kustodian 1.0.0

package/dist/schema/cluster.d.ts

@@ -0,0 +1,2890 @@
+import { z } from 'zod';
+/**
+ * Git repository configuration for a cluster.
+ *
+ * This configuration is used for SOURCE METADATA ONLY - to track which git repository
+ * and commit the deployment artifacts came from. Flux does NOT watch this git repository.
+ *
+ * When you run `kustodian apply`, it:
+ * 1. Reads this git config to determine the source repository
+ * 2. Gets the current git commit SHA
+ * 3. Pushes an OCI artifact with this metadata attached
+ *
+ * For actual deployment, Flux watches the OCI registry (spec.oci), not the git branch.
+ * Changes must be pushed via `kustodian apply` to trigger deployments.
+ */
+export declare const git_config_schema: z.ZodObject<{
+    owner: z.ZodString;
+    repository: z.ZodString;
+    branch: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    path: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    repository: string;
+    owner: string;
+    branch: string;
+    path?: string | undefined;
+}, {
+    repository: string;
+    owner: string;
+    path?: string | undefined;
+    branch?: string | undefined;
+}>;
+export type GitConfigType = z.infer<typeof git_config_schema>;
+/**
+ * OCI repository configuration for a cluster.
+ *
+ * This is the DEPLOYMENT MECHANISM - Flux watches this OCI registry for artifacts.
+ *
+ * When you run `kustodian apply`, it:
+ * 1. Generates Flux manifests locally
+ * 2. Pushes them as an OCI artifact to this registry (with git metadata attached)
+ * 3. Creates/updates Flux OCIRepository and Kustomization resources in the cluster
+ * 4. Flux polls this OCI registry and deploys when new artifacts appear
+ *
+ * Changes pushed to the git branch do NOT automatically trigger deployments.
+ * You must run `kustodian apply` to push artifacts to OCI and trigger reconciliation.
+ */
+export declare const oci_config_schema: z.ZodObject<{
+    registry: z.ZodString;
+    repository: z.ZodString;
+    tag_strategy: z.ZodDefault<z.ZodOptional<z.ZodEnum<["cluster", "git-sha", "version", "manual"]>>>;
+    tag: z.ZodOptional<z.ZodString>;
+    secret_ref: z.ZodOptional<z.ZodString>;
+    provider: z.ZodDefault<z.ZodOptional<z.ZodEnum<["aws", "azure", "gcp", "generic"]>>>;
+    insecure: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+}, "strip", z.ZodTypeAny, {
+    repository: string;
+    registry: string;
+    provider: "generic" | "aws" | "azure" | "gcp";
+    tag_strategy: "version" | "cluster" | "git-sha" | "manual";
+    insecure: boolean;
+    tag?: string | undefined;
+    secret_ref?: string | undefined;
+}, {
+    repository: string;
+    registry: string;
+    provider?: "generic" | "aws" | "azure" | "gcp" | undefined;
+    tag_strategy?: "version" | "cluster" | "git-sha" | "manual" | undefined;
+    tag?: string | undefined;
+    secret_ref?: string | undefined;
+    insecure?: boolean | undefined;
+}>;
+export type OciConfigType = z.infer<typeof oci_config_schema>;
+/**
+ * Kustomization override configuration within a cluster.
+ *
+ * Allows overriding kustomization preservation from template defaults.
+ */
+export declare const kustomization_override_schema: z.ZodObject<{
+    preservation: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodEnum<["none", "stateful", "custom"]>;
+        keep_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        mode: "custom" | "none" | "stateful";
+        keep_resources?: string[] | undefined;
+    }, {
+        mode: "custom" | "none" | "stateful";
+        keep_resources?: string[] | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    preservation?: {
+        mode: "custom" | "none" | "stateful";
+        keep_resources?: string[] | undefined;
+    } | undefined;
+}, {
+    preservation?: {
+        mode: "custom" | "none" | "stateful";
+        keep_resources?: string[] | undefined;
+    } | undefined;
+}>;
+export type KustomizationOverrideType = z.infer<typeof kustomization_override_schema>;
+/**
+ * Template configuration within a cluster.
+ * Templates listed here will be deployed. Templates not listed will be skipped.
+ */
+export declare const template_config_schema: z.ZodObject<{
+    name: z.ZodString;
+    values: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    kustomizations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        preservation: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodEnum<["none", "stateful", "custom"]>;
+            keep_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "strip", z.ZodTypeAny, {
+            mode: "custom" | "none" | "stateful";
+            keep_resources?: string[] | undefined;
+        }, {
+            mode: "custom" | "none" | "stateful";
+            keep_resources?: string[] | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        preservation?: {
+            mode: "custom" | "none" | "stateful";
+            keep_resources?: string[] | undefined;
+        } | undefined;
+    }, {
+        preservation?: {
+            mode: "custom" | "none" | "stateful";
+            keep_resources?: string[] | undefined;
+        } | undefined;
+    }>>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    values?: Record<string, string> | undefined;
+    kustomizations?: Record<string, {
+        preservation?: {
+            mode: "custom" | "none" | "stateful";
+            keep_resources?: string[] | undefined;
+        } | undefined;
+    }> | undefined;
+}, {
+    name: string;
+    values?: Record<string, string> | undefined;
+    kustomizations?: Record<string, {
+        preservation?: {
+            mode: "custom" | "none" | "stateful";
+            keep_resources?: string[] | undefined;
+        } | undefined;
+    }> | undefined;
+}>;
+export type TemplateConfigType = z.infer<typeof template_config_schema>;
+/**
+ * Plugin configuration within a cluster.
+ */
+export declare const plugin_config_schema: z.ZodObject<{
+    name: z.ZodString;
+    config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    config?: Record<string, unknown> | undefined;
+}, {
+    name: string;
+    config?: Record<string, unknown> | undefined;
+}>;
+export type PluginConfigType = z.infer<typeof plugin_config_schema>;
+/**
+ * Node defaults configuration within a cluster.
+ */
+export declare const node_defaults_schema: z.ZodObject<{
+    label_prefix: z.ZodOptional<z.ZodString>;
+    ssh: z.ZodOptional<z.ZodObject<{
+        user: z.ZodOptional<z.ZodString>;
+        key_path: z.ZodOptional<z.ZodString>;
+        known_hosts_path: z.ZodOptional<z.ZodString>;
+        port: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        user?: string | undefined;
+        key_path?: string | undefined;
+        known_hosts_path?: string | undefined;
+        port?: number | undefined;
+    }, {
+        user?: string | undefined;
+        key_path?: string | undefined;
+        known_hosts_path?: string | undefined;
+        port?: number | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    ssh?: {
+        user?: string | undefined;
+        key_path?: string | undefined;
+        known_hosts_path?: string | undefined;
+        port?: number | undefined;
+    } | undefined;
+    label_prefix?: string | undefined;
+}, {
+    ssh?: {
+        user?: string | undefined;
+        key_path?: string | undefined;
+        known_hosts_path?: string | undefined;
+        port?: number | undefined;
+    } | undefined;
+    label_prefix?: string | undefined;
+}>;
+export type NodeDefaultsType = z.infer<typeof node_defaults_schema>;
+/**
+ * GitHub repository configuration for GitOps metadata.
+ */
+export declare const github_config_schema: z.ZodObject<{
+    organization: z.ZodString;
+    repository: z.ZodString;
+    branch: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    repository: string;
+    branch: string;
+    organization: string;
+}, {
+    repository: string;
+    organization: string;
+    branch?: string | undefined;
+}>;
+export type GithubConfigType = z.infer<typeof github_config_schema>;
+/**
+ * Bootstrap credential configuration for secret providers.
+ * Allows obtaining credentials from another secret provider.
+ */
+export declare const bootstrap_credential_schema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    type: z.ZodLiteral<"1password">;
+    ref: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "1password";
+    ref: string;
+}, {
+    type: "1password";
+    ref: string;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"doppler">;
+    project: z.ZodString;
+    config: z.ZodString;
+    secret: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    type: "doppler";
+    secret: string;
+    project: string;
+    config: string;
+}, {
+    type: "doppler";
+    secret: string;
+    project: string;
+    config: string;
+}>]>;
+export type BootstrapCredentialType = z.infer<typeof bootstrap_credential_schema>;
+/**
+ * Cluster secret configuration for bootstrapping secrets into the cluster.
+ * Used by external-secrets operator to access secret providers.
+ */
+export declare const cluster_secret_config_schema: z.ZodObject<{
+    enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    namespace: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    name: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    key: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    namespace: string;
+    key: string;
+    enabled: boolean;
+    annotations?: Record<string, string> | undefined;
+}, {
+    name?: string | undefined;
+    namespace?: string | undefined;
+    key?: string | undefined;
+    annotations?: Record<string, string> | undefined;
+    enabled?: boolean | undefined;
+}>;
+export type ClusterSecretConfigType = z.infer<typeof cluster_secret_config_schema>;
+/**
+ * Doppler secret provider configuration at cluster level.
