timonel 2.8.0-beta.4 → 2.8.0

package/dist/lib/rutter.d.ts

@@ -1,16 +1,10 @@
+import { ApiObject } from 'cdk8s';
 import type { ChartProps } from 'cdk8s';
 import type { Construct } from 'constructs';
-import type { ApiObject } from 'cdk8s';
-import type { DeploymentSpec, DaemonSetSpec, StatefulSetSpec, RoleSpec, ClusterRoleSpec, RoleBindingSpec, ClusterRoleBindingSpec, JobSpec, ServiceSpec, ConfigMapSpec, SecretSpec, ServiceAccountSpec } from './resources/core/coreResources.js';
-import type { PersistentVolumeSpec, PersistentVolumeClaimSpec, StorageClassSpec } from './resources/core/storageResources.js';
-import type { AWSEBSStorageClassSpec, AWSEFSStorageClassSpec, AWSIRSAServiceAccountSpec, AWSECRServiceAccountSpec, AWSALBIngressSpec } from './resources/cloud/aws/awsResources.js';
-import type { AzureDiskStorageClassSpec, AzureFileStorageClassSpec, AzureAGICIngressSpec, AzureKeyVaultSecretProviderClassSpec, AzureACRServiceAccountSpec } from './resources/cloud/azure/azureResources.js';
-import type { GCPPersistentDiskStorageClassSpec, GCPFilestoreStorageClassSpec, GCPGCEIngressSpec, GCPWorkloadIdentityServiceAccountSpec, GCPArtifactRegistryServiceAccountSpec } from './resources/cloud/gcp/gcpResources.js';
-import type { HorizontalPodAutoscalerSpec, VerticalPodAutoscalerSpec, CronJobSpec } from './resources/autoscaling/autoscalingResources.js';
-import type { NetworkPolicySpec, IngressSpec } from './resources/network/networkResources.js';
-import type { KarpenterNodePoolSpec, KarpenterNodeClaimSpec, KarpenterEC2NodeClassSpec } from './resources/cloud/aws/karpenterResources.js';
+import type { ServiceAccount, Ingress } from 'cdk8s-plus-33';
+import type { AWSALBIngressSpec, AWSEBSStorageClassSpec, AWSECRServiceAccountSpec, AWSEFSStorageClassSpec, AWSIRSAServiceAccountSpec } from './resources/cloud/aws/awsResources.js';
+import type { KarpenterEC2NodeClassSpec, KarpenterNodeClaimSpec, KarpenterNodePoolSpec } from './resources/cloud/aws/karpenterResources.js';
 import type { HelperDefinition } from './utils/helmHelpers.js';
-import type { NamingStrategy } from './utils/resourceNaming.js';
 /**
  * Rutter class with modular architecture
  * Provides a clean API while delegating to specialized resource providers
@@ -22,13 +16,7 @@ export declare class Rutter {
     private static readonly HELPER_NAME;
     private readonly app;
     private readonly chart;
-    private readonly coreResources;
-    private readonly storageResources;
     private readonly awsResources;
-    private readonly azureResources;
-    private readonly gcpResources;
-    private readonly autoscalingResources;
-    private readonly networkResources;
     private readonly karpenterResources;
     private readonly meta;
     private readonly defaultValues;
@@ -36,305 +24,6 @@ export declare class Rutter {
     private readonly props;
     private readonly assets;
     constructor(props: RutterProps);
-    /**
-     * Creates a Deployment resource
-     * @param spec - Deployment specification
-     * @returns Created Deployment ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addDeployment({
-     *   name: 'web-app',
-     *   image: 'nginx:1.21',
-     *   replicas: 3,
-     *   containerPort: 80
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addDeployment(spec: DeploymentSpec): ApiObject;
-    /**
-     * Creates a DaemonSet resource
-     * @param spec - DaemonSet specification
-     * @returns Created DaemonSet ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addDaemonSet({
-     *   name: 'log-collector',
-     *   image: 'fluentd:v1.14',
-     *   containerPort: 24224,
-     *   hostNetwork: true
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addDaemonSet(spec: DaemonSetSpec): ApiObject;
-    /**
-     * Creates a StatefulSet resource
-     * @param spec - StatefulSet specification
-     * @returns Created StatefulSet ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addStatefulSet({
-     *   name: 'database',
-     *   image: 'postgres:13',
-     *   replicas: 3,
