@opensoha/contracts 0.1.24 → 0.1.25

package/openapi/soha-api.json

@@ -1240,7 +1240,13 @@
             "read-only",
             "refresh"
           ],
-          "type": "string"
+          "type": "string",
+          "x-enum-varnames": [
+            "CreateAIGatewayOpenAICompatibleProviderResponseParamsXSohaCacheModeDefault",
+            "CreateAIGatewayOpenAICompatibleProviderResponseParamsXSohaCacheModeBypass",
+            "CreateAIGatewayOpenAICompatibleProviderResponseParamsXSohaCacheModeReadOnly",
+            "CreateAIGatewayOpenAICompatibleProviderResponseParamsXSohaCacheModeRefresh"
+          ]
         }
       },
       "SohaRouteTraceHeader": {
@@ -24160,6 +24166,71 @@
         },
         "type": "object"
       },
+      "KubernetesAgentActionCheck": {
+        "additionalProperties": false,
+        "properties": {
+          "action": {
+            "type": "string"
+          },
+          "checkedAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "configured": {
+            "enum": [
+              "allowed",
+              "denied",
+              "unknown"
+            ],
+            "type": "string"
+          },
+          "implementation": {
+            "enum": [
+              "supported",
+              "unsupported",
+              "unknown"
+            ],
+            "type": "string"
+          },
+          "kubernetesRBAC": {
+            "enum": [
+              "allowed",
+              "denied",
+              "unknown",
+              "not_applicable"
+            ],
+            "type": "string"
+          },
+          "reasonCode": {
+            "type": "string"
+          },
+          "scope": {
+            "enum": [
+              "cluster"
+            ],
+            "type": "string",
+            "x-enum-varnames": [
+              "KubernetesAgentActionCheckScopeCluster"
+            ]
+          }
+        },
+        "required": [
+          "action",
+          "implementation",
+          "configured",
+          "kubernetesRBAC"
+        ],
+        "type": "object"
+      },
+      "KubernetesAgentActionProfile": {
+        "description": "Installation preset only. Legacy preserves existing permissions; selecting workbench or read-only requires regenerating and reviewing the installation manifest.",
+        "enum": [
+          "legacy",
+          "workbench",
+          "read-only"
+        ],
+        "type": "string"
+      },
       "KubernetesAgentCustomResourceRule": {
         "additionalProperties": false,
         "properties": {
@@ -24385,6 +24456,9 @@
       "KubernetesClusterConnectionDetail": {
         "additionalProperties": false,
         "properties": {
+          "actionProfile": {
+            "$ref": "#/components/schemas/KubernetesAgentActionProfile"
+          },
           "context": {
             "type": "string"
           },
@@ -24476,6 +24550,13 @@
       "KubernetesClusterDiagnostics": {
         "additionalProperties": false,
         "properties": {
+          "actionChecks": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesAgentActionCheck"
+            },
+            "maxItems": 64,
+            "type": "array"
+          },
           "cacheReady": {
             "type": "boolean"
           },
@@ -24614,6 +24695,9 @@
       "KubernetesClusterRegistrationRequest": {
         "additionalProperties": false,
         "properties": {
+          "agentActionProfile": {
+            "$ref": "#/components/schemas/KubernetesAgentActionProfile"
+          },
           "agentCustomResourceRules": {
             "items": {
               "$ref": "#/components/schemas/KubernetesAgentCustomResourceRule"
@@ -28928,12 +29012,41 @@
           "clusterId": {
             "type": "string"
           },
+          "coverage": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesTopologyCoverage"
+            },
+            "maxItems": 128,
+            "type": "array"
+          },
+          "edges": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesTopologyGraphEdge"
+            },
+            "maxItems": 1000,
+            "type": "array"
+          },
           "generatedAt": {
             "type": "string"
           },
+          "graphVersion": {
+            "pattern": "^v1$",
+            "type": "string"
+          },
           "namespace": {
             "type": "string"
           },
+          "nodes": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesTopologyGraphNode"
+            },
+            "maxItems": 500,
+            "type": "array"
+          },
+          "observedAt": {
+            "format": "date-time",
+            "type": "string"
+          },
           "source": {
             "type": "string"
           },
@@ -28946,6 +29059,9 @@
             },
             "type": "array"
           },
+          "truncated": {
+            "type": "boolean"
+          },
           "warnings": {
             "items": {
               "type": "string"
@@ -29101,6 +29217,14 @@
             },
             "type": "array"
           },
+          "conditions": {
+            "description": "Current Node conditions, independent of scheduling and drain operations.",
+            "items": {
+              "$ref": "#/components/schemas/KubernetesWorkloadCondition"
+            },
+            "nullable": true,
+            "type": "array"
+          },
           "internalIp": {
             "type": "string"
           },
@@ -29123,6 +29247,14 @@
           "status": {
             "type": "string"
           },
+          "taints": {
+            "description": "Current Node spec taints. Empty means none; null or absent means not reported.",
+            "items": {
+              "$ref": "#/components/schemas/KubernetesNodeTaint"
+            },
+            "nullable": true,
+            "type": "array"
+          },
           "unschedulable": {
             "type": "boolean"
           },
@@ -31899,6 +32031,9 @@
             "minLength": 1,
             "type": "string"
           },
+          "resourceVersion": {
+            "type": "string"
+          },
           "scopeMode": {
             "$ref": "#/components/schemas/KubernetesResourceScopeMode"
           },
@@ -33551,6 +33686,558 @@
         ],
         "type": "object"
       },
+      "KubernetesTopologyCondition": {
+        "additionalProperties": false,
+        "properties": {
+          "lastTransitionTime": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "observedGeneration": {
+            "format": "int64",
+            "type": "integer"
+          },
+          "reason": {
+            "maxLength": 128,
+            "type": "string"
+          },
+          "status": {
+            "maxLength": 32,
+            "type": "string"
+          },
+          "type": {
+            "maxLength": 128,
+            "type": "string"
+          }
+        },
+        "required": [
+          "type",
+          "status"
+        ],
+        "type": "object"
+      },
+      "KubernetesTopologyCoverage": {
+        "additionalProperties": false,
+        "properties": {
+          "checkedAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "namespace": {
+            "maxLength": 63,
+            "type": "string"
+          },
+          "observedAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "provider": {
+            "$ref": "#/components/schemas/KubernetesTopologyProvider"
+          },
+          "reasonCode": {
+            "maxLength": 128,
+            "type": "string"
+          },
+          "sourceId": {
+            "maxLength": 128,
+            "type": "string"
+          },
+          "state": {
+            "enum": [
+              "available",
+              "not_installed",
+              "unsupported",
+              "denied",
+              "error",
+              "partial"
+            ],
+            "type": "string",
+            "x-enum-varnames": [
+              "KubernetesTopologyCoverageStateAvailable",
+              "KubernetesTopologyCoverageStateNotInstalled",
+              "KubernetesTopologyCoverageStateUnsupported",
+              "KubernetesTopologyCoverageStateDenied",
+              "KubernetesTopologyCoverageStateError",
+              "KubernetesTopologyCoverageStatePartial"
+            ]
+          },
+          "supportedKinds": {
+            "items": {
+              "maxLength": 128,
+              "type": "string"
+            },
+            "maxItems": 32,
+            "type": "array"
+          },
+          "truncated": {
+            "type": "boolean"
+          }
+        },
+        "required": [
+          "provider",
+          "sourceId",
+          "state"
+        ],
+        "type": "object"
+      },
+      "KubernetesTopologyGraphEdge": {
+        "additionalProperties": false,
+        "properties": {
+          "id": {
+            "maxLength": 2048,
+            "minLength": 1,
+            "type": "string"
+          },
+          "mirrorPercent": {
+            "maximum": 100,
+            "minimum": 0,
+            "type": "number"
+          },
+          "note": {
+            "maxLength": 2048,
+            "type": "string"
+          },
+          "port": {
+            "maxLength": 64,
+            "type": "string"
+          },
+          "protocol": {
+            "maxLength": 16,
+            "type": "string"
+          },
+          "relation": {
+            "enum": [
+              "matches",
+              "processes",
+              "forwards",
+              "weights",
+              "mirrors",
+              "resolves",
+              "selects"
+            ],
+            "type": "string",
+            "x-enum-varnames": [
+              "KubernetesTopologyGraphEdgeRelationMatches",
+              "KubernetesTopologyGraphEdgeRelationProcesses",
+              "KubernetesTopologyGraphEdgeRelationForwards",
+              "KubernetesTopologyGraphEdgeRelationWeights",
+              "KubernetesTopologyGraphEdgeRelationMirrors",
+              "KubernetesTopologyGraphEdgeRelationResolves",
+              "KubernetesTopologyGraphEdgeRelationSelects"
+            ]
+          },
+          "resolutionState": {
+            "$ref": "#/components/schemas/KubernetesTopologyResolution"
+          },
