feat: config.

api/gen/go/conf/v1/kratos_conf_authn.pb.go

@@ -24,8 +24,11 @@ const (
 
 // 认证
 type Authentication struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
+	state         protoimpl.MessageState       `protogen:"open.v1"`
-	Jwt           *Authentication_Jwt    `protobuf:"bytes,1,opt,name=jwt,proto3,oneof" json:"jwt,omitempty"`
+	Type          string                       `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
+	Jwt           *Authentication_Jwt          `protobuf:"bytes,2,opt,name=jwt,proto3,oneof" json:"jwt,omitempty"`                                       // JWT 认证
+	Oidc          *Authentication_OIDC         `protobuf:"bytes,3,opt,name=oidc,proto3,oneof" json:"oidc,omitempty"`                                     // OIDC
+	PresharedKey  *Authentication_PresharedKey `protobuf:"bytes,4,opt,name=preshared_key,json=presharedKey,proto3,oneof" json:"preshared_key,omitempty"` // 预共享密钥
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
 }
@@ -60,6 +63,13 @@ func (*Authentication) Descriptor() ([]byte, []int) {
 	return file_conf_v1_kratos_conf_authn_proto_rawDescGZIP(), []int{0}
 }
 
+func (x *Authentication) GetType() string {
+	if x != nil {
+		return x.Type
+	}
+	return ""
+}
+
 func (x *Authentication) GetJwt() *Authentication_Jwt {
 	if x != nil {
 		return x.Jwt
@@ -67,6 +77,20 @@ func (x *Authentication) GetJwt() *Authentication_Jwt {
 	return nil
 }
 
+func (x *Authentication) GetOidc() *Authentication_OIDC {
+	if x != nil {
+		return x.Oidc
+	}
+	return nil
+}
+
+func (x *Authentication) GetPresharedKey() *Authentication_PresharedKey {
+	if x != nil {
+		return x.PresharedKey
+	}
+	return nil
+}
+
 // JWT
 type Authentication_Jwt struct {
 	state         protoimpl.MessageState `protogen:"open.v1"`
@@ -120,6 +144,110 @@ func (x *Authentication_Jwt) GetKey() string {
 	return ""
 }
 
+type Authentication_OIDC struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	IssuerUrl     string                 `protobuf:"bytes,1,opt,name=issuer_url,json=issuerUrl,proto3" json:"issuer_url,omitempty"`
+	Audience      string                 `protobuf:"bytes,2,opt,name=audience,proto3" json:"audience,omitempty"`
+	Method        string                 `protobuf:"bytes,3,opt,name=method,proto3" json:"method,omitempty"` // JWT签名的算法，支持算法：HS256
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *Authentication_OIDC) Reset() {
+	*x = Authentication_OIDC{}
+	mi := &file_conf_v1_kratos_conf_authn_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *Authentication_OIDC) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*Authentication_OIDC) ProtoMessage() {}
+
+func (x *Authentication_OIDC) ProtoReflect() protoreflect.Message {
+	mi := &file_conf_v1_kratos_conf_authn_proto_msgTypes[2]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use Authentication_OIDC.ProtoReflect.Descriptor instead.
+func (*Authentication_OIDC) Descriptor() ([]byte, []int) {
+	return file_conf_v1_kratos_conf_authn_proto_rawDescGZIP(), []int{0, 1}
+}
+
+func (x *Authentication_OIDC) GetIssuerUrl() string {
+	if x != nil {
+		return x.IssuerUrl
+	}
+	return ""
+}
+
+func (x *Authentication_OIDC) GetAudience() string {
+	if x != nil {
+		return x.Audience
+	}
+	return ""
+}
+
+func (x *Authentication_OIDC) GetMethod() string {
+	if x != nil {
+		return x.Method
+	}
+	return ""
+}
+
+type Authentication_PresharedKey struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	ValidKeys     []string               `protobuf:"bytes,1,rep,name=valid_keys,json=validKeys,proto3" json:"valid_keys,omitempty"`
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *Authentication_PresharedKey) Reset() {
+	*x = Authentication_PresharedKey{}
+	mi := &file_conf_v1_kratos_conf_authn_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *Authentication_PresharedKey) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*Authentication_PresharedKey) ProtoMessage() {}
+
+func (x *Authentication_PresharedKey) ProtoReflect() protoreflect.Message {
+	mi := &file_conf_v1_kratos_conf_authn_proto_msgTypes[3]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use Authentication_PresharedKey.ProtoReflect.Descriptor instead.
+func (*Authentication_PresharedKey) Descriptor() ([]byte, []int) {
+	return file_conf_v1_kratos_conf_authn_proto_rawDescGZIP(), []int{0, 2}
+}
+
+func (x *Authentication_PresharedKey) GetValidKeys() []string {
+	if x != nil {
+		return x.ValidKeys
+	}
+	return nil
+}
+
 var File_conf_v1_kratos_conf_authn_proto protoreflect.FileDescriptor
 
 var file_conf_v1_kratos_conf_authn_proto_rawDesc = string([]byte{
@@ -127,24 +255,43 @@ var file_conf_v1_kratos_conf_authn_proto_rawDesc = string([]byte{
 	0x5f, 0x63, 0x6f, 0x6e, 0x66, 0x5f, 0x61, 0x75, 0x74, 0x68, 0x6e, 0x2e, 0x70, 0x72, 0x6f, 0x74,
 	0x6f, 0x12, 0x04, 0x63, 0x6f, 0x6e, 0x66, 0x1a, 0x1e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2f,
 	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2f, 0x64, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f,
-	0x6e, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22, 0x7a, 0x0a, 0x0e, 0x41, 0x75, 0x74, 0x68, 0x65,
+	0x6e, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22, 0xb4, 0x03, 0x0a, 0x0e, 0x41, 0x75, 0x74, 0x68,
-	0x6e, 0x74, 0x69, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x2f, 0x0a, 0x03, 0x6a, 0x77, 0x74,
+	0x65, 0x6e, 0x74, 0x69, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x12, 0x0a, 0x04, 0x74, 0x79,
-	0x18, 0x01, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x18, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x2e, 0x41, 0x75,
+	0x70, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x74, 0x79, 0x70, 0x65, 0x12, 0x2f,
-	0x74, 0x68, 0x65, 0x6e, 0x74, 0x69, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x4a, 0x77, 0x74,
+	0x0a, 0x03, 0x6a, 0x77, 0x74, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x18, 0x2e, 0x63, 0x6f,
-	0x48, 0x00, 0x52, 0x03, 0x6a, 0x77, 0x74, 0x88, 0x01, 0x01, 0x1a, 0x2f, 0x0a, 0x03, 0x4a, 0x77,
+	0x6e, 0x66, 0x2e, 0x41, 0x75, 0x74, 0x68, 0x65, 0x6e, 0x74, 0x69, 0x63, 0x61, 0x74, 0x69, 0x6f,
-	0x74, 0x12, 0x16, 0x0a, 0x06, 0x6d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x6e, 0x2e, 0x4a, 0x77, 0x74, 0x48, 0x00, 0x52, 0x03, 0x6a, 0x77, 0x74, 0x88, 0x01, 0x01, 0x12,
-	0x09, 0x52, 0x06, 0x6d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79,
+	0x32, 0x0a, 0x04, 0x6f, 0x69, 0x64, 0x63, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x19, 0x2e,
-	0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x42, 0x06, 0x0a, 0x04, 0x5f,
+	0x63, 0x6f, 0x6e, 0x66, 0x2e, 0x41, 0x75, 0x74, 0x68, 0x65, 0x6e, 0x74, 0x69, 0x63, 0x61, 0x74,
-	0x6a, 0x77, 0x74, 0x42, 0x86, 0x01, 0x0a, 0x08, 0x63, 0x6f, 0x6d, 0x2e, 0x63, 0x6f, 0x6e, 0x66,
+	0x69, 0x6f, 0x6e, 0x2e, 0x4f, 0x49, 0x44, 0x43, 0x48, 0x01, 0x52, 0x04, 0x6f, 0x69, 0x64, 0x63,
-	0x42, 0x14, 0x4b, 0x72, 0x61, 0x74, 0x6f, 0x73, 0x43, 0x6f, 0x6e, 0x66, 0x41, 0x75, 0x74, 0x68,
+	0x88, 0x01, 0x01, 0x12, 0x4b, 0x0a, 0x0d, 0x70, 0x72, 0x65, 0x73, 0x68, 0x61, 0x72, 0x65, 0x64,
-	0x6e, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x34, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62,
+	0x5f, 0x6b, 0x65, 0x79, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x63, 0x6f, 0x6e,
-	0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x74, 0x78, 0x37, 0x64, 0x6f, 0x2f, 0x6b, 0x72, 0x61, 0x74, 0x6f,
+	0x66, 0x2e, 0x41, 0x75, 0x74, 0x68, 0x65, 0x6e, 0x74, 0x69, 0x63, 0x61, 0x74, 0x69, 0x6f, 0x6e,
-	0x73, 0x2d, 0x62, 0x6f, 0x6f, 0x74, 0x73, 0x74, 0x72, 0x61, 0x70, 0x2f, 0x61, 0x70, 0x69, 0x2f,
+	0x2e, 0x50, 0x72, 0x65, 0x73, 0x68, 0x61, 0x72, 0x65, 0x64, 0x4b, 0x65, 0x79, 0x48, 0x02, 0x52,
-	0x67, 0x65, 0x6e, 0x2f, 0x67, 0x6f, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x2f, 0x76, 0x31, 0xa2, 0x02,
+	0x0c, 0x70, 0x72, 0x65, 0x73, 0x68, 0x61, 0x72, 0x65, 0x64, 0x4b, 0x65, 0x79, 0x88, 0x01, 0x01,
-	0x03, 0x43, 0x58, 0x58, 0xaa, 0x02, 0x04, 0x43, 0x6f, 0x6e, 0x66, 0xca, 0x02, 0x04, 0x43, 0x6f,
+	0x1a, 0x2f, 0x0a, 0x03, 0x4a, 0x77, 0x74, 0x12, 0x16, 0x0a, 0x06, 0x6d, 0x65, 0x74, 0x68, 0x6f,
-	0x6e, 0x66, 0xe2, 0x02, 0x10, 0x43, 0x6f, 0x6e, 0x66, 0x5c, 0x47, 0x50, 0x42, 0x4d, 0x65, 0x74,
+	0x64, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x6d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x12,
-	0x61, 0x64, 0x61, 0x74, 0x61, 0xea, 0x02, 0x04, 0x43, 0x6f, 0x6e, 0x66, 0x62, 0x06, 0x70, 0x72,
+	0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65,
-	0x6f, 0x74, 0x6f, 0x33,
+	0x79, 0x1a, 0x59, 0x0a, 0x04, 0x4f, 0x49, 0x44, 0x43, 0x12, 0x1d, 0x0a, 0x0a, 0x69, 0x73, 0x73,
+	0x75, 0x65, 0x72, 0x5f, 0x75, 0x72, 0x6c, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x09, 0x69,
+	0x73, 0x73, 0x75, 0x65, 0x72, 0x55, 0x72, 0x6c, 0x12, 0x1a, 0x0a, 0x08, 0x61, 0x75, 0x64, 0x69,
+	0x65, 0x6e, 0x63, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x61, 0x75, 0x64, 0x69,
+	0x65, 0x6e, 0x63, 0x65, 0x12, 0x16, 0x0a, 0x06, 0x6d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x18, 0x03,
+	0x20, 0x01, 0x28, 0x09, 0x52, 0x06, 0x6d, 0x65, 0x74, 0x68, 0x6f, 0x64, 0x1a, 0x2d, 0x0a, 0x0c,
+	0x50, 0x72, 0x65, 0x73, 0x68, 0x61, 0x72, 0x65, 0x64, 0x4b, 0x65, 0x79, 0x12, 0x1d, 0x0a, 0x0a,
+	0x76, 0x61, 0x6c, 0x69, 0x64, 0x5f, 0x6b, 0x65, 0x79, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x09,
+	0x52, 0x09, 0x76, 0x61, 0x6c, 0x69, 0x64, 0x4b, 0x65, 0x79, 0x73, 0x42, 0x06, 0x0a, 0x04, 0x5f,
+	0x6a, 0x77, 0x74, 0x42, 0x07, 0x0a, 0x05, 0x5f, 0x6f, 0x69, 0x64, 0x63, 0x42, 0x10, 0x0a, 0x0e,
+	0x5f, 0x70, 0x72, 0x65, 0x73, 0x68, 0x61, 0x72, 0x65, 0x64, 0x5f, 0x6b, 0x65, 0x79, 0x42, 0x86,
+	0x01, 0x0a, 0x08, 0x63, 0x6f, 0x6d, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x42, 0x14, 0x4b, 0x72, 0x61,
+	0x74, 0x6f, 0x73, 0x43, 0x6f, 0x6e, 0x66, 0x41, 0x75, 0x74, 0x68, 0x6e, 0x50, 0x72, 0x6f, 0x74,
+	0x6f, 0x50, 0x01, 0x5a, 0x34, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f,
+	0x74, 0x78, 0x37, 0x64, 0x6f, 0x2f, 0x6b, 0x72, 0x61, 0x74, 0x6f, 0x73, 0x2d, 0x62, 0x6f, 0x6f,
+	0x74, 0x73, 0x74, 0x72, 0x61, 0x70, 0x2f, 0x61, 0x70, 0x69, 0x2f, 0x67, 0x65, 0x6e, 0x2f, 0x67,
+	0x6f, 0x2f, 0x63, 0x6f, 0x6e, 0x66, 0x2f, 0x76, 0x31, 0xa2, 0x02, 0x03, 0x43, 0x58, 0x58, 0xaa,
+	0x02, 0x04, 0x43, 0x6f, 0x6e, 0x66, 0xca, 0x02, 0x04, 0x43, 0x6f, 0x6e, 0x66, 0xe2, 0x02, 0x10,
+	0x43, 0x6f, 0x6e, 0x66, 0x5c, 0x47, 0x50, 0x42, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61,
+	0xea, 0x02, 0x04, 0x43, 0x6f, 0x6e, 0x66, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 })
 
