@kilic.dev/pulumi-k8s-crds 4.0.0 → 4.0.1

package/dist/types/input.d.ts

@@ -49747,253 +49747,6 @@ export declare namespace cilium {
              */
             externalCIDRs?: pulumi.Input<pulumi.Input<string>[] | undefined>;
         }
-        interface CiliumClusterwideEnvoyConfig {
-            /**
-             * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-             */
-            apiVersion?: pulumi.Input<"cilium.io/v2" | undefined>;
-            /**
-             * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-             */
-            kind?: pulumi.Input<"CiliumClusterwideEnvoyConfig" | undefined>;
-            /**
-             * Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-             */
-            metadata: pulumi.Input<pulumiKubernetes.types.input.meta.v1.ObjectMeta>;
-            spec?: pulumi.Input<inputs.cilium.v2.CiliumClusterwideEnvoyConfigSpec | undefined>;
-        }
-        interface CiliumClusterwideEnvoyConfigSpec {
-            /**
-             * BackendServices specifies Kubernetes services whose backends
-             * are automatically synced to Envoy using EDS.  Traffic for these
-             * services is not forwarded to an Envoy listener. This allows an
-             * Envoy listener load balance traffic to these backends while
-             * normal Cilium service load balancing takes care of balancing
-             * traffic for these services at the same time.
-             */
-            backendServices?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumClusterwideEnvoyConfigSpecBackendServices>[] | undefined>;
-            nodeSelector?: pulumi.Input<inputs.cilium.v2.CiliumClusterwideEnvoyConfigSpecNodeSelector | undefined>;
-            /**
-             * Envoy xDS resources, a list of the following Envoy resource types:
-             * type.googleapis.com/envoy.config.listener.v3.Listener,
-             * type.googleapis.com/envoy.config.route.v3.RouteConfiguration,
-             * type.googleapis.com/envoy.config.cluster.v3.Cluster,
-             * type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment, and
-             * type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.Secret.
-             */
-            resources: pulumi.Input<pulumi.Input<{
-                [key: string]: any;
-            }>[]>;
-            /**
-             * Services specifies Kubernetes services for which traffic is
-             * forwarded to an Envoy listener for L7 load balancing. Backends
-             * of these services are automatically synced to Envoy usign EDS.
-             */
-            services?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumClusterwideEnvoyConfigSpecServices>[] | undefined>;
-        }
-        interface CiliumClusterwideEnvoyConfigSpecBackendServices {
-            /**
-             * Name is the name of a destination Kubernetes service that identifies traffic
-             * to be redirected.
-             */
-            name: pulumi.Input<string>;
-            /**
-             * Namespace is the Kubernetes service namespace.
-             * In CiliumEnvoyConfig namespace defaults to the namespace of the CEC,
-             * In CiliumClusterwideEnvoyConfig namespace defaults to "default".
-             */
-            namespace?: pulumi.Input<string | undefined>;
-            /**
-             * Ports is a set of port numbers, which can be used for filtering in case of underlying
-             * is exposing multiple port numbers.
-             */
-            number?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        interface CiliumClusterwideEnvoyConfigSpecBackendServicesPatch {
-            /**
-             * Name is the name of a destination Kubernetes service that identifies traffic
-             * to be redirected.
-             */
-            name?: pulumi.Input<string | undefined>;
-            /**
-             * Namespace is the Kubernetes service namespace.
-             * In CiliumEnvoyConfig namespace defaults to the namespace of the CEC,
-             * In CiliumClusterwideEnvoyConfig namespace defaults to "default".
-             */
-            namespace?: pulumi.Input<string | undefined>;
-            /**
-             * Ports is a set of port numbers, which can be used for filtering in case of underlying
-             * is exposing multiple port numbers.
-             */
-            number?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * NodeSelector is a label selector that determines to which nodes
-         * this configuration applies.
-         * If nil, then this config applies to all nodes.
-         */
-        interface CiliumClusterwideEnvoyConfigSpecNodeSelector {
-            /**
-             * matchExpressions is a list of label selector requirements. The requirements are ANDed.
-             */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumClusterwideEnvoyConfigSpecNodeSelectorMatchExpressions>[] | undefined>;
-            /**
-             * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
-             * map is equivalent to an element of matchExpressions, whose key field is "key", the
-             * operator is "In", and the values array contains only "value". The requirements are ANDed.
-             */
-            matchLabels?: pulumi.Input<{
-                [key: string]: pulumi.Input<string>;
-            } | undefined>;
-        }
-        /**
-         * A label selector requirement is a selector that contains values, a key, and an operator that
-         * relates the key and values.
-         */
-        interface CiliumClusterwideEnvoyConfigSpecNodeSelectorMatchExpressions {
-            /**
-             * key is the label key that the selector applies to.
-             */
-            key: pulumi.Input<string>;
-            /**
-             * operator represents a key's relationship to a set of values.
-             * Valid operators are In, NotIn, Exists and DoesNotExist.
-             */
-            operator: pulumi.Input<string>;
-            /**
-             * values is an array of string values. If the operator is In or NotIn,
-             * the values array must be non-empty. If the operator is Exists or DoesNotExist,
-             * the values array must be empty. This array is replaced during a strategic
-             * merge patch.
-             */
-            values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * A label selector requirement is a selector that contains values, a key, and an operator that
-         * relates the key and values.
-         */
-        interface CiliumClusterwideEnvoyConfigSpecNodeSelectorMatchExpressionsPatch {
-            /**
-             * key is the label key that the selector applies to.
-             */
-            key?: pulumi.Input<string | undefined>;
-            /**
-             * operator represents a key's relationship to a set of values.
-             * Valid operators are In, NotIn, Exists and DoesNotExist.
-             */
-            operator?: pulumi.Input<string | undefined>;
-            /**
-             * values is an array of string values. If the operator is In or NotIn,
-             * the values array must be non-empty. If the operator is Exists or DoesNotExist,
-             * the values array must be empty. This array is replaced during a strategic
-             * merge patch.
-             */
-            values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * NodeSelector is a label selector that determines to which nodes
-         * this configuration applies.
-         * If nil, then this config applies to all nodes.
-         */
-        interface CiliumClusterwideEnvoyConfigSpecNodeSelectorPatch {
-            /**
-             * matchExpressions is a list of label selector requirements. The requirements are ANDed.
-             */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumClusterwideEnvoyConfigSpecNodeSelectorMatchExpressionsPatch>[] | undefined>;
-            /**
-             * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
-             * map is equivalent to an element of matchExpressions, whose key field is "key", the
-             * operator is "In", and the values array contains only "value". The requirements are ANDed.
-             */
-            matchLabels?: pulumi.Input<{
-                [key: string]: pulumi.Input<string>;
-            } | undefined>;
-        }
-        interface CiliumClusterwideEnvoyConfigSpecPatch {
-            /**
-             * BackendServices specifies Kubernetes services whose backends
-             * are automatically synced to Envoy using EDS.  Traffic for these
-             * services is not forwarded to an Envoy listener. This allows an
-             * Envoy listener load balance traffic to these backends while
-             * normal Cilium service load balancing takes care of balancing
-             * traffic for these services at the same time.
-             */
-            backendServices?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumClusterwideEnvoyConfigSpecBackendServicesPatch>[] | undefined>;
-            nodeSelector?: pulumi.Input<inputs.cilium.v2.CiliumClusterwideEnvoyConfigSpecNodeSelectorPatch | undefined>;
-            /**
-             * Envoy xDS resources, a list of the following Envoy resource types:
-             * type.googleapis.com/envoy.config.listener.v3.Listener,
-             * type.googleapis.com/envoy.config.route.v3.RouteConfiguration,
-             * type.googleapis.com/envoy.config.cluster.v3.Cluster,
-             * type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment, and
-             * type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.Secret.
-             */
-            resources?: pulumi.Input<pulumi.Input<{
-                [key: string]: any;
-            }>[] | undefined>;
-            /**
-             * Services specifies Kubernetes services for which traffic is
-             * forwarded to an Envoy listener for L7 load balancing. Backends
-             * of these services are automatically synced to Envoy usign EDS.
-             */
-            services?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumClusterwideEnvoyConfigSpecServicesPatch>[] | undefined>;
-        }
-        interface CiliumClusterwideEnvoyConfigSpecServices {
-            /**
-             * Listener specifies the name of the Envoy listener the
-             * service traffic is redirected to. The listener must be
-             * specified in the Envoy 'resources' of the same
-             * CiliumEnvoyConfig.
-             *
-             * If omitted, the first listener specified in 'resources' is
-             * used.
-             */
-            listener?: pulumi.Input<string | undefined>;
-            /**
-             * Name is the name of a destination Kubernetes service that identifies traffic
-             * to be redirected.
-             */
-            name: pulumi.Input<string>;
-            /**
-             * Namespace is the Kubernetes service namespace.
-             * In CiliumEnvoyConfig namespace this is overridden to the namespace of the CEC,
-             * In CiliumClusterwideEnvoyConfig namespace defaults to "default".
-             */
-            namespace?: pulumi.Input<string | undefined>;
-            /**
-             * Ports is a set of service's frontend ports that should be redirected to the Envoy
-             * listener. By default all frontend ports of the service are redirected.
