diff --git a/gen/go/proto/cofidectl_plugin/v1alpha1/plugin.pb.go b/gen/go/proto/cofidectl_plugin/v1alpha1/plugin.pb.go
index 7e7a611..5e57784 100644
--- a/gen/go/proto/cofidectl_plugin/v1alpha1/plugin.pb.go
+++ b/gen/go/proto/cofidectl_plugin/v1alpha1/plugin.pb.go
@@ -10,6 +10,9 @@
 package v1alpha1
 
 import (
+	v1alpha12 "github.com/cofide/cofide-api-sdk/gen/go/proto/ap_binding/v1alpha1"
+	v1alpha11 "github.com/cofide/cofide-api-sdk/gen/go/proto/attestation_policy/v1alpha1"
+	v1alpha13 "github.com/cofide/cofide-api-sdk/gen/go/proto/federation/v1alpha1"
 	v1alpha1 "github.com/cofide/cofide-api-sdk/gen/go/proto/trust_zone/v1alpha1"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
@@ -24,6 +27,168 @@ const (
 	_ = protoimpl.EnforceVersion(protoimpl.MaxVersion - 20)
 )
 
+type ValidateRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+}
+
+func (x *ValidateRequest) Reset() {
+	*x = ValidateRequest{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[0]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ValidateRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ValidateRequest) ProtoMessage() {}
+
+func (x *ValidateRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[0]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ValidateRequest.ProtoReflect.Descriptor instead.
+func (*ValidateRequest) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{0}
+}
+
+type ValidateResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+}
+
+func (x *ValidateResponse) Reset() {
+	*x = ValidateResponse{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ValidateResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ValidateResponse) ProtoMessage() {}
+
+func (x *ValidateResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[1]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ValidateResponse.ProtoReflect.Descriptor instead.
+func (*ValidateResponse) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{1}
+}
+
+type GetTrustZoneRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Name *string `protobuf:"bytes,1,opt,name=name,proto3,oneof" json:"name,omitempty"`
+}
+
+func (x *GetTrustZoneRequest) Reset() {
+	*x = GetTrustZoneRequest{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetTrustZoneRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetTrustZoneRequest) ProtoMessage() {}
+
+func (x *GetTrustZoneRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[2]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetTrustZoneRequest.ProtoReflect.Descriptor instead.
+func (*GetTrustZoneRequest) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{2}
+}
+
+func (x *GetTrustZoneRequest) GetName() string {
+	if x != nil && x.Name != nil {
+		return *x.Name
+	}
+	return ""
+}
+
+type GetTrustZoneResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	TrustZone *v1alpha1.TrustZone `protobuf:"bytes,1,opt,name=trust_zone,json=trustZone,proto3,oneof" json:"trust_zone,omitempty"`
+}
+
+func (x *GetTrustZoneResponse) Reset() {
+	*x = GetTrustZoneResponse{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetTrustZoneResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetTrustZoneResponse) ProtoMessage() {}
+
+func (x *GetTrustZoneResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[3]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetTrustZoneResponse.ProtoReflect.Descriptor instead.
+func (*GetTrustZoneResponse) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{3}
+}
+
+func (x *GetTrustZoneResponse) GetTrustZone() *v1alpha1.TrustZone {
+	if x != nil {
+		return x.TrustZone
+	}
+	return nil
+}
+
 type ListTrustZonesRequest struct {
 	state         protoimpl.MessageState
 	sizeCache     protoimpl.SizeCache
@@ -32,7 +197,7 @@ type ListTrustZonesRequest struct {
 
 func (x *ListTrustZonesRequest) Reset() {
 	*x = ListTrustZonesRequest{}
-	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[0]
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[4]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -44,7 +209,7 @@ func (x *ListTrustZonesRequest) String() string {
 func (*ListTrustZonesRequest) ProtoMessage() {}
 
 func (x *ListTrustZonesRequest) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[0]
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[4]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -57,7 +222,7 @@ func (x *ListTrustZonesRequest) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ListTrustZonesRequest.ProtoReflect.Descriptor instead.
 func (*ListTrustZonesRequest) Descriptor() ([]byte, []int) {
-	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{0}
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{4}
 }
 
 type ListTrustZonesResponse struct {
@@ -70,7 +235,7 @@ type ListTrustZonesResponse struct {
 
 func (x *ListTrustZonesResponse) Reset() {
 	*x = ListTrustZonesResponse{}
-	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[1]
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[5]
 	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 	ms.StoreMessageInfo(mi)
 }
@@ -82,7 +247,7 @@ func (x *ListTrustZonesResponse) String() string {
 func (*ListTrustZonesResponse) ProtoMessage() {}
 
 func (x *ListTrustZonesResponse) ProtoReflect() protoreflect.Message {
-	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[1]
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[5]
 	if x != nil {
 		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
 		if ms.LoadMessageInfo() == nil {
@@ -95,7 +260,7 @@ func (x *ListTrustZonesResponse) ProtoReflect() protoreflect.Message {
 
 // Deprecated: Use ListTrustZonesResponse.ProtoReflect.Descriptor instead.
 func (*ListTrustZonesResponse) Descriptor() ([]byte, []int) {
-	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{1}
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{5}
 }
 
 func (x *ListTrustZonesResponse) GetTrustZones() []*v1alpha1.TrustZone {
@@ -105,40 +270,1146 @@ func (x *ListTrustZonesResponse) GetTrustZones() []*v1alpha1.TrustZone {
 	return nil
 }
 
-var File_proto_cofidectl_plugin_v1alpha1_plugin_proto protoreflect.FileDescriptor
+type AddTrustZoneRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
 
