@alienplatform/platform-api 1.3.4 → 1.4.0

package/src/models/operations/preparedeploymentstack.ts

@@ -0,0 +1,2845 @@
+/*
+ * Code generated by Speakeasy (https://speakeasy.com). DO NOT EDIT.
+ */
+
+import * as z from "zod/v4";
+import { remap as remap$ } from "../../lib/primitives.js";
+import { ClosedEnum } from "../../types/enums.js";
+import * as models from "../index.js";
+
+export const PrepareDeploymentStackPlatform = {
+  Aws: "aws",
+  Gcp: "gcp",
+  Azure: "azure",
+} as const;
+export type PrepareDeploymentStackPlatform = ClosedEnum<
+  typeof PrepareDeploymentStackPlatform
+>;
+
+/**
+ * Deployment model: how updates are delivered to the remote environment.
+ */
+export const DeploymentModel = {
+  Push: "push",
+  Pull: "pull",
+} as const;
+/**
+ * Deployment model: how updates are delivered to the remote environment.
+ */
+export type DeploymentModel = ClosedEnum<typeof DeploymentModel>;
+
+export type PrepareDeploymentStackAws = {
+  certificateArn: string;
+};
+
+export type Aws = PrepareDeploymentStackAws | any;
+
+export type PrepareDeploymentStackAzure = {
+  keyVaultCertificateId: string;
+};
+
+export type Azure = PrepareDeploymentStackAzure | any;
+
+export type PrepareDeploymentStackGcp = {
+  certificateName: string;
+};
+
+export type Gcp = PrepareDeploymentStackGcp | any;
+
+/**
+ * Namespace-scoped Kubernetes TLS Secret reference.
+ */
+export type TlsSecretRef = {
+  /**
+   * Secret namespace. Defaults to the release namespace when omitted.
+   */
+  namespace?: string | null | undefined;
+  /**
+   * Secret name.
+   */
+  secretName: string;
+};
+
+export type DomainsKubernetes = {
+  /**
+   * Namespace-scoped Kubernetes TLS Secret reference.
+   */
+  tlsSecretRef: TlsSecretRef;
+};
+
+export type DomainsKubernetesUnion = DomainsKubernetes | any;
+
+/**
+ * Platform-specific certificate references for custom domains.
+ */
+export type DomainsCertificate = {
+  aws?: PrepareDeploymentStackAws | any | null | undefined;
+  azure?: PrepareDeploymentStackAzure | any | null | undefined;
+  gcp?: PrepareDeploymentStackGcp | any | null | undefined;
+  kubernetes?: DomainsKubernetes | any | null | undefined;
+};
+
+/**
+ * Custom domain configuration for a single resource.
+ */
+export type CustomDomains = {
+  /**
+   * Platform-specific certificate references for custom domains.
+   */
+  certificate: DomainsCertificate;
+  /**
+   * Fully qualified domain name to use.
+   */
+  domain: string;
+};
+
+/**
+ * Domain configuration for the stack.
+ *
+ * @remarks
+ *
+ * When `custom_domains` is set, the specified resources use customer-provided
+ * domains and certificates. Otherwise, Alien auto-generates domains.
+ */
+export type Domains = {
+  /**
+   * Custom domain configuration per resource ID.
+   */
+  customDomains?: { [k: string]: CustomDomains } | null | undefined;
+};
+
+export type DomainsUnion = Domains | any;
+
+/**
+ * External bindings for pre-existing infrastructure.
+ *
+ * @remarks
+ * Allows using existing resources (MinIO, Redis, shared Container Apps
+ * Environment, etc.) instead of having Alien provision them.
+ * Required for Kubernetes platform, optional for cloud platforms.
+ */
+export type ExternalBindings = {};
+
+/**
+ * How heartbeat health checks are handled.
+ */
+export const Heartbeats = {
+  Off: "off",
+  On: "on",
+} as const;
+/**
+ * How heartbeat health checks are handled.
+ */
+export type Heartbeats = ClosedEnum<typeof Heartbeats>;
+
+/**
+ * Optional provider-specific identity for a cloud-backed Kubernetes cluster.
+ */
+export type Cloud = {
+  accountId?: string | null | undefined;
+  clusterId?: string | null | undefined;
+  clusterName?: string | null | undefined;
+  projectId?: string | null | undefined;
+  region?: string | null | undefined;
+  resourceGroup?: string | null | undefined;
+  subscriptionId?: string | null | undefined;
+};
+
+export type CloudUnion = Cloud | any;
+
+/**
+ * Ownership model for the Kubernetes cluster.
+ */
+export const Ownership = {
+  Managed: "managed",
+  Existing: "existing",
+  External: "external",
+} as const;
+/**
+ * Ownership model for the Kubernetes cluster.
+ */
+export type Ownership = ClosedEnum<typeof Ownership>;
+
+/**
+ * Kubernetes cluster setup settings.
+ */
+export type Cluster = {
+  cloud?: Cloud | any | null | undefined;
+  /**
+   * Namespace where the Alien chart and application resources run.
+   */
+  namespace?: string | null | undefined;
+  /**
+   * Ownership model for the Kubernetes cluster.
+   */
+  ownership: Ownership;
+};
+
+export type ClusterUnion = Cluster | any;
+
+export type CertificateNone2 = {
+  mode: "none";
+};
+
+export type CertificateManagedTLSSecret2 = {
+  mode: "managedTlsSecret";
+  /**
+   * Secret name template. Runtime may substitute resource/deployment tokens.
+   */
+  secretNameTemplate: string;
+};
+
+export type CertificateAwsAcmArn2 = {
+  /**
+   * Existing ACM certificate ARN.
+   */
+  certificateArn: string;
+  mode: "awsAcmArn";
+};
+
+export type CertificateManagedAcmImport2 = {
+  mode: "managedAcmImport";
+  /**
+   * ACM region. Defaults to the deployment region when omitted.
+   */
+  region?: string | null | undefined;
+  /**
+   * Tags applied to runtime-imported ACM certificates.
+   */
+  tags?: { [k: string]: string } | undefined;
+};
+
+/**
+ * Namespace-scoped Kubernetes TLS Secret reference.
+ */
+export type CertificateTLSSecretRef2 = {
+  /**
+   * Secret namespace. Defaults to the release namespace when omitted.
+   */
+  namespace?: string | null | undefined;
+  /**
+   * Secret name.
+   */
+  secretName: string;
+  mode: "tlsSecretRef";
+};
+
+/**
+ * Certificate publication or reference mode for Kubernetes public endpoints.
+ */
+export type CertificateUnion2 =
+  | CertificateTLSSecretRef2
+  | CertificateManagedAcmImport2
+  | CertificateAwsAcmArn2
+  | CertificateManagedTLSSecret2
+  | CertificateNone2;
+
+export const ModeCustom = {
+  Custom: "custom",
+} as const;
+export type ModeCustom = ClosedEnum<typeof ModeCustom>;
+
+export const ProviderAzureApplicationGatewayForContainersEnum4 = {
+  AzureApplicationGatewayForContainers: "azureApplicationGatewayForContainers",
+} as const;
+export type ProviderAzureApplicationGatewayForContainersEnum4 = ClosedEnum<
+  typeof ProviderAzureApplicationGatewayForContainersEnum4
+>;
+
+export type ProviderAzureApplicationGatewayForContainers4 = {
+  /**
+   * Optional ALB name when using BYO Application Gateway resources.
+   */
+  albName?: string | null | undefined;
+  /**
+   * Optional ALB namespace when using BYO Application Gateway resources.
+   */
+  albNamespace?: string | null | undefined;
+  /**
+   * Public or internal frontend exposure.
+   */
+  frontend: string;
+  provider: ProviderAzureApplicationGatewayForContainersEnum4;
+};
+
+export const ProviderGkeGatewayEnum4 = {
+  GkeGateway: "gkeGateway",
+} as const;
+export type ProviderGkeGatewayEnum4 = ClosedEnum<
+  typeof ProviderGkeGatewayEnum4
+>;
+
+export type ProviderGkeGateway4 = {
+  provider: ProviderGkeGatewayEnum4;
+  /**
+   * Optional static address name for the Gateway frontend.
+   */
+  staticAddressName?: string | null | undefined;
+};
+
+export const ProviderAwsAlbEnum4 = {
+  AwsAlb: "awsAlb",
+} as const;
+export type ProviderAwsAlbEnum4 = ClosedEnum<typeof ProviderAwsAlbEnum4>;
+
+export type ProviderAwsAlb4 = {
+  /**
+   * Optional ALB IP address type, such as `dualstack`.
+   */
+  ipAddressType?: string | null | undefined;
+  provider: ProviderAwsAlbEnum4;
+  /**
+   * Internet-facing or internal ALB scheme.
+   */
+  scheme: string;
+  /**
+   * Explicit subnet IDs when the profile cannot rely on controller discovery.
+   */
+  subnetIds?: Array<string> | undefined;
+  /**
+   * ALB target type, usually `ip`.
+   */
+  targetType: string;
+};
+
+export type ProviderUnion4 =
+  | ProviderAwsAlb4
+  | ProviderAzureApplicationGatewayForContainers4
+  | ProviderGkeGateway4
+  | any;
+
+/**
+ * Shared Gateway API route profile values.
+ */
+export type RouteGateway2 = {
+  /**
+   * Annotations applied to route objects.
+   */
+  annotations?: { [k: string]: string } | undefined;
+  /**
+   * Route controller identifier, for example a cloud Gateway controller.
+   */
+  controller?: string | null | undefined;
+  /**
+   * GatewayClass selected for generated Gateways.
+   */
+  gatewayClassName: string;
+  /**
+   * Labels applied to route objects.
+   */
+  labels?: { [k: string]: string } | undefined;
+  /**
+   * Listener port, usually 443.
+   */
+  listenerPort: number;
+  provider?:
+    | ProviderAwsAlb4
+    | ProviderAzureApplicationGatewayForContainers4
+    | ProviderGkeGateway4
+    | any
+    | null
+    | undefined;
+  routeApi: "gateway";
+};
+
+export const ProviderAzureApplicationGatewayForContainersEnum3 = {
+  AzureApplicationGatewayForContainers: "azureApplicationGatewayForContainers",
+} as const;
+export type ProviderAzureApplicationGatewayForContainersEnum3 = ClosedEnum<
+  typeof ProviderAzureApplicationGatewayForContainersEnum3
+>;
+
+export type ProviderAzureApplicationGatewayForContainers3 = {
+  /**
+   * Optional ALB name when using BYO Application Gateway resources.
+   */
+  albName?: string | null | undefined;
+  /**
+   * Optional ALB namespace when using BYO Application Gateway resources.
+   */
+  albNamespace?: string | null | undefined;
+  /**
+   * Public or internal frontend exposure.
+   */
+  frontend: string;
+  provider: ProviderAzureApplicationGatewayForContainersEnum3;
+};
+
+export const ProviderGkeGatewayEnum3 = {
+  GkeGateway: "gkeGateway",
+} as const;
+export type ProviderGkeGatewayEnum3 = ClosedEnum<
+  typeof ProviderGkeGatewayEnum3
+>;
+
+export type ProviderGkeGateway3 = {
+  provider: ProviderGkeGatewayEnum3;
+  /**
+   * Optional static address name for the Gateway frontend.
+   */
+  staticAddressName?: string | null | undefined;
+};
+
+export const ProviderAwsAlbEnum3 = {
+  AwsAlb: "awsAlb",
+} as const;
+export type ProviderAwsAlbEnum3 = ClosedEnum<typeof ProviderAwsAlbEnum3>;
+
+export type ProviderAwsAlb3 = {
+  /**
+   * Optional ALB IP address type, such as `dualstack`.
+   */
+  ipAddressType?: string | null | undefined;
+  provider: ProviderAwsAlbEnum3;
+  /**
+   * Internet-facing or internal ALB scheme.
+   */
+  scheme: string;
+  /**
+   * Explicit subnet IDs when the profile cannot rely on controller discovery.
