+      option(google.api.http) = {
+        get: "/v1/storagepolicies/default"
+      };
+    }
+
+  // Release specified storage policy constraint for volume
+  // creation
+  rpc Release(SdkOpenStoragePolicyReleaseRequest)
+    returns (SdkOpenStoragePolicyReleaseResponse) {
+      option(google.api.http) = {
+        post: "/v1/storagepolicies/release"
+        body: "*"
+      };
+    }
+}
+
+// Define a request to create storage policy
+message SdkOpenStoragePolicyCreateRequest {
+  // storage policy to create
+  SdkStoragePolicy storage_policy = 1;
+}
+
+// Empty response
+message SdkOpenStoragePolicyCreateResponse {
+}
+
+// Empty request
+message SdkOpenStoragePolicyEnumerateRequest {
+}
+
+// Define a storage policy enumerate response
+message SdkOpenStoragePolicyEnumerateResponse {
+  // List of storage policies
+  repeated SdkStoragePolicy storage_policies =1;
+}
+
+// Define a request to inspect storage policy
+message SdkOpenStoragePolicyInspectRequest {
+  // name of storage policy to retrive
+  string name =1;
+}
+
+// Define a storage policy inspect response
+message SdkOpenStoragePolicyInspectResponse {
+  // storage policy information requested by name
+  SdkStoragePolicy storage_policy =1;
+}
+
+// Define a request to delete storage policy
+message SdkOpenStoragePolicyDeleteRequest {
+  // name of storage policy to delete
+  string name = 1;
+}
+
+// Empty Response
+message SdkOpenStoragePolicyDeleteResponse {
+}
+
+// Define a request to update storage policy
+message SdkOpenStoragePolicyUpdateRequest {
+  // storage policy to update
+  SdkStoragePolicy storage_policy =1;
+}
+
+// Empty Response
+message SdkOpenStoragePolicyUpdateResponse {
+}
+
+// Define a request to set default storage policy
+message SdkOpenStoragePolicySetDefaultRequest {
+  // name of policy to set as default storage policy
+  // for volume creation
+  // This policy will be used to validate/update volume configuration
+  string name = 1;
+}
+
+// Empty Response
+message SdkOpenStoragePolicySetDefaultResponse {
+}
+
+// Empty Request
+message SdkOpenStoragePolicyReleaseRequest {
+}
+
+// Empty Response
+message SdkOpenStoragePolicyReleaseResponse {
+}
+
+// Empty Request
+message SdkOpenStoragePolicyDefaultInspectRequest {
+}
+
+// Define default storage policy response
+message SdkOpenStoragePolicyDefaultInspectResponse {
+  // storage policy information which is set as default
+  SdkStoragePolicy storage_policy = 1;
+}
+
+// Define a schedule policy request
+message SdkSchedulePolicyCreateRequest {
+    // Schedule Policy
+    SdkSchedulePolicy schedule_policy = 1;
+}
+
+// Empty response
+message SdkSchedulePolicyCreateResponse {
+}
+
+// Define a request to update a schedule policy
+message SdkSchedulePolicyUpdateRequest {
+  // Schedule Policy
+  SdkSchedulePolicy schedule_policy = 1;
+}
+
+// Empty response
+message SdkSchedulePolicyUpdateResponse {
+}
+
+// Empty request
+message SdkSchedulePolicyEnumerateRequest {
+}
+
+// Defines a schedule policy enumerate response
+message SdkSchedulePolicyEnumerateResponse {
+  // List of Schedule Policy
+  repeated SdkSchedulePolicy policies = 1;
+}
+
+// Define a schedule policy inspection request
+message SdkSchedulePolicyInspectRequest {
+  // Name of the schedule Policy
+  string name = 1;
+}
+
+// Defines a schedule policy inspection response
+message SdkSchedulePolicyInspectResponse {
+  // List of Schedule Policy
+  SdkSchedulePolicy policy = 1;
+}
+
+// Define schedule policy deletion request
+message SdkSchedulePolicyDeleteRequest {
+  // Name of the schedule policy
+  string name = 1;
+}
+
+// Empty response
+message SdkSchedulePolicyDeleteResponse {
+}
+
+// Defines times of day
+enum SdkTimeWeekday {
+  // Sunday
+  SdkTimeWeekdaySunday = 0;
+  // Monday
+  SdkTimeWeekdayMonday = 1;
+  // Tuesday
+  SdkTimeWeekdayTuesday = 2;
+  // Wednesday
+  SdkTimeWeekdayWednesday = 3;
+  // Thursday
+  SdkTimeWeekdayThursday = 4;
+  // Friday
+  SdkTimeWeekdayFriday = 5;
+  // Saturday
+  SdkTimeWeekdaySaturday = 6;
+}
+
+// Defines a daily schedule
+message SdkSchedulePolicyIntervalDaily {
+  // Range: 0-23
+  int32 hour = 1;
+  // Range: 0-59
+  int32 minute = 2;
+}
+
+// Defines a weekly schedule
+message SdkSchedulePolicyIntervalWeekly{
+  SdkTimeWeekday day = 1;
+  // Range: 0-23
+  int32 hour = 2;
+  // Range: 0-59
+  int32 minute = 3;
+}
+
+// Defines a monthly schedule
+message SdkSchedulePolicyIntervalMonthly{
+  // Range: 1-28
+  int32 day = 1;
+  // Range: 0-59
+  int32 hour = 2;
+  // Range: 0-59
+  int32 minute = 3;
+}
+
+// Defines a periodic schedule
+message SdkSchedulePolicyIntervalPeriodic{
+  // Specify the number of seconds between intervals
+  int64 seconds = 1;
+}
+
+// Defines a schedule policy interval
+message SdkSchedulePolicyInterval {
+  // Number of instances to retain
+  int64 retain = 1;
+
+  // Start oneof at field number 200 to allow for expansion
+  oneof period_type {
+    // Daily policy
+    SdkSchedulePolicyIntervalDaily daily = 200;
+    // Weekly policy
+    SdkSchedulePolicyIntervalWeekly weekly = 201;
+    // Monthly policy
+    SdkSchedulePolicyIntervalMonthly monthly = 202;
+    // Periodic policy
+    SdkSchedulePolicyIntervalPeriodic periodic = 203;
+  }
+}
+
+// Defines a schedule policy
+message SdkSchedulePolicy {
+  // Name of the schedule policy
+  string name = 1;
+  // Schedule policies
+  repeated SdkSchedulePolicyInterval schedules = 2;
+}
+
+// Defines a request to create credentials
+message SdkCredentialCreateRequest {
+  // Name of the credential
+  string name = 1;
+  // (optional) Name of bucket
+  string bucket = 2;
+  // (optional) Key used to encrypt the data
+  string encryption_key = 3;
+  // Ownership of the credential. Collaborators and groups may be
+  // added here with their appropriate ACLS.
+  Ownership ownership = 4;
+
+  // Start at field number 200 to allow for expansion
+  oneof credential_type {
+    // Credentials for AWS/S3
+    SdkAwsCredentialRequest aws_credential = 200;
+    // Credentials for Azure
+    SdkAzureCredentialRequest azure_credential = 201;
+    // Credentials for Google
+    SdkGoogleCredentialRequest google_credential = 202;
+  }
+}
+
+// Defines a response from creating a credential
+message SdkCredentialCreateResponse {
+  // Id of the credentials
+  string credential_id = 1;
+}
+
+// Defines credentials for Aws/S3 endpoints
+message SdkAwsCredentialRequest {
+  // Access key
+  string access_key = 1;
+  // Secret key
+  string secret_key = 2;
+  // Endpoint
+  string endpoint = 3;
+  // Region
+  string region = 4;
+  // (optional) Disable SSL connection
+  bool disable_ssl = 5;
+}
+
+// Defines credentials for Azure
+message SdkAzureCredentialRequest {
+  // Account name
+  string account_name = 1;
+  // Account key
+  string account_key = 2;
+}
+
+// Defines credentials for Google
+message SdkGoogleCredentialRequest {
+  // Project ID
+  string project_id = 1;
+  // JSON Key
+  string json_key = 2;
+}
+
+// Defines the response for AWS/S3 credentials
+message SdkAwsCredentialResponse {
+  // Access key
+  string access_key = 2;
+  // Endpoint
+  string endpoint = 3;
+  // Region
+  string region = 4;
+  // (optional) Disable SSL connection
+  bool disable_ssl = 5;
+}
+
+// Defines the response for Azure credentials
+message SdkAzureCredentialResponse {
+  // Account name
+  string account_name = 2;
+}
+
+// Defines the response for Google credentials
+message SdkGoogleCredentialResponse {
+  // Project ID
+  string project_id = 2;
+}
+
+// Empty request
+message SdkCredentialEnumerateRequest {
+}
+
+// Defines response for a enumeration of credentials
+message SdkCredentialEnumerateResponse {
+  // List of credentials
+  repeated string credential_ids = 1;
+}
+
+// Defines the request to inspection for credentials
+message SdkCredentialInspectRequest {
+  // Id of the credential
+  string credential_id = 1;
+}
+
+// Defines the response to an inspection of a credential.
+// This response uses OneOf proto style. Depending on your programming language
+// you will need to check if the value of credential_type is one of the ones below.
+message SdkCredentialInspectResponse {
+  // Credential id
+  string credential_id = 1;
+  // Name of the credential
+  string name = 2;
+  // (optional) Name of bucket
+  string bucket = 3;
+  // Ownership of the credential
+  Ownership ownership = 4;
+
+  // Start at field number 200 for expansion support
+  oneof credential_type {
+    // Aws credentials
+    SdkAwsCredentialResponse aws_credential = 200;
+    // Azure credentials
+    SdkAzureCredentialResponse azure_credential = 201;
+    // Google credentials
+    SdkGoogleCredentialResponse google_credential = 202;
+  }
+}
+
+// Defines the request to delete credentials
+message SdkCredentialDeleteRequest {
+  // Id for credentials
+  string credential_id = 1;
+}
+
+// Empty response
+message SdkCredentialDeleteResponse {
+}
+
+// Defines a request to validate credentials
+message SdkCredentialValidateRequest {
+  // Id of the credentials
+  string credential_id = 1;
+}
+
+// Empty response
+message SdkCredentialValidateResponse {
+}
+
+// Options to attach device
+message SdkVolumeAttachOptions {
+  // Indicates the name of the secret stored in a secret store
+  // In case of Hashicorp's Vault, it will be the key from the key-value pair stored in its kv backend.
+  // In case of Kubernetes secret, it is the name of the secret object itself
+  string secret_name = 1;
+  // In case of Kubernetes, this will be the key stored in the Kubernetes secret
+  string secret_key = 2;
+  // It indicates the additional context which could be used to retrieve the secret.
+  // In case of Kubernetes, this is the namespace in which the secret is created.
+  string secret_context = 3;
+}
+
+// Defines a request to mount a volume to the node receiving this request
+message SdkVolumeMountRequest {
+  // Id of the volume
+  string volume_id = 1;
+  // Mount path for mounting the volume.
+  string mount_path = 2;
+  // Options to attach device
+  SdkVolumeAttachOptions options = 3;
+  // The following options are private to the driver plugin running the
+  // OpenStorage SDK. Contact your driver developer for any special
+  // values that need to be provided here.
+  map<string, string> driver_options = 4;
+}
+
+// Empty response
+message SdkVolumeMountResponse {
+}
+
+// Options to unmount device
+message SdkVolumeUnmountOptions {
+  // Delete the mount path on the node after unmounting
+  bool delete_mount_path = 1;
+  // Do not wait for a delay before deleting path.
+  // Normally a storage driver may delay before deleting the mount path,
+  // which may be necessary to reduce the risk of race conditions. This
+  // choice will remove that delay. This value is only usable when
+  // `delete_mount_path` is set.
+  bool no_delay_before_deleting_mount_path = 2;
+}
+
+// Defines a request to unmount a volume on the node receiving this request
+message SdkVolumeUnmountRequest {
+  // Id of volume
+  string volume_id = 1;
+  // MountPath for device
+  string mount_path = 2;
+  // Options to unmount device
+  SdkVolumeUnmountOptions options = 3;
+  // The following options are private to the driver plugin running the
+  // OpenStorage SDK. Contact your driver developer for any special
+  // values that need to be provided here.
+  map<string, string> driver_options = 4;
+}
+
+// Empty response
+message SdkVolumeUnmountResponse {
+}
+
+// Defines a request to attach a volume to the node receiving this request
+message SdkVolumeAttachRequest {
+  // Id of volume
+  string volume_id = 1;
+  // Options to attach device
+  SdkVolumeAttachOptions options = 2;
+  // The following options are private to the driver plugin running the
+  // OpenStorage SDK. Contact your driver developer for any special
+  // values that need to be provided here.
+  map<string, string> driver_options = 3;
+}
+
+// Defines a response from the node which received the request to attach
+message SdkVolumeAttachResponse {
+  // Device path where device is exported
+  string device_path = 1;
+}
+
+message SdkVolumeDetachOptions {
+  // Forcefully detach device from the kernel
+  bool force = 1;
+  // Unmount the volume before detaching
+  bool unmount_before_detach = 2;
+}
+
+// Defines a request to detach a volume
+message SdkVolumeDetachRequest {
+  // Id of the volume
+  string volume_id = 1;
+  // Options to detach device
+  SdkVolumeDetachOptions options = 2;
+  // The following options are private to the driver plugin running the
+  // OpenStorage SDK. Contact your driver developer for any special
+  // values that need to be provided here.
+  map<string, string> driver_options = 3;
+}
+
+// Empty response
+message SdkVolumeDetachResponse {
+}
+
+// Defines a request to create a volume. Use OpenStorageVolume.Update()
+// to update any labels on the volume.
+message SdkVolumeCreateRequest {
+  // Unique name of the volume. This will be used for idempotency.
+  string name = 1;
+  // Volume specification
+  VolumeSpec spec = 2;
+  // Labels to apply to the volume
+  map<string, string> labels = 3;
+}
+
+// Defines a response to the creation of a volume
+message SdkVolumeCreateResponse {
+  // Id of new volume
+  string volume_id = 1;
+}
+
+// Defines a request to clone a volume or create a volume from a snapshot
+message SdkVolumeCloneRequest {
+  // Unique name of the volume. This will be used for idempotency.
+  string name = 1;
+  // Parent volume id or snapshot id will create a new volume as a clone of the parent.
+  string parent_id = 2;
+}
+
+// Defines the response when creating a clone from a volume or a snapshot
+message SdkVolumeCloneResponse {
+  // Id of new volume
+  string volume_id = 1;
+}
+
+// Defines the request to delete a volume
+message SdkVolumeDeleteRequest {
+  // Id of volume to delete
+  string volume_id = 1;
+}
+
+// Empty response
+message SdkVolumeDeleteResponse {
+}
+
+// Defines the request to inspect a volume
+message SdkVolumeInspectRequest {
+  // Id of volume to inspect
+  string volume_id = 1;
+  // Options during inspection
+  VolumeInspectOptions options = 2;
+}
+
+// Defines the response when inspecting a volume
+message SdkVolumeInspectResponse {
+  // Information about the volume
+  Volume volume = 1;
+  // Name of volume
+  string name = 2;
+  // Volume labels
+  map<string, string> labels = 3;
+}
+
+// Defines the request to inspect volumes using a filter
+message SdkVolumeInspectWithFiltersRequest {
+  // (optional) Name to search
+  string name = 2;
+  // (optional) Labels to search
+  map<string, string> labels = 3;
+  // (optional) Ownership to match
+  Ownership ownership = 4;
+  // (optional) Group to match
+  Group group = 5;
+  // Options during inspection
+  VolumeInspectOptions options = 6;
+}
+
+// Defines the response when inspecting volumes using a filter
+message SdkVolumeInspectWithFiltersResponse {
+  // List of `SdkVolumeInspectResponse` objects describing the volumes
+  repeated SdkVolumeInspectResponse volumes = 1;
+}
+
+// This request is used to adjust or set new values in the volume
+message SdkVolumeUpdateRequest {
+  // Id of the volume to update
+  string volume_id = 1;
+  // Change label values. Some of these values may not be able to be changed.
+  // New labels will be added to the current volume labels. To delete a label, set the
+  // value of the label to an empty string.
+  map<string, string> labels = 3;
+  // VolumeSpecUpdate provides a method to request that certain values
+  // in the VolumeSpec are changed. This is necessary as a separate variable
+  // because values like int and bool in the VolumeSpec cannot be determined
+  // if they are being requested to change in gRPC proto3. Some of these
+  // values may not be able to be changed.
+  //
+  // Here are a few examples of actions that can be accomplished using the VolumeSpec:
+  //
+  // * To resize the volume: Set a new value in spec.size_opt.size.
+  // * To change number of replicas: Adjust spec.ha_level_opt.ha_level.
+  // * To change the I/O Profile: Adjust spec.io_profile_opt.io_profile.
+  VolumeSpecUpdate spec = 4;
+}
+
+// Empty response
+message SdkVolumeUpdateResponse {
+}
+
+// Defines a request to retreive volume statistics
+message SdkVolumeStatsRequest {
+  // Id of the volume to get statistics
+  string volume_id = 1;
+  // When set to false the stats are in /proc/diskstats style stats.
+  // When set to true the stats are stats for a specific duration.
+  bool not_cumulative = 2;
+}
+
+
+// Defines a response containing drive statistics
+message SdkVolumeStatsResponse {
+  // Statistics for a single volume
+  Stats stats = 1;
+}
+
+// Defines request to retrieve volume/snapshot capacity usage details
+message SdkVolumeCapacityUsageRequest {
+  // Id of the snapshot/volume to get capacity usage details
+  string volume_id = 1;
+}
+
+// Defines response containing volume/snapshot capacity usage details
+message SdkVolumeCapacityUsageResponse {
+  // CapacityUsage details
+  CapacityUsageInfo capacity_usage_info = 1;
+}
+
+// Defines a request to list volumes
+message SdkVolumeEnumerateRequest {
+}
+
+// Defines the response when listing volumes
+message SdkVolumeEnumerateResponse {
+  // List of volumes matching label
+  repeated string volume_ids = 1;
+}
+
+// Defines a request to list volumes
+message SdkVolumeEnumerateWithFiltersRequest {
+  // (optional) Name to search
+  string name = 2;
+  // (optional) Labels to search
+  map<string, string> labels = 3;
+  // (optional) Ownership to match
+  Ownership ownership = 4;
+  // (optional) Group to match
+  Group group = 5;
+}
+
+// Defines the response when listing volumes
+message SdkVolumeEnumerateWithFiltersResponse {
+  // List of volumes matching label
+  repeated string volume_ids = 1;
+}
+
+// Defines the request when creating a snapshot from a volume.
+message SdkVolumeSnapshotCreateRequest {
+  // Id of volume to take the snapshot from
+  string volume_id = 1;
+  // Name of the snapshot.
+  string name = 2;
+  // Labels to apply to snapshot
+  map<string, string> labels = 3;
+}
+
+// Defines a response after creating a snapshot of a volume
+message SdkVolumeSnapshotCreateResponse {
+  // Id of immutable snapshot
+  string snapshot_id = 1;
+}
+
+// Defines a request to restore a volume to a snapshot
+message SdkVolumeSnapshotRestoreRequest {
+  // Id of volume
+  string volume_id = 1;
+  // Snapshot id to apply to `volume_id`
+  string snapshot_id = 2;
+}
+
+// Empty response
+message SdkVolumeSnapshotRestoreResponse {
+}
+
+// Defines a request to list the snaphots
+message SdkVolumeSnapshotEnumerateRequest {
+  // Get the snapshots for this volume id
+  string volume_id = 1;
+}
+
+// Defines a response when listing snapshots
+message SdkVolumeSnapshotEnumerateResponse {
+  // List of immutable snapshots
+  repeated string volume_snapshot_ids = 1;
+}
+
+// Defines a request to list the snaphots
+message SdkVolumeSnapshotEnumerateWithFiltersRequest {
+  // (optional) Get the snapshots for this volume id
+  string volume_id = 1;
+  // (optional) Get snapshots that match these labels
+  map<string, string> labels = 2;
+}
+
+// Defines a response when listing snapshots
+message SdkVolumeSnapshotEnumerateWithFiltersResponse {
+  // List of immutable snapshots
+  repeated string volume_snapshot_ids = 1;
+}
+
+// Defines a request to update the snapshot schedule of a volume
+message SdkVolumeSnapshotScheduleUpdateRequest {
+  // Id of volume
+  string volume_id = 1;
+  // Names of schedule policies
+  repeated string snapshot_schedule_names = 2;
+}
+
+// Empty response
+message SdkVolumeSnapshotScheduleUpdateResponse {
+}
+
+
+// Empty request
+message SdkClusterDomainsEnumerateRequest {
+}
+
+// Defines a response when enumerating cluster domains
+message SdkClusterDomainsEnumerateResponse {
+    // List of names of all the cluster domains in a cluster
+    repeated string cluster_domain_names = 1;
+}
+
+// Defines a request to inspect a cluster domain
+message SdkClusterDomainInspectRequest {
+    // Name of the cluster domain to inspect
+    string cluster_domain_name = 1;
+}
+
+// Defines a response to inspecting a cluster domain
+message SdkClusterDomainInspectResponse {
+    // Name of the cluster domain
+    string cluster_domain_name = 1;
+    // IsActive indicates whether this cluster domain is active
+    bool is_active = 2;
+}
+
+
+// Defines a request to activate a cluster domain
+message SdkClusterDomainActivateRequest {
+    // Name of the cluster domain to activate
+    string cluster_domain_name = 1;
+}
+
+// Empty response
+message SdkClusterDomainActivateResponse {
+}
+
+// Defines a request to deactivate a cluster domain
+message SdkClusterDomainDeactivateRequest {
+    // Name of the cluster domain to deactivate
+    string cluster_domain_name = 1;
+}
+
+// Empty response
+message SdkClusterDomainDeactivateResponse {
+}
+
+// Empty request
+message SdkClusterInspectCurrentRequest {
+}
+
+// Defines a response when inspecting the current cluster
+message SdkClusterInspectCurrentResponse {
+  // Cluster information
+  StorageCluster cluster = 1;
+}
+
+// Defines a request when inspecting a node
+message SdkNodeInspectRequest {
+  // Id of node to inspect
+  string node_id = 1;
+}
+
+// Defines a response when inspecting a node
+message SdkNodeInspectResponse {
+  // Node information
+  StorageNode node = 1;
+}
+
+// Empty request
+message SdkNodeInspectCurrentRequest {
+}
+
+// Defines a response when inspecting a node
+message SdkNodeInspectCurrentResponse {
+  // Node information
+  StorageNode node = 1;
+}
+
+// Empty request
+message SdkNodeEnumerateRequest {
+}
+
+// Defines a response with a list of nodes
+message SdkNodeEnumerateResponse {
+  // List of all the node ids in the cluster
+  repeated string node_ids = 1;
+}
+
+// Defines a request to get information about an object store endpoint
+message SdkObjectstoreInspectRequest {
+  // Id of the object store
+  string objectstore_id = 1;
+}
+
+// Defines a response when inspecting an object store endpoint
+message SdkObjectstoreInspectResponse {
+  // Contains information about the object store requested
+  ObjectstoreInfo objectstore_status = 1;
+}
+
+// Defines a request to create an object store
+message SdkObjectstoreCreateRequest {
+  // Volume on which objectstore will be running
+  string volume_id = 1;
+}
+
+// Defines a response when an object store has been created for a
+// specified volume
+message SdkObjectstoreCreateResponse {
+  // Created objecstore status
+  ObjectstoreInfo objectstore_status = 1;
+}
+
+// Defines a request to delete an object store service from a volume
+message SdkObjectstoreDeleteRequest {
+  // Id of the object store to delete
+  string objectstore_id = 1;
+}
+
+// Empty response
+message SdkObjectstoreDeleteResponse {
+}
+
+// Defines a request to update an object store
+message SdkObjectstoreUpdateRequest {
+  // Objectstore Id to update
+  string objectstore_id = 1;
+  // enable/disable objectstore
+  bool enable = 2;
+}
+
+// Empty response
+message SdkObjectstoreUpdateResponse {
+}
+
+// Defines a request to create a backup of a volume to the cloud
+message SdkCloudBackupCreateRequest {
+  // VolumeID of the volume for which cloudbackup is requested
+  string volume_id = 1;
+  // Credential id refers to the cloud credentials needed to backup
+  string credential_id = 2;
+  // Full indicates if full backup is desired even though incremental is possible
+  bool full = 3;
+  // TaskId of the task performing this backup. This value can be used for
+  // idempotency.
+  string task_id = 4;
+  // Labels are list of key value pairs to tag the cloud backup. These labels
+  // are stored in the metadata associated with the backup.
+  map<string, string> labels = 5;
+}
+
+// Empty response
+message SdkCloudBackupCreateResponse {
+  // TaskId of the task performing the backup
+  string task_id = 1;
+}
+
+// Defines a request to restore a volume from an existing backup stored by
+// a cloud provider
+message SdkCloudBackupRestoreRequest {
+  // Backup ID being restored
+  string backup_id = 1;
+  // Optional volume Name of the new volume to be created
+  // in the cluster for restoring the cloudbackup
+  string restore_volume_name = 2;
+  // The credential to be used for restore operation
+  string credential_id = 3;
+  // Optional for provisioning restore
+  // volume (ResoreVolumeName should not be specified)
+  string node_id = 4;
+  // TaskId of the task performing this restore
+  string task_id = 5;
+}
+
+// Defines a response when restoring a volume from a backup stored by
+// a cloud provider
+message SdkCloudBackupRestoreResponse {
+  // VolumeID to which the backup is being restored
+  string restore_volume_id = 1;
+  // TaskId of the task performing the restore
+  string task_id = 2;
+}
+
+// Defines a request to delete a single backup stored by a cloud provider
+message SdkCloudBackupDeleteRequest {
+  // ID is the ID of the cloud backup
+  string backup_id = 1;
+  // Credential id is the credential for cloud to be used for the request
+  string credential_id = 2;
+  // Force Delete cloudbackup even if there are dependencies. This may be
+  // needed if the backup is an incremental backup and subsequent backups
+  // depend on this backup specified by `backup_id`.
+  bool force = 3;
+}
+
+// Empty response
+message SdkCloudBackupDeleteResponse {
+}
+
+// Defines a request to delete all the backups stored by a cloud provider
+// for a specified volume
+message SdkCloudBackupDeleteAllRequest {
+  // id of the volume for the request
+  string src_volume_id = 1;
+  // Credential id is the credential for cloud to be used for the request
+  string credential_id = 2;
+}
+
+// Empty response
+message SdkCloudBackupDeleteAllResponse {
+}
+
+// Defines a request to list the backups stored by a cloud provider.
+// The following combinations can be used to get cloud backup information:
+//
+// * For a specific volume in current cluster: Set `src_volume_id` to your desired volume id
+// and do not provide `cluster_id` and `all`.
+// * For a specific volume in a specific cluster: Set `src_volume_id` to your desired volume id
+// and specify `cluster_id`.
+// * For a specific volume in all clusters: Set `src_volume_id` to your desired volume id
+// and set `all` to true, do not provide `cluster_id`.
+// * For all volumes in current cluster: do not provide `cluster_id`, `volume_id` and `all`.
+// * For all volumes in a specific cluster: Set `cluster_id` to your desired cluster id
+// and do not provide `volume_id` and `all`.
+// * For all volumes in all clusters: Set `all` to true do not provide `volume_id` and `cluster_id`.
+message SdkCloudBackupEnumerateWithFiltersRequest {
+  // (optional) Source id of the volume for the request.
+  string src_volume_id = 1;
+  // (optional) Cluster id specifies the cluster for the request
+  string cluster_id = 2;
+  // Credential id is the credential for cloud to be used for the request
+  string credential_id = 3;
+  // (optional) All indicates if the request should show cloud backups for all clusters or the current cluster.
+  bool all = 4;
+}
+
+// SdkCloudBackupInfo has information about a backup stored by a cloud provider
+message SdkCloudBackupInfo {
+  // This is the id as represented by the cloud provider
+  string id = 1;
+  // Source volumeID of the backup
+  string src_volume_id = 2;
+  // Name of the sourceVolume of the backup
+  string src_volume_name = 3;
+  // Timestamp is the timestamp at which the source volume
+  // was backed up to cloud
+  google.protobuf.Timestamp timestamp = 4;
+  // Metadata associated with the backup
+  map<string, string> metadata = 5;
+  // Status indicates the status of the backup
+  SdkCloudBackupStatusType status = 6;
+}
+
+// Defines a response which lists all the backups stored by a cloud provider
+message SdkCloudBackupEnumerateWithFiltersResponse {
+  repeated SdkCloudBackupInfo backups = 1;
+}
+
+// CloudBackup operations types
+enum SdkCloudBackupOpType {
+  // Unknown
+  SdkCloudBackupOpTypeUnknown = 0;
+  // Backup
+  SdkCloudBackupOpTypeBackupOp = 1;
+  // Restore
+  SdkCloudBackupOpTypeRestoreOp = 2;
+}
+
+// CloudBackup status types
+enum SdkCloudBackupStatusType {
+  // Unkonwn
+  SdkCloudBackupStatusTypeUnknown = 0;
+  // Not started
+  SdkCloudBackupStatusTypeNotStarted = 1;
+  // Done
+  SdkCloudBackupStatusTypeDone = 2;
+  // Aborted
+  SdkCloudBackupStatusTypeAborted = 3;
+  // Paused
+  SdkCloudBackupStatusTypePaused = 4;
+  // Stopped
+  SdkCloudBackupStatusTypeStopped = 5;
+  // Active
+  SdkCloudBackupStatusTypeActive = 6;
+  // Failed
+  SdkCloudBackupStatusTypeFailed = 7;
+  // Queued
+  SdkCloudBackupStatusTypeQueued = 8;
+}
+
+// SdkCloudBackupStatus defines the status of a backup stored by a cloud provider
+message SdkCloudBackupStatus {
+  // This is the id as represented by the cloud provider
+  string backup_id = 1;
+  // OpType indicates if this is a backup or restore
+  SdkCloudBackupOpType optype = 2;
+  // State indicates if the op is currently active/done/failed
+  SdkCloudBackupStatusType status = 3;
+  // BytesDone indicates total Bytes uploaded/downloaded
+  uint64 bytes_done = 4;
+  // StartTime indicates Op's start time
+  google.protobuf.Timestamp start_time = 5;
+  // CompletedTime indicates Op's completed time
+  google.protobuf.Timestamp completed_time = 6;
+  // NodeID is the ID of the node where this Op is active
+  string node_id = 7;
+  // SourceVolumeID is the the volume that is either being backed up to cloud
+  // or target volume to which a backup is being restored
+  string src_volume_id = 8;
+  // Info currently indicates the failure cause for failed backup/restore
+  repeated string info = 9;
+  // CredentialId is the credential used for cloud with this backup/restore op
+  string credential_id  = 10;
+  // BytesTotal is the total number of bytes being transferred
+  uint64 bytes_total = 11;
+  // ETASeconds is the number of seconds for cloud backup completion
+  int64 eta_seconds = 12;
+  // string group_id volume's group id if this was group cloud backup
+  string group_id = 13;
+}
+
+// Defines a request to retreive the status of a backup or restore for a
+// specified volume
+message SdkCloudBackupStatusRequest {
+  // (optional) VolumeId is a value which is used to get information on the
+  // status of a backup for the specified volume. If no volume id and task_id
+  // is provided, then status for all volumes is returned.
+  string volume_id = 1;
+  // Local indicates if only those backups/restores that are
+  // active on current node must be returned
+  bool local = 2;
+  // TaskId of the backup/restore task, if this is specified,
+  // volume_id is ignored.
+  string task_id = 3;
+}
+
+// Defines a response containing the status of the backups for a specified volume
+message SdkCloudBackupStatusResponse {
+  // Statuses is list of currently active/failed/done backup/restores where
+  // the key is the id of the task performing backup/restore.
+  map<string, SdkCloudBackupStatus> statuses = 1;
+}
+
+// Defines a request to get catalog of a backup stored by a cloud provider
+message SdkCloudBackupCatalogRequest {
+  // Id of the backup
+  string backup_id = 1;
+  // Credential id describe the credentials for the cloud
+  string credential_id = 2;
+}
+
+// Defines a response containing the contents of a backup stored by a cloud provider
+message SdkCloudBackupCatalogResponse {
+  // Contents is listing of backup contents
+  repeated string contents = 1;
+}
+
+// SdkCloudBackupHistoryItem contains information about a backup for a
+// specific volume
+message SdkCloudBackupHistoryItem {
+  // SrcVolumeID is volume ID which was backedup
+  string src_volume_id = 1;
+  // TimeStamp is the time at which either backup completed/failed
+  google.protobuf.Timestamp timestamp = 2;
+  // Status indicates whether backup was completed/failed
+  SdkCloudBackupStatusType status = 3;
+}
+
+// Defines a request to retreive the history of the backups for
+// a specific volume to a cloud provider
+message SdkCloudBackupHistoryRequest {
+  // This optional value defines which history of backups is being
+  // requested. If not provided, it will return the history for all volumes.
+  string src_volume_id = 1;
+}
+
+// Defines a response containing a list of history of backups to a cloud provider
+message SdkCloudBackupHistoryResponse {
+  // HistoryList is list of past backups on this volume
+  repeated SdkCloudBackupHistoryItem history_list = 1;
+}
+
+// SdkCloudBackupRequestedState defines states to set a specified backup or restore
+// to or from a cloud provider
+enum SdkCloudBackupRequestedState {
+  // Unknown state
+  SdkCloudBackupRequestedStateUnknown = 0;
+  // Pause the backup or restore
+  SdkCloudBackupRequestedStatePause = 1;
+  // Resume the backup or restore
+  SdkCloudBackupRequestedStateResume = 2;
+  // Stop a backup or restore
+  SdkCloudBackupRequestedStateStop = 3;
+}
+
+// Defines a request to change the state of a backup or restore to or
+// from a cloud provider
+message SdkCloudBackupStateChangeRequest {
+  // Describes the backup/restore task
+  // state change is being requested
+  string task_id = 1;
+  // The desired state of the operation
+  SdkCloudBackupRequestedState requested_state = 2;
+}
+
+// Empty response
+message SdkCloudBackupStateChangeResponse {
+}
+
+// SdkCloudBackupScheduleInfo describes a schedule for volume backups to
+// a cloud provider
+message SdkCloudBackupScheduleInfo{
+  // The schedule's source volume
+  string src_volume_id = 1;
+  // The cloud credential used with this schedule
+  string credential_id = 2;
+  // Schedules are the frequencies of the backup
+  repeated SdkSchedulePolicyInterval schedules = 3;
+  // MaxBackups are the maximum number of backups retained
+  // in cloud.Older backups are deleted
+  uint64 max_backups = 4;
+  // Full indicates if scheduled backups should always be full and never incremental.
+  bool full = 5;
+}
+
+// Defines a request to create a schedule for volume backups to a
+// cloud provider
+message SdkCloudBackupSchedCreateRequest{
+  // Cloud Backup Schedule info
+  SdkCloudBackupScheduleInfo cloud_sched_info = 1;
+}
+
+// Defines a response containing the id of a schedule for a volume backup
+// to a cloud provider
+message SdkCloudBackupSchedCreateResponse{
+   // Id of newly created backup schedule
+   string backup_schedule_id = 1;
+}
+
+// Defines a request to delete a backup schedule
+message SdkCloudBackupSchedDeleteRequest{
+  // Id of cloud backup to delete
+  string backup_schedule_id = 1;
+}
+
+// Empty response
+message SdkCloudBackupSchedDeleteResponse{
+}
+
+// Empty request
+message SdkCloudBackupSchedEnumerateRequest{
+}
+
+// Defines a response containing a map listing the schedules for volume
+// backups to a cloud provider
+message SdkCloudBackupSchedEnumerateResponse{
+  // Returns list of backup schedules
+  map<string, SdkCloudBackupScheduleInfo> cloud_sched_list = 1;
+}
+
+//
+// SdkRule is the message used to construct custom roles in the OpenStorage SDK.
+//
+// ### Format
+// The following shows the supported format for SdkRule:
+//
+// * Services: Is the gRPC service name in `OpenStorage<service name>` in lowercase
+// * Apis: Is the API name in the service in lowercase
+//
+// Values can also be set to `*`, or start or end with `*` to allow multiple matches in services or apis.
+//
+// ### Examples
+//
+// * Allow any call:
+//
+// ```yaml
+// SdkRule:
+//   - Services: ["*"]
+//     Apis: ["*"]
+// ```
+//
+// * Allow only cluster operations:
+//
+// ```yaml
+// SdkRule:
+//   - services: ["cluster"]
+//     apis: ["*"]
+// ```
+//
+// * Allow inspection of any object and listings of only volumes
+//
+// ```yaml
+// SdkRule:
+//   - Services: ["volumes"]
+//     Apis: ["*enumerate*"]
+//   - Services: ["*"]
+//     Apis: ["inspect*"]
+// ```
+//
+message SdkRule {
+  // The gRPC service name in `OpenStorage<service name>` in lowercase
+  repeated string services = 1;
+  // The API name in the service in lowercase
+  repeated string apis = 2;
+}
+
+message SdkRole {
+  string name = 1;
+  repeated SdkRule rules = 2;
+}
+
+// Defines a request for creating a role
+message SdkRoleCreateRequest {
+  // Role
+  SdkRole role = 1;
+}
+
+// Response contains informaiton about the creation of the role
+message SdkRoleCreateResponse {
+  // Role created
+  SdkRole role = 1;
+}
+
+// Empty request
+message SdkRoleEnumerateRequest {
+}
+
+// Respose to enumerate all roles
+message SdkRoleEnumerateResponse {
+  // List of role names
+  repeated string names = 1;
+}
+
+// Defines a request to inspect a role
+message SdkRoleInspectRequest {
+  // Name of role
+  string name = 1;
+}
+
+// Response to inspection request
+message SdkRoleInspectResponse {
+  // Role requested
+  SdkRole role = 1;
+}
+
+// Defines a request to delete a role
+message SdkRoleDeleteRequest {
+  string name = 1;
+}
+
+// Empty response
+message SdkRoleDeleteResponse {
+}
+
+// Defines a request to update an existing role
+message SdkRoleUpdateRequest {
+  // New role update
+  SdkRole role = 1;
+}
+
+// Response contains information about the updated role
+message SdkRoleUpdateResponse {
+  // Role updated
+  SdkRole role = 1;
+}
+
+// Empty request
+message SdkIdentityCapabilitiesRequest {
+}
+
+// Defines a response containing the capabilites of the cluster
+message SdkIdentityCapabilitiesResponse {
+  // Provides all the capabilites supported by the cluster
+  repeated SdkServiceCapability capabilities = 1;
+}
+
+// Empty request
+message SdkIdentityVersionRequest {
+}
+
+// Defines a response containing version information
+message SdkIdentityVersionResponse {
+  // OpenStorage SDK version used by the server
+  SdkVersion sdk_version = 1;
+  // Version information about the storage system
+  StorageVersion version = 2;
+}
+
+// Defines a capability of he cluster
+message SdkServiceCapability {
+  message OpenStorageService {
+    enum Type {
+      // Unknown service
+      UNKNOWN = 0;
+      // Cluster management
+      CLUSTER = 1;
+      // Cloud backup of volumes management
+      CLOUD_BACKUP = 2;
+      // Credentials management
+      CREDENTIALS = 3;
+      // Node management
+      NODE = 4;
+      // Object Storage management
+      OBJECT_STORAGE = 5;
+      // Schedule policy management
+      SCHEDULE_POLICY = 6;
+      // Volume management
+      VOLUME = 7;
+      // Alert enumeration
+      ALERTS = 8;
+      // Mount/Attach Support
+      MOUNT_ATTACH = 9;
+      // Role service
+      ROLE = 10;
+      // Cluster Pair service
+      CLUSTER_PAIR = 11;
+      // Migrate service
+      MIGRATE = 12;
+      // StoragePolicy Service
+      STORAGE_POLICY = 13;
+    }
+
+    // Type of service supported
+    Type type = 1;
+  }
+
+  // Use oneof to have only one type of service defined making it
+  // future proof to add other types.
+  oneof type {
+    // service type supported by this cluster
+    OpenStorageService service = 1;
+  }
+}
+
+// SDK version in Major.Minor.Patch format. The goal of this
+// message is to provide clients a method to determine the SDK
+// version run by an SDK server.
+message SdkVersion {
+
+  // These values are constants that can be used by the
+  // client and server applications
+  enum Version {
+    // Allows multiple values to be set to the same integer
+    // Set when needed
+    option allow_alias = true;
+
+    // Must be set in the proto file; ignore.
+    MUST_HAVE_ZERO_VALUE = 0;
+
+    // SDK version major value of this specification
+    Major = 0;
+    // SDK version minor value of this specification
+    Minor = 52;
+    // SDK version patch value of this specification
+    Patch = 0;
+  }
+
+  // The following cannot be set to use the enum Version because the REST
+  // Gateway would then return the string value of the enum.
+
+  // SDK version major number
+  int32 major = 1;
+  // SDK version minor number
+  int32 minor = 2;
+  // SDK version patch number
+  int32 patch = 3;
+  // String representation of the SDK version. Must be
+  // in `major.minor.patch` format.
+  string version = 4;
+}
+
+// Version information about the storage system
+message StorageVersion {
+   // OpenStorage driver name
+   string driver = 1;
+   // Version of the server
+   string version = 2;
+   // Extra information provided by the storage system
+   map<string, string> details = 3;
+}
+
+message CloudMigrate {
+    enum OperationType {
+        InvalidType = 0;
+        // Migrate all volumes in the cluster
+        MigrateCluster = 1;
+        // Migrate a single volume
+        MigrateVolume = 2;
+        // Migrate a group of volumes
+        MigrateVolumeGroup = 3;
+    }
+
+    enum Stage {
+        InvalidStage = 0;
+        Backup = 1;
+        Restore = 2;
+        VolumeUpdate = 3;
+        Done = 4;
+    }
+
+    enum Status {
+        InvalidStatus = 0;
+        Queued = 1;
+        Initialized = 2;
+        InProgress = 3;
+        Failed = 4;
+        Complete = 5;
+        Canceled = 6;
+    }
+}
+
+// Request to start a cloud migration
+message CloudMigrateStartRequest {
+    // The type of operation to start
+    CloudMigrate.OperationType operation = 1;
+    // ID of the cluster to which volumes are to be migrated
+    string cluster_id = 2;
+    // Depending on the operation type this can be a VolumeID or VolumeGroupID
+    string target_id = 3;
+    // (Optional) Unique TaskId assocaiated with this migration. If not provided one will
+    // be generated and returned in the response
+    string task_id = 4;
+}
+
+// Defines a migration request
+message SdkCloudMigrateStartRequest {
+  // Defines a migration request for a volume
+  message MigrateVolume {
+    string volume_id = 1;
+  }
+
+  // Defines a migration request for a volume group
+  message MigrateVolumeGroup {
+    string group_id = 1;
+  }
+
+  // Defines a migration request for all volumes in a cluster
+  message MigrateAllVolumes {
+  }
+
+  // ID of the cluster to which volumes are to be migrated
+  string cluster_id = 1;
+
+  // Unique name assocaiated with this migration.
+  // This is a Optional field for idempotency
+  string task_id = 2;
+
+  oneof opt {
+    // Request to migrate a volume
+    MigrateVolume volume = 200;
+
+    // Request to migrate a volume group
+    MigrateVolumeGroup volume_group = 201;
+
+    // Request to migrate all volumes
+    MigrateAllVolumes all_volumes = 202;
+  }
+}
+
+// Response to start a cloud migration
+message CloudMigrateStartResponse {
+    // TaskId assocaiated with the migration that was started
+    string task_id = 1;
+}
+
+// Defines a response for the migration that was started
+message SdkCloudMigrateStartResponse {
+    // Result assocaiated with the migration that was started
+    CloudMigrateStartResponse result = 1;
+}
+
+// Request to stop a cloud migration
+message CloudMigrateCancelRequest {
+    // The id of the task to cancel
+    string task_id = 1;
+}
+
+// Defines a request to stop a cloud migration
+message SdkCloudMigrateCancelRequest {
+    // Request containing the task id to be cancelled
+    CloudMigrateCancelRequest request = 1;
+}
+
+// Empty Response
+message SdkCloudMigrateCancelResponse {
+}
+
+message CloudMigrateInfo {
+    // Task id associated with this migration
+    string task_id = 1;
+    // ID of the cluster where the volume is being migrated
+    string cluster_id = 2;
+    // ID of the volume on the local cluster
+    string local_volume_id = 3;
+    // Name of the volume on the local cluster
+    string local_volume_name = 4;
+    // ID of the volume on the remote cluster
+    string remote_volume_id = 5;
+    // ID of the cloudbackup used for the migration
+    string cloudbackup_id = 6;
+    // Current stage of the volume migration
+    CloudMigrate.Stage current_stage = 7;
+    // Status of the current stage
+    CloudMigrate.Status status = 8;
+    // Last time the status was updated
+    google.protobuf.Timestamp last_update = 9;
+    // Contains the reason for the migration error
+    string error_reason = 10;
+    // StartTime indicates Op's start time
+    google.protobuf.Timestamp start_time = 11;
+    // CompletedTime indicates Op's completed time
+    google.protobuf.Timestamp completed_time = 12;
+    // BytesTotal is the number of bytes being transferred
+    uint64 bytes_total = 13;
+    // BytesDone is the number of bytes already transferred
+    uint64 bytes_done = 14;
+    // ETASeconds the time duration in seconds for cloud migration completion
+    int64 eta_seconds = 15;
+}
+
+message CloudMigrateInfoList {
+    repeated CloudMigrateInfo list = 1;
+}
+
+// Request for cloud migration operation status
+message SdkCloudMigrateStatusRequest {
+    // Request contains the task id and cluster id for which status should be
+    // returned
+    CloudMigrateStatusRequest request = 1;
+}
+
+// Request for cloud migration operation status
+message CloudMigrateStatusRequest {
+    // Task id for which to return status
+    string task_id = 1;
+    // ID of the cluster for which to return migration statuses
+    string cluster_id = 2;
+}
+
+// Response with a status of the cloud migration operations
+message CloudMigrateStatusResponse {
+    // Map of cluster id to the status of volumes being migrated
+    map<string, CloudMigrateInfoList> info = 1;
+}
+
+// Defines a response for the status request
+message SdkCloudMigrateStatusResponse {
+  // Status of all migration requests
+  CloudMigrateStatusResponse result = 1;
+}
+
+message ClusterPairMode {
+    enum Mode {
+        // Default pairing mode
+        Default = 0;
+        // Paired for DisasterRecovery
+        DisasterRecovery = 1;
+    }
+}
+
+// Used to send a request to create a cluster pair
+message ClusterPairCreateRequest {
+  // IP of the remote cluster
+  string remote_cluster_ip = 1;
+  // Port for the remote cluster
+  uint32 remote_cluster_port = 2;
+  // Token used to authenticate with the remote cluster
+  string remote_cluster_token = 3;
+  // Set the new pair as the default
+  bool set_default = 4;
+  // The mode to use for the cluster pair
+  ClusterPairMode.Mode mode = 5;
+}
+
+// Response for a pair request
+message ClusterPairCreateResponse {
+  // ID of the remote cluster
+  string remote_cluster_id = 1;
+  // Name of the remote cluster
+  string remote_cluster_name = 2;
+}
+
+// Defines a request for creating a cluster pair
+message SdkClusterPairCreateRequest {
+  ClusterPairCreateRequest request = 1;
+}
+
+// Defines a result of the cluster pair
+message SdkClusterPairCreateResponse {
+  // Contains the information about cluster pair
+  ClusterPairCreateResponse result = 1;
+}
+
+// Used to process a pair request from a remote cluster
+message ClusterPairProcessRequest {
+    // ID of the cluster requesting the pairing
+    string source_cluster_id = 1;
+    // Token used to authenticate with the remote cluster
+    string remote_cluster_token = 2;
+    // The mode to use for the cluster pair
+    ClusterPairMode.Mode mode = 3;
+}
+
+// Response after a pairing has been processed
+message ClusterPairProcessResponse {
+    // ID of the cluster which processed the pair request
+    string remote_cluster_id = 1;
+
+    // Name of the cluster which processed the pair request
+    string remote_cluster_name = 2;
+
+    // List of endpoints that can be used to communicate with the cluster
+    repeated string remote_cluster_endpoints = 3;
+
+    // Key/value pair of options returned on successful pairing.
+    // Opaque to openstorage and interpreted by the drivers
+    map<string, string> options = 4;
+}
+
+// Defines a delete request for a cluster pair
+message SdkClusterPairDeleteRequest {
+  // ID of the cluster pair to be deleted
+  string cluster_id = 1;
+}
+
+// Empty response
+message SdkClusterPairDeleteResponse{
+}
+
+// Response to get the cluster token
+message ClusterPairTokenGetResponse {
+    // Token used to authenticate clusters
+    string token = 1;
+}
+
+// Empty request
+message SdkClusterPairGetTokenRequest {
+}
+
+// Defines a response for the token request
+message SdkClusterPairGetTokenResponse {
+  // Contains authentication token for the cluster
+  ClusterPairTokenGetResponse result = 1;
+}
+
+// Empty request
+message SdkClusterPairResetTokenRequest {
+}
+
+// Defines a response for the token request
+message SdkClusterPairResetTokenResponse {
+  // Contains authentication token for the cluster
+  ClusterPairTokenGetResponse result = 1;
+}
+
+// Information about a cluster pair
+message ClusterPairInfo {
+    // ID of the cluster
+    string id = 1;
+    // Name of the cluster
+    string name = 2;
+    // The endpoint used for creating the pair
+    string endpoint = 3;
+    // Current endpoints of the cluster
+    repeated string current_endpoints = 4;
+    // Flag used to determine if communication is over a secure channel
+    bool secure = 5;
+    // Token associated with cluster
+    string token = 6;
+    // Key/value pair of options associated with the cluster
+    // Opaque to openstorage and interpreted by the drivers
+    map<string, string> options = 7;
+    // Mode for the cluster pair
+    ClusterPairMode.Mode mode = 8;
+}
+
+// Defines a cluster pair inspect request
+message SdkClusterPairInspectRequest{
+    // ID of the cluster, if empty gets the default pair
+    string id = 1;
+}
+
+// Reponse to get a cluster pair
+message ClusterPairGetResponse {
+    // Info about the cluster pair
+    ClusterPairInfo pair_info = 1;
+}
+
+// Defines a cluster pair inspect response
+message SdkClusterPairInspectResponse {
+  // Information about cluster pair
+  ClusterPairGetResponse result = 1;
+}
+
+// Empty Request
+message SdkClusterPairEnumerateRequest{
+}
+
+// Response to enumerate all the cluster pairs
+message ClusterPairsEnumerateResponse {
+    // ID of the default cluster pair
+    string default_id = 1;
+
+    // Pairs Info about the cluster pairs
+    map<string, ClusterPairInfo> pairs = 2;
+}
+
+// Defines a list of cluster pair
+message SdkClusterPairEnumerateResponse {
+  // List of all the cluster pairs
+  ClusterPairsEnumerateResponse result = 1;
+}
+
+message Catalog {
+    // Name of the Directory/File
+    string name = 1;
+    // Full Path of the Directory/File
+    string path = 2;
+    // Type Directory or File
+    string type = 3;
+    // File or Directory Size
+    uint64 size = 4;
+    // Last Modified
+    google.protobuf.Timestamp LastModified = 5;
+    // Children
+    repeated Catalog children = 6;
+}
+
+message Report {
+    // Directory count
+    int64 directories = 2;
+    // File count
+    int64 files = 3;
+}
+
+message CatalogResponse {
+    // Root Catalog
+    Catalog root = 1;
+    // Report of total directories and files count
+    Report report = 2;
+}
+
+
+// Locate response would be used to return a set of mounts
+// and/or Container IDs and their mount paths
+message LocateResponse {
+    // Map of mounts
+    // <host>: /var/lib/osd/<volumemount>
+    map<string, string> mounts = 1;
+    // Map of docker id's and their mounts
+    // <containerid>: /var/www
+    map<string, string> dockerids = 2;
+}
+
+// VolumePlacementStrategy defines a strategy for placing volumes in the cluster which will be a series of rules
+message VolumePlacementStrategy {
+  // Rules defines a list of rules as part of the placement spec. All the rules specified will
+  // be applied for volume placement.
+  // Rules that have enforcement as "required" are strictly enforced while "preferred" are best effort.
+  // In situations, where 2 or more rules conflict, the weight of the rules will dictate which wins.
+  repeated VolumePlacementRule rules = 1;
+}
+
+// VolumePlacementRule defines a single placement rule
+message VolumePlacementRule {
+  // AffectedReplicas defines the number of volume replicas affected by this rule. If not provided,
+  // rule would affect all replicas
+  // (optional)
+  int32 affected_replicas = 1;
+  // Weight defines the weight of the rule which allows to break the tie with other matching rules. A rule with
+  // higher weight wins over a rule with lower weight.
+  // (optional)
+  int64 weight = 2;
+
+  // Defines the types of enforcement on the given rules
+  enum EnforcementType {
+    // This specifies that the rule is required and must be strictly enforced
+    required = 0;
+    // This specifies that the rule is preferred and can be best effort
+    preferred = 1;
+  }
+
+  // Enforcement specifies the rule enforcement policy. Can take values: required or preferred.
+  // (optional)
+  EnforcementType enforcement = 3;
+
+  // This specifies the type an affinity rule can take
+  enum AffinityRuleType {
+    // Affinity means the rule specifies an affinity to objects that match the below label selector requirements
+    affinity = 0;
+    // AntiAffinity means the rule specifies an anti-affinity to objects that match the below label selector requirements
+    antiAffinity = 1;
+  }
+
+  // Type is the type of the affinity rule
+  AffinityRuleType type = 4;
+
+  // MatchExpressions is a list of label selector requirements. The requirements are ANDed.
+  repeated LabelSelectorRequirement match_expressions = 5;
+}
+
+
+// LabelSelectorRequirement is a selector that contains values, a key, and an operator that
+// relates the key and values.
+message LabelSelectorRequirement {
+  // Key is the label key that the selector applies to.
+  string key = 1;
+
+  // This defines operator types used in a label matching rule
+  enum Operator {
+    // In means the value for 'key' should be in one of the given value(s)
+    In = 0;
+    // NotIn means the value for 'key' should NOT be in one of the given value(s)
+    NotIn = 1;
+    // Exists means the 'key' should just exist regardless of the value
+    Exists = 2;
+    // DoesNotExist means the 'key' should NOT exist
+    DoesNotExist = 3;
+    // Gt means the 'key' should be greater than the value(s)
+    Gt = 4;
+    // Lt means the 'key' should be less than the value(s)
+    Lt = 5;
+  }
+
+  // Operator represents a key's relationship to a set of values.
+  // Valid operators are In, NotIn, Exists and DoesNotExist.
+  Operator operator = 2;
+
+  // Values is an array of string values. If the operator is In or NotIn,
+  // the values array must be non-empty. If the operator is Exists or DoesNotExist,
+  // the values array must be empty. This array is replaced during a strategic
+  // merge patch.
+  repeated string values = 3;
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/api/client/client.go b/vendor/github.com/libopenstorage/openstorage/api/client/client.go
new file mode 100644
index 000000000..73be8d996
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/api/client/client.go
@@ -0,0 +1,177 @@
+package client
+
+import (
+	"crypto/tls"
+	"fmt"
+	"net"
+	"net/http"
+	"net/url"
+	"sync"
+	"time"
+)
+
+var (
+	httpCache = make(map[string]*http.Client)
+	cacheLock sync.Mutex
+)
+
+// NewClient returns a new REST client for specified server.
+func NewClient(host, version, userAgent string) (*Client, error) {
+	baseURL, err := url.Parse(host)
+	if err != nil {
+		return nil, err
+	}
+	if baseURL.Path == "" {
+		baseURL.Path = "/"
+	}
+	unix2HTTP(baseURL)
+	hClient := getHTTPClient(host)
+	if hClient == nil {
+		return nil, fmt.Errorf("Unable to parse provided url: %v", host)
+	}
+	c := &Client{
+		base:        baseURL,
+		version:     version,
+		httpClient:  hClient,
+		authstring:  "",
+		accesstoken: "",
+		userAgent:   fmt.Sprintf("%v/%v", userAgent, version),
+	}
+	return c, nil
+}
+
+// NewAuthClient returns a new REST client for specified server.
+func NewAuthClient(host, version, authstring, accesstoken, userAgent string) (*Client, error) {
+	baseURL, err := url.Parse(host)
+	if err != nil {
+		return nil, err
+	}
+	if baseURL.Path == "" {
+		baseURL.Path = "/"
+	}
+	unix2HTTP(baseURL)
+	hClient := getHTTPClient(host)
+	if hClient == nil {
+		return nil, fmt.Errorf("Unable to parse provided url: %v", host)
+	}
+	c := &Client{
+		base:        baseURL,
+		version:     version,
+		httpClient:  hClient,
+		authstring:  authstring,
+		accesstoken: accesstoken,
+		userAgent:   fmt.Sprintf("%v/%v", userAgent, version),
+	}
+	return c, nil
+}
+
+// GetUnixServerPath returns a unix domain socket prepended with the
+// provided path.
+func GetUnixServerPath(socketName string, paths ...string) string {
+	serverPath := "unix://"
+	for _, path := range paths {
+		serverPath = serverPath + path
+	}
+	serverPath = serverPath + socketName + ".sock"
+	return serverPath
+}
+
+// Client is an HTTP REST wrapper. Use one of Get/Post/Put/Delete to get a request
+// object.
+type Client struct {
+	base        *url.URL
+	version     string
+	httpClient  *http.Client
+	authstring  string
+	accesstoken string
+	userAgent   string
+}
+
+func (c *Client) SetTLS(tlsConfig *tls.Config) {
+	c.httpClient = &http.Client{
+		Transport: &http.Transport{TLSClientConfig: tlsConfig},
+	}
+}
+
+// Versions send a request at the /versions REST endpoint.
+func (c *Client) Versions(endpoint string) ([]string, error) {
+	versions := []string{}
+	err := c.Get().Resource(endpoint + "/versions").Do().Unmarshal(&versions)
+	return versions, err
+}
+
+// Get returns a Request object setup for GET call.
+func (c *Client) Get() *Request {
+	return NewRequest(c.httpClient, c.base, "GET", c.version, c.authstring, c.userAgent)
+}
+
+// Post returns a Request object setup for POST call.
+func (c *Client) Post() *Request {
+	return NewRequest(c.httpClient, c.base, "POST", c.version, c.authstring, c.userAgent)
+}
+
+// Put returns a Request object setup for PUT call.
+func (c *Client) Put() *Request {
+	return NewRequest(c.httpClient, c.base, "PUT", c.version, c.authstring, c.userAgent)
+}
+
+// Delete returns a Request object setup for DELETE call.
+func (c *Client) Delete() *Request {
+	return NewRequest(c.httpClient, c.base, "DELETE", c.version, c.authstring, c.userAgent)
+}
+
+func unix2HTTP(u *url.URL) {
+	if u.Scheme == "unix" {
+		// Override the main URL object so the HTTP lib won't complain
+		u.Scheme = "http"
+		u.Host = "unix.sock"
+		u.Path = ""
+	}
+}
+
+func newHTTPClient(
+	u *url.URL,
+	tlsConfig *tls.Config,
+	timeout time.Duration,
+	responseTimeout time.Duration,
+) *http.Client {
+	httpTransport := &http.Transport{
+		TLSClientConfig: tlsConfig,
+	}
+
+	switch u.Scheme {
+	case "unix":
+		socketPath := u.Path
+		unixDial := func(proto, addr string) (net.Conn, error) {
+			ret, err := net.DialTimeout("unix", socketPath, timeout)
+			return ret, err
+		}
+		httpTransport.Dial = unixDial
+		unix2HTTP(u)
+	default:
+		httpTransport.Dial = func(proto, addr string) (net.Conn, error) {
+			return net.DialTimeout(proto, addr, timeout)
+		}
+	}
+
+	return &http.Client{Transport: httpTransport, Timeout: responseTimeout}
+}
+
+func getHTTPClient(host string) *http.Client {
+	cacheLock.Lock()
+	defer cacheLock.Unlock()
+	c, ok := httpCache[host]
+	if !ok {
+		u, err := url.Parse(host)
+		if err != nil {
+			return nil
+		}
+		if u.Path == "" {
+			u.Path = "/"
+		}
+		c = newHTTPClient(u, nil, 10*time.Second, 5*time.Minute)
+		httpCache[host] = c
+	}
+
+	return c
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/api/client/request.go b/vendor/github.com/libopenstorage/openstorage/api/client/request.go
new file mode 100644
index 000000000..cc212ee6c
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/api/client/request.go
@@ -0,0 +1,355 @@
+package client
+
+import (
+	"bytes"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"io/ioutil"
+	"math/rand"
+	"net/http"
+	"net/url"
+	"path"
+	"strconv"
+	"strings"
+	"time"
+
+	"github.com/libopenstorage/openstorage/pkg/auth"
+)
+
+const (
+	maxRetryDuration = 5 * time.Minute
+)
+
+// Request is contructed iteratively by the client and finally dispatched.
+// A REST endpoint is accessed with the following convention:
+// base_url/<version>/<resource>/[<instance>]
+type Request struct {
+	client      *http.Client
+	version     string
+	verb        string
+	path        string
+	base        *url.URL
+	params      url.Values
+	headers     http.Header
+	resource    string
+	instance    string
+	err         error
+	body        []byte
+	req         *http.Request
+	resp        *http.Response
+	timeout     time.Duration
+	authstring  string
+	accesstoken string
+}
+
+// Response is a representation of HTTP response received from the server.
+type Response struct {
+	status     string
+	statusCode int
+	err        error
+	body       []byte
+}
+
+// Status upon error, attempts to parse the body of a response into a meaningful status.
+type Status struct {
+	Message   string
+	ErrorCode int
+}
+
+// NewRequest instance
+func NewRequest(client *http.Client, base *url.URL, verb string, version string, authstring, userAgent string) *Request {
+	r := &Request{
+		client:     client,
+		verb:       verb,
+		base:       base,
+		path:       base.Path,
+		version:    version,
+		authstring: authstring,
+	}
+	r.SetHeader("User-Agent", userAgent)
+	return r
+}
+
+func checkExists(mustExist string, before string) error {
+	if len(mustExist) == 0 {
+		return fmt.Errorf("%q should be set before setting %q", mustExist, before)
+	}
+	return nil
+}
+
+func checkSet(name string, s *string, newval string) error {
+	if len(*s) != 0 {
+		return fmt.Errorf("%q already set to %q, cannot change to %q",
+			name, *s, newval)
+	}
+	*s = newval
+	return nil
+}
+
+// Resource specifies the resource to be accessed.
+func (r *Request) Resource(resource string) *Request {
+	if r.err == nil {
+		r.err = checkSet("resource", &r.resource, resource)
+	}
+	return r
+}
+
+// Instance specifies the instance of the resource to be accessed.
+func (r *Request) Instance(instance string) *Request {
+	if r.err == nil {
+		r.err = checkExists("resource", "instance")
+		if r.err == nil {
+			r.err = checkSet("instance", &r.instance, instance)
+		}
+	}
+	return r
+}
+
+// UsePath use the specified path and don't build up a request.
+func (r *Request) UsePath(path string) *Request {
+	if r.err == nil {
+		r.err = checkSet("path", &r.path, path)
+	}
+	return r
+}
+
+// QueryOption adds specified options to query.
+func (r *Request) QueryOption(key string, value string) *Request {
+	if r.err != nil {
+		return r
+	}
+	if r.params == nil {
+		r.params = make(url.Values)
+	}
+	r.params.Add(string(key), value)
+	return r
+}
+
+// QueryOptionLabel adds specified label to query.
+func (r *Request) QueryOptionLabel(key string, labels map[string]string) *Request {
+	if r.err != nil {
+		return r
+	}
+	if b, err := json.Marshal(labels); err != nil {
+		r.err = err
+	} else {
+		if r.params == nil {
+			r.params = make(url.Values)
+		}
+		r.params.Add(string(key), string(b))
+	}
+	return r
+}
+
+// SetHeader adds specified header values to query.
+func (r *Request) SetHeader(key, value string) *Request {
+	if r.headers == nil {
+		r.headers = http.Header{}
+	}
+	r.headers.Set(key, value)
+	return r
+}
+
+// Timeout makes the request use the given duration as a timeout. Sets the "timeout"
+// parameter.
+func (r *Request) Timeout(d time.Duration) *Request {
+	if r.err != nil {
+		return r
+	}
+	r.timeout = d
+	return r
+}
+
+// Body sets the request Body.
+func (r *Request) Body(v interface{}) *Request {
+	var err error
+	if r.err != nil {
+		return r
+	}
+	r.body, err = json.Marshal(v)
+	if err != nil {
+		r.err = err
+		return r
+	}
+	return r
+}
+
+// URL returns the current working URL.
+func (r *Request) URL() *url.URL {
+	u := *r.base
+	p := r.path
+
+	if len(r.version) != 0 {
+		p = path.Join(p, strings.ToLower(r.version))
+	}
+	if len(r.resource) != 0 {
+		p = path.Join(p, r.resource)
+		if len(r.instance) != 0 {
+			p = path.Join(p, r.instance)
+		}
+	}
+
+	u.Path = p
+
+	query := url.Values{}
+	for key, values := range r.params {
+		for _, value := range values {
+			query.Add(key, value)
+		}
+	}
+	if r.timeout != 0 {
+		query.Set("timeout", r.timeout.String())
+	}
+	u.RawQuery = query.Encode()
+	return &u
+}
+
+// headerVal for key as an int. Return false if header is not present or valid.
+func headerVal(key string, resp *http.Response) (int, bool) {
+	if h := resp.Header.Get(key); len(h) > 0 {
+		if i, err := strconv.Atoi(h); err == nil {
+			return i, true
+		}
+	}
+	return 0, false
+}
+
+func parseHTTPStatus(resp *http.Response, body []byte) error {
+	if resp.StatusCode >= http.StatusOK &&
+		resp.StatusCode <= http.StatusPartialContent {
+		// Status is good and HTTP status is good, everything is good
+		return nil
+	}
+
+	// Get error from body if any
+	if len(string(body)) != 0 {
+		return errors.New(string(body))
+	}
+
+	// If no error was in the body, return a generic one
+	return fmt.Errorf("HTTP error %d", resp.StatusCode)
+}
+
+// Do executes the request and returns a Response.
+func (r *Request) Do() *Response {
+	var (
+		err  error
+		req  *http.Request
+		resp *http.Response
+		url  string
+		body []byte
+	)
+
+	if r.err != nil {
+		return &Response{err: r.err}
+	}
+	url = r.URL().String()
+	req, err = http.NewRequest(r.verb, url, bytes.NewBuffer(r.body))
+	if err != nil {
+		return &Response{err: err}
+	}
+	if r.headers == nil {
+		r.headers = http.Header{}
+	}
+
+	req.Header = r.headers
+	req.Header.Set("Content-Type", "application/json")
+	req.Header.Set("Date", time.Now().String())
+
+	if len(r.authstring) > 0 {
+		if auth.IsJwtToken(r.authstring) {
+			req.Header.Set("Authorization", "bearer "+r.authstring)
+		} else {
+			req.Header.Set("Authorization", "Basic "+r.authstring)
+		}
+	}
+
+	if len(r.accesstoken) > 0 {
+		req.Header.Set("Access-Token", r.accesstoken)
+	}
+
+	start := time.Now()
+	attemptNum := 0
+	for {
+		if resp, err = r.client.Do(req); err != nil {
+			return &Response{err: err}
+		}
+
+		if time.Since(start) >= maxRetryDuration ||
+			resp.StatusCode != http.StatusServiceUnavailable {
+			break
+		}
+		attemptNum++
+		handleServiceUnavailable(resp, attemptNum)
+	}
+
+	if resp.Body != nil {
+		defer resp.Body.Close()
+		if body, err = ioutil.ReadAll(resp.Body); err != nil {
+			return &Response{err: err}
+		}
+	}
+
+	return &Response{
+		status:     resp.Status,
+		statusCode: resp.StatusCode,
+		body:       body,
+		err:        parseHTTPStatus(resp, body),
+	}
+}
+
+func handleServiceUnavailable(resp *http.Response, attemptNum int) {
+	var duration = time.Duration(1 * time.Second)
+	if len(resp.Header["Retry-After"]) > 0 {
+		if retryafter, err := strconv.Atoi(resp.Header["Retry-After"][0]); err == nil {
+			duration = time.Duration(retryafter*attemptNum) * time.Second
+		}
+	}
+	// Close body so go-routines can spin down.
+	resp.Body.Close()
+
+	time.Sleep(duration)
+}
+
+// Body return http body, valid only if there is no error
+func (r Response) Body() ([]byte, error) {
+	return r.body, r.err
+}
+
+// StatusCode HTTP status code returned.
+func (r Response) StatusCode() int {
+	return r.statusCode
+}
+
+// Unmarshal result into obj
+func (r Response) Unmarshal(v interface{}) error {
+	if r.err != nil {
+		return r.err
+	}
+	return json.Unmarshal(r.body, v)
+}
+
+// Error executing the request.
+func (r Response) Error() error {
+	return r.err
+}
+
+// FormatError formats the error
+func (r Response) FormatError() error {
+	if len(r.body) == 0 {
+		return fmt.Errorf("Error: %v", r.err)
+	}
+	return fmt.Errorf("%v", strings.TrimSpace(string(r.body)))
+}
+
+func digest(method string, path string) string {
+	now := time.Now().String()
+
+	s1 := rand.NewSource(time.Now().UnixNano())
+	r1 := rand.New(s1)
+
+	nonce := r1.Intn(10)
+
+	return method + "+" + path + "+" + now + "+" + strconv.Itoa(nonce)
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/api/client/volume/client.go b/vendor/github.com/libopenstorage/openstorage/api/client/volume/client.go
new file mode 100644
index 000000000..1c9653a30
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/api/client/volume/client.go
@@ -0,0 +1,819 @@
+package volume
+
+import (
+	"bytes"
+	"errors"
+	"fmt"
+	"io"
+	"io/ioutil"
+	"net/http"
+	"strconv"
+
+	"github.com/libopenstorage/openstorage/api"
+	"github.com/libopenstorage/openstorage/api/client"
+	ost_errors "github.com/libopenstorage/openstorage/api/errors"
+	"github.com/libopenstorage/openstorage/volume"
+)
+
+const (
+	graphPath  = "/graph"
+	volumePath = "/osd-volumes"
+	snapPath   = "/osd-snapshot"
+)
+
+type volumeClient struct {
+	volume.IODriver
+	c *client.Client
+}
+
+func newVolumeClient(c *client.Client) volume.VolumeDriver {
+	return &volumeClient{volume.IONotSupported, c}
+}
+
+// String description of this driver.
+func (v *volumeClient) Name() string {
+	return "VolumeDriver"
+}
+
+func (v *volumeClient) Type() api.DriverType {
+	// Block drivers implement the superset.
+	return api.DriverType_DRIVER_TYPE_BLOCK
+}
+
+func (v *volumeClient) Version() (*api.StorageVersion, error) {
+	return nil, volume.ErrNotSupported
+}
+
+func (v *volumeClient) GraphDriverCreate(id string, parent string) error {
+	response := ""
+	if err := v.c.Put().Resource(graphPath + "/create").Instance(id).Do().Unmarshal(&response); err != nil {
+		return err
+	}
+	if response != id {
+		return fmt.Errorf("Invalid response: %s", response)
+	}
+	return nil
+}
+
+func (v *volumeClient) GraphDriverRemove(id string) error {
+	response := ""
+	if err := v.c.Put().Resource(graphPath + "/remove").Instance(id).Do().Unmarshal(&response); err != nil {
+		return err
+	}
+	if response != id {
+		return fmt.Errorf("Invalid response: %s", response)
+	}
+	return nil
+}
+
+func (v *volumeClient) GraphDriverGet(id string, mountLabel string) (string, error) {
+	response := ""
+	if err := v.c.Get().Resource(graphPath + "/inspect").Instance(id).Do().Unmarshal(&response); err != nil {
+		return "", err
+	}
+	return response, nil
+}
+
+func (v *volumeClient) GraphDriverRelease(id string) error {
+	response := ""
+	if err := v.c.Put().Resource(graphPath + "/release").Instance(id).Do().Unmarshal(&response); err != nil {
+		return err
+	}
+	if response != id {
+		return fmt.Errorf("Invalid response: %v", response)
+	}
+	return nil
+}
+
+func (v *volumeClient) GraphDriverExists(id string) bool {
+	response := false
+	v.c.Get().Resource(graphPath + "/exists").Instance(id).Do().Unmarshal(&response)
+	return response
+}
+
+func (v *volumeClient) GraphDriverDiff(id string, parent string) io.Writer {
+	body, _ := v.c.Get().Resource(graphPath + "/diff?id=" + id + "&parent=" + parent).Do().Body()
+	return bytes.NewBuffer(body)
+}
+
+func (v *volumeClient) GraphDriverChanges(id string, parent string) ([]api.GraphDriverChanges, error) {
+	var changes []api.GraphDriverChanges
+	err := v.c.Get().Resource(graphPath + "/changes").Instance(id).Do().Unmarshal(&changes)
+	return changes, err
+}
+
+func (v *volumeClient) GraphDriverApplyDiff(id string, parent string, diff io.Reader) (int, error) {
+	b, err := ioutil.ReadAll(diff)
+	if err != nil {
+		return 0, err
+	}
+	response := 0
+	if err = v.c.Put().Resource(graphPath + "/diff?id=" + id + "&parent=" + parent).Instance(id).Body(b).Do().Unmarshal(&response); err != nil {
+		return 0, err
+	}
+	return response, nil
+}
+
+func (v *volumeClient) GraphDriverDiffSize(id string, parent string) (int, error) {
+	size := 0
+	err := v.c.Get().Resource(graphPath + "/diffsize").Instance(id).Do().Unmarshal(&size)
+	return size, err
+}
+
+// Create a new Vol for the specific volume spev.c.
+// It returns a system generated VolumeID that uniquely identifies the volume
+func (v *volumeClient) Create(locator *api.VolumeLocator, source *api.Source,
+	spec *api.VolumeSpec) (string, error) {
+	response := &api.VolumeCreateResponse{}
+	request := &api.VolumeCreateRequest{
+		Locator: locator,
+		Source:  source,
+		Spec:    spec,
+	}
+	if err := v.c.Post().Resource(volumePath).Body(request).Do().Unmarshal(response); err != nil {
+		return "", err
+	}
+	if response.VolumeResponse != nil && response.VolumeResponse.Error != "" {
+		return "", errors.New(response.VolumeResponse.Error)
+	}
+	return response.Id, nil
+}
+
+// Status diagnostic information
+func (v *volumeClient) Status() [][2]string {
+	return [][2]string{}
+}
+
+// Inspect specified volumes.
+// Errors ErrEnoEnt may be returned.
+func (v *volumeClient) Inspect(ids []string) ([]*api.Volume, error) {
+	if len(ids) == 0 {
+		return nil, nil
+	}
+	var volumes []*api.Volume
+	request := v.c.Get().Resource(volumePath)
+	for _, id := range ids {
+		request.QueryOption(api.OptVolumeID, id)
+	}
+	if err := request.Do().Unmarshal(&volumes); err != nil {
+		return nil, err
+	}
+	return volumes, nil
+}
+
+// Delete volume.
+// Errors ErrEnoEnt, ErrVolHasSnaps may be returned.
+func (v *volumeClient) Delete(volumeID string) error {
+	response := &api.VolumeResponse{}
+	if err := v.c.Delete().Resource(volumePath).Instance(volumeID).Do().Unmarshal(response); err != nil {
+		return err
+	}
+	if response.Error != "" {
+		return errors.New(response.Error)
+	}
+	return nil
+}
+
+// Snap specified volume. IO to the underlying volume should be quiesced before
+// calling this function.
+// Errors ErrEnoEnt may be returned
+func (v *volumeClient) Snapshot(volumeID string,
+	readonly bool,
+	locator *api.VolumeLocator,
+	noRetry bool,
+) (string, error) {
+	response := &api.SnapCreateResponse{}
+	request := &api.SnapCreateRequest{
+		Id:       volumeID,
+		Readonly: readonly,
+		Locator:  locator,
+		NoRetry:  noRetry,
+	}
+	if err := v.c.Post().Resource(snapPath).Body(request).Do().Unmarshal(response); err != nil {
+		return "", err
+	}
+
+	// TODO(pedge): this probably should not be embedded in this way
+	if response.VolumeCreateResponse != nil &&
+		response.VolumeCreateResponse.VolumeResponse != nil &&
+		response.VolumeCreateResponse.VolumeResponse.Error != "" {
+		return "", errors.New(
+			response.VolumeCreateResponse.VolumeResponse.Error)
+	}
+	if response.VolumeCreateResponse != nil {
+		return response.VolumeCreateResponse.Id, nil
+	}
+	return "", nil
+}
+
+// Restore specified volume to given snapshot state
+func (v *volumeClient) Restore(volumeID string, snapID string) error {
+	response := &api.VolumeResponse{}
+	req := v.c.Post().Resource(snapPath + "/restore").Instance(volumeID)
+	req.QueryOption(api.OptSnapID, snapID)
+
+	if err := req.Do().Unmarshal(response); err != nil {
+		return err
+	}
+	if response.Error != "" {
+		return errors.New(response.Error)
+	}
+	return nil
+}
+
+// Stats for specified volume.
+// Errors ErrEnoEnt may be returned
+func (v *volumeClient) Stats(
+	volumeID string,
+	cumulative bool,
+) (*api.Stats, error) {
+	stats := &api.Stats{}
+	req := v.c.Get().Resource(volumePath + "/stats").Instance(volumeID)
+	req.QueryOption(api.OptCumulative, strconv.FormatBool(cumulative))
+
+	err := req.Do().Unmarshal(stats)
+	return stats, err
+
+}
+
+// UsedSize returns allocated volume size.
+// Errors ErrEnoEnt may be returned
+func (v *volumeClient) UsedSize(
+	volumeID string,
+) (uint64, error) {
+	var usedSize uint64
+	req := v.c.Get().Resource(volumePath + "/usedsize").Instance(volumeID)
+	err := req.Do().Unmarshal(&usedSize)
+	return usedSize, err
+}
+
+// Active Requests on all volume.
+func (v *volumeClient) GetActiveRequests() (*api.ActiveRequests, error) {
+
+	requests := &api.ActiveRequests{}
+	resp := v.c.Get().Resource(volumePath + "/requests").Instance("vol_id").Do()
+
+	if resp.Error() != nil {
+		return nil, resp.FormatError()
+	}
+
+	if err := resp.Unmarshal(requests); err != nil {
+		return nil, err
+	}
+
+	return requests, nil
+}
+
+// CapacityUsage returns exclusive and shared capacity
+// usage of a snapshot/volume
+func (v *volumeClient) CapacityUsage(
+	ID string,
+) (*api.CapacityUsageResponse, error) {
+	requests := &api.CapacityUsageResponse{}
+	resp := v.c.Get().Resource(volumePath + "/usage").Instance(ID).Do()
+
+	if resp.Error() != nil {
+		return nil, resp.FormatError()
+	}
+
+	if err := resp.Unmarshal(requests); err != nil {
+		return nil, err
+	}
+
+	return requests, nil
+}
+
+// Shutdown and cleanup.
+func (v *volumeClient) Shutdown() {}
+
+// Enumerate volumes that map to the volumeLocator. Locator fields may be regexp.
+// If locator fields are left blank, this will return all volumes.
+func (v *volumeClient) Enumerate(locator *api.VolumeLocator,
+	labels map[string]string) ([]*api.Volume, error) {
+	var volumes []*api.Volume
+	req := v.c.Get().Resource(volumePath)
+	if locator.Name != "" {
+		req.QueryOption(api.OptName, locator.Name)
+	}
+	if len(locator.VolumeLabels) != 0 {
+		req.QueryOptionLabel(api.OptLabel, locator.VolumeLabels)
+	}
+	if len(labels) != 0 {
+		req.QueryOptionLabel(api.OptConfigLabel, labels)
+	}
+	resp := req.Do()
+	if resp.Error() != nil {
+		return nil, resp.FormatError()
+	}
+	if err := resp.Unmarshal(&volumes); err != nil {
+		return nil, err
+	}
+
+	return volumes, nil
+}
+
+// Enumerate snaps for specified volume
+// Count indicates the number of snaps populated.
+func (v *volumeClient) SnapEnumerate(ids []string,
+	snapLabels map[string]string) ([]*api.Volume, error) {
+	var volumes []*api.Volume
+	request := v.c.Get().Resource(snapPath)
+	for _, id := range ids {
+		request.QueryOption(api.OptVolumeID, id)
+	}
+	if len(snapLabels) != 0 {
+		request.QueryOptionLabel(api.OptLabel, snapLabels)
+	}
+	if err := request.Do().Unmarshal(&volumes); err != nil {
+		return nil, err
+	}
+	return volumes, nil
+}
+
+// Attach map device to the host.
+// On success the devicePath specifies location where the device is exported
+// Errors ErrEnoEnt, ErrVolAttached may be returned.
+func (v *volumeClient) Attach(volumeID string, attachOptions map[string]string) (string, error) {
+	response, err := v.doVolumeSetGetResponse(
+		volumeID,
+		&api.VolumeSetRequest{
+			Action: &api.VolumeStateAction{
+				Attach: api.VolumeActionParam_VOLUME_ACTION_PARAM_ON,
+			},
+			Options: attachOptions,
+		},
+	)
+	if err != nil {
+		return "", err
+	}
+	if response.Volume != nil {
+		if response.Volume.Spec.Encrypted {
+			return response.Volume.SecureDevicePath, nil
+		} else {
+			return response.Volume.DevicePath, nil
+		}
+	}
+	return "", nil
+}
+
+// Detach device from the host.
+// Errors ErrEnoEnt, ErrVolDetached may be returned.
+func (v *volumeClient) Detach(volumeID string, options map[string]string) error {
+	return v.doVolumeSet(
+		volumeID,
+		&api.VolumeSetRequest{
+			Action: &api.VolumeStateAction{
+				Attach: api.VolumeActionParam_VOLUME_ACTION_PARAM_OFF,
+			},
+			Options: options,
+		},
+	)
+}
+
+func (v *volumeClient) MountedAt(mountPath string) string {
+	return ""
+}
+
+// Mount volume at specified path
+// Errors ErrEnoEnt, ErrVolDetached may be returned.
+func (v *volumeClient) Mount(volumeID string, mountPath string, options map[string]string) error {
+	return v.doVolumeSet(
+		volumeID,
+		&api.VolumeSetRequest{
+			Action: &api.VolumeStateAction{
+				Mount:     api.VolumeActionParam_VOLUME_ACTION_PARAM_ON,
+				MountPath: mountPath,
+			},
+			Options: options,
+		},
+	)
+}
+
+// Unmount volume at specified path
+// Errors ErrEnoEnt, ErrVolDetached may be returned.
+func (v *volumeClient) Unmount(volumeID string, mountPath string, options map[string]string) error {
+	return v.doVolumeSet(
+		volumeID,
+		&api.VolumeSetRequest{
+			Action: &api.VolumeStateAction{
+				Mount:     api.VolumeActionParam_VOLUME_ACTION_PARAM_OFF,
+				MountPath: mountPath,
+			},
+			Options: options,
+		},
+	)
+}
+
+// Update volume
+func (v *volumeClient) Set(volumeID string, locator *api.VolumeLocator,
+	spec *api.VolumeSpec) error {
+	return v.doVolumeSet(
+		volumeID,
+		&api.VolumeSetRequest{
+			Locator: locator,
+			Spec:    spec,
+		},
+	)
+}
+
+func (v *volumeClient) doVolumeSet(volumeID string,
+	request *api.VolumeSetRequest) error {
+	_, err := v.doVolumeSetGetResponse(volumeID, request)
+	return err
+}
+
+func (v *volumeClient) doVolumeSetGetResponse(volumeID string,
+	request *api.VolumeSetRequest) (*api.VolumeSetResponse, error) {
+	response := &api.VolumeSetResponse{}
+	if err := v.c.Put().Resource(volumePath).Instance(volumeID).Body(request).Do().Unmarshal(response); err != nil {
+		return nil, err
+	}
+	if response.VolumeResponse != nil && response.VolumeResponse.Error != "" {
+		return nil, errors.New(response.VolumeResponse.Error)
+	}
+	return response, nil
+}
+
+// Quiesce quiesces volume i/o
+func (v *volumeClient) Quiesce(
+	volumeID string,
+	timeoutSec uint64,
+	quiesceID string,
+) error {
+	response := &api.VolumeResponse{}
+	req := v.c.Post().Resource(volumePath + "/quiesce").Instance(volumeID)
+	req.QueryOption(api.OptTimeoutSec, strconv.FormatUint(timeoutSec, 10))
+	req.QueryOption(api.OptQuiesceID, quiesceID)
+	if err := req.Do().Unmarshal(response); err != nil {
+		return err
+	}
+	if response.Error != "" {
+		return errors.New(response.Error)
+	}
+	return nil
+}
+
+// Unquiesce un-quiesces volume i/o
+func (v *volumeClient) Unquiesce(volumeID string) error {
+	response := &api.VolumeResponse{}
+	req := v.c.Post().Resource(volumePath + "/unquiesce").Instance(volumeID)
+	if err := req.Do().Unmarshal(response); err != nil {
+		return err
+	}
+	if response.Error != "" {
+		return errors.New(response.Error)
+	}
+	return nil
+}
+
+// CredsEnumerate enumerates configured credentials in the cluster
+func (v *volumeClient) CredsEnumerate() (map[string]interface{}, error) {
+	creds := make(map[string]interface{}, 0)
+	err := v.c.Get().Resource(api.OsdCredsPath).Do().Unmarshal(&creds)
+	return creds, err
+}
+
+// CredsCreate creates credentials for a given cloud provider
+func (v *volumeClient) CredsCreate(params map[string]string) (string, error) {
+	createResponse := api.CredCreateResponse{}
+	request := &api.CredCreateRequest{
+		InputParams: params,
+	}
+	req := v.c.Post().Resource(api.OsdCredsPath).Body(request)
+	response := req.Do()
+	if response.Error() != nil {
+		return "", response.FormatError()
+	}
+	if err := response.Unmarshal(&createResponse); err != nil {
+		return "", err
+	}
+	return createResponse.UUID, nil
+}
+
+// CredsDelete deletes the credential with given UUID
+func (v *volumeClient) CredsDelete(uuid string) error {
+	req := v.c.Delete().Resource(api.OsdCredsPath).Instance(uuid)
+	response := req.Do()
+	if response.Error() != nil {
+		return response.FormatError()
+	}
+	return nil
+}
+
+// CredsValidate validates the credential by accessuing the cloud
+// provider with the given credential
+func (v *volumeClient) CredsValidate(uuid string) error {
+	req := v.c.Put().Resource(api.OsdCredsPath + "/validate").Instance(uuid)
+	response := req.Do()
+	if response.Error() != nil {
+		if response.StatusCode() == http.StatusUnprocessableEntity {
+			return volume.NewCredentialError(response.Error().Error())
+		}
+		return response.FormatError()
+	}
+	return nil
+}
+
+// CloudBackupCreate uploads snapshot of a volume to cloud
+func (v *volumeClient) CloudBackupCreate(
+	input *api.CloudBackupCreateRequest,
+) (*api.CloudBackupCreateResponse, error) {
+	createResp := &api.CloudBackupCreateResponse{}
+	req := v.c.Post().Resource(api.OsdBackupPath).Body(input)
+	response := req.Do()
+	if response.Error() != nil {
+		if response.StatusCode() == http.StatusConflict {
+			return nil, &ost_errors.ErrExists{
+				Type: "CloudBackupCreate",
+				ID:   input.Name,
+			}
+		}
+		return nil, response.FormatError()
+	}
+	if err := response.Unmarshal(&createResp); err != nil {
+		return nil, err
+	}
+	return createResp, nil
+}
+
+// CloudBackupGroupCreate uploads snapshots of a volume group to cloud
+func (v *volumeClient) CloudBackupGroupCreate(
+	input *api.CloudBackupGroupCreateRequest,
+) (*api.CloudBackupGroupCreateResponse, error) {
+
+	createResp := &api.CloudBackupGroupCreateResponse{}
+	req := v.c.Post().Resource(api.OsdBackupPath + "/group").Body(input)
+	response := req.Do()
+	if response.Error() != nil {
+		return nil, response.FormatError()
+	}
+
+	if err := response.Unmarshal(&createResp); err != nil {
+		return nil, err
+	}
+
+	return createResp, nil
+}
+
+// CloudBackupRestore downloads a cloud backup to a newly created volume
+func (v *volumeClient) CloudBackupRestore(
+	input *api.CloudBackupRestoreRequest,
+) (*api.CloudBackupRestoreResponse, error) {
+	restoreResponse := &api.CloudBackupRestoreResponse{}
+	req := v.c.Post().Resource(api.OsdBackupPath + "/restore").Body(input)
+	response := req.Do()
+	if response.Error() != nil {
+		if response.StatusCode() == http.StatusConflict {
+			return nil, &ost_errors.ErrExists{
+				Type: "CloudBackupRestore",
+				ID:   input.Name,
+			}
+		}
+		return nil, response.FormatError()
+	}
+
+	if err := response.Unmarshal(&restoreResponse); err != nil {
+		return nil, err
+	}
+	return restoreResponse, nil
+}
+
+// CloudBackupEnumerate lists the backups for a given cluster/credential/volumeID
+func (v *volumeClient) CloudBackupEnumerate(
+	input *api.CloudBackupEnumerateRequest,
+) (*api.CloudBackupEnumerateResponse, error) {
+	enumerateResponse := &api.CloudBackupEnumerateResponse{}
+	req := v.c.Get().Resource(api.OsdBackupPath).Body(input)
+	response := req.Do()
+	if response.Error() != nil {
+		return nil, response.FormatError()
+	}
+
+	if err := response.Unmarshal(&enumerateResponse); err != nil {
+		return nil, err
+	}
+	return enumerateResponse, nil
+}
+
+// CloudBackupDelete deletes the backups in cloud
+func (v *volumeClient) CloudBackupDelete(
+	input *api.CloudBackupDeleteRequest,
+) error {
+	req := v.c.Delete().Resource(api.OsdBackupPath).Body(input)
+	response := req.Do()
+	if response.Error() != nil {
+		return response.FormatError()
+	}
+	return nil
+}
+
+// CloudBackupDeleteAll deletes all the backups for a volume in cloud
+func (v *volumeClient) CloudBackupDeleteAll(
+	input *api.CloudBackupDeleteAllRequest,
+) error {
+	req := v.c.Delete().Resource(api.OsdBackupPath + "/all").Body(input)
+	response := req.Do()
+	if response.Error() != nil {
+		return response.FormatError()
+	}
+	return nil
+}
+
+// CloudBackupStatus gets the most recent status of backup/restores
+func (v *volumeClient) CloudBackupStatus(
+	input *api.CloudBackupStatusRequest,
+) (*api.CloudBackupStatusResponse, error) {
+	statusResponse := &api.CloudBackupStatusResponse{}
+	req := v.c.Get().Resource(api.OsdBackupPath + "/status").Body(input)
+	response := req.Do()
+	if response.Error() != nil {
+		return nil, response.FormatError()
+	}
+
+	if err := response.Unmarshal(&statusResponse); err != nil {
+		return nil, err
+	}
+	return statusResponse, nil
+}
+
+// CloudBackupCatalog displays listing of backup content
+func (v *volumeClient) CloudBackupCatalog(
+	input *api.CloudBackupCatalogRequest,
+) (*api.CloudBackupCatalogResponse, error) {
+	catalogResponse := &api.CloudBackupCatalogResponse{}
+	req := v.c.Get().Resource(api.OsdBackupPath + "/catalog").Body(input)
+	response := req.Do()
+	if response.Error() != nil {
+		return nil, response.FormatError()
+	}
+
+	if err := response.Unmarshal(&catalogResponse); err != nil {
+		return nil, err
+	}
+	return catalogResponse, nil
+}
+
+// CloudBackupHistory displays past backup/restore operations in the cluster
+func (v *volumeClient) CloudBackupHistory(
+	input *api.CloudBackupHistoryRequest,
+) (*api.CloudBackupHistoryResponse, error) {
+	historyResponse := &api.CloudBackupHistoryResponse{}
+	req := v.c.Get().Resource(api.OsdBackupPath + "/history").Body(input)
+	response := req.Do()
+	if response.Error() != nil {
+		return nil, response.FormatError()
+	}
+
+	if err := response.Unmarshal(&historyResponse); err != nil {
+		return nil, err
+	}
+	return historyResponse, nil
+}
+
+// CloudBackupState allows a current backup
+// state transisions(pause/resume/stop)
+func (v *volumeClient) CloudBackupStateChange(
+	input *api.CloudBackupStateChangeRequest,
+) error {
+	req := v.c.Put().Resource(api.OsdBackupPath + "/statechange").Body(input)
+	response := req.Do()
+	if response.Error() != nil {
+		return response.FormatError()
+	}
+	return nil
+}
+
+// CloudBackupSchedCreate for a volume creates a schedule to backup volume to cloud
+func (v *volumeClient) CloudBackupSchedCreate(
+	input *api.CloudBackupSchedCreateRequest,
+) (*api.CloudBackupSchedCreateResponse, error) {
+	createResponse := &api.CloudBackupSchedCreateResponse{}
+	req := v.c.Post().Resource(api.OsdBackupPath + "/sched").Body(input)
+	response := req.Do()
+	if response.Error() != nil {
+		return nil, response.FormatError()
+	}
+
+	if err := response.Unmarshal(&createResponse); err != nil {
+		return nil, err
+	}
+	return createResponse, nil
+}
+
+// CloudBackupGroupSchedCreate for a volume group creates a schedule to backup
+// volume group to the cloud
+func (v *volumeClient) CloudBackupGroupSchedCreate(
+	input *api.CloudBackupGroupSchedCreateRequest,
+) (*api.CloudBackupSchedCreateResponse, error) {
+	createResponse := &api.CloudBackupSchedCreateResponse{}
+	req := v.c.Post().Resource(api.OsdBackupPath + "/schedgroup").Body(input)
+	response := req.Do()
+	if response.Error() != nil {
+		return nil, response.FormatError()
+	}
+
+	if err := response.Unmarshal(&createResponse); err != nil {
+		return nil, err
+	}
+	return createResponse, nil
+}
+
+// CloudBackupSchedDelete delete a volume's cloud backup-schedule
+func (v *volumeClient) CloudBackupSchedDelete(
+	input *api.CloudBackupSchedDeleteRequest,
+) error {
+	req := v.c.Delete().Resource(api.OsdBackupPath + "/sched").Body(input)
+	response := req.Do()
+	if response.Error() != nil {
+		return response.FormatError()
+	}
+	return nil
+}
+
+// CloudBackupSchedEnumerate enumerates the configured backup-schedules in the cluster
+func (v *volumeClient) CloudBackupSchedEnumerate() (*api.CloudBackupSchedEnumerateResponse, error) {
+	enumerateResponse := &api.CloudBackupSchedEnumerateResponse{}
+	req := v.c.Get().Resource(api.OsdBackupPath + "/sched")
+	response := req.Do()
+	if response.Error() != nil {
+		return nil, response.FormatError()
+	}
+	if err := response.Unmarshal(enumerateResponse); err != nil {
+		return nil, err
+	}
+	return enumerateResponse, nil
+}
+
+func (v *volumeClient) SnapshotGroup(groupID string, labels map[string]string, volumeIDs []string) (*api.GroupSnapCreateResponse, error) {
+
+	response := &api.GroupSnapCreateResponse{}
+	request := &api.GroupSnapCreateRequest{
+		Id:        groupID,
+		Labels:    labels,
+		VolumeIds: volumeIDs,
+	}
+
+	req := v.c.Post().Resource(snapPath + "/snapshotgroup").Body(request)
+	res := req.Do()
+	if res.Error() != nil {
+		return nil, res.FormatError()
+	}
+
+	if err := res.Unmarshal(&response); err != nil {
+		return nil, err
+	}
+	return response, nil
+}
+
+func (v *volumeClient) CloudMigrateStart(request *api.CloudMigrateStartRequest) (*api.CloudMigrateStartResponse, error) {
+	startResponse := &api.CloudMigrateStartResponse{}
+	req := v.c.Post().Resource(api.OsdMigrateStartPath).Body(request)
+	response := req.Do()
+	if response.Error() != nil {
+		if response.StatusCode() == http.StatusConflict {
+			return nil, &ost_errors.ErrExists{
+				Type: "CloudMigrate",
+				ID:   request.TaskId,
+			}
+		}
+		return nil, response.FormatError()
+	}
+	if err := response.Unmarshal(startResponse); err != nil {
+		return nil, err
+	}
+	return startResponse, nil
+}
+
+func (v *volumeClient) CloudMigrateCancel(request *api.CloudMigrateCancelRequest) error {
+	req := v.c.Post().Resource(api.OsdMigrateCancelPath).Body(request)
+	response := req.Do()
+	if response.Error() != nil {
+		return response.FormatError()
+	}
+	return nil
+}
+
+func (v *volumeClient) CloudMigrateStatus(request *api.CloudMigrateStatusRequest) (*api.CloudMigrateStatusResponse, error) {
+	statusResponse := &api.CloudMigrateStatusResponse{}
+	req := v.c.Get().Resource(api.OsdMigrateStatusPath).Body(request)
+	response := req.Do()
+	if response.Error() != nil {
+		return nil, response.FormatError()
+	}
+	if err := response.Unmarshal(statusResponse); err != nil {
+		return nil, err
+	}
+	return statusResponse, nil
+}
+
+// Du specified volume id and specifically path (if provided)
+func (v *volumeClient) Catalog(id, subfolder, maxDepth string) (api.CatalogResponse, error) {
+	var catalog api.CatalogResponse
+
+	req := v.c.Get().Resource(volumePath + "/catalog").Instance(id)
+	if err := req.QueryOption(api.OptCatalogSubFolder, subfolder).QueryOption(api.OptCatalogMaxDepth, maxDepth).Do().Unmarshal(&catalog); err != nil {
+		return catalog, err
+	}
+
+	return catalog, nil
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/api/client/volume/volume.go b/vendor/github.com/libopenstorage/openstorage/api/client/volume/volume.go
new file mode 100644
index 000000000..d86fc6264
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/api/client/volume/volume.go
@@ -0,0 +1,97 @@
+package volume
+
+import (
+	"crypto/tls"
+	"fmt"
+
+	"github.com/libopenstorage/openstorage/api"
+	"github.com/libopenstorage/openstorage/api/client"
+	"github.com/libopenstorage/openstorage/volume"
+)
+
+// VolumeDriver returns a REST wrapper for the VolumeDriver interface.
