@distilled.cloud/stackit 0.0.0-placeholder → 1.0.0-rc.13

package/src/services/alb.ts

@@ -0,0 +1,1409 @@
+// AUTO-GENERATED by scripts/generate.ts from .generated-specs (specs/spec-mirror-stackit). Do not edit.
+import * as S from "@distilled.cloud/core/schema";
+import * as Redacted from "effect/Redacted";
+import * as API from "@distilled.cloud/core/api";
+import * as C from "@distilled.cloud/core/category";
+import * as T from "../traits.ts";
+import {
+  StackitProtocol,
+  type StackitOpError,
+  type StackitOpContext,
+} from "../protocol.ts";
+import { UnknownStackitError } from "../errors.ts";
+import * as Retry from "../retry.ts";
+
+export type { StackitOpError, StackitOpContext };
+
+export class BadRequest
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<BadRequest>()("BadRequest", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withBadRequestError),
+    [{ status: 400 }],
+  ) {}
+
+export class Conflict
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<Conflict>()("Conflict", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withConflictError),
+    [{ status: 409 }],
+  ) {}
+
+export class Forbidden
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<Forbidden>()("Forbidden", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withAuthError),
+    [{ status: 403 }],
+  ) {}
+
+export class NotFound
+  extends /*@__PURE__*/ T.applyErrorMatchers(
+    /*@__PURE__*/ S.TaggedError<NotFound>()("NotFound", {
+      code: S.Number,
+      message: S.String,
+    }).pipe(C.withBadRequestError),
+    [{ status: 404 }],
+  ) {}
+
+export interface CreateCredentialsRequest {
+  projectId: string;
+  region: string;
+  /** Credential name */
+  displayName?: string;
+  /** A valid password used for an existing STACKIT Observability instance, which is used during basic auth. */
+  password?: string | Redacted.Redacted<string>;
+  /** A valid username used for an existing STACKIT Observability instance, which is used during basic auth. */
+  username?: string;
+}
+export const CreateCredentialsRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    displayName: S.optional(S.String),
+    password: S.optional(S.String.pipe(T.SensitiveValue({}))),
+    username: S.optional(S.String),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v2/projects/{projectId}/regions/{region}/credentials",
+      code: 200,
+      baseUrl: "https://alb.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "CreateCredentialsRequest",
+}) as any as S.Schema<CreateCredentialsRequest>;
+
+export interface CredentialsResponse {
+  /** The credentials reference can be used for observability of the Application Load Balancer. */
+  credentialsRef?: string;
+  /** Credential name */
+  displayName?: string;
+  /** Region of the Credential */
+  region?: string;
+  /** The username used for the STACKIT Observability instance */
+  username?: string;
+}
+export const CredentialsResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    credentialsRef: S.optional(S.String),
+    displayName: S.optional(S.String),
+    region: S.optional(S.String),
+    username: S.optional(S.String),
+  }),
+).annotate({
+  identifier: "CredentialsResponse",
+}) as any as S.Schema<CredentialsResponse>;
+
+export interface CreateCredentialsResponse {
+  credential?: CredentialsResponse;
+}
+export const CreateCredentialsResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    credential: S.optional(CredentialsResponse),
+  }),
+).annotate({
+  identifier: "CreateCredentialsResponse",
+}) as any as S.Schema<CreateCredentialsResponse>;
+
+/** Labels represent user-defined metadata as key-value pairs. Label count should not exceed 64 per ALB. **Key Formatting Rules:** Length: 1-63 characters. Characters: Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. Keys starting with 'stackit-' are system-reserved; users MUST NOT manage them. **Value Formatting Rules:** Length: 0-63 characters (empty string explicitly allowed). Characters (for non-empty values): Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. */
+export type CreateLoadBalancerRequestLabelsMap = {
+  [key: string]: string | undefined;
+};
+export const CreateLoadBalancerRequestLabelsMap = /*@__PURE__*/ S.Record(
+  S.String,
+  S.String,
+) as any as S.Schema<CreateLoadBalancerRequestLabelsMap>;
+
+/** CookiePersistence contains the cookie-based session persistence configuration. */
+export interface CookiePersistence {
+  /** Cookie is the name of the cookie to use. */
+  name?: string;
+  /** TTL specifies the time-to-live for the cookie. The default value is 0s, and it acts as a session cookie, expiring when the client session ends. */
+  ttl?: string;
+}
+export const CookiePersistence = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    name: S.optional(S.String),
+    ttl: S.optional(S.String),
+  }),
+).annotate({
+  identifier: "CookiePersistence",
+}) as any as S.Schema<CookiePersistence>;
+
+export interface HttpHeader {
+  /** Exact match for the header value. */
+  exactMatch?: string;
+  /** Header name. */
+  name?: string;
+}
+export const HttpHeader = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    exactMatch: S.optional(S.String),
+    name: S.optional(S.String),
+  }),
+).annotate({ identifier: "HttpHeader" }) as any as S.Schema<HttpHeader>;
+
+/** Headers for the rule. */
+export type RuleHeadersList = Array<HttpHeader>;
+export const RuleHeadersList = /*@__PURE__*/ S.Array(
+  HttpHeader,
+) as any as S.Schema<RuleHeadersList>;
+
+/** Path match. Optional. Contains either an exact or prefix match. If not set, defaults to root path '/' of prefix type. Cannot be set if 'path_prefix' is used. Prefer using this field over 'path_prefix'. */
+export interface Path {
+  /** Exact path match. Only a request path exactly equal to the value will match, e.g. '/foo' matches only '/foo', not '/foo/bar' or '/foobar'. */
+  exactMatch?: string;
+  /** Prefix path match. Only matches on full segment boundaries, e.g. '/foo' matches '/foo' and '/foo/bar' but NOT '/foobar'. */
+  prefix?: string;
+}
+export const Path = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    exactMatch: S.optional(S.String),
+    prefix: S.optional(S.String),
+  }),
+).annotate({ identifier: "Path" }) as any as S.Schema<Path>;
+
+export interface QueryParameter {
+  /** Exact match for the parameter value. */
+  exactMatch?: string;
+  /** Parameter name. */
+  name?: string;
+}
+export const QueryParameter = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    exactMatch: S.optional(S.String),
+    name: S.optional(S.String),
+  }),
+).annotate({ identifier: "QueryParameter" }) as any as S.Schema<QueryParameter>;
+
+/** Query parameters for the rule. */
+export type RuleQueryParametersList = Array<QueryParameter>;
+export const RuleQueryParametersList = /*@__PURE__*/ S.Array(
+  QueryParameter,
+) as any as S.Schema<RuleQueryParametersList>;
+
+export interface Rule {
+  cookiePersistence?: CookiePersistence;
+  /** Headers for the rule. */
+  headers?: RuleHeadersList;
+  path?: Path;
+  /** Query parameters for the rule. */
+  queryParameters?: RuleQueryParametersList;
+  /** Reference target pool by target pool name. */
+  targetPool?: string;
+  /** If enabled, when client sends an HTTP request with and Upgrade header, indicating the desire to establish a Websocket connection, if backend server supports WebSocket, it responds with HTTP 101 status code, switching protocols from HTTP to WebSocket. Hence the client and the server can exchange data in real-time using one long-lived TCP connection. */