+ */
+export declare const doppler_config_schema: z.ZodObject<{
+    project: z.ZodOptional<z.ZodString>;
+    config: z.ZodOptional<z.ZodString>;
+    service_token: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+        type: z.ZodLiteral<"1password">;
+        ref: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        type: "1password";
+        ref: string;
+    }, {
+        type: "1password";
+        ref: string;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"doppler">;
+        project: z.ZodString;
+        config: z.ZodString;
+        secret: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        type: "doppler";
+        secret: string;
+        project: string;
+        config: string;
+    }, {
+        type: "doppler";
+        secret: string;
+        project: string;
+        config: string;
+    }>]>>;
+    cluster_secret: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        namespace: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        name: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        key: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        namespace: string;
+        key: string;
+        enabled: boolean;
+        annotations?: Record<string, string> | undefined;
+    }, {
+        name?: string | undefined;
+        namespace?: string | undefined;
+        key?: string | undefined;
+        annotations?: Record<string, string> | undefined;
+        enabled?: boolean | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    project?: string | undefined;
+    config?: string | undefined;
+    service_token?: {
+        type: "1password";
+        ref: string;
+    } | {
+        type: "doppler";
+        secret: string;
+        project: string;
+        config: string;
+    } | undefined;
+    cluster_secret?: {
+        name: string;
+        namespace: string;
+        key: string;
+        enabled: boolean;
+        annotations?: Record<string, string> | undefined;
+    } | undefined;
+}, {
+    project?: string | undefined;
+    config?: string | undefined;
+    service_token?: {
+        type: "1password";
+        ref: string;
+    } | {
+        type: "doppler";
+        secret: string;
+        project: string;
+        config: string;
+    } | undefined;
+    cluster_secret?: {
+        name?: string | undefined;
+        namespace?: string | undefined;
+        key?: string | undefined;
+        annotations?: Record<string, string> | undefined;
+        enabled?: boolean | undefined;
+    } | undefined;
+}>;
+export type DopplerConfigType = z.infer<typeof doppler_config_schema>;
+/**
+ * 1Password secret provider configuration at cluster level.
+ */
+export declare const onepassword_config_schema: z.ZodObject<{
+    vault: z.ZodString;
+    service_account_token: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+        type: z.ZodLiteral<"1password">;
+        ref: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        type: "1password";
+        ref: string;
+    }, {
+        type: "1password";
+        ref: string;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"doppler">;
+        project: z.ZodString;
+        config: z.ZodString;
+        secret: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        type: "doppler";
+        secret: string;
+        project: string;
+        config: string;
+    }, {
+        type: "doppler";
+        secret: string;
+        project: string;
+        config: string;
+    }>]>>;
+}, "strip", z.ZodTypeAny, {
+    vault: string;
+    service_account_token?: {
+        type: "1password";
+        ref: string;
+    } | {
+        type: "doppler";
+        secret: string;
+        project: string;
+        config: string;
+    } | undefined;
+}, {
+    vault: string;
+    service_account_token?: {
+        type: "1password";
+        ref: string;
+    } | {
+        type: "doppler";
+        secret: string;
+        project: string;
+        config: string;
+    } | undefined;
+}>;
+export type OnePasswordConfigType = z.infer<typeof onepassword_config_schema>;
+/**
+ * Secret providers configuration at cluster level.
+ */
+export declare const secrets_config_schema: z.ZodObject<{
+    doppler: z.ZodOptional<z.ZodObject<{
+        project: z.ZodOptional<z.ZodString>;
+        config: z.ZodOptional<z.ZodString>;
+        service_token: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+            type: z.ZodLiteral<"1password">;
+            ref: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            type: "1password";
+            ref: string;
+        }, {
+            type: "1password";
+            ref: string;
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"doppler">;
+            project: z.ZodString;
+            config: z.ZodString;
+            secret: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            type: "doppler";
+            secret: string;
+            project: string;
+            config: string;
+        }, {
+            type: "doppler";
+            secret: string;
+            project: string;
+            config: string;
+        }>]>>;
+        cluster_secret: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+            namespace: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            name: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            key: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            namespace: string;
+            key: string;
+            enabled: boolean;
+            annotations?: Record<string, string> | undefined;
+        }, {
+            name?: string | undefined;
+            namespace?: string | undefined;
+            key?: string | undefined;
+            annotations?: Record<string, string> | undefined;
+            enabled?: boolean | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        project?: string | undefined;
+        config?: string | undefined;
+        service_token?: {
+            type: "1password";
+            ref: string;
+        } | {
+            type: "doppler";
+            secret: string;
+            project: string;
+            config: string;
+        } | undefined;
+        cluster_secret?: {
+            name: string;
+            namespace: string;
+            key: string;
+            enabled: boolean;
+            annotations?: Record<string, string> | undefined;
+        } | undefined;
+    }, {
+        project?: string | undefined;
+        config?: string | undefined;
+        service_token?: {
+            type: "1password";
+            ref: string;
+        } | {
+            type: "doppler";
+            secret: string;
+            project: string;
+            config: string;
+        } | undefined;
+        cluster_secret?: {
+            name?: string | undefined;
+            namespace?: string | undefined;
+            key?: string | undefined;
+            annotations?: Record<string, string> | undefined;
+            enabled?: boolean | undefined;
+        } | undefined;
+    }>>;
+    onepassword: z.ZodOptional<z.ZodObject<{
+        vault: z.ZodString;
+        service_account_token: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+            type: z.ZodLiteral<"1password">;
+            ref: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            type: "1password";
+            ref: string;
+        }, {
+            type: "1password";
+            ref: string;
+        }>, z.ZodObject<{
+            type: z.ZodLiteral<"doppler">;
+            project: z.ZodString;
+            config: z.ZodString;
+            secret: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            type: "doppler";
+            secret: string;
+            project: string;
+            config: string;
+        }, {
+            type: "doppler";
+            secret: string;
+            project: string;
+            config: string;
+        }>]>>;
+    }, "strip", z.ZodTypeAny, {
+        vault: string;
+        service_account_token?: {
+            type: "1password";
+            ref: string;
+        } | {
+            type: "doppler";
+            secret: string;
+            project: string;
+            config: string;
+        } | undefined;
+    }, {
+        vault: string;
+        service_account_token?: {
+            type: "1password";
+            ref: string;
+        } | {
+            type: "doppler";
+            secret: string;
+            project: string;
+            config: string;
+        } | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    doppler?: {
+        project?: string | undefined;
+        config?: string | undefined;
+        service_token?: {
+            type: "1password";
+            ref: string;
+        } | {
+            type: "doppler";
+            secret: string;
+            project: string;
+            config: string;
+        } | undefined;
+        cluster_secret?: {
+            name: string;
+            namespace: string;
+            key: string;
+            enabled: boolean;
+            annotations?: Record<string, string> | undefined;
+        } | undefined;
+    } | undefined;
+    onepassword?: {
+        vault: string;
+        service_account_token?: {
+            type: "1password";
+            ref: string;
+        } | {
+            type: "doppler";
+            secret: string;
+            project: string;
+            config: string;
+        } | undefined;
+    } | undefined;
+}, {
+    doppler?: {
+        project?: string | undefined;
+        config?: string | undefined;
+        service_token?: {
+            type: "1password";
+            ref: string;
+        } | {
+            type: "doppler";
+            secret: string;
+            project: string;
+            config: string;
+        } | undefined;
+        cluster_secret?: {
+            name?: string | undefined;
+            namespace?: string | undefined;
+            key?: string | undefined;
+            annotations?: Record<string, string> | undefined;
+            enabled?: boolean | undefined;
+        } | undefined;
+    } | undefined;
+    onepassword?: {
+        vault: string;
+        service_account_token?: {
+            type: "1password";
+            ref: string;
+        } | {
+            type: "doppler";
+            secret: string;
+            project: string;
+            config: string;
+        } | undefined;
+    } | undefined;
+}>;
+export type SecretsConfigType = z.infer<typeof secrets_config_schema>;
+/**
+ * Flux controller settings that can be applied to individual controllers.
+ */
+export declare const flux_controller_settings_schema: z.ZodObject<{
+    concurrent: z.ZodOptional<z.ZodNumber>;
+    requeue_dependency: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    concurrent?: number | undefined;
+    requeue_dependency?: string | undefined;
+}, {
+    concurrent?: number | undefined;
+    requeue_dependency?: string | undefined;
+}>;
+export type FluxControllerSettingsType = z.infer<typeof flux_controller_settings_schema>;
+/**
+ * Flux controllers configuration.
+ * Settings can be applied globally or per-controller.
