kb-cloud-client-typescript 2.3.0-beta.0 → 2.3.0-beta.10

package/src/adminapi.yaml

@@ -2263,6 +2263,19 @@ paths:
           required: false
           schema:
             type: boolean
+        - name: endpointHost
+          in: query
+          description: Case-insensitive substring to match against the host part of cached cluster endpoints
+          required: false
+          schema:
+            type: string
+        - name: includeEndpoints
+          in: query
+          description: Whether to include cached user-visible endpoints in each cluster item
+          required: false
+          schema:
+            type: boolean
+            default: false
       responses:
         '200':
           description: OK
@@ -2339,6 +2352,17 @@ paths:
           description: list clusters referenced by this cluster
           schema:
             type: string
+        - name: endpointHost
+          in: query
+          description: Case-insensitive substring to match against the host part of cached cluster endpoints
+          schema:
+            type: string
+        - name: includeEndpoints
+          in: query
+          description: Whether to include cached user-visible endpoints in each cluster item
+          schema:
+            type: boolean
+            default: false
       responses:
         '200':
           description: A successful response.
@@ -10792,6 +10816,85 @@ paths:
         '404':
           $ref: '#/components/responses/404'
       x-codegen-request-body-name: body
+  /admin/v1/environments/{environmentName}/loadbalancer/config:
+    get:
+      tags:
+        - loadBalancer
+      operationId: getLoadBalancerConfig
+      summary: Get the effective load balancer configuration of an environment
+      parameters:
+        - name: environmentName
+          in: path
+          description: name of the environment
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: A successful response.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/loadBalancerConfig'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+    put:
+      tags:
+        - loadBalancer
+      operationId: updateLoadBalancerConfig
+      summary: Save and immediately activate the load balancer configuration of an environment
+      parameters:
+        - name: environmentName
+          in: path
+          description: name of the environment
+          required: true
+          schema:
+            type: string
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/loadBalancerConfigUpdate'
+      responses:
+        '200':
+          description: A successful response.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/loadBalancerConfig'
+        '400':
+          $ref: '#/components/responses/400'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+      x-codegen-request-body-name: body
+    delete:
+      tags:
+        - loadBalancer
+      operationId: resetLoadBalancerConfig
+      summary: Reset the environment load balancer configuration to the current provider defaults
+      parameters:
+        - name: environmentName
+          in: path
+          description: name of the environment
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: The effective provider defaults after reset.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/loadBalancerConfig'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
   /admin/v1/environments/{environmentName}/loadbalancer/vipPool:
     get:
       operationId: listVIPPool
@@ -19496,11 +19599,792 @@ paths:
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/ESSecurityRoleDescriptor'
+              $ref: '#/components/schemas/ESSecurityRoleDescriptor'
+      responses:
+        '204':
+          content: {}
+          description: Create or update Elasticsearch security role successfully.
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+      x-codegen-request-body-name: body
+    delete:
+      tags:
+        - elasticsearch
+        - shared
+      summary: Delete Elasticsearch security role
+      operationId: deleteElasticsearchSecurityRole
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: roleName
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        '204':
+          content: {}
+          description: Delete Elasticsearch security role successfully.
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+  /admin/v1/data/elasticsearch/organizations/{orgName}/clusters/{clusterName}/accounts/role-mappings:
+    get:
+      tags:
+        - elasticsearch
+        - shared
+      summary: List Elasticsearch security role mappings
+      operationId: listElasticsearchSecurityRoleMappings
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: List Elasticsearch security role mappings successfully.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ESSecurityRoleMappings'
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+  /admin/v1/data/elasticsearch/organizations/{orgName}/clusters/{clusterName}/accounts/role-mappings/{mappingName}:
+    get:
+      tags:
+        - elasticsearch
+        - shared
+      summary: Get Elasticsearch security role mapping
+      operationId: getElasticsearchSecurityRoleMapping
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: mappingName
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: Get Elasticsearch security role mapping successfully.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ESSecurityRoleMapping'
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+    put:
+      tags:
+        - elasticsearch
+        - shared
+      summary: Create or update Elasticsearch security role mapping
+      operationId: putElasticsearchSecurityRoleMapping
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: mappingName
+          in: path
+          required: true
+          schema:
+            type: string
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              $ref: '#/components/schemas/ESSecurityRoleMapping'
+      responses:
+        '204':
+          content: {}
+          description: Create or update Elasticsearch security role mapping successfully.
