@cloudfleet/sdk 0.0.1-081916a → 0.0.1-092d0b4

package/dist/types.gen.d.ts

@@ -2,6 +2,10 @@ export type ClientOptions = {
     baseUrl: 'https://api.cloudfleet.ai/v1' | (string & {});
 };
 export type BillingContact = {
+    /**
+     * Type of the organization. `business` for legal entities, `personal` for individuals.
+     */
+    type: 'business' | 'personal';
     /**
      * Name of the legal entity. This name will be used in invoices. Use your first and last name for individual accounts.
      */
@@ -129,9 +133,9 @@ export type Chart = {
      */
     chart: string;
     /**
-     * Status of the chart deployment.
+     * Status of the chart deployment (Flux HelmRelease Ready condition reason, e.g. InstallSucceeded, UpgradeFailed, Progressing).
      */
-    status: 'InstallSucceeded' | 'InstallFailed' | 'UpgradeSucceeded' | 'UpgradeFailed' | 'TestSucceeded' | 'TestFailed' | 'RollbackSucceeded' | 'RollbackFailed' | 'UninstallSucceeded' | 'UninstallFailed' | 'ArtifactFailed' | 'DependencyNotReady' | 'Progressing' | 'SourceNotReady';
+    status: string;
     /**
      * Current version of the chart deployment.
      */
@@ -169,13 +173,13 @@ export type ClusterCreateInput = {
      */
     tier: 'basic' | 'pro';
     /**
-     * Cloudfleet control plane region. One of "staging-1a", "northamerica-central-1", "europe-central-1a", "northamerica-central-1a". This field can not be updated after creation.
+     * Cloudfleet control plane region. This field can not be updated after creation.
      */
-    region?: 'staging-1a' | 'northamerica-central-1' | 'europe-central-1a' | 'northamerica-central-1a';
+    region: string;
     /**
      * Version of the kubernetes cluster.
      */
-    version_channel?: '1.x.x-cfke.x' | '1.31.x-cfke.x' | '1.32.x-cfke.x' | '1.33.x-cfke.x';
+    version_channel?: string;
 };
 export type ClusterJoinInformation = {
     /**
@@ -190,6 +194,10 @@ export type ClusterJoinInformation = {
      * Cluster DNS IP address. This is the IP address of the kube-dns service in the cluster.
      */
     cluster_dns: string;
+    /**
+     * Pod CIDR for the cluster. Used to configure iptables rules on nodes to prevent Tailscale routing loops.
+     */
+    pod_cidr: string;
     /**
      * Authentication key for the cluster.
      */
@@ -247,9 +255,9 @@ export type Cluster = {
      */
     tier: 'basic' | 'pro';
     /**
-     * Cloudfleet control plane region. One of "staging-1a", "northamerica-central-1", "europe-central-1a", "northamerica-central-1a". This field can not be updated after creation.
+     * Cloudfleet control plane region. This field can not be updated after creation.
      */
-    region?: 'staging-1a' | 'northamerica-central-1' | 'europe-central-1a' | 'northamerica-central-1a';
+    region: string;
     /**
      * Unique identifier of the kubernetes cluster. UUID v4 string in canonical form
      */
@@ -259,6 +267,7 @@ export type Cluster = {
      */
     status: 'active' | 'disabled' | 'deleted' | 'creating' | 'deployed' | 'failed' | 'updating';
     endpoint?: string | '';
+    endpoint_public?: string | '';
     /**
      * Certificate authority data for the kubernetes cluster. This is the root certificate authority for the cluster.
      */
@@ -304,31 +313,56 @@ export type FleetCreateInput = {
      */
     limits?: {
         /**
-         * CPU limit in cores.
+         * CPU limit in cores. Maximum 100,000.
          */
-        cpu: number;
+        cpu?: number;
     };
     gcp?: {
-        enabled?: boolean;
+        enabled: boolean;
         /**
-         * Project GCP Project id to deploy instances into
+         * GCP project ID to deploy instances into. 6-30 chars, lowercase letters/digits/hyphens, must start with a letter and not end with a hyphen. Omit when GCP is disabled.
          */
-        project: string;
+        project?: string;
     };
     hetzner?: {
-        enabled?: boolean;
+        enabled: boolean;
         /**
-         * Hetzner Cloud API key with read / write access
+         * Hetzner Cloud API token with read / write access (64 alphanumeric characters). Omit this field to keep the existing value.
          */
-        apiKey: string;
+        apiKey?: string;
     };
     aws?: {
-        enabled?: boolean;
+        enabled: boolean;
+        /**
+         * AWS IAM role ARN that Karpenter uses to manage resources. Omit when AWS is disabled.
+         */
+        controllerRoleArn?: string;
+    };
+    /**
+     * Constraints define scheduling and provisioning requirements for the fleet. Each field restricts the values allowed for a given Kubernetes label key. Multiple constraints are ANDed together. Omit a field to place no restriction on that key.
+     */
+    constraints?: {
         /**
-         * ControllerRoleArn is the AWS IAM role that Karpenter uses to manage resources.
+         * Allowed values for `karpenter.sh/capacity-type`.
          */
-        controllerRoleArn: string;
+        'karpenter.sh/capacity-type'?: Array<'on-demand' | 'spot'>;
+        /**
+         * Allowed values for `kubernetes.io/arch`.
+         */
+        'kubernetes.io/arch'?: Array<'amd64' | 'arm64'>;
+        /**
+         * Allowed values for `cfke.io/instance-family`.
