diff --git a/api/client/artifact/artifacts.pb.go b/api/client/artifact/artifacts.pb.go
index 8e27bd73..8b2ea06c 100644
--- a/api/client/artifact/artifacts.pb.go
+++ b/api/client/artifact/artifacts.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: artifact/artifacts.proto
 
 package artifact
diff --git a/api/client/artifact/bitbucket.pb.go b/api/client/artifact/bitbucket.pb.go
index 4a479c90..1a3837ff 100644
--- a/api/client/artifact/bitbucket.pb.go
+++ b/api/client/artifact/bitbucket.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: artifact/bitbucket.proto
 
 package artifact
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Bitbucket struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the Bitbucket artifact provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured Bitbucket accounts.
 	Accounts []*BitbucketAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 }
@@ -70,7 +70,7 @@ func (*Bitbucket) Descriptor() ([]byte, []int) {
 	return file_artifact_bitbucket_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Bitbucket) GetEnabled() *wrappers.BoolValue {
+func (x *Bitbucket) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -206,9 +206,9 @@ func file_artifact_bitbucket_proto_rawDescGZIP() []byte {
 
 var file_artifact_bitbucket_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_artifact_bitbucket_proto_goTypes = []interface{}{
-	(*Bitbucket)(nil),          // 0: proto.artifact.Bitbucket
-	(*BitbucketAccount)(nil),   // 1: proto.artifact.BitbucketAccount
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*Bitbucket)(nil),            // 0: proto.artifact.Bitbucket
+	(*BitbucketAccount)(nil),     // 1: proto.artifact.BitbucketAccount
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
 }
 var file_artifact_bitbucket_proto_depIdxs = []int32{
 	2, // 0: proto.artifact.Bitbucket.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/artifact/gcs.pb.go b/api/client/artifact/gcs.pb.go
index c418337b..b965f515 100644
--- a/api/client/artifact/gcs.pb.go
+++ b/api/client/artifact/gcs.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: artifact/gcs.proto
 
 package artifact
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Gcs struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the Google Cloud Storage artifact provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured Cloud Storage accounts.
 	Accounts []*GcsAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 }
@@ -70,7 +70,7 @@ func (*Gcs) Descriptor() ([]byte, []int) {
 	return file_artifact_gcs_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Gcs) GetEnabled() *wrappers.BoolValue {
+func (x *Gcs) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -182,9 +182,9 @@ func file_artifact_gcs_proto_rawDescGZIP() []byte {
 
 var file_artifact_gcs_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_artifact_gcs_proto_goTypes = []interface{}{
-	(*Gcs)(nil),                // 0: proto.artifact.Gcs
-	(*GcsAccount)(nil),         // 1: proto.artifact.GcsAccount
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*Gcs)(nil),                  // 0: proto.artifact.Gcs
+	(*GcsAccount)(nil),           // 1: proto.artifact.GcsAccount
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
 }
 var file_artifact_gcs_proto_depIdxs = []int32{
 	2, // 0: proto.artifact.Gcs.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/artifact/github.pb.go b/api/client/artifact/github.pb.go
index 605ab60a..cdb7676b 100644
--- a/api/client/artifact/github.pb.go
+++ b/api/client/artifact/github.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: artifact/github.proto
 
 package artifact
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type GitHub struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the GitHub artifact provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured GitHub accounts.
 	Accounts []*GitHubAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 }
@@ -70,7 +70,7 @@ func (*GitHub) Descriptor() ([]byte, []int) {
 	return file_artifact_github_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *GitHub) GetEnabled() *wrappers.BoolValue {
+func (x *GitHub) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -233,9 +233,9 @@ func file_artifact_github_proto_rawDescGZIP() []byte {
 
 var file_artifact_github_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_artifact_github_proto_goTypes = []interface{}{
-	(*GitHub)(nil),             // 0: proto.artifact.GitHub
-	(*GitHubAccount)(nil),      // 1: proto.artifact.GitHubAccount
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*GitHub)(nil),               // 0: proto.artifact.GitHub
+	(*GitHubAccount)(nil),        // 1: proto.artifact.GitHubAccount
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
 }
 var file_artifact_github_proto_depIdxs = []int32{
 	2, // 0: proto.artifact.GitHub.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/artifact/gitlab.pb.go b/api/client/artifact/gitlab.pb.go
index fba92cc8..739ee37d 100644
--- a/api/client/artifact/gitlab.pb.go
+++ b/api/client/artifact/gitlab.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: artifact/gitlab.proto
 
 package artifact
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type GitLab struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the GitLab artifact provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured GitLab accounts.
 	Accounts []*GitLabAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 }
@@ -70,7 +70,7 @@ func (*GitLab) Descriptor() ([]byte, []int) {
 	return file_artifact_gitlab_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *GitLab) GetEnabled() *wrappers.BoolValue {
+func (x *GitLab) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -193,9 +193,9 @@ func file_artifact_gitlab_proto_rawDescGZIP() []byte {
 
 var file_artifact_gitlab_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_artifact_gitlab_proto_goTypes = []interface{}{
-	(*GitLab)(nil),             // 0: proto.artifact.GitLab
-	(*GitLabAccount)(nil),      // 1: proto.artifact.GitLabAccount
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*GitLab)(nil),               // 0: proto.artifact.GitLab
+	(*GitLabAccount)(nil),        // 1: proto.artifact.GitLabAccount
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
 }
 var file_artifact_gitlab_proto_depIdxs = []int32{
 	2, // 0: proto.artifact.GitLab.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/artifact/gitrepo.pb.go b/api/client/artifact/gitrepo.pb.go
index b668a3e9..15d722f8 100644
--- a/api/client/artifact/gitrepo.pb.go
+++ b/api/client/artifact/gitrepo.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: artifact/gitrepo.proto
 
 package artifact
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type GitRepo struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the Git repo artifact provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured Git Repo accounts.
 	Accounts []*GitRepoAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 }
@@ -70,7 +70,7 @@ func (*GitRepo) Descriptor() ([]byte, []int) {
 	return file_artifact_gitrepo_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *GitRepo) GetEnabled() *wrappers.BoolValue {
+func (x *GitRepo) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -123,7 +123,7 @@ type GitRepoAccount struct {
 	SshKnownHostsFilePath string `protobuf:"bytes,9,opt,name=sshKnownHostsFilePath,proto3" json:"sshKnownHostsFilePath,omitempty"`
 	// If `true`, Spinnaker can connect with a Git repository over SSH without
 	// verifying the server's IP address against a `known_hosts` file.
-	SshTrustUnknownHosts *wrappers.BoolValue `protobuf:"bytes,10,opt,name=sshTrustUnknownHosts,proto3" json:"sshTrustUnknownHosts,omitempty"`
+	SshTrustUnknownHosts *wrapperspb.BoolValue `protobuf:"bytes,10,opt,name=sshTrustUnknownHosts,proto3" json:"sshTrustUnknownHosts,omitempty"`
 }
 
 func (x *GitRepoAccount) Reset() {
@@ -221,7 +221,7 @@ func (x *GitRepoAccount) GetSshKnownHostsFilePath() string {
 	return ""
 }
 
-func (x *GitRepoAccount) GetSshTrustUnknownHosts() *wrappers.BoolValue {
+func (x *GitRepoAccount) GetSshTrustUnknownHosts() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.SshTrustUnknownHosts
 	}
@@ -291,9 +291,9 @@ func file_artifact_gitrepo_proto_rawDescGZIP() []byte {
 
 var file_artifact_gitrepo_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_artifact_gitrepo_proto_goTypes = []interface{}{
-	(*GitRepo)(nil),            // 0: proto.artifact.GitRepo
-	(*GitRepoAccount)(nil),     // 1: proto.artifact.GitRepoAccount
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*GitRepo)(nil),              // 0: proto.artifact.GitRepo
+	(*GitRepoAccount)(nil),       // 1: proto.artifact.GitRepoAccount
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
 }
 var file_artifact_gitrepo_proto_depIdxs = []int32{
 	2, // 0: proto.artifact.GitRepo.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/artifact/helm.pb.go b/api/client/artifact/helm.pb.go
index f24f7479..eca47cd1 100644
--- a/api/client/artifact/helm.pb.go
+++ b/api/client/artifact/helm.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: artifact/helm.proto
 
 package artifact
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Helm struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the Helm artifact provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured Helm accounts.
 	Accounts []*HelmAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 }
@@ -70,7 +70,7 @@ func (*Helm) Descriptor() ([]byte, []int) {
 	return file_artifact_helm_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Helm) GetEnabled() *wrappers.BoolValue {
+func (x *Helm) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -218,9 +218,9 @@ func file_artifact_helm_proto_rawDescGZIP() []byte {
 
 var file_artifact_helm_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_artifact_helm_proto_goTypes = []interface{}{
-	(*Helm)(nil),               // 0: proto.artifact.Helm
-	(*HelmAccount)(nil),        // 1: proto.artifact.HelmAccount
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*Helm)(nil),                 // 0: proto.artifact.Helm
+	(*HelmAccount)(nil),          // 1: proto.artifact.HelmAccount
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
 }
 var file_artifact_helm_proto_depIdxs = []int32{
 	2, // 0: proto.artifact.Helm.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/artifact/http.pb.go b/api/client/artifact/http.pb.go
index f8669430..4e50a860 100644
--- a/api/client/artifact/http.pb.go
+++ b/api/client/artifact/http.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: artifact/http.proto
 
 package artifact
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Http struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the HTTP artifact provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured HTTP accounts.
 	Accounts []*HttpAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 }
@@ -70,7 +70,7 @@ func (*Http) Descriptor() ([]byte, []int) {
 	return file_artifact_http_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Http) GetEnabled() *wrappers.BoolValue {
+func (x *Http) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -207,9 +207,9 @@ func file_artifact_http_proto_rawDescGZIP() []byte {
 
 var file_artifact_http_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_artifact_http_proto_goTypes = []interface{}{
-	(*Http)(nil),               // 0: proto.artifact.Http
-	(*HttpAccount)(nil),        // 1: proto.artifact.HttpAccount
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*Http)(nil),                 // 0: proto.artifact.Http
+	(*HttpAccount)(nil),          // 1: proto.artifact.HttpAccount
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
 }
 var file_artifact_http_proto_depIdxs = []int32{
 	2, // 0: proto.artifact.Http.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/artifact/maven.pb.go b/api/client/artifact/maven.pb.go
index 5a4000cd..9c179103 100644
--- a/api/client/artifact/maven.pb.go
+++ b/api/client/artifact/maven.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: artifact/maven.proto
 
 package artifact
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Maven struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the Maven artifact provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured Maven accounts.
 	Accounts []*MavenAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 }
@@ -70,7 +70,7 @@ func (*Maven) Descriptor() ([]byte, []int) {
 	return file_artifact_maven_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Maven) GetEnabled() *wrappers.BoolValue {
+func (x *Maven) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -183,9 +183,9 @@ func file_artifact_maven_proto_rawDescGZIP() []byte {
 
 var file_artifact_maven_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_artifact_maven_proto_goTypes = []interface{}{
-	(*Maven)(nil),              // 0: proto.artifact.Maven
-	(*MavenAccount)(nil),       // 1: proto.artifact.MavenAccount
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*Maven)(nil),                // 0: proto.artifact.Maven
+	(*MavenAccount)(nil),         // 1: proto.artifact.MavenAccount
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
 }
 var file_artifact_maven_proto_depIdxs = []int32{
 	2, // 0: proto.artifact.Maven.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/artifact/oracle.pb.go b/api/client/artifact/oracle.pb.go
index f77e3d0f..b33bfe15 100644
--- a/api/client/artifact/oracle.pb.go
+++ b/api/client/artifact/oracle.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: artifact/oracle.proto
 
 package artifact
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Oracle struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the Oracle artifact provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured Oracle artifact accounts.
 	Accounts []*OracleAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 }
@@ -70,7 +70,7 @@ func (*Oracle) Descriptor() ([]byte, []int) {
 	return file_artifact_oracle_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Oracle) GetEnabled() *wrappers.BoolValue {
+func (x *Oracle) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -249,9 +249,9 @@ func file_artifact_oracle_proto_rawDescGZIP() []byte {
 
 var file_artifact_oracle_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_artifact_oracle_proto_goTypes = []interface{}{
-	(*Oracle)(nil),             // 0: proto.artifact.Oracle
-	(*OracleAccount)(nil),      // 1: proto.artifact.OracleAccount
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*Oracle)(nil),               // 0: proto.artifact.Oracle
+	(*OracleAccount)(nil),        // 1: proto.artifact.OracleAccount
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
 }
 var file_artifact_oracle_proto_depIdxs = []int32{
 	2, // 0: proto.artifact.Oracle.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/artifact/s3.pb.go b/api/client/artifact/s3.pb.go
index cd75e568..459aa202 100644
--- a/api/client/artifact/s3.pb.go
+++ b/api/client/artifact/s3.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: artifact/s3.proto
 
 package artifact
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type S3 struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the S3 artifact provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured S3 artifact accounts.
 	Accounts []*S3Account `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 }
@@ -70,7 +70,7 @@ func (*S3) Descriptor() ([]byte, []int) {
 	return file_artifact_s3_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *S3) GetEnabled() *wrappers.BoolValue {
+func (x *S3) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -230,9 +230,9 @@ func file_artifact_s3_proto_rawDescGZIP() []byte {
 
 var file_artifact_s3_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_artifact_s3_proto_goTypes = []interface{}{
-	(*S3)(nil),                 // 0: proto.artifact.S3
-	(*S3Account)(nil),          // 1: proto.artifact.S3Account
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*S3)(nil),                   // 0: proto.artifact.S3
+	(*S3Account)(nil),            // 1: proto.artifact.S3Account
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
 }
 var file_artifact_s3_proto_depIdxs = []int32{
 	2, // 0: proto.artifact.S3.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/artifact/template.pb.go b/api/client/artifact/template.pb.go
index c9cc9637..4921dcc5 100644
--- a/api/client/artifact/template.pb.go
+++ b/api/client/artifact/template.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: artifact/template.proto
 
 package artifact
diff --git a/api/client/canary/aws.pb.go b/api/client/canary/aws.pb.go
index 0d451c2b..6c05527b 100644
--- a/api/client/canary/aws.pb.go
+++ b/api/client/canary/aws.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: canary/aws.proto
 
 package canary
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -34,11 +34,11 @@ type Aws struct {
 
 	// Enables/disables Kayenta integration for AWS. If enabled, Kayenta can
 	// store canary configuration and archived results in an S3 bucket.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured accounts.
 	Accounts []*AwsAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 	// Whether to enable S3 as a persistent store.
-	S3Enabled *wrappers.BoolValue `protobuf:"bytes,3,opt,name=s3Enabled,proto3" json:"s3Enabled,omitempty"`
+	S3Enabled *wrapperspb.BoolValue `protobuf:"bytes,3,opt,name=s3Enabled,proto3" json:"s3Enabled,omitempty"`
 }
 
 func (x *Aws) Reset() {
@@ -73,7 +73,7 @@ func (*Aws) Descriptor() ([]byte, []int) {
 	return file_canary_aws_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Aws) GetEnabled() *wrappers.BoolValue {
+func (x *Aws) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -87,7 +87,7 @@ func (x *Aws) GetAccounts() []*AwsAccount {
 	return nil
 }
 
-func (x *Aws) GetS3Enabled() *wrappers.BoolValue {
+func (x *Aws) GetS3Enabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.S3Enabled
 	}
@@ -110,7 +110,7 @@ type AwsAccount struct {
 	Region string `protobuf:"bytes,3,opt,name=region,proto3" json:"region,omitempty"`
 	// The root folder in the chosen bucket in which to store all of the canary
 	// service's persistent data. Defaults to `kayenta`.
-	RootFolder *wrappers.StringValue `protobuf:"bytes,4,opt,name=rootFolder,proto3" json:"rootFolder,omitempty"`
+	RootFolder *wrapperspb.StringValue `protobuf:"bytes,4,opt,name=rootFolder,proto3" json:"rootFolder,omitempty"`
 	// The profile name to use when resolving AWS credentials. Typically found in
 	// `~/.aws/credentials`. Defaults to `default`.
 	ProfileName string `protobuf:"bytes,5,opt,name=profileName,proto3" json:"profileName,omitempty"`
@@ -177,7 +177,7 @@ func (x *AwsAccount) GetRegion() string {
 	return ""
 }
 
-func (x *AwsAccount) GetRootFolder() *wrappers.StringValue {
+func (x *AwsAccount) GetRootFolder() *wrapperspb.StringValue {
 	if x != nil {
 		return x.RootFolder
 	}
@@ -271,11 +271,11 @@ func file_canary_aws_proto_rawDescGZIP() []byte {
 
 var file_canary_aws_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_canary_aws_proto_goTypes = []interface{}{
-	(*Aws)(nil),                  // 0: proto.canary.Aws
-	(*AwsAccount)(nil),           // 1: proto.canary.AwsAccount
-	(*wrappers.BoolValue)(nil),   // 2: google.protobuf.BoolValue
-	(*wrappers.StringValue)(nil), // 3: google.protobuf.StringValue
-	(SupportedType)(0),           // 4: proto.canary.SupportedType
+	(*Aws)(nil),                    // 0: proto.canary.Aws
+	(*AwsAccount)(nil),             // 1: proto.canary.AwsAccount
+	(*wrapperspb.BoolValue)(nil),   // 2: google.protobuf.BoolValue
+	(*wrapperspb.StringValue)(nil), // 3: google.protobuf.StringValue
+	(SupportedType)(0),             // 4: proto.canary.SupportedType
 }
 var file_canary_aws_proto_depIdxs = []int32{
 	2, // 0: proto.canary.Aws.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/canary/canary.pb.go b/api/client/canary/canary.pb.go
index ae95fd03..6b21c0a5 100644
--- a/api/client/canary/canary.pb.go
+++ b/api/client/canary/canary.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: canary/canary.proto
 
 package canary
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -35,7 +35,7 @@ type Canary struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the canary service is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// Canary service integrations. To enable Spinnaker's Automated Canary
 	// Analysis (ACA) features, you must configure at least one account for each
 	// `canary.SupportedType` (`METRICS_STORE`, `CONFIGURATION_STORE`,
@@ -47,9 +47,9 @@ type Canary struct {
 	DefaultMetricsStore string `protobuf:"bytes,4,opt,name=defaultMetricsStore,proto3" json:"defaultMetricsStore,omitempty"`
 	// Whether to show _all_ canary configs in Deck, or just those scoped to
 	// the current application.
-	ShowAllConfigsEnabled *wrappers.BoolValue `protobuf:"bytes,5,opt,name=showAllConfigsEnabled,proto3" json:"showAllConfigsEnabled,omitempty"`
+	ShowAllConfigsEnabled *wrapperspb.BoolValue `protobuf:"bytes,5,opt,name=showAllConfigsEnabled,proto3" json:"showAllConfigsEnabled,omitempty"`
 	// Whether to enable custom filter templates for canary configs in Deck.
-	TemplatesEnabled *wrappers.BoolValue `protobuf:"bytes,6,opt,name=templatesEnabled,proto3" json:"templatesEnabled,omitempty"`
+	TemplatesEnabled *wrapperspb.BoolValue `protobuf:"bytes,6,opt,name=templatesEnabled,proto3" json:"templatesEnabled,omitempty"`
 	// The default canary judge. `NetflixACAJudge-v1.0` is
 	// currently the only open-source judge available by default.
 	DefaultJudge string `protobuf:"bytes,7,opt,name=defaultJudge,proto3" json:"defaultJudge,omitempty"`
@@ -89,7 +89,7 @@ func (*Canary) Descriptor() ([]byte, []int) {
 	return file_canary_canary_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Canary) GetEnabled() *wrappers.BoolValue {
+func (x *Canary) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -117,14 +117,14 @@ func (x *Canary) GetDefaultMetricsStore() string {
 	return ""
 }
 