+func VolumeDriver(c *client.Client) volume.VolumeDriver {
+	return newVolumeClient(c)
+}
+
+// NewAuthDriverClient returns a new REST client of the supplied version for specified driver.
+// host: REST endpoint [http://<ip>:<port> OR unix://<path-to-unix-socket>]. default: [unix:///var/lib/osd/<driverName>.sock]
+// version: Volume API version
+// authstring can be set to the JWT Token and accesstoken set to an empty string.
+func NewAuthDriverClient(host, driverName, version, authstring, accesstoken, userAgent string) (*client.Client, error) {
+	if driverName == "" {
+		return nil, fmt.Errorf("Driver Name cannot be empty")
+	}
+	if host == "" {
+		host = client.GetUnixServerPath(driverName, volume.DriverAPIBase)
+	}
+	if version == "" {
+		// Set the default version
+		version = volume.APIVersion
+	}
+	return client.NewAuthClient(host, version, authstring, accesstoken, userAgent)
+}
+
+// NewDriverClient returns a new REST client of the supplied version for specified driver.
+// host: REST endpoint [http://<ip>:<port> OR unix://<path-to-unix-socket>]. default: [unix:///var/lib/osd/<driverName>.sock]
+// version: Volume API version
+// userAgent: Drivername for http connections
+func NewDriverClient(host, driverName, version, userAgent string) (*client.Client, error) {
+	if host == "" {
+		if driverName == "" {
+			return nil, fmt.Errorf("Driver Name cannot be empty")
+		}
+		host = client.GetUnixServerPath(driverName, volume.DriverAPIBase)
+	}
+	if version == "" {
+		// Set the default version
+		version = volume.APIVersion
+	}
+	return client.NewClient(host, version, userAgent)
+}
+
+// GetAuthSupportedDriverVersions returns a list of supported versions
+// for the provided driver. It uses the given security params and
+// server endpoint or the standard unix domain socket
+// authstring can be set to the JWT Token and accesstoken set to an empty string.
+func GetAuthSupportedDriverVersions(driverName, host, authstring, accesstoken string, tlsConfig *tls.Config) ([]string, error) {
+	// Get a client handler
+	if host == "" {
+		host = client.GetUnixServerPath(driverName, volume.DriverAPIBase)
+	}
+
+	client, err := client.NewAuthClient(host, "", authstring, accesstoken, "")
+	if err != nil {
+		return []string{}, err
+	}
+
+	if tlsConfig != nil {
+		client.SetTLS(tlsConfig)
+	}
+
+	versions, err := client.Versions(api.OsdVolumePath)
+	if err != nil {
+		return []string{}, err
+	}
+	return versions, nil
+}
+
+// GetSupportedDriverVersions returns a list of supported versions
+// for the provided driver. It uses the given server endpoint or the
+// standard unix domain socket
+func GetSupportedDriverVersions(driverName, host string) ([]string, error) {
+	// Get a client handler
+	if host == "" {
+		host = client.GetUnixServerPath(driverName, volume.DriverAPIBase)
+	}
+
+	client, err := client.NewClient(host, "", "")
+	if err != nil {
+		return []string{}, err
+	}
+	versions, err := client.Versions(api.OsdVolumePath)
+	if err != nil {
+		return []string{}, err
+	}
+	return versions, nil
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/api/errors/errors.go b/vendor/github.com/libopenstorage/openstorage/api/errors/errors.go
new file mode 100644
index 000000000..9da78722c
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/api/errors/errors.go
@@ -0,0 +1,34 @@
+package errors
+
+import "fmt"
+
+// ErrNotFound error type for objects not found
+type ErrNotFound struct {
+	// ID unique object identifier.
+	ID string
+	// Type of the object which wasn't found
+	Type string
+}
+
+func (e *ErrNotFound) Error() string {
+	return fmt.Sprintf("%v with ID: %v not found", e.Type, e.ID)
+}
+
+// ErrExists type for objects already present
+type ErrExists struct {
+	// ID unique object identifier.
+	ID string
+	// Type of the object which already exists
+	Type string
+}
+
+func (e *ErrExists) Error() string {
+	return fmt.Sprintf("%v with ID: %v already exists", e.Type, e.ID)
+}
+
+// ErrNotSupported error type for APIs that are not supported
+type ErrNotSupported struct{}
+
+func (e *ErrNotSupported) Error() string {
+	return fmt.Sprintf("Not Supported")
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/api/group.go b/vendor/github.com/libopenstorage/openstorage/api/group.go
new file mode 100644
index 000000000..90c9ce33b
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/api/group.go
@@ -0,0 +1,32 @@
+/*
+Package ownership manages access to resources
+Copyright 2019 Portworx
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+package api
+
+// IsMatch returns true if the ownership has at least one similar
+// owner, group, or collaborator
+func (g *Group) IsMatch(check *Group) bool {
+	if check == nil {
+		return false
+	}
+
+	// Check user
+	if g.Id == check.GetId() {
+		return true
+	}
+
+	return false
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/api/ownership.go b/vendor/github.com/libopenstorage/openstorage/api/ownership.go
new file mode 100644
index 000000000..175dab704
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/api/ownership.go
@@ -0,0 +1,296 @@
+/*
+Package ownership manages access to resources
+Copyright 2019 Portworx
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+package api
+
+import (
+	"context"
+
+	"github.com/libopenstorage/openstorage/pkg/auth"
+	"google.golang.org/grpc/codes"
+	"google.golang.org/grpc/status"
+)
+
+const (
+	// AdminGroup is the value that can be set in the token claims Group which
+	// gives the user access to any resource
+	AdminGroup = "*"
+)
+
+// OwnershipSetUsernameFromContext is used to create a new ownership object for
+// a volume. It takes an ownership value if passed in by the user, then
+// sets the `owner` value to the user name referred to in the user context
+func OwnershipSetUsernameFromContext(ctx context.Context, srcOwnership *Ownership) *Ownership {
+	// Check if the context has information about the user. If not,
+	// then security is not enabled.
+	if userinfo, ok := auth.NewUserInfoFromContext(ctx); ok {
+
+		// Merge the previous acls which may have been set by the user
+		var acls *Ownership_AccessControl
+		if srcOwnership != nil {
+			acls = srcOwnership.GetAcls()
+		}
+
+		return &Ownership{
+			Owner: userinfo.Username,
+			Acls:  acls,
+		}
+	}
+
+	return srcOwnership
+}
+
+// IsPermittedByContext returns true if the user captured in
+// the context has permission to access the resource
+func (o *Ownership) IsPermittedByContext(
+	ctx context.Context,
+	accessType Ownership_AccessType) bool {
+
+	// If no ownership is there then it is public
+	if o == nil {
+		return true
+	}
+
+	// Volume is not public, check permission
+	if userinfo, ok := auth.NewUserInfoFromContext(ctx); ok {
+		// Check Access
+		return o.IsPermitted(userinfo, accessType)
+	} else {
+		// There is no user information in the context so
+		// authorization is not running
+		return true
+	}
+}
+
+// IsPermitted returns true if the user has access to the resource
+// according to the ownership. If there is no owner, then it is public
+func (o *Ownership) IsPermitted(
+	user *auth.UserInfo,
+	accessType Ownership_AccessType,
+) bool {
+	// There is no owner, so it is a public resource
+	if o.IsPublic() {
+		return true
+	}
+
+	// If we are missing user information then do not allow.
+	// It is ok for the the user claims to have an empty Groups setting
+	if user == nil ||
+		len(user.Username) == 0 {
+		return false
+	}
+
+	if o.IsOwner(user) ||
+		o.IsUserAllowedByGroup(user, accessType) ||
+		o.IsUserAllowedByCollaborators(user, accessType) {
+		return true
+	}
+
+	return false
+}
+
+// GetGroups returns the groups in the ownership
+func (o *Ownership) GetGroups() map[string]Ownership_AccessType {
+	if o.GetAcls() == nil {
+		return nil
+	}
+	return o.GetAcls().GetGroups()
+}
+
+// GetCollaborators returns the collaborators in the ownership
+func (o *Ownership) GetCollaborators() map[string]Ownership_AccessType {
+	if o.GetAcls() == nil {
+		return nil
+	}
+	return o.GetAcls().GetCollaborators()
+}
+
+// IsUserAllowedByGroup returns true if the user is allowed access
+// by belonging to the appropriate group
+func (o *Ownership) IsUserAllowedByGroup(
+	user *auth.UserInfo,
+	accessType Ownership_AccessType,
+) bool {
+
+	// Allow if it is the admin user for any group
+	if o.IsAdminByUser(user) {
+		return true
+	}
+
+	ownergroups := o.GetGroups()
+	if len(ownergroups) == 0 {
+		return false
+	}
+
+	// Check each of the groups from the user
+	for _, group := range user.Claims.Groups {
+		// Check if the user group has permission
+		if a, ok := ownergroups[group]; ok {
+			return a.isAccessPermitted(accessType)
+		}
+	}
+
+	// Check if any group is allowed
+	if a, ok := ownergroups["*"]; ok {
+		return a.isAccessPermitted(accessType)
+	}
+
+	return false
+}
+
+// IsUserAllowedByCollaborators returns true if the user is allowed access
+// because they are part of the collaborators list
+func (o *Ownership) IsUserAllowedByCollaborators(
+	user *auth.UserInfo,
+	accessType Ownership_AccessType,
+) bool {
+	collaborators := o.GetCollaborators()
+	if len(collaborators) == 0 {
+		return false
+	}
+
+	// Check each of the groups from the user
+	if a, ok := collaborators[user.Username]; ok {
+		return a.isAccessPermitted(accessType)
+	}
+
+	// Check any user is allowed
+	if a, ok := collaborators["*"]; ok {
+		return a.isAccessPermitted(accessType)
+	}
+
+	return false
+}
+
+// HasAnOwner returns true if the resource has an owner
+func (o *Ownership) HasAnOwner() bool {
+	return len(o.Owner) != 0
+}
+
+// IsPublic returns true if there is no ownership in this resource
+func (o *Ownership) IsPublic() bool {
+	return !o.HasAnOwner()
+}
+
+// IsOwner returns if the user is the owner of the resource
+func (o *Ownership) IsOwner(user *auth.UserInfo) bool {
+	return o.Owner == user.Username
+}
+
+// IsAdminByUser returns true if the user is an ownership admin, meaning,
+// that they belong to any group
+func (o *Ownership) IsAdminByUser(user *auth.UserInfo) bool {
+	return IsAdminByUser(user)
+}
+
+// Update can be used to update an ownership with new ownership information. It
+// takes into account who is trying to change the ownership values
+func (o *Ownership) Update(newownerInfo *Ownership, user *auth.UserInfo) error {
+	if user == nil {
+		// There is no auth, just copy the whole thing
+		*o = *newownerInfo
+	} else {
+		// Auth is enabled
+
+		// Only the owner, user with access type admin,
+		// or admin can change the group
+		if user.Username != o.Owner &&
+			!o.IsAdminByUser(user) &&
+			!o.IsPermitted(user, Ownership_Admin) {
+			return status.Error(codes.PermissionDenied,
+				"Only owner or those with admin access type can update volume acls")
+		}
+
+		// Only the admin can change the owner
+		if newownerInfo.HasAnOwner() {
+			if o.IsAdminByUser(user) {
+				o.Owner = newownerInfo.Owner
+			} else {
+				return status.Error(codes.PermissionDenied,
+					"Only the administrator can change the owner of the resource")
+			}
+		}
+		o.Acls = newownerInfo.GetAcls()
+	}
+	return nil
+}
+
+// IsMatch returns true if the ownership has at least one similar
+// owner, group, or collaborator
+func (o *Ownership) IsMatch(check *Ownership) bool {
+	if check == nil {
+		return false
+	}
+
+	// Check user
+	if o.Owner == check.GetOwner() {
+		return true
+	}
+	if check.GetAcls() == nil || o.GetAcls() == nil {
+		return false
+	}
+
+	// Check groups
+	for group, _ := range check.GetAcls().GetGroups() {
+		if _, ok := o.GetAcls().GetGroups()[group]; ok {
+			return true
+		}
+	}
+
+	// Check collaborators
+	for collaborator, _ := range check.GetAcls().GetCollaborators() {
+		if _, ok := o.GetAcls().GetCollaborators()[collaborator]; ok {
+			return true
+		}
+	}
+
+	return false
+}
+
+func (a Ownership_AccessType) isAccessPermitted(accessType Ownership_AccessType) bool {
+	return a >= accessType
+}
+
+func listContains(list []string, s string) bool {
+	for _, value := range list {
+		if value == s {
+			return true
+		}
+	}
+	return false
+}
+
+// IsAdminByUser returns true if the user is an ownership admin, meaning,
+// that they belong to any group
+func IsAdminByUser(user *auth.UserInfo) bool {
+	// If there is a user, then auth is enabled
+	if user != nil {
+		return listContains(user.Claims.Groups, AdminGroup)
+	}
+
+	// No auth enabled, so everyone is an admin
+	return true
+}
+
+// Functions
+func IsAdminByContext(ctx context.Context) bool {
+	// Check if the context has information about the user. If not,
+	// then security is not enabled.
+	if userinfo, ok := auth.NewUserInfoFromContext(ctx); ok {
+		return IsAdminByUser(userinfo)
+	}
+	return true
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/api/status.go b/vendor/github.com/libopenstorage/openstorage/api/status.go
new file mode 100644
index 000000000..31a51a442
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/api/status.go
@@ -0,0 +1,54 @@
+package api
+
+// StatusKind indicates the severity of a status
+type StatusKind int32
+
+const (
+	// StatusSeverityLow indicates an OK status
+	StatusSeverityLow StatusKind = iota
+	// StatusSeverityMedium indicates a status which is in transition from OK to BAD or vice versa
+	StatusSeverityMedium
+	// StatusSeverityHigh indicates a BAD status
+	StatusSeverityHigh
+)
+
+var statusToStatusKind = map[Status]StatusKind{
+	Status_STATUS_NONE:                     StatusSeverityHigh,
+	Status_STATUS_INIT:                     StatusSeverityMedium,
+	Status_STATUS_OK:                       StatusSeverityLow,
+	Status_STATUS_OFFLINE:                  StatusSeverityHigh,
+	Status_STATUS_ERROR:                    StatusSeverityHigh,
+	Status_STATUS_NOT_IN_QUORUM:            StatusSeverityHigh,
+	Status_STATUS_DECOMMISSION:             StatusSeverityHigh,
+	Status_STATUS_MAINTENANCE:              StatusSeverityHigh,
+	Status_STATUS_STORAGE_DOWN:             StatusSeverityHigh,
+	Status_STATUS_STORAGE_DEGRADED:         StatusSeverityHigh,
+	Status_STATUS_NEEDS_REBOOT:             StatusSeverityHigh,
+	Status_STATUS_STORAGE_REBALANCE:        StatusSeverityMedium,
+	Status_STATUS_STORAGE_DRIVE_REPLACE:    StatusSeverityMedium,
+	Status_STATUS_NOT_IN_QUORUM_NO_STORAGE: StatusSeverityHigh,
+	// Add statuses before MAX
+	Status_STATUS_MAX: StatusSeverityHigh,
+}
+
+// StatusSimpleValueOf returns the string format of Status
+func StatusSimpleValueOf(s string) (Status, error) {
+	obj, err := simpleValueOf("status", Status_value, s)
+	return Status(obj), err
+}
+
+// SimpleString returns the string format of Status
+func (x Status) SimpleString() string {
+	return simpleString("status", Status_name, int32(x))
+}
+
+// StatusKind returns the king of status
+func (x Status) StatusKind() StatusKind {
+	statusType, _ := statusToStatusKind[x]
+	return statusType
+}
+
+// StatusKindMapLength used only for unit testing
+func StatusKindMapLength() int {
+	return len(statusToStatusKind)
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/pkg/auth/auth.go b/vendor/github.com/libopenstorage/openstorage/pkg/auth/auth.go
new file mode 100644
index 000000000..668961b87
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/pkg/auth/auth.go
@@ -0,0 +1,52 @@
+/*
+Package auth can be used for authentication and authorization
+Copyright 2018 Portworx
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+package auth
+
+import (
+	"context"
+)
+
+var (
+	systemTokenInst TokenGenerator = &noauth{}
+
+	// Inst returns the instance of system token manager.
+	// This function can be overridden for testing purposes
+	InitSystemTokenManager = func(tg TokenGenerator) {
+		systemTokenInst = tg
+	}
+
+	// SystemTokenManagerInst returns the systemTokenManager instance
+	SystemTokenManagerInst = func() TokenGenerator {
+		return systemTokenInst
+	}
+)
+
+// Authenticator interface validates and extracts the claims from a raw token
+type Authenticator interface {
+	// AuthenticateToken validates the token and returns the claims
+	AuthenticateToken(context.Context, string) (*Claims, error)
+
+	// Username returns the unique id according to the configuration. Default
+	// it will return the value for "sub" in the token claims, but it can be
+	// configured to return the email or name as the unique id.
+	Username(*Claims) string
+}
+
+// Enabled returns whether or not auth is enabled.
+func Enabled() bool {
+	return len(systemTokenInst.Issuer()) != 0
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/pkg/auth/claims.go b/vendor/github.com/libopenstorage/openstorage/pkg/auth/claims.go
new file mode 100644
index 000000000..7116ec0a8
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/pkg/auth/claims.go
@@ -0,0 +1,80 @@
+package auth
+
+import "fmt"
+
+const (
+	// default type is sub
+	UsernameClaimTypeDefault UsernameClaimType = ""
+	// UsernameClaimTypeSubject requests to use "sub" as the claims for the
+	// ID of the user
+	UsernameClaimTypeSubject UsernameClaimType = "sub"
+	// UsernameClaimTypeEmail requests to use "name" as the claims for the
+	// ID of the user
+	UsernameClaimTypeEmail UsernameClaimType = "email"
+	// UsernameClaimTypeName requests to use "name" as the claims for the
+	// ID of the user
+	UsernameClaimTypeName UsernameClaimType = "name"
+)
+
+var (
+	// Required claim keys
+	requiredClaims = []string{"iss", "sub", "exp", "iat", "name", "email"}
+	// Custom claims for OpenStorage
+	customClaims = []string{"roles", "groups"}
+)
+
+// Claims provides information about the claims in the token
+// See https://openid.net/specs/openid-connect-core-1_0.html#IDToken
+// for more information.
+type Claims struct {
+	// Issuer is the token issuer. For selfsigned token do not prefix
+	// with `https://`.
+	Issuer string `json:"iss"`
+	// Subject identifier. Unique ID of this account
+	Subject string `json:"sub" yaml:"sub"`
+	// Account name
+	Name string `json:"name" yaml:"name"`
+	// Account email
+	Email string `json:"email" yaml:"email"`
+	// Roles of this account
+	Roles []string `json:"roles,omitempty" yaml:"roles,omitempty"`
+	// (optional) Groups in which this account is part of
+	Groups []string `json:"groups,omitempty" yaml:"groups,omitempty"`
+}
+
+// UsernameClaimType holds the claims type to be use as the unique id for the user
+type UsernameClaimType string
+
+// utility function to get username
+func getUsername(usernameClaim UsernameClaimType, claims *Claims) string {
+	switch usernameClaim {
+	case UsernameClaimTypeEmail:
+		return claims.Email
+	case UsernameClaimTypeName:
+		return claims.Name
+	}
+	return claims.Subject
+}
+
+func validateUsername(usernameClaim UsernameClaimType, claims *Claims) error {
+	switch usernameClaim {
+	case UsernameClaimTypeEmail:
+		if claims.Email == "" {
+			return fmt.Errorf("System set to use the value of email as the username," +
+				" therefore the value of email in the token cannot be empty")
+		}
+	case UsernameClaimTypeName:
+		if claims.Name == "" {
+			return fmt.Errorf("System set to use the value of name as the username," +
+				" therefore the value of name in the token cannot be empty")
+
+		}
+	default:
+		if claims.Subject == "" {
+			return fmt.Errorf("System set to use the value of sub as the username," +
+				" therefore the value of sub in the token cannot be empty")
+		}
+	}
+
+	return nil
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/pkg/auth/duration.go b/vendor/github.com/libopenstorage/openstorage/pkg/auth/duration.go
new file mode 100644
index 000000000..787e3c90c
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/pkg/auth/duration.go
@@ -0,0 +1,85 @@
+/*
+Copyright 2018 Portworx
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+package auth
+
+import (
+	"fmt"
+	"regexp"
+	"strconv"
+	"time"
+)
+
+const (
+	SecondDef = "s"
+	MinuteDef = "m"
+	HourDef   = "h"
+	DayDef    = "d"
+	YearDef   = "y"
+
+	Day  = time.Hour * 24
+	Year = Day * 365
+)
+
+var (
+	SecondRegex = regexp.MustCompile("([0-9]+)" + SecondDef)
+	MinuteRegex = regexp.MustCompile("([0-9]+)" + MinuteDef)
+	HourRegex   = regexp.MustCompile("([0-9]+)" + HourDef)
+	DayRegex    = regexp.MustCompile("([0-9]+)" + DayDef)
+	YearRegex   = regexp.MustCompile("([0-9]+)" + YearDef)
+)
+
+// ParseToDuration takes in a "human" type duration and changes it to
+// time.Duration. The format for a human type is <number><type>. For
+// example: Five days: 5d; one year: 1y.
+func ParseToDuration(s string) (time.Duration, error) {
+
+	regexs := []struct {
+		regex    *regexp.Regexp
+		duration time.Duration
+	}{
+		{
+			regex:    SecondRegex,
+			duration: time.Second,
+		},
+		{
+			regex:    MinuteRegex,
+			duration: time.Minute,
+		},
+		{
+			regex:    HourRegex,
+			duration: time.Hour,
+		},
+		{
+			regex:    DayRegex,
+			duration: Day,
+		},
+		{
+			regex:    YearRegex,
+			duration: Year,
+		},
+	}
+	for _, r := range regexs {
+		if val := r.regex.FindString(s); len(val) != 0 {
+			parsed, err := strconv.Atoi(val[:len(val)-1])
+			if err != nil {
+				return 0, err
+			}
+			return time.Duration(parsed) * r.duration, nil
+		}
+	}
+
+	return 0, fmt.Errorf("Unable to parse")
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/pkg/auth/oidc.go b/vendor/github.com/libopenstorage/openstorage/pkg/auth/oidc.go
new file mode 100644
index 000000000..8109199e5
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/pkg/auth/oidc.go
@@ -0,0 +1,135 @@
+/*
+Copyright 2019 Portworx
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+package auth
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+
+	oidc "github.com/coreos/go-oidc"
+)
+
+// OIDCAuthConfig configures an OIDC connection
+type OIDCAuthConfig struct {
+	// Issuer of the OIDC tokens
+	// e.g. https://accounts.google.com
+	Issuer string
+	// ClientID is the client id provided by the OIDC
+	ClientID string
+	// SkipClientIDCheck skips a verification on tokens which are returned
+	// from the OIDC without the client ID set
+	SkipClientIDCheck bool
+	// UsernameClaim has the location of the unique id for the user.
+	// If empty, "sub" will be used for the user name unique id.
+	UsernameClaim UsernameClaimType
+	// Namespace sets the namespace for all custom claims. For example
+	// if the claims had the key: "https://mynamespace/roles", then
+	// the namespace would be "https://mynamespace/".
+	Namespace string
+}
+
+// OIDCAuthenticator is used to validate tokens with an OIDC
+type OIDCAuthenticator struct {
+	url           string
+	provider      *oidc.Provider
+	verifier      *oidc.IDTokenVerifier
+	usernameClaim UsernameClaimType
+	namespace     string
+}
+
+// NewOIDC returns a new OIDC authenticator
+func NewOIDC(config *OIDCAuthConfig) (*OIDCAuthenticator, error) {
+	p, err := oidc.NewProvider(context.Background(), config.Issuer)
+	if err != nil {
+		return nil, fmt.Errorf("Unable to communicate with OIDC provider %s: %v",
+			config.Issuer,
+			err)
+	}
+
+	v := p.Verifier(&oidc.Config{
+		ClientID:          config.ClientID,
+		SkipClientIDCheck: config.SkipClientIDCheck,
+	})
+	return &OIDCAuthenticator{
+		url:           config.Issuer,
+		usernameClaim: config.UsernameClaim,
+		namespace:     config.Namespace,
+		provider:      p,
+		verifier:      v,
+	}, nil
+}
+
+// AuthenticateToken will verify the validity of the provided token with the OIDC
+func (o *OIDCAuthenticator) AuthenticateToken(ctx context.Context, rawtoken string) (*Claims, error) {
+	idToken, err := o.verifier.Verify(ctx, rawtoken)
+	if err != nil {
+		return nil, fmt.Errorf("Token failed validation: %v", err)
+	}
+
+	// Check for required claims
+	var claims map[string]interface{}
+	if err := idToken.Claims(&claims); err != nil {
+		return nil, fmt.Errorf("Unable to get claim map from token: %v", err)
+	}
+	for _, requiredClaim := range requiredClaims {
+		if _, ok := claims[requiredClaim]; !ok {
+			// Claim missing
+			return nil, fmt.Errorf("Required claim %v missing from token", requiredClaim)
+		}
+	}
+
+	return o.parseClaims(claims)
+}
+
+// Username returns the configured unique id of the user
+func (o *OIDCAuthenticator) Username(claims *Claims) string {
+	return getUsername(o.usernameClaim, claims)
+}
+
+// This will let us unit test this function without having a real OIDC
+func (o *OIDCAuthenticator) parseClaims(claims map[string]interface{}) (*Claims, error) {
+
+	// If we have namespace set, then use it to get custom claims:
+	if len(o.namespace) > 0 {
+		for _, cc := range customClaims {
+			// Check if there claims needed are under a namespace
+			if v, ok := claims[o.namespace+cc]; ok {
+				// Move it to the top of the json tree overwriting anything
+				// there with the same name.
+				claims[cc] = v
+			}
+		}
+	}
+
+	// Marshal into byte stream so that we can unmarshal into SDK Claims
+	cbytes, err := json.Marshal(claims)
+	if err != nil {
+		return nil, fmt.Errorf("Internal error, unable to re-encode OIDC token claims: %v", err)
+	}
+
+	// Return claims
+	var sdkClaims Claims
+	if err := json.Unmarshal(cbytes, &sdkClaims); err != nil {
+		return nil, fmt.Errorf("Unable to get claims from token: %v", err)
+	}
+
+	if err := validateUsername(o.usernameClaim, &sdkClaims); err != nil {
+		return nil, err
+	}
+
+	return &sdkClaims, nil
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/pkg/auth/selfsigned.go b/vendor/github.com/libopenstorage/openstorage/pkg/auth/selfsigned.go
new file mode 100644
index 000000000..fb1f18c01
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/pkg/auth/selfsigned.go
@@ -0,0 +1,154 @@
+/*
+Copyright 2019 Portworx
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+package auth
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"strings"
+
+	jwt "github.com/dgrijalva/jwt-go"
+)
+
+// JwtAuthConfig provides JwtAuthenticator the keys to validate the token
+type JwtAuthConfig struct {
+	// SharedSecret in byte array form
+	SharedSecret []byte
+	// RsaPublicPem is the contents of the RSA public key file
+	RsaPublicPem []byte
+	// ECDSPublicPem is the contents of the ECDS public key file
+	ECDSPublicPem []byte
+	// UsernameClaim has the location of the unique id for the user.
+	// If empty, "sub" will be used for the user name unique id.
+	UsernameClaim UsernameClaimType
+}
+
+// JwtAuthenticator definition. It contains the raw bytes of the keys and their
+// objects as returned by the Jwt package
+type JwtAuthenticator struct {
+	config          JwtAuthConfig
+	rsaKey          interface{}
+	ecdsKey         interface{}
+	sharedSecretKey interface{}
+	usernameClaim   UsernameClaimType
+}
+
+// New returns a JwtAuthenticator
+func NewJwtAuth(config *JwtAuthConfig) (*JwtAuthenticator, error) {
+
+	if config == nil {
+		return nil, fmt.Errorf("Must provide configuration")
+	}
+
+	// Check at least one is set
+	if len(config.SharedSecret) == 0 &&
+		len(config.RsaPublicPem) == 0 &&
+		len(config.ECDSPublicPem) == 0 {
+		return nil, fmt.Errorf("Server was passed empty authentication information with no shared secret or pem files set")
+	}
+
+	authenticator := &JwtAuthenticator{
+		config:        *config,
+		usernameClaim: config.UsernameClaim,
+	}
+
+	var err error
+	if len(config.SharedSecret) != 0 {
+		authenticator.sharedSecretKey = config.SharedSecret
+	}
+	if len(config.RsaPublicPem) != 0 {
+		authenticator.rsaKey, err = jwt.ParseRSAPublicKeyFromPEM(config.RsaPublicPem)
+		if err != nil {
+			return nil, fmt.Errorf("Unable to parse rsa public key: %v", err)
+		}
+	}
+	if len(config.ECDSPublicPem) != 0 {
+		authenticator.ecdsKey, err = jwt.ParseECPublicKeyFromPEM(config.ECDSPublicPem)
+		if err != nil {
+			return nil, fmt.Errorf("Unable to parse ecds public key: %v", err)
+		}
+	}
+
+	return authenticator, nil
+}
+
+// AuthenticateToken determines if a token is valid and if it is, returns
+// the information in the claims.
+func (j *JwtAuthenticator) AuthenticateToken(ctx context.Context, rawtoken string) (*Claims, error) {
+
+	// Parse token
+	token, err := jwt.Parse(rawtoken, func(token *jwt.Token) (interface{}, error) {
+
+		// Verify Method
+		if strings.HasPrefix(token.Method.Alg(), "RS") {
+			// RS256, RS384, or RS512
+			return j.rsaKey, nil
+		} else if strings.HasPrefix(token.Method.Alg(), "ES") {
+			// ES256, ES384, or ES512
+			return j.ecdsKey, nil
+		} else if strings.HasPrefix(token.Method.Alg(), "HS") {
+			// HS256, HS384, or HS512
+			return j.sharedSecretKey, nil
+		}
+		return nil, fmt.Errorf("Unknown token algorithm: %s", token.Method.Alg())
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	if !token.Valid {
+		return nil, fmt.Errorf("Token failed validation")
+	}
+
+	// Get claims
+	claims, ok := token.Claims.(jwt.MapClaims)
+	if claims == nil || !ok {
+		return nil, fmt.Errorf("No claims found in token")
+	}
+
+	// Check for required claims
+	for _, requiredClaim := range requiredClaims {
+		if _, ok := claims[requiredClaim]; !ok {
+			// Claim missing
+			return nil, fmt.Errorf("Required claim %v missing from token", requiredClaim)
+		}
+	}
+
+	// Token now has been verified.
+	// Claims holds all the authorization information.
+	// Here we need to first decode it then unmarshal it from JSON
+	parts := strings.Split(token.Raw, ".")
+	claimBytes, err := jwt.DecodeSegment(parts[1])
+	if err != nil {
+		return nil, fmt.Errorf("Failed to decode claims: %v", err)
+	}
+	var sdkClaims Claims
+	err = json.Unmarshal(claimBytes, &sdkClaims)
+	if err != nil {
+		return nil, fmt.Errorf("Unable to get sdkclaims: %v", err)
+	}
+
+	if err := validateUsername(j.usernameClaim, &sdkClaims); err != nil {
+		return nil, err
+	}
+
+	return &sdkClaims, nil
+}
+
+func (j *JwtAuthenticator) Username(claims *Claims) string {
+	return getUsername(j.usernameClaim, claims)
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/pkg/auth/signature.go b/vendor/github.com/libopenstorage/openstorage/pkg/auth/signature.go
new file mode 100644
index 000000000..d57dff432
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/pkg/auth/signature.go
@@ -0,0 +1,75 @@
+/*
+Copyright 2018 Portworx
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+package auth
+
+import (
+	"fmt"
+	"io/ioutil"
+
+	jwt "github.com/dgrijalva/jwt-go"
+)
+
+// Signature describes the signature type using definitions from
+// the jwt package
+type Signature struct {
+	Type jwt.SigningMethod
+	Key  interface{}
+}
+
+func NewSignatureSharedSecret(secret string) (*Signature, error) {
+	return &Signature{
+		Key:  []byte(secret),
+		Type: jwt.SigningMethodHS256,
+	}, nil
+}
+
+func NewSignatureRSAFromFile(filename string) (*Signature, error) {
+	pem, err := ioutil.ReadFile(filename)
+	if err != nil {
+		return nil, fmt.Errorf("Failed to read RSA file: %v", err)
+	}
+	return NewSignatureRSA(pem)
+}
+
+func NewSignatureRSA(pem []byte) (*Signature, error) {
+	var err error
+	signature := &Signature{}
+	signature.Key, err = jwt.ParseRSAPrivateKeyFromPEM(pem)
+	if err != nil {
+		return nil, fmt.Errorf("Failed to parse RSA file: %v", err)
+	}
+	signature.Type = jwt.SigningMethodRS256
+	return signature, nil
+}
+
+func NewSignatureECDSAFromFile(filename string) (*Signature, error) {
+	pem, err := ioutil.ReadFile(filename)
+	if err != nil {
+		return nil, fmt.Errorf("Failed to read ECDSA file: %v", err)
+	}
+	return NewSignatureECDSA(pem)
+}
+
+func NewSignatureECDSA(pem []byte) (*Signature, error) {
+	var err error
+	signature := &Signature{}
+	signature.Key, err = jwt.ParseECPrivateKeyFromPEM(pem)
+	if err != nil {
+		return nil, fmt.Errorf("Failed to parse ECDSA file: %v", err)
+	}
+	signature.Type = jwt.SigningMethodES256
+	return signature, nil
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/pkg/auth/token.go b/vendor/github.com/libopenstorage/openstorage/pkg/auth/token.go
new file mode 100644
index 000000000..60b49f34f
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/pkg/auth/token.go
@@ -0,0 +1,111 @@
+/*
+Copyright 2018 Portworx
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+package auth
+
+import (
+	"encoding/json"
+	"fmt"
+	"strings"
+	"time"
+
+	jwt "github.com/dgrijalva/jwt-go"
+)
+
+// Options provide any options to apply to the token
+type Options struct {
+	// Expiration time in Unix format as per JWT standard
+	Expiration int64
+
+	// IATSubtract is the time duration you would like to remove from
+	// the token IAT (Issue At Time). This is useful as a guard against
+	// NTP drift within a cluster. Without this option, your token may
+	// be denied due to the IAT being greater than the current time.
+	IATSubtract time.Duration
+}
+
+// TokenClaims returns the claims for the raw JWT token.
+func TokenClaims(rawtoken string) (*Claims, error) {
+	parts := strings.Split(rawtoken, ".")
+
+	// There are supposed to be three parts for the token
+	if len(parts) < 3 {
+		return nil, fmt.Errorf("Token is invalid: %v", rawtoken)
+	}
+
+	// Access claims in the token
+	claimBytes, err := jwt.DecodeSegment(parts[1])
+	if err != nil {
+		return nil, fmt.Errorf("Failed to decode claims: %v", err)
+	}
+	var claims *Claims
+
+	// Unmarshal claims
+	err = json.Unmarshal(claimBytes, &claims)
+	if err != nil {
+		return nil, fmt.Errorf("Unable to get information from the claims in the token: %v", err)
+	}
+
+	return claims, nil
+}
+
+// TokenIssuer returns the issuer for the raw JWT token.
+func TokenIssuer(rawtoken string) (string, error) {
+	claims, err := TokenClaims(rawtoken)
+	if err != nil {
+		return "", err
+	}
+
+	// Return issuer
+	if len(claims.Issuer) != 0 {
+		return claims.Issuer, nil
+	} else {
+		return "", fmt.Errorf("Issuer was not specified in the token")
+	}
+}
+
+// IsJwtToken returns true if the provided string is a valid jwt token
+func IsJwtToken(authstring string) bool {
+	_, _, err := new(jwt.Parser).ParseUnverified(authstring, jwt.MapClaims{})
+	return err == nil
+}
+
+// Token returns a signed JWT containing the claims provided
+func Token(
+	claims *Claims,
+	signature *Signature,
+	options *Options,
+) (string, error) {
+
+	mapclaims := jwt.MapClaims{
+		"sub":   claims.Subject,
+		"iss":   claims.Issuer,
+		"email": claims.Email,
+		"name":  claims.Name,
+		"roles": claims.Roles,
+		"iat":   time.Now().Add(-options.IATSubtract).Unix(),
+		"exp":   options.Expiration,
+	}
+	if claims.Groups != nil {
+		mapclaims["groups"] = claims.Groups
+	}
+	token := jwt.NewWithClaims(signature.Type, mapclaims)
+	signedtoken, err := token.SignedString(signature.Key)
+	if err != nil {
+		return "", err
+	}
+
+	return signedtoken, nil
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/pkg/auth/tokengenerator.go b/vendor/github.com/libopenstorage/openstorage/pkg/auth/tokengenerator.go
new file mode 100644
index 000000000..3e272fa67
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/pkg/auth/tokengenerator.go
@@ -0,0 +1,59 @@
+/*
+Copyright 2019 Portworx
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+package auth
+
+import (
+	"fmt"
+)
+
+// TokenGenerator allows for the creation of tokens
+type TokenGenerator interface {
+	// GetToken returns a token which can be used for
+	// authentication and communication from node to node.
+	GetToken(opts *Options) (string, error)
+
+	// Issuer returns the token issuer for this generator necessary
+	// for registering the authenticator in the SDK.
+	Issuer() string
+
+	// GetAuthenticator returns an authenticator for this issuer used by the SDK
+	GetAuthenticator() (Authenticator, error)
+}
+
+var errAuthDisabled = fmt.Errorf("No authentication set")
+
+// Default no auth
+type noauth struct{}
+
+// NoAuth returns the default no auth implementation
+func NoAuth() *noauth {
+	return &noauth{}
+}
+
+// Check for interface implementation
+var _ TokenGenerator = &noauth{}
+
+func (na *noauth) Issuer() string {
+	return ""
+}
+
+func (na *noauth) GetAuthenticator() (Authenticator, error) {
+	return nil, errAuthDisabled
+}
+
+func (na *noauth) GetToken(opts *Options) (string, error) {
+	return "", nil
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/pkg/auth/userinfo.go b/vendor/github.com/libopenstorage/openstorage/pkg/auth/userinfo.go
new file mode 100644
index 000000000..12a95dade
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/pkg/auth/userinfo.go
@@ -0,0 +1,52 @@
+/*
+Package auth can be used for authentication and authorization
+Copyright 2019 Portworx
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+package auth
+
+import (
+	"context"
+)
+
+// Keys to store data in gRPC context. Use these keys to retrieve
+// the data from the gRPC context
+type InterceptorContextkey string
+
+const (
+	// Key to store in the token claims in gRPC context
+	InterceptorContextTokenKey InterceptorContextkey = "tokenclaims"
+)
+
+// UserInfo contains information about the user taken from the token
+type UserInfo struct {
+	// Username is the unique id of the user. According to the configuration of
+	// the storage system, this could be the 'sub', 'name', or 'email' from
+	// the claims in the token.
+	Username string
+	// Claims holds the claims required by the storage system
+	Claims Claims
+}
+
+// ContextSaveUserInfo saves user information in the context for other functions to consume
+func ContextSaveUserInfo(ctx context.Context, u *UserInfo) context.Context {
+	return context.WithValue(ctx, InterceptorContextTokenKey, u)
+}
+
+// NewUserInfoFromContext returns user information in the context if available.
+// If not available means that the system is running without auth.
+func NewUserInfoFromContext(ctx context.Context) (*UserInfo, bool) {
+	u, ok := ctx.Value(InterceptorContextTokenKey).(*UserInfo)
+	return u, ok
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/pkg/options/options.go b/vendor/github.com/libopenstorage/openstorage/pkg/options/options.go
new file mode 100644
index 000000000..e7674e1f9
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/pkg/options/options.go
@@ -0,0 +1,84 @@
+package options
+
+import (
+	"strconv"
+
+	"github.com/libopenstorage/openstorage/api"
+)
+
+// Options specifies keys from a key-value pair
+// that can be passed in to the APIS
+const (
+	// OptionsSecret is an option provided to the following Openstorage Volume API
+	// - Attach
+	// It indicates the name of the secret stored in a secret store
+	// SECRET_NAME in case of hashicorp's Vault will be the key from the key-value pair stored in its kv backend.
+	// SECRET_NAME for Kubernetes secret, it is the name of the secret object itself
+	OptionsSecret = "SECRET_NAME"
+	// OptionsSecretKey is an option provided to the following Openstorage Volume API
+	// - Attach
+	// SECRET_KEY in case of kubernetes will be the key stored in the kubernetes secret with name SECRET_NAME
+	OptionsSecretKey = "SECRET_KEY"
+	// OptionsSecretContext is an option provided to the following Openstorage Volume API
+	// - Attach
+	// It indicates the additional context which could be used to retrieve the secret
+	// SECRET_CONTEXT in case of kubernetes secret is the namespace in which the secret is created
+	OptionsSecretContext = "SECRET_CONTEXT"
+	// OptionsUnmountBeforeDetach is an option provided to the following Openstorage Volume API
+	// - Detach
+	// It indicates the Volume Driver to issue an Unmount before trying the detach operation
+	OptionsUnmountBeforeDetach = "UNMOUNT_BEFORE_DETACH"
+	// OptionsDeleteAfterUnmount is an option provided to the following Openstorage Volume API
+	// - Unmount
+	// It indicates the Volume Driver to delete the mount path after a successful Unmount
+	OptionsDeleteAfterUnmount = "DELETE_AFTER_UNMOUNT"
+	// OptionsWaitBeforeDelete is an option provided to the following Openstorage Volume API
+	// - Unmount
+	// This option is used in conjunction with OptionsDeleteAfterUnmount.
+	// It indicates the Volume Driver to introduce a delay before deleting mount path
+	OptionsWaitBeforeDelete = "WAIT_BEFORE_DELETE"
+	// OptionsRedirectDetach is an option provided to the following Openstorage Volume API
+	// - Detach
+	// It indicates the Volume Driver to redirect detach to the node where volume is attached
+	OptionsRedirectDetach = "REDIRECT_DETACH"
+	// OptionsDeviceFuseMount is an option provided to the following Openstorage Volume APIs
+	// - Mount
+	// - Unmount
+	// It is used for volume types which use FUSE mounts.
+	// It provides the Volume Driver with the underlying name of fuse mount device
+	OptionsDeviceFuseMount = "DEV_FUSE_MOUNT"
+	// OptionsForceDetach is an option provided to the following Openstorage Volume API
+	// - Detach
+	// It indicates the Volume Driver to forcefully detach device from kernel
+	OptionsForceDetach = "FORCE_DETACH"
+)
+
+// IsBoolOptionSet checks if a boolean option key is set
+func IsBoolOptionSet(options map[string]string, key string) bool {
+	if options != nil {
+		if value, ok := options[key]; ok {
+			if b, err := strconv.ParseBool(value); err == nil {
+				return b
+			}
+		}
+	}
+
+	return false
+}
+
+// NewVolumeAttachOptions converts a map of options to api.SdkVolumeAttachOptions
+func NewVolumeAttachOptions(options map[string]string) *api.SdkVolumeAttachOptions {
+	return &api.SdkVolumeAttachOptions{
+		SecretName:    options[OptionsSecret],
+		SecretKey:     options[OptionsSecretKey],
+		SecretContext: options[OptionsSecretContext],
+	}
+}
+
+// NewVolumeUnmountOptions converts a map of options to api.SdkVolumeUnmounOptions
+func NewVolumeUnmountOptions(options map[string]string) *api.SdkVolumeUnmountOptions {
+	return &api.SdkVolumeUnmountOptions{
+		DeleteMountPath:                IsBoolOptionSet(options, OptionsDeleteAfterUnmount),
+		NoDelayBeforeDeletingMountPath: IsBoolOptionSet(options, OptionsWaitBeforeDelete),
+	}
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/volume/README.md b/vendor/github.com/libopenstorage/openstorage/volume/README.md
new file mode 100644
index 000000000..cb9f4eec8
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/volume/README.md
@@ -0,0 +1,41 @@
+## Volume Drivers
+
+Volume drivers implement the [Volume Plugin Interface](https://docs.docker.com/engine/extend/plugins_volume/).
+This provides an interface to register a volume driver and advertise the driver to Docker.  Registering a driver with this volume interface will cause Docker to be able to communicate with the driver to create and assign volumes to a container.
+
+A volume spec is needed to create a volume.  A volume spec looks like:
+
+```
+// VolumeSpec has the properties needed to create a volume.
+type VolumeSpec struct {
+	// Ephemeral storage
+	Ephemeral bool
+	// Thin provisioned volume size in bytes
+	Size uint64
+	// Format disk with this FileSystem
+	Format Filesystem
+	// BlockSize for file system
+	BlockSize int
+	// HA Level specifies the number of nodes that are
+	// allowed to fail, and yet data is availabel.
+	// A value of 0 implies that data is not erasure coded,
+	// a failure of a node will lead to data loss.
+	HALevel int
+	// This disk's CoS
+	Cos VolumeCos
+	// Perform dedupe on this disk
+	Dedupe bool
+	// SnapshotInterval in minutes, set to 0 to disable Snapshots
+	SnapshotInterval int
+	// Volume configuration labels
+	ConfigLabels Labels
+}
+```
+
+Various volume driver implementations can be found in the `drivers` directory.
+
+### Block Drivers
+Block drivers operate at the block layer.  They provide raw volumes formatted with a user specified filesystem.  This volume is then mounted into the container at a path specified using the `docker run -v` option.
+
+### File Drivers
+File drivers operate at the filesystem layer.
diff --git a/vendor/github.com/libopenstorage/openstorage/volume/cloudbackup.go b/vendor/github.com/libopenstorage/openstorage/volume/cloudbackup.go
new file mode 100644
index 000000000..ca82a60e3
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/volume/cloudbackup.go
@@ -0,0 +1,64 @@
+package volume
+
+import (
+	"fmt"
+	"time"
+
+	"github.com/cenkalti/backoff"
+	"github.com/libopenstorage/openstorage/api"
+)
+
+var (
+	cloudsnapBackoffInitialInterval   = 5 * time.Second
+	cloudsnapBackoffDefaultMultiplier = float64(1)
+	cloudsnapBackoffMaxInterval       = 2 * time.Minute
+	// Wait indefinitely
+	cloudsnapBackoffMaxElapsedTime = 0 * time.Second
+)
+
+func CloudBackupWaitForCompletion(
+	cl CloudBackupDriver,
+	taskId string,
+	opType api.CloudBackupOpType,
+) error {
+	cloudsnapBackoff := backoff.NewExponentialBackOff()
+	cloudsnapBackoff.InitialInterval = cloudsnapBackoffInitialInterval
+	cloudsnapBackoff.Multiplier = cloudsnapBackoffDefaultMultiplier
+	cloudsnapBackoff.MaxInterval = cloudsnapBackoffMaxInterval
+	cloudsnapBackoff.MaxElapsedTime = cloudsnapBackoffMaxElapsedTime
+
+	var opError error
+	err := backoff.Retry(func() error {
+		response, err := cl.CloudBackupStatus(&api.CloudBackupStatusRequest{
+			ID: taskId,
+		})
+		if err != nil {
+			return err
+		}
+		csStatus, present := response.Statuses[taskId]
+		if !present {
+			opError = fmt.Errorf("failed to get cloudsnap status for volume: %s", taskId)
+			return nil
+		}
+
+		err = fmt.Errorf("CloudBackup operation %v for %v in state %v", opType, taskId, csStatus.Status)
+		switch csStatus.Status {
+		case api.CloudBackupStatusFailed, api.CloudBackupStatusAborted, api.CloudBackupStatusStopped:
+			opError = err
+			return nil
+		case api.CloudBackupStatusDone:
+			opError = nil
+			return nil
+		case api.CloudBackupStatusNotStarted, api.CloudBackupStatusActive, api.CloudBackupStatusPaused:
+			return err
+		default:
+			opError = err
+			return nil
+		}
+	}, cloudsnapBackoff)
+	if err != nil {
+		return err
+	}
+
+	return opError
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/volume/errors.go b/vendor/github.com/libopenstorage/openstorage/volume/errors.go
new file mode 100644
index 000000000..04c79974b
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/volume/errors.go
@@ -0,0 +1,15 @@
+package volume
+
+// CredentialError error returned for credential operations
+type CredentialError struct {
+	// Msg is human understandable error message
+	Msg string
+}
+
+func NewCredentialError(msg string) error {
+	return &CredentialError{Msg: msg}
+}
+
+func (e *CredentialError) Error() string {
+	return e.Msg
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/volume/volume.go b/vendor/github.com/libopenstorage/openstorage/volume/volume.go
new file mode 100644
index 000000000..3ebc6f950
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/volume/volume.go
@@ -0,0 +1,296 @@
+package volume
+
+import (
+	"errors"
+
+	"github.com/libopenstorage/openstorage/api"
+)
+
+var (
+	// ErrAlreadyShutdown returned when driver is shutdown
+	ErrAlreadyShutdown = errors.New("VolumeDriverProvider already shutdown")
+	// ErrExit returned when driver already registered
+	ErrExist = errors.New("Already exists")
+	// ErrDriverNotFound returned when a driver is not registered
+	ErrDriverNotFound = errors.New("Driver implementation not found")
+	// ErrDriverInitializing returned when a driver is initializing
+	ErrDriverInitializing = errors.New("Driver is initializing")
+	// ErrEnoEnt returned when volume does not exist
+	ErrEnoEnt = errors.New("Volume does not exist.")
+	// ErrEnomem returned when we are out of memory
+	ErrEnomem = errors.New("Out of memory.")
+	// ErrEinval returned when an invalid input is provided
+	ErrEinval = errors.New("Invalid argument")
+	// ErrVolDetached returned when volume is in detached state
+	ErrVolDetached = errors.New("Volume is detached")
+	// ErrVolAttached returned when volume is in attached state
+	ErrVolAttached = errors.New("Volume is attached")
+	// ErrVolAttachedOnRemoteNode returned when volume is in attached on different node
+	ErrVolAttachedOnRemoteNode = errors.New("Volume is attached on another node")
+	// ErrVolAttachedScale returned when volume is attached and can be scaled
+	ErrVolAttachedScale = errors.New("Volume is attached on another node." +
+		" Increase scale factor to create more instances")
+	// ErrVolHasSnaps returned when volume has previous snapshots
+	ErrVolHasSnaps = errors.New("Volume has snapshots associated")
+	// ErrNotSupported returned when the operation is not supported
+	ErrNotSupported = errors.New("Operation not supported")
+	// ErrVolBusy returned when volume is in busy state
+	ErrVolBusy = errors.New("Volume is busy")
+	// ErrAborted returned when capacityUsageInfo cannot be returned
+	ErrAborted = errors.New("Aborted CapacityUsage request")
+	// ErrInvalidName returned when Cloudbackup Name/request is invalid
+	ErrInvalidName = errors.New("Invalid name for cloud backup/restore request")
+)
+
+// Constants used by the VolumeDriver
+const (
+	// APIVersion for the volume management apis
+	APIVersion = "v1"
+	// PluginAPIBase where the docker unix socket resides
+	PluginAPIBase = "/run/docker/plugins/"
+	// DriverAPIBase where the osd unix socket resides
+	DriverAPIBase = "/var/lib/osd/driver/"
+	// MountBase for osd mountpoints
+	MountBase = "/var/lib/osd/mounts/"
+	// VolumeBase for osd volumes
+	VolumeBase = "/var/lib/osd/"
+)
+
+const (
+	// LocationConstaint is a label that specifies data location constraint.
+	LocationConstraint = "LocationConstraint"
+	// LocalNode is an alias for this node - similar to localhost.
+	LocalNode = "LocalNode"
+)
+
+// Store defines the interface for basic volume store operations
+type Store interface {
+	// Lock volume specified by volumeID.
+	Lock(volumeID string) (interface{}, error)
+	// Lock volume with token obtained from call to Lock.
+	Unlock(token interface{}) error
+	// CreateVol returns error if volume with the same ID already existe.
+	CreateVol(vol *api.Volume) error
+	// GetVol from volumeID.
+	GetVol(volumeID string) (*api.Volume, error)
+	// UpdateVol with vol
+	UpdateVol(vol *api.Volume) error
+	// DeleteVol. Returns error if volume does not exist.
+	DeleteVol(volumeID string) error
+}
+
+// VolumeDriver is the main interface to be implemented by any storage driver.
+// Every driver must at minimum implement the ProtoDriver sub interface.
+type VolumeDriver interface {
+	IODriver
+	ProtoDriver
+	BlockDriver
+	Enumerator
+}
+
+// IODriver interfaces applicable to object store interfaces.
+type IODriver interface {
+	// Read sz bytes from specified volume at specified offset.
+	// Return number of bytes read and error.
+	Read(volumeID string, buf []byte, sz uint64, offset int64) (int64, error)
+	// Write sz bytes from specified volume at specified offset.
+	// Return number of bytes written and error.
+	Write(volumeID string, buf []byte, sz uint64, offset int64) (int64, error)
+	// Flush writes to stable storage.
+	// Return error.
+	Flush(volumeID string) error
+}
+
+// SnapshotDriver interfaces provides snapshot capability
+type SnapshotDriver interface {
+	// Snapshot create volume snapshot.
+	// Errors ErrEnoEnt may be returned
+	Snapshot(volumeID string, readonly bool, locator *api.VolumeLocator, noRetry bool) (string, error)
+	// Restore restores volume to specified snapshot.
+	Restore(volumeID string, snapshotID string) error
+	// SnapshotGroup takes a snapshot of a group of volumes that can be specified with either of the following
+	//	1. group ID
+	//	2. labels
+	//	3. volumeIDs
+	SnapshotGroup(groupID string, labels map[string]string, volumeIDs []string) (*api.GroupSnapCreateResponse, error)
+}
+
+// StatsDriver interface provides stats features
+type StatsDriver interface {
+	// Stats for specified volume.
+	// cumulative stats are /proc/diskstats style stats.
+	// nonCumulative stats are stats for specific duration.
+	// Errors ErrEnoEnt may be returned
+	Stats(volumeID string, cumulative bool) (*api.Stats, error)
+	// UsedSize returns currently used volume size.
+	// Errors ErrEnoEnt may be returned.
+	UsedSize(volumeID string) (uint64, error)
+	// GetActiveRequests get active requests
+	GetActiveRequests() (*api.ActiveRequests, error)
+	// CapacityUsage returns both exclusive and shared usage
+	// of a snap/volume
+	CapacityUsage(ID string) (*api.CapacityUsageResponse, error)
+}
+
+type QuiesceDriver interface {
+	// Freezes mounted filesystem resulting in a quiesced volume state.
+	// Only one freeze operation may be active at any given time per volume.
+	// Unfreezes after timeout seconds if it is non-zero.
+	// An optional quiesceID can be passed for driver-specific use.
+	Quiesce(volumeID string, timeoutSeconds uint64, quiesceID string) error
+	// Unfreezes mounted filesystem if it was frozen.
+	Unquiesce(volumeID string) error
+}
+
+// CloudBackupDriver interface provides Cloud backup features
+type CloudBackupDriver interface {
+	// CloudBackupCreate uploads snapshot of a volume to the cloud
+	CloudBackupCreate(input *api.CloudBackupCreateRequest) (*api.CloudBackupCreateResponse, error)
+	// CloudBackupGroupCreate creates and then uploads volumegroup snapshots
+	CloudBackupGroupCreate(input *api.CloudBackupGroupCreateRequest) (*api.CloudBackupGroupCreateResponse, error)
+	// CloudBackupRestore downloads a cloud backup and restores it to a volume
+	CloudBackupRestore(input *api.CloudBackupRestoreRequest) (*api.CloudBackupRestoreResponse, error)
+	// CloudBackupEnumerate enumerates the backups for a given cluster/credential/volumeID
+	CloudBackupEnumerate(input *api.CloudBackupEnumerateRequest) (*api.CloudBackupEnumerateResponse, error)
+	// CloudBackupDelete deletes the specified backup in cloud
+	CloudBackupDelete(input *api.CloudBackupDeleteRequest) error
+	// CloudBackupDelete deletes all the backups for a given volume in cloud
+	CloudBackupDeleteAll(input *api.CloudBackupDeleteAllRequest) error
+	// CloudBackupStatus indicates the most recent status of backup/restores
+	CloudBackupStatus(input *api.CloudBackupStatusRequest) (*api.CloudBackupStatusResponse, error)
+	// CloudBackupCatalog displays listing of backup content
+	CloudBackupCatalog(input *api.CloudBackupCatalogRequest) (*api.CloudBackupCatalogResponse, error)
+	// CloudBackupHistory displays past backup/restore operations on a volume
+	CloudBackupHistory(input *api.CloudBackupHistoryRequest) (*api.CloudBackupHistoryResponse, error)
+	// CloudBackupStateChange allows a current backup state transisions(pause/resume/stop)
+	CloudBackupStateChange(input *api.CloudBackupStateChangeRequest) error
+	// CloudBackupSchedCreate creates a schedule to backup volume to cloud
+	CloudBackupSchedCreate(input *api.CloudBackupSchedCreateRequest) (*api.CloudBackupSchedCreateResponse, error)
+	// CloudBackupGroupSchedCreate creates a schedule to backup a volumegroup to cloud
+	CloudBackupGroupSchedCreate(input *api.CloudBackupGroupSchedCreateRequest) (*api.CloudBackupSchedCreateResponse, error)
+	// CloudBackupSchedDelete delete a backup schedule
+	CloudBackupSchedDelete(input *api.CloudBackupSchedDeleteRequest) error
+	// CloudBackupSchedEnumerate enumerates the configured backup schedules in the cluster
+	CloudBackupSchedEnumerate() (*api.CloudBackupSchedEnumerateResponse, error)
+}
+
+// CloudMigrateDriver interface provides Cloud migration features
+type CloudMigrateDriver interface {
+	// CloudMigrateStart starts a migrate operation
+	CloudMigrateStart(request *api.CloudMigrateStartRequest) (*api.CloudMigrateStartResponse, error)
+	// CloudMigrateCancel cancels a migrate operation
+	CloudMigrateCancel(request *api.CloudMigrateCancelRequest) error
+	// CloudMigrateStatus returns status for the migration operations
+	CloudMigrateStatus(request *api.CloudMigrateStatusRequest) (*api.CloudMigrateStatusResponse, error)
+}
+
+// ProtoDriver must be implemented by all volume drivers.  It specifies the
+// most basic functionality, such as creating and deleting volumes.
+type ProtoDriver interface {
+	SnapshotDriver
+	StatsDriver
+	QuiesceDriver
+	CredsDriver
+	CloudBackupDriver
+	CloudMigrateDriver
+	// Name returns the name of the driver.
+	Name() string
+	// Type of this driver
+	Type() api.DriverType
+	// Version information of the driver
+	Version() (*api.StorageVersion, error)
+	// Create a new Vol for the specific volume spec.
+	// It returns a system generated VolumeID that uniquely identifies the volume
+	Create(locator *api.VolumeLocator, Source *api.Source, spec *api.VolumeSpec) (string, error)
+	// Delete volume.
+	// Errors ErrEnoEnt, ErrVolHasSnaps may be returned.
+	Delete(volumeID string) error
+	// Mount volume at specified path
+	// Errors ErrEnoEnt, ErrVolDetached may be returned.
+	Mount(volumeID string, mountPath string, options map[string]string) error
+	// MountedAt return volume mounted at specified mountpath.
+	MountedAt(mountPath string) string
+	// Unmount volume at specified path
+	// Errors ErrEnoEnt, ErrVolDetached may be returned.
+	Unmount(volumeID string, mountPath string, options map[string]string) error
+	// Update not all fields of the spec are supported, ErrNotSupported will be thrown for unsupported
+	// updates.
+	Set(volumeID string, locator *api.VolumeLocator, spec *api.VolumeSpec) error
+	// Status returns a set of key-value pairs which give low
+	// level diagnostic status about this driver.
+	Status() [][2]string
+	// Shutdown and cleanup.
+	Shutdown()
+	// DU specified volume and potentially the subfolder if provided.
+	Catalog(volumeid, subfolder string, depth string) (api.CatalogResponse, error)
+}
+
+// Enumerator provides a set of interfaces to get details on a set of volumes.
+type Enumerator interface {
+	// Inspect specified volumes.
+	// Returns slice of volumes that were found.
+	Inspect(volumeIDs []string) ([]*api.Volume, error)
+	// Enumerate volumes that map to the volumeLocator. Locator fields may be regexp.
+	// If locator fields are left blank, this will return all volumes.
+	Enumerate(locator *api.VolumeLocator, labels map[string]string) ([]*api.Volume, error)
+	// Enumerate snaps for specified volumes
+	SnapEnumerate(volID []string, snapLabels map[string]string) ([]*api.Volume, error)
+}
+
+// StoreEnumerator combines Store and Enumerator capabilities
+type StoreEnumerator interface {
+	Store
+	Enumerator
+}
+
+// BlockDriver needs to be implemented by block volume drivers.  Filesystem volume
+// drivers can ignore this interface and include the builtin DefaultBlockDriver.
+type BlockDriver interface {
+	// Attach map device to the host.
+	// On success the devicePath specifies location where the device is exported
+	// Errors ErrEnoEnt, ErrVolAttached may be returned.
+	Attach(volumeID string, attachOptions map[string]string) (string, error)
+	// Detach device from the host.
+	// Errors ErrEnoEnt, ErrVolDetached may be returned.
+	Detach(volumeID string, options map[string]string) error
+}
+
+// CredsDriver provides methods to handle credentials
+type CredsDriver interface {
+	// CredsCreate creates credential for a given cloud provider
+	CredsCreate(params map[string]string) (string, error)
+	// CredsList lists the configured credentials in the cluster
+	CredsEnumerate() (map[string]interface{}, error)
+	// CredsDelete deletes the credential associated credUUID
+	CredsDelete(credUUID string) error
+	// CredsValidate validates the credential associated credUUID
+	CredsValidate(credUUID string) error
+}
+
+// VolumeDriverProvider provides VolumeDrivers.
+type VolumeDriverProvider interface {
+	// Get gets the VolumeDriver for the given name.
+	// If a VolumeDriver was not created for the given name, the error ErrDriverNotFound is returned.
+	Get(name string) (VolumeDriver, error)
+	// Shutdown shuts down all volume drivers.
+	Shutdown() error
+}
+
+// VolumeDriverRegistry registers VolumeDrivers.
+type VolumeDriverRegistry interface {
+	VolumeDriverProvider
+	// New creates the VolumeDriver for the given name.
+	// If a VolumeDriver was already created for the given name, the error ErrExist is returned.
+	Register(name string, params map[string]string) error
+
+	// Add inserts a new VolumeDriver provider with a well known name.
+	Add(name string, init func(map[string]string) (VolumeDriver, error)) error
+
+	// Removes driver from registry. Does nothing if driver name does not exist.
+	Remove(name string)
+}
+
+// NewVolumeDriverRegistry constructs a new VolumeDriverRegistry.
+func NewVolumeDriverRegistry(nameToInitFunc map[string]func(map[string]string) (VolumeDriver, error)) VolumeDriverRegistry {
+	return newVolumeDriverRegistry(nameToInitFunc)
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/volume/volume_driver_registry.go b/vendor/github.com/libopenstorage/openstorage/volume/volume_driver_registry.go
new file mode 100644
index 000000000..726ec5770
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/volume/volume_driver_registry.go
@@ -0,0 +1,82 @@
+package volume
+
+import "sync"
+
+type volumeDriverRegistry struct {
+	nameToInitFunc     map[string]func(map[string]string) (VolumeDriver, error)
+	nameToVolumeDriver map[string]VolumeDriver
+	lock               *sync.RWMutex
+	isShutdown         bool
+}
+
+func newVolumeDriverRegistry(nameToInitFunc map[string]func(map[string]string) (VolumeDriver, error)) *volumeDriverRegistry {
+	return &volumeDriverRegistry{
+		nameToInitFunc,
+		make(map[string]VolumeDriver),
+		&sync.RWMutex{},
+		false,
+	}
+}
+
+func (v *volumeDriverRegistry) Get(name string) (VolumeDriver, error) {
+	v.lock.RLock()
+	defer v.lock.RUnlock()
+	if v.isShutdown {
+		return nil, ErrAlreadyShutdown
+	}
+	volumeDriver, ok := v.nameToVolumeDriver[name]
+	if !ok {
+		return nil, ErrDriverNotFound
+	}
+	return volumeDriver, nil
+}
+
+func (v *volumeDriverRegistry) Add(name string, init func(map[string]string) (VolumeDriver, error)) error {
+	v.lock.Lock()
+	defer v.lock.Unlock()
+
+	v.nameToInitFunc[name] = init
+
+	return nil
+}
+
+func (v *volumeDriverRegistry) Remove(name string) {
+	v.lock.Lock()
+	defer v.lock.Unlock()
+
+	delete(v.nameToInitFunc, name)
+	delete(v.nameToVolumeDriver, name)
+}
+
+func (v *volumeDriverRegistry) Register(name string, params map[string]string) error {
+	initFunc, ok := v.nameToInitFunc[name]
+	if !ok {
+		return ErrNotSupported
+	}
+	v.lock.Lock()
+	defer v.lock.Unlock()
+	if v.isShutdown {
+		return ErrAlreadyShutdown
+	}
+	if _, ok := v.nameToVolumeDriver[name]; ok {
+		return ErrExist
+	}
+	volumeDriver, err := initFunc(params)
+	if err != nil {
+		return err
+	}
+	v.nameToVolumeDriver[name] = volumeDriver
+	return nil
+}
+
+func (v *volumeDriverRegistry) Shutdown() error {
+	v.lock.Lock()
+	if v.isShutdown {
+		return ErrAlreadyShutdown
+	}
+	for _, volumeDriver := range v.nameToVolumeDriver {
+		volumeDriver.Shutdown()
+	}
+	v.isShutdown = true
+	return nil
+}
diff --git a/vendor/github.com/libopenstorage/openstorage/volume/volume_not_supported.go b/vendor/github.com/libopenstorage/openstorage/volume/volume_not_supported.go
new file mode 100644
index 000000000..675220ba3
--- /dev/null
+++ b/vendor/github.com/libopenstorage/openstorage/volume/volume_not_supported.go
@@ -0,0 +1,233 @@
+package volume
+
+import (
+	"github.com/libopenstorage/openstorage/api"
+)
+
+var (
+	// BlockNotSupported is a default (null) block driver implementation.  This can be
+	// used by drivers that do not want to (or care about) implementing the attach,
+	// format and detach interfaces.
+	BlockNotSupported = &blockNotSupported{}
+	// SnapshotNotSupported is a null snapshot driver implementation. This can be used
+	// by drivers that do not want to implement the snapshot interface
+	SnapshotNotSupported = &snapshotNotSupported{}
+	// IONotSupported is a null IODriver interface
+	IONotSupported = &ioNotSupported{}
+	// StatsNotSupported is a null stats driver implementation. This can be used
+	// by drivers that do not want to implement the stats interface.
+	StatsNotSupported = &statsNotSupported{}
+	// QuiesceNotSupported implements quiesce/unquiesce by returning not
+	// supported error.
+	QuiesceNotSupported = &quiesceNotSupported{}
+	// CredsNotSupported implements credentials by returning not supported error
+	CredsNotSupported = &credsNotSupported{}
+	// CloudBackupNotSupported implements cloudBackupDriver by returning
+	// Not supported error
+	CloudBackupNotSupported = &cloudBackupNotSupported{}
+	// CloudMigrateNotSupported implements cloudMigrateDriver by returning
+	// Not supported error
+	CloudMigrateNotSupported = &cloudMigrateNotSupported{}
+)
+
+type blockNotSupported struct{}
+
+func (b *blockNotSupported) Attach(volumeID string, attachOptions map[string]string) (string, error) {
+	return "", ErrNotSupported
+}
+
+func (b *blockNotSupported) Detach(volumeID string, options map[string]string) error {
+	return ErrNotSupported
+}
+
+type snapshotNotSupported struct{}
+
+func (s *snapshotNotSupported) Snapshot(volumeID string, readonly bool, locator *api.VolumeLocator, noRetry bool) (string, error) {
+	return "", ErrNotSupported
+}
+
+func (s *snapshotNotSupported) Restore(volumeID, snapshotID string) error {
+	return ErrNotSupported
+}
+
+func (s *snapshotNotSupported) SnapshotGroup(groupID string, labels map[string]string, volumeIDs []string) (*api.GroupSnapCreateResponse, error) {
+	return nil, ErrNotSupported
+}
+
+type ioNotSupported struct{}
+
+func (i *ioNotSupported) Read(volumeID string, buffer []byte, size uint64, offset int64) (int64, error) {
+	return 0, ErrNotSupported
+}
+
+func (i *ioNotSupported) Write(volumeID string, buffer []byte, size uint64, offset int64) (int64, error) {
+	return 0, ErrNotSupported
+}
+
+func (i *ioNotSupported) Flush(volumeID string) error {
+	return ErrNotSupported
+}
+
+type statsNotSupported struct{}
+
+// Stats returns stats
+func (s *statsNotSupported) Stats(
+	volumeID string,
+	cumulative bool,
+) (*api.Stats, error) {
+	return nil, ErrNotSupported
+}
+
+// UsedSize returns allocated size
+func (s *statsNotSupported) UsedSize(volumeID string) (uint64, error) {
+	return 0, ErrNotSupported
+}
+
+// GetActiveRequests gets active requests
+func (s *statsNotSupported) GetActiveRequests() (*api.ActiveRequests, error) {
+	return nil, nil
+}
+
+// GetCapacityUsage gets exclusive and shared capacity
+// usage of snap
+func (s *statsNotSupported) CapacityUsage(
+	ID string,
+) (*api.CapacityUsageResponse, error) {
+	return nil, ErrNotSupported
+}
+
+type quiesceNotSupported struct{}
+
+func (s *quiesceNotSupported) Quiesce(
+	volumeID string,
+	timeoutSeconds uint64,
+	quiesceID string,
+) error {
+	return ErrNotSupported
+}
+
+func (s *quiesceNotSupported) Unquiesce(volumeID string) error {
+	return ErrNotSupported
+}
+
+type credsNotSupported struct{}
+
+func (c *credsNotSupported) CredsCreate(
+	params map[string]string,
+) (string, error) {
+	return "", ErrNotSupported
+}
+
+func (c *credsNotSupported) CredsDelete(
+	uuid string,
+) error {
+	return ErrNotSupported
+}
+
+func (c *credsNotSupported) CredsEnumerate() (map[string]interface{}, error) {
+	creds := make(map[string]interface{}, 0)
+	return creds, ErrNotSupported
+}
+
+func (c *credsNotSupported) CredsValidate(
+	uuid string,
+) error {
+	return ErrNotSupported
+}
+
+type cloudBackupNotSupported struct{}
+
+func (cl *cloudBackupNotSupported) CloudBackupCreate(
+	input *api.CloudBackupCreateRequest,
+) (*api.CloudBackupCreateResponse, error) {
+	return nil, ErrNotSupported
+}
+
+func (cl *cloudBackupNotSupported) CloudBackupGroupCreate(
+	input *api.CloudBackupGroupCreateRequest,
+) (*api.CloudBackupGroupCreateResponse, error) {
+	return nil, ErrNotSupported
+}
+
+func (cl *cloudBackupNotSupported) CloudBackupRestore(
+	input *api.CloudBackupRestoreRequest,
+) (*api.CloudBackupRestoreResponse, error) {
+	return nil, ErrNotSupported
+}
+
+func (cl *cloudBackupNotSupported) CloudBackupEnumerate(
+	input *api.CloudBackupEnumerateRequest,
+) (*api.CloudBackupEnumerateResponse, error) {
+	return nil, ErrNotSupported
+}
+
+func (cl *cloudBackupNotSupported) CloudBackupDelete(
+	input *api.CloudBackupDeleteRequest,
+) error {
+	return ErrNotSupported
+}
+
+func (cl *cloudBackupNotSupported) CloudBackupDeleteAll(
+	input *api.CloudBackupDeleteAllRequest,
+) error {
+	return ErrNotSupported
+}
+
+func (cl *cloudBackupNotSupported) CloudBackupStatus(
+	input *api.CloudBackupStatusRequest,
+) (*api.CloudBackupStatusResponse, error) {
+	return nil, ErrNotSupported
+}
+
+func (cl *cloudBackupNotSupported) CloudBackupCatalog(
+	input *api.CloudBackupCatalogRequest,
+) (*api.CloudBackupCatalogResponse, error) {
+	return nil, ErrNotSupported
+}
+
+func (cl *cloudBackupNotSupported) CloudBackupHistory(
+	input *api.CloudBackupHistoryRequest,
+) (*api.CloudBackupHistoryResponse, error) {
+	return nil, ErrNotSupported
+}
+
+func (cl *cloudBackupNotSupported) CloudBackupStateChange(
+	input *api.CloudBackupStateChangeRequest,
+) error {
+	return ErrNotSupported
+}
+
+func (cl *cloudBackupNotSupported) CloudBackupSchedCreate(
+	input *api.CloudBackupSchedCreateRequest,
+) (*api.CloudBackupSchedCreateResponse, error) {
+	return nil, ErrNotSupported
+}
+
+func (cl *cloudBackupNotSupported) CloudBackupGroupSchedCreate(
+	input *api.CloudBackupGroupSchedCreateRequest,
+) (*api.CloudBackupSchedCreateResponse, error) {
+	return nil, ErrNotSupported
+}
+
+func (cl *cloudBackupNotSupported) CloudBackupSchedDelete(
+	input *api.CloudBackupSchedDeleteRequest,
+) error {
+	return ErrNotSupported
+}
+
+func (cl *cloudBackupNotSupported) CloudBackupSchedEnumerate() (*api.CloudBackupSchedEnumerateResponse, error) {
+	return nil, ErrNotSupported
+}
+
+type cloudMigrateNotSupported struct{}
+
+func (cl *cloudMigrateNotSupported) CloudMigrateStart(request *api.CloudMigrateStartRequest) (*api.CloudMigrateStartResponse, error) {
+	return nil, ErrNotSupported
+}
+
+func (cl *cloudMigrateNotSupported) CloudMigrateCancel(request *api.CloudMigrateCancelRequest) error {
+	return ErrNotSupported
+}
+func (cl *cloudMigrateNotSupported) CloudMigrateStatus(request *api.CloudMigrateStatusRequest) (*api.CloudMigrateStatusResponse, error) {
+	return nil, ErrNotSupported
+}
diff --git a/vendor/github.com/mohae/deepcopy/.gitignore b/vendor/github.com/mohae/deepcopy/.gitignore
new file mode 100644
index 000000000..5846dd153
--- /dev/null
+++ b/vendor/github.com/mohae/deepcopy/.gitignore
@@ -0,0 +1,26 @@
+# Compiled Object files, Static and Dynamic libs (Shared Objects)
+*.o
+*.a
+*.so
+
+# Folders
+_obj
+_test
+
+# Architecture specific extensions/prefixes
+*.[568vq]
+[568vq].out
+
+*.cgo1.go
+*.cgo2.c
+_cgo_defun.c
+_cgo_gotypes.go
+_cgo_export.*
+
+_testmain.go
+
+*.exe
+*.test
+*~
+*.out
+*.log
diff --git a/vendor/github.com/mohae/deepcopy/.travis.yml b/vendor/github.com/mohae/deepcopy/.travis.yml
new file mode 100644
index 000000000..fd47a8cf7
--- /dev/null
+++ b/vendor/github.com/mohae/deepcopy/.travis.yml
@@ -0,0 +1,11 @@
+language: go
+
+go:
+  - tip
+
+matrix:
+  allow_failures:
+    - go: tip
+
+script:
+  - go test ./...
diff --git a/vendor/github.com/mohae/deepcopy/LICENSE b/vendor/github.com/mohae/deepcopy/LICENSE
new file mode 100644
index 000000000..419673f00
--- /dev/null
+++ b/vendor/github.com/mohae/deepcopy/LICENSE
@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2014 Joel
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/vendor/github.com/mohae/deepcopy/README.md b/vendor/github.com/mohae/deepcopy/README.md
new file mode 100644
index 000000000..f81841885
--- /dev/null
+++ b/vendor/github.com/mohae/deepcopy/README.md
@@ -0,0 +1,8 @@
+deepCopy
+========
+[![GoDoc](https://godoc.org/github.com/mohae/deepcopy?status.svg)](https://godoc.org/github.com/mohae/deepcopy)[![Build Status](https://travis-ci.org/mohae/deepcopy.png)](https://travis-ci.org/mohae/deepcopy)
+
+DeepCopy makes deep copies of things: unexported field values are not copied.
+
+## Usage
+    cpy := deepcopy.Copy(orig)
diff --git a/vendor/github.com/mohae/deepcopy/deepcopy.go b/vendor/github.com/mohae/deepcopy/deepcopy.go
new file mode 100644
index 000000000..ba763ad09
--- /dev/null
+++ b/vendor/github.com/mohae/deepcopy/deepcopy.go
@@ -0,0 +1,125 @@
+// deepcopy makes deep copies of things. A standard copy will copy the
+// pointers: deep copy copies the values pointed to.  Unexported field
+// values are not copied.
+//
+// Copyright (c)2014-2016, Joel Scoble (github.com/mohae), all rights reserved.
+// License: MIT, for more details check the included LICENSE file.
+package deepcopy
+
+import (
+	"reflect"
+	"time"
+)
+
+// Interface for delegating copy process to type
+type Interface interface {
+	DeepCopy() interface{}
+}
+
+// Iface is an alias to Copy; this exists for backwards compatibility reasons.
+func Iface(iface interface{}) interface{} {
+	return Copy(iface)
+}
+
+// Copy creates a deep copy of whatever is passed to it and returns the copy
+// in an interface{}.  The returned value will need to be asserted to the
+// correct type.
+func Copy(src interface{}) interface{} {
+	if src == nil {
+		return nil
+	}
+
+	// Make the interface a reflect.Value
+	original := reflect.ValueOf(src)
+
+	// Make a copy of the same type as the original.
+	cpy := reflect.New(original.Type()).Elem()
+
+	// Recursively copy the original.
+	copyRecursive(original, cpy)
+
+	// Return the copy as an interface.
+	return cpy.Interface()
+}
+
+// copyRecursive does the actual copying of the interface. It currently has
+// limited support for what it can handle. Add as needed.
+func copyRecursive(original, cpy reflect.Value) {
+	// check for implement deepcopy.Interface
+	if original.CanInterface() {
+		if copier, ok := original.Interface().(Interface); ok {
+			cpy.Set(reflect.ValueOf(copier.DeepCopy()))
+			return
+		}
+	}
+
+	// handle according to original's Kind
+	switch original.Kind() {
+	case reflect.Ptr:
+		// Get the actual value being pointed to.
+		originalValue := original.Elem()
+
+		// if  it isn't valid, return.
+		if !originalValue.IsValid() {
+			return
+		}
+		cpy.Set(reflect.New(originalValue.Type()))
+		copyRecursive(originalValue, cpy.Elem())
+
+	case reflect.Interface:
+		// If this is a nil, don't do anything
+		if original.IsNil() {
+			return
+		}
+		// Get the value for the interface, not the pointer.
+		originalValue := original.Elem()
+
+		// Get the value by calling Elem().
+		copyValue := reflect.New(originalValue.Type()).Elem()
+		copyRecursive(originalValue, copyValue)
+		cpy.Set(copyValue)
+
+	case reflect.Struct:
+		t, ok := original.Interface().(time.Time)
+		if ok {
+			cpy.Set(reflect.ValueOf(t))
+			return
+		}
+		// Go through each field of the struct and copy it.
+		for i := 0; i < original.NumField(); i++ {
+			// The Type's StructField for a given field is checked to see if StructField.PkgPath
+			// is set to determine if the field is exported or not because CanSet() returns false
+			// for settable fields.  I'm not sure why.  -mohae
+			if original.Type().Field(i).PkgPath != "" {
+				continue
+			}
+			copyRecursive(original.Field(i), cpy.Field(i))
+		}
+
+	case reflect.Slice:
+		if original.IsNil() {
+			return
+		}
+		// Make a new slice and copy each element.
+		cpy.Set(reflect.MakeSlice(original.Type(), original.Len(), original.Cap()))
+		for i := 0; i < original.Len(); i++ {
+			copyRecursive(original.Index(i), cpy.Index(i))
+		}
+
+	case reflect.Map:
+		if original.IsNil() {
+			return
+		}
+		cpy.Set(reflect.MakeMap(original.Type()))
+		for _, key := range original.MapKeys() {
+			originalValue := original.MapIndex(key)
+			copyValue := reflect.New(originalValue.Type()).Elem()
+			copyRecursive(originalValue, copyValue)
+			copyKey := Copy(key.Interface())
+			cpy.SetMapIndex(reflect.ValueOf(copyKey), copyValue)
+		}
+
+	default:
+		cpy.Set(original)
+	}
+}
diff --git a/vendor/github.com/pquerna/cachecontrol/.travis.yml b/vendor/github.com/pquerna/cachecontrol/.travis.yml
new file mode 100644
index 000000000..f140b4971
--- /dev/null
+++ b/vendor/github.com/pquerna/cachecontrol/.travis.yml
@@ -0,0 +1,10 @@
+language: go
+
+install:
+  - go get -d -v ./...
+  - go get -u github.com/stretchr/testify/require
+
+go:
+  - 1.7
+  - 1.8
+  - tip
diff --git a/vendor/github.com/pquerna/cachecontrol/LICENSE b/vendor/github.com/pquerna/cachecontrol/LICENSE
new file mode 100644
index 000000000..d64569567
--- /dev/null
+++ b/vendor/github.com/pquerna/cachecontrol/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/vendor/github.com/pquerna/cachecontrol/README.md b/vendor/github.com/pquerna/cachecontrol/README.md
new file mode 100644
index 000000000..da0b428f3
--- /dev/null
+++ b/vendor/github.com/pquerna/cachecontrol/README.md
@@ -0,0 +1,107 @@
+# cachecontrol: HTTP Caching Parser and Interpretation
+
+[![GoDoc](https://godoc.org/github.com/pquerna/cachecontrol?status.svg)](https://godoc.org/github.com/pquerna/cachecontrol)[![Build Status](https://travis-ci.org/pquerna/cachecontrol.svg?branch=master)](https://travis-ci.org/pquerna/cachecontrol)
+
+ 
+
+`cachecontrol` implements [RFC 7234](http://tools.ietf.org/html/rfc7234) __Hypertext Transfer Protocol (HTTP/1.1): Caching__.  It does this by parsing the `Cache-Control` and other headers, providing information about requests and responses -- but `cachecontrol` does not implement an actual cache backend, just the control plane to make decisions about if a particular response is cachable.
+
+# Usage
+
+`cachecontrol.CachableResponse` returns an array of [reasons](https://godoc.org/github.com/pquerna/cachecontrol/cacheobject#Reason) why a response should not be cached and when it expires.  In the case that `len(reasons) == 0`, the response is cachable according to the RFC.  However, some people want non-compliant caches for various business use cases, so each reason is specifically named, so if your cache wants to cache `POST` requests, it can easily do that, but still be RFC compliant in other situations.
+
+# Examples
+
+## Can you cache Example.com?
+
+```go
+package main
+
+import (
+	"github.com/pquerna/cachecontrol"
+
+	"fmt"
+	"io/ioutil"
+	"net/http"
+)
+
+func main() {
+	req, _ := http.NewRequest("GET", "http://www.example.com/", nil)
+
+	res, _ := http.DefaultClient.Do(req)
+	_, _ = ioutil.ReadAll(res.Body)
+
+	reasons, expires, _ := cachecontrol.CachableResponse(req, res, cachecontrol.Options{})
+
+	fmt.Println("Reasons to not cache: ", reasons)
+	fmt.Println("Expiration: ", expires.String())
+}
+```
+
+## Can I use this in a high performance caching server?
+
+`cachecontrol` is divided into two packages: `cachecontrol` with a high level API, and a lower level `cacheobject` package.  Use [Object](https://godoc.org/github.com/pquerna/cachecontrol/cacheobject#Object) in a high performance use case where you have previously parsed headers containing dates or would like to avoid memory allocations.
