timonel 2.3.0 → 2.5.0

package/dist/lib/Rutter.d.ts

@@ -1,2688 +0,0 @@
-/**
- * @fileoverview Rutter - Main class for building Kubernetes manifests and Helm charts
- * @since 1.0.0
- */
-import { ApiObject } from 'cdk8s';
-import type { HelmChartMeta, HelperDefinition } from './HelmChartWriter.js';
-/**
- * HTTP header for health probes
- *
- * @interface HttpHeader
- * @since 0.1.0
- */
-export interface HttpHeader {
-    /** Header name */
-    name: string;
-    /** Header value */
-    value: string;
-}
-/**
- * HTTP GET action for health probes
- *
- * @interface HttpGetAction
- * @since 0.1.0
- */
-export interface HttpGetAction {
-    /** HTTP path to probe */
-    path?: string;
-    /** Port number or name */
-    port: number | string;
-    /** HTTP or HTTPS scheme */
-    scheme?: 'HTTP' | 'HTTPS';
-    /** Additional HTTP headers */
-    httpHeaders?: HttpHeader[];
-}
-/**
- * Exec action for health probes
- *
- * @interface ExecAction
- * @since 0.1.0
- */
-export interface ExecAction {
-    /** Command to execute */
-    command: string[];
-}
-/**
- * TCP socket action for health probes
- *
- * @interface TcpSocketAction
- * @since 0.1.0
- */
-export interface TcpSocketAction {
-    /** Port number or name */
-    port: number | string;
-}
-/**
- * Kubernetes probe configuration
- *
- * @interface Probe
- * @since 0.1.0
- */
-export interface Probe {
-    /** HTTP GET probe */
-    httpGet?: HttpGetAction;
-    /** Exec probe */
-    exec?: ExecAction;
-    /** TCP socket probe */
-    tcpSocket?: TcpSocketAction;
-    /** Initial delay before probing */
-    initialDelaySeconds?: number;
-    /** Probe frequency */
-    periodSeconds?: number;
-    /** Probe timeout */
-    timeoutSeconds?: number;
-    /** Success threshold */
-    successThreshold?: number;
-    /** Failure threshold */
-    failureThreshold?: number;
-}
-/**
- * Environment variable source from ConfigMap or Secret
- *
- * @interface EnvFromSource
- * @since 0.1.0
- */
-export interface EnvFromSource {
-    /** ConfigMap reference */
-    configMapRef?: string;
-    /** Secret reference */
-    secretRef?: string;
-}
-/**
- * Volume source specification
- *
- * @interface VolumeSourceSpec
- * @since 0.1.0
- */
-export interface VolumeSourceSpec {
-    /** Volume name */
-    name: string;
-    /** ConfigMap volume source */
-    configMap?: string;
-    /** Secret volume source */
-    secret?: string;
-    /** PersistentVolumeClaim source */
-    persistentVolumeClaim?: string;
-}
-/**
- * Volume mount specification
- *
- * @interface VolumeMountSpec
- * @since 0.1.0
- */
-export interface VolumeMountSpec {
-    /** Volume name to mount */
-    name: string;
-    /** Mount path in container */
-    mountPath: string;
-    /** Mount as read-only */
-    readOnly?: boolean;
-    /** Sub-path within volume */
-    subPath?: string;
-}
-/**
- * Kubernetes resource requirements
- *
- * @interface ResourceRequirements
- * @since 0.1.0
- */
-export interface ResourceRequirements {
-    /** Resource limits */
-    limits?: {
-        cpu?: string;
-        memory?: string;
-    };
-    /** Resource requests */
-    requests?: {
-        cpu?: string;
-        memory?: string;
-    };
-}
-/**
- * Kubernetes PersistentVolume access modes
- *
- * @typedef {string} AccessMode
- * @since 1.0.0
- */
-export type AccessMode = 'ReadWriteOnce' | 'ReadOnlyMany' | 'ReadWriteMany' | 'ReadWriteOncePod';
-/**
- * Kubernetes volume modes
- *
- * @typedef {string} VolumeMode
- * @since 1.0.0
- */
-export type VolumeMode = 'Filesystem' | 'Block';
-/**
- * Kubernetes PersistentVolume reclaim policies
- *
- * @typedef {string} ReclaimPolicy
- * @since 1.0.0
- */
-export type ReclaimPolicy = 'Retain' | 'Recycle' | 'Delete';
-/**
- * CSI volume source specification
- *
- * @interface CsiVolumeSource
- * @since 1.0.0
- */
-export interface CsiVolumeSource {
-    /** CSI driver name */
-    driver: string;
-    /** Volume handle */
-    volumeHandle: string;
-    /** Filesystem type */
-    fsType?: string;
-    /** Read-only volume */
-    readOnly?: boolean;
-    /** Volume attributes */
-    volumeAttributes?: Record<string, string>;
-    /** Controller publish secret reference */
-    controllerPublishSecretRef?: {
-        name: string;
-        namespace?: string;
-    };
-    /** Node stage secret reference */
-    nodeStageSecretRef?: {
-        name: string;
-        namespace?: string;
-    };
-    /** Node publish secret reference */
-    nodePublishSecretRef?: {
-        name: string;
-        namespace?: string;
-    };
-    /** Controller expand secret reference */
-    controllerExpandSecretRef?: {
-        name: string;
-        namespace?: string;
-    };
-}
-/**
- * NFS volume source specification
- *
- * @interface NfsVolumeSource
- * @since 1.0.0
- */
-export interface NfsVolumeSource {
-    /** NFS server */
-    server: string;
-    /** NFS path */
-    path: string;
-    /** Read-only mount */
-    readOnly?: boolean;
-}
-/**
- * AWS Elastic Block Store volume source
- *
- * @interface AwsElasticBlockStoreSource
- * @since 1.0.0
- */
-export interface AwsElasticBlockStoreSource {
-    /** EBS volume ID */
-    volumeID: string;
-    /** Filesystem type */
-    fsType?: string;
-    /** Partition number */
-    partition?: number;
-    /** Read-only volume */
-    readOnly?: boolean;
-}
-/**
- * Host path volume source
- *
- * @interface HostPathSource
- * @since 1.0.0
- */
-export interface HostPathSource {
-    /** Host path */
-    path: string;
-    /** Path type */
-    type?: string;
-}
-/**
- * PersistentVolume source specification
- *
- * @interface PersistentVolumeSourceSpec
- * @since 1.0.0
- */
-export interface PersistentVolumeSourceSpec {
-    /** CSI volume source */
-    csi?: CsiVolumeSource;
-    /** NFS volume source */
-    nfs?: NfsVolumeSource;
-    /** AWS EBS volume source */
-    awsElasticBlockStore?: AwsElasticBlockStoreSource;
-    /** Host path volume source */
-    hostPath?: HostPathSource;
-    /** Azure Disk volume source */
-    azureDisk?: {
-        /** Disk name */
-        diskName: string;
-        /** Disk URI */
-        diskURI: string;
-        /** Caching mode */
-        cachingMode?: 'None' | 'ReadOnly' | 'ReadWrite';
-        /** Filesystem type */
-        fsType?: string;
-        /** Read-only disk */
-        readOnly?: boolean;
-        /** Disk kind */
-        kind?: 'Shared' | 'Dedicated' | 'Managed';
-    };
-    /** Azure File volume source */
-    azureFile?: {
-        /** Secret name */
-        secretName: string;
-        /** Share name */
-        shareName: string;
-        /** Read-only file */
-        readOnly?: boolean;
-        /** Secret namespace */
-        secretNamespace?: string;
-    };
-    /** GCE Persistent Disk volume source */
-    gcePersistentDisk?: {
-        /** Persistent disk name */
-        pdName: string;
-        /** Filesystem type */
-        fsType?: string;
-        /** Partition number */
-        partition?: number;
-        /** Read-only disk */
-        readOnly?: boolean;
-    };
-    /** Custom volume sources */
-    [key: string]: unknown;
-}
-/**
- * Kubernetes PersistentVolume specification
- *
- * @interface PersistentVolumeSpec
- * @since 1.0.0
- */
-export interface PersistentVolumeSpec {
-    /** PersistentVolume name */
-    name: string;
-    /** Storage capacity (e.g., '10Gi') */
-    capacity: string;
-    /** Access modes */
-    accessModes: AccessMode[];
-    /** Storage class name */
-    storageClassName?: string;
-    /** Volume mode */
-    volumeMode?: VolumeMode;
-    /** Reclaim policy */
-    reclaimPolicy?: ReclaimPolicy;
-    /** Mount options */
-    mountOptions?: string[];
-    /** Node affinity */
-    nodeAffinity?: Record<string, unknown>;
-    /** PersistentVolume labels */
-    labels?: Record<string, string>;
-    /** PersistentVolume annotations */
-    annotations?: Record<string, string>;
-    /** Volume source */
-    source: PersistentVolumeSourceSpec;
-    /** Reference to related PVC for binding */
-    claimRef?: {
-        name: string;
-        namespace?: string;
-    };
-    /** Cloud provider for optimized defaults */
-    cloudProvider?: 'aws' | 'azure' | 'gcp';
-}
-/**
- * Kubernetes Deployment specification
- *
- * @interface DeploymentSpec
- * @since 0.1.0
- *
- * @example
- * ```typescript
- * const deployment: DeploymentSpec = {
- *   name: 'web-app',
- *   image: 'nginx:1.21',
- *   replicas: 3,
- *   containerPort: 80,
- *   env: { NODE_ENV: 'production' }
- * };
- * ```
- */
-export interface DeploymentSpec {
-    /** Deployment name */
-    name: string;
-    /** Container image */
-    image: string;
-    /** Number of replicas */
-    replicas?: number;
-    /** Container port */
-    containerPort?: number;
-    /** Environment variables */
-    env?: Record<string, string>;
-    /** Environment from ConfigMap/Secret */
-    envFrom?: EnvFromSource[];
-    /** Volume sources */
-    volumes?: VolumeSourceSpec[];
-    /** Volume mounts */
-    volumeMounts?: VolumeMountSpec[];
-    /** Resource requirements */
-    resources?: ResourceRequirements;
-    /** Liveness probe */
-    livenessProbe?: Probe;
-    /** Readiness probe */
-    readinessProbe?: Probe;
-    /** Image pull policy */
-    imagePullPolicy?: 'Always' | 'IfNotPresent' | 'Never';
-    /** Service account name */
-    serviceAccountName?: string;
-    /** Pod selector labels */
-    matchLabels?: Record<string, string>;
-    /** Deployment metadata labels */
-    labels?: Record<string, string>;
-    /** Deployment metadata annotations */
-    annotations?: Record<string, string>;
-    /** Pod template labels */
-    podLabels?: Record<string, string>;
-    /** Pod template annotations */
-    podAnnotations?: Record<string, string>;
-}
-/**
- * Kubernetes ReplicaSet specification
- *
- * @interface ReplicaSetSpec
- * @since 1.0.0
- */
-export interface ReplicaSetSpec {
-    /** ReplicaSet name */
-    name: string;
-    /** Container image */
-    image: string;
-    /** Number of replicas */
-    replicas?: number;
-    /** Container port */
-    containerPort?: number;
-    /** Environment variables */
-    env?: Record<string, string>;
-    /** Environment from ConfigMap/Secret */
-    envFrom?: EnvFromSource[];
-    /** Volume sources */
-    volumes?: VolumeSourceSpec[];