+          "ruleRef": {
+            "maxLength": 2048,
+            "type": "string"
+          },
+          "source": {
+            "maxLength": 2048,
+            "minLength": 1,
+            "type": "string"
+          },
+          "sourceRef": {
+            "$ref": "#/components/schemas/KubernetesResourceRef"
+          },
+          "target": {
+            "maxLength": 2048,
+            "minLength": 1,
+            "type": "string"
+          },
+          "totalWeight": {
+            "format": "int64",
+            "minimum": 0,
+            "type": "integer"
+          },
+          "weight": {
+            "format": "int64",
+            "minimum": 0,
+            "type": "integer"
+          }
+        },
+        "required": [
+          "id",
+          "source",
+          "target",
+          "relation",
+          "resolutionState"
+        ],
+        "type": "object"
+      },
+      "KubernetesTopologyGraphNode": {
+        "additionalProperties": false,
+        "properties": {
+          "conditions": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesTopologyCondition"
+            },
+            "maxItems": 64,
+            "type": "array"
+          },
+          "generation": {
+            "format": "int64",
+            "type": "integer"
+          },
+          "id": {
+            "maxLength": 2048,
+            "minLength": 1,
+            "type": "string"
+          },
+          "label": {
+            "maxLength": 1024,
+            "type": "string"
+          },
+          "properties": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesTopologyProperty"
+            },
+            "maxItems": 64,
+            "type": "array"
+          },
+          "protocol": {
+            "maxLength": 16,
+            "type": "string"
+          },
+          "provider": {
+            "$ref": "#/components/schemas/KubernetesTopologyProvider"
+          },
+          "resolutionState": {
+            "$ref": "#/components/schemas/KubernetesTopologyResolution"
+          },
+          "resource": {
+            "$ref": "#/components/schemas/KubernetesResourceRef"
+          },
+          "rule": {
+            "$ref": "#/components/schemas/KubernetesTopologyRule"
+          },
+          "type": {
+            "enum": [
+              "entry",
+              "rule",
+              "processor",
+              "backend-group",
+              "service",
+              "endpoint-group",
+              "pod",
+              "external"
+            ],
+            "type": "string",
+            "x-enum-varnames": [
+              "KubernetesTopologyGraphNodeTypeEntry",
+              "KubernetesTopologyGraphNodeTypeRule",
+              "KubernetesTopologyGraphNodeTypeProcessor",
+              "KubernetesTopologyGraphNodeTypeBackendGroup",
+              "KubernetesTopologyGraphNodeTypeService",
+              "KubernetesTopologyGraphNodeTypeEndpointGroup",
+              "KubernetesTopologyGraphNodeTypePod",
+              "KubernetesTopologyGraphNodeTypeExternal"
+            ]
+          }
+        },
+        "required": [
+          "id",
+          "type",
+          "label",
+          "provider",
+          "resolutionState"
+        ],
+        "type": "object"
+      },
+      "KubernetesTopologyMatch": {
+        "additionalProperties": false,
+        "properties": {
+          "name": {
+            "maxLength": 128,
+            "type": "string"
+          },
+          "operator": {
+            "maxLength": 32,
+            "type": "string"
+          },
+          "type": {
+            "maxLength": 32,
+            "type": "string"
+          },
+          "value": {
+            "maxLength": 1024,
+            "type": "string"
+          }
+        },
+        "required": [
+          "type"
+        ],
+        "type": "object"
+      },
+      "KubernetesTopologyProperty": {
+        "additionalProperties": false,
+        "properties": {
+          "name": {
+            "maxLength": 64,
+            "type": "string"
+          },
+          "value": {
+            "maxLength": 1024,
+            "type": "string"
+          }
+        },
+        "required": [
+          "name",
+          "value"
+        ],
+        "type": "object"
+      },
+      "KubernetesTopologyProvider": {
+        "enum": [
+          "kubernetes",
+          "gateway",
+          "traefik",
+          "apisix"
+        ],
+        "type": "string",
+        "x-enum-varnames": [
+          "KubernetesTopologyProviderKubernetes",
+          "KubernetesTopologyProviderGateway",
+          "KubernetesTopologyProviderTraefik",
+          "KubernetesTopologyProviderApisix"
+        ]
+      },
+      "KubernetesTopologyResolution": {
+        "enum": [
+          "resolved",
+          "unresolved",
+          "not_found",
+          "not_visible",
+          "no_ready_endpoints",
+          "external",
+          "unsupported_fragment",
+          "unknown"
+        ],
+        "type": "string",
+        "x-enum-varnames": [
+          "KubernetesTopologyResolutionResolved",
+          "KubernetesTopologyResolutionUnresolved",
+          "KubernetesTopologyResolutionNotFound",
+          "KubernetesTopologyResolutionNotVisible",
+          "KubernetesTopologyResolutionNoReadyEndpoints",
+          "KubernetesTopologyResolutionExternal",
+          "KubernetesTopologyResolutionUnsupportedFragment",
+          "KubernetesTopologyResolutionUnknown"
+        ]
+      },
+      "KubernetesTopologyRule": {
+        "additionalProperties": false,
+        "properties": {
+          "index": {
+            "minimum": 0,
+            "type": "integer"
+          },
+          "matchGroups": {
+            "description": "Groups are ORed; matches inside each group are ANDed. Opaque expressions remain a bounded summary and are marked unsupported_fragment.",
+            "items": {
+              "items": {
+                "$ref": "#/components/schemas/KubernetesTopologyMatch"
+              },
+              "maxItems": 64,
+              "type": "array"
+            },
+            "maxItems": 64,
+            "type": "array"
+          },
+          "matchSummary": {
+            "maxLength": 2048,
+            "type": "string"
+          },
+          "name": {
+            "maxLength": 253,
+            "type": "string"
+          },
+          "priority": {
+            "format": "int64",
+            "type": "integer"
+          },
+          "tlsMode": {
+            "maxLength": 64,
+            "type": "string"
+          }
+        },
+        "required": [
+          "index"
+        ],
+        "type": "object"
+      },
+      "KubernetesTopologySnapshot": {
+        "additionalProperties": false,
+        "properties": {
+          "sources": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesTopologySourceResult"
+            },
+            "maxItems": 64,
+            "type": "array"
+          },
+          "version": {
+            "pattern": "^v1$",
+            "type": "string"
+          }
+        },
+        "required": [
+          "version",
+          "sources"
+        ],
+        "type": "object"
+      },
+      "KubernetesTopologySnapshotRequest": {
+        "additionalProperties": false,
+        "properties": {
+          "queries": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesTopologySourceQuery"
+            },
+            "maxItems": 64,
+            "minItems": 1,
+            "type": "array",
+            "uniqueItems": true
+          }
+        },
+        "required": [
+          "queries"
+        ],
+        "type": "object"
+      },
+      "KubernetesTopologySourceObject": {
+        "additionalProperties": false,
+        "properties": {
+          "content": {
+            "description": "Fixed source-schema projection encoded as JSON. Unknown fields, raw annotations, Secret values, plugin configuration and credential material are removed before transport. This is not an original Kubernetes manifest.",
+            "maxLength": 65536,
+            "type": "string"
+          },
+          "generation": {
+            "format": "int64",
+            "type": "integer"
+          },
+          "resource": {
+            "$ref": "#/components/schemas/KubernetesResourceRef"
+          }
+        },
+        "required": [
+          "resource",
+          "content"
+        ],
+        "type": "object"
+      },
+      "KubernetesTopologySourceQuery": {
+        "additionalProperties": false,
+        "allOf": [
+          {
+            "if": {
+              "properties": {
+                "sourceId": {
+                  "enum": [
+                    "kubernetes.ingressclasses",
+                    "gateway.gatewayclasses"
+                  ]
+                }
+              },
+              "required": [
+                "sourceId"
+              ]
+            },
+            "then": {
+              "properties": {
+                "namespace": {
+                  "maxLength": 0,
+                  "type": "string"
+                }
+              }
+            }
+          }
+        ],
+        "properties": {
+          "namespace": {
+            "maxLength": 63,
+            "pattern": "^$|^[a-z0-9]([a-z0-9-]*[a-z0-9])?$",
+            "type": "string"
+          },
+          "sourceId": {
+            "enum": [
+              "kubernetes.services",
+              "kubernetes.pods",
+              "kubernetes.endpointslices",
+              "kubernetes.ingresses",
+              "kubernetes.ingressclasses",
+              "gateway.gateways",
+              "gateway.gatewayclasses",
+              "gateway.httproutes",
+              "gateway.grpcroutes",
+              "gateway.tcproutes",
+              "gateway.tlsroutes",
+              "gateway.udproutes",
+              "gateway.referencegrants",
+              "traefik.ingressroutes",
+              "traefik.ingressroutetcps",
+              "traefik.ingressrouteudps",
+              "traefik.traefikservices",
+              "traefik.middlewares",
+              "traefik.middlewaretcps",
+              "apisix.apisixroutes",
+              "apisix.apisixupstreams",
+              "apisix.apisixtls"
+            ],