+  webSocket?: boolean;
+}
+export const Rule = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    cookiePersistence: S.optional(CookiePersistence),
+    headers: S.optional(RuleHeadersList),
+    path: S.optional(Path),
+    queryParameters: S.optional(RuleQueryParametersList),
+    targetPool: S.optional(S.String),
+    webSocket: S.optional(S.Boolean),
+  }),
+).annotate({ identifier: "Rule" }) as any as S.Schema<Rule>;
+
+/** Routing rules under the specified host, matched by path prefix. */
+export type HostConfigRulesList = Array<Rule>;
+export const HostConfigRulesList = /*@__PURE__*/ S.Array(
+  Rule,
+) as any as S.Schema<HostConfigRulesList>;
+
+export interface HostConfig {
+  /** Hostname to match. Supports wildcards (e.g. *.example.com). */
+  host?: string;
+  /** Routing rules under the specified host, matched by path prefix. */
+  rules?: HostConfigRulesList;
+}
+export const HostConfig = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    host: S.optional(S.String),
+    rules: S.optional(HostConfigRulesList),
+  }),
+).annotate({ identifier: "HostConfig" }) as any as S.Schema<HostConfig>;
+
+/** Defines routing rules grouped by hostname. */
+export type ProtocolOptionsHTTPHostsList = Array<HostConfig>;
+export const ProtocolOptionsHTTPHostsList = /*@__PURE__*/ S.Array(
+  HostConfig,
+) as any as S.Schema<ProtocolOptionsHTTPHostsList>;
+
+/** Configuration for handling HTTP traffic on this listener. */
+export interface ProtocolOptionsHTTP {
+  /** Defines routing rules grouped by hostname. */
+  hosts?: ProtocolOptionsHTTPHostsList;
+}
+export const ProtocolOptionsHTTP = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    hosts: S.optional(ProtocolOptionsHTTPHostsList),
+  }),
+).annotate({
+  identifier: "ProtocolOptionsHTTP",
+}) as any as S.Schema<ProtocolOptionsHTTP>;
+
+/** Certificate IDs for TLS termination. */
+export type CertificateConfigCertificateIdsList = Array<string>;
+export const CertificateConfigCertificateIdsList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<CertificateConfigCertificateIdsList>;
+
+/** TLS termination certificate configuration. */
+export interface CertificateConfig {
+  /** Certificate IDs for TLS termination. */
+  certificateIds?: CertificateConfigCertificateIdsList;
+}
+export const CertificateConfig = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    certificateIds: S.optional(CertificateConfigCertificateIdsList),
+  }),
+).annotate({
+  identifier: "CertificateConfig",
+}) as any as S.Schema<CertificateConfig>;
+
+/** Configuration for handling HTTPS traffic on this listener. */
+export interface ProtocolOptionsHTTPS {
+  certificateConfig?: CertificateConfig;
+}
+export const ProtocolOptionsHTTPS = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    certificateConfig: S.optional(CertificateConfig),
+  }),
+).annotate({
+  identifier: "ProtocolOptionsHTTPS",
+}) as any as S.Schema<ProtocolOptionsHTTPS>;
+
+/** Protocol is the highest network protocol we understand to load balance. Currently PROTOCOL_HTTP and PROTOCOL_HTTPS are supported. */
+export type ListenerProtocol =
+  | "PROTOCOL_UNSPECIFIED"
+  | "PROTOCOL_HTTP"
+  | "PROTOCOL_HTTPS";
+export const ListenerProtocol = /*@__PURE__*/ S.String;
+
+export interface Listener {
+  http?: ProtocolOptionsHTTP;
+  https?: ProtocolOptionsHTTPS;
+  /** A unique listener name. */
+  name?: string;
+  /** Port number on which the listener receives incoming traffic. */
+  port?: number;
+  /** Protocol is the highest network protocol we understand to load balance. Currently PROTOCOL_HTTP and PROTOCOL_HTTPS are supported. */
+  protocol?: ListenerProtocol | (string & {});
+  /** Enable Web Application Firewall (WAF), referenced by name. See "Application Load Balancer - Web Application Firewall API" for more information. */
+  wafConfigName?: string;
+}
+export const Listener = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    http: S.optional(ProtocolOptionsHTTP),
+    https: S.optional(ProtocolOptionsHTTPS),
+    name: S.optional(S.String),
+    port: S.optional(S.Number),
+    protocol: S.optional(ListenerProtocol),
+    wafConfigName: S.optional(S.String),
+  }),
+).annotate({ identifier: "Listener" }) as any as S.Schema<Listener>;
+
+/** There is a maximum listener count of 20. */
+export type CreateLoadBalancerRequestListenersList = Array<Listener>;
+export const CreateLoadBalancerRequestListenersList = /*@__PURE__*/ S.Array(
+  Listener,
+) as any as S.Schema<CreateLoadBalancerRequestListenersList>;
+
+/** The role defines how the Application Load Balancer is using the network. Currently only ROLE_LISTENERS_AND_TARGETS is supported. */
+export type NetworkRole =
+  | "ROLE_UNSPECIFIED"
+  | "ROLE_LISTENERS_AND_TARGETS"
+  | "ROLE_LISTENERS"
+  | "ROLE_TARGETS";
+export const NetworkRole = /*@__PURE__*/ S.String;
+
+export interface Network {
+  /** STACKIT network ID the Application Load Balancer and/or targets are in. */
+  networkId?: string;
+  /** The role defines how the Application Load Balancer is using the network. Currently only ROLE_LISTENERS_AND_TARGETS is supported. */
+  role?: NetworkRole | (string & {});
+}
+export const Network = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    networkId: S.optional(S.String),
+    role: S.optional(NetworkRole),
+  }),
+).annotate({ identifier: "Network" }) as any as S.Schema<Network>;
+
+/** List of networks that listeners and targets reside in. Currently limited to one. Not changeable after creation. */
+export type CreateLoadBalancerRequestNetworksList = Array<Network>;
+export const CreateLoadBalancerRequestNetworksList = /*@__PURE__*/ S.Array(
+  Network,
+) as any as S.Schema<CreateLoadBalancerRequestNetworksList>;
+
+/** Application Load Balancer is accessible only from an IP address in this range. May be combined with `ipBlockListName`; `allowedSourceRanges` is evaluated first, then `ipBlockListName`. */
+export type LoadbalancerOptionAccessControlAllowedSourceRangesList =
+  Array<string>;
+export const LoadbalancerOptionAccessControlAllowedSourceRangesList =
+  /*@__PURE__*/ S.Array(
+    S.String,
+  ) as any as S.Schema<LoadbalancerOptionAccessControlAllowedSourceRangesList>;
+
+/** Use this option to limit the IP ranges that can use the Application Load Balancer. `allowed_source_ranges` and `ip_block_list_name` may be set together. When both are set, `allowed_source_ranges` is evaluated first, then `ip_block_list_name` is evaluated. */
+export interface LoadbalancerOptionAccessControl {
+  /** Application Load Balancer is accessible only from an IP address in this range. May be combined with `ipBlockListName`; `allowedSourceRanges` is evaluated first, then `ipBlockListName`. */
+  allowedSourceRanges?: LoadbalancerOptionAccessControlAllowedSourceRangesList;
+  /** Reference to an IP block list by name. Traffic originating from any IP in the referenced list is denied access to the Application Load Balancer. See "IP Lists API" for how to manage IP block lists. May be combined with `allowedSourceRanges`; `allowedSourceRanges` is evaluated first, then `ipBlockListName`. */
+  ipBlockListName?: string;
+}
+export const LoadbalancerOptionAccessControl = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    allowedSourceRanges: S.optional(
