YDB support OpenID Connect

43 files changed, 1879 insertions, 8 deletions

diff --git a/CMakeLists.darwin-x86_64.txt b/CMakeLists.darwin-x86_64.txt
index fa276972cd..7bdb5ba92f 100644
--- a/CMakeLists.darwin-x86_64.txt
+++ b/CMakeLists.darwin-x86_64.txt
@@ -12,3 +12,4 @@ add_subdirectory(util)
 add_subdirectory(library)
 add_subdirectory(ydb)
 add_subdirectory(certs)
+add_subdirectory(cloud)
diff --git a/CMakeLists.linux-aarch64.txt b/CMakeLists.linux-aarch64.txt
index fa276972cd..7bdb5ba92f 100644
--- a/CMakeLists.linux-aarch64.txt
+++ b/CMakeLists.linux-aarch64.txt
@@ -12,3 +12,4 @@ add_subdirectory(util)
 add_subdirectory(library)
 add_subdirectory(ydb)
 add_subdirectory(certs)
+add_subdirectory(cloud)
diff --git a/CMakeLists.linux-x86_64.txt b/CMakeLists.linux-x86_64.txt
index fa276972cd..7bdb5ba92f 100644
--- a/CMakeLists.linux-x86_64.txt
+++ b/CMakeLists.linux-x86_64.txt
@@ -12,3 +12,4 @@ add_subdirectory(util)
 add_subdirectory(library)
 add_subdirectory(ydb)
 add_subdirectory(certs)
+add_subdirectory(cloud)
diff --git a/CMakeLists.windows-x86_64.txt b/CMakeLists.windows-x86_64.txt
index fa276972cd..7bdb5ba92f 100644
--- a/CMakeLists.windows-x86_64.txt
+++ b/CMakeLists.windows-x86_64.txt
@@ -12,3 +12,4 @@ add_subdirectory(util)
 add_subdirectory(library)
 add_subdirectory(ydb)
 add_subdirectory(certs)
+add_subdirectory(cloud)
diff --git a/cloud/CMakeLists.txt b/cloud/CMakeLists.txt
new file mode 100644
index 0000000000..29fcbe1c75
--- /dev/null
+++ b/cloud/CMakeLists.txt
@@ -0,0 +1,9 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+add_subdirectory(bitbucket)
diff --git a/cloud/bitbucket/CMakeLists.txt b/cloud/bitbucket/CMakeLists.txt
new file mode 100644
index 0000000000..cd4a0b4b11
--- /dev/null
+++ b/cloud/bitbucket/CMakeLists.txt
@@ -0,0 +1,9 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+add_subdirectory(private-api)
diff --git a/cloud/bitbucket/private-api/CMakeLists.txt b/cloud/bitbucket/private-api/CMakeLists.txt
new file mode 100644
index 0000000000..a0670ac6c3
--- /dev/null
+++ b/cloud/bitbucket/private-api/CMakeLists.txt
@@ -0,0 +1,9 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+add_subdirectory(yandex)
diff --git a/cloud/bitbucket/private-api/yandex/CMakeLists.txt b/cloud/bitbucket/private-api/yandex/CMakeLists.txt
new file mode 100644
index 0000000000..2a8fd36e2f
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/CMakeLists.txt
@@ -0,0 +1,9 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+add_subdirectory(cloud)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/CMakeLists.txt b/cloud/bitbucket/private-api/yandex/cloud/CMakeLists.txt
new file mode 100644
index 0000000000..658a6d314c
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/CMakeLists.txt
@@ -0,0 +1,9 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+add_subdirectory(priv)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/CMakeLists.darwin-x86_64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/CMakeLists.darwin-x86_64.txt
new file mode 100644
index 0000000000..29e584286a
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/CMakeLists.darwin-x86_64.txt
@@ -0,0 +1,81 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+add_subdirectory(iam)
+add_subdirectory(oauth)
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(yandex-cloud-priv)
+set_property(TARGET yandex-cloud-priv PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET yandex-cloud-priv PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(yandex-cloud-priv PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(yandex-cloud-priv PUBLIC
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  contrib-libs-protobuf
+)
+target_proto_messages(yandex-cloud-priv PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/sensitive.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/validation.proto
+)
+target_proto_addincls(yandex-cloud-priv
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(yandex-cloud-priv
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(yandex-cloud-priv
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/CMakeLists.linux-aarch64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/CMakeLists.linux-aarch64.txt
new file mode 100644
index 0000000000..50202aa527
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/CMakeLists.linux-aarch64.txt
@@ -0,0 +1,82 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+add_subdirectory(iam)
+add_subdirectory(oauth)
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(yandex-cloud-priv)
+set_property(TARGET yandex-cloud-priv PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET yandex-cloud-priv PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(yandex-cloud-priv PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(yandex-cloud-priv PUBLIC
+  contrib-libs-linux-headers
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  contrib-libs-protobuf
+)
+target_proto_messages(yandex-cloud-priv PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/sensitive.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/validation.proto
+)
+target_proto_addincls(yandex-cloud-priv
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(yandex-cloud-priv
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(yandex-cloud-priv
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/CMakeLists.linux-x86_64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/CMakeLists.linux-x86_64.txt
new file mode 100644
index 0000000000..50202aa527
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/CMakeLists.linux-x86_64.txt
@@ -0,0 +1,82 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+add_subdirectory(iam)
+add_subdirectory(oauth)
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(yandex-cloud-priv)
+set_property(TARGET yandex-cloud-priv PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET yandex-cloud-priv PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(yandex-cloud-priv PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(yandex-cloud-priv PUBLIC
