@intentius/chant-lexicon-cpln 0.124.40 → 0.124.41

package/dist/okf/types/Secret.md

@@ -11,8 +11,8 @@ resource_type: Cpln::Core::Secret
 ## Properties
 
 - `name` (`string`, required)
-- `type` (`"aws" | "azure-connector" | "azure-sdk" | "dictionary" | "docker" | "ecr" | "gcp" | "keypair" | "nats-account" | "opaque" | "tls" | "userpass"`, required)
-- `data` (`SecretOpaque | SecretTls | string | SecretAwskey | Record<string, unknown> | SecretUserpass | SecretKeypair`, optional)
+- `type` (`"aws" | "azure-connector" | "azure-sdk" | "dictionary" | "docker" | "ecr" | "gcp" | "keypair" | "nats-account" | "opaque" | "tls" | "userpass"`, required): The kind of secret, which determines the shape of data
+- `data` (`SecretOpaque | SecretTls | string | SecretAwskey | Record<string, unknown> | SecretUserpass | SecretKeypair`, optional): The secret contents, shaped according to type
 - `description` (`string`, optional)
 - `tags` (`Record<string, string>`, optional)
 

package/dist/types/index.d.ts

@@ -94,7 +94,9 @@ export declare class Policy {
 export declare class Secret {
   constructor(props: {
     name: string;
+    /** The kind of secret, which determines the shape of data */
     type: "aws" | "azure-connector" | "azure-sdk" | "dictionary" | "docker" | "ecr" | "gcp" | "keypair" | "nats-account" | "opaque" | "tls" | "userpass";
+    /** The secret contents, shaped according to type */
     data?: SecretOpaque | SecretTls | string | SecretAwskey | Record<string, unknown> | SecretUserpass | SecretKeypair;
     description?: string;
     tags?: Record<string, string>;
@@ -658,40 +660,55 @@ export declare class QuerySpecTerms {
 
 export declare class SecretAwskey {
   constructor(props: {
+    /** AWS access key ID */
     accessKey?: string;
+    /** External ID for the role-assumption trust policy */
     externalId?: string;
+    /** Optional IAM role ARN to assume using the access key */
     roleArn?: string;
+    /** AWS secret access key */
     secretKey?: string;
   });
 }
 
 export declare class SecretKeypair {
   constructor(props: {
+    /** Passphrase protecting the private key */
     passphrase?: string;
+    /** Public key */
     publicKey?: string;
+    /** Private key */
     secretKey?: string;
   });
 }
 
 export declare class SecretOpaque {
   constructor(props: {
+    /** How payload is encoded */
     encoding?: "base64" | "plain";
+    /** The secret value */
     payload?: string;
   });
 }
 
 export declare class SecretTls {
   constructor(props: {
+    /** Certificate, PEM-encoded */
     cert?: string;
+    /** Certificate chain, PEM-encoded */
     chain?: string;
+    /** Private key, PEM-encoded */
     key?: string;
   });
 }
 