-func (x *Canary) GetShowAllConfigsEnabled() *wrappers.BoolValue {
+func (x *Canary) GetShowAllConfigsEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.ShowAllConfigsEnabled
 	}
 	return nil
 }
 
-func (x *Canary) GetTemplatesEnabled() *wrappers.BoolValue {
+func (x *Canary) GetTemplatesEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.TemplatesEnabled
 	}
@@ -320,7 +320,7 @@ var file_canary_canary_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_canary_canary_proto_goTypes = []interface{}{
 	(*Canary)(nil),                     // 0: proto.canary.Canary
 	(*Canary_ServiceIntegrations)(nil), // 1: proto.canary.Canary.ServiceIntegrations
-	(*wrappers.BoolValue)(nil),         // 2: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),       // 2: google.protobuf.BoolValue
 	(*Aws)(nil),                        // 3: proto.canary.Aws
 	(*Datadog)(nil),                    // 4: proto.canary.Datadog
 	(*Google)(nil),                     // 5: proto.canary.Google
diff --git a/api/client/canary/datadog.pb.go b/api/client/canary/datadog.pb.go
index a1f561b6..a95b02e6 100644
--- a/api/client/canary/datadog.pb.go
+++ b/api/client/canary/datadog.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: canary/datadog.proto
 
 package canary
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Datadog struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Datadog is enabled as a metric store provider.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured Datadog accounts.
 	Accounts []*DatadogAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 }
@@ -70,7 +70,7 @@ func (*Datadog) Descriptor() ([]byte, []int) {
 	return file_canary_datadog_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Datadog) GetEnabled() *wrappers.BoolValue {
+func (x *Datadog) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -262,7 +262,7 @@ var file_canary_datadog_proto_goTypes = []interface{}{
 	(*Datadog)(nil),                 // 0: proto.canary.Datadog
 	(*DatadogAccount)(nil),          // 1: proto.canary.DatadogAccount
 	(*DatadogAccount_Endpoint)(nil), // 2: proto.canary.DatadogAccount.Endpoint
-	(*wrappers.BoolValue)(nil),      // 3: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),    // 3: google.protobuf.BoolValue
 }
 var file_canary_datadog_proto_depIdxs = []int32{
 	3, // 0: proto.canary.Datadog.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/canary/gcs.pb.go b/api/client/canary/gcs.pb.go
index 8bd88921..8f332803 100644
--- a/api/client/canary/gcs.pb.go
+++ b/api/client/canary/gcs.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: canary/gcs.proto
 
 package canary
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -38,7 +38,7 @@ type Gcs struct {
 
 	// Whether Google Cloud Storage is enabled as a backing store to support
 	// Spinnaker's automated canary analysis features.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 }
 
 func (x *Gcs) Reset() {
@@ -73,7 +73,7 @@ func (*Gcs) Descriptor() ([]byte, []int) {
 	return file_canary_gcs_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Gcs) GetEnabled() *wrappers.BoolValue {
+func (x *Gcs) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -111,8 +111,8 @@ func file_canary_gcs_proto_rawDescGZIP() []byte {
 
 var file_canary_gcs_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_canary_gcs_proto_goTypes = []interface{}{
-	(*Gcs)(nil),                // 0: proto.canary.Gcs
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*Gcs)(nil),                  // 0: proto.canary.Gcs
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_canary_gcs_proto_depIdxs = []int32{
 	1, // 0: proto.canary.Gcs.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/canary/google.pb.go b/api/client/canary/google.pb.go
index 20b2e83b..7e08ab12 100644
--- a/api/client/canary/google.pb.go
+++ b/api/client/canary/google.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: canary/google.proto
 
 package canary
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,13 +33,13 @@ type Google struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Google is enabled as a metrics store provider.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured accounts.
 	Accounts []*GoogleAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 	// Whether Google Cloud Storage is enabled as a persistent store.
-	GcsEnabled *wrappers.BoolValue `protobuf:"bytes,3,opt,name=gcsEnabled,proto3" json:"gcsEnabled,omitempty"`
+	GcsEnabled *wrapperspb.BoolValue `protobuf:"bytes,3,opt,name=gcsEnabled,proto3" json:"gcsEnabled,omitempty"`
 	// Whether Google Cloud Monitoring (formerly Stackdriver) is enabled as a metrics source.
-	StackdriverEnabled *wrappers.BoolValue `protobuf:"bytes,4,opt,name=stackdriverEnabled,proto3" json:"stackdriverEnabled,omitempty"`
+	StackdriverEnabled *wrapperspb.BoolValue `protobuf:"bytes,4,opt,name=stackdriverEnabled,proto3" json:"stackdriverEnabled,omitempty"`
 	// Number of milliseconds to wait between caching the names of available
 	// Cloud Monitoring metric types (used when building canary configs). Defaults to
 	// `60000`.
@@ -78,7 +78,7 @@ func (*Google) Descriptor() ([]byte, []int) {
 	return file_canary_google_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Google) GetEnabled() *wrappers.BoolValue {
+func (x *Google) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -92,14 +92,14 @@ func (x *Google) GetAccounts() []*GoogleAccount {
 	return nil
 }
 
-func (x *Google) GetGcsEnabled() *wrappers.BoolValue {
+func (x *Google) GetGcsEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.GcsEnabled
 	}
 	return nil
 }
 
-func (x *Google) GetStackdriverEnabled() *wrappers.BoolValue {
+func (x *Google) GetStackdriverEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.StackdriverEnabled
 	}
@@ -139,7 +139,7 @@ type GoogleAccount struct {
 	BucketLocation string `protobuf:"bytes,4,opt,name=bucketLocation,proto3" json:"bucketLocation,omitempty"`
 	// The root-level folder, in the specified bucket, in which to store all
 	// the canary service's persistent data. Defaults to `kayenta`.
-	RootFolder *wrappers.StringValue `protobuf:"bytes,5,opt,name=rootFolder,proto3" json:"rootFolder,omitempty"`
+	RootFolder *wrapperspb.StringValue `protobuf:"bytes,5,opt,name=rootFolder,proto3" json:"rootFolder,omitempty"`
 	// (Required) The Google Cloud Platform project the canary service will use to
 	// consume Cloud Storage and Cloud Monitoring data.
 	Project string `protobuf:"bytes,6,opt,name=project,proto3" json:"project,omitempty"`
@@ -210,7 +210,7 @@ func (x *GoogleAccount) GetBucketLocation() string {
 	return ""
 }
 
-func (x *GoogleAccount) GetRootFolder() *wrappers.StringValue {
+func (x *GoogleAccount) GetRootFolder() *wrapperspb.StringValue {
 	if x != nil {
 		return x.RootFolder
 	}
@@ -298,11 +298,11 @@ func file_canary_google_proto_rawDescGZIP() []byte {
 
 var file_canary_google_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_canary_google_proto_goTypes = []interface{}{
-	(*Google)(nil),               // 0: proto.canary.Google
-	(*GoogleAccount)(nil),        // 1: proto.canary.GoogleAccount
-	(*wrappers.BoolValue)(nil),   // 2: google.protobuf.BoolValue
-	(*wrappers.StringValue)(nil), // 3: google.protobuf.StringValue
-	(SupportedType)(0),           // 4: proto.canary.SupportedType
+	(*Google)(nil),                 // 0: proto.canary.Google
+	(*GoogleAccount)(nil),          // 1: proto.canary.GoogleAccount
+	(*wrapperspb.BoolValue)(nil),   // 2: google.protobuf.BoolValue
+	(*wrapperspb.StringValue)(nil), // 3: google.protobuf.StringValue
+	(SupportedType)(0),             // 4: proto.canary.SupportedType
 }
 var file_canary_google_proto_depIdxs = []int32{
 	2, // 0: proto.canary.Google.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/canary/newrelic.pb.go b/api/client/canary/newrelic.pb.go
index 9f7cc7a2..c6fb0c9d 100644
--- a/api/client/canary/newrelic.pb.go
+++ b/api/client/canary/newrelic.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: canary/newrelic.proto
 
 package canary
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type NewRelic struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether New Relic is enabled as a metric store provider.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured accounts.
 	Accounts []*NewRelicAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 }
@@ -70,7 +70,7 @@ func (*NewRelic) Descriptor() ([]byte, []int) {
 	return file_canary_newrelic_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *NewRelic) GetEnabled() *wrappers.BoolValue {
+func (x *NewRelic) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -262,7 +262,7 @@ var file_canary_newrelic_proto_goTypes = []interface{}{
 	(*NewRelic)(nil),                 // 0: proto.canary.NewRelic
 	(*NewRelicAccount)(nil),          // 1: proto.canary.NewRelicAccount
 	(*NewRelicAccount_Endpoint)(nil), // 2: proto.canary.NewRelicAccount.Endpoint
-	(*wrappers.BoolValue)(nil),       // 3: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),     // 3: google.protobuf.BoolValue
 }
 var file_canary_newrelic_proto_depIdxs = []int32{
 	3, // 0: proto.canary.NewRelic.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/canary/prometheus.pb.go b/api/client/canary/prometheus.pb.go
index 249cc011..e8d864a6 100644
--- a/api/client/canary/prometheus.pb.go
+++ b/api/client/canary/prometheus.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: canary/prometheus.proto
 
 package canary
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Prometheus struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Prometheus is enabled as a metric store provider.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured accounts.
 	Accounts []*PrometheusAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 	// Number of milliseconds to wait between caching the names of available
@@ -73,7 +73,7 @@ func (*Prometheus) Descriptor() ([]byte, []int) {
 	return file_canary_prometheus_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Prometheus) GetEnabled() *wrappers.BoolValue {
+func (x *Prometheus) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -290,7 +290,7 @@ var file_canary_prometheus_proto_goTypes = []interface{}{
 	(*Prometheus)(nil),                 // 0: proto.canary.Prometheus
 	(*PrometheusAccount)(nil),          // 1: proto.canary.PrometheusAccount
 	(*PrometheusAccount_Endpoint)(nil), // 2: proto.canary.PrometheusAccount.Endpoint
-	(*wrappers.BoolValue)(nil),         // 3: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),       // 3: google.protobuf.BoolValue
 }
 var file_canary_prometheus_proto_depIdxs = []int32{
 	3, // 0: proto.canary.Prometheus.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/canary/s3.pb.go b/api/client/canary/s3.pb.go
index 1eacad5d..c21d2e96 100644
--- a/api/client/canary/s3.pb.go
+++ b/api/client/canary/s3.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: canary/s3.proto
 
 package canary
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -37,7 +37,7 @@ type S3 struct {
 
 	// Whether S3 is enabled as a backing store to support Spinnaker's automated
 	// canary analysis features.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 }
 
 func (x *S3) Reset() {
@@ -72,7 +72,7 @@ func (*S3) Descriptor() ([]byte, []int) {
 	return file_canary_s3_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *S3) GetEnabled() *wrappers.BoolValue {
+func (x *S3) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -110,8 +110,8 @@ func file_canary_s3_proto_rawDescGZIP() []byte {
 
 var file_canary_s3_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_canary_s3_proto_goTypes = []interface{}{
-	(*S3)(nil),                 // 0: proto.canary.S3
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*S3)(nil),                   // 0: proto.canary.S3
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_canary_s3_proto_depIdxs = []int32{
 	1, // 0: proto.canary.S3.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/canary/signalfx.pb.go b/api/client/canary/signalfx.pb.go
index fe747d20..3632bc88 100644
--- a/api/client/canary/signalfx.pb.go
+++ b/api/client/canary/signalfx.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: canary/signalfx.proto
 
 package canary
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type SignalFx struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether SignalFx is enabled as a metric store provider.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured accounts.
 	Accounts []*SignalFxAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 }
@@ -70,7 +70,7 @@ func (*SignalFx) Descriptor() ([]byte, []int) {
 	return file_canary_signalfx_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *SignalFx) GetEnabled() *wrappers.BoolValue {
+func (x *SignalFx) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -276,7 +276,7 @@ var file_canary_signalfx_proto_goTypes = []interface{}{
 	(*SignalFx)(nil),                 // 0: proto.canary.SignalFx
 	(*SignalFxAccount)(nil),          // 1: proto.canary.SignalFxAccount
 	(*SignalFxAccount_Endpoint)(nil), // 2: proto.canary.SignalFxAccount.Endpoint
-	(*wrappers.BoolValue)(nil),       // 3: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),     // 3: google.protobuf.BoolValue
 }
 var file_canary_signalfx_proto_depIdxs = []int32{
 	3, // 0: proto.canary.SignalFx.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/canary/stackdriver.pb.go b/api/client/canary/stackdriver.pb.go
index a0ed86db..cfd93e54 100644
--- a/api/client/canary/stackdriver.pb.go
+++ b/api/client/canary/stackdriver.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: canary/stackdriver.proto
 
 package canary
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -36,7 +36,7 @@ type Stackdriver struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the Cloud Monitoring integration is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// Number of milliseconds to wait between caching the names of available
 	// Cloud Monitoring metric types (used when building canary configs).
 	// Defaults to 60000.
@@ -75,7 +75,7 @@ func (*Stackdriver) Descriptor() ([]byte, []int) {
 	return file_canary_stackdriver_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Stackdriver) GetEnabled() *wrappers.BoolValue {
+func (x *Stackdriver) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -125,8 +125,8 @@ func file_canary_stackdriver_proto_rawDescGZIP() []byte {
 
 var file_canary_stackdriver_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_canary_stackdriver_proto_goTypes = []interface{}{
-	(*Stackdriver)(nil),        // 0: proto.canary.Stackdriver
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*Stackdriver)(nil),          // 0: proto.canary.Stackdriver
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_canary_stackdriver_proto_depIdxs = []int32{
 	1, // 0: proto.canary.Stackdriver.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/canary/supported_type.pb.go b/api/client/canary/supported_type.pb.go
index 30cb7c6b..23e59628 100644
--- a/api/client/canary/supported_type.pb.go
+++ b/api/client/canary/supported_type.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: canary/supported_type.proto
 
 package canary
diff --git a/api/client/ci/ci.pb.go b/api/client/ci/ci.pb.go
index e435f274..78b7e5e9 100644
--- a/api/client/ci/ci.pb.go
+++ b/api/client/ci/ci.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: ci/ci.proto
 
 package ci
diff --git a/api/client/ci/codebuild.pb.go b/api/client/ci/codebuild.pb.go
index 29832d35..a5e4f3d1 100644
--- a/api/client/ci/codebuild.pb.go
+++ b/api/client/ci/codebuild.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: ci/codebuild.proto
 
 package ci
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type CodeBuild struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether AWS CodeBuild is enabled as a CI provider.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured AWS CodeBuild accounts.
 	Accounts []*CodeBuildAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 	// Your AWS Access Key ID. If not provided, Spinnaker tries to find AWS
@@ -76,7 +76,7 @@ func (*CodeBuild) Descriptor() ([]byte, []int) {
 	return file_ci_codebuild_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *CodeBuild) GetEnabled() *wrappers.BoolValue {
+func (x *CodeBuild) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -228,9 +228,9 @@ func file_ci_codebuild_proto_rawDescGZIP() []byte {
 
 var file_ci_codebuild_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_ci_codebuild_proto_goTypes = []interface{}{
-	(*CodeBuild)(nil),          // 0: proto.ci.CodeBuild
-	(*CodeBuildAccount)(nil),   // 1: proto.ci.CodeBuildAccount
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*CodeBuild)(nil),            // 0: proto.ci.CodeBuild
+	(*CodeBuildAccount)(nil),     // 1: proto.ci.CodeBuildAccount
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
 }
 var file_ci_codebuild_proto_depIdxs = []int32{
 	2, // 0: proto.ci.CodeBuild.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/ci/concourse.pb.go b/api/client/ci/concourse.pb.go
index ec3c657d..49861d3c 100644
--- a/api/client/ci/concourse.pb.go
+++ b/api/client/ci/concourse.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: ci/concourse.proto
 
 package ci
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -34,7 +34,7 @@ type Concourse struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Concourse is enabled as a CI provider.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured Concourse accounts.
 	Masters []*ConcourseAccount `protobuf:"bytes,2,rep,name=masters,proto3" json:"masters,omitempty"`
 }
@@ -71,7 +71,7 @@ func (*Concourse) Descriptor() ([]byte, []int) {
 	return file_ci_concourse_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Concourse) GetEnabled() *wrappers.BoolValue {
+func (x *Concourse) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -219,10 +219,10 @@ func file_ci_concourse_proto_rawDescGZIP() []byte {
 
 var file_ci_concourse_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_ci_concourse_proto_goTypes = []interface{}{
-	(*Concourse)(nil),          // 0: proto.ci.Concourse
-	(*ConcourseAccount)(nil),   // 1: proto.ci.ConcourseAccount
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
-	(*client.Permissions)(nil), // 3: proto.Permissions
+	(*Concourse)(nil),            // 0: proto.ci.Concourse
+	(*ConcourseAccount)(nil),     // 1: proto.ci.ConcourseAccount
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*client.Permissions)(nil),   // 3: proto.Permissions
 }
 var file_ci_concourse_proto_depIdxs = []int32{
 	2, // 0: proto.ci.Concourse.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/ci/gcb.pb.go b/api/client/ci/gcb.pb.go
index 55440745..c21dcf08 100644
--- a/api/client/ci/gcb.pb.go
+++ b/api/client/ci/gcb.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: ci/gcb.proto
 
 package ci
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -34,7 +34,7 @@ type GoogleCloudBuild struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Cloud Build is enabled as a CI provider.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured Cloud Build accounts.
 	Accounts []*GoogleCloudBuildAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 }
@@ -71,7 +71,7 @@ func (*GoogleCloudBuild) Descriptor() ([]byte, []int) {
 	return file_ci_gcb_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *GoogleCloudBuild) GetEnabled() *wrappers.BoolValue {
+func (x *GoogleCloudBuild) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -225,7 +225,7 @@ var file_ci_gcb_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_ci_gcb_proto_goTypes = []interface{}{
 	(*GoogleCloudBuild)(nil),        // 0: proto.ci.GoogleCloudBuild
 	(*GoogleCloudBuildAccount)(nil), // 1: proto.ci.GoogleCloudBuildAccount
-	(*wrappers.BoolValue)(nil),      // 2: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),    // 2: google.protobuf.BoolValue
 	(*client.Permissions)(nil),      // 3: proto.Permissions
 }
 var file_ci_gcb_proto_depIdxs = []int32{
diff --git a/api/client/ci/jenkins.pb.go b/api/client/ci/jenkins.pb.go
index 5233e207..01d577bc 100644
--- a/api/client/ci/jenkins.pb.go
+++ b/api/client/ci/jenkins.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: ci/jenkins.proto
 
 package ci
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -34,7 +34,7 @@ type Jenkins struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Jenkins is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured Jenkins accounts.
 	Masters []*JenkinsAccount `protobuf:"bytes,2,rep,name=masters,proto3" json:"masters,omitempty"`
 }
@@ -71,7 +71,7 @@ func (*Jenkins) Descriptor() ([]byte, []int) {
 	return file_ci_jenkins_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Jenkins) GetEnabled() *wrappers.BoolValue {
+func (x *Jenkins) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -100,7 +100,7 @@ type JenkinsAccount struct {
 	// (Required) The URL at which the Jenkins server is reachable.
 	Address string `protobuf:"bytes,4,opt,name=address,proto3" json:"address,omitempty"`
 	// Whether or not to negotiate CSRF tokens when calling Jenkins.
-	Csrf *wrappers.BoolValue `protobuf:"bytes,5,opt,name=csrf,proto3" json:"csrf,omitempty"`
+	Csrf *wrapperspb.BoolValue `protobuf:"bytes,5,opt,name=csrf,proto3" json:"csrf,omitempty"`
 	// Fiat permissions configuration. A user must have at least one of the READ
 	// roles in order to view this build account or use it as a trigger source.
 	// A user must have at least one of the WRITE roles in order to run jobs on
@@ -168,7 +168,7 @@ func (x *JenkinsAccount) GetAddress() string {
 	return ""
 }
 