+  contrib-libs-linux-headers
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  contrib-libs-protobuf
+)
+target_proto_messages(yandex-cloud-priv PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/sensitive.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/validation.proto
+)
+target_proto_addincls(yandex-cloud-priv
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(yandex-cloud-priv
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(yandex-cloud-priv
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/CMakeLists.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/CMakeLists.txt
new file mode 100644
index 0000000000..a692f90f36
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/CMakeLists.txt
@@ -0,0 +1,17 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+if (CMAKE_SYSTEM_NAME STREQUAL "Linux" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "aarch64")
+  include(CMakeLists.linux-aarch64.txt)
+elseif (CMAKE_SYSTEM_NAME STREQUAL "Darwin" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "x86_64")
+  include(CMakeLists.darwin-x86_64.txt)
+elseif (WIN32 AND CMAKE_SYSTEM_PROCESSOR STREQUAL "AMD64" AND NOT HAVE_CUDA)
+  include(CMakeLists.windows-x86_64.txt)
+elseif (CMAKE_SYSTEM_NAME STREQUAL "Linux" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "x86_64" AND NOT HAVE_CUDA)
+  include(CMakeLists.linux-x86_64.txt)
+endif()
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/CMakeLists.windows-x86_64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/CMakeLists.windows-x86_64.txt
new file mode 100644
index 0000000000..29e584286a
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/CMakeLists.windows-x86_64.txt
@@ -0,0 +1,81 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+add_subdirectory(iam)
+add_subdirectory(oauth)
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(yandex-cloud-priv)
+set_property(TARGET yandex-cloud-priv PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET yandex-cloud-priv PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(yandex-cloud-priv PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(yandex-cloud-priv PUBLIC
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  contrib-libs-protobuf
+)
+target_proto_messages(yandex-cloud-priv PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/sensitive.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/validation.proto
+)
+target_proto_addincls(yandex-cloud-priv
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(yandex-cloud-priv
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(yandex-cloud-priv
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/iam/CMakeLists.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/CMakeLists.txt
new file mode 100644
index 0000000000..bc828bf9f1
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/CMakeLists.txt
@@ -0,0 +1,9 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+add_subdirectory(v1)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/CMakeLists.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/CMakeLists.txt
new file mode 100644
index 0000000000..022b14484f
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/CMakeLists.txt
@@ -0,0 +1,10 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+add_subdirectory(token)
+add_subdirectory(ts)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/CMakeLists.darwin-x86_64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/CMakeLists.darwin-x86_64.txt
new file mode 100644
index 0000000000..992d6fa5ca
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/CMakeLists.darwin-x86_64.txt
@@ -0,0 +1,68 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(iam-v1-token)
+set_property(TARGET iam-v1-token PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET iam-v1-token PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(iam-v1-token PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(iam-v1-token PUBLIC
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  yandex-cloud-priv
+  contrib-libs-protobuf
+)
+target_proto_messages(iam-v1-token PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/iam_token.proto
+)
+target_proto_addincls(iam-v1-token
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(iam-v1-token
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(iam-v1-token
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/CMakeLists.linux-aarch64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/CMakeLists.linux-aarch64.txt
new file mode 100644
index 0000000000..f7ab8862e1
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/CMakeLists.linux-aarch64.txt
@@ -0,0 +1,69 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(iam-v1-token)
+set_property(TARGET iam-v1-token PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET iam-v1-token PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(iam-v1-token PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(iam-v1-token PUBLIC
+  contrib-libs-linux-headers
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  yandex-cloud-priv
+  contrib-libs-protobuf
+)
+target_proto_messages(iam-v1-token PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/iam_token.proto
+)
+target_proto_addincls(iam-v1-token
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(iam-v1-token
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(iam-v1-token
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/CMakeLists.linux-x86_64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/CMakeLists.linux-x86_64.txt
new file mode 100644
index 0000000000..f7ab8862e1
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/CMakeLists.linux-x86_64.txt
@@ -0,0 +1,69 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(iam-v1-token)
+set_property(TARGET iam-v1-token PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET iam-v1-token PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(iam-v1-token PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(iam-v1-token PUBLIC
+  contrib-libs-linux-headers
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  yandex-cloud-priv