-             */
-            ports?: pulumi.Input<pulumi.Input<number>[] | undefined>;
-        }
-        interface CiliumClusterwideEnvoyConfigSpecServicesPatch {
-            /**
-             * Listener specifies the name of the Envoy listener the
-             * service traffic is redirected to. The listener must be
-             * specified in the Envoy 'resources' of the same
-             * CiliumEnvoyConfig.
-             *
-             * If omitted, the first listener specified in 'resources' is
-             * used.
-             */
-            listener?: pulumi.Input<string | undefined>;
-            /**
-             * Name is the name of a destination Kubernetes service that identifies traffic
-             * to be redirected.
-             */
-            name?: pulumi.Input<string | undefined>;
-            /**
-             * Namespace is the Kubernetes service namespace.
-             * In CiliumEnvoyConfig namespace this is overridden to the namespace of the CEC,
-             * In CiliumClusterwideEnvoyConfig namespace defaults to "default".
-             */
-            namespace?: pulumi.Input<string | undefined>;
-            /**
-             * Ports is a set of service's frontend ports that should be redirected to the Envoy
-             * listener. By default all frontend ports of the service are redirected.
-             */
-            ports?: pulumi.Input<pulumi.Input<number>[] | undefined>;
-        }
         /**
          * CiliumClusterwideNetworkPolicy is a Kubernetes third-party resource with an
          * modified version of CiliumNetworkPolicy which is cluster scoped rather than
@@ -59804,7 +59557,12 @@ export declare namespace cilium {
              */
             type: pulumi.Input<string>;
         }
-        interface CiliumEgressGatewayPolicy {
+        /**
+         * CiliumLoadBalancerIPPool is a Kubernetes third-party resource which
+         * is used to defined pools of IPs which the operator can use to allocate
+         * and advertise IPs for Services of type LoadBalancer.
+         */
+        interface CiliumLoadBalancerIPPool {
             /**
              * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
              */
@@ -59812,92 +59570,82 @@ export declare namespace cilium {
             /**
              * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
              */
-            kind?: pulumi.Input<"CiliumEgressGatewayPolicy" | undefined>;
+            kind?: pulumi.Input<"CiliumLoadBalancerIPPool" | undefined>;
             /**
              * Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
              */
             metadata: pulumi.Input<pulumiKubernetes.types.input.meta.v1.ObjectMeta>;
-            spec?: pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpec | undefined>;
+            spec: pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolSpec>;
+            status?: pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolStatus | undefined>;
         }
-        interface CiliumEgressGatewayPolicySpec {
-            /**
-             * DestinationCIDRs is a list of destination CIDRs for destination IP addresses.
-             * If a destination IP matches any one CIDR, it will be selected.
-             */
-            destinationCIDRs: pulumi.Input<pulumi.Input<string>[]>;
-            egressGateway: pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecEgressGateway>;
+        /**
+         * Spec is a human readable description for a BGP load balancer
+         * ip pool.
+         */
+        interface CiliumLoadBalancerIPPoolSpec {
             /**
-             * Optional list of gateway nodes responsible for SNATing traffic.
-             * If this field has any entries the contents of the egressGateway field will be ignored.
-             * In case multiple nodes are a match for the given set of labels in each entry,
-             * the first node in lexical ordering based on their name will be selected for each entry.
+             * AllowFirstLastIPs, if set to `Yes` or undefined means that the first and last IPs of each CIDR will be allocatable.
+             * If `No`, these IPs will be reserved. This field is ignored for /{31,32} and /{127,128} CIDRs since
+             * reserving the first and last IPs would make the CIDRs unusable.
              */
-            egressGateways?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecEgressGateways>[] | undefined>;
+            allowFirstLastIPs?: pulumi.Input<string | undefined>;
             /**
-             * ExcludedCIDRs is a list of destination CIDRs that will be excluded
-             * from the egress gateway redirection and SNAT logic.
-             * Should be a subset of destinationCIDRs otherwise it will not have any
-             * effect.
+             * Blocks is a list of CIDRs comprising this IP Pool
              */
-            excludedCIDRs?: pulumi.Input<pulumi.Input<string>[] | undefined>;
+            blocks?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolSpecBlocks>[] | undefined>;
             /**
-             * Egress represents a list of rules by which egress traffic is
-             * filtered from the source pods.
+             * Disabled, if set to true means that no new IPs will be allocated from this pool.
+             * Existing allocations will not be removed from services.
              */
-            selectors: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecSelectors>[]>;
+            disabled?: pulumi.Input<boolean | undefined>;
+            serviceSelector?: pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolSpecServiceSelector | undefined>;
+        }
+        /**
+         * CiliumLoadBalancerIPPoolIPBlock describes a single IP block.
+         */
+        interface CiliumLoadBalancerIPPoolSpecBlocks {
+            cidr?: pulumi.Input<string | undefined>;
+            start?: pulumi.Input<string | undefined>;
+            stop?: pulumi.Input<string | undefined>;
+        }
+        /**
+         * CiliumLoadBalancerIPPoolIPBlock describes a single IP block.
+         */
+        interface CiliumLoadBalancerIPPoolSpecBlocksPatch {
+            cidr?: pulumi.Input<string | undefined>;
+            start?: pulumi.Input<string | undefined>;
+            stop?: pulumi.Input<string | undefined>;
         }
         /**
-         * EgressGateway is the gateway node responsible for SNATing traffic.
-         * In case multiple nodes are a match for the given set of labels, the first node
-         * in lexical ordering based on their name will be selected.
+         * Spec is a human readable description for a BGP load balancer
+         * ip pool.
          */
-        interface CiliumEgressGatewayPolicySpecEgressGateway {
+        interface CiliumLoadBalancerIPPoolSpecPatch {
             /**
-             * EgressIP is the source IP address that the egress traffic is SNATed
-             * with.
-             *
-             * Example:
-             * When set to "192.168.1.100", matching egress traffic will be
-             * redirected to the node matching the NodeSelector field and SNATed
-             * with IP address 192.168.1.100.
-             *
-             * When set to "2001:db8::1", matching egress traffic will be
-             * redirected to the node matching the NodeSelector field and SNATed
-             * with IPv6 address 2001:db8::1.
-             *
-             * When none of the Interface or EgressIP fields is specified, the
-             * policy will use the first IPv4 assigned to the interface with the
-             * default route.
+             * AllowFirstLastIPs, if set to `Yes` or undefined means that the first and last IPs of each CIDR will be allocatable.
+             * If `No`, these IPs will be reserved. This field is ignored for /{31,32} and /{127,128} CIDRs since
+             * reserving the first and last IPs would make the CIDRs unusable.
              */
-            egressIP?: pulumi.Input<string | undefined>;
+            allowFirstLastIPs?: pulumi.Input<string | undefined>;
             /**
-             * Interface is the network interface to which the egress IP address
-             * that the traffic is SNATed with is assigned.
-             *
-             * Example:
-             * When set to "eth1", matching egress traffic will be redirected to the
-             * node matching the NodeSelector field and SNATed with the first IPv4
-             * address assigned to the eth1 interface.
-             *
-             * When none of the Interface or EgressIP fields is specified, the
-             * policy will use the first IPv4 assigned to the interface with the
-             * default route.
+             * Blocks is a list of CIDRs comprising this IP Pool
              */
-            interface?: pulumi.Input<string | undefined>;
-            nodeSelector: pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecEgressGatewayNodeSelector>;
+            blocks?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolSpecBlocksPatch>[] | undefined>;
+            /**
+             * Disabled, if set to true means that no new IPs will be allocated from this pool.
+             * Existing allocations will not be removed from services.
+             */
+            disabled?: pulumi.Input<boolean | undefined>;
+            serviceSelector?: pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolSpecServiceSelectorPatch | undefined>;
         }
         /**
-         * This is a label selector which selects the node that should act as
-         * egress gateway for the given policy.
-         * In case multiple nodes are selected, only the first one in the
-         * lexical ordering over the node names will be used.
-         * This field follows standard label selector semantics.
+         * ServiceSelector selects a set of services which are eligible to receive IPs from this
          */
-        interface CiliumEgressGatewayPolicySpecEgressGatewayNodeSelector {
+        interface CiliumLoadBalancerIPPoolSpecServiceSelector {
             /**
              * matchExpressions is a list of label selector requirements. The requirements are ANDed.
              */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecEgressGatewayNodeSelectorMatchExpressions>[] | undefined>;
+            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolSpecServiceSelectorMatchExpressions>[] | undefined>;
             /**
              * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
              * map is equivalent to an element of matchExpressions, whose key field is "key", the
@@ -59911,7 +59659,7 @@ export declare namespace cilium {
          * A label selector requirement is a selector that contains values, a key, and an operator that
          * relates the key and values.
          */
-        interface CiliumEgressGatewayPolicySpecEgressGatewayNodeSelectorMatchExpressions {
+        interface CiliumLoadBalancerIPPoolSpecServiceSelectorMatchExpressions {
             /**
              * key is the label key that the selector applies to.
              */
@@ -59933,7 +59681,7 @@ export declare namespace cilium {
          * A label selector requirement is a selector that contains values, a key, and an operator that
          * relates the key and values.