-func (x *JenkinsAccount) GetCsrf() *wrappers.BoolValue {
+func (x *JenkinsAccount) GetCsrf() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Csrf
 	}
@@ -231,10 +231,10 @@ func file_ci_jenkins_proto_rawDescGZIP() []byte {
 
 var file_ci_jenkins_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_ci_jenkins_proto_goTypes = []interface{}{
-	(*Jenkins)(nil),            // 0: proto.ci.Jenkins
-	(*JenkinsAccount)(nil),     // 1: proto.ci.JenkinsAccount
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
-	(*client.Permissions)(nil), // 3: proto.Permissions
+	(*Jenkins)(nil),              // 0: proto.ci.Jenkins
+	(*JenkinsAccount)(nil),       // 1: proto.ci.JenkinsAccount
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*client.Permissions)(nil),   // 3: proto.Permissions
 }
 var file_ci_jenkins_proto_depIdxs = []int32{
 	2, // 0: proto.ci.Jenkins.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/ci/travis.pb.go b/api/client/ci/travis.pb.go
index ef5fbd48..4076136c 100644
--- a/api/client/ci/travis.pb.go
+++ b/api/client/ci/travis.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: ci/travis.proto
 
 package ci
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -34,7 +34,7 @@ type Travis struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Travis is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured Travis accounts.
 	Masters []*TravisAccount `protobuf:"bytes,2,rep,name=masters,proto3" json:"masters,omitempty"`
 }
@@ -71,7 +71,7 @@ func (*Travis) Descriptor() ([]byte, []int) {
 	return file_ci_travis_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Travis) GetEnabled() *wrappers.BoolValue {
+func (x *Travis) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -261,10 +261,10 @@ func file_ci_travis_proto_rawDescGZIP() []byte {
 
 var file_ci_travis_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_ci_travis_proto_goTypes = []interface{}{
-	(*Travis)(nil),             // 0: proto.ci.Travis
-	(*TravisAccount)(nil),      // 1: proto.ci.TravisAccount
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
-	(*client.Permissions)(nil), // 3: proto.Permissions
+	(*Travis)(nil),               // 0: proto.ci.Travis
+	(*TravisAccount)(nil),        // 1: proto.ci.TravisAccount
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*client.Permissions)(nil),   // 3: proto.Permissions
 }
 var file_ci_travis_proto_depIdxs = []int32{
 	2, // 0: proto.ci.Travis.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/ci/wercker.pb.go b/api/client/ci/wercker.pb.go
index 27e88469..56a6c447 100644
--- a/api/client/ci/wercker.pb.go
+++ b/api/client/ci/wercker.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: ci/wercker.proto
 
 package ci
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -34,7 +34,7 @@ type Wercker struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Wercker is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured Wercker accounts.
 	Masters []*WerckerAccount `protobuf:"bytes,2,rep,name=masters,proto3" json:"masters,omitempty"`
 }
@@ -71,7 +71,7 @@ func (*Wercker) Descriptor() ([]byte, []int) {
 	return file_ci_wercker_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Wercker) GetEnabled() *wrappers.BoolValue {
+func (x *Wercker) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -218,10 +218,10 @@ func file_ci_wercker_proto_rawDescGZIP() []byte {
 
 var file_ci_wercker_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_ci_wercker_proto_goTypes = []interface{}{
-	(*Wercker)(nil),            // 0: proto.ci.Wercker
-	(*WerckerAccount)(nil),     // 1: proto.ci.WerckerAccount
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
-	(*client.Permissions)(nil), // 3: proto.Permissions
+	(*Wercker)(nil),              // 0: proto.ci.Wercker
+	(*WerckerAccount)(nil),       // 1: proto.ci.WerckerAccount
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*client.Permissions)(nil),   // 3: proto.Permissions
 }
 var file_ci_wercker_proto_depIdxs = []int32{
 	2, // 0: proto.ci.Wercker.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/cloudprovider/appengine.pb.go b/api/client/cloudprovider/appengine.pb.go
index b8b38322..f3190ecb 100644
--- a/api/client/cloudprovider/appengine.pb.go
+++ b/api/client/cloudprovider/appengine.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: cloudprovider/appengine.proto
 
 package cloudprovider
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -91,7 +91,7 @@ type Appengine struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured accounts.
 	Accounts []*AppengineAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 	// The name of the primary account.
@@ -130,7 +130,7 @@ func (*Appengine) Descriptor() ([]byte, []int) {
 	return file_cloudprovider_appengine_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Appengine) GetEnabled() *wrappers.BoolValue {
+func (x *Appengine) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -218,7 +218,7 @@ type AppengineAccount struct {
 	// Enabling this flag will allow Spinnaker to connect with a remote git
 	// repository over SSH without verifying the server's IP address against
 	// a `known_hosts` file. Defaults to false.
-	SshTrustUnknownHosts *wrappers.BoolValue `protobuf:"bytes,18,opt,name=sshTrustUnknownHosts,proto3" json:"sshTrustUnknownHosts,omitempty"`
+	SshTrustUnknownHosts *wrapperspb.BoolValue `protobuf:"bytes,18,opt,name=sshTrustUnknownHosts,proto3" json:"sshTrustUnknownHosts,omitempty"`
 	// A list of regular expressions. Any version matching one of these
 	// regexes will be indexed by Spinnaker (unless the version also matches
 	// a regex in `omitVersions`).
@@ -378,7 +378,7 @@ func (x *AppengineAccount) GetSshPrivateKeyPassphrase() string {
 	return ""
 }
 
-func (x *AppengineAccount) GetSshTrustUnknownHosts() *wrappers.BoolValue {
+func (x *AppengineAccount) GetSshTrustUnknownHosts() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.SshTrustUnknownHosts
 	}
@@ -506,11 +506,11 @@ func file_cloudprovider_appengine_proto_rawDescGZIP() []byte {
 var file_cloudprovider_appengine_proto_enumTypes = make([]protoimpl.EnumInfo, 1)
 var file_cloudprovider_appengine_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_cloudprovider_appengine_proto_goTypes = []interface{}{
-	(GcloudReleaseTrack)(0),    // 0: proto.cloudprovider.GcloudReleaseTrack
-	(*Appengine)(nil),          // 1: proto.cloudprovider.Appengine
-	(*AppengineAccount)(nil),   // 2: proto.cloudprovider.AppengineAccount
-	(*wrappers.BoolValue)(nil), // 3: google.protobuf.BoolValue
-	(*client.Permissions)(nil), // 4: proto.Permissions
+	(GcloudReleaseTrack)(0),      // 0: proto.cloudprovider.GcloudReleaseTrack
+	(*Appengine)(nil),            // 1: proto.cloudprovider.Appengine
+	(*AppengineAccount)(nil),     // 2: proto.cloudprovider.AppengineAccount
+	(*wrapperspb.BoolValue)(nil), // 3: google.protobuf.BoolValue
+	(*client.Permissions)(nil),   // 4: proto.Permissions
 }
 var file_cloudprovider_appengine_proto_depIdxs = []int32{
 	3, // 0: proto.cloudprovider.Appengine.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/cloudprovider/aws.pb.go b/api/client/cloudprovider/aws.pb.go
index b3d97917..eca20262 100644
--- a/api/client/cloudprovider/aws.pb.go
+++ b/api/client/cloudprovider/aws.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: cloudprovider/aws.proto
 
 package cloudprovider
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -34,7 +34,7 @@ type Aws struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured accounts.
 	Accounts []*AwsAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 	// The name of the primary account.
@@ -90,7 +90,7 @@ func (*Aws) Descriptor() ([]byte, []int) {
 	return file_cloudprovider_aws_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Aws) GetEnabled() *wrappers.BoolValue {
+func (x *Aws) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -442,7 +442,7 @@ type AwsBakeryDefaults struct {
 	AwsVpcId string `protobuf:"bytes,4,opt,name=awsVpcId,proto3" json:"awsVpcId,omitempty"`
 	// If using a non-default VPC, public IP addresses are not provided by
 	// default. If this is enabled, your new instance will get a Public IP.
-	AwsAssociatePublicIpAddress *wrappers.BoolValue `protobuf:"bytes,5,opt,name=awsAssociatePublicIpAddress,proto3" json:"awsAssociatePublicIpAddress,omitempty"`
+	AwsAssociatePublicIpAddress *wrapperspb.BoolValue `protobuf:"bytes,5,opt,name=awsAssociatePublicIpAddress,proto3" json:"awsAssociatePublicIpAddress,omitempty"`
 	// The default type of virtualization for the AMI you are building. This
 	// option must match the supported virtualization type of
 	// `AwsVirtualizationSettings.sourceAmi`.
@@ -517,7 +517,7 @@ func (x *AwsBakeryDefaults) GetAwsVpcId() string {
 	return ""
 }
 
-func (x *AwsBakeryDefaults) GetAwsAssociatePublicIpAddress() *wrappers.BoolValue {
+func (x *AwsBakeryDefaults) GetAwsAssociatePublicIpAddress() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.AwsAssociatePublicIpAddress
 	}
@@ -970,7 +970,7 @@ type AwsFeatures_CloudFormation struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether AWS CloudFormation is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 }
 
 func (x *AwsFeatures_CloudFormation) Reset() {
@@ -1005,7 +1005,7 @@ func (*AwsFeatures_CloudFormation) Descriptor() ([]byte, []int) {
 	return file_cloudprovider_aws_proto_rawDescGZIP(), []int{9, 0}
 }
 
-func (x *AwsFeatures_CloudFormation) GetEnabled() *wrappers.BoolValue {
+func (x *AwsFeatures_CloudFormation) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -1221,7 +1221,7 @@ var file_cloudprovider_aws_proto_goTypes = []interface{}{
 	(*AwsLifecycleHook)(nil),           // 8: proto.cloudprovider.AwsLifecycleHook
 	(*AwsFeatures)(nil),                // 9: proto.cloudprovider.AwsFeatures
 	(*AwsFeatures_CloudFormation)(nil), // 10: proto.cloudprovider.AwsFeatures.CloudFormation
-	(*wrappers.BoolValue)(nil),         // 11: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),       // 11: google.protobuf.BoolValue
 	(*client.Permissions)(nil),         // 12: proto.Permissions
 }
 var file_cloudprovider_aws_proto_depIdxs = []int32{
diff --git a/api/client/cloudprovider/azure.pb.go b/api/client/cloudprovider/azure.pb.go
index 70332427..b45e3fcf 100644
--- a/api/client/cloudprovider/azure.pb.go
+++ b/api/client/cloudprovider/azure.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: cloudprovider/azure.proto
 
 package cloudprovider
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -34,7 +34,7 @@ type Azure struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured accounts.
 	Accounts []*AzureAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 	// The name of the primary account.
@@ -75,7 +75,7 @@ func (*Azure) Descriptor() ([]byte, []int) {
 	return file_cloudprovider_azure_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Azure) GetEnabled() *wrappers.BoolValue {
+func (x *Azure) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -145,7 +145,7 @@ type AzureAccount struct {
 	TenantId string `protobuf:"bytes,14,opt,name=tenantId,proto3" json:"tenantId,omitempty"`
 	// If true, the  SSH public key is used to provision the linux VM.
 	// If false, the password is used instead.
-	UseSshPublicKey *wrappers.BoolValue `protobuf:"bytes,15,opt,name=useSshPublicKey,proto3" json:"useSshPublicKey,omitempty"`
+	UseSshPublicKey *wrapperspb.BoolValue `protobuf:"bytes,15,opt,name=useSshPublicKey,proto3" json:"useSshPublicKey,omitempty"`
 }
 
 func (x *AzureAccount) Reset() {
@@ -278,7 +278,7 @@ func (x *AzureAccount) GetTenantId() string {
 	return ""
 }
 
-func (x *AzureAccount) GetUseSshPublicKey() *wrappers.BoolValue {
+func (x *AzureAccount) GetUseSshPublicKey() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.UseSshPublicKey
 	}
@@ -625,7 +625,7 @@ var file_cloudprovider_azure_proto_goTypes = []interface{}{
 	(*AzureBakeryDefaults)(nil),    // 2: proto.cloudprovider.AzureBakeryDefaults
 	(*AzureBaseImageSettings)(nil), // 3: proto.cloudprovider.AzureBaseImageSettings
 	(*AzureBaseImage)(nil),         // 4: proto.cloudprovider.AzureBaseImage
-	(*wrappers.BoolValue)(nil),     // 5: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),   // 5: google.protobuf.BoolValue
 	(*client.Permissions)(nil),     // 6: proto.Permissions
 }
 var file_cloudprovider_azure_proto_depIdxs = []int32{
diff --git a/api/client/cloudprovider/cloudfoundry.pb.go b/api/client/cloudprovider/cloudfoundry.pb.go
index 1510faf7..7b0e7389 100644
--- a/api/client/cloudprovider/cloudfoundry.pb.go
+++ b/api/client/cloudprovider/cloudfoundry.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: cloudprovider/cloudfoundry.proto
 
 package cloudprovider
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -34,7 +34,7 @@ type CloudFoundry struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured accounts.
 	Accounts []*CloudFoundryAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 	// The name of the primary account.
@@ -73,7 +73,7 @@ func (*CloudFoundry) Descriptor() ([]byte, []int) {
 	return file_cloudprovider_cloudfoundry_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *CloudFoundry) GetEnabled() *wrappers.BoolValue {
+func (x *CloudFoundry) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -119,7 +119,7 @@ type CloudFoundryAccount struct {
 	Password string `protobuf:"bytes,6,opt,name=password,proto3" json:"password,omitempty"`
 	// (Default: `false`) Skip SSL server certificate validation of the API
 	// endpoint.
-	SkipSslValidation *wrappers.BoolValue `protobuf:"bytes,7,opt,name=skipSslValidation,proto3" json:"skipSslValidation,omitempty"`
+	SkipSslValidation *wrapperspb.BoolValue `protobuf:"bytes,7,opt,name=skipSslValidation,proto3" json:"skipSslValidation,omitempty"`
 	// (Required) User name for the account to use for this Cloud Foundry
 	// Foundation.
 	User string `protobuf:"bytes,8,opt,name=user,proto3" json:"user,omitempty"`
@@ -204,7 +204,7 @@ func (x *CloudFoundryAccount) GetPassword() string {
 	return ""
 }
 
-func (x *CloudFoundryAccount) GetSkipSslValidation() *wrappers.BoolValue {
+func (x *CloudFoundryAccount) GetSkipSslValidation() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.SkipSslValidation
 	}
@@ -298,10 +298,10 @@ func file_cloudprovider_cloudfoundry_proto_rawDescGZIP() []byte {
 
 var file_cloudprovider_cloudfoundry_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_cloudprovider_cloudfoundry_proto_goTypes = []interface{}{
-	(*CloudFoundry)(nil),        // 0: proto.cloudprovider.CloudFoundry
-	(*CloudFoundryAccount)(nil), // 1: proto.cloudprovider.CloudFoundryAccount
-	(*wrappers.BoolValue)(nil),  // 2: google.protobuf.BoolValue
-	(*client.Permissions)(nil),  // 3: proto.Permissions
+	(*CloudFoundry)(nil),         // 0: proto.cloudprovider.CloudFoundry
+	(*CloudFoundryAccount)(nil),  // 1: proto.cloudprovider.CloudFoundryAccount
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*client.Permissions)(nil),   // 3: proto.Permissions
 }
 var file_cloudprovider_cloudfoundry_proto_depIdxs = []int32{
 	2, // 0: proto.cloudprovider.CloudFoundry.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/cloudprovider/dcos.pb.go b/api/client/cloudprovider/dcos.pb.go
index e64b8386..3ad9c2e1 100644
--- a/api/client/cloudprovider/dcos.pb.go
+++ b/api/client/cloudprovider/dcos.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: cloudprovider/dcos.proto
 
 package cloudprovider
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -34,7 +34,7 @@ type Dcos struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured accounts.
 	Accounts []*DcosAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 	// The name of the primary account.
@@ -75,7 +75,7 @@ func (*Dcos) Descriptor() ([]byte, []int) {
 	return file_cloudprovider_dcos_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Dcos) GetEnabled() *wrappers.BoolValue {
+func (x *Dcos) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -293,7 +293,7 @@ type DcosCluster struct {
 	LoadBalancer *DcosClusterLoadBalancer `protobuf:"bytes,4,opt,name=loadBalancer,proto3" json:"loadBalancer,omitempty"`
 	// If `true`, disables verification of certificates from the cluster
 	// (insecure).
-	InsecureSkipTlsVerify *wrappers.BoolValue `protobuf:"bytes,5,opt,name=insecureSkipTlsVerify,proto3" json:"insecureSkipTlsVerify,omitempty"`
+	InsecureSkipTlsVerify *wrapperspb.BoolValue `protobuf:"bytes,5,opt,name=insecureSkipTlsVerify,proto3" json:"insecureSkipTlsVerify,omitempty"`
 }
 
 func (x *DcosCluster) Reset() {
@@ -356,7 +356,7 @@ func (x *DcosCluster) GetLoadBalancer() *DcosClusterLoadBalancer {
 	return nil
 }
 