+  contrib-libs-protobuf
+)
+target_proto_messages(iam-v1-token PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/iam_token.proto
+)
+target_proto_addincls(iam-v1-token
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(iam-v1-token
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(iam-v1-token
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/CMakeLists.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/CMakeLists.txt
new file mode 100644
index 0000000000..a692f90f36
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/CMakeLists.txt
@@ -0,0 +1,17 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+if (CMAKE_SYSTEM_NAME STREQUAL "Linux" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "aarch64")
+  include(CMakeLists.linux-aarch64.txt)
+elseif (CMAKE_SYSTEM_NAME STREQUAL "Darwin" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "x86_64")
+  include(CMakeLists.darwin-x86_64.txt)
+elseif (WIN32 AND CMAKE_SYSTEM_PROCESSOR STREQUAL "AMD64" AND NOT HAVE_CUDA)
+  include(CMakeLists.windows-x86_64.txt)
+elseif (CMAKE_SYSTEM_NAME STREQUAL "Linux" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "x86_64" AND NOT HAVE_CUDA)
+  include(CMakeLists.linux-x86_64.txt)
+endif()
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/CMakeLists.windows-x86_64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/CMakeLists.windows-x86_64.txt
new file mode 100644
index 0000000000..992d6fa5ca
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/CMakeLists.windows-x86_64.txt
@@ -0,0 +1,68 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(iam-v1-token)
+set_property(TARGET iam-v1-token PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET iam-v1-token PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(iam-v1-token PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(iam-v1-token PUBLIC
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  yandex-cloud-priv
+  contrib-libs-protobuf
+)
+target_proto_messages(iam-v1-token PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/token/iam_token.proto
+)
+target_proto_addincls(iam-v1-token
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(iam-v1-token
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(iam-v1-token
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/CMakeLists.darwin-x86_64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/CMakeLists.darwin-x86_64.txt
new file mode 100644
index 0000000000..1353bd0aa4
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/CMakeLists.darwin-x86_64.txt
@@ -0,0 +1,68 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(iam-v1-ts)
+set_property(TARGET iam-v1-ts PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET iam-v1-ts PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(iam-v1-ts PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(iam-v1-ts PUBLIC
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  yandex-cloud-priv
+  contrib-libs-protobuf
+)
+target_proto_messages(iam-v1-ts PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/iam_token_service_subject.proto
+)
+target_proto_addincls(iam-v1-ts
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(iam-v1-ts
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(iam-v1-ts
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/CMakeLists.linux-aarch64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/CMakeLists.linux-aarch64.txt
new file mode 100644
index 0000000000..78ee90f7c2
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/CMakeLists.linux-aarch64.txt
@@ -0,0 +1,69 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(iam-v1-ts)
+set_property(TARGET iam-v1-ts PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET iam-v1-ts PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(iam-v1-ts PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(iam-v1-ts PUBLIC
+  contrib-libs-linux-headers
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  yandex-cloud-priv
+  contrib-libs-protobuf
+)
+target_proto_messages(iam-v1-ts PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/iam_token_service_subject.proto
+)
+target_proto_addincls(iam-v1-ts
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(iam-v1-ts
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(iam-v1-ts
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/CMakeLists.linux-x86_64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/CMakeLists.linux-x86_64.txt
new file mode 100644
index 0000000000..78ee90f7c2
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/CMakeLists.linux-x86_64.txt
@@ -0,0 +1,69 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(iam-v1-ts)
+set_property(TARGET iam-v1-ts PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET iam-v1-ts PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(iam-v1-ts PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(iam-v1-ts PUBLIC
+  contrib-libs-linux-headers
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  yandex-cloud-priv
+  contrib-libs-protobuf
+)
+target_proto_messages(iam-v1-ts PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/iam_token_service_subject.proto
+)
+target_proto_addincls(iam-v1-ts
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(iam-v1-ts
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(iam-v1-ts
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/CMakeLists.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/CMakeLists.txt
new file mode 100644
index 0000000000..a692f90f36
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/CMakeLists.txt
@@ -0,0 +1,17 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+if (CMAKE_SYSTEM_NAME STREQUAL "Linux" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "aarch64")
+  include(CMakeLists.linux-aarch64.txt)
+elseif (CMAKE_SYSTEM_NAME STREQUAL "Darwin" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "x86_64")
+  include(CMakeLists.darwin-x86_64.txt)
+elseif (WIN32 AND CMAKE_SYSTEM_PROCESSOR STREQUAL "AMD64" AND NOT HAVE_CUDA)
+  include(CMakeLists.windows-x86_64.txt)