          */
-        interface CiliumEgressGatewayPolicySpecEgressGatewayNodeSelectorMatchExpressionsPatch {
+        interface CiliumLoadBalancerIPPoolSpecServiceSelectorMatchExpressionsPatch {
             /**
              * key is the label key that the selector applies to.
              */
@@ -59952,17 +59700,13 @@ export declare namespace cilium {
             values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
         }
         /**
-         * This is a label selector which selects the node that should act as
-         * egress gateway for the given policy.
-         * In case multiple nodes are selected, only the first one in the
-         * lexical ordering over the node names will be used.
-         * This field follows standard label selector semantics.
+         * ServiceSelector selects a set of services which are eligible to receive IPs from this
          */
-        interface CiliumEgressGatewayPolicySpecEgressGatewayNodeSelectorPatch {
+        interface CiliumLoadBalancerIPPoolSpecServiceSelectorPatch {
             /**
              * matchExpressions is a list of label selector requirements. The requirements are ANDed.
              */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecEgressGatewayNodeSelectorMatchExpressionsPatch>[] | undefined>;
+            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolSpecServiceSelectorMatchExpressionsPatch>[] | undefined>;
             /**
              * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
              * map is equivalent to an element of matchExpressions, whose key field is "key", the
@@ -59973,929 +59717,38 @@ export declare namespace cilium {
             } | undefined>;
         }
         /**
-         * EgressGateway is the gateway node responsible for SNATing traffic.
-         * In case multiple nodes are a match for the given set of labels, the first node
-         * in lexical ordering based on their name will be selected.
+         * Status is the status of the IP Pool.
+         *
+         * It might be possible for users to define overlapping IP Pools, we can't validate or enforce non-overlapping pools
+         * during object creation. The Cilium operator will do this validation and update the status to reflect the ability
+         * to allocate IPs from this pool.
          */
-        interface CiliumEgressGatewayPolicySpecEgressGatewayPatch {
-            /**
-             * EgressIP is the source IP address that the egress traffic is SNATed
-             * with.
-             *
-             * Example:
-             * When set to "192.168.1.100", matching egress traffic will be
-             * redirected to the node matching the NodeSelector field and SNATed
-             * with IP address 192.168.1.100.
-             *
-             * When set to "2001:db8::1", matching egress traffic will be
-             * redirected to the node matching the NodeSelector field and SNATed
-             * with IPv6 address 2001:db8::1.
-             *
-             * When none of the Interface or EgressIP fields is specified, the
-             * policy will use the first IPv4 assigned to the interface with the
-             * default route.
-             */
-            egressIP?: pulumi.Input<string | undefined>;
+        interface CiliumLoadBalancerIPPoolStatus {
             /**
-             * Interface is the network interface to which the egress IP address
-             * that the traffic is SNATed with is assigned.
-             *
-             * Example:
-             * When set to "eth1", matching egress traffic will be redirected to the
-             * node matching the NodeSelector field and SNATed with the first IPv4
-             * address assigned to the eth1 interface.
-             *
-             * When none of the Interface or EgressIP fields is specified, the
-             * policy will use the first IPv4 assigned to the interface with the
-             * default route.
+             * Current service state
              */
-            interface?: pulumi.Input<string | undefined>;
-            nodeSelector?: pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecEgressGatewayNodeSelectorPatch | undefined>;
+            conditions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolStatusConditions>[] | undefined>;
         }
         /**
-         * EgressGateway identifies the node that should act as egress gateway for a
-         * given egress Gateway policy. In addition to that it also specifies the
-         * configuration of said node (which egress IP or network interface should be
-         * used to SNAT traffic).
+         * Condition contains details for one aspect of the current state of this API Resource.
          */
-        interface CiliumEgressGatewayPolicySpecEgressGateways {
+        interface CiliumLoadBalancerIPPoolStatusConditions {
             /**
-             * EgressIP is the source IP address that the egress traffic is SNATed
-             * with.
-             *
-             * Example:
-             * When set to "192.168.1.100", matching egress traffic will be
-             * redirected to the node matching the NodeSelector field and SNATed
-             * with IP address 192.168.1.100.
-             *
-             * When set to "2001:db8::1", matching egress traffic will be
-             * redirected to the node matching the NodeSelector field and SNATed
-             * with IPv6 address 2001:db8::1.
-             *
-             * When none of the Interface or EgressIP fields is specified, the
-             * policy will use the first IPv4 assigned to the interface with the
-             * default route.
+             * lastTransitionTime is the last time the condition transitioned from one status to another.
+             * This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
              */
-            egressIP?: pulumi.Input<string | undefined>;
+            lastTransitionTime: pulumi.Input<string>;
             /**
-             * Interface is the network interface to which the egress IP address
-             * that the traffic is SNATed with is assigned.
-             *
-             * Example:
-             * When set to "eth1", matching egress traffic will be redirected to the
-             * node matching the NodeSelector field and SNATed with the first IPv4
-             * address assigned to the eth1 interface.
-             *
-             * When none of the Interface or EgressIP fields is specified, the
-             * policy will use the first IPv4 assigned to the interface with the
-             * default route.
+             * message is a human readable message indicating details about the transition.
+             * This may be an empty string.
              */
-            interface?: pulumi.Input<string | undefined>;
-            nodeSelector: pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecEgressGatewaysNodeSelector>;
-        }
-        /**
-         * This is a label selector which selects the node that should act as
-         * egress gateway for the given policy.
-         * In case multiple nodes are selected, only the first one in the
-         * lexical ordering over the node names will be used.
-         * This field follows standard label selector semantics.
-         */
-        interface CiliumEgressGatewayPolicySpecEgressGatewaysNodeSelector {
+            message: pulumi.Input<string>;
             /**
-             * matchExpressions is a list of label selector requirements. The requirements are ANDed.
+             * observedGeneration represents the .metadata.generation that the condition was set based upon.
+             * For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
+             * with respect to the current state of the instance.
              */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecEgressGatewaysNodeSelectorMatchExpressions>[] | undefined>;
-            /**
-             * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
-             * map is equivalent to an element of matchExpressions, whose key field is "key", the
-             * operator is "In", and the values array contains only "value". The requirements are ANDed.
-             */
-            matchLabels?: pulumi.Input<{
-                [key: string]: pulumi.Input<string>;
-            } | undefined>;
-        }
-        /**
-         * A label selector requirement is a selector that contains values, a key, and an operator that
-         * relates the key and values.
-         */
-        interface CiliumEgressGatewayPolicySpecEgressGatewaysNodeSelectorMatchExpressions {
-            /**
-             * key is the label key that the selector applies to.
-             */
-            key: pulumi.Input<string>;
-            /**
-             * operator represents a key's relationship to a set of values.
-             * Valid operators are In, NotIn, Exists and DoesNotExist.
-             */
-            operator: pulumi.Input<string>;
-            /**
-             * values is an array of string values. If the operator is In or NotIn,
-             * the values array must be non-empty. If the operator is Exists or DoesNotExist,
-             * the values array must be empty. This array is replaced during a strategic
-             * merge patch.
-             */
-            values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * A label selector requirement is a selector that contains values, a key, and an operator that
-         * relates the key and values.
-         */
-        interface CiliumEgressGatewayPolicySpecEgressGatewaysNodeSelectorMatchExpressionsPatch {
-            /**
-             * key is the label key that the selector applies to.
-             */
-            key?: pulumi.Input<string | undefined>;
-            /**
-             * operator represents a key's relationship to a set of values.
-             * Valid operators are In, NotIn, Exists and DoesNotExist.
-             */
-            operator?: pulumi.Input<string | undefined>;
-            /**
-             * values is an array of string values. If the operator is In or NotIn,
-             * the values array must be non-empty. If the operator is Exists or DoesNotExist,
-             * the values array must be empty. This array is replaced during a strategic
-             * merge patch.
-             */
-            values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * This is a label selector which selects the node that should act as
-         * egress gateway for the given policy.
-         * In case multiple nodes are selected, only the first one in the
-         * lexical ordering over the node names will be used.
-         * This field follows standard label selector semantics.
-         */
-        interface CiliumEgressGatewayPolicySpecEgressGatewaysNodeSelectorPatch {
-            /**
-             * matchExpressions is a list of label selector requirements. The requirements are ANDed.
-             */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecEgressGatewaysNodeSelectorMatchExpressionsPatch>[] | undefined>;
-            /**
-             * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
-             * map is equivalent to an element of matchExpressions, whose key field is "key", the
-             * operator is "In", and the values array contains only "value". The requirements are ANDed.
-             */
-            matchLabels?: pulumi.Input<{
-                [key: string]: pulumi.Input<string>;
-            } | undefined>;
-        }
-        /**
-         * EgressGateway identifies the node that should act as egress gateway for a
-         * given egress Gateway policy. In addition to that it also specifies the
-         * configuration of said node (which egress IP or network interface should be
-         * used to SNAT traffic).
-         */
-        interface CiliumEgressGatewayPolicySpecEgressGatewaysPatch {
-            /**
-             * EgressIP is the source IP address that the egress traffic is SNATed
-             * with.
-             *
-             * Example:
-             * When set to "192.168.1.100", matching egress traffic will be
-             * redirected to the node matching the NodeSelector field and SNATed
-             * with IP address 192.168.1.100.