+         */
+        'cfke.io/instance-family'?: Array<'a1' | 'a2' | 'a3' | 'a4' | 'c1' | 'c2' | 'c2d' | 'c3' | 'c3d' | 'c4' | 'c4a' | 'c4d' | 'c5' | 'c5a' | 'c5ad' | 'c5d' | 'c5n' | 'c6a' | 'c6g' | 'c6gd' | 'c6gn' | 'c6i' | 'c6id' | 'c6in' | 'c7a' | 'c7g' | 'c7gd' | 'c7gn' | 'c7i' | 'c7i-flex' | 'c8g' | 'c8gd' | 'cax' | 'ccx' | 'cpx' | 'cx' | 'd2' | 'd3' | 'd3en' | 'dl1' | 'dl2q' | 'e2' | 'f1' | 'f2' | 'g1' | 'g2' | 'g4ad' | 'g4dn' | 'g5' | 'g5g' | 'g6' | 'g6e' | 'gr6' | 'h1' | 'h3' | 'hpc6a' | 'hpc6id' | 'hpc7a' | 'hpc7g' | 'i2' | 'i3' | 'i3en' | 'i4g' | 'i4i' | 'i7i' | 'i7ie' | 'i8g' | 'im4gn' | 'inf1' | 'inf2' | 'is4gen' | 'm1' | 'm2' | 'm3' | 'm4' | 'm5' | 'm5a' | 'm5ad' | 'm5d' | 'm5dn' | 'm5n' | 'm5zn' | 'm6a' | 'm6g' | 'm6gd' | 'm6i' | 'm6id' | 'm6idn' | 'm6in' | 'm7a' | 'm7g' | 'm7gd' | 'm7i' | 'm7i-flex' | 'm8g' | 'm8gd' | 'n1' | 'n2' | 'n2d' | 'n4' | 'p3' | 'p3dn' | 'p4d' | 'p4de' | 'p5' | 'p5e' | 'p5en' | 'p6-b200' | 'r3' | 'r4' | 'r5' | 'r5a' | 'r5ad' | 'r5b' | 'r5d' | 'r5dn' | 'r5n' | 'r6a' | 'r6g' | 'r6gd' | 'r6i' | 'r6id' | 'r6idn' | 'r6in' | 'r7a' | 'r7g' | 'r7gd' | 'r7i' | 'r7iz' | 'r8g' | 'r8gd' | 't2' | 't2a' | 't2d' | 't3' | 't3a' | 't4g' | 'trn1' | 'trn1n' | 'u-3tb1' | 'u-6tb1' | 'u7i-12tb' | 'u7i-6tb' | 'u7i-8tb' | 'u7in-16tb' | 'u7in-24tb' | 'u7in-32tb' | 'vt1' | 'x1' | 'x1e' | 'x2gd' | 'x2idn' | 'x2iedn' | 'x2iezn' | 'x4' | 'x8g' | 'z1d' | 'z3'>;
+        /**
+         * Allowed values for `topology.kubernetes.io/region`.
+         */
+        'topology.kubernetes.io/region'?: Array<'africa-south1' | 'ap-northeast-1' | 'ap-northeast-2' | 'ap-northeast-3' | 'ap-south-1' | 'ap-southeast-1' | 'ap-southeast-2' | 'ash' | 'asia-east1' | 'asia-east2' | 'asia-northeast1' | 'asia-northeast2' | 'asia-northeast3' | 'asia-south1' | 'asia-south2' | 'asia-southeast1' | 'asia-southeast2' | 'australia-southeast1' | 'australia-southeast2' | 'ca-central-1' | 'eu-central-1' | 'eu-central-2' | 'eu-north-1' | 'eu-west-1' | 'eu-west-2' | 'eu-west-3' | 'europe-central2' | 'europe-north1' | 'europe-southwest1' | 'europe-west1' | 'europe-west10' | 'europe-west12' | 'europe-west2' | 'europe-west3' | 'europe-west4' | 'europe-west6' | 'europe-west8' | 'europe-west9' | 'fsn1' | 'hel1' | 'hil' | 'me-central1' | 'me-central2' | 'me-west1' | 'nbg1' | 'northamerica-northeast1' | 'northamerica-northeast2' | 'sa-east-1' | 'sin' | 'southamerica-east1' | 'southamerica-west1' | 'us-central1' | 'us-east-1' | 'us-east-2' | 'us-east1' | 'us-east4' | 'us-east5' | 'us-south1' | 'us-west-1' | 'us-west-2' | 'us-west1' | 'us-west2' | 'us-west3' | 'us-west4'>;
     };
+    /**
+     * Controls scale-up / scale-down responsiveness. `aggressive` prioritizes cost-optimization. `conservative` prioritizes stability of the fleet.
+     */
+    scalingProfile?: 'aggressive' | 'conservative';
     /**
      * Unique identifier of the kubernetes fleet.
      */
@@ -340,31 +374,56 @@ export type Fleet = {
      */
     limits?: {
         /**
-         * CPU limit in cores.
+         * CPU limit in cores. Maximum 100,000.
          */
-        cpu: number;
+        cpu?: number;
     };
     gcp?: {
-        enabled?: boolean;
+        enabled: boolean;
         /**
-         * Project GCP Project id to deploy instances into
+         * GCP project ID to deploy instances into. 6-30 chars, lowercase letters/digits/hyphens, must start with a letter and not end with a hyphen. Omit when GCP is disabled.
          */
-        project: string;
+        project?: string;
     };
     hetzner?: {
-        enabled?: boolean;
+        enabled: boolean;
         /**
-         * Hetzner Cloud API key with read / write access
+         * Redacted Hetzner API token. Returned as 64 asterisks when a token is configured; omitted otherwise. The real value is never echoed by the API.
          */
-        apiKey: string;
+        apiKey?: string;
     };
     aws?: {
-        enabled?: boolean;
+        enabled: boolean;
+        /**
+         * AWS IAM role ARN that Karpenter uses to manage resources. Omit when AWS is disabled.