+      LoadbalancerOptionAccessControlAllowedSourceRangesList,
+    ),
+    ipBlockListName: S.optional(S.String),
+  }),
+).annotate({
+  identifier: "LoadbalancerOptionAccessControl",
+}) as any as S.Schema<LoadbalancerOptionAccessControl>;
+
+/** Observability logs configuration. */
+export interface LoadbalancerOptionLogs {
+  /** Credentials reference for logging. This reference is created via the observability create endpoint and the credential needs to contain the basic auth username and password for the logging solution the push URL points to. Then this enables monitoring via remote write for the Application Load Balancer. */
+  credentialsRef?: string;
+  /** The Observability(Logs)/Loki remote write Push URL you want the logs to be shipped to. */
+  pushUrl?: string;
+}
+export const LoadbalancerOptionLogs = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    credentialsRef: S.optional(S.String),
+    pushUrl: S.optional(S.String),
+  }),
+).annotate({
+  identifier: "LoadbalancerOptionLogs",
+}) as any as S.Schema<LoadbalancerOptionLogs>;
+
+/** Observability metrics configuration. */
+export interface LoadbalancerOptionMetrics {
+  /** Credentials reference for metrics. This reference is created via the observability create endpoint and the credential needs to contain the basic auth username and password for the metrics solution the push URL points to. Then this enables monitoring via remote write for the Application Load Balancer. */
+  credentialsRef?: string;
+  /** The Observability(Metrics)/Prometheus remote write push URL you want the metrics to be shipped to. */
+  pushUrl?: string;
+}
+export const LoadbalancerOptionMetrics = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    credentialsRef: S.optional(S.String),
+    pushUrl: S.optional(S.String),
+  }),
+).annotate({
+  identifier: "LoadbalancerOptionMetrics",
+}) as any as S.Schema<LoadbalancerOptionMetrics>;
+
+/** We offer Load Balancer observability via STACKIT Observability or external solutions. */
+export interface LoadbalancerOptionObservability {
+  logs?: LoadbalancerOptionLogs;
+  metrics?: LoadbalancerOptionMetrics;
+}
+export const LoadbalancerOptionObservability = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    logs: S.optional(LoadbalancerOptionLogs),
+    metrics: S.optional(LoadbalancerOptionMetrics),
+  }),
+).annotate({
+  identifier: "LoadbalancerOptionObservability",
+}) as any as S.Schema<LoadbalancerOptionObservability>;
+
+/** Defines any optional functionality you want to have enabled on your Application Load Balancer. */
+export interface LoadBalancerOptions {
+  accessControl?: LoadbalancerOptionAccessControl;
+  /** This option automates the handling of the external IP address for an Application Load Balancer. If set to true a new IP address will be automatically created. It will also be automatically deleted when the Load Balancer is deleted. */
+  ephemeralAddress?: boolean;
+  observability?: LoadbalancerOptionObservability;
+  /** Application Load Balancer is accessible only via a private network ip address. Not changeable after creation. */
+  privateNetworkOnly?: boolean;
+}
+export const LoadBalancerOptions = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    accessControl: S.optional(LoadbalancerOptionAccessControl),
+    ephemeralAddress: S.optional(S.Boolean),
+    observability: S.optional(LoadbalancerOptionObservability),
+    privateNetworkOnly: S.optional(S.Boolean),
+  }),
+).annotate({
+  identifier: "LoadBalancerOptions",
+}) as any as S.Schema<LoadBalancerOptions>;
+
+/** List of HTTP status codes that indicate a healthy response */
+export type HttpHealthChecksOkStatusesList = Array<string>;
+export const HttpHealthChecksOkStatusesList = /*@__PURE__*/ S.Array(
+  S.String,
+) as any as S.Schema<HttpHealthChecksOkStatusesList>;
+
+/** Set this to configure TLS settings. */
+export interface TlsConfig {
+  /** Specifies a custom Certificate Authority (CA). When provided, the target pool will trust certificates signed by this CA, in addition to any system-trusted CAs. This is useful for scenarios where the target pool needs to communicate with servers using self-signed or internally-issued certificates. Enabled needs to be set to true and skip validation to false for this option. */
+  customCa?: string;
+  /** Enable TLS (Transport Layer Security) bridging for the connection between Application Load Balancer and targets in this pool. When enabled, public CAs are trusted. Can be used in tandem with the options either custom CA or skip validation or alone. */
+  enabled?: boolean;
+  /** Bypass certificate validation for TLS bridging in this target pool. This option is insecure and can only be used with public CAs by setting enabled true. Meant to be used for testing purposes only! */
+  skipCertificateValidation?: boolean;
+}
+export const TlsConfig = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    customCa: S.optional(S.String),
+    enabled: S.optional(S.Boolean),
+    skipCertificateValidation: S.optional(S.Boolean),
+  }),
+).annotate({ identifier: "TlsConfig" }) as any as S.Schema<TlsConfig>;
+
+/** Options for the HTTP health checking. */
+export interface HttpHealthChecks {
+  /** List of HTTP status codes that indicate a healthy response */
+  okStatuses?: HttpHealthChecksOkStatusesList;
+  /** Path to send the health check request to */
+  path?: string;
+  tls?: TlsConfig;
+}
+export const HttpHealthChecks = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    okStatuses: S.optional(HttpHealthChecksOkStatusesList),
+    path: S.optional(S.String),
+    tls: S.optional(TlsConfig),
+  }),
+).annotate({
+  identifier: "HttpHealthChecks",
+}) as any as S.Schema<HttpHealthChecks>;
+
+/** Set this to customize active health checks for targets in this pool. */
+export interface ActiveHealthCheck {
+  /** Overrides the default port used for health check probes. */
+  altPort?: number;
+  /** Healthy threshold of the health checking */
+  healthyThreshold?: number;
+  httpHealthChecks?: HttpHealthChecks;
+  /** Interval duration of health checking in seconds */
+  interval?: string;
+  /** Interval duration threshold of the health checking in seconds */
+  intervalJitter?: string;
+  /** Active health checking timeout duration in seconds */
+  timeout?: string;
+  /** Unhealthy threshold of the health checking */
+  unhealthyThreshold?: number;
+}
+export const ActiveHealthCheck = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    altPort: S.optional(S.Number),
+    healthyThreshold: S.optional(S.Number),
+    httpHealthChecks: S.optional(HttpHealthChecks),
+    interval: S.optional(S.String),
+    intervalJitter: S.optional(S.String),
+    timeout: S.optional(S.String),
+    unhealthyThreshold: S.optional(S.Number),
+  }),
+).annotate({
+  identifier: "ActiveHealthCheck",
+}) as any as S.Schema<ActiveHealthCheck>;
+
+export interface Target {
+  /** Target display name. */
+  displayName?: string;
+  /** Private target IP, which must by unique within a target pool. */
+  ip?: string;
+}
+export const Target = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    displayName: S.optional(S.String),
+    ip: S.optional(S.String),
+  }),
+).annotate({ identifier: "Target" }) as any as S.Schema<Target>;
+
+/** List of all targets which will be used in the pool. Limited to 250. */