+
+```go
+package main
+
+import (
+	"github.com/pquerna/cachecontrol/cacheobject"
+
+	"fmt"
+	"io/ioutil"
+	"net/http"
+)
+
+func main() {
+	req, _ := http.NewRequest("GET", "http://www.example.com/", nil)
+
+	res, _ := http.DefaultClient.Do(req)
+	_, _ = ioutil.ReadAll(res.Body)
+
+	reqDir, _ := cacheobject.ParseRequestCacheControl(req.Header.Get("Cache-Control"))
+
+	resDir, _ := cacheobject.ParseResponseCacheControl(res.Header.Get("Cache-Control"))
+	expiresHeader, _ := http.ParseTime(res.Header.Get("Expires"))
+	dateHeader, _ := http.ParseTime(res.Header.Get("Date"))
+	lastModifiedHeader, _ := http.ParseTime(res.Header.Get("Last-Modified"))
+
+	obj := cacheobject.Object{
+		RespDirectives:         resDir,
+		RespHeaders:            res.Header,
+		RespStatusCode:         res.StatusCode,
+		RespExpiresHeader:      expiresHeader,
+		RespDateHeader:         dateHeader,
+		RespLastModifiedHeader: lastModifiedHeader,
+
+		ReqDirectives: reqDir,
+		ReqHeaders:    req.Header,
+		ReqMethod:     req.Method,
+
+		NowUTC: time.Now().UTC(),
+	}
+	rv := cacheobject.ObjectResults{}
+
+	cacheobject.CachableObject(&obj, &rv)
+	cacheobject.ExpirationObject(&obj, &rv)
+
+	fmt.Println("Errors: ", rv.OutErr)
+	fmt.Println("Reasons to not cache: ", rv.OutReasons)
+	fmt.Println("Warning headers to add: ", rv.OutWarnings)
+	fmt.Println("Expiration: ", rv.OutExpirationTime.String())
+}
+```
+
+## Improvements, bugs, adding features, and taking cachecontrol new directions!
+
+Please [open issues in Github](https://github.com/pquerna/cachecontrol/issues) for ideas, bugs, and general thoughts.  Pull requests are of course preferred :)
+
+# Credits
+
+`cachecontrol` has recieved significant contributions from:
+
+* [Paul Querna](https://github.com/pquerna) 
+
+## License
+
+`cachecontrol` is licensed under the [Apache License, Version 2.0](./LICENSE)
diff --git a/vendor/github.com/pquerna/cachecontrol/api.go b/vendor/github.com/pquerna/cachecontrol/api.go
new file mode 100644
index 000000000..f6f28585d
--- /dev/null
+++ b/vendor/github.com/pquerna/cachecontrol/api.go
@@ -0,0 +1,48 @@
+/**
+ *  Copyright 2015 Paul Querna
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License");
+ *  you may not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ *
+ */
+
+package cachecontrol
+
+import (
+	"github.com/pquerna/cachecontrol/cacheobject"
+
+	"net/http"
+	"time"
+)
+
+type Options struct {
+	// Set to True for a prviate cache, which is not shared amoung users (eg, in a browser)
+	// Set to False for a "shared" cache, which is more common in a server context.
+	PrivateCache bool
+}
+
+// Given an HTTP Request, the future Status Code, and an ResponseWriter,
+// determine the possible reasons a response SHOULD NOT be cached.
+func CachableResponseWriter(req *http.Request,
+	statusCode int,
+	resp http.ResponseWriter,
+	opts Options) ([]cacheobject.Reason, time.Time, error) {
+	return cacheobject.UsingRequestResponse(req, statusCode, resp.Header(), opts.PrivateCache)
+}
+
+// Given an HTTP Request and Response, determine the possible reasons a response SHOULD NOT
+// be cached.
+func CachableResponse(req *http.Request,
+	resp *http.Response,
+	opts Options) ([]cacheobject.Reason, time.Time, error) {
+	return cacheobject.UsingRequestResponse(req, resp.StatusCode, resp.Header, opts.PrivateCache)
+}
diff --git a/vendor/github.com/pquerna/cachecontrol/cacheobject/directive.go b/vendor/github.com/pquerna/cachecontrol/cacheobject/directive.go
new file mode 100644
index 000000000..afa640e77
--- /dev/null
+++ b/vendor/github.com/pquerna/cachecontrol/cacheobject/directive.go
@@ -0,0 +1,546 @@
+/**
+ *  Copyright 2015 Paul Querna
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License");
+ *  you may not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ *
+ */
+
+package cacheobject
+
+import (
+	"errors"
+	"math"
+	"net/http"
+	"net/textproto"
+	"strconv"
+	"strings"
+)
+
+// TODO(pquerna): add extensions from here: http://www.iana.org/assignments/http-cache-directives/http-cache-directives.xhtml
+
+var (
+	ErrQuoteMismatch         = errors.New("Missing closing quote")
+	ErrMaxAgeDeltaSeconds    = errors.New("Failed to parse delta-seconds in `max-age`")
+	ErrSMaxAgeDeltaSeconds   = errors.New("Failed to parse delta-seconds in `s-maxage`")
+	ErrMaxStaleDeltaSeconds  = errors.New("Failed to parse delta-seconds in `min-fresh`")
+	ErrMinFreshDeltaSeconds  = errors.New("Failed to parse delta-seconds in `min-fresh`")
+	ErrNoCacheNoArgs         = errors.New("Unexpected argument to `no-cache`")
+	ErrNoStoreNoArgs         = errors.New("Unexpected argument to `no-store`")
+	ErrNoTransformNoArgs     = errors.New("Unexpected argument to `no-transform`")
+	ErrOnlyIfCachedNoArgs    = errors.New("Unexpected argument to `only-if-cached`")
+	ErrMustRevalidateNoArgs  = errors.New("Unexpected argument to `must-revalidate`")
+	ErrPublicNoArgs          = errors.New("Unexpected argument to `public`")
+	ErrProxyRevalidateNoArgs = errors.New("Unexpected argument to `proxy-revalidate`")
+	// Experimental
+	ErrImmutableNoArgs                  = errors.New("Unexpected argument to `immutable`")
+	ErrStaleIfErrorDeltaSeconds         = errors.New("Failed to parse delta-seconds in `stale-if-error`")
+	ErrStaleWhileRevalidateDeltaSeconds = errors.New("Failed to parse delta-seconds in `stale-while-revalidate`")
+)
+
+func whitespace(b byte) bool {
+	if b == '\t' || b == ' ' {
+		return true
+	}
+	return false
+}
+
+func parse(value string, cd cacheDirective) error {
+	var err error = nil
+	i := 0
+
+	for i < len(value) && err == nil {
+		// eat leading whitespace or commas
+		if whitespace(value[i]) || value[i] == ',' {
+			i++
+			continue
+		}
+
+		j := i + 1
+
+		for j < len(value) {
+			if !isToken(value[j]) {
+				break
+			}
+			j++
+		}
+
+		token := strings.ToLower(value[i:j])
+		tokenHasFields := hasFieldNames(token)
+		/*
+			println("GOT TOKEN:")
+			println("	i -> ", i)
+			println("	j -> ", j)
+			println("	token -> ", token)
+		*/
+
+		if j+1 < len(value) && value[j] == '=' {
+			k := j + 1
+			// minimum size two bytes of "", but we let httpUnquote handle it.
+			if k < len(value) && value[k] == '"' {
+				eaten, result := httpUnquote(value[k:])
+				if eaten == -1 {
+					return ErrQuoteMismatch
+				}
+				i = k + eaten
+
+				err = cd.addPair(token, result)
+			} else {
+				z := k
+				for z < len(value) {
+					if tokenHasFields {
+						if whitespace(value[z]) {
+							break
+						}
+					} else {
+						if whitespace(value[z]) || value[z] == ',' {
+							break
+						}
+					}
+					z++
+				}
+				i = z
+
+				result := value[k:z]
+				if result != "" && result[len(result)-1] == ',' {
+					result = result[:len(result)-1]
+				}
+
+				err = cd.addPair(token, result)
+			}
+		} else {
+			if token != "," {
+				err = cd.addToken(token)
+			}
+			i = j
+		}
+	}
+
+	return err
+}
+
+// DeltaSeconds specifies a non-negative integer, representing
+// time in seconds: http://tools.ietf.org/html/rfc7234#section-1.2.1
+//
+// When set to -1, this means unset.
+//
+type DeltaSeconds int32
+
+// Parser for delta-seconds, a uint31, more or less:
+// http://tools.ietf.org/html/rfc7234#section-1.2.1
+func parseDeltaSeconds(v string) (DeltaSeconds, error) {
+	n, err := strconv.ParseUint(v, 10, 32)
+	if err != nil {
+		if numError, ok := err.(*strconv.NumError); ok {
+			if numError.Err == strconv.ErrRange {
+				return DeltaSeconds(math.MaxInt32), nil
+			}
+		}
+		return DeltaSeconds(-1), err
+	} else {
+		if n > math.MaxInt32 {
+			return DeltaSeconds(math.MaxInt32), nil
+		} else {
+			return DeltaSeconds(n), nil
+		}
+	}
+}
+
+// Fields present in a header.
+type FieldNames map[string]bool
+
+// internal interface for shared methods of RequestCacheDirectives and ResponseCacheDirectives
+type cacheDirective interface {
+	addToken(s string) error
+	addPair(s string, v string) error
+}
+
+// LOW LEVEL API: Repersentation of possible request directives in a `Cache-Control` header: http://tools.ietf.org/html/rfc7234#section-5.2.1
+//
+// Note: Many fields will be `nil` in practice.
+//
+type RequestCacheDirectives struct {
+
+	// max-age(delta seconds): http://tools.ietf.org/html/rfc7234#section-5.2.1.1
+	//
+	// The "max-age" request directive indicates that the client is
+	// unwilling to accept a response whose age is greater than the
+	// specified number of seconds.  Unless the max-stale request directive
+	// is also present, the client is not willing to accept a stale
+	// response.
+	MaxAge DeltaSeconds
+
+	// max-stale(delta seconds): http://tools.ietf.org/html/rfc7234#section-5.2.1.2
+	//
+	// The "max-stale" request directive indicates that the client is
+	// willing to accept a response that has exceeded its freshness
+	// lifetime.  If max-stale is assigned a value, then the client is
+	// willing to accept a response that has exceeded its freshness lifetime
+	// by no more than the specified number of seconds.  If no value is
+	// assigned to max-stale, then the client is willing to accept a stale
+	// response of any age.
+	MaxStale DeltaSeconds
+
+	// min-fresh(delta seconds): http://tools.ietf.org/html/rfc7234#section-5.2.1.3
+	//
+	// The "min-fresh" request directive indicates that the client is
+	// willing to accept a response whose freshness lifetime is no less than
+	// its current age plus the specified time in seconds.  That is, the
+	// client wants a response that will still be fresh for at least the
+	// specified number of seconds.
+	MinFresh DeltaSeconds
+
+	// no-cache(bool): http://tools.ietf.org/html/rfc7234#section-5.2.1.4
+	//
+	// The "no-cache" request directive indicates that a cache MUST NOT use
+	// a stored response to satisfy the request without successful
+	// validation on the origin server.
+	NoCache bool
+
+	// no-store(bool): http://tools.ietf.org/html/rfc7234#section-5.2.1.5
+	//
+	// The "no-store" request directive indicates that a cache MUST NOT
+	// store any part of either this request or any response to it.  This
+	// directive applies to both private and shared caches.
+	NoStore bool
+
+	// no-transform(bool): http://tools.ietf.org/html/rfc7234#section-5.2.1.6
+	//
+	// The "no-transform" request directive indicates that an intermediary
+	// (whether or not it implements a cache) MUST NOT transform the
+	// payload, as defined in Section 5.7.2 of RFC7230.
+	NoTransform bool
+
+	// only-if-cached(bool): http://tools.ietf.org/html/rfc7234#section-5.2.1.7
+	//
+	// The "only-if-cached" request directive indicates that the client only
+	// wishes to obtain a stored response.
+	OnlyIfCached bool
+
+	// Extensions: http://tools.ietf.org/html/rfc7234#section-5.2.3
+	//
+	// The Cache-Control header field can be extended through the use of one
+	// or more cache-extension tokens, each with an optional value.  A cache
+	// MUST ignore unrecognized cache directives.
+	Extensions []string
+}
+
+func (cd *RequestCacheDirectives) addToken(token string) error {
+	var err error = nil
+
+	switch token {
+	case "max-age":
+		err = ErrMaxAgeDeltaSeconds
+	case "max-stale":
+		err = ErrMaxStaleDeltaSeconds
+	case "min-fresh":
+		err = ErrMinFreshDeltaSeconds
+	case "no-cache":
+		cd.NoCache = true
+	case "no-store":
+		cd.NoStore = true
+	case "no-transform":
+		cd.NoTransform = true
+	case "only-if-cached":
+		cd.OnlyIfCached = true
+	default:
+		cd.Extensions = append(cd.Extensions, token)
+	}
+	return err
+}
+
+func (cd *RequestCacheDirectives) addPair(token string, v string) error {
+	var err error = nil
+
+	switch token {
+	case "max-age":
+		cd.MaxAge, err = parseDeltaSeconds(v)
+		if err != nil {
+			err = ErrMaxAgeDeltaSeconds
+		}
+	case "max-stale":
+		cd.MaxStale, err = parseDeltaSeconds(v)
+		if err != nil {
+			err = ErrMaxStaleDeltaSeconds
+		}
+	case "min-fresh":
+		cd.MinFresh, err = parseDeltaSeconds(v)
+		if err != nil {
+			err = ErrMinFreshDeltaSeconds
+		}
+	case "no-cache":
+		err = ErrNoCacheNoArgs
+	case "no-store":
+		err = ErrNoStoreNoArgs
+	case "no-transform":
+		err = ErrNoTransformNoArgs
+	case "only-if-cached":
+		err = ErrOnlyIfCachedNoArgs
+	default:
+		// TODO(pquerna): this sucks, making user re-parse
+		cd.Extensions = append(cd.Extensions, token+"="+v)
+	}
+
+	return err
+}
+
+// LOW LEVEL API: Parses a Cache Control Header from a Request into a set of directives.
+func ParseRequestCacheControl(value string) (*RequestCacheDirectives, error) {
+	cd := &RequestCacheDirectives{
+		MaxAge:   -1,
+		MaxStale: -1,
+		MinFresh: -1,
+	}
+
+	err := parse(value, cd)
+	if err != nil {
+		return nil, err
+	}
+	return cd, nil
+}
+
+// LOW LEVEL API: Repersentation of possible response directives in a `Cache-Control` header: http://tools.ietf.org/html/rfc7234#section-5.2.2
+//
+// Note: Many fields will be `nil` in practice.
+//
+type ResponseCacheDirectives struct {
+
+	// must-revalidate(bool): http://tools.ietf.org/html/rfc7234#section-5.2.2.1
+	//
+	// The "must-revalidate" response directive indicates that once it has
+	// become stale, a cache MUST NOT use the response to satisfy subsequent
+	// requests without successful validation on the origin server.
+	MustRevalidate bool
+
+	// no-cache(FieldName): http://tools.ietf.org/html/rfc7234#section-5.2.2.2
+	//
+	// The "no-cache" response directive indicates that the response MUST
+	// NOT be used to satisfy a subsequent request without successful
+	// validation on the origin server.
+	//
+	// If the no-cache response directive specifies one or more field-names,
+	// then a cache MAY use the response to satisfy a subsequent request,
+	// subject to any other restrictions on caching.  However, any header
+	// fields in the response that have the field-name(s) listed MUST NOT be
+	// sent in the response to a subsequent request without successful
+	// revalidation with the origin server.
+	NoCache FieldNames
+
+	// no-cache(cast-to-bool): http://tools.ietf.org/html/rfc7234#section-5.2.2.2
+	//
+	// While the RFC defines optional field-names on a no-cache directive,
+	// many applications only want to know if any no-cache directives were
+	// present at all.
+	NoCachePresent bool
+
+	// no-store(bool): http://tools.ietf.org/html/rfc7234#section-5.2.2.3
+	//
+	// The "no-store" request directive indicates that a cache MUST NOT
+	// store any part of either this request or any response to it.  This
+	// directive applies to both private and shared caches.
+	NoStore bool
+
+	// no-transform(bool): http://tools.ietf.org/html/rfc7234#section-5.2.2.4
+	//
+	// The "no-transform" response directive indicates that an intermediary
+	// (regardless of whether it implements a cache) MUST NOT transform the
+	// payload, as defined in Section 5.7.2 of RFC7230.
+	NoTransform bool
+
+	// public(bool): http://tools.ietf.org/html/rfc7234#section-5.2.2.5
+	//
+	// The "public" response directive indicates that any cache MAY store
+	// the response, even if the response would normally be non-cacheable or
+	// cacheable only within a private cache.
+	Public bool
+
+	// private(FieldName): http://tools.ietf.org/html/rfc7234#section-5.2.2.6
+	//
+	// The "private" response directive indicates that the response message
+	// is intended for a single user and MUST NOT be stored by a shared
+	// cache.  A private cache MAY store the response and reuse it for later
+	// requests, even if the response would normally be non-cacheable.
+	//
+	// If the private response directive specifies one or more field-names,
+	// this requirement is limited to the field-values associated with the
+	// listed response header fields.  That is, a shared cache MUST NOT
+	// store the specified field-names(s), whereas it MAY store the
+	// remainder of the response message.
+	Private FieldNames
+
+	// private(cast-to-bool): http://tools.ietf.org/html/rfc7234#section-5.2.2.6
+	//
+	// While the RFC defines optional field-names on a private directive,
+	// many applications only want to know if any private directives were
+	// present at all.
+	PrivatePresent bool
+
+	// proxy-revalidate(bool): http://tools.ietf.org/html/rfc7234#section-5.2.2.7
+	//
+	// The "proxy-revalidate" response directive has the same meaning as the
+	// must-revalidate response directive, except that it does not apply to
+	// private caches.
+	ProxyRevalidate bool
+
+	// max-age(delta seconds): http://tools.ietf.org/html/rfc7234#section-5.2.2.8
+	//
+	// The "max-age" response directive indicates that the response is to be
+	// considered stale after its age is greater than the specified number
+	// of seconds.
+	MaxAge DeltaSeconds
+
+	// s-maxage(delta seconds): http://tools.ietf.org/html/rfc7234#section-5.2.2.9
+	//
+	// The "s-maxage" response directive indicates that, in shared caches,
+	// the maximum age specified by this directive overrides the maximum age
+	// specified by either the max-age directive or the Expires header
+	// field.  The s-maxage directive also implies the semantics of the
+	// proxy-revalidate response directive.
+	SMaxAge DeltaSeconds
+
+	////
+	// Experimental features
+	// - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Cache-Control#Extension_Cache-Control_directives
+	// - https://www.fastly.com/blog/stale-while-revalidate-stale-if-error-available-today
+	////
+
+	// immutable(cast-to-bool): experimental feature
+	Immutable bool
+
+	// stale-if-error(delta seconds): experimental feature
+	StaleIfError DeltaSeconds
+
+	// stale-while-revalidate(delta seconds): experimental feature
+	StaleWhileRevalidate DeltaSeconds
+
+	// Extensions: http://tools.ietf.org/html/rfc7234#section-5.2.3
+	//
+	// The Cache-Control header field can be extended through the use of one
+	// or more cache-extension tokens, each with an optional value.  A cache
+	// MUST ignore unrecognized cache directives.
+	Extensions []string
+}
+
+// LOW LEVEL API: Parses a Cache Control Header from a Response into a set of directives.
+func ParseResponseCacheControl(value string) (*ResponseCacheDirectives, error) {
+	cd := &ResponseCacheDirectives{
+		MaxAge:  -1,
+		SMaxAge: -1,
+		// Exerimantal stale timeouts
+		StaleIfError:         -1,
+		StaleWhileRevalidate: -1,
+	}
+
+	err := parse(value, cd)
+	if err != nil {
+		return nil, err
+	}
+	return cd, nil
+}
+
+func (cd *ResponseCacheDirectives) addToken(token string) error {
+	var err error = nil
+	switch token {
+	case "must-revalidate":
+		cd.MustRevalidate = true
+	case "no-cache":
+		cd.NoCachePresent = true
+	case "no-store":
+		cd.NoStore = true
+	case "no-transform":
+		cd.NoTransform = true
+	case "public":
+		cd.Public = true
+	case "private":
+		cd.PrivatePresent = true
+	case "proxy-revalidate":
+		cd.ProxyRevalidate = true
+	case "max-age":
+		err = ErrMaxAgeDeltaSeconds
+	case "s-maxage":
+		err = ErrSMaxAgeDeltaSeconds
+	// Experimental
+	case "immutable":
+		cd.Immutable = true
+	case "stale-if-error":
+		err = ErrMaxAgeDeltaSeconds
+	case "stale-while-revalidate":
+		err = ErrMaxAgeDeltaSeconds
+	default:
+		cd.Extensions = append(cd.Extensions, token)
+	}
+	return err
+}
+
+func hasFieldNames(token string) bool {
+	switch token {
+	case "no-cache":
+		return true
+	case "private":
+		return true
+	}
+	return false
+}
+
+func (cd *ResponseCacheDirectives) addPair(token string, v string) error {
+	var err error = nil
+
+	switch token {
+	case "must-revalidate":
+		err = ErrMustRevalidateNoArgs
+	case "no-cache":
+		cd.NoCachePresent = true
+		tokens := strings.Split(v, ",")
+		if cd.NoCache == nil {
+			cd.NoCache = make(FieldNames)
+		}
+		for _, t := range tokens {
+			k := http.CanonicalHeaderKey(textproto.TrimString(t))
+			cd.NoCache[k] = true
+		}
+	case "no-store":
+		err = ErrNoStoreNoArgs
+	case "no-transform":
+		err = ErrNoTransformNoArgs
+	case "public":
+		err = ErrPublicNoArgs
+	case "private":
+		cd.PrivatePresent = true
+		tokens := strings.Split(v, ",")
+		if cd.Private == nil {
+			cd.Private = make(FieldNames)
+		}
+		for _, t := range tokens {
+			k := http.CanonicalHeaderKey(textproto.TrimString(t))
+			cd.Private[k] = true
+		}
+	case "proxy-revalidate":
+		err = ErrProxyRevalidateNoArgs
+	case "max-age":
+		cd.MaxAge, err = parseDeltaSeconds(v)
+	case "s-maxage":
+		cd.SMaxAge, err = parseDeltaSeconds(v)
+	// Experimental
+	case "immutable":
+		err = ErrImmutableNoArgs
+	case "stale-if-error":
+		cd.StaleIfError, err = parseDeltaSeconds(v)
+	case "stale-while-revalidate":
+		cd.StaleWhileRevalidate, err = parseDeltaSeconds(v)
+	default:
+		// TODO(pquerna): this sucks, making user re-parse, and its technically not 'quoted' like the original,
+		// but this is still easier, just a SplitN on "="
+		cd.Extensions = append(cd.Extensions, token+"="+v)
+	}
+
+	return err
+}
diff --git a/vendor/github.com/pquerna/cachecontrol/cacheobject/lex.go b/vendor/github.com/pquerna/cachecontrol/cacheobject/lex.go
new file mode 100644
index 000000000..c658e09b1
--- /dev/null
+++ b/vendor/github.com/pquerna/cachecontrol/cacheobject/lex.go
@@ -0,0 +1,93 @@
+// Copyright 2009 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package cacheobject
+
+// This file deals with lexical matters of HTTP
+
+func isSeparator(c byte) bool {
+	switch c {
+	case '(', ')', '<', '>', '@', ',', ';', ':', '\\', '"', '/', '[', ']', '?', '=', '{', '}', ' ', '\t':
+		return true
+	}
+	return false
+}
+
+func isCtl(c byte) bool { return (0 <= c && c <= 31) || c == 127 }
+
+func isChar(c byte) bool { return 0 <= c && c <= 127 }
+
+func isAnyText(c byte) bool { return !isCtl(c) }
+
+func isQdText(c byte) bool { return isAnyText(c) && c != '"' }
+
+func isToken(c byte) bool { return isChar(c) && !isCtl(c) && !isSeparator(c) }
+
+// Valid escaped sequences are not specified in RFC 2616, so for now, we assume
+// that they coincide with the common sense ones used by GO. Malformed
+// characters should probably not be treated as errors by a robust (forgiving)
+// parser, so we replace them with the '?' character.
+func httpUnquotePair(b byte) byte {
+	// skip the first byte, which should always be '\'
+	switch b {
+	case 'a':
+		return '\a'
+	case 'b':
+		return '\b'
+	case 'f':
+		return '\f'
+	case 'n':
+		return '\n'
+	case 'r':
+		return '\r'
+	case 't':
+		return '\t'
+	case 'v':
+		return '\v'
+	case '\\':
+		return '\\'
+	case '\'':
+		return '\''
+	case '"':
+		return '"'
+	}
+	return '?'
+}
+
+// raw must begin with a valid quoted string. Only the first quoted string is
+// parsed and is unquoted in result. eaten is the number of bytes parsed, or -1
+// upon failure.
+func httpUnquote(raw string) (eaten int, result string) {
+	buf := make([]byte, len(raw))
+	if raw[0] != '"' {
+		return -1, ""
+	}
+	eaten = 1
+	j := 0 // # of bytes written in buf
+	for i := 1; i < len(raw); i++ {
+		switch b := raw[i]; b {
+		case '"':
+			eaten++
+			buf = buf[0:j]
+			return i + 1, string(buf)
+		case '\\':
+			if len(raw) < i+2 {
+				return -1, ""
+			}
+			buf[j] = httpUnquotePair(raw[i+1])
+			eaten += 2
+			j++
+			i++
+		default:
+			if isQdText(b) {
+				buf[j] = b
+			} else {
+				buf[j] = '?'
+			}
+			eaten++
+			j++
+		}
+	}
+	return -1, ""
+}
diff --git a/vendor/github.com/pquerna/cachecontrol/cacheobject/object.go b/vendor/github.com/pquerna/cachecontrol/cacheobject/object.go
new file mode 100644
index 000000000..c20a1d659
--- /dev/null
+++ b/vendor/github.com/pquerna/cachecontrol/cacheobject/object.go
@@ -0,0 +1,387 @@
+/**
+ *  Copyright 2015 Paul Querna
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License");
+ *  you may not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ *
+ */
+
+package cacheobject
+
+import (
+	"net/http"
+	"time"
+)
+
+// LOW LEVEL API: Repersents a potentially cachable HTTP object.
+//
+// This struct is designed to be serialized efficiently, so in a high
+// performance caching server, things like Date-Strings don't need to be
+// parsed for every use of a cached object.
+type Object struct {
+	CacheIsPrivate bool
+
+	RespDirectives         *ResponseCacheDirectives
+	RespHeaders            http.Header
+	RespStatusCode         int
+	RespExpiresHeader      time.Time
+	RespDateHeader         time.Time
+	RespLastModifiedHeader time.Time
+
+	ReqDirectives *RequestCacheDirectives
+	ReqHeaders    http.Header
+	ReqMethod     string
+
+	NowUTC time.Time
+}
+
+// LOW LEVEL API: Repersents the results of examinig an Object with
+// CachableObject and ExpirationObject.
+//
+// TODO(pquerna): decide if this is a good idea or bad
+type ObjectResults struct {
+	OutReasons        []Reason
+	OutWarnings       []Warning
+	OutExpirationTime time.Time
+	OutErr            error
+}
+
+// LOW LEVEL API: Check if a object is cachable.
+func CachableObject(obj *Object, rv *ObjectResults) {
+	rv.OutReasons = nil
+	rv.OutWarnings = nil
+	rv.OutErr = nil
+
+	switch obj.ReqMethod {
+	case "GET":
+		break
+	case "HEAD":
+		break
+	case "POST":
+		/**
+		  POST: http://tools.ietf.org/html/rfc7231#section-4.3.3
+
+		  Responses to POST requests are only cacheable when they include
+		  explicit freshness information (see Section 4.2.1 of [RFC7234]).
+		  However, POST caching is not widely implemented.  For cases where an
+		  origin server wishes the client to be able to cache the result of a
+		  POST in a way that can be reused by a later GET, the origin server
+		  MAY send a 200 (OK) response containing the result and a
+		  Content-Location header field that has the same value as the POST's
+		  effective request URI (Section 3.1.4.2).
+		*/
+		if !hasFreshness(obj.ReqDirectives, obj.RespDirectives, obj.RespHeaders, obj.RespExpiresHeader, obj.CacheIsPrivate) {
+			rv.OutReasons = append(rv.OutReasons, ReasonRequestMethodPOST)
+		}
+
+	case "PUT":
+		rv.OutReasons = append(rv.OutReasons, ReasonRequestMethodPUT)
+
+	case "DELETE":
+		rv.OutReasons = append(rv.OutReasons, ReasonRequestMethodDELETE)
+
+	case "CONNECT":
+		rv.OutReasons = append(rv.OutReasons, ReasonRequestMethodCONNECT)
+
+	case "OPTIONS":
+		rv.OutReasons = append(rv.OutReasons, ReasonRequestMethodOPTIONS)
+
+	case "TRACE":
+		rv.OutReasons = append(rv.OutReasons, ReasonRequestMethodTRACE)
+
+	// HTTP Extension Methods: http://www.iana.org/assignments/http-methods/http-methods.xhtml
+	//
+	// To my knowledge, none of them are cachable. Please open a ticket if this is not the case!
+	//
+	default:
+		rv.OutReasons = append(rv.OutReasons, ReasonRequestMethodUnkown)
+	}
+
+	if obj.ReqDirectives.NoStore {
+		rv.OutReasons = append(rv.OutReasons, ReasonRequestNoStore)
+	}
+
+	// Storing Responses to Authenticated Requests: http://tools.ietf.org/html/rfc7234#section-3.2
+	authz := obj.ReqHeaders.Get("Authorization")
+	if authz != "" {
+		if obj.RespDirectives.MustRevalidate ||
+			obj.RespDirectives.Public ||
+			obj.RespDirectives.SMaxAge != -1 {
+			// Expires of some kind present, this is potentially OK.
+		} else {
+			rv.OutReasons = append(rv.OutReasons, ReasonRequestAuthorizationHeader)
+		}
+	}
+
+	if obj.RespDirectives.PrivatePresent && !obj.CacheIsPrivate {
+		rv.OutReasons = append(rv.OutReasons, ReasonResponsePrivate)
+	}
+
+	if obj.RespDirectives.NoStore {
+		rv.OutReasons = append(rv.OutReasons, ReasonResponseNoStore)
+	}
+
+	/*
+	   the response either:
+
+	     *  contains an Expires header field (see Section 5.3), or
+
+	     *  contains a max-age response directive (see Section 5.2.2.8), or
+
+	     *  contains a s-maxage response directive (see Section 5.2.2.9)
+	        and the cache is shared, or
+
+	     *  contains a Cache Control Extension (see Section 5.2.3) that
+	        allows it to be cached, or
+
+	     *  has a status code that is defined as cacheable by default (see
+	        Section 4.2.2), or
+
+	     *  contains a public response directive (see Section 5.2.2.5).
+	*/
+
+	expires := obj.RespHeaders.Get("Expires") != ""
+	statusCachable := cachableStatusCode(obj.RespStatusCode)
+
+	if expires ||
+		obj.RespDirectives.MaxAge != -1 ||
+		(obj.RespDirectives.SMaxAge != -1 && !obj.CacheIsPrivate) ||
+		statusCachable ||
+		obj.RespDirectives.Public {
+		/* cachable by default, at least one of the above conditions was true */
+	} else {
+		rv.OutReasons = append(rv.OutReasons, ReasonResponseUncachableByDefault)
+	}
+}
+
+var twentyFourHours = time.Duration(24 * time.Hour)
+
+const debug = false
+
+// LOW LEVEL API: Update an objects expiration time.
+func ExpirationObject(obj *Object, rv *ObjectResults) {
+	/**
+	 * Okay, lets calculate Freshness/Expiration now. woo:
+	 *  http://tools.ietf.org/html/rfc7234#section-4.2
+	 */
+
+	/*
+	   o  If the cache is shared and the s-maxage response directive
+	      (Section 5.2.2.9) is present, use its value, or
+
+	   o  If the max-age response directive (Section 5.2.2.8) is present,
+	      use its value, or
+
+	   o  If the Expires response header field (Section 5.3) is present, use
+	      its value minus the value of the Date response header field, or
+
+	   o  Otherwise, no explicit expiration time is present in the response.
+	      A heuristic freshness lifetime might be applicable; see
+	      Section 4.2.2.
+	*/
+
+	var expiresTime time.Time
+
+	if obj.RespDirectives.SMaxAge != -1 && !obj.CacheIsPrivate {
+		expiresTime = obj.NowUTC.Add(time.Second * time.Duration(obj.RespDirectives.SMaxAge))
+	} else if obj.RespDirectives.MaxAge != -1 {
+		expiresTime = obj.NowUTC.UTC().Add(time.Second * time.Duration(obj.RespDirectives.MaxAge))
+	} else if !obj.RespExpiresHeader.IsZero() {
+		serverDate := obj.RespDateHeader
+		if serverDate.IsZero() {
+			// common enough case when a Date: header has not yet been added to an
+			// active response.
+			serverDate = obj.NowUTC
+		}
+		expiresTime = obj.NowUTC.Add(obj.RespExpiresHeader.Sub(serverDate))
+	} else if !obj.RespLastModifiedHeader.IsZero() {
+		// heuristic freshness lifetime
+		rv.OutWarnings = append(rv.OutWarnings, WarningHeuristicExpiration)
+
+		// http://httpd.apache.org/docs/2.4/mod/mod_cache.html#cachelastmodifiedfactor
+		// CacheMaxExpire defaults to 24 hours
+		// CacheLastModifiedFactor: is 0.1
+		//
+		// expiry-period = MIN(time-since-last-modified-date * factor, 24 hours)
+		//
+		// obj.NowUTC
+
+		since := obj.RespLastModifiedHeader.Sub(obj.NowUTC)
+		since = time.Duration(float64(since) * -0.1)
+
+		if since > twentyFourHours {
+			expiresTime = obj.NowUTC.Add(twentyFourHours)
+		} else {
+			expiresTime = obj.NowUTC.Add(since)
+		}
+
+		if debug {
+			println("Now UTC: ", obj.NowUTC.String())
+			println("Last-Modified: ", obj.RespLastModifiedHeader.String())
+			println("Since: ", since.String())
+			println("TwentyFourHours: ", twentyFourHours.String())
+			println("Expiration: ", expiresTime.String())
+		}
+	} else {
+		// TODO(pquerna): what should the default behavoir be for expiration time?
+	}
+
+	rv.OutExpirationTime = expiresTime
+}
+
+// Evaluate cachability based on an HTTP request, and parts of the response.
+func UsingRequestResponse(req *http.Request,
+	statusCode int,
+	respHeaders http.Header,
+	privateCache bool) ([]Reason, time.Time, error) {
+	reasons, time, _, _, err := UsingRequestResponseWithObject(req, statusCode, respHeaders, privateCache)
+	return reasons, time, err
+}
+
+// Evaluate cachability based on an HTTP request, and parts of the response.
+// Returns the parsed Object as well.
+func UsingRequestResponseWithObject(req *http.Request,
+	statusCode int,
+	respHeaders http.Header,
+	privateCache bool) ([]Reason, time.Time, []Warning, *Object, error) {
+	var reqHeaders http.Header
+	var reqMethod string
+
+	var reqDir *RequestCacheDirectives = nil
+	respDir, err := ParseResponseCacheControl(respHeaders.Get("Cache-Control"))
+	if err != nil {
+		return nil, time.Time{}, nil, nil, err
+	}
+
+	if req != nil {
+		reqDir, err = ParseRequestCacheControl(req.Header.Get("Cache-Control"))
+		if err != nil {
+			return nil, time.Time{}, nil, nil, err
+		}
+		reqHeaders = req.Header
+		reqMethod = req.Method
+	}
+
+	var expiresHeader time.Time
+	var dateHeader time.Time
+	var lastModifiedHeader time.Time
+
+	if respHeaders.Get("Expires") != "" {
+		expiresHeader, err = http.ParseTime(respHeaders.Get("Expires"))
+		if err != nil {
+			// sometimes servers will return `Expires: 0` or `Expires: -1` to
+			// indicate expired content
+			expiresHeader = time.Time{}
+		}
+		expiresHeader = expiresHeader.UTC()
+	}
+
+	if respHeaders.Get("Date") != "" {
+		dateHeader, err = http.ParseTime(respHeaders.Get("Date"))
+		if err != nil {
+			return nil, time.Time{}, nil, nil, err
+		}
+		dateHeader = dateHeader.UTC()
+	}
+
+	if respHeaders.Get("Last-Modified") != "" {
+		lastModifiedHeader, err = http.ParseTime(respHeaders.Get("Last-Modified"))
+		if err != nil {
+			return nil, time.Time{}, nil, nil, err
+		}
+		lastModifiedHeader = lastModifiedHeader.UTC()
+	}
+
+	obj := Object{
+		CacheIsPrivate: privateCache,
+
+		RespDirectives:         respDir,
+		RespHeaders:            respHeaders,
+		RespStatusCode:         statusCode,
+		RespExpiresHeader:      expiresHeader,
+		RespDateHeader:         dateHeader,
+		RespLastModifiedHeader: lastModifiedHeader,
+
+		ReqDirectives: reqDir,
+		ReqHeaders:    reqHeaders,
+		ReqMethod:     reqMethod,
+
+		NowUTC: time.Now().UTC(),
+	}
+	rv := ObjectResults{}
+
+	CachableObject(&obj, &rv)
+	if rv.OutErr != nil {
+		return nil, time.Time{}, nil, nil, rv.OutErr
+	}
+
+	ExpirationObject(&obj, &rv)
+	if rv.OutErr != nil {
+		return nil, time.Time{}, nil, nil, rv.OutErr
+	}
+
+	return rv.OutReasons, rv.OutExpirationTime, rv.OutWarnings, &obj, nil
+}
+
+// calculate if a freshness directive is present: http://tools.ietf.org/html/rfc7234#section-4.2.1
+func hasFreshness(reqDir *RequestCacheDirectives, respDir *ResponseCacheDirectives, respHeaders http.Header, respExpires time.Time, privateCache bool) bool {
+	if !privateCache && respDir.SMaxAge != -1 {
+		return true
+	}
+
+	if respDir.MaxAge != -1 {
+		return true
+	}
+
+	if !respExpires.IsZero() || respHeaders.Get("Expires") != "" {
+		return true
+	}
+
+	return false
+}
+
+func cachableStatusCode(statusCode int) bool {
+	/*
+		Responses with status codes that are defined as cacheable by default
+		(e.g., 200, 203, 204, 206, 300, 301, 404, 405, 410, 414, and 501 in
+		this specification) can be reused by a cache with heuristic
+		expiration unless otherwise indicated by the method definition or
+		explicit cache controls [RFC7234]; all other status codes are not
+		cacheable by default.
+	*/
+	switch statusCode {
+	case 200:
+		return true
+	case 203:
+		return true
+	case 204:
+		return true
+	case 206:
+		return true
+	case 300:
+		return true
+	case 301:
+		return true
+	case 404:
+		return true
+	case 405:
+		return true
+	case 410:
+		return true
+	case 414:
+		return true
+	case 501:
+		return true
+	default:
+		return false
+	}
+}
diff --git a/vendor/github.com/pquerna/cachecontrol/cacheobject/reasons.go b/vendor/github.com/pquerna/cachecontrol/cacheobject/reasons.go
new file mode 100644
index 000000000..f53d1ad59
--- /dev/null
+++ b/vendor/github.com/pquerna/cachecontrol/cacheobject/reasons.go
@@ -0,0 +1,95 @@
+/**
+ *  Copyright 2015 Paul Querna
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License");
+ *  you may not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ *
+ */
+
+package cacheobject
+
+// Repersents a potential Reason to not cache an object.
+//
+// Applications may wish to ignore specific reasons, which will make them non-RFC
+// compliant, but this type gives them specific cases they can choose to ignore,
+// making them compliant in as many cases as they can.
+type Reason int
+
+const (
+
+	// The request method was POST and an Expiration header was not supplied.
+	ReasonRequestMethodPOST Reason = iota
+
+	// The request method was PUT and PUTs are not cachable.
+	ReasonRequestMethodPUT
+
+	// The request method was DELETE and DELETEs are not cachable.
+	ReasonRequestMethodDELETE
+
+	// The request method was CONNECT and CONNECTs are not cachable.
+	ReasonRequestMethodCONNECT
+
+	// The request method was OPTIONS and OPTIONS are not cachable.
+	ReasonRequestMethodOPTIONS
+
+	// The request method was TRACE and TRACEs are not cachable.
+	ReasonRequestMethodTRACE
+
+	// The request method was not recognized by cachecontrol, and should not be cached.
+	ReasonRequestMethodUnkown
+
+	// The request included an Cache-Control: no-store header
+	ReasonRequestNoStore
+
+	// The request included an Authorization header without an explicit Public or Expiration time: http://tools.ietf.org/html/rfc7234#section-3.2
+	ReasonRequestAuthorizationHeader
+
+	// The response included an Cache-Control: no-store header
+	ReasonResponseNoStore
+
+	// The response included an Cache-Control: private header and this is not a Private cache
+	ReasonResponsePrivate
+
+	// The response failed to meet at least one of the conditions specified in RFC 7234 section 3: http://tools.ietf.org/html/rfc7234#section-3
+	ReasonResponseUncachableByDefault
+)
+
+func (r Reason) String() string {
+	switch r {
+	case ReasonRequestMethodPOST:
+		return "ReasonRequestMethodPOST"
+	case ReasonRequestMethodPUT:
+		return "ReasonRequestMethodPUT"
+	case ReasonRequestMethodDELETE:
+		return "ReasonRequestMethodDELETE"
+	case ReasonRequestMethodCONNECT:
+		return "ReasonRequestMethodCONNECT"
+	case ReasonRequestMethodOPTIONS:
+		return "ReasonRequestMethodOPTIONS"
+	case ReasonRequestMethodTRACE:
+		return "ReasonRequestMethodTRACE"
+	case ReasonRequestMethodUnkown:
+		return "ReasonRequestMethodUnkown"
+	case ReasonRequestNoStore:
+		return "ReasonRequestNoStore"
+	case ReasonRequestAuthorizationHeader:
+		return "ReasonRequestAuthorizationHeader"
+	case ReasonResponseNoStore:
+		return "ReasonResponseNoStore"
+	case ReasonResponsePrivate:
+		return "ReasonResponsePrivate"
+	case ReasonResponseUncachableByDefault:
+		return "ReasonResponseUncachableByDefault"
+	}
+
+	panic(r)
+}
diff --git a/vendor/github.com/pquerna/cachecontrol/cacheobject/warning.go b/vendor/github.com/pquerna/cachecontrol/cacheobject/warning.go
new file mode 100644
index 000000000..82f894130
--- /dev/null
+++ b/vendor/github.com/pquerna/cachecontrol/cacheobject/warning.go
@@ -0,0 +1,107 @@
+/**
+ *  Copyright 2015 Paul Querna
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License");
+ *  you may not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ *
+ */
+
+package cacheobject
+
+import (
+	"fmt"
+	"net/http"
+	"time"
+)
+
+// Repersents an HTTP Warning: http://tools.ietf.org/html/rfc7234#section-5.5
+type Warning int
+
+const (
+	// Response is Stale
+	// A cache SHOULD generate this whenever the sent response is stale.
+	WarningResponseIsStale Warning = 110
+
+	// Revalidation Failed
+	// A cache SHOULD generate this when sending a stale
+	// response because an attempt to validate the response failed, due to an
+	// inability to reach the server.
+	WarningRevalidationFailed Warning = 111
+
+	// Disconnected Operation
+	// A cache SHOULD generate this if it is intentionally disconnected from
+	// the rest of the network for a period of time.
+	WarningDisconnectedOperation Warning = 112
+
+	// Heuristic Expiration
+	//
+	// A cache SHOULD generate this if it heuristically chose a freshness
+	// lifetime greater than 24 hours and the response's age is greater than
+	// 24 hours.
+	WarningHeuristicExpiration Warning = 113
+
+	// Miscellaneous Warning
+	//
+	// The warning text can include arbitrary information to be presented to
+	// a human user or logged.  A system receiving this warning MUST NOT
+	// take any automated action, besides presenting the warning to the
+	// user.
+	WarningMiscellaneousWarning Warning = 199
+
+	// Transformation Applied
+	//
+	// This Warning code MUST be added by a proxy if it applies any
+	// transformation to the representation, such as changing the
+	// content-coding, media-type, or modifying the representation data,
+	// unless this Warning code already appears in the response.
+	WarningTransformationApplied Warning = 214
+
+	// Miscellaneous Persistent Warning
+	//
+	// The warning text can include arbitrary information to be presented to
+	// a human user or logged.  A system receiving this warning MUST NOT
+	// take any automated action.
+	WarningMiscellaneousPersistentWarning Warning = 299
+)
+
+func (w Warning) HeaderString(agent string, date time.Time) string {
+	if agent == "" {
+		agent = "-"
+	} else {
+		// TODO(pquerna): this doesn't escape agent if it contains bad things.
+		agent = `"` + agent + `"`
+	}
+	return fmt.Sprintf(`%d %s "%s" %s`, w, agent, w.String(), date.Format(http.TimeFormat))
+}
+
+func (w Warning) String() string {
+	switch w {
+	case WarningResponseIsStale:
+		return "Response is Stale"
+	case WarningRevalidationFailed:
+		return "Revalidation Failed"
+	case WarningDisconnectedOperation:
+		return "Disconnected Operation"
+	case WarningHeuristicExpiration:
+		return "Heuristic Expiration"
+	case WarningMiscellaneousWarning:
+		// TODO(pquerna): ideally had a better way to override this one code.
+		return "Miscellaneous Warning"
+	case WarningTransformationApplied:
+		return "Transformation Applied"
+	case WarningMiscellaneousPersistentWarning:
+		// TODO(pquerna): same as WarningMiscellaneousWarning
+		return "Miscellaneous Persistent Warning"
+	}
+
+	panic(w)
+}
diff --git a/vendor/github.com/pquerna/cachecontrol/doc.go b/vendor/github.com/pquerna/cachecontrol/doc.go
new file mode 100644
index 000000000..3fe7ed0d6
--- /dev/null
+++ b/vendor/github.com/pquerna/cachecontrol/doc.go
@@ -0,0 +1,25 @@
+/**
+ *  Copyright 2015 Paul Querna
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License");
+ *  you may not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS,
+ *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ *
+ */
+
+// Package cachecontrol implements the logic for HTTP Caching
+//
+// Deciding if an HTTP Response can be cached is often harder
+// and more bug prone than an actual cache storage backend.
+// cachecontrol provides a simple interface to determine if
+// request and response pairs are cachable as defined under
+// RFC 7234 http://tools.ietf.org/html/rfc7234
+package cachecontrol
diff --git a/vendor/golang.org/x/crypto/ed25519/ed25519.go b/vendor/golang.org/x/crypto/ed25519/ed25519.go
new file mode 100644
index 000000000..c7f8c7e64
--- /dev/null
+++ b/vendor/golang.org/x/crypto/ed25519/ed25519.go
@@ -0,0 +1,222 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// In Go 1.13, the ed25519 package was promoted to the standard library as
+// crypto/ed25519, and this package became a wrapper for the standard library one.
+//
+// +build !go1.13
+
+// Package ed25519 implements the Ed25519 signature algorithm. See
+// https://ed25519.cr.yp.to/.
+//
+// These functions are also compatible with the “Ed25519� function defined in
+// RFC 8032. However, unlike RFC 8032's formulation, this package's private key
+// representation includes a public key suffix to make multiple signing
+// operations with the same key more efficient. This package refers to the RFC
+// 8032 private key as the “seed�.
+package ed25519
+
+// This code is a port of the public domain, “ref10� implementation of ed25519
+// from SUPERCOP.
+
+import (
+	"bytes"
+	"crypto"
+	cryptorand "crypto/rand"
+	"crypto/sha512"
+	"errors"
+	"io"
+	"strconv"
+
+	"golang.org/x/crypto/ed25519/internal/edwards25519"
+)
+
+const (
+	// PublicKeySize is the size, in bytes, of public keys as used in this package.
+	PublicKeySize = 32
+	// PrivateKeySize is the size, in bytes, of private keys as used in this package.
+	PrivateKeySize = 64
+	// SignatureSize is the size, in bytes, of signatures generated and verified by this package.
+	SignatureSize = 64
+	// SeedSize is the size, in bytes, of private key seeds. These are the private key representations used by RFC 8032.
+	SeedSize = 32
+)
+
+// PublicKey is the type of Ed25519 public keys.
+type PublicKey []byte
+
+// PrivateKey is the type of Ed25519 private keys. It implements crypto.Signer.
+type PrivateKey []byte
+
+// Public returns the PublicKey corresponding to priv.
+func (priv PrivateKey) Public() crypto.PublicKey {
+	publicKey := make([]byte, PublicKeySize)
+	copy(publicKey, priv[32:])
+	return PublicKey(publicKey)
+}
+
+// Seed returns the private key seed corresponding to priv. It is provided for
+// interoperability with RFC 8032. RFC 8032's private keys correspond to seeds
+// in this package.
+func (priv PrivateKey) Seed() []byte {
+	seed := make([]byte, SeedSize)
+	copy(seed, priv[:32])
+	return seed
+}
+
+// Sign signs the given message with priv.
+// Ed25519 performs two passes over messages to be signed and therefore cannot
+// handle pre-hashed messages. Thus opts.HashFunc() must return zero to
+// indicate the message hasn't been hashed. This can be achieved by passing
+// crypto.Hash(0) as the value for opts.
+func (priv PrivateKey) Sign(rand io.Reader, message []byte, opts crypto.SignerOpts) (signature []byte, err error) {
+	if opts.HashFunc() != crypto.Hash(0) {
+		return nil, errors.New("ed25519: cannot sign hashed message")
+	}
+
+	return Sign(priv, message), nil
+}
+
+// GenerateKey generates a public/private key pair using entropy from rand.
+// If rand is nil, crypto/rand.Reader will be used.
+func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
+	if rand == nil {
+		rand = cryptorand.Reader
+	}
+
+	seed := make([]byte, SeedSize)
+	if _, err := io.ReadFull(rand, seed); err != nil {
+		return nil, nil, err
+	}
+
+	privateKey := NewKeyFromSeed(seed)
+	publicKey := make([]byte, PublicKeySize)
+	copy(publicKey, privateKey[32:])
+
+	return publicKey, privateKey, nil
+}
+
+// NewKeyFromSeed calculates a private key from a seed. It will panic if
+// len(seed) is not SeedSize. This function is provided for interoperability
+// with RFC 8032. RFC 8032's private keys correspond to seeds in this
+// package.
+func NewKeyFromSeed(seed []byte) PrivateKey {
+	if l := len(seed); l != SeedSize {
+		panic("ed25519: bad seed length: " + strconv.Itoa(l))
+	}
+
+	digest := sha512.Sum512(seed)
+	digest[0] &= 248
+	digest[31] &= 127
+	digest[31] |= 64
+
+	var A edwards25519.ExtendedGroupElement
+	var hBytes [32]byte
+	copy(hBytes[:], digest[:])
+	edwards25519.GeScalarMultBase(&A, &hBytes)
+	var publicKeyBytes [32]byte
+	A.ToBytes(&publicKeyBytes)
+
+	privateKey := make([]byte, PrivateKeySize)
+	copy(privateKey, seed)
+	copy(privateKey[32:], publicKeyBytes[:])
+
+	return privateKey
+}
+
+// Sign signs the message with privateKey and returns a signature. It will
+// panic if len(privateKey) is not PrivateKeySize.
+func Sign(privateKey PrivateKey, message []byte) []byte {
+	if l := len(privateKey); l != PrivateKeySize {
+		panic("ed25519: bad private key length: " + strconv.Itoa(l))
+	}
+
+	h := sha512.New()
+	h.Write(privateKey[:32])
+
+	var digest1, messageDigest, hramDigest [64]byte
+	var expandedSecretKey [32]byte
+	h.Sum(digest1[:0])
+	copy(expandedSecretKey[:], digest1[:])
+	expandedSecretKey[0] &= 248
+	expandedSecretKey[31] &= 63
+	expandedSecretKey[31] |= 64
+
+	h.Reset()
+	h.Write(digest1[32:])
+	h.Write(message)
+	h.Sum(messageDigest[:0])
+
+	var messageDigestReduced [32]byte
+	edwards25519.ScReduce(&messageDigestReduced, &messageDigest)
+	var R edwards25519.ExtendedGroupElement
+	edwards25519.GeScalarMultBase(&R, &messageDigestReduced)
+
+	var encodedR [32]byte
+	R.ToBytes(&encodedR)
+
+	h.Reset()
+	h.Write(encodedR[:])
+	h.Write(privateKey[32:])
+	h.Write(message)
+	h.Sum(hramDigest[:0])
+	var hramDigestReduced [32]byte
+	edwards25519.ScReduce(&hramDigestReduced, &hramDigest)
+
+	var s [32]byte
+	edwards25519.ScMulAdd(&s, &hramDigestReduced, &expandedSecretKey, &messageDigestReduced)
+
+	signature := make([]byte, SignatureSize)
+	copy(signature[:], encodedR[:])
+	copy(signature[32:], s[:])
+
+	return signature
+}
+
+// Verify reports whether sig is a valid signature of message by publicKey. It
+// will panic if len(publicKey) is not PublicKeySize.
+func Verify(publicKey PublicKey, message, sig []byte) bool {
+	if l := len(publicKey); l != PublicKeySize {
+		panic("ed25519: bad public key length: " + strconv.Itoa(l))
+	}
+
+	if len(sig) != SignatureSize || sig[63]&224 != 0 {
+		return false
+	}
+
+	var A edwards25519.ExtendedGroupElement
+	var publicKeyBytes [32]byte
+	copy(publicKeyBytes[:], publicKey)
+	if !A.FromBytes(&publicKeyBytes) {
+		return false
+	}
+	edwards25519.FeNeg(&A.X, &A.X)
+	edwards25519.FeNeg(&A.T, &A.T)
+
+	h := sha512.New()
+	h.Write(sig[:32])
+	h.Write(publicKey[:])
+	h.Write(message)
+	var digest [64]byte
+	h.Sum(digest[:0])
+
+	var hReduced [32]byte
+	edwards25519.ScReduce(&hReduced, &digest)
+
+	var R edwards25519.ProjectiveGroupElement
+	var s [32]byte
+	copy(s[:], sig[32:])
+
+	// https://tools.ietf.org/html/rfc8032#section-5.1.7 requires that s be in
+	// the range [0, order) in order to prevent signature malleability.
+	if !edwards25519.ScMinimal(&s) {
+		return false
+	}
+
+	edwards25519.GeDoubleScalarMultVartime(&R, &hReduced, &A, &s)
+
+	var checkR [32]byte
+	R.ToBytes(&checkR)
+	return bytes.Equal(sig[:32], checkR[:])
+}
diff --git a/vendor/golang.org/x/crypto/ed25519/ed25519_go113.go b/vendor/golang.org/x/crypto/ed25519/ed25519_go113.go
new file mode 100644
index 000000000..d1448d8d2
--- /dev/null
+++ b/vendor/golang.org/x/crypto/ed25519/ed25519_go113.go
@@ -0,0 +1,73 @@
+// Copyright 2019 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// +build go1.13
+
+// Package ed25519 implements the Ed25519 signature algorithm. See
+// https://ed25519.cr.yp.to/.
+//
+// These functions are also compatible with the “Ed25519� function defined in
+// RFC 8032. However, unlike RFC 8032's formulation, this package's private key
+// representation includes a public key suffix to make multiple signing
+// operations with the same key more efficient. This package refers to the RFC
+// 8032 private key as the “seed�.
+//
+// Beginning with Go 1.13, the functionality of this package was moved to the
+// standard library as crypto/ed25519. This package only acts as a compatibility
+// wrapper.
+package ed25519
+
+import (
+	"crypto/ed25519"
+	"io"
+)
+
+const (
+	// PublicKeySize is the size, in bytes, of public keys as used in this package.
+	PublicKeySize = 32
+	// PrivateKeySize is the size, in bytes, of private keys as used in this package.
+	PrivateKeySize = 64
+	// SignatureSize is the size, in bytes, of signatures generated and verified by this package.
+	SignatureSize = 64
+	// SeedSize is the size, in bytes, of private key seeds. These are the private key representations used by RFC 8032.
+	SeedSize = 32
+)
+
+// PublicKey is the type of Ed25519 public keys.
+//
+// This type is an alias for crypto/ed25519's PublicKey type.
+// See the crypto/ed25519 package for the methods on this type.
+type PublicKey = ed25519.PublicKey
+
+// PrivateKey is the type of Ed25519 private keys. It implements crypto.Signer.
+//
+// This type is an alias for crypto/ed25519's PrivateKey type.
+// See the crypto/ed25519 package for the methods on this type.
+type PrivateKey = ed25519.PrivateKey
+
+// GenerateKey generates a public/private key pair using entropy from rand.
+// If rand is nil, crypto/rand.Reader will be used.
+func GenerateKey(rand io.Reader) (PublicKey, PrivateKey, error) {
+	return ed25519.GenerateKey(rand)
+}
+
+// NewKeyFromSeed calculates a private key from a seed. It will panic if
+// len(seed) is not SeedSize. This function is provided for interoperability
+// with RFC 8032. RFC 8032's private keys correspond to seeds in this
+// package.
+func NewKeyFromSeed(seed []byte) PrivateKey {
+	return ed25519.NewKeyFromSeed(seed)
+}
+
+// Sign signs the message with privateKey and returns a signature. It will
+// panic if len(privateKey) is not PrivateKeySize.
+func Sign(privateKey PrivateKey, message []byte) []byte {
+	return ed25519.Sign(privateKey, message)
+}
+
+// Verify reports whether sig is a valid signature of message by publicKey. It
+// will panic if len(publicKey) is not PublicKeySize.
+func Verify(publicKey PublicKey, message, sig []byte) bool {
+	return ed25519.Verify(publicKey, message, sig)
+}
diff --git a/vendor/golang.org/x/crypto/ed25519/internal/edwards25519/const.go b/vendor/golang.org/x/crypto/ed25519/internal/edwards25519/const.go
new file mode 100644
index 000000000..e39f086c1
--- /dev/null
+++ b/vendor/golang.org/x/crypto/ed25519/internal/edwards25519/const.go
@@ -0,0 +1,1422 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package edwards25519
+
+// These values are from the public domain, “ref10� implementation of ed25519
+// from SUPERCOP.
+
+// d is a constant in the Edwards curve equation.
+var d = FieldElement{
+	-10913610, 13857413, -15372611, 6949391, 114729, -8787816, -6275908, -3247719, -18696448, -12055116,
+}
+
+// d2 is 2*d.
+var d2 = FieldElement{
+	-21827239, -5839606, -30745221, 13898782, 229458, 15978800, -12551817, -6495438, 29715968, 9444199,
+}
+
+// SqrtM1 is the square-root of -1 in the field.
+var SqrtM1 = FieldElement{
+	-32595792, -7943725, 9377950, 3500415, 12389472, -272473, -25146209, -2005654, 326686, 11406482,
+}
+
+// A is a constant in the Montgomery-form of curve25519.
+var A = FieldElement{
+	486662, 0, 0, 0, 0, 0, 0, 0, 0, 0,
+}
+
+// bi contains precomputed multiples of the base-point. See the Ed25519 paper
+// for a discussion about how these values are used.
+var bi = [8]PreComputedGroupElement{
+	{
+		FieldElement{25967493, -14356035, 29566456, 3660896, -12694345, 4014787, 27544626, -11754271, -6079156, 2047605},
+		FieldElement{-12545711, 934262, -2722910, 3049990, -727428, 9406986, 12720692, 5043384, 19500929, -15469378},
+		FieldElement{-8738181, 4489570, 9688441, -14785194, 10184609, -12363380, 29287919, 11864899, -24514362, -4438546},
+	},
+	{
+		FieldElement{15636291, -9688557, 24204773, -7912398, 616977, -16685262, 27787600, -14772189, 28944400, -1550024},
+		FieldElement{16568933, 4717097, -11556148, -1102322, 15682896, -11807043, 16354577, -11775962, 7689662, 11199574},
+		FieldElement{30464156, -5976125, -11779434, -15670865, 23220365, 15915852, 7512774, 10017326, -17749093, -9920357},
+	},
+	{
+		FieldElement{10861363, 11473154, 27284546, 1981175, -30064349, 12577861, 32867885, 14515107, -15438304, 10819380},
+		FieldElement{4708026, 6336745, 20377586, 9066809, -11272109, 6594696, -25653668, 12483688, -12668491, 5581306},
+		FieldElement{19563160, 16186464, -29386857, 4097519, 10237984, -4348115, 28542350, 13850243, -23678021, -15815942},
+	},
+	{
+		FieldElement{5153746, 9909285, 1723747, -2777874, 30523605, 5516873, 19480852, 5230134, -23952439, -15175766},
+		FieldElement{-30269007, -3463509, 7665486, 10083793, 28475525, 1649722, 20654025, 16520125, 30598449, 7715701},
+		FieldElement{28881845, 14381568, 9657904, 3680757, -20181635, 7843316, -31400660, 1370708, 29794553, -1409300},
+	},
+	{
+		FieldElement{-22518993, -6692182, 14201702, -8745502, -23510406, 8844726, 18474211, -1361450, -13062696, 13821877},
+		FieldElement{-6455177, -7839871, 3374702, -4740862, -27098617, -10571707, 31655028, -7212327, 18853322, -14220951},
+		FieldElement{4566830, -12963868, -28974889, -12240689, -7602672, -2830569, -8514358, -10431137, 2207753, -3209784},
+	},
+	{
+		FieldElement{-25154831, -4185821, 29681144, 7868801, -6854661, -9423865, -12437364, -663000, -31111463, -16132436},
+		FieldElement{25576264, -2703214, 7349804, -11814844, 16472782, 9300885, 3844789, 15725684, 171356, 6466918},
+		FieldElement{23103977, 13316479, 9739013, -16149481, 817875, -15038942, 8965339, -14088058, -30714912, 16193877},
+	},
+	{
+		FieldElement{-33521811, 3180713, -2394130, 14003687, -16903474, -16270840, 17238398, 4729455, -18074513, 9256800},
+		FieldElement{-25182317, -4174131, 32336398, 5036987, -21236817, 11360617, 22616405, 9761698, -19827198, 630305},
+		FieldElement{-13720693, 2639453, -24237460, -7406481, 9494427, -5774029, -6554551, -15960994, -2449256, -14291300},
+	},
+	{
+		FieldElement{-3151181, -5046075, 9282714, 6866145, -31907062, -863023, -18940575, 15033784, 25105118, -7894876},
+		FieldElement{-24326370, 15950226, -31801215, -14592823, -11662737, -5090925, 1573892, -2625887, 2198790, -15804619},
+		FieldElement{-3099351, 10324967, -2241613, 7453183, -5446979, -2735503, -13812022, -16236442, -32461234, -12290683},
+	},
+}
+
+// base contains precomputed multiples of the base-point. See the Ed25519 paper
+// for a discussion about how these values are used.
+var base = [32][8]PreComputedGroupElement{
+	{
+		{
+			FieldElement{25967493, -14356035, 29566456, 3660896, -12694345, 4014787, 27544626, -11754271, -6079156, 2047605},
+			FieldElement{-12545711, 934262, -2722910, 3049990, -727428, 9406986, 12720692, 5043384, 19500929, -15469378},
+			FieldElement{-8738181, 4489570, 9688441, -14785194, 10184609, -12363380, 29287919, 11864899, -24514362, -4438546},
+		},
+		{
+			FieldElement{-12815894, -12976347, -21581243, 11784320, -25355658, -2750717, -11717903, -3814571, -358445, -10211303},
+			FieldElement{-21703237, 6903825, 27185491, 6451973, -29577724, -9554005, -15616551, 11189268, -26829678, -5319081},
+			FieldElement{26966642, 11152617, 32442495, 15396054, 14353839, -12752335, -3128826, -9541118, -15472047, -4166697},
+		},
+		{
+			FieldElement{15636291, -9688557, 24204773, -7912398, 616977, -16685262, 27787600, -14772189, 28944400, -1550024},
+			FieldElement{16568933, 4717097, -11556148, -1102322, 15682896, -11807043, 16354577, -11775962, 7689662, 11199574},
+			FieldElement{30464156, -5976125, -11779434, -15670865, 23220365, 15915852, 7512774, 10017326, -17749093, -9920357},
+		},
+		{
+			FieldElement{-17036878, 13921892, 10945806, -6033431, 27105052, -16084379, -28926210, 15006023, 3284568, -6276540},
+			FieldElement{23599295, -8306047, -11193664, -7687416, 13236774, 10506355, 7464579, 9656445, 13059162, 10374397},
+			FieldElement{7798556, 16710257, 3033922, 2874086, 28997861, 2835604, 32406664, -3839045, -641708, -101325},
+		},
+		{
+			FieldElement{10861363, 11473154, 27284546, 1981175, -30064349, 12577861, 32867885, 14515107, -15438304, 10819380},
+			FieldElement{4708026, 6336745, 20377586, 9066809, -11272109, 6594696, -25653668, 12483688, -12668491, 5581306},
+			FieldElement{19563160, 16186464, -29386857, 4097519, 10237984, -4348115, 28542350, 13850243, -23678021, -15815942},
+		},
+		{
+			FieldElement{-15371964, -12862754, 32573250, 4720197, -26436522, 5875511, -19188627, -15224819, -9818940, -12085777},
+			FieldElement{-8549212, 109983, 15149363, 2178705, 22900618, 4543417, 3044240, -15689887, 1762328, 14866737},
+			FieldElement{-18199695, -15951423, -10473290, 1707278, -17185920, 3916101, -28236412, 3959421, 27914454, 4383652},
+		},
+		{
+			FieldElement{5153746, 9909285, 1723747, -2777874, 30523605, 5516873, 19480852, 5230134, -23952439, -15175766},
+			FieldElement{-30269007, -3463509, 7665486, 10083793, 28475525, 1649722, 20654025, 16520125, 30598449, 7715701},
+			FieldElement{28881845, 14381568, 9657904, 3680757, -20181635, 7843316, -31400660, 1370708, 29794553, -1409300},
+		},
+		{
+			FieldElement{14499471, -2729599, -33191113, -4254652, 28494862, 14271267, 30290735, 10876454, -33154098, 2381726},
+			FieldElement{-7195431, -2655363, -14730155, 462251, -27724326, 3941372, -6236617, 3696005, -32300832, 15351955},
+			FieldElement{27431194, 8222322, 16448760, -3907995, -18707002, 11938355, -32961401, -2970515, 29551813, 10109425},
+		},
+	},
+	{
+		{
+			FieldElement{-13657040, -13155431, -31283750, 11777098, 21447386, 6519384, -2378284, -1627556, 10092783, -4764171},
+			FieldElement{27939166, 14210322, 4677035, 16277044, -22964462, -12398139, -32508754, 12005538, -17810127, 12803510},
+			FieldElement{17228999, -15661624, -1233527, 300140, -1224870, -11714777, 30364213, -9038194, 18016357, 4397660},
+		},
+		{
+			FieldElement{-10958843, -7690207, 4776341, -14954238, 27850028, -15602212, -26619106, 14544525, -17477504, 982639},
+			FieldElement{29253598, 15796703, -2863982, -9908884, 10057023, 3163536, 7332899, -4120128, -21047696, 9934963},
+			FieldElement{5793303, 16271923, -24131614, -10116404, 29188560, 1206517, -14747930, 4559895, -30123922, -10897950},
+		},
+		{
+			FieldElement{-27643952, -11493006, 16282657, -11036493, 28414021, -15012264, 24191034, 4541697, -13338309, 5500568},
+			FieldElement{12650548, -1497113, 9052871, 11355358, -17680037, -8400164, -17430592, 12264343, 10874051, 13524335},
+			FieldElement{25556948, -3045990, 714651, 2510400, 23394682, -10415330, 33119038, 5080568, -22528059, 5376628},
+		},
+		{
+			FieldElement{-26088264, -4011052, -17013699, -3537628, -6726793, 1920897, -22321305, -9447443, 4535768, 1569007},
+			FieldElement{-2255422, 14606630, -21692440, -8039818, 28430649, 8775819, -30494562, 3044290, 31848280, 12543772},
+			FieldElement{-22028579, 2943893, -31857513, 6777306, 13784462, -4292203, -27377195, -2062731, 7718482, 14474653},
+		},
+		{
+			FieldElement{2385315, 2454213, -22631320, 46603, -4437935, -15680415, 656965, -7236665, 24316168, -5253567},
+			FieldElement{13741529, 10911568, -33233417, -8603737, -20177830, -1033297, 33040651, -13424532, -20729456, 8321686},
+			FieldElement{21060490, -2212744, 15712757, -4336099, 1639040, 10656336, 23845965, -11874838, -9984458, 608372},
+		},
+		{
+			FieldElement{-13672732, -15087586, -10889693, -7557059, -6036909, 11305547, 1123968, -6780577, 27229399, 23887},
+			FieldElement{-23244140, -294205, -11744728, 14712571, -29465699, -2029617, 12797024, -6440308, -1633405, 16678954},
+			FieldElement{-29500620, 4770662, -16054387, 14001338, 7830047, 9564805, -1508144, -4795045, -17169265, 4904953},
+		},
+		{
+			FieldElement{24059557, 14617003, 19037157, -15039908, 19766093, -14906429, 5169211, 16191880, 2128236, -4326833},
+			FieldElement{-16981152, 4124966, -8540610, -10653797, 30336522, -14105247, -29806336, 916033, -6882542, -2986532},
+			FieldElement{-22630907, 12419372, -7134229, -7473371, -16478904, 16739175, 285431, 2763829, 15736322, 4143876},
+		},
+		{
+			FieldElement{2379352, 11839345, -4110402, -5988665, 11274298, 794957, 212801, -14594663, 23527084, -16458268},
+			FieldElement{33431127, -11130478, -17838966, -15626900, 8909499, 8376530, -32625340, 4087881, -15188911, -14416214},
+			FieldElement{1767683, 7197987, -13205226, -2022635, -13091350, 448826, 5799055, 4357868, -4774191, -16323038},
+		},
+	},
+	{
+		{
+			FieldElement{6721966, 13833823, -23523388, -1551314, 26354293, -11863321, 23365147, -3949732, 7390890, 2759800},
+			FieldElement{4409041, 2052381, 23373853, 10530217, 7676779, -12885954, 21302353, -4264057, 1244380, -12919645},
+			FieldElement{-4421239, 7169619, 4982368, -2957590, 30256825, -2777540, 14086413, 9208236, 15886429, 16489664},
+		},
+		{
+			FieldElement{1996075, 10375649, 14346367, 13311202, -6874135, -16438411, -13693198, 398369, -30606455, -712933},
+			FieldElement{-25307465, 9795880, -2777414, 14878809, -33531835, 14780363, 13348553, 12076947, -30836462, 5113182},
+			FieldElement{-17770784, 11797796, 31950843, 13929123, -25888302, 12288344, -30341101, -7336386, 13847711, 5387222},
+		},
+		{
+			FieldElement{-18582163, -3416217, 17824843, -2340966, 22744343, -10442611, 8763061, 3617786, -19600662, 10370991},
+			FieldElement{20246567, -14369378, 22358229, -543712, 18507283, -10413996, 14554437, -8746092, 32232924, 16763880},
+			FieldElement{9648505, 10094563, 26416693, 14745928, -30374318, -6472621, 11094161, 15689506, 3140038, -16510092},
+		},
+		{
+			FieldElement{-16160072, 5472695, 31895588, 4744994, 8823515, 10365685, -27224800, 9448613, -28774454, 366295},
+			FieldElement{19153450, 11523972, -11096490, -6503142, -24647631, 5420647, 28344573, 8041113, 719605, 11671788},
+			FieldElement{8678025, 2694440, -6808014, 2517372, 4964326, 11152271, -15432916, -15266516, 27000813, -10195553},
+		},
+		{
+			FieldElement{-15157904, 7134312, 8639287, -2814877, -7235688, 10421742, 564065, 5336097, 6750977, -14521026},
+			FieldElement{11836410, -3979488, 26297894, 16080799, 23455045, 15735944, 1695823, -8819122, 8169720, 16220347},
+			FieldElement{-18115838, 8653647, 17578566, -6092619, -8025777, -16012763, -11144307, -2627664, -5990708, -14166033},
+		},
+		{
+			FieldElement{-23308498, -10968312, 15213228, -10081214, -30853605, -11050004, 27884329, 2847284, 2655861, 1738395},
+			FieldElement{-27537433, -14253021, -25336301, -8002780, -9370762, 8129821, 21651608, -3239336, -19087449, -11005278},
+			FieldElement{1533110, 3437855, 23735889, 459276, 29970501, 11335377, 26030092, 5821408, 10478196, 8544890},
+		},
+		{
+			FieldElement{32173121, -16129311, 24896207, 3921497, 22579056, -3410854, 19270449, 12217473, 17789017, -3395995},
+			FieldElement{-30552961, -2228401, -15578829, -10147201, 13243889, 517024, 15479401, -3853233, 30460520, 1052596},
+			FieldElement{-11614875, 13323618, 32618793, 8175907, -15230173, 12596687, 27491595, -4612359, 3179268, -9478891},
+		},
+		{
+			FieldElement{31947069, -14366651, -4640583, -15339921, -15125977, -6039709, -14756777, -16411740, 19072640, -9511060},
+			FieldElement{11685058, 11822410, 3158003, -13952594, 33402194, -4165066, 5977896, -5215017, 473099, 5040608},
+			FieldElement{-20290863, 8198642, -27410132, 11602123, 1290375, -2799760, 28326862, 1721092, -19558642, -3131606},
+		},
+	},
+	{
+		{
+			FieldElement{7881532, 10687937, 7578723, 7738378, -18951012, -2553952, 21820786, 8076149, -27868496, 11538389},
+			FieldElement{-19935666, 3899861, 18283497, -6801568, -15728660, -11249211, 8754525, 7446702, -5676054, 5797016},
+			FieldElement{-11295600, -3793569, -15782110, -7964573, 12708869, -8456199, 2014099, -9050574, -2369172, -5877341},
+		},
+		{
+			FieldElement{-22472376, -11568741, -27682020, 1146375, 18956691, 16640559, 1192730, -3714199, 15123619, 10811505},
+			FieldElement{14352098, -3419715, -18942044, 10822655, 32750596, 4699007, -70363, 15776356, -28886779, -11974553},
+			FieldElement{-28241164, -8072475, -4978962, -5315317, 29416931, 1847569, -20654173, -16484855, 4714547, -9600655},
+		},
+		{
+			FieldElement{15200332, 8368572, 19679101, 15970074, -31872674, 1959451, 24611599, -4543832, -11745876, 12340220},
+			FieldElement{12876937, -10480056, 33134381, 6590940, -6307776, 14872440, 9613953, 8241152, 15370987, 9608631},
+			FieldElement{-4143277, -12014408, 8446281, -391603, 4407738, 13629032, -7724868, 15866074, -28210621, -8814099},
+		},
+		{
+			FieldElement{26660628, -15677655, 8393734, 358047, -7401291, 992988, -23904233, 858697, 20571223, 8420556},
+			FieldElement{14620715, 13067227, -15447274, 8264467, 14106269, 15080814, 33531827, 12516406, -21574435, -12476749},
+			FieldElement{236881, 10476226, 57258, -14677024, 6472998, 2466984, 17258519, 7256740, 8791136, 15069930},
+		},
+		{
+			FieldElement{1276410, -9371918, 22949635, -16322807, -23493039, -5702186, 14711875, 4874229, -30663140, -2331391},
+			FieldElement{5855666, 4990204, -13711848, 7294284, -7804282, 1924647, -1423175, -7912378, -33069337, 9234253},
+			FieldElement{20590503, -9018988, 31529744, -7352666, -2706834, 10650548, 31559055, -11609587, 18979186, 13396066},
+		},
+		{
+			FieldElement{24474287, 4968103, 22267082, 4407354, 24063882, -8325180, -18816887, 13594782, 33514650, 7021958},
+			FieldElement{-11566906, -6565505, -21365085, 15928892, -26158305, 4315421, -25948728, -3916677, -21480480, 12868082},
+			FieldElement{-28635013, 13504661, 19988037, -2132761, 21078225, 6443208, -21446107, 2244500, -12455797, -8089383},
+		},
+		{
+			FieldElement{-30595528, 13793479, -5852820, 319136, -25723172, -6263899, 33086546, 8957937, -15233648, 5540521},
+			FieldElement{-11630176, -11503902, -8119500, -7643073, 2620056, 1022908, -23710744, -1568984, -16128528, -14962807},
+			FieldElement{23152971, 775386, 27395463, 14006635, -9701118, 4649512, 1689819, 892185, -11513277, -15205948},
+		},
+		{
+			FieldElement{9770129, 9586738, 26496094, 4324120, 1556511, -3550024, 27453819, 4763127, -19179614, 5867134},
+			FieldElement{-32765025, 1927590, 31726409, -4753295, 23962434, -16019500, 27846559, 5931263, -29749703, -16108455},
+			FieldElement{27461885, -2977536, 22380810, 1815854, -23033753, -3031938, 7283490, -15148073, -19526700, 7734629},
+		},
+	},
+	{
+		{
+			FieldElement{-8010264, -9590817, -11120403, 6196038, 29344158, -13430885, 7585295, -3176626, 18549497, 15302069},
+			FieldElement{-32658337, -6171222, -7672793, -11051681, 6258878, 13504381, 10458790, -6418461, -8872242, 8424746},
+			FieldElement{24687205, 8613276, -30667046, -3233545, 1863892, -1830544, 19206234, 7134917, -11284482, -828919},
+		},
+		{
+			FieldElement{11334899, -9218022, 8025293, 12707519, 17523892, -10476071, 10243738, -14685461, -5066034, 16498837},
+			FieldElement{8911542, 6887158, -9584260, -6958590, 11145641, -9543680, 17303925, -14124238, 6536641, 10543906},
+			FieldElement{-28946384, 15479763, -17466835, 568876, -1497683, 11223454, -2669190, -16625574, -27235709, 8876771},
+		},
+		{
+			FieldElement{-25742899, -12566864, -15649966, -846607, -33026686, -796288, -33481822, 15824474, -604426, -9039817},
+			FieldElement{10330056, 70051, 7957388, -9002667, 9764902, 15609756, 27698697, -4890037, 1657394, 3084098},
+			FieldElement{10477963, -7470260, 12119566, -13250805, 29016247, -5365589, 31280319, 14396151, -30233575, 15272409},
+		},
+		{
+			FieldElement{-12288309, 3169463, 28813183, 16658753, 25116432, -5630466, -25173957, -12636138, -25014757, 1950504},
+			FieldElement{-26180358, 9489187, 11053416, -14746161, -31053720, 5825630, -8384306, -8767532, 15341279, 8373727},
+			FieldElement{28685821, 7759505, -14378516, -12002860, -31971820, 4079242, 298136, -10232602, -2878207, 15190420},
+		},
+		{
+			FieldElement{-32932876, 13806336, -14337485, -15794431, -24004620, 10940928, 8669718, 2742393, -26033313, -6875003},
+			FieldElement{-1580388, -11729417, -25979658, -11445023, -17411874, -10912854, 9291594, -16247779, -12154742, 6048605},
+			FieldElement{-30305315, 14843444, 1539301, 11864366, 20201677, 1900163, 13934231, 5128323, 11213262, 9168384},
+		},
+		{
+			FieldElement{-26280513, 11007847, 19408960, -940758, -18592965, -4328580, -5088060, -11105150, 20470157, -16398701},
+			FieldElement{-23136053, 9282192, 14855179, -15390078, -7362815, -14408560, -22783952, 14461608, 14042978, 5230683},
+			FieldElement{29969567, -2741594, -16711867, -8552442, 9175486, -2468974, 21556951, 3506042, -5933891, -12449708},
+		},
+		{
+			FieldElement{-3144746, 8744661, 19704003, 4581278, -20430686, 6830683, -21284170, 8971513, -28539189, 15326563},
+			FieldElement{-19464629, 10110288, -17262528, -3503892, -23500387, 1355669, -15523050, 15300988, -20514118, 9168260},
+			FieldElement{-5353335, 4488613, -23803248, 16314347, 7780487, -15638939, -28948358, 9601605, 33087103, -9011387},
+		},
+		{
+			FieldElement{-19443170, -15512900, -20797467, -12445323, -29824447, 10229461, -27444329, -15000531, -5996870, 15664672},
+			FieldElement{23294591, -16632613, -22650781, -8470978, 27844204, 11461195, 13099750, -2460356, 18151676, 13417686},
+			FieldElement{-24722913, -4176517, -31150679, 5988919, -26858785, 6685065, 1661597, -12551441, 15271676, -15452665},
+		},
+	},
+	{
+		{
+			FieldElement{11433042, -13228665, 8239631, -5279517, -1985436, -725718, -18698764, 2167544, -6921301, -13440182},
+			FieldElement{-31436171, 15575146, 30436815, 12192228, -22463353, 9395379, -9917708, -8638997, 12215110, 12028277},
+			FieldElement{14098400, 6555944, 23007258, 5757252, -15427832, -12950502, 30123440, 4617780, -16900089, -655628},
+		},
+		{
+			FieldElement{-4026201, -15240835, 11893168, 13718664, -14809462, 1847385, -15819999, 10154009, 23973261, -12684474},
+			FieldElement{-26531820, -3695990, -1908898, 2534301, -31870557, -16550355, 18341390, -11419951, 32013174, -10103539},
+			FieldElement{-25479301, 10876443, -11771086, -14625140, -12369567, 1838104, 21911214, 6354752, 4425632, -837822},
+		},
+		{
+			FieldElement{-10433389, -14612966, 22229858, -3091047, -13191166, 776729, -17415375, -12020462, 4725005, 14044970},
+			FieldElement{19268650, -7304421, 1555349, 8692754, -21474059, -9910664, 6347390, -1411784, -19522291, -16109756},
+			FieldElement{-24864089, 12986008, -10898878, -5558584, -11312371, -148526, 19541418, 8180106, 9282262, 10282508},
+		},
+		{
+			FieldElement{-26205082, 4428547, -8661196, -13194263, 4098402, -14165257, 15522535, 8372215, 5542595, -10702683},
+			FieldElement{-10562541, 14895633, 26814552, -16673850, -17480754, -2489360, -2781891, 6993761, -18093885, 10114655},
+			FieldElement{-20107055, -929418, 31422704, 10427861, -7110749, 6150669, -29091755, -11529146, 25953725, -106158},
+		},
+		{
+			FieldElement{-4234397, -8039292, -9119125, 3046000, 2101609, -12607294, 19390020, 6094296, -3315279, 12831125},
+			FieldElement{-15998678, 7578152, 5310217, 14408357, -33548620, -224739, 31575954, 6326196, 7381791, -2421839},
+			FieldElement{-20902779, 3296811, 24736065, -16328389, 18374254, 7318640, 6295303, 8082724, -15362489, 12339664},
+		},
+		{
+			FieldElement{27724736, 2291157, 6088201, -14184798, 1792727, 5857634, 13848414, 15768922, 25091167, 14856294},
+			FieldElement{-18866652, 8331043, 24373479, 8541013, -701998, -9269457, 12927300, -12695493, -22182473, -9012899},
+			FieldElement{-11423429, -5421590, 11632845, 3405020, 30536730, -11674039, -27260765, 13866390, 30146206, 9142070},
+		},
+		{
+			FieldElement{3924129, -15307516, -13817122, -10054960, 12291820, -668366, -27702774, 9326384, -8237858, 4171294},
+			FieldElement{-15921940, 16037937, 6713787, 16606682, -21612135, 2790944, 26396185, 3731949, 345228, -5462949},
+			FieldElement{-21327538, 13448259, 25284571, 1143661, 20614966, -8849387, 2031539, -12391231, -16253183, -13582083},
+		},
+		{
+			FieldElement{31016211, -16722429, 26371392, -14451233, -5027349, 14854137, 17477601, 3842657, 28012650, -16405420},
+			FieldElement{-5075835, 9368966, -8562079, -4600902, -15249953, 6970560, -9189873, 16292057, -8867157, 3507940},
+			FieldElement{29439664, 3537914, 23333589, 6997794, -17555561, -11018068, -15209202, -15051267, -9164929, 6580396},
+		},
+	},
+	{
+		{
+			FieldElement{-12185861, -7679788, 16438269, 10826160, -8696817, -6235611, 17860444, -9273846, -2095802, 9304567},
+			FieldElement{20714564, -4336911, 29088195, 7406487, 11426967, -5095705, 14792667, -14608617, 5289421, -477127},
+			FieldElement{-16665533, -10650790, -6160345, -13305760, 9192020, -1802462, 17271490, 12349094, 26939669, -3752294},
+		},
+		{
+			FieldElement{-12889898, 9373458, 31595848, 16374215, 21471720, 13221525, -27283495, -12348559, -3698806, 117887},
+			FieldElement{22263325, -6560050, 3984570, -11174646, -15114008, -566785, 28311253, 5358056, -23319780, 541964},
+			FieldElement{16259219, 3261970, 2309254, -15534474, -16885711, -4581916, 24134070, -16705829, -13337066, -13552195},
+		},
+		{
+			FieldElement{9378160, -13140186, -22845982, -12745264, 28198281, -7244098, -2399684, -717351, 690426, 14876244},
+			FieldElement{24977353, -314384, -8223969, -13465086, 28432343, -1176353, -13068804, -12297348, -22380984, 6618999},
+			FieldElement{-1538174, 11685646, 12944378, 13682314, -24389511, -14413193, 8044829, -13817328, 32239829, -5652762},
+		},
+		{
+			FieldElement{-18603066, 4762990, -926250, 8885304, -28412480, -3187315, 9781647, -10350059, 32779359, 5095274},
+			FieldElement{-33008130, -5214506, -32264887, -3685216, 9460461, -9327423, -24601656, 14506724, 21639561, -2630236},
+			FieldElement{-16400943, -13112215, 25239338, 15531969, 3987758, -4499318, -1289502, -6863535, 17874574, 558605},
+		},
+		{
+			FieldElement{-13600129, 10240081, 9171883, 16131053, -20869254, 9599700, 33499487, 5080151, 2085892, 5119761},
+			FieldElement{-22205145, -2519528, -16381601, 414691, -25019550, 2170430, 30634760, -8363614, -31999993, -5759884},
+			FieldElement{-6845704, 15791202, 8550074, -1312654, 29928809, -12092256, 27534430, -7192145, -22351378, 12961482},
+		},
+		{
+			FieldElement{-24492060, -9570771, 10368194, 11582341, -23397293, -2245287, 16533930, 8206996, -30194652, -5159638},
+			FieldElement{-11121496, -3382234, 2307366, 6362031, -135455, 8868177, -16835630, 7031275, 7589640, 8945490},
+			FieldElement{-32152748, 8917967, 6661220, -11677616, -1192060, -15793393, 7251489, -11182180, 24099109, -14456170},
+		},
+		{
+			FieldElement{5019558, -7907470, 4244127, -14714356, -26933272, 6453165, -19118182, -13289025, -6231896, -10280736},
+			FieldElement{10853594, 10721687, 26480089, 5861829, -22995819, 1972175, -1866647, -10557898, -3363451, -6441124},
+			FieldElement{-17002408, 5906790, 221599, -6563147, 7828208, -13248918, 24362661, -2008168, -13866408, 7421392},
+		},
+		{
+			FieldElement{8139927, -6546497, 32257646, -5890546, 30375719, 1886181, -21175108, 15441252, 28826358, -4123029},
+			FieldElement{6267086, 9695052, 7709135, -16603597, -32869068, -1886135, 14795160, -7840124, 13746021, -1742048},
+			FieldElement{28584902, 7787108, -6732942, -15050729, 22846041, -7571236, -3181936, -363524, 4771362, -8419958},
+		},
+	},
+	{
+		{
+			FieldElement{24949256, 6376279, -27466481, -8174608, -18646154, -9930606, 33543569, -12141695, 3569627, 11342593},
+			FieldElement{26514989, 4740088, 27912651, 3697550, 19331575, -11472339, 6809886, 4608608, 7325975, -14801071},