+   */
+  subnetIds?: Array<string> | undefined;
+  /**
+   * ALB target type, usually `ip`.
+   */
+  targetType: string;
+};
+
+export type ProviderUnion3 =
+  | ProviderAwsAlb3
+  | ProviderAzureApplicationGatewayForContainers3
+  | ProviderGkeGateway3
+  | any;
+
+/**
+ * Shared Ingress route profile values.
+ */
+export type RouteIngress2 = {
+  /**
+   * Annotations applied to route objects.
+   */
+  annotations?: { [k: string]: string } | undefined;
+  /**
+   * Route controller identifier, for example `eks.amazonaws.com/alb`.
+   */
+  controller?: string | null | undefined;
+  /**
+   * `spec.ingressClassName` for generated Ingresses.
+   */
+  ingressClassName: string;
+  /**
+   * Labels applied to route objects.
+   */
+  labels?: { [k: string]: string } | undefined;
+  provider?:
+    | ProviderAwsAlb3
+    | ProviderAzureApplicationGatewayForContainers3
+    | ProviderGkeGateway3
+    | any
+    | null
+    | undefined;
+  routeApi: "ingress";
+};
+
+/**
+ * Kubernetes route API selected for public endpoints.
+ */
+export type RouteUnion2 = RouteIngress2 | RouteGateway2;
+
+export type ExposureCustom = {
+  /**
+   * Certificate publication or reference mode for Kubernetes public endpoints.
+   */
+  certificate:
+    | CertificateTLSSecretRef2
+    | CertificateManagedAcmImport2
+    | CertificateAwsAcmArn2
+    | CertificateManagedTLSSecret2
+    | CertificateNone2;
+  /**
+   * Hostname routed by the Kubernetes public endpoint.
+   */
+  domain: string;
+  mode: ModeCustom;
+  /**
+   * Kubernetes route API selected for public endpoints.
+   */
+  route: RouteIngress2 | RouteGateway2;
+};
+
+export type CertificateNone1 = {
+  mode: "none";
+};
+
+export type CertificateManagedTLSSecret1 = {
+  mode: "managedTlsSecret";
+  /**
+   * Secret name template. Runtime may substitute resource/deployment tokens.
+   */
+  secretNameTemplate: string;
+};
+
+export type CertificateAwsAcmArn1 = {
+  /**
+   * Existing ACM certificate ARN.
+   */
+  certificateArn: string;
+  mode: "awsAcmArn";
+};
+
+export type CertificateManagedAcmImport1 = {
+  mode: "managedAcmImport";
+  /**
+   * ACM region. Defaults to the deployment region when omitted.
+   */
+  region?: string | null | undefined;
+  /**
+   * Tags applied to runtime-imported ACM certificates.
+   */
+  tags?: { [k: string]: string } | undefined;
+};
+
+/**
+ * Namespace-scoped Kubernetes TLS Secret reference.
+ */
+export type CertificateTLSSecretRef1 = {
+  /**
+   * Secret namespace. Defaults to the release namespace when omitted.
+   */
+  namespace?: string | null | undefined;
+  /**
+   * Secret name.
+   */
+  secretName: string;
+  mode: "tlsSecretRef";
+};
+
+/**
+ * Certificate publication or reference mode for Kubernetes public endpoints.
+ */
+export type CertificateUnion1 =
+  | CertificateTLSSecretRef1
+  | CertificateManagedAcmImport1
+  | CertificateAwsAcmArn1
+  | CertificateManagedTLSSecret1
+  | CertificateNone1;
+
+export const ModeGenerated = {
+  Generated: "generated",
+} as const;
+export type ModeGenerated = ClosedEnum<typeof ModeGenerated>;
+
+export const ProviderAzureApplicationGatewayForContainersEnum2 = {
+  AzureApplicationGatewayForContainers: "azureApplicationGatewayForContainers",
+} as const;
+export type ProviderAzureApplicationGatewayForContainersEnum2 = ClosedEnum<
+  typeof ProviderAzureApplicationGatewayForContainersEnum2
+>;
+
+export type ProviderAzureApplicationGatewayForContainers2 = {
+  /**
+   * Optional ALB name when using BYO Application Gateway resources.
+   */
+  albName?: string | null | undefined;
+  /**
+   * Optional ALB namespace when using BYO Application Gateway resources.
+   */
+  albNamespace?: string | null | undefined;
+  /**
+   * Public or internal frontend exposure.
+   */
+  frontend: string;
+  provider: ProviderAzureApplicationGatewayForContainersEnum2;
+};
+
+export const ProviderGkeGatewayEnum2 = {
+  GkeGateway: "gkeGateway",
+} as const;
+export type ProviderGkeGatewayEnum2 = ClosedEnum<
+  typeof ProviderGkeGatewayEnum2
+>;
+
+export type ProviderGkeGateway2 = {
+  provider: ProviderGkeGatewayEnum2;
+  /**
+   * Optional static address name for the Gateway frontend.
+   */
+  staticAddressName?: string | null | undefined;
+};
+
+export const ProviderAwsAlbEnum2 = {
+  AwsAlb: "awsAlb",
+} as const;
+export type ProviderAwsAlbEnum2 = ClosedEnum<typeof ProviderAwsAlbEnum2>;
+
+export type ProviderAwsAlb2 = {
+  /**
+   * Optional ALB IP address type, such as `dualstack`.
+   */
+  ipAddressType?: string | null | undefined;
+  provider: ProviderAwsAlbEnum2;
+  /**
+   * Internet-facing or internal ALB scheme.
+   */
+  scheme: string;
+  /**
+   * Explicit subnet IDs when the profile cannot rely on controller discovery.
+   */
+  subnetIds?: Array<string> | undefined;
+  /**
+   * ALB target type, usually `ip`.
+   */
+  targetType: string;
+};
+
+export type ProviderUnion2 =
+  | ProviderAwsAlb2
+  | ProviderAzureApplicationGatewayForContainers2
+  | ProviderGkeGateway2
+  | any;
+
+/**
+ * Shared Gateway API route profile values.
+ */
+export type RouteGateway1 = {
+  /**
+   * Annotations applied to route objects.
+   */
+  annotations?: { [k: string]: string } | undefined;
+  /**
+   * Route controller identifier, for example a cloud Gateway controller.
+   */
+  controller?: string | null | undefined;
+  /**
+   * GatewayClass selected for generated Gateways.
+   */
+  gatewayClassName: string;
+  /**
+   * Labels applied to route objects.
+   */
+  labels?: { [k: string]: string } | undefined;
+  /**
+   * Listener port, usually 443.
+   */
+  listenerPort: number;
+  provider?:
+    | ProviderAwsAlb2
+    | ProviderAzureApplicationGatewayForContainers2
+    | ProviderGkeGateway2
+    | any
+    | null
+    | undefined;
+  routeApi: "gateway";
+};
+
+export const ProviderAzureApplicationGatewayForContainersEnum1 = {
+  AzureApplicationGatewayForContainers: "azureApplicationGatewayForContainers",
+} as const;
+export type ProviderAzureApplicationGatewayForContainersEnum1 = ClosedEnum<
+  typeof ProviderAzureApplicationGatewayForContainersEnum1
+>;
+
+export type ProviderAzureApplicationGatewayForContainers1 = {
+  /**
+   * Optional ALB name when using BYO Application Gateway resources.
+   */
+  albName?: string | null | undefined;
+  /**
+   * Optional ALB namespace when using BYO Application Gateway resources.
+   */
+  albNamespace?: string | null | undefined;
+  /**
+   * Public or internal frontend exposure.
+   */
+  frontend: string;
+  provider: ProviderAzureApplicationGatewayForContainersEnum1;
+};
+
+export const ProviderGkeGatewayEnum1 = {
+  GkeGateway: "gkeGateway",
+} as const;
+export type ProviderGkeGatewayEnum1 = ClosedEnum<
+  typeof ProviderGkeGatewayEnum1
+>;
+
+export type ProviderGkeGateway1 = {
+  provider: ProviderGkeGatewayEnum1;
+  /**
+   * Optional static address name for the Gateway frontend.
+   */
+  staticAddressName?: string | null | undefined;
+};
+
+export const ProviderAwsAlbEnum1 = {
+  AwsAlb: "awsAlb",
+} as const;
+export type ProviderAwsAlbEnum1 = ClosedEnum<typeof ProviderAwsAlbEnum1>;
+
+export type ProviderAwsAlb1 = {
+  /**
+   * Optional ALB IP address type, such as `dualstack`.
+   */
+  ipAddressType?: string | null | undefined;
+  provider: ProviderAwsAlbEnum1;
+  /**
+   * Internet-facing or internal ALB scheme.
+   */
+  scheme: string;
+  /**
+   * Explicit subnet IDs when the profile cannot rely on controller discovery.
+   */
+  subnetIds?: Array<string> | undefined;
+  /**
+   * ALB target type, usually `ip`.
+   */
+  targetType: string;
+};
+
+export type ProviderUnion1 =
+  | ProviderAwsAlb1
+  | ProviderAzureApplicationGatewayForContainers1
+  | ProviderGkeGateway1
+  | any;
+
+/**
+ * Shared Ingress route profile values.
+ */
+export type RouteIngress1 = {
+  /**
+   * Annotations applied to route objects.
+   */
+  annotations?: { [k: string]: string } | undefined;
+  /**
+   * Route controller identifier, for example `eks.amazonaws.com/alb`.
+   */
+  controller?: string | null | undefined;
+  /**
+   * `spec.ingressClassName` for generated Ingresses.
+   */
+  ingressClassName: string;
+  /**
+   * Labels applied to route objects.
+   */
+  labels?: { [k: string]: string } | undefined;
+  provider?:
+    | ProviderAwsAlb1
+    | ProviderAzureApplicationGatewayForContainers1
+    | ProviderGkeGateway1
+    | any
+    | null
+    | undefined;
+  routeApi: "ingress";
+};
+
+/**
+ * Kubernetes route API selected for public endpoints.
+ */
+export type RouteUnion1 = RouteIngress1 | RouteGateway1;
+
+export type ExposureGenerated = {
+  /**
+   * Certificate publication or reference mode for Kubernetes public endpoints.
+   */
+  certificate:
+    | CertificateTLSSecretRef1
+    | CertificateManagedAcmImport1
+    | CertificateAwsAcmArn1
+    | CertificateManagedTLSSecret1
+    | CertificateNone1;
+  mode: ModeGenerated;
+  /**
+   * Kubernetes route API selected for public endpoints.
+   */
+  route: RouteIngress1 | RouteGateway1;
+};
+
+export const ModeDisabled = {
+  Disabled: "disabled",
+} as const;
+export type ModeDisabled = ClosedEnum<typeof ModeDisabled>;
+
+export type ExposureDisabled = {
+  mode: ModeDisabled;
+};
+
+export type Exposure =
+  | ExposureCustom
+  | ExposureGenerated
+  | ExposureDisabled
+  | any;
+
+/**
+ * Kubernetes runtime substrate configuration.
+ *
+ * @remarks
+ *
+ * This controls how setup chooses the cluster backing `Platform::Kubernetes`
+ * deployments. When omitted, cloud-backed Kubernetes deployments default to a
+ * managed cluster and generic/on-prem Kubernetes defaults to an external
+ * cluster.