+            "type": "string",
+            "x-enum-varnames": [
+              "KubernetesTopologySourceKubernetesServices",
+              "KubernetesTopologySourceKubernetesPods",
+              "KubernetesTopologySourceKubernetesEndpointslices",
+              "KubernetesTopologySourceKubernetesIngresses",
+              "KubernetesTopologySourceKubernetesIngressclasses",
+              "KubernetesTopologySourceGatewayGateways",
+              "KubernetesTopologySourceGatewayGatewayclasses",
+              "KubernetesTopologySourceGatewayHttproutes",
+              "KubernetesTopologySourceGatewayGrpcroutes",
+              "KubernetesTopologySourceGatewayTcproutes",
+              "KubernetesTopologySourceGatewayTlsroutes",
+              "KubernetesTopologySourceGatewayUdproutes",
+              "KubernetesTopologySourceGatewayReferencegrants",
+              "KubernetesTopologySourceTraefikIngressroutes",
+              "KubernetesTopologySourceTraefikIngressroutetcps",
+              "KubernetesTopologySourceTraefikIngressrouteudps",
+              "KubernetesTopologySourceTraefikTraefikservices",
+              "KubernetesTopologySourceTraefikMiddlewares",
+              "KubernetesTopologySourceTraefikMiddlewaretcps",
+              "KubernetesTopologySourceApisixApisixroutes",
+              "KubernetesTopologySourceApisixApisixupstreams",
+              "KubernetesTopologySourceApisixApisixtls"
+            ]
+          }
+        },
+        "required": [
+          "sourceId"
+        ],
+        "type": "object"
+      },
+      "KubernetesTopologySourceResult": {
+        "additionalProperties": false,
+        "properties": {
+          "coverage": {
+            "$ref": "#/components/schemas/KubernetesTopologyCoverage"
+          },
+          "objects": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesTopologySourceObject"
+            },
+            "maxItems": 200,
+            "type": "array"
+          }
+        },
+        "required": [
+          "coverage",
+          "objects"
+        ],
+        "type": "object"
+      },
       "KubernetesWorkloadCondition": {
         "additionalProperties": false,
         "properties": {
@@ -53062,6 +53749,395 @@
         ],
         "type": "object"
       },
+      "ResourceMonitoringEnvelope": {
+        "additionalProperties": false,
+        "properties": {
+          "data": {
+            "$ref": "#/components/schemas/ResourceMonitoringView"
+          }
+        },
+        "required": [
+          "data"
+        ],
+        "type": "object"
+      },
+      "ResourceMonitoringNode": {
+        "additionalProperties": false,
+        "properties": {
+          "allocatable": {
+            "$ref": "#/components/schemas/ResourceMonitoringQuantity"
+          },
+          "boundPods": {
+            "format": "double",
+            "nullable": true,
+            "type": "number"
+          },
+          "capacity": {
+            "$ref": "#/components/schemas/ResourceMonitoringQuantity"
+          },
+          "cordoned": {
+            "type": "boolean"
+          },
+          "cpuLimitsComplete": {
+            "type": "boolean"
+          },
+          "createdAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "diskPressure": {
+            "type": "string"
+          },
+          "internalIP": {
+            "type": "string"
+          },
+          "limits": {
+            "$ref": "#/components/schemas/ResourceMonitoringQuantity"
+          },
+          "memoryLimitsComplete": {
+            "type": "boolean"
+          },
+          "memoryPressure": {
+            "type": "string"
+          },
+          "nodeRef": {
+            "$ref": "#/components/schemas/KubernetesResourceRef"
+          },
+          "observedAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "os": {
+            "type": "string"
+          },
+          "overflowPodSlots": {
+            "format": "double",
+            "nullable": true,
+            "type": "number"
+          },
+          "pendingPods": {
+            "format": "double",
+            "nullable": true,
+            "type": "number"
+          },
+          "pidPressure": {
+            "type": "string"
+          },
+          "quality": {
+            "$ref": "#/components/schemas/ResourceMonitoringQuality"
+          },
+          "ready": {
+            "type": "string"
+          },
+          "remainingPodSlots": {
+            "format": "double",
+            "nullable": true,
+            "type": "number"
+          },
+          "requests": {
+            "$ref": "#/components/schemas/ResourceMonitoringQuantity"
+          }
+        },
+        "required": [
+          "nodeRef",
+          "ready",
+          "cordoned",
+          "memoryPressure",
+          "diskPressure",
+          "pidPressure",
+          "capacity",
+          "allocatable",
+          "requests",
+          "limits",
+          "cpuLimitsComplete",
+          "memoryLimitsComplete",
+          "boundPods",
+          "pendingPods",
+          "remainingPodSlots",
+          "overflowPodSlots",
+          "quality"
+        ],
+        "type": "object"
+      },
+      "ResourceMonitoringPanel": {
+        "additionalProperties": false,
+        "properties": {
+          "estimated": {
+            "type": "boolean"
+          },
+          "key": {
+            "maxLength": 64,
+            "type": "string"
+          },
+          "label": {
+            "type": "string"
+          },
+          "quality": {
+            "$ref": "#/components/schemas/ResourceMonitoringQuality"
+          },
+          "reasonCode": {
+            "maxLength": 64,
+            "type": "string"
+          },
+          "series": {
+            "items": {
+              "$ref": "#/components/schemas/ResourceMonitoringSeries"
+            },
+            "maxItems": 500,
+            "type": "array"
+          },
+          "unit": {
+            "type": "string"
+          },
+          "windowSeconds": {
+            "maximum": 3600,
+            "minimum": 300,
+            "type": "integer"
+          }
+        },
+        "required": [
+          "key",
+          "label",
+          "unit",
+          "quality",
+          "series"
+        ],
+        "type": "object"
+      },
+      "ResourceMonitoringPoint": {
+        "additionalProperties": false,
+        "properties": {
+          "timestamp": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "value": {
+            "format": "double",
+            "nullable": true,
+            "type": "number"
+          }
+        },
+        "required": [
+          "timestamp",
+          "value"
+        ],
+        "type": "object"
+      },
+      "ResourceMonitoringQuality": {
+        "enum": [
+          "valid",
+          "partial",
+          "stale",
+          "not_configured",
+          "not_collected",
+          "unsupported",
+          "denied",
+          "error",
+          "empty"
+        ],
+        "type": "string",
+        "x-enum-varnames": [
+          "ResourceMonitoringQualityValid",
+          "ResourceMonitoringQualityPartial",
+          "ResourceMonitoringQualityStale",
+          "ResourceMonitoringQualityNotConfigured",
+          "ResourceMonitoringQualityNotCollected",
+          "ResourceMonitoringQualityUnsupported",
+          "ResourceMonitoringQualityDenied",
+          "ResourceMonitoringQualityError",
+          "ResourceMonitoringQualityEmpty"
+        ]
+      },
+      "ResourceMonitoringQuantity": {
+        "additionalProperties": false,
+        "properties": {
+          "cpuCores": {
+            "format": "double",
+            "nullable": true,
+            "type": "number"
+          },
+          "memoryBytes": {
+            "format": "double",
+            "nullable": true,
+            "type": "number"
+          },
+          "podSlots": {
+            "format": "double",
+            "nullable": true,
+            "type": "number"
+          }
+        },
+        "required": [
+          "cpuCores",
+          "memoryBytes",
+          "podSlots"
+        ],
+        "type": "object"
+      },
+      "ResourceMonitoringSeries": {
+        "additionalProperties": false,
+        "properties": {
+          "latest": {
+            "format": "double",
+            "nullable": true,
+            "type": "number"
+          },
+          "metricKey": {
+            "maxLength": 64,
+            "type": "string"
+          },
+          "nodeRef": {
+            "$ref": "#/components/schemas/KubernetesResourceRef"
+          },
+          "points": {
+            "items": {
+              "$ref": "#/components/schemas/ResourceMonitoringPoint"
+            },
+            "maxItems": 1440,
+            "type": "array"
+          },
+          "quality": {
+            "$ref": "#/components/schemas/ResourceMonitoringQuality"
+          },
+          "reasonCode": {
+            "maxLength": 64,
+            "type": "string"
+          },
+          "sampledAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "source": {
+            "type": "string"
+          },
+          "unit": {
+            "enum": [
+              "cores",
+              "bytes",
+              "count",
+              "events/s",
+              "events",
+              "percent"
+            ],
+            "type": "string",
+            "x-enum-varnames": [
+              "ResourceMonitoringUnitCores",
+              "ResourceMonitoringUnitBytes",
+              "ResourceMonitoringUnitCount",
+              "ResourceMonitoringUnitEventsPerSecond",
+              "ResourceMonitoringUnitEvents",
+              "ResourceMonitoringUnitPercent"
+            ]
+          }
+        },
+        "required": [
+          "nodeRef",
+          "metricKey",
+          "unit",
+          "quality",
+          "source",
+          "latest",
+          "points"
+        ],
+        "type": "object"
+      },
+      "ResourceMonitoringView": {
+        "additionalProperties": false,
+        "properties": {
+          "clusterId": {
+            "type": "string"
+          },
+          "from": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "generatedAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "node": {