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+      x-codegen-request-body-name: body
+    delete:
+      tags:
+        - elasticsearch
+        - shared
+      summary: Delete Elasticsearch security role mapping
+      operationId: deleteElasticsearchSecurityRoleMapping
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: mappingName
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        '204':
+          content: {}
+          description: Delete Elasticsearch security role mapping successfully.
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+  /admin/v1/data/elasticsearch/organizations/{orgName}/clusters/{clusterName}/accounts/privileges/builtin:
+    get:
+      tags:
+        - elasticsearch
+        - shared
+      summary: Get Elasticsearch builtin privileges
+      operationId: getElasticsearchBuiltinPrivileges
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: Get Elasticsearch builtin privileges successfully.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/ESBuiltinPrivileges'
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+  /admin/v1/data/clickhouse/organizations/{orgName}/clusters/{clusterName}/accounts:
+    get:
+      tags:
+        - clickhouse
+        - shared
+      summary: List ClickHouse accounts
+      operationId: listClickhouseAccounts
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: List ClickHouse accounts successfully.
+          content:
+            application/json:
+              schema:
+                $ref: '#/components/schemas/CkAccount'
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+    post:
+      tags:
+        - clickhouse
+        - shared
+      summary: Create a ClickHouse account with optional roles
+      operationId: createClickhouseAccount
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              description: Create a ClickHouse account request.
+              required:
+                - name
+                - password
+              properties:
+                name:
+                  type: string
+                  description: The account (user) name.
+                password:
+                  type: string
+                  description: The account password.
+                roles:
+                  type: array
+                  description: Roles to grant to the account on creation.
+                  items:
+                    type: string
+      responses:
+        '204':
+          content: {}
+          description: Create ClickHouse account successfully.
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+      x-codegen-request-body-name: body
+  /admin/v1/data/clickhouse/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}:
+    patch:
+      tags:
+        - clickhouse
+        - shared
+      summary: Update a ClickHouse account password
+      operationId: updateClickhouseAccountPassword
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: accountName
+          in: path
+          required: true
+          schema:
+            type: string
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              description: Update a ClickHouse account password request.
+              required:
+                - password
+              properties:
+                password:
+                  type: string
+                  description: The new account password.
+      responses:
+        '204':
+          content: {}
+          description: Update ClickHouse account password successfully.
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+      x-codegen-request-body-name: body
+    delete:
+      tags:
+        - clickhouse
+        - shared
+      summary: Delete a ClickHouse account
+      operationId: deleteClickhouseAccount
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: accountName
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        '204':
+          content: {}
+          description: Delete ClickHouse account successfully.
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+  /admin/v1/data/clickhouse/organizations/{orgName}/clusters/{clusterName}/accounts/{accountName}/roles:
+    get:
+      tags:
+        - clickhouse
+        - shared
+      summary: List the roles granted to a ClickHouse account
+      operationId: listClickhouseAccountRoles
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: accountName
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: List ClickHouse account roles successfully.
+          content:
+            application/json:
+              schema:
+                type: object
+                description: A ClickHouse role.
+                properties:
+                  name:
+                    type: string
+                    description: The role name.
+                  privileges:
+                    type: array
+                    description: Privileges granted to the role, grouped by scope.
+                    items:
+                      type: object
+                      description: A group of privileges granted on a scope.
+                      properties:
+                        scope:
+                          type: string
+                          description: The ON-clause operand of the grant, e.g. "db.*" or "*.*".
+                        privileges:
+                          type: array
+                          items:
+                            type: string
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+    put:
+      tags:
+        - clickhouse
+        - shared
+      summary: Update the roles granted to a ClickHouse account
+      operationId: updateClickhouseAccountRoles
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: accountName
+          in: path
+          required: true
+          schema:
+            type: string
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              description: Update the roles granted to a ClickHouse account request.