+         */
+        controllerRoleArn?: string;
+    };
+    /**
+     * Constraints define scheduling and provisioning requirements for the fleet. Each field restricts the values allowed for a given Kubernetes label key. Multiple constraints are ANDed together. Omit a field to place no restriction on that key.
+     */
+    constraints?: {
+        /**
+         * Allowed values for `karpenter.sh/capacity-type`.
+         */
+        'karpenter.sh/capacity-type'?: Array<'on-demand' | 'spot'>;
+        /**
+         * Allowed values for `kubernetes.io/arch`.
+         */
+        'kubernetes.io/arch'?: Array<'amd64' | 'arm64'>;
+        /**
+         * Allowed values for `cfke.io/instance-family`.
+         */
+        'cfke.io/instance-family'?: Array<'a1' | 'a2' | 'a3' | 'a4' | 'c1' | 'c2' | 'c2d' | 'c3' | 'c3d' | 'c4' | 'c4a' | 'c4d' | 'c5' | 'c5a' | 'c5ad' | 'c5d' | 'c5n' | 'c6a' | 'c6g' | 'c6gd' | 'c6gn' | 'c6i' | 'c6id' | 'c6in' | 'c7a' | 'c7g' | 'c7gd' | 'c7gn' | 'c7i' | 'c7i-flex' | 'c8g' | 'c8gd' | 'cax' | 'ccx' | 'cpx' | 'cx' | 'd2' | 'd3' | 'd3en' | 'dl1' | 'dl2q' | 'e2' | 'f1' | 'f2' | 'g1' | 'g2' | 'g4ad' | 'g4dn' | 'g5' | 'g5g' | 'g6' | 'g6e' | 'gr6' | 'h1' | 'h3' | 'hpc6a' | 'hpc6id' | 'hpc7a' | 'hpc7g' | 'i2' | 'i3' | 'i3en' | 'i4g' | 'i4i' | 'i7i' | 'i7ie' | 'i8g' | 'im4gn' | 'inf1' | 'inf2' | 'is4gen' | 'm1' | 'm2' | 'm3' | 'm4' | 'm5' | 'm5a' | 'm5ad' | 'm5d' | 'm5dn' | 'm5n' | 'm5zn' | 'm6a' | 'm6g' | 'm6gd' | 'm6i' | 'm6id' | 'm6idn' | 'm6in' | 'm7a' | 'm7g' | 'm7gd' | 'm7i' | 'm7i-flex' | 'm8g' | 'm8gd' | 'n1' | 'n2' | 'n2d' | 'n4' | 'p3' | 'p3dn' | 'p4d' | 'p4de' | 'p5' | 'p5e' | 'p5en' | 'p6-b200' | 'r3' | 'r4' | 'r5' | 'r5a' | 'r5ad' | 'r5b' | 'r5d' | 'r5dn' | 'r5n' | 'r6a' | 'r6g' | 'r6gd' | 'r6i' | 'r6id' | 'r6idn' | 'r6in' | 'r7a' | 'r7g' | 'r7gd' | 'r7i' | 'r7iz' | 'r8g' | 'r8gd' | 't2' | 't2a' | 't2d' | 't3' | 't3a' | 't4g' | 'trn1' | 'trn1n' | 'u-3tb1' | 'u-6tb1' | 'u7i-12tb' | 'u7i-6tb' | 'u7i-8tb' | 'u7in-16tb' | 'u7in-24tb' | 'u7in-32tb' | 'vt1' | 'x1' | 'x1e' | 'x2gd' | 'x2idn' | 'x2iedn' | 'x2iezn' | 'x4' | 'x8g' | 'z1d' | 'z3'>;
         /**
-         * ControllerRoleArn is the AWS IAM role that Karpenter uses to manage resources.
+         * Allowed values for `topology.kubernetes.io/region`.
          */
-        controllerRoleArn: string;
+        'topology.kubernetes.io/region'?: Array<'africa-south1' | 'ap-northeast-1' | 'ap-northeast-2' | 'ap-northeast-3' | 'ap-south-1' | 'ap-southeast-1' | 'ap-southeast-2' | 'ash' | 'asia-east1' | 'asia-east2' | 'asia-northeast1' | 'asia-northeast2' | 'asia-northeast3' | 'asia-south1' | 'asia-south2' | 'asia-southeast1' | 'asia-southeast2' | 'australia-southeast1' | 'australia-southeast2' | 'ca-central-1' | 'eu-central-1' | 'eu-central-2' | 'eu-north-1' | 'eu-west-1' | 'eu-west-2' | 'eu-west-3' | 'europe-central2' | 'europe-north1' | 'europe-southwest1' | 'europe-west1' | 'europe-west10' | 'europe-west12' | 'europe-west2' | 'europe-west3' | 'europe-west4' | 'europe-west6' | 'europe-west8' | 'europe-west9' | 'fsn1' | 'hel1' | 'hil' | 'me-central1' | 'me-central2' | 'me-west1' | 'nbg1' | 'northamerica-northeast1' | 'northamerica-northeast2' | 'sa-east-1' | 'sin' | 'southamerica-east1' | 'southamerica-west1' | 'us-central1' | 'us-east-1' | 'us-east-2' | 'us-east1' | 'us-east4' | 'us-east5' | 'us-south1' | 'us-west-1' | 'us-west-2' | 'us-west1' | 'us-west2' | 'us-west3' | 'us-west4'>;
     };
+    /**
+     * Controls scale-up / scale-down responsiveness. `aggressive` prioritizes cost-optimization. `conservative` prioritizes stability of the fleet.
+     */
+    scalingProfile: 'aggressive' | 'conservative';
     /**
      * Unique identifier of the kubernetes fleet.
      */
@@ -376,31 +435,66 @@ export type FleetUpdateInput = {
      */
     limits?: {
         /**
-         * CPU limit in cores.
+         * CPU limit in cores. Maximum 100,000.
