@kilic.dev/pulumi-k8s-crds 1.7.4 → 1.8.0

package/dist/types/output.d.ts

@@ -1945,7 +1945,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -1957,7 +1956,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.acme.v1.ChallengeSpecSolverHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelector;
@@ -2157,7 +2155,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -2169,7 +2166,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.acme.v1.ChallengeSpecSolverHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelectorPatch;
@@ -2208,7 +2204,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -2220,7 +2215,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.acme.v1.ChallengeSpecSolverHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelector;
@@ -2425,7 +2419,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -2437,7 +2430,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.acme.v1.ChallengeSpecSolverHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelectorPatch;
@@ -2547,7 +2539,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -2559,7 +2550,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.acme.v1.ChallengeSpecSolverHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAntiAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelector;
@@ -2759,7 +2749,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -2771,7 +2760,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.acme.v1.ChallengeSpecSolverHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAntiAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelectorPatch;
@@ -2810,7 +2798,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -2822,7 +2809,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.acme.v1.ChallengeSpecSolverHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAntiAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelector;
@@ -3027,7 +3013,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -3039,7 +3024,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.acme.v1.ChallengeSpecSolverHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAntiAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelectorPatch;
@@ -4107,7 +4091,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -4119,7 +4102,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.acme.v1.ChallengeSpecSolverHttp01IngressPodTemplateSpecAffinityPodAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelector;
@@ -4319,7 +4301,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -4331,7 +4312,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.acme.v1.ChallengeSpecSolverHttp01IngressPodTemplateSpecAffinityPodAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelectorPatch;
@@ -4370,7 +4350,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -4382,7 +4361,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.acme.v1.ChallengeSpecSolverHttp01IngressPodTemplateSpecAffinityPodAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelector;
@@ -4587,7 +4565,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -4599,7 +4576,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.acme.v1.ChallengeSpecSolverHttp01IngressPodTemplateSpecAffinityPodAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelectorPatch;
@@ -4709,7 +4685,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -4721,7 +4696,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.acme.v1.ChallengeSpecSolverHttp01IngressPodTemplateSpecAffinityPodAntiAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelector;
@@ -4921,7 +4895,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -4933,7 +4906,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.acme.v1.ChallengeSpecSolverHttp01IngressPodTemplateSpecAffinityPodAntiAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelectorPatch;
@@ -4972,7 +4944,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -4984,7 +4955,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.acme.v1.ChallengeSpecSolverHttp01IngressPodTemplateSpecAffinityPodAntiAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelector;
@@ -5189,7 +5159,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -5201,7 +5170,6 @@ export declare namespace acme {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.acme.v1.ChallengeSpecSolverHttp01IngressPodTemplateSpecAffinityPodAntiAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelectorPatch;
@@ -5819,6 +5787,11 @@ export declare namespace acme {
              */
             ipAddresses: string[];
             issuerRef: outputs.acme.v1.OrderSpecIssuerRef;
+            /**
+             * Profile allows requesting a certificate profile from the ACME server.
+             * Supported profiles are listed by the server's ACME directory URL.
+             */
+            profile: string;
             /**
              * Certificate signing request bytes in DER encoding.
              * This will be used when finalizing the order.
@@ -5893,6 +5866,11 @@ export declare namespace acme {
              */
             ipAddresses: string[];
             issuerRef: outputs.acme.v1.OrderSpecIssuerRefPatch;
+            /**
+             * Profile allows requesting a certificate profile from the ACME server.
+             * Supported profiles are listed by the server's ACME directory URL.
+             */
+            profile: string;
             /**
              * Certificate signing request bytes in DER encoding.
              * This will be used when finalizing the order.
@@ -35748,8 +35726,7 @@ export declare namespace cert_manager {
              * revisions exceeds this number.
              *
              * If set, revisionHistoryLimit must be a value of `1` or greater.
-             * If unset (`nil`), revisions will not be garbage collected.
-             * Default value is `nil`.
+             * Default value is `1`.
              */
             revisionHistoryLimit: number;
             /**
@@ -35761,7 +35738,7 @@ export declare namespace cert_manager {
             secretName: string;
             secretTemplate: outputs.cert_manager.v1.CertificateSpecSecretTemplate;
             /**
-             * Signature algorith to use.
+             * Signature algorithm to use.
              * Allowed values for RSA keys: SHA256WithRSA, SHA384WithRSA, SHA512WithRSA.
              * Allowed values for ECDSA keys: ECDSAWithSHA256, ECDSAWithSHA384, ECDSAWithSHA512.
              * Allowed values for Ed25519 keys: PureEd25519.
@@ -36349,8 +36326,7 @@ export declare namespace cert_manager {
              * revisions exceeds this number.
              *
              * If set, revisionHistoryLimit must be a value of `1` or greater.
-             * If unset (`nil`), revisions will not be garbage collected.
-             * Default value is `nil`.
+             * Default value is `1`.
              */
             revisionHistoryLimit: number;
             /**
@@ -36362,7 +36338,7 @@ export declare namespace cert_manager {
             secretName: string;
             secretTemplate: outputs.cert_manager.v1.CertificateSpecSecretTemplatePatch;
             /**
-             * Signature algorith to use.
+             * Signature algorithm to use.
              * Allowed values for RSA keys: SHA256WithRSA, SHA384WithRSA, SHA512WithRSA.
              * Allowed values for ECDSA keys: ECDSAWithSHA256, ECDSAWithSHA384, ECDSAWithSHA512.
              * Allowed values for Ed25519 keys: PureEd25519.
@@ -36914,6 +36890,11 @@ export declare namespace cert_manager {
              */
             preferredChain: string;
             privateKeySecretRef: outputs.cert_manager.v1.ClusterIssuerSpecAcmePrivateKeySecretRef;
+            /**
+             * Profile allows requesting a certificate profile from the ACME server.
+             * Supported profiles are listed by the server's ACME directory URL.
+             */
+            profile: string;
             /**
              * Server is the URL used to access the ACME server's 'directory' endpoint.
              * For example, for Let's Encrypt's staging endpoint, you would use:
@@ -37076,6 +37057,11 @@ export declare namespace cert_manager {
              */
             preferredChain: string;
             privateKeySecretRef: outputs.cert_manager.v1.ClusterIssuerSpecAcmePrivateKeySecretRefPatch;
+            /**
+             * Profile allows requesting a certificate profile from the ACME server.
+             * Supported profiles are listed by the server's ACME directory URL.
+             */
+            profile: string;
             /**
              * Server is the URL used to access the ACME server's 'directory' endpoint.
              * For example, for Let's Encrypt's staging endpoint, you would use:
@@ -38937,7 +38923,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -38949,7 +38934,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.ClusterIssuerSpecAcmeSolversHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelector;
@@ -39149,7 +39133,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -39161,7 +39144,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.ClusterIssuerSpecAcmeSolversHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelectorPatch;
@@ -39200,7 +39182,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -39212,7 +39193,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.ClusterIssuerSpecAcmeSolversHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelector;
@@ -39417,7 +39397,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -39429,7 +39408,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.ClusterIssuerSpecAcmeSolversHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelectorPatch;
@@ -39539,7 +39517,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -39551,7 +39528,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.ClusterIssuerSpecAcmeSolversHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAntiAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelector;
@@ -39751,7 +39727,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -39763,7 +39738,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.ClusterIssuerSpecAcmeSolversHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAntiAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelectorPatch;
@@ -39802,7 +39776,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -39814,7 +39787,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.ClusterIssuerSpecAcmeSolversHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAntiAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelector;
@@ -40019,7 +39991,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -40031,7 +40002,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.ClusterIssuerSpecAcmeSolversHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAntiAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelectorPatch;
@@ -41099,7 +41069,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -41111,7 +41080,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.ClusterIssuerSpecAcmeSolversHttp01IngressPodTemplateSpecAffinityPodAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelector;
@@ -41311,7 +41279,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -41323,7 +41290,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.ClusterIssuerSpecAcmeSolversHttp01IngressPodTemplateSpecAffinityPodAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelectorPatch;
@@ -41362,7 +41328,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -41374,7 +41339,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.ClusterIssuerSpecAcmeSolversHttp01IngressPodTemplateSpecAffinityPodAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelector;
@@ -41579,7 +41543,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -41591,7 +41554,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.ClusterIssuerSpecAcmeSolversHttp01IngressPodTemplateSpecAffinityPodAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelectorPatch;
@@ -41701,7 +41663,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -41713,7 +41674,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.ClusterIssuerSpecAcmeSolversHttp01IngressPodTemplateSpecAffinityPodAntiAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelector;
@@ -41913,7 +41873,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -41925,7 +41884,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.ClusterIssuerSpecAcmeSolversHttp01IngressPodTemplateSpecAffinityPodAntiAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelectorPatch;
@@ -41964,7 +41922,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -41976,7 +41933,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.ClusterIssuerSpecAcmeSolversHttp01IngressPodTemplateSpecAffinityPodAntiAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelector;
@@ -42181,7 +42137,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -42193,7 +42148,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.ClusterIssuerSpecAcmeSolversHttp01IngressPodTemplateSpecAffinityPodAntiAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelectorPatch;
@@ -43692,6 +43646,11 @@ export declare namespace cert_manager {
              */
             preferredChain: string;
             privateKeySecretRef: outputs.cert_manager.v1.IssuerSpecAcmePrivateKeySecretRef;
+            /**
+             * Profile allows requesting a certificate profile from the ACME server.