+ */
+export declare const flux_controllers_config_schema: z.ZodObject<{
+    concurrent: z.ZodOptional<z.ZodNumber>;
+    requeue_dependency: z.ZodOptional<z.ZodString>;
+    kustomize_controller: z.ZodOptional<z.ZodObject<{
+        concurrent: z.ZodOptional<z.ZodNumber>;
+        requeue_dependency: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        concurrent?: number | undefined;
+        requeue_dependency?: string | undefined;
+    }, {
+        concurrent?: number | undefined;
+        requeue_dependency?: string | undefined;
+    }>>;
+    helm_controller: z.ZodOptional<z.ZodObject<{
+        concurrent: z.ZodOptional<z.ZodNumber>;
+        requeue_dependency: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        concurrent?: number | undefined;
+        requeue_dependency?: string | undefined;
+    }, {
+        concurrent?: number | undefined;
+        requeue_dependency?: string | undefined;
+    }>>;
+    source_controller: z.ZodOptional<z.ZodObject<{
+        concurrent: z.ZodOptional<z.ZodNumber>;
+        requeue_dependency: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        concurrent?: number | undefined;
+        requeue_dependency?: string | undefined;
+    }, {
+        concurrent?: number | undefined;
+        requeue_dependency?: string | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    concurrent?: number | undefined;
+    requeue_dependency?: string | undefined;
+    kustomize_controller?: {
+        concurrent?: number | undefined;
+        requeue_dependency?: string | undefined;
+    } | undefined;
+    helm_controller?: {
+        concurrent?: number | undefined;
+        requeue_dependency?: string | undefined;
+    } | undefined;
+    source_controller?: {
+        concurrent?: number | undefined;
+        requeue_dependency?: string | undefined;
+    } | undefined;
+}, {
+    concurrent?: number | undefined;
+    requeue_dependency?: string | undefined;
+    kustomize_controller?: {
+        concurrent?: number | undefined;
+        requeue_dependency?: string | undefined;
+    } | undefined;
+    helm_controller?: {
+        concurrent?: number | undefined;
+        requeue_dependency?: string | undefined;
+    } | undefined;
+    source_controller?: {
+        concurrent?: number | undefined;
+        requeue_dependency?: string | undefined;
+    } | undefined;
+}>;
+export type FluxControllersConfigType = z.infer<typeof flux_controllers_config_schema>;
+/**
+ * Flux system configuration at cluster level.
+ */
+export declare const flux_config_schema: z.ZodObject<{
+    controllers: z.ZodOptional<z.ZodObject<{
+        concurrent: z.ZodOptional<z.ZodNumber>;
+        requeue_dependency: z.ZodOptional<z.ZodString>;
+        kustomize_controller: z.ZodOptional<z.ZodObject<{
+            concurrent: z.ZodOptional<z.ZodNumber>;
+            requeue_dependency: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        }, {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        }>>;
+        helm_controller: z.ZodOptional<z.ZodObject<{
+            concurrent: z.ZodOptional<z.ZodNumber>;
+            requeue_dependency: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        }, {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        }>>;
+        source_controller: z.ZodOptional<z.ZodObject<{
+            concurrent: z.ZodOptional<z.ZodNumber>;
+            requeue_dependency: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        }, {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        concurrent?: number | undefined;
+        requeue_dependency?: string | undefined;
+        kustomize_controller?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        } | undefined;
+        helm_controller?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        } | undefined;
+        source_controller?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        } | undefined;
+    }, {
+        concurrent?: number | undefined;
+        requeue_dependency?: string | undefined;
+        kustomize_controller?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        } | undefined;
+        helm_controller?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        } | undefined;
+        source_controller?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        } | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    controllers?: {
+        concurrent?: number | undefined;
+        requeue_dependency?: string | undefined;
+        kustomize_controller?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        } | undefined;
+        helm_controller?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        } | undefined;
+        source_controller?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        } | undefined;
+    } | undefined;
+}, {
+    controllers?: {
+        concurrent?: number | undefined;
+        requeue_dependency?: string | undefined;
+        kustomize_controller?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        } | undefined;
+        helm_controller?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        } | undefined;
+        source_controller?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+        } | undefined;
+    } | undefined;
+}>;
+export type FluxConfigType = z.infer<typeof flux_config_schema>;
+/**
+ * Cluster-level defaults that override project defaults.
+ * All values are optional - fallback to project defaults, then schema defaults.
+ */
+export declare const defaults_config_schema: z.ZodObject<{
+    /** Flux system namespace where Flux controllers run */
+    flux_namespace: z.ZodOptional<z.ZodString>;
+    /** Flux OCIRepository resource name */
+    oci_repository_name: z.ZodOptional<z.ZodString>;
+    /** Secret name for OCI registry authentication */
+    oci_registry_secret_name: z.ZodOptional<z.ZodString>;
+    /** Reconciliation interval for Flux resources */
+    flux_reconciliation_interval: z.ZodOptional<z.ZodString>;
+    /** Timeout for Flux reconciliation */
+    flux_reconciliation_timeout: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    flux_namespace?: string | undefined;
+    oci_repository_name?: string | undefined;
+    oci_registry_secret_name?: string | undefined;
+    flux_reconciliation_interval?: string | undefined;
+    flux_reconciliation_timeout?: string | undefined;
+}, {
+    flux_namespace?: string | undefined;
+    oci_repository_name?: string | undefined;
+    oci_registry_secret_name?: string | undefined;
+    flux_reconciliation_interval?: string | undefined;
+    flux_reconciliation_timeout?: string | undefined;
+}>;
+export type DefaultsConfigType = z.infer<typeof defaults_config_schema>;
+/**
+ * Cluster specification.
+ *
+ * IMPORTANT: Understanding git vs oci configuration:
+ * - `git`: Source metadata only (which repo/commit artifacts came from)
+ * - `oci`: Deployment mechanism (where Flux watches for artifacts)
+ *
+ * Deployment flow:
+ * 1. You commit changes to git and merge to main
+ * 2. Run `kustodian apply` to push artifacts to OCI with git metadata
+ * 3. Flux watches the OCI registry and deploys the artifacts
+ *
+ * The git branch is NOT watched by Flux - only the OCI registry is.
+ */
+export declare const cluster_spec_schema: z.ZodEffects<z.ZodObject<{
+    code: z.ZodOptional<z.ZodString>;
+    git: z.ZodOptional<z.ZodObject<{
+        owner: z.ZodString;
+        repository: z.ZodString;
+        branch: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        path: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        repository: string;
+        owner: string;
+        branch: string;
+        path?: string | undefined;
+    }, {
+        repository: string;
+        owner: string;
+        path?: string | undefined;
+        branch?: string | undefined;
+    }>>;
+    oci: z.ZodOptional<z.ZodObject<{
+        registry: z.ZodString;
+        repository: z.ZodString;
+        tag_strategy: z.ZodDefault<z.ZodOptional<z.ZodEnum<["cluster", "git-sha", "version", "manual"]>>>;
+        tag: z.ZodOptional<z.ZodString>;
+        secret_ref: z.ZodOptional<z.ZodString>;
+        provider: z.ZodDefault<z.ZodOptional<z.ZodEnum<["aws", "azure", "gcp", "generic"]>>>;
+        insecure: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    }, "strip", z.ZodTypeAny, {
+        repository: string;
+        registry: string;
+        provider: "generic" | "aws" | "azure" | "gcp";
+        tag_strategy: "version" | "cluster" | "git-sha" | "manual";
+        insecure: boolean;
+        tag?: string | undefined;
+        secret_ref?: string | undefined;
+    }, {
+        repository: string;
+        registry: string;
+        provider?: "generic" | "aws" | "azure" | "gcp" | undefined;
+        tag_strategy?: "version" | "cluster" | "git-sha" | "manual" | undefined;
+        tag?: string | undefined;
+        secret_ref?: string | undefined;
+        insecure?: boolean | undefined;
+    }>>;
+    github: z.ZodOptional<z.ZodObject<{
+        organization: z.ZodString;
+        repository: z.ZodString;
+        branch: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+    }, "strip", z.ZodTypeAny, {
+        repository: string;
+        branch: string;
+        organization: string;
+    }, {
+        repository: string;
+        organization: string;
+        branch?: string | undefined;
+    }>>;
+    flux: z.ZodOptional<z.ZodObject<{
+        controllers: z.ZodOptional<z.ZodObject<{
+            concurrent: z.ZodOptional<z.ZodNumber>;
+            requeue_dependency: z.ZodOptional<z.ZodString>;
+            kustomize_controller: z.ZodOptional<z.ZodObject<{
+                concurrent: z.ZodOptional<z.ZodNumber>;
+                requeue_dependency: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            }, {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            }>>;
+            helm_controller: z.ZodOptional<z.ZodObject<{
+                concurrent: z.ZodOptional<z.ZodNumber>;
+                requeue_dependency: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            }, {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            }>>;
+            source_controller: z.ZodOptional<z.ZodObject<{
+                concurrent: z.ZodOptional<z.ZodNumber>;
+                requeue_dependency: z.ZodOptional<z.ZodString>;
+            }, "strip", z.ZodTypeAny, {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            }, {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+            kustomize_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+            helm_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+            source_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+        }, {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+            kustomize_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+            helm_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+            source_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        controllers?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+            kustomize_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+            helm_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+            source_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+        } | undefined;
+    }, {
+        controllers?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+            kustomize_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+            helm_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+            source_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+        } | undefined;