 var (
@@ -159,18 +306,22 @@ func file_conf_v1_kratos_conf_authn_proto_rawDescGZIP() []byte {
 	return file_conf_v1_kratos_conf_authn_proto_rawDescData
 }
 
-var file_conf_v1_kratos_conf_authn_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
+var file_conf_v1_kratos_conf_authn_proto_msgTypes = make([]protoimpl.MessageInfo, 4)
 var file_conf_v1_kratos_conf_authn_proto_goTypes = []any{
-	(*Authentication)(nil),     // 0: conf.Authentication
+	(*Authentication)(nil),              // 0: conf.Authentication
-	(*Authentication_Jwt)(nil), // 1: conf.Authentication.Jwt
+	(*Authentication_Jwt)(nil),          // 1: conf.Authentication.Jwt
+	(*Authentication_OIDC)(nil),         // 2: conf.Authentication.OIDC
+	(*Authentication_PresharedKey)(nil), // 3: conf.Authentication.PresharedKey
 }
 var file_conf_v1_kratos_conf_authn_proto_depIdxs = []int32{
 	1, // 0: conf.Authentication.jwt:type_name -> conf.Authentication.Jwt
-	1, // [1:1] is the sub-list for method output_type
+	2, // 1: conf.Authentication.oidc:type_name -> conf.Authentication.OIDC
-	1, // [1:1] is the sub-list for method input_type
+	3, // 2: conf.Authentication.preshared_key:type_name -> conf.Authentication.PresharedKey
-	1, // [1:1] is the sub-list for extension type_name
+	3, // [3:3] is the sub-list for method output_type
-	1, // [1:1] is the sub-list for extension extendee
+	3, // [3:3] is the sub-list for method input_type
-	0, // [0:1] is the sub-list for field type_name
+	3, // [3:3] is the sub-list for extension type_name
+	3, // [3:3] is the sub-list for extension extendee
+	0, // [0:3] is the sub-list for field type_name
 }
 
 func init() { file_conf_v1_kratos_conf_authn_proto_init() }
@@ -185,7 +336,7 @@ func file_conf_v1_kratos_conf_authn_proto_init() {
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: unsafe.Slice(unsafe.StringData(file_conf_v1_kratos_conf_authn_proto_rawDesc), len(file_conf_v1_kratos_conf_authn_proto_rawDesc)),
 			NumEnums:      0,
-			NumMessages:   2,
+			NumMessages:   4,
 			NumExtensions: 0,
 			NumServices:   0,
 		},

api/gen/go/conf/v1/kratos_conf_authz.pb.go

@@ -24,7 +24,11 @@ const (
 
 // 授权
 type Authorization struct {
-	state         protoimpl.MessageState `protogen:"open.v1"`
+	state         protoimpl.MessageState  `protogen:"open.v1"`
+	Type          string                  `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`
+	Casbin        *Authorization_Casbin   `protobuf:"bytes,2,opt,name=casbin,proto3" json:"casbin,omitempty"`     // casbin
+	Opa           *Authorization_OPA      `protobuf:"bytes,3,opt,name=opa,proto3" json:"opa,omitempty"`           // OPA
+	Zanzibar      *Authorization_Zanzibar `protobuf:"bytes,4,opt,name=zanzibar,proto3" json:"zanzibar,omitempty"` // zanzibar
 	unknownFields protoimpl.UnknownFields
 	sizeCache     protoimpl.SizeCache
 }
@@ -59,6 +63,386 @@ func (*Authorization) Descriptor() ([]byte, []int) {
 	return file_conf_v1_kratos_conf_authz_proto_rawDescGZIP(), []int{0}
 }
 