+			FieldElement{-11618399, -14554430, -24321212, 7655128, -1369274, 5214312, -27400540, 10258390, -17646694, -8186692},
+		},
+		{
+			FieldElement{11431204, 15823007, 26570245, 14329124, 18029990, 4796082, -31446179, 15580664, 9280358, -3973687},
+			FieldElement{-160783, -10326257, -22855316, -4304997, -20861367, -13621002, -32810901, -11181622, -15545091, 4387441},
+			FieldElement{-20799378, 12194512, 3937617, -5805892, -27154820, 9340370, -24513992, 8548137, 20617071, -7482001},
+		},
+		{
+			FieldElement{-938825, -3930586, -8714311, 16124718, 24603125, -6225393, -13775352, -11875822, 24345683, 10325460},
+			FieldElement{-19855277, -1568885, -22202708, 8714034, 14007766, 6928528, 16318175, -1010689, 4766743, 3552007},
+			FieldElement{-21751364, -16730916, 1351763, -803421, -4009670, 3950935, 3217514, 14481909, 10988822, -3994762},
+		},
+		{
+			FieldElement{15564307, -14311570, 3101243, 5684148, 30446780, -8051356, 12677127, -6505343, -8295852, 13296005},
+			FieldElement{-9442290, 6624296, -30298964, -11913677, -4670981, -2057379, 31521204, 9614054, -30000824, 12074674},
+			FieldElement{4771191, -135239, 14290749, -13089852, 27992298, 14998318, -1413936, -1556716, 29832613, -16391035},
+		},
+		{
+			FieldElement{7064884, -7541174, -19161962, -5067537, -18891269, -2912736, 25825242, 5293297, -27122660, 13101590},
+			FieldElement{-2298563, 2439670, -7466610, 1719965, -27267541, -16328445, 32512469, -5317593, -30356070, -4190957},
+			FieldElement{-30006540, 10162316, -33180176, 3981723, -16482138, -13070044, 14413974, 9515896, 19568978, 9628812},
+		},
+		{
+			FieldElement{33053803, 199357, 15894591, 1583059, 27380243, -4580435, -17838894, -6106839, -6291786, 3437740},
+			FieldElement{-18978877, 3884493, 19469877, 12726490, 15913552, 13614290, -22961733, 70104, 7463304, 4176122},
+			FieldElement{-27124001, 10659917, 11482427, -16070381, 12771467, -6635117, -32719404, -5322751, 24216882, 5944158},
+		},
+		{
+			FieldElement{8894125, 7450974, -2664149, -9765752, -28080517, -12389115, 19345746, 14680796, 11632993, 5847885},
+			FieldElement{26942781, -2315317, 9129564, -4906607, 26024105, 11769399, -11518837, 6367194, -9727230, 4782140},
+			FieldElement{19916461, -4828410, -22910704, -11414391, 25606324, -5972441, 33253853, 8220911, 6358847, -1873857},
+		},
+		{
+			FieldElement{801428, -2081702, 16569428, 11065167, 29875704, 96627, 7908388, -4480480, -13538503, 1387155},
+			FieldElement{19646058, 5720633, -11416706, 12814209, 11607948, 12749789, 14147075, 15156355, -21866831, 11835260},
+			FieldElement{19299512, 1155910, 28703737, 14890794, 2925026, 7269399, 26121523, 15467869, -26560550, 5052483},
+		},
+	},
+	{
+		{
+			FieldElement{-3017432, 10058206, 1980837, 3964243, 22160966, 12322533, -6431123, -12618185, 12228557, -7003677},
+			FieldElement{32944382, 14922211, -22844894, 5188528, 21913450, -8719943, 4001465, 13238564, -6114803, 8653815},
+			FieldElement{22865569, -4652735, 27603668, -12545395, 14348958, 8234005, 24808405, 5719875, 28483275, 2841751},
+		},
+		{
+			FieldElement{-16420968, -1113305, -327719, -12107856, 21886282, -15552774, -1887966, -315658, 19932058, -12739203},
+			FieldElement{-11656086, 10087521, -8864888, -5536143, -19278573, -3055912, 3999228, 13239134, -4777469, -13910208},
+			FieldElement{1382174, -11694719, 17266790, 9194690, -13324356, 9720081, 20403944, 11284705, -14013818, 3093230},
+		},
+		{
+			FieldElement{16650921, -11037932, -1064178, 1570629, -8329746, 7352753, -302424, 16271225, -24049421, -6691850},
+			FieldElement{-21911077, -5927941, -4611316, -5560156, -31744103, -10785293, 24123614, 15193618, -21652117, -16739389},
+			FieldElement{-9935934, -4289447, -25279823, 4372842, 2087473, 10399484, 31870908, 14690798, 17361620, 11864968},
+		},
+		{
+			FieldElement{-11307610, 6210372, 13206574, 5806320, -29017692, -13967200, -12331205, -7486601, -25578460, -16240689},
+			FieldElement{14668462, -12270235, 26039039, 15305210, 25515617, 4542480, 10453892, 6577524, 9145645, -6443880},
+			FieldElement{5974874, 3053895, -9433049, -10385191, -31865124, 3225009, -7972642, 3936128, -5652273, -3050304},
+		},
+		{
+			FieldElement{30625386, -4729400, -25555961, -12792866, -20484575, 7695099, 17097188, -16303496, -27999779, 1803632},
+			FieldElement{-3553091, 9865099, -5228566, 4272701, -5673832, -16689700, 14911344, 12196514, -21405489, 7047412},
+			FieldElement{20093277, 9920966, -11138194, -5343857, 13161587, 12044805, -32856851, 4124601, -32343828, -10257566},
+		},
+		{
+			FieldElement{-20788824, 14084654, -13531713, 7842147, 19119038, -13822605, 4752377, -8714640, -21679658, 2288038},
+			FieldElement{-26819236, -3283715, 29965059, 3039786, -14473765, 2540457, 29457502, 14625692, -24819617, 12570232},
+			FieldElement{-1063558, -11551823, 16920318, 12494842, 1278292, -5869109, -21159943, -3498680, -11974704, 4724943},
+		},
+		{
+			FieldElement{17960970, -11775534, -4140968, -9702530, -8876562, -1410617, -12907383, -8659932, -29576300, 1903856},
+			FieldElement{23134274, -14279132, -10681997, -1611936, 20684485, 15770816, -12989750, 3190296, 26955097, 14109738},
+			FieldElement{15308788, 5320727, -30113809, -14318877, 22902008, 7767164, 29425325, -11277562, 31960942, 11934971},
+		},
+		{
+			FieldElement{-27395711, 8435796, 4109644, 12222639, -24627868, 14818669, 20638173, 4875028, 10491392, 1379718},
+			FieldElement{-13159415, 9197841, 3875503, -8936108, -1383712, -5879801, 33518459, 16176658, 21432314, 12180697},
+			FieldElement{-11787308, 11500838, 13787581, -13832590, -22430679, 10140205, 1465425, 12689540, -10301319, -13872883},
+		},
+	},
+	{
+		{
+			FieldElement{5414091, -15386041, -21007664, 9643570, 12834970, 1186149, -2622916, -1342231, 26128231, 6032912},
+			FieldElement{-26337395, -13766162, 32496025, -13653919, 17847801, -12669156, 3604025, 8316894, -25875034, -10437358},
+			FieldElement{3296484, 6223048, 24680646, -12246460, -23052020, 5903205, -8862297, -4639164, 12376617, 3188849},
+		},
+		{
+			FieldElement{29190488, -14659046, 27549113, -1183516, 3520066, -10697301, 32049515, -7309113, -16109234, -9852307},
+			FieldElement{-14744486, -9309156, 735818, -598978, -20407687, -5057904, 25246078, -15795669, 18640741, -960977},
+			FieldElement{-6928835, -16430795, 10361374, 5642961, 4910474, 12345252, -31638386, -494430, 10530747, 1053335},
+		},
+		{
+			FieldElement{-29265967, -14186805, -13538216, -12117373, -19457059, -10655384, -31462369, -2948985, 24018831, 15026644},
+			FieldElement{-22592535, -3145277, -2289276, 5953843, -13440189, 9425631, 25310643, 13003497, -2314791, -15145616},
+			FieldElement{-27419985, -603321, -8043984, -1669117, -26092265, 13987819, -27297622, 187899, -23166419, -2531735},
+		},
+		{
+			FieldElement{-21744398, -13810475, 1844840, 5021428, -10434399, -15911473, 9716667, 16266922, -5070217, 726099},
+			FieldElement{29370922, -6053998, 7334071, -15342259, 9385287, 2247707, -13661962, -4839461, 30007388, -15823341},
+			FieldElement{-936379, 16086691, 23751945, -543318, -1167538, -5189036, 9137109, 730663, 9835848, 4555336},
+		},
+		{
+			FieldElement{-23376435, 1410446, -22253753, -12899614, 30867635, 15826977, 17693930, 544696, -11985298, 12422646},
+			FieldElement{31117226, -12215734, -13502838, 6561947, -9876867, -12757670, -5118685, -4096706, 29120153, 13924425},
+			FieldElement{-17400879, -14233209, 19675799, -2734756, -11006962, -5858820, -9383939, -11317700, 7240931, -237388},
+		},
+		{
+			FieldElement{-31361739, -11346780, -15007447, -5856218, -22453340, -12152771, 1222336, 4389483, 3293637, -15551743},
+			FieldElement{-16684801, -14444245, 11038544, 11054958, -13801175, -3338533, -24319580, 7733547, 12796905, -6335822},
+			FieldElement{-8759414, -10817836, -25418864, 10783769, -30615557, -9746811, -28253339, 3647836, 3222231, -11160462},
+		},
+		{
+			FieldElement{18606113, 1693100, -25448386, -15170272, 4112353, 10045021, 23603893, -2048234, -7550776, 2484985},
+			FieldElement{9255317, -3131197, -12156162, -1004256, 13098013, -9214866, 16377220, -2102812, -19802075, -3034702},
+			FieldElement{-22729289, 7496160, -5742199, 11329249, 19991973, -3347502, -31718148, 9936966, -30097688, -10618797},
+		},
+		{
+			FieldElement{21878590, -5001297, 4338336, 13643897, -3036865, 13160960, 19708896, 5415497, -7360503, -4109293},
+			FieldElement{27736861, 10103576, 12500508, 8502413, -3413016, -9633558, 10436918, -1550276, -23659143, -8132100},
+			FieldElement{19492550, -12104365, -29681976, -852630, -3208171, 12403437, 30066266, 8367329, 13243957, 8709688},
+		},
+	},
+	{
+		{
+			FieldElement{12015105, 2801261, 28198131, 10151021, 24818120, -4743133, -11194191, -5645734, 5150968, 7274186},
+			FieldElement{2831366, -12492146, 1478975, 6122054, 23825128, -12733586, 31097299, 6083058, 31021603, -9793610},
+			FieldElement{-2529932, -2229646, 445613, 10720828, -13849527, -11505937, -23507731, 16354465, 15067285, -14147707},
+		},
+		{
+			FieldElement{7840942, 14037873, -33364863, 15934016, -728213, -3642706, 21403988, 1057586, -19379462, -12403220},
+			FieldElement{915865, -16469274, 15608285, -8789130, -24357026, 6060030, -17371319, 8410997, -7220461, 16527025},
+			FieldElement{32922597, -556987, 20336074, -16184568, 10903705, -5384487, 16957574, 52992, 23834301, 6588044},
+		},
+		{
+			FieldElement{32752030, 11232950, 3381995, -8714866, 22652988, -10744103, 17159699, 16689107, -20314580, -1305992},
+			FieldElement{-4689649, 9166776, -25710296, -10847306, 11576752, 12733943, 7924251, -2752281, 1976123, -7249027},
+			FieldElement{21251222, 16309901, -2983015, -6783122, 30810597, 12967303, 156041, -3371252, 12331345, -8237197},
+		},
+		{
+			FieldElement{8651614, -4477032, -16085636, -4996994, 13002507, 2950805, 29054427, -5106970, 10008136, -4667901},
+			FieldElement{31486080, 15114593, -14261250, 12951354, 14369431, -7387845, 16347321, -13662089, 8684155, -10532952},
+			FieldElement{19443825, 11385320, 24468943, -9659068, -23919258, 2187569, -26263207, -6086921, 31316348, 14219878},
+		},
+		{
+			FieldElement{-28594490, 1193785, 32245219, 11392485, 31092169, 15722801, 27146014, 6992409, 29126555, 9207390},
+			FieldElement{32382935, 1110093, 18477781, 11028262, -27411763, -7548111, -4980517, 10843782, -7957600, -14435730},
+			FieldElement{2814918, 7836403, 27519878, -7868156, -20894015, -11553689, -21494559, 8550130, 28346258, 1994730},
+		},
+		{
+			FieldElement{-19578299, 8085545, -14000519, -3948622, 2785838, -16231307, -19516951, 7174894, 22628102, 8115180},
+			FieldElement{-30405132, 955511, -11133838, -15078069, -32447087, -13278079, -25651578, 3317160, -9943017, 930272},
+			FieldElement{-15303681, -6833769, 28856490, 1357446, 23421993, 1057177, 24091212, -1388970, -22765376, -10650715},
+		},
+		{
+			FieldElement{-22751231, -5303997, -12907607, -12768866, -15811511, -7797053, -14839018, -16554220, -1867018, 8398970},
+			FieldElement{-31969310, 2106403, -4736360, 1362501, 12813763, 16200670, 22981545, -6291273, 18009408, -15772772},
+			FieldElement{-17220923, -9545221, -27784654, 14166835, 29815394, 7444469, 29551787, -3727419, 19288549, 1325865},
+		},
+		{
+			FieldElement{15100157, -15835752, -23923978, -1005098, -26450192, 15509408, 12376730, -3479146, 33166107, -8042750},
+			FieldElement{20909231, 13023121, -9209752, 16251778, -5778415, -8094914, 12412151, 10018715, 2213263, -13878373},
+			FieldElement{32529814, -11074689, 30361439, -16689753, -9135940, 1513226, 22922121, 6382134, -5766928, 8371348},
+		},
+	},
+	{
+		{
+			FieldElement{9923462, 11271500, 12616794, 3544722, -29998368, -1721626, 12891687, -8193132, -26442943, 10486144},
+			FieldElement{-22597207, -7012665, 8587003, -8257861, 4084309, -12970062, 361726, 2610596, -23921530, -11455195},
+			FieldElement{5408411, -1136691, -4969122, 10561668, 24145918, 14240566, 31319731, -4235541, 19985175, -3436086},
+		},
+		{
+			FieldElement{-13994457, 16616821, 14549246, 3341099, 32155958, 13648976, -17577068, 8849297, 65030, 8370684},
+			FieldElement{-8320926, -12049626, 31204563, 5839400, -20627288, -1057277, -19442942, 6922164, 12743482, -9800518},
+			FieldElement{-2361371, 12678785, 28815050, 4759974, -23893047, 4884717, 23783145, 11038569, 18800704, 255233},
+		},
+		{
+			FieldElement{-5269658, -1773886, 13957886, 7990715, 23132995, 728773, 13393847, 9066957, 19258688, -14753793},
+			FieldElement{-2936654, -10827535, -10432089, 14516793, -3640786, 4372541, -31934921, 2209390, -1524053, 2055794},
+			FieldElement{580882, 16705327, 5468415, -2683018, -30926419, -14696000, -7203346, -8994389, -30021019, 7394435},
+		},
+		{
+			FieldElement{23838809, 1822728, -15738443, 15242727, 8318092, -3733104, -21672180, -3492205, -4821741, 14799921},
+			FieldElement{13345610, 9759151, 3371034, -16137791, 16353039, 8577942, 31129804, 13496856, -9056018, 7402518},
+			FieldElement{2286874, -4435931, -20042458, -2008336, -13696227, 5038122, 11006906, -15760352, 8205061, 1607563},
+		},
+		{
+			FieldElement{14414086, -8002132, 3331830, -3208217, 22249151, -5594188, 18364661, -2906958, 30019587, -9029278},
+			FieldElement{-27688051, 1585953, -10775053, 931069, -29120221, -11002319, -14410829, 12029093, 9944378, 8024},
+			FieldElement{4368715, -3709630, 29874200, -15022983, -20230386, -11410704, -16114594, -999085, -8142388, 5640030},
+		},
+		{
+			FieldElement{10299610, 13746483, 11661824, 16234854, 7630238, 5998374, 9809887, -16694564, 15219798, -14327783},
+			FieldElement{27425505, -5719081, 3055006, 10660664, 23458024, 595578, -15398605, -1173195, -18342183, 9742717},
+			FieldElement{6744077, 2427284, 26042789, 2720740, -847906, 1118974, 32324614, 7406442, 12420155, 1994844},
+		},
+		{
+			FieldElement{14012521, -5024720, -18384453, -9578469, -26485342, -3936439, -13033478, -10909803, 24319929, -6446333},
+			FieldElement{16412690, -4507367, 10772641, 15929391, -17068788, -4658621, 10555945, -10484049, -30102368, -4739048},
+			FieldElement{22397382, -7767684, -9293161, -12792868, 17166287, -9755136, -27333065, 6199366, 21880021, -12250760},
+		},
+		{
+			FieldElement{-4283307, 5368523, -31117018, 8163389, -30323063, 3209128, 16557151, 8890729, 8840445, 4957760},
+			FieldElement{-15447727, 709327, -6919446, -10870178, -29777922, 6522332, -21720181, 12130072, -14796503, 5005757},
+			FieldElement{-2114751, -14308128, 23019042, 15765735, -25269683, 6002752, 10183197, -13239326, -16395286, -2176112},
+		},
+	},
+	{
+		{
+			FieldElement{-19025756, 1632005, 13466291, -7995100, -23640451, 16573537, -32013908, -3057104, 22208662, 2000468},
+			FieldElement{3065073, -1412761, -25598674, -361432, -17683065, -5703415, -8164212, 11248527, -3691214, -7414184},
+			FieldElement{10379208, -6045554, 8877319, 1473647, -29291284, -12507580, 16690915, 2553332, -3132688, 16400289},
+		},
+		{
+			FieldElement{15716668, 1254266, -18472690, 7446274, -8448918, 6344164, -22097271, -7285580, 26894937, 9132066},
+			FieldElement{24158887, 12938817, 11085297, -8177598, -28063478, -4457083, -30576463, 64452, -6817084, -2692882},
+			FieldElement{13488534, 7794716, 22236231, 5989356, 25426474, -12578208, 2350710, -3418511, -4688006, 2364226},
+		},
+		{
+			FieldElement{16335052, 9132434, 25640582, 6678888, 1725628, 8517937, -11807024, -11697457, 15445875, -7798101},
+			FieldElement{29004207, -7867081, 28661402, -640412, -12794003, -7943086, 31863255, -4135540, -278050, -15759279},
+			FieldElement{-6122061, -14866665, -28614905, 14569919, -10857999, -3591829, 10343412, -6976290, -29828287, -10815811},
+		},
+		{
+			FieldElement{27081650, 3463984, 14099042, -4517604, 1616303, -6205604, 29542636, 15372179, 17293797, 960709},
+			FieldElement{20263915, 11434237, -5765435, 11236810, 13505955, -10857102, -16111345, 6493122, -19384511, 7639714},
+			FieldElement{-2830798, -14839232, 25403038, -8215196, -8317012, -16173699, 18006287, -16043750, 29994677, -15808121},
+		},
+		{
+			FieldElement{9769828, 5202651, -24157398, -13631392, -28051003, -11561624, -24613141, -13860782, -31184575, 709464},
+			FieldElement{12286395, 13076066, -21775189, -1176622, -25003198, 4057652, -32018128, -8890874, 16102007, 13205847},
+			FieldElement{13733362, 5599946, 10557076, 3195751, -5557991, 8536970, -25540170, 8525972, 10151379, 10394400},
+		},
+		{
+			FieldElement{4024660, -16137551, 22436262, 12276534, -9099015, -2686099, 19698229, 11743039, -33302334, 8934414},
+			FieldElement{-15879800, -4525240, -8580747, -2934061, 14634845, -698278, -9449077, 3137094, -11536886, 11721158},
+			FieldElement{17555939, -5013938, 8268606, 2331751, -22738815, 9761013, 9319229, 8835153, -9205489, -1280045},
+		},
+		{
+			FieldElement{-461409, -7830014, 20614118, 16688288, -7514766, -4807119, 22300304, 505429, 6108462, -6183415},
+			FieldElement{-5070281, 12367917, -30663534, 3234473, 32617080, -8422642, 29880583, -13483331, -26898490, -7867459},
+			FieldElement{-31975283, 5726539, 26934134, 10237677, -3173717, -605053, 24199304, 3795095, 7592688, -14992079},
+		},
+		{
+			FieldElement{21594432, -14964228, 17466408, -4077222, 32537084, 2739898, 6407723, 12018833, -28256052, 4298412},
+			FieldElement{-20650503, -11961496, -27236275, 570498, 3767144, -1717540, 13891942, -1569194, 13717174, 10805743},
+			FieldElement{-14676630, -15644296, 15287174, 11927123, 24177847, -8175568, -796431, 14860609, -26938930, -5863836},
+		},
+	},
+	{
+		{
+			FieldElement{12962541, 5311799, -10060768, 11658280, 18855286, -7954201, 13286263, -12808704, -4381056, 9882022},
+			FieldElement{18512079, 11319350, -20123124, 15090309, 18818594, 5271736, -22727904, 3666879, -23967430, -3299429},
+			FieldElement{-6789020, -3146043, 16192429, 13241070, 15898607, -14206114, -10084880, -6661110, -2403099, 5276065},
+		},
+		{
+			FieldElement{30169808, -5317648, 26306206, -11750859, 27814964, 7069267, 7152851, 3684982, 1449224, 13082861},
+			FieldElement{10342826, 3098505, 2119311, 193222, 25702612, 12233820, 23697382, 15056736, -21016438, -8202000},
+			FieldElement{-33150110, 3261608, 22745853, 7948688, 19370557, -15177665, -26171976, 6482814, -10300080, -11060101},
+		},
+		{
+			FieldElement{32869458, -5408545, 25609743, 15678670, -10687769, -15471071, 26112421, 2521008, -22664288, 6904815},
+			FieldElement{29506923, 4457497, 3377935, -9796444, -30510046, 12935080, 1561737, 3841096, -29003639, -6657642},
+			FieldElement{10340844, -6630377, -18656632, -2278430, 12621151, -13339055, 30878497, -11824370, -25584551, 5181966},
+		},
+		{
+			FieldElement{25940115, -12658025, 17324188, -10307374, -8671468, 15029094, 24396252, -16450922, -2322852, -12388574},
+			FieldElement{-21765684, 9916823, -1300409, 4079498, -1028346, 11909559, 1782390, 12641087, 20603771, -6561742},
+			FieldElement{-18882287, -11673380, 24849422, 11501709, 13161720, -4768874, 1925523, 11914390, 4662781, 7820689},
+		},
+		{
+			FieldElement{12241050, -425982, 8132691, 9393934, 32846760, -1599620, 29749456, 12172924, 16136752, 15264020},
+			FieldElement{-10349955, -14680563, -8211979, 2330220, -17662549, -14545780, 10658213, 6671822, 19012087, 3772772},
+			FieldElement{3753511, -3421066, 10617074, 2028709, 14841030, -6721664, 28718732, -15762884, 20527771, 12988982},
+		},
+		{
+			FieldElement{-14822485, -5797269, -3707987, 12689773, -898983, -10914866, -24183046, -10564943, 3299665, -12424953},
+			FieldElement{-16777703, -15253301, -9642417, 4978983, 3308785, 8755439, 6943197, 6461331, -25583147, 8991218},
+			FieldElement{-17226263, 1816362, -1673288, -6086439, 31783888, -8175991, -32948145, 7417950, -30242287, 1507265},
+		},
+		{
+			FieldElement{29692663, 6829891, -10498800, 4334896, 20945975, -11906496, -28887608, 8209391, 14606362, -10647073},
+			FieldElement{-3481570, 8707081, 32188102, 5672294, 22096700, 1711240, -33020695, 9761487, 4170404, -2085325},
+			FieldElement{-11587470, 14855945, -4127778, -1531857, -26649089, 15084046, 22186522, 16002000, -14276837, -8400798},
+		},
+		{
+			FieldElement{-4811456, 13761029, -31703877, -2483919, -3312471, 7869047, -7113572, -9620092, 13240845, 10965870},
+			FieldElement{-7742563, -8256762, -14768334, -13656260, -23232383, 12387166, 4498947, 14147411, 29514390, 4302863},
+			FieldElement{-13413405, -12407859, 20757302, -13801832, 14785143, 8976368, -5061276, -2144373, 17846988, -13971927},
+		},
+	},
+	{
+		{
+			FieldElement{-2244452, -754728, -4597030, -1066309, -6247172, 1455299, -21647728, -9214789, -5222701, 12650267},
+			FieldElement{-9906797, -16070310, 21134160, 12198166, -27064575, 708126, 387813, 13770293, -19134326, 10958663},
+			FieldElement{22470984, 12369526, 23446014, -5441109, -21520802, -9698723, -11772496, -11574455, -25083830, 4271862},
+		},
+		{
+			FieldElement{-25169565, -10053642, -19909332, 15361595, -5984358, 2159192, 75375, -4278529, -32526221, 8469673},
+			FieldElement{15854970, 4148314, -8893890, 7259002, 11666551, 13824734, -30531198, 2697372, 24154791, -9460943},
+			FieldElement{15446137, -15806644, 29759747, 14019369, 30811221, -9610191, -31582008, 12840104, 24913809, 9815020},
+		},
+		{
+			FieldElement{-4709286, -5614269, -31841498, -12288893, -14443537, 10799414, -9103676, 13438769, 18735128, 9466238},
+			FieldElement{11933045, 9281483, 5081055, -5183824, -2628162, -4905629, -7727821, -10896103, -22728655, 16199064},
+			FieldElement{14576810, 379472, -26786533, -8317236, -29426508, -10812974, -102766, 1876699, 30801119, 2164795},
+		},
+		{
+			FieldElement{15995086, 3199873, 13672555, 13712240, -19378835, -4647646, -13081610, -15496269, -13492807, 1268052},
+			FieldElement{-10290614, -3659039, -3286592, 10948818, 23037027, 3794475, -3470338, -12600221, -17055369, 3565904},
+			FieldElement{29210088, -9419337, -5919792, -4952785, 10834811, -13327726, -16512102, -10820713, -27162222, -14030531},
+		},
+		{
+			FieldElement{-13161890, 15508588, 16663704, -8156150, -28349942, 9019123, -29183421, -3769423, 2244111, -14001979},
+			FieldElement{-5152875, -3800936, -9306475, -6071583, 16243069, 14684434, -25673088, -16180800, 13491506, 4641841},
+			FieldElement{10813417, 643330, -19188515, -728916, 30292062, -16600078, 27548447, -7721242, 14476989, -12767431},
+		},
+		{
+			FieldElement{10292079, 9984945, 6481436, 8279905, -7251514, 7032743, 27282937, -1644259, -27912810, 12651324},
+			FieldElement{-31185513, -813383, 22271204, 11835308, 10201545, 15351028, 17099662, 3988035, 21721536, -3148940},
+			FieldElement{10202177, -6545839, -31373232, -9574638, -32150642, -8119683, -12906320, 3852694, 13216206, 14842320},
+		},
+		{
+			FieldElement{-15815640, -10601066, -6538952, -7258995, -6984659, -6581778, -31500847, 13765824, -27434397, 9900184},
+			FieldElement{14465505, -13833331, -32133984, -14738873, -27443187, 12990492, 33046193, 15796406, -7051866, -8040114},
+			FieldElement{30924417, -8279620, 6359016, -12816335, 16508377, 9071735, -25488601, 15413635, 9524356, -7018878},
+		},
+		{
+			FieldElement{12274201, -13175547, 32627641, -1785326, 6736625, 13267305, 5237659, -5109483, 15663516, 4035784},
+			FieldElement{-2951309, 8903985, 17349946, 601635, -16432815, -4612556, -13732739, -15889334, -22258478, 4659091},
+			FieldElement{-16916263, -4952973, -30393711, -15158821, 20774812, 15897498, 5736189, 15026997, -2178256, -13455585},
+		},
+	},
+	{
+		{
+			FieldElement{-8858980, -2219056, 28571666, -10155518, -474467, -10105698, -3801496, 278095, 23440562, -290208},
+			FieldElement{10226241, -5928702, 15139956, 120818, -14867693, 5218603, 32937275, 11551483, -16571960, -7442864},
+			FieldElement{17932739, -12437276, -24039557, 10749060, 11316803, 7535897, 22503767, 5561594, -3646624, 3898661},
+		},
+		{
+			FieldElement{7749907, -969567, -16339731, -16464, -25018111, 15122143, -1573531, 7152530, 21831162, 1245233},
+			FieldElement{26958459, -14658026, 4314586, 8346991, -5677764, 11960072, -32589295, -620035, -30402091, -16716212},
+			FieldElement{-12165896, 9166947, 33491384, 13673479, 29787085, 13096535, 6280834, 14587357, -22338025, 13987525},
+		},
+		{
+			FieldElement{-24349909, 7778775, 21116000, 15572597, -4833266, -5357778, -4300898, -5124639, -7469781, -2858068},
+			FieldElement{9681908, -6737123, -31951644, 13591838, -6883821, 386950, 31622781, 6439245, -14581012, 4091397},
+			FieldElement{-8426427, 1470727, -28109679, -1596990, 3978627, -5123623, -19622683, 12092163, 29077877, -14741988},
+		},
+		{
+			FieldElement{5269168, -6859726, -13230211, -8020715, 25932563, 1763552, -5606110, -5505881, -20017847, 2357889},
+			FieldElement{32264008, -15407652, -5387735, -1160093, -2091322, -3946900, 23104804, -12869908, 5727338, 189038},
+			FieldElement{14609123, -8954470, -6000566, -16622781, -14577387, -7743898, -26745169, 10942115, -25888931, -14884697},
+		},
+		{
+			FieldElement{20513500, 5557931, -15604613, 7829531, 26413943, -2019404, -21378968, 7471781, 13913677, -5137875},
+			FieldElement{-25574376, 11967826, 29233242, 12948236, -6754465, 4713227, -8940970, 14059180, 12878652, 8511905},
+			FieldElement{-25656801, 3393631, -2955415, -7075526, -2250709, 9366908, -30223418, 6812974, 5568676, -3127656},
+		},
+		{
+			FieldElement{11630004, 12144454, 2116339, 13606037, 27378885, 15676917, -17408753, -13504373, -14395196, 8070818},
+			FieldElement{27117696, -10007378, -31282771, -5570088, 1127282, 12772488, -29845906, 10483306, -11552749, -1028714},
+			FieldElement{10637467, -5688064, 5674781, 1072708, -26343588, -6982302, -1683975, 9177853, -27493162, 15431203},
+		},
+		{
+			FieldElement{20525145, 10892566, -12742472, 12779443, -29493034, 16150075, -28240519, 14943142, -15056790, -7935931},
+			FieldElement{-30024462, 5626926, -551567, -9981087, 753598, 11981191, 25244767, -3239766, -3356550, 9594024},
+			FieldElement{-23752644, 2636870, -5163910, -10103818, 585134, 7877383, 11345683, -6492290, 13352335, -10977084},
+		},
+		{
+			FieldElement{-1931799, -5407458, 3304649, -12884869, 17015806, -4877091, -29783850, -7752482, -13215537, -319204},
+			FieldElement{20239939, 6607058, 6203985, 3483793, -18386976, -779229, -20723742, 15077870, -22750759, 14523817},
+			FieldElement{27406042, -6041657, 27423596, -4497394, 4996214, 10002360, -28842031, -4545494, -30172742, -4805667},
+		},
+	},
+	{
+		{
+			FieldElement{11374242, 12660715, 17861383, -12540833, 10935568, 1099227, -13886076, -9091740, -27727044, 11358504},
+			FieldElement{-12730809, 10311867, 1510375, 10778093, -2119455, -9145702, 32676003, 11149336, -26123651, 4985768},
+			FieldElement{-19096303, 341147, -6197485, -239033, 15756973, -8796662, -983043, 13794114, -19414307, -15621255},
+		},
+		{
+			FieldElement{6490081, 11940286, 25495923, -7726360, 8668373, -8751316, 3367603, 6970005, -1691065, -9004790},
+			FieldElement{1656497, 13457317, 15370807, 6364910, 13605745, 8362338, -19174622, -5475723, -16796596, -5031438},
+			FieldElement{-22273315, -13524424, -64685, -4334223, -18605636, -10921968, -20571065, -7007978, -99853, -10237333},
+		},
+		{
+			FieldElement{17747465, 10039260, 19368299, -4050591, -20630635, -16041286, 31992683, -15857976, -29260363, -5511971},
+			FieldElement{31932027, -4986141, -19612382, 16366580, 22023614, 88450, 11371999, -3744247, 4882242, -10626905},
+			FieldElement{29796507, 37186, 19818052, 10115756, -11829032, 3352736, 18551198, 3272828, -5190932, -4162409},
+		},
+		{
+			FieldElement{12501286, 4044383, -8612957, -13392385, -32430052, 5136599, -19230378, -3529697, 330070, -3659409},
+			FieldElement{6384877, 2899513, 17807477, 7663917, -2358888, 12363165, 25366522, -8573892, -271295, 12071499},
+			FieldElement{-8365515, -4042521, 25133448, -4517355, -6211027, 2265927, -32769618, 1936675, -5159697, 3829363},
+		},
+		{
+			FieldElement{28425966, -5835433, -577090, -4697198, -14217555, 6870930, 7921550, -6567787, 26333140, 14267664},
+			FieldElement{-11067219, 11871231, 27385719, -10559544, -4585914, -11189312, 10004786, -8709488, -21761224, 8930324},
+			FieldElement{-21197785, -16396035, 25654216, -1725397, 12282012, 11008919, 1541940, 4757911, -26491501, -16408940},
+		},
+		{
+			FieldElement{13537262, -7759490, -20604840, 10961927, -5922820, -13218065, -13156584, 6217254, -15943699, 13814990},
+			FieldElement{-17422573, 15157790, 18705543, 29619, 24409717, -260476, 27361681, 9257833, -1956526, -1776914},
+			FieldElement{-25045300, -10191966, 15366585, 15166509, -13105086, 8423556, -29171540, 12361135, -18685978, 4578290},
+		},
+		{
+			FieldElement{24579768, 3711570, 1342322, -11180126, -27005135, 14124956, -22544529, 14074919, 21964432, 8235257},
+			FieldElement{-6528613, -2411497, 9442966, -5925588, 12025640, -1487420, -2981514, -1669206, 13006806, 2355433},
+			FieldElement{-16304899, -13605259, -6632427, -5142349, 16974359, -10911083, 27202044, 1719366, 1141648, -12796236},
+		},
+		{
+			FieldElement{-12863944, -13219986, -8318266, -11018091, -6810145, -4843894, 13475066, -3133972, 32674895, 13715045},
+			FieldElement{11423335, -5468059, 32344216, 8962751, 24989809, 9241752, -13265253, 16086212, -28740881, -15642093},
+			FieldElement{-1409668, 12530728, -6368726, 10847387, 19531186, -14132160, -11709148, 7791794, -27245943, 4383347},
+		},
+	},
+	{
+		{
+			FieldElement{-28970898, 5271447, -1266009, -9736989, -12455236, 16732599, -4862407, -4906449, 27193557, 6245191},
+			FieldElement{-15193956, 5362278, -1783893, 2695834, 4960227, 12840725, 23061898, 3260492, 22510453, 8577507},
+			FieldElement{-12632451, 11257346, -32692994, 13548177, -721004, 10879011, 31168030, 13952092, -29571492, -3635906},
+		},
+		{
+			FieldElement{3877321, -9572739, 32416692, 5405324, -11004407, -13656635, 3759769, 11935320, 5611860, 8164018},
+			FieldElement{-16275802, 14667797, 15906460, 12155291, -22111149, -9039718, 32003002, -8832289, 5773085, -8422109},
+			FieldElement{-23788118, -8254300, 1950875, 8937633, 18686727, 16459170, -905725, 12376320, 31632953, 190926},
+		},
+		{
+			FieldElement{-24593607, -16138885, -8423991, 13378746, 14162407, 6901328, -8288749, 4508564, -25341555, -3627528},
+			FieldElement{8884438, -5884009, 6023974, 10104341, -6881569, -4941533, 18722941, -14786005, -1672488, 827625},
+			FieldElement{-32720583, -16289296, -32503547, 7101210, 13354605, 2659080, -1800575, -14108036, -24878478, 1541286},
+		},
+		{
+			FieldElement{2901347, -1117687, 3880376, -10059388, -17620940, -3612781, -21802117, -3567481, 20456845, -1885033},
+			FieldElement{27019610, 12299467, -13658288, -1603234, -12861660, -4861471, -19540150, -5016058, 29439641, 15138866},
+			FieldElement{21536104, -6626420, -32447818, -10690208, -22408077, 5175814, -5420040, -16361163, 7779328, 109896},
+		},
+		{
+			FieldElement{30279744, 14648750, -8044871, 6425558, 13639621, -743509, 28698390, 12180118, 23177719, -554075},
+			FieldElement{26572847, 3405927, -31701700, 12890905, -19265668, 5335866, -6493768, 2378492, 4439158, -13279347},
+			FieldElement{-22716706, 3489070, -9225266, -332753, 18875722, -1140095, 14819434, -12731527, -17717757, -5461437},
+		},
+		{
+			FieldElement{-5056483, 16566551, 15953661, 3767752, -10436499, 15627060, -820954, 2177225, 8550082, -15114165},
+			FieldElement{-18473302, 16596775, -381660, 15663611, 22860960, 15585581, -27844109, -3582739, -23260460, -8428588},
+			FieldElement{-32480551, 15707275, -8205912, -5652081, 29464558, 2713815, -22725137, 15860482, -21902570, 1494193},
+		},
+		{
+			FieldElement{-19562091, -14087393, -25583872, -9299552, 13127842, 759709, 21923482, 16529112, 8742704, 12967017},
+			FieldElement{-28464899, 1553205, 32536856, -10473729, -24691605, -406174, -8914625, -2933896, -29903758, 15553883},
+			FieldElement{21877909, 3230008, 9881174, 10539357, -4797115, 2841332, 11543572, 14513274, 19375923, -12647961},
+		},
+		{
+			FieldElement{8832269, -14495485, 13253511, 5137575, 5037871, 4078777, 24880818, -6222716, 2862653, 9455043},
+			FieldElement{29306751, 5123106, 20245049, -14149889, 9592566, 8447059, -2077124, -2990080, 15511449, 4789663},
+			FieldElement{-20679756, 7004547, 8824831, -9434977, -4045704, -3750736, -5754762, 108893, 23513200, 16652362},
+		},
+	},
+	{
+		{
+			FieldElement{-33256173, 4144782, -4476029, -6579123, 10770039, -7155542, -6650416, -12936300, -18319198, 10212860},
+			FieldElement{2756081, 8598110, 7383731, -6859892, 22312759, -1105012, 21179801, 2600940, -9988298, -12506466},
+			FieldElement{-24645692, 13317462, -30449259, -15653928, 21365574, -10869657, 11344424, 864440, -2499677, -16710063},
+		},
+		{
+			FieldElement{-26432803, 6148329, -17184412, -14474154, 18782929, -275997, -22561534, 211300, 2719757, 4940997},
+			FieldElement{-1323882, 3911313, -6948744, 14759765, -30027150, 7851207, 21690126, 8518463, 26699843, 5276295},
+			FieldElement{-13149873, -6429067, 9396249, 365013, 24703301, -10488939, 1321586, 149635, -15452774, 7159369},
+		},
+		{
+			FieldElement{9987780, -3404759, 17507962, 9505530, 9731535, -2165514, 22356009, 8312176, 22477218, -8403385},
+			FieldElement{18155857, -16504990, 19744716, 9006923, 15154154, -10538976, 24256460, -4864995, -22548173, 9334109},
+			FieldElement{2986088, -4911893, 10776628, -3473844, 10620590, -7083203, -21413845, 14253545, -22587149, 536906},
+		},
+		{
+			FieldElement{4377756, 8115836, 24567078, 15495314, 11625074, 13064599, 7390551, 10589625, 10838060, -15420424},
+			FieldElement{-19342404, 867880, 9277171, -3218459, -14431572, -1986443, 19295826, -15796950, 6378260, 699185},
+			FieldElement{7895026, 4057113, -7081772, -13077756, -17886831, -323126, -716039, 15693155, -5045064, -13373962},
+		},
+		{
+			FieldElement{-7737563, -5869402, -14566319, -7406919, 11385654, 13201616, 31730678, -10962840, -3918636, -9669325},
+			FieldElement{10188286, -15770834, -7336361, 13427543, 22223443, 14896287, 30743455, 7116568, -21786507, 5427593},
+			FieldElement{696102, 13206899, 27047647, -10632082, 15285305, -9853179, 10798490, -4578720, 19236243, 12477404},
+		},
+		{
+			FieldElement{-11229439, 11243796, -17054270, -8040865, -788228, -8167967, -3897669, 11180504, -23169516, 7733644},
+			FieldElement{17800790, -14036179, -27000429, -11766671, 23887827, 3149671, 23466177, -10538171, 10322027, 15313801},
+			FieldElement{26246234, 11968874, 32263343, -5468728, 6830755, -13323031, -15794704, -101982, -24449242, 10890804},
+		},
+		{
+			FieldElement{-31365647, 10271363, -12660625, -6267268, 16690207, -13062544, -14982212, 16484931, 25180797, -5334884},
+			FieldElement{-586574, 10376444, -32586414, -11286356, 19801893, 10997610, 2276632, 9482883, 316878, 13820577},
+			FieldElement{-9882808, -4510367, -2115506, 16457136, -11100081, 11674996, 30756178, -7515054, 30696930, -3712849},
+		},
+		{
+			FieldElement{32988917, -9603412, 12499366, 7910787, -10617257, -11931514, -7342816, -9985397, -32349517, 7392473},
+			FieldElement{-8855661, 15927861, 9866406, -3649411, -2396914, -16655781, -30409476, -9134995, 25112947, -2926644},
+			FieldElement{-2504044, -436966, 25621774, -5678772, 15085042, -5479877, -24884878, -13526194, 5537438, -13914319},
+		},
+	},
+	{
+		{
+			FieldElement{-11225584, 2320285, -9584280, 10149187, -33444663, 5808648, -14876251, -1729667, 31234590, 6090599},
+			FieldElement{-9633316, 116426, 26083934, 2897444, -6364437, -2688086, 609721, 15878753, -6970405, -9034768},
+			FieldElement{-27757857, 247744, -15194774, -9002551, 23288161, -10011936, -23869595, 6503646, 20650474, 1804084},
+		},
+		{
+			FieldElement{-27589786, 15456424, 8972517, 8469608, 15640622, 4439847, 3121995, -10329713, 27842616, -202328},
+			FieldElement{-15306973, 2839644, 22530074, 10026331, 4602058, 5048462, 28248656, 5031932, -11375082, 12714369},
+			FieldElement{20807691, -7270825, 29286141, 11421711, -27876523, -13868230, -21227475, 1035546, -19733229, 12796920},
+		},
+		{
+			FieldElement{12076899, -14301286, -8785001, -11848922, -25012791, 16400684, -17591495, -12899438, 3480665, -15182815},
+			FieldElement{-32361549, 5457597, 28548107, 7833186, 7303070, -11953545, -24363064, -15921875, -33374054, 2771025},
+			FieldElement{-21389266, 421932, 26597266, 6860826, 22486084, -6737172, -17137485, -4210226, -24552282, 15673397},
+		},
+		{
+			FieldElement{-20184622, 2338216, 19788685, -9620956, -4001265, -8740893, -20271184, 4733254, 3727144, -12934448},
+			FieldElement{6120119, 814863, -11794402, -622716, 6812205, -15747771, 2019594, 7975683, 31123697, -10958981},
+			FieldElement{30069250, -11435332, 30434654, 2958439, 18399564, -976289, 12296869, 9204260, -16432438, 9648165},
+		},
+		{
+			FieldElement{32705432, -1550977, 30705658, 7451065, -11805606, 9631813, 3305266, 5248604, -26008332, -11377501},
+			FieldElement{17219865, 2375039, -31570947, -5575615, -19459679, 9219903, 294711, 15298639, 2662509, -16297073},
+			FieldElement{-1172927, -7558695, -4366770, -4287744, -21346413, -8434326, 32087529, -1222777, 32247248, -14389861},
+		},
+		{
+			FieldElement{14312628, 1221556, 17395390, -8700143, -4945741, -8684635, -28197744, -9637817, -16027623, -13378845},
+			FieldElement{-1428825, -9678990, -9235681, 6549687, -7383069, -468664, 23046502, 9803137, 17597934, 2346211},
+			FieldElement{18510800, 15337574, 26171504, 981392, -22241552, 7827556, -23491134, -11323352, 3059833, -11782870},
+		},
+		{
+			FieldElement{10141598, 6082907, 17829293, -1947643, 9830092, 13613136, -25556636, -5544586, -33502212, 3592096},
+			FieldElement{33114168, -15889352, -26525686, -13343397, 33076705, 8716171, 1151462, 1521897, -982665, -6837803},
+			FieldElement{-32939165, -4255815, 23947181, -324178, -33072974, -12305637, -16637686, 3891704, 26353178, 693168},
+		},
+		{
+			FieldElement{30374239, 1595580, -16884039, 13186931, 4600344, 406904, 9585294, -400668, 31375464, 14369965},
+			FieldElement{-14370654, -7772529, 1510301, 6434173, -18784789, -6262728, 32732230, -13108839, 17901441, 16011505},
+			FieldElement{18171223, -11934626, -12500402, 15197122, -11038147, -15230035, -19172240, -16046376, 8764035, 12309598},
+		},
+	},
+	{
+		{
+			FieldElement{5975908, -5243188, -19459362, -9681747, -11541277, 14015782, -23665757, 1228319, 17544096, -10593782},
+			FieldElement{5811932, -1715293, 3442887, -2269310, -18367348, -8359541, -18044043, -15410127, -5565381, 12348900},
+			FieldElement{-31399660, 11407555, 25755363, 6891399, -3256938, 14872274, -24849353, 8141295, -10632534, -585479},
+		},
+		{
+			FieldElement{-12675304, 694026, -5076145, 13300344, 14015258, -14451394, -9698672, -11329050, 30944593, 1130208},
+			FieldElement{8247766, -6710942, -26562381, -7709309, -14401939, -14648910, 4652152, 2488540, 23550156, -271232},
+			FieldElement{17294316, -3788438, 7026748, 15626851, 22990044, 113481, 2267737, -5908146, -408818, -137719},
+		},
+		{
+			FieldElement{16091085, -16253926, 18599252, 7340678, 2137637, -1221657, -3364161, 14550936, 3260525, -7166271},
+			FieldElement{-4910104, -13332887, 18550887, 10864893, -16459325, -7291596, -23028869, -13204905, -12748722, 2701326},
+			FieldElement{-8574695, 16099415, 4629974, -16340524, -20786213, -6005432, -10018363, 9276971, 11329923, 1862132},
+		},
+		{
+			FieldElement{14763076, -15903608, -30918270, 3689867, 3511892, 10313526, -21951088, 12219231, -9037963, -940300},
+			FieldElement{8894987, -3446094, 6150753, 3013931, 301220, 15693451, -31981216, -2909717, -15438168, 11595570},
+			FieldElement{15214962, 3537601, -26238722, -14058872, 4418657, -15230761, 13947276, 10730794, -13489462, -4363670},
+		},
+		{
+			FieldElement{-2538306, 7682793, 32759013, 263109, -29984731, -7955452, -22332124, -10188635, 977108, 699994},
+			FieldElement{-12466472, 4195084, -9211532, 550904, -15565337, 12917920, 19118110, -439841, -30534533, -14337913},
+			FieldElement{31788461, -14507657, 4799989, 7372237, 8808585, -14747943, 9408237, -10051775, 12493932, -5409317},
+		},
+		{
+			FieldElement{-25680606, 5260744, -19235809, -6284470, -3695942, 16566087, 27218280, 2607121, 29375955, 6024730},
+			FieldElement{842132, -2794693, -4763381, -8722815, 26332018, -12405641, 11831880, 6985184, -9940361, 2854096},
+			FieldElement{-4847262, -7969331, 2516242, -5847713, 9695691, -7221186, 16512645, 960770, 12121869, 16648078},
+		},
+		{
+			FieldElement{-15218652, 14667096, -13336229, 2013717, 30598287, -464137, -31504922, -7882064, 20237806, 2838411},
+			FieldElement{-19288047, 4453152, 15298546, -16178388, 22115043, -15972604, 12544294, -13470457, 1068881, -12499905},
+			FieldElement{-9558883, -16518835, 33238498, 13506958, 30505848, -1114596, -8486907, -2630053, 12521378, 4845654},
+		},
+		{
+			FieldElement{-28198521, 10744108, -2958380, 10199664, 7759311, -13088600, 3409348, -873400, -6482306, -12885870},
+			FieldElement{-23561822, 6230156, -20382013, 10655314, -24040585, -11621172, 10477734, -1240216, -3113227, 13974498},
+			FieldElement{12966261, 15550616, -32038948, -1615346, 21025980, -629444, 5642325, 7188737, 18895762, 12629579},
+		},
+	},
+	{
+		{
+			FieldElement{14741879, -14946887, 22177208, -11721237, 1279741, 8058600, 11758140, 789443, 32195181, 3895677},
+			FieldElement{10758205, 15755439, -4509950, 9243698, -4879422, 6879879, -2204575, -3566119, -8982069, 4429647},
+			FieldElement{-2453894, 15725973, -20436342, -10410672, -5803908, -11040220, -7135870, -11642895, 18047436, -15281743},
+		},
+		{
+			FieldElement{-25173001, -11307165, 29759956, 11776784, -22262383, -15820455, 10993114, -12850837, -17620701, -9408468},
+			FieldElement{21987233, 700364, -24505048, 14972008, -7774265, -5718395, 32155026, 2581431, -29958985, 8773375},
+			FieldElement{-25568350, 454463, -13211935, 16126715, 25240068, 8594567, 20656846, 12017935, -7874389, -13920155},
+		},
+		{
+			FieldElement{6028182, 6263078, -31011806, -11301710, -818919, 2461772, -31841174, -5468042, -1721788, -2776725},
+			FieldElement{-12278994, 16624277, 987579, -5922598, 32908203, 1248608, 7719845, -4166698, 28408820, 6816612},
+			FieldElement{-10358094, -8237829, 19549651, -12169222, 22082623, 16147817, 20613181, 13982702, -10339570, 5067943},
+		},
+		{
+			FieldElement{-30505967, -3821767, 12074681, 13582412, -19877972, 2443951, -19719286, 12746132, 5331210, -10105944},
+			FieldElement{30528811, 3601899, -1957090, 4619785, -27361822, -15436388, 24180793, -12570394, 27679908, -1648928},
+			FieldElement{9402404, -13957065, 32834043, 10838634, -26580150, -13237195, 26653274, -8685565, 22611444, -12715406},
+		},
+		{
+			FieldElement{22190590, 1118029, 22736441, 15130463, -30460692, -5991321, 19189625, -4648942, 4854859, 6622139},
+			FieldElement{-8310738, -2953450, -8262579, -3388049, -10401731, -271929, 13424426, -3567227, 26404409, 13001963},
+			FieldElement{-31241838, -15415700, -2994250, 8939346, 11562230, -12840670, -26064365, -11621720, -15405155, 11020693},
+		},
+		{
+			FieldElement{1866042, -7949489, -7898649, -10301010, 12483315, 13477547, 3175636, -12424163, 28761762, 1406734},
+			FieldElement{-448555, -1777666, 13018551, 3194501, -9580420, -11161737, 24760585, -4347088, 25577411, -13378680},
+			FieldElement{-24290378, 4759345, -690653, -1852816, 2066747, 10693769, -29595790, 9884936, -9368926, 4745410},
+		},
+		{
+			FieldElement{-9141284, 6049714, -19531061, -4341411, -31260798, 9944276, -15462008, -11311852, 10931924, -11931931},
+			FieldElement{-16561513, 14112680, -8012645, 4817318, -8040464, -11414606, -22853429, 10856641, -20470770, 13434654},
+			FieldElement{22759489, -10073434, -16766264, -1871422, 13637442, -10168091, 1765144, -12654326, 28445307, -5364710},
+		},
+		{
+			FieldElement{29875063, 12493613, 2795536, -3786330, 1710620, 15181182, -10195717, -8788675, 9074234, 1167180},
+			FieldElement{-26205683, 11014233, -9842651, -2635485, -26908120, 7532294, -18716888, -9535498, 3843903, 9367684},
+			FieldElement{-10969595, -6403711, 9591134, 9582310, 11349256, 108879, 16235123, 8601684, -139197, 4242895},
+		},
+	},
+	{
+		{
+			FieldElement{22092954, -13191123, -2042793, -11968512, 32186753, -11517388, -6574341, 2470660, -27417366, 16625501},
+			FieldElement{-11057722, 3042016, 13770083, -9257922, 584236, -544855, -7770857, 2602725, -27351616, 14247413},
+			FieldElement{6314175, -10264892, -32772502, 15957557, -10157730, 168750, -8618807, 14290061, 27108877, -1180880},
+		},
+		{
+			FieldElement{-8586597, -7170966, 13241782, 10960156, -32991015, -13794596, 33547976, -11058889, -27148451, 981874},
+			FieldElement{22833440, 9293594, -32649448, -13618667, -9136966, 14756819, -22928859, -13970780, -10479804, -16197962},
+			FieldElement{-7768587, 3326786, -28111797, 10783824, 19178761, 14905060, 22680049, 13906969, -15933690, 3797899},
+		},
+		{
+			FieldElement{21721356, -4212746, -12206123, 9310182, -3882239, -13653110, 23740224, -2709232, 20491983, -8042152},
+			FieldElement{9209270, -15135055, -13256557, -6167798, -731016, 15289673, 25947805, 15286587, 30997318, -6703063},
+			FieldElement{7392032, 16618386, 23946583, -8039892, -13265164, -1533858, -14197445, -2321576, 17649998, -250080},
+		},
+		{
+			FieldElement{-9301088, -14193827, 30609526, -3049543, -25175069, -1283752, -15241566, -9525724, -2233253, 7662146},
+			FieldElement{-17558673, 1763594, -33114336, 15908610, -30040870, -12174295, 7335080, -8472199, -3174674, 3440183},
+			FieldElement{-19889700, -5977008, -24111293, -9688870, 10799743, -16571957, 40450, -4431835, 4862400, 1133},
+		},
+		{
+			FieldElement{-32856209, -7873957, -5422389, 14860950, -16319031, 7956142, 7258061, 311861, -30594991, -7379421},
+			FieldElement{-3773428, -1565936, 28985340, 7499440, 24445838, 9325937, 29727763, 16527196, 18278453, 15405622},
+			FieldElement{-4381906, 8508652, -19898366, -3674424, -5984453, 15149970, -13313598, 843523, -21875062, 13626197},
+		},
+		{
+			FieldElement{2281448, -13487055, -10915418, -2609910, 1879358, 16164207, -10783882, 3953792, 13340839, 15928663},
+			FieldElement{31727126, -7179855, -18437503, -8283652, 2875793, -16390330, -25269894, -7014826, -23452306, 5964753},
+			FieldElement{4100420, -5959452, -17179337, 6017714, -18705837, 12227141, -26684835, 11344144, 2538215, -7570755},
+		},
+		{
+			FieldElement{-9433605, 6123113, 11159803, -2156608, 30016280, 14966241, -20474983, 1485421, -629256, -15958862},
+			FieldElement{-26804558, 4260919, 11851389, 9658551, -32017107, 16367492, -20205425, -13191288, 11659922, -11115118},
+			FieldElement{26180396, 10015009, -30844224, -8581293, 5418197, 9480663, 2231568, -10170080, 33100372, -1306171},
+		},
+		{
+			FieldElement{15121113, -5201871, -10389905, 15427821, -27509937, -15992507, 21670947, 4486675, -5931810, -14466380},
+			FieldElement{16166486, -9483733, -11104130, 6023908, -31926798, -1364923, 2340060, -16254968, -10735770, -10039824},
+			FieldElement{28042865, -3557089, -12126526, 12259706, -3717498, -6945899, 6766453, -8689599, 18036436, 5803270},
+		},
+	},
+	{
+		{
+			FieldElement{-817581, 6763912, 11803561, 1585585, 10958447, -2671165, 23855391, 4598332, -6159431, -14117438},
+			FieldElement{-31031306, -14256194, 17332029, -2383520, 31312682, -5967183, 696309, 50292, -20095739, 11763584},
+			FieldElement{-594563, -2514283, -32234153, 12643980, 12650761, 14811489, 665117, -12613632, -19773211, -10713562},
+		},
+		{
+			FieldElement{30464590, -11262872, -4127476, -12734478, 19835327, -7105613, -24396175, 2075773, -17020157, 992471},
+			FieldElement{18357185, -6994433, 7766382, 16342475, -29324918, 411174, 14578841, 8080033, -11574335, -10601610},
+			FieldElement{19598397, 10334610, 12555054, 2555664, 18821899, -10339780, 21873263, 16014234, 26224780, 16452269},
+		},
+		{
+			FieldElement{-30223925, 5145196, 5944548, 16385966, 3976735, 2009897, -11377804, -7618186, -20533829, 3698650},
+			FieldElement{14187449, 3448569, -10636236, -10810935, -22663880, -3433596, 7268410, -10890444, 27394301, 12015369},
+			FieldElement{19695761, 16087646, 28032085, 12999827, 6817792, 11427614, 20244189, -1312777, -13259127, -3402461},
+		},
+		{
+			FieldElement{30860103, 12735208, -1888245, -4699734, -16974906, 2256940, -8166013, 12298312, -8550524, -10393462},
+			FieldElement{-5719826, -11245325, -1910649, 15569035, 26642876, -7587760, -5789354, -15118654, -4976164, 12651793},
+			FieldElement{-2848395, 9953421, 11531313, -5282879, 26895123, -12697089, -13118820, -16517902, 9768698, -2533218},
+		},
+		{
+			FieldElement{-24719459, 1894651, -287698, -4704085, 15348719, -8156530, 32767513, 12765450, 4940095, 10678226},
+			FieldElement{18860224, 15980149, -18987240, -1562570, -26233012, -11071856, -7843882, 13944024, -24372348, 16582019},
+			FieldElement{-15504260, 4970268, -29893044, 4175593, -20993212, -2199756, -11704054, 15444560, -11003761, 7989037},
+		},
+		{
+			FieldElement{31490452, 5568061, -2412803, 2182383, -32336847, 4531686, -32078269, 6200206, -19686113, -14800171},
+			FieldElement{-17308668, -15879940, -31522777, -2831, -32887382, 16375549, 8680158, -16371713, 28550068, -6857132},
+			FieldElement{-28126887, -5688091, 16837845, -1820458, -6850681, 12700016, -30039981, 4364038, 1155602, 5988841},
+		},
+		{
+			FieldElement{21890435, -13272907, -12624011, 12154349, -7831873, 15300496, 23148983, -4470481, 24618407, 8283181},
+			FieldElement{-33136107, -10512751, 9975416, 6841041, -31559793, 16356536, 3070187, -7025928, 1466169, 10740210},
+			FieldElement{-1509399, -15488185, -13503385, -10655916, 32799044, 909394, -13938903, -5779719, -32164649, -15327040},
+		},
+		{
+			FieldElement{3960823, -14267803, -28026090, -15918051, -19404858, 13146868, 15567327, 951507, -3260321, -573935},
+			FieldElement{24740841, 5052253, -30094131, 8961361, 25877428, 6165135, -24368180, 14397372, -7380369, -6144105},
+			FieldElement{-28888365, 3510803, -28103278, -1158478, -11238128, -10631454, -15441463, -14453128, -1625486, -6494814},
+		},
+	},
+	{
+		{
+			FieldElement{793299, -9230478, 8836302, -6235707, -27360908, -2369593, 33152843, -4885251, -9906200, -621852},
+			FieldElement{5666233, 525582, 20782575, -8038419, -24538499, 14657740, 16099374, 1468826, -6171428, -15186581},
+			FieldElement{-4859255, -3779343, -2917758, -6748019, 7778750, 11688288, -30404353, -9871238, -1558923, -9863646},
+		},
+		{
+			FieldElement{10896332, -7719704, 824275, 472601, -19460308, 3009587, 25248958, 14783338, -30581476, -15757844},
+			FieldElement{10566929, 12612572, -31944212, 11118703, -12633376, 12362879, 21752402, 8822496, 24003793, 14264025},
+			FieldElement{27713862, -7355973, -11008240, 9227530, 27050101, 2504721, 23886875, -13117525, 13958495, -5732453},
+		},
+		{
+			FieldElement{-23481610, 4867226, -27247128, 3900521, 29838369, -8212291, -31889399, -10041781, 7340521, -15410068},
+			FieldElement{4646514, -8011124, -22766023, -11532654, 23184553, 8566613, 31366726, -1381061, -15066784, -10375192},
+			FieldElement{-17270517, 12723032, -16993061, 14878794, 21619651, -6197576, 27584817, 3093888, -8843694, 3849921},
+		},
+		{
+			FieldElement{-9064912, 2103172, 25561640, -15125738, -5239824, 9582958, 32477045, -9017955, 5002294, -15550259},
+			FieldElement{-12057553, -11177906, 21115585, -13365155, 8808712, -12030708, 16489530, 13378448, -25845716, 12741426},
+			FieldElement{-5946367, 10645103, -30911586, 15390284, -3286982, -7118677, 24306472, 15852464, 28834118, -7646072},
+		},
+		{
+			FieldElement{-17335748, -9107057, -24531279, 9434953, -8472084, -583362, -13090771, 455841, 20461858, 5491305},
+			FieldElement{13669248, -16095482, -12481974, -10203039, -14569770, -11893198, -24995986, 11293807, -28588204, -9421832},
+			FieldElement{28497928, 6272777, -33022994, 14470570, 8906179, -1225630, 18504674, -14165166, 29867745, -8795943},
+		},
+		{
+			FieldElement{-16207023, 13517196, -27799630, -13697798, 24009064, -6373891, -6367600, -13175392, 22853429, -4012011},
+			FieldElement{24191378, 16712145, -13931797, 15217831, 14542237, 1646131, 18603514, -11037887, 12876623, -2112447},
+			FieldElement{17902668, 4518229, -411702, -2829247, 26878217, 5258055, -12860753, 608397, 16031844, 3723494},
+		},
+		{
+			FieldElement{-28632773, 12763728, -20446446, 7577504, 33001348, -13017745, 17558842, -7872890, 23896954, -4314245},
+			FieldElement{-20005381, -12011952, 31520464, 605201, 2543521, 5991821, -2945064, 7229064, -9919646, -8826859},
+			FieldElement{28816045, 298879, -28165016, -15920938, 19000928, -1665890, -12680833, -2949325, -18051778, -2082915},
+		},
+		{
+			FieldElement{16000882, -344896, 3493092, -11447198, -29504595, -13159789, 12577740, 16041268, -19715240, 7847707},
+			FieldElement{10151868, 10572098, 27312476, 7922682, 14825339, 4723128, -32855931, -6519018, -10020567, 3852848},
+			FieldElement{-11430470, 15697596, -21121557, -4420647, 5386314, 15063598, 16514493, -15932110, 29330899, -15076224},
+		},
+	},
+	{
+		{
+			FieldElement{-25499735, -4378794, -15222908, -6901211, 16615731, 2051784, 3303702, 15490, -27548796, 12314391},
+			FieldElement{15683520, -6003043, 18109120, -9980648, 15337968, -5997823, -16717435, 15921866, 16103996, -3731215},
+			FieldElement{-23169824, -10781249, 13588192, -1628807, -3798557, -1074929, -19273607, 5402699, -29815713, -9841101},
+		},
+		{
+			FieldElement{23190676, 2384583, -32714340, 3462154, -29903655, -1529132, -11266856, 8911517, -25205859, 2739713},
+			FieldElement{21374101, -3554250, -33524649, 9874411, 15377179, 11831242, -33529904, 6134907, 4931255, 11987849},
+			FieldElement{-7732, -2978858, -16223486, 7277597, 105524, -322051, -31480539, 13861388, -30076310, 10117930},
+		},
+		{
+			FieldElement{-29501170, -10744872, -26163768, 13051539, -25625564, 5089643, -6325503, 6704079, 12890019, 15728940},
+			FieldElement{-21972360, -11771379, -951059, -4418840, 14704840, 2695116, 903376, -10428139, 12885167, 8311031},
+			FieldElement{-17516482, 5352194, 10384213, -13811658, 7506451, 13453191, 26423267, 4384730, 1888765, -5435404},
+		},
+		{
+			FieldElement{-25817338, -3107312, -13494599, -3182506, 30896459, -13921729, -32251644, -12707869, -19464434, -3340243},
+			FieldElement{-23607977, -2665774, -526091, 4651136, 5765089, 4618330, 6092245, 14845197, 17151279, -9854116},
+			FieldElement{-24830458, -12733720, -15165978, 10367250, -29530908, -265356, 22825805, -7087279, -16866484, 16176525},
+		},
+		{
+			FieldElement{-23583256, 6564961, 20063689, 3798228, -4740178, 7359225, 2006182, -10363426, -28746253, -10197509},
+			FieldElement{-10626600, -4486402, -13320562, -5125317, 3432136, -6393229, 23632037, -1940610, 32808310, 1099883},
+			FieldElement{15030977, 5768825, -27451236, -2887299, -6427378, -15361371, -15277896, -6809350, 2051441, -15225865},
+		},
+		{
+			FieldElement{-3362323, -7239372, 7517890, 9824992, 23555850, 295369, 5148398, -14154188, -22686354, 16633660},
+			FieldElement{4577086, -16752288, 13249841, -15304328, 19958763, -14537274, 18559670, -10759549, 8402478, -9864273},
+			FieldElement{-28406330, -1051581, -26790155, -907698, -17212414, -11030789, 9453451, -14980072, 17983010, 9967138},
+		},
+		{
+			FieldElement{-25762494, 6524722, 26585488, 9969270, 24709298, 1220360, -1677990, 7806337, 17507396, 3651560},
+			FieldElement{-10420457, -4118111, 14584639, 15971087, -15768321, 8861010, 26556809, -5574557, -18553322, -11357135},
+			FieldElement{2839101, 14284142, 4029895, 3472686, 14402957, 12689363, -26642121, 8459447, -5605463, -7621941},
+		},
+		{
+			FieldElement{-4839289, -3535444, 9744961, 2871048, 25113978, 3187018, -25110813, -849066, 17258084, -7977739},
+			FieldElement{18164541, -10595176, -17154882, -1542417, 19237078, -9745295, 23357533, -15217008, 26908270, 12150756},
+			FieldElement{-30264870, -7647865, 5112249, -7036672, -1499807, -6974257, 43168, -5537701, -32302074, 16215819},
+		},
+	},
+	{
+		{
+			FieldElement{-6898905, 9824394, -12304779, -4401089, -31397141, -6276835, 32574489, 12532905, -7503072, -8675347},
+			FieldElement{-27343522, -16515468, -27151524, -10722951, 946346, 16291093, 254968, 7168080, 21676107, -1943028},
+			FieldElement{21260961, -8424752, -16831886, -11920822, -23677961, 3968121, -3651949, -6215466, -3556191, -7913075},
+		},
+		{
+			FieldElement{16544754, 13250366, -16804428, 15546242, -4583003, 12757258, -2462308, -8680336, -18907032, -9662799},
+			FieldElement{-2415239, -15577728, 18312303, 4964443, -15272530, -12653564, 26820651, 16690659, 25459437, -4564609},
+			FieldElement{-25144690, 11425020, 28423002, -11020557, -6144921, -15826224, 9142795, -2391602, -6432418, -1644817},
+		},
+		{
+			FieldElement{-23104652, 6253476, 16964147, -3768872, -25113972, -12296437, -27457225, -16344658, 6335692, 7249989},
+			FieldElement{-30333227, 13979675, 7503222, -12368314, -11956721, -4621693, -30272269, 2682242, 25993170, -12478523},
+			FieldElement{4364628, 5930691, 32304656, -10044554, -8054781, 15091131, 22857016, -10598955, 31820368, 15075278},
+		},
+		{
+			FieldElement{31879134, -8918693, 17258761, 90626, -8041836, -4917709, 24162788, -9650886, -17970238, 12833045},
+			FieldElement{19073683, 14851414, -24403169, -11860168, 7625278, 11091125, -19619190, 2074449, -9413939, 14905377},
+			FieldElement{24483667, -11935567, -2518866, -11547418, -1553130, 15355506, -25282080, 9253129, 27628530, -7555480},
+		},
+		{
+			FieldElement{17597607, 8340603, 19355617, 552187, 26198470, -3176583, 4593324, -9157582, -14110875, 15297016},
+			FieldElement{510886, 14337390, -31785257, 16638632, 6328095, 2713355, -20217417, -11864220, 8683221, 2921426},
+			FieldElement{18606791, 11874196, 27155355, -5281482, -24031742, 6265446, -25178240, -1278924, 4674690, 13890525},
+		},
+		{
+			FieldElement{13609624, 13069022, -27372361, -13055908, 24360586, 9592974, 14977157, 9835105, 4389687, 288396},
+			FieldElement{9922506, -519394, 13613107, 5883594, -18758345, -434263, -12304062, 8317628, 23388070, 16052080},
+			FieldElement{12720016, 11937594, -31970060, -5028689, 26900120, 8561328, -20155687, -11632979, -14754271, -10812892},
+		},
+		{
+			FieldElement{15961858, 14150409, 26716931, -665832, -22794328, 13603569, 11829573, 7467844, -28822128, 929275},
+			FieldElement{11038231, -11582396, -27310482, -7316562, -10498527, -16307831, -23479533, -9371869, -21393143, 2465074},
+			FieldElement{20017163, -4323226, 27915242, 1529148, 12396362, 15675764, 13817261, -9658066, 2463391, -4622140},
+		},
+		{
+			FieldElement{-16358878, -12663911, -12065183, 4996454, -1256422, 1073572, 9583558, 12851107, 4003896, 12673717},
+			FieldElement{-1731589, -15155870, -3262930, 16143082, 19294135, 13385325, 14741514, -9103726, 7903886, 2348101},
+			FieldElement{24536016, -16515207, 12715592, -3862155, 1511293, 10047386, -3842346, -7129159, -28377538, 10048127},
+		},
+	},
+	{
+		{
+			FieldElement{-12622226, -6204820, 30718825, 2591312, -10617028, 12192840, 18873298, -7297090, -32297756, 15221632},
+			FieldElement{-26478122, -11103864, 11546244, -1852483, 9180880, 7656409, -21343950, 2095755, 29769758, 6593415},
+			FieldElement{-31994208, -2907461, 4176912, 3264766, 12538965, -868111, 26312345, -6118678, 30958054, 8292160},
+		},
+		{
+			FieldElement{31429822, -13959116, 29173532, 15632448, 12174511, -2760094, 32808831, 3977186, 26143136, -3148876},
+			FieldElement{22648901, 1402143, -22799984, 13746059, 7936347, 365344, -8668633, -1674433, -3758243, -2304625},
+			FieldElement{-15491917, 8012313, -2514730, -12702462, -23965846, -10254029, -1612713, -1535569, -16664475, 8194478},
+		},
+		{
+			FieldElement{27338066, -7507420, -7414224, 10140405, -19026427, -6589889, 27277191, 8855376, 28572286, 3005164},
+			FieldElement{26287124, 4821776, 25476601, -4145903, -3764513, -15788984, -18008582, 1182479, -26094821, -13079595},
+			FieldElement{-7171154, 3178080, 23970071, 6201893, -17195577, -4489192, -21876275, -13982627, 32208683, -1198248},
+		},
+		{
+			FieldElement{-16657702, 2817643, -10286362, 14811298, 6024667, 13349505, -27315504, -10497842, -27672585, -11539858},
+			FieldElement{15941029, -9405932, -21367050, 8062055, 31876073, -238629, -15278393, -1444429, 15397331, -4130193},
+			FieldElement{8934485, -13485467, -23286397, -13423241, -32446090, 14047986, 31170398, -1441021, -27505566, 15087184},
+		},
+		{
+			FieldElement{-18357243, -2156491, 24524913, -16677868, 15520427, -6360776, -15502406, 11461896, 16788528, -5868942},
+			FieldElement{-1947386, 16013773, 21750665, 3714552, -17401782, -16055433, -3770287, -10323320, 31322514, -11615635},
+			FieldElement{21426655, -5650218, -13648287, -5347537, -28812189, -4920970, -18275391, -14621414, 13040862, -12112948},
+		},
+		{
+			FieldElement{11293895, 12478086, -27136401, 15083750, -29307421, 14748872, 14555558, -13417103, 1613711, 4896935},
+			FieldElement{-25894883, 15323294, -8489791, -8057900, 25967126, -13425460, 2825960, -4897045, -23971776, -11267415},
+			FieldElement{-15924766, -5229880, -17443532, 6410664, 3622847, 10243618, 20615400, 12405433, -23753030, -8436416},
+		},
+		{
+			FieldElement{-7091295, 12556208, -20191352, 9025187, -17072479, 4333801, 4378436, 2432030, 23097949, -566018},
+			FieldElement{4565804, -16025654, 20084412, -7842817, 1724999, 189254, 24767264, 10103221, -18512313, 2424778},
+			FieldElement{366633, -11976806, 8173090, -6890119, 30788634, 5745705, -7168678, 1344109, -3642553, 12412659},
+		},
+		{
+			FieldElement{-24001791, 7690286, 14929416, -168257, -32210835, -13412986, 24162697, -15326504, -3141501, 11179385},
+			FieldElement{18289522, -14724954, 8056945, 16430056, -21729724, 7842514, -6001441, -1486897, -18684645, -11443503},
+			FieldElement{476239, 6601091, -6152790, -9723375, 17503545, -4863900, 27672959, 13403813, 11052904, 5219329},
+		},
+	},
+	{
+		{
+			FieldElement{20678546, -8375738, -32671898, 8849123, -5009758, 14574752, 31186971, -3973730, 9014762, -8579056},
+			FieldElement{-13644050, -10350239, -15962508, 5075808, -1514661, -11534600, -33102500, 9160280, 8473550, -3256838},
+			FieldElement{24900749, 14435722, 17209120, -15292541, -22592275, 9878983, -7689309, -16335821, -24568481, 11788948},
+		},
+		{
+			FieldElement{-3118155, -11395194, -13802089, 14797441, 9652448, -6845904, -20037437, 10410733, -24568470, -1458691},
+			FieldElement{-15659161, 16736706, -22467150, 10215878, -9097177, 7563911, 11871841, -12505194, -18513325, 8464118},
+			FieldElement{-23400612, 8348507, -14585951, -861714, -3950205, -6373419, 14325289, 8628612, 33313881, -8370517},
+		},
+		{
+			FieldElement{-20186973, -4967935, 22367356, 5271547, -1097117, -4788838, -24805667, -10236854, -8940735, -5818269},
+			FieldElement{-6948785, -1795212, -32625683, -16021179, 32635414, -7374245, 15989197, -12838188, 28358192, -4253904},
+			FieldElement{-23561781, -2799059, -32351682, -1661963, -9147719, 10429267, -16637684, 4072016, -5351664, 5596589},
+		},
+		{
+			FieldElement{-28236598, -3390048, 12312896, 6213178, 3117142, 16078565, 29266239, 2557221, 1768301, 15373193},
+			FieldElement{-7243358, -3246960, -4593467, -7553353, -127927, -912245, -1090902, -4504991, -24660491, 3442910},
+			FieldElement{-30210571, 5124043, 14181784, 8197961, 18964734, -11939093, 22597931, 7176455, -18585478, 13365930},
+		},
+		{
+			FieldElement{-7877390, -1499958, 8324673, 4690079, 6261860, 890446, 24538107, -8570186, -9689599, -3031667},
+			FieldElement{25008904, -10771599, -4305031, -9638010, 16265036, 15721635, 683793, -11823784, 15723479, -15163481},
+			FieldElement{-9660625, 12374379, -27006999, -7026148, -7724114, -12314514, 11879682, 5400171, 519526, -1235876},
+		},
+		{
+			FieldElement{22258397, -16332233, -7869817, 14613016, -22520255, -2950923, -20353881, 7315967, 16648397, 7605640},
+			FieldElement{-8081308, -8464597, -8223311, 9719710, 19259459, -15348212, 23994942, -5281555, -9468848, 4763278},
+			FieldElement{-21699244, 9220969, -15730624, 1084137, -25476107, -2852390, 31088447, -7764523, -11356529, 728112},
+		},
+		{
+			FieldElement{26047220, -11751471, -6900323, -16521798, 24092068, 9158119, -4273545, -12555558, -29365436, -5498272},
+			FieldElement{17510331, -322857, 5854289, 8403524, 17133918, -3112612, -28111007, 12327945, 10750447, 10014012},
+			FieldElement{-10312768, 3936952, 9156313, -8897683, 16498692, -994647, -27481051, -666732, 3424691, 7540221},
+		},
+		{
+			FieldElement{30322361, -6964110, 11361005, -4143317, 7433304, 4989748, -7071422, -16317219, -9244265, 15258046},
+			FieldElement{13054562, -2779497, 19155474, 469045, -12482797, 4566042, 5631406, 2711395, 1062915, -5136345},
+			FieldElement{-19240248, -11254599, -29509029, -7499965, -5835763, 13005411, -6066489, 12194497, 32960380, 1459310},
+		},
+	},
+	{
+		{
+			FieldElement{19852034, 7027924, 23669353, 10020366, 8586503, -6657907, 394197, -6101885, 18638003, -11174937},
+			FieldElement{31395534, 15098109, 26581030, 8030562, -16527914, -5007134, 9012486, -7584354, -6643087, -5442636},
+			FieldElement{-9192165, -2347377, -1997099, 4529534, 25766844, 607986, -13222, 9677543, -32294889, -6456008},
+		},
+		{
+			FieldElement{-2444496, -149937, 29348902, 8186665, 1873760, 12489863, -30934579, -7839692, -7852844, -8138429},
+			FieldElement{-15236356, -15433509, 7766470, 746860, 26346930, -10221762, -27333451, 10754588, -9431476, 5203576},
+			FieldElement{31834314, 14135496, -770007, 5159118, 20917671, -16768096, -7467973, -7337524, 31809243, 7347066},
+		},
+		{
+			FieldElement{-9606723, -11874240, 20414459, 13033986, 13716524, -11691881, 19797970, -12211255, 15192876, -2087490},
+			FieldElement{-12663563, -2181719, 1168162, -3804809, 26747877, -14138091, 10609330, 12694420, 33473243, -13382104},
+			FieldElement{33184999, 11180355, 15832085, -11385430, -1633671, 225884, 15089336, -11023903, -6135662, 14480053},
+		},
+		{
+			FieldElement{31308717, -5619998, 31030840, -1897099, 15674547, -6582883, 5496208, 13685227, 27595050, 8737275},
+			FieldElement{-20318852, -15150239, 10933843, -16178022, 8335352, -7546022, -31008351, -12610604, 26498114, 66511},
+			FieldElement{22644454, -8761729, -16671776, 4884562, -3105614, -13559366, 30540766, -4286747, -13327787, -7515095},
+		},
+		{
+			FieldElement{-28017847, 9834845, 18617207, -2681312, -3401956, -13307506, 8205540, 13585437, -17127465, 15115439},
+			FieldElement{23711543, -672915, 31206561, -8362711, 6164647, -9709987, -33535882, -1426096, 8236921, 16492939},
+			FieldElement{-23910559, -13515526, -26299483, -4503841, 25005590, -7687270, 19574902, 10071562, 6708380, -6222424},
+		},
+		{
+			FieldElement{2101391, -4930054, 19702731, 2367575, -15427167, 1047675, 5301017, 9328700, 29955601, -11678310},
+			FieldElement{3096359, 9271816, -21620864, -15521844, -14847996, -7592937, -25892142, -12635595, -9917575, 6216608},
+			FieldElement{-32615849, 338663, -25195611, 2510422, -29213566, -13820213, 24822830, -6146567, -26767480, 7525079},
+		},
+		{
+			FieldElement{-23066649, -13985623, 16133487, -7896178, -3389565, 778788, -910336, -2782495, -19386633, 11994101},
+			FieldElement{21691500, -13624626, -641331, -14367021, 3285881, -3483596, -25064666, 9718258, -7477437, 13381418},
+			FieldElement{18445390, -4202236, 14979846, 11622458, -1727110, -3582980, 23111648, -6375247, 28535282, 15779576},
+		},
+		{
+			FieldElement{30098053, 3089662, -9234387, 16662135, -21306940, 11308411, -14068454, 12021730, 9955285, -16303356},
+			FieldElement{9734894, -14576830, -7473633, -9138735, 2060392, 11313496, -18426029, 9924399, 20194861, 13380996},
+			FieldElement{-26378102, -7965207, -22167821, 15789297, -18055342, -6168792, -1984914, 15707771, 26342023, 10146099},
+		},
+	},
+	{
+		{
+			FieldElement{-26016874, -219943, 21339191, -41388, 19745256, -2878700, -29637280, 2227040, 21612326, -545728},
+			FieldElement{-13077387, 1184228, 23562814, -5970442, -20351244, -6348714, 25764461, 12243797, -20856566, 11649658},
+			FieldElement{-10031494, 11262626, 27384172, 2271902, 26947504, -15997771, 39944, 6114064, 33514190, 2333242},
+		},
+		{
+			FieldElement{-21433588, -12421821, 8119782, 7219913, -21830522, -9016134, -6679750, -12670638, 24350578, -13450001},
+			FieldElement{-4116307, -11271533, -23886186, 4843615, -30088339, 690623, -31536088, -10406836, 8317860, 12352766},
+			FieldElement{18200138, -14475911, -33087759, -2696619, -23702521, -9102511, -23552096, -2287550, 20712163, 6719373},
+		},
+		{
+			FieldElement{26656208, 6075253, -7858556, 1886072, -28344043, 4262326, 11117530, -3763210, 26224235, -3297458},
+			FieldElement{-17168938, -14854097, -3395676, -16369877, -19954045, 14050420, 21728352, 9493610, 18620611, -16428628},
+			FieldElement{-13323321, 13325349, 11432106, 5964811, 18609221, 6062965, -5269471, -9725556, -30701573, -16479657},
+		},
+		{
+			FieldElement{-23860538, -11233159, 26961357, 1640861, -32413112, -16737940, 12248509, -5240639, 13735342, 1934062},
+			FieldElement{25089769, 6742589, 17081145, -13406266, 21909293, -16067981, -15136294, -3765346, -21277997, 5473616},
+			FieldElement{31883677, -7961101, 1083432, -11572403, 22828471, 13290673, -7125085, 12469656, 29111212, -5451014},
+		},
+		{
+			FieldElement{24244947, -15050407, -26262976, 2791540, -14997599, 16666678, 24367466, 6388839, -10295587, 452383},
+			FieldElement{-25640782, -3417841, 5217916, 16224624, 19987036, -4082269, -24236251, -5915248, 15766062, 8407814},
+			FieldElement{-20406999, 13990231, 15495425, 16395525, 5377168, 15166495, -8917023, -4388953, -8067909, 2276718},
+		},
+		{
+			FieldElement{30157918, 12924066, -17712050, 9245753, 19895028, 3368142, -23827587, 5096219, 22740376, -7303417},
+			FieldElement{2041139, -14256350, 7783687, 13876377, -25946985, -13352459, 24051124, 13742383, -15637599, 13295222},
+			FieldElement{33338237, -8505733, 12532113, 7977527, 9106186, -1715251, -17720195, -4612972, -4451357, -14669444},
+		},
+		{
+			FieldElement{-20045281, 5454097, -14346548, 6447146, 28862071, 1883651, -2469266, -4141880, 7770569, 9620597},
+			FieldElement{23208068, 7979712, 33071466, 8149229, 1758231, -10834995, 30945528, -1694323, -33502340, -14767970},
+			FieldElement{1439958, -16270480, -1079989, -793782, 4625402, 10647766, -5043801, 1220118, 30494170, -11440799},
+		},
+		{
+			FieldElement{-5037580, -13028295, -2970559, -3061767, 15640974, -6701666, -26739026, 926050, -1684339, -13333647},
+			FieldElement{13908495, -3549272, 30919928, -6273825, -21521863, 7989039, 9021034, 9078865, 3353509, 4033511},
+			FieldElement{-29663431, -15113610, 32259991, -344482, 24295849, -12912123, 23161163, 8839127, 27485041, 7356032},
+		},
+	},
+	{
+		{
+			FieldElement{9661027, 705443, 11980065, -5370154, -1628543, 14661173, -6346142, 2625015, 28431036, -16771834},
+			FieldElement{-23839233, -8311415, -25945511, 7480958, -17681669, -8354183, -22545972, 14150565, 15970762, 4099461},
+			FieldElement{29262576, 16756590, 26350592, -8793563, 8529671, -11208050, 13617293, -9937143, 11465739, 8317062},
+		},
+		{
+			FieldElement{-25493081, -6962928, 32500200, -9419051, -23038724, -2302222, 14898637, 3848455, 20969334, -5157516},
+			FieldElement{-20384450, -14347713, -18336405, 13884722, -33039454, 2842114, -21610826, -3649888, 11177095, 14989547},
+			FieldElement{-24496721, -11716016, 16959896, 2278463, 12066309, 10137771, 13515641, 2581286, -28487508, 9930240},
+		},
+		{
+			FieldElement{-17751622, -2097826, 16544300, -13009300, -15914807, -14949081, 18345767, -13403753, 16291481, -5314038},
+			FieldElement{-33229194, 2553288, 32678213, 9875984, 8534129, 6889387, -9676774, 6957617, 4368891, 9788741},
+			FieldElement{16660756, 7281060, -10830758, 12911820, 20108584, -8101676, -21722536, -8613148, 16250552, -11111103},
+		},
+		{
+			FieldElement{-19765507, 2390526, -16551031, 14161980, 1905286, 6414907, 4689584, 10604807, -30190403, 4782747},
+			FieldElement{-1354539, 14736941, -7367442, -13292886, 7710542, -14155590, -9981571, 4383045, 22546403, 437323},
+			FieldElement{31665577, -12180464, -16186830, 1491339, -18368625, 3294682, 27343084, 2786261, -30633590, -14097016},
+		},
+		{
+			FieldElement{-14467279, -683715, -33374107, 7448552, 19294360, 14334329, -19690631, 2355319, -19284671, -6114373},
+			FieldElement{15121312, -15796162, 6377020, -6031361, -10798111, -12957845, 18952177, 15496498, -29380133, 11754228},
+			FieldElement{-2637277, -13483075, 8488727, -14303896, 12728761, -1622493, 7141596, 11724556, 22761615, -10134141},
+		},
+		{
+			FieldElement{16918416, 11729663, -18083579, 3022987, -31015732, -13339659, -28741185, -12227393, 32851222, 11717399},
+			FieldElement{11166634, 7338049, -6722523, 4531520, -29468672, -7302055, 31474879, 3483633, -1193175, -4030831},
+			FieldElement{-185635, 9921305, 31456609, -13536438, -12013818, 13348923, 33142652, 6546660, -19985279, -3948376},
+		},
+		{
+			FieldElement{-32460596, 11266712, -11197107, -7899103, 31703694, 3855903, -8537131, -12833048, -30772034, -15486313},
+			FieldElement{-18006477, 12709068, 3991746, -6479188, -21491523, -10550425, -31135347, -16049879, 10928917, 3011958},
+			FieldElement{-6957757, -15594337, 31696059, 334240, 29576716, 14796075, -30831056, -12805180, 18008031, 10258577},
+		},
+		{
+			FieldElement{-22448644, 15655569, 7018479, -4410003, -30314266, -1201591, -1853465, 1367120, 25127874, 6671743},
+			FieldElement{29701166, -14373934, -10878120, 9279288, -17568, 13127210, 21382910, 11042292, 25838796, 4642684},
+			FieldElement{-20430234, 14955537, -24126347, 8124619, -5369288, -5990470, 30468147, -13900640, 18423289, 4177476},
+		},
+	},
+}
diff --git a/vendor/golang.org/x/crypto/ed25519/internal/edwards25519/edwards25519.go b/vendor/golang.org/x/crypto/ed25519/internal/edwards25519/edwards25519.go
new file mode 100644
index 000000000..fd03c252a
--- /dev/null
+++ b/vendor/golang.org/x/crypto/ed25519/internal/edwards25519/edwards25519.go
@@ -0,0 +1,1793 @@
+// Copyright 2016 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package edwards25519
+
+import "encoding/binary"
+
+// This code is a port of the public domain, “ref10� implementation of ed25519
+// from SUPERCOP.
+
+// FieldElement represents an element of the field GF(2^255 - 19).  An element
+// t, entries t[0]...t[9], represents the integer t[0]+2^26 t[1]+2^51 t[2]+2^77
+// t[3]+2^102 t[4]+...+2^230 t[9].  Bounds on each t[i] vary depending on
+// context.
+type FieldElement [10]int32
+
+var zero FieldElement
+
+func FeZero(fe *FieldElement) {
+	copy(fe[:], zero[:])
+}
+
+func FeOne(fe *FieldElement) {
+	FeZero(fe)
+	fe[0] = 1
+}
+
+func FeAdd(dst, a, b *FieldElement) {
+	dst[0] = a[0] + b[0]
+	dst[1] = a[1] + b[1]
+	dst[2] = a[2] + b[2]
+	dst[3] = a[3] + b[3]
+	dst[4] = a[4] + b[4]
+	dst[5] = a[5] + b[5]
+	dst[6] = a[6] + b[6]
+	dst[7] = a[7] + b[7]
+	dst[8] = a[8] + b[8]
+	dst[9] = a[9] + b[9]
+}
+
+func FeSub(dst, a, b *FieldElement) {
+	dst[0] = a[0] - b[0]
+	dst[1] = a[1] - b[1]
+	dst[2] = a[2] - b[2]
+	dst[3] = a[3] - b[3]
+	dst[4] = a[4] - b[4]
+	dst[5] = a[5] - b[5]
+	dst[6] = a[6] - b[6]
+	dst[7] = a[7] - b[7]
+	dst[8] = a[8] - b[8]
+	dst[9] = a[9] - b[9]
+}
+
+func FeCopy(dst, src *FieldElement) {
+	copy(dst[:], src[:])
+}
+
+// Replace (f,g) with (g,g) if b == 1;
+// replace (f,g) with (f,g) if b == 0.
+//
+// Preconditions: b in {0,1}.
+func FeCMove(f, g *FieldElement, b int32) {
+	b = -b
+	f[0] ^= b & (f[0] ^ g[0])
+	f[1] ^= b & (f[1] ^ g[1])
+	f[2] ^= b & (f[2] ^ g[2])
+	f[3] ^= b & (f[3] ^ g[3])
+	f[4] ^= b & (f[4] ^ g[4])
+	f[5] ^= b & (f[5] ^ g[5])
+	f[6] ^= b & (f[6] ^ g[6])
+	f[7] ^= b & (f[7] ^ g[7])
+	f[8] ^= b & (f[8] ^ g[8])
+	f[9] ^= b & (f[9] ^ g[9])
+}
+
+func load3(in []byte) int64 {
+	var r int64
+	r = int64(in[0])
+	r |= int64(in[1]) << 8
+	r |= int64(in[2]) << 16
+	return r
+}
+
+func load4(in []byte) int64 {
+	var r int64
+	r = int64(in[0])
+	r |= int64(in[1]) << 8
+	r |= int64(in[2]) << 16
+	r |= int64(in[3]) << 24
+	return r
+}
+
+func FeFromBytes(dst *FieldElement, src *[32]byte) {
+	h0 := load4(src[:])
+	h1 := load3(src[4:]) << 6
+	h2 := load3(src[7:]) << 5
+	h3 := load3(src[10:]) << 3
+	h4 := load3(src[13:]) << 2
+	h5 := load4(src[16:])
+	h6 := load3(src[20:]) << 7
+	h7 := load3(src[23:]) << 5
+	h8 := load3(src[26:]) << 4
+	h9 := (load3(src[29:]) & 8388607) << 2
+
+	FeCombine(dst, h0, h1, h2, h3, h4, h5, h6, h7, h8, h9)
+}
+
+// FeToBytes marshals h to s.
+// Preconditions:
+//   |h| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+//
+// Write p=2^255-19; q=floor(h/p).
+// Basic claim: q = floor(2^(-255)(h + 19 2^(-25)h9 + 2^(-1))).
+//
+// Proof:
+//   Have |h|<=p so |q|<=1 so |19^2 2^(-255) q|<1/4.
+//   Also have |h-2^230 h9|<2^230 so |19 2^(-255)(h-2^230 h9)|<1/4.
+//
+//   Write y=2^(-1)-19^2 2^(-255)q-19 2^(-255)(h-2^230 h9).
+//   Then 0<y<1.
+//
+//   Write r=h-pq.
+//   Have 0<=r<=p-1=2^255-20.
+//   Thus 0<=r+19(2^-255)r<r+19(2^-255)2^255<=2^255-1.
+//
+//   Write x=r+19(2^-255)r+y.
+//   Then 0<x<2^255 so floor(2^(-255)x) = 0 so floor(q+2^(-255)x) = q.
+//
+//   Have q+2^(-255)x = 2^(-255)(h + 19 2^(-25) h9 + 2^(-1))
+//   so floor(2^(-255)(h + 19 2^(-25) h9 + 2^(-1))) = q.
+func FeToBytes(s *[32]byte, h *FieldElement) {
+	var carry [10]int32
+
+	q := (19*h[9] + (1 << 24)) >> 25
+	q = (h[0] + q) >> 26
+	q = (h[1] + q) >> 25
+	q = (h[2] + q) >> 26
+	q = (h[3] + q) >> 25
+	q = (h[4] + q) >> 26
+	q = (h[5] + q) >> 25
+	q = (h[6] + q) >> 26
+	q = (h[7] + q) >> 25
+	q = (h[8] + q) >> 26
+	q = (h[9] + q) >> 25
+
+	// Goal: Output h-(2^255-19)q, which is between 0 and 2^255-20.
+	h[0] += 19 * q
+	// Goal: Output h-2^255 q, which is between 0 and 2^255-20.