+export type TargetPoolTargetsList = Array<Target>;
+export const TargetPoolTargetsList = /*@__PURE__*/ S.Array(
+  Target,
+) as any as S.Schema<TargetPoolTargetsList>;
+
+export interface TargetPool {
+  activeHealthCheck?: ActiveHealthCheck;
+  /** Target pool name */
+  name?: string;
+  /** The number identifying the port where each target listens for traffic. */
+  targetPort?: number;
+  /** List of all targets which will be used in the pool. Limited to 250. */
+  targets?: TargetPoolTargetsList;
+  tlsConfig?: TlsConfig;
+}
+export const TargetPool = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    activeHealthCheck: S.optional(ActiveHealthCheck),
+    name: S.optional(S.String),
+    targetPort: S.optional(S.Number),
+    targets: S.optional(TargetPoolTargetsList),
+    tlsConfig: S.optional(TlsConfig),
+  }),
+).annotate({ identifier: "TargetPool" }) as any as S.Schema<TargetPool>;
+
+/** List of all target pools which will be used in the Application Load Balancer. Limited to 20. */
+export type CreateLoadBalancerRequestTargetPoolsList = Array<TargetPool>;
+export const CreateLoadBalancerRequestTargetPoolsList = /*@__PURE__*/ S.Array(
+  TargetPool,
+) as any as S.Schema<CreateLoadBalancerRequestTargetPoolsList>;
+
+export interface CreateLoadBalancerRequest {
+  projectId: string;
+  region: string;
+  /** Disable target security group assignemt to allow targets outside of the given network. Connectivity to targets need to be ensured by the customer, including routing and Security Groups (targetSecurityGroup can be assigned). Not changeable after creation. */
+  disableTargetSecurityGroupAssignment?: boolean;
+  /** The external IP address where this Application Load Balancer is exposed. Not changeable after creation. */
+  externalAddress?: string;
+  /** Labels represent user-defined metadata as key-value pairs. Label count should not exceed 64 per ALB. **Key Formatting Rules:** Length: 1-63 characters. Characters: Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. Keys starting with 'stackit-' are system-reserved; users MUST NOT manage them. **Value Formatting Rules:** Length: 0-63 characters (empty string explicitly allowed). Characters (for non-empty values): Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. */
+  labels?: CreateLoadBalancerRequestLabelsMap;
+  /** There is a maximum listener count of 20. */
+  listeners?: CreateLoadBalancerRequestListenersList;
+  /** Application Load Balancer name. Not changeable after creation. */
+  name?: string;
+  /** List of networks that listeners and targets reside in. Currently limited to one. Not changeable after creation. */
+  networks?: CreateLoadBalancerRequestNetworksList;
+  options?: LoadBalancerOptions;
+  /** Service Plan configures the size of the Application Load Balancer. Currently supported plan is p10. This list can change in the future where plan ids will be removed and new plans by added. That is the reason this is not an enum. */
+  planId?: string;
+  /** List of all target pools which will be used in the Application Load Balancer. Limited to 20. */
+  targetPools?: CreateLoadBalancerRequestTargetPoolsList;
+}
+export const CreateLoadBalancerRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    disableTargetSecurityGroupAssignment: S.optional(S.Boolean),
+    externalAddress: S.optional(S.String),
+    labels: S.optional(CreateLoadBalancerRequestLabelsMap),
+    listeners: S.optional(CreateLoadBalancerRequestListenersList),
+    name: S.optional(S.String),
+    networks: S.optional(CreateLoadBalancerRequestNetworksList),
+    options: S.optional(LoadBalancerOptions),
+    planId: S.optional(S.String),
+    targetPools: S.optional(CreateLoadBalancerRequestTargetPoolsList),
+  }).pipe(
+    T.Http({
+      method: "POST",
+      uri: "/v2/projects/{projectId}/regions/{region}/load-balancers",
+      code: 200,
+      baseUrl: "https://alb.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "CreateLoadBalancerRequest",
+}) as any as S.Schema<CreateLoadBalancerRequest>;
+
+/** The error type specifies which part of the Application Load Balancer encountered the error. I.e. the API will not check if a provided public IP is actually available in the project. Instead the Application Load Balancer with try to use the provided IP and if not available reports TYPE_FIP_NOT_CONFIGURED error. */
+export type LoadBalancerErrorType =
+  | "TYPE_UNSPECIFIED"
+  | "TYPE_INTERNAL"
+  | "TYPE_QUOTA_SECGROUP_EXCEEDED"
+  | "TYPE_QUOTA_SECGROUPRULE_EXCEEDED"
+  | "TYPE_PORT_NOT_CONFIGURED"
+  | "TYPE_FIP_NOT_CONFIGURED"
+  | "TYPE_TARGET_NOT_ACTIVE"
+  | "TYPE_METRICS_MISCONFIGURED"
+  | "TYPE_LOGS_MISCONFIGURED"
+  | "TYPE_FIP_NOT_FOUND"
+  | "TYPE_IP_EXHAUSTED"
+  | "TYPE_DNS_NOT_CONFIGURED"
+  | "TYPE_VM_PORT_NOT_CONFIGURED";
+export const LoadBalancerErrorType = /*@__PURE__*/ S.String;
+
+export interface LoadBalancerError {
+  /** The error description contains additional helpful user information to fix the error state of the Application Load Balancer. For example the IP 45.135.247.139 does not exist in the project, then the description will report: Floating IP "45.135.247.139" could not be found. */
+  description?: string;
+  /** The error type specifies which part of the Application Load Balancer encountered the error. I.e. the API will not check if a provided public IP is actually available in the project. Instead the Application Load Balancer with try to use the provided IP and if not available reports TYPE_FIP_NOT_CONFIGURED error. */
+  type?: LoadBalancerErrorType;
+}
+export const LoadBalancerError = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    description: S.optional(S.String),
+    type: S.optional(LoadBalancerErrorType),
+  }),
+).annotate({
+  identifier: "LoadBalancerError",
+}) as any as S.Schema<LoadBalancerError>;
+
+/** Reports all errors a Application Load Balancer has. */
+export type LoadBalancerErrorsList = Array<LoadBalancerError>;
+export const LoadBalancerErrorsList = /*@__PURE__*/ S.Array(
+  LoadBalancerError,
+) as any as S.Schema<LoadBalancerErrorsList>;
+
+/** Labels represent user-defined metadata as key-value pairs. Label count should not exceed 64 per ALB. **Key Formatting Rules:** Length: 1-63 characters. Characters: Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. Keys starting with 'stackit-' are system-reserved; users MUST NOT manage them. **Value Formatting Rules:** Length: 0-63 characters (empty string explicitly allowed). Characters (for non-empty values): Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. */
+export type LoadBalancerLabelsMap = { [key: string]: string | undefined };
+export const LoadBalancerLabelsMap = /*@__PURE__*/ S.Record(
+  S.String,
+  S.String,
+) as any as S.Schema<LoadBalancerLabelsMap>;
+
+/** There is a maximum listener count of 20. */
+export type LoadBalancerListenersList = Array<Listener>;
+export const LoadBalancerListenersList = /*@__PURE__*/ S.Array(
+  Listener,
+) as any as S.Schema<LoadBalancerListenersList>;
+
+export interface SecurityGroup {
+  /** ID of the security Group */
+  id?: string;
+  /** Name of the security Group */
+  name?: string;
+}
+export const SecurityGroup = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    id: S.optional(S.String),
+    name: S.optional(S.String),
+  }),
+).annotate({ identifier: "SecurityGroup" }) as any as S.Schema<SecurityGroup>;
+