+func (x *Authorization) GetType() string {
+	if x != nil {
+		return x.Type
+	}
+	return ""
+}
+
+func (x *Authorization) GetCasbin() *Authorization_Casbin {
+	if x != nil {
+		return x.Casbin
+	}
+	return nil
+}
+
+func (x *Authorization) GetOpa() *Authorization_OPA {
+	if x != nil {
+		return x.Opa
+	}
+	return nil
+}
+
+func (x *Authorization) GetZanzibar() *Authorization_Zanzibar {
+	if x != nil {
+		return x.Zanzibar
+	}
+	return nil
+}
+
+type Authorization_Casbin struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	ModelPath     *string                `protobuf:"bytes,1,opt,name=model_path,json=modelPath,proto3,oneof" json:"model_path,omitempty"`    // casbin 模型文件路径
+	PolicyPath    *string                `protobuf:"bytes,2,opt,name=policy_path,json=policyPath,proto3,oneof" json:"policy_path,omitempty"` // casbin 策略文件路径
+	Policies      []string               `protobuf:"bytes,10,rep,name=policies,proto3" json:"policies,omitempty"`                            // 策略列表
+	Model         *string                `protobuf:"bytes,11,opt,name=model,proto3,oneof" json:"model,omitempty"`                            // 模型内容
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *Authorization_Casbin) Reset() {
+	*x = Authorization_Casbin{}
+	mi := &file_conf_v1_kratos_conf_authz_proto_msgTypes[1]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *Authorization_Casbin) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*Authorization_Casbin) ProtoMessage() {}
+
+func (x *Authorization_Casbin) ProtoReflect() protoreflect.Message {
+	mi := &file_conf_v1_kratos_conf_authz_proto_msgTypes[1]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use Authorization_Casbin.ProtoReflect.Descriptor instead.
+func (*Authorization_Casbin) Descriptor() ([]byte, []int) {
+	return file_conf_v1_kratos_conf_authz_proto_rawDescGZIP(), []int{0, 0}
+}
+
+func (x *Authorization_Casbin) GetModelPath() string {
+	if x != nil && x.ModelPath != nil {
+		return *x.ModelPath
+	}
+	return ""
+}
+
+func (x *Authorization_Casbin) GetPolicyPath() string {
+	if x != nil && x.PolicyPath != nil {
+		return *x.PolicyPath
+	}
+	return ""
+}
+
+func (x *Authorization_Casbin) GetPolicies() []string {
+	if x != nil {
+		return x.Policies
+	}
+	return nil
+}
+
+func (x *Authorization_Casbin) GetModel() string {
+	if x != nil && x.Model != nil {
+		return *x.Model
+	}
+	return ""
+}
+
+type Authorization_OPA struct {
+	state         protoimpl.MessageState                    `protogen:"open.v1"`
+	Policies      map[string]string                         `protobuf:"bytes,1,rep,name=policies,proto3" json:"policies,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"` // OPA 策略列表
+	Roles         map[string]*Authorization_OPA_RoleActions `protobuf:"bytes,2,rep,name=roles,proto3" json:"roles,omitempty" protobuf_key:"bytes,1,opt,name=key" protobuf_val:"bytes,2,opt,name=value"`       //
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *Authorization_OPA) Reset() {
+	*x = Authorization_OPA{}
+	mi := &file_conf_v1_kratos_conf_authz_proto_msgTypes[2]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *Authorization_OPA) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*Authorization_OPA) ProtoMessage() {}
+
+func (x *Authorization_OPA) ProtoReflect() protoreflect.Message {
+	mi := &file_conf_v1_kratos_conf_authz_proto_msgTypes[2]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use Authorization_OPA.ProtoReflect.Descriptor instead.
+func (*Authorization_OPA) Descriptor() ([]byte, []int) {
+	return file_conf_v1_kratos_conf_authz_proto_rawDescGZIP(), []int{0, 1}
+}
+
+func (x *Authorization_OPA) GetPolicies() map[string]string {
+	if x != nil {
+		return x.Policies
+	}
+	return nil
+}
+
+func (x *Authorization_OPA) GetRoles() map[string]*Authorization_OPA_RoleActions {
+	if x != nil {
+		return x.Roles
+	}
+	return nil
+}
+
+type Authorization_Zanzibar struct {
+	state         protoimpl.MessageState          `protogen:"open.v1"`
+	Type          string                          `protobuf:"bytes,1,opt,name=type,proto3" json:"type,omitempty"`                            // zanzibar 类型
+	Keto          *Authorization_Zanzibar_Keto    `protobuf:"bytes,2,opt,name=keto,proto3,oneof" json:"keto,omitempty"`                      // Keto 配置
+	OpenFga       *Authorization_Zanzibar_OpenFga `protobuf:"bytes,3,opt,name=open_fga,json=openFga,proto3,oneof" json:"open_fga,omitempty"` // OpenFGA 配置
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *Authorization_Zanzibar) Reset() {
+	*x = Authorization_Zanzibar{}
+	mi := &file_conf_v1_kratos_conf_authz_proto_msgTypes[3]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *Authorization_Zanzibar) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*Authorization_Zanzibar) ProtoMessage() {}
+
+func (x *Authorization_Zanzibar) ProtoReflect() protoreflect.Message {
+	mi := &file_conf_v1_kratos_conf_authz_proto_msgTypes[3]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use Authorization_Zanzibar.ProtoReflect.Descriptor instead.
+func (*Authorization_Zanzibar) Descriptor() ([]byte, []int) {
+	return file_conf_v1_kratos_conf_authz_proto_rawDescGZIP(), []int{0, 2}
+}
+
+func (x *Authorization_Zanzibar) GetType() string {
+	if x != nil {
+		return x.Type
+	}
+	return ""
+}
+
+func (x *Authorization_Zanzibar) GetKeto() *Authorization_Zanzibar_Keto {
+	if x != nil {
+		return x.Keto
+	}
+	return nil
+}
+
+func (x *Authorization_Zanzibar) GetOpenFga() *Authorization_Zanzibar_OpenFga {
+	if x != nil {
+		return x.OpenFga
+	}
+	return nil
+}
+
+type Authorization_OPA_RoleActions struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	Actions       []string               `protobuf:"bytes,1,rep,name=actions,proto3" json:"actions,omitempty"` // 角色对应的操作列表 {
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *Authorization_OPA_RoleActions) Reset() {
+	*x = Authorization_OPA_RoleActions{}
+	mi := &file_conf_v1_kratos_conf_authz_proto_msgTypes[4]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *Authorization_OPA_RoleActions) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*Authorization_OPA_RoleActions) ProtoMessage() {}
+
+func (x *Authorization_OPA_RoleActions) ProtoReflect() protoreflect.Message {
+	mi := &file_conf_v1_kratos_conf_authz_proto_msgTypes[4]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use Authorization_OPA_RoleActions.ProtoReflect.Descriptor instead.
+func (*Authorization_OPA_RoleActions) Descriptor() ([]byte, []int) {
+	return file_conf_v1_kratos_conf_authz_proto_rawDescGZIP(), []int{0, 1, 0}
+}
+
+func (x *Authorization_OPA_RoleActions) GetActions() []string {
+	if x != nil {
+		return x.Actions
+	}
+	return nil
+}
+
+type Authorization_Zanzibar_Keto struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	WriteUrl      string                 `protobuf:"bytes,1,opt,name=write_url,json=writeUrl,proto3" json:"write_url,omitempty"` // 写入 URL
+	ReadUrl       string                 `protobuf:"bytes,2,opt,name=read_url,json=readUrl,proto3" json:"read_url,omitempty"`    // 读取 URL
+	UseGrpc       bool                   `protobuf:"varint,3,opt,name=use_grpc,json=useGrpc,proto3" json:"use_grpc,omitempty"`   // 是否使用 gRPC
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *Authorization_Zanzibar_Keto) Reset() {
+	*x = Authorization_Zanzibar_Keto{}
+	mi := &file_conf_v1_kratos_conf_authz_proto_msgTypes[7]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *Authorization_Zanzibar_Keto) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*Authorization_Zanzibar_Keto) ProtoMessage() {}
+
+func (x *Authorization_Zanzibar_Keto) ProtoReflect() protoreflect.Message {
+	mi := &file_conf_v1_kratos_conf_authz_proto_msgTypes[7]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use Authorization_Zanzibar_Keto.ProtoReflect.Descriptor instead.
+func (*Authorization_Zanzibar_Keto) Descriptor() ([]byte, []int) {
+	return file_conf_v1_kratos_conf_authz_proto_rawDescGZIP(), []int{0, 2, 0}
+}
+
+func (x *Authorization_Zanzibar_Keto) GetWriteUrl() string {
+	if x != nil {
+		return x.WriteUrl
+	}
+	return ""
+}
+
+func (x *Authorization_Zanzibar_Keto) GetReadUrl() string {
+	if x != nil {
+		return x.ReadUrl
+	}
+	return ""
+}
+
+func (x *Authorization_Zanzibar_Keto) GetUseGrpc() bool {
+	if x != nil {
+		return x.UseGrpc
+	}
+	return false
+}
+
+type Authorization_Zanzibar_OpenFga struct {
+	state         protoimpl.MessageState `protogen:"open.v1"`
+	ApiUrl        string                 `protobuf:"bytes,1,opt,name=api_url,json=apiUrl,proto3" json:"api_url,omitempty"`       // OpenFGA API URL
+	StoreId       string                 `protobuf:"bytes,2,opt,name=store_id,json=storeId,proto3" json:"store_id,omitempty"`    // OpenFGA 存储 ID
+	Token         string                 `protobuf:"bytes,3,opt,name=token,proto3" json:"token,omitempty"`                       // OpenFGA 访问令牌
+	ClientId      string                 `protobuf:"bytes,4,opt,name=client_id,json=clientId,proto3" json:"client_id,omitempty"` // OpenFGA 客户端 ID
+	unknownFields protoimpl.UnknownFields
+	sizeCache     protoimpl.SizeCache
+}
+
+func (x *Authorization_Zanzibar_OpenFga) Reset() {
+	*x = Authorization_Zanzibar_OpenFga{}
+	mi := &file_conf_v1_kratos_conf_authz_proto_msgTypes[8]
+	ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+	ms.StoreMessageInfo(mi)
+}
+
+func (x *Authorization_Zanzibar_OpenFga) String() string {
+	return protoimpl.X.MessageStringOf(x)
+}
+
+func (*Authorization_Zanzibar_OpenFga) ProtoMessage() {}
+
+func (x *Authorization_Zanzibar_OpenFga) ProtoReflect() protoreflect.Message {
+	mi := &file_conf_v1_kratos_conf_authz_proto_msgTypes[8]
+	if x != nil {
+		ms := protoimpl.X.MessageStateOf(protoimpl.Pointer(x))
+		if ms.LoadMessageInfo() == nil {
+			ms.StoreMessageInfo(mi)
+		}
+		return ms
+	}
+	return mi.MessageOf(x)
+}
+
+// Deprecated: Use Authorization_Zanzibar_OpenFga.ProtoReflect.Descriptor instead.
+func (*Authorization_Zanzibar_OpenFga) Descriptor() ([]byte, []int) {
+	return file_conf_v1_kratos_conf_authz_proto_rawDescGZIP(), []int{0, 2, 1}
+}
+
+func (x *Authorization_Zanzibar_OpenFga) GetApiUrl() string {
+	if x != nil {
+		return x.ApiUrl
+	}
+	return ""
+}
+
+func (x *Authorization_Zanzibar_OpenFga) GetStoreId() string {
+	if x != nil {
+		return x.StoreId
+	}
+	return ""
+}
+
+func (x *Authorization_Zanzibar_OpenFga) GetToken() string {
+	if x != nil {
+		return x.Token
+	}
+	return ""
+}
+
+func (x *Authorization_Zanzibar_OpenFga) GetClientId() string {
+	if x != nil {
+		return x.ClientId
+	}
+	return ""
+}
+
 var File_conf_v1_kratos_conf_authz_proto protoreflect.FileDescriptor
 