-var file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDesc = []byte{
-	0x0a, 0x2c, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2f, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74,
-	0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2f, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61,
-	0x31, 0x2f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x1f,
-	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f,
-	0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x1a,
-	0x2a, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2f, 0x74, 0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e,
-	0x65, 0x2f, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2f, 0x74, 0x72, 0x75, 0x73, 0x74,
-	0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22, 0x17, 0x0a, 0x15, 0x4c,
-	0x69, 0x73, 0x74, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x73, 0x52, 0x65, 0x71,
-	0x75, 0x65, 0x73, 0x74, 0x22, 0x5f, 0x0a, 0x16, 0x4c, 0x69, 0x73, 0x74, 0x54, 0x72, 0x75, 0x73,
-	0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x45,
-	0x0a, 0x0b, 0x74, 0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x73, 0x18, 0x01, 0x20,
-	0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x74, 0x72, 0x75, 0x73,
-	0x74, 0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e,
-	0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x52, 0x0a, 0x74, 0x72, 0x75, 0x73, 0x74,
-	0x5a, 0x6f, 0x6e, 0x65, 0x73, 0x32, 0x9d, 0x01, 0x0a, 0x17, 0x44, 0x61, 0x74, 0x61, 0x53, 0x6f,
-	0x75, 0x72, 0x63, 0x65, 0x50, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63,
-	0x65, 0x12, 0x81, 0x01, 0x0a, 0x0e, 0x4c, 0x69, 0x73, 0x74, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a,
-	0x6f, 0x6e, 0x65, 0x73, 0x12, 0x36, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66,
-	0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31,
-	0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x54, 0x72, 0x75, 0x73, 0x74,
-	0x5a, 0x6f, 0x6e, 0x65, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x37, 0x2e, 0x70,
+	TrustZone *v1alpha1.TrustZone `protobuf:"bytes,1,opt,name=trust_zone,json=trustZone,proto3,oneof" json:"trust_zone,omitempty"`
+}
+
+func (x *AddTrustZoneRequest) Reset() {
+	*x = AddTrustZoneRequest{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[6]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *AddTrustZoneRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*AddTrustZoneRequest) ProtoMessage() {}
+
+func (x *AddTrustZoneRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[6]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use AddTrustZoneRequest.ProtoReflect.Descriptor instead.
+func (*AddTrustZoneRequest) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{6}
+}
+
+func (x *AddTrustZoneRequest) GetTrustZone() *v1alpha1.TrustZone {
+	if x != nil {
+		return x.TrustZone
+	}
+	return nil
+}
+
+type AddTrustZoneResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	TrustZone *v1alpha1.TrustZone `protobuf:"bytes,1,opt,name=trust_zone,json=trustZone,proto3,oneof" json:"trust_zone,omitempty"`
+}
+
+func (x *AddTrustZoneResponse) Reset() {
+	*x = AddTrustZoneResponse{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[7]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *AddTrustZoneResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*AddTrustZoneResponse) ProtoMessage() {}
+
+func (x *AddTrustZoneResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[7]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use AddTrustZoneResponse.ProtoReflect.Descriptor instead.
+func (*AddTrustZoneResponse) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{7}
+}
+
+func (x *AddTrustZoneResponse) GetTrustZone() *v1alpha1.TrustZone {
+	if x != nil {
+		return x.TrustZone
+	}
+	return nil
+}
+
+type UpdateTrustZoneRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	TrustZone *v1alpha1.TrustZone `protobuf:"bytes,1,opt,name=trust_zone,json=trustZone,proto3,oneof" json:"trust_zone,omitempty"`
+}
+
+func (x *UpdateTrustZoneRequest) Reset() {
+	*x = UpdateTrustZoneRequest{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[8]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *UpdateTrustZoneRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*UpdateTrustZoneRequest) ProtoMessage() {}
+
+func (x *UpdateTrustZoneRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[8]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use UpdateTrustZoneRequest.ProtoReflect.Descriptor instead.
+func (*UpdateTrustZoneRequest) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{8}
+}
+
+func (x *UpdateTrustZoneRequest) GetTrustZone() *v1alpha1.TrustZone {
+	if x != nil {
+		return x.TrustZone
+	}
+	return nil
+}
+
+type UpdateTrustZoneResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+}
+
+func (x *UpdateTrustZoneResponse) Reset() {
+	*x = UpdateTrustZoneResponse{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[9]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *UpdateTrustZoneResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*UpdateTrustZoneResponse) ProtoMessage() {}
+
+func (x *UpdateTrustZoneResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[9]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use UpdateTrustZoneResponse.ProtoReflect.Descriptor instead.
+func (*UpdateTrustZoneResponse) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{9}
+}
+
+type AddAttestationPolicyRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Policy *v1alpha11.AttestationPolicy `protobuf:"bytes,1,opt,name=policy,proto3,oneof" json:"policy,omitempty"`
+}
+
+func (x *AddAttestationPolicyRequest) Reset() {
+	*x = AddAttestationPolicyRequest{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[10]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *AddAttestationPolicyRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*AddAttestationPolicyRequest) ProtoMessage() {}
+
+func (x *AddAttestationPolicyRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[10]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use AddAttestationPolicyRequest.ProtoReflect.Descriptor instead.
+func (*AddAttestationPolicyRequest) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{10}
+}
+
+func (x *AddAttestationPolicyRequest) GetPolicy() *v1alpha11.AttestationPolicy {
+	if x != nil {
+		return x.Policy
+	}
+	return nil
+}
+
+type AddAttestationPolicyResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Policy *v1alpha11.AttestationPolicy `protobuf:"bytes,1,opt,name=policy,proto3,oneof" json:"policy,omitempty"`
+}
+
+func (x *AddAttestationPolicyResponse) Reset() {
+	*x = AddAttestationPolicyResponse{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[11]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *AddAttestationPolicyResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*AddAttestationPolicyResponse) ProtoMessage() {}
+
+func (x *AddAttestationPolicyResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[11]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use AddAttestationPolicyResponse.ProtoReflect.Descriptor instead.
+func (*AddAttestationPolicyResponse) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{11}
+}
+
+func (x *AddAttestationPolicyResponse) GetPolicy() *v1alpha11.AttestationPolicy {
+	if x != nil {
+		return x.Policy
+	}
+	return nil
+}
+
+type GetAttestationPolicyRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Name *string `protobuf:"bytes,1,opt,name=name,proto3,oneof" json:"name,omitempty"`
+}
+
+func (x *GetAttestationPolicyRequest) Reset() {
+	*x = GetAttestationPolicyRequest{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[12]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetAttestationPolicyRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetAttestationPolicyRequest) ProtoMessage() {}
+
+func (x *GetAttestationPolicyRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[12]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetAttestationPolicyRequest.ProtoReflect.Descriptor instead.
+func (*GetAttestationPolicyRequest) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{12}
+}
+
+func (x *GetAttestationPolicyRequest) GetName() string {
+	if x != nil && x.Name != nil {
+		return *x.Name
+	}
+	return ""
+}
+
+type GetAttestationPolicyResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Policy *v1alpha11.AttestationPolicy `protobuf:"bytes,1,opt,name=policy,proto3" json:"policy,omitempty"`
+}
+
+func (x *GetAttestationPolicyResponse) Reset() {
+	*x = GetAttestationPolicyResponse{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[13]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *GetAttestationPolicyResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*GetAttestationPolicyResponse) ProtoMessage() {}
+
+func (x *GetAttestationPolicyResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[13]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use GetAttestationPolicyResponse.ProtoReflect.Descriptor instead.
+func (*GetAttestationPolicyResponse) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{13}
+}
+
+func (x *GetAttestationPolicyResponse) GetPolicy() *v1alpha11.AttestationPolicy {
+	if x != nil {
+		return x.Policy
+	}
+	return nil
+}
+
+type ListAttestationPoliciesRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+}
+
+func (x *ListAttestationPoliciesRequest) Reset() {
+	*x = ListAttestationPoliciesRequest{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[14]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ListAttestationPoliciesRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListAttestationPoliciesRequest) ProtoMessage() {}
+
+func (x *ListAttestationPoliciesRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[14]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListAttestationPoliciesRequest.ProtoReflect.Descriptor instead.
+func (*ListAttestationPoliciesRequest) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{14}
+}
+
+type ListAttestationPoliciesResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Policies []*v1alpha11.AttestationPolicy `protobuf:"bytes,1,rep,name=policies,proto3" json:"policies,omitempty"`
+}
+
+func (x *ListAttestationPoliciesResponse) Reset() {
+	*x = ListAttestationPoliciesResponse{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[15]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ListAttestationPoliciesResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListAttestationPoliciesResponse) ProtoMessage() {}
+
+func (x *ListAttestationPoliciesResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[15]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListAttestationPoliciesResponse.ProtoReflect.Descriptor instead.
+func (*ListAttestationPoliciesResponse) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{15}
+}
+
+func (x *ListAttestationPoliciesResponse) GetPolicies() []*v1alpha11.AttestationPolicy {
+	if x != nil {
+		return x.Policies
+	}
+	return nil
+}
+
+type AddAPBindingRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Binding *v1alpha12.APBinding `protobuf:"bytes,1,opt,name=binding,proto3,oneof" json:"binding,omitempty"`
+}
+
+func (x *AddAPBindingRequest) Reset() {
+	*x = AddAPBindingRequest{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[16]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *AddAPBindingRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*AddAPBindingRequest) ProtoMessage() {}
+
+func (x *AddAPBindingRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[16]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use AddAPBindingRequest.ProtoReflect.Descriptor instead.
+func (*AddAPBindingRequest) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{16}
+}
+
+func (x *AddAPBindingRequest) GetBinding() *v1alpha12.APBinding {
+	if x != nil {
+		return x.Binding
+	}
+	return nil
+}
+
+type AddAPBindingResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Binding *v1alpha12.APBinding `protobuf:"bytes,1,opt,name=binding,proto3,oneof" json:"binding,omitempty"`
+}
+
+func (x *AddAPBindingResponse) Reset() {
+	*x = AddAPBindingResponse{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[17]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *AddAPBindingResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*AddAPBindingResponse) ProtoMessage() {}
+
+func (x *AddAPBindingResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[17]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use AddAPBindingResponse.ProtoReflect.Descriptor instead.
+func (*AddAPBindingResponse) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{17}
+}
+
+func (x *AddAPBindingResponse) GetBinding() *v1alpha12.APBinding {
+	if x != nil {
+		return x.Binding
+	}
+	return nil
+}
+
+type DestroyAPBindingRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Binding *v1alpha12.APBinding `protobuf:"bytes,1,opt,name=binding,proto3,oneof" json:"binding,omitempty"`
+}
+
+func (x *DestroyAPBindingRequest) Reset() {
+	*x = DestroyAPBindingRequest{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[18]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *DestroyAPBindingRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DestroyAPBindingRequest) ProtoMessage() {}
+
+func (x *DestroyAPBindingRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[18]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DestroyAPBindingRequest.ProtoReflect.Descriptor instead.
+func (*DestroyAPBindingRequest) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{18}
+}
+
+func (x *DestroyAPBindingRequest) GetBinding() *v1alpha12.APBinding {
+	if x != nil {
+		return x.Binding
+	}
+	return nil
+}
+
+type DestroyAPBindingResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+}
+
+func (x *DestroyAPBindingResponse) Reset() {
+	*x = DestroyAPBindingResponse{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[19]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *DestroyAPBindingResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*DestroyAPBindingResponse) ProtoMessage() {}
+
+func (x *DestroyAPBindingResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[19]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use DestroyAPBindingResponse.ProtoReflect.Descriptor instead.
+func (*DestroyAPBindingResponse) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{19}
+}
+
+type AddFederationRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Federation *v1alpha13.Federation `protobuf:"bytes,1,opt,name=federation,proto3,oneof" json:"federation,omitempty"`
+}
+
+func (x *AddFederationRequest) Reset() {
+	*x = AddFederationRequest{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[20]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *AddFederationRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*AddFederationRequest) ProtoMessage() {}
+
+func (x *AddFederationRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[20]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use AddFederationRequest.ProtoReflect.Descriptor instead.
+func (*AddFederationRequest) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{20}
+}
+
+func (x *AddFederationRequest) GetFederation() *v1alpha13.Federation {
+	if x != nil {
+		return x.Federation
+	}
+	return nil
+}
+
+type AddFederationResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Federation *v1alpha13.Federation `protobuf:"bytes,1,opt,name=federation,proto3,oneof" json:"federation,omitempty"`
+}
+
+func (x *AddFederationResponse) Reset() {
+	*x = AddFederationResponse{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[21]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *AddFederationResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*AddFederationResponse) ProtoMessage() {}
+
+func (x *AddFederationResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[21]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use AddFederationResponse.ProtoReflect.Descriptor instead.
+func (*AddFederationResponse) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{21}
+}
+
+func (x *AddFederationResponse) GetFederation() *v1alpha13.Federation {
+	if x != nil {
+		return x.Federation
+	}
+	return nil
+}
+
+type ListFederationsRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+}
+
+func (x *ListFederationsRequest) Reset() {
+	*x = ListFederationsRequest{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[22]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ListFederationsRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListFederationsRequest) ProtoMessage() {}
+
+func (x *ListFederationsRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[22]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListFederationsRequest.ProtoReflect.Descriptor instead.
+func (*ListFederationsRequest) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{22}
+}
+
+type ListFederationsResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Federations []*v1alpha13.Federation `protobuf:"bytes,1,rep,name=federations,proto3" json:"federations,omitempty"`
+}
+
+func (x *ListFederationsResponse) Reset() {
+	*x = ListFederationsResponse{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[23]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ListFederationsResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListFederationsResponse) ProtoMessage() {}
+
+func (x *ListFederationsResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[23]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListFederationsResponse.ProtoReflect.Descriptor instead.
+func (*ListFederationsResponse) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{23}
+}
+
+func (x *ListFederationsResponse) GetFederations() []*v1alpha13.Federation {
+	if x != nil {
+		return x.Federations
+	}
+	return nil
+}
+
+type ListFederationsByTrustZoneRequest struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	TrustZoneName *string `protobuf:"bytes,1,opt,name=trust_zone_name,json=trustZoneName,proto3,oneof" json:"trust_zone_name,omitempty"`
+}
+
+func (x *ListFederationsByTrustZoneRequest) Reset() {
+	*x = ListFederationsByTrustZoneRequest{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[24]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ListFederationsByTrustZoneRequest) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListFederationsByTrustZoneRequest) ProtoMessage() {}
+
+func (x *ListFederationsByTrustZoneRequest) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[24]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListFederationsByTrustZoneRequest.ProtoReflect.Descriptor instead.
+func (*ListFederationsByTrustZoneRequest) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{24}
+}
+
+func (x *ListFederationsByTrustZoneRequest) GetTrustZoneName() string {
+	if x != nil && x.TrustZoneName != nil {
+		return *x.TrustZoneName
+	}
+	return ""
+}
+
+type ListFederationsByTrustZoneResponse struct {
+	state         protoimpl.MessageState
+	sizeCache     protoimpl.SizeCache
+	unknownFields protoimpl.UnknownFields
+
+	Federations []*v1alpha13.Federation `protobuf:"bytes,1,rep,name=federations,proto3" json:"federations,omitempty"`
+}
+
+func (x *ListFederationsByTrustZoneResponse) Reset() {
+	*x = ListFederationsByTrustZoneResponse{}
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[25]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *ListFederationsByTrustZoneResponse) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*ListFederationsByTrustZoneResponse) ProtoMessage() {}
+
+func (x *ListFederationsByTrustZoneResponse) ProtoReflect() protoreflect.Message {
+	mi := &file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[25]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use ListFederationsByTrustZoneResponse.ProtoReflect.Descriptor instead.
+func (*ListFederationsByTrustZoneResponse) Descriptor() ([]byte, []int) {
+	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP(), []int{25}
+}
+
+func (x *ListFederationsByTrustZoneResponse) GetFederations() []*v1alpha13.Federation {
+	if x != nil {
+		return x.Federations
+	}
+	return nil
+}
+
+var File_proto_cofidectl_plugin_v1alpha1_plugin_proto protoreflect.FileDescriptor
+
+var file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDesc = []byte{
+	0x0a, 0x2c, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2f, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74,
+	0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2f, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61,
+	0x31, 0x2f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x12, 0x1f,
+	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f,
+	0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x1a,
+	0x2a, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2f, 0x61, 0x70, 0x5f, 0x62, 0x69, 0x6e, 0x64, 0x69, 0x6e,
+	0x67, 0x2f, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2f, 0x61, 0x70, 0x5f, 0x62, 0x69,
+	0x6e, 0x64, 0x69, 0x6e, 0x67, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x3a, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x2f, 0x61, 0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x70,
+	0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2f, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2f, 0x61,
+	0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x70, 0x6f, 0x6c, 0x69, 0x63,
+	0x79, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x1a, 0x2a, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2f, 0x66,
+	0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2f, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68,
+	0x61, 0x31, 0x2f, 0x66, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x70, 0x72,
+	0x6f, 0x74, 0x6f, 0x1a, 0x2a, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2f, 0x74, 0x72, 0x75, 0x73, 0x74,
+	0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x2f, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2f, 0x74,
+	0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22,
+	0x11, 0x0a, 0x0f, 0x56, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65,
+	0x73, 0x74, 0x22, 0x12, 0x0a, 0x10, 0x56, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65, 0x52, 0x65,
+	0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x37, 0x0a, 0x13, 0x47, 0x65, 0x74, 0x54, 0x72, 0x75,
+	0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x17, 0x0a,
+	0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x48, 0x00, 0x52, 0x04, 0x6e,
+	0x61, 0x6d, 0x65, 0x88, 0x01, 0x01, 0x42, 0x07, 0x0a, 0x05, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x22,
+	0x6f, 0x0a, 0x14, 0x47, 0x65, 0x74, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x52,
+	0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x48, 0x0a, 0x0a, 0x74, 0x72, 0x75, 0x73, 0x74,