+/** List of networks that listeners and targets reside in. Currently limited to one. Not changeable after creation. */
+export type LoadBalancerNetworksList = Array<Network>;
+export const LoadBalancerNetworksList = /*@__PURE__*/ S.Array(
+  Network,
+) as any as S.Schema<LoadBalancerNetworksList>;
+
+export type LoadBalancerStatus =
+  | "STATUS_UNSPECIFIED"
+  | "STATUS_PENDING"
+  | "STATUS_READY"
+  | "STATUS_ERROR"
+  | "STATUS_TERMINATING";
+export const LoadBalancerStatus = /*@__PURE__*/ S.String;
+
+/** List of all target pools which will be used in the Application Load Balancer. Limited to 20. */
+export type LoadBalancerTargetPoolsList = Array<TargetPool>;
+export const LoadBalancerTargetPoolsList = /*@__PURE__*/ S.Array(
+  TargetPool,
+) as any as S.Schema<LoadBalancerTargetPoolsList>;
+
+export interface LoadBalancer {
+  /** Disable target security group assignemt to allow targets outside of the given network. Connectivity to targets need to be ensured by the customer, including routing and Security Groups (targetSecurityGroup can be assigned). Not changeable after creation. */
+  disableTargetSecurityGroupAssignment?: boolean;
+  /** Reports all errors a Application Load Balancer has. */
+  errors?: LoadBalancerErrorsList;
+  /** The external IP address where this Application Load Balancer is exposed. Not changeable after creation. */
+  externalAddress?: string;
+  /** Labels represent user-defined metadata as key-value pairs. Label count should not exceed 64 per ALB. **Key Formatting Rules:** Length: 1-63 characters. Characters: Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. Keys starting with 'stackit-' are system-reserved; users MUST NOT manage them. **Value Formatting Rules:** Length: 0-63 characters (empty string explicitly allowed). Characters (for non-empty values): Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. */
+  labels?: LoadBalancerLabelsMap;
+  /** There is a maximum listener count of 20. */
+  listeners?: LoadBalancerListenersList;
+  /** Security Group permitting network traffic from the LoadBalancer to the targets. Useful when disableTargetSecurityGroupAssignment=true to manually assign target security groups to targets. */
+  loadBalancerSecurityGroup?: SecurityGroup;
+  /** Application Load Balancer name. Not changeable after creation. */
+  name?: string;
+  /** List of networks that listeners and targets reside in. Currently limited to one. Not changeable after creation. */
+  networks?: LoadBalancerNetworksList;
+  options?: LoadBalancerOptions;
+  /** Service Plan configures the size of the Application Load Balancer. Currently supported plan is p10. This list can change in the future where plan ids will be removed and new plans by added. That is the reason this is not an enum. */
+  planId?: string;
+  /** Transient private Application Load Balancer IP address that can change any time. */
+  privateAddress?: string;
+  /** Region of the LoadBalancer. */
+  region?: string;
+  status?: LoadBalancerStatus;
+  /** List of all target pools which will be used in the Application Load Balancer. Limited to 20. */
+  targetPools?: LoadBalancerTargetPoolsList;
+  /** Security Group that allows the targets to receive traffic from the LoadBalancer. Useful when disableTargetSecurityGroupAssignment=true to manually assign target security groups to targets. */
+  targetSecurityGroup?: SecurityGroup;
+  /** Application Load Balancer resource version. Must be empty or unset for creating Application Load Balancers, non-empty for updating. Semantics: While retrieving, this is the current version of this Application Load Balancer resource that changes during updates. On updates this field specified the Application Load Balancer version you calculated your update for instead of the future version to enable concurrency safe updates. Update calls will then report the new version in their result as you would see with a Application Load Balancer retrieval call later. There exist no total order of the version, so you can only compare it for equality, but not for less/greater than another version. Since the creation of Application Load Balancer is always intended to create the first version of it, there should be no existing version. That's why this field must by empty of not present in that case. */
+  version?: string;
+}
+export const LoadBalancer = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    disableTargetSecurityGroupAssignment: S.optional(S.Boolean),
+    errors: S.optional(LoadBalancerErrorsList),
+    externalAddress: S.optional(S.String),
+    labels: S.optional(LoadBalancerLabelsMap),
+    listeners: S.optional(LoadBalancerListenersList),
+    loadBalancerSecurityGroup: S.optional(SecurityGroup),
+    name: S.optional(S.String),
+    networks: S.optional(LoadBalancerNetworksList),
+    options: S.optional(LoadBalancerOptions),
+    planId: S.optional(S.String),
+    privateAddress: S.optional(S.String),
+    region: S.optional(S.String),
+    status: S.optional(LoadBalancerStatus),
+    targetPools: S.optional(LoadBalancerTargetPoolsList),
+    targetSecurityGroup: S.optional(SecurityGroup),
+    version: S.optional(S.String),
+  }),
+).annotate({ identifier: "LoadBalancer" }) as any as S.Schema<LoadBalancer>;
+
+export interface DeleteCredentialsRequest {
+  projectId: string;
+  region: string;
+  credentialsRef: string;
+}
+export const DeleteCredentialsRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    credentialsRef: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v2/projects/{projectId}/regions/{region}/credentials/{credentialsRef}",
+      code: 200,
+      baseUrl: "https://alb.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DeleteCredentialsRequest",
+}) as any as S.Schema<DeleteCredentialsRequest>;
+
+export type DeleteCredentialsResponse2 = unknown;
+export const DeleteCredentialsResponse2 = /*@__PURE__*/ S.suspend(() =>
+  S.Unknown.pipe(T.RawResponseRoot()),
+).annotate({
+  identifier: "DeleteCredentialsResponse2",
+}) as any as S.Schema<DeleteCredentialsResponse2>;
+
+export interface DeleteLoadBalancerRequest {
+  projectId: string;
+  region: string;
+  name: string;
+}
+export const DeleteLoadBalancerRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "DELETE",
+      uri: "/v2/projects/{projectId}/regions/{region}/load-balancers/{name}",
+      code: 200,
+      baseUrl: "https://alb.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "DeleteLoadBalancerRequest",
+}) as any as S.Schema<DeleteLoadBalancerRequest>;
+
+export type DeleteLoadBalancerResponse2 = unknown;
+export const DeleteLoadBalancerResponse2 = /*@__PURE__*/ S.suspend(() =>
+  S.Unknown.pipe(T.RawResponseRoot()),
+).annotate({
+  identifier: "DeleteLoadBalancerResponse2",
+}) as any as S.Schema<DeleteLoadBalancerResponse2>;
+
+export interface GetCredentialsRequest {
+  projectId: string;
+  region: string;
+  credentialsRef: string;
+}
+export const GetCredentialsRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    credentialsRef: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/projects/{projectId}/regions/{region}/credentials/{credentialsRef}",
+      code: 200,
+      baseUrl: "https://alb.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "GetCredentialsRequest",
+}) as any as S.Schema<GetCredentialsRequest>;
+
+export interface GetCredentialsResponse {
+  credential?: CredentialsResponse;
+}