+
+	carry[0] = h[0] >> 26
+	h[1] += carry[0]
+	h[0] -= carry[0] << 26
+	carry[1] = h[1] >> 25
+	h[2] += carry[1]
+	h[1] -= carry[1] << 25
+	carry[2] = h[2] >> 26
+	h[3] += carry[2]
+	h[2] -= carry[2] << 26
+	carry[3] = h[3] >> 25
+	h[4] += carry[3]
+	h[3] -= carry[3] << 25
+	carry[4] = h[4] >> 26
+	h[5] += carry[4]
+	h[4] -= carry[4] << 26
+	carry[5] = h[5] >> 25
+	h[6] += carry[5]
+	h[5] -= carry[5] << 25
+	carry[6] = h[6] >> 26
+	h[7] += carry[6]
+	h[6] -= carry[6] << 26
+	carry[7] = h[7] >> 25
+	h[8] += carry[7]
+	h[7] -= carry[7] << 25
+	carry[8] = h[8] >> 26
+	h[9] += carry[8]
+	h[8] -= carry[8] << 26
+	carry[9] = h[9] >> 25
+	h[9] -= carry[9] << 25
+	// h10 = carry9
+
+	// Goal: Output h[0]+...+2^255 h10-2^255 q, which is between 0 and 2^255-20.
+	// Have h[0]+...+2^230 h[9] between 0 and 2^255-1;
+	// evidently 2^255 h10-2^255 q = 0.
+	// Goal: Output h[0]+...+2^230 h[9].
+
+	s[0] = byte(h[0] >> 0)
+	s[1] = byte(h[0] >> 8)
+	s[2] = byte(h[0] >> 16)
+	s[3] = byte((h[0] >> 24) | (h[1] << 2))
+	s[4] = byte(h[1] >> 6)
+	s[5] = byte(h[1] >> 14)
+	s[6] = byte((h[1] >> 22) | (h[2] << 3))
+	s[7] = byte(h[2] >> 5)
+	s[8] = byte(h[2] >> 13)
+	s[9] = byte((h[2] >> 21) | (h[3] << 5))
+	s[10] = byte(h[3] >> 3)
+	s[11] = byte(h[3] >> 11)
+	s[12] = byte((h[3] >> 19) | (h[4] << 6))
+	s[13] = byte(h[4] >> 2)
+	s[14] = byte(h[4] >> 10)
+	s[15] = byte(h[4] >> 18)
+	s[16] = byte(h[5] >> 0)
+	s[17] = byte(h[5] >> 8)
+	s[18] = byte(h[5] >> 16)
+	s[19] = byte((h[5] >> 24) | (h[6] << 1))
+	s[20] = byte(h[6] >> 7)
+	s[21] = byte(h[6] >> 15)
+	s[22] = byte((h[6] >> 23) | (h[7] << 3))
+	s[23] = byte(h[7] >> 5)
+	s[24] = byte(h[7] >> 13)
+	s[25] = byte((h[7] >> 21) | (h[8] << 4))
+	s[26] = byte(h[8] >> 4)
+	s[27] = byte(h[8] >> 12)
+	s[28] = byte((h[8] >> 20) | (h[9] << 6))
+	s[29] = byte(h[9] >> 2)
+	s[30] = byte(h[9] >> 10)
+	s[31] = byte(h[9] >> 18)
+}
+
+func FeIsNegative(f *FieldElement) byte {
+	var s [32]byte
+	FeToBytes(&s, f)
+	return s[0] & 1
+}
+
+func FeIsNonZero(f *FieldElement) int32 {
+	var s [32]byte
+	FeToBytes(&s, f)
+	var x uint8
+	for _, b := range s {
+		x |= b
+	}
+	x |= x >> 4
+	x |= x >> 2
+	x |= x >> 1
+	return int32(x & 1)
+}
+
+// FeNeg sets h = -f
+//
+// Preconditions:
+//    |f| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+//
+// Postconditions:
+//    |h| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+func FeNeg(h, f *FieldElement) {
+	h[0] = -f[0]
+	h[1] = -f[1]
+	h[2] = -f[2]
+	h[3] = -f[3]
+	h[4] = -f[4]
+	h[5] = -f[5]
+	h[6] = -f[6]
+	h[7] = -f[7]
+	h[8] = -f[8]
+	h[9] = -f[9]
+}
+
+func FeCombine(h *FieldElement, h0, h1, h2, h3, h4, h5, h6, h7, h8, h9 int64) {
+	var c0, c1, c2, c3, c4, c5, c6, c7, c8, c9 int64
+
+	/*
+	  |h0| <= (1.1*1.1*2^52*(1+19+19+19+19)+1.1*1.1*2^50*(38+38+38+38+38))
+	    i.e. |h0| <= 1.2*2^59; narrower ranges for h2, h4, h6, h8
+	  |h1| <= (1.1*1.1*2^51*(1+1+19+19+19+19+19+19+19+19))
+	    i.e. |h1| <= 1.5*2^58; narrower ranges for h3, h5, h7, h9
+	*/
+
+	c0 = (h0 + (1 << 25)) >> 26
+	h1 += c0
+	h0 -= c0 << 26
+	c4 = (h4 + (1 << 25)) >> 26
+	h5 += c4
+	h4 -= c4 << 26
+	/* |h0| <= 2^25 */
+	/* |h4| <= 2^25 */
+	/* |h1| <= 1.51*2^58 */
+	/* |h5| <= 1.51*2^58 */
+
+	c1 = (h1 + (1 << 24)) >> 25
+	h2 += c1
+	h1 -= c1 << 25
+	c5 = (h5 + (1 << 24)) >> 25
+	h6 += c5
+	h5 -= c5 << 25
+	/* |h1| <= 2^24; from now on fits into int32 */
+	/* |h5| <= 2^24; from now on fits into int32 */
+	/* |h2| <= 1.21*2^59 */
+	/* |h6| <= 1.21*2^59 */
+
+	c2 = (h2 + (1 << 25)) >> 26
+	h3 += c2
+	h2 -= c2 << 26
+	c6 = (h6 + (1 << 25)) >> 26
+	h7 += c6
+	h6 -= c6 << 26
+	/* |h2| <= 2^25; from now on fits into int32 unchanged */
+	/* |h6| <= 2^25; from now on fits into int32 unchanged */
+	/* |h3| <= 1.51*2^58 */
+	/* |h7| <= 1.51*2^58 */
+
+	c3 = (h3 + (1 << 24)) >> 25
+	h4 += c3
+	h3 -= c3 << 25
+	c7 = (h7 + (1 << 24)) >> 25
+	h8 += c7
+	h7 -= c7 << 25
+	/* |h3| <= 2^24; from now on fits into int32 unchanged */
+	/* |h7| <= 2^24; from now on fits into int32 unchanged */
+	/* |h4| <= 1.52*2^33 */
+	/* |h8| <= 1.52*2^33 */
+
+	c4 = (h4 + (1 << 25)) >> 26
+	h5 += c4
+	h4 -= c4 << 26
+	c8 = (h8 + (1 << 25)) >> 26
+	h9 += c8
+	h8 -= c8 << 26
+	/* |h4| <= 2^25; from now on fits into int32 unchanged */
+	/* |h8| <= 2^25; from now on fits into int32 unchanged */
+	/* |h5| <= 1.01*2^24 */
+	/* |h9| <= 1.51*2^58 */
+
+	c9 = (h9 + (1 << 24)) >> 25
+	h0 += c9 * 19
+	h9 -= c9 << 25
+	/* |h9| <= 2^24; from now on fits into int32 unchanged */
+	/* |h0| <= 1.8*2^37 */
+
+	c0 = (h0 + (1 << 25)) >> 26
+	h1 += c0
+	h0 -= c0 << 26
+	/* |h0| <= 2^25; from now on fits into int32 unchanged */
+	/* |h1| <= 1.01*2^24 */
+
+	h[0] = int32(h0)
+	h[1] = int32(h1)
+	h[2] = int32(h2)
+	h[3] = int32(h3)
+	h[4] = int32(h4)
+	h[5] = int32(h5)
+	h[6] = int32(h6)
+	h[7] = int32(h7)
+	h[8] = int32(h8)
+	h[9] = int32(h9)
+}
+
+// FeMul calculates h = f * g
+// Can overlap h with f or g.
+//
+// Preconditions:
+//    |f| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc.
+//    |g| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc.
+//
+// Postconditions:
+//    |h| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+//
+// Notes on implementation strategy:
+//
+// Using schoolbook multiplication.
+// Karatsuba would save a little in some cost models.
+//
+// Most multiplications by 2 and 19 are 32-bit precomputations;
+// cheaper than 64-bit postcomputations.
+//
+// There is one remaining multiplication by 19 in the carry chain;
+// one *19 precomputation can be merged into this,
+// but the resulting data flow is considerably less clean.
+//
+// There are 12 carries below.
+// 10 of them are 2-way parallelizable and vectorizable.
+// Can get away with 11 carries, but then data flow is much deeper.
+//
+// With tighter constraints on inputs, can squeeze carries into int32.
+func FeMul(h, f, g *FieldElement) {
+	f0 := int64(f[0])
+	f1 := int64(f[1])
+	f2 := int64(f[2])
+	f3 := int64(f[3])
+	f4 := int64(f[4])
+	f5 := int64(f[5])
+	f6 := int64(f[6])
+	f7 := int64(f[7])
+	f8 := int64(f[8])
+	f9 := int64(f[9])
+
+	f1_2 := int64(2 * f[1])
+	f3_2 := int64(2 * f[3])
+	f5_2 := int64(2 * f[5])
+	f7_2 := int64(2 * f[7])
+	f9_2 := int64(2 * f[9])
+
+	g0 := int64(g[0])
+	g1 := int64(g[1])
+	g2 := int64(g[2])
+	g3 := int64(g[3])
+	g4 := int64(g[4])
+	g5 := int64(g[5])
+	g6 := int64(g[6])
+	g7 := int64(g[7])
+	g8 := int64(g[8])
+	g9 := int64(g[9])
+
+	g1_19 := int64(19 * g[1]) /* 1.4*2^29 */
+	g2_19 := int64(19 * g[2]) /* 1.4*2^30; still ok */
+	g3_19 := int64(19 * g[3])
+	g4_19 := int64(19 * g[4])
+	g5_19 := int64(19 * g[5])
+	g6_19 := int64(19 * g[6])
+	g7_19 := int64(19 * g[7])
+	g8_19 := int64(19 * g[8])
+	g9_19 := int64(19 * g[9])
+
+	h0 := f0*g0 + f1_2*g9_19 + f2*g8_19 + f3_2*g7_19 + f4*g6_19 + f5_2*g5_19 + f6*g4_19 + f7_2*g3_19 + f8*g2_19 + f9_2*g1_19
+	h1 := f0*g1 + f1*g0 + f2*g9_19 + f3*g8_19 + f4*g7_19 + f5*g6_19 + f6*g5_19 + f7*g4_19 + f8*g3_19 + f9*g2_19
+	h2 := f0*g2 + f1_2*g1 + f2*g0 + f3_2*g9_19 + f4*g8_19 + f5_2*g7_19 + f6*g6_19 + f7_2*g5_19 + f8*g4_19 + f9_2*g3_19
+	h3 := f0*g3 + f1*g2 + f2*g1 + f3*g0 + f4*g9_19 + f5*g8_19 + f6*g7_19 + f7*g6_19 + f8*g5_19 + f9*g4_19
+	h4 := f0*g4 + f1_2*g3 + f2*g2 + f3_2*g1 + f4*g0 + f5_2*g9_19 + f6*g8_19 + f7_2*g7_19 + f8*g6_19 + f9_2*g5_19
+	h5 := f0*g5 + f1*g4 + f2*g3 + f3*g2 + f4*g1 + f5*g0 + f6*g9_19 + f7*g8_19 + f8*g7_19 + f9*g6_19
+	h6 := f0*g6 + f1_2*g5 + f2*g4 + f3_2*g3 + f4*g2 + f5_2*g1 + f6*g0 + f7_2*g9_19 + f8*g8_19 + f9_2*g7_19
+	h7 := f0*g7 + f1*g6 + f2*g5 + f3*g4 + f4*g3 + f5*g2 + f6*g1 + f7*g0 + f8*g9_19 + f9*g8_19
+	h8 := f0*g8 + f1_2*g7 + f2*g6 + f3_2*g5 + f4*g4 + f5_2*g3 + f6*g2 + f7_2*g1 + f8*g0 + f9_2*g9_19
+	h9 := f0*g9 + f1*g8 + f2*g7 + f3*g6 + f4*g5 + f5*g4 + f6*g3 + f7*g2 + f8*g1 + f9*g0
+
+	FeCombine(h, h0, h1, h2, h3, h4, h5, h6, h7, h8, h9)
+}
+
+func feSquare(f *FieldElement) (h0, h1, h2, h3, h4, h5, h6, h7, h8, h9 int64) {
+	f0 := int64(f[0])
+	f1 := int64(f[1])
+	f2 := int64(f[2])
+	f3 := int64(f[3])
+	f4 := int64(f[4])
+	f5 := int64(f[5])
+	f6 := int64(f[6])
+	f7 := int64(f[7])
+	f8 := int64(f[8])
+	f9 := int64(f[9])
+	f0_2 := int64(2 * f[0])
+	f1_2 := int64(2 * f[1])
+	f2_2 := int64(2 * f[2])
+	f3_2 := int64(2 * f[3])
+	f4_2 := int64(2 * f[4])
+	f5_2 := int64(2 * f[5])
+	f6_2 := int64(2 * f[6])
+	f7_2 := int64(2 * f[7])
+	f5_38 := 38 * f5 // 1.31*2^30
+	f6_19 := 19 * f6 // 1.31*2^30
+	f7_38 := 38 * f7 // 1.31*2^30
+	f8_19 := 19 * f8 // 1.31*2^30
+	f9_38 := 38 * f9 // 1.31*2^30
+
+	h0 = f0*f0 + f1_2*f9_38 + f2_2*f8_19 + f3_2*f7_38 + f4_2*f6_19 + f5*f5_38
+	h1 = f0_2*f1 + f2*f9_38 + f3_2*f8_19 + f4*f7_38 + f5_2*f6_19
+	h2 = f0_2*f2 + f1_2*f1 + f3_2*f9_38 + f4_2*f8_19 + f5_2*f7_38 + f6*f6_19
+	h3 = f0_2*f3 + f1_2*f2 + f4*f9_38 + f5_2*f8_19 + f6*f7_38
+	h4 = f0_2*f4 + f1_2*f3_2 + f2*f2 + f5_2*f9_38 + f6_2*f8_19 + f7*f7_38
+	h5 = f0_2*f5 + f1_2*f4 + f2_2*f3 + f6*f9_38 + f7_2*f8_19
+	h6 = f0_2*f6 + f1_2*f5_2 + f2_2*f4 + f3_2*f3 + f7_2*f9_38 + f8*f8_19
+	h7 = f0_2*f7 + f1_2*f6 + f2_2*f5 + f3_2*f4 + f8*f9_38
+	h8 = f0_2*f8 + f1_2*f7_2 + f2_2*f6 + f3_2*f5_2 + f4*f4 + f9*f9_38
+	h9 = f0_2*f9 + f1_2*f8 + f2_2*f7 + f3_2*f6 + f4_2*f5
+
+	return
+}
+
+// FeSquare calculates h = f*f. Can overlap h with f.
+//
+// Preconditions:
+//    |f| bounded by 1.1*2^26,1.1*2^25,1.1*2^26,1.1*2^25,etc.
+//
+// Postconditions:
+//    |h| bounded by 1.1*2^25,1.1*2^24,1.1*2^25,1.1*2^24,etc.
+func FeSquare(h, f *FieldElement) {
+	h0, h1, h2, h3, h4, h5, h6, h7, h8, h9 := feSquare(f)
+	FeCombine(h, h0, h1, h2, h3, h4, h5, h6, h7, h8, h9)
+}
+
+// FeSquare2 sets h = 2 * f * f
+//
+// Can overlap h with f.
+//
+// Preconditions:
+//    |f| bounded by 1.65*2^26,1.65*2^25,1.65*2^26,1.65*2^25,etc.
+//
+// Postconditions:
+//    |h| bounded by 1.01*2^25,1.01*2^24,1.01*2^25,1.01*2^24,etc.
+// See fe_mul.c for discussion of implementation strategy.
+func FeSquare2(h, f *FieldElement) {
+	h0, h1, h2, h3, h4, h5, h6, h7, h8, h9 := feSquare(f)
+
+	h0 += h0
+	h1 += h1
+	h2 += h2
+	h3 += h3
+	h4 += h4
+	h5 += h5
+	h6 += h6
+	h7 += h7
+	h8 += h8
+	h9 += h9
+
+	FeCombine(h, h0, h1, h2, h3, h4, h5, h6, h7, h8, h9)
+}
+
+func FeInvert(out, z *FieldElement) {
+	var t0, t1, t2, t3 FieldElement
+	var i int
+
+	FeSquare(&t0, z)        // 2^1
+	FeSquare(&t1, &t0)      // 2^2
+	for i = 1; i < 2; i++ { // 2^3
+		FeSquare(&t1, &t1)
+	}
+	FeMul(&t1, z, &t1)      // 2^3 + 2^0
+	FeMul(&t0, &t0, &t1)    // 2^3 + 2^1 + 2^0
+	FeSquare(&t2, &t0)      // 2^4 + 2^2 + 2^1
+	FeMul(&t1, &t1, &t2)    // 2^4 + 2^3 + 2^2 + 2^1 + 2^0
+	FeSquare(&t2, &t1)      // 5,4,3,2,1
+	for i = 1; i < 5; i++ { // 9,8,7,6,5
+		FeSquare(&t2, &t2)
+	}
+	FeMul(&t1, &t2, &t1)     // 9,8,7,6,5,4,3,2,1,0
+	FeSquare(&t2, &t1)       // 10..1
+	for i = 1; i < 10; i++ { // 19..10
+		FeSquare(&t2, &t2)
+	}
+	FeMul(&t2, &t2, &t1)     // 19..0
+	FeSquare(&t3, &t2)       // 20..1
+	for i = 1; i < 20; i++ { // 39..20
+		FeSquare(&t3, &t3)
+	}
+	FeMul(&t2, &t3, &t2)     // 39..0
+	FeSquare(&t2, &t2)       // 40..1
+	for i = 1; i < 10; i++ { // 49..10
+		FeSquare(&t2, &t2)
+	}
+	FeMul(&t1, &t2, &t1)     // 49..0
+	FeSquare(&t2, &t1)       // 50..1
+	for i = 1; i < 50; i++ { // 99..50
+		FeSquare(&t2, &t2)
+	}
+	FeMul(&t2, &t2, &t1)      // 99..0
+	FeSquare(&t3, &t2)        // 100..1
+	for i = 1; i < 100; i++ { // 199..100
+		FeSquare(&t3, &t3)
+	}
+	FeMul(&t2, &t3, &t2)     // 199..0
+	FeSquare(&t2, &t2)       // 200..1
+	for i = 1; i < 50; i++ { // 249..50
+		FeSquare(&t2, &t2)
+	}
+	FeMul(&t1, &t2, &t1)    // 249..0
+	FeSquare(&t1, &t1)      // 250..1
+	for i = 1; i < 5; i++ { // 254..5
+		FeSquare(&t1, &t1)
+	}
+	FeMul(out, &t1, &t0) // 254..5,3,1,0
+}
+
+func fePow22523(out, z *FieldElement) {
+	var t0, t1, t2 FieldElement
+	var i int
+
+	FeSquare(&t0, z)
+	for i = 1; i < 1; i++ {
+		FeSquare(&t0, &t0)
+	}
+	FeSquare(&t1, &t0)
+	for i = 1; i < 2; i++ {
+		FeSquare(&t1, &t1)
+	}
+	FeMul(&t1, z, &t1)
+	FeMul(&t0, &t0, &t1)
+	FeSquare(&t0, &t0)
+	for i = 1; i < 1; i++ {
+		FeSquare(&t0, &t0)
+	}
+	FeMul(&t0, &t1, &t0)
+	FeSquare(&t1, &t0)
+	for i = 1; i < 5; i++ {
+		FeSquare(&t1, &t1)
+	}
+	FeMul(&t0, &t1, &t0)
+	FeSquare(&t1, &t0)
+	for i = 1; i < 10; i++ {
+		FeSquare(&t1, &t1)
+	}
+	FeMul(&t1, &t1, &t0)
+	FeSquare(&t2, &t1)
+	for i = 1; i < 20; i++ {
+		FeSquare(&t2, &t2)
+	}
+	FeMul(&t1, &t2, &t1)
+	FeSquare(&t1, &t1)
+	for i = 1; i < 10; i++ {
+		FeSquare(&t1, &t1)
+	}
+	FeMul(&t0, &t1, &t0)
+	FeSquare(&t1, &t0)
+	for i = 1; i < 50; i++ {
+		FeSquare(&t1, &t1)
+	}
+	FeMul(&t1, &t1, &t0)
+	FeSquare(&t2, &t1)
+	for i = 1; i < 100; i++ {
+		FeSquare(&t2, &t2)
+	}
+	FeMul(&t1, &t2, &t1)
+	FeSquare(&t1, &t1)
+	for i = 1; i < 50; i++ {
+		FeSquare(&t1, &t1)
+	}
+	FeMul(&t0, &t1, &t0)
+	FeSquare(&t0, &t0)
+	for i = 1; i < 2; i++ {
+		FeSquare(&t0, &t0)
+	}
+	FeMul(out, &t0, z)
+}
+
+// Group elements are members of the elliptic curve -x^2 + y^2 = 1 + d * x^2 *
+// y^2 where d = -121665/121666.
+//
+// Several representations are used:
+//   ProjectiveGroupElement: (X:Y:Z) satisfying x=X/Z, y=Y/Z
+//   ExtendedGroupElement: (X:Y:Z:T) satisfying x=X/Z, y=Y/Z, XY=ZT
+//   CompletedGroupElement: ((X:Z),(Y:T)) satisfying x=X/Z, y=Y/T
+//   PreComputedGroupElement: (y+x,y-x,2dxy)
+
+type ProjectiveGroupElement struct {
+	X, Y, Z FieldElement
+}
+
+type ExtendedGroupElement struct {
+	X, Y, Z, T FieldElement
+}
+
+type CompletedGroupElement struct {
+	X, Y, Z, T FieldElement
+}
+
+type PreComputedGroupElement struct {
+	yPlusX, yMinusX, xy2d FieldElement
+}
+
+type CachedGroupElement struct {
+	yPlusX, yMinusX, Z, T2d FieldElement
+}
+
+func (p *ProjectiveGroupElement) Zero() {
+	FeZero(&p.X)
+	FeOne(&p.Y)
+	FeOne(&p.Z)
+}
+
+func (p *ProjectiveGroupElement) Double(r *CompletedGroupElement) {
+	var t0 FieldElement
+
+	FeSquare(&r.X, &p.X)
+	FeSquare(&r.Z, &p.Y)
+	FeSquare2(&r.T, &p.Z)
+	FeAdd(&r.Y, &p.X, &p.Y)
+	FeSquare(&t0, &r.Y)
+	FeAdd(&r.Y, &r.Z, &r.X)
+	FeSub(&r.Z, &r.Z, &r.X)
+	FeSub(&r.X, &t0, &r.Y)
+	FeSub(&r.T, &r.T, &r.Z)
+}
+
+func (p *ProjectiveGroupElement) ToBytes(s *[32]byte) {
+	var recip, x, y FieldElement
+
+	FeInvert(&recip, &p.Z)
+	FeMul(&x, &p.X, &recip)
+	FeMul(&y, &p.Y, &recip)
+	FeToBytes(s, &y)
+	s[31] ^= FeIsNegative(&x) << 7
+}
+
+func (p *ExtendedGroupElement) Zero() {
+	FeZero(&p.X)
+	FeOne(&p.Y)
+	FeOne(&p.Z)
+	FeZero(&p.T)
+}
+
+func (p *ExtendedGroupElement) Double(r *CompletedGroupElement) {
+	var q ProjectiveGroupElement
+	p.ToProjective(&q)
+	q.Double(r)
+}
+
+func (p *ExtendedGroupElement) ToCached(r *CachedGroupElement) {
+	FeAdd(&r.yPlusX, &p.Y, &p.X)
+	FeSub(&r.yMinusX, &p.Y, &p.X)
+	FeCopy(&r.Z, &p.Z)
+	FeMul(&r.T2d, &p.T, &d2)
+}
+
+func (p *ExtendedGroupElement) ToProjective(r *ProjectiveGroupElement) {
+	FeCopy(&r.X, &p.X)
+	FeCopy(&r.Y, &p.Y)
+	FeCopy(&r.Z, &p.Z)
+}
+
+func (p *ExtendedGroupElement) ToBytes(s *[32]byte) {
+	var recip, x, y FieldElement
+
+	FeInvert(&recip, &p.Z)
+	FeMul(&x, &p.X, &recip)
+	FeMul(&y, &p.Y, &recip)
+	FeToBytes(s, &y)
+	s[31] ^= FeIsNegative(&x) << 7
+}
+
+func (p *ExtendedGroupElement) FromBytes(s *[32]byte) bool {
+	var u, v, v3, vxx, check FieldElement
+
+	FeFromBytes(&p.Y, s)
+	FeOne(&p.Z)
+	FeSquare(&u, &p.Y)
+	FeMul(&v, &u, &d)
+	FeSub(&u, &u, &p.Z) // y = y^2-1
+	FeAdd(&v, &v, &p.Z) // v = dy^2+1
+
+	FeSquare(&v3, &v)
+	FeMul(&v3, &v3, &v) // v3 = v^3
+	FeSquare(&p.X, &v3)
+	FeMul(&p.X, &p.X, &v)
+	FeMul(&p.X, &p.X, &u) // x = uv^7
+
+	fePow22523(&p.X, &p.X) // x = (uv^7)^((q-5)/8)
+	FeMul(&p.X, &p.X, &v3)
+	FeMul(&p.X, &p.X, &u) // x = uv^3(uv^7)^((q-5)/8)
+
+	var tmpX, tmp2 [32]byte
+
+	FeSquare(&vxx, &p.X)
+	FeMul(&vxx, &vxx, &v)
+	FeSub(&check, &vxx, &u) // vx^2-u
+	if FeIsNonZero(&check) == 1 {
+		FeAdd(&check, &vxx, &u) // vx^2+u
+		if FeIsNonZero(&check) == 1 {
+			return false
+		}
+		FeMul(&p.X, &p.X, &SqrtM1)
+
+		FeToBytes(&tmpX, &p.X)
+		for i, v := range tmpX {
+			tmp2[31-i] = v
+		}
+	}
+
+	if FeIsNegative(&p.X) != (s[31] >> 7) {
+		FeNeg(&p.X, &p.X)
+	}
+
+	FeMul(&p.T, &p.X, &p.Y)
+	return true
+}
+
+func (p *CompletedGroupElement) ToProjective(r *ProjectiveGroupElement) {
+	FeMul(&r.X, &p.X, &p.T)
+	FeMul(&r.Y, &p.Y, &p.Z)
+	FeMul(&r.Z, &p.Z, &p.T)
+}
+
+func (p *CompletedGroupElement) ToExtended(r *ExtendedGroupElement) {
+	FeMul(&r.X, &p.X, &p.T)
+	FeMul(&r.Y, &p.Y, &p.Z)
+	FeMul(&r.Z, &p.Z, &p.T)
+	FeMul(&r.T, &p.X, &p.Y)
+}
+
+func (p *PreComputedGroupElement) Zero() {
+	FeOne(&p.yPlusX)
+	FeOne(&p.yMinusX)
+	FeZero(&p.xy2d)
+}
+
+func geAdd(r *CompletedGroupElement, p *ExtendedGroupElement, q *CachedGroupElement) {
+	var t0 FieldElement
+
+	FeAdd(&r.X, &p.Y, &p.X)
+	FeSub(&r.Y, &p.Y, &p.X)
+	FeMul(&r.Z, &r.X, &q.yPlusX)
+	FeMul(&r.Y, &r.Y, &q.yMinusX)
+	FeMul(&r.T, &q.T2d, &p.T)
+	FeMul(&r.X, &p.Z, &q.Z)
+	FeAdd(&t0, &r.X, &r.X)
+	FeSub(&r.X, &r.Z, &r.Y)
+	FeAdd(&r.Y, &r.Z, &r.Y)
+	FeAdd(&r.Z, &t0, &r.T)
+	FeSub(&r.T, &t0, &r.T)
+}
+
+func geSub(r *CompletedGroupElement, p *ExtendedGroupElement, q *CachedGroupElement) {
+	var t0 FieldElement
+
+	FeAdd(&r.X, &p.Y, &p.X)
+	FeSub(&r.Y, &p.Y, &p.X)
+	FeMul(&r.Z, &r.X, &q.yMinusX)
+	FeMul(&r.Y, &r.Y, &q.yPlusX)
+	FeMul(&r.T, &q.T2d, &p.T)
+	FeMul(&r.X, &p.Z, &q.Z)
+	FeAdd(&t0, &r.X, &r.X)
+	FeSub(&r.X, &r.Z, &r.Y)
+	FeAdd(&r.Y, &r.Z, &r.Y)
+	FeSub(&r.Z, &t0, &r.T)
+	FeAdd(&r.T, &t0, &r.T)
+}
+
+func geMixedAdd(r *CompletedGroupElement, p *ExtendedGroupElement, q *PreComputedGroupElement) {
+	var t0 FieldElement
+
+	FeAdd(&r.X, &p.Y, &p.X)
+	FeSub(&r.Y, &p.Y, &p.X)
+	FeMul(&r.Z, &r.X, &q.yPlusX)
+	FeMul(&r.Y, &r.Y, &q.yMinusX)
+	FeMul(&r.T, &q.xy2d, &p.T)
+	FeAdd(&t0, &p.Z, &p.Z)
+	FeSub(&r.X, &r.Z, &r.Y)
+	FeAdd(&r.Y, &r.Z, &r.Y)
+	FeAdd(&r.Z, &t0, &r.T)
+	FeSub(&r.T, &t0, &r.T)
+}
+
+func geMixedSub(r *CompletedGroupElement, p *ExtendedGroupElement, q *PreComputedGroupElement) {
+	var t0 FieldElement
+
+	FeAdd(&r.X, &p.Y, &p.X)
+	FeSub(&r.Y, &p.Y, &p.X)
+	FeMul(&r.Z, &r.X, &q.yMinusX)
+	FeMul(&r.Y, &r.Y, &q.yPlusX)
+	FeMul(&r.T, &q.xy2d, &p.T)
+	FeAdd(&t0, &p.Z, &p.Z)
+	FeSub(&r.X, &r.Z, &r.Y)
+	FeAdd(&r.Y, &r.Z, &r.Y)
+	FeSub(&r.Z, &t0, &r.T)
+	FeAdd(&r.T, &t0, &r.T)
+}
+
+func slide(r *[256]int8, a *[32]byte) {
+	for i := range r {
+		r[i] = int8(1 & (a[i>>3] >> uint(i&7)))
+	}
+
+	for i := range r {
+		if r[i] != 0 {
+			for b := 1; b <= 6 && i+b < 256; b++ {
+				if r[i+b] != 0 {
+					if r[i]+(r[i+b]<<uint(b)) <= 15 {
+						r[i] += r[i+b] << uint(b)
+						r[i+b] = 0
+					} else if r[i]-(r[i+b]<<uint(b)) >= -15 {
+						r[i] -= r[i+b] << uint(b)
+						for k := i + b; k < 256; k++ {
+							if r[k] == 0 {
+								r[k] = 1
+								break
+							}
+							r[k] = 0
+						}
+					} else {
+						break
+					}
+				}
+			}
+		}
+	}
+}
+
+// GeDoubleScalarMultVartime sets r = a*A + b*B
+// where a = a[0]+256*a[1]+...+256^31 a[31].
+// and b = b[0]+256*b[1]+...+256^31 b[31].
+// B is the Ed25519 base point (x,4/5) with x positive.
+func GeDoubleScalarMultVartime(r *ProjectiveGroupElement, a *[32]byte, A *ExtendedGroupElement, b *[32]byte) {
+	var aSlide, bSlide [256]int8
+	var Ai [8]CachedGroupElement // A,3A,5A,7A,9A,11A,13A,15A
+	var t CompletedGroupElement
+	var u, A2 ExtendedGroupElement
+	var i int
+
+	slide(&aSlide, a)
+	slide(&bSlide, b)
+
+	A.ToCached(&Ai[0])
+	A.Double(&t)
+	t.ToExtended(&A2)
+
+	for i := 0; i < 7; i++ {
+		geAdd(&t, &A2, &Ai[i])
+		t.ToExtended(&u)
+		u.ToCached(&Ai[i+1])
+	}
+
+	r.Zero()
+
+	for i = 255; i >= 0; i-- {
+		if aSlide[i] != 0 || bSlide[i] != 0 {
+			break
+		}
+	}
+
+	for ; i >= 0; i-- {
+		r.Double(&t)
+
+		if aSlide[i] > 0 {
+			t.ToExtended(&u)
+			geAdd(&t, &u, &Ai[aSlide[i]/2])
+		} else if aSlide[i] < 0 {
+			t.ToExtended(&u)
+			geSub(&t, &u, &Ai[(-aSlide[i])/2])
+		}
+
+		if bSlide[i] > 0 {
+			t.ToExtended(&u)
+			geMixedAdd(&t, &u, &bi[bSlide[i]/2])
+		} else if bSlide[i] < 0 {
+			t.ToExtended(&u)
+			geMixedSub(&t, &u, &bi[(-bSlide[i])/2])
+		}
+
+		t.ToProjective(r)
+	}
+}
+
+// equal returns 1 if b == c and 0 otherwise, assuming that b and c are
+// non-negative.
+func equal(b, c int32) int32 {
+	x := uint32(b ^ c)
+	x--
+	return int32(x >> 31)
+}
+
+// negative returns 1 if b < 0 and 0 otherwise.
+func negative(b int32) int32 {
+	return (b >> 31) & 1
+}
+
+func PreComputedGroupElementCMove(t, u *PreComputedGroupElement, b int32) {
+	FeCMove(&t.yPlusX, &u.yPlusX, b)
+	FeCMove(&t.yMinusX, &u.yMinusX, b)
+	FeCMove(&t.xy2d, &u.xy2d, b)
+}
+
+func selectPoint(t *PreComputedGroupElement, pos int32, b int32) {
+	var minusT PreComputedGroupElement
+	bNegative := negative(b)
+	bAbs := b - (((-bNegative) & b) << 1)
+
+	t.Zero()
+	for i := int32(0); i < 8; i++ {
+		PreComputedGroupElementCMove(t, &base[pos][i], equal(bAbs, i+1))
+	}
+	FeCopy(&minusT.yPlusX, &t.yMinusX)
+	FeCopy(&minusT.yMinusX, &t.yPlusX)
+	FeNeg(&minusT.xy2d, &t.xy2d)
+	PreComputedGroupElementCMove(t, &minusT, bNegative)
+}
+
+// GeScalarMultBase computes h = a*B, where
+//   a = a[0]+256*a[1]+...+256^31 a[31]
+//   B is the Ed25519 base point (x,4/5) with x positive.
+//
+// Preconditions:
+//   a[31] <= 127
+func GeScalarMultBase(h *ExtendedGroupElement, a *[32]byte) {
+	var e [64]int8
+
+	for i, v := range a {
+		e[2*i] = int8(v & 15)
+		e[2*i+1] = int8((v >> 4) & 15)
+	}
+
+	// each e[i] is between 0 and 15 and e[63] is between 0 and 7.
+
+	carry := int8(0)
+	for i := 0; i < 63; i++ {
+		e[i] += carry
+		carry = (e[i] + 8) >> 4
+		e[i] -= carry << 4
+	}
+	e[63] += carry
+	// each e[i] is between -8 and 8.
+
+	h.Zero()
+	var t PreComputedGroupElement
+	var r CompletedGroupElement
+	for i := int32(1); i < 64; i += 2 {
+		selectPoint(&t, i/2, int32(e[i]))
+		geMixedAdd(&r, h, &t)
+		r.ToExtended(h)
+	}
+
+	var s ProjectiveGroupElement
+
+	h.Double(&r)
+	r.ToProjective(&s)
+	s.Double(&r)
+	r.ToProjective(&s)
+	s.Double(&r)
+	r.ToProjective(&s)
+	s.Double(&r)
+	r.ToExtended(h)
+
+	for i := int32(0); i < 64; i += 2 {
+		selectPoint(&t, i/2, int32(e[i]))
+		geMixedAdd(&r, h, &t)
+		r.ToExtended(h)
+	}
+}
+
+// The scalars are GF(2^252 + 27742317777372353535851937790883648493).
+
+// Input:
+//   a[0]+256*a[1]+...+256^31*a[31] = a
+//   b[0]+256*b[1]+...+256^31*b[31] = b
+//   c[0]+256*c[1]+...+256^31*c[31] = c
+//
+// Output:
+//   s[0]+256*s[1]+...+256^31*s[31] = (ab+c) mod l
+//   where l = 2^252 + 27742317777372353535851937790883648493.
+func ScMulAdd(s, a, b, c *[32]byte) {
+	a0 := 2097151 & load3(a[:])
+	a1 := 2097151 & (load4(a[2:]) >> 5)
+	a2 := 2097151 & (load3(a[5:]) >> 2)
+	a3 := 2097151 & (load4(a[7:]) >> 7)
+	a4 := 2097151 & (load4(a[10:]) >> 4)
+	a5 := 2097151 & (load3(a[13:]) >> 1)
+	a6 := 2097151 & (load4(a[15:]) >> 6)
+	a7 := 2097151 & (load3(a[18:]) >> 3)
+	a8 := 2097151 & load3(a[21:])
+	a9 := 2097151 & (load4(a[23:]) >> 5)
+	a10 := 2097151 & (load3(a[26:]) >> 2)
+	a11 := (load4(a[28:]) >> 7)
+	b0 := 2097151 & load3(b[:])
+	b1 := 2097151 & (load4(b[2:]) >> 5)
+	b2 := 2097151 & (load3(b[5:]) >> 2)
+	b3 := 2097151 & (load4(b[7:]) >> 7)
+	b4 := 2097151 & (load4(b[10:]) >> 4)
+	b5 := 2097151 & (load3(b[13:]) >> 1)
+	b6 := 2097151 & (load4(b[15:]) >> 6)
+	b7 := 2097151 & (load3(b[18:]) >> 3)
+	b8 := 2097151 & load3(b[21:])
+	b9 := 2097151 & (load4(b[23:]) >> 5)
+	b10 := 2097151 & (load3(b[26:]) >> 2)
+	b11 := (load4(b[28:]) >> 7)
+	c0 := 2097151 & load3(c[:])
+	c1 := 2097151 & (load4(c[2:]) >> 5)
+	c2 := 2097151 & (load3(c[5:]) >> 2)
+	c3 := 2097151 & (load4(c[7:]) >> 7)
+	c4 := 2097151 & (load4(c[10:]) >> 4)
+	c5 := 2097151 & (load3(c[13:]) >> 1)
+	c6 := 2097151 & (load4(c[15:]) >> 6)
+	c7 := 2097151 & (load3(c[18:]) >> 3)
+	c8 := 2097151 & load3(c[21:])
+	c9 := 2097151 & (load4(c[23:]) >> 5)
+	c10 := 2097151 & (load3(c[26:]) >> 2)
+	c11 := (load4(c[28:]) >> 7)
+	var carry [23]int64
+
+	s0 := c0 + a0*b0
+	s1 := c1 + a0*b1 + a1*b0
+	s2 := c2 + a0*b2 + a1*b1 + a2*b0
+	s3 := c3 + a0*b3 + a1*b2 + a2*b1 + a3*b0
+	s4 := c4 + a0*b4 + a1*b3 + a2*b2 + a3*b1 + a4*b0
+	s5 := c5 + a0*b5 + a1*b4 + a2*b3 + a3*b2 + a4*b1 + a5*b0
+	s6 := c6 + a0*b6 + a1*b5 + a2*b4 + a3*b3 + a4*b2 + a5*b1 + a6*b0
+	s7 := c7 + a0*b7 + a1*b6 + a2*b5 + a3*b4 + a4*b3 + a5*b2 + a6*b1 + a7*b0
+	s8 := c8 + a0*b8 + a1*b7 + a2*b6 + a3*b5 + a4*b4 + a5*b3 + a6*b2 + a7*b1 + a8*b0
+	s9 := c9 + a0*b9 + a1*b8 + a2*b7 + a3*b6 + a4*b5 + a5*b4 + a6*b3 + a7*b2 + a8*b1 + a9*b0
+	s10 := c10 + a0*b10 + a1*b9 + a2*b8 + a3*b7 + a4*b6 + a5*b5 + a6*b4 + a7*b3 + a8*b2 + a9*b1 + a10*b0
+	s11 := c11 + a0*b11 + a1*b10 + a2*b9 + a3*b8 + a4*b7 + a5*b6 + a6*b5 + a7*b4 + a8*b3 + a9*b2 + a10*b1 + a11*b0
+	s12 := a1*b11 + a2*b10 + a3*b9 + a4*b8 + a5*b7 + a6*b6 + a7*b5 + a8*b4 + a9*b3 + a10*b2 + a11*b1
+	s13 := a2*b11 + a3*b10 + a4*b9 + a5*b8 + a6*b7 + a7*b6 + a8*b5 + a9*b4 + a10*b3 + a11*b2
+	s14 := a3*b11 + a4*b10 + a5*b9 + a6*b8 + a7*b7 + a8*b6 + a9*b5 + a10*b4 + a11*b3
+	s15 := a4*b11 + a5*b10 + a6*b9 + a7*b8 + a8*b7 + a9*b6 + a10*b5 + a11*b4
+	s16 := a5*b11 + a6*b10 + a7*b9 + a8*b8 + a9*b7 + a10*b6 + a11*b5
+	s17 := a6*b11 + a7*b10 + a8*b9 + a9*b8 + a10*b7 + a11*b6
+	s18 := a7*b11 + a8*b10 + a9*b9 + a10*b8 + a11*b7
+	s19 := a8*b11 + a9*b10 + a10*b9 + a11*b8
+	s20 := a9*b11 + a10*b10 + a11*b9
+	s21 := a10*b11 + a11*b10
+	s22 := a11 * b11
+	s23 := int64(0)
+
+	carry[0] = (s0 + (1 << 20)) >> 21
+	s1 += carry[0]
+	s0 -= carry[0] << 21
+	carry[2] = (s2 + (1 << 20)) >> 21
+	s3 += carry[2]
+	s2 -= carry[2] << 21
+	carry[4] = (s4 + (1 << 20)) >> 21
+	s5 += carry[4]
+	s4 -= carry[4] << 21
+	carry[6] = (s6 + (1 << 20)) >> 21
+	s7 += carry[6]
+	s6 -= carry[6] << 21
+	carry[8] = (s8 + (1 << 20)) >> 21
+	s9 += carry[8]
+	s8 -= carry[8] << 21
+	carry[10] = (s10 + (1 << 20)) >> 21
+	s11 += carry[10]
+	s10 -= carry[10] << 21
+	carry[12] = (s12 + (1 << 20)) >> 21
+	s13 += carry[12]
+	s12 -= carry[12] << 21
+	carry[14] = (s14 + (1 << 20)) >> 21
+	s15 += carry[14]
+	s14 -= carry[14] << 21
+	carry[16] = (s16 + (1 << 20)) >> 21
+	s17 += carry[16]
+	s16 -= carry[16] << 21
+	carry[18] = (s18 + (1 << 20)) >> 21
+	s19 += carry[18]
+	s18 -= carry[18] << 21
+	carry[20] = (s20 + (1 << 20)) >> 21
+	s21 += carry[20]
+	s20 -= carry[20] << 21
+	carry[22] = (s22 + (1 << 20)) >> 21
+	s23 += carry[22]
+	s22 -= carry[22] << 21
+
+	carry[1] = (s1 + (1 << 20)) >> 21
+	s2 += carry[1]
+	s1 -= carry[1] << 21
+	carry[3] = (s3 + (1 << 20)) >> 21
+	s4 += carry[3]
+	s3 -= carry[3] << 21
+	carry[5] = (s5 + (1 << 20)) >> 21
+	s6 += carry[5]
+	s5 -= carry[5] << 21
+	carry[7] = (s7 + (1 << 20)) >> 21
+	s8 += carry[7]
+	s7 -= carry[7] << 21
+	carry[9] = (s9 + (1 << 20)) >> 21
+	s10 += carry[9]
+	s9 -= carry[9] << 21
+	carry[11] = (s11 + (1 << 20)) >> 21
+	s12 += carry[11]
+	s11 -= carry[11] << 21
+	carry[13] = (s13 + (1 << 20)) >> 21
+	s14 += carry[13]
+	s13 -= carry[13] << 21
+	carry[15] = (s15 + (1 << 20)) >> 21
+	s16 += carry[15]
+	s15 -= carry[15] << 21
+	carry[17] = (s17 + (1 << 20)) >> 21
+	s18 += carry[17]
+	s17 -= carry[17] << 21
+	carry[19] = (s19 + (1 << 20)) >> 21
+	s20 += carry[19]
+	s19 -= carry[19] << 21
+	carry[21] = (s21 + (1 << 20)) >> 21
+	s22 += carry[21]
+	s21 -= carry[21] << 21
+
+	s11 += s23 * 666643
+	s12 += s23 * 470296
+	s13 += s23 * 654183
+	s14 -= s23 * 997805
+	s15 += s23 * 136657
+	s16 -= s23 * 683901
+	s23 = 0
+
+	s10 += s22 * 666643
+	s11 += s22 * 470296
+	s12 += s22 * 654183
+	s13 -= s22 * 997805
+	s14 += s22 * 136657
+	s15 -= s22 * 683901
+	s22 = 0
+
+	s9 += s21 * 666643
+	s10 += s21 * 470296
+	s11 += s21 * 654183
+	s12 -= s21 * 997805
+	s13 += s21 * 136657
+	s14 -= s21 * 683901
+	s21 = 0
+
+	s8 += s20 * 666643
+	s9 += s20 * 470296
+	s10 += s20 * 654183
+	s11 -= s20 * 997805
+	s12 += s20 * 136657
+	s13 -= s20 * 683901
+	s20 = 0
+
+	s7 += s19 * 666643
+	s8 += s19 * 470296
+	s9 += s19 * 654183
+	s10 -= s19 * 997805
+	s11 += s19 * 136657
+	s12 -= s19 * 683901
+	s19 = 0
+
+	s6 += s18 * 666643
+	s7 += s18 * 470296
+	s8 += s18 * 654183
+	s9 -= s18 * 997805
+	s10 += s18 * 136657
+	s11 -= s18 * 683901
+	s18 = 0
+
+	carry[6] = (s6 + (1 << 20)) >> 21
+	s7 += carry[6]
+	s6 -= carry[6] << 21
+	carry[8] = (s8 + (1 << 20)) >> 21
+	s9 += carry[8]
+	s8 -= carry[8] << 21
+	carry[10] = (s10 + (1 << 20)) >> 21
+	s11 += carry[10]
+	s10 -= carry[10] << 21
+	carry[12] = (s12 + (1 << 20)) >> 21
+	s13 += carry[12]
+	s12 -= carry[12] << 21
+	carry[14] = (s14 + (1 << 20)) >> 21
+	s15 += carry[14]
+	s14 -= carry[14] << 21
+	carry[16] = (s16 + (1 << 20)) >> 21
+	s17 += carry[16]
+	s16 -= carry[16] << 21
+
+	carry[7] = (s7 + (1 << 20)) >> 21
+	s8 += carry[7]
+	s7 -= carry[7] << 21
+	carry[9] = (s9 + (1 << 20)) >> 21
+	s10 += carry[9]
+	s9 -= carry[9] << 21
+	carry[11] = (s11 + (1 << 20)) >> 21
+	s12 += carry[11]
+	s11 -= carry[11] << 21
+	carry[13] = (s13 + (1 << 20)) >> 21
+	s14 += carry[13]
+	s13 -= carry[13] << 21
+	carry[15] = (s15 + (1 << 20)) >> 21
+	s16 += carry[15]
+	s15 -= carry[15] << 21
+
+	s5 += s17 * 666643
+	s6 += s17 * 470296
+	s7 += s17 * 654183
+	s8 -= s17 * 997805
+	s9 += s17 * 136657
+	s10 -= s17 * 683901
+	s17 = 0
+
+	s4 += s16 * 666643
+	s5 += s16 * 470296
+	s6 += s16 * 654183
+	s7 -= s16 * 997805
+	s8 += s16 * 136657
+	s9 -= s16 * 683901
+	s16 = 0
+
+	s3 += s15 * 666643
+	s4 += s15 * 470296
+	s5 += s15 * 654183
+	s6 -= s15 * 997805
+	s7 += s15 * 136657
+	s8 -= s15 * 683901
+	s15 = 0
+
+	s2 += s14 * 666643
+	s3 += s14 * 470296
+	s4 += s14 * 654183
+	s5 -= s14 * 997805
+	s6 += s14 * 136657
+	s7 -= s14 * 683901
+	s14 = 0
+
+	s1 += s13 * 666643
+	s2 += s13 * 470296
+	s3 += s13 * 654183
+	s4 -= s13 * 997805
+	s5 += s13 * 136657
+	s6 -= s13 * 683901
+	s13 = 0
+
+	s0 += s12 * 666643
+	s1 += s12 * 470296
+	s2 += s12 * 654183
+	s3 -= s12 * 997805
+	s4 += s12 * 136657
+	s5 -= s12 * 683901
+	s12 = 0
+
+	carry[0] = (s0 + (1 << 20)) >> 21
+	s1 += carry[0]
+	s0 -= carry[0] << 21
+	carry[2] = (s2 + (1 << 20)) >> 21
+	s3 += carry[2]
+	s2 -= carry[2] << 21
+	carry[4] = (s4 + (1 << 20)) >> 21
+	s5 += carry[4]
+	s4 -= carry[4] << 21
+	carry[6] = (s6 + (1 << 20)) >> 21
+	s7 += carry[6]
+	s6 -= carry[6] << 21
+	carry[8] = (s8 + (1 << 20)) >> 21
+	s9 += carry[8]
+	s8 -= carry[8] << 21
+	carry[10] = (s10 + (1 << 20)) >> 21
+	s11 += carry[10]
+	s10 -= carry[10] << 21
+
+	carry[1] = (s1 + (1 << 20)) >> 21
+	s2 += carry[1]
+	s1 -= carry[1] << 21
+	carry[3] = (s3 + (1 << 20)) >> 21
+	s4 += carry[3]
+	s3 -= carry[3] << 21
+	carry[5] = (s5 + (1 << 20)) >> 21
+	s6 += carry[5]
+	s5 -= carry[5] << 21
+	carry[7] = (s7 + (1 << 20)) >> 21
+	s8 += carry[7]
+	s7 -= carry[7] << 21
+	carry[9] = (s9 + (1 << 20)) >> 21
+	s10 += carry[9]
+	s9 -= carry[9] << 21
+	carry[11] = (s11 + (1 << 20)) >> 21
+	s12 += carry[11]
+	s11 -= carry[11] << 21
+
+	s0 += s12 * 666643
+	s1 += s12 * 470296
+	s2 += s12 * 654183
+	s3 -= s12 * 997805
+	s4 += s12 * 136657
+	s5 -= s12 * 683901
+	s12 = 0
+
+	carry[0] = s0 >> 21
+	s1 += carry[0]
+	s0 -= carry[0] << 21
+	carry[1] = s1 >> 21
+	s2 += carry[1]
+	s1 -= carry[1] << 21
+	carry[2] = s2 >> 21
+	s3 += carry[2]
+	s2 -= carry[2] << 21
+	carry[3] = s3 >> 21
+	s4 += carry[3]
+	s3 -= carry[3] << 21
+	carry[4] = s4 >> 21
+	s5 += carry[4]
+	s4 -= carry[4] << 21
+	carry[5] = s5 >> 21
+	s6 += carry[5]
+	s5 -= carry[5] << 21
+	carry[6] = s6 >> 21
+	s7 += carry[6]
+	s6 -= carry[6] << 21
+	carry[7] = s7 >> 21
+	s8 += carry[7]
+	s7 -= carry[7] << 21
+	carry[8] = s8 >> 21
+	s9 += carry[8]
+	s8 -= carry[8] << 21
+	carry[9] = s9 >> 21
+	s10 += carry[9]
+	s9 -= carry[9] << 21
+	carry[10] = s10 >> 21
+	s11 += carry[10]
+	s10 -= carry[10] << 21
+	carry[11] = s11 >> 21
+	s12 += carry[11]
+	s11 -= carry[11] << 21
+
+	s0 += s12 * 666643
+	s1 += s12 * 470296
+	s2 += s12 * 654183
+	s3 -= s12 * 997805
+	s4 += s12 * 136657
+	s5 -= s12 * 683901
+	s12 = 0
+
+	carry[0] = s0 >> 21
+	s1 += carry[0]
+	s0 -= carry[0] << 21
+	carry[1] = s1 >> 21
+	s2 += carry[1]
+	s1 -= carry[1] << 21
+	carry[2] = s2 >> 21
+	s3 += carry[2]
+	s2 -= carry[2] << 21
+	carry[3] = s3 >> 21
+	s4 += carry[3]
+	s3 -= carry[3] << 21
+	carry[4] = s4 >> 21
+	s5 += carry[4]
+	s4 -= carry[4] << 21
+	carry[5] = s5 >> 21
+	s6 += carry[5]
+	s5 -= carry[5] << 21
+	carry[6] = s6 >> 21
+	s7 += carry[6]
+	s6 -= carry[6] << 21
+	carry[7] = s7 >> 21
+	s8 += carry[7]
+	s7 -= carry[7] << 21
+	carry[8] = s8 >> 21
+	s9 += carry[8]
+	s8 -= carry[8] << 21
+	carry[9] = s9 >> 21
+	s10 += carry[9]
+	s9 -= carry[9] << 21
+	carry[10] = s10 >> 21
+	s11 += carry[10]
+	s10 -= carry[10] << 21
+
+	s[0] = byte(s0 >> 0)
+	s[1] = byte(s0 >> 8)
+	s[2] = byte((s0 >> 16) | (s1 << 5))
+	s[3] = byte(s1 >> 3)
+	s[4] = byte(s1 >> 11)
+	s[5] = byte((s1 >> 19) | (s2 << 2))
+	s[6] = byte(s2 >> 6)
+	s[7] = byte((s2 >> 14) | (s3 << 7))
+	s[8] = byte(s3 >> 1)
+	s[9] = byte(s3 >> 9)
+	s[10] = byte((s3 >> 17) | (s4 << 4))
+	s[11] = byte(s4 >> 4)
+	s[12] = byte(s4 >> 12)
+	s[13] = byte((s4 >> 20) | (s5 << 1))
+	s[14] = byte(s5 >> 7)
+	s[15] = byte((s5 >> 15) | (s6 << 6))
+	s[16] = byte(s6 >> 2)
+	s[17] = byte(s6 >> 10)
+	s[18] = byte((s6 >> 18) | (s7 << 3))
+	s[19] = byte(s7 >> 5)
+	s[20] = byte(s7 >> 13)
+	s[21] = byte(s8 >> 0)
+	s[22] = byte(s8 >> 8)
+	s[23] = byte((s8 >> 16) | (s9 << 5))
+	s[24] = byte(s9 >> 3)
+	s[25] = byte(s9 >> 11)
+	s[26] = byte((s9 >> 19) | (s10 << 2))
+	s[27] = byte(s10 >> 6)
+	s[28] = byte((s10 >> 14) | (s11 << 7))
+	s[29] = byte(s11 >> 1)
+	s[30] = byte(s11 >> 9)
+	s[31] = byte(s11 >> 17)
+}
+
+// Input:
+//   s[0]+256*s[1]+...+256^63*s[63] = s
+//
+// Output:
+//   s[0]+256*s[1]+...+256^31*s[31] = s mod l
+//   where l = 2^252 + 27742317777372353535851937790883648493.
+func ScReduce(out *[32]byte, s *[64]byte) {
+	s0 := 2097151 & load3(s[:])
+	s1 := 2097151 & (load4(s[2:]) >> 5)
+	s2 := 2097151 & (load3(s[5:]) >> 2)
+	s3 := 2097151 & (load4(s[7:]) >> 7)
+	s4 := 2097151 & (load4(s[10:]) >> 4)
+	s5 := 2097151 & (load3(s[13:]) >> 1)
+	s6 := 2097151 & (load4(s[15:]) >> 6)
+	s7 := 2097151 & (load3(s[18:]) >> 3)
+	s8 := 2097151 & load3(s[21:])
+	s9 := 2097151 & (load4(s[23:]) >> 5)
+	s10 := 2097151 & (load3(s[26:]) >> 2)
+	s11 := 2097151 & (load4(s[28:]) >> 7)
+	s12 := 2097151 & (load4(s[31:]) >> 4)
+	s13 := 2097151 & (load3(s[34:]) >> 1)
+	s14 := 2097151 & (load4(s[36:]) >> 6)
+	s15 := 2097151 & (load3(s[39:]) >> 3)
+	s16 := 2097151 & load3(s[42:])
+	s17 := 2097151 & (load4(s[44:]) >> 5)
+	s18 := 2097151 & (load3(s[47:]) >> 2)
+	s19 := 2097151 & (load4(s[49:]) >> 7)
+	s20 := 2097151 & (load4(s[52:]) >> 4)
+	s21 := 2097151 & (load3(s[55:]) >> 1)
+	s22 := 2097151 & (load4(s[57:]) >> 6)
+	s23 := (load4(s[60:]) >> 3)
+
+	s11 += s23 * 666643
+	s12 += s23 * 470296
+	s13 += s23 * 654183
+	s14 -= s23 * 997805
+	s15 += s23 * 136657
+	s16 -= s23 * 683901
+	s23 = 0
+
+	s10 += s22 * 666643
+	s11 += s22 * 470296
+	s12 += s22 * 654183
+	s13 -= s22 * 997805
+	s14 += s22 * 136657
+	s15 -= s22 * 683901
+	s22 = 0
+
+	s9 += s21 * 666643
+	s10 += s21 * 470296
+	s11 += s21 * 654183
+	s12 -= s21 * 997805
+	s13 += s21 * 136657
+	s14 -= s21 * 683901
+	s21 = 0
+
+	s8 += s20 * 666643
+	s9 += s20 * 470296
+	s10 += s20 * 654183
+	s11 -= s20 * 997805
+	s12 += s20 * 136657
+	s13 -= s20 * 683901
+	s20 = 0
+
+	s7 += s19 * 666643
+	s8 += s19 * 470296
+	s9 += s19 * 654183
+	s10 -= s19 * 997805
+	s11 += s19 * 136657
+	s12 -= s19 * 683901
+	s19 = 0
+
+	s6 += s18 * 666643
+	s7 += s18 * 470296
+	s8 += s18 * 654183
+	s9 -= s18 * 997805
+	s10 += s18 * 136657
+	s11 -= s18 * 683901
+	s18 = 0
+
+	var carry [17]int64
+
+	carry[6] = (s6 + (1 << 20)) >> 21
+	s7 += carry[6]
+	s6 -= carry[6] << 21
+	carry[8] = (s8 + (1 << 20)) >> 21
+	s9 += carry[8]
+	s8 -= carry[8] << 21
+	carry[10] = (s10 + (1 << 20)) >> 21
+	s11 += carry[10]
+	s10 -= carry[10] << 21
+	carry[12] = (s12 + (1 << 20)) >> 21
+	s13 += carry[12]
+	s12 -= carry[12] << 21
+	carry[14] = (s14 + (1 << 20)) >> 21
+	s15 += carry[14]
+	s14 -= carry[14] << 21
+	carry[16] = (s16 + (1 << 20)) >> 21
+	s17 += carry[16]
+	s16 -= carry[16] << 21
+
+	carry[7] = (s7 + (1 << 20)) >> 21
+	s8 += carry[7]
+	s7 -= carry[7] << 21
+	carry[9] = (s9 + (1 << 20)) >> 21
+	s10 += carry[9]
+	s9 -= carry[9] << 21
+	carry[11] = (s11 + (1 << 20)) >> 21
+	s12 += carry[11]
+	s11 -= carry[11] << 21
+	carry[13] = (s13 + (1 << 20)) >> 21
+	s14 += carry[13]
+	s13 -= carry[13] << 21
+	carry[15] = (s15 + (1 << 20)) >> 21
+	s16 += carry[15]
+	s15 -= carry[15] << 21
+
+	s5 += s17 * 666643
+	s6 += s17 * 470296
+	s7 += s17 * 654183
+	s8 -= s17 * 997805
+	s9 += s17 * 136657
+	s10 -= s17 * 683901
+	s17 = 0
+
+	s4 += s16 * 666643
+	s5 += s16 * 470296
+	s6 += s16 * 654183
+	s7 -= s16 * 997805
+	s8 += s16 * 136657
+	s9 -= s16 * 683901
+	s16 = 0
+
+	s3 += s15 * 666643
+	s4 += s15 * 470296
+	s5 += s15 * 654183
+	s6 -= s15 * 997805
+	s7 += s15 * 136657
+	s8 -= s15 * 683901
+	s15 = 0
+
+	s2 += s14 * 666643
+	s3 += s14 * 470296
+	s4 += s14 * 654183
+	s5 -= s14 * 997805
+	s6 += s14 * 136657
+	s7 -= s14 * 683901
+	s14 = 0
+
+	s1 += s13 * 666643
+	s2 += s13 * 470296
+	s3 += s13 * 654183
+	s4 -= s13 * 997805
+	s5 += s13 * 136657
+	s6 -= s13 * 683901
+	s13 = 0
+
+	s0 += s12 * 666643
+	s1 += s12 * 470296
+	s2 += s12 * 654183
+	s3 -= s12 * 997805
+	s4 += s12 * 136657
+	s5 -= s12 * 683901
+	s12 = 0
+
+	carry[0] = (s0 + (1 << 20)) >> 21
+	s1 += carry[0]
+	s0 -= carry[0] << 21
+	carry[2] = (s2 + (1 << 20)) >> 21
+	s3 += carry[2]
+	s2 -= carry[2] << 21
+	carry[4] = (s4 + (1 << 20)) >> 21
+	s5 += carry[4]
+	s4 -= carry[4] << 21
+	carry[6] = (s6 + (1 << 20)) >> 21
+	s7 += carry[6]
+	s6 -= carry[6] << 21
+	carry[8] = (s8 + (1 << 20)) >> 21
+	s9 += carry[8]
+	s8 -= carry[8] << 21
+	carry[10] = (s10 + (1 << 20)) >> 21
+	s11 += carry[10]
+	s10 -= carry[10] << 21
+
+	carry[1] = (s1 + (1 << 20)) >> 21
+	s2 += carry[1]
+	s1 -= carry[1] << 21
+	carry[3] = (s3 + (1 << 20)) >> 21
+	s4 += carry[3]
+	s3 -= carry[3] << 21
+	carry[5] = (s5 + (1 << 20)) >> 21
+	s6 += carry[5]
+	s5 -= carry[5] << 21
+	carry[7] = (s7 + (1 << 20)) >> 21
+	s8 += carry[7]
+	s7 -= carry[7] << 21
+	carry[9] = (s9 + (1 << 20)) >> 21
+	s10 += carry[9]
+	s9 -= carry[9] << 21
+	carry[11] = (s11 + (1 << 20)) >> 21
+	s12 += carry[11]
+	s11 -= carry[11] << 21
+
+	s0 += s12 * 666643
+	s1 += s12 * 470296
+	s2 += s12 * 654183
+	s3 -= s12 * 997805
+	s4 += s12 * 136657
+	s5 -= s12 * 683901
+	s12 = 0
+
+	carry[0] = s0 >> 21
+	s1 += carry[0]
+	s0 -= carry[0] << 21
+	carry[1] = s1 >> 21
+	s2 += carry[1]
+	s1 -= carry[1] << 21
+	carry[2] = s2 >> 21
+	s3 += carry[2]
+	s2 -= carry[2] << 21
+	carry[3] = s3 >> 21
+	s4 += carry[3]
+	s3 -= carry[3] << 21
+	carry[4] = s4 >> 21
+	s5 += carry[4]
+	s4 -= carry[4] << 21
+	carry[5] = s5 >> 21
+	s6 += carry[5]
+	s5 -= carry[5] << 21
+	carry[6] = s6 >> 21
+	s7 += carry[6]
+	s6 -= carry[6] << 21
+	carry[7] = s7 >> 21
+	s8 += carry[7]
+	s7 -= carry[7] << 21
+	carry[8] = s8 >> 21
+	s9 += carry[8]
+	s8 -= carry[8] << 21
+	carry[9] = s9 >> 21
+	s10 += carry[9]
+	s9 -= carry[9] << 21
+	carry[10] = s10 >> 21
+	s11 += carry[10]
+	s10 -= carry[10] << 21
+	carry[11] = s11 >> 21
+	s12 += carry[11]
+	s11 -= carry[11] << 21
+
+	s0 += s12 * 666643
+	s1 += s12 * 470296
+	s2 += s12 * 654183
+	s3 -= s12 * 997805
+	s4 += s12 * 136657
+	s5 -= s12 * 683901
+	s12 = 0
+
+	carry[0] = s0 >> 21
+	s1 += carry[0]
+	s0 -= carry[0] << 21
+	carry[1] = s1 >> 21
+	s2 += carry[1]
+	s1 -= carry[1] << 21
+	carry[2] = s2 >> 21
+	s3 += carry[2]
+	s2 -= carry[2] << 21
+	carry[3] = s3 >> 21
+	s4 += carry[3]
+	s3 -= carry[3] << 21
+	carry[4] = s4 >> 21
+	s5 += carry[4]
+	s4 -= carry[4] << 21
+	carry[5] = s5 >> 21
+	s6 += carry[5]
+	s5 -= carry[5] << 21
+	carry[6] = s6 >> 21
+	s7 += carry[6]
+	s6 -= carry[6] << 21
+	carry[7] = s7 >> 21
+	s8 += carry[7]
+	s7 -= carry[7] << 21
+	carry[8] = s8 >> 21
+	s9 += carry[8]
+	s8 -= carry[8] << 21
+	carry[9] = s9 >> 21
+	s10 += carry[9]
+	s9 -= carry[9] << 21
+	carry[10] = s10 >> 21
+	s11 += carry[10]
+	s10 -= carry[10] << 21
+
+	out[0] = byte(s0 >> 0)
+	out[1] = byte(s0 >> 8)
+	out[2] = byte((s0 >> 16) | (s1 << 5))
+	out[3] = byte(s1 >> 3)
+	out[4] = byte(s1 >> 11)
+	out[5] = byte((s1 >> 19) | (s2 << 2))
+	out[6] = byte(s2 >> 6)
+	out[7] = byte((s2 >> 14) | (s3 << 7))
+	out[8] = byte(s3 >> 1)
+	out[9] = byte(s3 >> 9)
+	out[10] = byte((s3 >> 17) | (s4 << 4))
+	out[11] = byte(s4 >> 4)
+	out[12] = byte(s4 >> 12)
+	out[13] = byte((s4 >> 20) | (s5 << 1))
+	out[14] = byte(s5 >> 7)
+	out[15] = byte((s5 >> 15) | (s6 << 6))
+	out[16] = byte(s6 >> 2)
+	out[17] = byte(s6 >> 10)
+	out[18] = byte((s6 >> 18) | (s7 << 3))
+	out[19] = byte(s7 >> 5)
+	out[20] = byte(s7 >> 13)
+	out[21] = byte(s8 >> 0)
+	out[22] = byte(s8 >> 8)
+	out[23] = byte((s8 >> 16) | (s9 << 5))
+	out[24] = byte(s9 >> 3)
+	out[25] = byte(s9 >> 11)
+	out[26] = byte((s9 >> 19) | (s10 << 2))
+	out[27] = byte(s10 >> 6)
+	out[28] = byte((s10 >> 14) | (s11 << 7))
+	out[29] = byte(s11 >> 1)
+	out[30] = byte(s11 >> 9)
+	out[31] = byte(s11 >> 17)
+}
+
+// order is the order of Curve25519 in little-endian form.
+var order = [4]uint64{0x5812631a5cf5d3ed, 0x14def9dea2f79cd6, 0, 0x1000000000000000}
+
+// ScMinimal returns true if the given scalar is less than the order of the
+// curve.
+func ScMinimal(scalar *[32]byte) bool {
+	for i := 3; ; i-- {
+		v := binary.LittleEndian.Uint64(scalar[i*8:])
+		if v > order[i] {
+			return false
+		} else if v < order[i] {
+			break
+		} else if i == 0 {
+			return false
+		}
+	}
+
+	return true
+}
diff --git a/vendor/golang.org/x/crypto/pbkdf2/pbkdf2.go b/vendor/golang.org/x/crypto/pbkdf2/pbkdf2.go
new file mode 100644
index 000000000..593f65300
--- /dev/null
+++ b/vendor/golang.org/x/crypto/pbkdf2/pbkdf2.go
@@ -0,0 +1,77 @@
+// Copyright 2012 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+/*
+Package pbkdf2 implements the key derivation function PBKDF2 as defined in RFC
+2898 / PKCS #5 v2.0.
+
+A key derivation function is useful when encrypting data based on a password
+or any other not-fully-random data. It uses a pseudorandom function to derive
+a secure encryption key based on the password.
+
+While v2.0 of the standard defines only one pseudorandom function to use,
+HMAC-SHA1, the drafted v2.1 specification allows use of all five FIPS Approved
+Hash Functions SHA-1, SHA-224, SHA-256, SHA-384 and SHA-512 for HMAC. To
+choose, you can pass the `New` functions from the different SHA packages to
+pbkdf2.Key.
+*/
+package pbkdf2 // import "golang.org/x/crypto/pbkdf2"
+
+import (
+	"crypto/hmac"
+	"hash"
+)
+
+// Key derives a key from the password, salt and iteration count, returning a
+// []byte of length keylen that can be used as cryptographic key. The key is
+// derived based on the method described as PBKDF2 with the HMAC variant using
+// the supplied hash function.
+//
+// For example, to use a HMAC-SHA-1 based PBKDF2 key derivation function, you
+// can get a derived key for e.g. AES-256 (which needs a 32-byte key) by
+// doing:
+//
+// 	dk := pbkdf2.Key([]byte("some password"), salt, 4096, 32, sha1.New)
+//
+// Remember to get a good random salt. At least 8 bytes is recommended by the
+// RFC.
+//
+// Using a higher iteration count will increase the cost of an exhaustive
+// search but will also make derivation proportionally slower.
+func Key(password, salt []byte, iter, keyLen int, h func() hash.Hash) []byte {
+	prf := hmac.New(h, password)
+	hashLen := prf.Size()
+	numBlocks := (keyLen + hashLen - 1) / hashLen
+
+	var buf [4]byte
+	dk := make([]byte, 0, numBlocks*hashLen)
+	U := make([]byte, hashLen)
+	for block := 1; block <= numBlocks; block++ {
+		// N.B.: || means concatenation, ^ means XOR
+		// for each block T_i = U_1 ^ U_2 ^ ... ^ U_iter
+		// U_1 = PRF(password, salt || uint(i))
+		prf.Reset()
+		prf.Write(salt)
+		buf[0] = byte(block >> 24)
+		buf[1] = byte(block >> 16)
+		buf[2] = byte(block >> 8)
+		buf[3] = byte(block)
+		prf.Write(buf[:4])
+		dk = prf.Sum(dk)
+		T := dk[len(dk)-hashLen:]
+		copy(U, T)
+
+		// U_n = PRF(password, U_(n-1))
+		for n := 2; n <= iter; n++ {
+			prf.Reset()
+			prf.Write(U)
+			U = U[:0]
+			U = prf.Sum(U)
+			for x := range U {
+				T[x] ^= U[x]
+			}
+		}
+	}
+	return dk[:keyLen]
+}
diff --git a/vendor/golang.org/x/mod/module/module.go b/vendor/golang.org/x/mod/module/module.go
index 6cd37280a..0e0301483 100644
--- a/vendor/golang.org/x/mod/module/module.go
+++ b/vendor/golang.org/x/mod/module/module.go
@@ -97,6 +97,7 @@ package module
 
 import (
 	"fmt"
+	"path"
 	"sort"
 	"strings"
 	"unicode"
@@ -223,14 +224,18 @@ func firstPathOK(r rune) bool {
 		'a' <= r && r <= 'z'
 }
 
-// pathOK reports whether r can appear in an import path element.
-// Paths can be ASCII letters, ASCII digits, and limited ASCII punctuation: + - . _ and ~.
-// This matches what "go get" has historically recognized in import paths.
+// modPathOK reports whether r can appear in a module path element.
+// Paths can be ASCII letters, ASCII digits, and limited ASCII punctuation: - . _ and ~.
+//
+// This matches what "go get" has historically recognized in import paths,
+// and avoids confusing sequences like '%20' or '+' that would change meaning
+// if used in a URL.
+//
 // TODO(rsc): We would like to allow Unicode letters, but that requires additional
 // care in the safe encoding (see "escaped paths" above).
-func pathOK(r rune) bool {
+func modPathOK(r rune) bool {
 	if r < utf8.RuneSelf {
-		return r == '+' || r == '-' || r == '.' || r == '_' || r == '~' ||
+		return r == '-' || r == '.' || r == '_' || r == '~' ||
 			'0' <= r && r <= '9' ||
 			'A' <= r && r <= 'Z' ||
 			'a' <= r && r <= 'z'
@@ -238,6 +243,17 @@ func pathOK(r rune) bool {
 	return false
 }
 
+// modPathOK reports whether r can appear in a package import path element.
+//
+// Import paths are intermediate between module paths and file paths: we allow
+// disallow characters that would be confusing or ambiguous as arguments to
+// 'go get' (such as '@' and ' ' ), but allow certain characters that are
+// otherwise-unambiguous on the command line and historically used for some
+// binary names (such as '++' as a suffix for compiler binaries and wrappers).
+func importPathOK(r rune) bool {
+	return modPathOK(r) || r == '+'
+}
+
 // fileNameOK reports whether r can appear in a file name.
 // For now we allow all Unicode letters but otherwise limit to pathOK plus a few more punctuation characters.
 // If we expand the set of allowed characters here, we have to
@@ -269,7 +285,7 @@ func fileNameOK(r rune) bool {
 
 // CheckPath checks that a module path is valid.
 // A valid module path is a valid import path, as checked by CheckImportPath,
-// with two additional constraints.
+// with three additional constraints.
 // First, the leading path element (up to the first slash, if any),
 // by convention a domain name, must contain only lower-case ASCII letters,
 // ASCII digits, dots (U+002E), and dashes (U+002D);
@@ -279,8 +295,9 @@ func fileNameOK(r rune) bool {
 // and must not contain any dots. For paths beginning with "gopkg.in/",
 // this second requirement is replaced by a requirement that the path
 // follow the gopkg.in server's conventions.
+// Third, no path element may begin with a dot.
 func CheckPath(path string) error {
-	if err := checkPath(path, false); err != nil {
+	if err := checkPath(path, modulePath); err != nil {
 		return fmt.Errorf("malformed module path %q: %v", path, err)
 	}
 	i := strings.Index(path, "/")
@@ -313,29 +330,41 @@ func CheckPath(path string) error {
 // separated by slashes (U+002F). (It must not begin with nor end in a slash.)
 //
 // A valid path element is a non-empty string made up of
-// ASCII letters, ASCII digits, and limited ASCII punctuation: + - . _ and ~.
-// It must not begin or end with a dot (U+002E), nor contain two dots in a row.
+// ASCII letters, ASCII digits, and limited ASCII punctuation: - . _ and ~.
+// It must not end with a dot (U+002E), nor contain two dots in a row.
 //
 // The element prefix up to the first dot must not be a reserved file name
-// on Windows, regardless of case (CON, com1, NuL, and so on).
+// on Windows, regardless of case (CON, com1, NuL, and so on). The element
+// must not have a suffix of a tilde followed by one or more ASCII digits
+// (to exclude paths elements that look like Windows short-names).
 //
 // CheckImportPath may be less restrictive in the future, but see the
 // top-level package documentation for additional information about
 // subtleties of Unicode.
 func CheckImportPath(path string) error {
-	if err := checkPath(path, false); err != nil {
+	if err := checkPath(path, importPath); err != nil {
 		return fmt.Errorf("malformed import path %q: %v", path, err)
 	}
 	return nil
 }
 
+// pathKind indicates what kind of path we're checking. Module paths,
+// import paths, and file paths have different restrictions.
+type pathKind int
+
+const (
+	modulePath pathKind = iota
+	importPath
+	filePath
+)
+
 // checkPath checks that a general path is valid.
 // It returns an error describing why but not mentioning path.
 // Because these checks apply to both module paths and import paths,
 // the caller is expected to add the "malformed ___ path %q: " prefix.
 // fileName indicates whether the final element of the path is a file name
 // (as opposed to a directory name).
-func checkPath(path string, fileName bool) error {
+func checkPath(path string, kind pathKind) error {
 	if !utf8.ValidString(path) {
 		return fmt.Errorf("invalid UTF-8")
 	}
@@ -354,39 +383,45 @@ func checkPath(path string, fileName bool) error {
 	elemStart := 0
 	for i, r := range path {
 		if r == '/' {
-			if err := checkElem(path[elemStart:i], fileName); err != nil {
+			if err := checkElem(path[elemStart:i], kind); err != nil {
 				return err
 			}
 			elemStart = i + 1
 		}
 	}
-	if err := checkElem(path[elemStart:], fileName); err != nil {
+	if err := checkElem(path[elemStart:], kind); err != nil {
 		return err
 	}
 	return nil
 }
 
 // checkElem checks whether an individual path element is valid.
-// fileName indicates whether the element is a file name (not a directory name).
-func checkElem(elem string, fileName bool) error {
+func checkElem(elem string, kind pathKind) error {
 	if elem == "" {
 		return fmt.Errorf("empty path element")
 	}
 	if strings.Count(elem, ".") == len(elem) {
 		return fmt.Errorf("invalid path element %q", elem)
 	}
-	if elem[0] == '.' && !fileName {
+	if elem[0] == '.' && kind == modulePath {
 		return fmt.Errorf("leading dot in path element")
 	}
 	if elem[len(elem)-1] == '.' {
 		return fmt.Errorf("trailing dot in path element")
 	}
-	charOK := pathOK
-	if fileName {
-		charOK = fileNameOK
-	}
 	for _, r := range elem {
-		if !charOK(r) {
+		ok := false
+		switch kind {
+		case modulePath:
+			ok = modPathOK(r)
+		case importPath:
+			ok = importPathOK(r)
+		case filePath:
+			ok = fileNameOK(r)
+		default:
+			panic(fmt.Sprintf("internal error: invalid kind %v", kind))
+		}
+		if !ok {
 			return fmt.Errorf("invalid char %q", r)
 		}
 	}
@@ -402,6 +437,29 @@ func checkElem(elem string, fileName bool) error {
 			return fmt.Errorf("%q disallowed as path element component on Windows", short)
 		}
 	}
+
+	if kind == filePath {
+		// don't check for Windows short-names in file names. They're
+		// only an issue for import paths.
+		return nil
+	}
+
+	// Reject path components that look like Windows short-names.
+	// Those usually end in a tilde followed by one or more ASCII digits.
+	if tilde := strings.LastIndexByte(short, '~'); tilde >= 0 && tilde < len(short)-1 {
+		suffix := short[tilde+1:]
+		suffixIsDigits := true
+		for _, r := range suffix {
+			if r < '0' || r > '9' {
+				suffixIsDigits = false
+				break
+			}
+		}
+		if suffixIsDigits {
+			return fmt.Errorf("trailing tilde and digits in path element")
+		}
+	}
+
 	return nil
 }
 
@@ -418,7 +476,7 @@ func checkElem(elem string, fileName bool) error {
 // top-level package documentation for additional information about
 // subtleties of Unicode.
 func CheckFilePath(path string) error {
-	if err := checkPath(path, true); err != nil {
+	if err := checkPath(path, filePath); err != nil {
 		return fmt.Errorf("malformed file path %q: %v", path, err)
 	}
 	return nil
@@ -621,7 +679,7 @@ func EscapePath(path string) (escaped string, err error) {
 // Versions are allowed to be in non-semver form but must be valid file names
 // and not contain exclamation marks.
 func EscapeVersion(v string) (escaped string, err error) {
-	if err := checkElem(v, true); err != nil || strings.Contains(v, "!") {
+	if err := checkElem(v, filePath); err != nil || strings.Contains(v, "!") {
 		return "", &InvalidVersionError{
 			Version: v,
 			Err:     fmt.Errorf("disallowed version string"),
@@ -680,7 +738,7 @@ func UnescapeVersion(escaped string) (v string, err error) {
 	if !ok {
 		return "", fmt.Errorf("invalid escaped version %q", escaped)
 	}
-	if err := checkElem(v, true); err != nil {
+	if err := checkElem(v, filePath); err != nil {
 		return "", fmt.Errorf("invalid escaped version %q: %v", v, err)
 	}
 	return v, nil
@@ -716,3 +774,49 @@ func unescapeString(escaped string) (string, bool) {
 	}
 	return string(buf), true
 }
+
+// MatchPrefixPatterns reports whether any path prefix of target matches one of
+// the glob patterns (as defined by path.Match) in the comma-separated globs
+// list. This implements the algorithm used when matching a module path to the
+// GOPRIVATE environment variable, as described by 'go help module-private'.
+//
+// It ignores any empty or malformed patterns in the list.
+func MatchPrefixPatterns(globs, target string) bool {
+	for globs != "" {
+		// Extract next non-empty glob in comma-separated list.
+		var glob string
+		if i := strings.Index(globs, ","); i >= 0 {
+			glob, globs = globs[:i], globs[i+1:]
+		} else {
+			glob, globs = globs, ""
+		}
+		if glob == "" {
+			continue
+		}
+
+		// A glob with N+1 path elements (N slashes) needs to be matched
+		// against the first N+1 path elements of target,
+		// which end just before the N+1'th slash.
+		n := strings.Count(glob, "/")
+		prefix := target
+		// Walk target, counting slashes, truncating at the N+1'th slash.
+		for i := 0; i < len(target); i++ {
+			if target[i] == '/' {
+				if n == 0 {
+					prefix = target[:i]
+					break
+				}
+				n--
+			}
+		}
+		if n > 0 {
+			// Not enough prefix elements.
+			continue
+		}
+		matched, _ := path.Match(glob, prefix)
+		if matched {
+			return true
+		}
+	}
+	return false
+}
diff --git a/vendor/golang.org/x/mod/semver/semver.go b/vendor/golang.org/x/mod/semver/semver.go
index 2988e3cf9..4338f3517 100644
--- a/vendor/golang.org/x/mod/semver/semver.go
+++ b/vendor/golang.org/x/mod/semver/semver.go
@@ -138,6 +138,9 @@ func Compare(v, w string) int {
 
 // Max canonicalizes its arguments and then returns the version string
 // that compares greater.
+//
+// Deprecated: use Compare instead. In most cases, returning a canonicalized
+// version is not expected or desired.
 func Max(v, w string) string {
 	v = Canonical(v)
 	w = Canonical(w)
diff --git a/vendor/golang.org/x/mod/sumdb/dirhash/hash.go b/vendor/golang.org/x/mod/sumdb/dirhash/hash.go
new file mode 100644
index 000000000..ef5df6f5b
--- /dev/null
+++ b/vendor/golang.org/x/mod/sumdb/dirhash/hash.go
@@ -0,0 +1,132 @@
+// Copyright 2018 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Package dirhash defines hashes over directory trees.
+// These hashes are recorded in go.sum files and in the Go checksum database,
+// to allow verifying that a newly-downloaded module has the expected content.
+package dirhash
+
+import (
+	"archive/zip"
+	"crypto/sha256"
+	"encoding/base64"
+	"errors"
+	"fmt"
+	"io"
+	"os"
+	"path/filepath"
+	"sort"
+	"strings"
+)
+
+// DefaultHash is the default hash function used in new go.sum entries.
+var DefaultHash Hash = Hash1
+
+// A Hash is a directory hash function.
+// It accepts a list of files along with a function that opens the content of each file.
+// It opens, reads, hashes, and closes each file and returns the overall directory hash.
+type Hash func(files []string, open func(string) (io.ReadCloser, error)) (string, error)
+
+// Hash1 is the "h1:" directory hash function, using SHA-256.
+//
+// Hash1 is "h1:" followed by the base64-encoded SHA-256 hash of a summary
+// prepared as if by the Unix command:
+//
+//	find . -type f | sort | sha256sum
+//
+// More precisely, the hashed summary contains a single line for each file in the list,
+// ordered by sort.Strings applied to the file names, where each line consists of
+// the hexadecimal SHA-256 hash of the file content,
+// two spaces (U+0020), the file name, and a newline (U+000A).
+//
+// File names with newlines (U+000A) are disallowed.
+func Hash1(files []string, open func(string) (io.ReadCloser, error)) (string, error) {
+	h := sha256.New()
+	files = append([]string(nil), files...)
+	sort.Strings(files)
+	for _, file := range files {
+		if strings.Contains(file, "\n") {
+			return "", errors.New("dirhash: filenames with newlines are not supported")
+		}
+		r, err := open(file)
+		if err != nil {
+			return "", err
+		}
+		hf := sha256.New()
+		_, err = io.Copy(hf, r)
+		r.Close()
+		if err != nil {
+			return "", err
+		}
+		fmt.Fprintf(h, "%x  %s\n", hf.Sum(nil), file)
+	}
+	return "h1:" + base64.StdEncoding.EncodeToString(h.Sum(nil)), nil
+}
+
+// HashDir returns the hash of the local file system directory dir,
+// replacing the directory name itself with prefix in the file names
+// used in the hash function.
+func HashDir(dir, prefix string, hash Hash) (string, error) {
+	files, err := DirFiles(dir, prefix)
+	if err != nil {
+		return "", err
+	}
+	osOpen := func(name string) (io.ReadCloser, error) {
+		return os.Open(filepath.Join(dir, strings.TrimPrefix(name, prefix)))
+	}
+	return hash(files, osOpen)
+}
+
+// DirFiles returns the list of files in the tree rooted at dir,
+// replacing the directory name dir with prefix in each name.
+// The resulting names always use forward slashes.
+func DirFiles(dir, prefix string) ([]string, error) {
+	var files []string
+	dir = filepath.Clean(dir)
+	err := filepath.Walk(dir, func(file string, info os.FileInfo, err error) error {
+		if err != nil {
+			return err
+		}
+		if info.IsDir() {
+			return nil
+		}
+		rel := file
+		if dir != "." {
+			rel = file[len(dir)+1:]
+		}
+		f := filepath.Join(prefix, rel)
+		files = append(files, filepath.ToSlash(f))
+		return nil
+	})
+	if err != nil {
+		return nil, err
+	}
+	return files, nil
+}
+
+// HashZip returns the hash of the file content in the named zip file.
+// Only the file names and their contents are included in the hash:
+// the exact zip file format encoding, compression method,
+// per-file modification times, and other metadata are ignored.
+func HashZip(zipfile string, hash Hash) (string, error) {
+	z, err := zip.OpenReader(zipfile)
+	if err != nil {
+		return "", err
+	}
+	defer z.Close()
+	var files []string
+	zfiles := make(map[string]*zip.File)
+	for _, file := range z.File {
+		files = append(files, file.Name)
+		zfiles[file.Name] = file
+	}
+	zipOpen := func(name string) (io.ReadCloser, error) {
+		f := zfiles[name]
+		if f == nil {
+			return nil, fmt.Errorf("file %q not found in zip", name) // should never happen
+		}
+		return f.Open()
+	}
+	return hash(files, zipOpen)
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/.gitcookies.sh.enc b/vendor/gopkg.in/square/go-jose.v2/.gitcookies.sh.enc
new file mode 100644
index 000000000..730e569b0
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/.gitcookies.sh.enc
@@ -0,0 +1 @@
+'|Ê&{tÄU|gGê(ì�Cy=+¨œòcû:u:/pœ#~žü["±4¤!­nÙAªDK<ŠufÿhÅa¿Â:ºü¸¡´B/£Ø¤¹¤ò_�hÎÛSãT*wÌx¼¯�¹-ç|�àÀÓƒÑÄäóÌ㣗A$$â6£ÁâG)8nÏpûÆË¡3ÌšœoïÏvŽB–3¿­]xÝ“Ó2l§G•|qRÞ¯
ö2
5R–Ó×Ç$´ñ½Yè¡ÞÝ™l‘Ë«yAI"ÛŒ˜®íû¹¼kÄ|Kåþ[9ÆâÒå=°úÿŸñ|@S•3ó#æ�x?¾V„,¾‚SÆÝõœwPíogÒ6&V6	©D.dBŠ7
\ No newline at end of file
diff --git a/vendor/gopkg.in/square/go-jose.v2/.gitignore b/vendor/gopkg.in/square/go-jose.v2/.gitignore
new file mode 100644
index 000000000..5b4d73b68
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/.gitignore
@@ -0,0 +1,7 @@
+*~
+.*.swp
+*.out
+*.test
+*.pem
+*.cov
+jose-util/jose-util
diff --git a/vendor/gopkg.in/square/go-jose.v2/.travis.yml b/vendor/gopkg.in/square/go-jose.v2/.travis.yml
new file mode 100644
index 000000000..fc501ca9b
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/.travis.yml
@@ -0,0 +1,46 @@
+language: go
+
+sudo: false
+
+matrix:
+  fast_finish: true
+  allow_failures:
+    - go: tip
+
+go:
+- '1.7.x'
+- '1.8.x'
+- '1.9.x'
+- '1.10.x'
+- '1.11.x'
+
+go_import_path: gopkg.in/square/go-jose.v2
+
+before_script:
+- export PATH=$HOME/.local/bin:$PATH
+
+before_install:
+# Install encrypted gitcookies to get around bandwidth-limits
+# that is causing Travis-CI builds to fail. For more info, see
+# https://github.com/golang/go/issues/12933
+- openssl aes-256-cbc -K $encrypted_1528c3c2cafd_key -iv $encrypted_1528c3c2cafd_iv -in .gitcookies.sh.enc -out .gitcookies.sh -d || true
+- bash .gitcookies.sh || true
+- go get github.com/wadey/gocovmerge
+- go get github.com/mattn/goveralls
+- go get github.com/stretchr/testify/assert
+- go get golang.org/x/tools/cmd/cover || true
+- go get code.google.com/p/go.tools/cmd/cover || true
+- pip install cram --user
+
+script:
+- go test . -v -covermode=count -coverprofile=profile.cov
+- go test ./cipher -v -covermode=count -coverprofile=cipher/profile.cov
+- go test ./jwt -v -covermode=count -coverprofile=jwt/profile.cov
+- go test ./json -v # no coverage for forked encoding/json package
+- cd jose-util && go build && PATH=$PWD:$PATH cram -v jose-util.t
+- cd ..
+
+after_success:
+- gocovmerge *.cov */*.cov > merged.coverprofile
+- $HOME/gopath/bin/goveralls -coverprofile merged.coverprofile -service=travis-ci
+
diff --git a/vendor/gopkg.in/square/go-jose.v2/BUG-BOUNTY.md b/vendor/gopkg.in/square/go-jose.v2/BUG-BOUNTY.md
new file mode 100644
index 000000000..3305db0f6
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/BUG-BOUNTY.md
@@ -0,0 +1,10 @@
+Serious about security
+======================
+
+Square recognizes the important contributions the security research community
+can make. We therefore encourage reporting security issues with the code
+contained in this repository.
+
+If you believe you have discovered a security vulnerability, please follow the
+guidelines at <https://bugcrowd.com/squareopensource>.