 export declare class SecretUserpass {
   constructor(props: {
+    /** Declared encoding of the username/password; not decoded (values are stored as provided) */
     encoding?: "base64" | "plain";
+    /** Password */
     password?: string;
+    /** Username */
     username?: string;
   });
 }
@@ -786,6 +803,8 @@ export declare class WorkloadSpec {
     containers?: WorkloadSpecContainers[];
     /** Set defaultOptions for the workload in all Control Plane Locations. */
     defaultOptions?: WorkloadSpecDefaultOptions;
+    /** Limits how many replicas voluntary disruptions (node drains, cluster autoscaler scale-down, node upgrades) can evict at once. Set either minAvailable or maxUnavailable. A minAvailable that would allow no evictions at the minScale of defaultOptions or any localOptions is rejected. Not supported for cron or vm workloads. When omitted, workloads with minScale 4 or more allow 20% of replicas to be unavailable. */
+    disruptionBudget?: WorkloadSpecDisruptionBudget;
     /** Additional Kubernetes customizations for BYOK */
     extras?: WorkloadSpecExtras;
     /** Optional control of inbound and outbound access to the workload for external (public) and internal (service to service) traffic. Access is restricted by default. */
@@ -804,7 +823,7 @@ export declare class WorkloadSpec {
     requestRetryPolicy?: WorkloadSpecRequestRetryPolicy;
     /** Configuration for how workload updates are rolled out */
     rolloutOptions?: WorkloadSpecRolloutOptions;
-    /** Dev-session configuration marking this stateful workload as a sandbox. */
+    /** Marks this workload as a sandbox and carries its settings. Two types: dev (a human devbox: browser IDE and terminal behind a Control Plane sign-in, the connect permission on the workload) and worker (an agent box: the devboxd API behind a token, hosting agent sessions, many per box). Both are stateful workloads with a home volume that scale to zero when idle and resume on the next request; when spec.type is omitted the server sets stateful. A sandbox is created in one call with just this section: when spec.containers is omitted the server injects the standard container for the profile (dev: build.cpln.io/public/sandbox-base:v1 with the browser IDE; worker: build.cpln.io/public/agentbox-base:v1 running devboxd; 1 CPU, 2 GiB), when a worker token is omitted the server generates it, and the server creates and owns the home volumeset <name>-state, mounted at /home/devuser and deleted with the sandbox. Size the box on spec.containers[0].cpu and memory (a container that omits them gets 1 CPU, 2 GiB). The firewall defaults open in both directions; the sign-in (dev) or the token (worker) is what gates access. Idle sandboxes scale to zero after scaleToZeroDelay (default 300 s) and run as a single replica. The URL is status.endpoint on the workload deployment: for dev the IDE at /_ide/, terminal at /_term/, your app at /; for worker the devboxd API. The server also stamps the tags cpln/sandbox, cpln/kata, cpln/kataPrivileged (privileged root inside the microVM, which is the isolation boundary), cpln/scaleToZero and, for dev, cpln/dev-type (read by cpln sandbox connect); do not set them yourself. Read a worker token back from this section after create. */
     sandbox?: WorkloadSpecSandbox;
     /** Security context for the workload */
     securityOptions?: WorkloadSpecSecurityOptions;
@@ -829,6 +848,8 @@ export declare class WorkloadSpecContainers {
     cpu?: string;
     /** Environment variables for the container at runtime. Default environment variables are also provided: CPLN_GVC, CPLN_LOCATION, CPLN_ORG, CPLN_PROVIDER, CPLN_WORKLOAD */
     env?: WorkloadSpecContainersEnv[];
+    /** Inject all key/value pairs of the referenced dictionary secrets as environment variables. An explicit spec.env variable overrides an envFrom key of the same name; later envFrom entries override earlier ones. Keys that are not valid environment variable names are skipped. */
+    envFrom?: WorkloadSpecContainersEnvFrom[];
     /** Reserved GPU resources for the workload. */
     gpu?: WorkloadSpecContainersGpu;
     /** The full image and tag path for a public or private docker registry. Private container images must have valid credentials configured in 'pullSecretLinks' on the GVC (Global Virtual Cloud). Required for all workload types except 'vm', which boots from spec.vm.bootDisk.source instead. */
@@ -869,6 +890,20 @@ export declare class WorkloadSpecContainersEnv {
   });
 }
 
+export declare class WorkloadSpecContainersEnvFrom {
+  constructor(props: {
+    /** References a dictionary secret whose key/value pairs are injected as environment variables */
+    secretRef?: WorkloadSpecContainersEnvFromSecretRef;
+  });
+}
+
+export declare class WorkloadSpecContainersEnvFromSecretRef {
+  constructor(props: {
+    /** Name of a dictionary (opaque key/value) secret whose keys are injected as environment variables */
+    name?: string;
+  });
+}
+
 export declare class WorkloadSpecContainersGpu {
   constructor(props: {
     /** Custom GPU resource specification for non-NVIDIA GPUs */
@@ -1282,6 +1317,15 @@ export declare class WorkloadSpecDefaultOptionsMultiZone {
   });
 }
 