-             *
-             * When set to "2001:db8::1", matching egress traffic will be
-             * redirected to the node matching the NodeSelector field and SNATed
-             * with IPv6 address 2001:db8::1.
-             *
-             * When none of the Interface or EgressIP fields is specified, the
-             * policy will use the first IPv4 assigned to the interface with the
-             * default route.
-             */
-            egressIP?: pulumi.Input<string | undefined>;
-            /**
-             * Interface is the network interface to which the egress IP address
-             * that the traffic is SNATed with is assigned.
-             *
-             * Example:
-             * When set to "eth1", matching egress traffic will be redirected to the
-             * node matching the NodeSelector field and SNATed with the first IPv4
-             * address assigned to the eth1 interface.
-             *
-             * When none of the Interface or EgressIP fields is specified, the
-             * policy will use the first IPv4 assigned to the interface with the
-             * default route.
-             */
-            interface?: pulumi.Input<string | undefined>;
-            nodeSelector?: pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecEgressGatewaysNodeSelectorPatch | undefined>;
-        }
-        interface CiliumEgressGatewayPolicySpecPatch {
-            /**
-             * DestinationCIDRs is a list of destination CIDRs for destination IP addresses.
-             * If a destination IP matches any one CIDR, it will be selected.
-             */
-            destinationCIDRs?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-            egressGateway?: pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecEgressGatewayPatch | undefined>;
-            /**
-             * Optional list of gateway nodes responsible for SNATing traffic.
-             * If this field has any entries the contents of the egressGateway field will be ignored.
-             * In case multiple nodes are a match for the given set of labels in each entry,
-             * the first node in lexical ordering based on their name will be selected for each entry.
-             */
-            egressGateways?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecEgressGatewaysPatch>[] | undefined>;
-            /**
-             * ExcludedCIDRs is a list of destination CIDRs that will be excluded
-             * from the egress gateway redirection and SNAT logic.
-             * Should be a subset of destinationCIDRs otherwise it will not have any
-             * effect.
-             */
-            excludedCIDRs?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-            /**
-             * Egress represents a list of rules by which egress traffic is
-             * filtered from the source pods.
-             */
-            selectors?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecSelectorsPatch>[] | undefined>;
-        }
-        interface CiliumEgressGatewayPolicySpecSelectors {
-            namespaceSelector?: pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecSelectorsNamespaceSelector | undefined>;
-            nodeSelector?: pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecSelectorsNodeSelector | undefined>;
-            podSelector?: pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecSelectorsPodSelector | undefined>;
-        }
-        /**
-         * Selects Namespaces using cluster-scoped labels. This field follows standard label
-         * selector semantics; if present but empty, it selects all namespaces.
-         */
-        interface CiliumEgressGatewayPolicySpecSelectorsNamespaceSelector {
-            /**
-             * matchExpressions is a list of label selector requirements. The requirements are ANDed.
-             */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecSelectorsNamespaceSelectorMatchExpressions>[] | undefined>;
-            /**
-             * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
-             * map is equivalent to an element of matchExpressions, whose key field is "key", the
-             * operator is "In", and the values array contains only "value". The requirements are ANDed.
-             */
-            matchLabels?: pulumi.Input<{
-                [key: string]: pulumi.Input<string>;
-            } | undefined>;
-        }
-        /**
-         * A label selector requirement is a selector that contains values, a key, and an operator that
-         * relates the key and values.
-         */
-        interface CiliumEgressGatewayPolicySpecSelectorsNamespaceSelectorMatchExpressions {
-            /**
-             * key is the label key that the selector applies to.
-             */
-            key: pulumi.Input<string>;
-            /**
-             * operator represents a key's relationship to a set of values.
-             * Valid operators are In, NotIn, Exists and DoesNotExist.
-             */
-            operator: pulumi.Input<string>;
-            /**
-             * values is an array of string values. If the operator is In or NotIn,
-             * the values array must be non-empty. If the operator is Exists or DoesNotExist,
-             * the values array must be empty. This array is replaced during a strategic
-             * merge patch.
-             */
-            values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * A label selector requirement is a selector that contains values, a key, and an operator that
-         * relates the key and values.
-         */
-        interface CiliumEgressGatewayPolicySpecSelectorsNamespaceSelectorMatchExpressionsPatch {
-            /**
-             * key is the label key that the selector applies to.
-             */
-            key?: pulumi.Input<string | undefined>;
-            /**
-             * operator represents a key's relationship to a set of values.
-             * Valid operators are In, NotIn, Exists and DoesNotExist.
-             */
-            operator?: pulumi.Input<string | undefined>;
-            /**
-             * values is an array of string values. If the operator is In or NotIn,
-             * the values array must be non-empty. If the operator is Exists or DoesNotExist,
-             * the values array must be empty. This array is replaced during a strategic
-             * merge patch.
-             */
-            values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * Selects Namespaces using cluster-scoped labels. This field follows standard label
-         * selector semantics; if present but empty, it selects all namespaces.
-         */
-        interface CiliumEgressGatewayPolicySpecSelectorsNamespaceSelectorPatch {
-            /**
-             * matchExpressions is a list of label selector requirements. The requirements are ANDed.
-             */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecSelectorsNamespaceSelectorMatchExpressionsPatch>[] | undefined>;
-            /**
-             * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
-             * map is equivalent to an element of matchExpressions, whose key field is "key", the
-             * operator is "In", and the values array contains only "value". The requirements are ANDed.
-             */
-            matchLabels?: pulumi.Input<{
-                [key: string]: pulumi.Input<string>;
-            } | undefined>;
-        }
-        /**
-         * This is a label selector which selects Pods by Node. This field follows standard label
-         * selector semantics; if present but empty, it selects all nodes.
-         */
-        interface CiliumEgressGatewayPolicySpecSelectorsNodeSelector {
-            /**
-             * matchExpressions is a list of label selector requirements. The requirements are ANDed.
-             */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecSelectorsNodeSelectorMatchExpressions>[] | undefined>;
-            /**
-             * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
-             * map is equivalent to an element of matchExpressions, whose key field is "key", the
-             * operator is "In", and the values array contains only "value". The requirements are ANDed.
-             */
-            matchLabels?: pulumi.Input<{
-                [key: string]: pulumi.Input<string>;
-            } | undefined>;
-        }
-        /**
-         * A label selector requirement is a selector that contains values, a key, and an operator that
-         * relates the key and values.
-         */
-        interface CiliumEgressGatewayPolicySpecSelectorsNodeSelectorMatchExpressions {
-            /**
-             * key is the label key that the selector applies to.
-             */
-            key: pulumi.Input<string>;
-            /**
-             * operator represents a key's relationship to a set of values.
-             * Valid operators are In, NotIn, Exists and DoesNotExist.
-             */
-            operator: pulumi.Input<string>;
-            /**
-             * values is an array of string values. If the operator is In or NotIn,
-             * the values array must be non-empty. If the operator is Exists or DoesNotExist,
-             * the values array must be empty. This array is replaced during a strategic
-             * merge patch.
-             */
-            values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * A label selector requirement is a selector that contains values, a key, and an operator that
-         * relates the key and values.
-         */
-        interface CiliumEgressGatewayPolicySpecSelectorsNodeSelectorMatchExpressionsPatch {
-            /**
-             * key is the label key that the selector applies to.
-             */
-            key?: pulumi.Input<string | undefined>;
-            /**
-             * operator represents a key's relationship to a set of values.
-             * Valid operators are In, NotIn, Exists and DoesNotExist.
-             */
-            operator?: pulumi.Input<string | undefined>;
-            /**
-             * values is an array of string values. If the operator is In or NotIn,
-             * the values array must be non-empty. If the operator is Exists or DoesNotExist,
-             * the values array must be empty. This array is replaced during a strategic
-             * merge patch.
-             */
-            values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * This is a label selector which selects Pods by Node. This field follows standard label
-         * selector semantics; if present but empty, it selects all nodes.
-         */
-        interface CiliumEgressGatewayPolicySpecSelectorsNodeSelectorPatch {
-            /**
-             * matchExpressions is a list of label selector requirements. The requirements are ANDed.
-             */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecSelectorsNodeSelectorMatchExpressionsPatch>[] | undefined>;
-            /**
-             * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
-             * map is equivalent to an element of matchExpressions, whose key field is "key", the
-             * operator is "In", and the values array contains only "value". The requirements are ANDed.
-             */
-            matchLabels?: pulumi.Input<{
-                [key: string]: pulumi.Input<string>;
-            } | undefined>;
-        }
-        interface CiliumEgressGatewayPolicySpecSelectorsPatch {
-            namespaceSelector?: pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecSelectorsNamespaceSelectorPatch | undefined>;
-            nodeSelector?: pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecSelectorsNodeSelectorPatch | undefined>;
-            podSelector?: pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecSelectorsPodSelectorPatch | undefined>;
-        }
-        /**
-         * This is a label selector which selects Pods. This field follows standard label
-         * selector semantics; if present but empty, it selects all pods.
-         */
-        interface CiliumEgressGatewayPolicySpecSelectorsPodSelector {
-            /**
-             * matchExpressions is a list of label selector requirements. The requirements are ANDed.