+
diff --git a/vendor/gopkg.in/square/go-jose.v2/CONTRIBUTING.md b/vendor/gopkg.in/square/go-jose.v2/CONTRIBUTING.md
new file mode 100644
index 000000000..61b183651
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/CONTRIBUTING.md
@@ -0,0 +1,14 @@
+# Contributing
+
+If you would like to contribute code to go-jose you can do so through GitHub by
+forking the repository and sending a pull request.
+
+When submitting code, please make every effort to follow existing conventions
+and style in order to keep the code as readable as possible. Please also make
+sure all tests pass by running `go test`, and format your code with `go fmt`.
+We also recommend using `golint` and `errcheck`.
+
+Before your code can be accepted into the project you must also sign the
+[Individual Contributor License Agreement][1].
+
+ [1]: https://spreadsheets.google.com/spreadsheet/viewform?formkey=dDViT2xzUHAwRkI3X3k5Z0lQM091OGc6MQ&ndplr=1
diff --git a/vendor/gopkg.in/square/go-jose.v2/LICENSE b/vendor/gopkg.in/square/go-jose.v2/LICENSE
new file mode 100644
index 000000000..d64569567
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/LICENSE
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/vendor/gopkg.in/square/go-jose.v2/README.md b/vendor/gopkg.in/square/go-jose.v2/README.md
new file mode 100644
index 000000000..1791bfa8f
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/README.md
@@ -0,0 +1,118 @@
+# Go JOSE 
+
+[![godoc](http://img.shields.io/badge/godoc-version_1-blue.svg?style=flat)](https://godoc.org/gopkg.in/square/go-jose.v1)
+[![godoc](http://img.shields.io/badge/godoc-version_2-blue.svg?style=flat)](https://godoc.org/gopkg.in/square/go-jose.v2)
+[![license](http://img.shields.io/badge/license-apache_2.0-blue.svg?style=flat)](https://raw.githubusercontent.com/square/go-jose/master/LICENSE)
+[![build](https://travis-ci.org/square/go-jose.svg?branch=v2)](https://travis-ci.org/square/go-jose)
+[![coverage](https://coveralls.io/repos/github/square/go-jose/badge.svg?branch=v2)](https://coveralls.io/r/square/go-jose)
+
+Package jose aims to provide an implementation of the Javascript Object Signing
+and Encryption set of standards. This includes support for JSON Web Encryption,
+JSON Web Signature, and JSON Web Token standards.
+
+**Disclaimer**: This library contains encryption software that is subject to
+the U.S. Export Administration Regulations. You may not export, re-export,
+transfer or download this code or any part of it in violation of any United
+States law, directive or regulation. In particular this software may not be
+exported or re-exported in any form or on any media to Iran, North Sudan,
+Syria, Cuba, or North Korea, or to denied persons or entities mentioned on any
+US maintained blocked list.
+
+## Overview
+
+The implementation follows the
+[JSON Web Encryption](http://dx.doi.org/10.17487/RFC7516) (RFC 7516),
+[JSON Web Signature](http://dx.doi.org/10.17487/RFC7515) (RFC 7515), and
+[JSON Web Token](http://dx.doi.org/10.17487/RFC7519) (RFC 7519).
+Tables of supported algorithms are shown below. The library supports both
+the compact and full serialization formats, and has optional support for
+multiple recipients. It also comes with a small command-line utility
+([`jose-util`](https://github.com/square/go-jose/tree/v2/jose-util))
+for dealing with JOSE messages in a shell.
+
+**Note**: We use a forked version of the `encoding/json` package from the Go
+standard library which uses case-sensitive matching for member names (instead
+of [case-insensitive matching](https://www.ietf.org/mail-archive/web/json/current/msg03763.html)).
+This is to avoid differences in interpretation of messages between go-jose and
+libraries in other languages.
+
+### Versions
+
+We use [gopkg.in](https://gopkg.in) for versioning.
+
+[Version 2](https://gopkg.in/square/go-jose.v2)
+([branch](https://github.com/square/go-jose/tree/v2),
+[doc](https://godoc.org/gopkg.in/square/go-jose.v2)) is the current version:
+
+    import "gopkg.in/square/go-jose.v2"
+
+The old `v1` branch ([go-jose.v1](https://gopkg.in/square/go-jose.v1)) will
+still receive backported bug fixes and security fixes, but otherwise
+development is frozen. All new feature development takes place on the `v2`
+branch. Version 2 also contains additional sub-packages such as the
+[jwt](https://godoc.org/gopkg.in/square/go-jose.v2/jwt) implementation
+contributed by [@shaxbee](https://github.com/shaxbee).
+
+### Supported algorithms
+
+See below for a table of supported algorithms. Algorithm identifiers match
+the names in the [JSON Web Algorithms](http://dx.doi.org/10.17487/RFC7518)
+standard where possible. The Godoc reference has a list of constants.
+
+ Key encryption             | Algorithm identifier(s)
+ :------------------------- | :------------------------------
+ RSA-PKCS#1v1.5             | RSA1_5
+ RSA-OAEP                   | RSA-OAEP, RSA-OAEP-256
+ AES key wrap               | A128KW, A192KW, A256KW
+ AES-GCM key wrap           | A128GCMKW, A192GCMKW, A256GCMKW
+ ECDH-ES + AES key wrap     | ECDH-ES+A128KW, ECDH-ES+A192KW, ECDH-ES+A256KW
+ ECDH-ES (direct)           | ECDH-ES<sup>1</sup>
+ Direct encryption          | dir<sup>1</sup>
+
+<sup>1. Not supported in multi-recipient mode</sup>
+
+ Signing / MAC              | Algorithm identifier(s)
+ :------------------------- | :------------------------------
+ RSASSA-PKCS#1v1.5          | RS256, RS384, RS512
+ RSASSA-PSS                 | PS256, PS384, PS512
+ HMAC                       | HS256, HS384, HS512
+ ECDSA                      | ES256, ES384, ES512
+ Ed25519                    | EdDSA<sup>2</sup>
+
+<sup>2. Only available in version 2 of the package</sup>
+
+ Content encryption         | Algorithm identifier(s)
+ :------------------------- | :------------------------------
+ AES-CBC+HMAC               | A128CBC-HS256, A192CBC-HS384, A256CBC-HS512
+ AES-GCM                    | A128GCM, A192GCM, A256GCM 
+
+ Compression                | Algorithm identifiers(s)
+ :------------------------- | -------------------------------
+ DEFLATE (RFC 1951)         | DEF
+
+### Supported key types
+
+See below for a table of supported key types. These are understood by the
+library, and can be passed to corresponding functions such as `NewEncrypter` or
+`NewSigner`. Each of these keys can also be wrapped in a JWK if desired, which
+allows attaching a key id.
+
+ Algorithm(s)               | Corresponding types
+ :------------------------- | -------------------------------
+ RSA                        | *[rsa.PublicKey](http://golang.org/pkg/crypto/rsa/#PublicKey), *[rsa.PrivateKey](http://golang.org/pkg/crypto/rsa/#PrivateKey)
+ ECDH, ECDSA                | *[ecdsa.PublicKey](http://golang.org/pkg/crypto/ecdsa/#PublicKey), *[ecdsa.PrivateKey](http://golang.org/pkg/crypto/ecdsa/#PrivateKey)
+ EdDSA<sup>1</sup>          | [ed25519.PublicKey](https://godoc.org/golang.org/x/crypto/ed25519#PublicKey), [ed25519.PrivateKey](https://godoc.org/golang.org/x/crypto/ed25519#PrivateKey)
+ AES, HMAC                  | []byte
+
+<sup>1. Only available in version 2 of the package</sup>
+
+## Examples
+
+[![godoc](http://img.shields.io/badge/godoc-version_1-blue.svg?style=flat)](https://godoc.org/gopkg.in/square/go-jose.v1)
+[![godoc](http://img.shields.io/badge/godoc-version_2-blue.svg?style=flat)](https://godoc.org/gopkg.in/square/go-jose.v2)
+
+Examples can be found in the Godoc
+reference for this package. The
+[`jose-util`](https://github.com/square/go-jose/tree/v2/jose-util)
+subdirectory also contains a small command-line utility which might be useful
+as an example.
diff --git a/vendor/gopkg.in/square/go-jose.v2/asymmetric.go b/vendor/gopkg.in/square/go-jose.v2/asymmetric.go
new file mode 100644
index 000000000..67935561b
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/asymmetric.go
@@ -0,0 +1,592 @@
+/*-
+ * Copyright 2014 Square Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package jose
+
+import (
+	"crypto"
+	"crypto/aes"
+	"crypto/ecdsa"
+	"crypto/rand"
+	"crypto/rsa"
+	"crypto/sha1"
+	"crypto/sha256"
+	"errors"
+	"fmt"
+	"math/big"
+
+	"golang.org/x/crypto/ed25519"
+	"gopkg.in/square/go-jose.v2/cipher"
+	"gopkg.in/square/go-jose.v2/json"
+)
+
+// A generic RSA-based encrypter/verifier
+type rsaEncrypterVerifier struct {
+	publicKey *rsa.PublicKey
+}
+
+// A generic RSA-based decrypter/signer
+type rsaDecrypterSigner struct {
+	privateKey *rsa.PrivateKey
+}
+
+// A generic EC-based encrypter/verifier
+type ecEncrypterVerifier struct {
+	publicKey *ecdsa.PublicKey
+}
+
+type edEncrypterVerifier struct {
+	publicKey ed25519.PublicKey
+}
+
+// A key generator for ECDH-ES
+type ecKeyGenerator struct {
+	size      int
+	algID     string
+	publicKey *ecdsa.PublicKey
+}
+
+// A generic EC-based decrypter/signer
+type ecDecrypterSigner struct {
+	privateKey *ecdsa.PrivateKey
+}
+
+type edDecrypterSigner struct {
+	privateKey ed25519.PrivateKey
+}
+
+// newRSARecipient creates recipientKeyInfo based on the given key.
+func newRSARecipient(keyAlg KeyAlgorithm, publicKey *rsa.PublicKey) (recipientKeyInfo, error) {
+	// Verify that key management algorithm is supported by this encrypter
+	switch keyAlg {
+	case RSA1_5, RSA_OAEP, RSA_OAEP_256:
+	default:
+		return recipientKeyInfo{}, ErrUnsupportedAlgorithm
+	}
+
+	if publicKey == nil {
+		return recipientKeyInfo{}, errors.New("invalid public key")
+	}
+
+	return recipientKeyInfo{
+		keyAlg: keyAlg,
+		keyEncrypter: &rsaEncrypterVerifier{
+			publicKey: publicKey,
+		},
+	}, nil
+}
+
+// newRSASigner creates a recipientSigInfo based on the given key.
+func newRSASigner(sigAlg SignatureAlgorithm, privateKey *rsa.PrivateKey) (recipientSigInfo, error) {
+	// Verify that key management algorithm is supported by this encrypter
+	switch sigAlg {
+	case RS256, RS384, RS512, PS256, PS384, PS512:
+	default:
+		return recipientSigInfo{}, ErrUnsupportedAlgorithm
+	}
+
+	if privateKey == nil {
+		return recipientSigInfo{}, errors.New("invalid private key")
+	}
+
+	return recipientSigInfo{
+		sigAlg: sigAlg,
+		publicKey: staticPublicKey(&JSONWebKey{
+			Key: privateKey.Public(),
+		}),
+		signer: &rsaDecrypterSigner{
+			privateKey: privateKey,
+		},
+	}, nil
+}
+
+func newEd25519Signer(sigAlg SignatureAlgorithm, privateKey ed25519.PrivateKey) (recipientSigInfo, error) {
+	if sigAlg != EdDSA {
+		return recipientSigInfo{}, ErrUnsupportedAlgorithm
+	}
+
+	if privateKey == nil {
+		return recipientSigInfo{}, errors.New("invalid private key")
+	}
+	return recipientSigInfo{
+		sigAlg: sigAlg,
+		publicKey: staticPublicKey(&JSONWebKey{
+			Key: privateKey.Public(),
+		}),
+		signer: &edDecrypterSigner{
+			privateKey: privateKey,
+		},
+	}, nil
+}
+
+// newECDHRecipient creates recipientKeyInfo based on the given key.
+func newECDHRecipient(keyAlg KeyAlgorithm, publicKey *ecdsa.PublicKey) (recipientKeyInfo, error) {
+	// Verify that key management algorithm is supported by this encrypter
+	switch keyAlg {
+	case ECDH_ES, ECDH_ES_A128KW, ECDH_ES_A192KW, ECDH_ES_A256KW:
+	default:
+		return recipientKeyInfo{}, ErrUnsupportedAlgorithm
+	}
+
+	if publicKey == nil || !publicKey.Curve.IsOnCurve(publicKey.X, publicKey.Y) {
+		return recipientKeyInfo{}, errors.New("invalid public key")
+	}
+
+	return recipientKeyInfo{
+		keyAlg: keyAlg,
+		keyEncrypter: &ecEncrypterVerifier{
+			publicKey: publicKey,
+		},
+	}, nil
+}
+
+// newECDSASigner creates a recipientSigInfo based on the given key.
+func newECDSASigner(sigAlg SignatureAlgorithm, privateKey *ecdsa.PrivateKey) (recipientSigInfo, error) {
+	// Verify that key management algorithm is supported by this encrypter
+	switch sigAlg {
+	case ES256, ES384, ES512:
+	default:
+		return recipientSigInfo{}, ErrUnsupportedAlgorithm
+	}
+
+	if privateKey == nil {
+		return recipientSigInfo{}, errors.New("invalid private key")
+	}
+
+	return recipientSigInfo{
+		sigAlg: sigAlg,
+		publicKey: staticPublicKey(&JSONWebKey{
+			Key: privateKey.Public(),
+		}),
+		signer: &ecDecrypterSigner{
+			privateKey: privateKey,
+		},
+	}, nil
+}
+
+// Encrypt the given payload and update the object.
+func (ctx rsaEncrypterVerifier) encryptKey(cek []byte, alg KeyAlgorithm) (recipientInfo, error) {
+	encryptedKey, err := ctx.encrypt(cek, alg)
+	if err != nil {
+		return recipientInfo{}, err
+	}
+
+	return recipientInfo{
+		encryptedKey: encryptedKey,
+		header:       &rawHeader{},
+	}, nil
+}
+
+// Encrypt the given payload. Based on the key encryption algorithm,
+// this will either use RSA-PKCS1v1.5 or RSA-OAEP (with SHA-1 or SHA-256).
+func (ctx rsaEncrypterVerifier) encrypt(cek []byte, alg KeyAlgorithm) ([]byte, error) {
+	switch alg {
+	case RSA1_5:
+		return rsa.EncryptPKCS1v15(RandReader, ctx.publicKey, cek)
+	case RSA_OAEP:
+		return rsa.EncryptOAEP(sha1.New(), RandReader, ctx.publicKey, cek, []byte{})
+	case RSA_OAEP_256:
+		return rsa.EncryptOAEP(sha256.New(), RandReader, ctx.publicKey, cek, []byte{})
+	}
+
+	return nil, ErrUnsupportedAlgorithm
+}
+
+// Decrypt the given payload and return the content encryption key.
+func (ctx rsaDecrypterSigner) decryptKey(headers rawHeader, recipient *recipientInfo, generator keyGenerator) ([]byte, error) {
+	return ctx.decrypt(recipient.encryptedKey, headers.getAlgorithm(), generator)
+}
+
+// Decrypt the given payload. Based on the key encryption algorithm,
+// this will either use RSA-PKCS1v1.5 or RSA-OAEP (with SHA-1 or SHA-256).
+func (ctx rsaDecrypterSigner) decrypt(jek []byte, alg KeyAlgorithm, generator keyGenerator) ([]byte, error) {
+	// Note: The random reader on decrypt operations is only used for blinding,
+	// so stubbing is meanlingless (hence the direct use of rand.Reader).
+	switch alg {
+	case RSA1_5:
+		defer func() {
+			// DecryptPKCS1v15SessionKey sometimes panics on an invalid payload
+			// because of an index out of bounds error, which we want to ignore.
+			// This has been fixed in Go 1.3.1 (released 2014/08/13), the recover()
+			// only exists for preventing crashes with unpatched versions.
+			// See: https://groups.google.com/forum/#!topic/golang-dev/7ihX6Y6kx9k
+			// See: https://code.google.com/p/go/source/detail?r=58ee390ff31602edb66af41ed10901ec95904d33
+			_ = recover()
+		}()
+
+		// Perform some input validation.
+		keyBytes := ctx.privateKey.PublicKey.N.BitLen() / 8
+		if keyBytes != len(jek) {
+			// Input size is incorrect, the encrypted payload should always match
+			// the size of the public modulus (e.g. using a 2048 bit key will
+			// produce 256 bytes of output). Reject this since it's invalid input.
+			return nil, ErrCryptoFailure
+		}
+
+		cek, _, err := generator.genKey()
+		if err != nil {
+			return nil, ErrCryptoFailure
+		}
+
+		// When decrypting an RSA-PKCS1v1.5 payload, we must take precautions to
+		// prevent chosen-ciphertext attacks as described in RFC 3218, "Preventing
+		// the Million Message Attack on Cryptographic Message Syntax". We are
+		// therefore deliberately ignoring errors here.
+		_ = rsa.DecryptPKCS1v15SessionKey(rand.Reader, ctx.privateKey, jek, cek)
+
+		return cek, nil
+	case RSA_OAEP:
+		// Use rand.Reader for RSA blinding
+		return rsa.DecryptOAEP(sha1.New(), rand.Reader, ctx.privateKey, jek, []byte{})
+	case RSA_OAEP_256:
+		// Use rand.Reader for RSA blinding
+		return rsa.DecryptOAEP(sha256.New(), rand.Reader, ctx.privateKey, jek, []byte{})
+	}
+
+	return nil, ErrUnsupportedAlgorithm
+}
+
+// Sign the given payload
+func (ctx rsaDecrypterSigner) signPayload(payload []byte, alg SignatureAlgorithm) (Signature, error) {
+	var hash crypto.Hash
+
+	switch alg {
+	case RS256, PS256:
+		hash = crypto.SHA256
+	case RS384, PS384:
+		hash = crypto.SHA384
+	case RS512, PS512:
+		hash = crypto.SHA512
+	default:
+		return Signature{}, ErrUnsupportedAlgorithm
+	}
+
+	hasher := hash.New()
+
+	// According to documentation, Write() on hash never fails
+	_, _ = hasher.Write(payload)
+	hashed := hasher.Sum(nil)
+
+	var out []byte
+	var err error
+
+	switch alg {
+	case RS256, RS384, RS512:
+		out, err = rsa.SignPKCS1v15(RandReader, ctx.privateKey, hash, hashed)
+	case PS256, PS384, PS512:
+		out, err = rsa.SignPSS(RandReader, ctx.privateKey, hash, hashed, &rsa.PSSOptions{
+			SaltLength: rsa.PSSSaltLengthAuto,
+		})
+	}
+
+	if err != nil {
+		return Signature{}, err
+	}
+
+	return Signature{
+		Signature: out,
+		protected: &rawHeader{},
+	}, nil
+}
+
+// Verify the given payload
+func (ctx rsaEncrypterVerifier) verifyPayload(payload []byte, signature []byte, alg SignatureAlgorithm) error {
+	var hash crypto.Hash
+
+	switch alg {
+	case RS256, PS256:
+		hash = crypto.SHA256
+	case RS384, PS384:
+		hash = crypto.SHA384
+	case RS512, PS512:
+		hash = crypto.SHA512
+	default:
+		return ErrUnsupportedAlgorithm
+	}
+
+	hasher := hash.New()
+
+	// According to documentation, Write() on hash never fails
+	_, _ = hasher.Write(payload)
+	hashed := hasher.Sum(nil)
+
+	switch alg {
+	case RS256, RS384, RS512:
+		return rsa.VerifyPKCS1v15(ctx.publicKey, hash, hashed, signature)
+	case PS256, PS384, PS512:
+		return rsa.VerifyPSS(ctx.publicKey, hash, hashed, signature, nil)
+	}
+
+	return ErrUnsupportedAlgorithm
+}
+
+// Encrypt the given payload and update the object.
+func (ctx ecEncrypterVerifier) encryptKey(cek []byte, alg KeyAlgorithm) (recipientInfo, error) {
+	switch alg {
+	case ECDH_ES:
+		// ECDH-ES mode doesn't wrap a key, the shared secret is used directly as the key.
+		return recipientInfo{
+			header: &rawHeader{},
+		}, nil
+	case ECDH_ES_A128KW, ECDH_ES_A192KW, ECDH_ES_A256KW:
+	default:
+		return recipientInfo{}, ErrUnsupportedAlgorithm
+	}
+
+	generator := ecKeyGenerator{
+		algID:     string(alg),
+		publicKey: ctx.publicKey,
+	}
+
+	switch alg {
+	case ECDH_ES_A128KW:
+		generator.size = 16
+	case ECDH_ES_A192KW:
+		generator.size = 24
+	case ECDH_ES_A256KW:
+		generator.size = 32
+	}
+
+	kek, header, err := generator.genKey()
+	if err != nil {
+		return recipientInfo{}, err
+	}
+
+	block, err := aes.NewCipher(kek)
+	if err != nil {
+		return recipientInfo{}, err
+	}
+
+	jek, err := josecipher.KeyWrap(block, cek)
+	if err != nil {
+		return recipientInfo{}, err
+	}
+
+	return recipientInfo{
+		encryptedKey: jek,
+		header:       &header,
+	}, nil
+}
+
+// Get key size for EC key generator
+func (ctx ecKeyGenerator) keySize() int {
+	return ctx.size
+}
+
+// Get a content encryption key for ECDH-ES
+func (ctx ecKeyGenerator) genKey() ([]byte, rawHeader, error) {
+	priv, err := ecdsa.GenerateKey(ctx.publicKey.Curve, RandReader)
+	if err != nil {
+		return nil, rawHeader{}, err
+	}
+
+	out := josecipher.DeriveECDHES(ctx.algID, []byte{}, []byte{}, priv, ctx.publicKey, ctx.size)
+
+	b, err := json.Marshal(&JSONWebKey{
+		Key: &priv.PublicKey,
+	})
+	if err != nil {
+		return nil, nil, err
+	}
+
+	headers := rawHeader{
+		headerEPK: makeRawMessage(b),
+	}
+
+	return out, headers, nil
+}
+
+// Decrypt the given payload and return the content encryption key.
+func (ctx ecDecrypterSigner) decryptKey(headers rawHeader, recipient *recipientInfo, generator keyGenerator) ([]byte, error) {
+	epk, err := headers.getEPK()
+	if err != nil {
+		return nil, errors.New("square/go-jose: invalid epk header")
+	}
+	if epk == nil {
+		return nil, errors.New("square/go-jose: missing epk header")
+	}
+
+	publicKey, ok := epk.Key.(*ecdsa.PublicKey)
+	if publicKey == nil || !ok {
+		return nil, errors.New("square/go-jose: invalid epk header")
+	}
+
+	if !ctx.privateKey.Curve.IsOnCurve(publicKey.X, publicKey.Y) {
+		return nil, errors.New("square/go-jose: invalid public key in epk header")
+	}
+
+	apuData, err := headers.getAPU()
+	if err != nil {
+		return nil, errors.New("square/go-jose: invalid apu header")
+	}
+	apvData, err := headers.getAPV()
+	if err != nil {
+		return nil, errors.New("square/go-jose: invalid apv header")
+	}
+
+	deriveKey := func(algID string, size int) []byte {
+		return josecipher.DeriveECDHES(algID, apuData.bytes(), apvData.bytes(), ctx.privateKey, publicKey, size)
+	}
+
+	var keySize int
+
+	algorithm := headers.getAlgorithm()
+	switch algorithm {
+	case ECDH_ES:
+		// ECDH-ES uses direct key agreement, no key unwrapping necessary.
+		return deriveKey(string(headers.getEncryption()), generator.keySize()), nil
+	case ECDH_ES_A128KW:
+		keySize = 16
+	case ECDH_ES_A192KW:
+		keySize = 24
+	case ECDH_ES_A256KW:
+		keySize = 32
+	default:
+		return nil, ErrUnsupportedAlgorithm
+	}
+
+	key := deriveKey(string(algorithm), keySize)
+	block, err := aes.NewCipher(key)
+	if err != nil {
+		return nil, err
+	}
+
+	return josecipher.KeyUnwrap(block, recipient.encryptedKey)
+}
+
+func (ctx edDecrypterSigner) signPayload(payload []byte, alg SignatureAlgorithm) (Signature, error) {
+	if alg != EdDSA {
+		return Signature{}, ErrUnsupportedAlgorithm
+	}
+
+	sig, err := ctx.privateKey.Sign(RandReader, payload, crypto.Hash(0))
+	if err != nil {
+		return Signature{}, err
+	}
+
+	return Signature{
+		Signature: sig,
+		protected: &rawHeader{},
+	}, nil
+}
+
+func (ctx edEncrypterVerifier) verifyPayload(payload []byte, signature []byte, alg SignatureAlgorithm) error {
+	if alg != EdDSA {
+		return ErrUnsupportedAlgorithm
+	}
+	ok := ed25519.Verify(ctx.publicKey, payload, signature)
+	if !ok {
+		return errors.New("square/go-jose: ed25519 signature failed to verify")
+	}
+	return nil
+}
+
+// Sign the given payload
+func (ctx ecDecrypterSigner) signPayload(payload []byte, alg SignatureAlgorithm) (Signature, error) {
+	var expectedBitSize int
+	var hash crypto.Hash
+
+	switch alg {
+	case ES256:
+		expectedBitSize = 256
+		hash = crypto.SHA256
+	case ES384:
+		expectedBitSize = 384
+		hash = crypto.SHA384
+	case ES512:
+		expectedBitSize = 521
+		hash = crypto.SHA512
+	}
+
+	curveBits := ctx.privateKey.Curve.Params().BitSize
+	if expectedBitSize != curveBits {
+		return Signature{}, fmt.Errorf("square/go-jose: expected %d bit key, got %d bits instead", expectedBitSize, curveBits)
+	}
+
+	hasher := hash.New()
+
+	// According to documentation, Write() on hash never fails
+	_, _ = hasher.Write(payload)
+	hashed := hasher.Sum(nil)
+
+	r, s, err := ecdsa.Sign(RandReader, ctx.privateKey, hashed)
+	if err != nil {
+		return Signature{}, err
+	}
+
+	keyBytes := curveBits / 8
+	if curveBits%8 > 0 {
+		keyBytes++
+	}
+
+	// We serialize the outputs (r and s) into big-endian byte arrays and pad
+	// them with zeros on the left to make sure the sizes work out. Both arrays
+	// must be keyBytes long, and the output must be 2*keyBytes long.
+	rBytes := r.Bytes()
+	rBytesPadded := make([]byte, keyBytes)
+	copy(rBytesPadded[keyBytes-len(rBytes):], rBytes)
+
+	sBytes := s.Bytes()
+	sBytesPadded := make([]byte, keyBytes)
+	copy(sBytesPadded[keyBytes-len(sBytes):], sBytes)
+
+	out := append(rBytesPadded, sBytesPadded...)
+
+	return Signature{
+		Signature: out,
+		protected: &rawHeader{},
+	}, nil
+}
+
+// Verify the given payload
+func (ctx ecEncrypterVerifier) verifyPayload(payload []byte, signature []byte, alg SignatureAlgorithm) error {
+	var keySize int
+	var hash crypto.Hash
+
+	switch alg {
+	case ES256:
+		keySize = 32
+		hash = crypto.SHA256
+	case ES384:
+		keySize = 48
+		hash = crypto.SHA384
+	case ES512:
+		keySize = 66
+		hash = crypto.SHA512
+	default:
+		return ErrUnsupportedAlgorithm
+	}
+
+	if len(signature) != 2*keySize {
+		return fmt.Errorf("square/go-jose: invalid signature size, have %d bytes, wanted %d", len(signature), 2*keySize)
+	}
+
+	hasher := hash.New()
+
+	// According to documentation, Write() on hash never fails
+	_, _ = hasher.Write(payload)
+	hashed := hasher.Sum(nil)
+
+	r := big.NewInt(0).SetBytes(signature[:keySize])
+	s := big.NewInt(0).SetBytes(signature[keySize:])
+
+	match := ecdsa.Verify(ctx.publicKey, hashed, r, s)
+	if !match {
+		return errors.New("square/go-jose: ecdsa signature failed to verify")
+	}
+
+	return nil
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/cipher/cbc_hmac.go b/vendor/gopkg.in/square/go-jose.v2/cipher/cbc_hmac.go
new file mode 100644
index 000000000..126b85ce2
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/cipher/cbc_hmac.go
@@ -0,0 +1,196 @@
+/*-
+ * Copyright 2014 Square Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package josecipher
+
+import (
+	"bytes"
+	"crypto/cipher"
+	"crypto/hmac"
+	"crypto/sha256"
+	"crypto/sha512"
+	"crypto/subtle"
+	"encoding/binary"
+	"errors"
+	"hash"
+)
+
+const (
+	nonceBytes = 16
+)
+
+// NewCBCHMAC instantiates a new AEAD based on CBC+HMAC.
+func NewCBCHMAC(key []byte, newBlockCipher func([]byte) (cipher.Block, error)) (cipher.AEAD, error) {
+	keySize := len(key) / 2
+	integrityKey := key[:keySize]
+	encryptionKey := key[keySize:]
+
+	blockCipher, err := newBlockCipher(encryptionKey)
+	if err != nil {
+		return nil, err
+	}
+
+	var hash func() hash.Hash
+	switch keySize {
+	case 16:
+		hash = sha256.New
+	case 24:
+		hash = sha512.New384
+	case 32:
+		hash = sha512.New
+	}
+
+	return &cbcAEAD{
+		hash:         hash,
+		blockCipher:  blockCipher,
+		authtagBytes: keySize,
+		integrityKey: integrityKey,
+	}, nil
+}
+
+// An AEAD based on CBC+HMAC
+type cbcAEAD struct {
+	hash         func() hash.Hash
+	authtagBytes int
+	integrityKey []byte
+	blockCipher  cipher.Block
+}
+
+func (ctx *cbcAEAD) NonceSize() int {
+	return nonceBytes
+}
+
+func (ctx *cbcAEAD) Overhead() int {
+	// Maximum overhead is block size (for padding) plus auth tag length, where
+	// the length of the auth tag is equivalent to the key size.
+	return ctx.blockCipher.BlockSize() + ctx.authtagBytes
+}
+
+// Seal encrypts and authenticates the plaintext.
+func (ctx *cbcAEAD) Seal(dst, nonce, plaintext, data []byte) []byte {
+	// Output buffer -- must take care not to mangle plaintext input.
+	ciphertext := make([]byte, uint64(len(plaintext))+uint64(ctx.Overhead()))[:len(plaintext)]
+	copy(ciphertext, plaintext)
+	ciphertext = padBuffer(ciphertext, ctx.blockCipher.BlockSize())
+
+	cbc := cipher.NewCBCEncrypter(ctx.blockCipher, nonce)
+
+	cbc.CryptBlocks(ciphertext, ciphertext)
+	authtag := ctx.computeAuthTag(data, nonce, ciphertext)
+
+	ret, out := resize(dst, uint64(len(dst))+uint64(len(ciphertext))+uint64(len(authtag)))
+	copy(out, ciphertext)
+	copy(out[len(ciphertext):], authtag)
+
+	return ret
+}
+
+// Open decrypts and authenticates the ciphertext.
+func (ctx *cbcAEAD) Open(dst, nonce, ciphertext, data []byte) ([]byte, error) {
+	if len(ciphertext) < ctx.authtagBytes {
+		return nil, errors.New("square/go-jose: invalid ciphertext (too short)")
+	}
+
+	offset := len(ciphertext) - ctx.authtagBytes
+	expectedTag := ctx.computeAuthTag(data, nonce, ciphertext[:offset])
+	match := subtle.ConstantTimeCompare(expectedTag, ciphertext[offset:])
+	if match != 1 {
+		return nil, errors.New("square/go-jose: invalid ciphertext (auth tag mismatch)")
+	}
+
+	cbc := cipher.NewCBCDecrypter(ctx.blockCipher, nonce)
+
+	// Make copy of ciphertext buffer, don't want to modify in place
+	buffer := append([]byte{}, []byte(ciphertext[:offset])...)
+
+	if len(buffer)%ctx.blockCipher.BlockSize() > 0 {
+		return nil, errors.New("square/go-jose: invalid ciphertext (invalid length)")
+	}
+
+	cbc.CryptBlocks(buffer, buffer)
+
+	// Remove padding
+	plaintext, err := unpadBuffer(buffer, ctx.blockCipher.BlockSize())
+	if err != nil {
+		return nil, err
+	}
+
+	ret, out := resize(dst, uint64(len(dst))+uint64(len(plaintext)))
+	copy(out, plaintext)
+
+	return ret, nil
+}
+
+// Compute an authentication tag
+func (ctx *cbcAEAD) computeAuthTag(aad, nonce, ciphertext []byte) []byte {
+	buffer := make([]byte, uint64(len(aad))+uint64(len(nonce))+uint64(len(ciphertext))+8)
+	n := 0
+	n += copy(buffer, aad)
+	n += copy(buffer[n:], nonce)
+	n += copy(buffer[n:], ciphertext)
+	binary.BigEndian.PutUint64(buffer[n:], uint64(len(aad))*8)
+
+	// According to documentation, Write() on hash.Hash never fails.
+	hmac := hmac.New(ctx.hash, ctx.integrityKey)
+	_, _ = hmac.Write(buffer)
+
+	return hmac.Sum(nil)[:ctx.authtagBytes]
+}
+
+// resize ensures the the given slice has a capacity of at least n bytes.
+// If the capacity of the slice is less than n, a new slice is allocated
+// and the existing data will be copied.
+func resize(in []byte, n uint64) (head, tail []byte) {
+	if uint64(cap(in)) >= n {
+		head = in[:n]
+	} else {
+		head = make([]byte, n)
+		copy(head, in)
+	}
+
+	tail = head[len(in):]
+	return
+}
+
+// Apply padding
+func padBuffer(buffer []byte, blockSize int) []byte {
+	missing := blockSize - (len(buffer) % blockSize)
+	ret, out := resize(buffer, uint64(len(buffer))+uint64(missing))
+	padding := bytes.Repeat([]byte{byte(missing)}, missing)
+	copy(out, padding)
+	return ret
+}
+
+// Remove padding
+func unpadBuffer(buffer []byte, blockSize int) ([]byte, error) {
+	if len(buffer)%blockSize != 0 {
+		return nil, errors.New("square/go-jose: invalid padding")
+	}
+
+	last := buffer[len(buffer)-1]
+	count := int(last)
+
+	if count == 0 || count > blockSize || count > len(buffer) {
+		return nil, errors.New("square/go-jose: invalid padding")
+	}
+
+	padding := bytes.Repeat([]byte{last}, count)
+	if !bytes.HasSuffix(buffer, padding) {
+		return nil, errors.New("square/go-jose: invalid padding")
+	}
+
+	return buffer[:len(buffer)-count], nil
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/cipher/concat_kdf.go b/vendor/gopkg.in/square/go-jose.v2/cipher/concat_kdf.go
new file mode 100644
index 000000000..f62c3bdba
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/cipher/concat_kdf.go
@@ -0,0 +1,75 @@
+/*-
+ * Copyright 2014 Square Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package josecipher
+
+import (
+	"crypto"
+	"encoding/binary"
+	"hash"
+	"io"
+)
+
+type concatKDF struct {
+	z, info []byte
+	i       uint32
+	cache   []byte
+	hasher  hash.Hash
+}
+
+// NewConcatKDF builds a KDF reader based on the given inputs.
+func NewConcatKDF(hash crypto.Hash, z, algID, ptyUInfo, ptyVInfo, supPubInfo, supPrivInfo []byte) io.Reader {
+	buffer := make([]byte, uint64(len(algID))+uint64(len(ptyUInfo))+uint64(len(ptyVInfo))+uint64(len(supPubInfo))+uint64(len(supPrivInfo)))
+	n := 0
+	n += copy(buffer, algID)
+	n += copy(buffer[n:], ptyUInfo)
+	n += copy(buffer[n:], ptyVInfo)
+	n += copy(buffer[n:], supPubInfo)
+	copy(buffer[n:], supPrivInfo)
+
+	hasher := hash.New()
+
+	return &concatKDF{
+		z:      z,
+		info:   buffer,
+		hasher: hasher,
+		cache:  []byte{},
+		i:      1,
+	}
+}
+
+func (ctx *concatKDF) Read(out []byte) (int, error) {
+	copied := copy(out, ctx.cache)
+	ctx.cache = ctx.cache[copied:]
+
+	for copied < len(out) {
+		ctx.hasher.Reset()
+
+		// Write on a hash.Hash never fails
+		_ = binary.Write(ctx.hasher, binary.BigEndian, ctx.i)
+		_, _ = ctx.hasher.Write(ctx.z)
+		_, _ = ctx.hasher.Write(ctx.info)
+
+		hash := ctx.hasher.Sum(nil)
+		chunkCopied := copy(out[copied:], hash)
+		copied += chunkCopied
+		ctx.cache = hash[chunkCopied:]
+
+		ctx.i++
+	}
+
+	return copied, nil
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/cipher/ecdh_es.go b/vendor/gopkg.in/square/go-jose.v2/cipher/ecdh_es.go
new file mode 100644
index 000000000..c128e327f
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/cipher/ecdh_es.go
@@ -0,0 +1,62 @@
+/*-
+ * Copyright 2014 Square Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package josecipher
+
+import (
+	"crypto"
+	"crypto/ecdsa"
+	"encoding/binary"
+)
+
+// DeriveECDHES derives a shared encryption key using ECDH/ConcatKDF as described in JWE/JWA.
+// It is an error to call this function with a private/public key that are not on the same
+// curve. Callers must ensure that the keys are valid before calling this function. Output
+// size may be at most 1<<16 bytes (64 KiB).
+func DeriveECDHES(alg string, apuData, apvData []byte, priv *ecdsa.PrivateKey, pub *ecdsa.PublicKey, size int) []byte {
+	if size > 1<<16 {
+		panic("ECDH-ES output size too large, must be less than or equal to 1<<16")
+	}
+
+	// algId, partyUInfo, partyVInfo inputs must be prefixed with the length
+	algID := lengthPrefixed([]byte(alg))
+	ptyUInfo := lengthPrefixed(apuData)
+	ptyVInfo := lengthPrefixed(apvData)
+
+	// suppPubInfo is the encoded length of the output size in bits
+	supPubInfo := make([]byte, 4)
+	binary.BigEndian.PutUint32(supPubInfo, uint32(size)*8)
+
+	if !priv.PublicKey.Curve.IsOnCurve(pub.X, pub.Y) {
+		panic("public key not on same curve as private key")
+	}
+
+	z, _ := priv.PublicKey.Curve.ScalarMult(pub.X, pub.Y, priv.D.Bytes())
+	reader := NewConcatKDF(crypto.SHA256, z.Bytes(), algID, ptyUInfo, ptyVInfo, supPubInfo, []byte{})
+
+	key := make([]byte, size)
+
+	// Read on the KDF will never fail
+	_, _ = reader.Read(key)
+	return key
+}
+
+func lengthPrefixed(data []byte) []byte {
+	out := make([]byte, len(data)+4)
+	binary.BigEndian.PutUint32(out, uint32(len(data)))
+	copy(out[4:], data)
+	return out
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/cipher/key_wrap.go b/vendor/gopkg.in/square/go-jose.v2/cipher/key_wrap.go
new file mode 100644
index 000000000..1d36d5015
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/cipher/key_wrap.go
@@ -0,0 +1,109 @@
+/*-
+ * Copyright 2014 Square Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package josecipher
+
+import (
+	"crypto/cipher"
+	"crypto/subtle"
+	"encoding/binary"
+	"errors"
+)
+
+var defaultIV = []byte{0xA6, 0xA6, 0xA6, 0xA6, 0xA6, 0xA6, 0xA6, 0xA6}
+
+// KeyWrap implements NIST key wrapping; it wraps a content encryption key (cek) with the given block cipher.
+func KeyWrap(block cipher.Block, cek []byte) ([]byte, error) {
+	if len(cek)%8 != 0 {
+		return nil, errors.New("square/go-jose: key wrap input must be 8 byte blocks")
+	}
+
+	n := len(cek) / 8
+	r := make([][]byte, n)
+
+	for i := range r {
+		r[i] = make([]byte, 8)
+		copy(r[i], cek[i*8:])
+	}
+
+	buffer := make([]byte, 16)
+	tBytes := make([]byte, 8)
+	copy(buffer, defaultIV)
+
+	for t := 0; t < 6*n; t++ {
+		copy(buffer[8:], r[t%n])
+
+		block.Encrypt(buffer, buffer)
+
+		binary.BigEndian.PutUint64(tBytes, uint64(t+1))
+
+		for i := 0; i < 8; i++ {
+			buffer[i] = buffer[i] ^ tBytes[i]
+		}
+		copy(r[t%n], buffer[8:])
+	}
+
+	out := make([]byte, (n+1)*8)
+	copy(out, buffer[:8])
+	for i := range r {
+		copy(out[(i+1)*8:], r[i])
+	}
+
+	return out, nil
+}
+
+// KeyUnwrap implements NIST key unwrapping; it unwraps a content encryption key (cek) with the given block cipher.
+func KeyUnwrap(block cipher.Block, ciphertext []byte) ([]byte, error) {
+	if len(ciphertext)%8 != 0 {
+		return nil, errors.New("square/go-jose: key wrap input must be 8 byte blocks")
+	}
+
+	n := (len(ciphertext) / 8) - 1
+	r := make([][]byte, n)
+
+	for i := range r {
+		r[i] = make([]byte, 8)
+		copy(r[i], ciphertext[(i+1)*8:])
+	}
+
+	buffer := make([]byte, 16)
+	tBytes := make([]byte, 8)
+	copy(buffer[:8], ciphertext[:8])
+
+	for t := 6*n - 1; t >= 0; t-- {
+		binary.BigEndian.PutUint64(tBytes, uint64(t+1))
+
+		for i := 0; i < 8; i++ {
+			buffer[i] = buffer[i] ^ tBytes[i]
+		}
+		copy(buffer[8:], r[t%n])
+
+		block.Decrypt(buffer, buffer)
+
+		copy(r[t%n], buffer[8:])
+	}
+
+	if subtle.ConstantTimeCompare(buffer[:8], defaultIV) == 0 {
+		return nil, errors.New("square/go-jose: failed to unwrap key")
+	}
+
+	out := make([]byte, n*8)
+	for i := range r {
+		copy(out[i*8:], r[i])
+	}
+
+	return out, nil
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/crypter.go b/vendor/gopkg.in/square/go-jose.v2/crypter.go
new file mode 100644
index 000000000..c45c71206
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/crypter.go
@@ -0,0 +1,535 @@
+/*-
+ * Copyright 2014 Square Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package jose
+
+import (
+	"crypto/ecdsa"
+	"crypto/rsa"
+	"errors"
+	"fmt"
+	"reflect"
+
+	"gopkg.in/square/go-jose.v2/json"
+)
+
+// Encrypter represents an encrypter which produces an encrypted JWE object.
+type Encrypter interface {
+	Encrypt(plaintext []byte) (*JSONWebEncryption, error)
+	EncryptWithAuthData(plaintext []byte, aad []byte) (*JSONWebEncryption, error)
+	Options() EncrypterOptions
+}
+
+// A generic content cipher
+type contentCipher interface {
+	keySize() int
+	encrypt(cek []byte, aad, plaintext []byte) (*aeadParts, error)
+	decrypt(cek []byte, aad []byte, parts *aeadParts) ([]byte, error)
+}
+
+// A key generator (for generating/getting a CEK)
+type keyGenerator interface {
+	keySize() int
+	genKey() ([]byte, rawHeader, error)
+}
+
+// A generic key encrypter
+type keyEncrypter interface {
+	encryptKey(cek []byte, alg KeyAlgorithm) (recipientInfo, error) // Encrypt a key
+}
+
+// A generic key decrypter
+type keyDecrypter interface {
+	decryptKey(headers rawHeader, recipient *recipientInfo, generator keyGenerator) ([]byte, error) // Decrypt a key
+}
+
+// A generic encrypter based on the given key encrypter and content cipher.
+type genericEncrypter struct {
+	contentAlg     ContentEncryption
+	compressionAlg CompressionAlgorithm
+	cipher         contentCipher
+	recipients     []recipientKeyInfo
+	keyGenerator   keyGenerator
+	extraHeaders   map[HeaderKey]interface{}
+}
+
+type recipientKeyInfo struct {
+	keyID        string
+	keyAlg       KeyAlgorithm
+	keyEncrypter keyEncrypter
+}
+
+// EncrypterOptions represents options that can be set on new encrypters.
+type EncrypterOptions struct {
+	Compression CompressionAlgorithm
+
+	// Optional map of additional keys to be inserted into the protected header
+	// of a JWS object. Some specifications which make use of JWS like to insert
+	// additional values here. All values must be JSON-serializable.
+	ExtraHeaders map[HeaderKey]interface{}
+}
+
+// WithHeader adds an arbitrary value to the ExtraHeaders map, initializing it
+// if necessary. It returns itself and so can be used in a fluent style.
+func (eo *EncrypterOptions) WithHeader(k HeaderKey, v interface{}) *EncrypterOptions {
+	if eo.ExtraHeaders == nil {
+		eo.ExtraHeaders = map[HeaderKey]interface{}{}
+	}
+	eo.ExtraHeaders[k] = v
+	return eo
+}
+
+// WithContentType adds a content type ("cty") header and returns the updated
+// EncrypterOptions.
+func (eo *EncrypterOptions) WithContentType(contentType ContentType) *EncrypterOptions {
+	return eo.WithHeader(HeaderContentType, contentType)
+}
+
+// WithType adds a type ("typ") header and returns the updated EncrypterOptions.
+func (eo *EncrypterOptions) WithType(typ ContentType) *EncrypterOptions {
+	return eo.WithHeader(HeaderType, typ)
+}
+
+// Recipient represents an algorithm/key to encrypt messages to.
+//
+// PBES2Count and PBES2Salt correspond with the  "p2c" and "p2s" headers used
+// on the password-based encryption algorithms PBES2-HS256+A128KW,
+// PBES2-HS384+A192KW, and PBES2-HS512+A256KW. If they are not provided a safe
+// default of 100000 will be used for the count and a 128-bit random salt will
+// be generated.
+type Recipient struct {
+	Algorithm  KeyAlgorithm
+	Key        interface{}
+	KeyID      string
+	PBES2Count int
+	PBES2Salt  []byte
+}
+
+// NewEncrypter creates an appropriate encrypter based on the key type
+func NewEncrypter(enc ContentEncryption, rcpt Recipient, opts *EncrypterOptions) (Encrypter, error) {
+	encrypter := &genericEncrypter{
+		contentAlg: enc,
+		recipients: []recipientKeyInfo{},
+		cipher:     getContentCipher(enc),
+	}
+	if opts != nil {
+		encrypter.compressionAlg = opts.Compression
+		encrypter.extraHeaders = opts.ExtraHeaders
+	}
+
+	if encrypter.cipher == nil {
+		return nil, ErrUnsupportedAlgorithm
+	}
+
+	var keyID string
+	var rawKey interface{}
+	switch encryptionKey := rcpt.Key.(type) {
+	case JSONWebKey:
+		keyID, rawKey = encryptionKey.KeyID, encryptionKey.Key
+	case *JSONWebKey:
+		keyID, rawKey = encryptionKey.KeyID, encryptionKey.Key
+	default:
+		rawKey = encryptionKey
+	}
+
+	switch rcpt.Algorithm {
+	case DIRECT:
+		// Direct encryption mode must be treated differently
+		if reflect.TypeOf(rawKey) != reflect.TypeOf([]byte{}) {
+			return nil, ErrUnsupportedKeyType
+		}
+		if encrypter.cipher.keySize() != len(rawKey.([]byte)) {
+			return nil, ErrInvalidKeySize
+		}
+		encrypter.keyGenerator = staticKeyGenerator{
+			key: rawKey.([]byte),
+		}
+		recipientInfo, _ := newSymmetricRecipient(rcpt.Algorithm, rawKey.([]byte))
+		recipientInfo.keyID = keyID
+		if rcpt.KeyID != "" {
+			recipientInfo.keyID = rcpt.KeyID
+		}
+		encrypter.recipients = []recipientKeyInfo{recipientInfo}
+		return encrypter, nil
+	case ECDH_ES:
+		// ECDH-ES (w/o key wrapping) is similar to DIRECT mode
+		typeOf := reflect.TypeOf(rawKey)
+		if typeOf != reflect.TypeOf(&ecdsa.PublicKey{}) {
+			return nil, ErrUnsupportedKeyType
+		}
+		encrypter.keyGenerator = ecKeyGenerator{
+			size:      encrypter.cipher.keySize(),
+			algID:     string(enc),
+			publicKey: rawKey.(*ecdsa.PublicKey),
+		}
+		recipientInfo, _ := newECDHRecipient(rcpt.Algorithm, rawKey.(*ecdsa.PublicKey))
+		recipientInfo.keyID = keyID
+		if rcpt.KeyID != "" {
+			recipientInfo.keyID = rcpt.KeyID
+		}
+		encrypter.recipients = []recipientKeyInfo{recipientInfo}
+		return encrypter, nil
+	default:
+		// Can just add a standard recipient
+		encrypter.keyGenerator = randomKeyGenerator{
+			size: encrypter.cipher.keySize(),
+		}
+		err := encrypter.addRecipient(rcpt)
+		return encrypter, err
+	}
+}
+
+// NewMultiEncrypter creates a multi-encrypter based on the given parameters
+func NewMultiEncrypter(enc ContentEncryption, rcpts []Recipient, opts *EncrypterOptions) (Encrypter, error) {
+	cipher := getContentCipher(enc)
+
+	if cipher == nil {
+		return nil, ErrUnsupportedAlgorithm
+	}
+	if rcpts == nil || len(rcpts) == 0 {
+		return nil, fmt.Errorf("square/go-jose: recipients is nil or empty")
+	}
+
+	encrypter := &genericEncrypter{
+		contentAlg: enc,
+		recipients: []recipientKeyInfo{},
+		cipher:     cipher,
+		keyGenerator: randomKeyGenerator{
+			size: cipher.keySize(),
+		},
+	}
+
+	if opts != nil {
+		encrypter.compressionAlg = opts.Compression
+	}
+
+	for _, recipient := range rcpts {
+		err := encrypter.addRecipient(recipient)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	return encrypter, nil
+}
+
+func (ctx *genericEncrypter) addRecipient(recipient Recipient) (err error) {
+	var recipientInfo recipientKeyInfo
+
+	switch recipient.Algorithm {
+	case DIRECT, ECDH_ES:
+		return fmt.Errorf("square/go-jose: key algorithm '%s' not supported in multi-recipient mode", recipient.Algorithm)
+	}
+
+	recipientInfo, err = makeJWERecipient(recipient.Algorithm, recipient.Key)
+	if recipient.KeyID != "" {
+		recipientInfo.keyID = recipient.KeyID
+	}
+
+	switch recipient.Algorithm {
+	case PBES2_HS256_A128KW, PBES2_HS384_A192KW, PBES2_HS512_A256KW:
+		if sr, ok := recipientInfo.keyEncrypter.(*symmetricKeyCipher); ok {
+			sr.p2c = recipient.PBES2Count
+			sr.p2s = recipient.PBES2Salt
+		}
+	}
+
+	if err == nil {
+		ctx.recipients = append(ctx.recipients, recipientInfo)
+	}
+	return err
+}
+
+func makeJWERecipient(alg KeyAlgorithm, encryptionKey interface{}) (recipientKeyInfo, error) {
+	switch encryptionKey := encryptionKey.(type) {
+	case *rsa.PublicKey:
+		return newRSARecipient(alg, encryptionKey)
+	case *ecdsa.PublicKey:
+		return newECDHRecipient(alg, encryptionKey)
+	case []byte:
+		return newSymmetricRecipient(alg, encryptionKey)
+	case string:
+		return newSymmetricRecipient(alg, []byte(encryptionKey))
+	case *JSONWebKey:
+		recipient, err := makeJWERecipient(alg, encryptionKey.Key)
+		recipient.keyID = encryptionKey.KeyID
+		return recipient, err
+	default:
+		return recipientKeyInfo{}, ErrUnsupportedKeyType
+	}
+}
+
+// newDecrypter creates an appropriate decrypter based on the key type
+func newDecrypter(decryptionKey interface{}) (keyDecrypter, error) {
+	switch decryptionKey := decryptionKey.(type) {
+	case *rsa.PrivateKey:
+		return &rsaDecrypterSigner{
+			privateKey: decryptionKey,
+		}, nil
+	case *ecdsa.PrivateKey:
+		return &ecDecrypterSigner{
+			privateKey: decryptionKey,
+		}, nil
+	case []byte:
+		return &symmetricKeyCipher{
+			key: decryptionKey,
+		}, nil
+	case string:
+		return &symmetricKeyCipher{
+			key: []byte(decryptionKey),
+		}, nil
+	case JSONWebKey:
+		return newDecrypter(decryptionKey.Key)
+	case *JSONWebKey:
+		return newDecrypter(decryptionKey.Key)
+	default:
+		return nil, ErrUnsupportedKeyType
+	}
+}
+
+// Implementation of encrypt method producing a JWE object.
+func (ctx *genericEncrypter) Encrypt(plaintext []byte) (*JSONWebEncryption, error) {
+	return ctx.EncryptWithAuthData(plaintext, nil)
+}
+
+// Implementation of encrypt method producing a JWE object.
+func (ctx *genericEncrypter) EncryptWithAuthData(plaintext, aad []byte) (*JSONWebEncryption, error) {
+	obj := &JSONWebEncryption{}
+	obj.aad = aad
+
+	obj.protected = &rawHeader{}
+	err := obj.protected.set(headerEncryption, ctx.contentAlg)
+	if err != nil {
+		return nil, err
+	}
+
+	obj.recipients = make([]recipientInfo, len(ctx.recipients))
+
+	if len(ctx.recipients) == 0 {
+		return nil, fmt.Errorf("square/go-jose: no recipients to encrypt to")
+	}
+
+	cek, headers, err := ctx.keyGenerator.genKey()
+	if err != nil {
+		return nil, err
+	}
+
+	obj.protected.merge(&headers)
+
+	for i, info := range ctx.recipients {
+		recipient, err := info.keyEncrypter.encryptKey(cek, info.keyAlg)
+		if err != nil {
+			return nil, err
+		}
+
+		err = recipient.header.set(headerAlgorithm, info.keyAlg)
+		if err != nil {
+			return nil, err
+		}
+
+		if info.keyID != "" {
+			err = recipient.header.set(headerKeyID, info.keyID)
+			if err != nil {
+				return nil, err
+			}
+		}
+		obj.recipients[i] = recipient
+	}
+
+	if len(ctx.recipients) == 1 {
+		// Move per-recipient headers into main protected header if there's
+		// only a single recipient.
+		obj.protected.merge(obj.recipients[0].header)
+		obj.recipients[0].header = nil
+	}
+
+	if ctx.compressionAlg != NONE {
+		plaintext, err = compress(ctx.compressionAlg, plaintext)
+		if err != nil {
+			return nil, err
+		}
+
+		err = obj.protected.set(headerCompression, ctx.compressionAlg)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	for k, v := range ctx.extraHeaders {
+		b, err := json.Marshal(v)
+		if err != nil {
+			return nil, err
+		}
+		(*obj.protected)[k] = makeRawMessage(b)
+	}
+
+	authData := obj.computeAuthData()
+	parts, err := ctx.cipher.encrypt(cek, authData, plaintext)
+	if err != nil {
+		return nil, err
+	}
+
+	obj.iv = parts.iv
+	obj.ciphertext = parts.ciphertext
+	obj.tag = parts.tag
+
+	return obj, nil
+}
+
+func (ctx *genericEncrypter) Options() EncrypterOptions {
+	return EncrypterOptions{
+		Compression:  ctx.compressionAlg,
+		ExtraHeaders: ctx.extraHeaders,
+	}
+}
+
+// Decrypt and validate the object and return the plaintext. Note that this
+// function does not support multi-recipient, if you desire multi-recipient
+// decryption use DecryptMulti instead.
+func (obj JSONWebEncryption) Decrypt(decryptionKey interface{}) ([]byte, error) {
+	headers := obj.mergedHeaders(nil)
+
+	if len(obj.recipients) > 1 {
+		return nil, errors.New("square/go-jose: too many recipients in payload; expecting only one")
+	}
+
+	critical, err := headers.getCritical()
+	if err != nil {
+		return nil, fmt.Errorf("square/go-jose: invalid crit header")
+	}
+
+	if len(critical) > 0 {
+		return nil, fmt.Errorf("square/go-jose: unsupported crit header")
+	}
+
+	decrypter, err := newDecrypter(decryptionKey)
+	if err != nil {
+		return nil, err
+	}
+
+	cipher := getContentCipher(headers.getEncryption())
+	if cipher == nil {
+		return nil, fmt.Errorf("square/go-jose: unsupported enc value '%s'", string(headers.getEncryption()))
+	}
+
+	generator := randomKeyGenerator{
+		size: cipher.keySize(),
+	}
+
+	parts := &aeadParts{
+		iv:         obj.iv,
+		ciphertext: obj.ciphertext,
+		tag:        obj.tag,
+	}
+
+	authData := obj.computeAuthData()
+
+	var plaintext []byte
+	recipient := obj.recipients[0]
+	recipientHeaders := obj.mergedHeaders(&recipient)
+
+	cek, err := decrypter.decryptKey(recipientHeaders, &recipient, generator)
+	if err == nil {
+		// Found a valid CEK -- let's try to decrypt.
+		plaintext, err = cipher.decrypt(cek, authData, parts)
+	}
+
+	if plaintext == nil {
+		return nil, ErrCryptoFailure
+	}
+
+	// The "zip" header parameter may only be present in the protected header.
+	if comp := obj.protected.getCompression(); comp != "" {
+		plaintext, err = decompress(comp, plaintext)
+	}
+
+	return plaintext, err
+}
+
+// DecryptMulti decrypts and validates the object and returns the plaintexts,
+// with support for multiple recipients. It returns the index of the recipient
+// for which the decryption was successful, the merged headers for that recipient,
+// and the plaintext.
+func (obj JSONWebEncryption) DecryptMulti(decryptionKey interface{}) (int, Header, []byte, error) {
+	globalHeaders := obj.mergedHeaders(nil)
+
+	critical, err := globalHeaders.getCritical()
+	if err != nil {
+		return -1, Header{}, nil, fmt.Errorf("square/go-jose: invalid crit header")
+	}
+
+	if len(critical) > 0 {
+		return -1, Header{}, nil, fmt.Errorf("square/go-jose: unsupported crit header")
+	}
+
+	decrypter, err := newDecrypter(decryptionKey)
+	if err != nil {
+		return -1, Header{}, nil, err
+	}
+
+	encryption := globalHeaders.getEncryption()
+	cipher := getContentCipher(encryption)
+	if cipher == nil {
+		return -1, Header{}, nil, fmt.Errorf("square/go-jose: unsupported enc value '%s'", string(encryption))
+	}
+
+	generator := randomKeyGenerator{
+		size: cipher.keySize(),
+	}
+
+	parts := &aeadParts{
+		iv:         obj.iv,
+		ciphertext: obj.ciphertext,
+		tag:        obj.tag,
+	}
+
+	authData := obj.computeAuthData()
+
+	index := -1
+	var plaintext []byte
+	var headers rawHeader
+
+	for i, recipient := range obj.recipients {
+		recipientHeaders := obj.mergedHeaders(&recipient)
+
+		cek, err := decrypter.decryptKey(recipientHeaders, &recipient, generator)
+		if err == nil {
+			// Found a valid CEK -- let's try to decrypt.
+			plaintext, err = cipher.decrypt(cek, authData, parts)
+			if err == nil {
+				index = i
+				headers = recipientHeaders
+				break
+			}
+		}
+	}
+
+	if plaintext == nil || err != nil {
+		return -1, Header{}, nil, ErrCryptoFailure
+	}
+
+	// The "zip" header parameter may only be present in the protected header.
+	if comp := obj.protected.getCompression(); comp != "" {
+		plaintext, err = decompress(comp, plaintext)
+	}
+
+	sanitized, err := headers.sanitized()
+	if err != nil {
+		return -1, Header{}, nil, fmt.Errorf("square/go-jose: failed to sanitize header: %v", err)
+	}
+
+	return index, sanitized, plaintext, err
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/doc.go b/vendor/gopkg.in/square/go-jose.v2/doc.go
new file mode 100644
index 000000000..dd1387f3f
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/doc.go
@@ -0,0 +1,27 @@
+/*-
+ * Copyright 2014 Square Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+/*
+
+Package jose aims to provide an implementation of the Javascript Object Signing
+and Encryption set of standards. It implements encryption and signing based on
+the JSON Web Encryption and JSON Web Signature standards, with optional JSON
+Web Token support available in a sub-package. The library supports both the
+compact and full serialization formats, and has optional support for multiple
+recipients.
+
+*/
+package jose
diff --git a/vendor/gopkg.in/square/go-jose.v2/encoding.go b/vendor/gopkg.in/square/go-jose.v2/encoding.go
new file mode 100644
index 000000000..b9687c647
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/encoding.go
@@ -0,0 +1,179 @@
+/*-
+ * Copyright 2014 Square Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package jose
+
+import (
+	"bytes"
+	"compress/flate"
+	"encoding/base64"
+	"encoding/binary"
+	"io"
+	"math/big"
+	"regexp"
+
+	"gopkg.in/square/go-jose.v2/json"
+)
+
+var stripWhitespaceRegex = regexp.MustCompile("\\s")
+
+// Helper function to serialize known-good objects.
+// Precondition: value is not a nil pointer.
+func mustSerializeJSON(value interface{}) []byte {
+	out, err := json.Marshal(value)
+	if err != nil {
+		panic(err)
+	}
+	// We never want to serialize the top-level value "null," since it's not a
+	// valid JOSE message. But if a caller passes in a nil pointer to this method,
+	// MarshalJSON will happily serialize it as the top-level value "null". If
+	// that value is then embedded in another operation, for instance by being
+	// base64-encoded and fed as input to a signing algorithm
+	// (https://github.com/square/go-jose/issues/22), the result will be
+	// incorrect. Because this method is intended for known-good objects, and a nil
+	// pointer is not a known-good object, we are free to panic in this case.
+	// Note: It's not possible to directly check whether the data pointed at by an
+	// interface is a nil pointer, so we do this hacky workaround.
+	// https://groups.google.com/forum/#!topic/golang-nuts/wnH302gBa4I
+	if string(out) == "null" {
+		panic("Tried to serialize a nil pointer.")
+	}
+	return out
+}
+
+// Strip all newlines and whitespace
+func stripWhitespace(data string) string {
+	return stripWhitespaceRegex.ReplaceAllString(data, "")
+}
+
+// Perform compression based on algorithm
+func compress(algorithm CompressionAlgorithm, input []byte) ([]byte, error) {
+	switch algorithm {
+	case DEFLATE:
+		return deflate(input)
+	default:
+		return nil, ErrUnsupportedAlgorithm
+	}
+}
+
+// Perform decompression based on algorithm
+func decompress(algorithm CompressionAlgorithm, input []byte) ([]byte, error) {
+	switch algorithm {
+	case DEFLATE:
+		return inflate(input)
+	default:
+		return nil, ErrUnsupportedAlgorithm
+	}
+}
+
+// Compress with DEFLATE
+func deflate(input []byte) ([]byte, error) {
+	output := new(bytes.Buffer)
+
+	// Writing to byte buffer, err is always nil
+	writer, _ := flate.NewWriter(output, 1)
+	_, _ = io.Copy(writer, bytes.NewBuffer(input))
+
+	err := writer.Close()
+	return output.Bytes(), err
+}
+
+// Decompress with DEFLATE
+func inflate(input []byte) ([]byte, error) {
+	output := new(bytes.Buffer)
+	reader := flate.NewReader(bytes.NewBuffer(input))
+
+	_, err := io.Copy(output, reader)
+	if err != nil {
+		return nil, err
+	}
+
+	err = reader.Close()
+	return output.Bytes(), err
+}
+
+// byteBuffer represents a slice of bytes that can be serialized to url-safe base64.
+type byteBuffer struct {
+	data []byte
+}
+
+func newBuffer(data []byte) *byteBuffer {
+	if data == nil {
+		return nil
+	}
+	return &byteBuffer{
+		data: data,
+	}
+}
+
+func newFixedSizeBuffer(data []byte, length int) *byteBuffer {
+	if len(data) > length {
+		panic("square/go-jose: invalid call to newFixedSizeBuffer (len(data) > length)")
+	}
+	pad := make([]byte, length-len(data))
+	return newBuffer(append(pad, data...))
+}
+
+func newBufferFromInt(num uint64) *byteBuffer {
+	data := make([]byte, 8)
+	binary.BigEndian.PutUint64(data, num)
+	return newBuffer(bytes.TrimLeft(data, "\x00"))
+}
+
+func (b *byteBuffer) MarshalJSON() ([]byte, error) {
+	return json.Marshal(b.base64())
+}
+
+func (b *byteBuffer) UnmarshalJSON(data []byte) error {
+	var encoded string
+	err := json.Unmarshal(data, &encoded)
+	if err != nil {
+		return err
+	}
+
+	if encoded == "" {
+		return nil
+	}
+
+	decoded, err := base64.RawURLEncoding.DecodeString(encoded)
+	if err != nil {
+		return err
+	}
+
+	*b = *newBuffer(decoded)
+
+	return nil
+}
+
+func (b *byteBuffer) base64() string {
+	return base64.RawURLEncoding.EncodeToString(b.data)
+}
+
+func (b *byteBuffer) bytes() []byte {
+	// Handling nil here allows us to transparently handle nil slices when serializing.
+	if b == nil {
+		return nil
+	}
+	return b.data
+}
+
+func (b byteBuffer) bigInt() *big.Int {
+	return new(big.Int).SetBytes(b.data)
+}
+
+func (b byteBuffer) toInt() int {
+	return int(b.bigInt().Int64())
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/json/LICENSE b/vendor/gopkg.in/square/go-jose.v2/json/LICENSE
new file mode 100644
index 000000000..744875676
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/json/LICENSE
@@ -0,0 +1,27 @@
+Copyright (c) 2012 The Go Authors. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of Google Inc. nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
diff --git a/vendor/gopkg.in/square/go-jose.v2/json/README.md b/vendor/gopkg.in/square/go-jose.v2/json/README.md
new file mode 100644
index 000000000..86de5e558
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/json/README.md
@@ -0,0 +1,13 @@
+# Safe JSON
+
+This repository contains a fork of the `encoding/json` package from Go 1.6.
+
+The following changes were made:
+
+* Object deserialization uses case-sensitive member name matching instead of
+  [case-insensitive matching](https://www.ietf.org/mail-archive/web/json/current/msg03763.html).
+  This is to avoid differences in the interpretation of JOSE messages between
+  go-jose and libraries written in other languages.
+* When deserializing a JSON object, we check for duplicate keys and reject the
+  input whenever we detect a duplicate. Rather than trying to work with malformed
+  data, we prefer to reject it right away.
diff --git a/vendor/gopkg.in/square/go-jose.v2/json/decode.go b/vendor/gopkg.in/square/go-jose.v2/json/decode.go
new file mode 100644
index 000000000..37457e5a8
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/json/decode.go
@@ -0,0 +1,1183 @@
+// Copyright 2010 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Represents JSON data structure using native Go types: booleans, floats,
+// strings, arrays, and maps.
+
+package json
+
+import (
+	"bytes"
+	"encoding"
+	"encoding/base64"
+	"errors"
+	"fmt"
+	"reflect"
+	"runtime"
+	"strconv"
+	"unicode"
+	"unicode/utf16"
+	"unicode/utf8"
+)
+
+// Unmarshal parses the JSON-encoded data and stores the result
+// in the value pointed to by v.
+//
+// Unmarshal uses the inverse of the encodings that
+// Marshal uses, allocating maps, slices, and pointers as necessary,
+// with the following additional rules:
+//
+// To unmarshal JSON into a pointer, Unmarshal first handles the case of
+// the JSON being the JSON literal null.  In that case, Unmarshal sets
+// the pointer to nil.  Otherwise, Unmarshal unmarshals the JSON into
+// the value pointed at by the pointer.  If the pointer is nil, Unmarshal
+// allocates a new value for it to point to.
+//
+// To unmarshal JSON into a struct, Unmarshal matches incoming object
+// keys to the keys used by Marshal (either the struct field name or its tag),
+// preferring an exact match but also accepting a case-insensitive match.
+// Unmarshal will only set exported fields of the struct.
+//
+// To unmarshal JSON into an interface value,
+// Unmarshal stores one of these in the interface value:
+//
+//	bool, for JSON booleans
+//	float64, for JSON numbers
+//	string, for JSON strings
+//	[]interface{}, for JSON arrays
+//	map[string]interface{}, for JSON objects
+//	nil for JSON null
+//
+// To unmarshal a JSON array into a slice, Unmarshal resets the slice length
+// to zero and then appends each element to the slice.
+// As a special case, to unmarshal an empty JSON array into a slice,
+// Unmarshal replaces the slice with a new empty slice.
+//
+// To unmarshal a JSON array into a Go array, Unmarshal decodes
+// JSON array elements into corresponding Go array elements.
+// If the Go array is smaller than the JSON array,
+// the additional JSON array elements are discarded.
+// If the JSON array is smaller than the Go array,
+// the additional Go array elements are set to zero values.
+//
+// To unmarshal a JSON object into a string-keyed map, Unmarshal first
+// establishes a map to use, If the map is nil, Unmarshal allocates a new map.
+// Otherwise Unmarshal reuses the existing map, keeping existing entries.
+// Unmarshal then stores key-value pairs from the JSON object into the map.
+//
+// If a JSON value is not appropriate for a given target type,
+// or if a JSON number overflows the target type, Unmarshal
+// skips that field and completes the unmarshaling as best it can.
+// If no more serious errors are encountered, Unmarshal returns
+// an UnmarshalTypeError describing the earliest such error.
+//
+// The JSON null value unmarshals into an interface, map, pointer, or slice
+// by setting that Go value to nil. Because null is often used in JSON to mean
+// ``not present,'' unmarshaling a JSON null into any other Go type has no effect
+// on the value and produces no error.
+//
+// When unmarshaling quoted strings, invalid UTF-8 or
+// invalid UTF-16 surrogate pairs are not treated as an error.
+// Instead, they are replaced by the Unicode replacement
+// character U+FFFD.
+//
+func Unmarshal(data []byte, v interface{}) error {
+	// Check for well-formedness.
+	// Avoids filling out half a data structure
+	// before discovering a JSON syntax error.
+	var d decodeState
+	err := checkValid(data, &d.scan)
+	if err != nil {
+		return err
+	}
+
+	d.init(data)
+	return d.unmarshal(v)
+}
+
+// Unmarshaler is the interface implemented by objects
+// that can unmarshal a JSON description of themselves.
+// The input can be assumed to be a valid encoding of
+// a JSON value. UnmarshalJSON must copy the JSON data
+// if it wishes to retain the data after returning.
+type Unmarshaler interface {
+	UnmarshalJSON([]byte) error
+}
+
+// An UnmarshalTypeError describes a JSON value that was
+// not appropriate for a value of a specific Go type.
+type UnmarshalTypeError struct {
+	Value  string       // description of JSON value - "bool", "array", "number -5"
+	Type   reflect.Type // type of Go value it could not be assigned to
+	Offset int64        // error occurred after reading Offset bytes
+}
+
+func (e *UnmarshalTypeError) Error() string {
+	return "json: cannot unmarshal " + e.Value + " into Go value of type " + e.Type.String()
+}
+
+// An UnmarshalFieldError describes a JSON object key that
+// led to an unexported (and therefore unwritable) struct field.
+// (No longer used; kept for compatibility.)
+type UnmarshalFieldError struct {
+	Key   string
+	Type  reflect.Type
+	Field reflect.StructField
+}
+
+func (e *UnmarshalFieldError) Error() string {
+	return "json: cannot unmarshal object key " + strconv.Quote(e.Key) + " into unexported field " + e.Field.Name + " of type " + e.Type.String()
+}
+
+// An InvalidUnmarshalError describes an invalid argument passed to Unmarshal.
+// (The argument to Unmarshal must be a non-nil pointer.)
+type InvalidUnmarshalError struct {
+	Type reflect.Type
+}
+
+func (e *InvalidUnmarshalError) Error() string {
+	if e.Type == nil {
+		return "json: Unmarshal(nil)"
+	}
+
+	if e.Type.Kind() != reflect.Ptr {
+		return "json: Unmarshal(non-pointer " + e.Type.String() + ")"
+	}
+	return "json: Unmarshal(nil " + e.Type.String() + ")"
+}
+
+func (d *decodeState) unmarshal(v interface{}) (err error) {
+	defer func() {
+		if r := recover(); r != nil {
+			if _, ok := r.(runtime.Error); ok {
+				panic(r)
+			}
+			err = r.(error)
+		}
+	}()
+
+	rv := reflect.ValueOf(v)
+	if rv.Kind() != reflect.Ptr || rv.IsNil() {
+		return &InvalidUnmarshalError{reflect.TypeOf(v)}
+	}
+
+	d.scan.reset()
+	// We decode rv not rv.Elem because the Unmarshaler interface
+	// test must be applied at the top level of the value.
+	d.value(rv)
+	return d.savedError
+}
+
+// A Number represents a JSON number literal.
+type Number string
+
+// String returns the literal text of the number.
+func (n Number) String() string { return string(n) }
+
+// Float64 returns the number as a float64.
+func (n Number) Float64() (float64, error) {
+	return strconv.ParseFloat(string(n), 64)
+}
+
+// Int64 returns the number as an int64.
+func (n Number) Int64() (int64, error) {
+	return strconv.ParseInt(string(n), 10, 64)
+}
+
+// isValidNumber reports whether s is a valid JSON number literal.
+func isValidNumber(s string) bool {
+	// This function implements the JSON numbers grammar.
+	// See https://tools.ietf.org/html/rfc7159#section-6
+	// and http://json.org/number.gif
+
+	if s == "" {
+		return false
+	}
+
+	// Optional -
+	if s[0] == '-' {
+		s = s[1:]
+		if s == "" {
+			return false
+		}
+	}
+
+	// Digits
+	switch {
+	default:
+		return false
+
+	case s[0] == '0':
+		s = s[1:]
+
+	case '1' <= s[0] && s[0] <= '9':
+		s = s[1:]
+		for len(s) > 0 && '0' <= s[0] && s[0] <= '9' {
+			s = s[1:]
+		}
+	}
+
+	// . followed by 1 or more digits.
+	if len(s) >= 2 && s[0] == '.' && '0' <= s[1] && s[1] <= '9' {
+		s = s[2:]
+		for len(s) > 0 && '0' <= s[0] && s[0] <= '9' {
+			s = s[1:]
+		}
+	}
+
+	// e or E followed by an optional - or + and
+	// 1 or more digits.
+	if len(s) >= 2 && (s[0] == 'e' || s[0] == 'E') {
+		s = s[1:]
+		if s[0] == '+' || s[0] == '-' {
+			s = s[1:]
+			if s == "" {
+				return false
+			}
+		}
+		for len(s) > 0 && '0' <= s[0] && s[0] <= '9' {
+			s = s[1:]
+		}
+	}
+
+	// Make sure we are at the end.
+	return s == ""
+}
+
+// decodeState represents the state while decoding a JSON value.
+type decodeState struct {
+	data       []byte
+	off        int // read offset in data
+	scan       scanner
+	nextscan   scanner // for calls to nextValue
+	savedError error
+	useNumber  bool
+}
+
+// errPhase is used for errors that should not happen unless
+// there is a bug in the JSON decoder or something is editing
+// the data slice while the decoder executes.
+var errPhase = errors.New("JSON decoder out of sync - data changing underfoot?")
+
+func (d *decodeState) init(data []byte) *decodeState {
+	d.data = data
+	d.off = 0
+	d.savedError = nil
+	return d
+}
+
+// error aborts the decoding by panicking with err.
+func (d *decodeState) error(err error) {
+	panic(err)
+}
+
+// saveError saves the first err it is called with,
+// for reporting at the end of the unmarshal.
+func (d *decodeState) saveError(err error) {
+	if d.savedError == nil {
+		d.savedError = err
+	}
+}
+
+// next cuts off and returns the next full JSON value in d.data[d.off:].
+// The next value is known to be an object or array, not a literal.
+func (d *decodeState) next() []byte {
+	c := d.data[d.off]
+	item, rest, err := nextValue(d.data[d.off:], &d.nextscan)
+	if err != nil {
+		d.error(err)
+	}
+	d.off = len(d.data) - len(rest)
+
+	// Our scanner has seen the opening brace/bracket
+	// and thinks we're still in the middle of the object.
+	// invent a closing brace/bracket to get it out.
+	if c == '{' {
+		d.scan.step(&d.scan, '}')
+	} else {
+		d.scan.step(&d.scan, ']')
+	}
+
+	return item
+}
+
+// scanWhile processes bytes in d.data[d.off:] until it
+// receives a scan code not equal to op.
+// It updates d.off and returns the new scan code.
+func (d *decodeState) scanWhile(op int) int {
+	var newOp int
+	for {
+		if d.off >= len(d.data) {
+			newOp = d.scan.eof()
+			d.off = len(d.data) + 1 // mark processed EOF with len+1
+		} else {
+			c := d.data[d.off]
+			d.off++
+			newOp = d.scan.step(&d.scan, c)
+		}
+		if newOp != op {
+			break
+		}
+	}
+	return newOp
+}
+
+// value decodes a JSON value from d.data[d.off:] into the value.
+// it updates d.off to point past the decoded value.
+func (d *decodeState) value(v reflect.Value) {
+	if !v.IsValid() {
+		_, rest, err := nextValue(d.data[d.off:], &d.nextscan)
+		if err != nil {
+			d.error(err)
+		}
+		d.off = len(d.data) - len(rest)
+
+		// d.scan thinks we're still at the beginning of the item.
+		// Feed in an empty string - the shortest, simplest value -
+		// so that it knows we got to the end of the value.
+		if d.scan.redo {
+			// rewind.
+			d.scan.redo = false
+			d.scan.step = stateBeginValue
+		}
+		d.scan.step(&d.scan, '"')
+		d.scan.step(&d.scan, '"')
+
+		n := len(d.scan.parseState)
+		if n > 0 && d.scan.parseState[n-1] == parseObjectKey {
+			// d.scan thinks we just read an object key; finish the object
+			d.scan.step(&d.scan, ':')
+			d.scan.step(&d.scan, '"')
+			d.scan.step(&d.scan, '"')
+			d.scan.step(&d.scan, '}')
+		}
+
+		return
+	}
+
+	switch op := d.scanWhile(scanSkipSpace); op {
+	default:
+		d.error(errPhase)
+
+	case scanBeginArray:
+		d.array(v)
+
+	case scanBeginObject:
+		d.object(v)
+
+	case scanBeginLiteral:
+		d.literal(v)
+	}
+}
+
+type unquotedValue struct{}
+
+// valueQuoted is like value but decodes a
+// quoted string literal or literal null into an interface value.
+// If it finds anything other than a quoted string literal or null,
+// valueQuoted returns unquotedValue{}.
+func (d *decodeState) valueQuoted() interface{} {
+	switch op := d.scanWhile(scanSkipSpace); op {
+	default:
+		d.error(errPhase)
+
+	case scanBeginArray:
+		d.array(reflect.Value{})
+
+	case scanBeginObject:
+		d.object(reflect.Value{})
+
+	case scanBeginLiteral:
+		switch v := d.literalInterface().(type) {
+		case nil, string:
+			return v
+		}
+	}
+	return unquotedValue{}
+}
+
+// indirect walks down v allocating pointers as needed,
+// until it gets to a non-pointer.
+// if it encounters an Unmarshaler, indirect stops and returns that.
+// if decodingNull is true, indirect stops at the last pointer so it can be set to nil.
+func (d *decodeState) indirect(v reflect.Value, decodingNull bool) (Unmarshaler, encoding.TextUnmarshaler, reflect.Value) {
+	// If v is a named type and is addressable,
+	// start with its address, so that if the type has pointer methods,
+	// we find them.
+	if v.Kind() != reflect.Ptr && v.Type().Name() != "" && v.CanAddr() {
+		v = v.Addr()
+	}
+	for {
+		// Load value from interface, but only if the result will be
+		// usefully addressable.
+		if v.Kind() == reflect.Interface && !v.IsNil() {
+			e := v.Elem()
+			if e.Kind() == reflect.Ptr && !e.IsNil() && (!decodingNull || e.Elem().Kind() == reflect.Ptr) {
+				v = e
+				continue
+			}
+		}
+
+		if v.Kind() != reflect.Ptr {
+			break
+		}
+
+		if v.Elem().Kind() != reflect.Ptr && decodingNull && v.CanSet() {
+			break
+		}
+		if v.IsNil() {
+			v.Set(reflect.New(v.Type().Elem()))
+		}
+		if v.Type().NumMethod() > 0 {
+			if u, ok := v.Interface().(Unmarshaler); ok {
+				return u, nil, reflect.Value{}
+			}
+			if u, ok := v.Interface().(encoding.TextUnmarshaler); ok {
+				return nil, u, reflect.Value{}
+			}
+		}
+		v = v.Elem()
+	}
+	return nil, nil, v
+}
+
+// array consumes an array from d.data[d.off-1:], decoding into the value v.
+// the first byte of the array ('[') has been read already.
+func (d *decodeState) array(v reflect.Value) {
+	// Check for unmarshaler.
+	u, ut, pv := d.indirect(v, false)
+	if u != nil {
+		d.off--
+		err := u.UnmarshalJSON(d.next())
+		if err != nil {
+			d.error(err)
+		}
+		return
+	}
+	if ut != nil {
+		d.saveError(&UnmarshalTypeError{"array", v.Type(), int64(d.off)})
+		d.off--
+		d.next()
+		return
+	}
+
+	v = pv
+
+	// Check type of target.
+	switch v.Kind() {
+	case reflect.Interface:
+		if v.NumMethod() == 0 {
+			// Decoding into nil interface?  Switch to non-reflect code.
+			v.Set(reflect.ValueOf(d.arrayInterface()))
+			return
+		}
+		// Otherwise it's invalid.
+		fallthrough
+	default:
+		d.saveError(&UnmarshalTypeError{"array", v.Type(), int64(d.off)})
+		d.off--
+		d.next()
+		return
+	case reflect.Array:
+	case reflect.Slice:
+		break
+	}
+
+	i := 0
+	for {
+		// Look ahead for ] - can only happen on first iteration.
+		op := d.scanWhile(scanSkipSpace)
+		if op == scanEndArray {
+			break
+		}
+
+		// Back up so d.value can have the byte we just read.
+		d.off--
+		d.scan.undo(op)
+
+		// Get element of array, growing if necessary.
+		if v.Kind() == reflect.Slice {
+			// Grow slice if necessary
+			if i >= v.Cap() {
+				newcap := v.Cap() + v.Cap()/2
+				if newcap < 4 {
+					newcap = 4
+				}
+				newv := reflect.MakeSlice(v.Type(), v.Len(), newcap)
+				reflect.Copy(newv, v)
+				v.Set(newv)
+			}
+			if i >= v.Len() {
+				v.SetLen(i + 1)
+			}
+		}
+
+		if i < v.Len() {
+			// Decode into element.
+			d.value(v.Index(i))
+		} else {
+			// Ran out of fixed array: skip.
+			d.value(reflect.Value{})
+		}
+		i++
+
+		// Next token must be , or ].
+		op = d.scanWhile(scanSkipSpace)
+		if op == scanEndArray {
+			break
+		}
+		if op != scanArrayValue {
+			d.error(errPhase)
+		}
+	}
+
+	if i < v.Len() {
+		if v.Kind() == reflect.Array {
+			// Array.  Zero the rest.
+			z := reflect.Zero(v.Type().Elem())
+			for ; i < v.Len(); i++ {
+				v.Index(i).Set(z)
+			}
+		} else {
+			v.SetLen(i)
+		}
+	}
+	if i == 0 && v.Kind() == reflect.Slice {
+		v.Set(reflect.MakeSlice(v.Type(), 0, 0))
+	}
+}
+
+var nullLiteral = []byte("null")
+
+// object consumes an object from d.data[d.off-1:], decoding into the value v.
+// the first byte ('{') of the object has been read already.
+func (d *decodeState) object(v reflect.Value) {
+	// Check for unmarshaler.
+	u, ut, pv := d.indirect(v, false)
+	if u != nil {
+		d.off--
+		err := u.UnmarshalJSON(d.next())
+		if err != nil {
+			d.error(err)
+		}
+		return
+	}
+	if ut != nil {
+		d.saveError(&UnmarshalTypeError{"object", v.Type(), int64(d.off)})
+		d.off--
+		d.next() // skip over { } in input
+		return
+	}
+	v = pv
+
+	// Decoding into nil interface?  Switch to non-reflect code.
+	if v.Kind() == reflect.Interface && v.NumMethod() == 0 {
+		v.Set(reflect.ValueOf(d.objectInterface()))
+		return
+	}
+
+	// Check type of target: struct or map[string]T
+	switch v.Kind() {
+	case reflect.Map:
+		// map must have string kind
+		t := v.Type()
+		if t.Key().Kind() != reflect.String {
+			d.saveError(&UnmarshalTypeError{"object", v.Type(), int64(d.off)})
+			d.off--
+			d.next() // skip over { } in input
+			return
+		}
+		if v.IsNil() {
+			v.Set(reflect.MakeMap(t))
+		}
+	case reflect.Struct:
+
+	default:
+		d.saveError(&UnmarshalTypeError{"object", v.Type(), int64(d.off)})
+		d.off--
+		d.next() // skip over { } in input
+		return
+	}
+
+	var mapElem reflect.Value
+	keys := map[string]bool{}
+
+	for {
+		// Read opening " of string key or closing }.
+		op := d.scanWhile(scanSkipSpace)
+		if op == scanEndObject {
+			// closing } - can only happen on first iteration.
+			break
+		}
+		if op != scanBeginLiteral {
+			d.error(errPhase)
+		}
+
+		// Read key.
+		start := d.off - 1
+		op = d.scanWhile(scanContinue)
+		item := d.data[start : d.off-1]
+		key, ok := unquote(item)
+		if !ok {
+			d.error(errPhase)
+		}
+
+		// Check for duplicate keys.
+		_, ok = keys[key]
+		if !ok {
+			keys[key] = true
+		} else {
+			d.error(fmt.Errorf("json: duplicate key '%s' in object", key))
+		}
+
+		// Figure out field corresponding to key.
+		var subv reflect.Value
+		destring := false // whether the value is wrapped in a string to be decoded first
+
+		if v.Kind() == reflect.Map {
+			elemType := v.Type().Elem()
+			if !mapElem.IsValid() {
+				mapElem = reflect.New(elemType).Elem()
+			} else {
+				mapElem.Set(reflect.Zero(elemType))
+			}
+			subv = mapElem
+		} else {
+			var f *field
+			fields := cachedTypeFields(v.Type())
+			for i := range fields {
+				ff := &fields[i]
+				if bytes.Equal(ff.nameBytes, []byte(key)) {
+					f = ff
+					break
+				}
+			}
+			if f != nil {
+				subv = v
+				destring = f.quoted
+				for _, i := range f.index {
+					if subv.Kind() == reflect.Ptr {
+						if subv.IsNil() {
+							subv.Set(reflect.New(subv.Type().Elem()))
+						}
+						subv = subv.Elem()
+					}
+					subv = subv.Field(i)
+				}
+			}
+		}
+
+		// Read : before value.
+		if op == scanSkipSpace {
+			op = d.scanWhile(scanSkipSpace)
+		}
+		if op != scanObjectKey {
+			d.error(errPhase)
+		}
+
+		// Read value.
+		if destring {
+			switch qv := d.valueQuoted().(type) {
+			case nil:
+				d.literalStore(nullLiteral, subv, false)
+			case string:
+				d.literalStore([]byte(qv), subv, true)
+			default:
+				d.saveError(fmt.Errorf("json: invalid use of ,string struct tag, trying to unmarshal unquoted value into %v", subv.Type()))
+			}
+		} else {
+			d.value(subv)
+		}
+
+		// Write value back to map;
+		// if using struct, subv points into struct already.
+		if v.Kind() == reflect.Map {
+			kv := reflect.ValueOf(key).Convert(v.Type().Key())
+			v.SetMapIndex(kv, subv)
+		}
+
+		// Next token must be , or }.
+		op = d.scanWhile(scanSkipSpace)
+		if op == scanEndObject {
+			break
+		}
+		if op != scanObjectValue {
+			d.error(errPhase)
+		}
+	}
+}
+
+// literal consumes a literal from d.data[d.off-1:], decoding into the value v.
+// The first byte of the literal has been read already
+// (that's how the caller knows it's a literal).
+func (d *decodeState) literal(v reflect.Value) {
+	// All bytes inside literal return scanContinue op code.
+	start := d.off - 1
+	op := d.scanWhile(scanContinue)
+
+	// Scan read one byte too far; back up.
+	d.off--
+	d.scan.undo(op)
+
+	d.literalStore(d.data[start:d.off], v, false)
+}
+
+// convertNumber converts the number literal s to a float64 or a Number
+// depending on the setting of d.useNumber.
+func (d *decodeState) convertNumber(s string) (interface{}, error) {
+	if d.useNumber {
+		return Number(s), nil
+	}
+	f, err := strconv.ParseFloat(s, 64)
+	if err != nil {
+		return nil, &UnmarshalTypeError{"number " + s, reflect.TypeOf(0.0), int64(d.off)}
+	}
+	return f, nil
+}
+
+var numberType = reflect.TypeOf(Number(""))
+
+// literalStore decodes a literal stored in item into v.
+//
+// fromQuoted indicates whether this literal came from unwrapping a
+// string from the ",string" struct tag option. this is used only to
+// produce more helpful error messages.
+func (d *decodeState) literalStore(item []byte, v reflect.Value, fromQuoted bool) {
+	// Check for unmarshaler.