-     *   serviceName: 'database-headless',
-     *   containerPort: 5432
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addStatefulSet(spec: StatefulSetSpec): ApiObject;
-    /**
-     * Creates a Role resource for RBAC
-     * @param spec - Role specification
-     * @returns Created Role ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addRole({
-     *   name: 'pod-reader',
-     *   rules: [
-     *     {
-     *       apiGroups: [''],
-     *       resources: ['pods'],
-     *       verbs: ['get', 'list', 'watch']
-     *     }
-     *   ]
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addRole(spec: RoleSpec): ApiObject;
-    /**
-     * Creates a ClusterRole resource for cluster-wide RBAC
-     * @param spec - ClusterRole specification
-     * @returns Created ClusterRole ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addClusterRole({
-     *   name: 'cluster-reader',
-     *   rules: [
-     *     {
-     *       apiGroups: [''],
-     *       resources: ['nodes', 'namespaces'],
-     *       verbs: ['get', 'list', 'watch']
-     *     }
-     *   ]
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addClusterRole(spec: ClusterRoleSpec): ApiObject;
-    /**
-     * Creates a RoleBinding resource for RBAC
-     * @param spec - RoleBinding specification
-     * @returns Created RoleBinding ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addRoleBinding({
-     *   name: 'pod-reader-binding',
-     *   roleRef: {
-     *     kind: 'Role',
-     *     name: 'pod-reader',
-     *     apiGroup: 'rbac.authorization.k8s.io'
-     *   },
-     *   subjects: [
-     *     {
-     *       kind: 'ServiceAccount',
-     *       name: 'my-service-account'
-     *     }
-     *   ]
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addRoleBinding(spec: RoleBindingSpec): ApiObject;
-    /**
-     * Creates a ClusterRoleBinding resource for cluster-wide RBAC
-     * @param spec - ClusterRoleBinding specification
-     * @returns Created ClusterRoleBinding ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addClusterRoleBinding({
-     *   name: 'cluster-reader-binding',
-     *   roleRef: {
-     *     kind: 'ClusterRole',
-     *     name: 'cluster-reader',
-     *     apiGroup: 'rbac.authorization.k8s.io'
-     *   },
-     *   subjects: [
-     *     {
-     *       kind: 'ServiceAccount',
-     *       name: 'monitoring-agent',
-     *       namespace: 'monitoring'
-     *     }
-     *   ]
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addClusterRoleBinding(spec: ClusterRoleBindingSpec): ApiObject;
-    /**
-     * Creates a Job resource for batch workloads
-     * @param spec - Job specification
-     * @returns Created Job ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addJob({
-     *   name: 'data-processor',
-     *   image: 'busybox:1.35',
-     *   command: ['sh', '-c', 'echo "Processing..." && sleep 30'],
-     *   completions: 1
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addJob(spec: JobSpec): ApiObject;
-    /**
-     * Creates a Service resource
-     * @param spec - Service specification
-     * @returns Created Service ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addService({
-     *   name: 'web-service',
-     *   port: 80,
-     *   targetPort: 8080,
-     *   type: 'ClusterIP'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addService(spec: ServiceSpec): ApiObject;
-    /**
-     * Creates a ConfigMap resource
-     * @param spec - ConfigMap specification
-     * @returns Created ConfigMap ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addConfigMap({
-     *   name: 'app-config',
-     *   data: {
-     *     'config.yaml': 'key: value',
-     *     'app.properties': 'debug=true'
-     *   }
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addConfigMap(spec: ConfigMapSpec): ApiObject;
-    /**
-     * Creates a Secret resource
-     * @param spec - Secret specification
-     * @returns Created Secret ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addSecret({
-     *   name: 'app-secrets',