          */
-        cpu: number;
+        cpu?: number;
     };
     gcp?: {
-        enabled?: boolean;
+        enabled: boolean;
         /**
-         * Project GCP Project id to deploy instances into
+         * GCP project ID to deploy instances into. 6-30 chars, lowercase letters/digits/hyphens, must start with a letter and not end with a hyphen. Omit when GCP is disabled.
          */
-        project: string;
+        project?: string;
     };
     hetzner?: {
-        enabled?: boolean;
+        enabled: boolean;
         /**
-         * Hetzner Cloud API key with read / write access
+         * Hetzner Cloud API token with read / write access (64 alphanumeric characters). Omit this field to keep the existing value.
          */
-        apiKey: string;
+        apiKey?: string;
     };
     aws?: {
-        enabled?: boolean;
+        enabled: boolean;
+        /**
+         * AWS IAM role ARN that Karpenter uses to manage resources. Omit when AWS is disabled.
+         */
+        controllerRoleArn?: string;
+    };
+    /**
+     * Constraints define scheduling and provisioning requirements for the fleet. Each field restricts the values allowed for a given Kubernetes label key. Multiple constraints are ANDed together. Omit a field to place no restriction on that key.
+     */
+    constraints?: {
+        /**
+         * Allowed values for `karpenter.sh/capacity-type`.
+         */
+        'karpenter.sh/capacity-type'?: Array<'on-demand' | 'spot'>;
+        /**
+         * Allowed values for `kubernetes.io/arch`.
+         */
+        'kubernetes.io/arch'?: Array<'amd64' | 'arm64'>;
         /**
-         * ControllerRoleArn is the AWS IAM role that Karpenter uses to manage resources.
+         * Allowed values for `cfke.io/instance-family`.
          */
-        controllerRoleArn: string;
+        'cfke.io/instance-family'?: Array<'a1' | 'a2' | 'a3' | 'a4' | 'c1' | 'c2' | 'c2d' | 'c3' | 'c3d' | 'c4' | 'c4a' | 'c4d' | 'c5' | 'c5a' | 'c5ad' | 'c5d' | 'c5n' | 'c6a' | 'c6g' | 'c6gd' | 'c6gn' | 'c6i' | 'c6id' | 'c6in' | 'c7a' | 'c7g' | 'c7gd' | 'c7gn' | 'c7i' | 'c7i-flex' | 'c8g' | 'c8gd' | 'cax' | 'ccx' | 'cpx' | 'cx' | 'd2' | 'd3' | 'd3en' | 'dl1' | 'dl2q' | 'e2' | 'f1' | 'f2' | 'g1' | 'g2' | 'g4ad' | 'g4dn' | 'g5' | 'g5g' | 'g6' | 'g6e' | 'gr6' | 'h1' | 'h3' | 'hpc6a' | 'hpc6id' | 'hpc7a' | 'hpc7g' | 'i2' | 'i3' | 'i3en' | 'i4g' | 'i4i' | 'i7i' | 'i7ie' | 'i8g' | 'im4gn' | 'inf1' | 'inf2' | 'is4gen' | 'm1' | 'm2' | 'm3' | 'm4' | 'm5' | 'm5a' | 'm5ad' | 'm5d' | 'm5dn' | 'm5n' | 'm5zn' | 'm6a' | 'm6g' | 'm6gd' | 'm6i' | 'm6id' | 'm6idn' | 'm6in' | 'm7a' | 'm7g' | 'm7gd' | 'm7i' | 'm7i-flex' | 'm8g' | 'm8gd' | 'n1' | 'n2' | 'n2d' | 'n4' | 'p3' | 'p3dn' | 'p4d' | 'p4de' | 'p5' | 'p5e' | 'p5en' | 'p6-b200' | 'r3' | 'r4' | 'r5' | 'r5a' | 'r5ad' | 'r5b' | 'r5d' | 'r5dn' | 'r5n' | 'r6a' | 'r6g' | 'r6gd' | 'r6i' | 'r6id' | 'r6idn' | 'r6in' | 'r7a' | 'r7g' | 'r7gd' | 'r7i' | 'r7iz' | 'r8g' | 'r8gd' | 't2' | 't2a' | 't2d' | 't3' | 't3a' | 't4g' | 'trn1' | 'trn1n' | 'u-3tb1' | 'u-6tb1' | 'u7i-12tb' | 'u7i-6tb' | 'u7i-8tb' | 'u7in-16tb' | 'u7in-24tb' | 'u7in-32tb' | 'vt1' | 'x1' | 'x1e' | 'x2gd' | 'x2idn' | 'x2iedn' | 'x2iezn' | 'x4' | 'x8g' | 'z1d' | 'z3'>;
+        /**
+         * Allowed values for `topology.kubernetes.io/region`.
+         */
+        'topology.kubernetes.io/region'?: Array<'africa-south1' | 'ap-northeast-1' | 'ap-northeast-2' | 'ap-northeast-3' | 'ap-south-1' | 'ap-southeast-1' | 'ap-southeast-2' | 'ash' | 'asia-east1' | 'asia-east2' | 'asia-northeast1' | 'asia-northeast2' | 'asia-northeast3' | 'asia-south1' | 'asia-south2' | 'asia-southeast1' | 'asia-southeast2' | 'australia-southeast1' | 'australia-southeast2' | 'ca-central-1' | 'eu-central-1' | 'eu-central-2' | 'eu-north-1' | 'eu-west-1' | 'eu-west-2' | 'eu-west-3' | 'europe-central2' | 'europe-north1' | 'europe-southwest1' | 'europe-west1' | 'europe-west10' | 'europe-west12' | 'europe-west2' | 'europe-west3' | 'europe-west4' | 'europe-west6' | 'europe-west8' | 'europe-west9' | 'fsn1' | 'hel1' | 'hil' | 'me-central1' | 'me-central2' | 'me-west1' | 'nbg1' | 'northamerica-northeast1' | 'northamerica-northeast2' | 'sa-east-1' | 'sin' | 'southamerica-east1' | 'southamerica-west1' | 'us-central1' | 'us-east-1' | 'us-east-2' | 'us-east1' | 'us-east4' | 'us-east5' | 'us-south1' | 'us-west-1' | 'us-west-2' | 'us-west1' | 'us-west2' | 'us-west3' | 'us-west4'>;
     };
+    /**
+     * Controls scale-up / scale-down responsiveness. `aggressive` prioritizes cost-optimization. `conservative` prioritizes stability of the fleet.