-    /** Volume mounts */
-    volumeMounts?: VolumeMountSpec[];
-    /** Resource requirements */
-    resources?: ResourceRequirements;
-    /** Liveness probe */
-    livenessProbe?: Probe;
-    /** Readiness probe */
-    readinessProbe?: Probe;
-    /** Image pull policy */
-    imagePullPolicy?: 'Always' | 'IfNotPresent' | 'Never';
-    /** Service account name */
-    serviceAccountName?: string;
-    /** Pod selector labels */
-    matchLabels?: Record<string, string>;
-    /** ReplicaSet metadata labels */
-    labels?: Record<string, string>;
-    /** ReplicaSet metadata annotations */
-    annotations?: Record<string, string>;
-    /** Pod template labels */
-    podLabels?: Record<string, string>;
-    /** Pod template annotations */
-    podAnnotations?: Record<string, string>;
-}
-/**
- * Kubernetes Job specification
- *
- * @interface JobSpec
- * @since 2.1.0
- */
-export interface JobSpec {
-    /** Job name */
-    name: string;
-    /** Container image */
-    image: string;
-    /** Command to run */
-    command?: string[];
-    /** Arguments to command */
-    args?: string[];
-    /** Environment variables */
-    env?: Record<string, string>;
-    /** Environment from ConfigMap/Secret */
-    envFrom?: EnvFromSource[];
-    /** Volume sources */
-    volumes?: VolumeSourceSpec[];
-    /** Volume mounts */
-    volumeMounts?: VolumeMountSpec[];
-    /** Resource requirements */
-    resources?: ResourceRequirements;
-    /** Restart policy */
-    restartPolicy?: 'Never' | 'OnFailure';
-    /** Backoff limit for retries */
-    backoffLimit?: number;
-    /** Active deadline in seconds */
-    activeDeadlineSeconds?: number;
-    /** TTL after finished in seconds */
-    ttlSecondsAfterFinished?: number;
-    /** Number of completions */
-    completions?: number;
-    /** Parallelism level */
-    parallelism?: number;
-    /** Completion mode */
-    completionMode?: 'NonIndexed' | 'Indexed';
-    /** Suspend job execution */
-    suspend?: boolean;
-    /** Image pull policy */
-    imagePullPolicy?: 'Always' | 'IfNotPresent' | 'Never';
-    /** Service account name */
-    serviceAccountName?: string;
-    /** Job metadata labels */
-    labels?: Record<string, string>;
-    /** Job metadata annotations */
-    annotations?: Record<string, string>;
-    /** Pod template labels */
-    podLabels?: Record<string, string>;
-    /** Pod template annotations */
-    podAnnotations?: Record<string, string>;
-}
-/**
- * Kubernetes CronJob specification
- *
- * @interface CronJobSpec
- * @since 2.1.0
- */
-export interface CronJobSpec {
-    /** CronJob name */
-    name: string;
-    /** Cron schedule expression */
-    schedule: string;
-    /** Container image */
-    image: string;
-    /** Command to run */
-    command?: string[];
-    /** Arguments to command */
-    args?: string[];
-    /** Environment variables */
-    env?: Record<string, string>;
-    /** Environment from ConfigMap/Secret */
-    envFrom?: EnvFromSource[];
-    /** Volume sources */
-    volumes?: VolumeSourceSpec[];
-    /** Volume mounts */
-    volumeMounts?: VolumeMountSpec[];
-    /** Resource requirements */
-    resources?: ResourceRequirements;
-    /** Restart policy */
-    restartPolicy?: 'Never' | 'OnFailure';
-    /** Backoff limit for retries */
-    backoffLimit?: number;
-    /** Active deadline in seconds */
-    activeDeadlineSeconds?: number;
-    /** TTL after finished in seconds */
-    ttlSecondsAfterFinished?: number;
-    /** Number of completions */
-    completions?: number;
-    /** Parallelism level */
-    parallelism?: number;
-    /** Completion mode */
-    completionMode?: 'NonIndexed' | 'Indexed';
-    /** Suspend job execution */
-    suspend?: boolean;
-    /** Starting deadline in seconds */
-    startingDeadlineSeconds?: number;
-    /** Concurrency policy */
-    concurrencyPolicy?: 'Allow' | 'Forbid' | 'Replace';
-    /** Successful jobs history limit */
-    successfulJobsHistoryLimit?: number;
-    /** Failed jobs history limit */
-    failedJobsHistoryLimit?: number;
-    /** Time zone */
-    timeZone?: string;
-    /** Image pull policy */
-    imagePullPolicy?: 'Always' | 'IfNotPresent' | 'Never';
-    /** Service account name */
-    serviceAccountName?: string;
-    /** CronJob metadata labels */
-    labels?: Record<string, string>;
-    /** CronJob metadata annotations */
-    annotations?: Record<string, string>;
-    /** Pod template labels */
-    podLabels?: Record<string, string>;
-    /** Pod template annotations */
-    podAnnotations?: Record<string, string>;
-}
-/**
- * Kubernetes Service specification
- *
- * @interface ServiceSpec
- * @since 1.0.0
- *
- * @example
- * ```typescript
- * const service: ServiceSpec = {
- *   name: 'web-service',
- *   ports: [{ port: 80, targetPort: 8080 }],
- *   type: 'LoadBalancer'
- * };
- * ```
- */
-export interface ServiceSpec {
-    /** Service name */
-    name: string;
-    /** Service ports */
-    ports: Array<{
-        /** Service port */
-        port: number;
-        /** Target port on pods */
-        targetPort?: number;
-        /** Protocol */
-        protocol?: 'TCP' | 'UDP' | 'SCTP';
-        /** Port name */
-        name?: string;
-        /** NodePort (for NodePort/LoadBalancer) */
-        nodePort?: number;
-    }>;
-    /** Service type */
-    type?: 'ClusterIP' | 'NodePort' | 'LoadBalancer' | 'ExternalName';
-    /** Pod selector */
-    selector?: Record<string, string>;
-    /** Cluster IP */
-    clusterIP?: string;
-    /** External name (for ExternalName type) */
-    externalName?: string;
-    /** Session affinity */
-    sessionAffinity?: 'None' | 'ClientIP';
-    /** Load balancer IP */
-    loadBalancerIP?: string;
-    /** Load balancer source ranges */
-    loadBalancerSourceRanges?: string[];
-    /** Load balancer class */
-    loadBalancerClass?: string;
-    /** External traffic policy */
-    externalTrafficPolicy?: 'Cluster' | 'Local';
-    /** Internal traffic policy */
-    internalTrafficPolicy?: 'Cluster' | 'Local';
-    /** IP family policy */
-    ipFamilyPolicy?: 'SingleStack' | 'PreferDualStack' | 'RequireDualStack';
-    /** IP families */
-    ipFamilies?: Array<'IPv4' | 'IPv6'>;
-    /** Service labels */
-    labels?: Record<string, string>;
-    /** Service annotations */
-    annotations?: Record<string, string>;
-}
-/**
- * Kubernetes Ingress rule specification
- *
- * @interface IngressRule
- * @since 1.0.0
- */
-export interface IngressRule {
-    /** Host name */
-    host?: string;
-    /** Path rules */
-    paths: Array<{
-        /** URL path */
-        path: string;
-        /** Path matching type */
-        pathType: 'Exact' | 'Prefix' | 'ImplementationSpecific';
-        /** Backend service */
-        backend: {
-            service: {
-                name: string;
-                port: {
-                    number?: number;
-                    name?: string;
-                };
-            };
-        };
-    }>;
-}
-/**
- * Kubernetes Ingress TLS specification
- *
- * @interface IngressTLS
- * @since 1.0.0
- */
-export interface IngressTLS {
-    /** TLS hosts */
-    hosts?: string[];
-    /** Secret name containing TLS certificate */
-    secretName?: string;
-}
-/**
- * Kubernetes Ingress specification
- *
- * @interface IngressSpec
- * @since 1.0.0
- */
-export interface IngressSpec {
-    /** Ingress name */
-    name: string;
-    /** Ingress rules */
-    rules: IngressRule[];
-    /** TLS configuration */
-    tls?: IngressTLS[];
-    /** Ingress class name */
-    ingressClassName?: string;
-    /** Default backend */
-    defaultBackend?: {
-        service: {
-            name: string;
-            port: {
-                number?: number;
-                name?: string;
-            };
-        };
-    };
-    /** Ingress labels */
-    labels?: Record<string, string>;
-    /** Ingress annotations */
-    annotations?: Record<string, string>;
-}
-/**
- * Kubernetes ConfigMap specification
- *
- * @interface ConfigMapSpec
- * @since 1.0.0
- */
-export interface ConfigMapSpec {
-    /** ConfigMap name */
-    name: string;
-    /** String data */
-    data?: Record<string, string>;
-    /** Binary data */
-    binaryData?: Record<string, string>;
-    /** Immutable ConfigMap */
-    immutable?: boolean;
-    /** ConfigMap labels */
-    labels?: Record<string, string>;
-    /** ConfigMap annotations */
-    annotations?: Record<string, string>;
-}
-/**
- * Kubernetes Secret specification
- *
- * @interface SecretSpec
- * @since 1.0.0
- */
-export interface SecretSpec {
-    /** Secret name */
-    name: string;
-    /** Secret type */
-    type?: string;
-    /** String data (unencoded) */
-    stringData?: Record<string, string>;
-    /** Base64-encoded data */
-    data?: Record<string, string>;
-    /** Immutable Secret */
-    immutable?: boolean;
-    /** Secret labels */
-    labels?: Record<string, string>;
-    /** Secret annotations */
-    annotations?: Record<string, string>;
-}
-/**
- * Kubernetes PersistentVolumeClaim specification
- *
- * @interface PersistentVolumeClaimSpec
- * @since 1.0.0
- */
-export interface PersistentVolumeClaimSpec {
-    /** PersistentVolumeClaim name */
-    name: string;
-    /** Access modes */
-    accessModes: AccessMode[];
-    /** Resource requirements */
-    resources: {
-        requests: {
-            storage: string;
-        };
-        limits?: {
-            storage: string;
-        };
-    };
-    /** Storage class name */
-    storageClassName?: string;
-    /** Volume mode */
-    volumeMode?: VolumeMode;
-    /** Volume selector */
-    selector?: {
-        matchLabels?: Record<string, string>;
-        matchExpressions?: unknown[];
-    };
-    /** PersistentVolumeClaim labels */
-    labels?: Record<string, string>;
-    /** PersistentVolumeClaim annotations */
-    annotations?: Record<string, string>;
-    /** Reference to specific PV for static binding */
-    volumeName?: string;
-    /** Cloud provider for optimized defaults */
-    cloudProvider?: 'aws' | 'azure' | 'gcp';
-}
-/**
- * Kubernetes ServiceAccount specification with multi-cloud workload identity support
- *
- * @interface ServiceAccountSpec
- * @since 1.0.0
- */
-export interface ServiceAccountSpec {
-    /** ServiceAccount name */
-    name: string;