+             * Supported profiles are listed by the server's ACME directory URL.
+             */
+            profile: string;
             /**
              * Server is the URL used to access the ACME server's 'directory' endpoint.
              * For example, for Let's Encrypt's staging endpoint, you would use:
@@ -43854,6 +43813,11 @@ export declare namespace cert_manager {
              */
             preferredChain: string;
             privateKeySecretRef: outputs.cert_manager.v1.IssuerSpecAcmePrivateKeySecretRefPatch;
+            /**
+             * Profile allows requesting a certificate profile from the ACME server.
+             * Supported profiles are listed by the server's ACME directory URL.
+             */
+            profile: string;
             /**
              * Server is the URL used to access the ACME server's 'directory' endpoint.
              * For example, for Let's Encrypt's staging endpoint, you would use:
@@ -45715,7 +45679,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -45727,7 +45690,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.IssuerSpecAcmeSolversHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelector;
@@ -45927,7 +45889,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -45939,7 +45900,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.IssuerSpecAcmeSolversHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelectorPatch;
@@ -45978,7 +45938,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -45990,7 +45949,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.IssuerSpecAcmeSolversHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelector;
@@ -46195,7 +46153,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -46207,7 +46164,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.IssuerSpecAcmeSolversHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelectorPatch;
@@ -46317,7 +46273,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -46329,7 +46284,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.IssuerSpecAcmeSolversHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAntiAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelector;
@@ -46529,7 +46483,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -46541,7 +46494,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.IssuerSpecAcmeSolversHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAntiAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelectorPatch;
@@ -46580,7 +46532,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -46592,7 +46543,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.IssuerSpecAcmeSolversHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAntiAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelector;
@@ -46797,7 +46747,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -46809,7 +46758,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.IssuerSpecAcmeSolversHttp01GatewayHTTPRoutePodTemplateSpecAffinityPodAntiAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelectorPatch;
@@ -47877,7 +47825,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -47889,7 +47836,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.IssuerSpecAcmeSolversHttp01IngressPodTemplateSpecAffinityPodAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelector;
@@ -48089,7 +48035,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -48101,7 +48046,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.IssuerSpecAcmeSolversHttp01IngressPodTemplateSpecAffinityPodAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelectorPatch;
@@ -48140,7 +48084,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -48152,7 +48095,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.IssuerSpecAcmeSolversHttp01IngressPodTemplateSpecAffinityPodAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelector;
@@ -48357,7 +48299,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -48369,7 +48310,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.IssuerSpecAcmeSolversHttp01IngressPodTemplateSpecAffinityPodAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelectorPatch;
@@ -48479,7 +48419,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -48491,7 +48430,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.IssuerSpecAcmeSolversHttp01IngressPodTemplateSpecAffinityPodAntiAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelector;
@@ -48691,7 +48629,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -48703,7 +48640,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.IssuerSpecAcmeSolversHttp01IngressPodTemplateSpecAffinityPodAntiAffinityPreferredDuringSchedulingIgnoredDuringExecutionPodAffinityTermNamespaceSelectorPatch;
@@ -48742,7 +48678,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -48754,7 +48689,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.IssuerSpecAcmeSolversHttp01IngressPodTemplateSpecAffinityPodAntiAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelector;
@@ -48959,7 +48893,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both matchLabelKeys and labelSelector.
              * Also, matchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             matchLabelKeys: string[];
             /**
@@ -48971,7 +48904,6 @@ export declare namespace cert_manager {
              * pod labels will be ignored. The default value is empty.
              * The same key is forbidden to exist in both mismatchLabelKeys and labelSelector.
              * Also, mismatchLabelKeys cannot be set when labelSelector isn't set.
-             * This is a beta field and requires enabling MatchLabelKeysInPodAffinity feature gate (enabled by default).
              */
             mismatchLabelKeys: string[];
             namespaceSelector: outputs.cert_manager.v1.IssuerSpecAcmeSolversHttp01IngressPodTemplateSpecAffinityPodAntiAffinityRequiredDuringSchedulingIgnoredDuringExecutionNamespaceSelectorPatch;
@@ -73477,96 +73409,896 @@ export declare namespace cilium {
             type: string;
         }
         /**
-         * Status is the status of the IP Pool.
-         *
-         * It might be possible for users to define overlapping IP Pools, we can't validate or enforce non-overlapping pools
-         * during object creation. The Cilium operator will do this validation and update the status to reflect the ability
-         * to allocate IPs from this pool.
+         * Status is the status of the IP Pool.
+         *
+         * It might be possible for users to define overlapping IP Pools, we can't validate or enforce non-overlapping pools
+         * during object creation. The Cilium operator will do this validation and update the status to reflect the ability
+         * to allocate IPs from this pool.
+         */
+        interface CiliumLoadBalancerIPPoolStatusPatch {
+            /**
+             * Current service state
+             */
+            conditions: outputs.cilium.v2alpha1.CiliumLoadBalancerIPPoolStatusConditionsPatch[];
+        }
+        /**
+         * CiliumPodIPPool defines an IP pool that can be used for pooled IPAM (i.e. the multi-pool IPAM
+         * mode).
+         */
+        interface CiliumPodIPPool {
+            /**
+             * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+             */
+            apiVersion: "cilium.io/v2alpha1";
+            /**
+             * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+             */
+            kind: "CiliumPodIPPool";
+            /**
+             * Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+             */
+            metadata: ObjectMeta;
+            spec: outputs.cilium.v2alpha1.CiliumPodIPPoolSpec;
+        }
+        interface CiliumPodIPPoolSpec {
+            ipv4: outputs.cilium.v2alpha1.CiliumPodIPPoolSpecIpv4;
+            ipv6: outputs.cilium.v2alpha1.CiliumPodIPPoolSpecIpv6;
+        }
+        /**
+         * IPv4 specifies the IPv4 CIDRs and mask sizes of the pool
+         */
+        interface CiliumPodIPPoolSpecIpv4 {
+            /**
+             * CIDRs is a list of IPv4 CIDRs that are part of the pool.
+             */
+            cidrs: string[];
+            /**
+             * MaskSize is the mask size of the pool.
+             */
+            maskSize: number;
+        }
+        /**
+         * IPv4 specifies the IPv4 CIDRs and mask sizes of the pool
+         */
+        interface CiliumPodIPPoolSpecIpv4Patch {
+            /**
+             * CIDRs is a list of IPv4 CIDRs that are part of the pool.
+             */
+            cidrs: string[];
+            /**
+             * MaskSize is the mask size of the pool.
+             */
+            maskSize: number;
+        }
+        /**
+         * IPv6 specifies the IPv6 CIDRs and mask sizes of the pool
+         */
+        interface CiliumPodIPPoolSpecIpv6 {
+            /**
+             * CIDRs is a list of IPv6 CIDRs that are part of the pool.
+             */
+            cidrs: string[];
+            /**
+             * MaskSize is the mask size of the pool.