-func (x *DcosCluster) GetInsecureSkipTlsVerify() *wrappers.BoolValue {
+func (x *DcosCluster) GetInsecureSkipTlsVerify() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.InsecureSkipTlsVerify
 	}
@@ -579,7 +579,7 @@ var file_cloudprovider_dcos_proto_goTypes = []interface{}{
 	(*DcosCluster)(nil),               // 3: proto.cloudprovider.DcosCluster
 	(*DcosClusterLoadBalancer)(nil),   // 4: proto.cloudprovider.DcosClusterLoadBalancer
 	(*DcosAccountDockerRegistry)(nil), // 5: proto.cloudprovider.DcosAccountDockerRegistry
-	(*wrappers.BoolValue)(nil),        // 6: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),      // 6: google.protobuf.BoolValue
 	(*client.Permissions)(nil),        // 7: proto.Permissions
 }
 var file_cloudprovider_dcos_proto_depIdxs = []int32{
diff --git a/api/client/cloudprovider/docker_registry.pb.go b/api/client/cloudprovider/docker_registry.pb.go
index bd59d5f2..461c7bad 100644
--- a/api/client/cloudprovider/docker_registry.pb.go
+++ b/api/client/cloudprovider/docker_registry.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: cloudprovider/docker_registry.proto
 
 package cloudprovider
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -34,7 +34,7 @@ type DockerRegistry struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured accounts.
 	Accounts []*DockerRegistryAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 	// The name of the primary account.
@@ -73,7 +73,7 @@ func (*DockerRegistry) Descriptor() ([]byte, []int) {
 	return file_cloudprovider_docker_registry_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *DockerRegistry) GetEnabled() *wrappers.BoolValue {
+func (x *DockerRegistry) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -124,7 +124,7 @@ type DockerRegistryAccount struct {
 	Environment string `protobuf:"bytes,7,opt,name=environment,proto3" json:"environment,omitempty"`
 	// If `true`, Spinnaker will treat the Docker registry as insecure and not
 	// validate the SSL certificate. Defaults to `false`.
-	InsecureRegistry *wrappers.BoolValue `protobuf:"bytes,8,opt,name=insecureRegistry,proto3" json:"insecureRegistry,omitempty"`
+	InsecureRegistry *wrapperspb.BoolValue `protobuf:"bytes,8,opt,name=insecureRegistry,proto3" json:"insecureRegistry,omitempty"`
 	// Pagination size for the Docker `repository _catalog` endpoint. Defaults
 	// to `100`.
 	PaginateSize int32 `protobuf:"varint,9,opt,name=paginateSize,proto3" json:"paginateSize,omitempty"`
@@ -155,11 +155,11 @@ type DockerRegistryAccount struct {
 	// If `true`, Spinnaker will sort tags by creation date. Defaults to
 	// `false`. Not recommended for use with large registries; sorting
 	// performance scales poorly due to limitations of the Docker V2 API.
-	SortTagsByDate *wrappers.BoolValue `protobuf:"bytes,16,opt,name=sortTagsByDate,proto3" json:"sortTagsByDate,omitempty"`
+	SortTagsByDate *wrapperspb.BoolValue `protobuf:"bytes,16,opt,name=sortTagsByDate,proto3" json:"sortTagsByDate,omitempty"`
 	// If `true`, Spinnaker will track digest changes. This is not recommended
 	// because it greatly increases queries to the registry, and most
 	// registries are flaky. Defaults to `false`.
-	TrackDigests *wrappers.BoolValue `protobuf:"bytes,17,opt,name=trackDigests,proto3" json:"trackDigests,omitempty"`
+	TrackDigests *wrapperspb.BoolValue `protobuf:"bytes,17,opt,name=trackDigests,proto3" json:"trackDigests,omitempty"`
 	// The username associated with this Docker registry.
 	Username string `protobuf:"bytes,18,opt,name=username,proto3" json:"username,omitempty"`
 }
@@ -245,7 +245,7 @@ func (x *DockerRegistryAccount) GetEnvironment() string {
 	return ""
 }
 
-func (x *DockerRegistryAccount) GetInsecureRegistry() *wrappers.BoolValue {
+func (x *DockerRegistryAccount) GetInsecureRegistry() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.InsecureRegistry
 	}
@@ -301,14 +301,14 @@ func (x *DockerRegistryAccount) GetRepositories() []string {
 	return nil
 }
 
-func (x *DockerRegistryAccount) GetSortTagsByDate() *wrappers.BoolValue {
+func (x *DockerRegistryAccount) GetSortTagsByDate() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.SortTagsByDate
 	}
 	return nil
 }
 
-func (x *DockerRegistryAccount) GetTrackDigests() *wrappers.BoolValue {
+func (x *DockerRegistryAccount) GetTrackDigests() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.TrackDigests
 	}
@@ -415,7 +415,7 @@ var file_cloudprovider_docker_registry_proto_msgTypes = make([]protoimpl.Message
 var file_cloudprovider_docker_registry_proto_goTypes = []interface{}{
 	(*DockerRegistry)(nil),        // 0: proto.cloudprovider.DockerRegistry
 	(*DockerRegistryAccount)(nil), // 1: proto.cloudprovider.DockerRegistryAccount
-	(*wrappers.BoolValue)(nil),    // 2: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),  // 2: google.protobuf.BoolValue
 	(*client.Permissions)(nil),    // 3: proto.Permissions
 }
 var file_cloudprovider_docker_registry_proto_depIdxs = []int32{
diff --git a/api/client/cloudprovider/ecs.pb.go b/api/client/cloudprovider/ecs.pb.go
index 7a24ca0b..f97ccb08 100644
--- a/api/client/cloudprovider/ecs.pb.go
+++ b/api/client/cloudprovider/ecs.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: cloudprovider/ecs.proto
 
 package cloudprovider
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -34,7 +34,7 @@ type Ecs struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured accounts.
 	Accounts []*EcsAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 	// The name of the primary account.
@@ -73,7 +73,7 @@ func (*Ecs) Descriptor() ([]byte, []int) {
 	return file_cloudprovider_ecs_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Ecs) GetEnabled() *wrappers.BoolValue {
+func (x *Ecs) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -237,10 +237,10 @@ func file_cloudprovider_ecs_proto_rawDescGZIP() []byte {
 
 var file_cloudprovider_ecs_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_cloudprovider_ecs_proto_goTypes = []interface{}{
-	(*Ecs)(nil),                // 0: proto.cloudprovider.Ecs
-	(*EcsAccount)(nil),         // 1: proto.cloudprovider.EcsAccount
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
-	(*client.Permissions)(nil), // 3: proto.Permissions
+	(*Ecs)(nil),                  // 0: proto.cloudprovider.Ecs
+	(*EcsAccount)(nil),           // 1: proto.cloudprovider.EcsAccount
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*client.Permissions)(nil),   // 3: proto.Permissions
 }
 var file_cloudprovider_ecs_proto_depIdxs = []int32{
 	2, // 0: proto.cloudprovider.Ecs.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/cloudprovider/google.pb.go b/api/client/cloudprovider/google.pb.go
index f002abd4..b984c075 100644
--- a/api/client/cloudprovider/google.pb.go
+++ b/api/client/cloudprovider/google.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: cloudprovider/google.proto
 
 package cloudprovider
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -34,7 +34,7 @@ type GoogleComputeEngine struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured accounts.
 	Accounts []*GoogleComputeEngineAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 	// The name of the primary account.
@@ -75,7 +75,7 @@ func (*GoogleComputeEngine) Descriptor() ([]byte, []int) {
 	return file_cloudprovider_google_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *GoogleComputeEngine) GetEnabled() *wrappers.BoolValue {
+func (x *GoogleComputeEngine) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -128,7 +128,7 @@ type GoogleComputeEngineAccount struct {
 	JsonPath string `protobuf:"bytes,6,opt,name=jsonPath,proto3" json:"jsonPath,omitempty"`
 	// Enable this flag if your GCP project has access to alpha features and
 	// you want Spinnaker to take advantage of them.
-	AlphaListed *wrappers.BoolValue `protobuf:"bytes,7,opt,name=alphaListed,proto3" json:"alphaListed,omitempty"`
+	AlphaListed *wrapperspb.BoolValue `protobuf:"bytes,7,opt,name=alphaListed,proto3" json:"alphaListed,omitempty"`
 	// A list of GCP projects from which Spinnaker will be able to cache and
 	// deploy images. When this is omitted, it defaults to the current
 	// project. Each project must have granted the IAM role
@@ -220,7 +220,7 @@ func (x *GoogleComputeEngineAccount) GetJsonPath() string {
 	return ""
 }
 
-func (x *GoogleComputeEngineAccount) GetAlphaListed() *wrappers.BoolValue {
+func (x *GoogleComputeEngineAccount) GetAlphaListed() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.AlphaListed
 	}
@@ -275,7 +275,7 @@ type GoogleBakeryDefaults struct {
 	Network string `protobuf:"bytes,4,opt,name=network,proto3" json:"network,omitempty"`
 	// If true, use the instance's internal IP instead of its external IP
 	// during baking.
-	UseInternalIp *wrappers.BoolValue `protobuf:"bytes,5,opt,name=useInternalIp,proto3" json:"useInternalIp,omitempty"`
+	UseInternalIp *wrapperspb.BoolValue `protobuf:"bytes,5,opt,name=useInternalIp,proto3" json:"useInternalIp,omitempty"`
 	// The default project ID for the network and subnet to use for the VM
 	// baking your image.
 	NetworkProjectId string `protobuf:"bytes,6,opt,name=networkProjectId,proto3" json:"networkProjectId,omitempty"`
@@ -341,7 +341,7 @@ func (x *GoogleBakeryDefaults) GetNetwork() string {
 	return ""
 }
 
-func (x *GoogleBakeryDefaults) GetUseInternalIp() *wrappers.BoolValue {
+func (x *GoogleBakeryDefaults) GetUseInternalIp() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.UseInternalIp
 	}
@@ -435,7 +435,7 @@ type GoogleBaseImage struct {
 	PackageType string `protobuf:"bytes,4,opt,name=packageType,proto3" json:"packageType,omitempty"`
 	// If set to true, Deck will annotate the popup tooltip to
 	// indicate that the selected option represents an image family.
-	ImageFamily *wrappers.BoolValue `protobuf:"bytes,5,opt,name=imageFamily,proto3" json:"imageFamily,omitempty"`
+	ImageFamily *wrapperspb.BoolValue `protobuf:"bytes,5,opt,name=imageFamily,proto3" json:"imageFamily,omitempty"`
 }
 
 func (x *GoogleBaseImage) Reset() {
@@ -498,7 +498,7 @@ func (x *GoogleBaseImage) GetPackageType() string {
 	return ""
 }
 
-func (x *GoogleBaseImage) GetImageFamily() *wrappers.BoolValue {
+func (x *GoogleBaseImage) GetImageFamily() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.ImageFamily
 	}
@@ -573,7 +573,7 @@ type Consul struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Consul is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// Reachable Consul node endpoint connected to the Consul cluster.
 	// Defaults to localhost.
 	AgentEndpoint string `protobuf:"bytes,2,opt,name=agentEndpoint,proto3" json:"agentEndpoint,omitempty"`
@@ -615,7 +615,7 @@ func (*Consul) Descriptor() ([]byte, []int) {
 	return file_cloudprovider_google_proto_rawDescGZIP(), []int{6}
 }
 
-func (x *Consul) GetEnabled() *wrappers.BoolValue {
+func (x *Consul) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -786,7 +786,7 @@ var file_cloudprovider_google_proto_goTypes = []interface{}{
 	(*GoogleBaseImage)(nil),            // 4: proto.cloudprovider.GoogleBaseImage
 	(*VirtualizationSettings)(nil),     // 5: proto.cloudprovider.VirtualizationSettings
 	(*Consul)(nil),                     // 6: proto.cloudprovider.Consul
-	(*wrappers.BoolValue)(nil),         // 7: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),       // 7: google.protobuf.BoolValue
 	(*client.Permissions)(nil),         // 8: proto.Permissions
 }
 var file_cloudprovider_google_proto_depIdxs = []int32{
diff --git a/api/client/cloudprovider/huaweicloud.pb.go b/api/client/cloudprovider/huaweicloud.pb.go
index bc56a9ea..f0d27725 100644
--- a/api/client/cloudprovider/huaweicloud.pb.go
+++ b/api/client/cloudprovider/huaweicloud.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: cloudprovider/huaweicloud.proto
 
 package cloudprovider
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -34,7 +34,7 @@ type HuaweiCloud struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured accounts.
 	Accounts []*HuaweiCloudAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 	// The name of the primary account.
@@ -75,7 +75,7 @@ func (*HuaweiCloud) Descriptor() ([]byte, []int) {
 	return file_cloudprovider_huaweicloud_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *HuaweiCloud) GetEnabled() *wrappers.BoolValue {
+func (x *HuaweiCloud) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -127,7 +127,7 @@ type HuaweiCloudAccount struct {
 	Environment string `protobuf:"bytes,7,opt,name=environment,proto3" json:"environment,omitempty"`
 	// If `true`, disables certificate validation on SSL connections. Needed if
 	// certificates are self-signed. Defaults to `false`.
-	Insecure *wrappers.BoolValue `protobuf:"bytes,8,opt,name=insecure,proto3" json:"insecure,omitempty"`
+	Insecure *wrapperspb.BoolValue `protobuf:"bytes,8,opt,name=insecure,proto3" json:"insecure,omitempty"`
 	// (Required) The password used to access the cloud.
 	Password string `protobuf:"bytes,9,opt,name=password,proto3" json:"password,omitempty"`
 	// (Required) The name of the project within the cloud.
@@ -219,7 +219,7 @@ func (x *HuaweiCloudAccount) GetEnvironment() string {
 	return ""
 }
 
-func (x *HuaweiCloudAccount) GetInsecure() *wrappers.BoolValue {
+func (x *HuaweiCloudAccount) GetInsecure() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Insecure
 	}
@@ -279,7 +279,7 @@ type HuaweiCloudBakeryDefaults struct {
 	DomainName string `protobuf:"bytes,7,opt,name=domainName,proto3" json:"domainName,omitempty"`
 	// The security setting for connecting to the Huawei Cloud account. Defaults
 	// to `false`.
-	Insecure *wrappers.BoolValue `protobuf:"bytes,8,opt,name=insecure,proto3" json:"insecure,omitempty"`
+	Insecure *wrapperspb.BoolValue `protobuf:"bytes,8,opt,name=insecure,proto3" json:"insecure,omitempty"`
 	// (Required) The VPC in which images will be baked.
 	VpcId string `protobuf:"bytes,9,opt,name=vpcId,proto3" json:"vpcId,omitempty"`
 	//  (Required) The subnet in which images will be baked.
@@ -371,7 +371,7 @@ func (x *HuaweiCloudBakeryDefaults) GetDomainName() string {
 	return ""
 }
 
-func (x *HuaweiCloudBakeryDefaults) GetInsecure() *wrappers.BoolValue {
+func (x *HuaweiCloudBakeryDefaults) GetInsecure() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Insecure
 	}
@@ -792,7 +792,7 @@ var file_cloudprovider_huaweicloud_proto_goTypes = []interface{}{
 	(*HuaweiCloudBaseImageSettings)(nil),      // 3: proto.cloudprovider.HuaweiCloudBaseImageSettings
 	(*HuaweiCloudBaseImage)(nil),              // 4: proto.cloudprovider.HuaweiCloudBaseImage
 	(*HuaweiCloudVirtualizationSettings)(nil), // 5: proto.cloudprovider.HuaweiCloudVirtualizationSettings
-	(*wrappers.BoolValue)(nil),                // 6: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),              // 6: google.protobuf.BoolValue
 	(*client.Permissions)(nil),                // 7: proto.Permissions
 }
 var file_cloudprovider_huaweicloud_proto_depIdxs = []int32{
diff --git a/api/client/cloudprovider/kubernetes.pb.go b/api/client/cloudprovider/kubernetes.pb.go
index 3a9f73e1..3a19ddf1 100644
--- a/api/client/cloudprovider/kubernetes.pb.go
+++ b/api/client/cloudprovider/kubernetes.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: cloudprovider/kubernetes.proto
 
 package cloudprovider
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -34,7 +34,7 @@ type Kubernetes struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured accounts.
 	Accounts []*KubernetesAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 	// The name of the primary account.
@@ -73,7 +73,7 @@ func (*Kubernetes) Descriptor() ([]byte, []int) {
 	return file_cloudprovider_kubernetes_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Kubernetes) GetEnabled() *wrappers.BoolValue {
+func (x *Kubernetes) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -153,13 +153,13 @@ type KubernetesAccount struct {
 	// using live data rather than the cache. This eliminates all time spent in the
 	// "force cache refresh" task in pipelines, greatly reducing execution time.
 	// Defaults to false.
-	LiveManifestCalls *wrappers.BoolValue `protobuf:"bytes,16,opt,name=liveManifestCalls,proto3" json:"liveManifestCalls,omitempty"`
+	LiveManifestCalls *wrapperspb.BoolValue `protobuf:"bytes,16,opt,name=liveManifestCalls,proto3" json:"liveManifestCalls,omitempty"`
 	// When true, Spinnaker attempt to authenticate against Kubernetes using a
 	// Kubernetes service account. This only works when Halyard & Spinnaker are
 	// deployed in Kubernetes. Read more about service accounts here:
 	// https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/.
 	// Defaults to false.
-	ServiceAccount *wrappers.BoolValue `protobuf:"bytes,17,opt,name=serviceAccount,proto3" json:"serviceAccount,omitempty"`
+	ServiceAccount *wrapperspb.BoolValue `protobuf:"bytes,17,opt,name=serviceAccount,proto3" json:"serviceAccount,omitempty"`
 	// The raw contents of your kubeconfig file. Ignored if kubeconfigFile is set.
 	KubeconfigContents string `protobuf:"bytes,18,opt,name=kubeconfigContents,proto3" json:"kubeconfigContents,omitempty"`
 	// The path to the kubectl executable. This should be omitted unless you
@@ -174,17 +174,17 @@ type KubernetesAccount struct {
 	// This field defaults to true, and it is recommended to leave it at the
 	// default. If this field is set to false, any Kubernetes objects that
 	// are unreadable by the account will break caching for all objects.
-	CheckPermissionsOnStartup *wrappers.BoolValue `protobuf:"bytes,23,opt,name=checkPermissionsOnStartup,proto3" json:"checkPermissionsOnStartup,omitempty"`
+	CheckPermissionsOnStartup *wrapperspb.BoolValue `protobuf:"bytes,23,opt,name=checkPermissionsOnStartup,proto3" json:"checkPermissionsOnStartup,omitempty"`
 	// When using OAuth to authenticate with your cluster, the name of the
 	// service account to use.
 	OAuthServiceAccount string `protobuf:"bytes,24,opt,name=oAuthServiceAccount,proto3" json:"oAuthServiceAccount,omitempty"`
 	// If true, only cache Kubernetes objects that have been deployed by
 	// Spinnaker, and ignore any other objects that exist in the cluster.
 	// Defaults to false.
-	OnlySpinnakerManaged *wrappers.BoolValue `protobuf:"bytes,27,opt,name=onlySpinnakerManaged,proto3" json:"onlySpinnakerManaged,omitempty"`
+	OnlySpinnakerManaged *wrapperspb.BoolValue `protobuf:"bytes,27,opt,name=onlySpinnakerManaged,proto3" json:"onlySpinnakerManaged,omitempty"`
 	// If true, enable detailed logging for all communications with the
 	// Kubernetes cluster for this account. Defaults to false.
-	Debug *wrappers.BoolValue `protobuf:"bytes,28,opt,name=debug,proto3" json:"debug,omitempty"`
+	Debug *wrapperspb.BoolValue `protobuf:"bytes,28,opt,name=debug,proto3" json:"debug,omitempty"`
 }
 
 func (x *KubernetesAccount) Reset() {
@@ -317,14 +317,14 @@ func (x *KubernetesAccount) GetRequiredGroupMembership() []string {
 	return nil
 }
 
-func (x *KubernetesAccount) GetLiveManifestCalls() *wrappers.BoolValue {
+func (x *KubernetesAccount) GetLiveManifestCalls() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.LiveManifestCalls
 	}
 	return nil
 }
 