+ */
+export type PrepareDeploymentStackKubernetes = {
+  cluster?: Cluster | any | null | undefined;
+  exposure?:
+    | ExposureCustom
+    | ExposureGenerated
+    | ExposureDisabled
+    | any
+    | null
+    | undefined;
+};
+
+export type Kubernetes = PrepareDeploymentStackKubernetes | any;
+
+export const TypeByoVnetAzure = {
+  ByoVnetAzure: "byo-vnet-azure",
+} as const;
+export type TypeByoVnetAzure = ClosedEnum<typeof TypeByoVnetAzure>;
+
+export type NetworkByoVnetAzure = {
+  /**
+   * Name of the private subnet within the VNet
+   */
+  privateSubnetName: string;
+  /**
+   * Name of the public subnet within the VNet
+   */
+  publicSubnetName: string;
+  type: TypeByoVnetAzure;
+  /**
+   * The full resource ID of the existing VNet
+   */
+  vnetResourceId: string;
+};
+
+export const TypeByoVpcGcp = {
+  ByoVpcGcp: "byo-vpc-gcp",
+} as const;
+export type TypeByoVpcGcp = ClosedEnum<typeof TypeByoVpcGcp>;
+
+export type NetworkByoVpcGcp = {
+  /**
+   * The name of the existing VPC network
+   */
+  networkName: string;
+  /**
+   * The region of the subnet
+   */
+  region: string;
+  /**
+   * The name of the subnet to use
+   */
+  subnetName: string;
+  type: TypeByoVpcGcp;
+};
+
+export const TypeByoVpcAws = {
+  ByoVpcAws: "byo-vpc-aws",
+} as const;
+export type TypeByoVpcAws = ClosedEnum<typeof TypeByoVpcAws>;
+
+export type NetworkByoVpcAws = {
+  /**
+   * IDs of private subnets
+   */
+  privateSubnetIds: Array<string>;
+  /**
+   * IDs of public subnets (required for public ingress)
+   */
+  publicSubnetIds: Array<string>;
+  /**
+   * Optional security group IDs to use
+   */
+  securityGroupIds?: Array<string> | undefined;
+  type: TypeByoVpcAws;
+  /**
+   * The ID of the existing VPC
+   */
+  vpcId: string;
+};
+
+export const TypeCreate = {
+  Create: "create",
+} as const;
+export type TypeCreate = ClosedEnum<typeof TypeCreate>;
+
+export type NetworkCreate = {
+  /**
+   * Number of availability zones (default: 2).
+   */
+  availabilityZones?: number | undefined;
+  /**
+   * VPC/VNet CIDR block. If not specified, auto-generated from stack ID
+   *
+   * @remarks
+   * to reduce conflicts (e.g., "10.{hash}.0.0/16").
+   */
+  cidr?: string | null | undefined;
+  type: TypeCreate;
+};
+
+export const TypeUseDefault = {
+  UseDefault: "use-default",
+} as const;
+export type TypeUseDefault = ClosedEnum<typeof TypeUseDefault>;
+
+export type NetworkUseDefault = {
+  type: TypeUseDefault;
+};
+
+export type Network =
+  | NetworkByoVpcAws
+  | NetworkByoVpcGcp
+  | NetworkByoVnetAzure
+  | NetworkUseDefault
+  | NetworkCreate
+  | any;
+
+/**
+ * How telemetry (logs, metrics, traces) is handled.
+ */
+export const Telemetry = {
+  Off: "off",
+  Auto: "auto",
+  ApprovalRequired: "approval-required",
+} as const;
+/**
+ * How telemetry (logs, metrics, traces) is handled.
+ */
+export type Telemetry = ClosedEnum<typeof Telemetry>;
+
+/**
+ * How updates are delivered to the deployment.
+ */
+export const Updates = {
+  Auto: "auto",
+  ApprovalRequired: "approval-required",
+} as const;
+/**
+ * How updates are delivered to the deployment.
+ */
+export type Updates = ClosedEnum<typeof Updates>;
+
+/**
+ * User-customizable deployment settings specified at deploy time.
+ *
+ * @remarks
+ *
+ * These settings are provided by the customer via CloudFormation parameters,
+ * Terraform attributes, CLI flags, or Helm values. They customize how the
+ * deployment runs and what capabilities are enabled.
+ *
+ * **Key distinction**: StackSettings is user-customizable, while ManagementConfig
+ * is platform-derived (from the Manager's ServiceAccount).
+ */
+export type StackSettings = {
+  /**
+   * Deployment model: how updates are delivered to the remote environment.
+   */
+  deploymentModel?: DeploymentModel | undefined;
+  domains?: Domains | any | null | undefined;
+  /**
+   * External bindings for pre-existing infrastructure.
+   *
+   * @remarks
+   * Allows using existing resources (MinIO, Redis, shared Container Apps
+   * Environment, etc.) instead of having Alien provision them.
+   * Required for Kubernetes platform, optional for cloud platforms.
+   */
+  externalBindings?: ExternalBindings | null | undefined;
+  /**
+   * How heartbeat health checks are handled.
+   */
+  heartbeats?: Heartbeats | undefined;
+  kubernetes?: PrepareDeploymentStackKubernetes | any | null | undefined;
+  network?:
+    | NetworkByoVpcAws
+    | NetworkByoVpcGcp
+    | NetworkByoVnetAzure
+    | NetworkUseDefault
+    | NetworkCreate
+    | any
+    | null
+    | undefined;
+  /**
+   * How telemetry (logs, metrics, traces) is handled.
+   */
+  telemetry?: Telemetry | undefined;
+  /**
+   * How updates are delivered to the deployment.
+   */
+  updates?: Updates | undefined;
+};
+
+export type PrepareDeploymentStackRequestBody = {
+  platform: PrepareDeploymentStackPlatform;
+  setupMethod: models.DeploymentSetupMethod;
+  region?: string | undefined;
+  /**
+   * User-customizable deployment settings specified at deploy time.
+   *
+   * @remarks
+   *
+   * These settings are provided by the customer via CloudFormation parameters,
+   * Terraform attributes, CLI flags, or Helm values. They customize how the
+   * deployment runs and what capabilities are enabled.
+   *
+   * **Key distinction**: StackSettings is user-customizable, while ManagementConfig
+   * is platform-derived (from the Manager's ServiceAccount).
+   */
+  stackSettings: StackSettings;
+};
+
+export type PrepareDeploymentStackRequest = {
+  /**
+   * Workspace name. Defaults to your last workspace (user auth) or your API key's workspace (token auth). When using an API key, if provided, must match the key's workspace.
+   */
+  workspace?: string | undefined;
+  requestBody?: PrepareDeploymentStackRequestBody | undefined;
+};
+
+/** @internal */
+export const PrepareDeploymentStackPlatform$outboundSchema: z.ZodEnum<
+  typeof PrepareDeploymentStackPlatform
+> = z.enum(PrepareDeploymentStackPlatform);
+
+/** @internal */
+export const DeploymentModel$outboundSchema: z.ZodEnum<typeof DeploymentModel> =
+  z.enum(DeploymentModel);
+
+/** @internal */
+export type PrepareDeploymentStackAws$Outbound = {
+  certificateArn: string;
+};
+
+/** @internal */
+export const PrepareDeploymentStackAws$outboundSchema: z.ZodType<
+  PrepareDeploymentStackAws$Outbound,
+  PrepareDeploymentStackAws
+> = z.object({
+  certificateArn: z.string(),
+});
+
+export function prepareDeploymentStackAwsToJSON(
+  prepareDeploymentStackAws: PrepareDeploymentStackAws,
+): string {
+  return JSON.stringify(
+    PrepareDeploymentStackAws$outboundSchema.parse(prepareDeploymentStackAws),
+  );
+}
+
+/** @internal */
+export type Aws$Outbound = PrepareDeploymentStackAws$Outbound | any;
+
+/** @internal */
+export const Aws$outboundSchema: z.ZodType<Aws$Outbound, Aws> = z.union([
+  z.lazy(() => PrepareDeploymentStackAws$outboundSchema),
+  z.any(),
+]);
+
+export function awsToJSON(aws: Aws): string {
+  return JSON.stringify(Aws$outboundSchema.parse(aws));
+}
+
+/** @internal */
+export type PrepareDeploymentStackAzure$Outbound = {
+  keyVaultCertificateId: string;
+};
+
+/** @internal */
+export const PrepareDeploymentStackAzure$outboundSchema: z.ZodType<
+  PrepareDeploymentStackAzure$Outbound,
+  PrepareDeploymentStackAzure
+> = z.object({
+  keyVaultCertificateId: z.string(),
+});
+
+export function prepareDeploymentStackAzureToJSON(
+  prepareDeploymentStackAzure: PrepareDeploymentStackAzure,
+): string {
+  return JSON.stringify(
+    PrepareDeploymentStackAzure$outboundSchema.parse(
+      prepareDeploymentStackAzure,
+    ),
+  );
+}
+
+/** @internal */
+export type Azure$Outbound = PrepareDeploymentStackAzure$Outbound | any;
+
+/** @internal */
+export const Azure$outboundSchema: z.ZodType<Azure$Outbound, Azure> = z.union([
+  z.lazy(() => PrepareDeploymentStackAzure$outboundSchema),
+  z.any(),
+]);
+
+export function azureToJSON(azure: Azure): string {
+  return JSON.stringify(Azure$outboundSchema.parse(azure));
+}
+
+/** @internal */
+export type PrepareDeploymentStackGcp$Outbound = {
+  certificateName: string;
+};
+
+/** @internal */
+export const PrepareDeploymentStackGcp$outboundSchema: z.ZodType<
+  PrepareDeploymentStackGcp$Outbound,
+  PrepareDeploymentStackGcp
+> = z.object({
+  certificateName: z.string(),
+});
+
+export function prepareDeploymentStackGcpToJSON(
+  prepareDeploymentStackGcp: PrepareDeploymentStackGcp,
+): string {
+  return JSON.stringify(
+    PrepareDeploymentStackGcp$outboundSchema.parse(prepareDeploymentStackGcp),
+  );
+}
+
+/** @internal */
+export type Gcp$Outbound = PrepareDeploymentStackGcp$Outbound | any;
+
+/** @internal */
+export const Gcp$outboundSchema: z.ZodType<Gcp$Outbound, Gcp> = z.union([
+  z.lazy(() => PrepareDeploymentStackGcp$outboundSchema),
+  z.any(),
+]);
+
+export function gcpToJSON(gcp: Gcp): string {
+  return JSON.stringify(Gcp$outboundSchema.parse(gcp));
+}
+
+/** @internal */
+export type TlsSecretRef$Outbound = {
+  namespace?: string | null | undefined;
+  secretName: string;
+};
+
+/** @internal */
+export const TlsSecretRef$outboundSchema: z.ZodType<
+  TlsSecretRef$Outbound,
+  TlsSecretRef
+> = z.object({
+  namespace: z.nullable(z.string()).optional(),
+  secretName: z.string(),
+});
+
+export function tlsSecretRefToJSON(tlsSecretRef: TlsSecretRef): string {
+  return JSON.stringify(TlsSecretRef$outboundSchema.parse(tlsSecretRef));
+}
+
+/** @internal */
+export type DomainsKubernetes$Outbound = {
+  tlsSecretRef: TlsSecretRef$Outbound;
+};
+
+/** @internal */
+export const DomainsKubernetes$outboundSchema: z.ZodType<
+  DomainsKubernetes$Outbound,
+  DomainsKubernetes
+> = z.object({
+  tlsSecretRef: z.lazy(() => TlsSecretRef$outboundSchema),
+});
+
+export function domainsKubernetesToJSON(
+  domainsKubernetes: DomainsKubernetes,
+): string {
+  return JSON.stringify(