-    /** ServiceAccount annotations */
-    annotations?: Record<string, string>;
-    /** ServiceAccount labels */
-    labels?: Record<string, string>;
-    /** Automount service account token */
-    automountServiceAccountToken?: boolean;
-    /** Image pull secrets */
-    imagePullSecrets?: string[];
-    /** Secrets to mount */
-    secrets?: string[];
-    /** EKS IRSA: IAM role ARN */
-    awsRoleArn?: string;
-    /** IRSA audience for token validation */
-    awsAudience?: string;
-    /** AWS STS endpoint type */
-    awsStsEndpointType?: 'regional' | 'legacy';
-    /** AWS region for regional STS endpoint */
-    awsRegion?: string;
-    /** Token expiration time in seconds */
-    awsTokenExpiration?: number;
-    /** AKS Workload Identity: Azure client ID */
-    azureClientId?: string;
-    /** AKS Workload Identity: Azure tenant ID */
-    azureTenantId?: string;
-    /** AKS Workload Identity: token expiration */
-    azureServiceAccountTokenExpiration?: number;
-    /** GKE Workload Identity: service account email */
-    gcpServiceAccountEmail?: string;
-}
-/**
- * HorizontalPodAutoscaler metric specification
- *
- * @interface HorizontalPodAutoscalerMetric
- * @since 1.0.0
- */
-export interface HorizontalPodAutoscalerMetric {
-    /** Metric type */
-    type: 'Resource' | 'Pods' | 'Object' | 'External';
-    /** Resource metric */
-    resource?: {
-        /** Resource name */
-        name: 'cpu' | 'memory';
-        /** Target specification */
-        target: {
-            /** Target type */
-            type: 'Utilization' | 'AverageValue';
-            /** Average utilization percentage */
-            averageUtilization?: number;
-            /** Average value */
-            averageValue?: string;
-        };
-    };
-    /** Pods metric */
-    pods?: {
-        /** Metric specification */
-        metric: {
-            name: string;
-            selector?: Record<string, unknown>;
-        };
-        /** Target specification */
-        target: {
-            type: 'AverageValue';
-            averageValue: string;
-        };
-    };
-    /** Object metric */
-    object?: {
-        /** Metric specification */
-        metric: {
-            name: string;
-            selector?: Record<string, unknown>;
-        };
-        /** Described object */
-        describedObject: {
-            apiVersion: string;
-            kind: string;
-            name: string;
-        };
-        /** Target specification */
-        target: {
-            type: 'Value' | 'AverageValue';
-            value?: string;
-            averageValue?: string;
-        };
-    };
-    /** External metric */
-    external?: {
-        /** Metric specification */
-        metric: {
-            name: string;
-            selector?: Record<string, unknown>;
-        };
-        /** Target specification */
-        target: {
-            type: 'Value' | 'AverageValue';
-            value?: string;
-            averageValue?: string;
-        };
-    };
-}
-/**
- * HorizontalPodAutoscaler behavior specification
- *
- * @interface HorizontalPodAutoscalerBehavior
- * @since 1.0.0
- */
-export interface HorizontalPodAutoscalerBehavior {
-    /** Scale up behavior */
-    scaleUp?: {
-        /** Stabilization window in seconds */
-        stabilizationWindowSeconds?: number;
-        /** Policy selection */
-        selectPolicy?: 'Max' | 'Min' | 'Disabled';
-        /** Scaling policies */
-        policies?: Array<{
-            /** Policy type */
-            type: 'Pods' | 'Percent';
-            /** Policy value */
-            value: number;
-            /** Period in seconds */
-            periodSeconds: number;
-        }>;
-    };
-    /** Scale down behavior */
-    scaleDown?: {
-        /** Stabilization window in seconds */
-        stabilizationWindowSeconds?: number;
-        /** Policy selection */
-        selectPolicy?: 'Max' | 'Min' | 'Disabled';
-        /** Scaling policies */
-        policies?: Array<{
-            /** Policy type */
-            type: 'Pods' | 'Percent';
-            /** Policy value */
-            value: number;
-            /** Period in seconds */
-            periodSeconds: number;
-        }>;
-    };
-}
-/**
- * Kubernetes HorizontalPodAutoscaler specification
- *
- * @interface HorizontalPodAutoscalerSpec
- * @since 1.0.0
- */
-export interface HorizontalPodAutoscalerSpec {
-    /** HPA name */
-    name: string;
-    /** Scale target reference */
-    scaleTargetRef: {
-        /** API version */
-        apiVersion: string;
-        /** Resource kind */
-        kind: 'Deployment' | 'StatefulSet' | 'ReplicaSet';
-        /** Resource name */
-        name: string;
-    };
-    /** Minimum replicas */
-    minReplicas?: number;
-    /** Maximum replicas */
-    maxReplicas: number;
-    /** Scaling metrics */
-    metrics?: HorizontalPodAutoscalerMetric[];
-    /** Scaling behavior */
-    behavior?: HorizontalPodAutoscalerBehavior;
-    /** HPA labels */
-    labels?: Record<string, string>;
-    /** HPA annotations */
-    annotations?: Record<string, string>;
-}
-export interface VerticalPodAutoscalerResourcePolicy {
-    containerName?: string;
-    mode?: 'Auto' | 'Off';
-    minAllowed?: {
-        cpu?: string;
-        memory?: string;
-    };
-    maxAllowed?: {
-        cpu?: string;
-        memory?: string;
-    };
-    controlledResources?: Array<'cpu' | 'memory'>;
-    controlledValues?: 'RequestsAndLimits' | 'RequestsOnly';
-}
-export interface VerticalPodAutoscalerUpdatePolicy {
-    updateMode?: 'Off' | 'Initial' | 'Recreation' | 'Auto';
-    minReplicas?: number;
-}
-export interface PodDisruptionBudgetSpec {
-    name: string;
-    minAvailable?: number | string;
-    maxUnavailable?: number | string;
-    selector?: {
-        matchLabels?: Record<string, string>;
-        matchExpressions?: Array<{
-            key: string;
-            operator: 'In' | 'NotIn' | 'Exists' | 'DoesNotExist';
-            values?: string[];
-        }>;
-    };
-    labels?: Record<string, string>;
-    annotations?: Record<string, string>;
-}
-/**
- * AWS EBS StorageClass specification
- *
- * @interface AWSEBSStorageClassSpec
- * @extends CloudResourceTags
- * @since 1.0.0
- */
-export interface AWSEBSStorageClassSpec extends CloudResourceTags {
-    /** StorageClass name */
-    name: string;
-    /** EBS volume type */
-    volumeType?: 'gp2' | 'gp3' | 'io1' | 'io2' | 'sc1' | 'st1';
-    /** Filesystem type */
-    fsType?: 'ext4' | 'xfs';
-    /** Enable encryption */
-    encrypted?: boolean;
-    /** KMS key ID for encryption */
-    kmsKeyId?: string;
-    /** IOPS for io1/io2 volumes */
-    iops?: number;
-    /** Throughput for gp3 volumes */
-    throughput?: number;
-    /** Volume reclaim policy */
-    reclaimPolicy?: 'Delete' | 'Retain';
-    /** Allow volume expansion */
-    allowVolumeExpansion?: boolean;
-    /** Volume binding mode */
-    volumeBindingMode?: 'Immediate' | 'WaitForFirstConsumer';
-    /** StorageClass labels */
-    labels?: Record<string, string>;
-    /** StorageClass annotations */
-    annotations?: Record<string, string>;
-}
-export interface AWSEBSPersistentVolumeClaimSpec {
-    name: string;
-    storageClassName: string;
-    size: string;
-    accessModes?: AccessMode[];
-    labels?: Record<string, string>;
-    annotations?: Record<string, string>;
-}
-export interface AWSEFSStorageClassSpec {
-    name: string;
-    reclaimPolicy?: 'Delete' | 'Retain';
-    volumeBindingMode?: 'Immediate' | 'WaitForFirstConsumer';
-    labels?: Record<string, string>;
-    annotations?: Record<string, string>;
-}
-export interface AWSEFSPersistentVolumeSpec {
-    name: string;
-    fileSystemId: string;
-    accessPoint?: string;
-    directoryPerms?: string;
-    gidRangeStart?: number;
-    gidRangeEnd?: number;
-    basePath?: string;
-    subPath?: string;
-    capacity?: string;
-    accessModes?: AccessMode[];
-    storageClassName?: string;
-    labels?: Record<string, string>;
-    annotations?: Record<string, string>;
-}
-export interface AWSEFSPersistentVolumeClaimSpec {
-    name: string;
-    storageClassName: string;
-    size?: string;
-    accessModes?: AccessMode[];
-    labels?: Record<string, string>;
-    annotations?: Record<string, string>;
-}
-export interface AWSIRSAServiceAccountSpec {
-    name: string;
-    roleArn: string;
-    audience?: string;
-    stsEndpointType?: 'regional' | 'legacy';
-    region?: string;
-    tokenExpiration?: number;
-    labels?: Record<string, string>;
-    annotations?: Record<string, string>;
-    automountServiceAccountToken?: boolean;
-    imagePullSecrets?: string[];
-    secrets?: string[];
-}
-export interface AWSSecretsManagerObject {
-    objectName: string;
-    objectType: 'secretsmanager';
-    objectAlias?: string;
-    jmesPath?: string;
-}
-export interface AWSParameterStoreObject {
-    objectName: string;
-    objectType: 'ssmparameter';
-    objectAlias?: string;
-}
-export interface AWSSecretProviderClassSpec {
-    name: string;
-    region?: string;
-    objects: (AWSSecretsManagerObject | AWSParameterStoreObject)[];
-    labels?: Record<string, string>;
-    annotations?: Record<string, string>;
-}
-/**
- * Configuration interface for Azure Workload Identity ServiceAccount.
- * Enables secure authentication to Azure services without storing credentials.
- *
- * @see https://learn.microsoft.com/en-us/azure/aks/workload-identity-overview
- */
-export interface AzureWorkloadIdentityServiceAccountSpec {
-    /** Name of the ServiceAccount */
-    name: string;
-    /** Azure application client ID for workload identity */
-    clientId: string;
-    /** Azure tenant ID where the application is registered */
-    tenantId: string;
-    /** Service account token expiration in seconds (3600-86400) */
-    tokenExpiration?: number;
-    /** Labels to apply to the ServiceAccount */
-    labels?: Record<string, string>;
-    /** Additional annotations to apply to the ServiceAccount */
-    annotations?: Record<string, string>;
-    /** Whether to automount service account token */
-    automountServiceAccountToken?: boolean;
-    /** Names of image pull secrets */
-    imagePullSecrets?: string[];
-    /** Names of secrets to mount */
-    secrets?: string[];
-}
-/**
- * Azure Key Vault object configuration for SecretProviderClass.