+elseif (CMAKE_SYSTEM_NAME STREQUAL "Linux" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "x86_64" AND NOT HAVE_CUDA)
+  include(CMakeLists.linux-x86_64.txt)
+endif()
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/CMakeLists.windows-x86_64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/CMakeLists.windows-x86_64.txt
new file mode 100644
index 0000000000..1353bd0aa4
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/CMakeLists.windows-x86_64.txt
@@ -0,0 +1,68 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(iam-v1-ts)
+set_property(TARGET iam-v1-ts PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET iam-v1-ts PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(iam-v1-ts PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(iam-v1-ts PUBLIC
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  yandex-cloud-priv
+  contrib-libs-protobuf
+)
+target_proto_messages(iam-v1-ts PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/ts/iam_token_service_subject.proto
+)
+target_proto_addincls(iam-v1-ts
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(iam-v1-ts
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(iam-v1-ts
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/CMakeLists.darwin-x86_64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/CMakeLists.darwin-x86_64.txt
new file mode 100644
index 0000000000..790961f7ca
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/CMakeLists.darwin-x86_64.txt
@@ -0,0 +1,69 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+add_subdirectory(v1)
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(cloud-priv-oauth)
+set_property(TARGET cloud-priv-oauth PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET cloud-priv-oauth PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(cloud-priv-oauth PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(cloud-priv-oauth PUBLIC
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  yandex-cloud-priv
+  contrib-libs-protobuf
+)
+target_proto_messages(cloud-priv-oauth PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/claims.proto
+)
+target_proto_addincls(cloud-priv-oauth
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(cloud-priv-oauth
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(cloud-priv-oauth
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/CMakeLists.linux-aarch64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/CMakeLists.linux-aarch64.txt
new file mode 100644
index 0000000000..6b28835c11
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/CMakeLists.linux-aarch64.txt
@@ -0,0 +1,70 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+add_subdirectory(v1)
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(cloud-priv-oauth)
+set_property(TARGET cloud-priv-oauth PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET cloud-priv-oauth PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(cloud-priv-oauth PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(cloud-priv-oauth PUBLIC
+  contrib-libs-linux-headers
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  yandex-cloud-priv
+  contrib-libs-protobuf
+)
+target_proto_messages(cloud-priv-oauth PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/claims.proto
+)
+target_proto_addincls(cloud-priv-oauth
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(cloud-priv-oauth
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(cloud-priv-oauth
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/CMakeLists.linux-x86_64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/CMakeLists.linux-x86_64.txt
new file mode 100644
index 0000000000..6b28835c11
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/CMakeLists.linux-x86_64.txt
@@ -0,0 +1,70 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+add_subdirectory(v1)
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(cloud-priv-oauth)
+set_property(TARGET cloud-priv-oauth PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET cloud-priv-oauth PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(cloud-priv-oauth PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(cloud-priv-oauth PUBLIC
+  contrib-libs-linux-headers
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  yandex-cloud-priv
+  contrib-libs-protobuf
+)
+target_proto_messages(cloud-priv-oauth PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/claims.proto
+)
+target_proto_addincls(cloud-priv-oauth
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(cloud-priv-oauth
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(cloud-priv-oauth
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/CMakeLists.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/CMakeLists.txt
new file mode 100644
index 0000000000..a692f90f36
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/CMakeLists.txt
@@ -0,0 +1,17 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+if (CMAKE_SYSTEM_NAME STREQUAL "Linux" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "aarch64")
+  include(CMakeLists.linux-aarch64.txt)
+elseif (CMAKE_SYSTEM_NAME STREQUAL "Darwin" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "x86_64")
+  include(CMakeLists.darwin-x86_64.txt)
+elseif (WIN32 AND CMAKE_SYSTEM_PROCESSOR STREQUAL "AMD64" AND NOT HAVE_CUDA)
+  include(CMakeLists.windows-x86_64.txt)
+elseif (CMAKE_SYSTEM_NAME STREQUAL "Linux" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "x86_64" AND NOT HAVE_CUDA)
+  include(CMakeLists.linux-x86_64.txt)
+endif()
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/CMakeLists.windows-x86_64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/CMakeLists.windows-x86_64.txt
new file mode 100644
index 0000000000..790961f7ca
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/CMakeLists.windows-x86_64.txt
@@ -0,0 +1,69 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+add_subdirectory(v1)
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(cloud-priv-oauth)