+    DomainsKubernetes$outboundSchema.parse(domainsKubernetes),
+  );
+}
+
+/** @internal */
+export type DomainsKubernetesUnion$Outbound = DomainsKubernetes$Outbound | any;
+
+/** @internal */
+export const DomainsKubernetesUnion$outboundSchema: z.ZodType<
+  DomainsKubernetesUnion$Outbound,
+  DomainsKubernetesUnion
+> = z.union([z.lazy(() => DomainsKubernetes$outboundSchema), z.any()]);
+
+export function domainsKubernetesUnionToJSON(
+  domainsKubernetesUnion: DomainsKubernetesUnion,
+): string {
+  return JSON.stringify(
+    DomainsKubernetesUnion$outboundSchema.parse(domainsKubernetesUnion),
+  );
+}
+
+/** @internal */
+export type DomainsCertificate$Outbound = {
+  aws?: PrepareDeploymentStackAws$Outbound | any | null | undefined;
+  azure?: PrepareDeploymentStackAzure$Outbound | any | null | undefined;
+  gcp?: PrepareDeploymentStackGcp$Outbound | any | null | undefined;
+  kubernetes?: DomainsKubernetes$Outbound | any | null | undefined;
+};
+
+/** @internal */
+export const DomainsCertificate$outboundSchema: z.ZodType<
+  DomainsCertificate$Outbound,
+  DomainsCertificate
+> = z.object({
+  aws: z.nullable(
+    z.union([z.lazy(() => PrepareDeploymentStackAws$outboundSchema), z.any()]),
+  ).optional(),
+  azure: z.nullable(
+    z.union([
+      z.lazy(() => PrepareDeploymentStackAzure$outboundSchema),
+      z.any(),
+    ]),
+  ).optional(),
+  gcp: z.nullable(
+    z.union([z.lazy(() => PrepareDeploymentStackGcp$outboundSchema), z.any()]),
+  ).optional(),
+  kubernetes: z.nullable(
+    z.union([z.lazy(() => DomainsKubernetes$outboundSchema), z.any()]),
+  ).optional(),
+});
+
+export function domainsCertificateToJSON(
+  domainsCertificate: DomainsCertificate,
+): string {
+  return JSON.stringify(
+    DomainsCertificate$outboundSchema.parse(domainsCertificate),
+  );
+}
+
+/** @internal */
+export type CustomDomains$Outbound = {
+  certificate: DomainsCertificate$Outbound;
+  domain: string;
+};
+
+/** @internal */
+export const CustomDomains$outboundSchema: z.ZodType<
+  CustomDomains$Outbound,
+  CustomDomains
+> = z.object({
+  certificate: z.lazy(() => DomainsCertificate$outboundSchema),
+  domain: z.string(),
+});
+
+export function customDomainsToJSON(customDomains: CustomDomains): string {
+  return JSON.stringify(CustomDomains$outboundSchema.parse(customDomains));
+}
+
+/** @internal */
+export type Domains$Outbound = {
+  customDomains?: { [k: string]: CustomDomains$Outbound } | null | undefined;
+};
+
+/** @internal */
+export const Domains$outboundSchema: z.ZodType<Domains$Outbound, Domains> = z
+  .object({
+    customDomains: z.nullable(
+      z.record(z.string(), z.lazy(() => CustomDomains$outboundSchema)),
+    ).optional(),
+  });
+
+export function domainsToJSON(domains: Domains): string {
+  return JSON.stringify(Domains$outboundSchema.parse(domains));
+}
+
+/** @internal */
+export type DomainsUnion$Outbound = Domains$Outbound | any;
+
+/** @internal */
+export const DomainsUnion$outboundSchema: z.ZodType<
+  DomainsUnion$Outbound,
+  DomainsUnion
+> = z.union([z.lazy(() => Domains$outboundSchema), z.any()]);
+
+export function domainsUnionToJSON(domainsUnion: DomainsUnion): string {
+  return JSON.stringify(DomainsUnion$outboundSchema.parse(domainsUnion));
+}
+
+/** @internal */
+export type ExternalBindings$Outbound = {};
+
+/** @internal */
+export const ExternalBindings$outboundSchema: z.ZodType<
+  ExternalBindings$Outbound,
+  ExternalBindings
+> = z.object({});
+
+export function externalBindingsToJSON(
+  externalBindings: ExternalBindings,
+): string {
+  return JSON.stringify(
+    ExternalBindings$outboundSchema.parse(externalBindings),
+  );
+}
+
+/** @internal */
+export const Heartbeats$outboundSchema: z.ZodEnum<typeof Heartbeats> = z.enum(
+  Heartbeats,
+);
+
+/** @internal */
+export type Cloud$Outbound = {
+  accountId?: string | null | undefined;
+  clusterId?: string | null | undefined;
+  clusterName?: string | null | undefined;
+  projectId?: string | null | undefined;
+  region?: string | null | undefined;
+  resourceGroup?: string | null | undefined;
+  subscriptionId?: string | null | undefined;
+};
+
+/** @internal */
+export const Cloud$outboundSchema: z.ZodType<Cloud$Outbound, Cloud> = z.object({
+  accountId: z.nullable(z.string()).optional(),
+  clusterId: z.nullable(z.string()).optional(),
+  clusterName: z.nullable(z.string()).optional(),
+  projectId: z.nullable(z.string()).optional(),
+  region: z.nullable(z.string()).optional(),
+  resourceGroup: z.nullable(z.string()).optional(),
+  subscriptionId: z.nullable(z.string()).optional(),
+});
+
+export function cloudToJSON(cloud: Cloud): string {
+  return JSON.stringify(Cloud$outboundSchema.parse(cloud));
+}
+
+/** @internal */
+export type CloudUnion$Outbound = Cloud$Outbound | any;
+
+/** @internal */
+export const CloudUnion$outboundSchema: z.ZodType<
+  CloudUnion$Outbound,
+  CloudUnion
+> = z.union([z.lazy(() => Cloud$outboundSchema), z.any()]);
+
+export function cloudUnionToJSON(cloudUnion: CloudUnion): string {
+  return JSON.stringify(CloudUnion$outboundSchema.parse(cloudUnion));
+}
+
+/** @internal */
+export const Ownership$outboundSchema: z.ZodEnum<typeof Ownership> = z.enum(
+  Ownership,
+);
+
+/** @internal */
+export type Cluster$Outbound = {
+  cloud?: Cloud$Outbound | any | null | undefined;
+  namespace?: string | null | undefined;
+  ownership: string;
+};
+
+/** @internal */
+export const Cluster$outboundSchema: z.ZodType<Cluster$Outbound, Cluster> = z
+  .object({
+    cloud: z.nullable(z.union([z.lazy(() => Cloud$outboundSchema), z.any()]))
+      .optional(),
+    namespace: z.nullable(z.string()).optional(),
+    ownership: Ownership$outboundSchema,
+  });
+
+export function clusterToJSON(cluster: Cluster): string {
+  return JSON.stringify(Cluster$outboundSchema.parse(cluster));
+}
+
+/** @internal */
+export type ClusterUnion$Outbound = Cluster$Outbound | any;
+
+/** @internal */
+export const ClusterUnion$outboundSchema: z.ZodType<
+  ClusterUnion$Outbound,
+  ClusterUnion
+> = z.union([z.lazy(() => Cluster$outboundSchema), z.any()]);
+
+export function clusterUnionToJSON(clusterUnion: ClusterUnion): string {
+  return JSON.stringify(ClusterUnion$outboundSchema.parse(clusterUnion));
+}
+
+/** @internal */
+export type CertificateNone2$Outbound = {
+  mode: "none";
+};
+
+/** @internal */
+export const CertificateNone2$outboundSchema: z.ZodType<
+  CertificateNone2$Outbound,
+  CertificateNone2
+> = z.object({
+  mode: z.literal("none"),
+});
+
+export function certificateNone2ToJSON(
+  certificateNone2: CertificateNone2,
+): string {
+  return JSON.stringify(
+    CertificateNone2$outboundSchema.parse(certificateNone2),
+  );
+}
+
+/** @internal */
+export type CertificateManagedTLSSecret2$Outbound = {
+  mode: "managedTlsSecret";
+  secretNameTemplate: string;
+};
+
+/** @internal */
+export const CertificateManagedTLSSecret2$outboundSchema: z.ZodType<
+  CertificateManagedTLSSecret2$Outbound,
+  CertificateManagedTLSSecret2
+> = z.object({
+  mode: z.literal("managedTlsSecret"),
+  secretNameTemplate: z.string(),
+});
+
+export function certificateManagedTLSSecret2ToJSON(
+  certificateManagedTLSSecret2: CertificateManagedTLSSecret2,
+): string {
+  return JSON.stringify(
+    CertificateManagedTLSSecret2$outboundSchema.parse(
+      certificateManagedTLSSecret2,
+    ),
+  );
+}
+
+/** @internal */
+export type CertificateAwsAcmArn2$Outbound = {
+  certificateArn: string;
+  mode: "awsAcmArn";
+};
+
+/** @internal */
+export const CertificateAwsAcmArn2$outboundSchema: z.ZodType<
+  CertificateAwsAcmArn2$Outbound,
+  CertificateAwsAcmArn2
+> = z.object({
+  certificateArn: z.string(),
+  mode: z.literal("awsAcmArn"),
+});
+
+export function certificateAwsAcmArn2ToJSON(
+  certificateAwsAcmArn2: CertificateAwsAcmArn2,
+): string {
+  return JSON.stringify(
+    CertificateAwsAcmArn2$outboundSchema.parse(certificateAwsAcmArn2),
+  );
+}
+
+/** @internal */
+export type CertificateManagedAcmImport2$Outbound = {
+  mode: "managedAcmImport";
+  region?: string | null | undefined;
+  tags?: { [k: string]: string } | undefined;
+};
+
+/** @internal */
+export const CertificateManagedAcmImport2$outboundSchema: z.ZodType<
+  CertificateManagedAcmImport2$Outbound,
+  CertificateManagedAcmImport2
+> = z.object({
+  mode: z.literal("managedAcmImport"),
+  region: z.nullable(z.string()).optional(),
+  tags: z.record(z.string(), z.string()).optional(),
+});
+
+export function certificateManagedAcmImport2ToJSON(
+  certificateManagedAcmImport2: CertificateManagedAcmImport2,
+): string {
+  return JSON.stringify(
+    CertificateManagedAcmImport2$outboundSchema.parse(
+      certificateManagedAcmImport2,
+    ),
+  );
+}
+
+/** @internal */
+export type CertificateTLSSecretRef2$Outbound = {
+  namespace?: string | null | undefined;
+  secretName: string;
+  mode: "tlsSecretRef";
+};
+
+/** @internal */
+export const CertificateTLSSecretRef2$outboundSchema: z.ZodType<
+  CertificateTLSSecretRef2$Outbound,
+  CertificateTLSSecretRef2
+> = z.object({
+  namespace: z.nullable(z.string()).optional(),
+  secretName: z.string(),
+  mode: z.literal("tlsSecretRef"),
+});
+
+export function certificateTLSSecretRef2ToJSON(
+  certificateTLSSecretRef2: CertificateTLSSecretRef2,
+): string {
+  return JSON.stringify(
+    CertificateTLSSecretRef2$outboundSchema.parse(certificateTLSSecretRef2),
+  );
+}
+
+/** @internal */
+export type CertificateUnion2$Outbound =
+  | CertificateTLSSecretRef2$Outbound
+  | CertificateManagedAcmImport2$Outbound
+  | CertificateAwsAcmArn2$Outbound
+  | CertificateManagedTLSSecret2$Outbound
+  | CertificateNone2$Outbound;
+
+/** @internal */
+export const CertificateUnion2$outboundSchema: z.ZodType<
+  CertificateUnion2$Outbound,
+  CertificateUnion2
+> = z.union([
+  z.lazy(() => CertificateTLSSecretRef2$outboundSchema),