- */
-export interface AzureKeyVaultObject {
-    /** Name of the object in Azure Key Vault */
-    objectName: string;
-    /** Type of object to retrieve */
-    objectType: 'secret' | 'key' | 'cert';
-    /** Optional alias for the object when mounted */
-    objectAlias?: string;
-    /** Optional version of the object */
-    objectVersion?: string;
-}
-/**
- * Configuration interface for Azure Key Vault SecretProviderClass.
- * Enables mounting secrets from Azure Key Vault using CSI driver.
- *
- * @see https://learn.microsoft.com/en-us/azure/aks/csi-secrets-store-driver
- */
-export interface AzureKeyVaultSecretProviderClassSpec {
-    /** Name of the SecretProviderClass */
-    name: string;
-    /** Name of the Azure Key Vault */
-    keyVaultName: string;
-    /** Azure tenant ID */
-    tenantId: string;
-    /** Objects to retrieve from Key Vault */
-    objects: AzureKeyVaultObject[];
-    /** User-assigned managed identity client ID for authentication */
-    userAssignedIdentityID?: string;
-    /** Azure cloud environment */
-    cloudName?: 'AzurePublicCloud' | 'AzureUSGovernmentCloud' | 'AzureChinaCloud';
-    /** Labels to apply to the SecretProviderClass */
-    labels?: Record<string, string>;
-    /** Additional annotations to apply to the SecretProviderClass */
-    annotations?: Record<string, string>;
-}
-/**
- * Configuration interface for Azure Files StorageClass.
- * Defines parameters for creating Azure Files StorageClass in AKS.
- *
- * @see https://learn.microsoft.com/en-us/azure/aks/azure-csi-files-storage-provision
- */
-export interface AzureFilesStorageClassSpec {
-    /** Name of the StorageClass */
-    name: string;
-    /** Azure Files SKU */
-    skuName?: 'Standard_LRS' | 'Standard_GRS' | 'Standard_RAGRS' | 'Standard_ZRS' | 'Premium_LRS' | 'Premium_ZRS';
-    /** File share protocol */
-    protocol?: 'smb' | 'nfs';
-    /** Allow shared access across multiple pods */
-    allowSharedAccess?: boolean;
-    /** Resource group for storage account */
-    resourceGroup?: string;
-    /** Storage account name */
-    storageAccount?: string;
-    /** Location for storage account */
-    location?: string;
-    /** Network endpoints for storage account */
-    networkEndpointType?: 'publicEndpoint' | 'privateEndpoint';
-    /** Mount permissions for NFS (e.g., '0777') */
-    mountPermissions?: string;
-    /** Root squash type for NFS */
-    rootSquashType?: 'NoRootSquash' | 'RootSquash' | 'AllSquash';
-    /** Volume reclaim policy */
-    reclaimPolicy?: 'Delete' | 'Retain';
-    /** Allow volume expansion */
-    allowVolumeExpansion?: boolean;
-    /** Volume binding mode */
-    volumeBindingMode?: 'Immediate' | 'WaitForFirstConsumer';
-    /** Mount options for the storage class */
-    mountOptions?: string[];
-    /** Labels to apply to the StorageClass */
-    labels?: Record<string, string>;
-    /** Annotations to apply to the StorageClass */
-    annotations?: Record<string, string>;
-}
-/**
- * Configuration interface for Azure Files PersistentVolume.
- * Defines parameters for static Azure Files volume provisioning.
- */
-export interface AzureFilesPersistentVolumeSpec {
-    /** Name of the PersistentVolume */
-    name: string;
-    /** Storage capacity */
-    capacity: string;
-    /** Access modes */
-    accessModes?: AccessMode[];
-    /** Storage account name */
-    storageAccount: string;
-    /** File share name */
-    shareName: string;
-    /** Resource group name */
-    resourceGroup?: string;
-    /** File share protocol */
-    protocol?: 'smb' | 'nfs';
-    /** Secret name containing storage account key (SMB only) */
-    secretName?: string;
-    /** Secret namespace (SMB only) */
-    secretNamespace?: string;
-    /** Server address override */
-    server?: string;
-    /** Folder name within share */
-    folderName?: string;
-    /** Mount permissions for NFS */
-    mountPermissions?: string;
-    /** Volume reclaim policy */
-    reclaimPolicy?: ReclaimPolicy;
-    /** Storage class name */
-    storageClassName?: string;
-    /** Mount options */
-    mountOptions?: string[];
-    /** Labels to apply to the PersistentVolume */
-    labels?: Record<string, string>;
-    /** Annotations to apply to the PersistentVolume */
-    annotations?: Record<string, string>;
-}
-/**
- * Configuration interface for Azure Files PersistentVolumeClaim.
- * Simplifies creation of PVCs for Azure Files.
- */
-export interface AzureFilesPersistentVolumeClaimSpec {
-    /** Name of the PersistentVolumeClaim */
-    name: string;
-    /** Storage class name */
-    storageClassName: string;
-    /** Storage size request */
-    size: string;
-    /** Access modes */
-    accessModes?: AccessMode[];
-    /** Labels to apply to the PersistentVolumeClaim */
-    labels?: Record<string, string>;
-    /** Annotations to apply to the PersistentVolumeClaim */
-    annotations?: Record<string, string>;
-}
-/**
- * Configuration interface for Azure Container Registry ServiceAccount.
- * Simplifies ACR integration with AKS using managed identity.
- */
-export interface AzureACRServiceAccountSpec {
-    /** Name of the ServiceAccount */
-    name: string;
-    /** Azure Container Registry name */
-    acrName: string;
-    /** Resource group containing the ACR */
-    resourceGroup: string;
-    /** Client ID for Workload Identity (optional) */
-    clientId?: string;
-    /** Tenant ID for Workload Identity (optional) */
-    tenantId?: string;
-    /** Labels to apply to the ServiceAccount */
-    labels?: Record<string, string>;
-    /** Additional annotations to apply to the ServiceAccount */
-    annotations?: Record<string, string>;
-    /** Whether to automount service account token */
-    automountServiceAccountToken?: boolean;
-    /** Names of additional image pull secrets */
-    imagePullSecrets?: string[];
-    /** Names of secrets to mount */
-    secrets?: string[];
-}
-/**
- * Cloud resource tags with basic validation
- *
- * @interface CloudResourceTags
- * @since 1.0.0
- */
-export interface CloudResourceTags {
-    /** Resource tags as key-value pairs */
-    tags?: Record<string, string>;
-}
-/**
- * Azure Disk StorageClass specification
- *
- * @interface AzureDiskStorageClassSpec
- * @extends CloudResourceTags
- * @since 1.0.0
- */
-export interface AzureDiskStorageClassSpec extends CloudResourceTags {
-    /** Name of the StorageClass */
-    name: string;
-    /** Azure disk SKU to use */
-    skuName?: 'Standard_LRS' | 'Premium_LRS' | 'StandardSSD_LRS' | 'PremiumV2_LRS' | 'UltraSSD_LRS' | 'Premium_ZRS' | 'StandardSSD_ZRS';
-    /** File system type to use */
-    fsType?: 'ext4' | 'ext3' | 'ext2' | 'xfs' | 'btrfs' | 'ntfs';
-    /** Host caching mode */
-    cachingMode?: 'None' | 'ReadOnly' | 'ReadWrite';
-    /** Resource group where disks will be created */
-    resourceGroup?: string;
-    /** IOPS for the disk (UltraSSD_LRS only) */
-    diskIOPSReadWrite?: number;
-    /** Throughput in MB/s (UltraSSD_LRS only) */
-    diskMBpsReadWrite?: number;
-    /** Logical sector size in bytes */
-    logicalSectorSize?: 512 | 4096;
-    /** ID of the disk encryption set */
-    diskEncryptionSetID?: string;
-    /** Type of disk encryption */
-    diskEncryptionType?: 'EncryptionAtRestWithCustomerKey' | 'EncryptionAtRestWithPlatformAndCustomerKeys';
-    /** Enable write accelerator */
-    writeAcceleratorEnabled?: boolean;
-    /** Network access policy for the disk */
-    networkAccessPolicy?: 'AllowAll' | 'DenyAll' | 'AllowPrivate';
-    /** ID of the disk access resource */
-    diskAccessID?: string;
-    /** Enable bursting (Premium SSD only) */
-    enableBursting?: boolean;
-    /** Maximum number of hosts that can attach to the disk simultaneously */
-    maxShares?: number;
-    /** Volume reclaim policy */
-    reclaimPolicy?: 'Delete' | 'Retain';
-    /** Allow volume expansion */
-    allowVolumeExpansion?: boolean;
-    /** Volume binding mode */
-    volumeBindingMode?: 'Immediate' | 'WaitForFirstConsumer';
-    /** Labels to apply to the StorageClass */
-    labels?: Record<string, string>;
-    /** Annotations to apply to the StorageClass */
-    annotations?: Record<string, string>;
-}
-/**
- * AWS Application Load Balancer Ingress specification
- *
- * @interface AWSALBIngressSpec
- * @extends CloudResourceTags
- * @since 1.0.0
- */
-export interface AWSALBIngressSpec extends CloudResourceTags {
-    /** Ingress name */
-    name: string;
-    /** Ingress rules */
-    rules: IngressRule[];
-    /** TLS configuration */
-    tls?: IngressTLS[];
-    /** Load balancer scheme */
-    scheme?: 'internet-facing' | 'internal';
-    /** Target type */
-    targetType?: 'instance' | 'ip';
-    /** IP address type */
-    ipAddressType?: 'ipv4' | 'dualstack';
-    /** ALB group name */
-    groupName?: string;
-    /** ALB group order */
-    groupOrder?: number;
-    /** Subnet IDs */
-    subnets?: string[];
-    /** Security group IDs */
-    securityGroups?: string[];
-    /** SSL certificate ARN */
-    certificateArn?: string;
-    /** Enable SSL redirect */
-    sslRedirect?: boolean;
-    /** Health check path */
-    healthCheckPath?: string;
-    /** Health check interval */
-    healthCheckIntervalSeconds?: number;
-    /** Health check timeout */
-    healthCheckTimeoutSeconds?: number;
-    /** Healthy threshold count */
-    healthyThresholdCount?: number;
-    /** Unhealthy threshold count */
-    unhealthyThresholdCount?: number;
-    /** Ingress labels */
-    labels?: Record<string, string>;
-    /** Ingress annotations */
-    annotations?: Record<string, string>;
-}
-/**
- * Azure Application Gateway Ingress Controller specification
- *
- * @interface AzureAGICIngressSpec
- * @since 1.0.0
- */
-export interface AzureAGICIngressSpec {
-    /** Name of the Ingress resource */
-    name: string;
-    /** Ingress rules defining routing configuration */
-    rules: IngressRule[];
-    /** TLS configuration for HTTPS termination */
-    tls?: IngressTLS[];
-    /** Backend path prefix to rewrite request paths */
-    backendPathPrefix?: string;
-    /** Backend hostname for Application Gateway to use when communicating with pods */
-    backendHostname?: string;
-    /** Backend protocol (http or https) */
-    backendProtocol?: 'http' | 'https';
-    /** Enable SSL redirect from HTTP to HTTPS */
-    sslRedirect?: boolean;
-    /** Use private IP address of Application Gateway */