-             */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecSelectorsPodSelectorMatchExpressions>[] | undefined>;
-            /**
-             * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
-             * map is equivalent to an element of matchExpressions, whose key field is "key", the
-             * operator is "In", and the values array contains only "value". The requirements are ANDed.
-             */
-            matchLabels?: pulumi.Input<{
-                [key: string]: pulumi.Input<string>;
-            } | undefined>;
-        }
-        /**
-         * A label selector requirement is a selector that contains values, a key, and an operator that
-         * relates the key and values.
-         */
-        interface CiliumEgressGatewayPolicySpecSelectorsPodSelectorMatchExpressions {
-            /**
-             * key is the label key that the selector applies to.
-             */
-            key: pulumi.Input<string>;
-            /**
-             * operator represents a key's relationship to a set of values.
-             * Valid operators are In, NotIn, Exists and DoesNotExist.
-             */
-            operator: pulumi.Input<string>;
-            /**
-             * values is an array of string values. If the operator is In or NotIn,
-             * the values array must be non-empty. If the operator is Exists or DoesNotExist,
-             * the values array must be empty. This array is replaced during a strategic
-             * merge patch.
-             */
-            values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * A label selector requirement is a selector that contains values, a key, and an operator that
-         * relates the key and values.
-         */
-        interface CiliumEgressGatewayPolicySpecSelectorsPodSelectorMatchExpressionsPatch {
-            /**
-             * key is the label key that the selector applies to.
-             */
-            key?: pulumi.Input<string | undefined>;
-            /**
-             * operator represents a key's relationship to a set of values.
-             * Valid operators are In, NotIn, Exists and DoesNotExist.
-             */
-            operator?: pulumi.Input<string | undefined>;
-            /**
-             * values is an array of string values. If the operator is In or NotIn,
-             * the values array must be non-empty. If the operator is Exists or DoesNotExist,
-             * the values array must be empty. This array is replaced during a strategic
-             * merge patch.
-             */
-            values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * This is a label selector which selects Pods. This field follows standard label
-         * selector semantics; if present but empty, it selects all pods.
-         */
-        interface CiliumEgressGatewayPolicySpecSelectorsPodSelectorPatch {
-            /**
-             * matchExpressions is a list of label selector requirements. The requirements are ANDed.
-             */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEgressGatewayPolicySpecSelectorsPodSelectorMatchExpressionsPatch>[] | undefined>;
-            /**
-             * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
-             * map is equivalent to an element of matchExpressions, whose key field is "key", the
-             * operator is "In", and the values array contains only "value". The requirements are ANDed.
-             */
-            matchLabels?: pulumi.Input<{
-                [key: string]: pulumi.Input<string>;
-            } | undefined>;
-        }
-        interface CiliumEnvoyConfig {
-            /**
-             * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-             */
-            apiVersion?: pulumi.Input<"cilium.io/v2" | undefined>;
-            /**
-             * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-             */
-            kind?: pulumi.Input<"CiliumEnvoyConfig" | undefined>;
-            /**
-             * Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-             */
-            metadata: pulumi.Input<pulumiKubernetes.types.input.meta.v1.ObjectMeta>;
-            spec?: pulumi.Input<inputs.cilium.v2.CiliumEnvoyConfigSpec | undefined>;
-        }
-        interface CiliumEnvoyConfigSpec {
-            /**
-             * BackendServices specifies Kubernetes services whose backends
-             * are automatically synced to Envoy using EDS.  Traffic for these
-             * services is not forwarded to an Envoy listener. This allows an
-             * Envoy listener load balance traffic to these backends while
-             * normal Cilium service load balancing takes care of balancing
-             * traffic for these services at the same time.
-             */
-            backendServices?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEnvoyConfigSpecBackendServices>[] | undefined>;
-            nodeSelector?: pulumi.Input<inputs.cilium.v2.CiliumEnvoyConfigSpecNodeSelector | undefined>;
-            /**
-             * Envoy xDS resources, a list of the following Envoy resource types:
-             * type.googleapis.com/envoy.config.listener.v3.Listener,
-             * type.googleapis.com/envoy.config.route.v3.RouteConfiguration,
-             * type.googleapis.com/envoy.config.cluster.v3.Cluster,
-             * type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment, and
-             * type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.Secret.
-             */
-            resources: pulumi.Input<pulumi.Input<{
-                [key: string]: any;
-            }>[]>;
-            /**
-             * Services specifies Kubernetes services for which traffic is
-             * forwarded to an Envoy listener for L7 load balancing. Backends
-             * of these services are automatically synced to Envoy usign EDS.
-             */
-            services?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEnvoyConfigSpecServices>[] | undefined>;
-        }
-        interface CiliumEnvoyConfigSpecBackendServices {
-            /**
-             * Name is the name of a destination Kubernetes service that identifies traffic
-             * to be redirected.
-             */
-            name: pulumi.Input<string>;
-            /**
-             * Namespace is the Kubernetes service namespace.
-             * In CiliumEnvoyConfig namespace defaults to the namespace of the CEC,
-             * In CiliumClusterwideEnvoyConfig namespace defaults to "default".
-             */
-            namespace?: pulumi.Input<string | undefined>;
-            /**
-             * Ports is a set of port numbers, which can be used for filtering in case of underlying
-             * is exposing multiple port numbers.
-             */
-            number?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        interface CiliumEnvoyConfigSpecBackendServicesPatch {
-            /**
-             * Name is the name of a destination Kubernetes service that identifies traffic
-             * to be redirected.
-             */
-            name?: pulumi.Input<string | undefined>;
-            /**
-             * Namespace is the Kubernetes service namespace.
-             * In CiliumEnvoyConfig namespace defaults to the namespace of the CEC,
-             * In CiliumClusterwideEnvoyConfig namespace defaults to "default".
-             */
-            namespace?: pulumi.Input<string | undefined>;
-            /**
-             * Ports is a set of port numbers, which can be used for filtering in case of underlying
-             * is exposing multiple port numbers.
-             */
-            number?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * NodeSelector is a label selector that determines to which nodes
-         * this configuration applies.
-         * If nil, then this config applies to all nodes.
-         */
-        interface CiliumEnvoyConfigSpecNodeSelector {
-            /**
-             * matchExpressions is a list of label selector requirements. The requirements are ANDed.
-             */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEnvoyConfigSpecNodeSelectorMatchExpressions>[] | undefined>;
-            /**
-             * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
-             * map is equivalent to an element of matchExpressions, whose key field is "key", the
-             * operator is "In", and the values array contains only "value". The requirements are ANDed.
-             */
-            matchLabels?: pulumi.Input<{
-                [key: string]: pulumi.Input<string>;
-            } | undefined>;
-        }
-        /**
-         * A label selector requirement is a selector that contains values, a key, and an operator that
-         * relates the key and values.
-         */
-        interface CiliumEnvoyConfigSpecNodeSelectorMatchExpressions {
-            /**
-             * key is the label key that the selector applies to.
-             */
-            key: pulumi.Input<string>;
-            /**
-             * operator represents a key's relationship to a set of values.
-             * Valid operators are In, NotIn, Exists and DoesNotExist.
-             */
-            operator: pulumi.Input<string>;
-            /**
-             * values is an array of string values. If the operator is In or NotIn,
-             * the values array must be non-empty. If the operator is Exists or DoesNotExist,
-             * the values array must be empty. This array is replaced during a strategic
-             * merge patch.
-             */
-            values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * A label selector requirement is a selector that contains values, a key, and an operator that
-         * relates the key and values.
-         */
-        interface CiliumEnvoyConfigSpecNodeSelectorMatchExpressionsPatch {
-            /**
-             * key is the label key that the selector applies to.
-             */
-            key?: pulumi.Input<string | undefined>;
-            /**
-             * operator represents a key's relationship to a set of values.
-             * Valid operators are In, NotIn, Exists and DoesNotExist.
-             */
-            operator?: pulumi.Input<string | undefined>;
-            /**
-             * values is an array of string values. If the operator is In or NotIn,
-             * the values array must be non-empty. If the operator is Exists or DoesNotExist,
-             * the values array must be empty. This array is replaced during a strategic
-             * merge patch.
-             */
-            values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * NodeSelector is a label selector that determines to which nodes
-         * this configuration applies.
-         * If nil, then this config applies to all nodes.
-         */
-        interface CiliumEnvoyConfigSpecNodeSelectorPatch {
-            /**
-             * matchExpressions is a list of label selector requirements. The requirements are ANDed.
-             */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEnvoyConfigSpecNodeSelectorMatchExpressionsPatch>[] | undefined>;
-            /**
-             * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
-             * map is equivalent to an element of matchExpressions, whose key field is "key", the
-             * operator is "In", and the values array contains only "value". The requirements are ANDed.
-             */
-            matchLabels?: pulumi.Input<{
-                [key: string]: pulumi.Input<string>;
-            } | undefined>;
-        }
-        interface CiliumEnvoyConfigSpecPatch {
-            /**
-             * BackendServices specifies Kubernetes services whose backends
-             * are automatically synced to Envoy using EDS.  Traffic for these
-             * services is not forwarded to an Envoy listener. This allows an
-             * Envoy listener load balance traffic to these backends while
-             * normal Cilium service load balancing takes care of balancing
-             * traffic for these services at the same time.