+export declare class WorkloadSpecDisruptionBudget {
+  constructor(props: {
+    /** Maximum number or percentage of replicas that can be unavailable during voluntary disruptions such as node drains */
+    maxUnavailable?: string;
+    /** Minimum number or percentage of replicas that must stay available during voluntary disruptions such as node drains */
+    minAvailable?: string;
+  });
+}
+
 export declare class WorkloadSpecExtras {
   constructor(props: {
     /** Kubernetes pod affinity and anti-affinity rules */
@@ -1624,10 +1668,18 @@ export declare class WorkloadSpecLocalOptionsMultiZone {
 
 export declare class WorkloadSpecNetworking {
   constructor(props: {
-    /** When enabled, requests to <workload>.<gvc>.cpln.local from the same GVC fail over to the workload's canonical endpoint
-(the nearest healthy location) when no local replica can serve them. Cross-location traffic is billed as egress.
-Defaults to true for workloads created after this field was introduced; absent means disabled. */
-    interGvcFailover?: boolean;
+    /** Routing of internal (cpln.local) requests */
+    internal?: WorkloadSpecNetworkingInternal;
+  });
+}
+
+export declare class WorkloadSpecNetworkingInternal {
+  constructor(props: {
+    /** How requests to <workload>.<gvc>.cpln.local from the same GVC are routed.
+locationEndpoint: served only by replicas in the caller's location.
+gvcEndpoint: fail over to the workload's canonical endpoint (the nearest healthy location) when no local replica can serve them. Cross-location traffic is billed as egress.
+Defaults to gvcEndpoint for workloads created after this field was introduced; absent means locationEndpoint. */
+    routing?: "gvcEndpoint" | "locationEndpoint";
   });
 }
 
@@ -1648,6 +1700,8 @@ export declare class WorkloadSpecRolloutOptions {
     maxUnavailableReplicas?: string;
     /** The minimum number of seconds a container must run without crashing to be considered available */
     minReadySeconds?: number;
+    /** When true, replicas are rolled out whenever a secret or the identity referenced by the workload is modified */
+    rolloutOnReferenceChange?: boolean;
     /** Determines whether replicas are scaled in order (OrderedReady) or in parallel (Parallel) */
     scalingPolicy?: "OrderedReady" | "Parallel";
     /** The amount of time in seconds a workload has to gracefully terminate before forcefully terminating it.
@@ -1660,20 +1714,27 @@ export declare class WorkloadSpecSandbox {
   constructor(props: {
     /** The port the primary application inside the dev container listens on. The sandbox gateway proxies the endpoint root to it. */
     appPort?: number;
-    /** The IDE this sandbox is primarily connected with. */
+    /** dev type: the IDE the owner primarily connects with. Informational: clients use it to pick a default connect flow; the server does not act on it. */
     ide?: "browser" | "cursor" | "ssh" | "vscode";
-    /** Enables scale-to-zero: idle for this many seconds scales the sandbox to 0 and the next request wakes it. The workload autoscaling field alone cannot enable this (it always carries a default), so enablement lives here and is stamped as the cpln/scaleToZero tag. */
+    /** Deprecated and ignored: the browser IDE admits callers whose Control Plane token holds connect on this workload; no password exists. */
+    password?: string;
+    /** Idle seconds before the sandbox scales to zero; the next request to its endpoint wakes it (a suspended box resumes in place, so the request that claims a worker is also what wakes it). Every sandbox scales to zero (the overlay stamps cpln/scaleToZero and pins autoscaling to one replica); this sets how long it stays up idle. Default 300. */
     scaleToZeroDelay?: number;
-    /** The maximum lifetime of the sandbox. This string should contain a floating point number followed by either d, h, or m. For example, "10d" would delete the sandbox after 10 days. */
+    /** worker type: the bearer token that secures the devboxd HTTP API. Generated by the server when omitted on create and kept on later writes; set it to choose your own. Injected into the dev container as DEVBOXD_TOKEN. */
+    token?: string;
+    /** Deprecated and ignored: TTL enforcement moves to fleet-level tooling. */
     ttl?: string;
+    /** dev: a human sandbox - browser IDE and terminal served on the workload endpoint behind a Control Plane sign-in (connect permission on the workload; gateway port 8888, IDE at /_ide/, terminal at /_term/, your app at /). worker: an agent box - the devboxd HTTP API on port 49983 is the only listener, secured by the token, and the workload endpoint is that API; no IDE, no password; agents run in devboxd sessions on it, many per box. Both keep a home volume, scale to zero when idle and resume on the next request. */
+    type?: "dev" | "worker";
+    /** The home volume. The server creates and owns a shared-filesystem volumeset named <workload>-state and deletes it with the sandbox. */
     volume?: WorkloadSpecSandboxVolume;
   });
 }
 
