@mark1russell7/kind 0.13.0 → 0.13.2

package/build/index.d.ts

@@ -1,4 +1,4 @@
-import { $ as unitOf, $n as scenario, $t as REDIS, A as TriggerV1, An as Template, At as recordsOf, B as RunCheck, Bn as KubeProxyMode, Bt as sliceReadyAt, C as KindCellResult, Cn as PodSettings, Ct as intakeOf, D as PredictionV1, Dn as Replica, Dt as periodOf, E as LoadSample, En as Reference, Et as outcomesOf, F as KIND_NOISE, Fn as DATAPLANES, Ft as sessionsAt, G as factsOf, Gn as ZONE_LOST, Gt as transitionOf, H as checkRun, Hn as NodeImage, Ht as slicesOf, I as KindDecision, In as Dataplane, It as signalOf, J as observationEnd, Jn as goDuration, Jt as ztunnelReplaced, K as judgeKind, Kn as cidrOverlap, Kt as tunnelsOf, L as KindVerdict, Ln as KUBE_PROXY_MODES, Lt as signalsOf, M as upgrade, Mn as TriggerKind, Mt as restartOf, N as upgradeCell, Nn as WindowPrediction, Nt as restartsAt, O as RunCheckV1, On as ResetReuse, Ot as podsAt, P as Deleted, Pn as Workload, Pt as rulesOf, Q as reusesReset, Qn as nodeNames, Qt as PORT, R as LAST_SLACK, Rn as KindConfig, Rt as sliceDropOf, S as KindCellRecordV1, Sn as NonePrediction, St as failuresOf, T as KindVerdictV1, Tn as RedisDeclaration, Tt as kernelCounts, U as cyclesOf, Un as ZONE_KEPT, Ut as socketsOf, V as RunFacts, Vn as NODE_IMAGES, Vt as sliceReadyOf, W as deletionsOf, Wn as ZONE_LABEL, Wt as stoppingOf, X as propagationSource, Xn as kindConfig, Xt as HEALTH_PORT, Y as propagationOf, Yn as isKubeProxyMode, Yt as CLIENT, Z as referenceOf, Zn as kubeProxyPatch, Zt as LOG_LABEL, _ as ClusterManifest, _n as KindRun, _t as byClients, a as STAGES, an as overshootBand, at as PodLine, b as FORMAT_V1, bn as MeshFlavor, bt as dropOf, c as readRecord, cn as secondsOf, ct as Request, d as calibrationOf, dn as Band, dt as SliceLine, en as SERVER, er as scenarioProblems, et as updatesOf, f as cellsTable, fn as Cycle, ft as SocketLine, g as BandV1, gn as KindCell, gt as backendsAt, h as timeSpread, hn as Flap, ht as ZtunnelPodLine, i as quantileOf, in as drainBand, it as Period, j as judge, jn as Trigger, jt as requestsOf, k as RunFactsV1, kn as Stack, kt as podsOf, l as Judged, ln as showBand, lt as RulesLine, m as predictionText, mn as EdgeProtocol, mt as TunnelLine, n as medianInterval, nn as backlogEnd, nt as HBONE_PORT, o as kindCellRecordSchema, on as requestBand, ot as PropagationSource, p as medianText, pn as Declaration, pt as TCP_STATE, q as observationAfter, qn as cidrRange, qt as ztunnelPodsOf, r as middle, rn as bandOf, rt as Line, s as kindCellRecordV1Schema, sn as seconds, st as RecordLine, t as RELATIVE, tn as CountBand, tr as zoneOf, tt as Endpoint, u as TimeSpread, un as BacklogTerm, ut as Sessions, v as EnvironmentManifest, vn as KubeletProbe, vt as byNode, w as KindCellV1, wn as Prediction, wt as isTunnelState, x as KindCellRecord, xn as MeshMode, xt as emptyOf, y as FORMAT, yn as Mesh, yt as deletionOf, z as Propagated, zn as KindScenario, zt as sliceEmptyOf } from "./judge-B_wVAwjx.js";