+    }>>;
+    defaults: z.ZodOptional<z.ZodObject<{
+        /** Flux system namespace where Flux controllers run */
+        flux_namespace: z.ZodOptional<z.ZodString>;
+        /** Flux OCIRepository resource name */
+        oci_repository_name: z.ZodOptional<z.ZodString>;
+        /** Secret name for OCI registry authentication */
+        oci_registry_secret_name: z.ZodOptional<z.ZodString>;
+        /** Reconciliation interval for Flux resources */
+        flux_reconciliation_interval: z.ZodOptional<z.ZodString>;
+        /** Timeout for Flux reconciliation */
+        flux_reconciliation_timeout: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        flux_namespace?: string | undefined;
+        oci_repository_name?: string | undefined;
+        oci_registry_secret_name?: string | undefined;
+        flux_reconciliation_interval?: string | undefined;
+        flux_reconciliation_timeout?: string | undefined;
+    }, {
+        flux_namespace?: string | undefined;
+        oci_repository_name?: string | undefined;
+        oci_registry_secret_name?: string | undefined;
+        flux_reconciliation_interval?: string | undefined;
+        flux_reconciliation_timeout?: string | undefined;
+    }>>;
+    templates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        values: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        kustomizations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            preservation: z.ZodOptional<z.ZodObject<{
+                mode: z.ZodEnum<["none", "stateful", "custom"]>;
+                keep_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            }, "strip", z.ZodTypeAny, {
+                mode: "custom" | "none" | "stateful";
+                keep_resources?: string[] | undefined;
+            }, {
+                mode: "custom" | "none" | "stateful";
+                keep_resources?: string[] | undefined;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            preservation?: {
+                mode: "custom" | "none" | "stateful";
+                keep_resources?: string[] | undefined;
+            } | undefined;
+        }, {
+            preservation?: {
+                mode: "custom" | "none" | "stateful";
+                keep_resources?: string[] | undefined;
+            } | undefined;
+        }>>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        values?: Record<string, string> | undefined;
+        kustomizations?: Record<string, {
+            preservation?: {
+                mode: "custom" | "none" | "stateful";
+                keep_resources?: string[] | undefined;
+            } | undefined;
+        }> | undefined;
+    }, {
+        name: string;
+        values?: Record<string, string> | undefined;
+        kustomizations?: Record<string, {
+            preservation?: {
+                mode: "custom" | "none" | "stateful";
+                keep_resources?: string[] | undefined;
+            } | undefined;
+        }> | undefined;
+    }>, "many">>;
+    plugins: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        config?: Record<string, unknown> | undefined;
+    }, {
+        name: string;
+        config?: Record<string, unknown> | undefined;
+    }>, "many">>;
+    node_defaults: z.ZodOptional<z.ZodObject<{
+        label_prefix: z.ZodOptional<z.ZodString>;
+        ssh: z.ZodOptional<z.ZodObject<{
+            user: z.ZodOptional<z.ZodString>;
+            key_path: z.ZodOptional<z.ZodString>;
+            known_hosts_path: z.ZodOptional<z.ZodString>;
+            port: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            user?: string | undefined;
+            key_path?: string | undefined;
+            known_hosts_path?: string | undefined;
+            port?: number | undefined;
+        }, {
+            user?: string | undefined;
+            key_path?: string | undefined;
+            known_hosts_path?: string | undefined;
+            port?: number | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        ssh?: {
+            user?: string | undefined;
+            key_path?: string | undefined;
+            known_hosts_path?: string | undefined;
+            port?: number | undefined;
+        } | undefined;
+        label_prefix?: string | undefined;
+    }, {
+        ssh?: {
+            user?: string | undefined;
+            key_path?: string | undefined;
+            known_hosts_path?: string | undefined;
+            port?: number | undefined;
+        } | undefined;
+        label_prefix?: string | undefined;
+    }>>;
+    nodes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    secrets: z.ZodOptional<z.ZodObject<{
+        doppler: z.ZodOptional<z.ZodObject<{
+            project: z.ZodOptional<z.ZodString>;
+            config: z.ZodOptional<z.ZodString>;
+            service_token: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+                type: z.ZodLiteral<"1password">;
+                ref: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                type: "1password";
+                ref: string;
+            }, {
+                type: "1password";
+                ref: string;
+            }>, z.ZodObject<{
+                type: z.ZodLiteral<"doppler">;
+                project: z.ZodString;
+                config: z.ZodString;
+                secret: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            }, {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            }>]>>;
+            cluster_secret: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                namespace: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                name: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                key: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            }, "strip", z.ZodTypeAny, {
+                name: string;
+                namespace: string;
+                key: string;
+                enabled: boolean;
+                annotations?: Record<string, string> | undefined;
+            }, {
+                name?: string | undefined;
+                namespace?: string | undefined;
+                key?: string | undefined;
+                annotations?: Record<string, string> | undefined;
+                enabled?: boolean | undefined;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            project?: string | undefined;
+            config?: string | undefined;
+            service_token?: {
+                type: "1password";
+                ref: string;
+            } | {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            } | undefined;
+            cluster_secret?: {
+                name: string;
+                namespace: string;
+                key: string;
+                enabled: boolean;
+                annotations?: Record<string, string> | undefined;
+            } | undefined;
+        }, {
+            project?: string | undefined;
+            config?: string | undefined;
+            service_token?: {
+                type: "1password";
+                ref: string;
+            } | {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            } | undefined;
+            cluster_secret?: {
+                name?: string | undefined;
+                namespace?: string | undefined;
+                key?: string | undefined;
+                annotations?: Record<string, string> | undefined;
+                enabled?: boolean | undefined;
+            } | undefined;
+        }>>;
+        onepassword: z.ZodOptional<z.ZodObject<{
+            vault: z.ZodString;
+            service_account_token: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+                type: z.ZodLiteral<"1password">;
+                ref: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                type: "1password";
+                ref: string;
+            }, {
+                type: "1password";
+                ref: string;
+            }>, z.ZodObject<{
+                type: z.ZodLiteral<"doppler">;
+                project: z.ZodString;
+                config: z.ZodString;
+                secret: z.ZodString;
+            }, "strip", z.ZodTypeAny, {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            }, {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            }>]>>;
+        }, "strip", z.ZodTypeAny, {
+            vault: string;
+            service_account_token?: {
+                type: "1password";
+                ref: string;
+            } | {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            } | undefined;
+        }, {
+            vault: string;
+            service_account_token?: {
+                type: "1password";
+                ref: string;
+            } | {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            } | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        doppler?: {
+            project?: string | undefined;
+            config?: string | undefined;
+            service_token?: {
+                type: "1password";
+                ref: string;
+            } | {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            } | undefined;
+            cluster_secret?: {
+                name: string;
+                namespace: string;
+                key: string;
+                enabled: boolean;
+                annotations?: Record<string, string> | undefined;
+            } | undefined;
+        } | undefined;
+        onepassword?: {
+            vault: string;
+            service_account_token?: {
+                type: "1password";
+                ref: string;
+            } | {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            } | undefined;
+        } | undefined;
+    }, {
+        doppler?: {
+            project?: string | undefined;
+            config?: string | undefined;
+            service_token?: {
+                type: "1password";
+                ref: string;
+            } | {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            } | undefined;
+            cluster_secret?: {
+                name?: string | undefined;
+                namespace?: string | undefined;
+                key?: string | undefined;
+                annotations?: Record<string, string> | undefined;
+                enabled?: boolean | undefined;
+            } | undefined;
+        } | undefined;
+        onepassword?: {
+            vault: string;
+            service_account_token?: {
+                type: "1password";
+                ref: string;
+            } | {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            } | undefined;
+        } | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    code?: string | undefined;
+    oci?: {
+        repository: string;
+        registry: string;
+        provider: "generic" | "aws" | "azure" | "gcp";
+        tag_strategy: "version" | "cluster" | "git-sha" | "manual";
+        insecure: boolean;
+        tag?: string | undefined;
+        secret_ref?: string | undefined;
+    } | undefined;
+    git?: {
+        repository: string;
+        owner: string;
+        branch: string;
+        path?: string | undefined;
+    } | undefined;
+    github?: {
+        repository: string;
+        branch: string;
+        organization: string;
+    } | undefined;
+    flux?: {
+        controllers?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+            kustomize_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+            helm_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+            source_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+        } | undefined;