 var file_conf_v1_kratos_conf_authz_proto_rawDesc = string([]byte{
@@ -66,17 +450,84 @@ var file_conf_v1_kratos_conf_authz_proto_rawDesc = string([]byte{
 	0x5f, 0x63, 0x6f, 0x6e, 0x66, 0x5f, 0x61, 0x75, 0x74, 0x68, 0x7a, 0x2e, 0x70, 0x72, 0x6f, 0x74,
 	0x6f, 0x12, 0x04, 0x63, 0x6f, 0x6e, 0x66, 0x1a, 0x1e, 0x67, 0x6f, 0x6f, 0x67, 0x6c, 0x65, 0x2f,
 	0x70, 0x72, 0x6f, 0x74, 0x6f, 0x62, 0x75, 0x66, 0x2f, 0x64, 0x75, 0x72, 0x61, 0x74, 0x69, 0x6f,
-	0x6e, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22, 0x0f, 0x0a, 0x0d, 0x41, 0x75, 0x74, 0x68, 0x6f,
+	0x6e, 0x2e, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x22, 0xc1, 0x08, 0x0a, 0x0d, 0x41, 0x75, 0x74, 0x68,
-	0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x42, 0x86, 0x01, 0x0a, 0x08, 0x63, 0x6f, 0x6d,
+	0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x12, 0x12, 0x0a, 0x04, 0x74, 0x79, 0x70,
-	0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x42, 0x14, 0x4b, 0x72, 0x61, 0x74, 0x6f, 0x73, 0x43, 0x6f, 0x6e,
+	0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x04, 0x74, 0x79, 0x70, 0x65, 0x12, 0x32, 0x0a,
-	0x66, 0x41, 0x75, 0x74, 0x68, 0x7a, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01, 0x5a, 0x34, 0x67,
+	0x06, 0x63, 0x61, 0x73, 0x62, 0x69, 0x6e, 0x18, 0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1a, 0x2e,
-	0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x74, 0x78, 0x37, 0x64, 0x6f, 0x2f,
+	0x63, 0x6f, 0x6e, 0x66, 0x2e, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69,
-	0x6b, 0x72, 0x61, 0x74, 0x6f, 0x73, 0x2d, 0x62, 0x6f, 0x6f, 0x74, 0x73, 0x74, 0x72, 0x61, 0x70,
+	0x6f, 0x6e, 0x2e, 0x43, 0x61, 0x73, 0x62, 0x69, 0x6e, 0x52, 0x06, 0x63, 0x61, 0x73, 0x62, 0x69,
-	0x2f, 0x61, 0x70, 0x69, 0x2f, 0x67, 0x65, 0x6e, 0x2f, 0x67, 0x6f, 0x2f, 0x63, 0x6f, 0x6e, 0x66,
+	0x6e, 0x12, 0x29, 0x0a, 0x03, 0x6f, 0x70, 0x61, 0x18, 0x03, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x17,
-	0x2f, 0x76, 0x31, 0xa2, 0x02, 0x03, 0x43, 0x58, 0x58, 0xaa, 0x02, 0x04, 0x43, 0x6f, 0x6e, 0x66,
+	0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x2e, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74,
-	0xca, 0x02, 0x04, 0x43, 0x6f, 0x6e, 0x66, 0xe2, 0x02, 0x10, 0x43, 0x6f, 0x6e, 0x66, 0x5c, 0x47,
+	0x69, 0x6f, 0x6e, 0x2e, 0x4f, 0x50, 0x41, 0x52, 0x03, 0x6f, 0x70, 0x61, 0x12, 0x38, 0x0a, 0x08,
-	0x50, 0x42, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0xea, 0x02, 0x04, 0x43, 0x6f, 0x6e,
+	0x7a, 0x61, 0x6e, 0x7a, 0x69, 0x62, 0x61, 0x72, 0x18, 0x04, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x1c,
-	0x66, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
+	0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x2e, 0x41, 0x75, 0x74, 0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74,
+	0x69, 0x6f, 0x6e, 0x2e, 0x5a, 0x61, 0x6e, 0x7a, 0x69, 0x62, 0x61, 0x72, 0x52, 0x08, 0x7a, 0x61,
+	0x6e, 0x7a, 0x69, 0x62, 0x61, 0x72, 0x1a, 0xb2, 0x01, 0x0a, 0x06, 0x43, 0x61, 0x73, 0x62, 0x69,
+	0x6e, 0x12, 0x22, 0x0a, 0x0a, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x70, 0x61, 0x74, 0x68, 0x18,
+	0x01, 0x20, 0x01, 0x28, 0x09, 0x48, 0x00, 0x52, 0x09, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x50, 0x61,
+	0x74, 0x68, 0x88, 0x01, 0x01, 0x12, 0x24, 0x0a, 0x0b, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x5f,
+	0x70, 0x61, 0x74, 0x68, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x48, 0x01, 0x52, 0x0a, 0x70, 0x6f,
+	0x6c, 0x69, 0x63, 0x79, 0x50, 0x61, 0x74, 0x68, 0x88, 0x01, 0x01, 0x12, 0x1a, 0x0a, 0x08, 0x70,
+	0x6f, 0x6c, 0x69, 0x63, 0x69, 0x65, 0x73, 0x18, 0x0a, 0x20, 0x03, 0x28, 0x09, 0x52, 0x08, 0x70,
+	0x6f, 0x6c, 0x69, 0x63, 0x69, 0x65, 0x73, 0x12, 0x19, 0x0a, 0x05, 0x6d, 0x6f, 0x64, 0x65, 0x6c,
+	0x18, 0x0b, 0x20, 0x01, 0x28, 0x09, 0x48, 0x02, 0x52, 0x05, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x88,
+	0x01, 0x01, 0x42, 0x0d, 0x0a, 0x0b, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x5f, 0x70, 0x61, 0x74,
+	0x68, 0x42, 0x0e, 0x0a, 0x0c, 0x5f, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x79, 0x5f, 0x70, 0x61, 0x74,
+	0x68, 0x42, 0x08, 0x0a, 0x06, 0x5f, 0x6d, 0x6f, 0x64, 0x65, 0x6c, 0x1a, 0xc7, 0x02, 0x0a, 0x03,
+	0x4f, 0x50, 0x41, 0x12, 0x41, 0x0a, 0x08, 0x70, 0x6f, 0x6c, 0x69, 0x63, 0x69, 0x65, 0x73, 0x18,
+	0x01, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x25, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x2e, 0x41, 0x75, 0x74,
+	0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x4f, 0x50, 0x41, 0x2e, 0x50,
+	0x6f, 0x6c, 0x69, 0x63, 0x69, 0x65, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x08, 0x70, 0x6f,
+	0x6c, 0x69, 0x63, 0x69, 0x65, 0x73, 0x12, 0x38, 0x0a, 0x05, 0x72, 0x6f, 0x6c, 0x65, 0x73, 0x18,
+	0x02, 0x20, 0x03, 0x28, 0x0b, 0x32, 0x22, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x2e, 0x41, 0x75, 0x74,
+	0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x4f, 0x50, 0x41, 0x2e, 0x52,
+	0x6f, 0x6c, 0x65, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x52, 0x05, 0x72, 0x6f, 0x6c, 0x65, 0x73,
+	0x1a, 0x27, 0x0a, 0x0b, 0x52, 0x6f, 0x6c, 0x65, 0x41, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x12,
+	0x18, 0x0a, 0x07, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x18, 0x01, 0x20, 0x03, 0x28, 0x09,
+	0x52, 0x07, 0x61, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x1a, 0x3b, 0x0a, 0x0d, 0x50, 0x6f, 0x6c,
+	0x69, 0x63, 0x69, 0x65, 0x73, 0x45, 0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65,
+	0x79, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x14, 0x0a, 0x05,
+	0x76, 0x61, 0x6c, 0x75, 0x65, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x05, 0x76, 0x61, 0x6c,
+	0x75, 0x65, 0x3a, 0x02, 0x38, 0x01, 0x1a, 0x5d, 0x0a, 0x0a, 0x52, 0x6f, 0x6c, 0x65, 0x73, 0x45,
+	0x6e, 0x74, 0x72, 0x79, 0x12, 0x10, 0x0a, 0x03, 0x6b, 0x65, 0x79, 0x18, 0x01, 0x20, 0x01, 0x28,
+	0x09, 0x52, 0x03, 0x6b, 0x65, 0x79, 0x12, 0x39, 0x0a, 0x05, 0x76, 0x61, 0x6c, 0x75, 0x65, 0x18,
+	0x02, 0x20, 0x01, 0x28, 0x0b, 0x32, 0x23, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x2e, 0x41, 0x75, 0x74,
+	0x68, 0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x4f, 0x50, 0x41, 0x2e, 0x52,
+	0x6f, 0x6c, 0x65, 0x41, 0x63, 0x74, 0x69, 0x6f, 0x6e, 0x73, 0x52, 0x05, 0x76, 0x61, 0x6c, 0x75,
+	0x65, 0x3a, 0x02, 0x38, 0x01, 0x1a, 0x83, 0x03, 0x0a, 0x08, 0x5a, 0x61, 0x6e, 0x7a, 0x69, 0x62,
+	0x61, 0x72, 0x12, 0x12, 0x0a, 0x04, 0x74, 0x79, 0x70, 0x65, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09,
+	0x52, 0x04, 0x74, 0x79, 0x70, 0x65, 0x12, 0x3a, 0x0a, 0x04, 0x6b, 0x65, 0x74, 0x6f, 0x18, 0x02,
+	0x20, 0x01, 0x28, 0x0b, 0x32, 0x21, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x2e, 0x41, 0x75, 0x74, 0x68,
+	0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x5a, 0x61, 0x6e, 0x7a, 0x69, 0x62,
+	0x61, 0x72, 0x2e, 0x4b, 0x65, 0x74, 0x6f, 0x48, 0x00, 0x52, 0x04, 0x6b, 0x65, 0x74, 0x6f, 0x88,
+	0x01, 0x01, 0x12, 0x44, 0x0a, 0x08, 0x6f, 0x70, 0x65, 0x6e, 0x5f, 0x66, 0x67, 0x61, 0x18, 0x03,
+	0x20, 0x01, 0x28, 0x0b, 0x32, 0x24, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x2e, 0x41, 0x75, 0x74, 0x68,
+	0x6f, 0x72, 0x69, 0x7a, 0x61, 0x74, 0x69, 0x6f, 0x6e, 0x2e, 0x5a, 0x61, 0x6e, 0x7a, 0x69, 0x62,
+	0x61, 0x72, 0x2e, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x67, 0x61, 0x48, 0x01, 0x52, 0x07, 0x6f, 0x70,
+	0x65, 0x6e, 0x46, 0x67, 0x61, 0x88, 0x01, 0x01, 0x1a, 0x59, 0x0a, 0x04, 0x4b, 0x65, 0x74, 0x6f,
+	0x12, 0x1b, 0x0a, 0x09, 0x77, 0x72, 0x69, 0x74, 0x65, 0x5f, 0x75, 0x72, 0x6c, 0x18, 0x01, 0x20,
+	0x01, 0x28, 0x09, 0x52, 0x08, 0x77, 0x72, 0x69, 0x74, 0x65, 0x55, 0x72, 0x6c, 0x12, 0x19, 0x0a,
+	0x08, 0x72, 0x65, 0x61, 0x64, 0x5f, 0x75, 0x72, 0x6c, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x07, 0x72, 0x65, 0x61, 0x64, 0x55, 0x72, 0x6c, 0x12, 0x19, 0x0a, 0x08, 0x75, 0x73, 0x65, 0x5f,
+	0x67, 0x72, 0x70, 0x63, 0x18, 0x03, 0x20, 0x01, 0x28, 0x08, 0x52, 0x07, 0x75, 0x73, 0x65, 0x47,
+	0x72, 0x70, 0x63, 0x1a, 0x70, 0x0a, 0x07, 0x4f, 0x70, 0x65, 0x6e, 0x46, 0x67, 0x61, 0x12, 0x17,
+	0x0a, 0x07, 0x61, 0x70, 0x69, 0x5f, 0x75, 0x72, 0x6c, 0x18, 0x01, 0x20, 0x01, 0x28, 0x09, 0x52,
+	0x06, 0x61, 0x70, 0x69, 0x55, 0x72, 0x6c, 0x12, 0x19, 0x0a, 0x08, 0x73, 0x74, 0x6f, 0x72, 0x65,
+	0x5f, 0x69, 0x64, 0x18, 0x02, 0x20, 0x01, 0x28, 0x09, 0x52, 0x07, 0x73, 0x74, 0x6f, 0x72, 0x65,
+	0x49, 0x64, 0x12, 0x14, 0x0a, 0x05, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x18, 0x03, 0x20, 0x01, 0x28,
+	0x09, 0x52, 0x05, 0x74, 0x6f, 0x6b, 0x65, 0x6e, 0x12, 0x1b, 0x0a, 0x09, 0x63, 0x6c, 0x69, 0x65,
+	0x6e, 0x74, 0x5f, 0x69, 0x64, 0x18, 0x04, 0x20, 0x01, 0x28, 0x09, 0x52, 0x08, 0x63, 0x6c, 0x69,
+	0x65, 0x6e, 0x74, 0x49, 0x64, 0x42, 0x07, 0x0a, 0x05, 0x5f, 0x6b, 0x65, 0x74, 0x6f, 0x42, 0x0b,
+	0x0a, 0x09, 0x5f, 0x6f, 0x70, 0x65, 0x6e, 0x5f, 0x66, 0x67, 0x61, 0x42, 0x86, 0x01, 0x0a, 0x08,
+	0x63, 0x6f, 0x6d, 0x2e, 0x63, 0x6f, 0x6e, 0x66, 0x42, 0x14, 0x4b, 0x72, 0x61, 0x74, 0x6f, 0x73,
+	0x43, 0x6f, 0x6e, 0x66, 0x41, 0x75, 0x74, 0x68, 0x7a, 0x50, 0x72, 0x6f, 0x74, 0x6f, 0x50, 0x01,
+	0x5a, 0x34, 0x67, 0x69, 0x74, 0x68, 0x75, 0x62, 0x2e, 0x63, 0x6f, 0x6d, 0x2f, 0x74, 0x78, 0x37,
+	0x64, 0x6f, 0x2f, 0x6b, 0x72, 0x61, 0x74, 0x6f, 0x73, 0x2d, 0x62, 0x6f, 0x6f, 0x74, 0x73, 0x74,
+	0x72, 0x61, 0x70, 0x2f, 0x61, 0x70, 0x69, 0x2f, 0x67, 0x65, 0x6e, 0x2f, 0x67, 0x6f, 0x2f, 0x63,
+	0x6f, 0x6e, 0x66, 0x2f, 0x76, 0x31, 0xa2, 0x02, 0x03, 0x43, 0x58, 0x58, 0xaa, 0x02, 0x04, 0x43,
+	0x6f, 0x6e, 0x66, 0xca, 0x02, 0x04, 0x43, 0x6f, 0x6e, 0x66, 0xe2, 0x02, 0x10, 0x43, 0x6f, 0x6e,
+	0x66, 0x5c, 0x47, 0x50, 0x42, 0x4d, 0x65, 0x74, 0x61, 0x64, 0x61, 0x74, 0x61, 0xea, 0x02, 0x04,
+	0x43, 0x6f, 0x6e, 0x66, 0x62, 0x06, 0x70, 0x72, 0x6f, 0x74, 0x6f, 0x33,
 })
 