+	0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x70, 0x72,
+	0x6f, 0x74, 0x6f, 0x2e, 0x74, 0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x2e, 0x76,
+	0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e,
+	0x65, 0x48, 0x00, 0x52, 0x09, 0x74, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x88, 0x01,
+	0x01, 0x42, 0x0d, 0x0a, 0x0b, 0x5f, 0x74, 0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e, 0x65,
+	0x22, 0x17, 0x0a, 0x15, 0x4c, 0x69, 0x73, 0x74, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e,
+	0x65, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x22, 0x5f, 0x0a, 0x16, 0x4c, 0x69, 0x73,
+	0x74, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f,
+	0x6e, 0x73, 0x65, 0x12, 0x45, 0x0a, 0x0b, 0x74, 0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e,
+	0x65, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
+	0x2e, 0x74, 0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x2e, 0x76, 0x31, 0x61, 0x6c,
+	0x70, 0x68, 0x61, 0x31, 0x2e, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x52, 0x0a,
+	0x74, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x73, 0x22, 0x6e, 0x0a, 0x13, 0x41, 0x64,
+	0x64, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73,
+	0x74, 0x12, 0x48, 0x0a, 0x0a, 0x74, 0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x18,
+	0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x74, 0x72,
+	0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61,
+	0x31, 0x2e, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x48, 0x00, 0x52, 0x09, 0x74,
+	0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x88, 0x01, 0x01, 0x42, 0x0d, 0x0a, 0x0b, 0x5f,
+	0x74, 0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x22, 0x6f, 0x0a, 0x14, 0x41, 0x64,
+	0x64, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e,
+	0x73, 0x65, 0x12, 0x48, 0x0a, 0x0a, 0x74, 0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e, 0x65,
+	0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x74,
+	0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68,
+	0x61, 0x31, 0x2e, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x48, 0x00, 0x52, 0x09,
+	0x74, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x88, 0x01, 0x01, 0x42, 0x0d, 0x0a, 0x0b,
+	0x5f, 0x74, 0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x22, 0x71, 0x0a, 0x16, 0x55,
+	0x70, 0x64, 0x61, 0x74, 0x65, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x52, 0x65,
+	0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x48, 0x0a, 0x0a, 0x74, 0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a,
+	0x6f, 0x6e, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x2e, 0x74, 0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x2e, 0x76, 0x31, 0x61,
+	0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x48,
+	0x00, 0x52, 0x09, 0x74, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x88, 0x01, 0x01, 0x42,
+	0x0d, 0x0a, 0x0b, 0x5f, 0x74, 0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x22, 0x19,
+	0x0a, 0x17, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e,
+	0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x22, 0x7b, 0x0a, 0x1b, 0x41, 0x64, 0x64,
+	0x41, 0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63,
+	0x79, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x51, 0x0a, 0x06, 0x70, 0x6f, 0x6c, 0x69,
+	0x63, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x34, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
+	0x2e, 0x61, 0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x70, 0x6f, 0x6c,
+	0x69, 0x63, 0x79, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x41, 0x74, 0x74,
+	0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x48, 0x00,
+	0x52, 0x06, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x88, 0x01, 0x01, 0x42, 0x09, 0x0a, 0x07, 0x5f,
+	0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x22, 0x7c, 0x0a, 0x1c, 0x41, 0x64, 0x64, 0x41, 0x74, 0x74,
+	0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x52, 0x65,
+	0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x51, 0x0a, 0x06, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79,
+	0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x34, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x61,
+	0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x70, 0x6f, 0x6c, 0x69, 0x63,
+	0x79, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x41, 0x74, 0x74, 0x65, 0x73,
+	0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x48, 0x00, 0x52, 0x06,
+	0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x88, 0x01, 0x01, 0x42, 0x09, 0x0a, 0x07, 0x5f, 0x70, 0x6f,
+	0x6c, 0x69, 0x63, 0x79, 0x22, 0x3f, 0x0a, 0x1b, 0x47, 0x65, 0x74, 0x41, 0x74, 0x74, 0x65, 0x73,
+	0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x52, 0x65, 0x71, 0x75,
+	0x65, 0x73, 0x74, 0x12, 0x17, 0x0a, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x09, 0x48, 0x00, 0x52, 0x04, 0x6e, 0x61, 0x6d, 0x65, 0x88, 0x01, 0x01, 0x42, 0x07, 0x0a, 0x05,
+	0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0x6c, 0x0a, 0x1c, 0x47, 0x65, 0x74, 0x41, 0x74, 0x74, 0x65,
+	0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x52, 0x65, 0x73,
+	0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x4c, 0x0a, 0x06, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x18,
+	0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x34, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x61, 0x74,
+	0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79,
+	0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x41, 0x74, 0x74, 0x65, 0x73, 0x74,
+	0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x52, 0x06, 0x70, 0x6f, 0x6c,
+	0x69, 0x63, 0x79, 0x22, 0x20, 0x0a, 0x1e, 0x4c, 0x69, 0x73, 0x74, 0x41, 0x74, 0x74, 0x65, 0x73,
+	0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x69, 0x65, 0x73, 0x52, 0x65,
+	0x71, 0x75, 0x65, 0x73, 0x74, 0x22, 0x73, 0x0a, 0x1f, 0x4c, 0x69, 0x73, 0x74, 0x41, 0x74, 0x74,
+	0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x69, 0x65, 0x73,
+	0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x50, 0x0a, 0x08, 0x70, 0x6f, 0x6c, 0x69,
+	0x63, 0x69, 0x65, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x34, 0x2e, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x2e, 0x61, 0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x5f, 0x70,
+	0x6f, 0x6c, 0x69, 0x63, 0x79, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x41,
+	0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79,
+	0x52, 0x08, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x69, 0x65, 0x73, 0x22, 0x66, 0x0a, 0x13, 0x41, 0x64,
+	0x64, 0x41, 0x50, 0x42, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73,
+	0x74, 0x12, 0x43, 0x0a, 0x07, 0x62, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x18, 0x01, 0x20, 0x01,
+	0x28, 0x0b, 0x32, 0x24, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x61, 0x70, 0x5f, 0x62, 0x69,
+	0x6e, 0x64, 0x69, 0x6e, 0x67, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x41,
+	0x50, 0x42, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x48, 0x00, 0x52, 0x07, 0x62, 0x69, 0x6e, 0x64,
+	0x69, 0x6e, 0x67, 0x88, 0x01, 0x01, 0x42, 0x0a, 0x0a, 0x08, 0x5f, 0x62, 0x69, 0x6e, 0x64, 0x69,
+	0x6e, 0x67, 0x22, 0x67, 0x0a, 0x14, 0x41, 0x64, 0x64, 0x41, 0x50, 0x42, 0x69, 0x6e, 0x64, 0x69,
+	0x6e, 0x67, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x43, 0x0a, 0x07, 0x62, 0x69,
+	0x6e, 0x64, 0x69, 0x6e, 0x67, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x70, 0x72,
+	0x6f, 0x74, 0x6f, 0x2e, 0x61, 0x70, 0x5f, 0x62, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x2e, 0x76,
+	0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x41, 0x50, 0x42, 0x69, 0x6e, 0x64, 0x69, 0x6e,
+	0x67, 0x48, 0x00, 0x52, 0x07, 0x62, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x88, 0x01, 0x01, 0x42,
+	0x0a, 0x0a, 0x08, 0x5f, 0x62, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x22, 0x6a, 0x0a, 0x17, 0x44,
+	0x65, 0x73, 0x74, 0x72, 0x6f, 0x79, 0x41, 0x50, 0x42, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x52,
+	0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x43, 0x0a, 0x07, 0x62, 0x69, 0x6e, 0x64, 0x69, 0x6e,
+	0x67, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e,
+	0x61, 0x70, 0x5f, 0x62, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70,
+	0x68, 0x61, 0x31, 0x2e, 0x41, 0x50, 0x42, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x48, 0x00, 0x52,
+	0x07, 0x62, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x88, 0x01, 0x01, 0x42, 0x0a, 0x0a, 0x08, 0x5f,
+	0x62, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x22, 0x1a, 0x0a, 0x18, 0x44, 0x65, 0x73, 0x74, 0x72,
+	0x6f, 0x79, 0x41, 0x50, 0x42, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x52, 0x65, 0x73, 0x70, 0x6f,
+	0x6e, 0x73, 0x65, 0x22, 0x71, 0x0a, 0x14, 0x41, 0x64, 0x64, 0x46, 0x65, 0x64, 0x65, 0x72, 0x61,
+	0x74, 0x69, 0x6f, 0x6e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x4a, 0x0a, 0x0a, 0x66,
+	0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32,
+	0x25, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x66, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69,
+	0x6f, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x46, 0x65, 0x64, 0x65,
+	0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x48, 0x00, 0x52, 0x0a, 0x66, 0x65, 0x64, 0x65, 0x72, 0x61,
+	0x74, 0x69, 0x6f, 0x6e, 0x88, 0x01, 0x01, 0x42, 0x0d, 0x0a, 0x0b, 0x5f, 0x66, 0x65, 0x64, 0x65,
+	0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x72, 0x0a, 0x15, 0x41, 0x64, 0x64, 0x46, 0x65, 0x64,
+	0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12,
+	0x4a, 0x0a, 0x0a, 0x66, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x18, 0x01, 0x20,
+	0x01, 0x28, 0x0b, 0x32, 0x25, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x66, 0x65, 0x64, 0x65,
+	0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e,
+	0x46, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x48, 0x00, 0x52, 0x0a, 0x66, 0x65,
+	0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x88, 0x01, 0x01, 0x42, 0x0d, 0x0a, 0x0b, 0x5f,
+	0x66, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x22, 0x18, 0x0a, 0x16, 0x4c, 0x69,
+	0x73, 0x74, 0x46, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x71,
+	0x75, 0x65, 0x73, 0x74, 0x22, 0x62, 0x0a, 0x17, 0x4c, 0x69, 0x73, 0x74, 0x46, 0x65, 0x64, 0x65,
+	0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12,
+	0x47, 0x0a, 0x0b, 0x66, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x01,
+	0x20, 0x03, 0x28, 0x0b, 0x32, 0x25, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x66, 0x65, 0x64,
+	0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31,
+	0x2e, 0x46, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x0b, 0x66, 0x65, 0x64,
+	0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x22, 0x64, 0x0a, 0x21, 0x4c, 0x69, 0x73, 0x74,
+	0x46, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x42, 0x79, 0x54, 0x72, 0x75,
+	0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x12, 0x2b, 0x0a,
+	0x0f, 0x74, 0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x5f, 0x6e, 0x61, 0x6d, 0x65,
+	0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x48, 0x00, 0x52, 0x0d, 0x74, 0x72, 0x75, 0x73, 0x74, 0x5a,
+	0x6f, 0x6e, 0x65, 0x4e, 0x61, 0x6d, 0x65, 0x88, 0x01, 0x01, 0x42, 0x12, 0x0a, 0x10, 0x5f, 0x74,
+	0x72, 0x75, 0x73, 0x74, 0x5f, 0x7a, 0x6f, 0x6e, 0x65, 0x5f, 0x6e, 0x61, 0x6d, 0x65, 0x22, 0x6d,
+	0x0a, 0x22, 0x4c, 0x69, 0x73, 0x74, 0x46, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e,
+	0x73, 0x42, 0x79, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x52, 0x65, 0x73, 0x70,
+	0x6f, 0x6e, 0x73, 0x65, 0x12, 0x47, 0x0a, 0x0b, 0x66, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69,
+	0x6f, 0x6e, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x25, 0x2e, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x2e, 0x66, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x76, 0x31, 0x61,
+	0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x46, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e,
+	0x52, 0x0b, 0x66, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x32, 0x90, 0x0e,
+	0x0a, 0x17, 0x44, 0x61, 0x74, 0x61, 0x53, 0x6f, 0x75, 0x72, 0x63, 0x65, 0x50, 0x6c, 0x75, 0x67,
+	0x69, 0x6e, 0x53, 0x65, 0x72, 0x76, 0x69, 0x63, 0x65, 0x12, 0x6f, 0x0a, 0x08, 0x56, 0x61, 0x6c,
+	0x69, 0x64, 0x61, 0x74, 0x65, 0x12, 0x30, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f,
+	0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76,
+	0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x56, 0x61, 0x6c, 0x69, 0x64, 0x61, 0x74, 0x65,
+	0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x31, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e,
+	0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e,
+	0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x56, 0x61, 0x6c, 0x69, 0x64, 0x61,
+	0x74, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x7b, 0x0a, 0x0c, 0x47, 0x65,
+	0x74, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x12, 0x34, 0x2e, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75,
+	0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x47, 0x65, 0x74,
+	0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74,
+	0x1a, 0x35, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63,
+	0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68,
+	0x61, 0x31, 0x2e, 0x47, 0x65, 0x74, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x52,
+	0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x81, 0x01, 0x0a, 0x0e, 0x4c, 0x69, 0x73, 0x74,
+	0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x73, 0x12, 0x36, 0x2e, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75,
+	0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x4c, 0x69, 0x73,
+	0x74, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65,
+	0x73, 0x74, 0x1a, 0x37, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64,
+	0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c,
+	0x70, 0x68, 0x61, 0x31, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f,
+	0x6e, 0x65, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x7b, 0x0a, 0x0c, 0x41,
+	0x64, 0x64, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x12, 0x34, 0x2e, 0x70, 0x72,
+	0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c,
+	0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x41, 0x64,
+	0x64, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73,
+	0x74, 0x1a, 0x35, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65,
+	0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70,
+	0x68, 0x61, 0x31, 0x2e, 0x41, 0x64, 0x64, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65,
+	0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x84, 0x01, 0x0a, 0x0f, 0x55, 0x70, 0x64,
+	0x61, 0x74, 0x65, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x12, 0x37, 0x2e, 0x70,
+	0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70,
+	0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x55,
+	0x70, 0x64, 0x61, 0x74, 0x65, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x52, 0x65,
+	0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x38, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f,
+	0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76,
+	0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x55, 0x70, 0x64, 0x61, 0x74, 0x65, 0x54, 0x72,
+	0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12,
+	0x93, 0x01, 0x0a, 0x14, 0x41, 0x64, 0x64, 0x41, 0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69,
+	0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x12, 0x3c, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
+	0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69,
+	0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x41, 0x64, 0x64, 0x41, 0x74,
+	0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x52,
+	0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x3d, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63,
+	0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e,
+	0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x41, 0x64, 0x64, 0x41, 0x74, 0x74, 0x65,
+	0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x52, 0x65, 0x73,
+	0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x93, 0x01, 0x0a, 0x14, 0x47, 0x65, 0x74, 0x41, 0x74, 0x74,
+	0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x12, 0x3c,
+	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c,
+	0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31,
+	0x2e, 0x47, 0x65, 0x74, 0x41, 0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50,
+	0x6f, 0x6c, 0x69, 0x63, 0x79, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x3d, 0x2e, 0x70,
+	0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70,
+	0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x47,
+	0x65, 0x74, 0x41, 0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c,
+	0x69, 0x63, 0x79, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x9c, 0x01, 0x0a, 0x17,
+	0x4c, 0x69, 0x73, 0x74, 0x41, 0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50,
+	0x6f, 0x6c, 0x69, 0x63, 0x69, 0x65, 0x73, 0x12, 0x3f, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e,
+	0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e,
+	0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x41, 0x74,
+	0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x69, 0x65,
+	0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x40, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f,
+	0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69,
+	0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x41,
+	0x74, 0x74, 0x65, 0x73, 0x74, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x50, 0x6f, 0x6c, 0x69, 0x63, 0x69,
+	0x65, 0x73, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x7b, 0x0a, 0x0c, 0x41, 0x64,
+	0x64, 0x41, 0x50, 0x42, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x12, 0x34, 0x2e, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75,
+	0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x41, 0x64, 0x64,
+	0x41, 0x50, 0x42, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74,
+	0x1a, 0x35, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63,
+	0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68,
+	0x61, 0x31, 0x2e, 0x41, 0x64, 0x64, 0x41, 0x50, 0x42, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x52,
+	0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0x87, 0x01, 0x0a, 0x10, 0x44, 0x65, 0x73, 0x74,
+	0x72, 0x6f, 0x79, 0x41, 0x50, 0x42, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x12, 0x38, 0x2e, 0x70,
 	0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70,
-	0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x4c,
-	0x69, 0x73, 0x74, 0x54, 0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x73, 0x52, 0x65, 0x73,
-	0x70, 0x6f, 0x6e, 0x73, 0x65, 0x42, 0x49, 0x5a, 0x47, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e,
-	0x63, 0x6f, 0x6d, 0x2f, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x2f, 0x63, 0x6f, 0x66, 0x69, 0x64,
-	0x65, 0x2d, 0x61, 0x70, 0x69, 0x2d, 0x73, 0x64, 0x6b, 0x2f, 0x67, 0x65, 0x6e, 0x2f, 0x67, 0x6f,
-	0x2f, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2f, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c,
-	0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2f, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31,
-	0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x44,
+	0x65, 0x73, 0x74, 0x72, 0x6f, 0x79, 0x41, 0x50, 0x42, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x52,
+	0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x39, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63,
+	0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e,
+	0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x44, 0x65, 0x73, 0x74, 0x72, 0x6f, 0x79,
+	0x41, 0x50, 0x42, 0x69, 0x6e, 0x64, 0x69, 0x6e, 0x67, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73,
+	0x65, 0x12, 0x7e, 0x0a, 0x0d, 0x41, 0x64, 0x64, 0x46, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69,
+	0x6f, 0x6e, 0x12, 0x35, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64,
+	0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c,
+	0x70, 0x68, 0x61, 0x31, 0x2e, 0x41, 0x64, 0x64, 0x46, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69,
+	0x6f, 0x6e, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x36, 0x2e, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67,
+	0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x41, 0x64, 0x64, 0x46,
+	0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73,
+	0x65, 0x12, 0x84, 0x01, 0x0a, 0x0f, 0x4c, 0x69, 0x73, 0x74, 0x46, 0x65, 0x64, 0x65, 0x72, 0x61,
+	0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12, 0x37, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f,
+	0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76,
+	0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x46, 0x65, 0x64, 0x65,
+	0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x38,
+	0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c,
+	0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31,
+	0x2e, 0x4c, 0x69, 0x73, 0x74, 0x46, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73,
+	0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65, 0x12, 0xa5, 0x01, 0x0a, 0x1a, 0x4c, 0x69, 0x73,
+	0x74, 0x46, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x42, 0x79, 0x54, 0x72,
+	0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x12, 0x42, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x2e,
+	0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67, 0x69, 0x6e,
+	0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x4c, 0x69, 0x73, 0x74, 0x46, 0x65,
+	0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x42, 0x79, 0x54, 0x72, 0x75, 0x73, 0x74,
+	0x5a, 0x6f, 0x6e, 0x65, 0x52, 0x65, 0x71, 0x75, 0x65, 0x73, 0x74, 0x1a, 0x43, 0x2e, 0x70, 0x72,
+	0x6f, 0x74, 0x6f, 0x2e, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c,
+	0x75, 0x67, 0x69, 0x6e, 0x2e, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x2e, 0x4c, 0x69,
+	0x73, 0x74, 0x46, 0x65, 0x64, 0x65, 0x72, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x42, 0x79, 0x54,
+	0x72, 0x75, 0x73, 0x74, 0x5a, 0x6f, 0x6e, 0x65, 0x52, 0x65, 0x73, 0x70, 0x6f, 0x6e, 0x73, 0x65,
+	0x42, 0x49, 0x5a, 0x47, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x63,
+	0x6f, 0x66, 0x69, 0x64, 0x65, 0x2f, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x2d, 0x61, 0x70, 0x69,
+	0x2d, 0x73, 0x64, 0x6b, 0x2f, 0x67, 0x65, 0x6e, 0x2f, 0x67, 0x6f, 0x2f, 0x70, 0x72, 0x6f, 0x74,
+	0x6f, 0x2f, 0x63, 0x6f, 0x66, 0x69, 0x64, 0x65, 0x63, 0x74, 0x6c, 0x5f, 0x70, 0x6c, 0x75, 0x67,
+	0x69, 0x6e, 0x2f, 0x76, 0x31, 0x61, 0x6c, 0x70, 0x68, 0x61, 0x31, 0x62, 0x06, 0x70, 0x72, 0x6f,
+	0x74, 0x6f, 0x33,
 }
 