+set_property(TARGET cloud-priv-oauth PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET cloud-priv-oauth PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(cloud-priv-oauth PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(cloud-priv-oauth PUBLIC
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  yandex-cloud-priv
+  contrib-libs-protobuf
+)
+target_proto_messages(cloud-priv-oauth PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/claims.proto
+)
+target_proto_addincls(cloud-priv-oauth
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(cloud-priv-oauth
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(cloud-priv-oauth
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/CMakeLists.darwin-x86_64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/CMakeLists.darwin-x86_64.txt
new file mode 100644
index 0000000000..bc70c52ba0
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/CMakeLists.darwin-x86_64.txt
@@ -0,0 +1,123 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(priv-oauth-v1)
+set_property(TARGET priv-oauth-v1 PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET priv-oauth-v1 PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(priv-oauth-v1 PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(priv-oauth-v1 PUBLIC
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  yandex-cloud-priv
+  iam-v1-token
+  iam-v1-ts
+  cloud-priv-oauth
+  contrib-libs-protobuf
+)
+target_proto_messages(priv-oauth-v1 PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/claim_service.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/cloud_user.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/login_history_service.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/oauth_request.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/session_service.proto
+)
+target_proto_addincls(priv-oauth-v1
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(priv-oauth-v1
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(priv-oauth-v1
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/CMakeLists.linux-aarch64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/CMakeLists.linux-aarch64.txt
new file mode 100644
index 0000000000..b2e93297f9
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/CMakeLists.linux-aarch64.txt
@@ -0,0 +1,124 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(priv-oauth-v1)
+set_property(TARGET priv-oauth-v1 PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET priv-oauth-v1 PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(priv-oauth-v1 PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(priv-oauth-v1 PUBLIC
+  contrib-libs-linux-headers
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  yandex-cloud-priv
+  iam-v1-token
+  iam-v1-ts
+  cloud-priv-oauth
+  contrib-libs-protobuf
+)
+target_proto_messages(priv-oauth-v1 PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/claim_service.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/cloud_user.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/login_history_service.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/oauth_request.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/session_service.proto
+)
+target_proto_addincls(priv-oauth-v1
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(priv-oauth-v1
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(priv-oauth-v1
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/CMakeLists.linux-x86_64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/CMakeLists.linux-x86_64.txt
new file mode 100644
index 0000000000..b2e93297f9
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/CMakeLists.linux-x86_64.txt
@@ -0,0 +1,124 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(priv-oauth-v1)
+set_property(TARGET priv-oauth-v1 PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET priv-oauth-v1 PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(priv-oauth-v1 PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(priv-oauth-v1 PUBLIC
+  contrib-libs-linux-headers
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  yandex-cloud-priv
+  iam-v1-token
+  iam-v1-ts
+  cloud-priv-oauth
+  contrib-libs-protobuf
+)
+target_proto_messages(priv-oauth-v1 PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/claim_service.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/cloud_user.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/login_history_service.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/oauth_request.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/session_service.proto
+)
+target_proto_addincls(priv-oauth-v1
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(priv-oauth-v1
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(priv-oauth-v1
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/CMakeLists.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/CMakeLists.txt
new file mode 100644
index 0000000000..a692f90f36
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/CMakeLists.txt
@@ -0,0 +1,17 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+if (CMAKE_SYSTEM_NAME STREQUAL "Linux" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "aarch64")
+  include(CMakeLists.linux-aarch64.txt)
+elseif (CMAKE_SYSTEM_NAME STREQUAL "Darwin" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "x86_64")
+  include(CMakeLists.darwin-x86_64.txt)
+elseif (WIN32 AND CMAKE_SYSTEM_PROCESSOR STREQUAL "AMD64" AND NOT HAVE_CUDA)
+  include(CMakeLists.windows-x86_64.txt)
+elseif (CMAKE_SYSTEM_NAME STREQUAL "Linux" AND CMAKE_SYSTEM_PROCESSOR STREQUAL "x86_64" AND NOT HAVE_CUDA)
+  include(CMakeLists.linux-x86_64.txt)
+endif()
diff --git a/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/CMakeLists.windows-x86_64.txt b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/CMakeLists.windows-x86_64.txt
new file mode 100644
index 0000000000..bc70c52ba0
--- /dev/null
+++ b/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/CMakeLists.windows-x86_64.txt
@@ -0,0 +1,123 @@
+
+# This file was generated by the build system used internally in the Yandex monorepo.