 var (
@@ -91,16 +542,32 @@ func file_conf_v1_kratos_conf_authz_proto_rawDescGZIP() []byte {
 	return file_conf_v1_kratos_conf_authz_proto_rawDescData
 }
 
-var file_conf_v1_kratos_conf_authz_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
+var file_conf_v1_kratos_conf_authz_proto_msgTypes = make([]protoimpl.MessageInfo, 9)
 var file_conf_v1_kratos_conf_authz_proto_goTypes = []any{
-	(*Authorization)(nil), // 0: conf.Authorization
+	(*Authorization)(nil),                  // 0: conf.Authorization
+	(*Authorization_Casbin)(nil),           // 1: conf.Authorization.Casbin
+	(*Authorization_OPA)(nil),              // 2: conf.Authorization.OPA
+	(*Authorization_Zanzibar)(nil),         // 3: conf.Authorization.Zanzibar
+	(*Authorization_OPA_RoleActions)(nil),  // 4: conf.Authorization.OPA.RoleActions
+	nil,                                    // 5: conf.Authorization.OPA.PoliciesEntry
+	nil,                                    // 6: conf.Authorization.OPA.RolesEntry
+	(*Authorization_Zanzibar_Keto)(nil),    // 7: conf.Authorization.Zanzibar.Keto
+	(*Authorization_Zanzibar_OpenFga)(nil), // 8: conf.Authorization.Zanzibar.OpenFga
 }
 var file_conf_v1_kratos_conf_authz_proto_depIdxs = []int32{
-	0, // [0:0] is the sub-list for method output_type
+	1, // 0: conf.Authorization.casbin:type_name -> conf.Authorization.Casbin
-	0, // [0:0] is the sub-list for method input_type
+	2, // 1: conf.Authorization.opa:type_name -> conf.Authorization.OPA
-	0, // [0:0] is the sub-list for extension type_name
+	3, // 2: conf.Authorization.zanzibar:type_name -> conf.Authorization.Zanzibar
-	0, // [0:0] is the sub-list for extension extendee
+	5, // 3: conf.Authorization.OPA.policies:type_name -> conf.Authorization.OPA.PoliciesEntry
-	0, // [0:0] is the sub-list for field type_name
+	6, // 4: conf.Authorization.OPA.roles:type_name -> conf.Authorization.OPA.RolesEntry
+	7, // 5: conf.Authorization.Zanzibar.keto:type_name -> conf.Authorization.Zanzibar.Keto
+	8, // 6: conf.Authorization.Zanzibar.open_fga:type_name -> conf.Authorization.Zanzibar.OpenFga
+	4, // 7: conf.Authorization.OPA.RolesEntry.value:type_name -> conf.Authorization.OPA.RoleActions
+	8, // [8:8] is the sub-list for method output_type
+	8, // [8:8] is the sub-list for method input_type
+	8, // [8:8] is the sub-list for extension type_name
+	8, // [8:8] is the sub-list for extension extendee
+	0, // [0:8] is the sub-list for field type_name
 }
 
 func init() { file_conf_v1_kratos_conf_authz_proto_init() }
@@ -108,13 +575,15 @@ func file_conf_v1_kratos_conf_authz_proto_init() {
 	if File_conf_v1_kratos_conf_authz_proto != nil {
 		return
 	}
+	file_conf_v1_kratos_conf_authz_proto_msgTypes[1].OneofWrappers = []any{}
+	file_conf_v1_kratos_conf_authz_proto_msgTypes[3].OneofWrappers = []any{}
 	type x struct{}
 	out := protoimpl.TypeBuilder{
 		File: protoimpl.DescBuilder{
 			GoPackagePath: reflect.TypeOf(x{}).PkgPath(),
 			RawDescriptor: unsafe.Slice(unsafe.StringData(file_conf_v1_kratos_conf_authz_proto_rawDesc), len(file_conf_v1_kratos_conf_authz_proto_rawDesc)),
 			NumEnums:      0,
-			NumMessages:   1,
+			NumMessages:   9,
 			NumExtensions: 0,
 			NumServices:   0,
 		},

api/protos/conf/v1/kratos_conf_authn.proto

@@ -14,6 +14,19 @@ message Authentication {
     string key = 2; // JWT 秘钥
   }
 
+  message OIDC {
+    string issuer_url = 1;
+    string audience = 2;
+    string method = 3; // JWT签名的算法，支持算法：HS256
+  }
 
-  optional Jwt jwt = 1;
+  message PresharedKey {
+    repeated string valid_keys = 1;
+  }
+
+  string type = 1;
+
+  optional Jwt jwt = 2; // JWT 认证
+  optional OIDC oidc = 3; // OIDC
+  optional PresharedKey preshared_key = 4; // 预共享密钥
 }

api/protos/conf/v1/kratos_conf_authz.proto

@@ -8,4 +8,46 @@ import "google/protobuf/duration.proto";
 