+            "type": "string"
+          },
+          "nodeOptions": {
+            "items": {
+              "$ref": "#/components/schemas/KubernetesResourceRef"
+            },
+            "maxItems": 500,
+            "type": "array"
+          },
+          "nodes": {
+            "items": {
+              "$ref": "#/components/schemas/ResourceMonitoringNode"
+            },
+            "maxItems": 500,
+            "type": "array"
+          },
+          "panels": {
+            "items": {
+              "$ref": "#/components/schemas/ResourceMonitoringPanel"
+            },
+            "maxItems": 32,
+            "type": "array"
+          },
+          "snapshotObservedAt": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "snapshotQuality": {
+            "$ref": "#/components/schemas/ResourceMonitoringQuality"
+          },
+          "stepSeconds": {
+            "maximum": 3600,
+            "minimum": 15,
+            "type": "integer"
+          },
+          "to": {
+            "format": "date-time",
+            "type": "string"
+          },
+          "truncated": {
+            "type": "boolean"
+          },
+          "unscheduledPendingPods": {
+            "format": "double",
+            "nullable": true,
+            "type": "number"
+          },
+          "view": {
+            "$ref": "#/components/schemas/ResourceMonitoringViewName"
+          }
+        },
+        "required": [
+          "clusterId",
+          "view",
+          "from",
+          "to",
+          "stepSeconds",
+          "generatedAt",
+          "snapshotQuality",
+          "unscheduledPendingPods",
+          "nodes",
+          "panels"
+        ],
+        "type": "object"
+      },
+      "ResourceMonitoringViewName": {
+        "enum": [
+          "overview",
+          "cpu",
+          "memory",
+          "conntrack",
+          "pods"
+        ],
+        "type": "string",
+        "x-enum-varnames": [
+          "ResourceMonitoringViewOverview",
+          "ResourceMonitoringViewCPU",
+          "ResourceMonitoringViewMemory",
+          "ResourceMonitoringViewConntrack",
+          "ResourceMonitoringViewPods"
+        ]
+      },
       "ResourceReadRequest": {
         "additionalProperties": false,
         "properties": {
@@ -62956,7 +64032,13 @@
               "medium",
               "high"
             ],
-            "type": "string"
+            "type": "string",
+            "x-enum-varnames": [
+              "WorkbenchModelPreferencesReasoningEffortAuto",
+              "WorkbenchModelPreferencesReasoningEffortLow",
+              "WorkbenchModelPreferencesReasoningEffortMedium",
+              "WorkbenchModelPreferencesReasoningEffortHigh"
+            ]
           }
         },
         "type": "object"
@@ -64723,7 +65805,7 @@
   "info": {
     "description": "Public OpenSoha core API contract. This first contract focuses on stable cross-repository boundaries: auth, health, runner-facing control-plane callbacks, AI Gateway, and MCP capability discovery.\n",
     "title": "Soha API",
-    "version": "0.1.24"
+    "version": "0.1.25"
   },
   "openapi": "3.1.0",
   "paths": {
@@ -75646,42 +76728,382 @@
         ],
         "x-soha-permissions": {
           "keys": [
-            "platform.clusters.view"
+            "platform.clusters.view"
+          ],
+          "mode": "all"
+        }
+      },
+      "post": {
+        "description": "Update only the standard Agent container to an explicit official release version using the Agent connection. Kubernetes owns the rollout; HTTP 202 means the image update was accepted, not that rollout completed. Non-direct resource owners must use their owning delivery tool.",
+        "operationId": "upgradeClusterAgent",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/ClusterAgentUpgradeInput"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "202": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ClusterAgentUpgradeResultEnvelope"
+                }
+              }
+            },
+            "description": "Image update accepted. Read upgrade status until the target version reconnects and rollout is healthy."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-permissions": {
+          "keys": [
+            "platform.clusters.update"
+          ],
+          "mode": "all"
+        }
+      }
+    },
+    "/clusters/{clusterID}/configuration/configmaps": {
+      "get": {
+        "operationId": "listKubernetesConfigMaps",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/KubernetesConfigMapListEnvelope"
+                }
+              }
+            },
+            "description": "Kubernetes ConfigMaps visible in the selected cluster and namespace scope."
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.configuration.config-maps.view"
+          ],
+          "mode": "all"
+        }
+      }
+    },
+    "/clusters/{clusterID}/configuration/configmaps/{name}/data": {
+      "put": {
+        "operationId": "updateKubernetesConfigMapData",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/KubernetesConfigMapDataInput"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/KubernetesConfigMapDetailEnvelope"
+                }
+              }
+            },
+            "description": "Kubernetes operation result."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.configuration.config-maps.update"
+          ],
+          "mode": "all"
+        }
+      }
+    },
+    "/clusters/{clusterID}/configuration/configmaps/{name}/detail": {
+      "get": {
+        "operationId": "getKubernetesConfigMapDetail",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/KubernetesConfigMapDetailEnvelope"
+                }
+              }
+            },
+            "description": "Kubernetes ConfigMap metadata and data visible to the authenticated principal."
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.configuration.config-maps.view"
+          ],
+          "mode": "all"
+        }
+      }
+    },
+    "/clusters/{clusterID}/configuration/configmaps/{name}/references": {
+      "get": {
+        "operationId": "listKubernetesConfigMapReferences",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/KubernetesConfigReferenceListEnvelope"
+                }
+              }
+            },
+            "description": "Workloads and resources that reference the selected ConfigMap."
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.configuration.config-maps.view"
+          ],
+          "mode": "all"
+        }
+      }
+    },
+    "/clusters/{clusterID}/configuration/hpas": {
+      "get": {
+        "operationId": "listKubernetesHorizontalPodAutoscalers",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/KubernetesHorizontalPodAutoscalerListEnvelope"
+                }
+              }
+            },
+            "description": "HorizontalPodAutoscalers visible in the selected scope."
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.configuration.horizontal-pod-autoscalers.view"
+          ],
+          "mode": "all"
+        }
+      }
+    },
+    "/clusters/{clusterID}/configuration/hpas/{name}": {
+      "delete": {
+        "operationId": "deleteKubernetesHorizontalPodAutoscaler",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "Resource deleted."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.configuration.horizontal-pod-autoscalers.delete"
           ],
           "mode": "all"
         }
-      },
-      "post": {
-        "description": "Update only the standard Agent container to an explicit official release version using the Agent connection. Kubernetes owns the rollout; HTTP 202 means the image update was accepted, not that rollout completed. Non-direct resource owners must use their owning delivery tool.",
-        "operationId": "upgradeClusterAgent",
+      }
+    },
+    "/clusters/{clusterID}/configuration/hpas/{name}/detail": {
+      "get": {
+        "operationId": "getKubernetesHorizontalPodAutoscalerDetail",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
         ],
-        "requestBody": {
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/ClusterAgentUpgradeInput"
-              }
-            }
-          },
-          "required": true
-        },
         "responses": {
-          "202": {
+          "200": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/ClusterAgentUpgradeResultEnvelope"
+                  "$ref": "#/components/schemas/KubernetesHorizontalPodAutoscalerDetailEnvelope"
                 }
               }
             },
-            "description": "Image update accepted. Read upgrade status until the target version reconnects and rollout is healthy."
-          },
-          "400": {
-            "$ref": "#/components/responses/Error"
+            "description": "HorizontalPodAutoscaler targets, metrics, and conditions."
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -75689,9 +77111,6 @@
           "404": {
             "$ref": "#/components/responses/Error"
           },
-          "409": {
-            "$ref": "#/components/responses/Error"
-          },
           "503": {
             "$ref": "#/components/responses/Error"
           }
@@ -75699,21 +77118,25 @@
         "tags": [
           "Platform"
         ],
+        "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.clusters.update"
+            "platform.configuration.horizontal-pod-autoscalers.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/configuration/configmaps": {
+    "/clusters/{clusterID}/configuration/hpas/{name}/yaml": {
       "get": {
-        "operationId": "listKubernetesConfigMaps",
+        "operationId": "getKubernetesHorizontalPodAutoscalerYaml",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
           },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
           {
             "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
@@ -75723,11 +77146,14 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesConfigMapListEnvelope"
+                  "$ref": "#/components/schemas/KubernetesResourceYamlEnvelope"
                 }
               }
             },
-            "description": "Kubernetes ConfigMaps visible in the selected cluster and namespace scope."