+# Only simple modifications are allowed (adding source-files to targets, adding simple properties
+# like target_include_directories). These modifications will be ported to original
+# ya.make files by maintainers. Any complex modifications which can't be ported back to the
+# original buildsystem will not be accepted.
+
+
+get_built_tool_path(
+  TOOL_grpc_cpp_bin
+  TOOL_grpc_cpp_dependency
+  contrib/tools/protoc/plugins/grpc_cpp
+  grpc_cpp
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+get_built_tool_path(
+  TOOL_protoc_bin
+  TOOL_protoc_dependency
+  contrib/tools/protoc/bin
+  protoc
+)
+get_built_tool_path(
+  TOOL_cpp_styleguide_bin
+  TOOL_cpp_styleguide_dependency
+  contrib/tools/protoc/plugins/cpp_styleguide
+  cpp_styleguide
+)
+
+add_library(priv-oauth-v1)
+set_property(TARGET priv-oauth-v1 PROPERTY
+  PROTOC_EXTRA_OUTS .grpc.pb.cc .grpc.pb.h
+)
+set_property(TARGET priv-oauth-v1 PROPERTY
+  PROTO_NAMESPACE cloud/bitbucket/private-api
+)
+target_include_directories(priv-oauth-v1 PUBLIC
+  ${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_link_libraries(priv-oauth-v1 PUBLIC
+  contrib-libs-cxxsupp
+  yutil
+  contrib-libs-grpc
+  contrib-libs-googleapis-common-protos
+  yandex-cloud-priv
+  iam-v1-token
+  iam-v1-ts
+  cloud-priv-oauth
+  contrib-libs-protobuf
+)
+target_proto_messages(priv-oauth-v1 PRIVATE
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/claim_service.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/cloud_user.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/login_history_service.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/oauth_request.proto
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/session_service.proto
+)
+target_proto_addincls(priv-oauth-v1
+  ./cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_SOURCE_DIR}/contrib/libs/googleapis-common-protos
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+  ${CMAKE_SOURCE_DIR}/cloud/bitbucket/private-api
+  ${CMAKE_BINARY_DIR}
+  ${CMAKE_SOURCE_DIR}/contrib/libs/protobuf/src
+)
+target_proto_outs(priv-oauth-v1
+  --cpp_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+  --cpp_styleguide_out=${CMAKE_BINARY_DIR}/cloud/bitbucket/private-api
+)
+target_proto_plugin(priv-oauth-v1
+  grpc_cpp
+  grpc_cpp
+)
diff --git a/library/cpp/actors/http/http.cpp b/library/cpp/actors/http/http.cpp
index a8e2c09922..3f3687ccef 100644
--- a/library/cpp/actors/http/http.cpp
+++ b/library/cpp/actors/http/http.cpp
@@ -452,21 +452,25 @@ THttpIncomingResponse::THttpIncomingResponse(THttpOutgoingRequestPtr request)
     : Request(request)
 {}
 
-THttpOutgoingResponsePtr THttpIncomingRequest::CreateIncompleteResponse(TStringBuf status, TStringBuf message) {
+THttpOutgoingResponsePtr THttpIncomingRequest::ConstructResponse(TStringBuf status, TStringBuf message) {
     TStringBuf version = Version;
     if (version != "1.0" && version != "1.1") {
         version = "1.1";
     }
     THttpOutgoingResponsePtr response = new THttpOutgoingResponse(this, "HTTP", version, status, message);
-    response->Set<&THttpResponse::Connection>(GetConnection());
-    if (!Endpoint->WorkerName.empty()) {
-        response->Set("X-Worker-Name", Endpoint->WorkerName);
-    }
     return response;
 }
 
 THttpOutgoingResponsePtr THttpIncomingRequest::CreateIncompleteResponse(TStringBuf status, TStringBuf message, const THeaders& headers) {
-    THttpOutgoingResponsePtr response = CreateIncompleteResponse(status, message);
