feat(targets): Addition of egress and ingress worker filters (#2654)

* feat(targets): Addition of egress and ingress worker filters

internal/proto/controller/api/resources/targets/v1/target.proto

@@ -135,8 +135,10 @@ message Target {
   ]; // @gotags: `class:"public"`
 
   // Optional boolean expression to filter the workers that are allowed to satisfy this request.
+  // Deprecated; use egress or ingress worker filters instead.
   google.protobuf.StringValue worker_filter = 140 [
     json_name = "worker_filter",
+    deprecated = true,
     (custom_options.v1.generate_sdk_option) = true,
     (custom_options.v1.mask_mapping) = {
       this: "worker_filter"
@@ -144,6 +146,27 @@ message Target {
     }
   ]; // @gotags: `class:"public"`
 
+  // Optional boolean expressions to filter the egress workers that are allowed to satisfy this request.
+  google.protobuf.StringValue egress_worker_filter = 160 [
+    json_name = "egress_worker_filter",
+    (custom_options.v1.generate_sdk_option) = true,
+    (custom_options.v1.mask_mapping) = {
+      this: "egress_worker_filter"
+      that: "EgressWorkerFilter"
+    }
+  ]; // @gotags: `class:"public"`
+
+  // Optional boolean expressions to filter the ingress workers that are allowed to satisfy this request.
+  // Unsupported on OSS.
+  google.protobuf.StringValue ingress_worker_filter = 170 [
+    json_name = "ingress_worker_filter",
+    (custom_options.v1.generate_sdk_option) = true,
+    (custom_options.v1.mask_mapping) = {
+      this: "ingress_worker_filter"
+      that: "IngressWorkerFilter"
+    }
+  ]; // @gotags: `class:"public"`
+
   // Output only. The IDs of the application credential source ids associated with this Target.
   // Deprecated use "brokered_credential_source_ids" instead.
   repeated string application_credential_source_ids = 400 [