-func (x *KubernetesAccount) GetServiceAccount() *wrappers.BoolValue {
+func (x *KubernetesAccount) GetServiceAccount() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.ServiceAccount
 	}
@@ -352,7 +352,7 @@ func (x *KubernetesAccount) GetKubectlRequestTimeoutSeconds() int32 {
 	return 0
 }
 
-func (x *KubernetesAccount) GetCheckPermissionsOnStartup() *wrappers.BoolValue {
+func (x *KubernetesAccount) GetCheckPermissionsOnStartup() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.CheckPermissionsOnStartup
 	}
@@ -366,14 +366,14 @@ func (x *KubernetesAccount) GetOAuthServiceAccount() string {
 	return ""
 }
 
-func (x *KubernetesAccount) GetOnlySpinnakerManaged() *wrappers.BoolValue {
+func (x *KubernetesAccount) GetOnlySpinnakerManaged() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.OnlySpinnakerManaged
 	}
 	return nil
 }
 
-func (x *KubernetesAccount) GetDebug() *wrappers.BoolValue {
+func (x *KubernetesAccount) GetDebug() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Debug
 	}
@@ -398,9 +398,9 @@ type KubernetesCustomResource struct {
 	// values.
 	DeployPriority string `protobuf:"bytes,3,opt,name=deployPriority,proto3" json:"deployPriority,omitempty"`
 	// Whether Spinnaker should manage versioning this resource.
-	Versioned *wrappers.BoolValue `protobuf:"bytes,4,opt,name=versioned,proto3" json:"versioned,omitempty"`
+	Versioned *wrapperspb.BoolValue `protobuf:"bytes,4,opt,name=versioned,proto3" json:"versioned,omitempty"`
 	// Whether the resource is namespaced. Defaults to true.
-	Namespaced *wrappers.BoolValue `protobuf:"bytes,5,opt,name=namespaced,proto3" json:"namespaced,omitempty"`
+	Namespaced *wrapperspb.BoolValue `protobuf:"bytes,5,opt,name=namespaced,proto3" json:"namespaced,omitempty"`
 }
 
 func (x *KubernetesCustomResource) Reset() {
@@ -456,14 +456,14 @@ func (x *KubernetesCustomResource) GetDeployPriority() string {
 	return ""
 }
 
-func (x *KubernetesCustomResource) GetVersioned() *wrappers.BoolValue {
+func (x *KubernetesCustomResource) GetVersioned() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Versioned
 	}
 	return nil
 }
 
-func (x *KubernetesCustomResource) GetNamespaced() *wrappers.BoolValue {
+func (x *KubernetesCustomResource) GetNamespaced() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Namespaced
 	}
@@ -741,7 +741,7 @@ var file_cloudprovider_kubernetes_proto_goTypes = []interface{}{
 	(*KubernetesCustomResource)(nil),        // 2: proto.cloudprovider.KubernetesCustomResource
 	(*KubernetesCachingPolicy)(nil),         // 3: proto.cloudprovider.KubernetesCachingPolicy
 	(*KubernetesAccountDockerRegistry)(nil), // 4: proto.cloudprovider.KubernetesAccountDockerRegistry
-	(*wrappers.BoolValue)(nil),              // 5: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),            // 5: google.protobuf.BoolValue
 	(*client.Permissions)(nil),              // 6: proto.Permissions
 }
 var file_cloudprovider_kubernetes_proto_depIdxs = []int32{
diff --git a/api/client/cloudprovider/oracle.pb.go b/api/client/cloudprovider/oracle.pb.go
index 35389674..b43d9365 100644
--- a/api/client/cloudprovider/oracle.pb.go
+++ b/api/client/cloudprovider/oracle.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: cloudprovider/oracle.proto
 
 package cloudprovider
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -34,7 +34,7 @@ type Oracle struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the provider is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured accounts.
 	Accounts []*OracleAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 	// The name of the primary account.
@@ -75,7 +75,7 @@ func (*Oracle) Descriptor() ([]byte, []int) {
 	return file_cloudprovider_oracle_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Oracle) GetEnabled() *wrappers.BoolValue {
+func (x *Oracle) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -670,7 +670,7 @@ var file_cloudprovider_oracle_proto_goTypes = []interface{}{
 	(*OracleBaseImageSettings)(nil),      // 3: proto.cloudprovider.OracleBaseImageSettings
 	(*OracleBaseImage)(nil),              // 4: proto.cloudprovider.OracleBaseImage
 	(*OracleVirtualizationSettings)(nil), // 5: proto.cloudprovider.OracleVirtualizationSettings
-	(*wrappers.BoolValue)(nil),           // 6: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),         // 6: google.protobuf.BoolValue
 	(*client.Permissions)(nil),           // 7: proto.Permissions
 }
 var file_cloudprovider_oracle_proto_depIdxs = []int32{
diff --git a/api/client/cloudprovider/providers.pb.go b/api/client/cloudprovider/providers.pb.go
index a69e4f61..57f9f9b2 100644
--- a/api/client/cloudprovider/providers.pb.go
+++ b/api/client/cloudprovider/providers.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: cloudprovider/providers.proto
 
 package cloudprovider
diff --git a/api/client/config/clouddriver.pb.go b/api/client/config/clouddriver.pb.go
index 34c3e055..8e8a4779 100644
--- a/api/client/config/clouddriver.pb.go
+++ b/api/client/config/clouddriver.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: config/clouddriver.proto
 
 package config
diff --git a/api/client/config/config_files.pb.go b/api/client/config/config_files.pb.go
index b835f13a..b5be11aa 100644
--- a/api/client/config/config_files.pb.go
+++ b/api/client/config/config_files.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: config/config_files.proto
 
 package config
diff --git a/api/client/config/deck.pb.go b/api/client/config/deck.pb.go
index c892c251..54c0714f 100644
--- a/api/client/config/deck.pb.go
+++ b/api/client/config/deck.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: config/deck.proto
 
 package config
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	notification "github.com/spinnaker/kleat/api/client/notification"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -35,7 +35,7 @@ type Deck struct {
 	// The endpoint at which Deck communicates with Gate.
 	GateUrl string `protobuf:"bytes,1,opt,name=gateUrl,proto3" json:"gateUrl,omitempty"`
 	// Whether authn is enabled.
-	AuthEnabled *wrappers.BoolValue `protobuf:"bytes,2,opt,name=authEnabled,proto3" json:"authEnabled,omitempty"`
+	AuthEnabled *wrapperspb.BoolValue `protobuf:"bytes,2,opt,name=authEnabled,proto3" json:"authEnabled,omitempty"`
 	// The Gate authn endpoint.
 	AuthEndpoint string `protobuf:"bytes,3,opt,name=authEndpoint,proto3" json:"authEndpoint,omitempty"`
 	// Baking details URL used in Bake stage execution details.
@@ -93,7 +93,7 @@ func (x *Deck) GetGateUrl() string {
 	return ""
 }
 
-func (x *Deck) GetAuthEnabled() *wrappers.BoolValue {
+func (x *Deck) GetAuthEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.AuthEnabled
 	}
@@ -164,14 +164,14 @@ type Deck_Features struct {
 
 	// Enable pipeline template support. Read more at
 	// https://github.com/spinnaker/dcd-spec.
-	PipelineTemplates *wrappers.BoolValue `protobuf:"bytes,1,opt,name=pipelineTemplates,proto3" json:"pipelineTemplates,omitempty"`
+	PipelineTemplates *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=pipelineTemplates,proto3" json:"pipelineTemplates,omitempty"`
 	// Enable Chaos Monkey support. For this to work, you'll need a running Chaos
 	// Monkey deployment. See https://github.com/Netflix/chaosmonkey/wiki.
-	ChaosMonkey *wrappers.BoolValue `protobuf:"bytes,2,opt,name=chaosMonkey,proto3" json:"chaosMonkey,omitempty"`
+	ChaosMonkey *wrapperspb.BoolValue `protobuf:"bytes,2,opt,name=chaosMonkey,proto3" json:"chaosMonkey,omitempty"`
 	// Whether authz is enabled.
-	FiatEnabled *wrappers.BoolValue `protobuf:"bytes,3,opt,name=fiatEnabled,proto3" json:"fiatEnabled,omitempty"`
+	FiatEnabled *wrapperspb.BoolValue `protobuf:"bytes,3,opt,name=fiatEnabled,proto3" json:"fiatEnabled,omitempty"`
 	// Enable managed pipeline templates v2 UI support.
-	ManagedPipelineTemplatesV2UI *wrappers.BoolValue `protobuf:"bytes,4,opt,name=managedPipelineTemplatesV2UI,proto3" json:"managedPipelineTemplatesV2UI,omitempty"`
+	ManagedPipelineTemplatesV2UI *wrapperspb.BoolValue `protobuf:"bytes,4,opt,name=managedPipelineTemplatesV2UI,proto3" json:"managedPipelineTemplatesV2UI,omitempty"`
 }
 
 func (x *Deck_Features) Reset() {
@@ -206,28 +206,28 @@ func (*Deck_Features) Descriptor() ([]byte, []int) {
 	return file_config_deck_proto_rawDescGZIP(), []int{0, 0}
 }
 
-func (x *Deck_Features) GetPipelineTemplates() *wrappers.BoolValue {
+func (x *Deck_Features) GetPipelineTemplates() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.PipelineTemplates
 	}
 	return nil
 }
 
-func (x *Deck_Features) GetChaosMonkey() *wrappers.BoolValue {
+func (x *Deck_Features) GetChaosMonkey() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.ChaosMonkey
 	}
 	return nil
 }
 
-func (x *Deck_Features) GetFiatEnabled() *wrappers.BoolValue {
+func (x *Deck_Features) GetFiatEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.FiatEnabled
 	}
 	return nil
 }
 
-func (x *Deck_Features) GetManagedPipelineTemplatesV2UI() *wrappers.BoolValue {
+func (x *Deck_Features) GetManagedPipelineTemplatesV2UI() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.ManagedPipelineTemplatesV2UI
 	}
@@ -244,19 +244,19 @@ type Deck_Canary struct {
 	// currently the only open-source judge available by default.
 	DefaultJudge string `protobuf:"bytes,1,opt,name=defaultJudge,proto3" json:"defaultJudge,omitempty"`
 	// Whether the canary UI is disabled.
-	FeatureDisabled *wrappers.BoolValue `protobuf:"bytes,2,opt,name=featureDisabled,proto3" json:"featureDisabled,omitempty"`
+	FeatureDisabled *wrapperspb.BoolValue `protobuf:"bytes,2,opt,name=featureDisabled,proto3" json:"featureDisabled,omitempty"`
 	// Name of the canary metrics account to use by default.
 	MetricsAccountName string `protobuf:"bytes,3,opt,name=metricsAccountName,proto3" json:"metricsAccountName,omitempty"`
 	// Name of the metrics store to use by default (e.g., `prometheus`, `datadog`).
 	MetricStore string `protobuf:"bytes,4,opt,name=metricStore,proto3" json:"metricStore,omitempty"`
 	// Whether or not to show all canary configs in Deck, or just those scoped
 	// to the current application.
-	ShowAllConfigs *wrappers.BoolValue `protobuf:"bytes,5,opt,name=showAllConfigs,proto3" json:"showAllConfigs,omitempty"`
+	ShowAllConfigs *wrapperspb.BoolValue `protobuf:"bytes,5,opt,name=showAllConfigs,proto3" json:"showAllConfigs,omitempty"`
 	// Name of storage account to use by default.
 	StorageAccountName string `protobuf:"bytes,6,opt,name=storageAccountName,proto3" json:"storageAccountName,omitempty"`
 	// Whether or not to enable custom filter templates for canary configs in
 	// Deck.
-	TemplatesEnabled *wrappers.BoolValue `protobuf:"bytes,7,opt,name=templatesEnabled,proto3" json:"templatesEnabled,omitempty"`
+	TemplatesEnabled *wrapperspb.BoolValue `protobuf:"bytes,7,opt,name=templatesEnabled,proto3" json:"templatesEnabled,omitempty"`
 }
 
 func (x *Deck_Canary) Reset() {
@@ -298,7 +298,7 @@ func (x *Deck_Canary) GetDefaultJudge() string {
 	return ""
 }
 
-func (x *Deck_Canary) GetFeatureDisabled() *wrappers.BoolValue {
+func (x *Deck_Canary) GetFeatureDisabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.FeatureDisabled
 	}
@@ -319,7 +319,7 @@ func (x *Deck_Canary) GetMetricStore() string {
 	return ""
 }
 
-func (x *Deck_Canary) GetShowAllConfigs() *wrappers.BoolValue {
+func (x *Deck_Canary) GetShowAllConfigs() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.ShowAllConfigs
 	}
@@ -333,7 +333,7 @@ func (x *Deck_Canary) GetStorageAccountName() string {
 	return ""
 }
 
-func (x *Deck_Canary) GetTemplatesEnabled() *wrappers.BoolValue {
+func (x *Deck_Canary) GetTemplatesEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.TemplatesEnabled
 	}
@@ -1783,7 +1783,7 @@ var file_config_deck_proto_goTypes = []interface{}{
 	(*Deck_Providers_Gce_Defaults)(nil),          // 21: proto.config.Deck.Providers.Gce.Defaults
 	(*Deck_Providers_HuaweiCloud_Defaults)(nil),  // 22: proto.config.Deck.Providers.HuaweiCloud.Defaults
 	(*Deck_Providers_TencentCloud_Defaults)(nil), // 23: proto.config.Deck.Providers.TencentCloud.Defaults
-	(*wrappers.BoolValue)(nil),                   // 24: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),                 // 24: google.protobuf.BoolValue
 	(*notification.BearyChat)(nil),               // 25: proto.notification.BearyChat
 	(*notification.Email)(nil),                   // 26: proto.notification.Email
 	(*notification.GithubStatus)(nil),            // 27: proto.notification.GithubStatus
diff --git a/api/client/config/deck_env.pb.go b/api/client/config/deck_env.pb.go
index 21b0ec7c..a8f011e6 100644
--- a/api/client/config/deck_env.pb.go
+++ b/api/client/config/deck_env.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: config/deck_env.proto
 
 package config
diff --git a/api/client/config/echo.pb.go b/api/client/config/echo.pb.go
index 01158132..13a72753 100644
--- a/api/client/config/echo.pb.go
+++ b/api/client/config/echo.pb.go
@@ -1,14 +1,13 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: config/echo.proto
 
 package config
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	client "github.com/spinnaker/kleat/api/client"
 	artifact "github.com/spinnaker/kleat/api/client/artifact"
 	ci "github.com/spinnaker/kleat/api/client/ci"
@@ -16,6 +15,7 @@ import (
 	pubsub "github.com/spinnaker/kleat/api/client/pubsub"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -191,7 +191,7 @@ type Echo_Stats struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether to send usage metrics. Defaults to true.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// A unique ID representing this deployment of Spinnaker.
 	InstanceId string `protobuf:"bytes,2,opt,name=instanceId,proto3" json:"instanceId,omitempty"`
 	// The version of Spinnaker being deployed.
@@ -235,7 +235,7 @@ func (*Echo_Stats) Descriptor() ([]byte, []int) {
 	return file_config_echo_proto_rawDescGZIP(), []int{0, 1}
 }
 
-func (x *Echo_Stats) GetEnabled() *wrappers.BoolValue {
+func (x *Echo_Stats) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -415,7 +415,7 @@ var file_config_echo_proto_goTypes = []interface{}{
 	(*artifact.Artifacts)(nil),        // 7: proto.artifact.Artifacts
 	(*pubsub.Pubsub)(nil),             // 8: proto.pubsub.Pubsub
 	(*ci.GoogleCloudBuild)(nil),       // 9: proto.ci.GoogleCloudBuild
-	(*wrappers.BoolValue)(nil),        // 10: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),      // 10: google.protobuf.BoolValue
 	(*client.DeploymentMethod)(nil),   // 11: proto.DeploymentMethod
 }
 var file_config_echo_proto_depIdxs = []int32{
diff --git a/api/client/config/fiat.pb.go b/api/client/config/fiat.pb.go
index 0bd5e0be..0e21ebbe 100644
--- a/api/client/config/fiat.pb.go
+++ b/api/client/config/fiat.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: config/fiat.proto
 
 package config
diff --git a/api/client/config/front50.pb.go b/api/client/config/front50.pb.go
index 18a8ee21..70a99574 100644
--- a/api/client/config/front50.pb.go
+++ b/api/client/config/front50.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: config/front50.proto
 
 package config
diff --git a/api/client/config/gate.pb.go b/api/client/config/gate.pb.go
index 40edaa68..6c3990cb 100644
--- a/api/client/config/gate.pb.go
+++ b/api/client/config/gate.pb.go
@@ -1,18 +1,18 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: config/gate.proto
 
 package config
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	security "github.com/spinnaker/kleat/api/client/security"
 	authn "github.com/spinnaker/kleat/api/client/security/authn"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -463,7 +463,7 @@ type Gate_Integrations_Gremlin struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Gremlin is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 }
 
 func (x *Gate_Integrations_Gremlin) Reset() {
@@ -498,7 +498,7 @@ func (*Gate_Integrations_Gremlin) Descriptor() ([]byte, []int) {
 	return file_config_gate_proto_rawDescGZIP(), []int{0, 2, 0}
 }
 
-func (x *Gate_Integrations_Gremlin) GetEnabled() *wrappers.BoolValue {
+func (x *Gate_Integrations_Gremlin) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -619,7 +619,7 @@ var file_config_gate_proto_goTypes = []interface{}{
 	(*security.ApiSsl)(nil),           // 13: proto.security.ApiSsl
 	(*ServiceSettings)(nil),           // 14: proto.config.ServiceSettings
 	(*authn.Iap)(nil),                 // 15: proto.security.authn.Iap
-	(*wrappers.BoolValue)(nil),        // 16: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),      // 16: google.protobuf.BoolValue
 }
 var file_config_gate_proto_depIdxs = []int32{
 	2,  // 0: proto.config.Gate.server:type_name -> proto.config.ServerConfig
diff --git a/api/client/config/halconfig.pb.go b/api/client/config/halconfig.pb.go
index 44419362..abf53b12 100644
--- a/api/client/config/halconfig.pb.go
+++ b/api/client/config/halconfig.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: config/halconfig.proto
 
 package config
diff --git a/api/client/config/igor.pb.go b/api/client/config/igor.pb.go
index b660a736..b0902233 100644
--- a/api/client/config/igor.pb.go
+++ b/api/client/config/igor.pb.go
@@ -1,19 +1,19 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: config/igor.proto
 
 package config
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	artifact "github.com/spinnaker/kleat/api/client/artifact"
 	ci "github.com/spinnaker/kleat/api/client/ci"
 	repository "github.com/spinnaker/kleat/api/client/repository"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -146,7 +146,7 @@ type Igor_DockerRegistry struct {
 	sizeCache     protoimpl.SizeCache
 	unknownFields protoimpl.UnknownFields
 
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 }
 
 func (x *Igor_DockerRegistry) Reset() {
@@ -181,7 +181,7 @@ func (*Igor_DockerRegistry) Descriptor() ([]byte, []int) {
 	return file_config_igor_proto_rawDescGZIP(), []int{0, 0}
 }
 