 export declare class WorkloadSpecSandboxVolume {
   constructor(props: {
-    /** The size in GB of the volume backing the sandbox home directory. */
-    size?: number;
+    /** Initial size in GB of the home volumeset the server creates for this sandbox (mounted at /home/devuser). Immutable after create: resize the volumeset itself. */
+    initialCapacity?: number;
   });
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-cpln",
-  "version": "0.124.40",
+  "version": "0.124.41",
   "type": "module",
   "files": [
     "src/",
@@ -49,7 +49,7 @@
     "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.124.40"
+    "@intentius/chant": "^0.124.41"
   },
   "description": "Control Plane (cpln) lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",

package/src/generated/index.d.ts

@@ -94,7 +94,9 @@ export declare class Policy {
 export declare class Secret {
   constructor(props: {
     name: string;
+    /** The kind of secret, which determines the shape of data */
     type: "aws" | "azure-connector" | "azure-sdk" | "dictionary" | "docker" | "ecr" | "gcp" | "keypair" | "nats-account" | "opaque" | "tls" | "userpass";
+    /** The secret contents, shaped according to type */
     data?: SecretOpaque | SecretTls | string | SecretAwskey | Record<string, unknown> | SecretUserpass | SecretKeypair;
     description?: string;
     tags?: Record<string, string>;
@@ -658,40 +660,55 @@ export declare class QuerySpecTerms {
 
 export declare class SecretAwskey {
   constructor(props: {
+    /** AWS access key ID */
     accessKey?: string;
+    /** External ID for the role-assumption trust policy */
     externalId?: string;
+    /** Optional IAM role ARN to assume using the access key */
     roleArn?: string;
+    /** AWS secret access key */
     secretKey?: string;
   });
 }
 
 export declare class SecretKeypair {
   constructor(props: {
+    /** Passphrase protecting the private key */
     passphrase?: string;
+    /** Public key */
     publicKey?: string;
+    /** Private key */
     secretKey?: string;
   });
 }
 
 export declare class SecretOpaque {
   constructor(props: {
+    /** How payload is encoded */
     encoding?: "base64" | "plain";
+    /** The secret value */
     payload?: string;
   });
 }
 
 export declare class SecretTls {
   constructor(props: {
+    /** Certificate, PEM-encoded */
     cert?: string;
+    /** Certificate chain, PEM-encoded */
     chain?: string;
+    /** Private key, PEM-encoded */
     key?: string;
   });
 }
 
