@alienplatform/platform-api 3.3.25 → 3.3.27

package/src/models/package.ts

@@ -129,10 +129,36 @@ export type ConfigOperatorImage = {
   type: "operator-image";
 };
 
+/**
+ * Kubernetes log collection mechanism.
+ */
+export const PackageMode = {
+  PodApi: "podApi",
+  NodeAgent: "nodeAgent",
+} as const;
+/**
+ * Kubernetes log collection mechanism.
+ */
+export type PackageMode = ClosedEnum<typeof PackageMode>;
+
+/**
+ * Default log collection mode in a generated Helm chart.
+ */
+export type PackageLogCollector = {
+  /**
+   * Whether logs are collected by default; installers can override this value.
+   */
+  enabled: boolean;
+  /**
+   * Kubernetes log collection mechanism.
+   */
+  mode: PackageMode;
+};
+
 /**
  * One Kubernetes API requirement declared by an enabled operation.
  */
-export type PackageRule = {
+export type PermissionsRule = {
   /**
    * Kubernetes API group. An empty string denotes the core API.
    */
@@ -162,7 +188,7 @@ export type PackagePermissions = {
   /**
    * Explicit Kubernetes API requirements.
    */
-  rules: Array<PackageRule>;
+  rules: Array<PermissionsRule>;
   /**
    * Schema version of the validated permission declaration.
    */
@@ -204,6 +230,92 @@ export type OperationPermission = {
   tier: PackageTier;
 };
 
+/**
+ * Operator identity storage in the generated chart. This does not install a storage driver.
+ */
+export type PackageRuntimePersistence = {
+  /**
+   * Persist operator identity across restarts.
+   */
+  enabled: boolean;
+  /**
+   * Existing namespace claim instead of creating a new claim.
+   */
+  existingClaim: string;
+  /**
+   * Requested claim capacity, for example 1Gi.
+   */
+  size: string;
+  /**
+   * Cluster storage class; empty uses the cluster default.
+   */
+  storageClassName: string;
+};
+
+/**
+ * Non-secret configuration for a chart-generated enrollment token.
+ */
+export type PackageTokenSecret = {
+  /**
+   * Data key inside the Secret.
+   */
+  key: string;
+  /**
+   * Fixed Kubernetes Secret name expected by the workload's Secret mount.
+   */
+  name: string;
+  /**
+   * Plaintext prefix before the random alphanumeric suffix.
+   */
+  prefix: string;
+  /**
+   * Length of the random suffix.
+   */
+  randomLength: number;
+};
+
+/**
+ * Resource family the chart grants get/list/watch over.
+ */
+export type PackageWorkloadReadAccessRule = {
+  /**
+   * Empty string for the core Kubernetes API group.
+   */
+  apiGroup: string;
+  /**
+   * Kubernetes plural resource names; wildcards are not accepted.
+   */
+  resources: Array<string>;
+};
+
+/**
+ * Cluster reads granted to a workload identity, separate from Operator permissions.
+ */
+export type PackageWorkloadReadAccess = {
+  /**
+   * Exact API groups and resources. Verbs are fixed to get/list/watch.
+   */
+  rules: Array<PackageWorkloadReadAccessRule>;
+  /**
+   * Permission profile used by the workload Container and generated ServiceAccount.
+   */
+  serviceAccountProfile: string;
+};
+
+/**
+ * Kubernetes resources created by the product chart before the runtime starts.
+ */
+export type PackageSetupResources = {
+  /**
+   * Non-secret configuration for a chart-generated enrollment token.
+   */
+  tokenSecret: PackageTokenSecret;
+  /**
+   * Cluster reads granted to a workload identity, separate from Operator permissions.
+   */
+  workloadReadAccess: PackageWorkloadReadAccess;
+};
+
 /**
  * Configuration for the Helm chart package
  */
@@ -216,6 +328,14 @@ export type ConfigHelm = {
    * Human-friendly description of the chart
    */
   description: string;
+  /**
+   * Default log collection mode in a generated Helm chart.
+   */
+  logCollector?: PackageLogCollector | undefined;
+  /**
+   * Resolved default management endpoint captured when this build was queued.
+   */
+  managerUrl?: string | undefined;
   /**
    * Canonical Kubernetes permissions for the operations enabled when this build was queued.
    *
@@ -226,6 +346,14 @@ export type ConfigHelm = {
    * that must be re-enqueued; an empty `Some` is a reviewed snapshot with no extra grants.
    */
   operationPermissions?: Array<OperationPermission> | null | undefined;
+  /**
+   * Operator identity storage in the generated chart. This does not install a storage driver.
+   */
+  runtimePersistence?: PackageRuntimePersistence | undefined;
+  /**
+   * Kubernetes resources created by the product chart before the runtime starts.
+   */
+  setupResources?: PackageSetupResources | undefined;
   type: "helm";
 };
 