+export const GetCredentialsResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    credential: S.optional(CredentialsResponse),
+  }),
+).annotate({
+  identifier: "GetCredentialsResponse",
+}) as any as S.Schema<GetCredentialsResponse>;
+
+export interface GetLoadBalancerRequest {
+  projectId: string;
+  region: string;
+  name: string;
+}
+export const GetLoadBalancerRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/projects/{projectId}/regions/{region}/load-balancers/{name}",
+      code: 200,
+      baseUrl: "https://alb.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "GetLoadBalancerRequest",
+}) as any as S.Schema<GetLoadBalancerRequest>;
+
+export interface GetQuotaRequest {
+  projectId: string;
+  region: string;
+}
+export const GetQuotaRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/projects/{projectId}/regions/{region}/quota",
+      code: 200,
+      baseUrl: "https://alb.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "GetQuotaRequest",
+}) as any as S.Schema<GetQuotaRequest>;
+
+export interface GetQuotaResponse {
+  /** The maximum number of observability credentials that can be stored in this project. */
+  maxCredentials?: number;
+  /** The maximum number of load balancing servers in this project. */
+  maxLoadBalancers?: number;
+  /** Project identifier */
+  projectId?: string;
+  /** Region */
+  region?: string;
+  /** The number of observability credentials that are currently existing in this project. */
+  usedCredentials?: number;
+  /** The number of load balancing servers that are currently existing in this project. */
+  usedLoadBalancers?: number;
+}
+export const GetQuotaResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    maxCredentials: S.optional(S.Number),
+    maxLoadBalancers: S.optional(S.Number),
+    projectId: S.optional(S.String),
+    region: S.optional(S.String),
+    usedCredentials: S.optional(S.Number),
+    usedLoadBalancers: S.optional(S.Number),
+  }),
+).annotate({
+  identifier: "GetQuotaResponse",
+}) as any as S.Schema<GetQuotaResponse>;
+
+export interface ListCredentialsRequest {
+  projectId: string;
+  region: string;
+}
+export const ListCredentialsRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/projects/{projectId}/regions/{region}/credentials",
+      code: 200,
+      baseUrl: "https://alb.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListCredentialsRequest",
+}) as any as S.Schema<ListCredentialsRequest>;
+
+export type ListCredentialsResponseCredentialsList = Array<CredentialsResponse>;
+export const ListCredentialsResponseCredentialsList = /*@__PURE__*/ S.Array(
+  CredentialsResponse,
+) as any as S.Schema<ListCredentialsResponseCredentialsList>;
+
+export interface ListCredentialsResponse {
+  credentials?: ListCredentialsResponseCredentialsList;
+}
+export const ListCredentialsResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    credentials: S.optional(ListCredentialsResponseCredentialsList),
+  }),
+).annotate({
+  identifier: "ListCredentialsResponse",
+}) as any as S.Schema<ListCredentialsResponse>;
+
+export interface ListLoadBalancersRequest {
+  projectId: string;
+  region: string;
+  /** page_size specifies how many Application Load Balancers should be returned on this page. Must be a positive number <= 1000 */
+  pageSize?: string;
+  /** page_id is a page identifier returned by the previous response and is used to request the next page */
+  pageId?: string;
+}
+export const ListLoadBalancersRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    pageSize: S.optional(S.String.pipe(T.Query())),
+    pageId: S.optional(S.String.pipe(T.Query())),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/projects/{projectId}/regions/{region}/load-balancers",
+      code: 200,
+      baseUrl: "https://alb.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListLoadBalancersRequest",
+}) as any as S.Schema<ListLoadBalancersRequest>;
+
+export type ListLoadBalancersResponseLoadBalancersList = Array<LoadBalancer>;
+export const ListLoadBalancersResponseLoadBalancersList = /*@__PURE__*/ S.Array(
+  LoadBalancer,
+) as any as S.Schema<ListLoadBalancersResponseLoadBalancersList>;
+
+export interface ListLoadBalancersResponse {
+  loadBalancers?: ListLoadBalancersResponseLoadBalancersList;
+  /** Continue token from the ListLoadBalancerResponse with Limit option */
+  nextPageId?: string;
+}
+export const ListLoadBalancersResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    loadBalancers: S.optional(ListLoadBalancersResponseLoadBalancersList),
+    nextPageId: S.optional(S.String),
+  }),
+).annotate({
+  identifier: "ListLoadBalancersResponse",
+}) as any as S.Schema<ListLoadBalancersResponse>;
+
+export interface ListPlansRequest {
+  region: string;
+}
+export const ListPlansRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    region: S.String.pipe(T.Label()),
+  }).pipe(
+    T.Http({
+      method: "GET",
+      uri: "/v2/regions/{region}/plans",
+      code: 200,
+      baseUrl: "https://alb.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "ListPlansRequest",
+}) as any as S.Schema<ListPlansRequest>;
+
+export interface PlanDetails {
+  /** Description */
+  description?: string;
+  /** Flavor Name */
+  flavorName?: string;
+  /** Maximum number of concurrent connections per Application Load Balancer VM instance. */
+  maxConnections?: number;
+  /** Service Plan Name */
+  name?: string;
+  /** Service Plan Identifier */
+  planId?: string;
+  /** Region this Plan is available in */
+  region?: string;
+}
+export const PlanDetails = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    description: S.optional(S.String),
+    flavorName: S.optional(S.String),
+    maxConnections: S.optional(S.Number),
+    name: S.optional(S.String),
+    planId: S.optional(S.String),
+    region: S.optional(S.String),
+  }),
+).annotate({ identifier: "PlanDetails" }) as any as S.Schema<PlanDetails>;
+
+/** List of available service plans. */
+export type ListPlansResponseValidPlansList = Array<PlanDetails>;
+export const ListPlansResponseValidPlansList = /*@__PURE__*/ S.Array(
+  PlanDetails,
+) as any as S.Schema<ListPlansResponseValidPlansList>;
+
+export interface ListPlansResponse {
+  /** List of available service plans. */
+  validPlans?: ListPlansResponseValidPlansList;
+}
+export const ListPlansResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    validPlans: S.optional(ListPlansResponseValidPlansList),
+  }),
+).annotate({
+  identifier: "ListPlansResponse",
+}) as any as S.Schema<ListPlansResponse>;
+
+export interface UpdateCredentialsRequest {
+  projectId: string;
+  region: string;
+  credentialsRef: string;
+  /** Credential name */
+  displayName?: string;
+  /** A valid password used for an existing STACKIT Observability instance, which is used during basic auth. */
+  password?: string | Redacted.Redacted<string>;
+  /** A valid username used for an existing STACKIT Observability instance, which is used during basic auth. */
+  username?: string;
+}
+export const UpdateCredentialsRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    credentialsRef: S.String.pipe(T.Label()),
+    displayName: S.optional(S.String),
+    password: S.optional(S.String.pipe(T.SensitiveValue({}))),
+    username: S.optional(S.String),
+  }).pipe(
+    T.Http({
+      method: "PUT",
+      uri: "/v2/projects/{projectId}/regions/{region}/credentials/{credentialsRef}",
+      code: 200,