+import { $ as unitOf, $n as goDuration, $t as OUTSIDE, A as TriggerV1, An as Reference, At as recordsOf, B as RunCheck, Bn as DATAPLANES, Bt as sliceReadyAt, C as KindCellResult, Cn as MeshFlavor, Ct as intakeOf, D as PredictionV1, Dn as PodSettings, Dt as periodOf, E as LoadSample, En as PermittedWindow, Et as outcomesOf, F as KIND_NOISE, Fn as Trigger, Ft as sessionsAt, G as factsOf, Gn as KubeProxyMode, Gt as transitionOf, H as checkRun, Hn as KUBE_PROXY_MODES, Ht as slicesOf, I as KindDecision, In as TriggerKind, It as signalOf, J as observationEnd, Jn as ZONE_KEPT, Jt as ztunnelReplaced, K as judgeKind, Kn as NODE_IMAGES, Kt as tunnelsOf, L as KindVerdict, Ln as VipSettings, Lt as signalsOf, M as upgrade, Mn as ResetReuse, Mt as restartOf, N as upgradeCell, Nn as Stack, Nt as restartsAt, O as RunCheckV1, On as Prediction, Ot as podsAt, P as Deleted, Pn as Template, Pt as rulesOf, Q as reusesReset, Qn as cidrRange, Qt as LOG_LABEL, R as LAST_SLACK, Rn as WindowPrediction, Rt as sliceDropOf, S as KindCellRecordV1, Sn as Mesh, St as failuresOf, T as KindVerdictV1, Tn as NonePrediction, Tt as kernelCounts, U as cyclesOf, Un as KindConfig, Ut as socketsOf, V as RunFacts, Vn as Dataplane, Vt as sliceReadyOf, W as deletionsOf, Wn as KindScenario, Wt as stoppingOf, X as propagationSource, Xn as ZONE_LOST, Xt as HEALTH_PORT, Y as propagationOf, Yn as ZONE_LABEL, Yt as CLIENT, Z as referenceOf, Zn as cidrOverlap, Zt as LB_CLASS, _ as ClusterManifest, _n as EdgeProtocol, _t as byClients, a as STAGES, an as backlogEnd, ar as scenarioProblems, at as PodLine, b as FORMAT_V1, bn as KindRun, bt as dropOf, c as readRecord, cn as overshootBand, ct as Request, d as calibrationOf, dn as secondsOf, dt as SliceLine, en as PORT, er as isKubeProxyMode, et as updatesOf, f as cellsTable, fn as showBand, ft as SocketLine, g as BandV1, gn as Declaration, gt as backendsAt, h as timeSpread, hn as Cycle, ht as ZtunnelPodLine, i as quantileOf, in as CountBand, ir as scenario, it as Period, j as judge, jn as Replica, jt as requestsOf, k as RunFactsV1, kn as RedisDeclaration, kt as podsOf, l as Judged, ln as requestBand, lt as RulesLine, m as predictionText, mn as Band, mt as TunnelLine, n as medianInterval, nn as SERVER, nr as kubeProxyPatch, nt as HBONE_PORT, o as kindCellRecordSchema, on as bandOf, or as zoneOf, ot as PropagationSource, p as medianText, pn as BacklogTerm, pt as TCP_STATE, q as observationAfter, qn as NodeImage, qt as ztunnelPodsOf, r as middle, rn as VIP_ANNOTATION, rr as nodeNames, rt as Line, s as kindCellRecordV1Schema, sn as drainBand, st as RecordLine, t as RELATIVE, tn as REDIS, tr as kindConfig, tt as Endpoint, u as TimeSpread, un as seconds, ut as Sessions, v as EnvironmentManifest, vn as Flap, vt as byNode, w as KindCellV1, wn as MeshMode, wt as isTunnelState, x as KindCellRecord, xn as KubeletProbe, xt as emptyOf, y as FORMAT, yn as KindCell, yt as deletionOf, z as Propagated, zn as Workload, zt as sliceEmptyOf } from "./judge-DpdSgpjv.js";
 import { Quantity } from "@mark1russell7/quantity";
 import { CheckFn, Coupling, Finding, HealthServer, Poll, Scenario, ServiceBuilder, ServiceDescription, Stage, StopWay, Timing, TransportImpl, Verdict } from "@mark1russell7/service";
 import { BuildImage } from "@mark1russell7/harness";
@@ -212,8 +212,8 @@ export declare const hostsOf: (text: string, cluster: string) => ClusterHosts;
  *   Each one acts in the network namespace of each replica, with each client pod as a peer. A REJECT
  *   resets only the sender of the segment that it matches, thus the rule goes where the segments of
  *   the clients arrive.