+            "description": "Authorized Kubernetes resource YAML."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -75735,6 +77161,9 @@
           "404": {
             "$ref": "#/components/responses/Error"
           },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
           "503": {
             "$ref": "#/components/responses/Error"
           }
@@ -75745,15 +77174,13 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.configuration.config-maps.view"
+            "platform.configuration.horizontal-pod-autoscalers.view"
           ],
           "mode": "all"
         }
-      }
-    },
-    "/clusters/{clusterID}/configuration/configmaps/{name}/data": {
+      },
       "put": {
-        "operationId": "updateKubernetesConfigMapData",
+        "operationId": "applyKubernetesHorizontalPodAutoscalerYaml",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
@@ -75769,7 +77196,7 @@
           "content": {
             "application/json": {
               "schema": {
-                "$ref": "#/components/schemas/KubernetesConfigMapDataInput"
+                "$ref": "#/components/schemas/KubernetesResourceYamlInput"
               }
             }
           },
@@ -75780,11 +77207,11 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesConfigMapDetailEnvelope"
+                  "$ref": "#/components/schemas/KubernetesResourceYamlEnvelope"
                 }
               }
             },
-            "description": "Kubernetes operation result."
+            "description": "Authorized Kubernetes resource YAML."
           },
           "400": {
             "$ref": "#/components/responses/Error"
@@ -75808,22 +77235,19 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.configuration.config-maps.update"
+            "platform.configuration.horizontal-pod-autoscalers.update"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/configuration/configmaps/{name}/detail": {
+    "/clusters/{clusterID}/configuration/leases": {
       "get": {
-        "operationId": "getKubernetesConfigMapDetail",
+        "operationId": "listKubernetesLeases",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
           },
-          {
-            "$ref": "#/components/parameters/KubernetesResourceName"
-          },
           {
             "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
@@ -75833,11 +77257,11 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesConfigMapDetailEnvelope"
+                  "$ref": "#/components/schemas/KubernetesLeaseListEnvelope"
                 }
               }
             },
-            "description": "Kubernetes ConfigMap metadata and data visible to the authenticated principal."
+            "description": "Kubernetes Lease metadata visible in the selected scope."
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -75855,22 +77279,19 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.configuration.config-maps.view"
+            "platform.configuration.leases.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/configuration/configmaps/{name}/references": {
+    "/clusters/{clusterID}/configuration/limitranges": {
       "get": {
-        "operationId": "listKubernetesConfigMapReferences",
+        "operationId": "listKubernetesLimitRanges",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
           },
-          {
-            "$ref": "#/components/parameters/KubernetesResourceName"
-          },
           {
             "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
@@ -75880,11 +77301,11 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesConfigReferenceListEnvelope"
+                  "$ref": "#/components/schemas/KubernetesLimitRangeListEnvelope"
                 }
               }
             },
-            "description": "Workloads and resources that reference the selected ConfigMap."
+            "description": "LimitRanges visible in the selected scope."
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -75902,19 +77323,22 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.configuration.config-maps.view"
+            "platform.configuration.limit-ranges.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/configuration/hpas": {
+    "/clusters/{clusterID}/configuration/limitranges/{name}/detail": {
       "get": {
-        "operationId": "listKubernetesHorizontalPodAutoscalers",
+        "operationId": "getKubernetesLimitRangeDetail",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
           },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
           {
             "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
@@ -75924,11 +77348,11 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesHorizontalPodAutoscalerListEnvelope"
+                  "$ref": "#/components/schemas/KubernetesLimitRangeDetailEnvelope"
                 }
               }
             },
-            "description": "HorizontalPodAutoscalers visible in the selected scope."
+            "description": "LimitRange rules, labels, and annotations."
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -75946,24 +77370,18 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.configuration.horizontal-pod-autoscalers.view"
+            "platform.configuration.limit-ranges.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/configuration/hpas/{name}/detail": {
+    "/clusters/{clusterID}/configuration/mutatingwebhookconfigurations": {
       "get": {
-        "operationId": "getKubernetesHorizontalPodAutoscalerDetail",
+        "operationId": "listKubernetesMutatingWebhookConfigurations",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
-          },
-          {
-            "$ref": "#/components/parameters/KubernetesResourceName"
-          },
-          {
-            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
         ],
         "responses": {
@@ -75971,11 +77389,11 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesHorizontalPodAutoscalerDetailEnvelope"
+                  "$ref": "#/components/schemas/KubernetesAdmissionWebhookConfigurationListEnvelope"
                 }
               }
             },
-            "description": "HorizontalPodAutoscaler targets, metrics, and conditions."
+            "description": "Cluster-scoped MutatingWebhookConfigurations."
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -75993,21 +77411,21 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.configuration.horizontal-pod-autoscalers.view"
+            "platform.configuration.mutating-webhook-configurations.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/configuration/leases": {
+    "/clusters/{clusterID}/configuration/mutatingwebhookconfigurations/{name}/detail": {
       "get": {
-        "operationId": "listKubernetesLeases",
+        "operationId": "getKubernetesMutatingWebhookConfigurationDetail",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
           },
           {
-            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+            "$ref": "#/components/parameters/KubernetesResourceName"
           }
         ],
         "responses": {
@@ -76015,11 +77433,11 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesLeaseListEnvelope"
+                  "$ref": "#/components/schemas/KubernetesAdmissionWebhookConfigurationDetailEnvelope"
                 }
               }
             },
-            "description": "Kubernetes Lease metadata visible in the selected scope."
+            "description": "Mutating admission webhook clients, selectors, rules, and timeout policy."
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -76037,15 +77455,15 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.configuration.leases.view"
+            "platform.configuration.mutating-webhook-configurations.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/configuration/limitranges": {
+    "/clusters/{clusterID}/configuration/poddisruptionbudgets": {
       "get": {
-        "operationId": "listKubernetesLimitRanges",
+        "operationId": "listKubernetesPodDisruptionBudgets",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
@@ -76059,11 +77477,11 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesLimitRangeListEnvelope"
+                  "$ref": "#/components/schemas/KubernetesPodDisruptionBudgetListEnvelope"
                 }
               }
             },
-            "description": "LimitRanges visible in the selected scope."
+            "description": "PodDisruptionBudgets visible in the selected scope."
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -76081,15 +77499,15 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.configuration.limit-ranges.view"
+            "platform.configuration.pod-disruption-budgets.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/configuration/limitranges/{name}/detail": {
-      "get": {
-        "operationId": "getKubernetesLimitRangeDetail",
+    "/clusters/{clusterID}/configuration/poddisruptionbudgets/{name}": {
+      "delete": {
+        "operationId": "deleteKubernetesPodDisruptionBudget",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
@@ -76102,63 +77520,21 @@
           }
         ],
         "responses": {
-          "200": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/KubernetesLimitRangeDetailEnvelope"
-                }
-              }
-            },
-            "description": "LimitRange rules, labels, and annotations."
-          },
-          "403": {
-            "$ref": "#/components/responses/Error"
+          "204": {
+            "description": "Resource deleted."
           },
-          "404": {
+          "400": {
             "$ref": "#/components/responses/Error"
           },
-          "503": {
-            "$ref": "#/components/responses/Error"
-          }
-        },
-        "tags": [
-          "Platform"
-        ],
-        "x-soha-implementation-status": "implemented",
-        "x-soha-permissions": {
-          "keys": [
-            "platform.configuration.limit-ranges.view"
-          ],
-          "mode": "all"
-        }
-      }
-    },
-    "/clusters/{clusterID}/configuration/mutatingwebhookconfigurations": {
-      "get": {
-        "operationId": "listKubernetesMutatingWebhookConfigurations",
-        "parameters": [
-          {
-            "$ref": "#/components/parameters/ClusterID"
-          }
-        ],
-        "responses": {
-          "200": {
-            "content": {
-              "application/json": {
-                "schema": {
-                  "$ref": "#/components/schemas/KubernetesAdmissionWebhookConfigurationListEnvelope"
-                }
-              }
-            },
-            "description": "Cluster-scoped MutatingWebhookConfigurations."
-          },
           "403": {
             "$ref": "#/components/responses/Error"
           },
           "404": {
             "$ref": "#/components/responses/Error"
           },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
           "503": {
             "$ref": "#/components/responses/Error"
           }
@@ -76169,21 +77545,24 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.configuration.mutating-webhook-configurations.view"
+            "platform.configuration.pod-disruption-budgets.delete"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/configuration/mutatingwebhookconfigurations/{name}/detail": {
+    "/clusters/{clusterID}/configuration/poddisruptionbudgets/{name}/detail": {
       "get": {
-        "operationId": "getKubernetesMutatingWebhookConfigurationDetail",
+        "operationId": "getKubernetesPodDisruptionBudgetDetail",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
           },
           {
             "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
         ],
         "responses": {
@@ -76191,11 +77570,11 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesAdmissionWebhookConfigurationDetailEnvelope"
+                  "$ref": "#/components/schemas/KubernetesPodDisruptionBudgetDetailEnvelope"
                 }
               }
             },
-            "description": "Mutating admission webhook clients, selectors, rules, and timeout policy."