+    THttpOutgoingResponsePtr response = ConstructResponse(status, message);
+    if (!headers.Has("Connection")) {
+        response->Set<&THttpResponse::Connection>(GetConnection());
+    }
+    if (!headers.Has("X-Worker-Name")) {
+        if (!Endpoint->WorkerName.empty()) {
+            response->Set("X-Worker-Name", Endpoint->WorkerName);
+        }
+    }
     response->Set(headers);
     return response;
 }
diff --git a/library/cpp/actors/http/http.h b/library/cpp/actors/http/http.h
index b7227f6ca7..c859c21a6d 100644
--- a/library/cpp/actors/http/http.h
+++ b/library/cpp/actors/http/http.h
@@ -751,13 +751,13 @@ public:
             TStringBuf body = TStringBuf(),
             TInstant lastModified = TInstant());
 
-    THttpOutgoingResponsePtr CreateIncompleteResponse(TStringBuf status, TStringBuf message);
-    THttpOutgoingResponsePtr CreateIncompleteResponse(TStringBuf status, TStringBuf message, const THeaders& headers);
+    THttpOutgoingResponsePtr CreateIncompleteResponse(TStringBuf status, TStringBuf message, const THeaders& headers = {});
     THttpOutgoingResponsePtr CreateIncompleteResponse(TStringBuf status, TStringBuf message, const THeaders& headers, TStringBuf body);
 
     THttpIncomingRequestPtr Duplicate();
 
 private:
+    THttpOutgoingResponsePtr ConstructResponse(TStringBuf status, TStringBuf message);
     void FinishResponse(THttpOutgoingResponsePtr& response, TStringBuf body = TStringBuf());
 };
 
diff --git a/ydb/library/testlib/service_mocks/CMakeLists.darwin-x86_64.txt b/ydb/library/testlib/service_mocks/CMakeLists.darwin-x86_64.txt
index 6f9f52f430..3ef5ca4ede 100644
--- a/ydb/library/testlib/service_mocks/CMakeLists.darwin-x86_64.txt
+++ b/ydb/library/testlib/service_mocks/CMakeLists.darwin-x86_64.txt
@@ -15,4 +15,5 @@ target_link_libraries(library-testlib-service_mocks INTERFACE
   api-grpc-draft
   client-yc_private-resourcemanager
   client-yc_private-iam
+  priv-oauth-v1
 )
diff --git a/ydb/library/testlib/service_mocks/CMakeLists.linux-aarch64.txt b/ydb/library/testlib/service_mocks/CMakeLists.linux-aarch64.txt
index 963c3eb248..f1007f7bf7 100644
--- a/ydb/library/testlib/service_mocks/CMakeLists.linux-aarch64.txt
+++ b/ydb/library/testlib/service_mocks/CMakeLists.linux-aarch64.txt
@@ -16,4 +16,5 @@ target_link_libraries(library-testlib-service_mocks INTERFACE
   api-grpc-draft
   client-yc_private-resourcemanager
   client-yc_private-iam
+  priv-oauth-v1
 )
diff --git a/ydb/library/testlib/service_mocks/CMakeLists.linux-x86_64.txt b/ydb/library/testlib/service_mocks/CMakeLists.linux-x86_64.txt
index 963c3eb248..f1007f7bf7 100644
--- a/ydb/library/testlib/service_mocks/CMakeLists.linux-x86_64.txt
+++ b/ydb/library/testlib/service_mocks/CMakeLists.linux-x86_64.txt
@@ -16,4 +16,5 @@ target_link_libraries(library-testlib-service_mocks INTERFACE
   api-grpc-draft
   client-yc_private-resourcemanager
   client-yc_private-iam
+  priv-oauth-v1
 )
diff --git a/ydb/library/testlib/service_mocks/CMakeLists.windows-x86_64.txt b/ydb/library/testlib/service_mocks/CMakeLists.windows-x86_64.txt
index 6f9f52f430..3ef5ca4ede 100644
--- a/ydb/library/testlib/service_mocks/CMakeLists.windows-x86_64.txt
+++ b/ydb/library/testlib/service_mocks/CMakeLists.windows-x86_64.txt
@@ -15,4 +15,5 @@ target_link_libraries(library-testlib-service_mocks INTERFACE
   api-grpc-draft
   client-yc_private-resourcemanager
   client-yc_private-iam
+  priv-oauth-v1
 )
diff --git a/ydb/library/testlib/service_mocks/session_service_mock.h b/ydb/library/testlib/service_mocks/session_service_mock.h