@@ -526,6 +654,10 @@ export type OutputsHelm = {
    * OCI chart reference (e.g., "oci://public.ecr.aws/acme/charts/project-id")
    */
   chart: string;
+  /**
+   * Default management endpoint embedded in this chart, if available.
+   */
+  managerUrl?: string | undefined;
   /**
    * Chart version (e.g., "1.2.3")
    */
@@ -821,22 +953,48 @@ export function configOperatorImageFromJSON(
 }
 
 /** @internal */
-export const PackageRule$inboundSchema: z.ZodType<PackageRule, unknown> = z
-  .object({
-    apiGroup: z.string(),
-    reason: z.string(),
-    resource: z.string(),
-    resourceNames: z.array(z.string()).optional(),
-    verbs: z.array(z.string()),
-  });
+export const PackageMode$inboundSchema: z.ZodEnum<typeof PackageMode> = z.enum(
+  PackageMode,
+);
+
+/** @internal */
+export const PackageLogCollector$inboundSchema: z.ZodType<
+  PackageLogCollector,
+  unknown
+> = z.object({
+  enabled: z.boolean(),
+  mode: PackageMode$inboundSchema,
+});
 
-export function packageRuleFromJSON(
+export function packageLogCollectorFromJSON(
   jsonString: string,
-): SafeParseResult<PackageRule, SDKValidationError> {
+): SafeParseResult<PackageLogCollector, SDKValidationError> {
   return safeParse(
     jsonString,
-    (x) => PackageRule$inboundSchema.parse(JSON.parse(x)),
-    `Failed to parse 'PackageRule' from JSON`,
+    (x) => PackageLogCollector$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'PackageLogCollector' from JSON`,
+  );
+}
+
+/** @internal */
+export const PermissionsRule$inboundSchema: z.ZodType<
+  PermissionsRule,
+  unknown
+> = z.object({
+  apiGroup: z.string(),
+  reason: z.string(),
+  resource: z.string(),
+  resourceNames: z.array(z.string()).optional(),
+  verbs: z.array(z.string()),
+});
+
+export function permissionsRuleFromJSON(
+  jsonString: string,
+): SafeParseResult<PermissionsRule, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => PermissionsRule$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'PermissionsRule' from JSON`,
   );
 }
 
@@ -845,7 +1003,7 @@ export const PackagePermissions$inboundSchema: z.ZodType<
   PackagePermissions,
   unknown
 > = z.object({
-  rules: z.array(z.lazy(() => PackageRule$inboundSchema)),
+  rules: z.array(z.lazy(() => PermissionsRule$inboundSchema)),
   schemaVersion: z.int(),
 });
 