-             */
-            backendServices?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEnvoyConfigSpecBackendServicesPatch>[] | undefined>;
-            nodeSelector?: pulumi.Input<inputs.cilium.v2.CiliumEnvoyConfigSpecNodeSelectorPatch | undefined>;
-            /**
-             * Envoy xDS resources, a list of the following Envoy resource types:
-             * type.googleapis.com/envoy.config.listener.v3.Listener,
-             * type.googleapis.com/envoy.config.route.v3.RouteConfiguration,
-             * type.googleapis.com/envoy.config.cluster.v3.Cluster,
-             * type.googleapis.com/envoy.config.endpoint.v3.ClusterLoadAssignment, and
-             * type.googleapis.com/envoy.extensions.transport_sockets.tls.v3.Secret.
-             */
-            resources?: pulumi.Input<pulumi.Input<{
-                [key: string]: any;
-            }>[] | undefined>;
-            /**
-             * Services specifies Kubernetes services for which traffic is
-             * forwarded to an Envoy listener for L7 load balancing. Backends
-             * of these services are automatically synced to Envoy usign EDS.
-             */
-            services?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumEnvoyConfigSpecServicesPatch>[] | undefined>;
-        }
-        interface CiliumEnvoyConfigSpecServices {
-            /**
-             * Listener specifies the name of the Envoy listener the
-             * service traffic is redirected to. The listener must be
-             * specified in the Envoy 'resources' of the same
-             * CiliumEnvoyConfig.
-             *
-             * If omitted, the first listener specified in 'resources' is
-             * used.
-             */
-            listener?: pulumi.Input<string | undefined>;
-            /**
-             * Name is the name of a destination Kubernetes service that identifies traffic
-             * to be redirected.
-             */
-            name: pulumi.Input<string>;
-            /**
-             * Namespace is the Kubernetes service namespace.
-             * In CiliumEnvoyConfig namespace this is overridden to the namespace of the CEC,
-             * In CiliumClusterwideEnvoyConfig namespace defaults to "default".
-             */
-            namespace?: pulumi.Input<string | undefined>;
-            /**
-             * Ports is a set of service's frontend ports that should be redirected to the Envoy
-             * listener. By default all frontend ports of the service are redirected.
-             */
-            ports?: pulumi.Input<pulumi.Input<number>[] | undefined>;
-        }
-        interface CiliumEnvoyConfigSpecServicesPatch {
-            /**
-             * Listener specifies the name of the Envoy listener the
-             * service traffic is redirected to. The listener must be
-             * specified in the Envoy 'resources' of the same
-             * CiliumEnvoyConfig.
-             *
-             * If omitted, the first listener specified in 'resources' is
-             * used.
-             */
-            listener?: pulumi.Input<string | undefined>;
-            /**
-             * Name is the name of a destination Kubernetes service that identifies traffic
-             * to be redirected.
-             */
-            name?: pulumi.Input<string | undefined>;
-            /**
-             * Namespace is the Kubernetes service namespace.
-             * In CiliumEnvoyConfig namespace this is overridden to the namespace of the CEC,
-             * In CiliumClusterwideEnvoyConfig namespace defaults to "default".
-             */
-            namespace?: pulumi.Input<string | undefined>;
-            /**
-             * Ports is a set of service's frontend ports that should be redirected to the Envoy
-             * listener. By default all frontend ports of the service are redirected.
-             */
-            ports?: pulumi.Input<pulumi.Input<number>[] | undefined>;
-        }
-        /**
-         * CiliumLoadBalancerIPPool is a Kubernetes third-party resource which
-         * is used to defined pools of IPs which the operator can use to allocate
-         * and advertise IPs for Services of type LoadBalancer.
-         */
-        interface CiliumLoadBalancerIPPool {
-            /**
-             * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-             */
-            apiVersion?: pulumi.Input<"cilium.io/v2" | undefined>;
-            /**
-             * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-             */
-            kind?: pulumi.Input<"CiliumLoadBalancerIPPool" | undefined>;
-            /**
-             * Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-             */
-            metadata: pulumi.Input<pulumiKubernetes.types.input.meta.v1.ObjectMeta>;
-            spec: pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolSpec>;
-            status?: pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolStatus | undefined>;
-        }
-        /**
-         * Spec is a human readable description for a BGP load balancer
-         * ip pool.
-         */
-        interface CiliumLoadBalancerIPPoolSpec {
-            /**
-             * AllowFirstLastIPs, if set to `Yes` or undefined means that the first and last IPs of each CIDR will be allocatable.
-             * If `No`, these IPs will be reserved. This field is ignored for /{31,32} and /{127,128} CIDRs since
-             * reserving the first and last IPs would make the CIDRs unusable.
-             */
-            allowFirstLastIPs?: pulumi.Input<string | undefined>;
-            /**
-             * Blocks is a list of CIDRs comprising this IP Pool
-             */
-            blocks?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolSpecBlocks>[] | undefined>;
-            /**
-             * Disabled, if set to true means that no new IPs will be allocated from this pool.
-             * Existing allocations will not be removed from services.
-             */
-            disabled?: pulumi.Input<boolean | undefined>;
-            serviceSelector?: pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolSpecServiceSelector | undefined>;
-        }
-        /**
-         * CiliumLoadBalancerIPPoolIPBlock describes a single IP block.
-         */
-        interface CiliumLoadBalancerIPPoolSpecBlocks {
-            cidr?: pulumi.Input<string | undefined>;
-            start?: pulumi.Input<string | undefined>;
-            stop?: pulumi.Input<string | undefined>;
-        }
-        /**
-         * CiliumLoadBalancerIPPoolIPBlock describes a single IP block.
-         */
-        interface CiliumLoadBalancerIPPoolSpecBlocksPatch {
-            cidr?: pulumi.Input<string | undefined>;
-            start?: pulumi.Input<string | undefined>;
-            stop?: pulumi.Input<string | undefined>;
-        }
-        /**
-         * Spec is a human readable description for a BGP load balancer
-         * ip pool.
-         */
-        interface CiliumLoadBalancerIPPoolSpecPatch {
-            /**
-             * AllowFirstLastIPs, if set to `Yes` or undefined means that the first and last IPs of each CIDR will be allocatable.
-             * If `No`, these IPs will be reserved. This field is ignored for /{31,32} and /{127,128} CIDRs since
-             * reserving the first and last IPs would make the CIDRs unusable.
-             */
-            allowFirstLastIPs?: pulumi.Input<string | undefined>;
-            /**
-             * Blocks is a list of CIDRs comprising this IP Pool
-             */
-            blocks?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolSpecBlocksPatch>[] | undefined>;
-            /**
-             * Disabled, if set to true means that no new IPs will be allocated from this pool.
-             * Existing allocations will not be removed from services.
-             */
-            disabled?: pulumi.Input<boolean | undefined>;
-            serviceSelector?: pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolSpecServiceSelectorPatch | undefined>;
-        }
-        /**
-         * ServiceSelector selects a set of services which are eligible to receive IPs from this
-         */
-        interface CiliumLoadBalancerIPPoolSpecServiceSelector {
-            /**
-             * matchExpressions is a list of label selector requirements. The requirements are ANDed.
-             */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolSpecServiceSelectorMatchExpressions>[] | undefined>;
-            /**
-             * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
-             * map is equivalent to an element of matchExpressions, whose key field is "key", the
-             * operator is "In", and the values array contains only "value". The requirements are ANDed.
-             */
-            matchLabels?: pulumi.Input<{
-                [key: string]: pulumi.Input<string>;
-            } | undefined>;
-        }
-        /**
-         * A label selector requirement is a selector that contains values, a key, and an operator that
-         * relates the key and values.
-         */
-        interface CiliumLoadBalancerIPPoolSpecServiceSelectorMatchExpressions {
-            /**
-             * key is the label key that the selector applies to.
-             */
-            key: pulumi.Input<string>;
-            /**
-             * operator represents a key's relationship to a set of values.
-             * Valid operators are In, NotIn, Exists and DoesNotExist.
-             */
-            operator: pulumi.Input<string>;
-            /**
-             * values is an array of string values. If the operator is In or NotIn,
-             * the values array must be non-empty. If the operator is Exists or DoesNotExist,
-             * the values array must be empty. This array is replaced during a strategic
-             * merge patch.
-             */
-            values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * A label selector requirement is a selector that contains values, a key, and an operator that
-         * relates the key and values.
-         */
-        interface CiliumLoadBalancerIPPoolSpecServiceSelectorMatchExpressionsPatch {
-            /**
-             * key is the label key that the selector applies to.
-             */
-            key?: pulumi.Input<string | undefined>;
-            /**
-             * operator represents a key's relationship to a set of values.
-             * Valid operators are In, NotIn, Exists and DoesNotExist.
-             */
-            operator?: pulumi.Input<string | undefined>;
-            /**
-             * values is an array of string values. If the operator is In or NotIn,
-             * the values array must be non-empty. If the operator is Exists or DoesNotExist,
-             * the values array must be empty. This array is replaced during a strategic
-             * merge patch.
-             */
-            values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * ServiceSelector selects a set of services which are eligible to receive IPs from this
-         */
-        interface CiliumLoadBalancerIPPoolSpecServiceSelectorPatch {
-            /**
-             * matchExpressions is a list of label selector requirements. The requirements are ANDed.