+             */
+            maskSize: number;
+        }
+        /**
+         * IPv6 specifies the IPv6 CIDRs and mask sizes of the pool
+         */
+        interface CiliumPodIPPoolSpecIpv6Patch {
+            /**
+             * CIDRs is a list of IPv6 CIDRs that are part of the pool.
+             */
+            cidrs: string[];
+            /**
+             * MaskSize is the mask size of the pool.
+             */
+            maskSize: number;
+        }
+        interface CiliumPodIPPoolSpecPatch {
+            ipv4: outputs.cilium.v2alpha1.CiliumPodIPPoolSpecIpv4Patch;
+            ipv6: outputs.cilium.v2alpha1.CiliumPodIPPoolSpecIpv6Patch;
+        }
+    }
+}
+export declare namespace cloudflare_operator {
+    namespace v1 {
+        /**
+         * Account is the Schema for the accounts API
+         */
+        interface Account {
+            /**
+             * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+             */
+            apiVersion: "cloudflare-operator.io/v1";
+            /**
+             * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+             */
+            kind: "Account";
+            /**
+             * Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+             */
+            metadata: ObjectMeta;
+            spec: outputs.cloudflare_operator.v1.AccountSpec;
+            status: outputs.cloudflare_operator.v1.AccountStatus;
+        }
+        /**
+         * AccountSpec defines the desired state of Account
+         */
+        interface AccountSpec {
+            apiToken: outputs.cloudflare_operator.v1.AccountSpecApiToken;
+            /**
+             * Interval to check account status
+             */
+            interval: string;
+            /**
+             * List of zone names that should be managed by cloudflare-operator
+             * Deprecated and will be removed in a future release
+             */
+            managedZones: string[];
+        }
+        /**
+         * Cloudflare API token
+         */
+        interface AccountSpecApiToken {
+            secretRef: outputs.cloudflare_operator.v1.AccountSpecApiTokenSecretRef;
+        }
+        /**
+         * Cloudflare API token
+         */
+        interface AccountSpecApiTokenPatch {
+            secretRef: outputs.cloudflare_operator.v1.AccountSpecApiTokenSecretRefPatch;
+        }
+        /**
+         * Secret containing the API token (key must be named "apiToken")
+         */
+        interface AccountSpecApiTokenSecretRef {
+            /**
+             * name is unique within a namespace to reference a secret resource.
+             */
+            name: string;
+            /**
+             * namespace defines the space within which the secret name must be unique.
+             */
+            namespace: string;
+        }
+        /**
+         * Secret containing the API token (key must be named "apiToken")
+         */
+        interface AccountSpecApiTokenSecretRefPatch {
+            /**
+             * name is unique within a namespace to reference a secret resource.
+             */
+            name: string;
+            /**
+             * namespace defines the space within which the secret name must be unique.
+             */
+            namespace: string;
+        }
+        /**
+         * AccountSpec defines the desired state of Account
+         */
+        interface AccountSpecPatch {
+            apiToken: outputs.cloudflare_operator.v1.AccountSpecApiTokenPatch;
+            /**
+             * Interval to check account status
+             */
+            interval: string;
+            /**
+             * List of zone names that should be managed by cloudflare-operator
+             * Deprecated and will be removed in a future release
+             */
+            managedZones: string[];
+        }
+        /**
+         * AccountStatus defines the observed state of Account
+         */
+        interface AccountStatus {
+            /**
+             * Conditions contains the different condition statuses for the Account object.
+             */
+            conditions: outputs.cloudflare_operator.v1.AccountStatusConditions[];
+        }
+        /**
+         * Condition contains details for one aspect of the current state of this API Resource.
+         */
+        interface AccountStatusConditions {
+            /**
+             * lastTransitionTime is the last time the condition transitioned from one status to another.
+             * This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
+             */
+            lastTransitionTime: string;
+            /**
+             * message is a human readable message indicating details about the transition.
+             * This may be an empty string.
+             */
+            message: string;
+            /**
+             * observedGeneration represents the .metadata.generation that the condition was set based upon.
+             * For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+             * with respect to the current state of the instance.
+             */
+            observedGeneration: number;
+            /**
+             * reason contains a programmatic identifier indicating the reason for the condition's last transition.
+             * Producers of specific condition types may define expected values and meanings for this field,
+             * and whether the values are considered a guaranteed API.
+             * The value should be a CamelCase string.
+             * This field may not be empty.
+             */
+            reason: string;
+            /**
+             * status of the condition, one of True, False, Unknown.
+             */
+            status: string;
+            /**
+             * type of condition in CamelCase or in foo.example.com/CamelCase.
+             */
+            type: string;
+        }
+        /**
+         * Condition contains details for one aspect of the current state of this API Resource.
+         */
+        interface AccountStatusConditionsPatch {
+            /**
+             * lastTransitionTime is the last time the condition transitioned from one status to another.
+             * This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
+             */
+            lastTransitionTime: string;
+            /**
+             * message is a human readable message indicating details about the transition.
+             * This may be an empty string.
+             */
+            message: string;
+            /**
+             * observedGeneration represents the .metadata.generation that the condition was set based upon.
+             * For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+             * with respect to the current state of the instance.
+             */
+            observedGeneration: number;
+            /**
+             * reason contains a programmatic identifier indicating the reason for the condition's last transition.
+             * Producers of specific condition types may define expected values and meanings for this field,
+             * and whether the values are considered a guaranteed API.
+             * The value should be a CamelCase string.
+             * This field may not be empty.
+             */
+            reason: string;
+            /**
+             * status of the condition, one of True, False, Unknown.
+             */
+            status: string;
+            /**
+             * type of condition in CamelCase or in foo.example.com/CamelCase.
+             */
+            type: string;
+        }
+        /**
+         * AccountStatus defines the observed state of Account
+         */
+        interface AccountStatusPatch {
+            /**
+             * Conditions contains the different condition statuses for the Account object.
+             */
+            conditions: outputs.cloudflare_operator.v1.AccountStatusConditionsPatch[];
+        }
+        /**
+         * DNSRecord is the Schema for the dnsrecords API
+         */
+        interface DNSRecord {
+            /**
+             * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+             */
+            apiVersion: "cloudflare-operator.io/v1";
+            /**
+             * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+             */
+            kind: "DNSRecord";
+            /**
+             * Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+             */
+            metadata: ObjectMeta;
+            spec: outputs.cloudflare_operator.v1.DNSRecordSpec;
+            status: outputs.cloudflare_operator.v1.DNSRecordStatus;
+        }
+        /**
+         * DNSRecordSpec defines the desired state of DNSRecord
+         */
+        interface DNSRecordSpec {
+            /**
+             * DNS record content (e.g. 127.0.0.1)
+             */
+            content: string;
+            /**
+             * Data holds arbitrary key-value pairs used to further configure the DNS record
+             */
+            data: {
+                [key: string]: any;
+            };
+            /**
+             * Interval to check DNSRecord
+             */
+            interval: string;
+            ipRef: outputs.cloudflare_operator.v1.DNSRecordSpecIpRef;
+            /**
+             * DNS record name (e.g. example.com)
+             */
+            name: string;
+            /**
+             * Required for MX, SRV and URI records; unused by other record types. Records with lower priorities are preferred.
+             */
+            priority: number;
+            /**
+             * Whether the record is receiving the performance and security benefits of Cloudflare
+             */
+            proxied: boolean;
+            /**
+             * Time to live, in seconds, of the DNS record. Must be between 60 and 86400, or 1 for "automatic" (e.g. 3600)
+             */
+            ttl: number;
+            /**
+             * DNS record type
+             */
+            type: string;
+        }
+        /**
+         * Reference to an IP object
+         */
+        interface DNSRecordSpecIpRef {
+            /**
+             * Name of the IP object
+             */
+            name: string;
+        }
+        /**
+         * Reference to an IP object
+         */
+        interface DNSRecordSpecIpRefPatch {
+            /**
+             * Name of the IP object
+             */
+            name: string;
+        }
+        /**
+         * DNSRecordSpec defines the desired state of DNSRecord
+         */
+        interface DNSRecordSpecPatch {
+            /**
+             * DNS record content (e.g. 127.0.0.1)
+             */
+            content: string;
+            /**
+             * Data holds arbitrary key-value pairs used to further configure the DNS record
+             */
+            data: {
+                [key: string]: any;
+            };
+            /**
+             * Interval to check DNSRecord
+             */
+            interval: string;
+            ipRef: outputs.cloudflare_operator.v1.DNSRecordSpecIpRefPatch;
+            /**
+             * DNS record name (e.g. example.com)
+             */
+            name: string;
+            /**
+             * Required for MX, SRV and URI records; unused by other record types. Records with lower priorities are preferred.