+	if len(item) == 0 {
+		//Empty string given
+		d.saveError(fmt.Errorf("json: invalid use of ,string struct tag, trying to unmarshal %q into %v", item, v.Type()))
+		return
+	}
+	wantptr := item[0] == 'n' // null
+	u, ut, pv := d.indirect(v, wantptr)
+	if u != nil {
+		err := u.UnmarshalJSON(item)
+		if err != nil {
+			d.error(err)
+		}
+		return
+	}
+	if ut != nil {
+		if item[0] != '"' {
+			if fromQuoted {
+				d.saveError(fmt.Errorf("json: invalid use of ,string struct tag, trying to unmarshal %q into %v", item, v.Type()))
+			} else {
+				d.saveError(&UnmarshalTypeError{"string", v.Type(), int64(d.off)})
+			}
+			return
+		}
+		s, ok := unquoteBytes(item)
+		if !ok {
+			if fromQuoted {
+				d.error(fmt.Errorf("json: invalid use of ,string struct tag, trying to unmarshal %q into %v", item, v.Type()))
+			} else {
+				d.error(errPhase)
+			}
+		}
+		err := ut.UnmarshalText(s)
+		if err != nil {
+			d.error(err)
+		}
+		return
+	}
+
+	v = pv
+
+	switch c := item[0]; c {
+	case 'n': // null
+		switch v.Kind() {
+		case reflect.Interface, reflect.Ptr, reflect.Map, reflect.Slice:
+			v.Set(reflect.Zero(v.Type()))
+			// otherwise, ignore null for primitives/string
+		}
+	case 't', 'f': // true, false
+		value := c == 't'
+		switch v.Kind() {
+		default:
+			if fromQuoted {
+				d.saveError(fmt.Errorf("json: invalid use of ,string struct tag, trying to unmarshal %q into %v", item, v.Type()))
+			} else {
+				d.saveError(&UnmarshalTypeError{"bool", v.Type(), int64(d.off)})
+			}
+		case reflect.Bool:
+			v.SetBool(value)
+		case reflect.Interface:
+			if v.NumMethod() == 0 {
+				v.Set(reflect.ValueOf(value))
+			} else {
+				d.saveError(&UnmarshalTypeError{"bool", v.Type(), int64(d.off)})
+			}
+		}
+
+	case '"': // string
+		s, ok := unquoteBytes(item)
+		if !ok {
+			if fromQuoted {
+				d.error(fmt.Errorf("json: invalid use of ,string struct tag, trying to unmarshal %q into %v", item, v.Type()))
+			} else {
+				d.error(errPhase)
+			}
+		}
+		switch v.Kind() {
+		default:
+			d.saveError(&UnmarshalTypeError{"string", v.Type(), int64(d.off)})
+		case reflect.Slice:
+			if v.Type().Elem().Kind() != reflect.Uint8 {
+				d.saveError(&UnmarshalTypeError{"string", v.Type(), int64(d.off)})
+				break
+			}
+			b := make([]byte, base64.StdEncoding.DecodedLen(len(s)))
+			n, err := base64.StdEncoding.Decode(b, s)
+			if err != nil {
+				d.saveError(err)
+				break
+			}
+			v.SetBytes(b[:n])
+		case reflect.String:
+			v.SetString(string(s))
+		case reflect.Interface:
+			if v.NumMethod() == 0 {
+				v.Set(reflect.ValueOf(string(s)))
+			} else {
+				d.saveError(&UnmarshalTypeError{"string", v.Type(), int64(d.off)})
+			}
+		}
+
+	default: // number
+		if c != '-' && (c < '0' || c > '9') {
+			if fromQuoted {
+				d.error(fmt.Errorf("json: invalid use of ,string struct tag, trying to unmarshal %q into %v", item, v.Type()))
+			} else {
+				d.error(errPhase)
+			}
+		}
+		s := string(item)
+		switch v.Kind() {
+		default:
+			if v.Kind() == reflect.String && v.Type() == numberType {
+				v.SetString(s)
+				if !isValidNumber(s) {
+					d.error(fmt.Errorf("json: invalid number literal, trying to unmarshal %q into Number", item))
+				}
+				break
+			}
+			if fromQuoted {
+				d.error(fmt.Errorf("json: invalid use of ,string struct tag, trying to unmarshal %q into %v", item, v.Type()))
+			} else {
+				d.error(&UnmarshalTypeError{"number", v.Type(), int64(d.off)})
+			}
+		case reflect.Interface:
+			n, err := d.convertNumber(s)
+			if err != nil {
+				d.saveError(err)
+				break
+			}
+			if v.NumMethod() != 0 {
+				d.saveError(&UnmarshalTypeError{"number", v.Type(), int64(d.off)})
+				break
+			}
+			v.Set(reflect.ValueOf(n))
+
+		case reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64:
+			n, err := strconv.ParseInt(s, 10, 64)
+			if err != nil || v.OverflowInt(n) {
+				d.saveError(&UnmarshalTypeError{"number " + s, v.Type(), int64(d.off)})
+				break
+			}
+			v.SetInt(n)
+
+		case reflect.Uint, reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64, reflect.Uintptr:
+			n, err := strconv.ParseUint(s, 10, 64)
+			if err != nil || v.OverflowUint(n) {
+				d.saveError(&UnmarshalTypeError{"number " + s, v.Type(), int64(d.off)})
+				break
+			}
+			v.SetUint(n)
+
+		case reflect.Float32, reflect.Float64:
+			n, err := strconv.ParseFloat(s, v.Type().Bits())
+			if err != nil || v.OverflowFloat(n) {
+				d.saveError(&UnmarshalTypeError{"number " + s, v.Type(), int64(d.off)})
+				break
+			}
+			v.SetFloat(n)
+		}
+	}
+}
+
+// The xxxInterface routines build up a value to be stored
+// in an empty interface.  They are not strictly necessary,
+// but they avoid the weight of reflection in this common case.
+
+// valueInterface is like value but returns interface{}
+func (d *decodeState) valueInterface() interface{} {
+	switch d.scanWhile(scanSkipSpace) {
+	default:
+		d.error(errPhase)
+		panic("unreachable")
+	case scanBeginArray:
+		return d.arrayInterface()
+	case scanBeginObject:
+		return d.objectInterface()
+	case scanBeginLiteral:
+		return d.literalInterface()
+	}
+}
+
+// arrayInterface is like array but returns []interface{}.
+func (d *decodeState) arrayInterface() []interface{} {
+	var v = make([]interface{}, 0)
+	for {
+		// Look ahead for ] - can only happen on first iteration.
+		op := d.scanWhile(scanSkipSpace)
+		if op == scanEndArray {
+			break
+		}
+
+		// Back up so d.value can have the byte we just read.
+		d.off--
+		d.scan.undo(op)
+
+		v = append(v, d.valueInterface())
+
+		// Next token must be , or ].
+		op = d.scanWhile(scanSkipSpace)
+		if op == scanEndArray {
+			break
+		}
+		if op != scanArrayValue {
+			d.error(errPhase)
+		}
+	}
+	return v
+}
+
+// objectInterface is like object but returns map[string]interface{}.
+func (d *decodeState) objectInterface() map[string]interface{} {
+	m := make(map[string]interface{})
+	keys := map[string]bool{}
+
+	for {
+		// Read opening " of string key or closing }.
+		op := d.scanWhile(scanSkipSpace)
+		if op == scanEndObject {
+			// closing } - can only happen on first iteration.
+			break
+		}
+		if op != scanBeginLiteral {
+			d.error(errPhase)
+		}
+
+		// Read string key.
+		start := d.off - 1
+		op = d.scanWhile(scanContinue)
+		item := d.data[start : d.off-1]
+		key, ok := unquote(item)
+		if !ok {
+			d.error(errPhase)
+		}
+
+		// Check for duplicate keys.
+		_, ok = keys[key]
+		if !ok {
+			keys[key] = true
+		} else {
+			d.error(fmt.Errorf("json: duplicate key '%s' in object", key))
+		}
+
+		// Read : before value.
+		if op == scanSkipSpace {
+			op = d.scanWhile(scanSkipSpace)
+		}
+		if op != scanObjectKey {
+			d.error(errPhase)
+		}
+
+		// Read value.
+		m[key] = d.valueInterface()
+
+		// Next token must be , or }.
+		op = d.scanWhile(scanSkipSpace)
+		if op == scanEndObject {
+			break
+		}
+		if op != scanObjectValue {
+			d.error(errPhase)
+		}
+	}
+	return m
+}
+
+// literalInterface is like literal but returns an interface value.
+func (d *decodeState) literalInterface() interface{} {
+	// All bytes inside literal return scanContinue op code.
+	start := d.off - 1
+	op := d.scanWhile(scanContinue)
+
+	// Scan read one byte too far; back up.
+	d.off--
+	d.scan.undo(op)
+	item := d.data[start:d.off]
+
+	switch c := item[0]; c {
+	case 'n': // null
+		return nil
+
+	case 't', 'f': // true, false
+		return c == 't'
+
+	case '"': // string
+		s, ok := unquote(item)
+		if !ok {
+			d.error(errPhase)
+		}
+		return s
+
+	default: // number
+		if c != '-' && (c < '0' || c > '9') {
+			d.error(errPhase)
+		}
+		n, err := d.convertNumber(string(item))
+		if err != nil {
+			d.saveError(err)
+		}
+		return n
+	}
+}
+
+// getu4 decodes \uXXXX from the beginning of s, returning the hex value,
+// or it returns -1.
+func getu4(s []byte) rune {
+	if len(s) < 6 || s[0] != '\\' || s[1] != 'u' {
+		return -1
+	}
+	r, err := strconv.ParseUint(string(s[2:6]), 16, 64)
+	if err != nil {
+		return -1
+	}
+	return rune(r)
+}
+
+// unquote converts a quoted JSON string literal s into an actual string t.
+// The rules are different than for Go, so cannot use strconv.Unquote.
+func unquote(s []byte) (t string, ok bool) {
+	s, ok = unquoteBytes(s)
+	t = string(s)
+	return
+}
+
+func unquoteBytes(s []byte) (t []byte, ok bool) {
+	if len(s) < 2 || s[0] != '"' || s[len(s)-1] != '"' {
+		return
+	}
+	s = s[1 : len(s)-1]
+
+	// Check for unusual characters. If there are none,
+	// then no unquoting is needed, so return a slice of the
+	// original bytes.
+	r := 0
+	for r < len(s) {
+		c := s[r]
+		if c == '\\' || c == '"' || c < ' ' {
+			break
+		}
+		if c < utf8.RuneSelf {
+			r++
+			continue
+		}
+		rr, size := utf8.DecodeRune(s[r:])
+		if rr == utf8.RuneError && size == 1 {
+			break
+		}
+		r += size
+	}
+	if r == len(s) {
+		return s, true
+	}
+
+	b := make([]byte, len(s)+2*utf8.UTFMax)
+	w := copy(b, s[0:r])
+	for r < len(s) {
+		// Out of room?  Can only happen if s is full of
+		// malformed UTF-8 and we're replacing each
+		// byte with RuneError.
+		if w >= len(b)-2*utf8.UTFMax {
+			nb := make([]byte, (len(b)+utf8.UTFMax)*2)
+			copy(nb, b[0:w])
+			b = nb
+		}
+		switch c := s[r]; {
+		case c == '\\':
+			r++
+			if r >= len(s) {
+				return
+			}
+			switch s[r] {
+			default:
+				return
+			case '"', '\\', '/', '\'':
+				b[w] = s[r]
+				r++
+				w++
+			case 'b':
+				b[w] = '\b'
+				r++
+				w++
+			case 'f':
+				b[w] = '\f'
+				r++
+				w++
+			case 'n':
+				b[w] = '\n'
+				r++
+				w++
+			case 'r':
+				b[w] = '\r'
+				r++
+				w++
+			case 't':
+				b[w] = '\t'
+				r++
+				w++
+			case 'u':
+				r--
+				rr := getu4(s[r:])
+				if rr < 0 {
+					return
+				}
+				r += 6
+				if utf16.IsSurrogate(rr) {
+					rr1 := getu4(s[r:])
+					if dec := utf16.DecodeRune(rr, rr1); dec != unicode.ReplacementChar {
+						// A valid pair; consume.
+						r += 6
+						w += utf8.EncodeRune(b[w:], dec)
+						break
+					}
+					// Invalid surrogate; fall back to replacement rune.
+					rr = unicode.ReplacementChar
+				}
+				w += utf8.EncodeRune(b[w:], rr)
+			}
+
+		// Quote, control characters are invalid.
+		case c == '"', c < ' ':
+			return
+
+		// ASCII
+		case c < utf8.RuneSelf:
+			b[w] = c
+			r++
+			w++
+
+		// Coerce to well-formed UTF-8.
+		default:
+			rr, size := utf8.DecodeRune(s[r:])
+			r += size
+			w += utf8.EncodeRune(b[w:], rr)
+		}
+	}
+	return b[0:w], true
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/json/encode.go b/vendor/gopkg.in/square/go-jose.v2/json/encode.go
new file mode 100644
index 000000000..1dae8bb7c
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/json/encode.go
@@ -0,0 +1,1197 @@
+// Copyright 2010 The Go Authors.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Package json implements encoding and decoding of JSON objects as defined in
+// RFC 4627. The mapping between JSON objects and Go values is described
+// in the documentation for the Marshal and Unmarshal functions.
+//
+// See "JSON and Go" for an introduction to this package:
+// https://golang.org/doc/articles/json_and_go.html
+package json
+
+import (
+	"bytes"
+	"encoding"
+	"encoding/base64"
+	"fmt"
+	"math"
+	"reflect"
+	"runtime"
+	"sort"
+	"strconv"
+	"strings"
+	"sync"
+	"unicode"
+	"unicode/utf8"
+)
+
+// Marshal returns the JSON encoding of v.
+//
+// Marshal traverses the value v recursively.
+// If an encountered value implements the Marshaler interface
+// and is not a nil pointer, Marshal calls its MarshalJSON method
+// to produce JSON. If no MarshalJSON method is present but the
+// value implements encoding.TextMarshaler instead, Marshal calls
+// its MarshalText method.
+// The nil pointer exception is not strictly necessary
+// but mimics a similar, necessary exception in the behavior of
+// UnmarshalJSON.
+//
+// Otherwise, Marshal uses the following type-dependent default encodings:
+//
+// Boolean values encode as JSON booleans.
+//
+// Floating point, integer, and Number values encode as JSON numbers.
+//
+// String values encode as JSON strings coerced to valid UTF-8,
+// replacing invalid bytes with the Unicode replacement rune.
+// The angle brackets "<" and ">" are escaped to "\u003c" and "\u003e"
+// to keep some browsers from misinterpreting JSON output as HTML.
+// Ampersand "&" is also escaped to "\u0026" for the same reason.
+//
+// Array and slice values encode as JSON arrays, except that
+// []byte encodes as a base64-encoded string, and a nil slice
+// encodes as the null JSON object.
+//
+// Struct values encode as JSON objects. Each exported struct field
+// becomes a member of the object unless
+//   - the field's tag is "-", or
+//   - the field is empty and its tag specifies the "omitempty" option.
+// The empty values are false, 0, any
+// nil pointer or interface value, and any array, slice, map, or string of
+// length zero. The object's default key string is the struct field name
+// but can be specified in the struct field's tag value. The "json" key in
+// the struct field's tag value is the key name, followed by an optional comma
+// and options. Examples:
+//
+//   // Field is ignored by this package.
+//   Field int `json:"-"`
+//
+//   // Field appears in JSON as key "myName".
+//   Field int `json:"myName"`
+//
+//   // Field appears in JSON as key "myName" and
+//   // the field is omitted from the object if its value is empty,
+//   // as defined above.
+//   Field int `json:"myName,omitempty"`
+//
+//   // Field appears in JSON as key "Field" (the default), but
+//   // the field is skipped if empty.
+//   // Note the leading comma.
+//   Field int `json:",omitempty"`
+//
+// The "string" option signals that a field is stored as JSON inside a
+// JSON-encoded string. It applies only to fields of string, floating point,
+// integer, or boolean types. This extra level of encoding is sometimes used
+// when communicating with JavaScript programs:
+//
+//    Int64String int64 `json:",string"`
+//
+// The key name will be used if it's a non-empty string consisting of
+// only Unicode letters, digits, dollar signs, percent signs, hyphens,
+// underscores and slashes.
+//
+// Anonymous struct fields are usually marshaled as if their inner exported fields
+// were fields in the outer struct, subject to the usual Go visibility rules amended
+// as described in the next paragraph.
+// An anonymous struct field with a name given in its JSON tag is treated as
+// having that name, rather than being anonymous.
+// An anonymous struct field of interface type is treated the same as having
+// that type as its name, rather than being anonymous.
+//
+// The Go visibility rules for struct fields are amended for JSON when
+// deciding which field to marshal or unmarshal. If there are
+// multiple fields at the same level, and that level is the least
+// nested (and would therefore be the nesting level selected by the
+// usual Go rules), the following extra rules apply:
+//
+// 1) Of those fields, if any are JSON-tagged, only tagged fields are considered,
+// even if there are multiple untagged fields that would otherwise conflict.
+// 2) If there is exactly one field (tagged or not according to the first rule), that is selected.
+// 3) Otherwise there are multiple fields, and all are ignored; no error occurs.
+//
+// Handling of anonymous struct fields is new in Go 1.1.
+// Prior to Go 1.1, anonymous struct fields were ignored. To force ignoring of
+// an anonymous struct field in both current and earlier versions, give the field
+// a JSON tag of "-".
+//
+// Map values encode as JSON objects.
+// The map's key type must be string; the map keys are used as JSON object
+// keys, subject to the UTF-8 coercion described for string values above.
+//
+// Pointer values encode as the value pointed to.
+// A nil pointer encodes as the null JSON object.
+//
+// Interface values encode as the value contained in the interface.
+// A nil interface value encodes as the null JSON object.
+//
+// Channel, complex, and function values cannot be encoded in JSON.
+// Attempting to encode such a value causes Marshal to return
+// an UnsupportedTypeError.
+//
+// JSON cannot represent cyclic data structures and Marshal does not
+// handle them.  Passing cyclic structures to Marshal will result in
+// an infinite recursion.
+//
+func Marshal(v interface{}) ([]byte, error) {
+	e := &encodeState{}
+	err := e.marshal(v)
+	if err != nil {
+		return nil, err
+	}
+	return e.Bytes(), nil
+}
+
+// MarshalIndent is like Marshal but applies Indent to format the output.
+func MarshalIndent(v interface{}, prefix, indent string) ([]byte, error) {
+	b, err := Marshal(v)
+	if err != nil {
+		return nil, err
+	}
+	var buf bytes.Buffer
+	err = Indent(&buf, b, prefix, indent)
+	if err != nil {
+		return nil, err
+	}
+	return buf.Bytes(), nil
+}
+
+// HTMLEscape appends to dst the JSON-encoded src with <, >, &, U+2028 and U+2029
+// characters inside string literals changed to \u003c, \u003e, \u0026, \u2028, \u2029
+// so that the JSON will be safe to embed inside HTML <script> tags.
+// For historical reasons, web browsers don't honor standard HTML
+// escaping within <script> tags, so an alternative JSON encoding must
+// be used.
+func HTMLEscape(dst *bytes.Buffer, src []byte) {
+	// The characters can only appear in string literals,
+	// so just scan the string one byte at a time.
+	start := 0
+	for i, c := range src {
+		if c == '<' || c == '>' || c == '&' {
+			if start < i {
+				dst.Write(src[start:i])
+			}
+			dst.WriteString(`\u00`)
+			dst.WriteByte(hex[c>>4])
+			dst.WriteByte(hex[c&0xF])
+			start = i + 1
+		}
+		// Convert U+2028 and U+2029 (E2 80 A8 and E2 80 A9).
+		if c == 0xE2 && i+2 < len(src) && src[i+1] == 0x80 && src[i+2]&^1 == 0xA8 {
+			if start < i {
+				dst.Write(src[start:i])
+			}
+			dst.WriteString(`\u202`)
+			dst.WriteByte(hex[src[i+2]&0xF])
+			start = i + 3
+		}
+	}
+	if start < len(src) {
+		dst.Write(src[start:])
+	}
+}
+
+// Marshaler is the interface implemented by objects that
+// can marshal themselves into valid JSON.
+type Marshaler interface {
+	MarshalJSON() ([]byte, error)
+}
+
+// An UnsupportedTypeError is returned by Marshal when attempting
+// to encode an unsupported value type.
+type UnsupportedTypeError struct {
+	Type reflect.Type
+}
+
+func (e *UnsupportedTypeError) Error() string {
+	return "json: unsupported type: " + e.Type.String()
+}
+
+type UnsupportedValueError struct {
+	Value reflect.Value
+	Str   string
+}
+
+func (e *UnsupportedValueError) Error() string {
+	return "json: unsupported value: " + e.Str
+}
+
+// Before Go 1.2, an InvalidUTF8Error was returned by Marshal when
+// attempting to encode a string value with invalid UTF-8 sequences.
+// As of Go 1.2, Marshal instead coerces the string to valid UTF-8 by
+// replacing invalid bytes with the Unicode replacement rune U+FFFD.
+// This error is no longer generated but is kept for backwards compatibility
+// with programs that might mention it.
+type InvalidUTF8Error struct {
+	S string // the whole string value that caused the error
+}
+
+func (e *InvalidUTF8Error) Error() string {
+	return "json: invalid UTF-8 in string: " + strconv.Quote(e.S)
+}
+
+type MarshalerError struct {
+	Type reflect.Type
+	Err  error
+}
+
+func (e *MarshalerError) Error() string {
+	return "json: error calling MarshalJSON for type " + e.Type.String() + ": " + e.Err.Error()
+}
+
+var hex = "0123456789abcdef"
+
+// An encodeState encodes JSON into a bytes.Buffer.
+type encodeState struct {
+	bytes.Buffer // accumulated output
+	scratch      [64]byte
+}
+
+var encodeStatePool sync.Pool
+
+func newEncodeState() *encodeState {
+	if v := encodeStatePool.Get(); v != nil {
+		e := v.(*encodeState)
+		e.Reset()
+		return e
+	}
+	return new(encodeState)
+}
+
+func (e *encodeState) marshal(v interface{}) (err error) {
+	defer func() {
+		if r := recover(); r != nil {
+			if _, ok := r.(runtime.Error); ok {
+				panic(r)
+			}
+			if s, ok := r.(string); ok {
+				panic(s)
+			}
+			err = r.(error)
+		}
+	}()
+	e.reflectValue(reflect.ValueOf(v))
+	return nil
+}
+
+func (e *encodeState) error(err error) {
+	panic(err)
+}
+
+func isEmptyValue(v reflect.Value) bool {
+	switch v.Kind() {
+	case reflect.Array, reflect.Map, reflect.Slice, reflect.String:
+		return v.Len() == 0
+	case reflect.Bool:
+		return !v.Bool()
+	case reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64:
+		return v.Int() == 0
+	case reflect.Uint, reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64, reflect.Uintptr:
+		return v.Uint() == 0
+	case reflect.Float32, reflect.Float64:
+		return v.Float() == 0
+	case reflect.Interface, reflect.Ptr:
+		return v.IsNil()
+	}
+	return false
+}
+
+func (e *encodeState) reflectValue(v reflect.Value) {
+	valueEncoder(v)(e, v, false)
+}
+
+type encoderFunc func(e *encodeState, v reflect.Value, quoted bool)
+
+var encoderCache struct {
+	sync.RWMutex
+	m map[reflect.Type]encoderFunc
+}
+
+func valueEncoder(v reflect.Value) encoderFunc {
+	if !v.IsValid() {
+		return invalidValueEncoder
+	}
+	return typeEncoder(v.Type())
+}
+
+func typeEncoder(t reflect.Type) encoderFunc {
+	encoderCache.RLock()
+	f := encoderCache.m[t]
+	encoderCache.RUnlock()
+	if f != nil {
+		return f
+	}
+
+	// To deal with recursive types, populate the map with an
+	// indirect func before we build it. This type waits on the
+	// real func (f) to be ready and then calls it.  This indirect
+	// func is only used for recursive types.
+	encoderCache.Lock()
+	if encoderCache.m == nil {
+		encoderCache.m = make(map[reflect.Type]encoderFunc)
+	}
+	var wg sync.WaitGroup
+	wg.Add(1)
+	encoderCache.m[t] = func(e *encodeState, v reflect.Value, quoted bool) {
+		wg.Wait()
+		f(e, v, quoted)
+	}
+	encoderCache.Unlock()
+
+	// Compute fields without lock.
+	// Might duplicate effort but won't hold other computations back.
+	f = newTypeEncoder(t, true)
+	wg.Done()
+	encoderCache.Lock()
+	encoderCache.m[t] = f
+	encoderCache.Unlock()
+	return f
+}
+
+var (
+	marshalerType     = reflect.TypeOf(new(Marshaler)).Elem()
+	textMarshalerType = reflect.TypeOf(new(encoding.TextMarshaler)).Elem()
+)
+
+// newTypeEncoder constructs an encoderFunc for a type.
+// The returned encoder only checks CanAddr when allowAddr is true.
+func newTypeEncoder(t reflect.Type, allowAddr bool) encoderFunc {
+	if t.Implements(marshalerType) {
+		return marshalerEncoder
+	}
+	if t.Kind() != reflect.Ptr && allowAddr {
+		if reflect.PtrTo(t).Implements(marshalerType) {
+			return newCondAddrEncoder(addrMarshalerEncoder, newTypeEncoder(t, false))
+		}
+	}
+
+	if t.Implements(textMarshalerType) {
+		return textMarshalerEncoder
+	}
+	if t.Kind() != reflect.Ptr && allowAddr {
+		if reflect.PtrTo(t).Implements(textMarshalerType) {
+			return newCondAddrEncoder(addrTextMarshalerEncoder, newTypeEncoder(t, false))
+		}
+	}
+
+	switch t.Kind() {
+	case reflect.Bool:
+		return boolEncoder
+	case reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64:
+		return intEncoder
+	case reflect.Uint, reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64, reflect.Uintptr:
+		return uintEncoder
+	case reflect.Float32:
+		return float32Encoder
+	case reflect.Float64:
+		return float64Encoder
+	case reflect.String:
+		return stringEncoder
+	case reflect.Interface:
+		return interfaceEncoder
+	case reflect.Struct:
+		return newStructEncoder(t)
+	case reflect.Map:
+		return newMapEncoder(t)
+	case reflect.Slice:
+		return newSliceEncoder(t)
+	case reflect.Array:
+		return newArrayEncoder(t)
+	case reflect.Ptr:
+		return newPtrEncoder(t)
+	default:
+		return unsupportedTypeEncoder
+	}
+}
+
+func invalidValueEncoder(e *encodeState, v reflect.Value, quoted bool) {
+	e.WriteString("null")
+}
+
+func marshalerEncoder(e *encodeState, v reflect.Value, quoted bool) {
+	if v.Kind() == reflect.Ptr && v.IsNil() {
+		e.WriteString("null")
+		return
+	}
+	m := v.Interface().(Marshaler)
+	b, err := m.MarshalJSON()
+	if err == nil {
+		// copy JSON into buffer, checking validity.
+		err = compact(&e.Buffer, b, true)
+	}
+	if err != nil {
+		e.error(&MarshalerError{v.Type(), err})
+	}
+}
+
+func addrMarshalerEncoder(e *encodeState, v reflect.Value, quoted bool) {
+	va := v.Addr()
+	if va.IsNil() {
+		e.WriteString("null")
+		return
+	}
+	m := va.Interface().(Marshaler)
+	b, err := m.MarshalJSON()
+	if err == nil {
+		// copy JSON into buffer, checking validity.
+		err = compact(&e.Buffer, b, true)
+	}
+	if err != nil {
+		e.error(&MarshalerError{v.Type(), err})
+	}
+}
+
+func textMarshalerEncoder(e *encodeState, v reflect.Value, quoted bool) {
+	if v.Kind() == reflect.Ptr && v.IsNil() {
+		e.WriteString("null")
+		return
+	}
+	m := v.Interface().(encoding.TextMarshaler)
+	b, err := m.MarshalText()
+	if err != nil {
+		e.error(&MarshalerError{v.Type(), err})
+	}
+	e.stringBytes(b)
+}
+
+func addrTextMarshalerEncoder(e *encodeState, v reflect.Value, quoted bool) {
+	va := v.Addr()
+	if va.IsNil() {
+		e.WriteString("null")
+		return
+	}
+	m := va.Interface().(encoding.TextMarshaler)
+	b, err := m.MarshalText()
+	if err != nil {
+		e.error(&MarshalerError{v.Type(), err})
+	}
+	e.stringBytes(b)
+}
+
+func boolEncoder(e *encodeState, v reflect.Value, quoted bool) {
+	if quoted {
+		e.WriteByte('"')
+	}
+	if v.Bool() {
+		e.WriteString("true")
+	} else {
+		e.WriteString("false")
+	}
+	if quoted {
+		e.WriteByte('"')
+	}
+}
+
+func intEncoder(e *encodeState, v reflect.Value, quoted bool) {
+	b := strconv.AppendInt(e.scratch[:0], v.Int(), 10)
+	if quoted {
+		e.WriteByte('"')
+	}
+	e.Write(b)
+	if quoted {
+		e.WriteByte('"')
+	}
+}
+
+func uintEncoder(e *encodeState, v reflect.Value, quoted bool) {
+	b := strconv.AppendUint(e.scratch[:0], v.Uint(), 10)
+	if quoted {
+		e.WriteByte('"')
+	}
+	e.Write(b)
+	if quoted {
+		e.WriteByte('"')
+	}
+}
+
+type floatEncoder int // number of bits
+
+func (bits floatEncoder) encode(e *encodeState, v reflect.Value, quoted bool) {
+	f := v.Float()
+	if math.IsInf(f, 0) || math.IsNaN(f) {
+		e.error(&UnsupportedValueError{v, strconv.FormatFloat(f, 'g', -1, int(bits))})
+	}
+	b := strconv.AppendFloat(e.scratch[:0], f, 'g', -1, int(bits))
+	if quoted {
+		e.WriteByte('"')
+	}
+	e.Write(b)
+	if quoted {
+		e.WriteByte('"')
+	}
+}
+
+var (
+	float32Encoder = (floatEncoder(32)).encode
+	float64Encoder = (floatEncoder(64)).encode
+)
+
+func stringEncoder(e *encodeState, v reflect.Value, quoted bool) {
+	if v.Type() == numberType {
+		numStr := v.String()
+		// In Go1.5 the empty string encodes to "0", while this is not a valid number literal
+		// we keep compatibility so check validity after this.
+		if numStr == "" {
+			numStr = "0" // Number's zero-val
+		}
+		if !isValidNumber(numStr) {
+			e.error(fmt.Errorf("json: invalid number literal %q", numStr))
+		}
+		e.WriteString(numStr)
+		return
+	}
+	if quoted {
+		sb, err := Marshal(v.String())
+		if err != nil {
+			e.error(err)
+		}
+		e.string(string(sb))
+	} else {
+		e.string(v.String())
+	}
+}
+
+func interfaceEncoder(e *encodeState, v reflect.Value, quoted bool) {
+	if v.IsNil() {
+		e.WriteString("null")
+		return
+	}
+	e.reflectValue(v.Elem())
+}
+
+func unsupportedTypeEncoder(e *encodeState, v reflect.Value, quoted bool) {
+	e.error(&UnsupportedTypeError{v.Type()})
+}
+
+type structEncoder struct {
+	fields    []field
+	fieldEncs []encoderFunc
+}
+
+func (se *structEncoder) encode(e *encodeState, v reflect.Value, quoted bool) {
+	e.WriteByte('{')
+	first := true
+	for i, f := range se.fields {
+		fv := fieldByIndex(v, f.index)
+		if !fv.IsValid() || f.omitEmpty && isEmptyValue(fv) {
+			continue
+		}
+		if first {
+			first = false
+		} else {
+			e.WriteByte(',')
+		}
+		e.string(f.name)
+		e.WriteByte(':')
+		se.fieldEncs[i](e, fv, f.quoted)
+	}
+	e.WriteByte('}')
+}
+
+func newStructEncoder(t reflect.Type) encoderFunc {
+	fields := cachedTypeFields(t)
+	se := &structEncoder{
+		fields:    fields,
+		fieldEncs: make([]encoderFunc, len(fields)),
+	}
+	for i, f := range fields {
+		se.fieldEncs[i] = typeEncoder(typeByIndex(t, f.index))
+	}
+	return se.encode
+}
+
+type mapEncoder struct {
+	elemEnc encoderFunc
+}
+
+func (me *mapEncoder) encode(e *encodeState, v reflect.Value, _ bool) {
+	if v.IsNil() {
+		e.WriteString("null")
+		return
+	}
+	e.WriteByte('{')
+	var sv stringValues = v.MapKeys()
+	sort.Sort(sv)
+	for i, k := range sv {
+		if i > 0 {
+			e.WriteByte(',')
+		}
+		e.string(k.String())
+		e.WriteByte(':')
+		me.elemEnc(e, v.MapIndex(k), false)
+	}
+	e.WriteByte('}')
+}
+
+func newMapEncoder(t reflect.Type) encoderFunc {
+	if t.Key().Kind() != reflect.String {
+		return unsupportedTypeEncoder
+	}
+	me := &mapEncoder{typeEncoder(t.Elem())}
+	return me.encode
+}
+
+func encodeByteSlice(e *encodeState, v reflect.Value, _ bool) {
+	if v.IsNil() {
+		e.WriteString("null")
+		return
+	}
+	s := v.Bytes()
+	e.WriteByte('"')
+	if len(s) < 1024 {
+		// for small buffers, using Encode directly is much faster.
+		dst := make([]byte, base64.StdEncoding.EncodedLen(len(s)))
+		base64.StdEncoding.Encode(dst, s)
+		e.Write(dst)
+	} else {
+		// for large buffers, avoid unnecessary extra temporary
+		// buffer space.
+		enc := base64.NewEncoder(base64.StdEncoding, e)
+		enc.Write(s)
+		enc.Close()
+	}
+	e.WriteByte('"')
+}
+
+// sliceEncoder just wraps an arrayEncoder, checking to make sure the value isn't nil.
+type sliceEncoder struct {
+	arrayEnc encoderFunc
+}
+
+func (se *sliceEncoder) encode(e *encodeState, v reflect.Value, _ bool) {
+	if v.IsNil() {
+		e.WriteString("null")
+		return
+	}
+	se.arrayEnc(e, v, false)
+}
+
+func newSliceEncoder(t reflect.Type) encoderFunc {
+	// Byte slices get special treatment; arrays don't.
+	if t.Elem().Kind() == reflect.Uint8 {
+		return encodeByteSlice
+	}
+	enc := &sliceEncoder{newArrayEncoder(t)}
+	return enc.encode
+}
+
+type arrayEncoder struct {
+	elemEnc encoderFunc
+}
+
+func (ae *arrayEncoder) encode(e *encodeState, v reflect.Value, _ bool) {
+	e.WriteByte('[')
+	n := v.Len()
+	for i := 0; i < n; i++ {
+		if i > 0 {
+			e.WriteByte(',')
+		}
+		ae.elemEnc(e, v.Index(i), false)
+	}
+	e.WriteByte(']')
+}
+
+func newArrayEncoder(t reflect.Type) encoderFunc {
+	enc := &arrayEncoder{typeEncoder(t.Elem())}
+	return enc.encode
+}
+
+type ptrEncoder struct {
+	elemEnc encoderFunc
+}
+
+func (pe *ptrEncoder) encode(e *encodeState, v reflect.Value, quoted bool) {
+	if v.IsNil() {
+		e.WriteString("null")
+		return
+	}
+	pe.elemEnc(e, v.Elem(), quoted)
+}
+
+func newPtrEncoder(t reflect.Type) encoderFunc {
+	enc := &ptrEncoder{typeEncoder(t.Elem())}
+	return enc.encode
+}
+
+type condAddrEncoder struct {
+	canAddrEnc, elseEnc encoderFunc
+}
+
+func (ce *condAddrEncoder) encode(e *encodeState, v reflect.Value, quoted bool) {
+	if v.CanAddr() {
+		ce.canAddrEnc(e, v, quoted)
+	} else {
+		ce.elseEnc(e, v, quoted)
+	}
+}
+
+// newCondAddrEncoder returns an encoder that checks whether its value
+// CanAddr and delegates to canAddrEnc if so, else to elseEnc.
+func newCondAddrEncoder(canAddrEnc, elseEnc encoderFunc) encoderFunc {
+	enc := &condAddrEncoder{canAddrEnc: canAddrEnc, elseEnc: elseEnc}
+	return enc.encode
+}
+
+func isValidTag(s string) bool {
+	if s == "" {
+		return false
+	}
+	for _, c := range s {
+		switch {
+		case strings.ContainsRune("!#$%&()*+-./:<=>?@[]^_{|}~ ", c):
+			// Backslash and quote chars are reserved, but
+			// otherwise any punctuation chars are allowed
+			// in a tag name.
+		default:
+			if !unicode.IsLetter(c) && !unicode.IsDigit(c) {
+				return false
+			}
+		}
+	}
+	return true
+}
+
+func fieldByIndex(v reflect.Value, index []int) reflect.Value {
+	for _, i := range index {
+		if v.Kind() == reflect.Ptr {
+			if v.IsNil() {
+				return reflect.Value{}
+			}
+			v = v.Elem()
+		}
+		v = v.Field(i)
+	}
+	return v
+}
+
+func typeByIndex(t reflect.Type, index []int) reflect.Type {
+	for _, i := range index {
+		if t.Kind() == reflect.Ptr {
+			t = t.Elem()
+		}
+		t = t.Field(i).Type
+	}
+	return t
+}
+
+// stringValues is a slice of reflect.Value holding *reflect.StringValue.
+// It implements the methods to sort by string.
+type stringValues []reflect.Value
+
+func (sv stringValues) Len() int           { return len(sv) }
+func (sv stringValues) Swap(i, j int)      { sv[i], sv[j] = sv[j], sv[i] }
+func (sv stringValues) Less(i, j int) bool { return sv.get(i) < sv.get(j) }
+func (sv stringValues) get(i int) string   { return sv[i].String() }
+
+// NOTE: keep in sync with stringBytes below.
+func (e *encodeState) string(s string) int {
+	len0 := e.Len()
+	e.WriteByte('"')
+	start := 0
+	for i := 0; i < len(s); {
+		if b := s[i]; b < utf8.RuneSelf {
+			if 0x20 <= b && b != '\\' && b != '"' && b != '<' && b != '>' && b != '&' {
+				i++
+				continue
+			}
+			if start < i {
+				e.WriteString(s[start:i])
+			}
+			switch b {
+			case '\\', '"':
+				e.WriteByte('\\')
+				e.WriteByte(b)
+			case '\n':
+				e.WriteByte('\\')
+				e.WriteByte('n')
+			case '\r':
+				e.WriteByte('\\')
+				e.WriteByte('r')
+			case '\t':
+				e.WriteByte('\\')
+				e.WriteByte('t')
+			default:
+				// This encodes bytes < 0x20 except for \n and \r,
+				// as well as <, > and &. The latter are escaped because they
+				// can lead to security holes when user-controlled strings
+				// are rendered into JSON and served to some browsers.
+				e.WriteString(`\u00`)
+				e.WriteByte(hex[b>>4])
+				e.WriteByte(hex[b&0xF])
+			}
+			i++
+			start = i
+			continue
+		}
+		c, size := utf8.DecodeRuneInString(s[i:])
+		if c == utf8.RuneError && size == 1 {
+			if start < i {
+				e.WriteString(s[start:i])
+			}
+			e.WriteString(`\ufffd`)
+			i += size
+			start = i
+			continue
+		}
+		// U+2028 is LINE SEPARATOR.
+		// U+2029 is PARAGRAPH SEPARATOR.
+		// They are both technically valid characters in JSON strings,
+		// but don't work in JSONP, which has to be evaluated as JavaScript,
+		// and can lead to security holes there. It is valid JSON to
+		// escape them, so we do so unconditionally.
+		// See http://timelessrepo.com/json-isnt-a-javascript-subset for discussion.
+		if c == '\u2028' || c == '\u2029' {
+			if start < i {
+				e.WriteString(s[start:i])
+			}
+			e.WriteString(`\u202`)
+			e.WriteByte(hex[c&0xF])
+			i += size
+			start = i
+			continue
+		}
+		i += size
+	}
+	if start < len(s) {
+		e.WriteString(s[start:])
+	}
+	e.WriteByte('"')
+	return e.Len() - len0
+}
+
+// NOTE: keep in sync with string above.
+func (e *encodeState) stringBytes(s []byte) int {
+	len0 := e.Len()
+	e.WriteByte('"')
+	start := 0
+	for i := 0; i < len(s); {
+		if b := s[i]; b < utf8.RuneSelf {
+			if 0x20 <= b && b != '\\' && b != '"' && b != '<' && b != '>' && b != '&' {
+				i++
+				continue
+			}
+			if start < i {
+				e.Write(s[start:i])
+			}
+			switch b {
+			case '\\', '"':
+				e.WriteByte('\\')
+				e.WriteByte(b)
+			case '\n':
+				e.WriteByte('\\')
+				e.WriteByte('n')
+			case '\r':
+				e.WriteByte('\\')
+				e.WriteByte('r')
+			case '\t':
+				e.WriteByte('\\')
+				e.WriteByte('t')
+			default:
+				// This encodes bytes < 0x20 except for \n and \r,
+				// as well as <, >, and &. The latter are escaped because they
+				// can lead to security holes when user-controlled strings
+				// are rendered into JSON and served to some browsers.
+				e.WriteString(`\u00`)
+				e.WriteByte(hex[b>>4])
+				e.WriteByte(hex[b&0xF])
+			}
+			i++
+			start = i
+			continue
+		}
+		c, size := utf8.DecodeRune(s[i:])
+		if c == utf8.RuneError && size == 1 {
+			if start < i {
+				e.Write(s[start:i])
+			}
+			e.WriteString(`\ufffd`)
+			i += size
+			start = i
+			continue
+		}
+		// U+2028 is LINE SEPARATOR.
+		// U+2029 is PARAGRAPH SEPARATOR.
+		// They are both technically valid characters in JSON strings,
+		// but don't work in JSONP, which has to be evaluated as JavaScript,
+		// and can lead to security holes there. It is valid JSON to
+		// escape them, so we do so unconditionally.
+		// See http://timelessrepo.com/json-isnt-a-javascript-subset for discussion.
+		if c == '\u2028' || c == '\u2029' {
+			if start < i {
+				e.Write(s[start:i])
+			}
+			e.WriteString(`\u202`)
+			e.WriteByte(hex[c&0xF])
+			i += size
+			start = i
+			continue
+		}
+		i += size
+	}
+	if start < len(s) {
+		e.Write(s[start:])
+	}
+	e.WriteByte('"')
+	return e.Len() - len0
+}
+
+// A field represents a single field found in a struct.
+type field struct {
+	name      string
+	nameBytes []byte // []byte(name)
+
+	tag       bool
+	index     []int
+	typ       reflect.Type
+	omitEmpty bool
+	quoted    bool
+}
+
+func fillField(f field) field {
+	f.nameBytes = []byte(f.name)
+	return f
+}
+
+// byName sorts field by name, breaking ties with depth,
+// then breaking ties with "name came from json tag", then
+// breaking ties with index sequence.
+type byName []field
+
+func (x byName) Len() int { return len(x) }
+
+func (x byName) Swap(i, j int) { x[i], x[j] = x[j], x[i] }
+
+func (x byName) Less(i, j int) bool {
+	if x[i].name != x[j].name {
+		return x[i].name < x[j].name
+	}
+	if len(x[i].index) != len(x[j].index) {
+		return len(x[i].index) < len(x[j].index)
+	}
+	if x[i].tag != x[j].tag {
+		return x[i].tag
+	}
+	return byIndex(x).Less(i, j)
+}
+
+// byIndex sorts field by index sequence.
+type byIndex []field
+
+func (x byIndex) Len() int { return len(x) }
+
+func (x byIndex) Swap(i, j int) { x[i], x[j] = x[j], x[i] }
+
+func (x byIndex) Less(i, j int) bool {
+	for k, xik := range x[i].index {
+		if k >= len(x[j].index) {
+			return false
+		}
+		if xik != x[j].index[k] {
+			return xik < x[j].index[k]
+		}
+	}
+	return len(x[i].index) < len(x[j].index)
+}
+
+// typeFields returns a list of fields that JSON should recognize for the given type.
+// The algorithm is breadth-first search over the set of structs to include - the top struct
+// and then any reachable anonymous structs.
+func typeFields(t reflect.Type) []field {
+	// Anonymous fields to explore at the current level and the next.
+	current := []field{}
+	next := []field{{typ: t}}
+
+	// Count of queued names for current level and the next.
+	count := map[reflect.Type]int{}
+	nextCount := map[reflect.Type]int{}
+
+	// Types already visited at an earlier level.
+	visited := map[reflect.Type]bool{}
+
+	// Fields found.
+	var fields []field
+
+	for len(next) > 0 {
+		current, next = next, current[:0]
+		count, nextCount = nextCount, map[reflect.Type]int{}
+
+		for _, f := range current {
+			if visited[f.typ] {
+				continue
+			}
+			visited[f.typ] = true
+
+			// Scan f.typ for fields to include.
+			for i := 0; i < f.typ.NumField(); i++ {
+				sf := f.typ.Field(i)
+				if sf.PkgPath != "" && !sf.Anonymous { // unexported
+					continue
+				}
+				tag := sf.Tag.Get("json")
+				if tag == "-" {
+					continue
+				}
+				name, opts := parseTag(tag)
+				if !isValidTag(name) {
+					name = ""
+				}
+				index := make([]int, len(f.index)+1)
+				copy(index, f.index)
+				index[len(f.index)] = i
+
+				ft := sf.Type
+				if ft.Name() == "" && ft.Kind() == reflect.Ptr {
+					// Follow pointer.
+					ft = ft.Elem()
+				}
+
+				// Only strings, floats, integers, and booleans can be quoted.
+				quoted := false
+				if opts.Contains("string") {
+					switch ft.Kind() {
+					case reflect.Bool,
+						reflect.Int, reflect.Int8, reflect.Int16, reflect.Int32, reflect.Int64,
+						reflect.Uint, reflect.Uint8, reflect.Uint16, reflect.Uint32, reflect.Uint64,
+						reflect.Float32, reflect.Float64,
+						reflect.String:
+						quoted = true
+					}
+				}
+
+				// Record found field and index sequence.
+				if name != "" || !sf.Anonymous || ft.Kind() != reflect.Struct {
+					tagged := name != ""
+					if name == "" {
+						name = sf.Name
+					}
+					fields = append(fields, fillField(field{
+						name:      name,
+						tag:       tagged,
+						index:     index,
+						typ:       ft,
+						omitEmpty: opts.Contains("omitempty"),
+						quoted:    quoted,
+					}))
+					if count[f.typ] > 1 {
+						// If there were multiple instances, add a second,
+						// so that the annihilation code will see a duplicate.
+						// It only cares about the distinction between 1 or 2,
+						// so don't bother generating any more copies.
+						fields = append(fields, fields[len(fields)-1])
+					}
+					continue
+				}
+
+				// Record new anonymous struct to explore in next round.
+				nextCount[ft]++
+				if nextCount[ft] == 1 {
+					next = append(next, fillField(field{name: ft.Name(), index: index, typ: ft}))
+				}
+			}
+		}
+	}
+
+	sort.Sort(byName(fields))
+
+	// Delete all fields that are hidden by the Go rules for embedded fields,
+	// except that fields with JSON tags are promoted.
+
+	// The fields are sorted in primary order of name, secondary order
+	// of field index length. Loop over names; for each name, delete
+	// hidden fields by choosing the one dominant field that survives.
+	out := fields[:0]
+	for advance, i := 0, 0; i < len(fields); i += advance {
+		// One iteration per name.
+		// Find the sequence of fields with the name of this first field.
+		fi := fields[i]
+		name := fi.name
+		for advance = 1; i+advance < len(fields); advance++ {
+			fj := fields[i+advance]
+			if fj.name != name {
+				break
+			}
+		}
+		if advance == 1 { // Only one field with this name
+			out = append(out, fi)
+			continue
+		}
+		dominant, ok := dominantField(fields[i : i+advance])
+		if ok {
+			out = append(out, dominant)
+		}
+	}
+
+	fields = out
+	sort.Sort(byIndex(fields))
+
+	return fields
+}
+
+// dominantField looks through the fields, all of which are known to
+// have the same name, to find the single field that dominates the
+// others using Go's embedding rules, modified by the presence of
+// JSON tags. If there are multiple top-level fields, the boolean
+// will be false: This condition is an error in Go and we skip all
+// the fields.
+func dominantField(fields []field) (field, bool) {
+	// The fields are sorted in increasing index-length order. The winner
+	// must therefore be one with the shortest index length. Drop all
+	// longer entries, which is easy: just truncate the slice.
+	length := len(fields[0].index)
+	tagged := -1 // Index of first tagged field.
+	for i, f := range fields {
+		if len(f.index) > length {
+			fields = fields[:i]
+			break
+		}
+		if f.tag {
+			if tagged >= 0 {
+				// Multiple tagged fields at the same level: conflict.
+				// Return no field.
+				return field{}, false
+			}
+			tagged = i
+		}
+	}
+	if tagged >= 0 {
+		return fields[tagged], true
+	}
+	// All remaining fields have the same length. If there's more than one,
+	// we have a conflict (two fields named "X" at the same level) and we
+	// return no field.
+	if len(fields) > 1 {
+		return field{}, false
+	}
+	return fields[0], true
+}
+
+var fieldCache struct {
+	sync.RWMutex
+	m map[reflect.Type][]field
+}
+
+// cachedTypeFields is like typeFields but uses a cache to avoid repeated work.
+func cachedTypeFields(t reflect.Type) []field {
+	fieldCache.RLock()
+	f := fieldCache.m[t]
+	fieldCache.RUnlock()
+	if f != nil {
+		return f
+	}
+
+	// Compute fields without lock.
+	// Might duplicate effort but won't hold other computations back.
+	f = typeFields(t)
+	if f == nil {
+		f = []field{}
+	}
+
+	fieldCache.Lock()
+	if fieldCache.m == nil {
+		fieldCache.m = map[reflect.Type][]field{}
+	}
+	fieldCache.m[t] = f
+	fieldCache.Unlock()
+	return f
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/json/indent.go b/vendor/gopkg.in/square/go-jose.v2/json/indent.go
new file mode 100644
index 000000000..7cd9f4db1
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/json/indent.go
@@ -0,0 +1,141 @@
+// Copyright 2010 The Go Authors.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package json
+
+import "bytes"
+
+// Compact appends to dst the JSON-encoded src with
+// insignificant space characters elided.
+func Compact(dst *bytes.Buffer, src []byte) error {
+	return compact(dst, src, false)
+}
+
+func compact(dst *bytes.Buffer, src []byte, escape bool) error {
+	origLen := dst.Len()
+	var scan scanner
+	scan.reset()
+	start := 0
+	for i, c := range src {
+		if escape && (c == '<' || c == '>' || c == '&') {
+			if start < i {
+				dst.Write(src[start:i])
+			}
+			dst.WriteString(`\u00`)
+			dst.WriteByte(hex[c>>4])
+			dst.WriteByte(hex[c&0xF])
+			start = i + 1
+		}
+		// Convert U+2028 and U+2029 (E2 80 A8 and E2 80 A9).
+		if c == 0xE2 && i+2 < len(src) && src[i+1] == 0x80 && src[i+2]&^1 == 0xA8 {
+			if start < i {
+				dst.Write(src[start:i])
+			}
+			dst.WriteString(`\u202`)
+			dst.WriteByte(hex[src[i+2]&0xF])
+			start = i + 3
+		}
+		v := scan.step(&scan, c)
+		if v >= scanSkipSpace {
+			if v == scanError {
+				break
+			}
+			if start < i {
+				dst.Write(src[start:i])
+			}
+			start = i + 1
+		}
+	}
+	if scan.eof() == scanError {
+		dst.Truncate(origLen)
+		return scan.err
+	}
+	if start < len(src) {
+		dst.Write(src[start:])
+	}
+	return nil
+}
+
+func newline(dst *bytes.Buffer, prefix, indent string, depth int) {
+	dst.WriteByte('\n')
+	dst.WriteString(prefix)
+	for i := 0; i < depth; i++ {
+		dst.WriteString(indent)
+	}
+}
+
+// Indent appends to dst an indented form of the JSON-encoded src.
+// Each element in a JSON object or array begins on a new,
+// indented line beginning with prefix followed by one or more
+// copies of indent according to the indentation nesting.
+// The data appended to dst does not begin with the prefix nor
+// any indentation, to make it easier to embed inside other formatted JSON data.
+// Although leading space characters (space, tab, carriage return, newline)
+// at the beginning of src are dropped, trailing space characters
+// at the end of src are preserved and copied to dst.
+// For example, if src has no trailing spaces, neither will dst;
+// if src ends in a trailing newline, so will dst.
+func Indent(dst *bytes.Buffer, src []byte, prefix, indent string) error {
+	origLen := dst.Len()
+	var scan scanner
+	scan.reset()
+	needIndent := false
+	depth := 0
+	for _, c := range src {
+		scan.bytes++
+		v := scan.step(&scan, c)
+		if v == scanSkipSpace {
+			continue
+		}
+		if v == scanError {
+			break
+		}
+		if needIndent && v != scanEndObject && v != scanEndArray {
+			needIndent = false
+			depth++
+			newline(dst, prefix, indent, depth)
+		}
+
+		// Emit semantically uninteresting bytes
+		// (in particular, punctuation in strings) unmodified.
+		if v == scanContinue {
+			dst.WriteByte(c)
+			continue
+		}
+
+		// Add spacing around real punctuation.
+		switch c {
+		case '{', '[':
+			// delay indent so that empty object and array are formatted as {} and [].
+			needIndent = true
+			dst.WriteByte(c)
+
+		case ',':
+			dst.WriteByte(c)
+			newline(dst, prefix, indent, depth)
+
+		case ':':
+			dst.WriteByte(c)
+			dst.WriteByte(' ')
+
+		case '}', ']':
+			if needIndent {
+				// suppress indent in empty object/array
+				needIndent = false
+			} else {
+				depth--
+				newline(dst, prefix, indent, depth)
+			}
+			dst.WriteByte(c)
+
+		default:
+			dst.WriteByte(c)
+		}
+	}
+	if scan.eof() == scanError {
+		dst.Truncate(origLen)
+		return scan.err
+	}
+	return nil
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/json/scanner.go b/vendor/gopkg.in/square/go-jose.v2/json/scanner.go
new file mode 100644
index 000000000..ee6622e8c
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/json/scanner.go
@@ -0,0 +1,623 @@
+// Copyright 2010 The Go Authors.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package json
+
+// JSON value parser state machine.
+// Just about at the limit of what is reasonable to write by hand.
+// Some parts are a bit tedious, but overall it nicely factors out the
+// otherwise common code from the multiple scanning functions
+// in this package (Compact, Indent, checkValid, nextValue, etc).
+//
+// This file starts with two simple examples using the scanner
+// before diving into the scanner itself.
+
+import "strconv"
+
+// checkValid verifies that data is valid JSON-encoded data.
+// scan is passed in for use by checkValid to avoid an allocation.
+func checkValid(data []byte, scan *scanner) error {
+	scan.reset()
+	for _, c := range data {
+		scan.bytes++
+		if scan.step(scan, c) == scanError {
+			return scan.err
+		}
+	}
+	if scan.eof() == scanError {
+		return scan.err
+	}
+	return nil
+}
+
+// nextValue splits data after the next whole JSON value,
+// returning that value and the bytes that follow it as separate slices.
+// scan is passed in for use by nextValue to avoid an allocation.
+func nextValue(data []byte, scan *scanner) (value, rest []byte, err error) {
+	scan.reset()
+	for i, c := range data {
+		v := scan.step(scan, c)
+		if v >= scanEndObject {
+			switch v {
+			// probe the scanner with a space to determine whether we will
+			// get scanEnd on the next character. Otherwise, if the next character
+			// is not a space, scanEndTop allocates a needless error.
+			case scanEndObject, scanEndArray:
+				if scan.step(scan, ' ') == scanEnd {
+					return data[:i+1], data[i+1:], nil
+				}
+			case scanError:
+				return nil, nil, scan.err
+			case scanEnd:
+				return data[:i], data[i:], nil
+			}
+		}
+	}
+	if scan.eof() == scanError {
+		return nil, nil, scan.err
+	}
+	return data, nil, nil
+}
+
+// A SyntaxError is a description of a JSON syntax error.
+type SyntaxError struct {
+	msg    string // description of error
+	Offset int64  // error occurred after reading Offset bytes
+}
+
+func (e *SyntaxError) Error() string { return e.msg }
+
+// A scanner is a JSON scanning state machine.
+// Callers call scan.reset() and then pass bytes in one at a time
+// by calling scan.step(&scan, c) for each byte.
+// The return value, referred to as an opcode, tells the
+// caller about significant parsing events like beginning
+// and ending literals, objects, and arrays, so that the
+// caller can follow along if it wishes.
+// The return value scanEnd indicates that a single top-level
+// JSON value has been completed, *before* the byte that
+// just got passed in.  (The indication must be delayed in order
+// to recognize the end of numbers: is 123 a whole value or
+// the beginning of 12345e+6?).
+type scanner struct {
+	// The step is a func to be called to execute the next transition.
+	// Also tried using an integer constant and a single func
+	// with a switch, but using the func directly was 10% faster
+	// on a 64-bit Mac Mini, and it's nicer to read.
+	step func(*scanner, byte) int
+
+	// Reached end of top-level value.
+	endTop bool
+
+	// Stack of what we're in the middle of - array values, object keys, object values.
+	parseState []int
+
+	// Error that happened, if any.
+	err error
+
+	// 1-byte redo (see undo method)
+	redo      bool
+	redoCode  int
+	redoState func(*scanner, byte) int
+
+	// total bytes consumed, updated by decoder.Decode
+	bytes int64
+}
+
+// These values are returned by the state transition functions
+// assigned to scanner.state and the method scanner.eof.
+// They give details about the current state of the scan that
+// callers might be interested to know about.
+// It is okay to ignore the return value of any particular
+// call to scanner.state: if one call returns scanError,
+// every subsequent call will return scanError too.
+const (
+	// Continue.
+	scanContinue     = iota // uninteresting byte
+	scanBeginLiteral        // end implied by next result != scanContinue
+	scanBeginObject         // begin object
+	scanObjectKey           // just finished object key (string)
+	scanObjectValue         // just finished non-last object value
+	scanEndObject           // end object (implies scanObjectValue if possible)
+	scanBeginArray          // begin array
+	scanArrayValue          // just finished array value
+	scanEndArray            // end array (implies scanArrayValue if possible)
+	scanSkipSpace           // space byte; can skip; known to be last "continue" result
+
+	// Stop.
+	scanEnd   // top-level value ended *before* this byte; known to be first "stop" result
+	scanError // hit an error, scanner.err.
+)
+
+// These values are stored in the parseState stack.
+// They give the current state of a composite value
+// being scanned.  If the parser is inside a nested value
+// the parseState describes the nested state, outermost at entry 0.
+const (
+	parseObjectKey   = iota // parsing object key (before colon)
+	parseObjectValue        // parsing object value (after colon)
+	parseArrayValue         // parsing array value
+)
+
+// reset prepares the scanner for use.
+// It must be called before calling s.step.
+func (s *scanner) reset() {
+	s.step = stateBeginValue
+	s.parseState = s.parseState[0:0]
+	s.err = nil
+	s.redo = false
+	s.endTop = false
+}
+
+// eof tells the scanner that the end of input has been reached.
+// It returns a scan status just as s.step does.
+func (s *scanner) eof() int {
+	if s.err != nil {
+		return scanError
+	}
+	if s.endTop {
+		return scanEnd
+	}
+	s.step(s, ' ')
+	if s.endTop {
+		return scanEnd
+	}
+	if s.err == nil {
+		s.err = &SyntaxError{"unexpected end of JSON input", s.bytes}
+	}
+	return scanError
+}
+
+// pushParseState pushes a new parse state p onto the parse stack.
+func (s *scanner) pushParseState(p int) {
+	s.parseState = append(s.parseState, p)
+}
+
+// popParseState pops a parse state (already obtained) off the stack
+// and updates s.step accordingly.
+func (s *scanner) popParseState() {
+	n := len(s.parseState) - 1
+	s.parseState = s.parseState[0:n]
+	s.redo = false
+	if n == 0 {
+		s.step = stateEndTop
+		s.endTop = true
+	} else {
+		s.step = stateEndValue
+	}
+}
+
+func isSpace(c byte) bool {
+	return c == ' ' || c == '\t' || c == '\r' || c == '\n'
+}
+
+// stateBeginValueOrEmpty is the state after reading `[`.
+func stateBeginValueOrEmpty(s *scanner, c byte) int {
+	if c <= ' ' && isSpace(c) {
+		return scanSkipSpace
+	}
+	if c == ']' {
+		return stateEndValue(s, c)
+	}
+	return stateBeginValue(s, c)
+}
+
+// stateBeginValue is the state at the beginning of the input.
+func stateBeginValue(s *scanner, c byte) int {
+	if c <= ' ' && isSpace(c) {
+		return scanSkipSpace
+	}
+	switch c {
+	case '{':
+		s.step = stateBeginStringOrEmpty
+		s.pushParseState(parseObjectKey)
+		return scanBeginObject
+	case '[':
+		s.step = stateBeginValueOrEmpty
+		s.pushParseState(parseArrayValue)
+		return scanBeginArray
+	case '"':
+		s.step = stateInString
+		return scanBeginLiteral
+	case '-':
+		s.step = stateNeg
+		return scanBeginLiteral
+	case '0': // beginning of 0.123
+		s.step = state0
+		return scanBeginLiteral
+	case 't': // beginning of true
+		s.step = stateT
+		return scanBeginLiteral
+	case 'f': // beginning of false
+		s.step = stateF
+		return scanBeginLiteral
+	case 'n': // beginning of null
+		s.step = stateN
+		return scanBeginLiteral
+	}
+	if '1' <= c && c <= '9' { // beginning of 1234.5
+		s.step = state1
+		return scanBeginLiteral
+	}
+	return s.error(c, "looking for beginning of value")
+}
+
+// stateBeginStringOrEmpty is the state after reading `{`.
+func stateBeginStringOrEmpty(s *scanner, c byte) int {
+	if c <= ' ' && isSpace(c) {
+		return scanSkipSpace
+	}
+	if c == '}' {
+		n := len(s.parseState)
+		s.parseState[n-1] = parseObjectValue
+		return stateEndValue(s, c)
+	}
+	return stateBeginString(s, c)
+}
+
+// stateBeginString is the state after reading `{"key": value,`.
+func stateBeginString(s *scanner, c byte) int {
+	if c <= ' ' && isSpace(c) {
+		return scanSkipSpace
+	}
+	if c == '"' {
+		s.step = stateInString
+		return scanBeginLiteral
+	}
+	return s.error(c, "looking for beginning of object key string")
+}
+
+// stateEndValue is the state after completing a value,
+// such as after reading `{}` or `true` or `["x"`.
+func stateEndValue(s *scanner, c byte) int {
+	n := len(s.parseState)
+	if n == 0 {
+		// Completed top-level before the current byte.
+		s.step = stateEndTop
+		s.endTop = true
+		return stateEndTop(s, c)
+	}
+	if c <= ' ' && isSpace(c) {
+		s.step = stateEndValue
+		return scanSkipSpace
+	}
+	ps := s.parseState[n-1]
+	switch ps {
+	case parseObjectKey:
+		if c == ':' {
+			s.parseState[n-1] = parseObjectValue
+			s.step = stateBeginValue
+			return scanObjectKey
+		}
+		return s.error(c, "after object key")
+	case parseObjectValue:
+		if c == ',' {
+			s.parseState[n-1] = parseObjectKey
+			s.step = stateBeginString
+			return scanObjectValue
+		}
+		if c == '}' {
+			s.popParseState()
+			return scanEndObject
+		}
+		return s.error(c, "after object key:value pair")
+	case parseArrayValue:
+		if c == ',' {
+			s.step = stateBeginValue
+			return scanArrayValue
+		}
+		if c == ']' {
+			s.popParseState()
+			return scanEndArray
+		}
+		return s.error(c, "after array element")
+	}
+	return s.error(c, "")
+}
+
+// stateEndTop is the state after finishing the top-level value,
+// such as after reading `{}` or `[1,2,3]`.
+// Only space characters should be seen now.
+func stateEndTop(s *scanner, c byte) int {
+	if c != ' ' && c != '\t' && c != '\r' && c != '\n' {
+		// Complain about non-space byte on next call.
+		s.error(c, "after top-level value")
+	}
+	return scanEnd
+}
+
+// stateInString is the state after reading `"`.
+func stateInString(s *scanner, c byte) int {
+	if c == '"' {
+		s.step = stateEndValue
+		return scanContinue
+	}
+	if c == '\\' {
+		s.step = stateInStringEsc
+		return scanContinue
+	}
+	if c < 0x20 {
+		return s.error(c, "in string literal")
+	}
+	return scanContinue
+}
+
+// stateInStringEsc is the state after reading `"\` during a quoted string.
+func stateInStringEsc(s *scanner, c byte) int {
+	switch c {
+	case 'b', 'f', 'n', 'r', 't', '\\', '/', '"':
+		s.step = stateInString
+		return scanContinue
+	case 'u':
+		s.step = stateInStringEscU
+		return scanContinue
+	}
+	return s.error(c, "in string escape code")
+}
+
+// stateInStringEscU is the state after reading `"\u` during a quoted string.
+func stateInStringEscU(s *scanner, c byte) int {
+	if '0' <= c && c <= '9' || 'a' <= c && c <= 'f' || 'A' <= c && c <= 'F' {
+		s.step = stateInStringEscU1
+		return scanContinue
+	}
+	// numbers
+	return s.error(c, "in \\u hexadecimal character escape")
+}
+
+// stateInStringEscU1 is the state after reading `"\u1` during a quoted string.
+func stateInStringEscU1(s *scanner, c byte) int {
+	if '0' <= c && c <= '9' || 'a' <= c && c <= 'f' || 'A' <= c && c <= 'F' {
+		s.step = stateInStringEscU12
+		return scanContinue
+	}
+	// numbers
+	return s.error(c, "in \\u hexadecimal character escape")
+}
+
+// stateInStringEscU12 is the state after reading `"\u12` during a quoted string.
+func stateInStringEscU12(s *scanner, c byte) int {
+	if '0' <= c && c <= '9' || 'a' <= c && c <= 'f' || 'A' <= c && c <= 'F' {
+		s.step = stateInStringEscU123
+		return scanContinue
+	}
+	// numbers
+	return s.error(c, "in \\u hexadecimal character escape")
+}
+
+// stateInStringEscU123 is the state after reading `"\u123` during a quoted string.
+func stateInStringEscU123(s *scanner, c byte) int {
+	if '0' <= c && c <= '9' || 'a' <= c && c <= 'f' || 'A' <= c && c <= 'F' {
+		s.step = stateInString
+		return scanContinue
+	}
+	// numbers
+	return s.error(c, "in \\u hexadecimal character escape")
+}
+
+// stateNeg is the state after reading `-` during a number.
+func stateNeg(s *scanner, c byte) int {
+	if c == '0' {
+		s.step = state0
+		return scanContinue
+	}
+	if '1' <= c && c <= '9' {
+		s.step = state1
+		return scanContinue
+	}
+	return s.error(c, "in numeric literal")
+}
+
+// state1 is the state after reading a non-zero integer during a number,
+// such as after reading `1` or `100` but not `0`.
+func state1(s *scanner, c byte) int {
+	if '0' <= c && c <= '9' {
+		s.step = state1
+		return scanContinue
+	}
+	return state0(s, c)
+}
+
+// state0 is the state after reading `0` during a number.
+func state0(s *scanner, c byte) int {
+	if c == '.' {
+		s.step = stateDot
+		return scanContinue
+	}
+	if c == 'e' || c == 'E' {
+		s.step = stateE
+		return scanContinue
+	}
+	return stateEndValue(s, c)
+}
+
+// stateDot is the state after reading the integer and decimal point in a number,
+// such as after reading `1.`.
+func stateDot(s *scanner, c byte) int {
+	if '0' <= c && c <= '9' {
+		s.step = stateDot0
+		return scanContinue
+	}
+	return s.error(c, "after decimal point in numeric literal")
+}
+
+// stateDot0 is the state after reading the integer, decimal point, and subsequent
+// digits of a number, such as after reading `3.14`.
+func stateDot0(s *scanner, c byte) int {
+	if '0' <= c && c <= '9' {
+		return scanContinue
+	}
+	if c == 'e' || c == 'E' {
+		s.step = stateE
+		return scanContinue
+	}
+	return stateEndValue(s, c)
+}
+
+// stateE is the state after reading the mantissa and e in a number,
+// such as after reading `314e` or `0.314e`.
+func stateE(s *scanner, c byte) int {
+	if c == '+' || c == '-' {
+		s.step = stateESign
+		return scanContinue
+	}
+	return stateESign(s, c)
+}
+
+// stateESign is the state after reading the mantissa, e, and sign in a number,
+// such as after reading `314e-` or `0.314e+`.
+func stateESign(s *scanner, c byte) int {
+	if '0' <= c && c <= '9' {
+		s.step = stateE0
+		return scanContinue
+	}
+	return s.error(c, "in exponent of numeric literal")
+}
+
+// stateE0 is the state after reading the mantissa, e, optional sign,
+// and at least one digit of the exponent in a number,
+// such as after reading `314e-2` or `0.314e+1` or `3.14e0`.
+func stateE0(s *scanner, c byte) int {
+	if '0' <= c && c <= '9' {
+		return scanContinue
+	}
+	return stateEndValue(s, c)
+}
+
+// stateT is the state after reading `t`.
+func stateT(s *scanner, c byte) int {
+	if c == 'r' {
+		s.step = stateTr
+		return scanContinue
+	}
+	return s.error(c, "in literal true (expecting 'r')")
+}
+
+// stateTr is the state after reading `tr`.
+func stateTr(s *scanner, c byte) int {
+	if c == 'u' {
+		s.step = stateTru
+		return scanContinue
+	}
+	return s.error(c, "in literal true (expecting 'u')")
+}
+
+// stateTru is the state after reading `tru`.
+func stateTru(s *scanner, c byte) int {
+	if c == 'e' {
+		s.step = stateEndValue
+		return scanContinue
+	}
+	return s.error(c, "in literal true (expecting 'e')")
+}
+
+// stateF is the state after reading `f`.
+func stateF(s *scanner, c byte) int {
+	if c == 'a' {
+		s.step = stateFa
+		return scanContinue
+	}
+	return s.error(c, "in literal false (expecting 'a')")
+}
+
+// stateFa is the state after reading `fa`.
+func stateFa(s *scanner, c byte) int {
+	if c == 'l' {
+		s.step = stateFal
+		return scanContinue
+	}
+	return s.error(c, "in literal false (expecting 'l')")
+}
+
+// stateFal is the state after reading `fal`.
+func stateFal(s *scanner, c byte) int {
+	if c == 's' {
+		s.step = stateFals
+		return scanContinue
+	}
+	return s.error(c, "in literal false (expecting 's')")
+}
+
+// stateFals is the state after reading `fals`.
+func stateFals(s *scanner, c byte) int {
+	if c == 'e' {
+		s.step = stateEndValue
+		return scanContinue
+	}
+	return s.error(c, "in literal false (expecting 'e')")
+}
+
+// stateN is the state after reading `n`.
+func stateN(s *scanner, c byte) int {
+	if c == 'u' {
+		s.step = stateNu
+		return scanContinue
+	}
+	return s.error(c, "in literal null (expecting 'u')")
+}
+
+// stateNu is the state after reading `nu`.
+func stateNu(s *scanner, c byte) int {
+	if c == 'l' {
+		s.step = stateNul
+		return scanContinue
+	}
+	return s.error(c, "in literal null (expecting 'l')")
+}
+
+// stateNul is the state after reading `nul`.
+func stateNul(s *scanner, c byte) int {
+	if c == 'l' {
+		s.step = stateEndValue
+		return scanContinue
+	}
+	return s.error(c, "in literal null (expecting 'l')")
+}
+
+// stateError is the state after reaching a syntax error,
+// such as after reading `[1}` or `5.1.2`.
+func stateError(s *scanner, c byte) int {
+	return scanError
+}
+
+// error records an error and switches to the error state.
+func (s *scanner) error(c byte, context string) int {
+	s.step = stateError
+	s.err = &SyntaxError{"invalid character " + quoteChar(c) + " " + context, s.bytes}
+	return scanError
+}
+
+// quoteChar formats c as a quoted character literal
+func quoteChar(c byte) string {
+	// special cases - different from quoted strings
+	if c == '\'' {
+		return `'\''`
+	}
+	if c == '"' {
+		return `'"'`
+	}
+
+	// use quoted string with different quotation marks
+	s := strconv.Quote(string(c))
+	return "'" + s[1:len(s)-1] + "'"
+}
+
+// undo causes the scanner to return scanCode from the next state transition.
+// This gives callers a simple 1-byte undo mechanism.
+func (s *scanner) undo(scanCode int) {
+	if s.redo {
+		panic("json: invalid use of scanner")
+	}
+	s.redoCode = scanCode
+	s.redoState = s.step
+	s.step = stateRedo
+	s.redo = true
+}
+
+// stateRedo helps implement the scanner's 1-byte undo.
+func stateRedo(s *scanner, c byte) int {
+	s.redo = false
+	s.step = s.redoState
+	return s.redoCode
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/json/stream.go b/vendor/gopkg.in/square/go-jose.v2/json/stream.go
new file mode 100644
index 000000000..8ddcf4d27
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/json/stream.go
@@ -0,0 +1,480 @@
+// Copyright 2010 The Go Authors.  All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package json
+
+import (
+	"bytes"
+	"errors"
+	"io"
+)
+
+// A Decoder reads and decodes JSON objects from an input stream.
+type Decoder struct {
+	r     io.Reader
+	buf   []byte
+	d     decodeState
+	scanp int // start of unread data in buf
+	scan  scanner
+	err   error
+
+	tokenState int
+	tokenStack []int
+}
+
+// NewDecoder returns a new decoder that reads from r.
+//
+// The decoder introduces its own buffering and may
+// read data from r beyond the JSON values requested.
+func NewDecoder(r io.Reader) *Decoder {
+	return &Decoder{r: r}
+}
+
+// UseNumber causes the Decoder to unmarshal a number into an interface{} as a
+// Number instead of as a float64.
+func (dec *Decoder) UseNumber() { dec.d.useNumber = true }
+
+// Decode reads the next JSON-encoded value from its
+// input and stores it in the value pointed to by v.
+//
+// See the documentation for Unmarshal for details about
+// the conversion of JSON into a Go value.
+func (dec *Decoder) Decode(v interface{}) error {
+	if dec.err != nil {
+		return dec.err
+	}
+
+	if err := dec.tokenPrepareForDecode(); err != nil {
+		return err
+	}
+
+	if !dec.tokenValueAllowed() {
+		return &SyntaxError{msg: "not at beginning of value"}
+	}
+
+	// Read whole value into buffer.
+	n, err := dec.readValue()
+	if err != nil {
+		return err
+	}
+	dec.d.init(dec.buf[dec.scanp : dec.scanp+n])
+	dec.scanp += n
+
+	// Don't save err from unmarshal into dec.err:
+	// the connection is still usable since we read a complete JSON
+	// object from it before the error happened.
+	err = dec.d.unmarshal(v)
+
+	// fixup token streaming state
+	dec.tokenValueEnd()
+
+	return err
+}
+
+// Buffered returns a reader of the data remaining in the Decoder's
+// buffer. The reader is valid until the next call to Decode.
+func (dec *Decoder) Buffered() io.Reader {
+	return bytes.NewReader(dec.buf[dec.scanp:])
+}
+
+// readValue reads a JSON value into dec.buf.
+// It returns the length of the encoding.
+func (dec *Decoder) readValue() (int, error) {
+	dec.scan.reset()
+
+	scanp := dec.scanp
+	var err error
+Input:
+	for {
+		// Look in the buffer for a new value.
+		for i, c := range dec.buf[scanp:] {
+			dec.scan.bytes++
+			v := dec.scan.step(&dec.scan, c)
+			if v == scanEnd {
+				scanp += i
+				break Input
+			}
+			// scanEnd is delayed one byte.
+			// We might block trying to get that byte from src,
+			// so instead invent a space byte.
+			if (v == scanEndObject || v == scanEndArray) && dec.scan.step(&dec.scan, ' ') == scanEnd {
+				scanp += i + 1
+				break Input
+			}
+			if v == scanError {
+				dec.err = dec.scan.err
+				return 0, dec.scan.err
+			}
+		}
+		scanp = len(dec.buf)
+
+		// Did the last read have an error?
+		// Delayed until now to allow buffer scan.
+		if err != nil {
+			if err == io.EOF {
+				if dec.scan.step(&dec.scan, ' ') == scanEnd {
+					break Input
+				}
+				if nonSpace(dec.buf) {
+					err = io.ErrUnexpectedEOF
+				}
+			}
+			dec.err = err
+			return 0, err
+		}
+
+		n := scanp - dec.scanp
+		err = dec.refill()
+		scanp = dec.scanp + n
+	}
+	return scanp - dec.scanp, nil
+}
+
+func (dec *Decoder) refill() error {
+	// Make room to read more into the buffer.
+	// First slide down data already consumed.
+	if dec.scanp > 0 {
+		n := copy(dec.buf, dec.buf[dec.scanp:])
+		dec.buf = dec.buf[:n]
+		dec.scanp = 0
+	}
+
+	// Grow buffer if not large enough.
+	const minRead = 512
+	if cap(dec.buf)-len(dec.buf) < minRead {
+		newBuf := make([]byte, len(dec.buf), 2*cap(dec.buf)+minRead)
+		copy(newBuf, dec.buf)
+		dec.buf = newBuf
+	}
+
+	// Read.  Delay error for next iteration (after scan).
+	n, err := dec.r.Read(dec.buf[len(dec.buf):cap(dec.buf)])
+	dec.buf = dec.buf[0 : len(dec.buf)+n]
+
+	return err
+}
+
+func nonSpace(b []byte) bool {
+	for _, c := range b {
+		if !isSpace(c) {
+			return true
+		}
+	}
+	return false
+}
+
+// An Encoder writes JSON objects to an output stream.
+type Encoder struct {
+	w   io.Writer
+	err error
+}
+
+// NewEncoder returns a new encoder that writes to w.
+func NewEncoder(w io.Writer) *Encoder {
+	return &Encoder{w: w}
+}
+
+// Encode writes the JSON encoding of v to the stream,
+// followed by a newline character.
+//
+// See the documentation for Marshal for details about the
+// conversion of Go values to JSON.
+func (enc *Encoder) Encode(v interface{}) error {
+	if enc.err != nil {
+		return enc.err
+	}
+	e := newEncodeState()
+	err := e.marshal(v)
+	if err != nil {
+		return err
+	}
+
+	// Terminate each value with a newline.
+	// This makes the output look a little nicer
+	// when debugging, and some kind of space
+	// is required if the encoded value was a number,
+	// so that the reader knows there aren't more
+	// digits coming.
+	e.WriteByte('\n')
+
+	if _, err = enc.w.Write(e.Bytes()); err != nil {
+		enc.err = err
+	}
+	encodeStatePool.Put(e)
+	return err
+}
+
+// RawMessage is a raw encoded JSON object.
+// It implements Marshaler and Unmarshaler and can
+// be used to delay JSON decoding or precompute a JSON encoding.
+type RawMessage []byte
+
+// MarshalJSON returns *m as the JSON encoding of m.
+func (m *RawMessage) MarshalJSON() ([]byte, error) {
+	return *m, nil
+}
+
+// UnmarshalJSON sets *m to a copy of data.
+func (m *RawMessage) UnmarshalJSON(data []byte) error {
+	if m == nil {
+		return errors.New("json.RawMessage: UnmarshalJSON on nil pointer")
+	}
+	*m = append((*m)[0:0], data...)
+	return nil
+}
+
+var _ Marshaler = (*RawMessage)(nil)
+var _ Unmarshaler = (*RawMessage)(nil)
+
+// A Token holds a value of one of these types:
+//
+//	Delim, for the four JSON delimiters [ ] { }
+//	bool, for JSON booleans
+//	float64, for JSON numbers
+//	Number, for JSON numbers
+//	string, for JSON string literals
+//	nil, for JSON null
+//
+type Token interface{}
+
+const (
+	tokenTopValue = iota
+	tokenArrayStart
+	tokenArrayValue
+	tokenArrayComma
+	tokenObjectStart
+	tokenObjectKey
+	tokenObjectColon
+	tokenObjectValue
+	tokenObjectComma
+)
+
+// advance tokenstate from a separator state to a value state
+func (dec *Decoder) tokenPrepareForDecode() error {
+	// Note: Not calling peek before switch, to avoid
+	// putting peek into the standard Decode path.
+	// peek is only called when using the Token API.
+	switch dec.tokenState {
+	case tokenArrayComma:
+		c, err := dec.peek()
+		if err != nil {
+			return err
+		}
+		if c != ',' {
+			return &SyntaxError{"expected comma after array element", 0}
+		}
+		dec.scanp++
+		dec.tokenState = tokenArrayValue
+	case tokenObjectColon:
+		c, err := dec.peek()
+		if err != nil {
+			return err
+		}
+		if c != ':' {
+			return &SyntaxError{"expected colon after object key", 0}
+		}
+		dec.scanp++
+		dec.tokenState = tokenObjectValue
+	}
+	return nil
+}
+
+func (dec *Decoder) tokenValueAllowed() bool {
+	switch dec.tokenState {
+	case tokenTopValue, tokenArrayStart, tokenArrayValue, tokenObjectValue:
+		return true
+	}
+	return false
+}
+
+func (dec *Decoder) tokenValueEnd() {
+	switch dec.tokenState {
+	case tokenArrayStart, tokenArrayValue:
+		dec.tokenState = tokenArrayComma
+	case tokenObjectValue:
+		dec.tokenState = tokenObjectComma
+	}
+}
+
+// A Delim is a JSON array or object delimiter, one of [ ] { or }.
+type Delim rune
+
+func (d Delim) String() string {
+	return string(d)
+}
+
+// Token returns the next JSON token in the input stream.
+// At the end of the input stream, Token returns nil, io.EOF.
+//
+// Token guarantees that the delimiters [ ] { } it returns are
+// properly nested and matched: if Token encounters an unexpected
+// delimiter in the input, it will return an error.
+//
+// The input stream consists of basic JSON values—bool, string,
+// number, and null—along with delimiters [ ] { } of type Delim
+// to mark the start and end of arrays and objects.
+// Commas and colons are elided.
+func (dec *Decoder) Token() (Token, error) {
+	for {
+		c, err := dec.peek()
+		if err != nil {
+			return nil, err
+		}
+		switch c {
+		case '[':
+			if !dec.tokenValueAllowed() {
+				return dec.tokenError(c)
+			}
+			dec.scanp++
+			dec.tokenStack = append(dec.tokenStack, dec.tokenState)
+			dec.tokenState = tokenArrayStart
+			return Delim('['), nil
+
+		case ']':
+			if dec.tokenState != tokenArrayStart && dec.tokenState != tokenArrayComma {
+				return dec.tokenError(c)
+			}
+			dec.scanp++
+			dec.tokenState = dec.tokenStack[len(dec.tokenStack)-1]
+			dec.tokenStack = dec.tokenStack[:len(dec.tokenStack)-1]
+			dec.tokenValueEnd()
+			return Delim(']'), nil
+
+		case '{':
+			if !dec.tokenValueAllowed() {
+				return dec.tokenError(c)
+			}
+			dec.scanp++
+			dec.tokenStack = append(dec.tokenStack, dec.tokenState)
+			dec.tokenState = tokenObjectStart
+			return Delim('{'), nil
+
+		case '}':
+			if dec.tokenState != tokenObjectStart && dec.tokenState != tokenObjectComma {
+				return dec.tokenError(c)
+			}
+			dec.scanp++
+			dec.tokenState = dec.tokenStack[len(dec.tokenStack)-1]
+			dec.tokenStack = dec.tokenStack[:len(dec.tokenStack)-1]
+			dec.tokenValueEnd()
+			return Delim('}'), nil
+
+		case ':':
+			if dec.tokenState != tokenObjectColon {
+				return dec.tokenError(c)
+			}
+			dec.scanp++
+			dec.tokenState = tokenObjectValue
+			continue
+
+		case ',':
+			if dec.tokenState == tokenArrayComma {
+				dec.scanp++
+				dec.tokenState = tokenArrayValue
+				continue
+			}
+			if dec.tokenState == tokenObjectComma {
+				dec.scanp++
+				dec.tokenState = tokenObjectKey
+				continue
+			}
+			return dec.tokenError(c)
+
+		case '"':
+			if dec.tokenState == tokenObjectStart || dec.tokenState == tokenObjectKey {
+				var x string
+				old := dec.tokenState
+				dec.tokenState = tokenTopValue
+				err := dec.Decode(&x)
+				dec.tokenState = old
+				if err != nil {
+					clearOffset(err)
+					return nil, err
+				}
+				dec.tokenState = tokenObjectColon
+				return x, nil
+			}
+			fallthrough
+
+		default:
+			if !dec.tokenValueAllowed() {
+				return dec.tokenError(c)
+			}
+			var x interface{}
+			if err := dec.Decode(&x); err != nil {
+				clearOffset(err)
+				return nil, err
+			}
+			return x, nil
+		}
+	}
+}
+
+func clearOffset(err error) {
+	if s, ok := err.(*SyntaxError); ok {
+		s.Offset = 0
+	}
+}
+
+func (dec *Decoder) tokenError(c byte) (Token, error) {
+	var context string
+	switch dec.tokenState {
+	case tokenTopValue:
+		context = " looking for beginning of value"
+	case tokenArrayStart, tokenArrayValue, tokenObjectValue:
+		context = " looking for beginning of value"
+	case tokenArrayComma:
+		context = " after array element"
+	case tokenObjectKey:
+		context = " looking for beginning of object key string"
+	case tokenObjectColon:
+		context = " after object key"
+	case tokenObjectComma:
+		context = " after object key:value pair"
+	}
+	return nil, &SyntaxError{"invalid character " + quoteChar(c) + " " + context, 0}
+}
+
+// More reports whether there is another element in the
+// current array or object being parsed.
+func (dec *Decoder) More() bool {
+	c, err := dec.peek()
+	return err == nil && c != ']' && c != '}'
+}
+
+func (dec *Decoder) peek() (byte, error) {
+	var err error
+	for {
+		for i := dec.scanp; i < len(dec.buf); i++ {
+			c := dec.buf[i]
+			if isSpace(c) {
+				continue
+			}
+			dec.scanp = i
+			return c, nil
+		}
+		// buffer has been scanned, now report any error
+		if err != nil {
+			return 0, err
+		}
+		err = dec.refill()
+	}
+}
+
+/*
+TODO
+
+// EncodeToken writes the given JSON token to the stream.
+// It returns an error if the delimiters [ ] { } are not properly used.
+//
+// EncodeToken does not call Flush, because usually it is part of
+// a larger operation such as Encode, and those will call Flush when finished.
+// Callers that create an Encoder and then invoke EncodeToken directly,
+// without using Encode, need to call Flush when finished to ensure that
+// the JSON is written to the underlying writer.
+func (e *Encoder) EncodeToken(t Token) error  {
+	...
+}
+
+*/
diff --git a/vendor/gopkg.in/square/go-jose.v2/json/tags.go b/vendor/gopkg.in/square/go-jose.v2/json/tags.go
new file mode 100644
index 000000000..c38fd5102
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/json/tags.go
@@ -0,0 +1,44 @@
+// Copyright 2011 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+package json
+
+import (
+	"strings"
+)
+
+// tagOptions is the string following a comma in a struct field's "json"
+// tag, or the empty string. It does not include the leading comma.
+type tagOptions string
+
+// parseTag splits a struct field's json tag into its name and
+// comma-separated options.
+func parseTag(tag string) (string, tagOptions) {
+	if idx := strings.Index(tag, ","); idx != -1 {
+		return tag[:idx], tagOptions(tag[idx+1:])
+	}
+	return tag, tagOptions("")
+}
+
+// Contains reports whether a comma-separated list of options
+// contains a particular substr flag. substr must be surrounded by a
+// string boundary or commas.
+func (o tagOptions) Contains(optionName string) bool {
+	if len(o) == 0 {
+		return false
+	}
+	s := string(o)
+	for s != "" {
+		var next string
+		i := strings.Index(s, ",")
+		if i >= 0 {
+			s, next = s[:i], s[i+1:]
+		}
+		if s == optionName {
+			return true
+		}
+		s = next
+	}
+	return false
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/jwe.go b/vendor/gopkg.in/square/go-jose.v2/jwe.go
new file mode 100644
index 000000000..b5a6dcdf4
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/jwe.go
@@ -0,0 +1,294 @@
+/*-
+ * Copyright 2014 Square Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package jose
+
+import (
+	"encoding/base64"
+	"fmt"
+	"strings"
+
+	"gopkg.in/square/go-jose.v2/json"
+)
+
+// rawJSONWebEncryption represents a raw JWE JSON object. Used for parsing/serializing.
+type rawJSONWebEncryption struct {
+	Protected    *byteBuffer        `json:"protected,omitempty"`
+	Unprotected  *rawHeader         `json:"unprotected,omitempty"`
+	Header       *rawHeader         `json:"header,omitempty"`
+	Recipients   []rawRecipientInfo `json:"recipients,omitempty"`
+	Aad          *byteBuffer        `json:"aad,omitempty"`
+	EncryptedKey *byteBuffer        `json:"encrypted_key,omitempty"`
+	Iv           *byteBuffer        `json:"iv,omitempty"`
+	Ciphertext   *byteBuffer        `json:"ciphertext,omitempty"`
+	Tag          *byteBuffer        `json:"tag,omitempty"`
+}
+
+// rawRecipientInfo represents a raw JWE Per-Recipient header JSON object. Used for parsing/serializing.
+type rawRecipientInfo struct {
+	Header       *rawHeader `json:"header,omitempty"`
+	EncryptedKey string     `json:"encrypted_key,omitempty"`
+}
+
+// JSONWebEncryption represents an encrypted JWE object after parsing.
+type JSONWebEncryption struct {
+	Header                   Header
+	protected, unprotected   *rawHeader
+	recipients               []recipientInfo
+	aad, iv, ciphertext, tag []byte
+	original                 *rawJSONWebEncryption
+}
+
+// recipientInfo represents a raw JWE Per-Recipient header JSON object after parsing.
+type recipientInfo struct {
+	header       *rawHeader
+	encryptedKey []byte
+}
+
+// GetAuthData retrieves the (optional) authenticated data attached to the object.
+func (obj JSONWebEncryption) GetAuthData() []byte {
+	if obj.aad != nil {
+		out := make([]byte, len(obj.aad))
+		copy(out, obj.aad)
+		return out
+	}
+
+	return nil
+}
+
+// Get the merged header values
+func (obj JSONWebEncryption) mergedHeaders(recipient *recipientInfo) rawHeader {
+	out := rawHeader{}
+	out.merge(obj.protected)
+	out.merge(obj.unprotected)
+
+	if recipient != nil {
+		out.merge(recipient.header)
+	}
+
+	return out
+}
+
+// Get the additional authenticated data from a JWE object.
+func (obj JSONWebEncryption) computeAuthData() []byte {
+	var protected string
+
+	if obj.original != nil && obj.original.Protected != nil {
+		protected = obj.original.Protected.base64()
+	} else if obj.protected != nil {
+		protected = base64.RawURLEncoding.EncodeToString(mustSerializeJSON((obj.protected)))
+	} else {
+		protected = ""
+	}
+
+	output := []byte(protected)
+	if obj.aad != nil {
+		output = append(output, '.')
+		output = append(output, []byte(base64.RawURLEncoding.EncodeToString(obj.aad))...)
+	}
+
+	return output
+}
+
+// ParseEncrypted parses an encrypted message in compact or full serialization format.
+func ParseEncrypted(input string) (*JSONWebEncryption, error) {
+	input = stripWhitespace(input)
+	if strings.HasPrefix(input, "{") {
+		return parseEncryptedFull(input)
+	}
+
+	return parseEncryptedCompact(input)
+}
+
+// parseEncryptedFull parses a message in compact format.
+func parseEncryptedFull(input string) (*JSONWebEncryption, error) {
+	var parsed rawJSONWebEncryption
+	err := json.Unmarshal([]byte(input), &parsed)
+	if err != nil {
+		return nil, err
+	}
+
+	return parsed.sanitized()
+}
+
+// sanitized produces a cleaned-up JWE object from the raw JSON.