 var (
@@ -153,21 +1424,87 @@ func file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescGZIP() []byte {
 	return file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDescData
 }
 
-var file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
+var file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes = make([]protoimpl.MessageInfo, 26)
 var file_proto_cofidectl_plugin_v1alpha1_plugin_proto_goTypes = []any{
-	(*ListTrustZonesRequest)(nil),  // 0: proto.cofidectl_plugin.v1alpha1.ListTrustZonesRequest
-	(*ListTrustZonesResponse)(nil), // 1: proto.cofidectl_plugin.v1alpha1.ListTrustZonesResponse
-	(*v1alpha1.TrustZone)(nil),     // 2: proto.trust_zone.v1alpha1.TrustZone
+	(*ValidateRequest)(nil),                    // 0: proto.cofidectl_plugin.v1alpha1.ValidateRequest
+	(*ValidateResponse)(nil),                   // 1: proto.cofidectl_plugin.v1alpha1.ValidateResponse
+	(*GetTrustZoneRequest)(nil),                // 2: proto.cofidectl_plugin.v1alpha1.GetTrustZoneRequest
+	(*GetTrustZoneResponse)(nil),               // 3: proto.cofidectl_plugin.v1alpha1.GetTrustZoneResponse
+	(*ListTrustZonesRequest)(nil),              // 4: proto.cofidectl_plugin.v1alpha1.ListTrustZonesRequest
+	(*ListTrustZonesResponse)(nil),             // 5: proto.cofidectl_plugin.v1alpha1.ListTrustZonesResponse
+	(*AddTrustZoneRequest)(nil),                // 6: proto.cofidectl_plugin.v1alpha1.AddTrustZoneRequest
+	(*AddTrustZoneResponse)(nil),               // 7: proto.cofidectl_plugin.v1alpha1.AddTrustZoneResponse
+	(*UpdateTrustZoneRequest)(nil),             // 8: proto.cofidectl_plugin.v1alpha1.UpdateTrustZoneRequest
+	(*UpdateTrustZoneResponse)(nil),            // 9: proto.cofidectl_plugin.v1alpha1.UpdateTrustZoneResponse
+	(*AddAttestationPolicyRequest)(nil),        // 10: proto.cofidectl_plugin.v1alpha1.AddAttestationPolicyRequest
+	(*AddAttestationPolicyResponse)(nil),       // 11: proto.cofidectl_plugin.v1alpha1.AddAttestationPolicyResponse
+	(*GetAttestationPolicyRequest)(nil),        // 12: proto.cofidectl_plugin.v1alpha1.GetAttestationPolicyRequest
+	(*GetAttestationPolicyResponse)(nil),       // 13: proto.cofidectl_plugin.v1alpha1.GetAttestationPolicyResponse
+	(*ListAttestationPoliciesRequest)(nil),     // 14: proto.cofidectl_plugin.v1alpha1.ListAttestationPoliciesRequest
+	(*ListAttestationPoliciesResponse)(nil),    // 15: proto.cofidectl_plugin.v1alpha1.ListAttestationPoliciesResponse
+	(*AddAPBindingRequest)(nil),                // 16: proto.cofidectl_plugin.v1alpha1.AddAPBindingRequest
+	(*AddAPBindingResponse)(nil),               // 17: proto.cofidectl_plugin.v1alpha1.AddAPBindingResponse
+	(*DestroyAPBindingRequest)(nil),            // 18: proto.cofidectl_plugin.v1alpha1.DestroyAPBindingRequest
+	(*DestroyAPBindingResponse)(nil),           // 19: proto.cofidectl_plugin.v1alpha1.DestroyAPBindingResponse
+	(*AddFederationRequest)(nil),               // 20: proto.cofidectl_plugin.v1alpha1.AddFederationRequest
+	(*AddFederationResponse)(nil),              // 21: proto.cofidectl_plugin.v1alpha1.AddFederationResponse
+	(*ListFederationsRequest)(nil),             // 22: proto.cofidectl_plugin.v1alpha1.ListFederationsRequest
+	(*ListFederationsResponse)(nil),            // 23: proto.cofidectl_plugin.v1alpha1.ListFederationsResponse
+	(*ListFederationsByTrustZoneRequest)(nil),  // 24: proto.cofidectl_plugin.v1alpha1.ListFederationsByTrustZoneRequest
+	(*ListFederationsByTrustZoneResponse)(nil), // 25: proto.cofidectl_plugin.v1alpha1.ListFederationsByTrustZoneResponse
+	(*v1alpha1.TrustZone)(nil),                 // 26: proto.trust_zone.v1alpha1.TrustZone
+	(*v1alpha11.AttestationPolicy)(nil),        // 27: proto.attestation_policy.v1alpha1.AttestationPolicy
+	(*v1alpha12.APBinding)(nil),                // 28: proto.ap_binding.v1alpha1.APBinding
+	(*v1alpha13.Federation)(nil),               // 29: proto.federation.v1alpha1.Federation
 }
 var file_proto_cofidectl_plugin_v1alpha1_plugin_proto_depIdxs = []int32{
-	2, // 0: proto.cofidectl_plugin.v1alpha1.ListTrustZonesResponse.trust_zones:type_name -> proto.trust_zone.v1alpha1.TrustZone
-	0, // 1: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.ListTrustZones:input_type -> proto.cofidectl_plugin.v1alpha1.ListTrustZonesRequest
-	1, // 2: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.ListTrustZones:output_type -> proto.cofidectl_plugin.v1alpha1.ListTrustZonesResponse
-	2, // [2:3] is the sub-list for method output_type
-	1, // [1:2] is the sub-list for method input_type
-	1, // [1:1] is the sub-list for extension type_name
-	1, // [1:1] is the sub-list for extension extendee
-	0, // [0:1] is the sub-list for field type_name
+	26, // 0: proto.cofidectl_plugin.v1alpha1.GetTrustZoneResponse.trust_zone:type_name -> proto.trust_zone.v1alpha1.TrustZone
+	26, // 1: proto.cofidectl_plugin.v1alpha1.ListTrustZonesResponse.trust_zones:type_name -> proto.trust_zone.v1alpha1.TrustZone
+	26, // 2: proto.cofidectl_plugin.v1alpha1.AddTrustZoneRequest.trust_zone:type_name -> proto.trust_zone.v1alpha1.TrustZone
+	26, // 3: proto.cofidectl_plugin.v1alpha1.AddTrustZoneResponse.trust_zone:type_name -> proto.trust_zone.v1alpha1.TrustZone
+	26, // 4: proto.cofidectl_plugin.v1alpha1.UpdateTrustZoneRequest.trust_zone:type_name -> proto.trust_zone.v1alpha1.TrustZone
+	27, // 5: proto.cofidectl_plugin.v1alpha1.AddAttestationPolicyRequest.policy:type_name -> proto.attestation_policy.v1alpha1.AttestationPolicy
+	27, // 6: proto.cofidectl_plugin.v1alpha1.AddAttestationPolicyResponse.policy:type_name -> proto.attestation_policy.v1alpha1.AttestationPolicy
+	27, // 7: proto.cofidectl_plugin.v1alpha1.GetAttestationPolicyResponse.policy:type_name -> proto.attestation_policy.v1alpha1.AttestationPolicy
+	27, // 8: proto.cofidectl_plugin.v1alpha1.ListAttestationPoliciesResponse.policies:type_name -> proto.attestation_policy.v1alpha1.AttestationPolicy
+	28, // 9: proto.cofidectl_plugin.v1alpha1.AddAPBindingRequest.binding:type_name -> proto.ap_binding.v1alpha1.APBinding
+	28, // 10: proto.cofidectl_plugin.v1alpha1.AddAPBindingResponse.binding:type_name -> proto.ap_binding.v1alpha1.APBinding
+	28, // 11: proto.cofidectl_plugin.v1alpha1.DestroyAPBindingRequest.binding:type_name -> proto.ap_binding.v1alpha1.APBinding
+	29, // 12: proto.cofidectl_plugin.v1alpha1.AddFederationRequest.federation:type_name -> proto.federation.v1alpha1.Federation
+	29, // 13: proto.cofidectl_plugin.v1alpha1.AddFederationResponse.federation:type_name -> proto.federation.v1alpha1.Federation
+	29, // 14: proto.cofidectl_plugin.v1alpha1.ListFederationsResponse.federations:type_name -> proto.federation.v1alpha1.Federation
+	29, // 15: proto.cofidectl_plugin.v1alpha1.ListFederationsByTrustZoneResponse.federations:type_name -> proto.federation.v1alpha1.Federation
+	0,  // 16: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.Validate:input_type -> proto.cofidectl_plugin.v1alpha1.ValidateRequest
+	2,  // 17: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.GetTrustZone:input_type -> proto.cofidectl_plugin.v1alpha1.GetTrustZoneRequest
+	4,  // 18: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.ListTrustZones:input_type -> proto.cofidectl_plugin.v1alpha1.ListTrustZonesRequest
+	6,  // 19: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.AddTrustZone:input_type -> proto.cofidectl_plugin.v1alpha1.AddTrustZoneRequest
+	8,  // 20: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.UpdateTrustZone:input_type -> proto.cofidectl_plugin.v1alpha1.UpdateTrustZoneRequest
+	10, // 21: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.AddAttestationPolicy:input_type -> proto.cofidectl_plugin.v1alpha1.AddAttestationPolicyRequest
+	12, // 22: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.GetAttestationPolicy:input_type -> proto.cofidectl_plugin.v1alpha1.GetAttestationPolicyRequest
+	14, // 23: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.ListAttestationPolicies:input_type -> proto.cofidectl_plugin.v1alpha1.ListAttestationPoliciesRequest
+	16, // 24: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.AddAPBinding:input_type -> proto.cofidectl_plugin.v1alpha1.AddAPBindingRequest
+	18, // 25: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.DestroyAPBinding:input_type -> proto.cofidectl_plugin.v1alpha1.DestroyAPBindingRequest
+	20, // 26: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.AddFederation:input_type -> proto.cofidectl_plugin.v1alpha1.AddFederationRequest
+	22, // 27: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.ListFederations:input_type -> proto.cofidectl_plugin.v1alpha1.ListFederationsRequest
+	24, // 28: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.ListFederationsByTrustZone:input_type -> proto.cofidectl_plugin.v1alpha1.ListFederationsByTrustZoneRequest
+	1,  // 29: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.Validate:output_type -> proto.cofidectl_plugin.v1alpha1.ValidateResponse
+	3,  // 30: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.GetTrustZone:output_type -> proto.cofidectl_plugin.v1alpha1.GetTrustZoneResponse
+	5,  // 31: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.ListTrustZones:output_type -> proto.cofidectl_plugin.v1alpha1.ListTrustZonesResponse
+	7,  // 32: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.AddTrustZone:output_type -> proto.cofidectl_plugin.v1alpha1.AddTrustZoneResponse
+	9,  // 33: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.UpdateTrustZone:output_type -> proto.cofidectl_plugin.v1alpha1.UpdateTrustZoneResponse
+	11, // 34: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.AddAttestationPolicy:output_type -> proto.cofidectl_plugin.v1alpha1.AddAttestationPolicyResponse
+	13, // 35: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.GetAttestationPolicy:output_type -> proto.cofidectl_plugin.v1alpha1.GetAttestationPolicyResponse
+	15, // 36: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.ListAttestationPolicies:output_type -> proto.cofidectl_plugin.v1alpha1.ListAttestationPoliciesResponse
+	17, // 37: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.AddAPBinding:output_type -> proto.cofidectl_plugin.v1alpha1.AddAPBindingResponse
+	19, // 38: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.DestroyAPBinding:output_type -> proto.cofidectl_plugin.v1alpha1.DestroyAPBindingResponse
+	21, // 39: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.AddFederation:output_type -> proto.cofidectl_plugin.v1alpha1.AddFederationResponse
+	23, // 40: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.ListFederations:output_type -> proto.cofidectl_plugin.v1alpha1.ListFederationsResponse
+	25, // 41: proto.cofidectl_plugin.v1alpha1.DataSourcePluginService.ListFederationsByTrustZone:output_type -> proto.cofidectl_plugin.v1alpha1.ListFederationsByTrustZoneResponse
+	29, // [29:42] is the sub-list for method output_type
+	16, // [16:29] is the sub-list for method input_type
+	16, // [16:16] is the sub-list for extension type_name
+	16, // [16:16] is the sub-list for extension extendee
+	0,  // [0:16] is the sub-list for field type_name
 }
 