- * - `clients` is the process of each client pod. Only a signal and a sysctl take it: the gap of the
- *   trigger `idle`, and a sysctl of the namespace of each client pod.
+ * - `clients` is the process of each client pod. Only a signal, a sysctl and a drop of DNS take it.
+ *   They are the gap of `idle`, a sysctl of the namespace of each client pod, and `dns-blackhole`.
  */
 type Target = "server" | "redis" | "kube-proxy" | "servers" | "clients";
 /** A step is one act of a fault, in the sequence of the plan. */
@@ -273,6 +273,10 @@ type Step = {
 } | {
   readonly do: "place";
   readonly onTarget: number;
+} | {
+  readonly do: "dns";
+  readonly target: Target;
+  readonly on: boolean;
 };
 /**
  * A fault plan is the steps of a run:
@@ -343,6 +347,16 @@ export declare const SPREAD_LEAD: Quantity;
  * Only a sysctl of the namespace (`net.`) and a whole number reach it.
  */
 export declare const sysctlCommand: (key: string, value: string) => string[];
+/** This port is the port of a DNS server: each answer of the cluster DNS comes from it. */
+export declare const DNS_PORT = 53;
+/**
+ * This function gives the commands of the injector that drop each answer of a DNS server in its
+ * network namespace, on UDP and on TCP. With `on` false, they remove the drops. The rules go in
+ * INPUT, thus each query still goes out, and CoreDNS answers it. Only the answer is lost. A send of
+ * the resolver gets no error, as for a DNS server with no route back. The rules match the source port,
+ * thus each DNS server of the namespace is in the fault.
+ */
+export declare const dnsCommands: (on: boolean) => string[][];
 /**
  * This function gives the commands of the injector that put a stateful middlebox in its network
  * namespace, with each peer, on the local port `port`. With `idle` null, they remove it.
@@ -567,6 +581,14 @@ interface LdsSpec {
     readonly pid: number;
   }>;
 }
+/** An outside spec is the clients outside the cluster: their target, interval, timeout and count, and the address whose MAC they watch. */
+interface OutsideSpec {
+  readonly target: string;
+  readonly every: Quantity;
+  readonly timeout: Quantity;
+  readonly count: number;
+  readonly arp: string;
+}
 /** A kind lab is the instruments of one cluster: a sidecar pair on each node, the watcher of the API and the prober. */
 interface KindLab {
   readonly cluster: Cluster;
@@ -593,6 +615,13 @@ interface KindLab {
   }): Promise<void>;
   probe(netns: readonly number[]): Promise<void>;
   stopProbe(): Promise<void>;
+  /**
+   * This method starts the clients outside the cluster of a VIP (`KindCell.vip`). Each one is a
+   * container of the lab image on the Docker network of the nodes, and runs `client.mjs`. Its lines
+   * have the node `outside`, and a line `arp` at each change of the MAC address of the VIP. A
+   * call stops the clients of the last call first. With null, it only stops them.
+   */
+  outside(spec: OutsideSpec | null): Promise<void>;
   /** This method asks each agent to poll the backends of a Service in the rules of its node, `every` apart, or to stop with null. */
   rules(rule: (ServiceRule & {
     readonly every: Quantity;
@@ -646,6 +675,123 @@ export declare const openKindLab: (cluster: Cluster, image: string) => Promise<K
 /** This function pins a Docker image by digest under a local tag that holds the digest, for `kind load` and `imagePullPolicy: Never`. */
 export declare const localPin: (image: string) => Promise<string>;
 //#endregion
+//#region src/kubevip.d.ts
+/**
+ * This module installs kube-vip 1.3.1 in a kind cluster (SYS-51). The install gives a Service of type
+ * LoadBalancer an address on the Docker network of the nodes: the VIP. In ARP mode, one node holds
+ * the VIP on its link, and it sends a gratuitous ARP for it each `vip_arpRate`. A Lease elects that
+ * node. Each value of the install is in `kubeVipObjects`, with its reason.