 export declare class SecretUserpass {
   constructor(props: {
+    /** Declared encoding of the username/password; not decoded (values are stored as provided) */
     encoding?: "base64" | "plain";
+    /** Password */
     password?: string;
+    /** Username */
     username?: string;
   });
 }
@@ -786,6 +803,8 @@ export declare class WorkloadSpec {
     containers?: WorkloadSpecContainers[];
     /** Set defaultOptions for the workload in all Control Plane Locations. */
     defaultOptions?: WorkloadSpecDefaultOptions;
+    /** Limits how many replicas voluntary disruptions (node drains, cluster autoscaler scale-down, node upgrades) can evict at once. Set either minAvailable or maxUnavailable. A minAvailable that would allow no evictions at the minScale of defaultOptions or any localOptions is rejected. Not supported for cron or vm workloads. When omitted, workloads with minScale 4 or more allow 20% of replicas to be unavailable. */
+    disruptionBudget?: WorkloadSpecDisruptionBudget;
     /** Additional Kubernetes customizations for BYOK */
     extras?: WorkloadSpecExtras;
     /** Optional control of inbound and outbound access to the workload for external (public) and internal (service to service) traffic. Access is restricted by default. */
@@ -804,7 +823,7 @@ export declare class WorkloadSpec {
     requestRetryPolicy?: WorkloadSpecRequestRetryPolicy;
     /** Configuration for how workload updates are rolled out */
     rolloutOptions?: WorkloadSpecRolloutOptions;
-    /** Dev-session configuration marking this stateful workload as a sandbox. */
+    /** Marks this workload as a sandbox and carries its settings. Two types: dev (a human devbox: browser IDE and terminal behind a Control Plane sign-in, the connect permission on the workload) and worker (an agent box: the devboxd API behind a token, hosting agent sessions, many per box). Both are stateful workloads with a home volume that scale to zero when idle and resume on the next request; when spec.type is omitted the server sets stateful. A sandbox is created in one call with just this section: when spec.containers is omitted the server injects the standard container for the profile (dev: build.cpln.io/public/sandbox-base:v1 with the browser IDE; worker: build.cpln.io/public/agentbox-base:v1 running devboxd; 1 CPU, 2 GiB), when a worker token is omitted the server generates it, and the server creates and owns the home volumeset <name>-state, mounted at /home/devuser and deleted with the sandbox. Size the box on spec.containers[0].cpu and memory (a container that omits them gets 1 CPU, 2 GiB). The firewall defaults open in both directions; the sign-in (dev) or the token (worker) is what gates access. Idle sandboxes scale to zero after scaleToZeroDelay (default 300 s) and run as a single replica. The URL is status.endpoint on the workload deployment: for dev the IDE at /_ide/, terminal at /_term/, your app at /; for worker the devboxd API. The server also stamps the tags cpln/sandbox, cpln/kata, cpln/kataPrivileged (privileged root inside the microVM, which is the isolation boundary), cpln/scaleToZero and, for dev, cpln/dev-type (read by cpln sandbox connect); do not set them yourself. Read a worker token back from this section after create. */
     sandbox?: WorkloadSpecSandbox;
     /** Security context for the workload */
     securityOptions?: WorkloadSpecSecurityOptions;
@@ -829,6 +848,8 @@ export declare class WorkloadSpecContainers {
     cpu?: string;
     /** Environment variables for the container at runtime. Default environment variables are also provided: CPLN_GVC, CPLN_LOCATION, CPLN_ORG, CPLN_PROVIDER, CPLN_WORKLOAD */
     env?: WorkloadSpecContainersEnv[];
+    /** Inject all key/value pairs of the referenced dictionary secrets as environment variables. An explicit spec.env variable overrides an envFrom key of the same name; later envFrom entries override earlier ones. Keys that are not valid environment variable names are skipped. */
+    envFrom?: WorkloadSpecContainersEnvFrom[];
     /** Reserved GPU resources for the workload. */
     gpu?: WorkloadSpecContainersGpu;
     /** The full image and tag path for a public or private docker registry. Private container images must have valid credentials configured in 'pullSecretLinks' on the GVC (Global Virtual Cloud). Required for all workload types except 'vm', which boots from spec.vm.bootDisk.source instead. */
@@ -869,6 +890,20 @@ export declare class WorkloadSpecContainersEnv {
   });
 }
 
+export declare class WorkloadSpecContainersEnvFrom {
+  constructor(props: {
+    /** References a dictionary secret whose key/value pairs are injected as environment variables */
+    secretRef?: WorkloadSpecContainersEnvFromSecretRef;
+  });
+}
+
+export declare class WorkloadSpecContainersEnvFromSecretRef {
+  constructor(props: {
+    /** Name of a dictionary (opaque key/value) secret whose keys are injected as environment variables */
+    name?: string;
+  });
+}
+
 export declare class WorkloadSpecContainersGpu {
   constructor(props: {
     /** Custom GPU resource specification for non-NVIDIA GPUs */
@@ -1282,6 +1317,15 @@ export declare class WorkloadSpecDefaultOptionsMultiZone {
   });
 }
 