-             */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolSpecServiceSelectorMatchExpressionsPatch>[] | undefined>;
-            /**
-             * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
-             * map is equivalent to an element of matchExpressions, whose key field is "key", the
-             * operator is "In", and the values array contains only "value". The requirements are ANDed.
-             */
-            matchLabels?: pulumi.Input<{
-                [key: string]: pulumi.Input<string>;
-            } | undefined>;
-        }
-        /**
-         * Status is the status of the IP Pool.
-         *
-         * It might be possible for users to define overlapping IP Pools, we can't validate or enforce non-overlapping pools
-         * during object creation. The Cilium operator will do this validation and update the status to reflect the ability
-         * to allocate IPs from this pool.
-         */
-        interface CiliumLoadBalancerIPPoolStatus {
-            /**
-             * Current service state
-             */
-            conditions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLoadBalancerIPPoolStatusConditions>[] | undefined>;
-        }
-        /**
-         * Condition contains details for one aspect of the current state of this API Resource.
-         */
-        interface CiliumLoadBalancerIPPoolStatusConditions {
-            /**
-             * lastTransitionTime is the last time the condition transitioned from one status to another.
-             * This should be when the underlying condition changed.  If that is not known, then using the time when the API field changed is acceptable.
-             */
-            lastTransitionTime: pulumi.Input<string>;
-            /**
-             * message is a human readable message indicating details about the transition.
-             * This may be an empty string.
-             */
-            message: pulumi.Input<string>;
-            /**
-             * observedGeneration represents the .metadata.generation that the condition was set based upon.
-             * For instance, if .metadata.generation is currently 12, but the .status.conditions[x].observedGeneration is 9, the condition is out of date
-             * with respect to the current state of the instance.
-             */
-            observedGeneration?: pulumi.Input<number | undefined>;
+            observedGeneration?: pulumi.Input<number | undefined>;
             /**
              * reason contains a programmatic identifier indicating the reason for the condition's last transition.
              * Producers of specific condition types may define expected values and meanings for this field,
@@ -60913,439 +59766,6 @@ export declare namespace cilium {
              */
             type: pulumi.Input<string>;
         }
-        /**
-         * CiliumLocalRedirectPolicy is a Kubernetes Custom Resource that contains a
-         * specification to redirect traffic locally within a node.
-         */
-        interface CiliumLocalRedirectPolicy {
-            /**
-             * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-             */
-            apiVersion?: pulumi.Input<"cilium.io/v2" | undefined>;
-            /**
-             * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
-             */
-            kind?: pulumi.Input<"CiliumLocalRedirectPolicy" | undefined>;
-            /**
-             * Standard object's metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
-             */
-            metadata: pulumi.Input<pulumiKubernetes.types.input.meta.v1.ObjectMeta>;
-            spec?: pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpec | undefined>;
-            status?: pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicyStatus | undefined>;
-        }
-        /**
-         * Spec is the desired behavior of the local redirect policy.
-         */
-        interface CiliumLocalRedirectPolicySpec {
-            /**
-             * Description can be used by the creator of the policy to describe the
-             * purpose of this policy.
-             */
-            description?: pulumi.Input<string | undefined>;
-            redirectBackend: pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectBackend>;
-            redirectFrontend: pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectFrontend>;
-            /**
-             * SkipRedirectFromBackend indicates whether traffic matching RedirectFrontend
-             * from RedirectBackend should skip redirection, and hence the traffic will
-             * be forwarded as-is.
-             *
-             * The default is false which means traffic matching RedirectFrontend will
-             * get redirected from all pods, including the RedirectBackend(s).
-             *
-             * Example: If RedirectFrontend is configured to "169.254.169.254:80" as the traffic
-             * that needs to be redirected to backends selected by RedirectBackend, if
-             * SkipRedirectFromBackend is set to true, traffic going to "169.254.169.254:80"
-             * from such backends will not be redirected back to the backends. Instead,
-             * the matched traffic from the backends will be forwarded to the original
-             * destination "169.254.169.254:80".
-             */
-            skipRedirectFromBackend?: pulumi.Input<boolean | undefined>;
-        }
-        /**
-         * Spec is the desired behavior of the local redirect policy.
-         */
-        interface CiliumLocalRedirectPolicySpecPatch {
-            /**
-             * Description can be used by the creator of the policy to describe the
-             * purpose of this policy.
-             */
-            description?: pulumi.Input<string | undefined>;
-            redirectBackend?: pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectBackendPatch | undefined>;
-            redirectFrontend?: pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectFrontendPatch | undefined>;
-            /**
-             * SkipRedirectFromBackend indicates whether traffic matching RedirectFrontend
-             * from RedirectBackend should skip redirection, and hence the traffic will
-             * be forwarded as-is.
-             *
-             * The default is false which means traffic matching RedirectFrontend will
-             * get redirected from all pods, including the RedirectBackend(s).
-             *
-             * Example: If RedirectFrontend is configured to "169.254.169.254:80" as the traffic
-             * that needs to be redirected to backends selected by RedirectBackend, if
-             * SkipRedirectFromBackend is set to true, traffic going to "169.254.169.254:80"
-             * from such backends will not be redirected back to the backends. Instead,
-             * the matched traffic from the backends will be forwarded to the original
-             * destination "169.254.169.254:80".
-             */
-            skipRedirectFromBackend?: pulumi.Input<boolean | undefined>;
-        }
-        /**
-         * RedirectBackend specifies backend configuration to redirect traffic to.
-         * It can not be empty.
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectBackend {
-            localEndpointSelector: pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectBackendLocalEndpointSelector>;
-            /**
-             * ToPorts is a list of L4 ports with protocol of node local pod(s) where traffic
-             * is redirected to.
-             * When multiple ports are specified, the ports must be named.
-             */
-            toPorts: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectBackendToPorts>[]>;
-        }
-        /**
-         * LocalEndpointSelector selects node local pod(s) where traffic is redirected to.
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectBackendLocalEndpointSelector {
-            /**
-             * matchExpressions is a list of label selector requirements. The requirements are ANDed.
-             */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectBackendLocalEndpointSelectorMatchExpressions>[] | undefined>;
-            /**
-             * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
-             * map is equivalent to an element of matchExpressions, whose key field is "key", the
-             * operator is "In", and the values array contains only "value". The requirements are ANDed.
-             */
-            matchLabels?: pulumi.Input<{
-                [key: string]: pulumi.Input<string>;
-            } | undefined>;
-        }
-        /**
-         * A label selector requirement is a selector that contains values, a key, and an operator that
-         * relates the key and values.
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectBackendLocalEndpointSelectorMatchExpressions {
-            /**
-             * key is the label key that the selector applies to.
-             */
-            key: pulumi.Input<string>;
-            /**
-             * operator represents a key's relationship to a set of values.
-             * Valid operators are In, NotIn, Exists and DoesNotExist.
-             */
-            operator: pulumi.Input<string>;
-            /**
-             * values is an array of string values. If the operator is In or NotIn,
-             * the values array must be non-empty. If the operator is Exists or DoesNotExist,
-             * the values array must be empty. This array is replaced during a strategic
-             * merge patch.
-             */
-            values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * A label selector requirement is a selector that contains values, a key, and an operator that
-         * relates the key and values.
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectBackendLocalEndpointSelectorMatchExpressionsPatch {
-            /**
-             * key is the label key that the selector applies to.
-             */
-            key?: pulumi.Input<string | undefined>;
-            /**
-             * operator represents a key's relationship to a set of values.
-             * Valid operators are In, NotIn, Exists and DoesNotExist.
-             */
-            operator?: pulumi.Input<string | undefined>;
-            /**
-             * values is an array of string values. If the operator is In or NotIn,
-             * the values array must be non-empty. If the operator is Exists or DoesNotExist,
-             * the values array must be empty. This array is replaced during a strategic
-             * merge patch.
-             */
-            values?: pulumi.Input<pulumi.Input<string>[] | undefined>;
-        }
-        /**
-         * LocalEndpointSelector selects node local pod(s) where traffic is redirected to.
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectBackendLocalEndpointSelectorPatch {
-            /**
-             * matchExpressions is a list of label selector requirements. The requirements are ANDed.
-             */
-            matchExpressions?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectBackendLocalEndpointSelectorMatchExpressionsPatch>[] | undefined>;
-            /**
-             * matchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
-             * map is equivalent to an element of matchExpressions, whose key field is "key", the
-             * operator is "In", and the values array contains only "value". The requirements are ANDed.
-             */
-            matchLabels?: pulumi.Input<{
-                [key: string]: pulumi.Input<string>;
-            } | undefined>;
-        }
-        /**
-         * RedirectBackend specifies backend configuration to redirect traffic to.
-         * It can not be empty.
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectBackendPatch {
-            localEndpointSelector?: pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectBackendLocalEndpointSelectorPatch | undefined>;
-            /**
-             * ToPorts is a list of L4 ports with protocol of node local pod(s) where traffic
-             * is redirected to.
-             * When multiple ports are specified, the ports must be named.