 // 授权
 message Authorization {
+  message Casbin {
+    optional string model_path = 1; // casbin 模型文件路径
+    optional string policy_path = 2; // casbin 策略文件路径
+
+    repeated string policies = 10; // 策略列表
+    optional string model = 11; // 模型内容
+  }
+
+  message OPA {
+    message RoleActions {
+      repeated string actions = 1; // 角色对应的操作列表 {
+    }
+
+    map<string, string> policies = 1; // OPA 策略列表
+    map<string, RoleActions> roles = 2; //
+  }
+
+  message Zanzibar {
+    message Keto {
+      string write_url = 1; // 写入 URL
+      string read_url = 2; // 读取 URL
+      bool use_grpc = 3; // 是否使用 gRPC
+    }
+
+    message OpenFga {
+      string api_url = 1; // OpenFGA API URL
+      string store_id = 2; // OpenFGA 存储 ID
+      string token = 3; // OpenFGA 访问令牌
+      string client_id = 4; // OpenFGA 客户端 ID
+    }
+
+    string type = 1; // zanzibar 类型
+
+    optional Keto keto = 2; // Keto 配置
+    optional OpenFga open_fga = 3; // OpenFGA 配置
+  }
+
+  string type = 1;
+
+  Casbin casbin = 2; // casbin
+  OPA opa = 3; // OPA
+  Zanzibar zanzibar = 4; // zanzibar
 }

api/protos/conf/v1/kratos_conf_server.proto

@@ -62,7 +62,6 @@ message Server {
     string password = 5;  // 密码
     string client_id = 6;  // 客户端ID
     bool clean_session = 7;  // 清除会话
-    bool enable_keep_alive = 8; // 启用心跳
   }
 
   // Kafka
@@ -70,7 +69,6 @@ message Server {
     repeated string endpoints = 1;  // 对端网络地址
     string codec = 2;  // 编解码器: json,xml,yaml...
     TLS tls = 3;  // TLS配置
-    bool enable_keep_alive = 4; // 启用心跳
   }
 
   // RabbitMQ
@@ -78,42 +76,36 @@ message Server {
     repeated string endpoints = 1;  // 对端网络地址
     string codec = 2;  // 编解码器: json,xml,yaml...
     TLS tls = 3;  // TLS配置
-    bool enable_keep_alive = 4; // 启用心跳
   }
 
   message ActiveMQ {
     string endpoint = 1;  // 对端网络地址
     string codec = 2;  // 编解码器: json,xml,yaml...
     TLS tls = 3;  // TLS配置
-    bool enable_keep_alive = 4; // 启用心跳
   }
 
   message NATS {
     string endpoint = 1;  // 对端网络地址
     string codec = 2;  // 编解码器: json,xml,yaml...
     TLS tls = 3;  // TLS配置
-    bool enable_keep_alive = 4; // 启用心跳
   }
 
   message NSQ {
     string endpoint = 1;  // 对端网络地址
     string codec = 2;  // 编解码器: json,xml,yaml...
     TLS tls = 3;  // TLS配置
-    bool enable_keep_alive = 4; // 启用心跳
   }
 
   message Pulsar {
     string endpoint = 1;  // 对端网络地址
     string codec = 2;  // 编解码器: json,xml,yaml...
     TLS tls = 3;  // TLS配置
-    bool enable_keep_alive = 4; // 启用心跳
   }
 
   message Redis {
     string endpoint = 1;  // 对端网络地址
     string codec = 2;  // 编解码器: json,xml,yaml...
     TLS tls = 3;  // TLS配置
-    bool enable_keep_alive = 4; // 启用心跳
   }
 
   message RocketMQ {
@@ -134,7 +126,6 @@ message Server {
     TLS tls = 11;  // TLS配置
 
     bool enable_trace = 100;
-    bool enable_keep_alive = 101; // 启用心跳
   }
 
   // Asynq
@@ -154,9 +145,8 @@ message Server {
     int32 group_max_size = 12; // 组最大大小
     map<string, int32> queues = 13; // 队列
 
-    bool enable_keep_alive = 20; // 启用心跳
+    bool enable_gracefully_shutdown = 20; // 优雅关闭
-    bool enable_gracefully_shutdown = 21; // 优雅关闭
+    bool enable_strict_priority = 21; // 严格优先级
-    bool enable_strict_priority = 22; // 严格优先级
 
     google.protobuf.Duration shutdown_timeout = 30; // 关闭超时时间
     google.protobuf.Duration dial_timeout = 31; // 拨号超时时间
@@ -188,10 +178,9 @@ message Server {
     string consumer_queue = 32; // 消费者队列
 
     TLS tls = 50;  // TLS配置
-    bool enable_keep_alive = 51; // 启用心跳
+    string default_queue = 51; // 默认队列
-    string default_queue = 52; // 默认队列
+    int32 results_expire_in = 52; // 结果过期时间
-    int32 results_expire_in = 53; // 结果过期时间
+    bool no_unix_signals = 53; // 禁用Unix信号
-    bool no_unix_signals = 54; // 禁用Unix信号
 
     message Redis {
       int32 max_idle = 1;
@@ -305,12 +294,19 @@ message Server {
     TLS tls = 7;  // TLS配置
   }
 
+  message KeepAlive {
+    string network = 1; // 网络
+    string addr = 2;  // 服务监听地址
+    TLS tls = 3;  // TLS配置
+  }
+
   // RPC
 
   optional REST rest = 1;  // REST服务
   optional GRPC grpc = 2;  // gRPC服务
   optional GraphQL graphql = 3;  // GraphQL服务
   optional Thrift thrift = 4;  // Thrift服务
+  optional KeepAlive keepalive = 5;  // 保活服务
 
   // Message Queue
 

bootstrap/bootstrap.go

@@ -9,7 +9,6 @@ import (
 	kratosRegistry "github.com/go-kratos/kratos/v2/registry"
 	"github.com/go-kratos/kratos/v2/transport"
 
-	"github.com/tx7do/kratos-bootstrap/config"
 	"github.com/tx7do/kratos-bootstrap/logger"
 	"github.com/tx7do/kratos-bootstrap/tracer"
 
@@ -43,28 +42,28 @@ func NewApp(ll log.Logger, rr kratosRegistry.Registrar, srv ...transport.Server)
 // DoBootstrap 执行引导
 func DoBootstrap(serviceInfo *utils.ServiceInfo) (*conf.Bootstrap, log.Logger, kratosRegistry.Registrar) {
 	// inject command flags
-	Flags := config.NewCommandFlags()
+	Flags := NewCommandFlags()
 	Flags.Init()
 
 	var err error
 
 	// load configs
-	if err = config.LoadBootstrapConfig(Flags.Conf); err != nil {
+	if err = LoadBootstrapConfig(Flags.Conf); err != nil {
 		panic(fmt.Sprintf("load config failed: %v", err))
 	}
 
 	// init logger
-	ll := logger.NewLoggerProvider(config.GetBootstrapConfig().Logger, serviceInfo)
+	ll := logger.NewLoggerProvider(GetBootstrapConfig().Logger, serviceInfo)
 
 	// init registrar
-	reg := NewRegistry(config.GetBootstrapConfig().Registry)
+	reg := NewRegistry(GetBootstrapConfig().Registry)
 
 	// init tracer
-	if err = tracer.NewTracerProvider(config.GetBootstrapConfig().Trace, serviceInfo); err != nil {
+	if err = tracer.NewTracerProvider(GetBootstrapConfig().Trace, serviceInfo); err != nil {
 		panic(fmt.Sprintf("init tracer failed: %v", err))
 	}
 
-	return config.GetBootstrapConfig(), ll, reg
+	return GetBootstrapConfig(), ll, reg
 }
 
 type InitApp func(logger log.Logger, registrar kratosRegistry.Registrar, bootstrap *conf.Bootstrap) (*kratos.App, func(), error)

bootstrap/bootstrap_config.go

@@ -1,4 +1,4 @@
-package config
+package bootstrap
 
 import conf "github.com/tx7do/kratos-bootstrap/api/gen/go/conf/v1"
 

bootstrap/bootstrap_test.go

@@ -8,7 +8,6 @@ import (
 	"github.com/go-kratos/kratos/v2/registry"
 
 	v1 "github.com/tx7do/kratos-bootstrap/api/gen/go/conf/v1"
-	"github.com/tx7do/kratos-bootstrap/config"
 )
 
 func initApp(logger log.Logger, registrar registry.Registrar, _ *v1.Bootstrap) (*kratos.App, func(), error) {
@@ -35,7 +34,7 @@ func initAppEx(logger log.Logger, registrar registry.Registrar, _ *v1.Bootstrap,
 
 func TestCustomBootstrap(t *testing.T) {
 	customCfg := &CustomConfig{}
-	config.RegisterConfig(customCfg)
+	RegisterConfig(customCfg)
 
 	Service.SetName("test")
 	Service.SetVersion("v0.0.1")

bootstrap/config.go

@@ -1,4 +1,4 @@
-package config
+package bootstrap
 
 import (
 	"github.com/go-kratos/kratos/v2/config"

bootstrap/config_test.go

@@ -1,6 +1,8 @@
-package config
+package bootstrap
 
-import "testing"
+import (
+	"testing"
+)
 
 func TestRegisterConfig(t *testing.T) {
 	var cfg struct {

bootstrap/flag.go

@@ -1,4 +1,4 @@
-package config
+package bootstrap
 
 import (
 	"flag"

bootstrap/go.mod

@@ -8,10 +8,24 @@ replace (
 	github.com/armon/go-metrics => github.com/hashicorp/go-metrics v0.4.1
 