+            "description": "PodDisruptionBudget selectors, matching Pods, workload, and conditions."
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -76213,19 +77592,22 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.configuration.mutating-webhook-configurations.view"
+            "platform.configuration.pod-disruption-budgets.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/configuration/poddisruptionbudgets": {
+    "/clusters/{clusterID}/configuration/poddisruptionbudgets/{name}/yaml": {
       "get": {
-        "operationId": "listKubernetesPodDisruptionBudgets",
+        "operationId": "getKubernetesPodDisruptionBudgetYaml",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
           },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
           {
             "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
@@ -76235,11 +77617,14 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesPodDisruptionBudgetListEnvelope"
+                  "$ref": "#/components/schemas/KubernetesResourceYamlEnvelope"
                 }
               }
             },
-            "description": "PodDisruptionBudgets visible in the selected scope."
+            "description": "Authorized Kubernetes resource YAML."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -76247,6 +77632,9 @@
           "404": {
             "$ref": "#/components/responses/Error"
           },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
           "503": {
             "$ref": "#/components/responses/Error"
           }
@@ -76261,11 +77649,9 @@
           ],
           "mode": "all"
         }
-      }
-    },
-    "/clusters/{clusterID}/configuration/poddisruptionbudgets/{name}/detail": {
-      "get": {
-        "operationId": "getKubernetesPodDisruptionBudgetDetail",
+      },
+      "put": {
+        "operationId": "applyKubernetesPodDisruptionBudgetYaml",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
@@ -76277,16 +77663,29 @@
             "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
         ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/KubernetesResourceYamlInput"
+              }
+            }
+          },
+          "required": true
+        },
         "responses": {
           "200": {
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesPodDisruptionBudgetDetailEnvelope"
+                  "$ref": "#/components/schemas/KubernetesResourceYamlEnvelope"
                 }
               }
             },
-            "description": "PodDisruptionBudget selectors, matching Pods, workload, and conditions."
+            "description": "Authorized Kubernetes resource YAML."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -76294,6 +77693,9 @@
           "404": {
             "$ref": "#/components/responses/Error"
           },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
           "503": {
             "$ref": "#/components/responses/Error"
           }
@@ -76304,7 +77706,7 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.configuration.pod-disruption-budgets.view"
+            "platform.configuration.pod-disruption-budgets.update"
           ],
           "mode": "all"
         }
@@ -77740,6 +79142,7 @@
     },
     "/clusters/{clusterID}/infrastructure/nodes/{nodeName}/drain": {
       "post": {
+        "description": "Cordon the node and evict eligible pods. A 409 with node_drain_pdb_blocked, node_drain_eviction_blocked, node_drain_timeout, node_drain_canceled, node_drain_pod_selection or node_drain_failed means this drain did not complete. Inspect current node schedulability and remaining pods before retrying or explicitly restoring scheduling. Transport failure leaves the outcome unknown.",
         "operationId": "drainKubernetesNode",
         "parameters": [
           {
@@ -78154,35 +79557,399 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.namespaces.create"
+            "platform.namespaces.create"
+          ],
+          "mode": "all"
+        }
+      }
+    },
+    "/clusters/{clusterID}/namespaces/{namespaceName}": {
+      "delete": {
+        "operationId": "deleteKubernetesNamespace",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "in": "path",
+            "name": "namespaceName",
+            "required": true,
+            "schema": {
+              "minLength": 1,
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "Operation completed."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.namespaces.delete"
+          ],
+          "mode": "all"
+        }
+      },
+      "put": {
+        "operationId": "updateKubernetesNamespace",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "in": "path",
+            "name": "namespaceName",
+            "required": true,
+            "schema": {
+              "minLength": 1,
+              "type": "string"
+            }
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/KubernetesNamespaceInput"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/KubernetesNamespaceEnvelope"
+                }
+              }
+            },
+            "description": "Kubernetes operation result."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.namespaces.update"
+          ],
+          "mode": "all"
+        }
+      }
+    },
+    "/clusters/{clusterID}/network/backendtlspolicies": {
+      "get": {
+        "operationId": "listKubernetesBackendTLSPolicies",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/KubernetesBackendTLSPolicyListEnvelope"
+                }
+              }
+            },
+            "description": "BackendTLSPolicies visible in the selected scope."
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.network.backend-tls-policies.view"
+          ],
+          "mode": "all"
+        }
+      }
+    },
+    "/clusters/{clusterID}/network/backendtlspolicies/{name}": {
+      "delete": {
+        "operationId": "deleteKubernetesBackendTLSPolicy",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "Resource deleted."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.network.backend-tls-policies.delete"
+          ],
+          "mode": "all"
+        }
+      }
+    },
+    "/clusters/{clusterID}/network/backendtlspolicies/{name}/detail": {
+      "get": {
+        "operationId": "getKubernetesBackendTLSPolicyDetail",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "responses": {
+          "200": {
+            "and status conditions.": null,
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/KubernetesBackendTLSPolicyDetailEnvelope"
+                }
+              }
+            },
+            "description": "BackendTLSPolicy targets",
+            "trust sources": null
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.network.backend-tls-policies.view"
+          ],
+          "mode": "all"
+        }
+      }
+    },
+    "/clusters/{clusterID}/network/backendtlspolicies/{name}/yaml": {
+      "get": {
+        "operationId": "getKubernetesBackendTLSPolicyYaml",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/KubernetesResourceYamlEnvelope"
+                }
+              }
+            },
+            "description": "Authorized Kubernetes resource YAML."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.network.backend-tls-policies.view"
+          ],
+          "mode": "all"
+        }
+      },
+      "put": {
+        "operationId": "applyKubernetesBackendTLSPolicyYaml",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/KubernetesResourceYamlInput"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/KubernetesResourceYamlEnvelope"
+                }
+              }
+            },
+            "description": "Authorized Kubernetes resource YAML."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.network.backend-tls-policies.update"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/namespaces/{namespaceName}": {
-      "delete": {
-        "operationId": "deleteKubernetesNamespace",
+    "/clusters/{clusterID}/network/endpointslices": {
+      "get": {
+        "operationId": "listKubernetesEndpointSlices",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
           },
           {
-            "in": "path",
-            "name": "namespaceName",
-            "required": true,
-            "schema": {
-              "minLength": 1,
-              "type": "string"
-            }
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
         ],
         "responses": {
-          "204": {
-            "description": "Operation completed."
-          },
-          "400": {
-            "$ref": "#/components/responses/Error"
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/KubernetesEndpointSliceListEnvelope"
+                }
+              }
+            },
+            "description": "EndpointSlices visible in the selected scope."
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -78190,9 +79957,6 @@
           "404": {
             "$ref": "#/components/responses/Error"
           },
-          "409": {
-            "$ref": "#/components/responses/Error"
-          },
           "503": {
             "$ref": "#/components/responses/Error"
           }
@@ -78203,50 +79967,38 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.namespaces.delete"
+            "platform.network.endpoint-slices.view"
           ],
           "mode": "all"
         }
-      },
-      "put": {
-        "operationId": "updateKubernetesNamespace",
+      }
+    },
+    "/clusters/{clusterID}/network/endpointslices/{name}/detail": {
+      "get": {
+        "operationId": "getKubernetesEndpointSliceDetail",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
           },
           {
-            "in": "path",
-            "name": "namespaceName",
-            "required": true,
-            "schema": {
-              "minLength": 1,
-              "type": "string"
-            }
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
         ],
-        "requestBody": {
-          "content": {
-            "application/json": {
-              "schema": {
-                "$ref": "#/components/schemas/KubernetesNamespaceInput"
-              }
-            }
-          },
-          "required": true
-        },
         "responses": {
           "200": {
+            "and topology hints.": null,
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesNamespaceEnvelope"
+                  "$ref": "#/components/schemas/KubernetesEndpointSliceDetailEnvelope"
                 }
               }
             },
-            "description": "Kubernetes operation result."
-          },
-          "400": {
-            "$ref": "#/components/responses/Error"
+            "description": "EndpointSlice ports",
+            "endpoint health": null
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -78254,9 +80006,6 @@
           "404": {
             "$ref": "#/components/responses/Error"
           },
-          "409": {
-            "$ref": "#/components/responses/Error"
-          },
           "503": {
             "$ref": "#/components/responses/Error"
           }
@@ -78267,21 +80016,18 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.namespaces.update"
+            "platform.network.endpoint-slices.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/network/backendtlspolicies": {
+    "/clusters/{clusterID}/network/gatewayclasses": {
       "get": {
-        "operationId": "listKubernetesBackendTLSPolicies",
+        "operationId": "listKubernetesGatewayClasses",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
-          },
-          {
-            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
         ],
         "responses": {
@@ -78289,11 +80035,11 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesBackendTLSPolicyListEnvelope"
+                  "$ref": "#/components/schemas/KubernetesGatewayClassListEnvelope"
                 }
               }
             },
-            "description": "BackendTLSPolicies visible in the selected scope."