+export declare class WorkloadSpecDisruptionBudget {
+  constructor(props: {
+    /** Maximum number or percentage of replicas that can be unavailable during voluntary disruptions such as node drains */
+    maxUnavailable?: string;
+    /** Minimum number or percentage of replicas that must stay available during voluntary disruptions such as node drains */
+    minAvailable?: string;
+  });
+}
+
 export declare class WorkloadSpecExtras {
   constructor(props: {
     /** Kubernetes pod affinity and anti-affinity rules */
@@ -1624,10 +1668,18 @@ export declare class WorkloadSpecLocalOptionsMultiZone {
 
 export declare class WorkloadSpecNetworking {
   constructor(props: {
-    /** When enabled, requests to <workload>.<gvc>.cpln.local from the same GVC fail over to the workload's canonical endpoint
-(the nearest healthy location) when no local replica can serve them. Cross-location traffic is billed as egress.
-Defaults to true for workloads created after this field was introduced; absent means disabled. */
-    interGvcFailover?: boolean;
+    /** Routing of internal (cpln.local) requests */
+    internal?: WorkloadSpecNetworkingInternal;
+  });
+}
+
+export declare class WorkloadSpecNetworkingInternal {
+  constructor(props: {
+    /** How requests to <workload>.<gvc>.cpln.local from the same GVC are routed.
+locationEndpoint: served only by replicas in the caller's location.
+gvcEndpoint: fail over to the workload's canonical endpoint (the nearest healthy location) when no local replica can serve them. Cross-location traffic is billed as egress.
+Defaults to gvcEndpoint for workloads created after this field was introduced; absent means locationEndpoint. */
+    routing?: "gvcEndpoint" | "locationEndpoint";
   });
 }
 
@@ -1648,6 +1700,8 @@ export declare class WorkloadSpecRolloutOptions {
     maxUnavailableReplicas?: string;
     /** The minimum number of seconds a container must run without crashing to be considered available */
     minReadySeconds?: number;
+    /** When true, replicas are rolled out whenever a secret or the identity referenced by the workload is modified */
+    rolloutOnReferenceChange?: boolean;
     /** Determines whether replicas are scaled in order (OrderedReady) or in parallel (Parallel) */
     scalingPolicy?: "OrderedReady" | "Parallel";
     /** The amount of time in seconds a workload has to gracefully terminate before forcefully terminating it.
@@ -1660,20 +1714,27 @@ export declare class WorkloadSpecSandbox {
   constructor(props: {
     /** The port the primary application inside the dev container listens on. The sandbox gateway proxies the endpoint root to it. */
     appPort?: number;
-    /** The IDE this sandbox is primarily connected with. */
+    /** dev type: the IDE the owner primarily connects with. Informational: clients use it to pick a default connect flow; the server does not act on it. */
     ide?: "browser" | "cursor" | "ssh" | "vscode";
-    /** Enables scale-to-zero: idle for this many seconds scales the sandbox to 0 and the next request wakes it. The workload autoscaling field alone cannot enable this (it always carries a default), so enablement lives here and is stamped as the cpln/scaleToZero tag. */
+    /** Deprecated and ignored: the browser IDE admits callers whose Control Plane token holds connect on this workload; no password exists. */
+    password?: string;
+    /** Idle seconds before the sandbox scales to zero; the next request to its endpoint wakes it (a suspended box resumes in place, so the request that claims a worker is also what wakes it). Every sandbox scales to zero (the overlay stamps cpln/scaleToZero and pins autoscaling to one replica); this sets how long it stays up idle. Default 300. */
     scaleToZeroDelay?: number;
-    /** The maximum lifetime of the sandbox. This string should contain a floating point number followed by either d, h, or m. For example, "10d" would delete the sandbox after 10 days. */
+    /** worker type: the bearer token that secures the devboxd HTTP API. Generated by the server when omitted on create and kept on later writes; set it to choose your own. Injected into the dev container as DEVBOXD_TOKEN. */
+    token?: string;
+    /** Deprecated and ignored: TTL enforcement moves to fleet-level tooling. */
     ttl?: string;
+    /** dev: a human sandbox - browser IDE and terminal served on the workload endpoint behind a Control Plane sign-in (connect permission on the workload; gateway port 8888, IDE at /_ide/, terminal at /_term/, your app at /). worker: an agent box - the devboxd HTTP API on port 49983 is the only listener, secured by the token, and the workload endpoint is that API; no IDE, no password; agents run in devboxd sessions on it, many per box. Both keep a home volume, scale to zero when idle and resume on the next request. */
+    type?: "dev" | "worker";
+    /** The home volume. The server creates and owns a shared-filesystem volumeset named <workload>-state and deletes it with the sandbox. */
     volume?: WorkloadSpecSandboxVolume;
   });
 }
 