+    } | undefined;
+    defaults?: {
+        flux_namespace?: string | undefined;
+        oci_repository_name?: string | undefined;
+        oci_registry_secret_name?: string | undefined;
+        flux_reconciliation_interval?: string | undefined;
+        flux_reconciliation_timeout?: string | undefined;
+    } | undefined;
+    templates?: {
+        name: string;
+        values?: Record<string, string> | undefined;
+        kustomizations?: Record<string, {
+            preservation?: {
+                mode: "custom" | "none" | "stateful";
+                keep_resources?: string[] | undefined;
+            } | undefined;
+        }> | undefined;
+    }[] | undefined;
+    plugins?: {
+        name: string;
+        config?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    node_defaults?: {
+        ssh?: {
+            user?: string | undefined;
+            key_path?: string | undefined;
+            known_hosts_path?: string | undefined;
+            port?: number | undefined;
+        } | undefined;
+        label_prefix?: string | undefined;
+    } | undefined;
+    nodes?: string[] | undefined;
+    secrets?: {
+        doppler?: {
+            project?: string | undefined;
+            config?: string | undefined;
+            service_token?: {
+                type: "1password";
+                ref: string;
+            } | {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            } | undefined;
+            cluster_secret?: {
+                name: string;
+                namespace: string;
+                key: string;
+                enabled: boolean;
+                annotations?: Record<string, string> | undefined;
+            } | undefined;
+        } | undefined;
+        onepassword?: {
+            vault: string;
+            service_account_token?: {
+                type: "1password";
+                ref: string;
+            } | {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            } | undefined;
+        } | undefined;
+    } | undefined;
+}, {
+    code?: string | undefined;
+    oci?: {
+        repository: string;
+        registry: string;
+        provider?: "generic" | "aws" | "azure" | "gcp" | undefined;
+        tag_strategy?: "version" | "cluster" | "git-sha" | "manual" | undefined;
+        tag?: string | undefined;
+        secret_ref?: string | undefined;
+        insecure?: boolean | undefined;
+    } | undefined;
+    git?: {
+        repository: string;
+        owner: string;
+        path?: string | undefined;
+        branch?: string | undefined;
+    } | undefined;
+    github?: {
+        repository: string;
+        organization: string;
+        branch?: string | undefined;
+    } | undefined;
+    flux?: {
+        controllers?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+            kustomize_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+            helm_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+            source_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+        } | undefined;
+    } | undefined;
+    defaults?: {
+        flux_namespace?: string | undefined;
+        oci_repository_name?: string | undefined;
+        oci_registry_secret_name?: string | undefined;
+        flux_reconciliation_interval?: string | undefined;
+        flux_reconciliation_timeout?: string | undefined;
+    } | undefined;
+    templates?: {
+        name: string;
+        values?: Record<string, string> | undefined;
+        kustomizations?: Record<string, {
+            preservation?: {
+                mode: "custom" | "none" | "stateful";
+                keep_resources?: string[] | undefined;
+            } | undefined;
+        }> | undefined;
+    }[] | undefined;
+    plugins?: {
+        name: string;
+        config?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    node_defaults?: {
+        ssh?: {
+            user?: string | undefined;
+            key_path?: string | undefined;
+            known_hosts_path?: string | undefined;
+            port?: number | undefined;
+        } | undefined;
+        label_prefix?: string | undefined;
+    } | undefined;
+    nodes?: string[] | undefined;
+    secrets?: {
+        doppler?: {
+            project?: string | undefined;
+            config?: string | undefined;
+            service_token?: {
+                type: "1password";
+                ref: string;
+            } | {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            } | undefined;
+            cluster_secret?: {
+                name?: string | undefined;
+                namespace?: string | undefined;
+                key?: string | undefined;
+                annotations?: Record<string, string> | undefined;
+                enabled?: boolean | undefined;
+            } | undefined;
+        } | undefined;
+        onepassword?: {
+            vault: string;
+            service_account_token?: {
+                type: "1password";
+                ref: string;
+            } | {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            } | undefined;
+        } | undefined;
+    } | undefined;
+}>, {
+    code?: string | undefined;
+    oci?: {
+        repository: string;
+        registry: string;
+        provider: "generic" | "aws" | "azure" | "gcp";
+        tag_strategy: "version" | "cluster" | "git-sha" | "manual";
+        insecure: boolean;
+        tag?: string | undefined;
+        secret_ref?: string | undefined;
+    } | undefined;
+    git?: {
+        repository: string;
+        owner: string;
+        branch: string;
+        path?: string | undefined;
+    } | undefined;
+    github?: {
+        repository: string;
+        branch: string;
+        organization: string;
+    } | undefined;
+    flux?: {
+        controllers?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+            kustomize_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+            helm_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+            source_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+        } | undefined;
+    } | undefined;
+    defaults?: {
+        flux_namespace?: string | undefined;
+        oci_repository_name?: string | undefined;
+        oci_registry_secret_name?: string | undefined;
+        flux_reconciliation_interval?: string | undefined;
+        flux_reconciliation_timeout?: string | undefined;
+    } | undefined;
+    templates?: {
+        name: string;
+        values?: Record<string, string> | undefined;
+        kustomizations?: Record<string, {
+            preservation?: {
+                mode: "custom" | "none" | "stateful";
+                keep_resources?: string[] | undefined;
+            } | undefined;
+        }> | undefined;
+    }[] | undefined;
+    plugins?: {
+        name: string;
+        config?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    node_defaults?: {
+        ssh?: {
+            user?: string | undefined;
+            key_path?: string | undefined;
+            known_hosts_path?: string | undefined;
+            port?: number | undefined;
+        } | undefined;
+        label_prefix?: string | undefined;
+    } | undefined;
+    nodes?: string[] | undefined;
+    secrets?: {
+        doppler?: {
+            project?: string | undefined;
+            config?: string | undefined;
+            service_token?: {
+                type: "1password";
+                ref: string;
+            } | {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            } | undefined;
+            cluster_secret?: {
+                name: string;
+                namespace: string;
+                key: string;
+                enabled: boolean;
+                annotations?: Record<string, string> | undefined;
+            } | undefined;
+        } | undefined;
+        onepassword?: {
+            vault: string;
+            service_account_token?: {
+                type: "1password";
+                ref: string;
+            } | {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            } | undefined;
+        } | undefined;
+    } | undefined;
+}, {
+    code?: string | undefined;
+    oci?: {
+        repository: string;
+        registry: string;
+        provider?: "generic" | "aws" | "azure" | "gcp" | undefined;
+        tag_strategy?: "version" | "cluster" | "git-sha" | "manual" | undefined;
+        tag?: string | undefined;
+        secret_ref?: string | undefined;
+        insecure?: boolean | undefined;
+    } | undefined;
+    git?: {
+        repository: string;
+        owner: string;
+        path?: string | undefined;
+        branch?: string | undefined;
+    } | undefined;
+    github?: {
+        repository: string;
+        organization: string;
+        branch?: string | undefined;
+    } | undefined;
+    flux?: {
+        controllers?: {
+            concurrent?: number | undefined;
+            requeue_dependency?: string | undefined;
+            kustomize_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+            helm_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+            source_controller?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+            } | undefined;
+        } | undefined;
+    } | undefined;
+    defaults?: {
+        flux_namespace?: string | undefined;
+        oci_repository_name?: string | undefined;
+        oci_registry_secret_name?: string | undefined;
+        flux_reconciliation_interval?: string | undefined;
+        flux_reconciliation_timeout?: string | undefined;
+    } | undefined;
+    templates?: {
+        name: string;
+        values?: Record<string, string> | undefined;
+        kustomizations?: Record<string, {
+            preservation?: {
+                mode: "custom" | "none" | "stateful";
+                keep_resources?: string[] | undefined;
+            } | undefined;
+        }> | undefined;
+    }[] | undefined;
+    plugins?: {
+        name: string;
+        config?: Record<string, unknown> | undefined;
+    }[] | undefined;
+    node_defaults?: {
+        ssh?: {
+            user?: string | undefined;
+            key_path?: string | undefined;
+            known_hosts_path?: string | undefined;
+            port?: number | undefined;
+        } | undefined;
+        label_prefix?: string | undefined;
+    } | undefined;
+    nodes?: string[] | undefined;
+    secrets?: {
+        doppler?: {
+            project?: string | undefined;
+            config?: string | undefined;
+            service_token?: {
+                type: "1password";
+                ref: string;
+            } | {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            } | undefined;
+            cluster_secret?: {
+                name?: string | undefined;
+                namespace?: string | undefined;
+                key?: string | undefined;
+                annotations?: Record<string, string> | undefined;
+                enabled?: boolean | undefined;
+            } | undefined;
+        } | undefined;
+        onepassword?: {
+            vault: string;
+            service_account_token?: {
+                type: "1password";
+                ref: string;
+            } | {
+                type: "doppler";
+                secret: string;
+                project: string;
+                config: string;
+            } | undefined;
+        } | undefined;
+    } | undefined;
+}>;
+export type ClusterSpecType = z.infer<typeof cluster_spec_schema>;
+/**
+ * Complete Cluster resource definition.