+      baseUrl: "https://alb.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "UpdateCredentialsRequest",
+}) as any as S.Schema<UpdateCredentialsRequest>;
+
+export interface UpdateCredentialsResponse {
+  credential?: CredentialsResponse;
+}
+export const UpdateCredentialsResponse = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    credential: S.optional(CredentialsResponse),
+  }),
+).annotate({
+  identifier: "UpdateCredentialsResponse",
+}) as any as S.Schema<UpdateCredentialsResponse>;
+
+/** Labels represent user-defined metadata as key-value pairs. Label count should not exceed 64 per ALB. **Key Formatting Rules:** Length: 1-63 characters. Characters: Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. Keys starting with 'stackit-' are system-reserved; users MUST NOT manage them. **Value Formatting Rules:** Length: 0-63 characters (empty string explicitly allowed). Characters (for non-empty values): Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. */
+export type UpdateLoadBalancerRequestLabelsMap = {
+  [key: string]: string | undefined;
+};
+export const UpdateLoadBalancerRequestLabelsMap = /*@__PURE__*/ S.Record(
+  S.String,
+  S.String,
+) as any as S.Schema<UpdateLoadBalancerRequestLabelsMap>;
+
+/** There is a maximum listener count of 20. */
+export type UpdateLoadBalancerRequestListenersList = Array<Listener>;
+export const UpdateLoadBalancerRequestListenersList = /*@__PURE__*/ S.Array(
+  Listener,
+) as any as S.Schema<UpdateLoadBalancerRequestListenersList>;
+
+/** List of networks that listeners and targets reside in. Currently limited to one. Not changeable after creation. */
+export type UpdateLoadBalancerRequestNetworksList = Array<Network>;
+export const UpdateLoadBalancerRequestNetworksList = /*@__PURE__*/ S.Array(
+  Network,
+) as any as S.Schema<UpdateLoadBalancerRequestNetworksList>;
+
+/** List of all target pools which will be used in the Application Load Balancer. Limited to 20. */
+export type UpdateLoadBalancerRequestTargetPoolsList = Array<TargetPool>;
+export const UpdateLoadBalancerRequestTargetPoolsList = /*@__PURE__*/ S.Array(
+  TargetPool,
+) as any as S.Schema<UpdateLoadBalancerRequestTargetPoolsList>;
+
+export interface UpdateLoadBalancerRequest {
+  projectId: string;
+  region: string;
+  name: string;
+  /** Disable target security group assignemt to allow targets outside of the given network. Connectivity to targets need to be ensured by the customer, including routing and Security Groups (targetSecurityGroup can be assigned). Not changeable after creation. */
+  disableTargetSecurityGroupAssignment?: boolean;
+  /** The external IP address where this Application Load Balancer is exposed. Not changeable after creation. */
+  externalAddress?: string;
+  /** Labels represent user-defined metadata as key-value pairs. Label count should not exceed 64 per ALB. **Key Formatting Rules:** Length: 1-63 characters. Characters: Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. Keys starting with 'stackit-' are system-reserved; users MUST NOT manage them. **Value Formatting Rules:** Length: 0-63 characters (empty string explicitly allowed). Characters (for non-empty values): Must begin and end with [a-zA-Z0-9]. May contain dashes (-), underscores (_), dots (.), and alphanumerics in between. */
+  labels?: UpdateLoadBalancerRequestLabelsMap;
+  /** There is a maximum listener count of 20. */
+  listeners?: UpdateLoadBalancerRequestListenersList;
+  /** List of networks that listeners and targets reside in. Currently limited to one. Not changeable after creation. */
+  networks?: UpdateLoadBalancerRequestNetworksList;
+  options?: LoadBalancerOptions;
+  /** Service Plan configures the size of the Application Load Balancer. Currently supported plan is p10. This list can change in the future where plan ids will be removed and new plans by added. That is the reason this is not an enum. */
+  planId?: string;
+  /** List of all target pools which will be used in the Application Load Balancer. Limited to 20. */
+  targetPools?: UpdateLoadBalancerRequestTargetPoolsList;
+  /** Application Load Balancer resource version. Must be empty or unset for creating Application Load Balancers, non-empty for updating. Semantics: While retrieving, this is the current version of this Application Load Balancer resource that changes during updates. On updates this field specified the Application Load Balancer version you calculated your update for instead of the future version to enable concurrency safe updates. Update calls will then report the new version in their result as you would see with a Application Load Balancer retrieval call later. There exist no total order of the version, so you can only compare it for equality, but not for less/greater than another version. Since the creation of Application Load Balancer is always intended to create the first version of it, there should be no existing version. That's why this field must by empty of not present in that case. */
+  version?: string;
+}
+export const UpdateLoadBalancerRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+    disableTargetSecurityGroupAssignment: S.optional(S.Boolean),
+    externalAddress: S.optional(S.String),
+    labels: S.optional(UpdateLoadBalancerRequestLabelsMap),
+    listeners: S.optional(UpdateLoadBalancerRequestListenersList),
+    networks: S.optional(UpdateLoadBalancerRequestNetworksList),
+    options: S.optional(LoadBalancerOptions),
+    planId: S.optional(S.String),
+    targetPools: S.optional(UpdateLoadBalancerRequestTargetPoolsList),
+    version: S.optional(S.String),
+  }).pipe(
+    T.Http({
+      method: "PUT",
+      uri: "/v2/projects/{projectId}/regions/{region}/load-balancers/{name}",
+      code: 200,
+      baseUrl: "https://alb.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "UpdateLoadBalancerRequest",
+}) as any as S.Schema<UpdateLoadBalancerRequest>;
+
+/** List of all targets which will be used in the pool. Limited to 250. */
+export type UpdateTargetPoolRequestTargetsList = Array<Target>;
+export const UpdateTargetPoolRequestTargetsList = /*@__PURE__*/ S.Array(
+  Target,
+) as any as S.Schema<UpdateTargetPoolRequestTargetsList>;
+
+export interface UpdateTargetPoolRequest {
+  projectId: string;
+  region: string;
+  name: string;
+  targetPoolName: string;
+  activeHealthCheck?: ActiveHealthCheck;
+  /** The number identifying the port where each target listens for traffic. */
+  targetPort?: number;
+  /** List of all targets which will be used in the pool. Limited to 250. */
+  targets?: UpdateTargetPoolRequestTargetsList;
+  tlsConfig?: TlsConfig;
+}
+export const UpdateTargetPoolRequest = /*@__PURE__*/ S.suspend(() =>
+  S.Struct({
+    projectId: S.String.pipe(T.Label()),
+    region: S.String.pipe(T.Label()),
+    name: S.String.pipe(T.Label()),
+    targetPoolName: S.String.pipe(T.Label()),
+    activeHealthCheck: S.optional(ActiveHealthCheck),
+    targetPort: S.optional(S.Number),
+    targets: S.optional(UpdateTargetPoolRequestTargetsList),
+    tlsConfig: S.optional(TlsConfig),
+  }).pipe(
+    T.Http({
+      method: "PUT",
+      uri: "/v2/projects/{projectId}/regions/{region}/load-balancers/{name}/target-pools/{targetPoolName}",
+      code: 200,
+      baseUrl: "https://alb.api.stackit.cloud",
+    }),
+  ),
+).annotate({
+  identifier: "UpdateTargetPoolRequest",
+}) as any as S.Schema<UpdateTargetPoolRequest>;