 export declare class WorkloadSpecSandboxVolume {
   constructor(props: {
-    /** The size in GB of the volume backing the sandbox home directory. */
-    size?: number;
+    /** Initial size in GB of the home volumeset the server creates for this sandbox (mounted at /home/devuser). Immutable after create: resize the volumeset itself. */
+    initialCapacity?: number;
   });
 }
 

package/src/generated/index.ts

@@ -79,6 +79,8 @@ export const VolumeSetSpecSnapshots = /* @__PURE__ */ createProperty("Cpln::Core
 export const WorkloadSpec = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpec", "cpln");
 export const WorkloadSpecContainers = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecContainers", "cpln");
 export const WorkloadSpecContainersEnv = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecContainersEnv", "cpln");
+export const WorkloadSpecContainersEnvFrom = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecContainersEnvFrom", "cpln");
+export const WorkloadSpecContainersEnvFromSecretRef = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecContainersEnvFromSecretRef", "cpln");
 export const WorkloadSpecContainersGpu = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecContainersGpu", "cpln");
 export const WorkloadSpecContainersGpuCustom = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecContainersGpuCustom", "cpln");
 export const WorkloadSpecContainersGpuNvidia = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecContainersGpuNvidia", "cpln");
@@ -118,6 +120,7 @@ export const WorkloadSpecDefaultOptionsAutoscalingKedaTriggers = /* @__PURE__ */
 export const WorkloadSpecDefaultOptionsAutoscalingKedaTriggersAuthenticationRef = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecDefaultOptionsAutoscalingKedaTriggersAuthenticationRef", "cpln");
 export const WorkloadSpecDefaultOptionsAutoscalingMulti = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecDefaultOptionsAutoscalingMulti", "cpln");
 export const WorkloadSpecDefaultOptionsMultiZone = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecDefaultOptionsMultiZone", "cpln");
+export const WorkloadSpecDisruptionBudget = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecDisruptionBudget", "cpln");
 export const WorkloadSpecExtras = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecExtras", "cpln");
 export const WorkloadSpecExtrasMetadata = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecExtrasMetadata", "cpln");
 export const WorkloadSpecFirewallConfig = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecFirewallConfig", "cpln");
@@ -149,6 +152,7 @@ export const WorkloadSpecLocalOptionsAutoscalingKedaTriggersAuthenticationRef =
 export const WorkloadSpecLocalOptionsAutoscalingMulti = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecLocalOptionsAutoscalingMulti", "cpln");
 export const WorkloadSpecLocalOptionsMultiZone = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecLocalOptionsMultiZone", "cpln");
 export const WorkloadSpecNetworking = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecNetworking", "cpln");
+export const WorkloadSpecNetworkingInternal = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecNetworkingInternal", "cpln");
 export const WorkloadSpecRequestRetryPolicy = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecRequestRetryPolicy", "cpln");
 export const WorkloadSpecRolloutOptions = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecRolloutOptions", "cpln");
 export const WorkloadSpecSandbox = /* @__PURE__ */ createProperty("Cpln::Core::WorkloadSpecSandbox", "cpln");