-     *   type: 'Opaque',
-     *   data: {
-     *     username: 'YWRtaW4=',
-     *     password: 'MWYyZDFlMmU2N2Rm'
-     *   }
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addSecret(spec: SecretSpec): ApiObject;
-    /**
-     * Creates a ServiceAccount resource
-     * @param spec - ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addServiceAccount({
-     *   name: 'app-service-account',
-     *   automountServiceAccountToken: false
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addServiceAccount(spec: ServiceAccountSpec): ApiObject;
-    /**
-     * Creates a PersistentVolume resource
-     * @param spec - PersistentVolume specification
-     * @returns Created PersistentVolume ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addPersistentVolume({
-     *   name: 'data-pv',
-     *   capacity: '10Gi',
-     *   accessModes: ['ReadWriteOnce'],
-     *   storageClassName: 'fast-ssd'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addPersistentVolume(spec: PersistentVolumeSpec): ApiObject;
-    /**
-     * Creates a PersistentVolumeClaim resource
-     * @param spec - PersistentVolumeClaim specification
-     * @returns Created PersistentVolumeClaim ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addPersistentVolumeClaim({
-     *   name: 'data-pvc',
-     *   size: '10Gi',
-     *   accessModes: ['ReadWriteOnce'],
-     *   storageClassName: 'fast-ssd'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addPersistentVolumeClaim(spec: PersistentVolumeClaimSpec): ApiObject;
-    /**
-     * Creates a StorageClass resource
-     * @param spec - StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addStorageClass({
-     *   name: 'fast-ssd',
-     *   provisioner: 'kubernetes.io/aws-ebs',
-     *   parameters: {
-     *     type: 'gp3',
-     *     encrypted: 'true'
-     *   }
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addStorageClass(spec: StorageClassSpec): ApiObject;
     /**
      * Creates an AWS EBS StorageClass
      * @param spec - EBS StorageClass specification
@@ -378,14 +67,14 @@ export declare class Rutter {
      * @example
      * ```typescript
      * rutter.addAWSIRSAServiceAccount({
-     *   name: 'aws-service-account',
-     *   roleArn: 'arn:aws:iam::123456789012:role/MyRole'
+     *   name: 'my-service-account',
+     *   roleArn: 'arn:aws:iam::ACCOUNT_ID:role/MyRole'
      * });
      * ```
      *
      * @since 1.0.0
      */
-    addAWSIRSAServiceAccount(spec: AWSIRSAServiceAccountSpec): ApiObject;
+    addAWSIRSAServiceAccount(spec: AWSIRSAServiceAccountSpec): ServiceAccount;
     /**
      * Creates an AWS ALB Ingress
      * @param spec - ALB Ingress specification
@@ -408,95 +97,7 @@ export declare class Rutter {
      *
      * @since 1.0.0
      */
-    addAWSALBIngress(spec: AWSALBIngressSpec): ApiObject;
-    /**
-     * Creates an Azure Disk StorageClass
-     * @param spec - Azure Disk StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @since 2.4.0
-     */
-    addAzureDiskStorageClass(spec: AzureDiskStorageClassSpec): ApiObject;
-    /**
-     * Creates an Azure File StorageClass
-     * @param spec - Azure File StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @since 2.4.0
-     */
-    addAzureFileStorageClass(spec: AzureFileStorageClassSpec): ApiObject;
-    /**
-     * Creates an Azure Application Gateway Ingress
-     * @param spec - AGIC Ingress specification
-     * @returns Created Ingress ApiObject
-     *
-     * @since 2.4.0
-     */
-    addAzureApplicationGatewayIngress(spec: AzureAGICIngressSpec): ApiObject;
-    /**
-     * Creates an Azure Key Vault SecretProviderClass
-     * @param spec - Azure Key Vault SecretProviderClass specification
-     * @returns Created SecretProviderClass ApiObject
-     *
-     * @since 2.4.0
-     */
-    addAzureKeyVaultSecretProviderClass(spec: AzureKeyVaultSecretProviderClassSpec): ApiObject;
-    /**
-     * Creates an Azure Container Registry ServiceAccount
-     * @param spec - Azure ACR ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @since 2.4.0