new file mode 100644
index 0000000000..ba366cf48e
--- /dev/null
+++ b/ydb/library/testlib/service_mocks/session_service_mock.h
@@ -0,0 +1,64 @@
+#pragma once
+
+#include <cloud/bitbucket/private-api/yandex/cloud/priv/oauth/v1/session_service.grpc.pb.h>
+#include <cloud/bitbucket/private-api/yandex/cloud/priv/iam/v1/iam_token_service.grpc.pb.h>
+#include <util/generic/hash_set.h>
+#include <util/generic/hash.h>
+
+class TSessionServiceMock : public yandex::cloud::priv::oauth::v1::SessionService::Service {
+    yandex::cloud::priv::oauth::v1::AuthorizationRequired AuthorizationRequiredMessage;
+
+    THashMap<TString, TString> ParseCookie(TStringBuf cookie) {
+        THashMap<TString, TString> parsedCookies;
+        for (TStringBuf param = cookie.NextTok(';'); !param.empty(); param = cookie.NextTok(';')) {
+            param.SkipPrefix(" ");
+            TStringBuf name = param.NextTok('=');
+            parsedCookies[name] = param;
+        }
+        return parsedCookies;
+    }
+
+public:
+    std::pair<const TString, TString> AllowedCookies {"yc_cookie", "allowed_session_cookie"};
+    bool IsTokenAllowed {true};
+    bool IsOpenIdScopeMissed {false};
+    THashSet<TString> AllowedAccessTokens;
+
+    TSessionServiceMock() {
+        AuthorizationRequiredMessage.Setauthorize_url("https://auth.cloud.yandex.ru/oauth/authorize");
+    }
+
+    grpc::Status Check(grpc::ServerContext*,
+                       const yandex::cloud::priv::oauth::v1::CheckSessionRequest* request,
+                       yandex::cloud::priv::oauth::v1::CheckSessionResponse* response) override {
+        if (!IsTokenAllowed) {
+            return grpc::Status(grpc::StatusCode::UNAUTHENTICATED, "Authorization IAM token are invalid or may have expired");
+        }
+        const THashMap<TString, TString> cookies = ParseCookie(request->Getcookie_header());
+        auto it = cookies.find(AllowedCookies.first);
+        if (it != cookies.cend()) {
+            if (it->second == AllowedCookies.second) {
+                auto iam_token = response->Mutableiam_token();
+                iam_token->Setiam_token("protected_page_iam_token");
+                return grpc::Status(grpc::StatusCode::OK, "Cookie is corrected");
+            }
+        }
+        return grpc::Status(grpc::StatusCode::INVALID_ARGUMENT, "The provided cookies are invalid or may have expired", AuthorizationRequiredMessage.SerializeAsString());
+    }
+
+    grpc::Status Create(grpc::ServerContext*,
+                        const yandex::cloud::priv::oauth::v1::CreateSessionRequest* request,
+                        yandex::cloud::priv::oauth::v1::CreateSessionResponse* response) override {
+        if (!IsTokenAllowed) {
+            return grpc::Status(grpc::StatusCode::UNAUTHENTICATED, "Authorization IAM token are invalid or may have expired");
+        }
+        if (IsOpenIdScopeMissed) {
+            return grpc::Status(grpc::StatusCode::FAILED_PRECONDITION, "Openid scope is missed for specified access_token");
+        }
+        if (AllowedAccessTokens.count(request->Getaccess_token()) > 0) {
+            response->Addset_cookie_header(AllowedCookies.first + "=" + AllowedCookies.second);
+            return grpc::Status(grpc::StatusCode::OK, "Cookie was created");
+        }
+        return grpc::Status(grpc::StatusCode::INVALID_ARGUMENT, "The provided access_token is invalid or may have expired", AuthorizationRequiredMessage.SerializeAsString());
+    }
+};