-    usePrivateIp?: boolean;
-    /** Override frontend port (default: 80 for HTTP, 443 for HTTPS) */
-    overrideFrontendPort?: number;
-    /** Enable cookie-based session affinity */
-    cookieBasedAffinity?: boolean;
-    /** Request timeout in seconds */
-    requestTimeout?: number;
-    /** Enable connection draining */
-    connectionDraining?: boolean;
-    /** Connection draining timeout in seconds */
-    connectionDrainingTimeout?: number;
-    /** Custom health probe hostname */
-    healthProbeHostname?: string;
-    /** Custom health probe port */
-    healthProbePort?: number;
-    /** Custom health probe path */
-    healthProbePath?: string;
-    /** Accepted HTTP status codes for health probe */
-    healthProbeStatusCodes?: string;
-    /** Health probe interval in seconds */
-    healthProbeInterval?: number;
-    /** Health probe timeout in seconds */
-    healthProbeTimeout?: number;
-    /** Health probe unhealthy threshold */
-    healthProbeUnhealthyThreshold?: number;
-    /**
-     * Additional hostnames for multisite listener
-     * @security Validate hostname format to prevent injection attacks
-     */
-    hostnameExtension?: string[];
-    /**
-     * WAF policy resource ID for path-based protection
-     * @security Validate resource ID format to prevent path traversal attacks
-     */
-    wafPolicyForPath?: string;
-    /**
-     * Application Gateway SSL certificate name
-     * @security Ensure certificate exists and is properly configured
-     */
-    appgwSslCertificate?: string;
-    /** Application Gateway SSL profile name */
-    appgwSslProfile?: string;
-    /** Trusted root certificate names for end-to-end SSL */
-    appgwTrustedRootCertificate?: string[];
-    /** Rewrite rule set name */
-    rewriteRuleSet?: string;
-    /** Rule priority for request routing */
-    rulePriority?: number;
-    /** Labels to apply to the Ingress */
-    labels?: Record<string, string>;
-    /** Additional annotations to apply to the Ingress */
-    annotations?: Record<string, string>;
-}
-export interface VerticalPodAutoscalerSpec {
-    name: string;
-    targetRef: {
-        apiVersion: string;
-        kind: 'Deployment' | 'StatefulSet' | 'ReplicaSet' | 'DaemonSet' | 'Job' | 'CronJob';
-        name: string;
-    };
-    updatePolicy?: VerticalPodAutoscalerUpdatePolicy;
-    resourcePolicy?: {
-        containerPolicies?: VerticalPodAutoscalerResourcePolicy[];
-    };
-    recommenders?: Array<{
-        name: string;
-    }>;
-    labels?: Record<string, string>;
-    annotations?: Record<string, string>;
-}
-/**
- * NetworkPolicy peer specification
- *
- * @interface NetworkPolicyPeer
- * @since 1.0.0
- */
-export interface NetworkPolicyPeer {
-    podSelector?: {
-        matchLabels?: Record<string, string>;
-        matchExpressions?: Array<{
-            key: string;
-            operator: 'In' | 'NotIn' | 'Exists' | 'DoesNotExist';
-            values?: string[];
-        }>;
-    };
-    namespaceSelector?: {
-        matchLabels?: Record<string, string>;
-        matchExpressions?: Array<{
-            key: string;
-            operator: 'In' | 'NotIn' | 'Exists' | 'DoesNotExist';
-            values?: string[];
-        }>;
-    };
-    ipBlock?: {
-        cidr: string;
-        except?: string[];
-    };
-}
-/**
- * NetworkPolicy port specification
- *
- * @interface NetworkPolicyPort
- * @since 1.0.0
- */
-export interface NetworkPolicyPort {
-    protocol?: 'TCP' | 'UDP' | 'SCTP';
-    port?: number | string;
-    endPort?: number;
-}
-/**
- * NetworkPolicy ingress rule specification
- *
- * @interface NetworkPolicyIngressRule
- * @since 1.0.0
- */
-export interface NetworkPolicyIngressRule {
-    from?: NetworkPolicyPeer[];
-    ports?: NetworkPolicyPort[];
-}
-/**
- * NetworkPolicy egress rule specification
- *
- * @interface NetworkPolicyEgressRule
- * @since 1.0.0
- */
-export interface NetworkPolicyEgressRule {
-    to?: NetworkPolicyPeer[];
-    ports?: NetworkPolicyPort[];
-}
-/**
- * NetworkPolicy specification
- *
- * @interface NetworkPolicySpec
- * @since 1.0.0
- */
-export interface NetworkPolicySpec {
-    name: string;
-    podSelector?: {
-        matchLabels?: Record<string, string>;
-        matchExpressions?: Array<{
-            key: string;
-            operator: 'In' | 'NotIn' | 'Exists' | 'DoesNotExist';
-            values?: string[];
-        }>;
-    };
-    policyTypes?: Array<'Ingress' | 'Egress'>;
-    ingress?: NetworkPolicyIngressRule[];
-    egress?: NetworkPolicyEgressRule[];
-    labels?: Record<string, string>;
-    annotations?: Record<string, string>;
-}
-/**
- * Karpenter NodePool requirement for node selection
- *
- * @interface KarpenterNodeRequirement
- * @since 1.0.0
- */
-/**
- * Karpenter node requirement specification
- *
- * @interface KarpenterNodeRequirement
- * @since 2.3.0
- */
-export interface KarpenterNodeRequirement {
-    /** Label key to match against */
-    key: string;
-    /** Operator for matching */
-    operator: 'In' | 'NotIn' | 'Exists' | 'DoesNotExist' | 'Gt' | 'Lt';
-    /** Values to match */
-    values?: string[];
-}
-/**
- * Karpenter NodePool disruption configuration
- *
- * @interface KarpenterNodeDisruption
- * @since 1.0.0
- */
-/**
- * Karpenter node disruption configuration
- *
- * @interface KarpenterNodeDisruption
- * @since 2.3.0
- */
-export interface KarpenterNodeDisruption {
-    /** Policy for node consolidation */
-    consolidationPolicy?: 'WhenEmpty' | 'WhenUnderutilized';
-    /** Time to wait before consolidating empty nodes */
-    consolidateAfter?: string;
-    /** Maximum node lifetime before replacement */
-    expireAfter?: string;
-}
-/**
- * Karpenter NodePool specification
- *
- * @interface KarpenterNodePoolSpec
- * @since 1.0.0
- */
-/**
- * Karpenter NodePool specification
- *
- * @interface KarpenterNodePoolSpec
- * @since 2.3.0
- */
-export interface KarpenterNodePoolSpec {
-    /** Name of the NodePool */
-    name: string;
-    /** Node requirements for instance selection */
-    requirements?: KarpenterNodeRequirement[];
-    /** Resource limits for the NodePool */
-    limits?: {
-        cpu?: string;
-        memory?: string;
-    };
-    /** Node disruption configuration */
-    disruption?: KarpenterNodeDisruption;
-    /** Reference to NodeClass for AWS-specific configuration */
-    nodeClassRef: {
-        /** API group (default: eks.amazonaws.com) */
-        group?: string;
-        /** Resource kind (default: NodeClass) */
-        kind?: string;
-        /** NodeClass name */
-        name: string;
-    };
-    /** Taints to apply to provisioned nodes */
-    taints?: Array<{
-        key: string;
-        value?: string;
-        effect: 'NoSchedule' | 'PreferNoSchedule' | 'NoExecute';
-    }>;
-    /** Labels to apply to the NodePool */
-    labels?: Record<string, string>;
-    /** Annotations to apply to the NodePool */
-    annotations?: Record<string, string>;
-}
-/**
- * Karpenter block device mapping for EC2 instances
- *
- * @interface KarpenterBlockDeviceMapping
- * @since 1.0.0
- */
-/**
- * Karpenter block device mapping specification
- *
- * @interface KarpenterBlockDeviceMapping
- * @since 2.3.0
- */
-export interface KarpenterBlockDeviceMapping {
-    /** Device name (e.g., /dev/xvda) */
-    deviceName: string;
-    /** EBS configuration */
-    ebs?: {
-        /** Volume size in GB */
-        volumeSize?: string;
-        /** Volume type */
-        volumeType?: 'gp2' | 'gp3' | 'io1' | 'io2' | 'sc1' | 'st1';
-        /** Enable encryption */
-        encrypted?: boolean;
-        /** Delete on termination */
-        deleteOnTermination?: boolean;
-        /** IOPS for io1/io2 volumes */
-        iops?: number;
-        /** Throughput for gp3 volumes */
-        throughput?: number;
-    };
-}
-/**
- * Karpenter subnet selector term
- *
- * @interface KarpenterSubnetSelectorTerm
- * @since 1.0.0
- */
-/**
- * Karpenter subnet selector term specification
- *
- * @interface KarpenterSubnetSelectorTerm
- * @since 2.3.0
- */
-export interface KarpenterSubnetSelectorTerm {
-    /** Subnet tags for selection */
-    tags?: Record<string, string>;
-    /** Specific subnet ID */
-    id?: string;
-}
-/**
- * Karpenter security group selector term
- *
- * @interface KarpenterSecurityGroupSelectorTerm
- * @since 1.0.0
- */
-/**
- * Karpenter security group selector term specification
- *
- * @interface KarpenterSecurityGroupSelectorTerm
- * @since 2.3.0
- */
-export interface KarpenterSecurityGroupSelectorTerm {
-    /** Security group tags for selection */
-    tags?: Record<string, string>;
-    /** Specific security group ID */
-    id?: string;
-}
-/**
- * Karpenter EC2 NodeClass specification
- *
- * @interface KarpenterEC2NodeClassSpec
- * @since 1.0.0
- */
-/**
- * Karpenter EC2 NodeClass specification
- *
- * @interface KarpenterEC2NodeClassSpec
- * @since 2.3.0
- */
-export interface KarpenterEC2NodeClassSpec {
-    /** Name of the EC2 NodeClass */
-    name: string;
-    /** AMI family for node instances */
-    amiFamily?: 'AL2' | 'AL2023' | 'Bottlerocket' | 'Ubuntu' | 'Windows2019' | 'Windows2022' | 'Custom';
-    /** Instance store policy */
-    instanceStorePolicy?: 'NVME' | 'RAID0';
-    /** User data script for instance initialization */
-    userData?: string;
-    /** Subnet selection terms */
-    subnetSelectorTerms?: KarpenterSubnetSelectorTerm[];
-    /** Security group selection terms */
-    securityGroupSelectorTerms?: KarpenterSecurityGroupSelectorTerm[];
-    /** IAM role for instances */
-    role?: string;
-    /** Instance profile name */
-    instanceProfile?: string;
-    /** EC2 metadata options */
-    metadataOptions?: {
-        /** HTTP endpoint state */
-        httpEndpoint?: 'enabled' | 'disabled';
-        /** IPv6 endpoint state */
-        httpProtocolIPv6?: 'enabled' | 'disabled';
-        /** Hop limit for metadata requests */
-        httpPutResponseHopLimit?: number;
-        /** Token requirement */
-        httpTokens?: 'required' | 'optional';
-    };
-    /** Block device mappings */
-    blockDeviceMappings?: KarpenterBlockDeviceMapping[];
-    /** Resource tags */
-    tags?: Record<string, string>;
-    /** Labels to apply to the NodeClass */
-    labels?: Record<string, string>;
-    /** Annotations to apply to the NodeClass */
-    annotations?: Record<string, string>;
-}
-/**
- * Karpenter disruption budget for controlling disruption rate.