+             */
+            priority: number;
+            /**
+             * Whether the record is receiving the performance and security benefits of Cloudflare
+             */
+            proxied: boolean;
+            /**
+             * Time to live, in seconds, of the DNS record. Must be between 60 and 86400, or 1 for "automatic" (e.g. 3600)
+             */
+            ttl: number;
+            /**
+             * DNS record type
+             */
+            type: string;
+        }
+        /**
+         * DNSRecordStatus defines the observed state of DNSRecord
+         */
+        interface DNSRecordStatus {
+            /**
+             * Conditions contains the different condition statuses for the DNSRecord object.
+             */
+            conditions: outputs.cloudflare_operator.v1.DNSRecordStatusConditions[];
+            /**
+             * Cloudflare DNS record ID
+             */
+            recordID: string;
+        }
+        /**
+         * Condition contains details for one aspect of the current state of this API Resource.
+         */
+        interface DNSRecordStatusConditions {
+            /**
+             * lastTransitionTime is the last time the condition transitioned from one status to another.
+             * This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
+             */
+            lastTransitionTime: string;
+            /**
+             * message is a human readable message indicating details about the transition.
+             * This may be an empty string.
+             */
+            message: string;
+            /**
+             * observedGeneration represents the .metadata.generation that the condition was set based upon.
+             * For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+             * with respect to the current state of the instance.
+             */
+            observedGeneration: number;
+            /**
+             * reason contains a programmatic identifier indicating the reason for the condition's last transition.
+             * Producers of specific condition types may define expected values and meanings for this field,
+             * and whether the values are considered a guaranteed API.
+             * The value should be a CamelCase string.
+             * This field may not be empty.
+             */
+            reason: string;
+            /**
+             * status of the condition, one of True, False, Unknown.
+             */
+            status: string;
+            /**
+             * type of condition in CamelCase or in foo.example.com/CamelCase.
+             */
+            type: string;
+        }
+        /**
+         * Condition contains details for one aspect of the current state of this API Resource.
+         */
+        interface DNSRecordStatusConditionsPatch {
+            /**
+             * lastTransitionTime is the last time the condition transitioned from one status to another.
+             * This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
+             */
+            lastTransitionTime: string;
+            /**
+             * message is a human readable message indicating details about the transition.
+             * This may be an empty string.
+             */
+            message: string;
+            /**
+             * observedGeneration represents the .metadata.generation that the condition was set based upon.
+             * For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+             * with respect to the current state of the instance.
+             */
+            observedGeneration: number;
+            /**
+             * reason contains a programmatic identifier indicating the reason for the condition's last transition.
+             * Producers of specific condition types may define expected values and meanings for this field,
+             * and whether the values are considered a guaranteed API.
+             * The value should be a CamelCase string.
+             * This field may not be empty.
+             */
+            reason: string;
+            /**
+             * status of the condition, one of True, False, Unknown.
+             */
+            status: string;
+            /**
+             * type of condition in CamelCase or in foo.example.com/CamelCase.
+             */
+            type: string;
+        }
+        /**
+         * DNSRecordStatus defines the observed state of DNSRecord
+         */
+        interface DNSRecordStatusPatch {
+            /**
+             * Conditions contains the different condition statuses for the DNSRecord object.
+             */
+            conditions: outputs.cloudflare_operator.v1.DNSRecordStatusConditionsPatch[];
+            /**
+             * Cloudflare DNS record ID
+             */
+            recordID: string;
+        }
+        /**
+         * IP is the Schema for the ips API
+         */
+        interface IP {
+            /**
+             * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+             */
+            apiVersion: "cloudflare-operator.io/v1";
+            /**
+             * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+             */
+            kind: "IP";
+            /**
+             * Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+             */
+            metadata: ObjectMeta;
+            spec: outputs.cloudflare_operator.v1.IPSpec;
+            status: outputs.cloudflare_operator.v1.IPStatus;
+        }
+        /**
+         * IPSpec defines the desired state of IP
+         */
+        interface IPSpec {
+            /**
+             * IP address (omit if type is dynamic)
+             */
+            address: string;
+            /**
+             * Interval at which a dynamic IP should be checked
+             */
+            interval: string;
+            /**
+             * IPSources can be configured to get an IP from an external source (e.g. an API or public IP echo service)
+             */
+            ipSources: outputs.cloudflare_operator.v1.IPSpecIpSources[];
+            /**
+             * IP address type (static or dynamic)
+             */
+            type: string;
+        }
+        interface IPSpecIpSources {
+            /**
+             * InsecureSkipVerify defines whether to skip TLS certificate verification
+             */
+            insecureSkipVerify: boolean;
+            /**
+             * PostProcessingRegex defines the regular expression to be used to extract the IP from the response or a JQ filter result
+             */
+            postProcessingRegex: string;
+            /**
+             * RequestBody to be sent to the URL
+             */
+            requestBody: string;
+            /**
+             * RequestHeaders to be sent to the URL
+             */
+            requestHeaders: {
+                [key: string]: any;
+            };
+            requestHeadersSecretRef: outputs.cloudflare_operator.v1.IPSpecIpSourcesRequestHeadersSecretRef;
+            /**
+             * RequestMethod defines the HTTP method to be used
+             */
+            requestMethod: string;
+            /**
+             * ResponseJQFilter applies a JQ filter to the response to extract the IP
+             */
+            responseJQFilter: string;
+            /**
+             * URL of the IP source (e.g. https://checkip.amazonaws.com)
+             */
+            url: string;
+        }
+        interface IPSpecIpSourcesPatch {
+            /**
+             * InsecureSkipVerify defines whether to skip TLS certificate verification
+             */
+            insecureSkipVerify: boolean;
+            /**
+             * PostProcessingRegex defines the regular expression to be used to extract the IP from the response or a JQ filter result
+             */
+            postProcessingRegex: string;
+            /**
+             * RequestBody to be sent to the URL
+             */
+            requestBody: string;
+            /**
+             * RequestHeaders to be sent to the URL
+             */
+            requestHeaders: {
+                [key: string]: any;
+            };
+            requestHeadersSecretRef: outputs.cloudflare_operator.v1.IPSpecIpSourcesRequestHeadersSecretRefPatch;
+            /**
+             * RequestMethod defines the HTTP method to be used
+             */
+            requestMethod: string;
+            /**
+             * ResponseJQFilter applies a JQ filter to the response to extract the IP
+             */
+            responseJQFilter: string;
+            /**
+             * URL of the IP source (e.g. https://checkip.amazonaws.com)
+             */
+            url: string;
+        }
+        /**
+         * RequestHeadersSecretRef is a secret reference to the headers to be sent to the URL (e.g. for authentication)
+         * where the key is the header name and the value is the header value
+         */
+        interface IPSpecIpSourcesRequestHeadersSecretRef {
+            /**
+             * name is unique within a namespace to reference a secret resource.
+             */
+            name: string;
+            /**
+             * namespace defines the space within which the secret name must be unique.
+             */
+            namespace: string;
+        }
+        /**
+         * RequestHeadersSecretRef is a secret reference to the headers to be sent to the URL (e.g. for authentication)
+         * where the key is the header name and the value is the header value
+         */
+        interface IPSpecIpSourcesRequestHeadersSecretRefPatch {
+            /**
+             * name is unique within a namespace to reference a secret resource.
+             */
+            name: string;
+            /**
+             * namespace defines the space within which the secret name must be unique.
+             */
+            namespace: string;
+        }
+        /**
+         * IPSpec defines the desired state of IP
+         */
+        interface IPSpecPatch {
+            /**
+             * IP address (omit if type is dynamic)
+             */
+            address: string;
+            /**
+             * Interval at which a dynamic IP should be checked
+             */
+            interval: string;
+            /**
+             * IPSources can be configured to get an IP from an external source (e.g. an API or public IP echo service)
+             */
+            ipSources: outputs.cloudflare_operator.v1.IPSpecIpSourcesPatch[];
+            /**
+             * IP address type (static or dynamic)
+             */
+            type: string;
+        }
+        /**
+         * IPStatus defines the observed state of IP
+         */
+        interface IPStatus {
+            /**
+             * Conditions contains the different condition statuses for the IP object.