 func init() { file_proto_cofidectl_plugin_v1alpha1_plugin_proto_init() }
@@ -175,13 +1512,27 @@ func file_proto_cofidectl_plugin_v1alpha1_plugin_proto_init() {
 	if File_proto_cofidectl_plugin_v1alpha1_plugin_proto != nil {
 		return
 	}
+	file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[2].OneofWrappers = []any{}
+	file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[3].OneofWrappers = []any{}
+	file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[6].OneofWrappers = []any{}
+	file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[7].OneofWrappers = []any{}
+	file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[8].OneofWrappers = []any{}
+	file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[10].OneofWrappers = []any{}
+	file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[11].OneofWrappers = []any{}
+	file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[12].OneofWrappers = []any{}
+	file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[16].OneofWrappers = []any{}
+	file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[17].OneofWrappers = []any{}
+	file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[18].OneofWrappers = []any{}
+	file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[20].OneofWrappers = []any{}
+	file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[21].OneofWrappers = []any{}
+	file_proto_cofidectl_plugin_v1alpha1_plugin_proto_msgTypes[24].OneofWrappers = []any{}
 	type x struct{}
 	out := protoimpl.TypeBuilder{
 		File: protoimpl.DescBuilder{
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: file_proto_cofidectl_plugin_v1alpha1_plugin_proto_rawDesc,
 			NumEnums:      0,
-			NumMessages:   2,
+			NumMessages:   26,
 			NumExtensions: 0,
 			NumServices:   1,
 		},
diff --git a/gen/go/proto/cofidectl_plugin/v1alpha1/plugin_grpc.pb.go b/gen/go/proto/cofidectl_plugin/v1alpha1/plugin_grpc.pb.go
index ed5f2e0..bcb4636 100644
--- a/gen/go/proto/cofidectl_plugin/v1alpha1/plugin_grpc.pb.go
+++ b/gen/go/proto/cofidectl_plugin/v1alpha1/plugin_grpc.pb.go
@@ -22,14 +22,38 @@ import (
 const _ = grpc.SupportPackageIsVersion9
 