+ */
+export declare const cluster_schema: z.ZodObject<{
+    apiVersion: z.ZodLiteral<"kustodian.io/v1">;
+    kind: z.ZodLiteral<"Cluster">;
+    metadata: z.ZodObject<{
+        name: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+    }, {
+        name: string;
+    }>;
+    spec: z.ZodEffects<z.ZodObject<{
+        code: z.ZodOptional<z.ZodString>;
+        git: z.ZodOptional<z.ZodObject<{
+            owner: z.ZodString;
+            repository: z.ZodString;
+            branch: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+            path: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            repository: string;
+            owner: string;
+            branch: string;
+            path?: string | undefined;
+        }, {
+            repository: string;
+            owner: string;
+            path?: string | undefined;
+            branch?: string | undefined;
+        }>>;
+        oci: z.ZodOptional<z.ZodObject<{
+            registry: z.ZodString;
+            repository: z.ZodString;
+            tag_strategy: z.ZodDefault<z.ZodOptional<z.ZodEnum<["cluster", "git-sha", "version", "manual"]>>>;
+            tag: z.ZodOptional<z.ZodString>;
+            secret_ref: z.ZodOptional<z.ZodString>;
+            provider: z.ZodDefault<z.ZodOptional<z.ZodEnum<["aws", "azure", "gcp", "generic"]>>>;
+            insecure: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+        }, "strip", z.ZodTypeAny, {
+            repository: string;
+            registry: string;
+            provider: "generic" | "aws" | "azure" | "gcp";
+            tag_strategy: "version" | "cluster" | "git-sha" | "manual";
+            insecure: boolean;
+            tag?: string | undefined;
+            secret_ref?: string | undefined;
+        }, {
+            repository: string;
+            registry: string;
+            provider?: "generic" | "aws" | "azure" | "gcp" | undefined;
+            tag_strategy?: "version" | "cluster" | "git-sha" | "manual" | undefined;
+            tag?: string | undefined;
+            secret_ref?: string | undefined;
+            insecure?: boolean | undefined;
+        }>>;
+        github: z.ZodOptional<z.ZodObject<{
+            organization: z.ZodString;
+            repository: z.ZodString;
+            branch: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+        }, "strip", z.ZodTypeAny, {
+            repository: string;
+            branch: string;
+            organization: string;
+        }, {
+            repository: string;
+            organization: string;
+            branch?: string | undefined;
+        }>>;
+        flux: z.ZodOptional<z.ZodObject<{
+            controllers: z.ZodOptional<z.ZodObject<{
+                concurrent: z.ZodOptional<z.ZodNumber>;
+                requeue_dependency: z.ZodOptional<z.ZodString>;
+                kustomize_controller: z.ZodOptional<z.ZodObject<{
+                    concurrent: z.ZodOptional<z.ZodNumber>;
+                    requeue_dependency: z.ZodOptional<z.ZodString>;
+                }, "strip", z.ZodTypeAny, {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                }, {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                }>>;
+                helm_controller: z.ZodOptional<z.ZodObject<{
+                    concurrent: z.ZodOptional<z.ZodNumber>;
+                    requeue_dependency: z.ZodOptional<z.ZodString>;
+                }, "strip", z.ZodTypeAny, {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                }, {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                }>>;
+                source_controller: z.ZodOptional<z.ZodObject<{
+                    concurrent: z.ZodOptional<z.ZodNumber>;
+                    requeue_dependency: z.ZodOptional<z.ZodString>;
+                }, "strip", z.ZodTypeAny, {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                }, {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                }>>;
+            }, "strip", z.ZodTypeAny, {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+                kustomize_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                helm_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                source_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+            }, {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+                kustomize_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                helm_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                source_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            controllers?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+                kustomize_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                helm_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                source_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+            } | undefined;
+        }, {
+            controllers?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+                kustomize_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                helm_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                source_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+            } | undefined;
+        }>>;
+        defaults: z.ZodOptional<z.ZodObject<{
+            /** Flux system namespace where Flux controllers run */
+            flux_namespace: z.ZodOptional<z.ZodString>;
+            /** Flux OCIRepository resource name */
+            oci_repository_name: z.ZodOptional<z.ZodString>;
+            /** Secret name for OCI registry authentication */
+            oci_registry_secret_name: z.ZodOptional<z.ZodString>;
+            /** Reconciliation interval for Flux resources */
+            flux_reconciliation_interval: z.ZodOptional<z.ZodString>;
+            /** Timeout for Flux reconciliation */
+            flux_reconciliation_timeout: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            flux_namespace?: string | undefined;
+            oci_repository_name?: string | undefined;
+            oci_registry_secret_name?: string | undefined;
+            flux_reconciliation_interval?: string | undefined;
+            flux_reconciliation_timeout?: string | undefined;
+        }, {
+            flux_namespace?: string | undefined;
+            oci_repository_name?: string | undefined;
+            oci_registry_secret_name?: string | undefined;
+            flux_reconciliation_interval?: string | undefined;
+            flux_reconciliation_timeout?: string | undefined;
+        }>>;
+        templates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            values: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            kustomizations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+                preservation: z.ZodOptional<z.ZodObject<{
+                    mode: z.ZodEnum<["none", "stateful", "custom"]>;
+                    keep_resources: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+                }, "strip", z.ZodTypeAny, {
+                    mode: "custom" | "none" | "stateful";
+                    keep_resources?: string[] | undefined;
+                }, {
+                    mode: "custom" | "none" | "stateful";
+                    keep_resources?: string[] | undefined;
+                }>>;
+            }, "strip", z.ZodTypeAny, {
+                preservation?: {
+                    mode: "custom" | "none" | "stateful";
+                    keep_resources?: string[] | undefined;
+                } | undefined;
+            }, {
+                preservation?: {
+                    mode: "custom" | "none" | "stateful";
+                    keep_resources?: string[] | undefined;
+                } | undefined;
+            }>>>;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            values?: Record<string, string> | undefined;
+            kustomizations?: Record<string, {
+                preservation?: {
+                    mode: "custom" | "none" | "stateful";
+                    keep_resources?: string[] | undefined;
+                } | undefined;
+            }> | undefined;
+        }, {
+            name: string;
+            values?: Record<string, string> | undefined;
+            kustomizations?: Record<string, {
+                preservation?: {
+                    mode: "custom" | "none" | "stateful";
+                    keep_resources?: string[] | undefined;
+                } | undefined;
+            }> | undefined;
+        }>, "many">>;
+        plugins: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        }, "strip", z.ZodTypeAny, {
+            name: string;
+            config?: Record<string, unknown> | undefined;
+        }, {
+            name: string;
+            config?: Record<string, unknown> | undefined;
+        }>, "many">>;
+        node_defaults: z.ZodOptional<z.ZodObject<{
+            label_prefix: z.ZodOptional<z.ZodString>;
+            ssh: z.ZodOptional<z.ZodObject<{
+                user: z.ZodOptional<z.ZodString>;
+                key_path: z.ZodOptional<z.ZodString>;
+                known_hosts_path: z.ZodOptional<z.ZodString>;
+                port: z.ZodOptional<z.ZodNumber>;
+            }, "strip", z.ZodTypeAny, {
+                user?: string | undefined;
+                key_path?: string | undefined;
+                known_hosts_path?: string | undefined;
+                port?: number | undefined;
+            }, {
+                user?: string | undefined;
+                key_path?: string | undefined;
+                known_hosts_path?: string | undefined;
+                port?: number | undefined;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            ssh?: {
+                user?: string | undefined;
+                key_path?: string | undefined;
+                known_hosts_path?: string | undefined;
+                port?: number | undefined;
+            } | undefined;
+            label_prefix?: string | undefined;
+        }, {
+            ssh?: {
+                user?: string | undefined;
+                key_path?: string | undefined;
+                known_hosts_path?: string | undefined;
+                port?: number | undefined;
+            } | undefined;
+            label_prefix?: string | undefined;
+        }>>;
+        nodes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        secrets: z.ZodOptional<z.ZodObject<{
+            doppler: z.ZodOptional<z.ZodObject<{
+                project: z.ZodOptional<z.ZodString>;
+                config: z.ZodOptional<z.ZodString>;
+                service_token: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+                    type: z.ZodLiteral<"1password">;
+                    ref: z.ZodString;
+                }, "strip", z.ZodTypeAny, {
+                    type: "1password";
+                    ref: string;
+                }, {
+                    type: "1password";
+                    ref: string;
+                }>, z.ZodObject<{
+                    type: z.ZodLiteral<"doppler">;
+                    project: z.ZodString;
+                    config: z.ZodString;
+                    secret: z.ZodString;
+                }, "strip", z.ZodTypeAny, {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                }, {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                }>]>>;
+                cluster_secret: z.ZodOptional<z.ZodObject<{
+                    enabled: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+                    namespace: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                    name: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                    key: z.ZodDefault<z.ZodOptional<z.ZodString>>;
+                    annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+                }, "strip", z.ZodTypeAny, {
+                    name: string;