+
+export type CreateCredentialsError = BadRequest | Forbidden | StackitOpError;
+/** Create credentials for observability of the Application Load Balancer Created credentials can be stored and used for the load balancer observability. For example, when using STACKIT Observability, credentials first must be created for that STACKIT Observability instance (by using their API or the STACKIT Portal) and then can be provided to the load balancer by storing them with this endpoint. */
+export const createCredentials: API.OperationMethod<
+  CreateCredentialsRequest,
+  CreateCredentialsResponse,
+  CreateCredentialsError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: CreateCredentialsRequest,
+  output: CreateCredentialsResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type CreateLoadBalancerError =
+  | BadRequest
+  | Forbidden
+  | Conflict
+  | StackitOpError;
+/** Create an Application Load Balancer in a project Creates an Application Load Balancer. The default load balancing algorithm is Maglev, and selecting a different algorithm is currently not supported. */
+export const createLoadBalancer: API.OperationMethod<
+  CreateLoadBalancerRequest,
+  LoadBalancer,
+  CreateLoadBalancerError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: CreateLoadBalancerRequest,
+  output: LoadBalancer,
+  errors: [BadRequest, Forbidden, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DeleteCredentialsError = BadRequest | Forbidden | StackitOpError;
+/** Delete a single credential in a project. Deletes the stored Observability credentials. */
+export const deleteCredentials: API.OperationMethod<
+  DeleteCredentialsRequest,
+  DeleteCredentialsResponse2,
+  DeleteCredentialsError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DeleteCredentialsRequest,
+  output: DeleteCredentialsResponse2,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type DeleteLoadBalancerError = BadRequest | Forbidden | StackitOpError;
+/** Delete a given load balancer in a project. Deletes the specified Application Load Balancer. */
+export const deleteLoadBalancer: API.OperationMethod<
+  DeleteLoadBalancerRequest,
+  DeleteLoadBalancerResponse2,
+  DeleteLoadBalancerError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: DeleteLoadBalancerRequest,
+  output: DeleteLoadBalancerResponse2,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetCredentialsError =
+  | BadRequest
+  | Forbidden
+  | NotFound
+  | StackitOpError;
+/** Get a single credential reference in a project. Gets the stored Observability credentials. */
+export const getCredentials: API.OperationMethod<
+  GetCredentialsRequest,
+  GetCredentialsResponse,
+  GetCredentialsError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetCredentialsRequest,
+  output: GetCredentialsResponse,
+  errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetLoadBalancerError =
+  | BadRequest
+  | Forbidden
+  | NotFound
+  | StackitOpError;
+/** Get a single Application Load Balancer in a project. Retrieves details of a specific Application Load Balancer in a project. Includes creation and update information, current status, and any error descriptions. */
+export const getLoadBalancer: API.OperationMethod<
+  GetLoadBalancerRequest,
+  LoadBalancer,
+  GetLoadBalancerError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetLoadBalancerRequest,
+  output: LoadBalancer,
+  errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type GetQuotaError = BadRequest | Forbidden | StackitOpError;
+/** Get the quota of Application Load Balancers in a project. Retrieves the configured Application Load Balancer quota for the project. Limit can be changed via service request. */
+export const getQuota: API.OperationMethod<
+  GetQuotaRequest,
+  GetQuotaResponse,
+  GetQuotaError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: GetQuotaRequest,
+  output: GetQuotaResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListCredentialsError = BadRequest | Forbidden | StackitOpError;
+/** List all credentials in a project. Lists the stored Observability credentials. */
+export const listCredentials: API.OperationMethod<
+  ListCredentialsRequest,
+  ListCredentialsResponse,
+  ListCredentialsError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListCredentialsRequest,
+  output: ListCredentialsResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListLoadBalancersError = BadRequest | Forbidden | StackitOpError;
+/** List Application Load Balancers in a project. Lists all Application Load Balancers in a project. Includes details from creation or updates, along with their status and any error descriptions. */
+export const listLoadBalancers: API.OperationMethod<
+  ListLoadBalancersRequest,
+  ListLoadBalancersResponse,
+  ListLoadBalancersError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListLoadBalancersRequest,
+  output: ListLoadBalancersResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type ListPlansError = BadRequest | Forbidden | StackitOpError;
+/** List available service plans. Lists the configured service plans for a project. */
+export const listPlans: API.OperationMethod<
+  ListPlansRequest,
+  ListPlansResponse,
+  ListPlansError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: ListPlansRequest,
+  output: ListPlansResponse,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type UpdateCredentialsError =
+  | BadRequest
+  | Forbidden
+  | NotFound
+  | StackitOpError;
+/** Update credentials for observability in a project. Updates the stored Observability credentials. */
+export const updateCredentials: API.OperationMethod<
+  UpdateCredentialsRequest,
+  UpdateCredentialsResponse,
+  UpdateCredentialsError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: UpdateCredentialsRequest,
+  output: UpdateCredentialsResponse,
+  errors: [BadRequest, Forbidden, NotFound, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type UpdateLoadBalancerError =
+  | BadRequest
+  | Forbidden
+  | Conflict
+  | StackitOpError;
+/** Update a load balancer in a project. Updates an existing Application Load Balancer by modifying its listeners and target pools. Ensure the resource version is current to maintain concurrency safety. The default load balancing algorithm is Maglev, and selecting a different algorithm is currently not supported. */
+export const updateLoadBalancer: API.OperationMethod<
+  UpdateLoadBalancerRequest,
+  LoadBalancer,
+  UpdateLoadBalancerError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: UpdateLoadBalancerRequest,
+  output: LoadBalancer,
+  errors: [BadRequest, Forbidden, Conflict, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));
+
+export type UpdateTargetPoolError = BadRequest | Forbidden | StackitOpError;
+/** Update a single target pool of a load balancer in a project. Replaces the content of a specific target pool in the Application Load Balancer (useful for adding or removing target servers). Only updates the specified target pool, leaving others unchanged. Cannot be used to create or rename target pools. */
+export const updateTargetPool: API.OperationMethod<
+  UpdateTargetPoolRequest,
+  TargetPool,
+  UpdateTargetPoolError,
+  StackitOpContext
+> = /*@__PURE__*/ API.make(() => ({
+  input: UpdateTargetPoolRequest,
+  output: TargetPool,
+  errors: [BadRequest, Forbidden, UnknownStackitError],
+  protocol: StackitProtocol,
+  retry: Retry.Retry,
+}));