 	github.com/tx7do/kratos-bootstrap/api => ../api
-
-	github.com/tx7do/kratos-bootstrap/config => ../config
 	github.com/tx7do/kratos-bootstrap/logger => ../logger
+
 	github.com/tx7do/kratos-bootstrap/registry => ../registry
+	github.com/tx7do/kratos-bootstrap/registry/consul => ../registry/consul
+	github.com/tx7do/kratos-bootstrap/registry/etcd => ../registry/etcd
+	github.com/tx7do/kratos-bootstrap/registry/eureka => ../registry/eureka
+	github.com/tx7do/kratos-bootstrap/registry/kubernetes => ../registry/kubernetes
+	github.com/tx7do/kratos-bootstrap/registry/nacos => ../registry/nacos
+	github.com/tx7do/kratos-bootstrap/registry/polaris => ../registry/polaris
+	github.com/tx7do/kratos-bootstrap/registry/servicecomb => ../registry/servicecomb
+	github.com/tx7do/kratos-bootstrap/registry/zookeeper => ../registry/zookeeper
+
+	github.com/tx7do/kratos-bootstrap/remoteconfig/apollo => ../remoteconfig/apollo
+	github.com/tx7do/kratos-bootstrap/remoteconfig/consul => ../remoteconfig/consul
+	github.com/tx7do/kratos-bootstrap/remoteconfig/etcd => ../remoteconfig/etcd
+	github.com/tx7do/kratos-bootstrap/remoteconfig/kubernetes => ../remoteconfig/kubernetes
+	github.com/tx7do/kratos-bootstrap/remoteconfig/nacos => ../remoteconfig/nacos
+	github.com/tx7do/kratos-bootstrap/remoteconfig/polaris => ../remoteconfig/polaris
 	github.com/tx7do/kratos-bootstrap/tracer => ../tracer
 	github.com/tx7do/kratos-bootstrap/utils => ../utils
 )
@@ -22,7 +36,6 @@ require (
 	github.com/olekukonko/tablewriter v1.0.7
 	github.com/spf13/cobra v1.9.1
 	github.com/tx7do/kratos-bootstrap/api v0.0.21
-	github.com/tx7do/kratos-bootstrap/config v0.0.10
 	github.com/tx7do/kratos-bootstrap/logger v0.0.10
 	github.com/tx7do/kratos-bootstrap/registry v0.1.0
 	github.com/tx7do/kratos-bootstrap/registry/consul v0.1.0
@@ -32,6 +45,12 @@ require (
 	github.com/tx7do/kratos-bootstrap/registry/nacos v0.1.0
 	github.com/tx7do/kratos-bootstrap/registry/servicecomb v0.1.0
 	github.com/tx7do/kratos-bootstrap/registry/zookeeper v0.1.0
+	github.com/tx7do/kratos-bootstrap/remoteconfig/apollo v0.1.0
+	github.com/tx7do/kratos-bootstrap/remoteconfig/consul v0.1.0
+	github.com/tx7do/kratos-bootstrap/remoteconfig/etcd v0.1.0
+	github.com/tx7do/kratos-bootstrap/remoteconfig/kubernetes v0.1.0
+	github.com/tx7do/kratos-bootstrap/remoteconfig/nacos v0.1.1
+	github.com/tx7do/kratos-bootstrap/remoteconfig/polaris v0.1.0
 	github.com/tx7do/kratos-bootstrap/tracer v0.0.10
 	github.com/tx7do/kratos-bootstrap/utils v0.1.3
 	golang.org/x/tools v0.33.0
@@ -154,12 +173,6 @@ require (
 	github.com/tencentcloud/tencentcloud-cls-sdk-go v1.0.11 // indirect
 	github.com/tinylib/msgp v1.3.0 // indirect
 	github.com/tjfoc/gmsm v1.4.1 // indirect
-	github.com/tx7do/kratos-bootstrap/remoteconfig/apollo v0.1.0 // indirect
-	github.com/tx7do/kratos-bootstrap/remoteconfig/consul v0.1.0 // indirect
-	github.com/tx7do/kratos-bootstrap/remoteconfig/etcd v0.1.0 // indirect
-	github.com/tx7do/kratos-bootstrap/remoteconfig/kubernetes v0.1.0 // indirect
-	github.com/tx7do/kratos-bootstrap/remoteconfig/nacos v0.1.0 // indirect
-	github.com/tx7do/kratos-bootstrap/remoteconfig/polaris v0.1.0 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
 	go.etcd.io/etcd/api/v3 v3.6.0 // indirect
 	go.etcd.io/etcd/client/pkg/v3 v3.6.0 // indirect

bootstrap/go.sum

@@ -628,32 +628,6 @@ github.com/tjfoc/gmsm v1.3.2/go.mod h1:HaUcFuY0auTiaHB9MHFGCPx5IaLhTUd2atbCFBQXn
 github.com/tjfoc/gmsm v1.4.1 h1:aMe1GlZb+0bLjn+cKTPEvvn9oUEBlJitaZiiBwsbgho=
 github.com/tjfoc/gmsm v1.4.1/go.mod h1:j4INPkHWMrhJb38G+J6W4Tw0AbuN8Thu3PbdVYhVcTE=
 github.com/tv42/httpunix v0.0.0-20150427012821-b75d8614f926/go.mod h1:9ESjWnEqriFuLhtthL60Sar/7RFoluCcXsuvEwTV5KM=
-github.com/tx7do/kratos-bootstrap/registry/consul v0.1.0 h1:O25Fb6c7pK2wQcaCsek3Rr5aWFwhyd493onVPwMKCd0=
-github.com/tx7do/kratos-bootstrap/registry/consul v0.1.0/go.mod h1:sQeHz3LTab9nai22ID++nY1Epixljh/XbXWG84lHskY=
-github.com/tx7do/kratos-bootstrap/registry/etcd v0.1.0 h1:hRjBltNtwxo6Tq10Xg4VJa3PQXKpmLgIqk3+Pkc/Q20=
-github.com/tx7do/kratos-bootstrap/registry/etcd v0.1.0/go.mod h1:KlKs9hUA0rLr3oXddz/Svp+O83YDSNBSrMtNj/8fUHE=
-github.com/tx7do/kratos-bootstrap/registry/eureka v0.1.0 h1:nF7O5At2lkYDOJnYDupvF84nXFYdHoIIOnk2SltFtT4=
-github.com/tx7do/kratos-bootstrap/registry/eureka v0.1.0/go.mod h1:7DrS4kWWyjPGYLU6ZK66yixCsVVrLBokJM/zVRhWsBU=
-github.com/tx7do/kratos-bootstrap/registry/kubernetes v0.1.0 h1:g9WKluXphQKn8+Cqf2zaQ6MZ/CKfuWHAOFUWMYhSJ8A=
-github.com/tx7do/kratos-bootstrap/registry/kubernetes v0.1.0/go.mod h1:cnTOKn2L1zhySWTyA8zIpOyKryqCzH9jj0x+dFSF7s0=
-github.com/tx7do/kratos-bootstrap/registry/nacos v0.1.0 h1:u/mJlI5CdPsHrfPOhzcS1fT72yLRkLu50lhYwkXYZtM=
-github.com/tx7do/kratos-bootstrap/registry/nacos v0.1.0/go.mod h1:/sBbHxWAcCAj4trjmguwViS/za2CelOTQPnDKExbo74=
-github.com/tx7do/kratos-bootstrap/registry/servicecomb v0.1.0 h1:sJZwmEzdUzC4qn5+tyTjujIl/EP4pq4Ve9RhXAp2T2M=
-github.com/tx7do/kratos-bootstrap/registry/servicecomb v0.1.0/go.mod h1:3J4HMpqYKaYMaHeQ2JGm9LiLCj0HEpbJEMNTfi/5yps=
-github.com/tx7do/kratos-bootstrap/registry/zookeeper v0.1.0 h1:jnb4mKxhHY3fjofEsuT47YC6id98ePGqeOvwsqjo4Pw=
-github.com/tx7do/kratos-bootstrap/registry/zookeeper v0.1.0/go.mod h1:J1djr1sRj0bgYqweR+lm4xADePt6oC2HhAr4xNyYep4=
-github.com/tx7do/kratos-bootstrap/remoteconfig/apollo v0.1.0 h1:gEi8ukkZ7+9QWi5yvc3u2LX4Tmcro5QSrqrt1dhGidY=
-github.com/tx7do/kratos-bootstrap/remoteconfig/apollo v0.1.0/go.mod h1:No4jfTwG6yGPaxUkbRPOQg8rrwiAsoYPEIvajfT5TBw=
-github.com/tx7do/kratos-bootstrap/remoteconfig/consul v0.1.0 h1:QaZq/fbIEdPzsG5PsxLLwxFz8K4EwJsb+drZedjRxmo=
-github.com/tx7do/kratos-bootstrap/remoteconfig/consul v0.1.0/go.mod h1:DfV9MOzBhQbjrcJJo4yzBLl2e87gw4pxG0rrp6aN/Fk=
-github.com/tx7do/kratos-bootstrap/remoteconfig/etcd v0.1.0 h1:XRMZlAmgebrsx4pJJNR7XqNiPNEb//1Ovmj8M2xJGO8=
-github.com/tx7do/kratos-bootstrap/remoteconfig/etcd v0.1.0/go.mod h1:bnpvKsNputwma0ddQ8b5IEPlNy2MYFmYi6Xf0F7m18o=
-github.com/tx7do/kratos-bootstrap/remoteconfig/kubernetes v0.1.0 h1:yPjm22Iu/szERlog8KIwDm1DWidij4U8/cpFN63Ei4A=
-github.com/tx7do/kratos-bootstrap/remoteconfig/kubernetes v0.1.0/go.mod h1:53m4kOfvXfyrIjUq/ZK7hXY5LraJFbWrR4y9Qqkjlp0=
-github.com/tx7do/kratos-bootstrap/remoteconfig/nacos v0.1.0 h1:clGiOIkrV+5ICVxo2UXzLofbHgSNeQQ3ktmnSBtC6mI=
-github.com/tx7do/kratos-bootstrap/remoteconfig/nacos v0.1.0/go.mod h1:RcCVpBOkRkpVdX8m5EdevwFy91EzXA+TocLncNRG4j4=
-github.com/tx7do/kratos-bootstrap/remoteconfig/polaris v0.1.0 h1:mmJL9YXmspyRfKr7LbYE0e5cNpRiVpzZppE/QHOzVM0=
-github.com/tx7do/kratos-bootstrap/remoteconfig/polaris v0.1.0/go.mod h1:43O4L+Xe6fItWsBMSYAmrGjxRXVKzreOxD1H01U5uwE=
 github.com/uber/jaeger-client-go v2.30.0+incompatible h1:D6wyKGCecFaSRUpo8lCVbaOOb6ThwMmTEbhRwtKR97o=
 github.com/uber/jaeger-client-go v2.30.0+incompatible/go.mod h1:WVhlPFC8FDjOFMMWRy2pZqQJSXxYSwNYOkTr/Z6d3Kk=
 github.com/uber/jaeger-lib v2.4.1+incompatible h1:td4jdvLcExb4cBISKIpHuGoVXh+dVKhn2Um6rjCsSsg=

bootstrap/remote_config.go

@@ -1,4 +1,4 @@
-package config
+package bootstrap
 
 import (
 	"github.com/go-kratos/kratos/v2/config"