+     */
+    scalingProfile: 'aggressive' | 'conservative';
+};
+export type InviteCreateInput = {
+    /**
+     * Email address of the user to invite.
+     */
+    email: string;
+    /**
+     * Role the invited user will be assigned on redemption. Can be 'Administrator' or 'User'.
+     */
+    role?: 'Administrator' | 'User';
 };
 export type Invite = {
     /**
@@ -423,6 +517,10 @@ export type Invite = {
      * Generated unique invite code.
      */
     code?: string;
+    /**
+     * Role the invited user will be assigned on redemption. Can be 'Administrator' or 'User'.
+     */
+    role?: 'Administrator' | 'User';
 };
 export type Invoice = {
     /**
@@ -543,6 +641,10 @@ export type MarketplaceListing = {
     };
 };
 export type OrganizationCreateInput = {
+    /**
+     * Type of the organization. `business` for legal entities, `personal` for individuals.
+     */
+    type: 'business' | 'personal';
     /**
      * Email address used for billing as a string.
      */
@@ -564,6 +666,12 @@ export type OrganizationCreateInput = {
      */
     password: string;
 };
+export type OrganizationCreateOutput = {
+    /**
+     * Unique identifier of the newly created organization. Generated by the API and safe to use for client-side tracking immediately.
+     */
+    id: string;
+};
 export type Organization = {
     /**
      * Unique identifier of the organization. UUID v4 string in canonical form
@@ -573,6 +681,10 @@ export type Organization = {
      * Name of the legal entity. This name will be used in invoices. Use your first and last name for individual accounts.
      */
     name?: string;
+    /**
+     * Type of the organization. `business` for legal entities, `personal` for individuals.
+     */
+    type: 'business' | 'personal';
     /**
      * Creation date of the organization. ISO 8601 date string in UTC timezone
      */
@@ -631,36 +743,52 @@ export type Organization = {
      * Status of the organization. Can be `active` or `closed`, or `suspended`.
      */
     status: 'active' | 'closed' | 'suspended';
+    /**
+     * Verification status of the organization, which determines the assigned quota. `none` when billing information is incomplete, `submitted` when billing information is complete but the organization is not yet verified, `verified` when the organization is verified.
+     */
+    verification: 'none' | 'submitted' | 'verified';
 };
 export type PaymentMethod = {
     /**
-     * Unique identifier of the organization. UUID v4 string in canonical form.
+     * Payment method identifier. Stripe payment method id for cards/SEPA; the constant `bank_transfer` for the invoice/bank-transfer method. Used to set as default or delete the payment method.
      */
     id: string;
     /**
-     * Whether organization payment method was set up and ready to use for payments.
+     * Payment method type. `card`, `sepa_debit` for SEPA Direct Debit (business accounts only), or `bank_transfer` for paying invoices by bank transfer.
      */
-    setup: boolean;
+    type: 'card' | 'sepa_debit' | 'bank_transfer';
     /**
-     * Payment method type type. Only `card` payments supported at the moment.
-     */
-    type: 'card';
-    /**
-     * Last 4 digits of the payment card number.
+     * Last 4 digits of the payment card number, of the bank account (IBAN) for SEPA Direct Debit, or of the destination IBAN for bank transfer.
      */
     last4: string;
     /**
-     * Two-digit number representing the card's expiration month.
+     * Two-digit number representing the card's expiration month. Null for SEPA Direct Debit and bank transfer.
      */
     exp_month: number;
     /**
-     * Four-digit number representing the card's expiration year.
+     * Four-digit number representing the card's expiration year. May be in the past for an expired card still on file. Null for SEPA Direct Debit and bank transfer.
      */
     exp_year: number;
     /**
-     * Payment card brand. Can be `amex`, `diners`, `discover`, `eftpos_au`, `jcb`, `mastercard`, `unionpay`, `visa`, or `unknown`.
+     * Payment card brand as reported by Stripe, e.g. `visa`, `mastercard`, `amex`, `cartes_bancaires`, or `unknown`. Null for SEPA Direct Debit and bank transfer.
+     */
+    brand: string;
+    /**
+     * Full destination IBAN to send bank transfers to. Set only for `bank_transfer`; null otherwise. This is Cloudfleet's virtual receiving account, shown in full so the customer can pay into it.
+     */
+    iban: string;
+    /**
+     * BIC/SWIFT of the destination bank for bank transfers. Set only for `bank_transfer`; null otherwise.
      */
-    brand: 'amex' | 'diners' | 'discover' | 'eftpos_au' | 'jcb' | 'mastercard' | 'unionpay' | 'visa' | 'unknown';
+    bic: string;
+    /**
+     * Account holder name of the destination bank account for bank transfers. Set only for `bank_transfer`; null otherwise.
+     */
+    account_holder_name: string;
+    /**
+     * Whether this payment method is the default used for invoices and active subscriptions. Always false for `bank_transfer` (it cannot be a Stripe default payment method).
+     */
+    is_default: boolean;
 };
 export type PlatformQuota = {
     /**
@@ -857,6 +985,258 @@ export type RegistryTag = {
      */
     uri: string;
 };
+export type TicketAttachment = {
+    /**
+     * Unique identifier of the attachment (Mongo ObjectId).