-     */
-    addAzureACRServiceAccount(spec: AzureACRServiceAccountSpec): ApiObject;
-    /**
-     * Creates a GCP Persistent Disk StorageClass
-     * @param spec - GCP PD StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @since 2.4.0
-     */
-    addGCPPersistentDiskStorageClass(spec: GCPPersistentDiskStorageClassSpec): ApiObject;
-    /**
-     * Creates a GCP Filestore StorageClass
-     * @param spec - GCP Filestore StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @since 2.4.0
-     */
-    addGCPFilestoreStorageClass(spec: GCPFilestoreStorageClassSpec): ApiObject;
-    /**
-     * Creates a GCE Ingress with Google Cloud Load Balancer
-     * @param spec - GCE Ingress specification
-     * @returns Created Ingress ApiObject
-     *
-     * @since 2.4.0
-     */
-    addGCPGCEIngress(spec: GCPGCEIngressSpec): ApiObject;
-    /**
-     * Creates a ServiceAccount with Workload Identity annotations
-     * @param spec - Workload Identity ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @since 2.4.0
-     */
-    addGCPWorkloadIdentityServiceAccount(spec: GCPWorkloadIdentityServiceAccountSpec): ApiObject;
-    /**
-     * Creates a ServiceAccount with GCP Artifact Registry access
-     * @param spec - Artifact Registry ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addGCPArtifactRegistryServiceAccount({
-     *   name: 'artifact-registry-sa',
-     *   googleServiceAccount: 'my-gsa@project.iam.gserviceaccount.com'
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addGCPArtifactRegistryServiceAccount(spec: GCPArtifactRegistryServiceAccountSpec): ApiObject;
+    addAWSALBIngress(spec: AWSALBIngressSpec): Ingress;
     /**
      * Creates a Karpenter NodePool resource
      * @param spec - NodePool specification
@@ -665,204 +266,6 @@ export declare class Rutter {
         labels?: Record<string, string>;
         annotations?: Record<string, string>;
     }): ApiObject;
-    /**
-     * Creates a NetworkPolicy resource
-     * @param spec - NetworkPolicy specification
-     * @returns Created NetworkPolicy ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addNetworkPolicy({
-     *   name: 'deny-all',
-     *   podSelector: {},
-     *   policyTypes: ['Ingress', 'Egress']
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addNetworkPolicy(spec: NetworkPolicySpec): ApiObject;
-    /**
-     * Creates a deny-all NetworkPolicy that blocks all traffic
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addDenyAllNetworkPolicy('deny-all', { matchLabels: { app: 'web' } });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addDenyAllNetworkPolicy(name: string, podSelector?: NetworkPolicySpec['podSelector'], labels?: Record<string, string>, annotations?: Record<string, string>): ApiObject;
-    /**
-     * Creates a NetworkPolicy that allows traffic from specific pods
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param fromPodSelector - Pod selector for allowed source pods
-     * @param ports - Optional ports to allow
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAllowFromPodsNetworkPolicy(
-     *   'allow-from-frontend',
-     *   { matchLabels: { app: 'backend' } },
-     *   { matchLabels: { app: 'frontend' } },
-     *   [{ port: 8080, protocol: 'TCP' }]
-     * );
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addAllowFromPodsNetworkPolicy(name: string, podSelector: NetworkPolicySpec['podSelector'], fromPodSelector: NetworkPolicySpec['podSelector'], ports?: Array<{
-        port?: number | string;
-        protocol?: 'TCP' | 'UDP' | 'SCTP';
-    }>, labels?: Record<string, string>, annotations?: Record<string, string>): ApiObject;
-    /**
-     * Creates a NetworkPolicy that allows traffic from specific namespaces
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param fromNamespaceSelector - Namespace selector for allowed source namespaces
-     * @param ports - Optional ports to allow
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAllowFromNamespaceNetworkPolicy(
-     *   'allow-from-monitoring',
-     *   { matchLabels: { app: 'web' } },
-     *   { matchLabels: { name: 'monitoring' } },
-     *   [{ port: 9090, protocol: 'TCP' }]
-     * );
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addAllowFromNamespaceNetworkPolicy(name: string, podSelector: NetworkPolicySpec['podSelector'], fromNamespaceSelector: NetworkPolicySpec['podSelector'], ports?: Array<{
-        port?: number | string;
-        protocol?: 'TCP' | 'UDP' | 'SCTP';
-    }>, labels?: Record<string, string>, annotations?: Record<string, string>): ApiObject;
-    /**
-     * Creates an Ingress resource with optional TLS validation
-     * @param spec - Ingress specification
-     * @returns Created Ingress ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addIngress({
-     *   name: 'web-ingress',
-     *   rules: [{
-     *     host: 'example.com',
-     *     http: {
-     *       paths: [{
-     *         path: '/',
-     *         pathType: 'Prefix',
-     *         backend: {
-     *           service: { name: 'web-service', port: { number: 80 } }
-     *         }
-     *       }]
-     *     }
-     *   }]
-     * });
-     * ```
-     *
-     * @deprecated Use addSecureIngress for enhanced security validation
-     * @since 2.7.0
-     */
-    /**
-     * Creates an Ingress resource for external access to services
-     * @param spec - Ingress specification
-     * @returns Created Ingress ApiObject
-     * @deprecated Use addSecureIngress for enhanced security validation
-     * @since 2.7.0
-     */
-    addIngress(spec: IngressSpec): ApiObject;
-    /**
-     * Creates a simple Ingress resource with optional TLS
-     * @param name - Resource name
-     * @param host - Domain host
-     * @param serviceName - Backend service name
-     * @param servicePort - Backend service port
-     * @param options - Optional configuration
-     * @returns Created Ingress ApiObject
-     * @since 2.8.1
-     */
-    addIngress(name: string, host: string, serviceName: string, servicePort: number, options?: {
-        tls?: boolean | string;
-        className?: string;
-        annotations?: Record<string, string>;
-        path?: string;
-        pathType?: 'Exact' | 'Prefix' | 'ImplementationSpecific';
-        sslRedirect?: boolean;
-        certManager?: string;
-    }): ApiObject;
-    /**
-     * Creates a simple Ingress with enhanced options
-     * @private
-     */
-    private createSimpleIngress;
-    /**
-     * Builds annotations for Ingress based on options
-     * @private
-     */
-    private buildIngressAnnotations;
-    /**
-     * Adds SSL redirect annotation based on class and options
-     * @private
-     */
-    private addSSLRedirectAnnotation;
-    /**
-     * Adds cert-manager annotation if specified
-     * @private
-     */
-    private addCertManagerAnnotation;
-    /**
-     * Adds NGINX-specific annotations
-     * @private
-     */
-    private addNginxAnnotations;
-    /**
-     * Creates a secure Ingress resource with TLS validation and environment-aware security defaults
-     * @param spec - Enhanced Ingress specification with security options
-     * @returns Created Ingress ApiObject
-     *
-     * @example
-     * ```typescript
-     * // Production Ingress with mandatory TLS
-     * rutter.addSecureIngress({
-     *   name: 'secure-web-ingress',
-     *   environment: 'production',
-     *   tls: [{
-     *     hosts: ['secure.example.com'],
-     *     secretName: 'secure-example-tls'
-     *   }],
-     *   forceSSLRedirect: true,
-     *   rules: [{
-     *     host: 'secure.example.com',
-     *     http: {
-     *       paths: [{
-     *         path: '/',
-     *         pathType: 'Prefix',
-     *         backend: {
-     *           service: { name: 'web-service', port: { number: 80 } }
-     *         }
-     *       }]
-     *     }
-     *   }]
-     * });
-     * ```
-     *
-     * @since 2.8.0
-     */
-    addSecureIngress(spec: IngressSpec): ApiObject;
     /**
      * Creates a ServiceAccount with ECR access annotations