-             */
-            toPorts?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectBackendToPortsPatch>[] | undefined>;
-        }
-        /**
-         * PortInfo specifies L4 port number and name along with the transport protocol
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectBackendToPorts {
-            /**
-             * Name is a port name, which must contain at least one [a-z],
-             * and may also contain [0-9] and '-' anywhere except adjacent to another
-             * '-' or in the beginning or the end.
-             */
-            name?: pulumi.Input<string | undefined>;
-            /**
-             * Port is an L4 port number. The string will be strictly parsed as a single uint16.
-             */
-            port: pulumi.Input<string>;
-            /**
-             * Protocol is the L4 protocol.
-             * Accepted values: "TCP", "UDP"
-             */
-            protocol: pulumi.Input<string>;
-        }
-        /**
-         * PortInfo specifies L4 port number and name along with the transport protocol
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectBackendToPortsPatch {
-            /**
-             * Name is a port name, which must contain at least one [a-z],
-             * and may also contain [0-9] and '-' anywhere except adjacent to another
-             * '-' or in the beginning or the end.
-             */
-            name?: pulumi.Input<string | undefined>;
-            /**
-             * Port is an L4 port number. The string will be strictly parsed as a single uint16.
-             */
-            port?: pulumi.Input<string | undefined>;
-            /**
-             * Protocol is the L4 protocol.
-             * Accepted values: "TCP", "UDP"
-             */
-            protocol?: pulumi.Input<string | undefined>;
-        }
-        /**
-         * RedirectFrontend specifies frontend configuration to redirect traffic from.
-         * It can not be empty.
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectFrontend {
-            addressMatcher?: pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectFrontendAddressMatcher | undefined>;
-            serviceMatcher?: pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectFrontendServiceMatcher | undefined>;
-        }
-        /**
-         * AddressMatcher is a tuple {IP, port, protocol} that matches traffic to be
-         * redirected.
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectFrontendAddressMatcher {
-            /**
-             * IP is a destination ip address for traffic to be redirected.
-             *
-             * Example:
-             * When it is set to "169.254.169.254", traffic destined to
-             * "169.254.169.254" is redirected.
-             */
-            ip: pulumi.Input<string>;
-            /**
-             * ToPorts is a list of destination L4 ports with protocol for traffic
-             * to be redirected.
-             * When multiple ports are specified, the ports must be named.
-             *
-             * Example:
-             * When set to Port: "53" and Protocol: UDP, traffic destined to port '53'
-             * with UDP protocol is redirected.
-             */
-            toPorts: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectFrontendAddressMatcherToPorts>[]>;
-        }
-        /**
-         * AddressMatcher is a tuple {IP, port, protocol} that matches traffic to be
-         * redirected.
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectFrontendAddressMatcherPatch {
-            /**
-             * IP is a destination ip address for traffic to be redirected.
-             *
-             * Example:
-             * When it is set to "169.254.169.254", traffic destined to
-             * "169.254.169.254" is redirected.
-             */
-            ip?: pulumi.Input<string | undefined>;
-            /**
-             * ToPorts is a list of destination L4 ports with protocol for traffic
-             * to be redirected.
-             * When multiple ports are specified, the ports must be named.
-             *
-             * Example:
-             * When set to Port: "53" and Protocol: UDP, traffic destined to port '53'
-             * with UDP protocol is redirected.
-             */
-            toPorts?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectFrontendAddressMatcherToPortsPatch>[] | undefined>;
-        }
-        /**
-         * PortInfo specifies L4 port number and name along with the transport protocol
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectFrontendAddressMatcherToPorts {
-            /**
-             * Name is a port name, which must contain at least one [a-z],
-             * and may also contain [0-9] and '-' anywhere except adjacent to another
-             * '-' or in the beginning or the end.
-             */
-            name?: pulumi.Input<string | undefined>;
-            /**
-             * Port is an L4 port number. The string will be strictly parsed as a single uint16.
-             */
-            port: pulumi.Input<string>;
-            /**
-             * Protocol is the L4 protocol.
-             * Accepted values: "TCP", "UDP"
-             */
-            protocol: pulumi.Input<string>;
-        }
-        /**
-         * PortInfo specifies L4 port number and name along with the transport protocol
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectFrontendAddressMatcherToPortsPatch {
-            /**
-             * Name is a port name, which must contain at least one [a-z],
-             * and may also contain [0-9] and '-' anywhere except adjacent to another
-             * '-' or in the beginning or the end.
-             */
-            name?: pulumi.Input<string | undefined>;
-            /**
-             * Port is an L4 port number. The string will be strictly parsed as a single uint16.
-             */
-            port?: pulumi.Input<string | undefined>;
-            /**
-             * Protocol is the L4 protocol.
-             * Accepted values: "TCP", "UDP"
-             */
-            protocol?: pulumi.Input<string | undefined>;
-        }
-        /**
-         * RedirectFrontend specifies frontend configuration to redirect traffic from.
-         * It can not be empty.
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectFrontendPatch {
-            addressMatcher?: pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectFrontendAddressMatcherPatch | undefined>;
-            serviceMatcher?: pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectFrontendServiceMatcherPatch | undefined>;
-        }
-        /**
-         * ServiceMatcher specifies Kubernetes service and port that matches
-         * traffic to be redirected.
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectFrontendServiceMatcher {
-            /**
-             * Namespace is the Kubernetes service namespace.
-             * The service namespace must match the namespace of the parent Local
-             * Redirect Policy.  For Cluster-wide Local Redirect Policy, this
-             * can be any namespace.
-             */
-            namespace: pulumi.Input<string>;
-            /**
-             * Name is the name of a destination Kubernetes service that identifies traffic
-             * to be redirected.
-             * The service type needs to be ClusterIP.
-             *
-             * Example:
-             * When this field is populated with 'serviceName:myService', all the traffic
-             * destined to the cluster IP of this service at the (specified)
-             * service port(s) will be redirected.
-             */
-            serviceName: pulumi.Input<string>;
-            /**
-             * ToPorts is a list of destination service L4 ports with protocol for
-             * traffic to be redirected. If not specified, traffic for all the service
-             * ports will be redirected.
-             * When multiple ports are specified, the ports must be named.
-             */
-            toPorts?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectFrontendServiceMatcherToPorts>[] | undefined>;
-        }
-        /**
-         * ServiceMatcher specifies Kubernetes service and port that matches
-         * traffic to be redirected.
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectFrontendServiceMatcherPatch {
-            /**
-             * Namespace is the Kubernetes service namespace.
-             * The service namespace must match the namespace of the parent Local
-             * Redirect Policy.  For Cluster-wide Local Redirect Policy, this
-             * can be any namespace.
-             */
-            namespace?: pulumi.Input<string | undefined>;
-            /**
-             * Name is the name of a destination Kubernetes service that identifies traffic
-             * to be redirected.
-             * The service type needs to be ClusterIP.
-             *
-             * Example:
-             * When this field is populated with 'serviceName:myService', all the traffic
-             * destined to the cluster IP of this service at the (specified)
-             * service port(s) will be redirected.
-             */
-            serviceName?: pulumi.Input<string | undefined>;
-            /**
-             * ToPorts is a list of destination service L4 ports with protocol for
-             * traffic to be redirected. If not specified, traffic for all the service
-             * ports will be redirected.
-             * When multiple ports are specified, the ports must be named.
-             */
-            toPorts?: pulumi.Input<pulumi.Input<inputs.cilium.v2.CiliumLocalRedirectPolicySpecRedirectFrontendServiceMatcherToPortsPatch>[] | undefined>;
-        }
-        /**
-         * PortInfo specifies L4 port number and name along with the transport protocol
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectFrontendServiceMatcherToPorts {
-            /**
-             * Name is a port name, which must contain at least one [a-z],
-             * and may also contain [0-9] and '-' anywhere except adjacent to another
-             * '-' or in the beginning or the end.
-             */
-            name?: pulumi.Input<string | undefined>;
-            /**
-             * Port is an L4 port number. The string will be strictly parsed as a single uint16.
-             */
-            port: pulumi.Input<string>;
-            /**
-             * Protocol is the L4 protocol.
-             * Accepted values: "TCP", "UDP"
-             */
-            protocol: pulumi.Input<string>;
-        }
-        /**
-         * PortInfo specifies L4 port number and name along with the transport protocol
-         */
-        interface CiliumLocalRedirectPolicySpecRedirectFrontendServiceMatcherToPortsPatch {
-            /**
-             * Name is a port name, which must contain at least one [a-z],
-             * and may also contain [0-9] and '-' anywhere except adjacent to another
-             * '-' or in the beginning or the end.
-             */
-            name?: pulumi.Input<string | undefined>;
-            /**
-             * Port is an L4 port number. The string will be strictly parsed as a single uint16.
-             */
-            port?: pulumi.Input<string | undefined>;
-            /**
-             * Protocol is the L4 protocol.
-             * Accepted values: "TCP", "UDP"
-             */
-            protocol?: pulumi.Input<string | undefined>;
-        }
-        /**
-         * Status is the most recent status of the local redirect policy.
-         * It is a read-only field.
-         */
-        interface CiliumLocalRedirectPolicyStatus {
-            ok?: pulumi.Input<boolean | undefined>;
-        }
         /**
          * CiliumNetworkPolicy is a Kubernetes third-party resource with an extended
          * version of NetworkPolicy.