- */
-/**
- * Karpenter disruption budget specification
- *
- * @interface KarpenterDisruptionBudget
- * @since 2.3.0
- */
-export interface KarpenterDisruptionBudget {
-    /** Schedule in cron format for when budget applies */
-    schedule?: string;
-    /** Duration the budget is active */
-    duration?: string;
-    /** Number or percentage of nodes that can be disrupted */
-    nodes?: string | number;
-    /** Reasons this budget applies to */
-    reasons?: Array<'Underutilized' | 'Empty' | 'Drifted' | 'Expired'>;
-}
-/**
- * Advanced disruption configuration for Karpenter NodePools.
- */
-/**
- * Karpenter advanced disruption configuration
- *
- * @interface KarpenterAdvancedDisruption
- * @since 2.3.0
- */
-export interface KarpenterAdvancedDisruption {
-    /** Consolidation policy */
-    consolidationPolicy?: 'WhenEmpty' | 'WhenEmptyOrUnderutilized';
-    /** Time to wait before consolidating */
-    consolidateAfter?: string;
-    /** Node expiration time */
-    expireAfter?: string;
-    /** Disruption budgets for rate limiting */
-    budgets?: KarpenterDisruptionBudget[];
-}
-/**
- * Configuration interface for Karpenter NodeClaim.
- * Represents an individual node request that Karpenter will fulfill.
- *
- * @see https://karpenter.sh/docs/concepts/nodeclaims/
- */
-/**
- * Karpenter NodeClaim specification
- *
- * @interface KarpenterNodeClaimSpec
- * @since 2.3.0
- */
-export interface KarpenterNodeClaimSpec {
-    /** Name of the NodeClaim */
-    name: string;
-    /** Node requirements for instance selection */
-    requirements?: KarpenterNodeRequirement[];
-    /** Reference to NodeClass for AWS-specific configuration */
-    nodeClassRef: {
-        /** API group (default: eks.amazonaws.com) */
-        group?: string;
-        /** Resource kind (default: NodeClass) */
-        kind?: string;
-        /** NodeClass name */
-        name: string;
-    };
-    /** Taints to apply to the node */
-    taints?: Array<{
-        key: string;
-        value?: string;
-        effect: 'NoSchedule' | 'PreferNoSchedule' | 'NoExecute';
-    }>;
-    /** Startup taints that will be removed after node initialization */
-    startupTaints?: Array<{
-        key: string;
-        value?: string;
-        effect: 'NoSchedule' | 'PreferNoSchedule' | 'NoExecute';
-    }>;
-    /** Node expiration time */
-    expireAfter?: string;
-    /** Termination grace period */
-    terminationGracePeriod?: string;
-    /** Labels to apply to the NodeClaim */
-    labels?: Record<string, string>;
-    /** Annotations to apply to the NodeClaim */
-    annotations?: Record<string, string>;
-}
-/**
- * Topology spread constraint for advanced scheduling.
- */
-/**
- * Karpenter topology spread constraint specification
- *
- * @interface KarpenterTopologySpreadConstraint
- * @since 2.3.0
- */
-export interface KarpenterTopologySpreadConstraint {
-    /** Maximum skew between zones/domains */
-    maxSkew: number;
-    /** Topology key (e.g., topology.kubernetes.io/zone) */
-    topologyKey: string;
-    /** What to do when constraint cannot be satisfied */
-    whenUnsatisfiable: 'DoNotSchedule' | 'ScheduleAnyway';
-    /** Label selector for pods to consider */
-    labelSelector?: {
-        matchLabels?: Record<string, string>;
-        matchExpressions?: Array<{
-            key: string;
-            operator: 'In' | 'NotIn' | 'Exists' | 'DoesNotExist';
-            values?: string[];
-        }>;
-    };
-    /** Minimum domains required */
-    minDomains?: number;
-}
-/**
- * Node affinity for advanced scheduling constraints.
- */
-/**
- * Karpenter node affinity specification
- *
- * @interface KarpenterNodeAffinity
- * @since 2.3.0
- */
-export interface KarpenterNodeAffinity {
-    /** Required node affinity */
-    requiredDuringSchedulingIgnoredDuringExecution?: {
-        nodeSelectorTerms: Array<{
-            matchExpressions?: Array<{
-                key: string;
-                operator: 'In' | 'NotIn' | 'Exists' | 'DoesNotExist' | 'Gt' | 'Lt';
-                values?: string[];
-            }>;
-            matchFields?: Array<{
-                key: string;
-                operator: 'In' | 'NotIn' | 'Exists' | 'DoesNotExist' | 'Gt' | 'Lt';
-                values?: string[];
-            }>;
-        }>;
-    };
-    /** Preferred node affinity */
-    preferredDuringSchedulingIgnoredDuringExecution?: Array<{
-        weight: number;
-        preference: {
-            matchExpressions?: Array<{
-                key: string;
-                operator: 'In' | 'NotIn' | 'Exists' | 'DoesNotExist' | 'Gt' | 'Lt';
-                values?: string[];
-            }>;
-            matchFields?: Array<{
-                key: string;
-                operator: 'In' | 'NotIn' | 'Exists' | 'DoesNotExist' | 'Gt' | 'Lt';
-                values?: string[];
-            }>;
-        };
-    }>;
-}
-/**
- * Configuration interface for advanced Karpenter scheduling.
- * Provides fine-grained control over pod placement and node selection.
- */
-/**
- * Karpenter scheduling specification
- *
- * @interface KarpenterSchedulingSpec
- * @since 2.3.0
- */
-export interface KarpenterSchedulingSpec {
-    /** Name of the scheduling configuration */
-    name: string;
-    /** Node selector for basic node selection */
-    nodeSelector?: Record<string, string>;
-    /** Node affinity for advanced node selection */
-    nodeAffinity?: KarpenterNodeAffinity;
-    /** Topology spread constraints */
-    topologySpreadConstraints?: KarpenterTopologySpreadConstraint[];
-    /** Tolerations for taints */
-    tolerations?: Array<{
-        key?: string;
-        operator?: 'Exists' | 'Equal';
-        value?: string;
-        effect?: 'NoSchedule' | 'PreferNoSchedule' | 'NoExecute';
-        tolerationSeconds?: number;
-    }>;
-    /** Priority class for pod scheduling */
-    priorityClassName?: string;
-    /** Scheduler name */
-    schedulerName?: string;
-    /** Labels to apply to the scheduling configuration */
-    labels?: Record<string, string>;
-    /** Annotations to apply to the scheduling configuration */
-    annotations?: Record<string, string>;
-}
-/**
- * Configuration properties for Rutter
- *
- * @interface RutterProps
- * @since 1.0.0
- */
-export interface RutterProps {
-    /** Helm chart metadata */
-    meta: HelmChartMeta;
-    /** Default values for values.yaml */
-    defaultValues?: Record<string, unknown>;
-    /** Environment-specific values */
-    envValues?: Record<string, Record<string, unknown>>;
-    /** Helm helpers content for templates/_helpers.tpl */
-    helpersTpl?: string | HelperDefinition[];
-    /** NOTES.txt content */
-    notesTpl?: string;
-    /** JSON schema for values validation */
-    valuesSchema?: Record<string, unknown>;
-    /** Custom name for generated manifest file */
-    manifestName?: string;
-    /** Combine all resources into single manifest file */
-    singleManifestFile?: boolean;
-}
-/**
- * Rutter - Main class for building Kubernetes manifests and Helm charts
- *
- * Rutter (maritime pilot) guides the generation of Kubernetes resources
- * using cdk8s and outputs complete Helm charts with proper templating.
- *
- * @class Rutter
- * @since 1.0.0
- *
- * @example
- * ```typescript
- * const rutter = new Rutter({
- *   meta: { name: 'my-app', version: '1.0.0' },
- *   defaultValues: { replicas: 3 }
- * });
- *
- * rutter.addDeployment({
- *   name: 'web',
- *   image: 'nginx:1.21',
- *   replicas: 3
- * });
- *
- * rutter.write('./charts/my-app');
- * ```
- */
-export declare class Rutter {
-    private readonly props;
-    private readonly app;
-    private readonly chart;
-    private readonly assets;
-    private valueOverrides;
-    /**
-     * Creates a new Rutter instance
-     *
-     * @param {RutterProps} props - Configuration properties
-     * @since 1.0.0
-     */
-    constructor(props: RutterProps);
-    /**
-     * Sets dynamic value overrides for Helm values
-     *
-     * Used by CLI --set flags to override default values at runtime.