+             */
+            conditions: outputs.cloudflare_operator.v1.IPStatusConditions[];
+        }
+        /**
+         * Condition contains details for one aspect of the current state of this API Resource.
+         */
+        interface IPStatusConditions {
+            /**
+             * lastTransitionTime is the last time the condition transitioned from one status to another.
+             * This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
+             */
+            lastTransitionTime: string;
+            /**
+             * message is a human readable message indicating details about the transition.
+             * This may be an empty string.
+             */
+            message: string;
+            /**
+             * observedGeneration represents the .metadata.generation that the condition was set based upon.
+             * For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+             * with respect to the current state of the instance.
+             */
+            observedGeneration: number;
+            /**
+             * reason contains a programmatic identifier indicating the reason for the condition's last transition.
+             * Producers of specific condition types may define expected values and meanings for this field,
+             * and whether the values are considered a guaranteed API.
+             * The value should be a CamelCase string.
+             * This field may not be empty.
+             */
+            reason: string;
+            /**
+             * status of the condition, one of True, False, Unknown.
+             */
+            status: string;
+            /**
+             * type of condition in CamelCase or in foo.example.com/CamelCase.
+             */
+            type: string;
+        }
+        /**
+         * Condition contains details for one aspect of the current state of this API Resource.
+         */
+        interface IPStatusConditionsPatch {
+            /**
+             * lastTransitionTime is the last time the condition transitioned from one status to another.
+             * This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
+             */
+            lastTransitionTime: string;
+            /**
+             * message is a human readable message indicating details about the transition.
+             * This may be an empty string.
+             */
+            message: string;
+            /**
+             * observedGeneration represents the .metadata.generation that the condition was set based upon.
+             * For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+             * with respect to the current state of the instance.
+             */
+            observedGeneration: number;
+            /**
+             * reason contains a programmatic identifier indicating the reason for the condition's last transition.
+             * Producers of specific condition types may define expected values and meanings for this field,
+             * and whether the values are considered a guaranteed API.
+             * The value should be a CamelCase string.
+             * This field may not be empty.
+             */
+            reason: string;
+            /**
+             * status of the condition, one of True, False, Unknown.
+             */
+            status: string;
+            /**
+             * type of condition in CamelCase or in foo.example.com/CamelCase.
+             */
+            type: string;
+        }
+        /**
+         * IPStatus defines the observed state of IP
+         */
+        interface IPStatusPatch {
+            /**
+             * Conditions contains the different condition statuses for the IP object.
+             */
+            conditions: outputs.cloudflare_operator.v1.IPStatusConditionsPatch[];
+        }
+        /**
+         * Zone is the Schema for the zones API
+         */
+        interface Zone {
+            /**
+             * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+             */
+            apiVersion: "cloudflare-operator.io/v1";
+            /**
+             * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+             */
+            kind: "Zone";
+            /**
+             * Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+             */
+            metadata: ObjectMeta;
+            spec: outputs.cloudflare_operator.v1.ZoneSpec;
+            status: outputs.cloudflare_operator.v1.ZoneStatus;
+        }
+        /**
+         * ZoneSpec defines the desired state of Zone
+         */
+        interface ZoneSpec {
+            /**
+             * Interval to check zone status
+             */
+            interval: string;
+            /**
+             * Name of the zone
+             */
+            name: string;
+            /**
+             * Prune determines whether DNS records in the zone that are not managed by cloudflare-operator should be automatically removed
+             */
+            prune: boolean;
+        }
+        /**
+         * ZoneSpec defines the desired state of Zone
+         */
+        interface ZoneSpecPatch {
+            /**
+             * Interval to check zone status
+             */
+            interval: string;
+            /**
+             * Name of the zone
+             */
+            name: string;
+            /**
+             * Prune determines whether DNS records in the zone that are not managed by cloudflare-operator should be automatically removed
+             */
+            prune: boolean;
+        }
+        /**
+         * ZoneStatus defines the observed state of Zone
+         */
+        interface ZoneStatus {
+            /**
+             * Conditions contains the different condition statuses for the Zone object.
+             */
+            conditions: outputs.cloudflare_operator.v1.ZoneStatusConditions[];
+            /**
+             * ID of the zone
+             */
+            id: string;
+        }
+        /**
+         * Condition contains details for one aspect of the current state of this API Resource.
+         */
+        interface ZoneStatusConditions {
+            /**
+             * lastTransitionTime is the last time the condition transitioned from one status to another.
+             * This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
+             */
+            lastTransitionTime: string;
+            /**
+             * message is a human readable message indicating details about the transition.
+             * This may be an empty string.
+             */
+            message: string;
+            /**
+             * observedGeneration represents the .metadata.generation that the condition was set based upon.
+             * For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+             * with respect to the current state of the instance.
+             */
+            observedGeneration: number;
+            /**
+             * reason contains a programmatic identifier indicating the reason for the condition's last transition.
+             * Producers of specific condition types may define expected values and meanings for this field,
+             * and whether the values are considered a guaranteed API.
+             * The value should be a CamelCase string.
+             * This field may not be empty.
+             */
+            reason: string;
+            /**
+             * status of the condition, one of True, False, Unknown.
+             */
+            status: string;
+            /**
+             * type of condition in CamelCase or in foo.example.com/CamelCase.
+             */
+            type: string;
+        }
+        /**
+         * Condition contains details for one aspect of the current state of this API Resource.
+         */
+        interface ZoneStatusConditionsPatch {
+            /**
+             * lastTransitionTime is the last time the condition transitioned from one status to another.
+             * This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
+             */
+            lastTransitionTime: string;
+            /**
+             * message is a human readable message indicating details about the transition.
+             * This may be an empty string.
+             */
+            message: string;
+            /**
+             * observedGeneration represents the .metadata.generation that the condition was set based upon.
+             * For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+             * with respect to the current state of the instance.
+             */
+            observedGeneration: number;
+            /**
+             * reason contains a programmatic identifier indicating the reason for the condition's last transition.
+             * Producers of specific condition types may define expected values and meanings for this field,
+             * and whether the values are considered a guaranteed API.
+             * The value should be a CamelCase string.
+             * This field may not be empty.
+             */
+            reason: string;
+            /**
+             * status of the condition, one of True, False, Unknown.
+             */
+            status: string;
+            /**
+             * type of condition in CamelCase or in foo.example.com/CamelCase.
+             */
+            type: string;
+        }
+        /**
+         * ZoneStatus defines the observed state of Zone
          */
-        interface CiliumLoadBalancerIPPoolStatusPatch {
-            /**
-             * Current service state
-             */
-            conditions: outputs.cilium.v2alpha1.CiliumLoadBalancerIPPoolStatusConditionsPatch[];
-        }
-        /**
-         * CiliumPodIPPool defines an IP pool that can be used for pooled IPAM (i.e. the multi-pool IPAM
-         * mode).
-         */
-        interface CiliumPodIPPool {
-            /**
-             * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-             */
-            apiVersion: "cilium.io/v2alpha1";
+        interface ZoneStatusPatch {
             /**
-             * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+             * Conditions contains the different condition statuses for the Zone object.
              */
-            kind: "CiliumPodIPPool";
+            conditions: outputs.cloudflare_operator.v1.ZoneStatusConditionsPatch[];
             /**
-             * Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+             * ID of the zone
              */
-            metadata: ObjectMeta;
-            spec: outputs.cilium.v2alpha1.CiliumPodIPPoolSpec;
-        }
-        interface CiliumPodIPPoolSpec {
-            ipv4: outputs.cilium.v2alpha1.CiliumPodIPPoolSpecIpv4;
-            ipv6: outputs.cilium.v2alpha1.CiliumPodIPPoolSpecIpv6;
-        }
-        /**
-         * IPv4 specifies the IPv4 CIDRs and mask sizes of the pool
-         */
-        interface CiliumPodIPPoolSpecIpv4 {
-            /**
-             * CIDRs is a list of IPv4 CIDRs that are part of the pool.