-func (x *Igor_DockerRegistry) GetEnabled() *wrappers.BoolValue {
+func (x *Igor_DockerRegistry) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -322,7 +322,7 @@ var file_config_igor_proto_goTypes = []interface{}{
 	(*ci.Jenkins)(nil),             // 7: proto.ci.Jenkins
 	(*ci.Travis)(nil),              // 8: proto.ci.Travis
 	(*ci.Wercker)(nil),             // 9: proto.ci.Wercker
-	(*wrappers.BoolValue)(nil),     // 10: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),   // 10: google.protobuf.BoolValue
 	(*artifact.Template)(nil),      // 11: proto.artifact.Template
 }
 var file_config_igor_proto_depIdxs = []int32{
diff --git a/api/client/config/kayenta.pb.go b/api/client/config/kayenta.pb.go
index 71483e87..481c787a 100644
--- a/api/client/config/kayenta.pb.go
+++ b/api/client/config/kayenta.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: config/kayenta.proto
 
 package config
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	canary "github.com/spinnaker/kleat/api/client/canary"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -191,7 +191,7 @@ type Kayenta_ServiceIntegrations_Google struct {
 	sizeCache     protoimpl.SizeCache
 	unknownFields protoimpl.UnknownFields
 
-	Enabled  *wrappers.BoolValue     `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled  *wrapperspb.BoolValue   `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	Accounts []*canary.GoogleAccount `protobuf:"bytes,2,rep,name=accounts,proto3" json:"accounts,omitempty"`
 }
 
@@ -227,7 +227,7 @@ func (*Kayenta_ServiceIntegrations_Google) Descriptor() ([]byte, []int) {
 	return file_config_kayenta_proto_rawDescGZIP(), []int{0, 0, 0}
 }
 
-func (x *Kayenta_ServiceIntegrations_Google) GetEnabled() *wrappers.BoolValue {
+func (x *Kayenta_ServiceIntegrations_Google) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -246,8 +246,8 @@ type Kayenta_ServiceIntegrations_Aws struct {
 	sizeCache     protoimpl.SizeCache
 	unknownFields protoimpl.UnknownFields
 
-	Enabled  *wrappers.BoolValue  `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
-	Accounts []*canary.AwsAccount `protobuf:"bytes,3,rep,name=accounts,proto3" json:"accounts,omitempty"`
+	Enabled  *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Accounts []*canary.AwsAccount  `protobuf:"bytes,3,rep,name=accounts,proto3" json:"accounts,omitempty"`
 }
 
 func (x *Kayenta_ServiceIntegrations_Aws) Reset() {
@@ -282,7 +282,7 @@ func (*Kayenta_ServiceIntegrations_Aws) Descriptor() ([]byte, []int) {
 	return file_config_kayenta_proto_rawDescGZIP(), []int{0, 0, 1}
 }
 
-func (x *Kayenta_ServiceIntegrations_Aws) GetEnabled() *wrappers.BoolValue {
+func (x *Kayenta_ServiceIntegrations_Aws) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -398,7 +398,7 @@ var file_config_kayenta_proto_goTypes = []interface{}{
 	(*canary.S3)(nil),                          // 8: proto.canary.S3
 	(*canary.SignalFx)(nil),                    // 9: proto.canary.SignalFx
 	(*canary.NewRelic)(nil),                    // 10: proto.canary.NewRelic
-	(*wrappers.BoolValue)(nil),                 // 11: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),               // 11: google.protobuf.BoolValue
 	(*canary.GoogleAccount)(nil),               // 12: proto.canary.GoogleAccount
 	(*canary.AwsAccount)(nil),                  // 13: proto.canary.AwsAccount
 }
diff --git a/api/client/config/monitoring.pb.go b/api/client/config/monitoring.pb.go
index 8437ee30..c7e0a52e 100644
--- a/api/client/config/monitoring.pb.go
+++ b/api/client/config/monitoring.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: config/monitoring.proto
 
 package config
diff --git a/api/client/config/orca.pb.go b/api/client/config/orca.pb.go
index 99170742..45b85463 100644
--- a/api/client/config/orca.pb.go
+++ b/api/client/config/orca.pb.go
@@ -1,17 +1,17 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: config/orca.proto
 
 package config
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	security "github.com/spinnaker/kleat/api/client/security"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -162,7 +162,7 @@ type Orca_PipelineTemplates struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether pipeline templates are enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 }
 
 func (x *Orca_PipelineTemplates) Reset() {
@@ -197,7 +197,7 @@ func (*Orca_PipelineTemplates) Descriptor() ([]byte, []int) {
 	return file_config_orca_proto_rawDescGZIP(), []int{0, 1}
 }
 
-func (x *Orca_PipelineTemplates) GetEnabled() *wrappers.BoolValue {
+func (x *Orca_PipelineTemplates) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -484,7 +484,7 @@ var file_config_orca_proto_goTypes = []interface{}{
 	(*Orca_Tasks_ExecutionWindow)(nil), // 6: proto.config.Orca.Tasks.ExecutionWindow
 	(*security.WebhookConfig)(nil),     // 7: proto.security.WebhookConfig
 	(*ServiceSettings)(nil),            // 8: proto.config.ServiceSettings
-	(*wrappers.BoolValue)(nil),         // 9: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),       // 9: google.protobuf.BoolValue
 }
 var file_config_orca_proto_depIdxs = []int32{
 	2, // 0: proto.config.Orca.pipelineTemplates:type_name -> proto.config.Orca.PipelineTemplates
diff --git a/api/client/config/rosco.pb.go b/api/client/config/rosco.pb.go
index 4248e7b8..a0af7027 100644
--- a/api/client/config/rosco.pb.go
+++ b/api/client/config/rosco.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: config/rosco.proto
 
 package config
diff --git a/api/client/config/service_enabled.pb.go b/api/client/config/service_enabled.pb.go
index c3bf4eb0..fc12c916 100644
--- a/api/client/config/service_enabled.pb.go
+++ b/api/client/config/service_enabled.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: config/service_enabled.proto
 
 package config
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type ServiceSettings struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the microservice is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The base URL for the microservice. In general, this should be the
 	// externally-resolvable URL for services that are exposed externally
 	// (ie, deck and gate).
@@ -72,7 +72,7 @@ func (*ServiceSettings) Descriptor() ([]byte, []int) {
 	return file_config_service_enabled_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *ServiceSettings) GetEnabled() *wrappers.BoolValue {
+func (x *ServiceSettings) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -120,8 +120,8 @@ func file_config_service_enabled_proto_rawDescGZIP() []byte {
 
 var file_config_service_enabled_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_config_service_enabled_proto_goTypes = []interface{}{
-	(*ServiceSettings)(nil),    // 0: proto.config.ServiceSettings
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*ServiceSettings)(nil),      // 0: proto.config.ServiceSettings
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_config_service_enabled_proto_depIdxs = []int32{
 	1, // 0: proto.config.ServiceSettings.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/config/services.pb.go b/api/client/config/services.pb.go
index 8e35741f..8e63b011 100644
--- a/api/client/config/services.pb.go
+++ b/api/client/config/services.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: config/services.proto
 
 package config
diff --git a/api/client/features.pb.go b/api/client/features.pb.go
index e24d8dd4..dcbb3f2c 100644
--- a/api/client/features.pb.go
+++ b/api/client/features.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: features.proto
 
 package client
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,14 +33,14 @@ type Features struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Enable pipeline template support. Read more at https://github.com/spinnaker/dcd-spec.
-	PipelineTemplates *wrappers.BoolValue `protobuf:"bytes,1,opt,name=pipelineTemplates,proto3" json:"pipelineTemplates,omitempty"`
+	PipelineTemplates *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=pipelineTemplates,proto3" json:"pipelineTemplates,omitempty"`
 	// Enable Chaos Monkey support. For this to work, you'll need a running Chaos
 	// Monkey deployment. See https://github.com/Netflix/chaosmonkey/wiki.
-	Chaos *wrappers.BoolValue `protobuf:"bytes,2,opt,name=chaos,proto3" json:"chaos,omitempty"`
+	Chaos *wrapperspb.BoolValue `protobuf:"bytes,2,opt,name=chaos,proto3" json:"chaos,omitempty"`
 	// Enable managed pipeline templates v2 UI support.
-	ManagedPipelineTemplatesV2UI *wrappers.BoolValue `protobuf:"bytes,3,opt,name=managedPipelineTemplatesV2UI,proto3" json:"managedPipelineTemplatesV2UI,omitempty"`
+	ManagedPipelineTemplatesV2UI *wrapperspb.BoolValue `protobuf:"bytes,3,opt,name=managedPipelineTemplatesV2UI,proto3" json:"managedPipelineTemplatesV2UI,omitempty"`
 	// Enable Gremlin fault-injection support.
-	Gremlin *wrappers.BoolValue `protobuf:"bytes,4,opt,name=gremlin,proto3" json:"gremlin,omitempty"`
+	Gremlin *wrapperspb.BoolValue `protobuf:"bytes,4,opt,name=gremlin,proto3" json:"gremlin,omitempty"`
 }
 
 func (x *Features) Reset() {
@@ -75,28 +75,28 @@ func (*Features) Descriptor() ([]byte, []int) {
 	return file_features_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Features) GetPipelineTemplates() *wrappers.BoolValue {
+func (x *Features) GetPipelineTemplates() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.PipelineTemplates
 	}
 	return nil
 }
 
-func (x *Features) GetChaos() *wrappers.BoolValue {
+func (x *Features) GetChaos() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Chaos
 	}
 	return nil
 }
 
-func (x *Features) GetManagedPipelineTemplatesV2UI() *wrappers.BoolValue {
+func (x *Features) GetManagedPipelineTemplatesV2UI() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.ManagedPipelineTemplatesV2UI
 	}
 	return nil
 }
 
-func (x *Features) GetGremlin() *wrappers.BoolValue {
+func (x *Features) GetGremlin() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Gremlin
 	}
@@ -147,8 +147,8 @@ func file_features_proto_rawDescGZIP() []byte {
 
 var file_features_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_features_proto_goTypes = []interface{}{
-	(*Features)(nil),           // 0: proto.Features
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*Features)(nil),             // 0: proto.Features
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_features_proto_depIdxs = []int32{
 	1, // 0: proto.Features.pipelineTemplates:type_name -> google.protobuf.BoolValue
diff --git a/api/client/metricstores/datadog.pb.go b/api/client/metricstores/datadog.pb.go
index 73a2c704..172a0fff 100644
--- a/api/client/metricstores/datadog.pb.go
+++ b/api/client/metricstores/datadog.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: metricstores/datadog.proto
 
 package metricstores
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Datadog struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the Datadog metric store is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// Datadog API key.
 	ApiKey string `protobuf:"bytes,2,opt,name=apiKey,json=api_key,proto3" json:"apiKey,omitempty"`
 	// Datadog app key. Only required if you want Spinnaker to push pre-configured
@@ -76,7 +76,7 @@ func (*Datadog) Descriptor() ([]byte, []int) {
 	return file_metricstores_datadog_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Datadog) GetEnabled() *wrappers.BoolValue {
+func (x *Datadog) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -141,8 +141,8 @@ func file_metricstores_datadog_proto_rawDescGZIP() []byte {
 
 var file_metricstores_datadog_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_metricstores_datadog_proto_goTypes = []interface{}{
-	(*Datadog)(nil),            // 0: proto.metricstores.Datadog
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*Datadog)(nil),              // 0: proto.metricstores.Datadog
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_metricstores_datadog_proto_depIdxs = []int32{
 	1, // 0: proto.metricstores.Datadog.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/metricstores/metricstores.pb.go b/api/client/metricstores/metricstores.pb.go
index 51e74375..e0188a7f 100644
--- a/api/client/metricstores/metricstores.pb.go
+++ b/api/client/metricstores/metricstores.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: metricstores/metricstores.proto
 
 package metricstores
diff --git a/api/client/metricstores/newrelic.pb.go b/api/client/metricstores/newrelic.pb.go
index ff366926..130dd24e 100644
--- a/api/client/metricstores/newrelic.pb.go
+++ b/api/client/metricstores/newrelic.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: metricstores/newrelic.proto
 
 package metricstores
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Newrelic struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the New Relic metric store is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// Your New Relic Insights insert key.
 	InsertKey string `protobuf:"bytes,2,opt,name=insertKey,json=insert_key,proto3" json:"insertKey,omitempty"`
 	// The URL to post metric data to. In almost all cases, this is set correctly
@@ -76,7 +76,7 @@ func (*Newrelic) Descriptor() ([]byte, []int) {
 	return file_metricstores_newrelic_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Newrelic) GetEnabled() *wrappers.BoolValue {
+func (x *Newrelic) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -141,8 +141,8 @@ func file_metricstores_newrelic_proto_rawDescGZIP() []byte {
 
 var file_metricstores_newrelic_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_metricstores_newrelic_proto_goTypes = []interface{}{
-	(*Newrelic)(nil),           // 0: proto.metricstores.Newrelic
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*Newrelic)(nil),             // 0: proto.metricstores.Newrelic
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_metricstores_newrelic_proto_depIdxs = []int32{
 	1, // 0: proto.metricstores.Newrelic.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/metricstores/prometheus.pb.go b/api/client/metricstores/prometheus.pb.go
index 1a852404..892fac9d 100644
--- a/api/client/metricstores/prometheus.pb.go
+++ b/api/client/metricstores/prometheus.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: metricstores/prometheus.proto
 
 package metricstores
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Prometheus struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the Prometheus metric store is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The endpoint to which the monitoring Daemon should push metrics. If you
 	// have configured Prometheus to automatically discover all your Spinnaker
 	// services and pull metrics from them, this is not required.
@@ -72,7 +72,7 @@ func (*Prometheus) Descriptor() ([]byte, []int) {
 	return file_metricstores_prometheus_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Prometheus) GetEnabled() *wrappers.BoolValue {
+func (x *Prometheus) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -121,8 +121,8 @@ func file_metricstores_prometheus_proto_rawDescGZIP() []byte {
 
 var file_metricstores_prometheus_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_metricstores_prometheus_proto_goTypes = []interface{}{
-	(*Prometheus)(nil),         // 0: proto.metricstores.Prometheus
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*Prometheus)(nil),           // 0: proto.metricstores.Prometheus
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_metricstores_prometheus_proto_depIdxs = []int32{
 	1, // 0: proto.metricstores.Prometheus.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/metricstores/stackdriver.pb.go b/api/client/metricstores/stackdriver.pb.go
index 9beaaf10..bfd97a6a 100644
--- a/api/client/metricstores/stackdriver.pb.go
+++ b/api/client/metricstores/stackdriver.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: metricstores/stackdriver.proto
 
 package metricstores
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Stackdriver struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the Datadog metric store is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// Path to a Google JSON service account that has permission to publish
 	// metrics.
 	CredentialsPath string `protobuf:"bytes,2,opt,name=credentialsPath,json=credentials_path,proto3" json:"credentialsPath,omitempty"`
@@ -75,7 +75,7 @@ func (*Stackdriver) Descriptor() ([]byte, []int) {
 	return file_metricstores_stackdriver_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Stackdriver) GetEnabled() *wrappers.BoolValue {
+func (x *Stackdriver) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -142,8 +142,8 @@ func file_metricstores_stackdriver_proto_rawDescGZIP() []byte {
 
 var file_metricstores_stackdriver_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_metricstores_stackdriver_proto_goTypes = []interface{}{
-	(*Stackdriver)(nil),        // 0: proto.metricstores.Stackdriver
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*Stackdriver)(nil),          // 0: proto.metricstores.Stackdriver
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_metricstores_stackdriver_proto_depIdxs = []int32{
 	1, // 0: proto.metricstores.Stackdriver.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/notification/bearychat.pb.go b/api/client/notification/bearychat.pb.go
index 88568ad1..ac50630b 100644
--- a/api/client/notification/bearychat.pb.go
+++ b/api/client/notification/bearychat.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: notification/bearychat.proto
 
 package notification
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type BearyChat struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether BearyChat notifications are enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 }
 
 func (x *BearyChat) Reset() {
@@ -68,7 +68,7 @@ func (*BearyChat) Descriptor() ([]byte, []int) {
 	return file_notification_bearychat_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *BearyChat) GetEnabled() *wrappers.BoolValue {
+func (x *BearyChat) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -108,8 +108,8 @@ func file_notification_bearychat_proto_rawDescGZIP() []byte {
 
 var file_notification_bearychat_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_notification_bearychat_proto_goTypes = []interface{}{
-	(*BearyChat)(nil),          // 0: proto.notification.BearyChat
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*BearyChat)(nil),            // 0: proto.notification.BearyChat
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_notification_bearychat_proto_depIdxs = []int32{
 	1, // 0: proto.notification.BearyChat.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/notification/email.pb.go b/api/client/notification/email.pb.go
index e1618a31..8ac2043f 100644
--- a/api/client/notification/email.pb.go
+++ b/api/client/notification/email.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: notification/email.proto
 
 package notification
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Email struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Email notifications are enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 }
 
 func (x *Email) Reset() {
@@ -68,7 +68,7 @@ func (*Email) Descriptor() ([]byte, []int) {
 	return file_notification_email_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Email) GetEnabled() *wrappers.BoolValue {
+func (x *Email) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -107,8 +107,8 @@ func file_notification_email_proto_rawDescGZIP() []byte {
 
 var file_notification_email_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_notification_email_proto_goTypes = []interface{}{
-	(*Email)(nil),              // 0: proto.notification.Email
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*Email)(nil),                // 0: proto.notification.Email
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_notification_email_proto_depIdxs = []int32{
 	1, // 0: proto.notification.Email.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/notification/github_status.pb.go b/api/client/notification/github_status.pb.go
index 919ca8ee..e633a936 100644
--- a/api/client/notification/github_status.pb.go
+++ b/api/client/notification/github_status.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: notification/github_status.proto
 
 package notification
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type GithubStatus struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether GitHub status notifications are enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// Your GitHub account token.
 	Token string `protobuf:"bytes,2,opt,name=token,proto3" json:"token,omitempty"`
 }
@@ -70,7 +70,7 @@ func (*GithubStatus) Descriptor() ([]byte, []int) {
 	return file_notification_github_status_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *GithubStatus) GetEnabled() *wrappers.BoolValue {
+func (x *GithubStatus) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -118,8 +118,8 @@ func file_notification_github_status_proto_rawDescGZIP() []byte {
 
 var file_notification_github_status_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_notification_github_status_proto_goTypes = []interface{}{
-	(*GithubStatus)(nil),       // 0: proto.notification.GithubStatus
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*GithubStatus)(nil),         // 0: proto.notification.GithubStatus
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_notification_github_status_proto_depIdxs = []int32{
 	1, // 0: proto.notification.GithubStatus.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/notification/google_chat.pb.go b/api/client/notification/google_chat.pb.go
index 01c482a3..5bbde9bd 100644
--- a/api/client/notification/google_chat.pb.go
+++ b/api/client/notification/google_chat.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: notification/google_chat.proto
 
 package notification
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type GoogleChat struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Google Chat notifications are enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 }
 
 func (x *GoogleChat) Reset() {
@@ -68,7 +68,7 @@ func (*GoogleChat) Descriptor() ([]byte, []int) {
 	return file_notification_google_chat_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *GoogleChat) GetEnabled() *wrappers.BoolValue {
+func (x *GoogleChat) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -108,8 +108,8 @@ func file_notification_google_chat_proto_rawDescGZIP() []byte {
 