+ *
+ * The lab uses a VIP of a Service, not a VIP of the control plane. A VIP of the control plane needs
+ * three control-plane nodes and TLS on port 6443. A VIP of a Service needs one DaemonSet on the
+ * workers, and it serves the server of the cell.
+ *
+ * Each term of the election comes from the source of v1.3.1:
+ * - With `svc_election` off, one election of the lease `plndr-svcs-lock` gives each VIP to one
+ *   node (pkg/manager/worker/common.go, `GlobalLeader`). The lease is in the namespace of the pod.
+ * - The election is `leaderelection.RunOrDie` of client-go v0.37.1, with a Lease lock and
+ *   `ReleaseOnCancel` (pkg/election/election.go). The identity is the name of the node.
+ * - A leader that loses its lease stops the process (`OnStoppedLeading`), and the kubelet starts it again.
+ * - The ARP manager sends a gratuitous ARP for each VIP at each tick of one ticker of
+ *   `vip_arpRate`. A new VIP gets its first one at the next tick, not at once (pkg/arp/arp.go).
+ */
+/** This version is the release of kube-vip of the lab, from 2026-10-19: the tag of its image. */
+export declare const KUBE_VIP_VERSION = "1.3.1";
+/**
+ * This image is kube-vip 1.3.1 for linux/amd64, pinned by the digest of its manifest. The digest of
+ * the index of the tag is sha256:1962f9daf226503f7e6b107f595cb28b7917fd2d0113957075e19a3e5a6c1e33.
+ * The manifest of one platform loads into kind with no index.
+ */
+export declare const KUBE_VIP_IMAGE = "ghcr.io/kube-vip/kube-vip:v1.3.1@sha256:47353c7bde7fec21642cf621bc3fda2b999c051342912efda468999a399be667";
+/** This is the name of kube-vip: of its ServiceAccount, its DaemonSet and its container. */
+export declare const KUBE_VIP = "kube-vip";
+/** This is the Lease of the election of the VIPs of the Services (`svc_leasename`, cmd/kube-vip.go of v1.3.1). */
+export declare const KUBE_VIP_LEASE: {
+  readonly namespace: string;
+  readonly name: string;
+};
+/**
+ * These are the times of the election, as the install sets them. Each one is the default of the
+ * flags of v1.3.1 (cmd/kube-vip.go, lines 91–94). They are a lease of 15 s, a renew deadline of 10 s
+ * and a retry period of 2 s. The install sets each one in the environment, thus a new default cannot
+ * change a cell.
+ */
+export declare const KUBE_VIP_ELECTION: {
+  readonly lease: Quantity;
+  readonly renew: Quantity;
+  readonly retry: Quantity;
+};
+/** This time is the interval of the gratuitous ARPs, the default of the flag `arpRate` of v1.3.1 (cmd/kube-vip.go, line 61). */
+export declare const KUBE_VIP_ARP_RATE: Quantity;
+/** This label of a node selects the nodes of kube-vip: the DaemonSet has a pod only on a node with it. */
+export declare const VIP_LABEL = "lab.systems/vip";
+/**
+ * This function gives the objects of kube-vip in kube-system. They are its ServiceAccount, its
+ * ClusterRole and binding, and its DaemonSet. The rules of the role are those of the manifest that
+ * v1.3.1 generates (pkg/kubevip/config_generator.go, lines 95–134). The DaemonSet:
+ * - is on the host network, with NET_ADMIN and NET_RAW. It adds the VIP to `eth0` and sends ARP.
+ * - has a pod only on a node with `VIP_LABEL`. Thus the lab chooses the holder of the VIP.
+ * - sets ARP mode, the Services, one election for all VIPs, and each time of the election.
+ * - takes the image from the node (`imagePullPolicy: Never`).