+            "description": "Cluster-scoped GatewayClasses."
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -78311,38 +80057,35 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.network.backend-tls-policies.view"
+            "platform.network.gateway-classes.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/network/backendtlspolicies/{name}/detail": {
+    "/clusters/{clusterID}/network/gatewayclasses/{name}/detail": {
       "get": {
-        "operationId": "getKubernetesBackendTLSPolicyDetail",
+        "operationId": "getKubernetesGatewayClassDetail",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
           },
           {
             "$ref": "#/components/parameters/KubernetesResourceName"
-          },
-          {
-            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
         ],
         "responses": {
           "200": {
-            "and status conditions.": null,
+            "and authorized Gateways.": null,
+            "conditions": null,
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesBackendTLSPolicyDetailEnvelope"
+                  "$ref": "#/components/schemas/KubernetesGatewayClassDetailEnvelope"
                 }
               }
             },
-            "description": "BackendTLSPolicy targets",
-            "trust sources": null
+            "description": "GatewayClass status"
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -78360,15 +80103,15 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.network.backend-tls-policies.view"
+            "platform.network.gateway-classes.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/network/endpointslices": {
+    "/clusters/{clusterID}/network/gateways": {
       "get": {
-        "operationId": "listKubernetesEndpointSlices",
+        "operationId": "listKubernetesGateways",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
@@ -78382,11 +80125,11 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesEndpointSliceListEnvelope"
+                  "$ref": "#/components/schemas/KubernetesGatewayListEnvelope"
                 }
               }
             },
-            "description": "EndpointSlices visible in the selected scope."
+            "description": "Gateway API Gateways visible in the selected scope."
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -78404,15 +80147,15 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.network.endpoint-slices.view"
+            "platform.network.gateways.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/network/endpointslices/{name}/detail": {
+    "/clusters/{clusterID}/network/gateways/{name}/detail": {
       "get": {
-        "operationId": "getKubernetesEndpointSliceDetail",
+        "operationId": "getKubernetesGatewayDetail",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
@@ -78426,16 +80169,16 @@
         ],
         "responses": {
           "200": {
-            "and topology hints.": null,
+            "and attached routes.": null,
+            "conditions": null,
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesEndpointSliceDetailEnvelope"
+                  "$ref": "#/components/schemas/KubernetesGatewayDetailEnvelope"
                 }
               }
             },
-            "description": "EndpointSlice ports",
-            "endpoint health": null
+            "description": "Gateway listeners"
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -78453,18 +80196,21 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.network.endpoint-slices.view"
+            "platform.network.gateways.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/network/gatewayclasses": {
+    "/clusters/{clusterID}/network/grpcroutes": {
       "get": {
-        "operationId": "listKubernetesGatewayClasses",
+        "operationId": "listKubernetesGRPCRoutes",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
         ],
         "responses": {
@@ -78472,11 +80218,11 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesGatewayClassListEnvelope"
+                  "$ref": "#/components/schemas/KubernetesGRPCRouteListEnvelope"
                 }
               }
             },
-            "description": "Cluster-scoped GatewayClasses."
+            "description": "GRPCRoutes visible in the selected scope."
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -78494,35 +80240,84 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.network.gateway-classes.view"
+            "platform.network.grpc-routes.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/network/gatewayclasses/{name}/detail": {
+    "/clusters/{clusterID}/network/grpcroutes/{name}": {
+      "delete": {
+        "operationId": "deleteKubernetesGRPCRoute",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "Resource deleted."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.network.grpc-routes.delete"
+          ],
+          "mode": "all"
+        }
+      }
+    },
+    "/clusters/{clusterID}/network/grpcroutes/{name}/detail": {
       "get": {
-        "operationId": "getKubernetesGatewayClassDetail",
+        "operationId": "getKubernetesGRPCRouteDetail",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
           },
           {
             "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
         ],
         "responses": {
           "200": {
-            "and authorized Gateways.": null,
-            "conditions": null,
+            "and authorized backends.": null,
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesGatewayClassDetailEnvelope"
+                  "$ref": "#/components/schemas/KubernetesGRPCRouteDetailEnvelope"
                 }
               }
             },
-            "description": "GatewayClass status"
+            "description": "GRPCRoute parents",
+            "matching rules": null
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -78540,19 +80335,22 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.network.gateway-classes.view"
+            "platform.network.grpc-routes.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/network/gateways": {
+    "/clusters/{clusterID}/network/grpcroutes/{name}/yaml": {
       "get": {
-        "operationId": "listKubernetesGateways",
+        "operationId": "getKubernetesGRPCRouteYaml",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
           },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
           {
             "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
@@ -78562,11 +80360,14 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesGatewayListEnvelope"
+                  "$ref": "#/components/schemas/KubernetesResourceYamlEnvelope"
                 }
               }
             },
-            "description": "Gateway API Gateways visible in the selected scope."
+            "description": "Authorized Kubernetes resource YAML."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -78574,6 +80375,9 @@
           "404": {
             "$ref": "#/components/responses/Error"
           },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
           "503": {
             "$ref": "#/components/responses/Error"
           }
@@ -78584,15 +80388,13 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.network.gateways.view"
+            "platform.network.grpc-routes.view"
           ],
           "mode": "all"
         }
-      }
-    },
-    "/clusters/{clusterID}/network/gateways/{name}/detail": {
-      "get": {
-        "operationId": "getKubernetesGatewayDetail",
+      },
+      "put": {
+        "operationId": "applyKubernetesGRPCRouteYaml",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
@@ -78604,18 +80406,29 @@
             "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
         ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/KubernetesResourceYamlInput"
+              }
+            }
+          },
+          "required": true
+        },
         "responses": {
           "200": {
-            "and attached routes.": null,
-            "conditions": null,
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesGatewayDetailEnvelope"
+                  "$ref": "#/components/schemas/KubernetesResourceYamlEnvelope"
                 }
               }
             },
-            "description": "Gateway listeners"
+            "description": "Authorized Kubernetes resource YAML."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -78623,6 +80436,9 @@
           "404": {
             "$ref": "#/components/responses/Error"
           },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
           "503": {
             "$ref": "#/components/responses/Error"
           }
@@ -78633,15 +80449,15 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.network.gateways.view"
+            "platform.network.grpc-routes.update"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/network/grpcroutes": {
+    "/clusters/{clusterID}/network/httproutes": {
       "get": {
-        "operationId": "listKubernetesGRPCRoutes",
+        "operationId": "listKubernetesHTTPRoutes",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
@@ -78655,11 +80471,11 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesGRPCRouteListEnvelope"
+                  "$ref": "#/components/schemas/KubernetesHTTPRouteListEnvelope"
                 }
               }
             },
-            "description": "GRPCRoutes visible in the selected scope."
+            "description": "HTTPRoutes visible in the selected scope."
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -78677,15 +80493,61 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.network.grpc-routes.view"
+            "platform.network.http-routes.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/network/grpcroutes/{name}/detail": {
+    "/clusters/{clusterID}/network/httproutes/{name}": {
+      "delete": {
+        "operationId": "deleteKubernetesHTTPRoute",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "Resource deleted."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.network.http-routes.delete"
+          ],
+          "mode": "all"
+        }
+      }
+    },
+    "/clusters/{clusterID}/network/httproutes/{name}/detail": {
       "get": {
-        "operationId": "getKubernetesGRPCRouteDetail",
+        "operationId": "getKubernetesHTTPRouteDetail",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
@@ -78703,11 +80565,11 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesGRPCRouteDetailEnvelope"
+                  "$ref": "#/components/schemas/KubernetesHTTPRouteDetailEnvelope"
                 }
               }
             },
-            "description": "GRPCRoute parents",
+            "description": "HTTPRoute parents",
             "matching rules": null
           },
           "403": {
@@ -78726,19 +80588,22 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.network.grpc-routes.view"
+            "platform.network.http-routes.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/network/httproutes": {
+    "/clusters/{clusterID}/network/httproutes/{name}/yaml": {
       "get": {
-        "operationId": "listKubernetesHTTPRoutes",
+        "operationId": "getKubernetesHTTPRouteYaml",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
           },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
           {
             "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
@@ -78748,11 +80613,14 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesHTTPRouteListEnvelope"
+                  "$ref": "#/components/schemas/KubernetesResourceYamlEnvelope"
                 }
               }
             },
-            "description": "HTTPRoutes visible in the selected scope."