@@ -885,14 +1043,119 @@ export function operationPermissionFromJSON(
   );
 }
 
+/** @internal */
+export const PackageRuntimePersistence$inboundSchema: z.ZodType<
+  PackageRuntimePersistence,
+  unknown
+> = z.object({
+  enabled: z.boolean(),
+  existingClaim: z.string(),
+  size: z.string(),
+  storageClassName: z.string(),
+});
+
+export function packageRuntimePersistenceFromJSON(
+  jsonString: string,
+): SafeParseResult<PackageRuntimePersistence, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => PackageRuntimePersistence$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'PackageRuntimePersistence' from JSON`,
+  );
+}
+
+/** @internal */
+export const PackageTokenSecret$inboundSchema: z.ZodType<
+  PackageTokenSecret,
+  unknown
+> = z.object({
+  key: z.string(),
+  name: z.string(),
+  prefix: z.string(),
+  randomLength: z.int(),
+});
+
+export function packageTokenSecretFromJSON(
+  jsonString: string,
+): SafeParseResult<PackageTokenSecret, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => PackageTokenSecret$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'PackageTokenSecret' from JSON`,
+  );
+}
+
+/** @internal */
+export const PackageWorkloadReadAccessRule$inboundSchema: z.ZodType<
+  PackageWorkloadReadAccessRule,
+  unknown
+> = z.object({
+  apiGroup: z.string(),
+  resources: z.array(z.string()),
+});
+
+export function packageWorkloadReadAccessRuleFromJSON(
+  jsonString: string,
+): SafeParseResult<PackageWorkloadReadAccessRule, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => PackageWorkloadReadAccessRule$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'PackageWorkloadReadAccessRule' from JSON`,
+  );
+}
+
+/** @internal */
+export const PackageWorkloadReadAccess$inboundSchema: z.ZodType<
+  PackageWorkloadReadAccess,
+  unknown
+> = z.object({
+  rules: z.array(z.lazy(() => PackageWorkloadReadAccessRule$inboundSchema)),
+  serviceAccountProfile: z.string(),
+});
+
+export function packageWorkloadReadAccessFromJSON(
+  jsonString: string,
+): SafeParseResult<PackageWorkloadReadAccess, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => PackageWorkloadReadAccess$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'PackageWorkloadReadAccess' from JSON`,
+  );
+}
+
+/** @internal */
+export const PackageSetupResources$inboundSchema: z.ZodType<
+  PackageSetupResources,
+  unknown
+> = z.object({
+  tokenSecret: z.lazy(() => PackageTokenSecret$inboundSchema),
+  workloadReadAccess: z.lazy(() => PackageWorkloadReadAccess$inboundSchema),
+});
+
+export function packageSetupResourcesFromJSON(
+  jsonString: string,
+): SafeParseResult<PackageSetupResources, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => PackageSetupResources$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'PackageSetupResources' from JSON`,
+  );
+}
+
 /** @internal */
 export const ConfigHelm$inboundSchema: z.ZodType<ConfigHelm, unknown> = z
   .object({
     chartName: z.string(),
     description: z.string(),
+    logCollector: z.lazy(() => PackageLogCollector$inboundSchema).optional(),
+    managerUrl: z.string().optional(),
     operationPermissions: z.nullable(
       z.array(z.lazy(() => OperationPermission$inboundSchema)),
     ).optional(),
+    runtimePersistence: z.lazy(() => PackageRuntimePersistence$inboundSchema)
+      .optional(),
+    setupResources: z.lazy(() => PackageSetupResources$inboundSchema)
+      .optional(),
     type: z.literal("helm"),
   });
 
@@ -1160,6 +1423,7 @@ export const OutputsTypeHelm$inboundSchema: z.ZodEnum<typeof OutputsTypeHelm> =
 export const OutputsHelm$inboundSchema: z.ZodType<OutputsHelm, unknown> = z
   .object({
     chart: z.string(),
+    managerUrl: z.string().optional(),
     version: z.string(),
     type: OutputsTypeHelm$inboundSchema,
   });
@@ -1355,3 +1619,8 @@ export function packageFromJSON(
     `Failed to parse 'Package' from JSON`,
   );
 }
+
+// Preserve published model imports across generator naming changes.
+export type PackageRule = PermissionsRule;
+export const PackageRule$inboundSchema = PermissionsRule$inboundSchema;
+export const packageRuleFromJSON = permissionsRuleFromJSON;

package/src/models/project.ts

@@ -178,6 +178,67 @@ export type ProjectOperatorImage = {
   enabled: boolean;
 };
 
+/**
+ * Kubernetes log collection mechanism.
+ */
+export const ProjectMode = {
+  PodApi: "podApi",
+  NodeAgent: "nodeAgent",
+} as const;
+/**
+ * Kubernetes log collection mechanism.
+ */
+export type ProjectMode = ClosedEnum<typeof ProjectMode>;
+
+/**
+ * Default log collection mode in a generated Helm chart.
+ */
+export type ProjectLogCollector = {
+  /**
+   * Whether logs are collected by default; installers can override this value.
+   */
+  enabled: boolean;
+  /**
+   * Kubernetes log collection mechanism.
+   */
+  mode: ProjectMode;
+};
+
+export type ProjectTokenSecret = {
+  key: string;
+  name: string;
+  prefix: string;
+  randomLength: number;
+};
+
+export type ProjectRule = {
+  /**
+   * Kubernetes API group: empty for core resources, apps, or networking.k8s.io.
+   */
+  apiGroup: string;
+  resources: Array<string>;
+};
+
+export type ProjectWorkloadReadAccess = {
+  rules: Array<ProjectRule>;
+  serviceAccountProfile: string;
+};
+
+export type ProjectSetupResources = {
+  tokenSecret: ProjectTokenSecret;
+  workloadReadAccess: ProjectWorkloadReadAccess;
+};
+
+export type ProjectRuntimePersistence = {
+  /**
+   * Persist operator identity across restarts.
+   */
+  enabled: boolean;
+  existingClaim: string;
+  size: string;
+  storageClassName: string;
+};
+
 /**
  * Helm chart package configuration. If null, Helm packages will not be generated.
  */
@@ -190,10 +251,16 @@ export type ProjectHelm = {
    * Human-friendly description of the chart
    */
   description: string;
+  /**
+   * Default log collection mode in a generated Helm chart.
+   */
+  logCollector?: ProjectLogCollector | undefined;
   /**
    * Whether Helm chart package generation is enabled
    */
   enabled: boolean;
+  setupResources?: ProjectSetupResources | undefined;
+  runtimePersistence?: ProjectRuntimePersistence | undefined;
 };
 