+ */
+export declare const kubeVipObjects: (image: string) => unknown[];
+/** This is the Lease of the election, as the API gives it: its holder and its times. */
+interface VipLease {
+  readonly holder: string | null;
+  readonly acquireTime: string | null;
+  readonly renewTime: string | null;
+  readonly leaseDurationSeconds: number | null;
+  readonly leaseTransitions: number | null;
+}
+/** This function gives the Lease of the election, or null when it is not there yet. */
+export declare const vipLeaseOf: (cluster: Pick<Cluster, "kubectl">) => Promise<VipLease | null>;
+/** This is the Docker network of a cluster: its IPv4 subnet, and the MAC address of each container on it, by name. */
+interface VipNetwork {
+  readonly subnet: string;
+  readonly macs: Readonly<Record<string, string>>;
+}
+/** This function reads the Docker network of a cluster: its IPv4 subnet, and the MAC address of each container. */
+export declare const vipNetworkOf: (network: string) => Promise<VipNetwork>;
+/**
+ * This function gives the VIP of a subnet: the sixth address from its end. Docker gives the address
+ * of each container from the start of the subnet, thus no container takes it.
+ */
+export declare const vipOf: (subnet: string) => string;
+/** This is a pod of kube-vip that is not deleted: its name, its node, if it is ready, and the restarts of its container. */
+interface KubeVipPod {
+  readonly name: string;
+  readonly node: string;
+  readonly ready: boolean;
+  readonly restarts: number;
+}
+/** This function gives the pods of kube-vip that are not deleted. */
+export declare const kubeVipPods: (cluster: Pick<Cluster, "kubectl">) => Promise<KubeVipPod[]>;
+/** This function gives the nodes with a ready pod of kube-vip that is not deleted. */
+export declare const kubeVipReady: (cluster: Pick<Cluster, "kubectl">) => Promise<string[]>;
+/**
+ * This function makes `holder` the holder of the VIP, with a ready pod of kube-vip on each node of
+ * `nodes`. It gives null, or why it could not in `within` ms. If another node holds the lease, the
+ * function takes the label from each other node. The DaemonSet then deletes their pods. The leader
+ * gives back its lease at its stop (`ReleaseOnCancel`). The function gives each label back after
+ * `holder` takes the lease.
+ *
+ * A leader that lost its lease restarted its container. The kubelet gives a container a longer
+ * back-off at each restart, thus the function first deletes each pod of kube-vip with a restart.
+ * The DaemonSet then makes a new pod with no back-off.
+ */
+export declare const holdVip: (cluster: Pick<Cluster, "kubectl">, holder: string, nodes: readonly string[], within?: number) => Promise<string | null>;
+/**
+ * This function installs kube-vip in a cluster, with its image on each node (`cluster.load`), and
+ * makes `holder` the holder of the VIP. A failed install gives the pods of kube-vip and the tail of
+ * their logs.
+ */
+export declare const installKubeVip: (cluster: Cluster, image: string, holder: string, nodes: readonly string[]) => Promise<void>;
+/**
+ * This function waits until the Service of a VIP has the VIP in its status: kube-vip took it. It
+ * gives null, or why not in `within` ms.
+ */
+export declare const vipServed: (cluster: Pick<Cluster, "kubectl">, namespace: string, service: string, vip: string, within?: number) => Promise<string | null>;
+//#endregion
 //#region src/lds.d.ts
 /**
  * This filter of RE2 selects the two counters of the listener manager of Envoy that an update of LDS
@@ -695,11 +841,22 @@ export declare const namespaceObject: (cell: Pick<KindCell, "mesh">, namespace:
 export declare const probeOf: (path: string | null, probe: KubeletProbe, service?: string) => Record<string, unknown>;
 /** These are the objects of Redis: one replica behind a Service, with no persistence. */
 export declare const redisObjects: (namespace: string, image: string) => unknown[];
+/**
+ * This function gives the Service of a VIP (`kubevip.ts`). It is of type LoadBalancer, with the
+ * class of kube-vip and the address of the VIP in its annotation. The policy `Cluster` lets each node
+ * send a request to a replica on another node. The holder writes the address to the status of the
+ * Service. Then kube-proxy has the rules of the address on each node.
+ */
+export declare const vipService: (namespace: string, vip: string, ports: readonly unknown[]) => unknown;
 /**
  * These are the objects of the server: a Service of type ClusterIP, and the Deployment with the
  * settings of the cell. The image is the lab image for the service, or the image of grpc-go.