config/go.mod

@@ -1,145 +0,0 @@
-module github.com/tx7do/kratos-bootstrap/config
-
-go 1.24.0
-
-toolchain go1.24.3
-
-replace (
-	github.com/armon/go-metrics => github.com/hashicorp/go-metrics v0.4.1
-
-	github.com/tx7do/kratos-bootstrap/api => ../api
-	github.com/tx7do/kratos-bootstrap/utils => ../utils
-)
-
-require (
-	github.com/go-kratos/kratos/v2 v2.8.4
-	github.com/tx7do/kratos-bootstrap/api v0.0.21
-	github.com/tx7do/kratos-bootstrap/remoteconfig/apollo v0.1.0
-	github.com/tx7do/kratos-bootstrap/remoteconfig/consul v0.1.0
-	github.com/tx7do/kratos-bootstrap/remoteconfig/etcd v0.1.0
-	github.com/tx7do/kratos-bootstrap/remoteconfig/kubernetes v0.1.0
-	github.com/tx7do/kratos-bootstrap/remoteconfig/nacos v0.1.0
-	github.com/tx7do/kratos-bootstrap/remoteconfig/polaris v0.1.0
-	github.com/tx7do/kratos-bootstrap/utils v0.1.3
-)
-
-require (
-	dario.cat/mergo v1.0.2 // indirect
-	github.com/alibabacloud-go/alibabacloud-gateway-pop v0.0.8 // indirect
-	github.com/alibabacloud-go/alibabacloud-gateway-spi v0.0.5 // indirect
-	github.com/alibabacloud-go/darabonba-array v0.1.0 // indirect
-	github.com/alibabacloud-go/darabonba-encode-util v0.0.2 // indirect
-	github.com/alibabacloud-go/darabonba-map v0.0.2 // indirect
-	github.com/alibabacloud-go/darabonba-openapi/v2 v2.1.7 // indirect
-	github.com/alibabacloud-go/darabonba-signature-util v0.0.7 // indirect
-	github.com/alibabacloud-go/darabonba-string v1.0.2 // indirect
-	github.com/alibabacloud-go/debug v1.0.1 // indirect
-	github.com/alibabacloud-go/endpoint-util v1.1.1 // indirect
-	github.com/alibabacloud-go/kms-20160120/v3 v3.2.3 // indirect
-	github.com/alibabacloud-go/openapi-util v0.1.1 // indirect
-	github.com/alibabacloud-go/tea v1.3.9 // indirect
-	github.com/alibabacloud-go/tea-utils/v2 v2.0.7 // indirect
-	github.com/aliyun/alibaba-cloud-sdk-go v1.63.107 // indirect
-	github.com/aliyun/alibabacloud-dkms-gcs-go-sdk v0.5.1 // indirect
-	github.com/aliyun/alibabacloud-dkms-transfer-go-sdk v0.1.9 // indirect
-	github.com/aliyun/aliyun-secretsmanager-client-go v1.1.5 // indirect
-	github.com/aliyun/credentials-go v1.4.6 // indirect
-	github.com/apolloconfig/agollo/v4 v4.4.0 // indirect
-	github.com/armon/go-metrics v0.5.4 // indirect
-	github.com/beorn7/perks v1.0.1 // indirect
-	github.com/buger/jsonparser v1.1.1 // indirect
-	github.com/cespare/xxhash/v2 v2.3.0 // indirect
-	github.com/clbanning/mxj/v2 v2.7.0 // indirect
-	github.com/coreos/go-semver v0.3.1 // indirect
-	github.com/coreos/go-systemd/v22 v22.5.0 // indirect
-	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
-	github.com/deckarep/golang-set v1.8.0 // indirect
-	github.com/emicklei/go-restful/v3 v3.12.2 // indirect
-	github.com/fatih/color v1.18.0 // indirect
-	github.com/fsnotify/fsnotify v1.9.0 // indirect
-	github.com/fxamacker/cbor/v2 v2.8.0 // indirect
-	github.com/go-logr/logr v1.4.3 // indirect
-	github.com/go-openapi/jsonpointer v0.21.1 // indirect
-	github.com/go-openapi/jsonreference v0.21.0 // indirect
-	github.com/go-openapi/swag v0.23.1 // indirect
-	github.com/go-viper/mapstructure/v2 v2.2.1 // indirect
-	github.com/gogo/protobuf v1.3.2 // indirect
-	github.com/golang/mock v1.6.0 // indirect
-	github.com/golang/protobuf v1.5.4 // indirect
-	github.com/google/gnostic-models v0.6.9 // indirect
-	github.com/google/go-cmp v0.7.0 // indirect
-	github.com/google/uuid v1.6.0 // indirect
-	github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 // indirect
-	github.com/hashicorp/consul/api v1.32.1 // indirect
-	github.com/hashicorp/errwrap v1.1.0 // indirect
-	github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
-	github.com/hashicorp/go-hclog v1.6.3 // indirect
-	github.com/hashicorp/go-immutable-radix v1.3.1 // indirect
-	github.com/hashicorp/go-metrics v0.5.4 // indirect
-	github.com/hashicorp/go-multierror v1.1.1 // indirect
-	github.com/hashicorp/go-rootcerts v1.0.2 // indirect
-	github.com/hashicorp/golang-lru v1.0.2 // indirect
-	github.com/hashicorp/serf v0.10.2 // indirect
-	github.com/jmespath/go-jmespath v0.4.0 // indirect
-	github.com/josharian/intern v1.0.0 // indirect
-	github.com/json-iterator/go v1.1.12 // indirect
-	github.com/mailru/easyjson v0.9.0 // indirect
-	github.com/mattn/go-colorable v0.1.14 // indirect
-	github.com/mattn/go-isatty v0.0.20 // indirect
-	github.com/mitchellh/go-homedir v1.1.0 // indirect
-	github.com/mitchellh/mapstructure v1.5.0 // indirect
-	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
-	github.com/modern-go/reflect2 v1.0.2 // indirect
-	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
-	github.com/nacos-group/nacos-sdk-go/v2 v2.3.2 // indirect
-	github.com/opentracing/opentracing-go v1.2.1-0.20220228012449-10b1cf09e00b // indirect
-	github.com/orcaman/concurrent-map v1.0.0 // indirect
-	github.com/pelletier/go-toml/v2 v2.2.4 // indirect
-	github.com/pkg/errors v0.9.1 // indirect
-	github.com/prometheus/client_golang v1.22.0 // indirect
-	github.com/prometheus/client_model v0.6.2 // indirect
-	github.com/prometheus/common v0.64.0 // indirect
-	github.com/prometheus/procfs v0.16.1 // indirect
-	github.com/sagikazarmark/locafero v0.9.0 // indirect
-	github.com/sourcegraph/conc v0.3.0 // indirect
-	github.com/spf13/afero v1.14.0 // indirect
-	github.com/spf13/cast v1.9.1 // indirect
-	github.com/spf13/pflag v1.0.6 // indirect
-	github.com/spf13/viper v1.20.1 // indirect
-	github.com/subosito/gotenv v1.6.0 // indirect
-	github.com/tjfoc/gmsm v1.4.1 // indirect
-	github.com/x448/float16 v0.8.4 // indirect
-	go.etcd.io/etcd/api/v3 v3.6.0 // indirect
-	go.etcd.io/etcd/client/pkg/v3 v3.6.0 // indirect
-	go.etcd.io/etcd/client/v3 v3.6.0 // indirect
-	go.uber.org/multierr v1.11.0 // indirect
-	go.uber.org/zap v1.27.0 // indirect
-	golang.org/x/crypto v0.38.0 // indirect
-	golang.org/x/exp v0.0.0-20250531010427-b6e5de432a8b // indirect
-	golang.org/x/net v0.40.0 // indirect
-	golang.org/x/oauth2 v0.30.0 // indirect
-	golang.org/x/sync v0.14.0 // indirect
-	golang.org/x/sys v0.33.0 // indirect
-	golang.org/x/term v0.32.0 // indirect
-	golang.org/x/text v0.25.0 // indirect
-	golang.org/x/time v0.11.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20250528174236-200df99c418a // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20250528174236-200df99c418a // indirect
-	google.golang.org/grpc v1.72.2 // indirect
-	google.golang.org/protobuf v1.36.6 // indirect
-	gopkg.in/evanphx/json-patch.v4 v4.12.0 // indirect
-	gopkg.in/inf.v0 v0.9.1 // indirect
-	gopkg.in/ini.v1 v1.67.0 // indirect
-	gopkg.in/natefinch/lumberjack.v2 v2.2.1 // indirect
-	gopkg.in/yaml.v3 v3.0.1 // indirect
-	k8s.io/api v0.33.1 // indirect
-	k8s.io/apimachinery v0.33.1 // indirect
-	k8s.io/client-go v0.33.1 // indirect
-	k8s.io/klog/v2 v2.130.1 // indirect
-	k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect
-	k8s.io/utils v0.0.0-20250502105355-0f33e8f1c979 // indirect
-	sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 // indirect
-	sigs.k8s.io/randfill v1.0.0 // indirect
-	sigs.k8s.io/structured-merge-diff/v4 v4.7.0 // indirect
-	sigs.k8s.io/yaml v1.4.0 // indirect
-)

tag.bat

@@ -1,4 +1,4 @@
-git tag api/v0.0.21 --force
+git tag api/v0.0.23 --force
 
 git tag utils/v0.1.4 --force
 
@@ -25,8 +25,6 @@ git tag registry/polaris/v0.1.0 --force
 git tag registry/servicecomb/v0.1.0 --force
 git tag registry/zookeeper/v0.1.0 --force
 
-git tag config/v0.0.10 --force
-
 git tag remoteconfig/apollo/v0.1.0 --force
 git tag remoteconfig/consul/v0.1.0 --force
 git tag remoteconfig/etcd/v0.1.0 --force
@@ -34,8 +32,8 @@ git tag remoteconfig/kubernetes/v0.1.0 --force
 git tag remoteconfig/nacos/v0.1.1 --force
 git tag remoteconfig/polaris/v0.1.0 --force
 
-git tag bootstrap/v0.0.16 --force
+git tag bootstrap/v0.0.17 --force
 
-git tag v0.6.0
+git tag v0.7.0
 
 git push origin --tags

upgrade.bat

@@ -47,10 +47,6 @@ cd %DIR%\remoteconfig\polaris
 go get all
 go mod tidy
 
-cd %DIR%\config
-go get all
-go mod tidy
-
 
 cd %DIR%\registry
 go get all