+              required:
+                - roles
+              properties:
+                roles:
+                  type: array
+                  description: The full set of roles to grant to the account. Existing roles are replaced.
+                  items:
+                    type: string
+      responses:
+        '204':
+          content: {}
+          description: Update ClickHouse account roles successfully.
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+      x-codegen-request-body-name: body
+  /admin/v1/data/clickhouse/organizations/{orgName}/clusters/{clusterName}/accounts/roles:
+    get:
+      tags:
+        - clickhouse
+        - shared
+      summary: List ClickHouse roles
+      operationId: listClickhouseRoles
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: forCreateUser
+          in: query
+          required: false
+          description: Whether to include built-in privilege roles for creating an account.
+          schema:
+            type: boolean
+      responses:
+        '200':
+          description: List ClickHouse roles successfully.
+          content:
+            application/json:
+              schema:
+                type: array
+                description: List of ClickHouse roles.
+                items:
+                  type: object
+                  description: A ClickHouse role.
+                  properties:
+                    name:
+                      type: string
+                      description: The role name.
+                    privileges:
+                      type: array
+                      description: Privileges granted to the role, grouped by scope.
+                      items:
+                        type: object
+                        description: A group of privileges granted on a scope.
+                        properties:
+                          scope:
+                            type: string
+                            description: The ON-clause operand of the grant, e.g. "db.*" or "*.*".
+                          privileges:
+                            type: array
+                            items:
+                              type: string
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+    post:
+      tags:
+        - clickhouse
+        - shared
+      summary: Create a ClickHouse role with privileges
+      operationId: createClickhouseRole
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              description: A ClickHouse role.
+              properties:
+                name:
+                  type: string
+                  description: The role name.
+                privileges:
+                  type: array
+                  description: Privileges granted to the role, grouped by scope.
+                  items:
+                    type: object
+                    description: A group of privileges granted on a scope.
+                    properties:
+                      scope:
+                        type: string
+                        description: The ON-clause operand of the grant, e.g. "db.*" or "*.*".
+                      privileges:
+                        type: array
+                        items:
+                          type: string
+      responses:
+        '204':
+          content: {}
+          description: Create ClickHouse role successfully.
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+      x-codegen-request-body-name: body
+  /admin/v1/data/clickhouse/organizations/{orgName}/clusters/{clusterName}/accounts/roles/{roleName}:
+    get:
+      tags:
+        - clickhouse
+        - shared
+      summary: Get the grants (privileges) of a ClickHouse role
+      operationId: getClickhouseRoleGrants
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: roleName
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        '200':
+          description: Get ClickHouse role grants successfully.
+          content:
+            application/json:
+              schema:
+                type: array
+                description: Grants (privileges) of a ClickHouse role.
+                items:
+                  type: object
+                  description: A single grant of a ClickHouse role.
+                  properties:
+                    accessType:
+                      type: string
+                      description: The access type of the grant.
+                    database:
+                      type: string
+                      description: The database of the grant scope.
+                    table:
+                      type: string
+                      description: The table of the grant scope.
+                    scope:
+                      type: string
+                      description: The full grant scope, e.g. "db.*".
+                    isPartialRevoke:
+                      type: boolean
+                      description: Whether the grant is a partial revoke.
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+    delete:
+      tags:
+        - clickhouse
+        - shared
+      summary: Delete a ClickHouse role
+      operationId: deleteClickhouseRole
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: roleName
+          in: path
+          required: true
+          schema:
+            type: string
+      responses:
+        '204':
+          content: {}
+          description: Delete ClickHouse role successfully.