+ *
+ * With a VIP (`KindCell.vip`), the Service is of type LoadBalancer, with the address `vip` and the
+ * class of kube-vip (`vipService`). No replica is in the lost zone. Thus a zone loss takes away
+ * only the holder of the VIP.
  */
-export declare const serverObjects: (cell: KindCell, namespace: string, image: string, version?: number) => unknown[];
+export declare const serverObjects: (cell: KindCell, namespace: string, image: string, version?: number, vip?: string | null) => unknown[];
 /**
  * These are the objects of the clients: a DaemonSet with one client on each node, the control plane
  * too. The client of the service is `client.mjs`, and the client of grpc-go is `client-grpc.mjs`.
@@ -883,7 +1040,7 @@ type Verdicts = Readonly<Record<string, Verdict>>;
  * - A deletion, a rolling update, a node drain, a scale-in and a rollout delete a pod with its grace.
  * - In T07 a pause of kube-proxy comes before a deletion. In T18 the pause is on Redis.
  * - The crash of the lab is SIGKILL from the node. Like a crash, it has no preStop hook and no drain.
- * - The other faults are on a link, on Redis or on the process. The kubelet can restart a pod after them.
+ * - The other faults are on a link, on Redis, on the DNS of the clients or on the process. The kubelet can restart a pod after them.
  *   A zone loss freezes the pods of its node and deletes none of them in its hold.
  */
 export declare const stopOf: (cell: KindCell) => StopWay | null;
@@ -997,5 +1154,5 @@ export declare const toolPath: (tool: Tool, key?: string, cache?: string) => str
  */
 export declare const ensureTool: (tool: Tool, key?: string, cache?: string) => Promise<string>;
 //#endregion
-export { type BacklogTerm, type Band, type BandV1, CLIENT, type CiliumImages, type Cluster, type ClusterHosts, type ClusterManifest, type CountBand, type Credentials, type Cycle, DATAPLANES, DRAIN_RULES, type Dataplane, type Declaration, type Deleted, type DeletionWindow, type EdgeProtocol, type EdsSpec, Endpoint, type EnvironmentManifest, FORMAT, FORMAT_V1, type FaultPlan, type Flap, HBONE_PORT, HEALTH_PORT, type Judged, KIND_NOISE, KUBE_PROXY_MODES, type KindCell, type KindCellRecord, type KindCellRecordV1, type KindCellResult, type KindCellV1, type KindConfig, type KindDecision, type KindLab, type KindRun, type KindScenario, type KindVerdict, type KindVerdictV1, type KubeProxyMode, type KubeletProbe, LAST_SLACK, LOG_LABEL, type LdsSpec, type LeafCertificate, type LearnWindow, Line, type ListenerCounts, type LoadSample, type Mesh, type MeshFlavor, type MeshImages, type MeshMode, NODE_IMAGES, type NodeImage, type NodeLifecycle, type NonePrediction, O04, O09, O10, O16, PORT, type Parts, Period, PodLine, type PodSettings, type Prediction, type PredictionV1, type Propagated, type Propagation, PropagationSource, REDIS, RELATIVE, RecordLine, type RedisDeclaration, type Reference, type Replica, Request, type ResetReuse, RulesLine, type RunCheck, type RunCheckV1, type RunFacts, type RunFactsV1, type RunOptions, SERVER, STAGES, type ServiceRule, Sessions, SliceLine, SocketLine, type Stack, type Stamp, type Step, TCP_STATE, type Target, type Template, type TimeSpread, type Tool, type Trigger, type TriggerKind, type TriggerV1, TunnelLine, type Verdicts, type WindowPrediction, type