+  z.lazy(() => CertificateManagedAcmImport2$outboundSchema),
+  z.lazy(() => CertificateAwsAcmArn2$outboundSchema),
+  z.lazy(() => CertificateManagedTLSSecret2$outboundSchema),
+  z.lazy(() => CertificateNone2$outboundSchema),
+]);
+
+export function certificateUnion2ToJSON(
+  certificateUnion2: CertificateUnion2,
+): string {
+  return JSON.stringify(
+    CertificateUnion2$outboundSchema.parse(certificateUnion2),
+  );
+}
+
+/** @internal */
+export const ModeCustom$outboundSchema: z.ZodEnum<typeof ModeCustom> = z.enum(
+  ModeCustom,
+);
+
+/** @internal */
+export const ProviderAzureApplicationGatewayForContainersEnum4$outboundSchema:
+  z.ZodEnum<typeof ProviderAzureApplicationGatewayForContainersEnum4> = z.enum(
+    ProviderAzureApplicationGatewayForContainersEnum4,
+  );
+
+/** @internal */
+export type ProviderAzureApplicationGatewayForContainers4$Outbound = {
+  albName?: string | null | undefined;
+  albNamespace?: string | null | undefined;
+  frontend: string;
+  provider: string;
+};
+
+/** @internal */
+export const ProviderAzureApplicationGatewayForContainers4$outboundSchema:
+  z.ZodType<
+    ProviderAzureApplicationGatewayForContainers4$Outbound,
+    ProviderAzureApplicationGatewayForContainers4
+  > = z.object({
+    albName: z.nullable(z.string()).optional(),
+    albNamespace: z.nullable(z.string()).optional(),
+    frontend: z.string(),
+    provider: ProviderAzureApplicationGatewayForContainersEnum4$outboundSchema,
+  });
+
+export function providerAzureApplicationGatewayForContainers4ToJSON(
+  providerAzureApplicationGatewayForContainers4:
+    ProviderAzureApplicationGatewayForContainers4,
+): string {
+  return JSON.stringify(
+    ProviderAzureApplicationGatewayForContainers4$outboundSchema.parse(
+      providerAzureApplicationGatewayForContainers4,
+    ),
+  );
+}
+
+/** @internal */
+export const ProviderGkeGatewayEnum4$outboundSchema: z.ZodEnum<
+  typeof ProviderGkeGatewayEnum4
+> = z.enum(ProviderGkeGatewayEnum4);
+
+/** @internal */
+export type ProviderGkeGateway4$Outbound = {
+  provider: string;
+  staticAddressName?: string | null | undefined;
+};
+
+/** @internal */
+export const ProviderGkeGateway4$outboundSchema: z.ZodType<
+  ProviderGkeGateway4$Outbound,
+  ProviderGkeGateway4
+> = z.object({
+  provider: ProviderGkeGatewayEnum4$outboundSchema,
+  staticAddressName: z.nullable(z.string()).optional(),
+});
+
+export function providerGkeGateway4ToJSON(
+  providerGkeGateway4: ProviderGkeGateway4,
+): string {
+  return JSON.stringify(
+    ProviderGkeGateway4$outboundSchema.parse(providerGkeGateway4),
+  );
+}
+
+/** @internal */
+export const ProviderAwsAlbEnum4$outboundSchema: z.ZodEnum<
+  typeof ProviderAwsAlbEnum4
+> = z.enum(ProviderAwsAlbEnum4);
+
+/** @internal */
+export type ProviderAwsAlb4$Outbound = {
+  ipAddressType?: string | null | undefined;
+  provider: string;
+  scheme: string;
+  subnetIds?: Array<string> | undefined;
+  targetType: string;
+};
+
+/** @internal */
+export const ProviderAwsAlb4$outboundSchema: z.ZodType<
+  ProviderAwsAlb4$Outbound,
+  ProviderAwsAlb4
+> = z.object({
+  ipAddressType: z.nullable(z.string()).optional(),
+  provider: ProviderAwsAlbEnum4$outboundSchema,
+  scheme: z.string(),
+  subnetIds: z.array(z.string()).optional(),
+  targetType: z.string(),
+});
+
+export function providerAwsAlb4ToJSON(
+  providerAwsAlb4: ProviderAwsAlb4,
+): string {
+  return JSON.stringify(ProviderAwsAlb4$outboundSchema.parse(providerAwsAlb4));
+}
+
+/** @internal */
+export type ProviderUnion4$Outbound =
+  | ProviderAwsAlb4$Outbound
+  | ProviderAzureApplicationGatewayForContainers4$Outbound
+  | ProviderGkeGateway4$Outbound
+  | any;
+
+/** @internal */
+export const ProviderUnion4$outboundSchema: z.ZodType<
+  ProviderUnion4$Outbound,
+  ProviderUnion4
+> = z.union([
+  z.lazy(() => ProviderAwsAlb4$outboundSchema),
+  z.lazy(() => ProviderAzureApplicationGatewayForContainers4$outboundSchema),
+  z.lazy(() => ProviderGkeGateway4$outboundSchema),
+  z.any(),
+]);
+
+export function providerUnion4ToJSON(providerUnion4: ProviderUnion4): string {
+  return JSON.stringify(ProviderUnion4$outboundSchema.parse(providerUnion4));
+}
+
+/** @internal */
+export type RouteGateway2$Outbound = {
+  annotations?: { [k: string]: string } | undefined;
+  controller?: string | null | undefined;
+  gatewayClassName: string;
+  labels?: { [k: string]: string } | undefined;
+  listenerPort: number;
+  provider?:
+    | ProviderAwsAlb4$Outbound
+    | ProviderAzureApplicationGatewayForContainers4$Outbound
+    | ProviderGkeGateway4$Outbound
+    | any
+    | null
+    | undefined;
+  routeApi: "gateway";
+};
+
+/** @internal */
+export const RouteGateway2$outboundSchema: z.ZodType<
+  RouteGateway2$Outbound,
+  RouteGateway2
+> = z.object({
+  annotations: z.record(z.string(), z.string()).optional(),
+  controller: z.nullable(z.string()).optional(),
+  gatewayClassName: z.string(),
+  labels: z.record(z.string(), z.string()).optional(),
+  listenerPort: z.int(),
+  provider: z.nullable(
+    z.union([
+      z.lazy(() => ProviderAwsAlb4$outboundSchema),
+      z.lazy(() =>
+        ProviderAzureApplicationGatewayForContainers4$outboundSchema
+      ),
+      z.lazy(() => ProviderGkeGateway4$outboundSchema),
+      z.any(),
+    ]),
+  ).optional(),
+  routeApi: z.literal("gateway"),
+});
+
+export function routeGateway2ToJSON(routeGateway2: RouteGateway2): string {
+  return JSON.stringify(RouteGateway2$outboundSchema.parse(routeGateway2));
+}
+
+/** @internal */
+export const ProviderAzureApplicationGatewayForContainersEnum3$outboundSchema:
+  z.ZodEnum<typeof ProviderAzureApplicationGatewayForContainersEnum3> = z.enum(
+    ProviderAzureApplicationGatewayForContainersEnum3,
+  );
+
+/** @internal */
+export type ProviderAzureApplicationGatewayForContainers3$Outbound = {
+  albName?: string | null | undefined;
+  albNamespace?: string | null | undefined;
+  frontend: string;
+  provider: string;
+};
+
+/** @internal */
+export const ProviderAzureApplicationGatewayForContainers3$outboundSchema:
+  z.ZodType<
+    ProviderAzureApplicationGatewayForContainers3$Outbound,
+    ProviderAzureApplicationGatewayForContainers3
+  > = z.object({
+    albName: z.nullable(z.string()).optional(),
+    albNamespace: z.nullable(z.string()).optional(),
+    frontend: z.string(),
+    provider: ProviderAzureApplicationGatewayForContainersEnum3$outboundSchema,
+  });
+
+export function providerAzureApplicationGatewayForContainers3ToJSON(
+  providerAzureApplicationGatewayForContainers3:
+    ProviderAzureApplicationGatewayForContainers3,
+): string {
+  return JSON.stringify(
+    ProviderAzureApplicationGatewayForContainers3$outboundSchema.parse(
+      providerAzureApplicationGatewayForContainers3,
+    ),
+  );
+}
+
+/** @internal */
+export const ProviderGkeGatewayEnum3$outboundSchema: z.ZodEnum<
+  typeof ProviderGkeGatewayEnum3
+> = z.enum(ProviderGkeGatewayEnum3);
+
+/** @internal */
+export type ProviderGkeGateway3$Outbound = {
+  provider: string;
+  staticAddressName?: string | null | undefined;
+};
+
+/** @internal */
+export const ProviderGkeGateway3$outboundSchema: z.ZodType<
+  ProviderGkeGateway3$Outbound,
+  ProviderGkeGateway3
+> = z.object({
+  provider: ProviderGkeGatewayEnum3$outboundSchema,
+  staticAddressName: z.nullable(z.string()).optional(),
+});
+
+export function providerGkeGateway3ToJSON(
+  providerGkeGateway3: ProviderGkeGateway3,
+): string {
+  return JSON.stringify(
+    ProviderGkeGateway3$outboundSchema.parse(providerGkeGateway3),
+  );
+}
+
+/** @internal */
+export const ProviderAwsAlbEnum3$outboundSchema: z.ZodEnum<
+  typeof ProviderAwsAlbEnum3
+> = z.enum(ProviderAwsAlbEnum3);
+
+/** @internal */
+export type ProviderAwsAlb3$Outbound = {
+  ipAddressType?: string | null | undefined;
+  provider: string;
+  scheme: string;
+  subnetIds?: Array<string> | undefined;
+  targetType: string;
+};
+
+/** @internal */
+export const ProviderAwsAlb3$outboundSchema: z.ZodType<
+  ProviderAwsAlb3$Outbound,
+  ProviderAwsAlb3
+> = z.object({
+  ipAddressType: z.nullable(z.string()).optional(),
+  provider: ProviderAwsAlbEnum3$outboundSchema,
+  scheme: z.string(),
+  subnetIds: z.array(z.string()).optional(),
+  targetType: z.string(),
+});
+
+export function providerAwsAlb3ToJSON(
+  providerAwsAlb3: ProviderAwsAlb3,
+): string {
+  return JSON.stringify(ProviderAwsAlb3$outboundSchema.parse(providerAwsAlb3));
+}
+
+/** @internal */
+export type ProviderUnion3$Outbound =
+  | ProviderAwsAlb3$Outbound
+  | ProviderAzureApplicationGatewayForContainers3$Outbound
+  | ProviderGkeGateway3$Outbound
+  | any;
+
+/** @internal */
+export const ProviderUnion3$outboundSchema: z.ZodType<
+  ProviderUnion3$Outbound,
+  ProviderUnion3
+> = z.union([
+  z.lazy(() => ProviderAwsAlb3$outboundSchema),
+  z.lazy(() => ProviderAzureApplicationGatewayForContainers3$outboundSchema),
+  z.lazy(() => ProviderGkeGateway3$outboundSchema),
+  z.any(),
+]);
+
+export function providerUnion3ToJSON(providerUnion3: ProviderUnion3): string {
+  return JSON.stringify(ProviderUnion3$outboundSchema.parse(providerUnion3));
+}
+
+/** @internal */
+export type RouteIngress2$Outbound = {
+  annotations?: { [k: string]: string } | undefined;
+  controller?: string | null | undefined;
+  ingressClassName: string;
+  labels?: { [k: string]: string } | undefined;
+  provider?:
+    | ProviderAwsAlb3$Outbound
+    | ProviderAzureApplicationGatewayForContainers3$Outbound
+    | ProviderGkeGateway3$Outbound
+    | any
+    | null
+    | undefined;
+  routeApi: "ingress";
+};
+
+/** @internal */
+export const RouteIngress2$outboundSchema: z.ZodType<
+  RouteIngress2$Outbound,
+  RouteIngress2
+> = z.object({
+  annotations: z.record(z.string(), z.string()).optional(),
+  controller: z.nullable(z.string()).optional(),
+  ingressClassName: z.string(),
+  labels: z.record(z.string(), z.string()).optional(),