-             */
-            cidrs: string[];
-            /**
-             * MaskSize is the mask size of the pool.
-             */
-            maskSize: number;
-        }
-        /**
-         * IPv4 specifies the IPv4 CIDRs and mask sizes of the pool
-         */
-        interface CiliumPodIPPoolSpecIpv4Patch {
-            /**
-             * CIDRs is a list of IPv4 CIDRs that are part of the pool.
-             */
-            cidrs: string[];
-            /**
-             * MaskSize is the mask size of the pool.
-             */
-            maskSize: number;
-        }
-        /**
-         * IPv6 specifies the IPv6 CIDRs and mask sizes of the pool
-         */
-        interface CiliumPodIPPoolSpecIpv6 {
-            /**
-             * CIDRs is a list of IPv6 CIDRs that are part of the pool.
-             */
-            cidrs: string[];
-            /**
-             * MaskSize is the mask size of the pool.
-             */
-            maskSize: number;
-        }
-        /**
-         * IPv6 specifies the IPv6 CIDRs and mask sizes of the pool
-         */
-        interface CiliumPodIPPoolSpecIpv6Patch {
-            /**
-             * CIDRs is a list of IPv6 CIDRs that are part of the pool.
-             */
-            cidrs: string[];
-            /**
-             * MaskSize is the mask size of the pool.
-             */
-            maskSize: number;
-        }
-        interface CiliumPodIPPoolSpecPatch {
-            ipv4: outputs.cilium.v2alpha1.CiliumPodIPPoolSpecIpv4Patch;
-            ipv6: outputs.cilium.v2alpha1.CiliumPodIPPoolSpecIpv6Patch;
+            id: string;
         }
     }
 }
@@ -115666,7 +116398,8 @@ export declare namespace gateway {
         }
         /**
          * TLS defines the TLS settings for the backend.
-         * Only supported for DynamicResolver backends.
+         * TLS.CACertificateRefs and TLS.WellKnownCACertificates can only be specified for DynamicResolver backends.
+         * TLS.InsecureSkipVerify can be specified for any Backends
          */
         interface BackendSpecTls {
             /**
@@ -115680,8 +116413,15 @@ export declare namespace gateway {
              * If CACertificateRefs is empty or unspecified, then WellKnownCACertificates must be
              * specified. Only one of CACertificateRefs or WellKnownCACertificates may be specified,
              * not both.
+             *
+             * Only used for DynamicResolver backends.
              */
             caCertificateRefs: outputs.gateway.v1alpha1.BackendSpecTlsCaCertificateRefs[];
+            /**
+             * InsecureSkipVerify indicates whether the upstream's certificate verification
+             * should be skipped. Defaults to "false".
+             */
+            insecureSkipVerify: boolean;
             /**
              * WellKnownCACertificates specifies whether system CA certificates may be used in
              * the TLS handshake between the gateway and backend pod.
@@ -115689,6 +116429,8 @@ export declare namespace gateway {
              * If WellKnownCACertificates is unspecified or empty (""), then CACertificateRefs
              * must be specified with at least one entry for a valid configuration. Only one of
              * CACertificateRefs or WellKnownCACertificates may be specified, not both.
+             *
+             * Only used for DynamicResolver backends.
              */
             wellKnownCACertificates: string;
         }
@@ -115744,7 +116486,8 @@ export declare namespace gateway {
         }
         /**
          * TLS defines the TLS settings for the backend.
-         * Only supported for DynamicResolver backends.
+         * TLS.CACertificateRefs and TLS.WellKnownCACertificates can only be specified for DynamicResolver backends.
+         * TLS.InsecureSkipVerify can be specified for any Backends
          */
         interface BackendSpecTlsPatch {
             /**
@@ -115758,8 +116501,15 @@ export declare namespace gateway {
              * If CACertificateRefs is empty or unspecified, then WellKnownCACertificates must be
              * specified. Only one of CACertificateRefs or WellKnownCACertificates may be specified,
              * not both.
+             *
+             * Only used for DynamicResolver backends.
              */
             caCertificateRefs: outputs.gateway.v1alpha1.BackendSpecTlsCaCertificateRefsPatch[];
+            /**
+             * InsecureSkipVerify indicates whether the upstream's certificate verification
+             * should be skipped. Defaults to "false".
+             */
+            insecureSkipVerify: boolean;
             /**
              * WellKnownCACertificates specifies whether system CA certificates may be used in
              * the TLS handshake between the gateway and backend pod.
@@ -115767,6 +116517,8 @@ export declare namespace gateway {
              * If WellKnownCACertificates is unspecified or empty (""), then CACertificateRefs
              * must be specified with at least one entry for a valid configuration. Only one of
              * CACertificateRefs or WellKnownCACertificates may be specified, not both.
+             *
+             * Only used for DynamicResolver backends.
              */
             wellKnownCACertificates: string;
         }
@@ -117727,6 +118479,7 @@ export declare namespace gateway {
          */
         interface BackendTrafficPolicySpecResponseOverride {
             match: outputs.gateway.v1alpha1.BackendTrafficPolicySpecResponseOverrideMatch;
+            redirect: outputs.gateway.v1alpha1.BackendTrafficPolicySpecResponseOverrideRedirect;
             response: outputs.gateway.v1alpha1.BackendTrafficPolicySpecResponseOverrideResponse;
         }
         /**
@@ -117808,8 +118561,163 @@ export declare namespace gateway {
          */
         interface BackendTrafficPolicySpecResponseOverridePatch {
             match: outputs.gateway.v1alpha1.BackendTrafficPolicySpecResponseOverrideMatchPatch;
+            redirect: outputs.gateway.v1alpha1.BackendTrafficPolicySpecResponseOverrideRedirectPatch;
             response: outputs.gateway.v1alpha1.BackendTrafficPolicySpecResponseOverrideResponsePatch;
         }
+        /**
+         * Redirect configuration
+         */
+        interface BackendTrafficPolicySpecResponseOverrideRedirect {
+            /**
+             * Hostname is the hostname to be used in the value of the `Location`
+             * header in the response.
+             * When empty, the hostname in the `Host` header of the request is used.
+             */
+            hostname: string;
+            path: outputs.gateway.v1alpha1.BackendTrafficPolicySpecResponseOverrideRedirectPath;
+            /**
+             * Port is the port to be used in the value of the `Location`
+             * header in the response.
+             *
+             * If redirect scheme is not-empty, the well-known port associated with the redirect scheme will be used.
+             * Specifically "http" to port 80 and "https" to port 443. If the redirect scheme does not have a
+             * well-known port or redirect scheme is empty, the listener port of the Gateway will be used.
+             *
+             * Port will not be added in the 'Location' header if scheme is HTTP and port is 80
+             * or scheme is HTTPS and port is 443.
+             */
+            port: number;
+            /**
+             * Scheme is the scheme to be used in the value of the `Location` header in
+             * the response. When empty, the scheme of the request is used.
+             */
+            scheme: string;
+            /**
+             * StatusCode is the HTTP status code to be used in response.
+             */
+            statusCode: number;
+        }
+        /**
+         * Redirect configuration
+         */
+        interface BackendTrafficPolicySpecResponseOverrideRedirectPatch {
+            /**
+             * Hostname is the hostname to be used in the value of the `Location`
+             * header in the response.
+             * When empty, the hostname in the `Host` header of the request is used.
+             */
+            hostname: string;
+            path: outputs.gateway.v1alpha1.BackendTrafficPolicySpecResponseOverrideRedirectPathPatch;
+            /**
+             * Port is the port to be used in the value of the `Location`
+             * header in the response.
+             *
+             * If redirect scheme is not-empty, the well-known port associated with the redirect scheme will be used.
+             * Specifically "http" to port 80 and "https" to port 443. If the redirect scheme does not have a
+             * well-known port or redirect scheme is empty, the listener port of the Gateway will be used.
+             *
+             * Port will not be added in the 'Location' header if scheme is HTTP and port is 80
+             * or scheme is HTTPS and port is 443.
+             */
+            port: number;
+            /**
+             * Scheme is the scheme to be used in the value of the `Location` header in
+             * the response. When empty, the scheme of the request is used.