Workload, ZONE_KEPT, ZONE_LABEL, ZONE_LOST, ZtunnelPodLine, backendsAt, backlogEnd, bandOf, byClients, byNode, calibrationOf, cellsTable, checkRun, cidrOverlap, cidrRange, cyclesOf, deletionOf, deletionsOf, drainBand, dropOf, emptyOf, factsOf, failuresOf, goDuration, intakeOf, isKubeProxyMode, isTunnelState, judge, judgeKind, kernelCounts, kindCellRecordSchema, kindCellRecordV1Schema, kindConfig, kubeProxyPatch, medianInterval, medianText, middle, nodeNames, observationAfter, observationEnd, outcomesOf, overshootBand, periodOf, podsAt, podsOf, predictionText, propagationOf, propagationSource, quantileOf, readRecord, recordsOf, referenceOf, requestBand, requestsOf, restartOf, restartsAt, reusesReset, rulesOf, scenario, scenarioProblems, seconds, secondsOf, sessionsAt, showBand, signalOf, signalsOf, sliceDropOf, sliceEmptyOf, sliceReadyAt, sliceReadyOf, slicesOf, socketsOf, stoppingOf, timeSpread, transitionOf, tunnelsOf, unitOf, updatesOf, upgrade, upgradeCell, zoneOf, ztunnelPodsOf, ztunnelReplaced };
+export { type BacklogTerm, type Band, type BandV1, CLIENT, type CiliumImages, type Cluster, type ClusterHosts, type ClusterManifest, type CountBand, type Credentials, type Cycle, DATAPLANES, DRAIN_RULES, type Dataplane, type Declaration, type Deleted, type DeletionWindow, type EdgeProtocol, type EdsSpec, Endpoint, type EnvironmentManifest, FORMAT, FORMAT_V1, type FaultPlan, type Flap, HBONE_PORT, HEALTH_PORT, type Judged, KIND_NOISE, KUBE_PROXY_MODES, type KindCell, type KindCellRecord, type KindCellRecordV1, type KindCellResult, type KindCellV1, type KindConfig, type KindDecision, type KindLab, type KindRun, type KindScenario, type KindVerdict, type KindVerdictV1, type KubeProxyMode, type KubeVipPod, type KubeletProbe, LAST_SLACK, LB_CLASS, LOG_LABEL, type LdsSpec, type LeafCertificate, type LearnWindow, Line, type ListenerCounts, type LoadSample, type Mesh, type MeshFlavor, type MeshImages, type MeshMode, NODE_IMAGES, type NodeImage, type NodeLifecycle, type NonePrediction, O04, O09, O10, O16, OUTSIDE, type OutsideSpec, PORT, type Parts, Period, type PermittedWindow, PodLine, type PodSettings, type Prediction, type PredictionV1, type Propagated, type Propagation, PropagationSource, REDIS, RELATIVE, RecordLine, type RedisDeclaration, type Reference, type Replica, Request, type ResetReuse, RulesLine, type RunCheck, type RunCheckV1, type RunFacts, type RunFactsV1, type RunOptions, SERVER, STAGES, type ServiceRule, Sessions, SliceLine, SocketLine, type Stack, type Stamp, type Step, TCP_STATE, type Target, type Template, type TimeSpread, type Tool, type Trigger, type TriggerKind, type TriggerV1, TunnelLine, VIP_ANNOTATION, type Verdicts, type VipLease, type VipNetwork, type VipSettings, type WindowPrediction, type Workload, ZONE_KEPT, ZONE_LABEL, ZONE_LOST, ZtunnelPodLine, backendsAt, backlogEnd, bandOf, byClients, byNode, calibrationOf, cellsTable, checkRun, cidrOverlap, cidrRange, cyclesOf, deletionOf, deletionsOf, drainBand, dropOf, emptyOf, factsOf, failuresOf, goDuration, intakeOf, isKubeProxyMode, isTunnelState, judge, judgeKind, kernelCounts, kindCellRecordSchema, kindCellRecordV1Schema, kindConfig, kubeProxyPatch, medianInterval, medianText, middle, nodeNames, observationAfter, observationEnd, outcomesOf, overshootBand, periodOf, podsAt, podsOf, predictionText, propagationOf, propagationSource, quantileOf, readRecord, recordsOf, referenceOf, requestBand, requestsOf, restartOf, restartsAt, reusesReset, rulesOf, scenario, scenarioProblems, seconds, secondsOf, sessionsAt, showBand, signalOf, signalsOf, sliceDropOf, sliceEmptyOf, sliceReadyAt, sliceReadyOf, slicesOf, socketsOf, stoppingOf, timeSpread, transitionOf, tunnelsOf, unitOf, updatesOf, upgrade, upgradeCell, zoneOf, ztunnelPodsOf, ztunnelReplaced };
 //# sourceMappingURL=index.d.ts.map