+        '400':
+          $ref: '#/components/responses/400'
+        '401':
+          $ref: '#/components/responses/401'
+        '403':
+          $ref: '#/components/responses/403'
+        '404':
+          $ref: '#/components/responses/404'
+        '500':
+          $ref: '#/components/responses/500'
+  /admin/v1/data/clickhouse/organizations/{orgName}/clusters/{clusterName}/accounts/roles/{roleName}/privileges:
+    post:
+      tags:
+        - clickhouse
+        - shared
+      summary: Grant privileges to a ClickHouse role
+      operationId: grantClickhouseRolePrivileges
+      parameters:
+        - name: orgName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: clusterName
+          in: path
+          required: true
+          schema:
+            type: string
+        - name: roleName
+          in: path
+          required: true
+          schema:
+            type: string
+      requestBody:
+        required: true
+        content:
+          application/json:
+            schema:
+              type: object
+              description: A group of privileges granted on a scope.
+              properties:
+                scope:
+                  type: string
+                  description: The ON-clause operand of the grant, e.g. "db.*" or "*.*".
+                privileges:
+                  type: array
+                  items:
+                    type: string
       responses:
         '204':
           content: {}
-          description: Create or update Elasticsearch security role successfully.
+          description: Grant ClickHouse role privileges successfully.
         '400':
           $ref: '#/components/responses/400'
         '401':
@@ -19514,10 +20398,10 @@ paths:
       x-codegen-request-body-name: body
     delete:
       tags:
-        - elasticsearch
+        - clickhouse
         - shared
-      summary: Delete Elasticsearch security role
-      operationId: deleteElasticsearchSecurityRole
+      summary: Revoke privileges from a ClickHouse role
+      operationId: revokeClickhouseRolePrivileges
       parameters:
         - name: orgName
           in: path
@@ -19534,127 +20418,31 @@ paths:
           required: true
           schema:
             type: string
-      responses:
-        '204':
-          content: {}
-          description: Delete Elasticsearch security role successfully.
-        '400':
-          $ref: '#/components/responses/400'
-        '401':
-          $ref: '#/components/responses/401'
-        '403':
-          $ref: '#/components/responses/403'
-        '404':
-          $ref: '#/components/responses/404'
-        '500':
-          $ref: '#/components/responses/500'
-  /admin/v1/data/elasticsearch/organizations/{orgName}/clusters/{clusterName}/accounts/role-mappings:
-    get:
-      tags:
-        - elasticsearch
-        - shared
-      summary: List Elasticsearch security role mappings
-      operationId: listElasticsearchSecurityRoleMappings
-      parameters:
-        - name: orgName
-          in: path
-          required: true
-          schema:
-            type: string
-        - name: clusterName
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        '200':
-          description: List Elasticsearch security role mappings successfully.
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/ESSecurityRoleMappings'
-        '400':
-          $ref: '#/components/responses/400'
-        '401':
-          $ref: '#/components/responses/401'
-        '403':
-          $ref: '#/components/responses/403'
-        '404':
-          $ref: '#/components/responses/404'
-        '500':
-          $ref: '#/components/responses/500'
-  /admin/v1/data/elasticsearch/organizations/{orgName}/clusters/{clusterName}/accounts/role-mappings/{mappingName}:
-    get:
-      tags:
-        - elasticsearch
-        - shared
-      summary: Get Elasticsearch security role mapping
-      operationId: getElasticsearchSecurityRoleMapping
-      parameters:
-        - name: orgName
-          in: path
-          required: true
-          schema:
-            type: string
-        - name: clusterName
-          in: path
-          required: true
-          schema:
-            type: string
-        - name: mappingName
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        '200':
-          description: Get Elasticsearch security role mapping successfully.
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/ESSecurityRoleMapping'
-        '400':
-          $ref: '#/components/responses/400'
-        '401':
-          $ref: '#/components/responses/401'
-        '403':
-          $ref: '#/components/responses/403'
-        '404':
-          $ref: '#/components/responses/404'
-        '500':
-          $ref: '#/components/responses/500'
-    put:
-      tags:
-        - elasticsearch
-        - shared
-      summary: Create or update Elasticsearch security role mapping
-      operationId: putElasticsearchSecurityRoleMapping
-      parameters:
-        - name: orgName
-          in: path
-          required: true
-          schema:
-            type: string
-        - name: clusterName
-          in: path
-          required: true
-          schema:
-            type: string
-        - name: mappingName
-          in: path
-          required: true
-          schema:
-            type: string
       requestBody:
         required: true
         content:
           application/json:
             schema:
-              $ref: '#/components/schemas/ESSecurityRoleMapping'
+              type: object
+              description: Revoke privileges from a role request.