 const (
-	DataSourcePluginService_ListTrustZones_FullMethodName = "/proto.cofidectl_plugin.v1alpha1.DataSourcePluginService/ListTrustZones"
+	DataSourcePluginService_Validate_FullMethodName                   = "/proto.cofidectl_plugin.v1alpha1.DataSourcePluginService/Validate"
+	DataSourcePluginService_GetTrustZone_FullMethodName               = "/proto.cofidectl_plugin.v1alpha1.DataSourcePluginService/GetTrustZone"
+	DataSourcePluginService_ListTrustZones_FullMethodName             = "/proto.cofidectl_plugin.v1alpha1.DataSourcePluginService/ListTrustZones"
+	DataSourcePluginService_AddTrustZone_FullMethodName               = "/proto.cofidectl_plugin.v1alpha1.DataSourcePluginService/AddTrustZone"
+	DataSourcePluginService_UpdateTrustZone_FullMethodName            = "/proto.cofidectl_plugin.v1alpha1.DataSourcePluginService/UpdateTrustZone"
+	DataSourcePluginService_AddAttestationPolicy_FullMethodName       = "/proto.cofidectl_plugin.v1alpha1.DataSourcePluginService/AddAttestationPolicy"
+	DataSourcePluginService_GetAttestationPolicy_FullMethodName       = "/proto.cofidectl_plugin.v1alpha1.DataSourcePluginService/GetAttestationPolicy"
+	DataSourcePluginService_ListAttestationPolicies_FullMethodName    = "/proto.cofidectl_plugin.v1alpha1.DataSourcePluginService/ListAttestationPolicies"
+	DataSourcePluginService_AddAPBinding_FullMethodName               = "/proto.cofidectl_plugin.v1alpha1.DataSourcePluginService/AddAPBinding"
+	DataSourcePluginService_DestroyAPBinding_FullMethodName           = "/proto.cofidectl_plugin.v1alpha1.DataSourcePluginService/DestroyAPBinding"
+	DataSourcePluginService_AddFederation_FullMethodName              = "/proto.cofidectl_plugin.v1alpha1.DataSourcePluginService/AddFederation"
+	DataSourcePluginService_ListFederations_FullMethodName            = "/proto.cofidectl_plugin.v1alpha1.DataSourcePluginService/ListFederations"
+	DataSourcePluginService_ListFederationsByTrustZone_FullMethodName = "/proto.cofidectl_plugin.v1alpha1.DataSourcePluginService/ListFederationsByTrustZone"
 )
 
 // DataSourcePluginServiceClient is the client API for DataSourcePluginService service.
 //
 // For semantics around ctx use and closing/ending streaming RPCs, please refer to https://pkg.go.dev/google.golang.org/grpc/?tab=doc#ClientConn.NewStream.
 type DataSourcePluginServiceClient interface {
+	Validate(ctx context.Context, in *ValidateRequest, opts ...grpc.CallOption) (*ValidateResponse, error)
+	GetTrustZone(ctx context.Context, in *GetTrustZoneRequest, opts ...grpc.CallOption) (*GetTrustZoneResponse, error)
 	ListTrustZones(ctx context.Context, in *ListTrustZonesRequest, opts ...grpc.CallOption) (*ListTrustZonesResponse, error)
+	AddTrustZone(ctx context.Context, in *AddTrustZoneRequest, opts ...grpc.CallOption) (*AddTrustZoneResponse, error)
+	UpdateTrustZone(ctx context.Context, in *UpdateTrustZoneRequest, opts ...grpc.CallOption) (*UpdateTrustZoneResponse, error)
+	AddAttestationPolicy(ctx context.Context, in *AddAttestationPolicyRequest, opts ...grpc.CallOption) (*AddAttestationPolicyResponse, error)
+	GetAttestationPolicy(ctx context.Context, in *GetAttestationPolicyRequest, opts ...grpc.CallOption) (*GetAttestationPolicyResponse, error)
+	ListAttestationPolicies(ctx context.Context, in *ListAttestationPoliciesRequest, opts ...grpc.CallOption) (*ListAttestationPoliciesResponse, error)
+	AddAPBinding(ctx context.Context, in *AddAPBindingRequest, opts ...grpc.CallOption) (*AddAPBindingResponse, error)
+	DestroyAPBinding(ctx context.Context, in *DestroyAPBindingRequest, opts ...grpc.CallOption) (*DestroyAPBindingResponse, error)
+	AddFederation(ctx context.Context, in *AddFederationRequest, opts ...grpc.CallOption) (*AddFederationResponse, error)
+	ListFederations(ctx context.Context, in *ListFederationsRequest, opts ...grpc.CallOption) (*ListFederationsResponse, error)
+	ListFederationsByTrustZone(ctx context.Context, in *ListFederationsByTrustZoneRequest, opts ...grpc.CallOption) (*ListFederationsByTrustZoneResponse, error)
 }
 
 type dataSourcePluginServiceClient struct {
@@ -40,6 +64,26 @@ func NewDataSourcePluginServiceClient(cc grpc.ClientConnInterface) DataSourcePlu
 	return &dataSourcePluginServiceClient{cc}
 }
 