+            "description": "Authorized Kubernetes resource YAML."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -78760,6 +80628,9 @@
           "404": {
             "$ref": "#/components/responses/Error"
           },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
           "503": {
             "$ref": "#/components/responses/Error"
           }
@@ -78774,11 +80645,9 @@
           ],
           "mode": "all"
         }
-      }
-    },
-    "/clusters/{clusterID}/network/httproutes/{name}/detail": {
-      "get": {
-        "operationId": "getKubernetesHTTPRouteDetail",
+      },
+      "put": {
+        "operationId": "applyKubernetesHTTPRouteYaml",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
@@ -78790,18 +80659,29 @@
             "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
         ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/KubernetesResourceYamlInput"
+              }
+            }
+          },
+          "required": true
+        },
         "responses": {
           "200": {
-            "and authorized backends.": null,
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesHTTPRouteDetailEnvelope"
+                  "$ref": "#/components/schemas/KubernetesResourceYamlEnvelope"
                 }
               }
             },
-            "description": "HTTPRoute parents",
-            "matching rules": null
+            "description": "Authorized Kubernetes resource YAML."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -78809,6 +80689,9 @@
           "404": {
             "$ref": "#/components/responses/Error"
           },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
           "503": {
             "$ref": "#/components/responses/Error"
           }
@@ -78819,7 +80702,7 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.network.http-routes.view"
+            "platform.network.http-routes.update"
           ],
           "mode": "all"
         }
@@ -79045,32 +80928,76 @@
         }
       }
     },
-    "/clusters/{clusterID}/network/networkpolicies/{name}/detail": {
+    "/clusters/{clusterID}/network/networkpolicies/{name}/detail": {
+      "get": {
+        "operationId": "getKubernetesNetworkPolicyDetail",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "responses": {
+          "200": {
+            "and authorized matching Pods.": null,
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/KubernetesNetworkPolicyDetailEnvelope"
+                }
+              }
+            },
+            "description": "NetworkPolicy selectors",
+            "rules": null
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.network.network-policies.view"
+          ],
+          "mode": "all"
+        }
+      }
+    },
+    "/clusters/{clusterID}/network/referencegrants": {
       "get": {
-        "operationId": "getKubernetesNetworkPolicyDetail",
+        "operationId": "listKubernetesReferenceGrants",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
           },
-          {
-            "$ref": "#/components/parameters/KubernetesResourceName"
-          },
           {
             "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
         ],
         "responses": {
           "200": {
-            "and authorized matching Pods.": null,
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesNetworkPolicyDetailEnvelope"
+                  "$ref": "#/components/schemas/KubernetesReferenceGrantListEnvelope"
                 }
               }
             },
-            "description": "NetworkPolicy selectors",
-            "rules": null
+            "description": "ReferenceGrants visible in the selected scope."
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -79088,19 +81015,68 @@
         "x-soha-implementation-status": "implemented",
         "x-soha-permissions": {
           "keys": [
-            "platform.network.network-policies.view"
+            "platform.network.reference-grants.view"
           ],
           "mode": "all"
         }
       }
     },
-    "/clusters/{clusterID}/network/referencegrants": {
+    "/clusters/{clusterID}/network/referencegrants/{name}": {
+      "delete": {
+        "operationId": "deleteKubernetesReferenceGrant",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "Resource deleted."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.network.reference-grants.delete"
+          ],
+          "mode": "all"
+        }
+      }
+    },
+    "/clusters/{clusterID}/network/referencegrants/{name}/detail": {
       "get": {
-        "operationId": "listKubernetesReferenceGrants",
+        "operationId": "getKubernetesReferenceGrantDetail",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
           },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
           {
             "$ref": "#/components/parameters/KubernetesNamespaceQuery"
           }
@@ -79110,11 +81086,11 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesReferenceGrantListEnvelope"
+                  "$ref": "#/components/schemas/KubernetesReferenceGrantDetailEnvelope"
                 }
               }
             },
-            "description": "ReferenceGrants visible in the selected scope."
+            "description": "ReferenceGrant source and target references."
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -79138,9 +81114,9 @@
         }
       }
     },
-    "/clusters/{clusterID}/network/referencegrants/{name}/detail": {
+    "/clusters/{clusterID}/network/referencegrants/{name}/yaml": {
       "get": {
-        "operationId": "getKubernetesReferenceGrantDetail",
+        "operationId": "getKubernetesReferenceGrantYaml",
         "parameters": [
           {
             "$ref": "#/components/parameters/ClusterID"
@@ -79157,11 +81133,14 @@
             "content": {
               "application/json": {
                 "schema": {
-                  "$ref": "#/components/schemas/KubernetesReferenceGrantDetailEnvelope"
+                  "$ref": "#/components/schemas/KubernetesResourceYamlEnvelope"
                 }
               }
             },
-            "description": "ReferenceGrant source and target references."
+            "description": "Authorized Kubernetes resource YAML."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -79169,6 +81148,9 @@
           "404": {
             "$ref": "#/components/responses/Error"
           },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
           "503": {
             "$ref": "#/components/responses/Error"
           }
@@ -79183,6 +81165,67 @@
           ],
           "mode": "all"
         }
+      },
+      "put": {
+        "operationId": "applyKubernetesReferenceGrantYaml",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/KubernetesResourceYamlInput"
+              }
+            }
+          },
+          "required": true
+        },
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/KubernetesResourceYamlEnvelope"
+                }
+              }
+            },
+            "description": "Authorized Kubernetes resource YAML."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.network.reference-grants.update"
+          ],
+          "mode": "all"
+        }
       }
     },
     "/clusters/{clusterID}/network/services": {
@@ -79361,7 +81404,7 @@
                 }
               }
             },
-            "description": "Resolved ingress and Gateway API topology for the selected scope."
+            "description": "Bounded permission-filtered Kubernetes, Gateway API, Traefik and APISIX topology, with per-source coverage and explicit unresolved relationships."
           },
           "403": {
             "$ref": "#/components/responses/Error"
@@ -79801,6 +81844,112 @@
         }
       }
     },
+    "/clusters/{clusterID}/resource-monitoring": {
+      "get": {
+        "description": "Fixed bounded monitoring templates. The selected view requires its exact permission plus cluster-wide nodes.view. Raw PromQL is never accepted. Current snapshots and historical series have separate observation times.",
+        "operationId": "getKubernetesResourceMonitoring",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "in": "query",
+            "name": "view",
+            "required": true,
+            "schema": {
+              "$ref": "#/components/schemas/ResourceMonitoringViewName"
+            }
+          },
+          {
+            "in": "query",
+            "name": "node",
+            "schema": {
+              "maxLength": 253,
+              "type": "string"
+            }
+          },
+          {
+            "in": "query",
+            "name": "from",
+            "schema": {
+              "format": "date-time",
+              "type": "string"
+            }
+          },
+          {
+            "in": "query",
+            "name": "to",
+            "schema": {
+              "format": "date-time",
+              "type": "string"
+            }
+          },
+          {
+            "in": "query",
+            "name": "rangeMinutes",
+            "schema": {
+              "default": 60,
+              "maximum": 1440,
+              "minimum": 1,
+              "type": "integer"
+            }
+          },
+          {
+            "in": "query",
+            "name": "stepSeconds",
+            "schema": {
+              "default": 60,
+              "maximum": 3600,
+              "minimum": 15,
+              "type": "integer"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ResourceMonitoringEnvelope"
+                }
+              }
+            },
+            "description": "Per-panel quality and bounded node series."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "byQuery": {
+            "view": {
+              "conntrack": "platform.resource-monitoring.conntrack.view",
+              "cpu": "platform.resource-monitoring.cpu.view",
+              "memory": "platform.resource-monitoring.memory.view",
+              "overview": "platform.resource-monitoring.overview.view",
+              "pods": "platform.resource-monitoring.pods.view"
+            }
+          },
+          "keys": [
+            "platform.nodes.view"
+          ],
+          "mode": "all"
+        }
+      }
+    },
     "/clusters/{clusterID}/resources/graph": {
       "get": {
         "operationId": "getKubernetesResourceGraph",
@@ -81812,6 +83961,52 @@
         }
       }
     },
+    "/clusters/{clusterID}/workloads/replicationcontrollers/{name}": {
+      "delete": {
+        "operationId": "deleteKubernetesReplicationController",
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ClusterID"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesResourceName"
+          },
+          {
+            "$ref": "#/components/parameters/KubernetesNamespaceQuery"
+          }
+        ],
+        "responses": {
+          "204": {
+            "description": "Resource deleted."
+          },
+          "400": {
+            "$ref": "#/components/responses/Error"
+          },
+          "403": {
+            "$ref": "#/components/responses/Error"
+          },
+          "404": {
+            "$ref": "#/components/responses/Error"
+          },
+          "409": {
+            "$ref": "#/components/responses/Error"
+          },
+          "503": {
+            "$ref": "#/components/responses/Error"
+          }
+        },
+        "tags": [
+          "Platform"
+        ],
+        "x-soha-implementation-status": "implemented",
+        "x-soha-permissions": {
+          "keys": [
+            "platform.workloads.replication-controllers.delete"
+          ],
+          "mode": "all"
+        }
+      }
+    },
     "/clusters/{clusterID}/workloads/replicationcontrollers/{name}/detail": {
       "get": {
         "operationId": "getKubernetesReplicationControllerDetail",