+func (parsed *rawJSONWebEncryption) sanitized() (*JSONWebEncryption, error) {
+	obj := &JSONWebEncryption{
+		original:    parsed,
+		unprotected: parsed.Unprotected,
+	}
+
+	// Check that there is not a nonce in the unprotected headers
+	if parsed.Unprotected != nil {
+		if nonce := parsed.Unprotected.getNonce(); nonce != "" {
+			return nil, ErrUnprotectedNonce
+		}
+	}
+	if parsed.Header != nil {
+		if nonce := parsed.Header.getNonce(); nonce != "" {
+			return nil, ErrUnprotectedNonce
+		}
+	}
+
+	if parsed.Protected != nil && len(parsed.Protected.bytes()) > 0 {
+		err := json.Unmarshal(parsed.Protected.bytes(), &obj.protected)
+		if err != nil {
+			return nil, fmt.Errorf("square/go-jose: invalid protected header: %s, %s", err, parsed.Protected.base64())
+		}
+	}
+
+	// Note: this must be called _after_ we parse the protected header,
+	// otherwise fields from the protected header will not get picked up.
+	var err error
+	mergedHeaders := obj.mergedHeaders(nil)
+	obj.Header, err = mergedHeaders.sanitized()
+	if err != nil {
+		return nil, fmt.Errorf("square/go-jose: cannot sanitize merged headers: %v (%v)", err, mergedHeaders)
+	}
+
+	if len(parsed.Recipients) == 0 {
+		obj.recipients = []recipientInfo{
+			{
+				header:       parsed.Header,
+				encryptedKey: parsed.EncryptedKey.bytes(),
+			},
+		}
+	} else {
+		obj.recipients = make([]recipientInfo, len(parsed.Recipients))
+		for r := range parsed.Recipients {
+			encryptedKey, err := base64.RawURLEncoding.DecodeString(parsed.Recipients[r].EncryptedKey)
+			if err != nil {
+				return nil, err
+			}
+
+			// Check that there is not a nonce in the unprotected header
+			if parsed.Recipients[r].Header != nil && parsed.Recipients[r].Header.getNonce() != "" {
+				return nil, ErrUnprotectedNonce
+			}
+
+			obj.recipients[r].header = parsed.Recipients[r].Header
+			obj.recipients[r].encryptedKey = encryptedKey
+		}
+	}
+
+	for _, recipient := range obj.recipients {
+		headers := obj.mergedHeaders(&recipient)
+		if headers.getAlgorithm() == "" || headers.getEncryption() == "" {
+			return nil, fmt.Errorf("square/go-jose: message is missing alg/enc headers")
+		}
+	}
+
+	obj.iv = parsed.Iv.bytes()
+	obj.ciphertext = parsed.Ciphertext.bytes()
+	obj.tag = parsed.Tag.bytes()
+	obj.aad = parsed.Aad.bytes()
+
+	return obj, nil
+}
+
+// parseEncryptedCompact parses a message in compact format.
+func parseEncryptedCompact(input string) (*JSONWebEncryption, error) {
+	parts := strings.Split(input, ".")
+	if len(parts) != 5 {
+		return nil, fmt.Errorf("square/go-jose: compact JWE format must have five parts")
+	}
+
+	rawProtected, err := base64.RawURLEncoding.DecodeString(parts[0])
+	if err != nil {
+		return nil, err
+	}
+
+	encryptedKey, err := base64.RawURLEncoding.DecodeString(parts[1])
+	if err != nil {
+		return nil, err
+	}
+
+	iv, err := base64.RawURLEncoding.DecodeString(parts[2])
+	if err != nil {
+		return nil, err
+	}
+
+	ciphertext, err := base64.RawURLEncoding.DecodeString(parts[3])
+	if err != nil {
+		return nil, err
+	}
+
+	tag, err := base64.RawURLEncoding.DecodeString(parts[4])
+	if err != nil {
+		return nil, err
+	}
+
+	raw := &rawJSONWebEncryption{
+		Protected:    newBuffer(rawProtected),
+		EncryptedKey: newBuffer(encryptedKey),
+		Iv:           newBuffer(iv),
+		Ciphertext:   newBuffer(ciphertext),
+		Tag:          newBuffer(tag),
+	}
+
+	return raw.sanitized()
+}
+
+// CompactSerialize serializes an object using the compact serialization format.
+func (obj JSONWebEncryption) CompactSerialize() (string, error) {
+	if len(obj.recipients) != 1 || obj.unprotected != nil ||
+		obj.protected == nil || obj.recipients[0].header != nil {
+		return "", ErrNotSupported
+	}
+
+	serializedProtected := mustSerializeJSON(obj.protected)
+
+	return fmt.Sprintf(
+		"%s.%s.%s.%s.%s",
+		base64.RawURLEncoding.EncodeToString(serializedProtected),
+		base64.RawURLEncoding.EncodeToString(obj.recipients[0].encryptedKey),
+		base64.RawURLEncoding.EncodeToString(obj.iv),
+		base64.RawURLEncoding.EncodeToString(obj.ciphertext),
+		base64.RawURLEncoding.EncodeToString(obj.tag)), nil
+}
+
+// FullSerialize serializes an object using the full JSON serialization format.
+func (obj JSONWebEncryption) FullSerialize() string {
+	raw := rawJSONWebEncryption{
+		Unprotected:  obj.unprotected,
+		Iv:           newBuffer(obj.iv),
+		Ciphertext:   newBuffer(obj.ciphertext),
+		EncryptedKey: newBuffer(obj.recipients[0].encryptedKey),
+		Tag:          newBuffer(obj.tag),
+		Aad:          newBuffer(obj.aad),
+		Recipients:   []rawRecipientInfo{},
+	}
+
+	if len(obj.recipients) > 1 {
+		for _, recipient := range obj.recipients {
+			info := rawRecipientInfo{
+				Header:       recipient.header,
+				EncryptedKey: base64.RawURLEncoding.EncodeToString(recipient.encryptedKey),
+			}
+			raw.Recipients = append(raw.Recipients, info)
+		}
+	} else {
+		// Use flattened serialization
+		raw.Header = obj.recipients[0].header
+		raw.EncryptedKey = newBuffer(obj.recipients[0].encryptedKey)
+	}
+
+	if obj.protected != nil {
+		raw.Protected = newBuffer(mustSerializeJSON(obj.protected))
+	}
+
+	return string(mustSerializeJSON(raw))
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/jwk.go b/vendor/gopkg.in/square/go-jose.v2/jwk.go
new file mode 100644
index 000000000..6cb8adb84
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/jwk.go
@@ -0,0 +1,608 @@
+/*-
+ * Copyright 2014 Square Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package jose
+
+import (
+	"crypto"
+	"crypto/ecdsa"
+	"crypto/elliptic"
+	"crypto/rsa"
+	"crypto/x509"
+	"encoding/base64"
+	"errors"
+	"fmt"
+	"math/big"
+	"reflect"
+	"strings"
+
+	"golang.org/x/crypto/ed25519"
+
+	"gopkg.in/square/go-jose.v2/json"
+)
+
+// rawJSONWebKey represents a public or private key in JWK format, used for parsing/serializing.
+type rawJSONWebKey struct {
+	Use string      `json:"use,omitempty"`
+	Kty string      `json:"kty,omitempty"`
+	Kid string      `json:"kid,omitempty"`
+	Crv string      `json:"crv,omitempty"`
+	Alg string      `json:"alg,omitempty"`
+	K   *byteBuffer `json:"k,omitempty"`
+	X   *byteBuffer `json:"x,omitempty"`
+	Y   *byteBuffer `json:"y,omitempty"`
+	N   *byteBuffer `json:"n,omitempty"`
+	E   *byteBuffer `json:"e,omitempty"`
+	// -- Following fields are only used for private keys --
+	// RSA uses D, P and Q, while ECDSA uses only D. Fields Dp, Dq, and Qi are
+	// completely optional. Therefore for RSA/ECDSA, D != nil is a contract that
+	// we have a private key whereas D == nil means we have only a public key.
+	D  *byteBuffer `json:"d,omitempty"`
+	P  *byteBuffer `json:"p,omitempty"`
+	Q  *byteBuffer `json:"q,omitempty"`
+	Dp *byteBuffer `json:"dp,omitempty"`
+	Dq *byteBuffer `json:"dq,omitempty"`
+	Qi *byteBuffer `json:"qi,omitempty"`
+	// Certificates
+	X5c []string `json:"x5c,omitempty"`
+}
+
+// JSONWebKey represents a public or private key in JWK format.
+type JSONWebKey struct {
+	Key          interface{}
+	Certificates []*x509.Certificate
+	KeyID        string
+	Algorithm    string
+	Use          string
+}
+
+// MarshalJSON serializes the given key to its JSON representation.
+func (k JSONWebKey) MarshalJSON() ([]byte, error) {
+	var raw *rawJSONWebKey
+	var err error
+
+	switch key := k.Key.(type) {
+	case ed25519.PublicKey:
+		raw = fromEdPublicKey(key)
+	case *ecdsa.PublicKey:
+		raw, err = fromEcPublicKey(key)
+	case *rsa.PublicKey:
+		raw = fromRsaPublicKey(key)
+	case ed25519.PrivateKey:
+		raw, err = fromEdPrivateKey(key)
+	case *ecdsa.PrivateKey:
+		raw, err = fromEcPrivateKey(key)
+	case *rsa.PrivateKey:
+		raw, err = fromRsaPrivateKey(key)
+	case []byte:
+		raw, err = fromSymmetricKey(key)
+	default:
+		return nil, fmt.Errorf("square/go-jose: unknown key type '%s'", reflect.TypeOf(key))
+	}
+
+	if err != nil {
+		return nil, err
+	}
+
+	raw.Kid = k.KeyID
+	raw.Alg = k.Algorithm
+	raw.Use = k.Use
+
+	for _, cert := range k.Certificates {
+		raw.X5c = append(raw.X5c, base64.StdEncoding.EncodeToString(cert.Raw))
+	}
+
+	return json.Marshal(raw)
+}
+
+// UnmarshalJSON reads a key from its JSON representation.
+func (k *JSONWebKey) UnmarshalJSON(data []byte) (err error) {
+	var raw rawJSONWebKey
+	err = json.Unmarshal(data, &raw)
+	if err != nil {
+		return err
+	}
+
+	var key interface{}
+	switch raw.Kty {
+	case "EC":
+		if raw.D != nil {
+			key, err = raw.ecPrivateKey()
+		} else {
+			key, err = raw.ecPublicKey()
+		}
+	case "RSA":
+		if raw.D != nil {
+			key, err = raw.rsaPrivateKey()
+		} else {
+			key, err = raw.rsaPublicKey()
+		}
+	case "oct":
+		key, err = raw.symmetricKey()
+	case "OKP":
+		if raw.Crv == "Ed25519" && raw.X != nil {
+			if raw.D != nil {
+				key, err = raw.edPrivateKey()
+			} else {
+				key, err = raw.edPublicKey()
+			}
+		} else {
+			err = fmt.Errorf("square/go-jose: unknown curve %s'", raw.Crv)
+		}
+	default:
+		err = fmt.Errorf("square/go-jose: unknown json web key type '%s'", raw.Kty)
+	}
+
+	if err == nil {
+		*k = JSONWebKey{Key: key, KeyID: raw.Kid, Algorithm: raw.Alg, Use: raw.Use}
+
+		k.Certificates, err = parseCertificateChain(raw.X5c)
+		if err != nil {
+			return fmt.Errorf("failed to unmarshal x5c field: %s", err)
+		}
+	}
+
+	return
+}
+
+// JSONWebKeySet represents a JWK Set object.
+type JSONWebKeySet struct {
+	Keys []JSONWebKey `json:"keys"`
+}
+
+// Key convenience method returns keys by key ID. Specification states
+// that a JWK Set "SHOULD" use distinct key IDs, but allows for some
+// cases where they are not distinct. Hence method returns a slice
+// of JSONWebKeys.
+func (s *JSONWebKeySet) Key(kid string) []JSONWebKey {
+	var keys []JSONWebKey
+	for _, key := range s.Keys {
+		if key.KeyID == kid {
+			keys = append(keys, key)
+		}
+	}
+
+	return keys
+}
+
+const rsaThumbprintTemplate = `{"e":"%s","kty":"RSA","n":"%s"}`
+const ecThumbprintTemplate = `{"crv":"%s","kty":"EC","x":"%s","y":"%s"}`
+const edThumbprintTemplate = `{"crv":"%s","kty":"OKP",x":"%s"}`
+
+func ecThumbprintInput(curve elliptic.Curve, x, y *big.Int) (string, error) {
+	coordLength := curveSize(curve)
+	crv, err := curveName(curve)
+	if err != nil {
+		return "", err
+	}
+
+	if len(x.Bytes()) > coordLength || len(y.Bytes()) > coordLength {
+		return "", errors.New("square/go-jose: invalid elliptic key (too large)")
+	}
+
+	return fmt.Sprintf(ecThumbprintTemplate, crv,
+		newFixedSizeBuffer(x.Bytes(), coordLength).base64(),
+		newFixedSizeBuffer(y.Bytes(), coordLength).base64()), nil
+}
+
+func rsaThumbprintInput(n *big.Int, e int) (string, error) {
+	return fmt.Sprintf(rsaThumbprintTemplate,
+		newBufferFromInt(uint64(e)).base64(),
+		newBuffer(n.Bytes()).base64()), nil
+}
+
+func edThumbprintInput(ed ed25519.PublicKey) (string, error) {
+	crv := "Ed25519"
+	if len(ed) > 32 {
+		return "", errors.New("square/go-jose: invalid elliptic key (too large)")
+	}
+	return fmt.Sprintf(edThumbprintTemplate, crv,
+		newFixedSizeBuffer(ed, 32).base64()), nil
+}
+
+// Thumbprint computes the JWK Thumbprint of a key using the
+// indicated hash algorithm.
+func (k *JSONWebKey) Thumbprint(hash crypto.Hash) ([]byte, error) {
+	var input string
+	var err error
+	switch key := k.Key.(type) {
+	case ed25519.PublicKey:
+		input, err = edThumbprintInput(key)
+	case *ecdsa.PublicKey:
+		input, err = ecThumbprintInput(key.Curve, key.X, key.Y)
+	case *ecdsa.PrivateKey:
+		input, err = ecThumbprintInput(key.Curve, key.X, key.Y)
+	case *rsa.PublicKey:
+		input, err = rsaThumbprintInput(key.N, key.E)
+	case *rsa.PrivateKey:
+		input, err = rsaThumbprintInput(key.N, key.E)
+	case ed25519.PrivateKey:
+		input, err = edThumbprintInput(ed25519.PublicKey(key[32:]))
+	default:
+		return nil, fmt.Errorf("square/go-jose: unknown key type '%s'", reflect.TypeOf(key))
+	}
+
+	if err != nil {
+		return nil, err
+	}
+
+	h := hash.New()
+	h.Write([]byte(input))
+	return h.Sum(nil), nil
+}
+
+// IsPublic returns true if the JWK represents a public key (not symmetric, not private).
+func (k *JSONWebKey) IsPublic() bool {
+	switch k.Key.(type) {
+	case *ecdsa.PublicKey, *rsa.PublicKey, ed25519.PublicKey:
+		return true
+	default:
+		return false
+	}
+}
+
+// Public creates JSONWebKey with corresponding publik key if JWK represents asymmetric private key.
+func (k *JSONWebKey) Public() JSONWebKey {
+	if k.IsPublic() {
+		return *k
+	}
+	ret := *k
+	switch key := k.Key.(type) {
+	case *ecdsa.PrivateKey:
+		ret.Key = key.Public()
+	case *rsa.PrivateKey:
+		ret.Key = key.Public()
+	case ed25519.PrivateKey:
+		ret.Key = key.Public()
+	default:
+		return JSONWebKey{} // returning invalid key
+	}
+	return ret
+}
+
+// Valid checks that the key contains the expected parameters.
+func (k *JSONWebKey) Valid() bool {
+	if k.Key == nil {
+		return false
+	}
+	switch key := k.Key.(type) {
+	case *ecdsa.PublicKey:
+		if key.Curve == nil || key.X == nil || key.Y == nil {
+			return false
+		}
+	case *ecdsa.PrivateKey:
+		if key.Curve == nil || key.X == nil || key.Y == nil || key.D == nil {
+			return false
+		}
+	case *rsa.PublicKey:
+		if key.N == nil || key.E == 0 {
+			return false
+		}
+	case *rsa.PrivateKey:
+		if key.N == nil || key.E == 0 || key.D == nil || len(key.Primes) < 2 {
+			return false
+		}
+	case ed25519.PublicKey:
+		if len(key) != 32 {
+			return false
+		}
+	case ed25519.PrivateKey:
+		if len(key) != 64 {
+			return false
+		}
+	default:
+		return false
+	}
+	return true
+}
+
+func (key rawJSONWebKey) rsaPublicKey() (*rsa.PublicKey, error) {
+	if key.N == nil || key.E == nil {
+		return nil, fmt.Errorf("square/go-jose: invalid RSA key, missing n/e values")
+	}
+
+	return &rsa.PublicKey{
+		N: key.N.bigInt(),
+		E: key.E.toInt(),
+	}, nil
+}
+
+func fromEdPublicKey(pub ed25519.PublicKey) *rawJSONWebKey {
+	return &rawJSONWebKey{
+		Kty: "OKP",
+		Crv: "Ed25519",
+		X:   newBuffer(pub),
+	}
+}
+
+func fromRsaPublicKey(pub *rsa.PublicKey) *rawJSONWebKey {
+	return &rawJSONWebKey{
+		Kty: "RSA",
+		N:   newBuffer(pub.N.Bytes()),
+		E:   newBufferFromInt(uint64(pub.E)),
+	}
+}
+
+func (key rawJSONWebKey) ecPublicKey() (*ecdsa.PublicKey, error) {
+	var curve elliptic.Curve
+	switch key.Crv {
+	case "P-256":
+		curve = elliptic.P256()
+	case "P-384":
+		curve = elliptic.P384()
+	case "P-521":
+		curve = elliptic.P521()
+	default:
+		return nil, fmt.Errorf("square/go-jose: unsupported elliptic curve '%s'", key.Crv)
+	}
+
+	if key.X == nil || key.Y == nil {
+		return nil, errors.New("square/go-jose: invalid EC key, missing x/y values")
+	}
+
+	// The length of this octet string MUST be the full size of a coordinate for
+	// the curve specified in the "crv" parameter.
+	// https://tools.ietf.org/html/rfc7518#section-6.2.1.2
+	if curveSize(curve) != len(key.X.data) {
+		return nil, fmt.Errorf("square/go-jose: invalid EC private key, wrong length for x")
+	}
+
+	if curveSize(curve) != len(key.Y.data) {
+		return nil, fmt.Errorf("square/go-jose: invalid EC private key, wrong length for y")
+	}
+
+	x := key.X.bigInt()
+	y := key.Y.bigInt()
+
+	if !curve.IsOnCurve(x, y) {
+		return nil, errors.New("square/go-jose: invalid EC key, X/Y are not on declared curve")
+	}
+
+	return &ecdsa.PublicKey{
+		Curve: curve,
+		X:     x,
+		Y:     y,
+	}, nil
+}
+
+func fromEcPublicKey(pub *ecdsa.PublicKey) (*rawJSONWebKey, error) {
+	if pub == nil || pub.X == nil || pub.Y == nil {
+		return nil, fmt.Errorf("square/go-jose: invalid EC key (nil, or X/Y missing)")
+	}
+
+	name, err := curveName(pub.Curve)
+	if err != nil {
+		return nil, err
+	}
+
+	size := curveSize(pub.Curve)
+
+	xBytes := pub.X.Bytes()
+	yBytes := pub.Y.Bytes()
+
+	if len(xBytes) > size || len(yBytes) > size {
+		return nil, fmt.Errorf("square/go-jose: invalid EC key (X/Y too large)")
+	}
+
+	key := &rawJSONWebKey{
+		Kty: "EC",
+		Crv: name,
+		X:   newFixedSizeBuffer(xBytes, size),
+		Y:   newFixedSizeBuffer(yBytes, size),
+	}
+
+	return key, nil
+}
+
+func (key rawJSONWebKey) edPrivateKey() (ed25519.PrivateKey, error) {
+	var missing []string
+	switch {
+	case key.D == nil:
+		missing = append(missing, "D")
+	case key.X == nil:
+		missing = append(missing, "X")
+	}
+
+	if len(missing) > 0 {
+		return nil, fmt.Errorf("square/go-jose: invalid Ed25519 private key, missing %s value(s)", strings.Join(missing, ", "))
+	}
+
+	privateKey := make([]byte, ed25519.PrivateKeySize)
+	copy(privateKey[0:32], key.D.bytes())
+	copy(privateKey[32:], key.X.bytes())
+	rv := ed25519.PrivateKey(privateKey)
+	return rv, nil
+}
+
+func (key rawJSONWebKey) edPublicKey() (ed25519.PublicKey, error) {
+	if key.X == nil {
+		return nil, fmt.Errorf("square/go-jose: invalid Ed key, missing x value")
+	}
+	publicKey := make([]byte, ed25519.PublicKeySize)
+	copy(publicKey[0:32], key.X.bytes())
+	rv := ed25519.PublicKey(publicKey)
+	return rv, nil
+}
+
+func (key rawJSONWebKey) rsaPrivateKey() (*rsa.PrivateKey, error) {
+	var missing []string
+	switch {
+	case key.N == nil:
+		missing = append(missing, "N")
+	case key.E == nil:
+		missing = append(missing, "E")
+	case key.D == nil:
+		missing = append(missing, "D")
+	case key.P == nil:
+		missing = append(missing, "P")
+	case key.Q == nil:
+		missing = append(missing, "Q")
+	}
+
+	if len(missing) > 0 {
+		return nil, fmt.Errorf("square/go-jose: invalid RSA private key, missing %s value(s)", strings.Join(missing, ", "))
+	}
+
+	rv := &rsa.PrivateKey{
+		PublicKey: rsa.PublicKey{
+			N: key.N.bigInt(),
+			E: key.E.toInt(),
+		},
+		D: key.D.bigInt(),
+		Primes: []*big.Int{
+			key.P.bigInt(),
+			key.Q.bigInt(),
+		},
+	}
+
+	if key.Dp != nil {
+		rv.Precomputed.Dp = key.Dp.bigInt()
+	}
+	if key.Dq != nil {
+		rv.Precomputed.Dq = key.Dq.bigInt()
+	}
+	if key.Qi != nil {
+		rv.Precomputed.Qinv = key.Qi.bigInt()
+	}
+
+	err := rv.Validate()
+	return rv, err
+}
+
+func fromEdPrivateKey(ed ed25519.PrivateKey) (*rawJSONWebKey, error) {
+	raw := fromEdPublicKey(ed25519.PublicKey(ed[32:]))
+
+	raw.D = newBuffer(ed[0:32])
+	return raw, nil
+}
+
+func fromRsaPrivateKey(rsa *rsa.PrivateKey) (*rawJSONWebKey, error) {
+	if len(rsa.Primes) != 2 {
+		return nil, ErrUnsupportedKeyType
+	}
+
+	raw := fromRsaPublicKey(&rsa.PublicKey)
+
+	raw.D = newBuffer(rsa.D.Bytes())
+	raw.P = newBuffer(rsa.Primes[0].Bytes())
+	raw.Q = newBuffer(rsa.Primes[1].Bytes())
+
+	if rsa.Precomputed.Dp != nil {
+		raw.Dp = newBuffer(rsa.Precomputed.Dp.Bytes())
+	}
+	if rsa.Precomputed.Dq != nil {
+		raw.Dq = newBuffer(rsa.Precomputed.Dq.Bytes())
+	}
+	if rsa.Precomputed.Qinv != nil {
+		raw.Qi = newBuffer(rsa.Precomputed.Qinv.Bytes())
+	}
+
+	return raw, nil
+}
+
+func (key rawJSONWebKey) ecPrivateKey() (*ecdsa.PrivateKey, error) {
+	var curve elliptic.Curve
+	switch key.Crv {
+	case "P-256":
+		curve = elliptic.P256()
+	case "P-384":
+		curve = elliptic.P384()
+	case "P-521":
+		curve = elliptic.P521()
+	default:
+		return nil, fmt.Errorf("square/go-jose: unsupported elliptic curve '%s'", key.Crv)
+	}
+
+	if key.X == nil || key.Y == nil || key.D == nil {
+		return nil, fmt.Errorf("square/go-jose: invalid EC private key, missing x/y/d values")
+	}
+
+	// The length of this octet string MUST be the full size of a coordinate for
+	// the curve specified in the "crv" parameter.
+	// https://tools.ietf.org/html/rfc7518#section-6.2.1.2
+	if curveSize(curve) != len(key.X.data) {
+		return nil, fmt.Errorf("square/go-jose: invalid EC private key, wrong length for x")
+	}
+
+	if curveSize(curve) != len(key.Y.data) {
+		return nil, fmt.Errorf("square/go-jose: invalid EC private key, wrong length for y")
+	}
+
+	// https://tools.ietf.org/html/rfc7518#section-6.2.2.1
+	if dSize(curve) != len(key.D.data) {
+		return nil, fmt.Errorf("square/go-jose: invalid EC private key, wrong length for d")
+	}
+
+	x := key.X.bigInt()
+	y := key.Y.bigInt()
+
+	if !curve.IsOnCurve(x, y) {
+		return nil, errors.New("square/go-jose: invalid EC key, X/Y are not on declared curve")
+	}
+
+	return &ecdsa.PrivateKey{
+		PublicKey: ecdsa.PublicKey{
+			Curve: curve,
+			X:     x,
+			Y:     y,
+		},
+		D: key.D.bigInt(),
+	}, nil
+}
+
+func fromEcPrivateKey(ec *ecdsa.PrivateKey) (*rawJSONWebKey, error) {
+	raw, err := fromEcPublicKey(&ec.PublicKey)
+	if err != nil {
+		return nil, err
+	}
+
+	if ec.D == nil {
+		return nil, fmt.Errorf("square/go-jose: invalid EC private key")
+	}
+
+	raw.D = newFixedSizeBuffer(ec.D.Bytes(), dSize(ec.PublicKey.Curve))
+
+	return raw, nil
+}
+
+// dSize returns the size in octets for the "d" member of an elliptic curve
+// private key.
+// The length of this octet string MUST be ceiling(log-base-2(n)/8)
+// octets (where n is the order of the curve).
+// https://tools.ietf.org/html/rfc7518#section-6.2.2.1
+func dSize(curve elliptic.Curve) int {
+	order := curve.Params().P
+	bitLen := order.BitLen()
+	size := bitLen / 8
+	if bitLen%8 != 0 {
+		size = size + 1
+	}
+	return size
+}
+
+func fromSymmetricKey(key []byte) (*rawJSONWebKey, error) {
+	return &rawJSONWebKey{
+		Kty: "oct",
+		K:   newBuffer(key),
+	}, nil
+}
+
+func (key rawJSONWebKey) symmetricKey() ([]byte, error) {
+	if key.K == nil {
+		return nil, fmt.Errorf("square/go-jose: invalid OCT (symmetric) key, missing k value")
+	}
+	return key.K.bytes(), nil
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/jws.go b/vendor/gopkg.in/square/go-jose.v2/jws.go
new file mode 100644
index 000000000..8b59b6ab2
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/jws.go
@@ -0,0 +1,321 @@
+/*-
+ * Copyright 2014 Square Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package jose
+
+import (
+	"encoding/base64"
+	"errors"
+	"fmt"
+	"strings"
+
+	"gopkg.in/square/go-jose.v2/json"
+)
+
+// rawJSONWebSignature represents a raw JWS JSON object. Used for parsing/serializing.
+type rawJSONWebSignature struct {
+	Payload    *byteBuffer        `json:"payload,omitempty"`
+	Signatures []rawSignatureInfo `json:"signatures,omitempty"`
+	Protected  *byteBuffer        `json:"protected,omitempty"`
+	Header     *rawHeader         `json:"header,omitempty"`
+	Signature  *byteBuffer        `json:"signature,omitempty"`
+}
+
+// rawSignatureInfo represents a single JWS signature over the JWS payload and protected header.
+type rawSignatureInfo struct {
+	Protected *byteBuffer `json:"protected,omitempty"`
+	Header    *rawHeader  `json:"header,omitempty"`
+	Signature *byteBuffer `json:"signature,omitempty"`
+}
+
+// JSONWebSignature represents a signed JWS object after parsing.
+type JSONWebSignature struct {
+	payload []byte
+	// Signatures attached to this object (may be more than one for multi-sig).
+	// Be careful about accessing these directly, prefer to use Verify() or
+	// VerifyMulti() to ensure that the data you're getting is verified.
+	Signatures []Signature
+}
+
+// Signature represents a single signature over the JWS payload and protected header.
+type Signature struct {
+	// Merged header fields. Contains both protected and unprotected header
+	// values. Prefer using Protected and Unprotected fields instead of this.
+	// Values in this header may or may not have been signed and in general
+	// should not be trusted.
+	Header Header
+
+	// Protected header. Values in this header were signed and
+	// will be verified as part of the signature verification process.
+	Protected Header
+
+	// Unprotected header. Values in this header were not signed
+	// and in general should not be trusted.
+	Unprotected Header
+
+	// The actual signature value
+	Signature []byte
+
+	protected *rawHeader
+	header    *rawHeader
+	original  *rawSignatureInfo
+}
+
+// ParseSigned parses a signed message in compact or full serialization format.
+func ParseSigned(input string) (*JSONWebSignature, error) {
+	input = stripWhitespace(input)
+	if strings.HasPrefix(input, "{") {
+		return parseSignedFull(input)
+	}
+
+	return parseSignedCompact(input)
+}
+
+// Get a header value
+func (sig Signature) mergedHeaders() rawHeader {
+	out := rawHeader{}
+	out.merge(sig.protected)
+	out.merge(sig.header)
+	return out
+}
+
+// Compute data to be signed
+func (obj JSONWebSignature) computeAuthData(payload []byte, signature *Signature) []byte {
+	var serializedProtected string
+
+	if signature.original != nil && signature.original.Protected != nil {
+		serializedProtected = signature.original.Protected.base64()
+	} else if signature.protected != nil {
+		serializedProtected = base64.RawURLEncoding.EncodeToString(mustSerializeJSON(signature.protected))
+	} else {
+		serializedProtected = ""
+	}
+
+	return []byte(fmt.Sprintf("%s.%s",
+		serializedProtected,
+		base64.RawURLEncoding.EncodeToString(payload)))
+}
+
+// parseSignedFull parses a message in full format.
+func parseSignedFull(input string) (*JSONWebSignature, error) {
+	var parsed rawJSONWebSignature
+	err := json.Unmarshal([]byte(input), &parsed)
+	if err != nil {
+		return nil, err
+	}
+
+	return parsed.sanitized()
+}
+
+// sanitized produces a cleaned-up JWS object from the raw JSON.
+func (parsed *rawJSONWebSignature) sanitized() (*JSONWebSignature, error) {
+	if parsed.Payload == nil {
+		return nil, fmt.Errorf("square/go-jose: missing payload in JWS message")
+	}
+
+	obj := &JSONWebSignature{
+		payload:    parsed.Payload.bytes(),
+		Signatures: make([]Signature, len(parsed.Signatures)),
+	}
+
+	if len(parsed.Signatures) == 0 {
+		// No signatures array, must be flattened serialization
+		signature := Signature{}
+		if parsed.Protected != nil && len(parsed.Protected.bytes()) > 0 {
+			signature.protected = &rawHeader{}
+			err := json.Unmarshal(parsed.Protected.bytes(), signature.protected)
+			if err != nil {
+				return nil, err
+			}
+		}
+
+		// Check that there is not a nonce in the unprotected header
+		if parsed.Header != nil && parsed.Header.getNonce() != "" {
+			return nil, ErrUnprotectedNonce
+		}
+
+		signature.header = parsed.Header
+		signature.Signature = parsed.Signature.bytes()
+		// Make a fake "original" rawSignatureInfo to store the unprocessed
+		// Protected header. This is necessary because the Protected header can
+		// contain arbitrary fields not registered as part of the spec. See
+		// https://tools.ietf.org/html/draft-ietf-jose-json-web-signature-41#section-4
+		// If we unmarshal Protected into a rawHeader with its explicit list of fields,
+		// we cannot marshal losslessly. So we have to keep around the original bytes.
+		// This is used in computeAuthData, which will first attempt to use
+		// the original bytes of a protected header, and fall back on marshaling the
+		// header struct only if those bytes are not available.
+		signature.original = &rawSignatureInfo{
+			Protected: parsed.Protected,
+			Header:    parsed.Header,
+			Signature: parsed.Signature,
+		}
+
+		var err error
+		signature.Header, err = signature.mergedHeaders().sanitized()
+		if err != nil {
+			return nil, err
+		}
+
+		if signature.header != nil {
+			signature.Unprotected, err = signature.header.sanitized()
+			if err != nil {
+				return nil, err
+			}
+		}
+
+		if signature.protected != nil {
+			signature.Protected, err = signature.protected.sanitized()
+			if err != nil {
+				return nil, err
+			}
+		}
+
+		// As per RFC 7515 Section 4.1.3, only public keys are allowed to be embedded.
+		jwk := signature.Header.JSONWebKey
+		if jwk != nil && (!jwk.Valid() || !jwk.IsPublic()) {
+			return nil, errors.New("square/go-jose: invalid embedded jwk, must be public key")
+		}
+
+		obj.Signatures = append(obj.Signatures, signature)
+	}
+
+	for i, sig := range parsed.Signatures {
+		if sig.Protected != nil && len(sig.Protected.bytes()) > 0 {
+			obj.Signatures[i].protected = &rawHeader{}
+			err := json.Unmarshal(sig.Protected.bytes(), obj.Signatures[i].protected)
+			if err != nil {
+				return nil, err
+			}
+		}
+
+		// Check that there is not a nonce in the unprotected header
+		if sig.Header != nil && sig.Header.getNonce() != "" {
+			return nil, ErrUnprotectedNonce
+		}
+
+		var err error
+		obj.Signatures[i].Header, err = obj.Signatures[i].mergedHeaders().sanitized()
+		if err != nil {
+			return nil, err
+		}
+
+		if obj.Signatures[i].header != nil {
+			obj.Signatures[i].Unprotected, err = obj.Signatures[i].header.sanitized()
+			if err != nil {
+				return nil, err
+			}
+		}
+
+		if obj.Signatures[i].protected != nil {
+			obj.Signatures[i].Protected, err = obj.Signatures[i].protected.sanitized()
+			if err != nil {
+				return nil, err
+			}
+		}
+
+		obj.Signatures[i].Signature = sig.Signature.bytes()
+
+		// As per RFC 7515 Section 4.1.3, only public keys are allowed to be embedded.
+		jwk := obj.Signatures[i].Header.JSONWebKey
+		if jwk != nil && (!jwk.Valid() || !jwk.IsPublic()) {
+			return nil, errors.New("square/go-jose: invalid embedded jwk, must be public key")
+		}
+
+		// Copy value of sig
+		original := sig
+
+		obj.Signatures[i].header = sig.Header
+		obj.Signatures[i].original = &original
+	}
+
+	return obj, nil
+}
+
+// parseSignedCompact parses a message in compact format.
+func parseSignedCompact(input string) (*JSONWebSignature, error) {
+	parts := strings.Split(input, ".")
+	if len(parts) != 3 {
+		return nil, fmt.Errorf("square/go-jose: compact JWS format must have three parts")
+	}
+
+	rawProtected, err := base64.RawURLEncoding.DecodeString(parts[0])
+	if err != nil {
+		return nil, err
+	}
+
+	payload, err := base64.RawURLEncoding.DecodeString(parts[1])
+	if err != nil {
+		return nil, err
+	}
+
+	signature, err := base64.RawURLEncoding.DecodeString(parts[2])
+	if err != nil {
+		return nil, err
+	}
+
+	raw := &rawJSONWebSignature{
+		Payload:   newBuffer(payload),
+		Protected: newBuffer(rawProtected),
+		Signature: newBuffer(signature),
+	}
+	return raw.sanitized()
+}
+
+// CompactSerialize serializes an object using the compact serialization format.
+func (obj JSONWebSignature) CompactSerialize() (string, error) {
+	if len(obj.Signatures) != 1 || obj.Signatures[0].header != nil || obj.Signatures[0].protected == nil {
+		return "", ErrNotSupported
+	}
+
+	serializedProtected := mustSerializeJSON(obj.Signatures[0].protected)
+
+	return fmt.Sprintf(
+		"%s.%s.%s",
+		base64.RawURLEncoding.EncodeToString(serializedProtected),
+		base64.RawURLEncoding.EncodeToString(obj.payload),
+		base64.RawURLEncoding.EncodeToString(obj.Signatures[0].Signature)), nil
+}
+
+// FullSerialize serializes an object using the full JSON serialization format.
+func (obj JSONWebSignature) FullSerialize() string {
+	raw := rawJSONWebSignature{
+		Payload: newBuffer(obj.payload),
+	}
+
+	if len(obj.Signatures) == 1 {
+		if obj.Signatures[0].protected != nil {
+			serializedProtected := mustSerializeJSON(obj.Signatures[0].protected)
+			raw.Protected = newBuffer(serializedProtected)
+		}
+		raw.Header = obj.Signatures[0].header
+		raw.Signature = newBuffer(obj.Signatures[0].Signature)
+	} else {
+		raw.Signatures = make([]rawSignatureInfo, len(obj.Signatures))
+		for i, signature := range obj.Signatures {
+			raw.Signatures[i] = rawSignatureInfo{
+				Header:    signature.header,
+				Signature: newBuffer(signature.Signature),
+			}
+
+			if signature.protected != nil {
+				raw.Signatures[i].Protected = newBuffer(mustSerializeJSON(signature.protected))
+			}
+		}
+	}
+
+	return string(mustSerializeJSON(raw))
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/opaque.go b/vendor/gopkg.in/square/go-jose.v2/opaque.go
new file mode 100644
index 000000000..4a8bd8f32
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/opaque.go
@@ -0,0 +1,83 @@
+/*-
+ * Copyright 2018 Square Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package jose
+
+// OpaqueSigner is an interface that supports signing payloads with opaque
+// private key(s). Private key operations preformed by implementors may, for
+// example, occur in a hardware module. An OpaqueSigner may rotate signing keys
+// transparently to the user of this interface.
+type OpaqueSigner interface {
+	// Public returns the public key of the current signing key.
+	Public() *JSONWebKey
+	// Algs returns a list of supported signing algorithms.
+	Algs() []SignatureAlgorithm
+	// SignPayload signs a payload with the current signing key using the given
+	// algorithm.
+	SignPayload(payload []byte, alg SignatureAlgorithm) ([]byte, error)
+}
+
+type opaqueSigner struct {
+	signer OpaqueSigner
+}
+
+func newOpaqueSigner(alg SignatureAlgorithm, signer OpaqueSigner) (recipientSigInfo, error) {
+	var algSupported bool
+	for _, salg := range signer.Algs() {
+		if alg == salg {
+			algSupported = true
+			break
+		}
+	}
+	if !algSupported {
+		return recipientSigInfo{}, ErrUnsupportedAlgorithm
+	}
+
+	return recipientSigInfo{
+		sigAlg:    alg,
+		publicKey: signer.Public,
+		signer: &opaqueSigner{
+			signer: signer,
+		},
+	}, nil
+}
+
+func (o *opaqueSigner) signPayload(payload []byte, alg SignatureAlgorithm) (Signature, error) {
+	out, err := o.signer.SignPayload(payload, alg)
+	if err != nil {
+		return Signature{}, err
+	}
+
+	return Signature{
+		Signature: out,
+		protected: &rawHeader{},
+	}, nil
+}
+
+// OpaqueVerifier is an interface that supports verifying payloads with opaque
+// public key(s). An OpaqueSigner may rotate signing keys transparently to the
+// user of this interface.
+type OpaqueVerifier interface {
+	VerifyPayload(payload []byte, signature []byte, alg SignatureAlgorithm) error
+}
+
+type opaqueVerifier struct {
+	verifier OpaqueVerifier
+}
+
+func (o *opaqueVerifier) verifyPayload(payload []byte, signature []byte, alg SignatureAlgorithm) error {
+	return o.verifier.VerifyPayload(payload, signature, alg)
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/shared.go b/vendor/gopkg.in/square/go-jose.v2/shared.go
new file mode 100644
index 000000000..b0a6255ec
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/shared.go
@@ -0,0 +1,499 @@
+/*-
+ * Copyright 2014 Square Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package jose
+
+import (
+	"crypto/elliptic"
+	"crypto/x509"
+	"encoding/base64"
+	"errors"
+	"fmt"
+
+	"gopkg.in/square/go-jose.v2/json"
+)
+
+// KeyAlgorithm represents a key management algorithm.
+type KeyAlgorithm string
+
+// SignatureAlgorithm represents a signature (or MAC) algorithm.
+type SignatureAlgorithm string
+
+// ContentEncryption represents a content encryption algorithm.
+type ContentEncryption string
+
+// CompressionAlgorithm represents an algorithm used for plaintext compression.
+type CompressionAlgorithm string
+
+// ContentType represents type of the contained data.
+type ContentType string
+
+var (
+	// ErrCryptoFailure represents an error in cryptographic primitive. This
+	// occurs when, for example, a message had an invalid authentication tag or
+	// could not be decrypted.
+	ErrCryptoFailure = errors.New("square/go-jose: error in cryptographic primitive")
+
+	// ErrUnsupportedAlgorithm indicates that a selected algorithm is not
+	// supported. This occurs when trying to instantiate an encrypter for an
+	// algorithm that is not yet implemented.
+	ErrUnsupportedAlgorithm = errors.New("square/go-jose: unknown/unsupported algorithm")
+
+	// ErrUnsupportedKeyType indicates that the given key type/format is not
+	// supported. This occurs when trying to instantiate an encrypter and passing
+	// it a key of an unrecognized type or with unsupported parameters, such as
+	// an RSA private key with more than two primes.
+	ErrUnsupportedKeyType = errors.New("square/go-jose: unsupported key type/format")
+
+	// ErrInvalidKeySize indicates that the given key is not the correct size
+	// for the selected algorithm. This can occur, for example, when trying to
+	// encrypt with AES-256 but passing only a 128-bit key as input.
+	ErrInvalidKeySize = errors.New("square/go-jose: invalid key size for algorithm")
+
+	// ErrNotSupported serialization of object is not supported. This occurs when
+	// trying to compact-serialize an object which can't be represented in
+	// compact form.
+	ErrNotSupported = errors.New("square/go-jose: compact serialization not supported for object")
+
+	// ErrUnprotectedNonce indicates that while parsing a JWS or JWE object, a
+	// nonce header parameter was included in an unprotected header object.
+	ErrUnprotectedNonce = errors.New("square/go-jose: Nonce parameter included in unprotected header")
+)
+
+// Key management algorithms
+const (
+	ED25519            = KeyAlgorithm("ED25519")
+	RSA1_5             = KeyAlgorithm("RSA1_5")             // RSA-PKCS1v1.5
+	RSA_OAEP           = KeyAlgorithm("RSA-OAEP")           // RSA-OAEP-SHA1
+	RSA_OAEP_256       = KeyAlgorithm("RSA-OAEP-256")       // RSA-OAEP-SHA256
+	A128KW             = KeyAlgorithm("A128KW")             // AES key wrap (128)
+	A192KW             = KeyAlgorithm("A192KW")             // AES key wrap (192)
+	A256KW             = KeyAlgorithm("A256KW")             // AES key wrap (256)
+	DIRECT             = KeyAlgorithm("dir")                // Direct encryption
+	ECDH_ES            = KeyAlgorithm("ECDH-ES")            // ECDH-ES
+	ECDH_ES_A128KW     = KeyAlgorithm("ECDH-ES+A128KW")     // ECDH-ES + AES key wrap (128)
+	ECDH_ES_A192KW     = KeyAlgorithm("ECDH-ES+A192KW")     // ECDH-ES + AES key wrap (192)
+	ECDH_ES_A256KW     = KeyAlgorithm("ECDH-ES+A256KW")     // ECDH-ES + AES key wrap (256)
+	A128GCMKW          = KeyAlgorithm("A128GCMKW")          // AES-GCM key wrap (128)
+	A192GCMKW          = KeyAlgorithm("A192GCMKW")          // AES-GCM key wrap (192)
+	A256GCMKW          = KeyAlgorithm("A256GCMKW")          // AES-GCM key wrap (256)
+	PBES2_HS256_A128KW = KeyAlgorithm("PBES2-HS256+A128KW") // PBES2 + HMAC-SHA256 + AES key wrap (128)
+	PBES2_HS384_A192KW = KeyAlgorithm("PBES2-HS384+A192KW") // PBES2 + HMAC-SHA384 + AES key wrap (192)
+	PBES2_HS512_A256KW = KeyAlgorithm("PBES2-HS512+A256KW") // PBES2 + HMAC-SHA512 + AES key wrap (256)
+)
+
+// Signature algorithms
+const (
+	EdDSA = SignatureAlgorithm("EdDSA")
+	HS256 = SignatureAlgorithm("HS256") // HMAC using SHA-256
+	HS384 = SignatureAlgorithm("HS384") // HMAC using SHA-384
+	HS512 = SignatureAlgorithm("HS512") // HMAC using SHA-512
+	RS256 = SignatureAlgorithm("RS256") // RSASSA-PKCS-v1.5 using SHA-256
+	RS384 = SignatureAlgorithm("RS384") // RSASSA-PKCS-v1.5 using SHA-384
+	RS512 = SignatureAlgorithm("RS512") // RSASSA-PKCS-v1.5 using SHA-512
+	ES256 = SignatureAlgorithm("ES256") // ECDSA using P-256 and SHA-256
+	ES384 = SignatureAlgorithm("ES384") // ECDSA using P-384 and SHA-384
+	ES512 = SignatureAlgorithm("ES512") // ECDSA using P-521 and SHA-512
+	PS256 = SignatureAlgorithm("PS256") // RSASSA-PSS using SHA256 and MGF1-SHA256
+	PS384 = SignatureAlgorithm("PS384") // RSASSA-PSS using SHA384 and MGF1-SHA384
+	PS512 = SignatureAlgorithm("PS512") // RSASSA-PSS using SHA512 and MGF1-SHA512
+)
+
+// Content encryption algorithms
+const (
+	A128CBC_HS256 = ContentEncryption("A128CBC-HS256") // AES-CBC + HMAC-SHA256 (128)
+	A192CBC_HS384 = ContentEncryption("A192CBC-HS384") // AES-CBC + HMAC-SHA384 (192)
+	A256CBC_HS512 = ContentEncryption("A256CBC-HS512") // AES-CBC + HMAC-SHA512 (256)
+	A128GCM       = ContentEncryption("A128GCM")       // AES-GCM (128)
+	A192GCM       = ContentEncryption("A192GCM")       // AES-GCM (192)
+	A256GCM       = ContentEncryption("A256GCM")       // AES-GCM (256)
+)
+
+// Compression algorithms
+const (
+	NONE    = CompressionAlgorithm("")    // No compression
+	DEFLATE = CompressionAlgorithm("DEF") // DEFLATE (RFC 1951)
+)
+
+// A key in the protected header of a JWS object. Use of the Header...
+// constants is preferred to enhance type safety.
+type HeaderKey string
+
+const (
+	HeaderType        HeaderKey = "typ" // string
+	HeaderContentType           = "cty" // string
+
+	// These are set by go-jose and shouldn't need to be set by consumers of the
+	// library.
+	headerAlgorithm   = "alg"  // string
+	headerEncryption  = "enc"  // ContentEncryption
+	headerCompression = "zip"  // CompressionAlgorithm
+	headerCritical    = "crit" // []string
+
+	headerAPU = "apu" // *byteBuffer
+	headerAPV = "apv" // *byteBuffer
+	headerEPK = "epk" // *JSONWebKey
+	headerIV  = "iv"  // *byteBuffer
+	headerTag = "tag" // *byteBuffer
+	headerX5c = "x5c" // []*x509.Certificate
+
+	headerJWK   = "jwk"   // *JSONWebKey
+	headerKeyID = "kid"   // string
+	headerNonce = "nonce" // string
+
+	headerP2C = "p2c" // *byteBuffer (int)
+	headerP2S = "p2s" // *byteBuffer ([]byte)
+
+)
+
+// rawHeader represents the JOSE header for JWE/JWS objects (used for parsing).
+//
+// The decoding of the constituent items is deferred because we want to marshal
+// some members into particular structs rather than generic maps, but at the
+// same time we need to receive any extra fields unhandled by this library to
+// pass through to consuming code in case it wants to examine them.
+type rawHeader map[HeaderKey]*json.RawMessage
+
+// Header represents the read-only JOSE header for JWE/JWS objects.
+type Header struct {
+	KeyID      string
+	JSONWebKey *JSONWebKey
+	Algorithm  string
+	Nonce      string
+
+	// Unverified certificate chain parsed from x5c header.
+	certificates []*x509.Certificate
+
+	// Any headers not recognised above get unmarshaled
+	// from JSON in a generic manner and placed in this map.
+	ExtraHeaders map[HeaderKey]interface{}
+}
+
+// Certificates verifies & returns the certificate chain present
+// in the x5c header field of a message, if one was present. Returns
+// an error if there was no x5c header present or the chain could
+// not be validated with the given verify options.
+func (h Header) Certificates(opts x509.VerifyOptions) ([][]*x509.Certificate, error) {
+	if len(h.certificates) == 0 {
+		return nil, errors.New("square/go-jose: no x5c header present in message")
+	}
+
+	leaf := h.certificates[0]
+	if opts.Intermediates == nil {
+		opts.Intermediates = x509.NewCertPool()
+		for _, intermediate := range h.certificates[1:] {
+			opts.Intermediates.AddCert(intermediate)
+		}
+	}
+
+	return leaf.Verify(opts)
+}
+
+func (parsed rawHeader) set(k HeaderKey, v interface{}) error {
+	b, err := json.Marshal(v)
+	if err != nil {
+		return err
+	}
+
+	parsed[k] = makeRawMessage(b)
+	return nil
+}
+
+// getString gets a string from the raw JSON, defaulting to "".
+func (parsed rawHeader) getString(k HeaderKey) string {
+	v, ok := parsed[k]
+	if !ok || v == nil {
+		return ""
+	}
+	var s string
+	err := json.Unmarshal(*v, &s)
+	if err != nil {
+		return ""
+	}
+	return s
+}
+
+// getByteBuffer gets a byte buffer from the raw JSON. Returns (nil, nil) if
+// not specified.
+func (parsed rawHeader) getByteBuffer(k HeaderKey) (*byteBuffer, error) {
+	v := parsed[k]
+	if v == nil {
+		return nil, nil
+	}
+	var bb *byteBuffer
+	err := json.Unmarshal(*v, &bb)
+	if err != nil {
+		return nil, err
+	}
+	return bb, nil
+}
+
+// getAlgorithm extracts parsed "alg" from the raw JSON as a KeyAlgorithm.
+func (parsed rawHeader) getAlgorithm() KeyAlgorithm {
+	return KeyAlgorithm(parsed.getString(headerAlgorithm))
+}
+
+// getSignatureAlgorithm extracts parsed "alg" from the raw JSON as a SignatureAlgorithm.
+func (parsed rawHeader) getSignatureAlgorithm() SignatureAlgorithm {
+	return SignatureAlgorithm(parsed.getString(headerAlgorithm))
+}
+
+// getEncryption extracts parsed "enc" from the raw JSON.
+func (parsed rawHeader) getEncryption() ContentEncryption {
+	return ContentEncryption(parsed.getString(headerEncryption))
+}
+
+// getCompression extracts parsed "zip" from the raw JSON.
+func (parsed rawHeader) getCompression() CompressionAlgorithm {
+	return CompressionAlgorithm(parsed.getString(headerCompression))
+}
+
+func (parsed rawHeader) getNonce() string {
+	return parsed.getString(headerNonce)
+}
+
+// getEPK extracts parsed "epk" from the raw JSON.
+func (parsed rawHeader) getEPK() (*JSONWebKey, error) {
+	v := parsed[headerEPK]
+	if v == nil {
+		return nil, nil
+	}
+	var epk *JSONWebKey
+	err := json.Unmarshal(*v, &epk)
+	if err != nil {
+		return nil, err
+	}
+	return epk, nil
+}
+
+// getAPU extracts parsed "apu" from the raw JSON.
+func (parsed rawHeader) getAPU() (*byteBuffer, error) {
+	return parsed.getByteBuffer(headerAPU)
+}
+
+// getAPV extracts parsed "apv" from the raw JSON.
+func (parsed rawHeader) getAPV() (*byteBuffer, error) {
+	return parsed.getByteBuffer(headerAPV)
+}
+
+// getIV extracts parsed "iv" frpom the raw JSON.
+func (parsed rawHeader) getIV() (*byteBuffer, error) {
+	return parsed.getByteBuffer(headerIV)
+}
+
+// getTag extracts parsed "tag" frpom the raw JSON.
+func (parsed rawHeader) getTag() (*byteBuffer, error) {
+	return parsed.getByteBuffer(headerTag)
+}
+
+// getJWK extracts parsed "jwk" from the raw JSON.
+func (parsed rawHeader) getJWK() (*JSONWebKey, error) {
+	v := parsed[headerJWK]
+	if v == nil {
+		return nil, nil
+	}
+	var jwk *JSONWebKey
+	err := json.Unmarshal(*v, &jwk)
+	if err != nil {
+		return nil, err
+	}
+	return jwk, nil
+}
+
+// getCritical extracts parsed "crit" from the raw JSON. If omitted, it
+// returns an empty slice.
+func (parsed rawHeader) getCritical() ([]string, error) {
+	v := parsed[headerCritical]
+	if v == nil {
+		return nil, nil
+	}
+
+	var q []string
+	err := json.Unmarshal(*v, &q)
+	if err != nil {
+		return nil, err
+	}
+	return q, nil
+}
+
+// getS2C extracts parsed "p2c" from the raw JSON.
+func (parsed rawHeader) getP2C() (int, error) {
+	v := parsed[headerP2C]
+	if v == nil {
+		return 0, nil
+	}
+
+	var p2c int
+	err := json.Unmarshal(*v, &p2c)
+	if err != nil {
+		return 0, err
+	}
+	return p2c, nil
+}
+
+// getS2S extracts parsed "p2s" from the raw JSON.
+func (parsed rawHeader) getP2S() (*byteBuffer, error) {
+	return parsed.getByteBuffer(headerP2S)
+}
+
+// sanitized produces a cleaned-up header object from the raw JSON.
+func (parsed rawHeader) sanitized() (h Header, err error) {
+	for k, v := range parsed {
+		if v == nil {
+			continue
+		}
+		switch k {
+		case headerJWK:
+			var jwk *JSONWebKey
+			err = json.Unmarshal(*v, &jwk)
+			if err != nil {
+				err = fmt.Errorf("failed to unmarshal JWK: %v: %#v", err, string(*v))
+				return
+			}
+			h.JSONWebKey = jwk
+		case headerKeyID:
+			var s string
+			err = json.Unmarshal(*v, &s)
+			if err != nil {
+				err = fmt.Errorf("failed to unmarshal key ID: %v: %#v", err, string(*v))
+				return
+			}
+			h.KeyID = s
+		case headerAlgorithm:
+			var s string
+			err = json.Unmarshal(*v, &s)
+			if err != nil {
+				err = fmt.Errorf("failed to unmarshal algorithm: %v: %#v", err, string(*v))
+				return
+			}
+			h.Algorithm = s
+		case headerNonce:
+			var s string
+			err = json.Unmarshal(*v, &s)
+			if err != nil {
+				err = fmt.Errorf("failed to unmarshal nonce: %v: %#v", err, string(*v))
+				return
+			}
+			h.Nonce = s
+		case headerX5c:
+			c := []string{}
+			err = json.Unmarshal(*v, &c)
+			if err != nil {
+				err = fmt.Errorf("failed to unmarshal x5c header: %v: %#v", err, string(*v))
+				return
+			}
+			h.certificates, err = parseCertificateChain(c)
+			if err != nil {
+				err = fmt.Errorf("failed to unmarshal x5c header: %v: %#v", err, string(*v))
+				return
+			}
+		default:
+			if h.ExtraHeaders == nil {
+				h.ExtraHeaders = map[HeaderKey]interface{}{}
+			}
+			var v2 interface{}
+			err = json.Unmarshal(*v, &v2)
+			if err != nil {
+				err = fmt.Errorf("failed to unmarshal value: %v: %#v", err, string(*v))
+				return
+			}
+			h.ExtraHeaders[k] = v2
+		}
+	}
+	return
+}
+
+func parseCertificateChain(chain []string) ([]*x509.Certificate, error) {
+	out := make([]*x509.Certificate, len(chain))
+	for i, cert := range chain {
+		raw, err := base64.StdEncoding.DecodeString(cert)
+		if err != nil {
+			return nil, err
+		}
+		out[i], err = x509.ParseCertificate(raw)
+		if err != nil {
+			return nil, err
+		}
+	}
+	return out, nil
+}
+
+func (dst rawHeader) isSet(k HeaderKey) bool {
+	dvr := dst[k]
+	if dvr == nil {
+		return false
+	}
+
+	var dv interface{}
+	err := json.Unmarshal(*dvr, &dv)
+	if err != nil {
+		return true
+	}
+
+	if dvStr, ok := dv.(string); ok {
+		return dvStr != ""
+	}
+
+	return true
+}
+
+// Merge headers from src into dst, giving precedence to headers from l.
+func (dst rawHeader) merge(src *rawHeader) {
+	if src == nil {
+		return
+	}
+
+	for k, v := range *src {
+		if dst.isSet(k) {
+			continue
+		}
+
+		dst[k] = v
+	}
+}
+
+// Get JOSE name of curve
+func curveName(crv elliptic.Curve) (string, error) {
+	switch crv {
+	case elliptic.P256():
+		return "P-256", nil
+	case elliptic.P384():
+		return "P-384", nil
+	case elliptic.P521():
+		return "P-521", nil
+	default:
+		return "", fmt.Errorf("square/go-jose: unsupported/unknown elliptic curve")
+	}
+}
+
+// Get size of curve in bytes
+func curveSize(crv elliptic.Curve) int {
+	bits := crv.Params().BitSize
+
+	div := bits / 8
+	mod := bits % 8
+
+	if mod == 0 {
+		return div
+	}
+
+	return div + 1
+}
+
+func makeRawMessage(b []byte) *json.RawMessage {
+	rm := json.RawMessage(b)
+	return &rm
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/signing.go b/vendor/gopkg.in/square/go-jose.v2/signing.go
new file mode 100644
index 000000000..be6cf0481
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/signing.go
@@ -0,0 +1,389 @@
+/*-
+ * Copyright 2014 Square Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package jose
+
+import (
+	"crypto/ecdsa"
+	"crypto/rsa"
+	"encoding/base64"
+	"errors"
+	"fmt"
+
+	"golang.org/x/crypto/ed25519"
+
+	"gopkg.in/square/go-jose.v2/json"
+)
+
+// NonceSource represents a source of random nonces to go into JWS objects
+type NonceSource interface {
+	Nonce() (string, error)
+}
+
+// Signer represents a signer which takes a payload and produces a signed JWS object.
+type Signer interface {
+	Sign(payload []byte) (*JSONWebSignature, error)
+	Options() SignerOptions
+}
+
+// SigningKey represents an algorithm/key used to sign a message.
+type SigningKey struct {
+	Algorithm SignatureAlgorithm
+	Key       interface{}
+}
+
+// SignerOptions represents options that can be set when creating signers.
+type SignerOptions struct {
+	NonceSource NonceSource
+	EmbedJWK    bool
+
+	// Optional map of additional keys to be inserted into the protected header
+	// of a JWS object. Some specifications which make use of JWS like to insert
+	// additional values here. All values must be JSON-serializable.
+	ExtraHeaders map[HeaderKey]interface{}
+}
+
+// WithHeader adds an arbitrary value to the ExtraHeaders map, initializing it
+// if necessary. It returns itself and so can be used in a fluent style.
+func (so *SignerOptions) WithHeader(k HeaderKey, v interface{}) *SignerOptions {
+	if so.ExtraHeaders == nil {
+		so.ExtraHeaders = map[HeaderKey]interface{}{}
+	}
+	so.ExtraHeaders[k] = v
+	return so
+}
+
+// WithContentType adds a content type ("cty") header and returns the updated
+// SignerOptions.
+func (so *SignerOptions) WithContentType(contentType ContentType) *SignerOptions {
+	return so.WithHeader(HeaderContentType, contentType)
+}
+
+// WithType adds a type ("typ") header and returns the updated SignerOptions.
+func (so *SignerOptions) WithType(typ ContentType) *SignerOptions {
+	return so.WithHeader(HeaderType, typ)
+}
+
+type payloadSigner interface {
+	signPayload(payload []byte, alg SignatureAlgorithm) (Signature, error)
+}
+
+type payloadVerifier interface {
+	verifyPayload(payload []byte, signature []byte, alg SignatureAlgorithm) error
+}
+
+type genericSigner struct {
+	recipients   []recipientSigInfo
+	nonceSource  NonceSource
+	embedJWK     bool
+	extraHeaders map[HeaderKey]interface{}
+}
+
+type recipientSigInfo struct {
+	sigAlg    SignatureAlgorithm
+	publicKey func() *JSONWebKey
+	signer    payloadSigner
+}
+
+func staticPublicKey(jwk *JSONWebKey) func() *JSONWebKey {
+	return func() *JSONWebKey {
+		return jwk
+	}
+}
+
+// NewSigner creates an appropriate signer based on the key type
+func NewSigner(sig SigningKey, opts *SignerOptions) (Signer, error) {
+	return NewMultiSigner([]SigningKey{sig}, opts)
+}
+
+// NewMultiSigner creates a signer for multiple recipients
+func NewMultiSigner(sigs []SigningKey, opts *SignerOptions) (Signer, error) {
+	signer := &genericSigner{recipients: []recipientSigInfo{}}
+
+	if opts != nil {
+		signer.nonceSource = opts.NonceSource
+		signer.embedJWK = opts.EmbedJWK
+		signer.extraHeaders = opts.ExtraHeaders
+	}
+
+	for _, sig := range sigs {
+		err := signer.addRecipient(sig.Algorithm, sig.Key)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	return signer, nil
+}
+
+// newVerifier creates a verifier based on the key type
+func newVerifier(verificationKey interface{}) (payloadVerifier, error) {
+	switch verificationKey := verificationKey.(type) {
+	case ed25519.PublicKey:
+		return &edEncrypterVerifier{
+			publicKey: verificationKey,
+		}, nil
+	case *rsa.PublicKey:
+		return &rsaEncrypterVerifier{
+			publicKey: verificationKey,
+		}, nil
+	case *ecdsa.PublicKey:
+		return &ecEncrypterVerifier{
+			publicKey: verificationKey,
+		}, nil
+	case []byte:
+		return &symmetricMac{
+			key: verificationKey,
+		}, nil
+	case JSONWebKey:
+		return newVerifier(verificationKey.Key)
+	case *JSONWebKey:
+		return newVerifier(verificationKey.Key)
+	}
+	if ov, ok := verificationKey.(OpaqueVerifier); ok {
+		return &opaqueVerifier{verifier: ov}, nil
+	}
+	return nil, ErrUnsupportedKeyType
+}
+
+func (ctx *genericSigner) addRecipient(alg SignatureAlgorithm, signingKey interface{}) error {
+	recipient, err := makeJWSRecipient(alg, signingKey)
+	if err != nil {
+		return err
+	}
+
+	ctx.recipients = append(ctx.recipients, recipient)
+	return nil
+}
+
+func makeJWSRecipient(alg SignatureAlgorithm, signingKey interface{}) (recipientSigInfo, error) {
+	switch signingKey := signingKey.(type) {
+	case ed25519.PrivateKey:
+		return newEd25519Signer(alg, signingKey)
+	case *rsa.PrivateKey:
+		return newRSASigner(alg, signingKey)
+	case *ecdsa.PrivateKey:
+		return newECDSASigner(alg, signingKey)
+	case []byte:
+		return newSymmetricSigner(alg, signingKey)
+	case JSONWebKey:
+		return newJWKSigner(alg, signingKey)
+	case *JSONWebKey:
+		return newJWKSigner(alg, *signingKey)
+	}
+	if signer, ok := signingKey.(OpaqueSigner); ok {
+		return newOpaqueSigner(alg, signer)
+	}
+	return recipientSigInfo{}, ErrUnsupportedKeyType
+}
+
+func newJWKSigner(alg SignatureAlgorithm, signingKey JSONWebKey) (recipientSigInfo, error) {
+	recipient, err := makeJWSRecipient(alg, signingKey.Key)
+	if err != nil {
+		return recipientSigInfo{}, err
+	}
+	if recipient.publicKey != nil && recipient.publicKey() != nil {
+		// recipient.publicKey is a JWK synthesized for embedding when recipientSigInfo
+		// was created for the inner key (such as a RSA or ECDSA public key). It contains
+		// the pub key for embedding, but doesn't have extra params like key id.
+		publicKey := signingKey
+		publicKey.Key = recipient.publicKey().Key
+		recipient.publicKey = staticPublicKey(&publicKey)
+
+		// This should be impossible, but let's check anyway.
+		if !recipient.publicKey().IsPublic() {
+			return recipientSigInfo{}, errors.New("square/go-jose: public key was unexpectedly not public")
+		}
+	}
+	return recipient, nil
+}
+
+func (ctx *genericSigner) Sign(payload []byte) (*JSONWebSignature, error) {
+	obj := &JSONWebSignature{}
+	obj.payload = payload
+	obj.Signatures = make([]Signature, len(ctx.recipients))
+
+	for i, recipient := range ctx.recipients {
+		protected := map[HeaderKey]interface{}{
+			headerAlgorithm: string(recipient.sigAlg),
+		}
+
+		if recipient.publicKey != nil && recipient.publicKey() != nil {
+			// We want to embed the JWK or set the kid header, but not both. Having a protected
+			// header that contains an embedded JWK while also simultaneously containing the kid
+			// header is confusing, and at least in ACME the two are considered to be mutually
+			// exclusive. The fact that both can exist at the same time is a somewhat unfortunate
+			// result of the JOSE spec. We've decided that this library will only include one or
+			// the other to avoid this confusion.
+			//
+			// See https://github.com/square/go-jose/issues/157 for more context.
+			if ctx.embedJWK {
+				protected[headerJWK] = recipient.publicKey()
+			} else {
+				protected[headerKeyID] = recipient.publicKey().KeyID
+			}
+		}
+
+		if ctx.nonceSource != nil {
+			nonce, err := ctx.nonceSource.Nonce()
+			if err != nil {
+				return nil, fmt.Errorf("square/go-jose: Error generating nonce: %v", err)
+			}
+			protected[headerNonce] = nonce
+		}
+
+		for k, v := range ctx.extraHeaders {
+			protected[k] = v
+		}
+
+		serializedProtected := mustSerializeJSON(protected)
+
+		input := []byte(fmt.Sprintf("%s.%s",
+			base64.RawURLEncoding.EncodeToString(serializedProtected),
+			base64.RawURLEncoding.EncodeToString(payload)))
+
+		signatureInfo, err := recipient.signer.signPayload(input, recipient.sigAlg)
+		if err != nil {
+			return nil, err
+		}
+
+		signatureInfo.protected = &rawHeader{}
+		for k, v := range protected {
+			b, err := json.Marshal(v)
+			if err != nil {
+				return nil, fmt.Errorf("square/go-jose: Error marshalling item %#v: %v", k, err)
+			}
+			(*signatureInfo.protected)[k] = makeRawMessage(b)
+		}
+		obj.Signatures[i] = signatureInfo
+	}
+
+	return obj, nil
+}
+
+func (ctx *genericSigner) Options() SignerOptions {
+	return SignerOptions{
+		NonceSource:  ctx.nonceSource,
+		EmbedJWK:     ctx.embedJWK,
+		ExtraHeaders: ctx.extraHeaders,
+	}
+}
+
+// Verify validates the signature on the object and returns the payload.
+// This function does not support multi-signature, if you desire multi-sig
+// verification use VerifyMulti instead.
+//
+// Be careful when verifying signatures based on embedded JWKs inside the
+// payload header. You cannot assume that the key received in a payload is
+// trusted.
+func (obj JSONWebSignature) Verify(verificationKey interface{}) ([]byte, error) {
+	err := obj.DetachedVerify(obj.payload, verificationKey)
+	if err != nil {
+		return nil, err
+	}
+	return obj.payload, nil
+}
+
+// UnsafePayloadWithoutVerification returns the payload without
+// verifying it. The content returned from this function cannot be
+// trusted.
+func (obj JSONWebSignature) UnsafePayloadWithoutVerification() []byte {
+	return obj.payload
+}
+
+// DetachedVerify validates a detached signature on the given payload. In
+// most cases, you will probably want to use Verify instead. DetachedVerify
+// is only useful if you have a payload and signature that are separated from
+// each other.
+func (obj JSONWebSignature) DetachedVerify(payload []byte, verificationKey interface{}) error {
+	verifier, err := newVerifier(verificationKey)
+	if err != nil {
+		return err
+	}
+
+	if len(obj.Signatures) > 1 {
+		return errors.New("square/go-jose: too many signatures in payload; expecting only one")
+	}
+
+	signature := obj.Signatures[0]
+	headers := signature.mergedHeaders()
+	critical, err := headers.getCritical()
+	if err != nil {
+		return err
+	}
+	if len(critical) > 0 {
+		// Unsupported crit header
+		return ErrCryptoFailure
+	}
+
+	input := obj.computeAuthData(payload, &signature)
+	alg := headers.getSignatureAlgorithm()
+	err = verifier.verifyPayload(input, signature.Signature, alg)
+	if err == nil {
+		return nil
+	}
+
+	return ErrCryptoFailure
+}
+
+// VerifyMulti validates (one of the multiple) signatures on the object and
+// returns the index of the signature that was verified, along with the signature
+// object and the payload. We return the signature and index to guarantee that
+// callers are getting the verified value.
+func (obj JSONWebSignature) VerifyMulti(verificationKey interface{}) (int, Signature, []byte, error) {
+	idx, sig, err := obj.DetachedVerifyMulti(obj.payload, verificationKey)
+	if err != nil {
+		return -1, Signature{}, nil, err
+	}
+	return idx, sig, obj.payload, nil
+}
+
+// DetachedVerifyMulti validates a detached signature on the given payload with
+// a signature/object that has potentially multiple signers. This returns the index
+// of the signature that was verified, along with the signature object. We return
+// the signature and index to guarantee that callers are getting the verified value.
+//
+// In most cases, you will probably want to use Verify or VerifyMulti instead.
+// DetachedVerifyMulti is only useful if you have a payload and signature that are
+// separated from each other, and the signature can have multiple signers at the
+// same time.
+func (obj JSONWebSignature) DetachedVerifyMulti(payload []byte, verificationKey interface{}) (int, Signature, error) {
+	verifier, err := newVerifier(verificationKey)
+	if err != nil {
+		return -1, Signature{}, err
+	}
+
+	for i, signature := range obj.Signatures {
+		headers := signature.mergedHeaders()
+		critical, err := headers.getCritical()
+		if err != nil {
+			continue
+		}
+		if len(critical) > 0 {
+			// Unsupported crit header
+			continue
+		}
+
+		input := obj.computeAuthData(payload, &signature)
+		alg := headers.getSignatureAlgorithm()
+		err = verifier.verifyPayload(input, signature.Signature, alg)
+		if err == nil {
+			return i, signature, nil
+		}
+	}
+
+	return -1, Signature{}, ErrCryptoFailure
+}
diff --git a/vendor/gopkg.in/square/go-jose.v2/symmetric.go b/vendor/gopkg.in/square/go-jose.v2/symmetric.go
new file mode 100644
index 000000000..264a0fe37
--- /dev/null
+++ b/vendor/gopkg.in/square/go-jose.v2/symmetric.go
@@ -0,0 +1,482 @@
+/*-
+ * Copyright 2014 Square Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package jose
+
+import (
+	"bytes"
+	"crypto/aes"
+	"crypto/cipher"
+	"crypto/hmac"
+	"crypto/rand"
+	"crypto/sha256"
+	"crypto/sha512"
+	"crypto/subtle"
+	"errors"
+	"fmt"
+	"hash"
+	"io"
+
+	"golang.org/x/crypto/pbkdf2"
+	"gopkg.in/square/go-jose.v2/cipher"
+)
+
+// Random reader (stubbed out in tests)
+var RandReader = rand.Reader
+
+const (
+	// RFC7518 recommends a minimum of 1,000 iterations:
+	// https://tools.ietf.org/html/rfc7518#section-4.8.1.2
+	// NIST recommends a minimum of 10,000:
+	// https://pages.nist.gov/800-63-3/sp800-63b.html
+	// 1Password uses 100,000:
+	// https://support.1password.com/pbkdf2/
+	defaultP2C = 100000
+	// Default salt size: 128 bits
+	defaultP2SSize = 16
+)
+
+// Dummy key cipher for shared symmetric key mode
+type symmetricKeyCipher struct {
+	key []byte // Pre-shared content-encryption key
+	p2c int    // PBES2 Count
+	p2s []byte // PBES2 Salt Input
+}
+
+// Signer/verifier for MAC modes
+type symmetricMac struct {
+	key []byte
+}
+
+// Input/output from an AEAD operation
+type aeadParts struct {
+	iv, ciphertext, tag []byte
+}
+
+// A content cipher based on an AEAD construction
+type aeadContentCipher struct {
+	keyBytes     int
+	authtagBytes int
+	getAead      func(key []byte) (cipher.AEAD, error)
+}
+
+// Random key generator
+type randomKeyGenerator struct {
+	size int
+}
+
+// Static key generator
+type staticKeyGenerator struct {
+	key []byte
+}
+
+// Create a new content cipher based on AES-GCM
+func newAESGCM(keySize int) contentCipher {
+	return &aeadContentCipher{
+		keyBytes:     keySize,
+		authtagBytes: 16,
+		getAead: func(key []byte) (cipher.AEAD, error) {
+			aes, err := aes.NewCipher(key)
+			if err != nil {
+				return nil, err
+			}
+
+			return cipher.NewGCM(aes)
+		},
+	}
+}
+
+// Create a new content cipher based on AES-CBC+HMAC
+func newAESCBC(keySize int) contentCipher {
+	return &aeadContentCipher{
+		keyBytes:     keySize * 2,
+		authtagBytes: keySize,
+		getAead: func(key []byte) (cipher.AEAD, error) {
+			return josecipher.NewCBCHMAC(key, aes.NewCipher)
+		},
+	}
+}
+
+// Get an AEAD cipher object for the given content encryption algorithm
+func getContentCipher(alg ContentEncryption) contentCipher {
+	switch alg {
+	case A128GCM:
+		return newAESGCM(16)
+	case A192GCM:
+		return newAESGCM(24)
+	case A256GCM:
+		return newAESGCM(32)
+	case A128CBC_HS256:
+		return newAESCBC(16)
+	case A192CBC_HS384:
+		return newAESCBC(24)
+	case A256CBC_HS512:
+		return newAESCBC(32)
+	default:
+		return nil
+	}
+}
+
+// getPbkdf2Params returns the key length and hash function used in
+// pbkdf2.Key.
+func getPbkdf2Params(alg KeyAlgorithm) (int, func() hash.Hash) {
+	switch alg {
+	case PBES2_HS256_A128KW:
+		return 16, sha256.New
+	case PBES2_HS384_A192KW:
+		return 24, sha512.New384
+	case PBES2_HS512_A256KW:
+		return 32, sha512.New
+	default:
+		panic("invalid algorithm")
+	}
+}
+
+// getRandomSalt generates a new salt of the given size.
+func getRandomSalt(size int) ([]byte, error) {
+	salt := make([]byte, size)
+	_, err := io.ReadFull(RandReader, salt)
+	if err != nil {
+		return nil, err
+	}
+
+	return salt, nil
+}
+
+// newSymmetricRecipient creates a JWE encrypter based on AES-GCM key wrap.
+func newSymmetricRecipient(keyAlg KeyAlgorithm, key []byte) (recipientKeyInfo, error) {
+	switch keyAlg {
+	case DIRECT, A128GCMKW, A192GCMKW, A256GCMKW, A128KW, A192KW, A256KW:
+	case PBES2_HS256_A128KW, PBES2_HS384_A192KW, PBES2_HS512_A256KW:
+	default:
+		return recipientKeyInfo{}, ErrUnsupportedAlgorithm
+	}
+
+	return recipientKeyInfo{
+		keyAlg: keyAlg,
+		keyEncrypter: &symmetricKeyCipher{
+			key: key,
+		},
+	}, nil
+}
+
+// newSymmetricSigner creates a recipientSigInfo based on the given key.
+func newSymmetricSigner(sigAlg SignatureAlgorithm, key []byte) (recipientSigInfo, error) {
+	// Verify that key management algorithm is supported by this encrypter
+	switch sigAlg {
+	case HS256, HS384, HS512:
+	default:
+		return recipientSigInfo{}, ErrUnsupportedAlgorithm
+	}
+
+	return recipientSigInfo{
+		sigAlg: sigAlg,
+		signer: &symmetricMac{
+			key: key,
+		},
+	}, nil
+}
+
+// Generate a random key for the given content cipher
+func (ctx randomKeyGenerator) genKey() ([]byte, rawHeader, error) {
+	key := make([]byte, ctx.size)
+	_, err := io.ReadFull(RandReader, key)
+	if err != nil {
+		return nil, rawHeader{}, err
+	}
+
+	return key, rawHeader{}, nil
+}
+
+// Key size for random generator
+func (ctx randomKeyGenerator) keySize() int {
+	return ctx.size
+}
+
+// Generate a static key (for direct mode)
+func (ctx staticKeyGenerator) genKey() ([]byte, rawHeader, error) {
+	cek := make([]byte, len(ctx.key))
+	copy(cek, ctx.key)
+	return cek, rawHeader{}, nil
+}
+
+// Key size for static generator
+func (ctx staticKeyGenerator) keySize() int {
+	return len(ctx.key)
+}
+
+// Get key size for this cipher
+func (ctx aeadContentCipher) keySize() int {
+	return ctx.keyBytes
+}
+
+// Encrypt some data
+func (ctx aeadContentCipher) encrypt(key, aad, pt []byte) (*aeadParts, error) {
+	// Get a new AEAD instance
+	aead, err := ctx.getAead(key)
+	if err != nil {
+		return nil, err
+	}
+
+	// Initialize a new nonce
+	iv := make([]byte, aead.NonceSize())
+	_, err = io.ReadFull(RandReader, iv)
+	if err != nil {
+		return nil, err
+	}
+
+	ciphertextAndTag := aead.Seal(nil, iv, pt, aad)
+	offset := len(ciphertextAndTag) - ctx.authtagBytes
+
+	return &aeadParts{
+		iv:         iv,
+		ciphertext: ciphertextAndTag[:offset],
+		tag:        ciphertextAndTag[offset:],
+	}, nil
+}
+
+// Decrypt some data
+func (ctx aeadContentCipher) decrypt(key, aad []byte, parts *aeadParts) ([]byte, error) {
+	aead, err := ctx.getAead(key)
+	if err != nil {
+		return nil, err
+	}
+
+	if len(parts.iv) != aead.NonceSize() || len(parts.tag) < ctx.authtagBytes {
+		return nil, ErrCryptoFailure
+	}
+
+	return aead.Open(nil, parts.iv, append(parts.ciphertext, parts.tag...), aad)
+}
+
+// Encrypt the content encryption key.
+func (ctx *symmetricKeyCipher) encryptKey(cek []byte, alg KeyAlgorithm) (recipientInfo, error) {
+	switch alg {
+	case DIRECT:
+		return recipientInfo{
+			header: &rawHeader{},
+		}, nil
+	case A128GCMKW, A192GCMKW, A256GCMKW:
+		aead := newAESGCM(len(ctx.key))
+
+		parts, err := aead.encrypt(ctx.key, []byte{}, cek)
+		if err != nil {
+			return recipientInfo{}, err
+		}
+
+		header := &rawHeader{}
+		header.set(headerIV, newBuffer(parts.iv))
+		header.set(headerTag, newBuffer(parts.tag))
+
+		return recipientInfo{
+			header:       header,
+			encryptedKey: parts.ciphertext,
+		}, nil
+	case A128KW, A192KW, A256KW:
+		block, err := aes.NewCipher(ctx.key)
+		if err != nil {
+			return recipientInfo{}, err
+		}
+
+		jek, err := josecipher.KeyWrap(block, cek)
+		if err != nil {
+			return recipientInfo{}, err
+		}
+
+		return recipientInfo{
+			encryptedKey: jek,
+			header:       &rawHeader{},
+		}, nil
+	case PBES2_HS256_A128KW, PBES2_HS384_A192KW, PBES2_HS512_A256KW:
+		if len(ctx.p2s) == 0 {
+			salt, err := getRandomSalt(defaultP2SSize)
+			if err != nil {
+				return recipientInfo{}, err
+			}
+			ctx.p2s = salt
+		}
+
+		if ctx.p2c <= 0 {
+			ctx.p2c = defaultP2C
+		}
+
+		// salt is UTF8(Alg) || 0x00 || Salt Input
+		salt := bytes.Join([][]byte{[]byte(alg), ctx.p2s}, []byte{0x00})
+
+		// derive key
+		keyLen, h := getPbkdf2Params(alg)
+		key := pbkdf2.Key(ctx.key, salt, ctx.p2c, keyLen, h)
+
+		// use AES cipher with derived key
+		block, err := aes.NewCipher(key)
+		if err != nil {
+			return recipientInfo{}, err
+		}
+
+		jek, err := josecipher.KeyWrap(block, cek)
+		if err != nil {
+			return recipientInfo{}, err
+		}
+
+		header := &rawHeader{}
+		header.set(headerP2C, ctx.p2c)
+		header.set(headerP2S, newBuffer(ctx.p2s))
+
+		return recipientInfo{
+			encryptedKey: jek,
+			header:       header,
+		}, nil
+	}
+
+	return recipientInfo{}, ErrUnsupportedAlgorithm
+}
+
+// Decrypt the content encryption key.
+func (ctx *symmetricKeyCipher) decryptKey(headers rawHeader, recipient *recipientInfo, generator keyGenerator) ([]byte, error) {
+	switch headers.getAlgorithm() {
+	case DIRECT:
+		cek := make([]byte, len(ctx.key))
+		copy(cek, ctx.key)
+		return cek, nil
+	case A128GCMKW, A192GCMKW, A256GCMKW:
+		aead := newAESGCM(len(ctx.key))
+
+		iv, err := headers.getIV()
+		if err != nil {
+			return nil, fmt.Errorf("square/go-jose: invalid IV: %v", err)
+		}
+		tag, err := headers.getTag()
+		if err != nil {
+			return nil, fmt.Errorf("square/go-jose: invalid tag: %v", err)
+		}
+
+		parts := &aeadParts{
+			iv:         iv.bytes(),
+			ciphertext: recipient.encryptedKey,
+			tag:        tag.bytes(),
+		}
+
+		cek, err := aead.decrypt(ctx.key, []byte{}, parts)
+		if err != nil {
+			return nil, err
+		}
+
+		return cek, nil
+	case A128KW, A192KW, A256KW:
+		block, err := aes.NewCipher(ctx.key)
+		if err != nil {
+			return nil, err
+		}
+
+		cek, err := josecipher.KeyUnwrap(block, recipient.encryptedKey)
+		if err != nil {
+			return nil, err
+		}
+		return cek, nil
+	case PBES2_HS256_A128KW, PBES2_HS384_A192KW, PBES2_HS512_A256KW:
+		p2s, err := headers.getP2S()
+		if err != nil {
+			return nil, fmt.Errorf("square/go-jose: invalid P2S: %v", err)
+		}
+		if p2s == nil || len(p2s.data) == 0 {
+			return nil, fmt.Errorf("square/go-jose: invalid P2S: must be present")
+		}
+
+		p2c, err := headers.getP2C()
+		if err != nil {
+			return nil, fmt.Errorf("square/go-jose: invalid P2C: %v", err)
+		}
+		if p2c <= 0 {
+			return nil, fmt.Errorf("square/go-jose: invalid P2C: must be a positive integer")
+		}
+
+		// salt is UTF8(Alg) || 0x00 || Salt Input
+		alg := headers.getAlgorithm()
+		salt := bytes.Join([][]byte{[]byte(alg), p2s.bytes()}, []byte{0x00})
+
+		// derive key
+		keyLen, h := getPbkdf2Params(alg)
+		key := pbkdf2.Key(ctx.key, salt, p2c, keyLen, h)
+
+		// use AES cipher with derived key
+		block, err := aes.NewCipher(key)
+		if err != nil {
+			return nil, err
+		}
+
+		cek, err := josecipher.KeyUnwrap(block, recipient.encryptedKey)
+		if err != nil {
+			return nil, err
+		}
+		return cek, nil
+	}
+
+	return nil, ErrUnsupportedAlgorithm
+}
+
+// Sign the given payload
+func (ctx symmetricMac) signPayload(payload []byte, alg SignatureAlgorithm) (Signature, error) {
+	mac, err := ctx.hmac(payload, alg)
+	if err != nil {
+		return Signature{}, errors.New("square/go-jose: failed to compute hmac")
+	}
+
+	return Signature{
+		Signature: mac,
+		protected: &rawHeader{},
+	}, nil
+}
+
+// Verify the given payload
+func (ctx symmetricMac) verifyPayload(payload []byte, mac []byte, alg SignatureAlgorithm) error {
+	expected, err := ctx.hmac(payload, alg)
+	if err != nil {
+		return errors.New("square/go-jose: failed to compute hmac")
+	}
+
+	if len(mac) != len(expected) {
+		return errors.New("square/go-jose: invalid hmac")
+	}
+
+	match := subtle.ConstantTimeCompare(mac, expected)
+	if match != 1 {
+		return errors.New("square/go-jose: invalid hmac")
+	}
+
+	return nil
+}
+
+// Compute the HMAC based on the given alg value
+func (ctx symmetricMac) hmac(payload []byte, alg SignatureAlgorithm) ([]byte, error) {
+	var hash func() hash.Hash
+
+	switch alg {
+	case HS256:
+		hash = sha256.New
+	case HS384:
+		hash = sha512.New384
+	case HS512:
+		hash = sha512.New
+	default:
+		return nil, ErrUnsupportedAlgorithm
+	}
+
+	hmac := hmac.New(hash, ctx.key)
+
+	// According to documentation, Write() on hash never fails
+	_, _ = hmac.Write(payload)
+	return hmac.Sum(nil), nil
+}
diff --git a/vendor/modules.txt b/vendor/modules.txt
index 9f236bfac..912986f96 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -11,14 +11,20 @@ github.com/PuerkitoBio/urlesc
 github.com/asaskevich/govalidator
 # github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973
 github.com/beorn7/perks/quantile
+# github.com/cenkalti/backoff v2.1.1+incompatible
+github.com/cenkalti/backoff
 # github.com/cheynewallace/tabby v1.1.0
 github.com/cheynewallace/tabby
+# github.com/coreos/go-oidc v2.1.0+incompatible
+github.com/coreos/go-oidc
 # github.com/cpuguy83/go-md2man v1.0.10
 github.com/cpuguy83/go-md2man/md2man
 # github.com/cpuguy83/go-md2man/v2 v2.0.0-20190314233015-f79a8a8ca69d
 github.com/cpuguy83/go-md2man/v2/md2man
 # github.com/davecgh/go-spew v1.1.1
 github.com/davecgh/go-spew/spew
+# github.com/dgrijalva/jwt-go v3.2.0+incompatible
+github.com/dgrijalva/jwt-go
 # github.com/docker/docker v0.7.3-0.20190327010347-be7ac8be2ae0
 github.com/docker/docker/pkg/term
 github.com/docker/docker/pkg/term/windows
@@ -99,6 +105,14 @@ github.com/konsorten/go-windows-terminal-sequences
 # github.com/kubernetes-incubator/external-storage v0.0.0-00010101000000-000000000000 => github.com/libopenstorage/external-storage v5.3.0-alpha.1.0.20200130041458-d2b33d4448ea+incompatible
 github.com/kubernetes-incubator/external-storage/snapshot/pkg/apis/crd/v1
 github.com/kubernetes-incubator/external-storage/snapshot/pkg/client
+# github.com/libopenstorage/openstorage v8.0.0+incompatible
+github.com/libopenstorage/openstorage/api
+github.com/libopenstorage/openstorage/api/client
+github.com/libopenstorage/openstorage/api/client/volume
+github.com/libopenstorage/openstorage/api/errors
+github.com/libopenstorage/openstorage/pkg/auth
+github.com/libopenstorage/openstorage/pkg/options
+github.com/libopenstorage/openstorage/volume
 # github.com/libopenstorage/openstorage-sdk-clients v0.69.27
 github.com/libopenstorage/openstorage-sdk-clients/sdk/golang
 # github.com/libopenstorage/stork v1.3.0-beta1.0.20200630005842-9255e7a98775
@@ -122,6 +136,8 @@ github.com/mitchellh/go-wordwrap
 github.com/modern-go/concurrent
 # github.com/modern-go/reflect2 v1.0.1
 github.com/modern-go/reflect2
+# github.com/mohae/deepcopy v0.0.0-20170929034955-c48cc78d4826
+github.com/mohae/deepcopy
 # github.com/peterbourgon/diskv v2.0.1+incompatible
 github.com/peterbourgon/diskv
 # github.com/pkg/errors v0.8.1
@@ -146,6 +162,9 @@ github.com/portworx/sched-ops/k8s/rbac
 github.com/portworx/sched-ops/k8s/storage
 github.com/portworx/sched-ops/k8s/stork
 github.com/portworx/sched-ops/task
+# github.com/pquerna/cachecontrol v0.0.0-20180517163645-1555304b9b35
+github.com/pquerna/cachecontrol
+github.com/pquerna/cachecontrol/cacheobject
 # github.com/prometheus/client_golang v0.9.3-0.20190127221311-3c4408c8b829
 github.com/prometheus/client_golang/prometheus
 github.com/prometheus/client_golang/prometheus/internal
@@ -180,10 +199,14 @@ github.com/stretchr/testify/require
 # github.com/urfave/cli v1.22.2
 github.com/urfave/cli
 # golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550
+golang.org/x/crypto/ed25519
+golang.org/x/crypto/ed25519/internal/edwards25519
+golang.org/x/crypto/pbkdf2
 golang.org/x/crypto/ssh/terminal
-# golang.org/x/mod v0.2.0
+# golang.org/x/mod v0.4.2
 golang.org/x/mod/module
 golang.org/x/mod/semver
+golang.org/x/mod/sumdb/dirhash
 # golang.org/x/net v0.0.0-20200226121028-0de0cce0169b
 golang.org/x/net/context
 golang.org/x/net/context/ctxhttp
@@ -305,6 +328,10 @@ google.golang.org/grpc/tap
 gopkg.in/fsnotify.v1
 # gopkg.in/inf.v0 v0.9.1
 gopkg.in/inf.v0
+# gopkg.in/square/go-jose.v2 v2.3.1
+gopkg.in/square/go-jose.v2
+gopkg.in/square/go-jose.v2/cipher
+gopkg.in/square/go-jose.v2/json
 # gopkg.in/yaml.v2 v2.2.4
 gopkg.in/yaml.v2
 # k8s.io/api v0.17.0 => k8s.io/api v0.16.6