+     */
+    id: string;
+    /**
+     * Original filename as uploaded.
+     */
+    filename: string;
+    /**
+     * MIME content type of the attachment.
+     */
+    content_type: string;
+    /**
+     * Size of the attachment in bytes.
+     */
+    size: number;
+};
+export type TicketCreateInput = {
+    /**
+     * Ticket category. Drives auto-assignment and may carry a subcategory in `properties`.
+     */
+    category: 'billing' | 'technical' | 'general';
+    /**
+     * Initial message body in markdown. There is no separate subject — the first message body is the description.
+     */
+    body: string;
+    /**
+     * Free-form key/value bag set by the UI (e.g. `subcategory`, `cluster_id`, `cluster_name`, `region`).
+     */
+    properties?: {
+        [key: string]: unknown;
+    };
+};
+export type TicketListResponse = {
+    /**
+     * Tickets for the organization, ordered newest first. Messages are omitted from list responses.
+     */
+    items: Array<{
+        /**
+         * Unique identifier of the ticket (Mongo ObjectId).
+         */
+        id: string;
+        /**
+         * Current state of the ticket.
+         */
+        status: 'waiting_on_us' | 'waiting_on_user' | 'closed';
+        /**
+         * Ticket category.
+         */
+        category: 'billing' | 'technical' | 'general';
+        /**
+         * First 128 characters of the initial message body, with markdown formatting and newlines stripped. Used for ticket list previews.
+         */
+        summary: string;
+        /**
+         * Closure timestamp. Null while the ticket is open.
+         */
+        closed_at?: string;
+        /**
+         * Creation date of the ticket. ISO 8601 UTC.
+         */
+        date_created: string;
+        /**
+         * Last update date of the ticket. ISO 8601 UTC.
+         */
+        date_updated: string;
+        /**
+         * Messages on the ticket in chronological order. Internal notes are excluded. Returned by the detail endpoint only.
+         */
+        messages?: Array<{
+            /**
+             * Unique identifier of the message (Mongo ObjectId).
+             */
+            id: string;
+            /**
+             * Message type. Internal notes are filtered out of customer-facing responses.
+             */
+            type: 'customer_reply' | 'agent_reply';
+            /**
+             * Message body in markdown.
+             */
+            body: string;
+            /**
+             * First name of the author. Null when not provided.
+             */
+            author_first_name?: string;
+            /**
+             * Last name of the author. Null when not provided.
+             */
+            author_last_name?: string;
+            /**
+             * Attachments associated with this message.
+             */
+            attachments?: Array<{
+                /**
+                 * Unique identifier of the attachment (Mongo ObjectId).
+                 */
+                id: string;
+                /**
+                 * Original filename as uploaded.
+                 */
+                filename: string;
+                /**
+                 * MIME content type of the attachment.
+                 */
+                content_type: string;
+                /**
+                 * Size of the attachment in bytes.
+                 */
+                size: number;
+            }>;
+            /**
+             * Creation date of the message. ISO 8601 UTC.
+             */
+            date_created: string;
+        }>;
+    }>;
+};
+export type TicketMessageInput = {
+    /**
+     * Reply body in markdown.
+     */
+    body: string;
+};
+export type TicketMessage = {
+    /**
+     * Unique identifier of the message (Mongo ObjectId).
+     */
+    id: string;
+    /**
+     * Message type. Internal notes are filtered out of customer-facing responses.
+     */
+    type: 'customer_reply' | 'agent_reply';
+    /**
+     * Message body in markdown.
+     */
+    body: string;
+    /**
+     * First name of the author. Null when not provided.
+     */
+    author_first_name?: string;
+    /**
+     * Last name of the author. Null when not provided.
+     */
+    author_last_name?: string;
+    /**
+     * Attachments associated with this message.
+     */
+    attachments?: Array<{
+        /**
+         * Unique identifier of the attachment (Mongo ObjectId).
+         */
+        id: string;
+        /**
+         * Original filename as uploaded.
+         */
+        filename: string;
+        /**
+         * MIME content type of the attachment.
+         */
+        content_type: string;
+        /**
+         * Size of the attachment in bytes.
+         */
+        size: number;
+    }>;
+    /**
+     * Creation date of the message. ISO 8601 UTC.
+     */
+    date_created: string;
+};
+export type Ticket = {
+    /**
+     * Unique identifier of the ticket (Mongo ObjectId).
+     */
+    id: string;
+    /**
+     * Current state of the ticket.
+     */
+    status: 'waiting_on_us' | 'waiting_on_user' | 'closed';
+    /**
+     * Ticket category.
+     */
+    category: 'billing' | 'technical' | 'general';
+    /**
+     * First 128 characters of the initial message body, with markdown formatting and newlines stripped. Used for ticket list previews.
+     */
+    summary: string;
+    /**
+     * Closure timestamp. Null while the ticket is open.
+     */
+    closed_at?: string;
+    /**
+     * Creation date of the ticket. ISO 8601 UTC.
+     */
+    date_created: string;
+    /**
+     * Last update date of the ticket. ISO 8601 UTC.
+     */
+    date_updated: string;
+    /**
+     * Messages on the ticket in chronological order. Internal notes are excluded. Returned by the detail endpoint only.
+     */
+    messages?: Array<{
+        /**
+         * Unique identifier of the message (Mongo ObjectId).
+         */
+        id: string;
+        /**
+         * Message type. Internal notes are filtered out of customer-facing responses.
+         */
+        type: 'customer_reply' | 'agent_reply';
+        /**
+         * Message body in markdown.
+         */
+        body: string;
+        /**
+         * First name of the author. Null when not provided.
+         */
+        author_first_name?: string;
+        /**
+         * Last name of the author. Null when not provided.