-     *
-     * @param {Record<string, string>} overrides - Key-value pairs to override
-     *
-     * @example
-     * ```typescript
-     * rutter.setValues({
-     *   'image.tag': 'v2.0.0',
-     *   'replicas': '5'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    setValues(overrides: Record<string, string>): void;
-    /**
-     * Apply value overrides to nested object using dot notation
-     */
-    private applyOverrides;
-    private setNestedValue;
-    private parseValue;
-    private static readonly LABEL_NAME;
-    private static readonly LABEL_INSTANCE;
-    private static readonly HELPER_NAME;
-    private static readonly NETWORKING_API_VERSION;
-    private static readonly STORAGE_API_VERSION;
-    private static readonly AZURE_DISK_CSI_DRIVER;
-    private static readonly AZURE_DISK_PROVISIONER_ANNOTATION;
-    private static readonly AZURE_FILES_CSI_DRIVER;
-    /**
-     * Adds a Kubernetes Deployment to the chart
-     *
-     * @param {DeploymentSpec} spec - Deployment specification
-     * @returns {ApiObject} The created Deployment object
-     *
-     * @example
-     * ```typescript
-     * rutter.addDeployment({
-     *   name: 'web-app',
-     *   image: 'nginx:1.21',
-     *   replicas: 3,
-     *   containerPort: 80,
-     *   env: { NODE_ENV: 'production' }
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addDeployment(spec: DeploymentSpec): ApiObject;
-    /**
-     * Adds a Kubernetes Service to the chart
-     *
-     * @param {ServiceSpec} spec - Service specification
-     * @returns {ApiObject} The created Service object
-     *
-     * @example
-     * ```typescript
-     * rutter.addService({
-     *   name: 'web-service',
-     *   ports: [{ port: 80, targetPort: 8080 }],
-     *   type: 'LoadBalancer'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addService(spec: ServiceSpec): ApiObject;
-    addReplicaSet(spec: ReplicaSetSpec): ApiObject;
-    /**
-     * Adds a Kubernetes Job to the chart
-     *
-     * @param {JobSpec} spec - Job specification
-     * @returns {ApiObject} The created Job object
-     *
-     * @example
-     * ```typescript
-     * rutter.addJob({
-     *   name: 'data-migration',
-     *   image: 'migrate:latest',
-     *   command: ['./migrate.sh'],
-     *   backoffLimit: 3
-     * });
-     * ```
-     *
-     * @since 2.1.0
-     */
-    addJob(spec: JobSpec): ApiObject;
-    /**
-     * Adds a Kubernetes CronJob to the chart
-     *
-     * @param {CronJobSpec} spec - CronJob specification
-     * @returns {ApiObject} The created CronJob object
-     *
-     * @example
-     * ```typescript
-     * rutter.addCronJob({
-     *   name: 'backup-job',
-     *   schedule: '0 2 * * *',
-     *   image: 'backup:latest',
-     *   command: ['./backup.sh']
-     * });
-     * ```
-     *
-     * @since 2.1.0
-     */
-    addCronJob(spec: CronJobSpec): ApiObject;
-    /**
-     * Adds a Kubernetes Ingress to the chart
-     *
-     * @param {IngressSpec} spec - Ingress specification
-     * @returns {ApiObject} The created Ingress object
-     *
-     * @example
-     * ```typescript
-     * rutter.addIngress({
-     *   name: 'web-ingress',
-     *   rules: [{
-     *     host: 'example.com',
-     *     paths: [{
-     *       path: '/',
-     *       pathType: 'Prefix',
-     *       backend: { service: { name: 'web-service', port: { number: 80 } } }
-     *     }]
-     *   }]
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addIngress(spec: IngressSpec): ApiObject;
-    addPersistentVolume(spec: PersistentVolumeSpec): ApiObject;
-    private optimizePVForCloud;
-    addPersistentVolumeClaim(spec: PersistentVolumeClaimSpec): ApiObject;
-    private validatePVCAccessModes;
-    /**
-     * Adds a Kubernetes ConfigMap to the chart
-     *
-     * @param {ConfigMapSpec} spec - ConfigMap specification
-     * @returns {ApiObject} The created ConfigMap object
-     *
-     * @example
-     * ```typescript
-     * rutter.addConfigMap({
-     *   name: 'app-config',
-     *   data: {
-     *     'config.yaml': 'key: value',
-     *     'app.properties': 'debug=true'
-     *   }
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addConfigMap(spec: ConfigMapSpec): ApiObject;
-    /**
-     * Adds a Kubernetes Secret to the chart
-     *
-     * @param {SecretSpec} spec - Secret specification
-     * @returns {ApiObject} The created Secret object
-     *
-     * @example
-     * ```typescript
-     * rutter.addSecret({
-     *   name: 'app-secrets',
-     *   stringData: {
-     *     'username': 'admin',
-     *     'password': 'secret123'
-     *   }
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addSecret(spec: SecretSpec): ApiObject;
-    /**
-     * Adds a Kubernetes ServiceAccount to the chart
-     *
-     * @param {ServiceAccountSpec} spec - ServiceAccount specification
-     * @returns {ApiObject} The created ServiceAccount object
-     *
-     * @example
-     * ```typescript
-     * rutter.addServiceAccount({
-     *   name: 'app-sa',
-     *   awsRoleArn: 'arn:aws:iam::123456789012:role/MyRole',
-     *   automountServiceAccountToken: true
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addServiceAccount(spec: ServiceAccountSpec): ApiObject;
-    private buildServiceAccountAnnotations;
-    private addAWSIRSAAnnotations;
-    private addAzureWorkloadIdentityAnnotations;
-    private addGCPWorkloadIdentityAnnotations;
-    /**
-     * Adds a Kubernetes HorizontalPodAutoscaler to the chart
-     *
-     * @param {HorizontalPodAutoscalerSpec} spec - HPA specification
-     * @returns {ApiObject} The created HPA object
-     *
-     * @example
-     * ```typescript
-     * rutter.addHorizontalPodAutoscaler({
-     *   name: 'web-hpa',
-     *   scaleTargetRef: {
-     *     apiVersion: 'apps/v1',
-     *     kind: 'Deployment',
-     *     name: 'web-app'
-     *   },
-     *   minReplicas: 2,
-     *   maxReplicas: 10
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addHorizontalPodAutoscaler(spec: HorizontalPodAutoscalerSpec): ApiObject;
-    addVerticalPodAutoscaler(spec: VerticalPodAutoscalerSpec): ApiObject;
-    addPodDisruptionBudget(spec: PodDisruptionBudgetSpec): ApiObject;
-    addAWSEBSStorageClass(spec: AWSEBSStorageClassSpec): ApiObject;
-    addAWSEBSPersistentVolumeClaim(spec: AWSEBSPersistentVolumeClaimSpec): ApiObject;
-    addAWSEFSStorageClass(spec: AWSEFSStorageClassSpec): ApiObject;
-    addAWSEFSPersistentVolume(spec: AWSEFSPersistentVolumeSpec): ApiObject;
-    addAWSEFSPersistentVolumeClaim(spec: AWSEFSPersistentVolumeClaimSpec): ApiObject;
-    addAWSALBIngress(spec: AWSALBIngressSpec): ApiObject;
-    private buildALBAnnotations;
-    private addOptionalALBAnnotations;
-    private addHealthCheckAnnotations;
-    private addTagsAnnotation;
-    /**
-     * Add Azure Application Gateway Ingress Controller (AGIC) Ingress.
-     * Creates an Ingress resource with AGIC-specific annotations for AKS deployments.
-     *
-     * @param spec - AGIC Ingress specification
-     * @returns The created Ingress ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAzureAGICIngress({
-     *   name: 'app-ingress',
-     *   rules: [{
-     *     host: 'app.example.com',
-     *     paths: [{
-     *       path: '/',
-     *       pathType: 'Prefix',
-     *       backend: { service: { name: 'app-service', port: { number: 80 } } }
-     *     }]
-     *   }],
-     *   sslRedirect: true,
-     *   backendProtocol: 'https',
-     *   healthProbePath: '/health'
-     * });
-     * ```
-     */
-    addAzureAGICIngress(spec: AzureAGICIngressSpec): ApiObject;
-    private buildAGICAnnotations;
-    private addAGICPathAnnotations;
-    private addAGICProtocolAnnotations;
-    private addAGICHealthProbeAnnotations;
-    private addAGICConnectionAnnotations;
-    private addAGICSecurityAnnotations;
-    private addAGICAdvancedAnnotations;
-    addAWSIRSAServiceAccount(spec: AWSIRSAServiceAccountSpec): ApiObject;
-    addAWSSecretProviderClass(spec: AWSSecretProviderClassSpec): ApiObject;
-    /**
-     * Add Azure Workload Identity ServiceAccount.
-     * Creates a ServiceAccount with Azure Workload Identity annotations for secure authentication.
-     *
-     * @param spec - Azure Workload Identity ServiceAccount specification
-     * @returns The created ServiceAccount ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAzureWorkloadIdentityServiceAccount({
-     *   name: 'workload-identity-sa',
-     *   clientId: '12345678-1234-1234-1234-123456789012',
-     *   tenantId: '87654321-4321-4321-4321-210987654321',
-     *   tokenExpiration: 3600
-     * });
-     * ```
-     */
-    addAzureWorkloadIdentityServiceAccount(spec: AzureWorkloadIdentityServiceAccountSpec): ApiObject;
-    /**
-     * Add Azure Key Vault SecretProviderClass.
-     * Creates a SecretProviderClass for mounting secrets from Azure Key Vault using CSI driver.
-     *
-     * @param spec - Azure Key Vault SecretProviderClass specification
-     * @returns The created SecretProviderClass ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAzureKeyVaultSecretProviderClass({
-     *   name: 'app-secrets',
-     *   keyVaultName: 'my-keyvault',
-     *   tenantId: '87654321-4321-4321-4321-210987654321',
-     *   objects: [
-     *     { objectName: 'database-password', objectType: 'secret' },
-     *     { objectName: 'api-key', objectType: 'secret', objectAlias: 'API_KEY' }
-     *   ],
-     *   userAssignedIdentityID: '12345678-1234-1234-1234-123456789012'
-     * });
-     * ```
-     */
-    addAzureKeyVaultSecretProviderClass(spec: AzureKeyVaultSecretProviderClassSpec): ApiObject;
-    /**
-     * Add Azure Files StorageClass.
-     * Creates a StorageClass for dynamic provisioning of Azure Files volumes.
-     *
-     * @param spec - Azure Files StorageClass specification
-     * @returns The created StorageClass ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAzureFilesStorageClass({
-     *   name: 'azure-files-premium',
-     *   skuName: 'Premium_LRS',
-     *   protocol: 'smb',
-     *   allowSharedAccess: true
-     * });
-     * ```
-     */
-    addAzureFilesStorageClass(spec: AzureFilesStorageClassSpec): ApiObject;
-    /**
-     * Add Azure Files PersistentVolume.
-     * Creates a PersistentVolume for static Azure Files volume provisioning.
-     *
-     * @param spec - Azure Files PersistentVolume specification
-     * @returns The created PersistentVolume ApiObject
-     */
-    addAzureFilesPersistentVolume(spec: AzureFilesPersistentVolumeSpec): ApiObject;
-    /**
-     * Add Azure Files PersistentVolumeClaim.
-     * Creates a PersistentVolumeClaim for Azure Files storage.
-     *
-     * @param spec - Azure Files PersistentVolumeClaim specification
-     * @returns The created PersistentVolumeClaim ApiObject
-     */
-    addAzureFilesPersistentVolumeClaim(spec: AzureFilesPersistentVolumeClaimSpec): ApiObject;
-    /**
-     * Add Azure Container Registry ServiceAccount.
-     * Creates a ServiceAccount configured for ACR access.
-     *
-     * @param spec - Azure ACR ServiceAccount specification
-     * @returns The created ServiceAccount ApiObject
-     */
-    addAzureACRServiceAccount(spec: AzureACRServiceAccountSpec): ApiObject;
-    addAzureDiskStorageClass(spec: AzureDiskStorageClassSpec): ApiObject;
-    private buildAzureDiskParameters;
-    private addOptionalAzureDiskParameters;
-    private addAzureDiskEncryptionParameters;
-    private addAzureDiskPerformanceParameters;
-    private validateAzureDiskNumericParameters;
-    private validateAzureDiskIOPS;
-    private validateAzureDiskThroughput;
-    private validateAzureDiskShares;
-    private validateAzureDiskSectorSize;
-    /**
-     * Format cloud resource tags for provider-specific string format.
-     * Provides basic validation and consistent formatting across cloud providers.
-     */
-    private formatCloudResourceTags;
-    /**
-     * Validate cloud resource tags with basic rules.
-     * Each cloud provider has specific validation, but these are common basics.