+             */
+            scheme: string;
+            /**
+             * StatusCode is the HTTP status code to be used in response.
+             */
+            statusCode: number;
+        }
+        /**
+         * Path defines parameters used to modify the path of the incoming request.
+         * The modified path is then used to construct the `Location` header. When
+         * empty, the request path is used as-is.
+         * Only ReplaceFullPath path modifier is supported currently.
+         */
+        interface BackendTrafficPolicySpecResponseOverrideRedirectPath {
+            /**
+             * ReplaceFullPath specifies the value with which to replace the full path
+             * of a request during a rewrite or redirect.
+             */
+            replaceFullPath: string;
+            /**
+             * ReplacePrefixMatch specifies the value with which to replace the prefix
+             * match of a request during a rewrite or redirect. For example, a request
+             * to "/foo/bar" with a prefix match of "/foo" and a ReplacePrefixMatch
+             * of "/xyz" would be modified to "/xyz/bar".
+             *
+             * Note that this matches the behavior of the PathPrefix match type. This
+             * matches full path elements. A path element refers to the list of labels
+             * in the path split by the `/` separator. When specified, a trailing `/` is
+             * ignored. For example, the paths `/abc`, `/abc/`, and `/abc/def` would all
+             * match the prefix `/abc`, but the path `/abcd` would not.
+             *
+             * ReplacePrefixMatch is only compatible with a `PathPrefix` HTTPRouteMatch.
+             * Using any other HTTPRouteMatch type on the same HTTPRouteRule will result in
+             * the implementation setting the Accepted Condition for the Route to `status: False`.
+             *
+             * Request Path | Prefix Match | Replace Prefix | Modified Path
+             */
+            replacePrefixMatch: string;
+            /**
+             * Type defines the type of path modifier. Additional types may be
+             * added in a future release of the API.
+             *
+             * Note that values may be added to this enum, implementations
+             * must ensure that unknown values will not cause a crash.
+             *
+             * Unknown values here must result in the implementation setting the
+             * Accepted Condition for the Route to `status: False`, with a
+             * Reason of `UnsupportedValue`.
+             */
+            type: string;
+        }
+        /**
+         * Path defines parameters used to modify the path of the incoming request.
+         * The modified path is then used to construct the `Location` header. When
+         * empty, the request path is used as-is.
+         * Only ReplaceFullPath path modifier is supported currently.
+         */
+        interface BackendTrafficPolicySpecResponseOverrideRedirectPathPatch {
+            /**
+             * ReplaceFullPath specifies the value with which to replace the full path
+             * of a request during a rewrite or redirect.
+             */
+            replaceFullPath: string;
+            /**
+             * ReplacePrefixMatch specifies the value with which to replace the prefix
+             * match of a request during a rewrite or redirect. For example, a request
+             * to "/foo/bar" with a prefix match of "/foo" and a ReplacePrefixMatch
+             * of "/xyz" would be modified to "/xyz/bar".
+             *
+             * Note that this matches the behavior of the PathPrefix match type. This
+             * matches full path elements. A path element refers to the list of labels
+             * in the path split by the `/` separator. When specified, a trailing `/` is
+             * ignored. For example, the paths `/abc`, `/abc/`, and `/abc/def` would all
+             * match the prefix `/abc`, but the path `/abcd` would not.
+             *
+             * ReplacePrefixMatch is only compatible with a `PathPrefix` HTTPRouteMatch.
+             * Using any other HTTPRouteMatch type on the same HTTPRouteRule will result in
+             * the implementation setting the Accepted Condition for the Route to `status: False`.
+             *
+             * Request Path | Prefix Match | Replace Prefix | Modified Path
+             */
+            replacePrefixMatch: string;
+            /**
+             * Type defines the type of path modifier. Additional types may be
+             * added in a future release of the API.
+             *
+             * Note that values may be added to this enum, implementations
+             * must ensure that unknown values will not cause a crash.
+             *
+             * Unknown values here must result in the implementation setting the
+             * Accepted Condition for the Route to `status: False`, with a
+             * Reason of `UnsupportedValue`.
+             */
+            type: string;
+        }
         /**
          * Response configuration.
          */
@@ -117921,6 +118829,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface BackendTrafficPolicySpecRetry {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -117933,6 +118847,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface BackendTrafficPolicySpecRetryPatch {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -121916,6 +122836,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface EnvoyExtensionPolicySpecExtProcBackendSettingsRetry {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -121928,6 +122854,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface EnvoyExtensionPolicySpecExtProcBackendSettingsRetryPatch {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -124328,6 +125260,10 @@ export declare namespace gateway {
              * the number of cpuset threads on the platform.
              */
             concurrency: number;
+            /**
+             * DisableLuaValidation disables the Lua script validation for Lua EnvoyExtensionPolicies
+             */
+            disableLuaValidation: boolean;
             /**
              * ExtraArgs defines additional command line options that are provided to Envoy.
              * More info: https://www.envoyproxy.io/docs/envoy/latest/operations/cli#command-line-options
@@ -124798,6 +125734,10 @@ export declare namespace gateway {
              * the number of cpuset threads on the platform.
              */
             concurrency: number;
+            /**
+             * DisableLuaValidation disables the Lua script validation for Lua EnvoyExtensionPolicies
+             */
+            disableLuaValidation: boolean;
             /**
              * ExtraArgs defines additional command line options that are provided to Envoy.
              * More info: https://www.envoyproxy.io/docs/envoy/latest/operations/cli#command-line-options
@@ -134878,6 +135818,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface EnvoyProxySpecTelemetryAccessLogSettingsSinksAlsBackendSettingsRetry {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -134890,6 +135836,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface EnvoyProxySpecTelemetryAccessLogSettingsSinksAlsBackendSettingsRetryPatch {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -136218,6 +137170,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface EnvoyProxySpecTelemetryAccessLogSettingsSinksOpenTelemetryBackendSettingsRetry {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -136230,6 +137188,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface EnvoyProxySpecTelemetryAccessLogSettingsSinksOpenTelemetryBackendSettingsRetryPatch {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -136486,6 +137450,21 @@ export declare namespace gateway {
          * Metrics defines metrics configuration for managed proxies.
          */
         interface EnvoyProxySpecTelemetryMetrics {
+            /**
+             * ClusterStatName defines the value of cluster alt_stat_name, determining how cluster stats are named.
+             * For more details, see envoy docs: https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/cluster/v3/cluster.proto.html
+             * The supported operators for this pattern are:
+             * %ROUTE_NAME%: name of Gateway API xRoute resource
+             * %ROUTE_NAMESPACE%: namespace of Gateway API xRoute resource
+             * %ROUTE_KIND%: kind of Gateway API xRoute resource
+             * %ROUTE_RULE_NAME%: name of the Gateway API xRoute section
+             * %ROUTE_RULE_NUMBER%: name of the Gateway API xRoute section
+             * %BACKEND_REFS%: names of all backends referenced in <NAMESPACE>/<NAME>|<NAMESPACE>/<NAME>|... format
+             * Only xDS Clusters created for HTTPRoute and GRPCRoute are currently supported.
+             * Default: %ROUTE_KIND%/%ROUTE_NAMESPACE%/%ROUTE_NAME%/rule/%ROUTE_RULE_NUMBER%
+             * Example: httproute/my-ns/my-route/rule/0
+             */
+            clusterStatName: string;
             /**
              * EnablePerEndpointStats enables per endpoint envoy stats metrics.
              * Please use with caution.
@@ -136548,6 +137527,21 @@ export declare namespace gateway {
          * Metrics defines metrics configuration for managed proxies.
          */
         interface EnvoyProxySpecTelemetryMetricsPatch {
+            /**
+             * ClusterStatName defines the value of cluster alt_stat_name, determining how cluster stats are named.
+             * For more details, see envoy docs: https://www.envoyproxy.io/docs/envoy/latest/api-v3/config/cluster/v3/cluster.proto.html
+             * The supported operators for this pattern are:
+             * %ROUTE_NAME%: name of Gateway API xRoute resource
+             * %ROUTE_NAMESPACE%: namespace of Gateway API xRoute resource
+             * %ROUTE_KIND%: kind of Gateway API xRoute resource
+             * %ROUTE_RULE_NAME%: name of the Gateway API xRoute section
+             * %ROUTE_RULE_NUMBER%: name of the Gateway API xRoute section
+             * %BACKEND_REFS%: names of all backends referenced in <NAMESPACE>/<NAME>|<NAMESPACE>/<NAME>|... format
+             * Only xDS Clusters created for HTTPRoute and GRPCRoute are currently supported.