+func (c *dataSourcePluginServiceClient) Validate(ctx context.Context, in *ValidateRequest, opts ...grpc.CallOption) (*ValidateResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(ValidateResponse)
+	err := c.cc.Invoke(ctx, DataSourcePluginService_Validate_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *dataSourcePluginServiceClient) GetTrustZone(ctx context.Context, in *GetTrustZoneRequest, opts ...grpc.CallOption) (*GetTrustZoneResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(GetTrustZoneResponse)
+	err := c.cc.Invoke(ctx, DataSourcePluginService_GetTrustZone_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
 func (c *dataSourcePluginServiceClient) ListTrustZones(ctx context.Context, in *ListTrustZonesRequest, opts ...grpc.CallOption) (*ListTrustZonesResponse, error) {
 	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
 	out := new(ListTrustZonesResponse)
@@ -50,11 +94,123 @@ func (c *dataSourcePluginServiceClient) ListTrustZones(ctx context.Context, in *
 	return out, nil
 }
 
+func (c *dataSourcePluginServiceClient) AddTrustZone(ctx context.Context, in *AddTrustZoneRequest, opts ...grpc.CallOption) (*AddTrustZoneResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(AddTrustZoneResponse)
+	err := c.cc.Invoke(ctx, DataSourcePluginService_AddTrustZone_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *dataSourcePluginServiceClient) UpdateTrustZone(ctx context.Context, in *UpdateTrustZoneRequest, opts ...grpc.CallOption) (*UpdateTrustZoneResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(UpdateTrustZoneResponse)
+	err := c.cc.Invoke(ctx, DataSourcePluginService_UpdateTrustZone_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *dataSourcePluginServiceClient) AddAttestationPolicy(ctx context.Context, in *AddAttestationPolicyRequest, opts ...grpc.CallOption) (*AddAttestationPolicyResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(AddAttestationPolicyResponse)
+	err := c.cc.Invoke(ctx, DataSourcePluginService_AddAttestationPolicy_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *dataSourcePluginServiceClient) GetAttestationPolicy(ctx context.Context, in *GetAttestationPolicyRequest, opts ...grpc.CallOption) (*GetAttestationPolicyResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(GetAttestationPolicyResponse)
+	err := c.cc.Invoke(ctx, DataSourcePluginService_GetAttestationPolicy_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *dataSourcePluginServiceClient) ListAttestationPolicies(ctx context.Context, in *ListAttestationPoliciesRequest, opts ...grpc.CallOption) (*ListAttestationPoliciesResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(ListAttestationPoliciesResponse)
+	err := c.cc.Invoke(ctx, DataSourcePluginService_ListAttestationPolicies_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *dataSourcePluginServiceClient) AddAPBinding(ctx context.Context, in *AddAPBindingRequest, opts ...grpc.CallOption) (*AddAPBindingResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(AddAPBindingResponse)
+	err := c.cc.Invoke(ctx, DataSourcePluginService_AddAPBinding_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *dataSourcePluginServiceClient) DestroyAPBinding(ctx context.Context, in *DestroyAPBindingRequest, opts ...grpc.CallOption) (*DestroyAPBindingResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(DestroyAPBindingResponse)
+	err := c.cc.Invoke(ctx, DataSourcePluginService_DestroyAPBinding_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *dataSourcePluginServiceClient) AddFederation(ctx context.Context, in *AddFederationRequest, opts ...grpc.CallOption) (*AddFederationResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(AddFederationResponse)
+	err := c.cc.Invoke(ctx, DataSourcePluginService_AddFederation_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *dataSourcePluginServiceClient) ListFederations(ctx context.Context, in *ListFederationsRequest, opts ...grpc.CallOption) (*ListFederationsResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(ListFederationsResponse)
+	err := c.cc.Invoke(ctx, DataSourcePluginService_ListFederations_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
+func (c *dataSourcePluginServiceClient) ListFederationsByTrustZone(ctx context.Context, in *ListFederationsByTrustZoneRequest, opts ...grpc.CallOption) (*ListFederationsByTrustZoneResponse, error) {
+	cOpts := append([]grpc.CallOption{grpc.StaticMethod()}, opts...)
+	out := new(ListFederationsByTrustZoneResponse)
+	err := c.cc.Invoke(ctx, DataSourcePluginService_ListFederationsByTrustZone_FullMethodName, in, out, cOpts...)
+	if err != nil {
+		return nil, err
+	}
+	return out, nil
+}
+
 // DataSourcePluginServiceServer is the server API for DataSourcePluginService service.
 // All implementations should embed UnimplementedDataSourcePluginServiceServer
 // for forward compatibility.
 type DataSourcePluginServiceServer interface {
+	Validate(context.Context, *ValidateRequest) (*ValidateResponse, error)
+	GetTrustZone(context.Context, *GetTrustZoneRequest) (*GetTrustZoneResponse, error)
 	ListTrustZones(context.Context, *ListTrustZonesRequest) (*ListTrustZonesResponse, error)
+	AddTrustZone(context.Context, *AddTrustZoneRequest) (*AddTrustZoneResponse, error)
+	UpdateTrustZone(context.Context, *UpdateTrustZoneRequest) (*UpdateTrustZoneResponse, error)
+	AddAttestationPolicy(context.Context, *AddAttestationPolicyRequest) (*AddAttestationPolicyResponse, error)
+	GetAttestationPolicy(context.Context, *GetAttestationPolicyRequest) (*GetAttestationPolicyResponse, error)
+	ListAttestationPolicies(context.Context, *ListAttestationPoliciesRequest) (*ListAttestationPoliciesResponse, error)
+	AddAPBinding(context.Context, *AddAPBindingRequest) (*AddAPBindingResponse, error)
+	DestroyAPBinding(context.Context, *DestroyAPBindingRequest) (*DestroyAPBindingResponse, error)
+	AddFederation(context.Context, *AddFederationRequest) (*AddFederationResponse, error)
+	ListFederations(context.Context, *ListFederationsRequest) (*ListFederationsResponse, error)
+	ListFederationsByTrustZone(context.Context, *ListFederationsByTrustZoneRequest) (*ListFederationsByTrustZoneResponse, error)
 }
 
 // UnimplementedDataSourcePluginServiceServer should be embedded to have
@@ -64,9 +220,45 @@ type DataSourcePluginServiceServer interface {
 // pointer dereference when methods are called.
 type UnimplementedDataSourcePluginServiceServer struct{}
 
+func (UnimplementedDataSourcePluginServiceServer) Validate(context.Context, *ValidateRequest) (*ValidateResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method Validate not implemented")
+}
+func (UnimplementedDataSourcePluginServiceServer) GetTrustZone(context.Context, *GetTrustZoneRequest) (*GetTrustZoneResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method GetTrustZone not implemented")
+}
 func (UnimplementedDataSourcePluginServiceServer) ListTrustZones(context.Context, *ListTrustZonesRequest) (*ListTrustZonesResponse, error) {
 	return nil, status.Errorf(codes.Unimplemented, "method ListTrustZones not implemented")
 }
+func (UnimplementedDataSourcePluginServiceServer) AddTrustZone(context.Context, *AddTrustZoneRequest) (*AddTrustZoneResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method AddTrustZone not implemented")
+}
+func (UnimplementedDataSourcePluginServiceServer) UpdateTrustZone(context.Context, *UpdateTrustZoneRequest) (*UpdateTrustZoneResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method UpdateTrustZone not implemented")
+}
+func (UnimplementedDataSourcePluginServiceServer) AddAttestationPolicy(context.Context, *AddAttestationPolicyRequest) (*AddAttestationPolicyResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method AddAttestationPolicy not implemented")
+}
+func (UnimplementedDataSourcePluginServiceServer) GetAttestationPolicy(context.Context, *GetAttestationPolicyRequest) (*GetAttestationPolicyResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method GetAttestationPolicy not implemented")
+}
+func (UnimplementedDataSourcePluginServiceServer) ListAttestationPolicies(context.Context, *ListAttestationPoliciesRequest) (*ListAttestationPoliciesResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method ListAttestationPolicies not implemented")
+}
+func (UnimplementedDataSourcePluginServiceServer) AddAPBinding(context.Context, *AddAPBindingRequest) (*AddAPBindingResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method AddAPBinding not implemented")
+}
+func (UnimplementedDataSourcePluginServiceServer) DestroyAPBinding(context.Context, *DestroyAPBindingRequest) (*DestroyAPBindingResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method DestroyAPBinding not implemented")
+}
+func (UnimplementedDataSourcePluginServiceServer) AddFederation(context.Context, *AddFederationRequest) (*AddFederationResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method AddFederation not implemented")
+}
+func (UnimplementedDataSourcePluginServiceServer) ListFederations(context.Context, *ListFederationsRequest) (*ListFederationsResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method ListFederations not implemented")
+}
+func (UnimplementedDataSourcePluginServiceServer) ListFederationsByTrustZone(context.Context, *ListFederationsByTrustZoneRequest) (*ListFederationsByTrustZoneResponse, error) {
+	return nil, status.Errorf(codes.Unimplemented, "method ListFederationsByTrustZone not implemented")
+}
 func (UnimplementedDataSourcePluginServiceServer) testEmbeddedByValue() {}
 
 // UnsafeDataSourcePluginServiceServer may be embedded to opt out of forward compatibility for this service.
@@ -87,6 +279,42 @@ func RegisterDataSourcePluginServiceServer(s grpc.ServiceRegistrar, srv DataSour
 	s.RegisterService(&DataSourcePluginService_ServiceDesc, srv)
 }
 
+func _DataSourcePluginService_Validate_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(ValidateRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(DataSourcePluginServiceServer).Validate(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: DataSourcePluginService_Validate_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(DataSourcePluginServiceServer).Validate(ctx, req.(*ValidateRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _DataSourcePluginService_GetTrustZone_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(GetTrustZoneRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(DataSourcePluginServiceServer).GetTrustZone(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: DataSourcePluginService_GetTrustZone_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(DataSourcePluginServiceServer).GetTrustZone(ctx, req.(*GetTrustZoneRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
 func _DataSourcePluginService_ListTrustZones_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
 	in := new(ListTrustZonesRequest)
 	if err := dec(in); err != nil {
@@ -105,6 +333,186 @@ func _DataSourcePluginService_ListTrustZones_Handler(srv interface{}, ctx contex
 	return interceptor(ctx, in, info, handler)
 }
 