-     */
-    private validateCloudResourceTags;
-    addNetworkPolicy(spec: NetworkPolicySpec): ApiObject;
-    private static readonly EMPTY_POD_SELECTOR;
-    /**
-     * Create a deny-all ingress NetworkPolicy for the current namespace
-     */
-    addDenyAllIngressNetworkPolicy(name?: string): ApiObject;
-    /**
-     * Create a deny-all egress NetworkPolicy for the current namespace
-     */
-    addDenyAllEgressNetworkPolicy(name?: string): ApiObject;
-    /**
-     * Create a deny-all NetworkPolicy for both ingress and egress
-     */
-    addDenyAllNetworkPolicy(name?: string): ApiObject;
-    /**
-     * Allow traffic from specific pods to target pods on specific ports
-     */
-    addAllowFromPodsNetworkPolicy(spec: {
-        name: string;
-        targetPodSelector: Record<string, string>;
-        sourcePodSelector: Record<string, string>;
-        ports?: NetworkPolicyPort[];
-        labels?: Record<string, string>;
-        annotations?: Record<string, string>;
-    }): ApiObject;
-    /**
-     * Allow traffic from specific namespace to target pods
-     */
-    addAllowFromNamespaceNetworkPolicy(spec: {
-        name: string;
-        targetPodSelector: Record<string, string>;
-        sourceNamespaceSelector: Record<string, string>;
-        ports?: NetworkPolicyPort[];
-        labels?: Record<string, string>;
-        annotations?: Record<string, string>;
-    }): ApiObject;
-    private validateNetworkPolicyTypes;
-    private validatePolicyTypeValues;
-    private validatePolicyTypeRules;
-    private validateNetworkPolicyCIDRs;
-    private isValidCIDR;
-    private isValidIPv4;
-    private isValidPrefix;
-    private validateIngressCIDRs;
-    private validateEgressCIDRs;
-    private validatePeerCIDRs;
-    private validateAGICHealthProbeParams;
-    private validateAGICSecurityParams;
-    private isValidHostname;
-    private validateAGICAnnotationConsistency;
-    private buildAzureFilesParameters;
-    private buildAzureFilesPVCSISpec;
-    private buildPodEnvironment;
-    private buildJobSpec;
-    private buildJobPodTemplate;
-    private buildCronJobSpec;
-    private buildCronJobTemplate;
-    /**
-     * Validate Job specification for security and best practices
-     */
-    private validateJobSpec;
-    /**
-     * Validate CronJob specification for security and best practices
-     */
-    private validateCronJobSpec;
-    /**
-     * Validate cron schedule expression
-     */
-    private validateCronSchedule;
-    /**
-     * Sanitize environment variable names and values
-     */
-    private sanitizeEnvVar;
-    /**
-     * Get default resource limits for Jobs and CronJobs
-     */
-    private getDefaultResources;
-    /**
-     * Validate Azure Files parameters for security and compliance
-     */
-    private validateAzureFilesParameters;
-    /**
-     * Sanitize volume handle to ensure valid format for CSI driver
-     */
-    private sanitizeVolumeHandle;
-    /**
-     * Capture the YAML of an ApiObject or Construct into assets.
-     */
-    private capture;
-    /**
-     * Extract a meaningful name from a Kubernetes resource object
-     */
-    private getResourceName;
-    /**
-     * Adds a raw CRD manifest to the chart
-     *
-     * @param {string} yaml - YAML content of the CRD
-     * @param {string} [id='crd'] - Asset identifier
-     *
-     * @example
-     * ```typescript
-     * const crdYaml = `
-     * apiVersion: apiextensions.k8s.io/v1
-     * kind: CustomResourceDefinition
-     * metadata:
-     *   name: myresources.example.com
-     * `;
-     * rutter.addCrd(crdYaml, 'myresource-crd');
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addCrd(yaml: string, id?: string): void;
-    /**
-     * Add Karpenter NodePool for intelligent node provisioning.
-     * Creates a NodePool resource that defines compute requirements and lifecycle policies.
-     *
-     * @param spec - Karpenter NodePool specification
-     * @returns The created NodePool ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addKarpenterNodePool({
-     *   name: 'general-purpose',
-     *   requirements: [
-     *     { key: 'eks.amazonaws.com/instance-category', operator: 'In', values: ['c', 'm', 'r'] },
-     *     { key: 'kubernetes.io/arch', operator: 'In', values: ['amd64'] }
-     *   ],
-     *   limits: { cpu: '1000', memory: '1000Gi' },
-     *   nodeClassRef: { name: 'default' }
-     * });
-     * ```
-     *
-     * @since 2.3.0
-     */
-    addKarpenterNodePool(spec: KarpenterNodePoolSpec): ApiObject;
-    /**
-     * Add Karpenter EC2 NodeClass for AWS-specific node configuration.
-     * Creates a NodeClass resource that defines EC2 instance settings and networking.
-     *
-     * @param spec - Karpenter EC2 NodeClass specification
-     * @returns The created NodeClass ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addKarpenterEC2NodeClass({
-     *   name: 'default',
-     *   amiFamily: 'AL2023',
-     *   subnetSelectorTerms: [{ tags: { 'karpenter.sh/discovery': 'my-cluster' } }],
-     *   securityGroupSelectorTerms: [{ tags: { 'karpenter.sh/discovery': 'my-cluster' } }],
-     *   role: 'KarpenterNodeInstanceProfile'
-     * });
-     * ```
-     *
-     * @since 2.3.0
-     */
-    addKarpenterEC2NodeClass(spec: KarpenterEC2NodeClassSpec): ApiObject;
-    /**
-     * Validate Karpenter NodePool specification
-     */
-    private validateKarpenterNodePoolSpec;
-    private validateNodeClassRef;
-    private validateNodePoolRequirements;
-    private validateNodePoolLimits;
-    private validateNodePoolDisruption;
-    /**
-     * Validate Karpenter EC2 NodeClass specification
-     */
-    private validateKarpenterEC2NodeClassSpec;
-    private validateNodeClassSelectors;
-    private validateNodeClassBlockDevices;
-    private validateNodeClassMetadataOptions;
-    /**
-     * Validate Kubernetes resource quantity format (e.g., "100m", "1Gi")
-     */
-    private isValidResourceQuantity;
-    /**
-     * Validate duration format (e.g., "30s", "5m", "1h")
-     */
-    private isValidDuration;
-    /**
-     * Validate storage size format (e.g., "20", "100Gi")
-     */
-    private isValidStorageSize;
-    /**
-     * Add Karpenter NodeClaim for individual node provisioning.
-     * Creates a NodeClaim resource that represents a request for a single node.
-     *
-     * @param spec - Karpenter NodeClaim specification
-     * @returns The created NodeClaim ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addKarpenterNodeClaim({
-     *   name: 'high-memory-node',
-     *   requirements: [
-     *     { key: 'eks.amazonaws.com/instance-category', operator: 'In', values: ['r'] },
-     *     { key: 'eks.amazonaws.com/instance-cpu', operator: 'In', values: ['16', '32'] }
-     *   ],
-     *   nodeClassRef: { name: 'memory-optimized' },
-     *   expireAfter: '24h'
-     * });
-     * ```
-     *
-     * @since 2.3.0
-     */
-    addKarpenterNodeClaim(spec: KarpenterNodeClaimSpec): ApiObject;
-    /**
-     * Add advanced Karpenter scheduling configuration.
-     * Creates scheduling constraints for fine-grained pod placement control.
-     *
-     * @param spec - Karpenter scheduling specification
-     * @returns Configuration object for use in pod specs
-     *
-     * @example
-     * ```typescript
-     * const schedulingConfig = rutter.addKarpenterScheduling({
-     *   name: 'zone-spread-scheduling',
-     *   topologySpreadConstraints: [{
-     *     maxSkew: 1,
-     *     topologyKey: 'topology.kubernetes.io/zone',
-     *     whenUnsatisfiable: 'DoNotSchedule',
-     *     labelSelector: { matchLabels: { app: 'web' } }
-     *   }],
-     *   nodeAffinity: {
-     *     requiredDuringSchedulingIgnoredDuringExecution: {
-     *       nodeSelectorTerms: [{
-     *         matchExpressions: [{
-     *           key: 'eks.amazonaws.com/instance-category',
-     *           operator: 'In',
-     *           values: ['c', 'm']
-     *         }]
-     *       }]
-     *     }
-     *   }
-     * });
-     * ```
-     *
-     * @since 2.3.0
-     */
-    addKarpenterScheduling(spec: KarpenterSchedulingSpec): {
-        schedulerName?: string;
-        priorityClassName?: string;
-        tolerations?: {
-            key?: string;
-            operator?: "Exists" | "Equal";
-            value?: string;
-            effect?: "NoSchedule" | "PreferNoSchedule" | "NoExecute";
-            tolerationSeconds?: number;
-        }[];
-        topologySpreadConstraints?: KarpenterTopologySpreadConstraint[];
-        affinity?: {
-            nodeAffinity: KarpenterNodeAffinity;
-        };
-        nodeSelector?: Record<string, string>;
-    };
-    /**
-     * Create advanced disruption configuration for NodePools.
-     * Provides fine-grained control over when and how nodes are disrupted.
-     *
-     * @param spec - Advanced disruption specification
-     * @returns Disruption configuration object
-     *
-     * @example
-     * ```typescript
-     * const disruptionConfig = rutter.createKarpenterDisruption({
-     *   consolidationPolicy: 'WhenEmptyOrUnderutilized',
-     *   consolidateAfter: '30s',
-     *   expireAfter: '2160h', // 90 days
-     *   budgets: [{
-     *     schedule: '0 9 * * mon-fri', // Business hours
-     *     duration: '8h',
-     *     nodes: '0', // No disruption during business hours
-     *     reasons: ['Underutilized', 'Empty']
-     *   }]
-     * });
-     * ```
-     *
-     * @since 2.3.0
-     */
-    createKarpenterDisruption(spec: KarpenterAdvancedDisruption): {
-        budgets?: KarpenterDisruptionBudget[];
-        expireAfter?: string;
-        consolidateAfter?: string;
-        consolidationPolicy?: "WhenEmpty" | "WhenEmptyOrUnderutilized";
-    };
-    /**
-     * Validate Karpenter NodeClaim specification
-     */
-    private validateKarpenterNodeClaimSpec;
-    /**
-     * Validate Karpenter scheduling specification
-     */
-    private validateKarpenterSchedulingSpec;
-    private validateTopologySpreadConstraints;
-    private validateSchedulingTolerations;
-    /**
-     * Validate Karpenter disruption specification
-     */
-    private validateKarpenterDisruptionSpec;
-    private validateDisruptionDurations;
-    private validateDisruptionBudgets;
-    /**
-     * Synthesizes the cdk8s app and writes a complete Helm chart
-     *
-     * Generates all Kubernetes manifests, applies Helm templating,
-     * and writes the complete chart structure to the output directory.
-     *
-     * @param {string} outDir - Output directory for the Helm chart
-     * @throws {Error} If synthesis or writing fails
-     *
-     * @example
-     * ```typescript
-     * rutter.write('./charts/my-app');
-     * // Creates: ./charts/my-app/Chart.yaml, values.yaml, templates/, etc.
-     * ```
-     *
-     * @since 1.0.0
-     */
-    write(outDir: string): void;
-}
-//# sourceMappingURL=Rutter.d.ts.map