+             * Default: %ROUTE_KIND%/%ROUTE_NAMESPACE%/%ROUTE_NAME%/rule/%ROUTE_RULE_NUMBER%
+             * Example: httproute/my-ns/my-route/rule/0
+             */
+            clusterStatName: string;
             /**
              * EnablePerEndpointStats enables per endpoint envoy stats metrics.
              * Please use with caution.
@@ -137686,6 +138680,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface EnvoyProxySpecTelemetryMetricsSinksOpenTelemetryBackendSettingsRetry {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -137698,6 +138698,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface EnvoyProxySpecTelemetryMetricsSinksOpenTelemetryBackendSettingsRetryPatch {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -139044,6 +140050,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface EnvoyProxySpecTelemetryTracingProviderBackendSettingsRetry {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -139056,6 +140068,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface EnvoyProxySpecTelemetryTracingProviderBackendSettingsRetryPatch {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -141502,6 +142520,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface SecurityPolicySpecExtAuthGrpcBackendSettingsRetry {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -141514,6 +142538,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface SecurityPolicySpecExtAuthGrpcBackendSettingsRetryPatch {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -142785,6 +143815,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface SecurityPolicySpecExtAuthHttpBackendSettingsRetry {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -142797,6 +143833,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface SecurityPolicySpecExtAuthHttpBackendSettingsRetryPatch {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -144390,6 +145432,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface SecurityPolicySpecJwtProvidersRemoteJWKSBackendSettingsRetry {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -144402,6 +145450,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface SecurityPolicySpecJwtProvidersRemoteJWKSBackendSettingsRetryPatch {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -146013,6 +147067,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface SecurityPolicySpecOidcProviderBackendSettingsRetry {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -146025,6 +147085,12 @@ export declare namespace gateway {
          * If not set, retry will be disabled.
          */
         interface SecurityPolicySpecOidcProviderBackendSettingsRetryPatch {
+            /**
+             * NumAttemptsPerPriority defines the number of requests (initial attempt + retries)
+             * that should be sent to the same priority before switching to a different one.
+             * If not specified or set to 0, all requests are sent to the highest priority that is healthy.
+             */
+            numAttemptsPerPriority: number;
             /**
              * NumRetries is the number of retries to be attempted. Defaults to 2.
              */
@@ -237925,6 +238991,7 @@ export declare namespace minio {
             runtimeClassName: string;
             securityContext: outputs.minio.v2.TenantSpecPoolsSecurityContext;
             servers: number;
+            terminationGracePeriodSeconds: number;
             tolerations: outputs.minio.v2.TenantSpecPoolsTolerations[];
             topologySpreadConstraints: outputs.minio.v2.TenantSpecPoolsTopologySpreadConstraints[];
             volumeClaimTemplate: outputs.minio.v2.TenantSpecPoolsVolumeClaimTemplate;
@@ -238399,6 +239466,7 @@ export declare namespace minio {
             runtimeClassName: string;
             securityContext: outputs.minio.v2.TenantSpecPoolsSecurityContextPatch;
             servers: number;
+            terminationGracePeriodSeconds: number;
             tolerations: outputs.minio.v2.TenantSpecPoolsTolerationsPatch[];
             topologySpreadConstraints: outputs.minio.v2.TenantSpecPoolsTopologySpreadConstraintsPatch[];
             volumeClaimTemplate: outputs.minio.v2.TenantSpecPoolsVolumeClaimTemplatePatch;
@@ -252155,6 +253223,10 @@ export declare namespace postgresql {
             resizingPVC: string[];
             secretsResourceVersion: outputs.postgresql.v1.ClusterStatusSecretsResourceVersion;
             switchReplicaClusterStatus: outputs.postgresql.v1.ClusterStatusSwitchReplicaClusterStatus;
+            /**
+             * SystemID is the latest detected PostgreSQL SystemID
+             */
+            systemID: string;
             /**
              * TablespacesStatus reports the state of the declarative tablespaces in the cluster
              */
@@ -252629,6 +253701,10 @@ export declare namespace postgresql {
             resizingPVC: string[];
             secretsResourceVersion: outputs.postgresql.v1.ClusterStatusSecretsResourceVersionPatch;
             switchReplicaClusterStatus: outputs.postgresql.v1.ClusterStatusSwitchReplicaClusterStatusPatch;
+            /**
+             * SystemID is the latest detected PostgreSQL SystemID
+             */
+            systemID: string;
             /**
              * TablespacesStatus reports the state of the declarative tablespaces in the cluster
              */
@@ -270502,6 +271578,11 @@ export declare namespace velero {
              * where the backup repository is stored.
              */
             backupStorageLocation: string;
+            /**
+             * Cancel indicates request to cancel the ongoing PodVolumeBackup. It can be set
+             * when the PodVolumeBackup is in InProgress phase
+             */
+            cancel: boolean;
             /**
              * Node is the name of the node that the Pod is running on.
              */
@@ -270544,6 +271625,11 @@ export declare namespace velero {
              * where the backup repository is stored.
              */
             backupStorageLocation: string;
+            /**
+             * Cancel indicates request to cancel the ongoing PodVolumeBackup. It can be set
+             * when the PodVolumeBackup is in InProgress phase
+             */
+            cancel: boolean;
             /**
              * Node is the name of the node that the Pod is running on.
              */
@@ -270780,6 +271866,11 @@ export declare namespace velero {
              * where the backup repository is stored.
              */
             backupStorageLocation: string;
+            /**
+             * Cancel indicates request to cancel the ongoing PodVolumeRestore. It can be set
+             * when the PodVolumeRestore is in InProgress phase
+             */
+            cancel: boolean;
             pod: outputs.velero.v1.PodVolumeRestoreSpecPod;
             /**
              * RepoIdentifier is the backup repository identifier.
@@ -270818,6 +271909,11 @@ export declare namespace velero {
              * where the backup repository is stored.
              */
             backupStorageLocation: string;
+            /**
+             * Cancel indicates request to cancel the ongoing PodVolumeRestore. It can be set
+             * when the PodVolumeRestore is in InProgress phase
+             */
+            cancel: boolean;
             pod: outputs.velero.v1.PodVolumeRestoreSpecPodPatch;
             /**
              * RepoIdentifier is the backup repository identifier.
@@ -270939,6 +272035,11 @@ export declare namespace velero {
          * PodVolumeRestoreStatus is the current status of a PodVolumeRestore.
          */
         interface PodVolumeRestoreStatus {
+            /**
+             * AcceptedTimestamp records the time the pod volume restore is to be prepared.
+             * The server's time is used for AcceptedTimestamp
+             */
+            acceptedTimestamp: string;
             /**
              * CompletionTimestamp records the time a restore was completed.
              * Completion time is recorded even on failed restores.
@@ -270949,6 +272050,10 @@ export declare namespace velero {
              * Message is a message about the pod volume restore's status.
              */
             message: string;
+            /**
+             * Node is name of the node where the pod volume restore is processed.
+             */
+            node: string;
             /**
              * Phase is the current state of the PodVolumeRestore.
              */
@@ -270964,6 +272069,11 @@ export declare namespace velero {
          * PodVolumeRestoreStatus is the current status of a PodVolumeRestore.
          */
         interface PodVolumeRestoreStatusPatch {
+            /**
+             * AcceptedTimestamp records the time the pod volume restore is to be prepared.
+             * The server's time is used for AcceptedTimestamp
+             */
+            acceptedTimestamp: string;
             /**
              * CompletionTimestamp records the time a restore was completed.
              * Completion time is recorded even on failed restores.
@@ -270974,6 +272084,10 @@ export declare namespace velero {
              * Message is a message about the pod volume restore's status.
              */
             message: string;
+            /**
+             * Node is name of the node where the pod volume restore is processed.
+             */
+            node: string;
             /**
              * Phase is the current state of the PodVolumeRestore.
              */