+  provider: z.nullable(
+    z.union([
+      z.lazy(() => ProviderAwsAlb3$outboundSchema),
+      z.lazy(() =>
+        ProviderAzureApplicationGatewayForContainers3$outboundSchema
+      ),
+      z.lazy(() => ProviderGkeGateway3$outboundSchema),
+      z.any(),
+    ]),
+  ).optional(),
+  routeApi: z.literal("ingress"),
+});
+
+export function routeIngress2ToJSON(routeIngress2: RouteIngress2): string {
+  return JSON.stringify(RouteIngress2$outboundSchema.parse(routeIngress2));
+}
+
+/** @internal */
+export type RouteUnion2$Outbound =
+  | RouteIngress2$Outbound
+  | RouteGateway2$Outbound;
+
+/** @internal */
+export const RouteUnion2$outboundSchema: z.ZodType<
+  RouteUnion2$Outbound,
+  RouteUnion2
+> = z.union([
+  z.lazy(() => RouteIngress2$outboundSchema),
+  z.lazy(() => RouteGateway2$outboundSchema),
+]);
+
+export function routeUnion2ToJSON(routeUnion2: RouteUnion2): string {
+  return JSON.stringify(RouteUnion2$outboundSchema.parse(routeUnion2));
+}
+
+/** @internal */
+export type ExposureCustom$Outbound = {
+  certificate:
+    | CertificateTLSSecretRef2$Outbound
+    | CertificateManagedAcmImport2$Outbound
+    | CertificateAwsAcmArn2$Outbound
+    | CertificateManagedTLSSecret2$Outbound
+    | CertificateNone2$Outbound;
+  domain: string;
+  mode: string;
+  route: RouteIngress2$Outbound | RouteGateway2$Outbound;
+};
+
+/** @internal */
+export const ExposureCustom$outboundSchema: z.ZodType<
+  ExposureCustom$Outbound,
+  ExposureCustom
+> = z.object({
+  certificate: z.union([
+    z.lazy(() => CertificateTLSSecretRef2$outboundSchema),
+    z.lazy(() => CertificateManagedAcmImport2$outboundSchema),
+    z.lazy(() => CertificateAwsAcmArn2$outboundSchema),
+    z.lazy(() => CertificateManagedTLSSecret2$outboundSchema),
+    z.lazy(() => CertificateNone2$outboundSchema),
+  ]),
+  domain: z.string(),
+  mode: ModeCustom$outboundSchema,
+  route: z.union([
+    z.lazy(() => RouteIngress2$outboundSchema),
+    z.lazy(() => RouteGateway2$outboundSchema),
+  ]),
+});
+
+export function exposureCustomToJSON(exposureCustom: ExposureCustom): string {
+  return JSON.stringify(ExposureCustom$outboundSchema.parse(exposureCustom));
+}
+
+/** @internal */
+export type CertificateNone1$Outbound = {
+  mode: "none";
+};
+
+/** @internal */
+export const CertificateNone1$outboundSchema: z.ZodType<
+  CertificateNone1$Outbound,
+  CertificateNone1
+> = z.object({
+  mode: z.literal("none"),
+});
+
+export function certificateNone1ToJSON(
+  certificateNone1: CertificateNone1,
+): string {
+  return JSON.stringify(
+    CertificateNone1$outboundSchema.parse(certificateNone1),
+  );
+}
+
+/** @internal */
+export type CertificateManagedTLSSecret1$Outbound = {
+  mode: "managedTlsSecret";
+  secretNameTemplate: string;
+};
+
+/** @internal */
+export const CertificateManagedTLSSecret1$outboundSchema: z.ZodType<
+  CertificateManagedTLSSecret1$Outbound,
+  CertificateManagedTLSSecret1
+> = z.object({
+  mode: z.literal("managedTlsSecret"),
+  secretNameTemplate: z.string(),
+});
+
+export function certificateManagedTLSSecret1ToJSON(
+  certificateManagedTLSSecret1: CertificateManagedTLSSecret1,
+): string {
+  return JSON.stringify(
+    CertificateManagedTLSSecret1$outboundSchema.parse(
+      certificateManagedTLSSecret1,
+    ),
+  );
+}
+
+/** @internal */
+export type CertificateAwsAcmArn1$Outbound = {
+  certificateArn: string;
+  mode: "awsAcmArn";
+};
+
+/** @internal */
+export const CertificateAwsAcmArn1$outboundSchema: z.ZodType<
+  CertificateAwsAcmArn1$Outbound,
+  CertificateAwsAcmArn1
+> = z.object({
+  certificateArn: z.string(),
+  mode: z.literal("awsAcmArn"),
+});
+
+export function certificateAwsAcmArn1ToJSON(
+  certificateAwsAcmArn1: CertificateAwsAcmArn1,
+): string {
+  return JSON.stringify(
+    CertificateAwsAcmArn1$outboundSchema.parse(certificateAwsAcmArn1),
+  );
+}
+
+/** @internal */
+export type CertificateManagedAcmImport1$Outbound = {
+  mode: "managedAcmImport";
+  region?: string | null | undefined;
+  tags?: { [k: string]: string } | undefined;
+};
+
+/** @internal */
+export const CertificateManagedAcmImport1$outboundSchema: z.ZodType<
+  CertificateManagedAcmImport1$Outbound,
+  CertificateManagedAcmImport1
+> = z.object({
+  mode: z.literal("managedAcmImport"),
+  region: z.nullable(z.string()).optional(),
+  tags: z.record(z.string(), z.string()).optional(),
+});
+
+export function certificateManagedAcmImport1ToJSON(
+  certificateManagedAcmImport1: CertificateManagedAcmImport1,
+): string {
+  return JSON.stringify(
+    CertificateManagedAcmImport1$outboundSchema.parse(
+      certificateManagedAcmImport1,
+    ),
+  );
+}
+
+/** @internal */
+export type CertificateTLSSecretRef1$Outbound = {
+  namespace?: string | null | undefined;
+  secretName: string;
+  mode: "tlsSecretRef";
+};
+
+/** @internal */
+export const CertificateTLSSecretRef1$outboundSchema: z.ZodType<
+  CertificateTLSSecretRef1$Outbound,
+  CertificateTLSSecretRef1
+> = z.object({
+  namespace: z.nullable(z.string()).optional(),
+  secretName: z.string(),
+  mode: z.literal("tlsSecretRef"),
+});
+
+export function certificateTLSSecretRef1ToJSON(
+  certificateTLSSecretRef1: CertificateTLSSecretRef1,
+): string {
+  return JSON.stringify(
+    CertificateTLSSecretRef1$outboundSchema.parse(certificateTLSSecretRef1),
+  );
+}
+
+/** @internal */
+export type CertificateUnion1$Outbound =
+  | CertificateTLSSecretRef1$Outbound
+  | CertificateManagedAcmImport1$Outbound
+  | CertificateAwsAcmArn1$Outbound
+  | CertificateManagedTLSSecret1$Outbound
+  | CertificateNone1$Outbound;
+
+/** @internal */
+export const CertificateUnion1$outboundSchema: z.ZodType<
+  CertificateUnion1$Outbound,
+  CertificateUnion1
+> = z.union([
+  z.lazy(() => CertificateTLSSecretRef1$outboundSchema),
+  z.lazy(() => CertificateManagedAcmImport1$outboundSchema),
+  z.lazy(() => CertificateAwsAcmArn1$outboundSchema),
+  z.lazy(() => CertificateManagedTLSSecret1$outboundSchema),
+  z.lazy(() => CertificateNone1$outboundSchema),
+]);
+
+export function certificateUnion1ToJSON(
+  certificateUnion1: CertificateUnion1,
+): string {
+  return JSON.stringify(
+    CertificateUnion1$outboundSchema.parse(certificateUnion1),
+  );
+}
+
+/** @internal */
+export const ModeGenerated$outboundSchema: z.ZodEnum<typeof ModeGenerated> = z
+  .enum(ModeGenerated);
+
+/** @internal */
+export const ProviderAzureApplicationGatewayForContainersEnum2$outboundSchema:
+  z.ZodEnum<typeof ProviderAzureApplicationGatewayForContainersEnum2> = z.enum(
+    ProviderAzureApplicationGatewayForContainersEnum2,
+  );
+
+/** @internal */
+export type ProviderAzureApplicationGatewayForContainers2$Outbound = {
+  albName?: string | null | undefined;
+  albNamespace?: string | null | undefined;
+  frontend: string;
+  provider: string;
+};
+
+/** @internal */
+export const ProviderAzureApplicationGatewayForContainers2$outboundSchema:
+  z.ZodType<
+    ProviderAzureApplicationGatewayForContainers2$Outbound,
+    ProviderAzureApplicationGatewayForContainers2
+  > = z.object({
+    albName: z.nullable(z.string()).optional(),
+    albNamespace: z.nullable(z.string()).optional(),
+    frontend: z.string(),
+    provider: ProviderAzureApplicationGatewayForContainersEnum2$outboundSchema,
+  });
+
+export function providerAzureApplicationGatewayForContainers2ToJSON(
+  providerAzureApplicationGatewayForContainers2:
+    ProviderAzureApplicationGatewayForContainers2,
+): string {
+  return JSON.stringify(
+    ProviderAzureApplicationGatewayForContainers2$outboundSchema.parse(
+      providerAzureApplicationGatewayForContainers2,
+    ),
+  );
+}
+
+/** @internal */
+export const ProviderGkeGatewayEnum2$outboundSchema: z.ZodEnum<
+  typeof ProviderGkeGatewayEnum2
+> = z.enum(ProviderGkeGatewayEnum2);
+
+/** @internal */
+export type ProviderGkeGateway2$Outbound = {
+  provider: string;
+  staticAddressName?: string | null | undefined;
+};
+
+/** @internal */
+export const ProviderGkeGateway2$outboundSchema: z.ZodType<
+  ProviderGkeGateway2$Outbound,
+  ProviderGkeGateway2
+> = z.object({
+  provider: ProviderGkeGatewayEnum2$outboundSchema,
+  staticAddressName: z.nullable(z.string()).optional(),
+});
+
+export function providerGkeGateway2ToJSON(
+  providerGkeGateway2: ProviderGkeGateway2,
+): string {
+  return JSON.stringify(
+    ProviderGkeGateway2$outboundSchema.parse(providerGkeGateway2),
+  );
+}
+
+/** @internal */
+export const ProviderAwsAlbEnum2$outboundSchema: z.ZodEnum<
+  typeof ProviderAwsAlbEnum2
+> = z.enum(ProviderAwsAlbEnum2);
+
+/** @internal */
+export type ProviderAwsAlb2$Outbound = {
+  ipAddressType?: string | null | undefined;
+  provider: string;
+  scheme: string;
+  subnetIds?: Array<string> | undefined;
+  targetType: string;
+};
+
+/** @internal */
+export const ProviderAwsAlb2$outboundSchema: z.ZodType<
+  ProviderAwsAlb2$Outbound,
+  ProviderAwsAlb2
+> = z.object({
+  ipAddressType: z.nullable(z.string()).optional(),
+  provider: ProviderAwsAlbEnum2$outboundSchema,
+  scheme: z.string(),
+  subnetIds: z.array(z.string()).optional(),
+  targetType: z.string(),
+});
+
+export function providerAwsAlb2ToJSON(
+  providerAwsAlb2: ProviderAwsAlb2,
+): string {
+  return JSON.stringify(ProviderAwsAlb2$outboundSchema.parse(providerAwsAlb2));
+}
+
+/** @internal */
+export type ProviderUnion2$Outbound =
+  | ProviderAwsAlb2$Outbound
+  | ProviderAzureApplicationGatewayForContainers2$Outbound
+  | ProviderGkeGateway2$Outbound
+  | any;
+
+/** @internal */
+export const ProviderUnion2$outboundSchema: z.ZodType<
+  ProviderUnion2$Outbound,
+  ProviderUnion2
+> = z.union([
+  z.lazy(() => ProviderAwsAlb2$outboundSchema),
+  z.lazy(() => ProviderAzureApplicationGatewayForContainers2$outboundSchema),
+  z.lazy(() => ProviderGkeGateway2$outboundSchema),
+  z.any(),
+]);
+
+export function providerUnion2ToJSON(providerUnion2: ProviderUnion2): string {