      * @param spec - ECR ServiceAccount specification
@@ -872,130 +275,90 @@ export declare class Rutter {
      * ```typescript
      * rutter.addAWSECRServiceAccount({
      *   name: 'ecr-service-account',
-     *   roleArn: 'arn:aws:iam::123456789012:role/ECRAccessRole'
+     *   roleArn: 'arn:aws:iam::ACCOUNT_ID:role/ECRAccessRole'
      * });
      * ```
      *
      * @since 2.7.0
      */
-    addAWSECRServiceAccount(spec: AWSECRServiceAccountSpec): ApiObject;
+    addAWSECRServiceAccount(spec: AWSECRServiceAccountSpec): ServiceAccount;
     /**
-     * Creates a Horizontal Pod Autoscaler (HPA) resource
-     * @param spec - HPA specification
-     * @returns Created HPA ApiObject
+     * Adds a Kubernetes manifest to the chart using CDK8S
      *
-     * @example
-     * ```typescript
-     * rutter.addHorizontalPodAutoscaler({
-     *   name: 'web-hpa',
-     *   scaleTargetRef: {
-     *     apiVersion: 'apps/v1',
-     *     kind: 'Deployment',
-     *     name: 'web-app'
-     *   },
-     *   minReplicas: 2,
-     *   maxReplicas: 10,
-     *   metrics: [{
-     *     type: 'Resource',
-     *     resource: {
-     *       name: 'cpu',
-     *       target: { type: 'Utilization', averageUtilization: 70 }
-     *     }
-     *   }]
-     * });
-     * ```
+     * This method allows you to add any Kubernetes manifest (CRDs, custom resources, etc.)
+     * either as YAML strings or as objects. The manifest will be processed using CDK8S
+     * for better type safety and validation.
      *
-     * @since 2.7.0
-     */
-    addHorizontalPodAutoscaler(spec: HorizontalPodAutoscalerSpec): ApiObject;
-    /**
-     * Creates a Vertical Pod Autoscaler (VPA) resource
-     * @param spec - VPA specification
-     * @returns Created VPA ApiObject
+     * @param yamlOrObject - Kubernetes manifest as YAML string or object
+     * @param id - Unique identifier for the manifest (required for multiple manifests)
      *
      * @example
      * ```typescript
-     * rutter.addVerticalPodAutoscaler({
-     *   name: 'web-vpa',
-     *   targetRef: {
-     *     apiVersion: 'apps/v1',
-     *     kind: 'Deployment',
-     *     name: 'web-app'
-     *   },
-     *   updatePolicy: { updateMode: 'Auto' }
-     * });
+     * // Using YAML string for CRD
+     * rutter.addManifest(`
+     * apiVersion: apiextensions.k8s.io/v1
+     * kind: CustomResourceDefinition
+     * metadata:
+     *   name: example.com
+     * spec:
+     *   group: example.com
+     *   versions: []
+     * `, 'my-crd');
+     *
+     * // Using object for any Kubernetes resource
+     * rutter.addManifest({
+     *   apiVersion: 'v1',
+     *   kind: 'ConfigMap',
+     *   metadata: { name: 'my-config' },
+     *   data: { key: 'value' }
+     * }, 'my-configmap');
      * ```
      *
-     * @since 2.7.0
+     * @since 3.0.0
+     * @note Consider using cdk8s-plus constructs for better type safety when available
      */
-    addVerticalPodAutoscaler(spec: VerticalPodAutoscalerSpec): ApiObject;
+    addManifest(yamlOrObject: string | Record<string, unknown>, id: string): ApiObject;
     /**
-     * Creates a CronJob resource
-     * @param spec - CronJob specification
-     * @returns Created CronJob ApiObject
+     * Adds a Kubernetes manifest wrapped in a Helm conditional
      *
-     * @example
-     * ```typescript
-     * rutter.addCronJob({
-     *   name: 'backup-job',
-     *   schedule: '0 2 * * *',
-     *   jobTemplate: {
-     *     spec: {
-     *       template: {
-     *         spec: {
-     *           containers: [{
-     *             name: 'backup',
-     *             image: 'backup:latest',
-     *             command: ['backup.sh']
-     *           }],
-     *           restartPolicy: 'OnFailure'
-     *         }
-     *       }
-     *     }
-     *   }
-     * });
-     * ```
+     * This method creates a manifest that will only be rendered if the specified
+     * condition evaluates to true. The condition is checked against .Values in Helm.