+func _DataSourcePluginService_AddTrustZone_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(AddTrustZoneRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(DataSourcePluginServiceServer).AddTrustZone(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: DataSourcePluginService_AddTrustZone_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(DataSourcePluginServiceServer).AddTrustZone(ctx, req.(*AddTrustZoneRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _DataSourcePluginService_UpdateTrustZone_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(UpdateTrustZoneRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(DataSourcePluginServiceServer).UpdateTrustZone(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: DataSourcePluginService_UpdateTrustZone_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(DataSourcePluginServiceServer).UpdateTrustZone(ctx, req.(*UpdateTrustZoneRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _DataSourcePluginService_AddAttestationPolicy_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(AddAttestationPolicyRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(DataSourcePluginServiceServer).AddAttestationPolicy(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: DataSourcePluginService_AddAttestationPolicy_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(DataSourcePluginServiceServer).AddAttestationPolicy(ctx, req.(*AddAttestationPolicyRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _DataSourcePluginService_GetAttestationPolicy_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(GetAttestationPolicyRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(DataSourcePluginServiceServer).GetAttestationPolicy(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: DataSourcePluginService_GetAttestationPolicy_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(DataSourcePluginServiceServer).GetAttestationPolicy(ctx, req.(*GetAttestationPolicyRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _DataSourcePluginService_ListAttestationPolicies_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(ListAttestationPoliciesRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(DataSourcePluginServiceServer).ListAttestationPolicies(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: DataSourcePluginService_ListAttestationPolicies_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(DataSourcePluginServiceServer).ListAttestationPolicies(ctx, req.(*ListAttestationPoliciesRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _DataSourcePluginService_AddAPBinding_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(AddAPBindingRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(DataSourcePluginServiceServer).AddAPBinding(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: DataSourcePluginService_AddAPBinding_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(DataSourcePluginServiceServer).AddAPBinding(ctx, req.(*AddAPBindingRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _DataSourcePluginService_DestroyAPBinding_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(DestroyAPBindingRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(DataSourcePluginServiceServer).DestroyAPBinding(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: DataSourcePluginService_DestroyAPBinding_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(DataSourcePluginServiceServer).DestroyAPBinding(ctx, req.(*DestroyAPBindingRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _DataSourcePluginService_AddFederation_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(AddFederationRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(DataSourcePluginServiceServer).AddFederation(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: DataSourcePluginService_AddFederation_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(DataSourcePluginServiceServer).AddFederation(ctx, req.(*AddFederationRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _DataSourcePluginService_ListFederations_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(ListFederationsRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(DataSourcePluginServiceServer).ListFederations(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: DataSourcePluginService_ListFederations_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(DataSourcePluginServiceServer).ListFederations(ctx, req.(*ListFederationsRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
+func _DataSourcePluginService_ListFederationsByTrustZone_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) {
+	in := new(ListFederationsByTrustZoneRequest)
+	if err := dec(in); err != nil {
+		return nil, err
+	}
+	if interceptor == nil {
+		return srv.(DataSourcePluginServiceServer).ListFederationsByTrustZone(ctx, in)
+	}
+	info := &grpc.UnaryServerInfo{
+		Server:     srv,
+		FullMethod: DataSourcePluginService_ListFederationsByTrustZone_FullMethodName,
+	}
+	handler := func(ctx context.Context, req interface{}) (interface{}, error) {
+		return srv.(DataSourcePluginServiceServer).ListFederationsByTrustZone(ctx, req.(*ListFederationsByTrustZoneRequest))
+	}
+	return interceptor(ctx, in, info, handler)
+}
+
 // DataSourcePluginService_ServiceDesc is the grpc.ServiceDesc for DataSourcePluginService service.
 // It's only intended for direct use with grpc.RegisterService,
 // and not to be introspected or modified (even as a copy)
@@ -112,10 +520,58 @@ var DataSourcePluginService_ServiceDesc = grpc.ServiceDesc{
 	ServiceName: "proto.cofidectl_plugin.v1alpha1.DataSourcePluginService",
 	HandlerType: (*DataSourcePluginServiceServer)(nil),
 	Methods: []grpc.MethodDesc{
+		{
+			MethodName: "Validate",
+			Handler:    _DataSourcePluginService_Validate_Handler,
+		},
+		{
+			MethodName: "GetTrustZone",
+			Handler:    _DataSourcePluginService_GetTrustZone_Handler,
+		},
 		{
 			MethodName: "ListTrustZones",
 			Handler:    _DataSourcePluginService_ListTrustZones_Handler,
 		},
+		{
+			MethodName: "AddTrustZone",
+			Handler:    _DataSourcePluginService_AddTrustZone_Handler,
+		},
+		{
+			MethodName: "UpdateTrustZone",
+			Handler:    _DataSourcePluginService_UpdateTrustZone_Handler,
+		},
+		{
+			MethodName: "AddAttestationPolicy",
+			Handler:    _DataSourcePluginService_AddAttestationPolicy_Handler,
+		},
+		{
+			MethodName: "GetAttestationPolicy",
+			Handler:    _DataSourcePluginService_GetAttestationPolicy_Handler,
+		},
+		{
+			MethodName: "ListAttestationPolicies",
+			Handler:    _DataSourcePluginService_ListAttestationPolicies_Handler,
+		},
+		{
+			MethodName: "AddAPBinding",
+			Handler:    _DataSourcePluginService_AddAPBinding_Handler,
+		},
+		{
+			MethodName: "DestroyAPBinding",
+			Handler:    _DataSourcePluginService_DestroyAPBinding_Handler,
+		},
+		{
+			MethodName: "AddFederation",
+			Handler:    _DataSourcePluginService_AddFederation_Handler,
+		},
+		{
+			MethodName: "ListFederations",
+			Handler:    _DataSourcePluginService_ListFederations_Handler,
+		},
+		{
+			MethodName: "ListFederationsByTrustZone",
+			Handler:    _DataSourcePluginService_ListFederationsByTrustZone_Handler,
+		},
 	},
 	Streams:  []grpc.StreamDesc{},
 	Metadata: "proto/cofidectl_plugin/v1alpha1/plugin.proto",
diff --git a/proto/cofidectl_plugin/v1alpha1/plugin.proto b/proto/cofidectl_plugin/v1alpha1/plugin.proto
index 8d09e30..644d231 100644
--- a/proto/cofidectl_plugin/v1alpha1/plugin.proto
+++ b/proto/cofidectl_plugin/v1alpha1/plugin.proto
@@ -5,12 +5,43 @@ syntax = "proto3";
 
 package proto.cofidectl_plugin.v1alpha1;
 
+import "proto/ap_binding/v1alpha1/ap_binding.proto";
+import "proto/attestation_policy/v1alpha1/attestation_policy.proto";
+import "proto/federation/v1alpha1/federation.proto";
 import "proto/trust_zone/v1alpha1/trust_zone.proto";
 
 option go_package = "github.com/cofide/cofide-api-sdk/gen/go/proto/cofidectl_plugin/v1alpha1";
 
 service DataSourcePluginService {
+  rpc Validate(ValidateRequest) returns (ValidateResponse);
+
+  rpc GetTrustZone(GetTrustZoneRequest) returns (GetTrustZoneResponse);
   rpc ListTrustZones(ListTrustZonesRequest) returns (ListTrustZonesResponse);
+  rpc AddTrustZone(AddTrustZoneRequest) returns (AddTrustZoneResponse);
+  rpc UpdateTrustZone(UpdateTrustZoneRequest) returns (UpdateTrustZoneResponse);
+
+  rpc AddAttestationPolicy(AddAttestationPolicyRequest) returns (AddAttestationPolicyResponse);
+  rpc GetAttestationPolicy(GetAttestationPolicyRequest) returns (GetAttestationPolicyResponse);
+  rpc ListAttestationPolicies(ListAttestationPoliciesRequest) returns (ListAttestationPoliciesResponse);
+
+  rpc AddAPBinding(AddAPBindingRequest) returns (AddAPBindingResponse);
+  rpc DestroyAPBinding(DestroyAPBindingRequest) returns (DestroyAPBindingResponse);
+
+  rpc AddFederation(AddFederationRequest) returns (AddFederationResponse);
+  rpc ListFederations(ListFederationsRequest) returns (ListFederationsResponse);
+  rpc ListFederationsByTrustZone(ListFederationsByTrustZoneRequest) returns (ListFederationsByTrustZoneResponse);
+}
+
+message ValidateRequest {}
+
+message ValidateResponse {}
+
+message GetTrustZoneRequest {
+  optional string name = 1;
+}
+
+message GetTrustZoneResponse {
+  optional proto.trust_zone.v1alpha1.TrustZone trust_zone = 1;
 }
 
 message ListTrustZonesRequest {}
@@ -18,3 +49,75 @@ message ListTrustZonesRequest {}
 message ListTrustZonesResponse {
   repeated proto.trust_zone.v1alpha1.TrustZone trust_zones = 1;
 }
+
+message AddTrustZoneRequest {
+  optional proto.trust_zone.v1alpha1.TrustZone trust_zone = 1;
+}
+
+message AddTrustZoneResponse {
+  optional proto.trust_zone.v1alpha1.TrustZone trust_zone = 1;
+}
+
+message UpdateTrustZoneRequest {
+  optional proto.trust_zone.v1alpha1.TrustZone trust_zone = 1;
+}
+
+message UpdateTrustZoneResponse {}
+
+message AddAttestationPolicyRequest {
+  optional proto.attestation_policy.v1alpha1.AttestationPolicy policy = 1;
+}
+
+message AddAttestationPolicyResponse {
+  optional proto.attestation_policy.v1alpha1.AttestationPolicy policy = 1;
+}
+
+message GetAttestationPolicyRequest {
+  optional string name = 1;
+}
+
+message GetAttestationPolicyResponse {
+  proto.attestation_policy.v1alpha1.AttestationPolicy policy = 1;
+}
+
+message ListAttestationPoliciesRequest {}
+
+message ListAttestationPoliciesResponse {
+  repeated proto.attestation_policy.v1alpha1.AttestationPolicy policies = 1;
+}
+
+message AddAPBindingRequest {
+  optional proto.ap_binding.v1alpha1.APBinding binding = 1;
+}
+
+message AddAPBindingResponse {
+  optional proto.ap_binding.v1alpha1.APBinding binding = 1;
+}
+
+message DestroyAPBindingRequest {
+  optional proto.ap_binding.v1alpha1.APBinding binding = 1;
+}
+
+message DestroyAPBindingResponse {}
+
+message AddFederationRequest {
+  optional proto.federation.v1alpha1.Federation federation = 1;
+}
+
+message AddFederationResponse {
+  optional proto.federation.v1alpha1.Federation federation = 1;
+}
+
+message ListFederationsRequest {}
+
+message ListFederationsResponse {
+  repeated proto.federation.v1alpha1.Federation federations = 1;
+}
+
+message ListFederationsByTrustZoneRequest {
+  optional string trust_zone_name = 1;
+}
+
+message ListFederationsByTrustZoneResponse {
+  repeated proto.federation.v1alpha1.Federation federations = 1;
+}