+                    namespace: string;
+                    key: string;
+                    enabled: boolean;
+                    annotations?: Record<string, string> | undefined;
+                }, {
+                    name?: string | undefined;
+                    namespace?: string | undefined;
+                    key?: string | undefined;
+                    annotations?: Record<string, string> | undefined;
+                    enabled?: boolean | undefined;
+                }>>;
+            }, "strip", z.ZodTypeAny, {
+                project?: string | undefined;
+                config?: string | undefined;
+                service_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+                cluster_secret?: {
+                    name: string;
+                    namespace: string;
+                    key: string;
+                    enabled: boolean;
+                    annotations?: Record<string, string> | undefined;
+                } | undefined;
+            }, {
+                project?: string | undefined;
+                config?: string | undefined;
+                service_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+                cluster_secret?: {
+                    name?: string | undefined;
+                    namespace?: string | undefined;
+                    key?: string | undefined;
+                    annotations?: Record<string, string> | undefined;
+                    enabled?: boolean | undefined;
+                } | undefined;
+            }>>;
+            onepassword: z.ZodOptional<z.ZodObject<{
+                vault: z.ZodString;
+                service_account_token: z.ZodOptional<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+                    type: z.ZodLiteral<"1password">;
+                    ref: z.ZodString;
+                }, "strip", z.ZodTypeAny, {
+                    type: "1password";
+                    ref: string;
+                }, {
+                    type: "1password";
+                    ref: string;
+                }>, z.ZodObject<{
+                    type: z.ZodLiteral<"doppler">;
+                    project: z.ZodString;
+                    config: z.ZodString;
+                    secret: z.ZodString;
+                }, "strip", z.ZodTypeAny, {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                }, {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                }>]>>;
+            }, "strip", z.ZodTypeAny, {
+                vault: string;
+                service_account_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+            }, {
+                vault: string;
+                service_account_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+            }>>;
+        }, "strip", z.ZodTypeAny, {
+            doppler?: {
+                project?: string | undefined;
+                config?: string | undefined;
+                service_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+                cluster_secret?: {
+                    name: string;
+                    namespace: string;
+                    key: string;
+                    enabled: boolean;
+                    annotations?: Record<string, string> | undefined;
+                } | undefined;
+            } | undefined;
+            onepassword?: {
+                vault: string;
+                service_account_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+            } | undefined;
+        }, {
+            doppler?: {
+                project?: string | undefined;
+                config?: string | undefined;
+                service_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+                cluster_secret?: {
+                    name?: string | undefined;
+                    namespace?: string | undefined;
+                    key?: string | undefined;
+                    annotations?: Record<string, string> | undefined;
+                    enabled?: boolean | undefined;
+                } | undefined;
+            } | undefined;
+            onepassword?: {
+                vault: string;
+                service_account_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+            } | undefined;
+        }>>;
+    }, "strip", z.ZodTypeAny, {
+        code?: string | undefined;
+        oci?: {
+            repository: string;
+            registry: string;
+            provider: "generic" | "aws" | "azure" | "gcp";
+            tag_strategy: "version" | "cluster" | "git-sha" | "manual";
+            insecure: boolean;
+            tag?: string | undefined;
+            secret_ref?: string | undefined;
+        } | undefined;
+        git?: {
+            repository: string;
+            owner: string;
+            branch: string;
+            path?: string | undefined;
+        } | undefined;
+        github?: {
+            repository: string;
+            branch: string;
+            organization: string;
+        } | undefined;
+        flux?: {
+            controllers?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+                kustomize_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                helm_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                source_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+            } | undefined;
+        } | undefined;
+        defaults?: {
+            flux_namespace?: string | undefined;
+            oci_repository_name?: string | undefined;
+            oci_registry_secret_name?: string | undefined;
+            flux_reconciliation_interval?: string | undefined;
+            flux_reconciliation_timeout?: string | undefined;
+        } | undefined;
+        templates?: {
+            name: string;
+            values?: Record<string, string> | undefined;
+            kustomizations?: Record<string, {
+                preservation?: {
+                    mode: "custom" | "none" | "stateful";
+                    keep_resources?: string[] | undefined;
+                } | undefined;
+            }> | undefined;
+        }[] | undefined;
+        plugins?: {
+            name: string;
+            config?: Record<string, unknown> | undefined;
+        }[] | undefined;
+        node_defaults?: {
+            ssh?: {
+                user?: string | undefined;
+                key_path?: string | undefined;
+                known_hosts_path?: string | undefined;
+                port?: number | undefined;
+            } | undefined;
+            label_prefix?: string | undefined;
+        } | undefined;
+        nodes?: string[] | undefined;
+        secrets?: {
+            doppler?: {
+                project?: string | undefined;
+                config?: string | undefined;
+                service_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+                cluster_secret?: {
+                    name: string;
+                    namespace: string;
+                    key: string;
+                    enabled: boolean;
+                    annotations?: Record<string, string> | undefined;
+                } | undefined;
+            } | undefined;
+            onepassword?: {
+                vault: string;
+                service_account_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+            } | undefined;
+        } | undefined;
+    }, {
+        code?: string | undefined;
+        oci?: {
+            repository: string;
+            registry: string;
+            provider?: "generic" | "aws" | "azure" | "gcp" | undefined;
+            tag_strategy?: "version" | "cluster" | "git-sha" | "manual" | undefined;
+            tag?: string | undefined;
+            secret_ref?: string | undefined;
+            insecure?: boolean | undefined;
+        } | undefined;
+        git?: {
+            repository: string;
+            owner: string;
+            path?: string | undefined;
+            branch?: string | undefined;
+        } | undefined;
+        github?: {
+            repository: string;
+            organization: string;
+            branch?: string | undefined;
+        } | undefined;
+        flux?: {
+            controllers?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+                kustomize_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                helm_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                source_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+            } | undefined;
+        } | undefined;
+        defaults?: {
+            flux_namespace?: string | undefined;
+            oci_repository_name?: string | undefined;
+            oci_registry_secret_name?: string | undefined;
+            flux_reconciliation_interval?: string | undefined;
+            flux_reconciliation_timeout?: string | undefined;
+        } | undefined;
+        templates?: {
+            name: string;
+            values?: Record<string, string> | undefined;
+            kustomizations?: Record<string, {
+                preservation?: {
+                    mode: "custom" | "none" | "stateful";
+                    keep_resources?: string[] | undefined;
+                } | undefined;
+            }> | undefined;
+        }[] | undefined;
+        plugins?: {
+            name: string;
+            config?: Record<string, unknown> | undefined;
+        }[] | undefined;
+        node_defaults?: {
+            ssh?: {
+                user?: string | undefined;
+                key_path?: string | undefined;
+                known_hosts_path?: string | undefined;
+                port?: number | undefined;
+            } | undefined;
+            label_prefix?: string | undefined;
+        } | undefined;
+        nodes?: string[] | undefined;
+        secrets?: {
+            doppler?: {
+                project?: string | undefined;
+                config?: string | undefined;
+                service_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+                cluster_secret?: {
+                    name?: string | undefined;
+                    namespace?: string | undefined;
+                    key?: string | undefined;
+                    annotations?: Record<string, string> | undefined;
+                    enabled?: boolean | undefined;
+                } | undefined;
+            } | undefined;
+            onepassword?: {
+                vault: string;
+                service_account_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+            } | undefined;
+        } | undefined;
+    }>, {
+        code?: string | undefined;
+        oci?: {
+            repository: string;
+            registry: string;
+            provider: "generic" | "aws" | "azure" | "gcp";
+            tag_strategy: "version" | "cluster" | "git-sha" | "manual";
+            insecure: boolean;
+            tag?: string | undefined;
+            secret_ref?: string | undefined;
+        } | undefined;
+        git?: {
+            repository: string;
+            owner: string;
+            branch: string;
+            path?: string | undefined;
+        } | undefined;
+        github?: {
+            repository: string;
+            branch: string;
+            organization: string;
+        } | undefined;
+        flux?: {
+            controllers?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+                kustomize_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                helm_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                source_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+            } | undefined;
+        } | undefined;
+        defaults?: {
+            flux_namespace?: string | undefined;
+            oci_repository_name?: string | undefined;
+            oci_registry_secret_name?: string | undefined;
+            flux_reconciliation_interval?: string | undefined;
+            flux_reconciliation_timeout?: string | undefined;
+        } | undefined;
+        templates?: {
+            name: string;