+              required:
+                - privileges
+              properties:
+                privileges:
+                  type: array
+                  items:
+                    type: object
+                    description: A single privilege granted on a scope.
+                    properties:
+                      scope:
+                        type: string
+                        description: The ON-clause operand of the grant, e.g. "db.*" or "*.*".
+                      privilege:
+                        type: string
       responses:
         '204':
           content: {}
-          description: Create or update Elasticsearch security role mapping successfully.
+          description: Revoke ClickHouse role privileges successfully.
         '400':
           $ref: '#/components/responses/400'
         '401':
@@ -19666,49 +20454,13 @@ paths:
         '500':
           $ref: '#/components/responses/500'
       x-codegen-request-body-name: body
-    delete:
-      tags:
-        - elasticsearch
-        - shared
-      summary: Delete Elasticsearch security role mapping
-      operationId: deleteElasticsearchSecurityRoleMapping
-      parameters:
-        - name: orgName
-          in: path
-          required: true
-          schema:
-            type: string
-        - name: clusterName
-          in: path
-          required: true
-          schema:
-            type: string
-        - name: mappingName
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        '204':
-          content: {}
-          description: Delete Elasticsearch security role mapping successfully.
-        '400':
-          $ref: '#/components/responses/400'
-        '401':
-          $ref: '#/components/responses/401'
-        '403':
-          $ref: '#/components/responses/403'
-        '404':
-          $ref: '#/components/responses/404'
-        '500':
-          $ref: '#/components/responses/500'
-  /admin/v1/data/elasticsearch/organizations/{orgName}/clusters/{clusterName}/accounts/privileges/builtin:
+  /admin/v1/data/clickhouse/organizations/{orgName}/clusters/{clusterName}/accounts/privileges:
     get:
       tags:
-        - elasticsearch
+        - clickhouse
         - shared
-      summary: Get Elasticsearch builtin privileges
-      operationId: getElasticsearchBuiltinPrivileges
+      summary: List privileges supported by the ClickHouse server
+      operationId: listClickhousePrivileges
       parameters:
         - name: orgName
           in: path
@@ -19722,11 +20474,14 @@ paths:
             type: string
       responses:
         '200':
-          description: Get Elasticsearch builtin privileges successfully.
+          description: List ClickHouse privileges successfully.
           content:
             application/json:
               schema:
-                $ref: '#/components/schemas/ESBuiltinPrivileges'
+                type: array
+                description: All privileges supported by the ClickHouse server.
+                items:
+                  type: string
         '400':
           $ref: '#/components/responses/400'
         '401':
@@ -25629,6 +26384,88 @@ components:
         - Normal
         - DisasterRecovery
         - BlueGreenDeployment
+    tag:
+      description: tag info
+      properties:
+        id:
+          description: The id of the tag
+          format: int64
+          type: string
+        key:
+          description: the key of the tag
+          type: string
+        value:
+          description: The value corresponding to the key
+          type: string
+      required:
+        - id
+      type: object
+    endpointType:
+      description: Type of endpoint
+      type: string
+      enum:
+        - ClusterIP
+        - NodePort
+        - LoadBalancer
+        - PodIP
+        - HostNetwork
+        - PodFQDN
+    endpointNetworkType:
+      description: Network type of endpoint
+      type: string
+      enum:
+        - Internet
+        - Intranet
+    endpoint:
+      description: Endpoint is the information of cluster endpoints
+      properties:
+        title:
+          description: title of the endpoint
+          type: string
+        component:
+          description: Component type name
+          type: string
+        hosts:
+          description: Endpoint hosts
+          type: array
+          items:
+            type: string
+        port:
+          description: Endpoint port
+          type: integer
+          format: int32
+        type:
+          $ref: '#/components/schemas/endpointType'
+        networkType:
+          $ref: '#/components/schemas/endpointNetworkType'
+        serviceName:
+          description: Service name of endpoint
+          type: string
+        podService:
+          description: Pod service name of endpoint
+          type: boolean
+        portName:
+          description: Port name of endpoint
+          type: string