 var file_notification_google_chat_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_notification_google_chat_proto_goTypes = []interface{}{
-	(*GoogleChat)(nil),         // 0: proto.notification.GoogleChat
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*GoogleChat)(nil),           // 0: proto.notification.GoogleChat
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_notification_google_chat_proto_depIdxs = []int32{
 	1, // 0: proto.notification.GoogleChat.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/notification/microsoft_teams.pb.go b/api/client/notification/microsoft_teams.pb.go
index 64f57c06..03fe410a 100644
--- a/api/client/notification/microsoft_teams.pb.go
+++ b/api/client/notification/microsoft_teams.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: notification/microsoft_teams.proto
 
 package notification
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type MicrosoftTeams struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Microsoft Teams notifications are enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 }
 
 func (x *MicrosoftTeams) Reset() {
@@ -68,7 +68,7 @@ func (*MicrosoftTeams) Descriptor() ([]byte, []int) {
 	return file_notification_microsoft_teams_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *MicrosoftTeams) GetEnabled() *wrappers.BoolValue {
+func (x *MicrosoftTeams) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -108,8 +108,8 @@ func file_notification_microsoft_teams_proto_rawDescGZIP() []byte {
 
 var file_notification_microsoft_teams_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_notification_microsoft_teams_proto_goTypes = []interface{}{
-	(*MicrosoftTeams)(nil),     // 0: proto.notification.MicrosoftTeams
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*MicrosoftTeams)(nil),       // 0: proto.notification.MicrosoftTeams
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_notification_microsoft_teams_proto_depIdxs = []int32{
 	1, // 0: proto.notification.MicrosoftTeams.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/notification/notifications.pb.go b/api/client/notification/notifications.pb.go
index 37352e18..f5de91bf 100644
--- a/api/client/notification/notifications.pb.go
+++ b/api/client/notification/notifications.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: notification/notifications.proto
 
 package notification
diff --git a/api/client/notification/pubsub.pb.go b/api/client/notification/pubsub.pb.go
index 4e94c905..7a8033cb 100644
--- a/api/client/notification/pubsub.pb.go
+++ b/api/client/notification/pubsub.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: notification/pubsub.proto
 
 package notification
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type PubSub struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Pub/Sub notifications are enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 }
 
 func (x *PubSub) Reset() {
@@ -68,7 +68,7 @@ func (*PubSub) Descriptor() ([]byte, []int) {
 	return file_notification_pubsub_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *PubSub) GetEnabled() *wrappers.BoolValue {
+func (x *PubSub) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -107,8 +107,8 @@ func file_notification_pubsub_proto_rawDescGZIP() []byte {
 
 var file_notification_pubsub_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_notification_pubsub_proto_goTypes = []interface{}{
-	(*PubSub)(nil),             // 0: proto.notification.PubSub
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*PubSub)(nil),               // 0: proto.notification.PubSub
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_notification_pubsub_proto_depIdxs = []int32{
 	1, // 0: proto.notification.PubSub.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/notification/slack.pb.go b/api/client/notification/slack.pb.go
index c03d2440..4ffed8bb 100644
--- a/api/client/notification/slack.pb.go
+++ b/api/client/notification/slack.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: notification/slack.proto
 
 package notification
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Slack struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Slack notifications are enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The name of your Slack bot.
 	BotName string `protobuf:"bytes,2,opt,name=botName,proto3" json:"botName,omitempty"`
 	// Your Slack bot token.
@@ -42,7 +42,7 @@ type Slack struct {
 	BaseUrl string `protobuf:"bytes,4,opt,name=baseUrl,proto3" json:"baseUrl,omitempty"`
 	// Force usage of incoming webhooks endpoint for Slack. Optional, only set if
 	// using a compatible API.
-	ForceUseIncomingWebhook *wrappers.BoolValue `protobuf:"bytes,5,opt,name=forceUseIncomingWebhook,proto3" json:"forceUseIncomingWebhook,omitempty"`
+	ForceUseIncomingWebhook *wrapperspb.BoolValue `protobuf:"bytes,5,opt,name=forceUseIncomingWebhook,proto3" json:"forceUseIncomingWebhook,omitempty"`
 }
 
 func (x *Slack) Reset() {
@@ -77,7 +77,7 @@ func (*Slack) Descriptor() ([]byte, []int) {
 	return file_notification_slack_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Slack) GetEnabled() *wrappers.BoolValue {
+func (x *Slack) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -105,7 +105,7 @@ func (x *Slack) GetBaseUrl() string {
 	return ""
 }
 
-func (x *Slack) GetForceUseIncomingWebhook() *wrappers.BoolValue {
+func (x *Slack) GetForceUseIncomingWebhook() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.ForceUseIncomingWebhook
 	}
@@ -154,8 +154,8 @@ func file_notification_slack_proto_rawDescGZIP() []byte {
 
 var file_notification_slack_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_notification_slack_proto_goTypes = []interface{}{
-	(*Slack)(nil),              // 0: proto.notification.Slack
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*Slack)(nil),                // 0: proto.notification.Slack
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_notification_slack_proto_depIdxs = []int32{
 	1, // 0: proto.notification.Slack.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/notification/twilio.pb.go b/api/client/notification/twilio.pb.go
index 5aad6087..ab419f59 100644
--- a/api/client/notification/twilio.pb.go
+++ b/api/client/notification/twilio.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: notification/twilio.proto
 
 package notification
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Twilio struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Twilio notifications are enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// Your Twilio account SID.
 	Account string `protobuf:"bytes,2,opt,name=account,proto3" json:"account,omitempty"`
 	// Your Twilio auth token.
@@ -76,7 +76,7 @@ func (*Twilio) Descriptor() ([]byte, []int) {
 	return file_notification_twilio_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Twilio) GetEnabled() *wrappers.BoolValue {
+func (x *Twilio) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -149,8 +149,8 @@ func file_notification_twilio_proto_rawDescGZIP() []byte {
 
 var file_notification_twilio_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_notification_twilio_proto_goTypes = []interface{}{
-	(*Twilio)(nil),             // 0: proto.notification.Twilio
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*Twilio)(nil),               // 0: proto.notification.Twilio
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_notification_twilio_proto_depIdxs = []int32{
 	1, // 0: proto.notification.Twilio.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/permissions.pb.go b/api/client/permissions.pb.go
index b91f2d0e..5e5fa94c 100644
--- a/api/client/permissions.pb.go
+++ b/api/client/permissions.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: permissions.proto
 
 package client
diff --git a/api/client/pubsub/google.pb.go b/api/client/pubsub/google.pb.go
index 44cb86c6..c7d2c317 100644
--- a/api/client/pubsub/google.pb.go
+++ b/api/client/pubsub/google.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: pubsub/google.proto
 
 package pubsub
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -90,7 +90,7 @@ type Google struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Google Cloud Pub/Sub is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The list of configured subscriptions.
 	Subscriptions []*GoogleSubscriber `protobuf:"bytes,2,rep,name=subscriptions,proto3" json:"subscriptions,omitempty"`
 	// The list of configured publishers.
@@ -129,7 +129,7 @@ func (*Google) Descriptor() ([]byte, []int) {
 	return file_pubsub_google_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Google) GetEnabled() *wrappers.BoolValue {
+func (x *Google) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -422,11 +422,11 @@ func file_pubsub_google_proto_rawDescGZIP() []byte {
 var file_pubsub_google_proto_enumTypes = make([]protoimpl.EnumInfo, 1)
 var file_pubsub_google_proto_msgTypes = make([]protoimpl.MessageInfo, 3)
 var file_pubsub_google_proto_goTypes = []interface{}{
-	(MessageFormat)(0),         // 0: proto.pubsub.MessageFormat
-	(*Google)(nil),             // 1: proto.pubsub.Google
-	(*GoogleSubscriber)(nil),   // 2: proto.pubsub.GoogleSubscriber
-	(*GooglePublisher)(nil),    // 3: proto.pubsub.GooglePublisher
-	(*wrappers.BoolValue)(nil), // 4: google.protobuf.BoolValue
+	(MessageFormat)(0),           // 0: proto.pubsub.MessageFormat
+	(*Google)(nil),               // 1: proto.pubsub.Google
+	(*GoogleSubscriber)(nil),     // 2: proto.pubsub.GoogleSubscriber
+	(*GooglePublisher)(nil),      // 3: proto.pubsub.GooglePublisher
+	(*wrapperspb.BoolValue)(nil), // 4: google.protobuf.BoolValue
 }
 var file_pubsub_google_proto_depIdxs = []int32{
 	4, // 0: proto.pubsub.Google.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/pubsub/pubsub.pb.go b/api/client/pubsub/pubsub.pb.go
index a732d5c0..4de10960 100644
--- a/api/client/pubsub/pubsub.pb.go
+++ b/api/client/pubsub/pubsub.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: pubsub/pubsub.proto
 
 package pubsub
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Pubsub struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Pub/Sub is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// Configuration for the Google Cloud Pub/Sub integration.
 	Google *Google `protobuf:"bytes,2,opt,name=google,proto3" json:"google,omitempty"`
 }
@@ -70,7 +70,7 @@ func (*Pubsub) Descriptor() ([]byte, []int) {
 	return file_pubsub_pubsub_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Pubsub) GetEnabled() *wrappers.BoolValue {
+func (x *Pubsub) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -119,9 +119,9 @@ func file_pubsub_pubsub_proto_rawDescGZIP() []byte {
 
 var file_pubsub_pubsub_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_pubsub_pubsub_proto_goTypes = []interface{}{
-	(*Pubsub)(nil),             // 0: proto.pubsub.Pubsub
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
-	(*Google)(nil),             // 2: proto.pubsub.Google
+	(*Pubsub)(nil),               // 0: proto.pubsub.Pubsub
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*Google)(nil),               // 2: proto.pubsub.Google
 }
 var file_pubsub_pubsub_proto_depIdxs = []int32{
 	1, // 0: proto.pubsub.Pubsub.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/repository/artifactory.pb.go b/api/client/repository/artifactory.pb.go
index 86b3e14c..6b9429cd 100644
--- a/api/client/repository/artifactory.pb.go
+++ b/api/client/repository/artifactory.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: repository/artifactory.proto
 
 package repository
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Artifactory struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the Artifactory integration is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// Artifactory service search configuration.
 	Searches []*Artifactory_Search `protobuf:"bytes,2,rep,name=searches,proto3" json:"searches,omitempty"`
 }
@@ -70,7 +70,7 @@ func (*Artifactory) Descriptor() ([]byte, []int) {
 	return file_repository_artifactory_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Artifactory) GetEnabled() *wrappers.BoolValue {
+func (x *Artifactory) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -236,9 +236,9 @@ func file_repository_artifactory_proto_rawDescGZIP() []byte {
 
 var file_repository_artifactory_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_repository_artifactory_proto_goTypes = []interface{}{
-	(*Artifactory)(nil),        // 0: proto.repository.Artifactory
-	(*Artifactory_Search)(nil), // 1: proto.repository.Artifactory.Search
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*Artifactory)(nil),          // 0: proto.repository.Artifactory
+	(*Artifactory_Search)(nil),   // 1: proto.repository.Artifactory.Search
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
 }
 var file_repository_artifactory_proto_depIdxs = []int32{
 	2, // 0: proto.repository.Artifactory.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/repository/repository.pb.go b/api/client/repository/repository.pb.go
index 93f163b9..2c30f57c 100644
--- a/api/client/repository/repository.pb.go
+++ b/api/client/repository/repository.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: repository/repository.proto
 
 package repository
diff --git a/api/client/security/authn/authn.pb.go b/api/client/security/authn/authn.pb.go
index 1529925c..5246cce7 100644
--- a/api/client/security/authn/authn.pb.go
+++ b/api/client/security/authn/authn.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: security/authn/authn.proto
 
 package authn
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -163,7 +163,7 @@ type Authentication struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether to enabled authentication.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// OAuth 2.0 configuration.
 	Oauth2 *OAuth2 `protobuf:"bytes,2,opt,name=oauth2,proto3" json:"oauth2,omitempty"`
 	// SAML configuration.
@@ -210,7 +210,7 @@ func (*Authentication) Descriptor() ([]byte, []int) {
 	return file_security_authn_authn_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Authentication) GetEnabled() *wrappers.BoolValue {
+func (x *Authentication) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -266,7 +266,7 @@ type OAuth2 struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the authentication method is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// Configuration for your OAuth 2.0 client.
 	Client *OAuth2Client `protobuf:"bytes,2,opt,name=client,proto3" json:"client,omitempty"`
 	// The map of requirements the userInfo request must have. This is used to
@@ -312,7 +312,7 @@ func (*OAuth2) Descriptor() ([]byte, []int) {
 	return file_security_authn_authn_proto_rawDescGZIP(), []int{1}
 }
 
-func (x *OAuth2) GetEnabled() *wrappers.BoolValue {
+func (x *OAuth2) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -372,7 +372,7 @@ type OAuth2Client struct {
 	PreEstablishedRedirectUri string `protobuf:"bytes,7,opt,name=preEstablishedRedirectUri,proto3" json:"preEstablishedRedirectUri,omitempty"`
 	// Whether the current URI in the request should be preferred over the pre-established
 	// redirect URI.
-	UseCurrentUri *wrappers.BoolValue `protobuf:"bytes,8,opt,name=useCurrentUri,proto3" json:"useCurrentUri,omitempty"`
+	UseCurrentUri *wrapperspb.BoolValue `protobuf:"bytes,8,opt,name=useCurrentUri,proto3" json:"useCurrentUri,omitempty"`
 }
 
 func (x *OAuth2Client) Reset() {
@@ -456,7 +456,7 @@ func (x *OAuth2Client) GetPreEstablishedRedirectUri() string {
 	return ""
 }
 
-func (x *OAuth2Client) GetUseCurrentUri() *wrappers.BoolValue {
+func (x *OAuth2Client) GetUseCurrentUri() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.UseCurrentUri
 	}
@@ -603,7 +603,7 @@ type Saml struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the authentication method is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The path to a local file containing identity provider's metadata XML file; can
 	// be either a local file or a URI.
 	MetadataUrl string `protobuf:"bytes,2,opt,name=metadataUrl,proto3" json:"metadataUrl,omitempty"`
@@ -665,7 +665,7 @@ func (*Saml) Descriptor() ([]byte, []int) {
 	return file_security_authn_authn_proto_rawDescGZIP(), []int{5}
 }
 
-func (x *Saml) GetEnabled() *wrappers.BoolValue {
+func (x *Saml) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -754,7 +754,7 @@ type Ldap struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the authentication method is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// ldap:// or ldaps:// url of the LDAP server.
 	Url string `protobuf:"bytes,2,opt,name=url,proto3" json:"url,omitempty"`
 	// The pattern for finding a user's DN using simple pattern matching. For example,
@@ -817,7 +817,7 @@ func (*Ldap) Descriptor() ([]byte, []int) {
 	return file_security_authn_authn_proto_rawDescGZIP(), []int{6}
 }
 
-func (x *Ldap) GetEnabled() *wrappers.BoolValue {
+func (x *Ldap) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -883,7 +883,7 @@ type X509 struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the authentication method is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The OID that encodes roles that the user specified in the x509 certificate
 	// belongs to.
 	RoleOid string `protobuf:"bytes,2,opt,name=roleOid,proto3" json:"roleOid,omitempty"`
@@ -924,7 +924,7 @@ func (*X509) Descriptor() ([]byte, []int) {
 	return file_security_authn_authn_proto_rawDescGZIP(), []int{7}
 }
 
-func (x *X509) GetEnabled() *wrappers.BoolValue {
+func (x *X509) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -958,7 +958,7 @@ type Iap struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the authentication method is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The HTTP request header that contains the JWT token.
 	JwtHeader string `protobuf:"bytes,2,opt,name=jwtHeader,proto3" json:"jwtHeader,omitempty"`
 	// The Issuer from the ID token payload.
@@ -1002,7 +1002,7 @@ func (*Iap) Descriptor() ([]byte, []int) {
 	return file_security_authn_authn_proto_rawDescGZIP(), []int{8}
 }
 
-func (x *Iap) GetEnabled() *wrappers.BoolValue {
+func (x *Iap) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -1044,7 +1044,7 @@ type Basic struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether the authentication method is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The username and password used to log in via basic authentication.
 	User *UsernamePassword `protobuf:"bytes,2,opt,name=user,proto3" json:"user,omitempty"`
 }
@@ -1081,7 +1081,7 @@ func (*Basic) Descriptor() ([]byte, []int) {
 	return file_security_authn_authn_proto_rawDescGZIP(), []int{9}
 }
 
-func (x *Basic) GetEnabled() *wrappers.BoolValue {
+func (x *Basic) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -1494,7 +1494,7 @@ var file_security_authn_authn_proto_goTypes = []interface{}{
 	(*UsernamePassword)(nil),               // 12: proto.security.authn.UsernamePassword
 	nil,                                    // 13: proto.security.authn.OAuth2.UserInfoRequirementsEntry
 	(*Saml_UserAttributes)(nil),            // 14: proto.security.authn.Saml.UserAttributes
-	(*wrappers.BoolValue)(nil),             // 15: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),           // 15: google.protobuf.BoolValue
 }
 var file_security_authn_authn_proto_depIdxs = []int32{
 	15, // 0: proto.security.authn.Authentication.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/security/authz/authz.pb.go b/api/client/security/authz/authz.pb.go
index 8948554e..be827d65 100644
--- a/api/client/security/authz/authz.pb.go
+++ b/api/client/security/authz/authz.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: security/authz/authz.proto
 
 package authz
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -94,7 +94,7 @@ type Authorization struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether Spinnaker's role-based authorization is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// Configuration role providers that map users to groups.
 	GroupMembership *GroupMembership `protobuf:"bytes,2,opt,name=groupMembership,proto3" json:"groupMembership,omitempty"`
 }
@@ -131,7 +131,7 @@ func (*Authorization) Descriptor() ([]byte, []int) {
 	return file_security_authz_authz_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Authorization) GetEnabled() *wrappers.BoolValue {
+func (x *Authorization) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -662,7 +662,7 @@ var file_security_authz_authz_proto_goTypes = []interface{}{
 	(*GithubRoleProvider)(nil),            // 4: proto.security.authz.GithubRoleProvider
 	(*FileRoleProvider)(nil),              // 5: proto.security.authz.FileRoleProvider
 	(*LdapRoleProvider)(nil),              // 6: proto.security.authz.LdapRoleProvider
-	(*wrappers.BoolValue)(nil),            // 7: google.protobuf.BoolValue
+	(*wrapperspb.BoolValue)(nil),          // 7: google.protobuf.BoolValue
 }
 var file_security_authz_authz_proto_depIdxs = []int32{
 	7, // 0: proto.security.authz.Authorization.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/security/security.pb.go b/api/client/security/security.pb.go
index 172cc633..c4ce59cf 100644
--- a/api/client/security/security.pb.go
+++ b/api/client/security/security.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: security/security.proto
 
 package security
diff --git a/api/client/security/ssl.pb.go b/api/client/security/ssl.pb.go
index ab710241..c53a7370 100644
--- a/api/client/security/ssl.pb.go
+++ b/api/client/security/ssl.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: security/ssl.proto
 
 package security
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -220,7 +220,7 @@ type ApiSsl struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether SSL is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// Name of your keystore entry as generated with your keytool.
 	KeyAlias string `protobuf:"bytes,2,opt,name=keyAlias,proto3" json:"keyAlias,omitempty"`
 	// Path to the keystore holding your security certificates.
@@ -272,7 +272,7 @@ func (*ApiSsl) Descriptor() ([]byte, []int) {
 	return file_security_ssl_proto_rawDescGZIP(), []int{2}
 }
 