+  return JSON.stringify(ProviderUnion2$outboundSchema.parse(providerUnion2));
+}
+
+/** @internal */
+export type RouteGateway1$Outbound = {
+  annotations?: { [k: string]: string } | undefined;
+  controller?: string | null | undefined;
+  gatewayClassName: string;
+  labels?: { [k: string]: string } | undefined;
+  listenerPort: number;
+  provider?:
+    | ProviderAwsAlb2$Outbound
+    | ProviderAzureApplicationGatewayForContainers2$Outbound
+    | ProviderGkeGateway2$Outbound
+    | any
+    | null
+    | undefined;
+  routeApi: "gateway";
+};
+
+/** @internal */
+export const RouteGateway1$outboundSchema: z.ZodType<
+  RouteGateway1$Outbound,
+  RouteGateway1
+> = z.object({
+  annotations: z.record(z.string(), z.string()).optional(),
+  controller: z.nullable(z.string()).optional(),
+  gatewayClassName: z.string(),
+  labels: z.record(z.string(), z.string()).optional(),
+  listenerPort: z.int(),
+  provider: z.nullable(
+    z.union([
+      z.lazy(() => ProviderAwsAlb2$outboundSchema),
+      z.lazy(() =>
+        ProviderAzureApplicationGatewayForContainers2$outboundSchema
+      ),
+      z.lazy(() => ProviderGkeGateway2$outboundSchema),
+      z.any(),
+    ]),
+  ).optional(),
+  routeApi: z.literal("gateway"),
+});
+
+export function routeGateway1ToJSON(routeGateway1: RouteGateway1): string {
+  return JSON.stringify(RouteGateway1$outboundSchema.parse(routeGateway1));
+}
+
+/** @internal */
+export const ProviderAzureApplicationGatewayForContainersEnum1$outboundSchema:
+  z.ZodEnum<typeof ProviderAzureApplicationGatewayForContainersEnum1> = z.enum(
+    ProviderAzureApplicationGatewayForContainersEnum1,
+  );
+
+/** @internal */
+export type ProviderAzureApplicationGatewayForContainers1$Outbound = {
+  albName?: string | null | undefined;
+  albNamespace?: string | null | undefined;
+  frontend: string;
+  provider: string;
+};
+
+/** @internal */
+export const ProviderAzureApplicationGatewayForContainers1$outboundSchema:
+  z.ZodType<
+    ProviderAzureApplicationGatewayForContainers1$Outbound,
+    ProviderAzureApplicationGatewayForContainers1
+  > = z.object({
+    albName: z.nullable(z.string()).optional(),
+    albNamespace: z.nullable(z.string()).optional(),
+    frontend: z.string(),
+    provider: ProviderAzureApplicationGatewayForContainersEnum1$outboundSchema,
+  });
+
+export function providerAzureApplicationGatewayForContainers1ToJSON(
+  providerAzureApplicationGatewayForContainers1:
+    ProviderAzureApplicationGatewayForContainers1,
+): string {
+  return JSON.stringify(
+    ProviderAzureApplicationGatewayForContainers1$outboundSchema.parse(
+      providerAzureApplicationGatewayForContainers1,
+    ),
+  );
+}
+
+/** @internal */
+export const ProviderGkeGatewayEnum1$outboundSchema: z.ZodEnum<
+  typeof ProviderGkeGatewayEnum1
+> = z.enum(ProviderGkeGatewayEnum1);
+
+/** @internal */
+export type ProviderGkeGateway1$Outbound = {
+  provider: string;
+  staticAddressName?: string | null | undefined;
+};
+
+/** @internal */
+export const ProviderGkeGateway1$outboundSchema: z.ZodType<
+  ProviderGkeGateway1$Outbound,
+  ProviderGkeGateway1
+> = z.object({
+  provider: ProviderGkeGatewayEnum1$outboundSchema,
+  staticAddressName: z.nullable(z.string()).optional(),
+});
+
+export function providerGkeGateway1ToJSON(
+  providerGkeGateway1: ProviderGkeGateway1,
+): string {
+  return JSON.stringify(
+    ProviderGkeGateway1$outboundSchema.parse(providerGkeGateway1),
+  );
+}
+
+/** @internal */
+export const ProviderAwsAlbEnum1$outboundSchema: z.ZodEnum<
+  typeof ProviderAwsAlbEnum1
+> = z.enum(ProviderAwsAlbEnum1);
+
+/** @internal */
+export type ProviderAwsAlb1$Outbound = {
+  ipAddressType?: string | null | undefined;
+  provider: string;
+  scheme: string;
+  subnetIds?: Array<string> | undefined;
+  targetType: string;
+};
+
+/** @internal */
+export const ProviderAwsAlb1$outboundSchema: z.ZodType<
+  ProviderAwsAlb1$Outbound,
+  ProviderAwsAlb1
+> = z.object({
+  ipAddressType: z.nullable(z.string()).optional(),
+  provider: ProviderAwsAlbEnum1$outboundSchema,
+  scheme: z.string(),
+  subnetIds: z.array(z.string()).optional(),
+  targetType: z.string(),
+});
+
+export function providerAwsAlb1ToJSON(
+  providerAwsAlb1: ProviderAwsAlb1,
+): string {
+  return JSON.stringify(ProviderAwsAlb1$outboundSchema.parse(providerAwsAlb1));
+}
+
+/** @internal */
+export type ProviderUnion1$Outbound =
+  | ProviderAwsAlb1$Outbound
+  | ProviderAzureApplicationGatewayForContainers1$Outbound
+  | ProviderGkeGateway1$Outbound
+  | any;
+
+/** @internal */
+export const ProviderUnion1$outboundSchema: z.ZodType<
+  ProviderUnion1$Outbound,
+  ProviderUnion1
+> = z.union([
+  z.lazy(() => ProviderAwsAlb1$outboundSchema),
+  z.lazy(() => ProviderAzureApplicationGatewayForContainers1$outboundSchema),
+  z.lazy(() => ProviderGkeGateway1$outboundSchema),
+  z.any(),
+]);
+
+export function providerUnion1ToJSON(providerUnion1: ProviderUnion1): string {
+  return JSON.stringify(ProviderUnion1$outboundSchema.parse(providerUnion1));
+}
+
+/** @internal */
+export type RouteIngress1$Outbound = {
+  annotations?: { [k: string]: string } | undefined;
+  controller?: string | null | undefined;
+  ingressClassName: string;
+  labels?: { [k: string]: string } | undefined;
+  provider?:
+    | ProviderAwsAlb1$Outbound
+    | ProviderAzureApplicationGatewayForContainers1$Outbound
+    | ProviderGkeGateway1$Outbound
+    | any
+    | null
+    | undefined;
+  routeApi: "ingress";
+};
+
+/** @internal */
+export const RouteIngress1$outboundSchema: z.ZodType<
+  RouteIngress1$Outbound,
+  RouteIngress1
+> = z.object({
+  annotations: z.record(z.string(), z.string()).optional(),
+  controller: z.nullable(z.string()).optional(),
+  ingressClassName: z.string(),
+  labels: z.record(z.string(), z.string()).optional(),
+  provider: z.nullable(
+    z.union([
+      z.lazy(() => ProviderAwsAlb1$outboundSchema),
+      z.lazy(() =>
+        ProviderAzureApplicationGatewayForContainers1$outboundSchema
+      ),
+      z.lazy(() => ProviderGkeGateway1$outboundSchema),
+      z.any(),
+    ]),
+  ).optional(),
+  routeApi: z.literal("ingress"),
+});
+
+export function routeIngress1ToJSON(routeIngress1: RouteIngress1): string {
+  return JSON.stringify(RouteIngress1$outboundSchema.parse(routeIngress1));
+}
+
+/** @internal */
+export type RouteUnion1$Outbound =
+  | RouteIngress1$Outbound
+  | RouteGateway1$Outbound;
+
+/** @internal */
+export const RouteUnion1$outboundSchema: z.ZodType<
+  RouteUnion1$Outbound,
+  RouteUnion1
+> = z.union([
+  z.lazy(() => RouteIngress1$outboundSchema),
+  z.lazy(() => RouteGateway1$outboundSchema),
+]);
+
+export function routeUnion1ToJSON(routeUnion1: RouteUnion1): string {
+  return JSON.stringify(RouteUnion1$outboundSchema.parse(routeUnion1));
+}
+
+/** @internal */
+export type ExposureGenerated$Outbound = {
+  certificate:
+    | CertificateTLSSecretRef1$Outbound
+    | CertificateManagedAcmImport1$Outbound
+    | CertificateAwsAcmArn1$Outbound
+    | CertificateManagedTLSSecret1$Outbound
+    | CertificateNone1$Outbound;
+  mode: string;
+  route: RouteIngress1$Outbound | RouteGateway1$Outbound;
+};
+
+/** @internal */
+export const ExposureGenerated$outboundSchema: z.ZodType<
+  ExposureGenerated$Outbound,
+  ExposureGenerated
+> = z.object({
+  certificate: z.union([
+    z.lazy(() => CertificateTLSSecretRef1$outboundSchema),
+    z.lazy(() => CertificateManagedAcmImport1$outboundSchema),
+    z.lazy(() => CertificateAwsAcmArn1$outboundSchema),
+    z.lazy(() => CertificateManagedTLSSecret1$outboundSchema),
+    z.lazy(() => CertificateNone1$outboundSchema),
+  ]),
+  mode: ModeGenerated$outboundSchema,
+  route: z.union([
+    z.lazy(() => RouteIngress1$outboundSchema),
+    z.lazy(() => RouteGateway1$outboundSchema),
+  ]),
+});
+
+export function exposureGeneratedToJSON(
+  exposureGenerated: ExposureGenerated,
+): string {
+  return JSON.stringify(
+    ExposureGenerated$outboundSchema.parse(exposureGenerated),
+  );
+}
+
+/** @internal */
+export const ModeDisabled$outboundSchema: z.ZodEnum<typeof ModeDisabled> = z
+  .enum(ModeDisabled);
+
+/** @internal */
+export type ExposureDisabled$Outbound = {
+  mode: string;
+};
+
+/** @internal */
+export const ExposureDisabled$outboundSchema: z.ZodType<
+  ExposureDisabled$Outbound,
+  ExposureDisabled
+> = z.object({
+  mode: ModeDisabled$outboundSchema,
+});
+
+export function exposureDisabledToJSON(
+  exposureDisabled: ExposureDisabled,
+): string {
+  return JSON.stringify(
+    ExposureDisabled$outboundSchema.parse(exposureDisabled),
+  );
+}
+
+/** @internal */
+export type Exposure$Outbound =
+  | ExposureCustom$Outbound
+  | ExposureGenerated$Outbound
+  | ExposureDisabled$Outbound
+  | any;
+
+/** @internal */
+export const Exposure$outboundSchema: z.ZodType<Exposure$Outbound, Exposure> = z
+  .union([
+    z.lazy(() => ExposureCustom$outboundSchema),
+    z.lazy(() => ExposureGenerated$outboundSchema),
+    z.lazy(() => ExposureDisabled$outboundSchema),
+    z.any(),
+  ]);
+
+export function exposureToJSON(exposure: Exposure): string {
+  return JSON.stringify(Exposure$outboundSchema.parse(exposure));
+}
+
+/** @internal */
+export type PrepareDeploymentStackKubernetes$Outbound = {
+  cluster?: Cluster$Outbound | any | null | undefined;
+  exposure?:
+    | ExposureCustom$Outbound
+    | ExposureGenerated$Outbound
+    | ExposureDisabled$Outbound
+    | any
+    | null
+    | undefined;
+};
+
+/** @internal */
+export const PrepareDeploymentStackKubernetes$outboundSchema: z.ZodType<
+  PrepareDeploymentStackKubernetes$Outbound,
+  PrepareDeploymentStackKubernetes
+> = z.object({
+  cluster: z.nullable(z.union([z.lazy(() => Cluster$outboundSchema), z.any()]))
+    .optional(),
+  exposure: z.nullable(
+    z.union([
+      z.lazy(() => ExposureCustom$outboundSchema),