+        instances:
+          description: Endpoint backend instances
+          type: array
+          items:
+            type: string
+        mutable:
+          description: Whether the endpoint is mutable
+          type: boolean
+      required:
+        - title
+        - component
+        - hosts
+        - port
+        - type
+        - networkType
+        - serviceName
+        - portName
+        - mutable
+      type: object
     clusterListItem:
       description: KubeBlocks cluster information
       properties:
@@ -25735,6 +26572,20 @@ components:
         orgName:
           description: Org Name
           type: string
+        project:
+          description: Name of project, it is the alias of environment namespace
+          type: string
+        tags:
+          description: Tags bound to the cluster
+          items:
+            $ref: '#/components/schemas/tag'
+          type: array
+        endpoints:
+          description: Cached user-visible endpoints of the cluster; omitted unless includeEndpoints is true
+          items:
+            $ref: '#/components/schemas/endpoint'
+          type: array
+          x-omitempty: true
       required:
         - cloudProvider
         - createdAt
@@ -26716,72 +27567,6 @@ components:
         log:
           type: string
           description: log is the log of the specified container
-    endpointType:
-      description: Type of endpoint
-      type: string
-      enum:
-        - ClusterIP
-        - NodePort
-        - LoadBalancer
-        - PodIP
-        - HostNetwork
-        - PodFQDN
-    endpointNetworkType:
-      description: Network type of endpoint
-      type: string
-      enum:
-        - Internet
-        - Intranet
-    endpoint:
-      description: Endpoint is the information of cluster endpoints
-      properties:
-        title:
-          description: title of the endpoint
-          type: string
-        component:
-          description: Component type name
-          type: string
-        hosts:
-          description: Endpoint hosts
-          type: array
-          items:
-            type: string
-        port:
-          description: Endpoint port
-          type: integer
-          format: int32
-        type:
-          $ref: '#/components/schemas/endpointType'
-        networkType:
-          $ref: '#/components/schemas/endpointNetworkType'
-        serviceName:
-          description: Service name of endpoint
-          type: string
-        podService:
-          description: Pod service name of endpoint
-          type: boolean
-        portName:
-          description: Port name of endpoint
-          type: string
-        instances:
-          description: Endpoint backend instances
-          type: array
-          items:
-            type: string
-        mutable:
-          description: Whether the endpoint is mutable
-          type: boolean
-      required:
-        - title
-        - component
-        - hosts
-        - port
-        - type
-        - networkType
-        - serviceName
-        - portName
-        - mutable
-      type: object
     endpointList:
       required:
         - items
@@ -26868,22 +27653,6 @@ components:
         taskId:
           type: string
           description: Task ID if the operation is asynchronous (e.g. reconfigure)
-    tag:
-      description: tag info
-      properties:
-        id:
-          description: The id of the tag
-          format: int64
-          type: string
-        key:
-          description: the key of the tag
-          type: string
-        value:
-          description: The value corresponding to the key
-          type: string
-      required:
-        - id
-      type: object
     clusterTags:
       properties:
         clusterId:
@@ -27006,7 +27775,9 @@ components:
           type: array
           items:
             type: array
-            items: {}
+            items:
+              type: object
+              additionalProperties: true
             nullable: true
     clusterStorageUsageHistoryPoint:
       type: object
@@ -31719,6 +32490,12 @@ components:
           type: array
           items:
             type: string
+    systemComponentSchedulerPolicy:
+      type: string
+      enum:
+        - default
+        - koordinator
+      default: default
     schedulingConfig:
       type: object
       title: SchedulingConfig
@@ -31728,6 +32505,13 @@ components:
           $ref: '#/components/schemas/clusterSchedulingPolicy'
         tolerateDefaultTaints:
           $ref: '#/components/schemas/tolerateDefaultTaints'
+        systemComponentSchedulerPolicy:
+          $ref: '#/components/schemas/systemComponentSchedulerPolicy'
+          description: Scheduler policy used by internal system component clusters, including MinIO, VictoriaMetrics, and Victoria Logs. The persisted policy is resolved to the current scheduler name when a component is created.