+         */
+        author_last_name?: string;
+        /**
+         * Attachments associated with this message.
+         */
+        attachments?: Array<{
+            /**
+             * Unique identifier of the attachment (Mongo ObjectId).
+             */
+            id: string;
+            /**
+             * Original filename as uploaded.
+             */
+            filename: string;
+            /**
+             * MIME content type of the attachment.
+             */
+            content_type: string;
+            /**
+             * Size of the attachment in bytes.
+             */
+            size: number;
+        }>;
+        /**
+         * Creation date of the message. ISO 8601 UTC.
+         */
+        date_created: string;
+    }>;
+};
 export type TokenCreateInput = {
     /**
      * Human readable access token name.
@@ -1000,14 +1380,6 @@ export type UserCreateInput = {
      * User password. Must be at least 8 characters long.
      */
     password: string;
-    /**
-     * Status of the user. Can be `active` or `inactive`. Inactive users cannot log in or manage organization resources.
-     */
-    status?: 'active' | 'inactive';
-    /**
-     * User role. Can be 'Administrator', 'User'.
-     */
-    role?: 'Administrator' | 'User';
 };
 export type User = {
     /**
@@ -1085,44 +1457,112 @@ export type GetUsageResponses = {
     200: UsageResponse;
 };
 export type GetUsageResponse = GetUsageResponses[keyof GetUsageResponses];
-export type GetPaymentMethodData = {
+export type GetPaymentMethodSecretData = {
     body?: never;
     path?: never;
     query?: never;
     url: '/billing/payment-method';
 };
-export type GetPaymentMethodErrors = {
+export type GetPaymentMethodSecretResponses = {
     /**
-     * Returns 404 Not Found if the organization does not have a payment method set up.
+     * The client secret. Used for client-side retrieval using a publishable key. The client secret can be used to complete a payment from your frontend. It should not be stored, logged, or exposed to anyone other than the customer. Make sure that you have TLS enabled on any page that includes the client secret.
+     *
      */
-    404: unknown;
+    200: {
+        /**
+         * The client secret.
+         */
+        id?: string;
+    };
+};
+export type GetPaymentMethodSecretResponse = GetPaymentMethodSecretResponses[keyof GetPaymentMethodSecretResponses];
+export type ListPaymentMethodsData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/billing/payment-methods';
 };
-export type GetPaymentMethodResponses = {
+export type ListPaymentMethodsErrors = {
     /**
-     * Redacted payment card information.
+     * Not authenticated
      */
-    200: PaymentMethod;
+    401: unknown;
 };
-export type GetPaymentMethodResponse = GetPaymentMethodResponses[keyof GetPaymentMethodResponses];
-export type GetPaymentMethodSecretData = {
+export type ListPaymentMethodsResponses = {
+    /**
+     * An array of payment methods.
+     */
+    200: Array<PaymentMethod>;
+};
+export type ListPaymentMethodsResponse = ListPaymentMethodsResponses[keyof ListPaymentMethodsResponses];
+export type SetDefaultPaymentMethodData = {
     body?: never;
-    path?: never;
+    path: {
+        /**
+         * Stripe payment method identifier.
+         */
+        paymentMethodId: string;
+    };
     query?: never;
-    url: '/billing/payment-method';
+    url: '/billing/payment-methods/{paymentMethodId}/default';
 };
-export type GetPaymentMethodSecretResponses = {
+export type SetDefaultPaymentMethodErrors = {
     /**
-     * The client secret. Used for client-side retrieval using a publishable key. The client secret can be used to complete a payment from your frontend. It should not be stored, logged, or exposed to anyone other than the customer. Make sure that you have TLS enabled on any page that includes the client secret.
-     *
+     * The bank transfer payment method cannot be set as the default.
      */
-    200: {
+    400: unknown;
+    /**
+     * Not authenticated
+     */
+    401: unknown;
+    /**
+     * Payment method not found.
+     */
+    404: unknown;
+};
+export type SetDefaultPaymentMethodResponses = {
+    /**
+     * Default payment method updated.
+     */
+    204: void;
+};
+export type SetDefaultPaymentMethodResponse = SetDefaultPaymentMethodResponses[keyof SetDefaultPaymentMethodResponses];
+export type DeletePaymentMethodData = {
+    body?: never;
+    path: {
         /**
-         * The client secret.
+         * Stripe payment method identifier.
          */
-        id?: string;
+        paymentMethodId: string;
     };
+    query?: never;
+    url: '/billing/payment-methods/{paymentMethodId}';
 };
-export type GetPaymentMethodSecretResponse = GetPaymentMethodSecretResponses[keyof GetPaymentMethodSecretResponses];
+export type DeletePaymentMethodErrors = {
+    /**
+     * The bank transfer payment method cannot be removed.
+     */
+    400: unknown;
+    /**
+     * Not authenticated
+     */
+    401: unknown;
+    /**
+     * Payment method not found.
+     */
+    404: unknown;
+    /**
+     * Cannot delete the only remaining payment method.
+     */
+    409: unknown;
+};
+export type DeletePaymentMethodResponses = {
+    /**
+     * Payment method deleted.
+     */
+    204: void;
+};
+export type DeletePaymentMethodResponse = DeletePaymentMethodResponses[keyof DeletePaymentMethodResponses];
 export type ListInvoicesData = {
     body?: never;
     path?: never;
@@ -1513,9 +1953,20 @@ export type DeleteClusterData = {
     query?: never;
     url: '/clusters/{cluster_id}';
 };
+export type DeleteClusterErrors = {
+    /**
+     * Cluster not found — it does not exist or has already been deleted.
+     */
+    404: unknown;
+    /**
+     * The cluster could not be torn down due to a transient failure. The cluster is left intact; retry the request.