+            values?: Record<string, string> | undefined;
+            kustomizations?: Record<string, {
+                preservation?: {
+                    mode: "custom" | "none" | "stateful";
+                    keep_resources?: string[] | undefined;
+                } | undefined;
+            }> | undefined;
+        }[] | undefined;
+        plugins?: {
+            name: string;
+            config?: Record<string, unknown> | undefined;
+        }[] | undefined;
+        node_defaults?: {
+            ssh?: {
+                user?: string | undefined;
+                key_path?: string | undefined;
+                known_hosts_path?: string | undefined;
+                port?: number | undefined;
+            } | undefined;
+            label_prefix?: string | undefined;
+        } | undefined;
+        nodes?: string[] | undefined;
+        secrets?: {
+            doppler?: {
+                project?: string | undefined;
+                config?: string | undefined;
+                service_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+                cluster_secret?: {
+                    name: string;
+                    namespace: string;
+                    key: string;
+                    enabled: boolean;
+                    annotations?: Record<string, string> | undefined;
+                } | undefined;
+            } | undefined;
+            onepassword?: {
+                vault: string;
+                service_account_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+            } | undefined;
+        } | undefined;
+    }, {
+        code?: string | undefined;
+        oci?: {
+            repository: string;
+            registry: string;
+            provider?: "generic" | "aws" | "azure" | "gcp" | undefined;
+            tag_strategy?: "version" | "cluster" | "git-sha" | "manual" | undefined;
+            tag?: string | undefined;
+            secret_ref?: string | undefined;
+            insecure?: boolean | undefined;
+        } | undefined;
+        git?: {
+            repository: string;
+            owner: string;
+            path?: string | undefined;
+            branch?: string | undefined;
+        } | undefined;
+        github?: {
+            repository: string;
+            organization: string;
+            branch?: string | undefined;
+        } | undefined;
+        flux?: {
+            controllers?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+                kustomize_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                helm_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                source_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+            } | undefined;
+        } | undefined;
+        defaults?: {
+            flux_namespace?: string | undefined;
+            oci_repository_name?: string | undefined;
+            oci_registry_secret_name?: string | undefined;
+            flux_reconciliation_interval?: string | undefined;
+            flux_reconciliation_timeout?: string | undefined;
+        } | undefined;
+        templates?: {
+            name: string;
+            values?: Record<string, string> | undefined;
+            kustomizations?: Record<string, {
+                preservation?: {
+                    mode: "custom" | "none" | "stateful";
+                    keep_resources?: string[] | undefined;
+                } | undefined;
+            }> | undefined;
+        }[] | undefined;
+        plugins?: {
+            name: string;
+            config?: Record<string, unknown> | undefined;
+        }[] | undefined;
+        node_defaults?: {
+            ssh?: {
+                user?: string | undefined;
+                key_path?: string | undefined;
+                known_hosts_path?: string | undefined;
+                port?: number | undefined;
+            } | undefined;
+            label_prefix?: string | undefined;
+        } | undefined;
+        nodes?: string[] | undefined;
+        secrets?: {
+            doppler?: {
+                project?: string | undefined;
+                config?: string | undefined;
+                service_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+                cluster_secret?: {
+                    name?: string | undefined;
+                    namespace?: string | undefined;
+                    key?: string | undefined;
+                    annotations?: Record<string, string> | undefined;
+                    enabled?: boolean | undefined;
+                } | undefined;
+            } | undefined;
+            onepassword?: {
+                vault: string;
+                service_account_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+            } | undefined;
+        } | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    kind: "Cluster";
+    apiVersion: "kustodian.io/v1";
+    metadata: {
+        name: string;
+    };
+    spec: {
+        code?: string | undefined;
+        oci?: {
+            repository: string;
+            registry: string;
+            provider: "generic" | "aws" | "azure" | "gcp";
+            tag_strategy: "version" | "cluster" | "git-sha" | "manual";
+            insecure: boolean;
+            tag?: string | undefined;
+            secret_ref?: string | undefined;
+        } | undefined;
+        git?: {
+            repository: string;
+            owner: string;
+            branch: string;
+            path?: string | undefined;
+        } | undefined;
+        github?: {
+            repository: string;
+            branch: string;
+            organization: string;
+        } | undefined;
+        flux?: {
+            controllers?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+                kustomize_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                helm_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                source_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+            } | undefined;
+        } | undefined;
+        defaults?: {
+            flux_namespace?: string | undefined;
+            oci_repository_name?: string | undefined;
+            oci_registry_secret_name?: string | undefined;
+            flux_reconciliation_interval?: string | undefined;
+            flux_reconciliation_timeout?: string | undefined;
+        } | undefined;
+        templates?: {
+            name: string;
+            values?: Record<string, string> | undefined;
+            kustomizations?: Record<string, {
+                preservation?: {
+                    mode: "custom" | "none" | "stateful";
+                    keep_resources?: string[] | undefined;
+                } | undefined;
+            }> | undefined;
+        }[] | undefined;
+        plugins?: {
+            name: string;
+            config?: Record<string, unknown> | undefined;
+        }[] | undefined;
+        node_defaults?: {
+            ssh?: {
+                user?: string | undefined;
+                key_path?: string | undefined;
+                known_hosts_path?: string | undefined;
+                port?: number | undefined;
+            } | undefined;
+            label_prefix?: string | undefined;
+        } | undefined;
+        nodes?: string[] | undefined;
+        secrets?: {
+            doppler?: {
+                project?: string | undefined;
+                config?: string | undefined;
+                service_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+                cluster_secret?: {
+                    name: string;
+                    namespace: string;
+                    key: string;
+                    enabled: boolean;
+                    annotations?: Record<string, string> | undefined;
+                } | undefined;
+            } | undefined;
+            onepassword?: {
+                vault: string;
+                service_account_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+            } | undefined;
+        } | undefined;
+    };
+}, {
+    kind: "Cluster";
+    apiVersion: "kustodian.io/v1";
+    metadata: {
+        name: string;
+    };
+    spec: {
+        code?: string | undefined;
+        oci?: {
+            repository: string;
+            registry: string;
+            provider?: "generic" | "aws" | "azure" | "gcp" | undefined;
+            tag_strategy?: "version" | "cluster" | "git-sha" | "manual" | undefined;
+            tag?: string | undefined;
+            secret_ref?: string | undefined;
+            insecure?: boolean | undefined;
+        } | undefined;
+        git?: {
+            repository: string;
+            owner: string;
+            path?: string | undefined;
+            branch?: string | undefined;
+        } | undefined;
+        github?: {
+            repository: string;
+            organization: string;
+            branch?: string | undefined;
+        } | undefined;
+        flux?: {
+            controllers?: {
+                concurrent?: number | undefined;
+                requeue_dependency?: string | undefined;
+                kustomize_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                helm_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+                source_controller?: {
+                    concurrent?: number | undefined;
+                    requeue_dependency?: string | undefined;
+                } | undefined;
+            } | undefined;
+        } | undefined;
+        defaults?: {
+            flux_namespace?: string | undefined;
+            oci_repository_name?: string | undefined;
+            oci_registry_secret_name?: string | undefined;
+            flux_reconciliation_interval?: string | undefined;
+            flux_reconciliation_timeout?: string | undefined;
+        } | undefined;
+        templates?: {
+            name: string;
+            values?: Record<string, string> | undefined;
+            kustomizations?: Record<string, {
+                preservation?: {
+                    mode: "custom" | "none" | "stateful";
+                    keep_resources?: string[] | undefined;
+                } | undefined;
+            }> | undefined;
+        }[] | undefined;
+        plugins?: {
+            name: string;
+            config?: Record<string, unknown> | undefined;
+        }[] | undefined;
+        node_defaults?: {
+            ssh?: {
+                user?: string | undefined;
+                key_path?: string | undefined;
+                known_hosts_path?: string | undefined;
+                port?: number | undefined;
+            } | undefined;
+            label_prefix?: string | undefined;
+        } | undefined;
+        nodes?: string[] | undefined;
+        secrets?: {
+            doppler?: {
+                project?: string | undefined;
+                config?: string | undefined;
+                service_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+                cluster_secret?: {
+                    name?: string | undefined;
+                    namespace?: string | undefined;
+                    key?: string | undefined;
+                    annotations?: Record<string, string> | undefined;
+                    enabled?: boolean | undefined;
+                } | undefined;
+            } | undefined;
+            onepassword?: {
+                vault: string;
+                service_account_token?: {
+                    type: "1password";
+                    ref: string;
+                } | {
+                    type: "doppler";
+                    secret: string;
+                    project: string;
+                    config: string;
+                } | undefined;
+            } | undefined;
+        } | undefined;
+    };
+}>;
+export type ClusterType = z.infer<typeof cluster_schema>;
+/**
+ * Validates a cluster object and returns the result.
+ */
+export declare function validate_cluster(data: unknown): z.SafeParseReturnType<unknown, ClusterType>;
+//# sourceMappingURL=cluster.d.ts.map