-func (x *ApiSsl) GetEnabled() *wrappers.BoolValue {
+func (x *ApiSsl) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -342,7 +342,7 @@ type UiSsl struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether SSL is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// Path to your .crt file.
 	SslCertificateFile string `protobuf:"bytes,2,opt,name=sslCertificateFile,proto3" json:"sslCertificateFile,omitempty"`
 	// Path to your .key file.
@@ -387,7 +387,7 @@ func (*UiSsl) Descriptor() ([]byte, []int) {
 	return file_security_ssl_proto_rawDescGZIP(), []int{3}
 }
 
-func (x *UiSsl) GetEnabled() *wrappers.BoolValue {
+func (x *UiSsl) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -511,12 +511,12 @@ func file_security_ssl_proto_rawDescGZIP() []byte {
 var file_security_ssl_proto_enumTypes = make([]protoimpl.EnumInfo, 1)
 var file_security_ssl_proto_msgTypes = make([]protoimpl.MessageInfo, 4)
 var file_security_ssl_proto_goTypes = []interface{}{
-	(ClientAuth)(0),            // 0: proto.security.ClientAuth
-	(*ApiSecurity)(nil),        // 1: proto.security.ApiSecurity
-	(*UiSecurity)(nil),         // 2: proto.security.UiSecurity
-	(*ApiSsl)(nil),             // 3: proto.security.ApiSsl
-	(*UiSsl)(nil),              // 4: proto.security.UiSsl
-	(*wrappers.BoolValue)(nil), // 5: google.protobuf.BoolValue
+	(ClientAuth)(0),              // 0: proto.security.ClientAuth
+	(*ApiSecurity)(nil),          // 1: proto.security.ApiSecurity
+	(*UiSecurity)(nil),           // 2: proto.security.UiSecurity
+	(*ApiSsl)(nil),               // 3: proto.security.ApiSsl
+	(*UiSsl)(nil),                // 4: proto.security.UiSsl
+	(*wrapperspb.BoolValue)(nil), // 5: google.protobuf.BoolValue
 }
 var file_security_ssl_proto_depIdxs = []int32{
 	3, // 0: proto.security.ApiSecurity.ssl:type_name -> proto.security.ApiSsl
diff --git a/api/client/security/trust_store.pb.go b/api/client/security/trust_store.pb.go
index d7664fcd..2afce2f6 100644
--- a/api/client/security/trust_store.pb.go
+++ b/api/client/security/trust_store.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: security/trust_store.proto
 
 package security
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type TrustStore struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether this custom trust store is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The path to a key store in JKS format containing certification authorities
 	// that should be trusted.
 	TrustStore string `protobuf:"bytes,2,opt,name=trustStore,proto3" json:"trustStore,omitempty"`
@@ -73,7 +73,7 @@ func (*TrustStore) Descriptor() ([]byte, []int) {
 	return file_security_trust_store_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *TrustStore) GetEnabled() *wrappers.BoolValue {
+func (x *TrustStore) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -184,9 +184,9 @@ func file_security_trust_store_proto_rawDescGZIP() []byte {
 
 var file_security_trust_store_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_security_trust_store_proto_goTypes = []interface{}{
-	(*TrustStore)(nil),         // 0: proto.security.TrustStore
-	(*WebhookConfig)(nil),      // 1: proto.security.WebhookConfig
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*TrustStore)(nil),           // 0: proto.security.TrustStore
+	(*WebhookConfig)(nil),        // 1: proto.security.WebhookConfig
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
 }
 var file_security_trust_store_proto_depIdxs = []int32{
 	2, // 0: proto.security.TrustStore.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/stats.pb.go b/api/client/stats.pb.go
index 294cc552..736d99db 100644
--- a/api/client/stats.pb.go
+++ b/api/client/stats.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: stats.proto
 
 package client
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Stats struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether to send usage metrics. Defaults to true.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// A unique ID representing this deployment of Spinnaker.
 	InstanceId string `protobuf:"bytes,2,opt,name=instanceId,proto3" json:"instanceId,omitempty"`
 	// The endpoint to which usage metrics are sent. This should generally be left
@@ -73,7 +73,7 @@ func (*Stats) Descriptor() ([]byte, []int) {
 	return file_stats_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Stats) GetEnabled() *wrappers.BoolValue {
+func (x *Stats) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -190,9 +190,9 @@ func file_stats_proto_rawDescGZIP() []byte {
 
 var file_stats_proto_msgTypes = make([]protoimpl.MessageInfo, 2)
 var file_stats_proto_goTypes = []interface{}{
-	(*Stats)(nil),              // 0: proto.Stats
-	(*DeploymentMethod)(nil),   // 1: proto.DeploymentMethod
-	(*wrappers.BoolValue)(nil), // 2: google.protobuf.BoolValue
+	(*Stats)(nil),                // 0: proto.Stats
+	(*DeploymentMethod)(nil),     // 1: proto.DeploymentMethod
+	(*wrapperspb.BoolValue)(nil), // 2: google.protobuf.BoolValue
 }
 var file_stats_proto_depIdxs = []int32{
 	2, // 0: proto.Stats.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/storage/azs.pb.go b/api/client/storage/azs.pb.go
index 961f275f..da3531d7 100644
--- a/api/client/storage/azs.pb.go
+++ b/api/client/storage/azs.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: storage/azs.proto
 
 package storage
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Azs struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether this persistent store is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The name of an Azure Storage Account.
 	StorageAccountName string `protobuf:"bytes,2,opt,name=storageAccountName,proto3" json:"storageAccountName,omitempty"`
 	// The key to access the Azure Storage Account.
@@ -75,7 +75,7 @@ func (*Azs) Descriptor() ([]byte, []int) {
 	return file_storage_azs_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Azs) GetEnabled() *wrappers.BoolValue {
+func (x *Azs) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -143,8 +143,8 @@ func file_storage_azs_proto_rawDescGZIP() []byte {
 
 var file_storage_azs_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_storage_azs_proto_goTypes = []interface{}{
-	(*Azs)(nil),                // 0: proto.storage.Azs
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*Azs)(nil),                  // 0: proto.storage.Azs
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_storage_azs_proto_depIdxs = []int32{
 	1, // 0: proto.storage.Azs.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/storage/gcs.pb.go b/api/client/storage/gcs.pb.go
index a7854ca7..c7883007 100644
--- a/api/client/storage/gcs.pb.go
+++ b/api/client/storage/gcs.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: storage/gcs.proto
 
 package storage
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Gcs struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether this persistent store is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// A path to a JSON service account with permission to read and write to the bucket to be used as a backing store.
 	JsonPath string `protobuf:"bytes,2,opt,name=jsonPath,proto3" json:"jsonPath,omitempty"`
 	// The Google Cloud Platform project you are using to host the GCS bucket as a backing store.
@@ -41,7 +41,7 @@ type Gcs struct {
 	// The name of a storage bucket that your specified account has access to.
 	Bucket string `protobuf:"bytes,4,opt,name=bucket,proto3" json:"bucket,omitempty"`
 	// The root folder in the chosen bucket to place all of Spinnaker's persistent data in.
-	RootFolder *wrappers.StringValue `protobuf:"bytes,5,opt,name=rootFolder,proto3" json:"rootFolder,omitempty"`
+	RootFolder *wrapperspb.StringValue `protobuf:"bytes,5,opt,name=rootFolder,proto3" json:"rootFolder,omitempty"`
 	// This is only required if the bucket you specify does not exist yet.
 	BucketLocation string `protobuf:"bytes,6,opt,name=bucketLocation,proto3" json:"bucketLocation,omitempty"`
 }
@@ -78,7 +78,7 @@ func (*Gcs) Descriptor() ([]byte, []int) {
 	return file_storage_gcs_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Gcs) GetEnabled() *wrappers.BoolValue {
+func (x *Gcs) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -106,7 +106,7 @@ func (x *Gcs) GetBucket() string {
 	return ""
 }
 
-func (x *Gcs) GetRootFolder() *wrappers.StringValue {
+func (x *Gcs) GetRootFolder() *wrapperspb.StringValue {
 	if x != nil {
 		return x.RootFolder
 	}
@@ -162,9 +162,9 @@ func file_storage_gcs_proto_rawDescGZIP() []byte {
 
 var file_storage_gcs_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_storage_gcs_proto_goTypes = []interface{}{
-	(*Gcs)(nil),                  // 0: proto.storage.Gcs
-	(*wrappers.BoolValue)(nil),   // 1: google.protobuf.BoolValue
-	(*wrappers.StringValue)(nil), // 2: google.protobuf.StringValue
+	(*Gcs)(nil),                    // 0: proto.storage.Gcs
+	(*wrapperspb.BoolValue)(nil),   // 1: google.protobuf.BoolValue
+	(*wrapperspb.StringValue)(nil), // 2: google.protobuf.StringValue
 }
 var file_storage_gcs_proto_depIdxs = []int32{
 	1, // 0: proto.storage.Gcs.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/storage/oracle.pb.go b/api/client/storage/oracle.pb.go
index 1cd50278..a262b479 100644
--- a/api/client/storage/oracle.pb.go
+++ b/api/client/storage/oracle.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: storage/oracle.proto
 
 package storage
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -33,7 +33,7 @@ type Oracle struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether this persistent store is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The bucket name to store persistent state object in.
 	BucketName string `protobuf:"bytes,2,opt,name=bucketName,proto3" json:"bucketName,omitempty"`
 	// The namespace the bucket and objects should be created in.
@@ -86,7 +86,7 @@ func (*Oracle) Descriptor() ([]byte, []int) {
 	return file_storage_oracle_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *Oracle) GetEnabled() *wrappers.BoolValue {
+func (x *Oracle) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -207,8 +207,8 @@ func file_storage_oracle_proto_rawDescGZIP() []byte {
 
 var file_storage_oracle_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_storage_oracle_proto_goTypes = []interface{}{
-	(*Oracle)(nil),             // 0: proto.storage.Oracle
-	(*wrappers.BoolValue)(nil), // 1: google.protobuf.BoolValue
+	(*Oracle)(nil),               // 0: proto.storage.Oracle
+	(*wrapperspb.BoolValue)(nil), // 1: google.protobuf.BoolValue
 }
 var file_storage_oracle_proto_depIdxs = []int32{
 	1, // 0: proto.storage.Oracle.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/storage/persistent_storage.pb.go b/api/client/storage/persistent_storage.pb.go
index 7a6b2260..84b464de 100644
--- a/api/client/storage/persistent_storage.pb.go
+++ b/api/client/storage/persistent_storage.pb.go
@@ -1,7 +1,7 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: storage/persistent_storage.proto
 
 package storage
diff --git a/api/client/storage/s3.pb.go b/api/client/storage/s3.pb.go
index 7e607fa0..23163067 100644
--- a/api/client/storage/s3.pb.go
+++ b/api/client/storage/s3.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: storage/s3.proto
 
 package storage
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -87,12 +87,12 @@ type S3 struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether this persistent store is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// The name of a storage bucket that your specified account has access to.
 	Bucket string `protobuf:"bytes,2,opt,name=bucket,proto3" json:"bucket,omitempty"`
 	// The root folder in the chosen bucket to place all of Spinnaker's persistent
 	// data in.
-	RootFolder *wrappers.StringValue `protobuf:"bytes,3,opt,name=rootFolder,proto3" json:"rootFolder,omitempty"`
+	RootFolder *wrapperspb.StringValue `protobuf:"bytes,3,opt,name=rootFolder,proto3" json:"rootFolder,omitempty"`
 	// This is only required if the bucket you specify doesn't exist yet. In that
 	// case, the bucket will be created in that region.
 	// See http://docs.aws.amazon.com/general/latest/gr/rande.html#s3_region.
@@ -100,7 +100,7 @@ type S3 struct {
 	// When true, use path-style to access bucket; when false, use virtual hosted-style
 	// to access bucket.
 	// See https://docs.aws.amazon.com/AmazonS3/latest/dev/VirtualHosting.html#VirtualHostingExamples.
-	PathStyleAccess *wrappers.BoolValue `protobuf:"bytes,5,opt,name=pathStyleAccess,proto3" json:"pathStyleAccess,omitempty"`
+	PathStyleAccess *wrapperspb.BoolValue `protobuf:"bytes,5,opt,name=pathStyleAccess,proto3" json:"pathStyleAccess,omitempty"`
 	// An alternate endpoint that your S3-compatible storage can be found at. This is
 	// intended for self-hosted storage services with S3-compatible APIs, e.g. Minio.
 	Endpoint string `protobuf:"bytes,6,opt,name=endpoint,proto3" json:"endpoint,omitempty"`
@@ -145,7 +145,7 @@ func (*S3) Descriptor() ([]byte, []int) {
 	return file_storage_s3_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *S3) GetEnabled() *wrappers.BoolValue {
+func (x *S3) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -159,7 +159,7 @@ func (x *S3) GetBucket() string {
 	return ""
 }
 
-func (x *S3) GetRootFolder() *wrappers.StringValue {
+func (x *S3) GetRootFolder() *wrapperspb.StringValue {
 	if x != nil {
 		return x.RootFolder
 	}
@@ -173,7 +173,7 @@ func (x *S3) GetRegion() string {
 	return ""
 }
 
-func (x *S3) GetPathStyleAccess() *wrappers.BoolValue {
+func (x *S3) GetPathStyleAccess() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.PathStyleAccess
 	}
@@ -268,10 +268,10 @@ func file_storage_s3_proto_rawDescGZIP() []byte {
 var file_storage_s3_proto_enumTypes = make([]protoimpl.EnumInfo, 1)
 var file_storage_s3_proto_msgTypes = make([]protoimpl.MessageInfo, 1)
 var file_storage_s3_proto_goTypes = []interface{}{
-	(S3ServerSideEncryption)(0),  // 0: proto.storage.S3ServerSideEncryption
-	(*S3)(nil),                   // 1: proto.storage.S3
-	(*wrappers.BoolValue)(nil),   // 2: google.protobuf.BoolValue
-	(*wrappers.StringValue)(nil), // 3: google.protobuf.StringValue
+	(S3ServerSideEncryption)(0),    // 0: proto.storage.S3ServerSideEncryption
+	(*S3)(nil),                     // 1: proto.storage.S3
+	(*wrapperspb.BoolValue)(nil),   // 2: google.protobuf.BoolValue
+	(*wrapperspb.StringValue)(nil), // 3: google.protobuf.StringValue
 }
 var file_storage_s3_proto_depIdxs = []int32{
 	2, // 0: proto.storage.S3.enabled:type_name -> google.protobuf.BoolValue
diff --git a/api/client/storage/sql.pb.go b/api/client/storage/sql.pb.go
index 5126cac2..5cd93bc8 100644
--- a/api/client/storage/sql.pb.go
+++ b/api/client/storage/sql.pb.go
@@ -1,16 +1,16 @@
 // Code generated by protoc-gen-go. DO NOT EDIT.
 // versions:
 // 	protoc-gen-go v1.25.0
-// 	protoc        v3.13.0
+// 	protoc        v3.14.0
 // source: storage/sql.proto
 
 package storage
 
 import (
 	proto "github.com/golang/protobuf/proto"
-	wrappers "github.com/golang/protobuf/ptypes/wrappers"
 	protoreflect "google.golang.org/protobuf/reflect/protoreflect"
 	protoimpl "google.golang.org/protobuf/runtime/protoimpl"
+	wrapperspb "google.golang.org/protobuf/types/known/wrapperspb"
 	reflect "reflect"
 	sync "sync"
 )
@@ -32,7 +32,7 @@ type SQL struct {
 	unknownFields protoimpl.UnknownFields
 
 	// Whether this persistent store is enabled.
-	Enabled *wrappers.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
+	Enabled *wrapperspb.BoolValue `protobuf:"bytes,1,opt,name=enabled,proto3" json:"enabled,omitempty"`
 	// Default database connection pool.
 	ConnectionPools *SQL_ConnectionPools `protobuf:"bytes,2,opt,name=connectionPools,proto3" json:"connectionPools,omitempty"`
 }
@@ -69,7 +69,7 @@ func (*SQL) Descriptor() ([]byte, []int) {
 	return file_storage_sql_proto_rawDescGZIP(), []int{0}
 }
 
-func (x *SQL) GetEnabled() *wrappers.BoolValue {
+func (x *SQL) GetEnabled() *wrapperspb.BoolValue {
 	if x != nil {
 		return x.Enabled
 	}
@@ -281,10 +281,10 @@ func file_storage_sql_proto_rawDescGZIP() []byte {
 
 var file_storage_sql_proto_msgTypes = make([]protoimpl.MessageInfo, 3)
 var file_storage_sql_proto_goTypes = []interface{}{
-	(*SQL)(nil),                 // 0: proto.storage.SQL
-	(*SQL_ConnectionPools)(nil), // 1: proto.storage.SQL.ConnectionPools
-	(*SQL_ConnectionPool)(nil),  // 2: proto.storage.SQL.ConnectionPool
-	(*wrappers.BoolValue)(nil),  // 3: google.protobuf.BoolValue
+	(*SQL)(nil),                  // 0: proto.storage.SQL
+	(*SQL_ConnectionPools)(nil),  // 1: proto.storage.SQL.ConnectionPools
+	(*SQL_ConnectionPool)(nil),   // 2: proto.storage.SQL.ConnectionPool
+	(*wrapperspb.BoolValue)(nil), // 3: google.protobuf.BoolValue
 }
 var file_storage_sql_proto_depIdxs = []int32{
 	3, // 0: proto.storage.SQL.enabled:type_name -> google.protobuf.BoolValue
diff --git a/build/protoc/Dockerfile b/build/protoc/Dockerfile
index bfa488df..f1e6c909 100644
--- a/build/protoc/Dockerfile
+++ b/build/protoc/Dockerfile
@@ -17,7 +17,7 @@ RUN curl -L https://github.com/pseudomuto/protoc-gen-doc/releases/download/v$PRO
  && chmod 755 protoc-gen-doc
 
 FROM curl as protoc
-ARG PROTOC_VERSION=3.13.0
+ARG PROTOC_VERSION=3.14.0
 RUN curl -vLo protoc.zip https://github.com/protocolbuffers/protobuf/releases/download/v${PROTOC_VERSION}/protoc-${PROTOC_VERSION}-linux-x86_64.zip \
  && unzip protoc.zip \
  # We want all files/folders in bin/ to be executable
diff --git a/go.mod b/go.mod
index db2df43c..8edcb03a 100644
--- a/go.mod
+++ b/go.mod
@@ -9,5 +9,6 @@ require (
 	github.com/spf13/cobra v1.1.1
 	golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1 // indirect
 	google.golang.org/protobuf v1.25.0
+	gopkg.in/yaml.v2 v2.3.0 // indirect
 	sigs.k8s.io/yaml v1.2.0
 )
diff --git a/go.sum b/go.sum
index 6ffb0b52..f69702a3 100644
--- a/go.sum
+++ b/go.sum
@@ -339,6 +339,8 @@ gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.4/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.8 h1:obN1ZagJSUGI0Ek/LBmuj4SNLPfIny3KsKFopxRdj10=
 gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
+gopkg.in/yaml.v2 v2.3.0 h1:clyUAQHOM3G0M3f5vQj7LuJrETvjVot3Z5el9nffUtU=
+gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190106161140-3f1c8253044a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190418001031-e561f6794a2a/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=