+     *
+     */
+    503: unknown;
+};
 export type DeleteClusterResponses = {
     /**
-     * Successfully deleted.
+     * Successfully deleted. The cluster has been torn down.
      */
     200: string;
 };
@@ -1556,30 +2007,6 @@ export type UpdateClusterResponses = {
     200: Cluster;
 };
 export type UpdateClusterResponse = UpdateClusterResponses[keyof UpdateClusterResponses];
-export type GetClusterCaData = {
-    body?: never;
-    path: {
-        /**
-         * Unique identifier of the cluster. UUID v4 string in canonical form
-         */
-        cluster_id: string;
-    };
-    query?: never;
-    url: '/clusters/{cluster_id}/ca';
-};
-export type GetClusterCaErrors = {
-    /**
-     * Cluster not found, or its certificate authority is not available yet.
-     */
-    404: unknown;
-};
-export type GetClusterCaResponses = {
-    /**
-     * PEM-encoded certificate authority of the cluster.
-     */
-    200: string;
-};
-export type GetClusterCaResponse = GetClusterCaResponses[keyof GetClusterCaResponses];
 export type GetJoinInformationData = {
     body?: never;
     path: {
@@ -1624,12 +2051,7 @@ export type ListInvitesResponses = {
 };
 export type ListInvitesResponse = ListInvitesResponses[keyof ListInvitesResponses];
 export type CreateInviteData = {
-    body: {
-        /**
-         * User email address
-         */
-        email?: string;
-    };
+    body: InviteCreateInput;
     path?: never;
     query?: never;
     url: '/invites';
@@ -1654,9 +2076,18 @@ export type GetInviteData = {
 };
 export type GetInviteResponses = {
     /**
-     * Returns a single object containing invite details.
+     * The invitation code is valid. Returns the invited email and organization.
      */
-    200: Invite;
+    200: {
+        /**
+         * Email address the invite was issued to.
+         */
+        email?: string;
+        /**
+         * Identifier of the organization the invite grants access to.
+         */
+        organization_id?: string;
+    };
 };
 export type GetInviteResponse = GetInviteResponses[keyof GetInviteResponses];
 export type DeleteInviteData = {
@@ -1786,10 +2217,12 @@ export type CreateOrganizationData = {
 };
 export type CreateOrganizationResponses = {
     /**
-     * Successfully created a new organization.
+     * Organization signup accepted. Returns the generated organization id immediately; provisioning (billing, Keycloak realm, user) continues asynchronously in the background.
+     *
      */
-    200: unknown;
+    200: OrganizationCreateOutput;
 };
+export type CreateOrganizationResponse = CreateOrganizationResponses[keyof CreateOrganizationResponses];
 export type ListRepositoriesData = {
     body?: never;
     path?: never;
@@ -1928,6 +2361,111 @@ export type GetTagResponses = {
     200: RegistryTag;
 };
 export type GetTagResponse = GetTagResponses[keyof GetTagResponses];
+export type ListTicketsData = {
+    body?: never;
+    path?: never;
+    query?: never;
+    url: '/tickets';
+};
+export type ListTicketsResponses = {
+    /**
+     * Tickets for the organization.
+     */
+    200: TicketListResponse;
+};
+export type ListTicketsResponse = ListTicketsResponses[keyof ListTicketsResponses];
+export type CreateTicketData = {
+    body: {
+        /**
+         * JSON-encoded TicketCreateInput.
+         */
+        payload?: string;
+        attachments?: Array<Blob | File>;
+    };
+    path?: never;
+    query?: never;
+    url: '/tickets';
+};
+export type CreateTicketResponses = {
+    /**
+     * Ticket created.
+     */
+    200: Ticket;
+};
+export type CreateTicketResponse = CreateTicketResponses[keyof CreateTicketResponses];
+export type CloseTicketData = {
+    body?: never;
+    path: {
+        ticket_id: string;
+    };
+    query?: never;
+    url: '/tickets/{ticket_id}';
+};
+export type CloseTicketResponses = {
+    /**
+     * Ticket closed.
+     */
+    200: Ticket;
+};
+export type CloseTicketResponse = CloseTicketResponses[keyof CloseTicketResponses];
+export type GetTicketData = {
+    body?: never;
+    path: {
+        ticket_id: string;
+    };
+    query?: never;
+    url: '/tickets/{ticket_id}';
+};
+export type GetTicketResponses = {
+    /**
+     * Ticket with messages (internal notes excluded).
+     */
+    200: Ticket;
+};
+export type GetTicketResponse = GetTicketResponses[keyof GetTicketResponses];
+export type ReplyTicketData = {
+    body: {
+        /**
+         * JSON-encoded TicketMessageInput.
+         */
+        payload?: string;
+        attachments?: Array<Blob | File>;
+    };
+    path: {
+        ticket_id: string;
+    };
+    query?: never;
+    url: '/tickets/{ticket_id}/messages';
+};
+export type ReplyTicketErrors = {
+    /**
+     * Ticket is closed. Open a new ticket instead.
+     */
+    409: unknown;
+};
+export type ReplyTicketResponses = {
+    /**
+     * Reply appended.
+     */
+    200: TicketMessage;
+};
+export type ReplyTicketResponse = ReplyTicketResponses[keyof ReplyTicketResponses];
+export type GetTicketAttachmentData = {
+    body?: never;
+    path: {
+        ticket_id: string;
+        attachment_id: string;
+    };
+    query?: never;
+    url: '/tickets/{ticket_id}/attachments/{attachment_id}';
+};
+export type GetTicketAttachmentResponses = {
+    /**
+     * Attachment binary stream.
+     */
+    200: Blob | File;
+};
+export type GetTicketAttachmentResponse = GetTicketAttachmentResponses[keyof GetTicketAttachmentResponses];
 export type ListTokensData = {
     body?: never;
     path?: never;