+      z.lazy(() => ExposureGenerated$outboundSchema),
+      z.lazy(() => ExposureDisabled$outboundSchema),
+      z.any(),
+    ]),
+  ).optional(),
+});
+
+export function prepareDeploymentStackKubernetesToJSON(
+  prepareDeploymentStackKubernetes: PrepareDeploymentStackKubernetes,
+): string {
+  return JSON.stringify(
+    PrepareDeploymentStackKubernetes$outboundSchema.parse(
+      prepareDeploymentStackKubernetes,
+    ),
+  );
+}
+
+/** @internal */
+export type Kubernetes$Outbound =
+  | PrepareDeploymentStackKubernetes$Outbound
+  | any;
+
+/** @internal */
+export const Kubernetes$outboundSchema: z.ZodType<
+  Kubernetes$Outbound,
+  Kubernetes
+> = z.union([
+  z.lazy(() => PrepareDeploymentStackKubernetes$outboundSchema),
+  z.any(),
+]);
+
+export function kubernetesToJSON(kubernetes: Kubernetes): string {
+  return JSON.stringify(Kubernetes$outboundSchema.parse(kubernetes));
+}
+
+/** @internal */
+export const TypeByoVnetAzure$outboundSchema: z.ZodEnum<
+  typeof TypeByoVnetAzure
+> = z.enum(TypeByoVnetAzure);
+
+/** @internal */
+export type NetworkByoVnetAzure$Outbound = {
+  private_subnet_name: string;
+  public_subnet_name: string;
+  type: string;
+  vnet_resource_id: string;
+};
+
+/** @internal */
+export const NetworkByoVnetAzure$outboundSchema: z.ZodType<
+  NetworkByoVnetAzure$Outbound,
+  NetworkByoVnetAzure
+> = z.object({
+  privateSubnetName: z.string(),
+  publicSubnetName: z.string(),
+  type: TypeByoVnetAzure$outboundSchema,
+  vnetResourceId: z.string(),
+}).transform((v) => {
+  return remap$(v, {
+    privateSubnetName: "private_subnet_name",
+    publicSubnetName: "public_subnet_name",
+    vnetResourceId: "vnet_resource_id",
+  });
+});
+
+export function networkByoVnetAzureToJSON(
+  networkByoVnetAzure: NetworkByoVnetAzure,
+): string {
+  return JSON.stringify(
+    NetworkByoVnetAzure$outboundSchema.parse(networkByoVnetAzure),
+  );
+}
+
+/** @internal */
+export const TypeByoVpcGcp$outboundSchema: z.ZodEnum<typeof TypeByoVpcGcp> = z
+  .enum(TypeByoVpcGcp);
+
+/** @internal */
+export type NetworkByoVpcGcp$Outbound = {
+  network_name: string;
+  region: string;
+  subnet_name: string;
+  type: string;
+};
+
+/** @internal */
+export const NetworkByoVpcGcp$outboundSchema: z.ZodType<
+  NetworkByoVpcGcp$Outbound,
+  NetworkByoVpcGcp
+> = z.object({
+  networkName: z.string(),
+  region: z.string(),
+  subnetName: z.string(),
+  type: TypeByoVpcGcp$outboundSchema,
+}).transform((v) => {
+  return remap$(v, {
+    networkName: "network_name",
+    subnetName: "subnet_name",
+  });
+});
+
+export function networkByoVpcGcpToJSON(
+  networkByoVpcGcp: NetworkByoVpcGcp,
+): string {
+  return JSON.stringify(
+    NetworkByoVpcGcp$outboundSchema.parse(networkByoVpcGcp),
+  );
+}
+
+/** @internal */
+export const TypeByoVpcAws$outboundSchema: z.ZodEnum<typeof TypeByoVpcAws> = z
+  .enum(TypeByoVpcAws);
+
+/** @internal */
+export type NetworkByoVpcAws$Outbound = {
+  private_subnet_ids: Array<string>;
+  public_subnet_ids: Array<string>;
+  security_group_ids?: Array<string> | undefined;
+  type: string;
+  vpc_id: string;
+};
+
+/** @internal */
+export const NetworkByoVpcAws$outboundSchema: z.ZodType<
+  NetworkByoVpcAws$Outbound,
+  NetworkByoVpcAws
+> = z.object({
+  privateSubnetIds: z.array(z.string()),
+  publicSubnetIds: z.array(z.string()),
+  securityGroupIds: z.array(z.string()).optional(),
+  type: TypeByoVpcAws$outboundSchema,
+  vpcId: z.string(),
+}).transform((v) => {
+  return remap$(v, {
+    privateSubnetIds: "private_subnet_ids",
+    publicSubnetIds: "public_subnet_ids",
+    securityGroupIds: "security_group_ids",
+    vpcId: "vpc_id",
+  });
+});
+
+export function networkByoVpcAwsToJSON(
+  networkByoVpcAws: NetworkByoVpcAws,
+): string {
+  return JSON.stringify(
+    NetworkByoVpcAws$outboundSchema.parse(networkByoVpcAws),
+  );
+}
+
+/** @internal */
+export const TypeCreate$outboundSchema: z.ZodEnum<typeof TypeCreate> = z.enum(
+  TypeCreate,
+);
+
+/** @internal */
+export type NetworkCreate$Outbound = {
+  availability_zones?: number | undefined;
+  cidr?: string | null | undefined;
+  type: string;
+};
+
+/** @internal */
+export const NetworkCreate$outboundSchema: z.ZodType<
+  NetworkCreate$Outbound,
+  NetworkCreate
+> = z.object({
+  availabilityZones: z.int().optional(),
+  cidr: z.nullable(z.string()).optional(),
+  type: TypeCreate$outboundSchema,
+}).transform((v) => {
+  return remap$(v, {
+    availabilityZones: "availability_zones",
+  });
+});
+
+export function networkCreateToJSON(networkCreate: NetworkCreate): string {
+  return JSON.stringify(NetworkCreate$outboundSchema.parse(networkCreate));
+}
+
+/** @internal */
+export const TypeUseDefault$outboundSchema: z.ZodEnum<typeof TypeUseDefault> = z
+  .enum(TypeUseDefault);
+
+/** @internal */
+export type NetworkUseDefault$Outbound = {
+  type: string;
+};
+
+/** @internal */
+export const NetworkUseDefault$outboundSchema: z.ZodType<
+  NetworkUseDefault$Outbound,
+  NetworkUseDefault
+> = z.object({
+  type: TypeUseDefault$outboundSchema,
+});
+
+export function networkUseDefaultToJSON(
+  networkUseDefault: NetworkUseDefault,
+): string {
+  return JSON.stringify(
+    NetworkUseDefault$outboundSchema.parse(networkUseDefault),
+  );
+}
+
+/** @internal */
+export type Network$Outbound =
+  | NetworkByoVpcAws$Outbound
+  | NetworkByoVpcGcp$Outbound
+  | NetworkByoVnetAzure$Outbound
+  | NetworkUseDefault$Outbound
+  | NetworkCreate$Outbound
+  | any;
+
+/** @internal */
+export const Network$outboundSchema: z.ZodType<Network$Outbound, Network> = z
+  .union([
+    z.lazy(() => NetworkByoVpcAws$outboundSchema),
+    z.lazy(() => NetworkByoVpcGcp$outboundSchema),
+    z.lazy(() => NetworkByoVnetAzure$outboundSchema),
+    z.lazy(() => NetworkUseDefault$outboundSchema),
+    z.lazy(() => NetworkCreate$outboundSchema),
+    z.any(),
+  ]);
+
+export function networkToJSON(network: Network): string {
+  return JSON.stringify(Network$outboundSchema.parse(network));
+}
+
+/** @internal */
+export const Telemetry$outboundSchema: z.ZodEnum<typeof Telemetry> = z.enum(
+  Telemetry,
+);
+
+/** @internal */
+export const Updates$outboundSchema: z.ZodEnum<typeof Updates> = z.enum(
+  Updates,
+);
+
+/** @internal */
+export type StackSettings$Outbound = {
+  deploymentModel?: string | undefined;
+  domains?: Domains$Outbound | any | null | undefined;
+  externalBindings?: ExternalBindings$Outbound | null | undefined;
+  heartbeats?: string | undefined;
+  kubernetes?:
+    | PrepareDeploymentStackKubernetes$Outbound
+    | any
+    | null
+    | undefined;
+  network?:
+    | NetworkByoVpcAws$Outbound
+    | NetworkByoVpcGcp$Outbound
+    | NetworkByoVnetAzure$Outbound
+    | NetworkUseDefault$Outbound
+    | NetworkCreate$Outbound
+    | any
+    | null
+    | undefined;
+  telemetry?: string | undefined;
+  updates?: string | undefined;
+};
+
+/** @internal */
+export const StackSettings$outboundSchema: z.ZodType<
+  StackSettings$Outbound,
+  StackSettings
+> = z.object({
+  deploymentModel: DeploymentModel$outboundSchema.optional(),
+  domains: z.nullable(z.union([z.lazy(() => Domains$outboundSchema), z.any()]))
+    .optional(),
+  externalBindings: z.nullable(z.lazy(() => ExternalBindings$outboundSchema))
+    .optional(),
+  heartbeats: Heartbeats$outboundSchema.optional(),
+  kubernetes: z.nullable(
+    z.union([
+      z.lazy(() => PrepareDeploymentStackKubernetes$outboundSchema),
+      z.any(),
+    ]),
+  ).optional(),
+  network: z.nullable(
+    z.union([
+      z.lazy(() => NetworkByoVpcAws$outboundSchema),
+      z.lazy(() => NetworkByoVpcGcp$outboundSchema),
+      z.lazy(() => NetworkByoVnetAzure$outboundSchema),
+      z.lazy(() => NetworkUseDefault$outboundSchema),
+      z.lazy(() => NetworkCreate$outboundSchema),
+      z.any(),
+    ]),
+  ).optional(),
+  telemetry: Telemetry$outboundSchema.optional(),
+  updates: Updates$outboundSchema.optional(),
+});
+
+export function stackSettingsToJSON(stackSettings: StackSettings): string {
+  return JSON.stringify(StackSettings$outboundSchema.parse(stackSettings));
+}
+
+/** @internal */
+export type PrepareDeploymentStackRequestBody$Outbound = {
+  platform: string;
+  setupMethod: string;
+  region?: string | undefined;
+  stackSettings: StackSettings$Outbound;
+};
+
+/** @internal */
+export const PrepareDeploymentStackRequestBody$outboundSchema: z.ZodType<
+  PrepareDeploymentStackRequestBody$Outbound,
+  PrepareDeploymentStackRequestBody
+> = z.object({
+  platform: PrepareDeploymentStackPlatform$outboundSchema,
+  setupMethod: models.DeploymentSetupMethod$outboundSchema,
+  region: z.string().optional(),
+  stackSettings: z.lazy(() => StackSettings$outboundSchema),
+});
+
+export function prepareDeploymentStackRequestBodyToJSON(
+  prepareDeploymentStackRequestBody: PrepareDeploymentStackRequestBody,
+): string {
+  return JSON.stringify(
+    PrepareDeploymentStackRequestBody$outboundSchema.parse(
+      prepareDeploymentStackRequestBody,
+    ),
+  );
+}
+
+/** @internal */
+export type PrepareDeploymentStackRequest$Outbound = {
+  workspace?: string | undefined;
+  RequestBody?: PrepareDeploymentStackRequestBody$Outbound | undefined;
+};
+
+/** @internal */
+export const PrepareDeploymentStackRequest$outboundSchema: z.ZodType<
+  PrepareDeploymentStackRequest$Outbound,
+  PrepareDeploymentStackRequest
+> = z.object({
+  workspace: z.string().optional(),
+  requestBody: z.lazy(() => PrepareDeploymentStackRequestBody$outboundSchema)
+    .optional(),
+}).transform((v) => {
+  return remap$(v, {
+    requestBody: "RequestBody",
+  });
+});
+
+export function prepareDeploymentStackRequestToJSON(
+  prepareDeploymentStackRequest: PrepareDeploymentStackRequest,
+): string {
+  return JSON.stringify(
+    PrepareDeploymentStackRequest$outboundSchema.parse(
+      prepareDeploymentStackRequest,
+    ),
+  );
+}