 /**
@@ -526,12 +593,138 @@ export function projectOperatorImageFromJSON(
   );
 }
 
+/** @internal */
+export const ProjectMode$inboundSchema: z.ZodEnum<typeof ProjectMode> = z.enum(
+  ProjectMode,
+);
+
+/** @internal */
+export const ProjectLogCollector$inboundSchema: z.ZodType<
+  ProjectLogCollector,
+  unknown
+> = z.object({
+  enabled: z.boolean(),
+  mode: ProjectMode$inboundSchema,
+});
+
+export function projectLogCollectorFromJSON(
+  jsonString: string,
+): SafeParseResult<ProjectLogCollector, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => ProjectLogCollector$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'ProjectLogCollector' from JSON`,
+  );
+}
+
+/** @internal */
+export const ProjectTokenSecret$inboundSchema: z.ZodType<
+  ProjectTokenSecret,
+  unknown
+> = z.object({
+  key: z.string(),
+  name: z.string(),
+  prefix: z.string(),
+  randomLength: z.int(),
+});
+
+export function projectTokenSecretFromJSON(
+  jsonString: string,
+): SafeParseResult<ProjectTokenSecret, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => ProjectTokenSecret$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'ProjectTokenSecret' from JSON`,
+  );
+}
+
+/** @internal */
+export const ProjectRule$inboundSchema: z.ZodType<ProjectRule, unknown> = z
+  .object({
+    apiGroup: z.string(),
+    resources: z.array(z.string()),
+  });
+
+export function projectRuleFromJSON(
+  jsonString: string,
+): SafeParseResult<ProjectRule, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => ProjectRule$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'ProjectRule' from JSON`,
+  );
+}
+
+/** @internal */
+export const ProjectWorkloadReadAccess$inboundSchema: z.ZodType<
+  ProjectWorkloadReadAccess,
+  unknown
+> = z.object({
+  rules: z.array(z.lazy(() => ProjectRule$inboundSchema)),
+  serviceAccountProfile: z.string(),
+});
+
+export function projectWorkloadReadAccessFromJSON(
+  jsonString: string,
+): SafeParseResult<ProjectWorkloadReadAccess, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => ProjectWorkloadReadAccess$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'ProjectWorkloadReadAccess' from JSON`,
+  );
+}
+
+/** @internal */
+export const ProjectSetupResources$inboundSchema: z.ZodType<
+  ProjectSetupResources,
+  unknown
+> = z.object({
+  tokenSecret: z.lazy(() => ProjectTokenSecret$inboundSchema),
+  workloadReadAccess: z.lazy(() => ProjectWorkloadReadAccess$inboundSchema),
+});
+
+export function projectSetupResourcesFromJSON(
+  jsonString: string,
+): SafeParseResult<ProjectSetupResources, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => ProjectSetupResources$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'ProjectSetupResources' from JSON`,
+  );
+}
+
+/** @internal */
+export const ProjectRuntimePersistence$inboundSchema: z.ZodType<
+  ProjectRuntimePersistence,
+  unknown
+> = z.object({
+  enabled: z.boolean(),
+  existingClaim: z.string(),
+  size: z.string(),
+  storageClassName: z.string(),
+});
+
+export function projectRuntimePersistenceFromJSON(
+  jsonString: string,
+): SafeParseResult<ProjectRuntimePersistence, SDKValidationError> {
+  return safeParse(
+    jsonString,
+    (x) => ProjectRuntimePersistence$inboundSchema.parse(JSON.parse(x)),
+    `Failed to parse 'ProjectRuntimePersistence' from JSON`,
+  );
+}
+
 /** @internal */
 export const ProjectHelm$inboundSchema: z.ZodType<ProjectHelm, unknown> = z
   .object({
     chartName: z.string(),
     description: z.string(),
+    logCollector: z.lazy(() => ProjectLogCollector$inboundSchema).optional(),
     enabled: z.boolean(),
+    setupResources: z.lazy(() => ProjectSetupResources$inboundSchema)
+      .optional(),
+    runtimePersistence: z.lazy(() => ProjectRuntimePersistence$inboundSchema)
+      .optional(),
   });
 
 export function projectHelmFromJSON(