      *
-     * @since 2.7.0
-     */
-    addCronJob(spec: CronJobSpec): ApiObject;
-    /**
-     * Adds a custom resource definition (CRD) YAML or object
-     * @param yamlOrObject - CRD YAML content string or object
-     * @param id - Unique identifier for the CRD
+     * @param manifestObject - JavaScript object representing the Kubernetes manifest
+     * @param condition - Path to the condition value in .Values (e.g., 'createNamespace')
+     * @param id - Unique identifier for this manifest within the chart
+     * @returns The created ApiObject instance
+     * @throws {Error} If the manifest structure is incorrect or condition path is invalid
      *
      * @example
      * ```typescript
-     * // Using YAML string
-     * rutter.addCrd(`
-     * apiVersion: apiextensions.k8s.io/v1
-     * kind: CustomResourceDefinition
-     * metadata:
-     *   name: example.com
-     * spec:
-     *   group: example.com
-     *   versions: []
-     * `);
-     *
-     * // Using object
-     * rutter.addCrd({
-     *   apiVersion: 'apiextensions.k8s.io/v1',
-     *   kind: 'CustomResourceDefinition',
-     *   metadata: { name: 'example.com' },
-     *   spec: { group: 'example.com', versions: [] }
-     * });
+     * // Add a namespace that's only created if .Values.createNamespace is true
+     * rutter.addConditionalManifest(
+     *   {
+     *     apiVersion: 'v1',
+     *     kind: 'Namespace',
+     *     metadata: {
+     *       name: valuesRef('namespace'),
+     *       labels: {
+     *         environment: conditionalRef('environment', 'environment')
+     *       }
+     *     }
+     *   },
+     *   'createNamespace',
+     *   'namespace'
+     * );
      * ```
      *
-     * @since 1.0.0
+     * @since 2.7.4
      */
-    addCrd(yamlOrObject: string | Record<string, unknown>, id?: string): void;
+    addConditionalManifest(manifestObject: Record<string, unknown>, condition: string, id: string): ApiObject;
     /**
-     * Validates CRD structure according to Kubernetes specification
-     * @param crd - CRD object to validate
+     * Validates the structure of a Kubernetes manifest object
+     * @param manifest - The manifest object to validate
      * @private
-     * @since 2.5.0
+     * @since 3.0.0
      */
-    private validateCrdStructure;
+    private validateManifestStructure;
     /**
      * Gets chart metadata
      * @returns Chart metadata
@@ -1035,6 +398,12 @@ export declare class Rutter {
      * @since 2.4.0
      */
     private toSynthArray;
+    /**
+     * Process YAML content to remove quotes from Helm templates
+     * This fixes the issue where YAML.stringify adds quotes around Helm template expressions
+     * Removes quotes from all Helm template expressions
+     */
+    private processHelmTemplates;
     /**
      * Writes the Helm chart to the specified output directory
      * @param outDir - Output directory path
@@ -1066,15 +435,11 @@ export interface RutterProps {
     /** Custom Helm helpers content or definitions */
     helpersTpl?: string | HelperDefinition[];
     /** Cloud provider for default helpers */
-    cloudProvider?: 'aws' | 'azure' | 'gcp';
-    /** Manifest file naming strategy */
-    namingStrategy?: NamingStrategy;
+    cloudProvider?: 'aws';
     /** Custom prefix for manifest files */
     manifestPrefix?: string;
     /** Combine all resources into single manifest file */
     singleManifestFile?: boolean;
 }
-export type { DeploymentSpec, ServiceSpec, ConfigMapSpec, SecretSpec, ServiceAccountSpec, } from './resources/core/coreResources.js';
-export type { PersistentVolumeSpec, PersistentVolumeClaimSpec, StorageClassSpec, } from './resources/core/storageResources.js';
 export type { AWSEBSStorageClassSpec, AWSEFSStorageClassSpec, AWSIRSAServiceAccountSpec, AWSALBIngressSpec, } from './resources/cloud/aws/awsResources.js';
 //# sourceMappingURL=rutter.d.ts.map