+        systemComponentReservationResourceClass:
+          nullable: true
+          $ref: '#/components/schemas/koordinatorReservationResourceClass'
+          description: Optional Reservation resource class used by internal system component clusters when the Koordinator scheduler is selected. No Reservation label is added unless the user explicitly selects a resource class. The value is persisted on the environment.
     networkConfig:
       type: object
       title: NetworkConfig
@@ -32040,6 +32824,12 @@ components:
           $ref: '#/components/schemas/nodePool'
         storage:
           $ref: '#/components/schemas/storageConfig'
+        victoriaMetrics:
+          description: Optional vm-storage spec (replicas, disk, classCode) when adding an environment. vm-insert and vm-select keep installer defaults.
+          $ref: '#/components/schemas/staticCluster'
+        victoriaLogs:
+          description: Optional vlstorage spec (replicas, disk, classCode) when adding an environment. vlinsert and vlselect keep installer defaults.
+          $ref: '#/components/schemas/staticCluster'
         modules:
           type: array
           description: option modules of environment
@@ -32905,6 +33695,43 @@ components:
       required:
         - status
       type: object
+    loadBalancerAnnotations:
+      description: Provider-neutral annotations applied to load balancer Services by exposure type.
+      type: object
+      properties:
+        vpc:
+          description: Annotations used for load balancers exposed inside the VPC.
+          type: object
+          additionalProperties:
+            type: string
+        internet:
+          description: Annotations used for load balancers exposed to the Internet.
+          type: object
+          additionalProperties:
+            type: string
+      required:
+        - vpc
+        - internet
+    loadBalancerConfig:
+      description: Effective load balancer annotations for an environment.
+      type: object
+      properties:
+        provider:
+          description: Current environment provider returned by the server.
+          type: string
+        annotations:
+          $ref: '#/components/schemas/loadBalancerAnnotations'
+      required:
+        - provider
+        - annotations
+    loadBalancerConfigUpdate:
+      description: Complete editable load balancer annotations for an environment.
+      type: object
+      properties:
+        annotations:
+          $ref: '#/components/schemas/loadBalancerAnnotations'
+      required:
+        - annotations
     vipPool:
       description: VIP Pool
       properties:
@@ -36603,6 +37430,11 @@ components:
         objectExcludeTips:
           $ref: '#/components/schemas/internationalDesc'
           nullable: true
+    replicationCheckOption:
+      type: object
+      properties:
+        enabled:
+          type: boolean
     parameterValueType:
       enum:
         - string
@@ -36659,6 +37491,8 @@ components:
           type: array
           items:
             type: string
+        dataCheckOption:
+          $ref: '#/components/schemas/replicationCheckOption'
         parameterTemplate:
           description: the parameter template of the engine mapping, has a higher priority than the parameterTemplate in standardDefinition
           $ref: '#/components/schemas/dataChannelParameterOption'
@@ -38798,7 +39632,9 @@ components:
           description: The value options of the parameter
           type: array
           x-omitempty: false
-          items: {}
+          items:
+            type: object
+            additionalProperties: true
         maximum:
           description: The maximum value of the parameter
           type: string
@@ -40679,6 +41515,35 @@ components:
         type: array
         items:
           type: string
+    CkAccountType:
+      type: string
+      description: The account role type.
+      enum:
+        - SUPERUSER
+        - BASICUSER
+        - ROOT
+    CkAccount:
+      type: object
+      description: A ClickHouse account.
+      properties:
+        name:
+          type: string
+          description: The account (user) name.
+        hostIp:
+          type: array
+          description: Host IPs the account is allowed to log in from.
+          items:
+            type: string
+        hostNames:
+          type: array
+          description: Host names the account is allowed to log in from.
+          items:
+            type: string
+        roles:
+          type: string
+          description: Roles granted to the account, separated by commas.
+        type:
+          $ref: '#/components/schemas/CkAccountType'
     RbmqUser:
       type: object
       properties: