timonel 2.8.0-beta.5 → 2.8.0

package/dist/src/lib/rutter.d.ts

@@ -1,1106 +0,0 @@
-import type { ChartProps } from 'cdk8s';
-import type { Construct } from 'constructs';
-import type { ApiObject } from 'cdk8s';
-import type { DeploymentSpec, DaemonSetSpec, StatefulSetSpec, RoleSpec, ClusterRoleSpec, RoleBindingSpec, ClusterRoleBindingSpec, JobSpec, ServiceSpec, ConfigMapSpec, SecretSpec, ServiceAccountSpec } from './resources/core/coreResources.js';
-import type { PersistentVolumeSpec, PersistentVolumeClaimSpec, StorageClassSpec } from './resources/core/storageResources.js';
-import type { AWSEBSStorageClassSpec, AWSEFSStorageClassSpec, AWSIRSAServiceAccountSpec, AWSECRServiceAccountSpec, AWSALBIngressSpec } from './resources/cloud/aws/awsResources.js';
-import type { AzureDiskStorageClassSpec, AzureFileStorageClassSpec, AzureAGICIngressSpec, AzureKeyVaultSecretProviderClassSpec, AzureACRServiceAccountSpec } from './resources/cloud/azure/azureResources.js';
-import type { GCPPersistentDiskStorageClassSpec, GCPFilestoreStorageClassSpec, GCPGCEIngressSpec, GCPWorkloadIdentityServiceAccountSpec, GCPArtifactRegistryServiceAccountSpec } from './resources/cloud/gcp/gcpResources.js';
-import type { HorizontalPodAutoscalerSpec, VerticalPodAutoscalerSpec, CronJobSpec } from './resources/autoscaling/autoscalingResources.js';
-import type { NetworkPolicySpec, IngressSpec } from './resources/network/networkResources.js';
-import type { KarpenterNodePoolSpec, KarpenterNodeClaimSpec, KarpenterEC2NodeClassSpec } from './resources/cloud/aws/karpenterResources.js';
-import type { HelperDefinition } from './utils/helmHelpers.js';
-import type { NamingStrategy } from './utils/resourceNaming.js';
-/**
- * Rutter class with modular architecture
- * Provides a clean API while delegating to specialized resource providers
- * Maintains full backward compatibility with the original Rutter class
- *
- * @since 2.4.0
- */
-export declare class Rutter {
-    private static readonly HELPER_NAME;
-    private readonly app;
-    private readonly chart;
-    private readonly coreResources;
-    private readonly storageResources;
-    private readonly awsResources;
-    private readonly azureResources;
-    private readonly gcpResources;
-    private readonly autoscalingResources;
-    private readonly networkResources;
-    private readonly karpenterResources;
-    private readonly meta;
-    private readonly defaultValues;
-    private readonly envValues;
-    private readonly props;
-    private readonly assets;
-    constructor(props: RutterProps);
-    /**
-     * Creates a Deployment resource
-     * @param spec - Deployment specification
-     * @returns Created Deployment ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addDeployment({
-     *   name: 'web-app',
-     *   image: 'nginx:1.21',
-     *   replicas: 3,
-     *   containerPort: 80
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addDeployment(spec: DeploymentSpec): ApiObject;
-    /**
-     * Creates a DaemonSet resource
-     * @param spec - DaemonSet specification
-     * @returns Created DaemonSet ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addDaemonSet({
-     *   name: 'log-collector',
-     *   image: 'fluentd:v1.14',
-     *   containerPort: 24224,
-     *   hostNetwork: true
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addDaemonSet(spec: DaemonSetSpec): ApiObject;
-    /**
-     * Creates a StatefulSet resource
-     * @param spec - StatefulSet specification
-     * @returns Created StatefulSet ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addStatefulSet({
-     *   name: 'database',
-     *   image: 'postgres:13',
-     *   replicas: 3,
-     *   serviceName: 'database-headless',
-     *   containerPort: 5432
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addStatefulSet(spec: StatefulSetSpec): ApiObject;
-    /**
-     * Creates a Role resource for RBAC
-     * @param spec - Role specification
-     * @returns Created Role ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addRole({
-     *   name: 'pod-reader',
-     *   rules: [
-     *     {
-     *       apiGroups: [''],
-     *       resources: ['pods'],
-     *       verbs: ['get', 'list', 'watch']
-     *     }
-     *   ]
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addRole(spec: RoleSpec): ApiObject;
-    /**
-     * Creates a ClusterRole resource for cluster-wide RBAC
-     * @param spec - ClusterRole specification
-     * @returns Created ClusterRole ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addClusterRole({
-     *   name: 'cluster-reader',
-     *   rules: [
-     *     {
-     *       apiGroups: [''],
-     *       resources: ['nodes', 'namespaces'],
-     *       verbs: ['get', 'list', 'watch']
-     *     }
-     *   ]
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addClusterRole(spec: ClusterRoleSpec): ApiObject;
-    /**
-     * Creates a RoleBinding resource for RBAC
-     * @param spec - RoleBinding specification
-     * @returns Created RoleBinding ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addRoleBinding({
-     *   name: 'pod-reader-binding',
-     *   roleRef: {
-     *     kind: 'Role',
-     *     name: 'pod-reader',
-     *     apiGroup: 'rbac.authorization.k8s.io'
-     *   },
-     *   subjects: [
-     *     {
-     *       kind: 'ServiceAccount',
-     *       name: 'my-service-account'
-     *     }
-     *   ]
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addRoleBinding(spec: RoleBindingSpec): ApiObject;
-    /**
-     * Creates a ClusterRoleBinding resource for cluster-wide RBAC
-     * @param spec - ClusterRoleBinding specification
-     * @returns Created ClusterRoleBinding ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addClusterRoleBinding({
-     *   name: 'cluster-reader-binding',
-     *   roleRef: {
-     *     kind: 'ClusterRole',
-     *     name: 'cluster-reader',
-     *     apiGroup: 'rbac.authorization.k8s.io'
-     *   },
-     *   subjects: [
-     *     {
-     *       kind: 'ServiceAccount',
-     *       name: 'monitoring-agent',
-     *       namespace: 'monitoring'
-     *     }
-     *   ]
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addClusterRoleBinding(spec: ClusterRoleBindingSpec): ApiObject;
-    /**
-     * Creates a Job resource for batch workloads
-     * @param spec - Job specification
-     * @returns Created Job ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addJob({
-     *   name: 'data-processor',
-     *   image: 'busybox:1.35',
-     *   command: ['sh', '-c', 'echo "Processing..." && sleep 30'],
-     *   completions: 1
-     * });
-     * ```
-     *
-     * @since 2.4.0
-     */
-    addJob(spec: JobSpec): ApiObject;
-    /**
-     * Creates a Service resource
-     * @param spec - Service specification
-     * @returns Created Service ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addService({
-     *   name: 'web-service',
-     *   port: 80,
-     *   targetPort: 8080,
-     *   type: 'ClusterIP'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addService(spec: ServiceSpec): ApiObject;
-    /**
-     * Creates a ConfigMap resource
-     * @param spec - ConfigMap specification
-     * @returns Created ConfigMap ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addConfigMap({
-     *   name: 'app-config',
-     *   data: {
-     *     'config.yaml': 'key: value',
-     *     'app.properties': 'debug=true'
-     *   }
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addConfigMap(spec: ConfigMapSpec): ApiObject;
-    /**
-     * Creates a Secret resource
-     * @param spec - Secret specification
-     * @returns Created Secret ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addSecret({
-     *   name: 'app-secrets',
-     *   type: 'Opaque',
-     *   data: {
-     *     username: 'YWRtaW4=',
-     *     password: 'MWYyZDFlMmU2N2Rm'
-     *   }
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addSecret(spec: SecretSpec): ApiObject;
-    /**
-     * Creates a ServiceAccount resource
-     * @param spec - ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addServiceAccount({
-     *   name: 'app-service-account',
-     *   automountServiceAccountToken: false
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addServiceAccount(spec: ServiceAccountSpec): ApiObject;
-    /**
-     * Creates a PersistentVolume resource
-     * @param spec - PersistentVolume specification
-     * @returns Created PersistentVolume ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addPersistentVolume({
-     *   name: 'data-pv',
-     *   capacity: '10Gi',
-     *   accessModes: ['ReadWriteOnce'],
-     *   storageClassName: 'fast-ssd'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addPersistentVolume(spec: PersistentVolumeSpec): ApiObject;
-    /**
-     * Creates a PersistentVolumeClaim resource
-     * @param spec - PersistentVolumeClaim specification
-     * @returns Created PersistentVolumeClaim ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addPersistentVolumeClaim({
-     *   name: 'data-pvc',
-     *   size: '10Gi',
-     *   accessModes: ['ReadWriteOnce'],
-     *   storageClassName: 'fast-ssd'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addPersistentVolumeClaim(spec: PersistentVolumeClaimSpec): ApiObject;
-    /**
-     * Creates a StorageClass resource
-     * @param spec - StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addStorageClass({
-     *   name: 'fast-ssd',
-     *   provisioner: 'kubernetes.io/aws-ebs',
-     *   parameters: {
-     *     type: 'gp3',
-     *     encrypted: 'true'
-     *   }
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addStorageClass(spec: StorageClassSpec): ApiObject;
-    /**
-     * Creates an AWS EBS StorageClass
-     * @param spec - EBS StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAWSEBSStorageClass({
-     *   name: 'fast-ebs',
-     *   volumeType: 'gp3',
-     *   encrypted: true,
-     *   allowVolumeExpansion: true
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addAWSEBSStorageClass(spec: AWSEBSStorageClassSpec): ApiObject;
-    /**
-     * Creates an AWS EFS StorageClass
-     * @param spec - EFS StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAWSEFSStorageClass({
-     *   name: 'efs-storage',
-     *   fileSystemId: 'fs-12345678',
-     *   directoryPerms: '0755'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addAWSEFSStorageClass(spec: AWSEFSStorageClassSpec): ApiObject;
-    /**
-     * Creates an AWS IRSA ServiceAccount
-     * @param spec - IRSA ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAWSIRSAServiceAccount({
-     *   name: 'aws-service-account',
-     *   roleArn: 'arn:aws:iam::123456789012:role/MyRole'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addAWSIRSAServiceAccount(spec: AWSIRSAServiceAccountSpec): ApiObject;
-    /**
-     * Creates an AWS ALB Ingress
-     * @param spec - ALB Ingress specification
-     * @returns Created Ingress ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAWSALBIngress({
-     *   name: 'web-ingress',
-     *   rules: [{
-     *     paths: [{
-     *       path: '/',
-     *       pathType: 'Prefix',
-     *       backend: { service: { name: 'web-service', port: { number: 80 } } }
-     *     }]
-     *   }],
-     *   scheme: 'internet-facing'
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addAWSALBIngress(spec: AWSALBIngressSpec): ApiObject;
-    /**
-     * Creates an Azure Disk StorageClass
-     * @param spec - Azure Disk StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @since 2.4.0
-     */
-    addAzureDiskStorageClass(spec: AzureDiskStorageClassSpec): ApiObject;
-    /**
-     * Creates an Azure File StorageClass
-     * @param spec - Azure File StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @since 2.4.0
-     */
-    addAzureFileStorageClass(spec: AzureFileStorageClassSpec): ApiObject;
-    /**
-     * Creates an Azure Application Gateway Ingress
-     * @param spec - AGIC Ingress specification
-     * @returns Created Ingress ApiObject
-     *
-     * @since 2.4.0
-     */
-    addAzureApplicationGatewayIngress(spec: AzureAGICIngressSpec): ApiObject;
-    /**
-     * Creates an Azure Key Vault SecretProviderClass
-     * @param spec - Azure Key Vault SecretProviderClass specification
-     * @returns Created SecretProviderClass ApiObject
-     *
-     * @since 2.4.0
-     */
-    addAzureKeyVaultSecretProviderClass(spec: AzureKeyVaultSecretProviderClassSpec): ApiObject;
-    /**
-     * Creates an Azure Container Registry ServiceAccount
-     * @param spec - Azure ACR ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @since 2.4.0
-     */
-    addAzureACRServiceAccount(spec: AzureACRServiceAccountSpec): ApiObject;
-    /**
-     * Creates a GCP Persistent Disk StorageClass
-     * @param spec - GCP PD StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @since 2.4.0
-     */
-    addGCPPersistentDiskStorageClass(spec: GCPPersistentDiskStorageClassSpec): ApiObject;
-    /**
-     * Creates a GCP Filestore StorageClass
-     * @param spec - GCP Filestore StorageClass specification
-     * @returns Created StorageClass ApiObject
-     *
-     * @since 2.4.0
-     */
-    addGCPFilestoreStorageClass(spec: GCPFilestoreStorageClassSpec): ApiObject;
-    /**
-     * Creates a GCE Ingress with Google Cloud Load Balancer
-     * @param spec - GCE Ingress specification
-     * @returns Created Ingress ApiObject
-     *
-     * @since 2.4.0
-     */
-    addGCPGCEIngress(spec: GCPGCEIngressSpec): ApiObject;
-    /**
-     * Creates a ServiceAccount with Workload Identity annotations
-     * @param spec - Workload Identity ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @since 2.4.0
-     */
-    addGCPWorkloadIdentityServiceAccount(spec: GCPWorkloadIdentityServiceAccountSpec): ApiObject;
-    /**
-     * Creates a ServiceAccount with GCP Artifact Registry access
-     * @param spec - Artifact Registry ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addGCPArtifactRegistryServiceAccount({
-     *   name: 'artifact-registry-sa',
-     *   googleServiceAccount: 'my-gsa@project.iam.gserviceaccount.com'
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addGCPArtifactRegistryServiceAccount(spec: GCPArtifactRegistryServiceAccountSpec): ApiObject;
-    /**
-     * Creates a Karpenter NodePool resource
-     * @param spec - NodePool specification
-     * @returns Created NodePool ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addKarpenterNodePool({
-     *   name: 'default-nodepool',
-     *   template: {
-     *     spec: {
-     *       nodeClassRef: {
-     *         apiVersion: 'karpenter.k8s.aws/v1beta1',
-     *         kind: 'EC2NodeClass',
-     *         name: 'default'
-     *       }
-     *     }
-     *   }
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addKarpenterNodePool(spec: KarpenterNodePoolSpec): ApiObject;
-    /**
-     * Creates a Karpenter NodeClaim resource
-     * @param spec - NodeClaim specification
-     * @returns Created NodeClaim ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addKarpenterNodeClaim({
-     *   name: 'my-node-claim',
-     *   nodeClassRef: {
-     *     apiVersion: 'karpenter.k8s.aws/v1beta1',
-     *     kind: 'EC2NodeClass',
-     *     name: 'default'
-     *   }
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addKarpenterNodeClaim(spec: KarpenterNodeClaimSpec): ApiObject;
-    /**
-     * Creates a Karpenter EC2NodeClass resource
-     * @param spec - EC2NodeClass specification
-     * @returns Created EC2NodeClass ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addKarpenterEC2NodeClass({
-     *   name: 'default',
-     *   amiFamily: 'AL2',
-     *   subnetSelectorTerms: [{ tags: { 'karpenter.sh/discovery': 'my-cluster' } }],
-     *   securityGroupSelectorTerms: [{ tags: { 'karpenter.sh/discovery': 'my-cluster' } }]
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addKarpenterEC2NodeClass(spec: KarpenterEC2NodeClassSpec): ApiObject;
-    /**
-     * Creates a Karpenter NodePool with optimized disruption settings for cost efficiency
-     * @param spec - NodePool specification with disruption optimization
-     * @returns Created NodePool ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addKarpenterNodePoolWithDisruption({
-     *   name: 'cost-optimized',
-     *   nodeClassRef: {
-     *     apiVersion: 'karpenter.k8s.aws/v1beta1',
-     *     kind: 'EC2NodeClass',
-     *     name: 'default'
-     *   },
-     *   consolidationPolicy: 'WhenEmptyOrUnderutilized',
-     *   consolidateAfter: '30s',
-     *   expireAfter: '24h',
-     *   disruptionBudgets: [
-     *     { nodes: '20%' },
-     *     { nodes: '0', schedule: '0 9 * * 1-5', duration: '8h' }
-     *   ]
-     * });
-     * ```
-     *
-     * @since 2.7.1
-     */
-    addKarpenterNodePoolWithDisruption(spec: {
-        name: string;
-        nodeClassRef: {
-            apiVersion: string;
-            kind: string;
-            name: string;
-        };
-        requirements?: Array<{
-            key: string;
-            operator: 'In' | 'NotIn' | 'Exists' | 'DoesNotExist' | 'Gt' | 'Lt';
-            values?: string[];
-        }>;
-        consolidationPolicy?: 'WhenEmpty' | 'WhenEmptyOrUnderutilized';
-        consolidateAfter?: string;
-        expireAfter?: string;
-        disruptionBudgets?: Array<{
-            nodes: string;
-            schedule?: string;
-            duration?: string;
-        }>;
-        limits?: Record<string, string>;
-        weight?: number;
-        labels?: Record<string, string>;
-        annotations?: Record<string, string>;
-    }): ApiObject;
-    /**
-     * Creates a Karpenter NodePool with scheduling constraints and priorities
-     * @param spec - NodePool specification with scheduling optimization
-     * @returns Created NodePool ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addKarpenterNodePoolWithScheduling({
-     *   name: 'gpu-workloads',
-     *   nodeClassRef: {
-     *     apiVersion: 'karpenter.k8s.aws/v1beta1',
-     *     kind: 'EC2NodeClass',
-     *     name: 'gpu-nodeclass'
-     *   },
-     *   requirements: [
-     *     { key: 'node.kubernetes.io/instance-type', operator: 'In', values: ['g4dn.xlarge', 'g4dn.2xlarge'] }
-     *   ],
-     *   taints: [
-     *     { key: 'nvidia.com/gpu', effect: 'NoSchedule' }
-     *   ],
-     *   terminationGracePeriod: '60s',
-     *   weight: 100
-     * });
-     * ```
-     *
-     * @since 2.7.1
-     */
-    addKarpenterNodePoolWithScheduling(spec: {
-        name: string;
-        nodeClassRef: {
-            apiVersion: string;
-            kind: string;
-            name: string;
-        };
-        requirements?: Array<{
-            key: string;
-            operator: 'In' | 'NotIn' | 'Exists' | 'DoesNotExist' | 'Gt' | 'Lt';
-            values?: string[];
-        }>;
-        taints?: Array<{
-            key: string;
-            value?: string;
-            effect: 'NoSchedule' | 'PreferNoSchedule' | 'NoExecute';
-        }>;
-        startupTaints?: Array<{
-            key: string;
-            value?: string;
-            effect: 'NoSchedule' | 'PreferNoSchedule' | 'NoExecute';
-        }>;
-        terminationGracePeriod?: string;
-        weight?: number;
-        limits?: Record<string, string>;
-        labels?: Record<string, string>;
-        annotations?: Record<string, string>;
-    }): ApiObject;
-    /**
-     * Creates a NetworkPolicy resource
-     * @param spec - NetworkPolicy specification
-     * @returns Created NetworkPolicy ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addNetworkPolicy({
-     *   name: 'deny-all',
-     *   podSelector: {},
-     *   policyTypes: ['Ingress', 'Egress']
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addNetworkPolicy(spec: NetworkPolicySpec): ApiObject;
-    /**
-     * Creates a NetworkPolicy from a predefined template
-     * @param templateName - Name of the predefined template
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     * @example
-     * ```typescript
-     * // Create a deny-all policy
-     * rutter.addNetworkPolicyFromTemplate(
-     *   'deny-all',
-     *   'default-deny',
-     *   { matchLabels: { app: 'web' } }
-     * );
-     * ```
-     * @since 2.9.0
-     */
-    addNetworkPolicyFromTemplate(templateName: string, name: string, podSelector: NetworkPolicySpec['podSelector'], labels?: Record<string, string>, annotations?: Record<string, string>): ApiObject;
-    /**
-     * Gets predefined NetworkPolicy templates for common security patterns
-     * @returns Array of predefined NetworkPolicy templates
-     * @since 2.9.0
-     */
-    static getNetworkPolicyTemplates(): import("./resources/network/networkResources.js").NetworkPolicyTemplate[];
-    /**
-     * Creates a deny-all NetworkPolicy that blocks all traffic
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addDenyAllNetworkPolicy('deny-all', { matchLabels: { app: 'web' } });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addDenyAllNetworkPolicy(name: string, podSelector?: NetworkPolicySpec['podSelector'], labels?: Record<string, string>, annotations?: Record<string, string>): ApiObject;
-    /**
-     * Creates a NetworkPolicy that allows traffic from specific pods
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param fromPodSelector - Pod selector for allowed source pods
-     * @param ports - Optional ports to allow
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAllowFromPodsNetworkPolicy(
-     *   'allow-from-frontend',
-     *   { matchLabels: { app: 'backend' } },
-     *   { matchLabels: { app: 'frontend' } },
-     *   [{ port: 8080, protocol: 'TCP' }]
-     * );
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addAllowFromPodsNetworkPolicy(name: string, podSelector: NetworkPolicySpec['podSelector'], fromPodSelector: NetworkPolicySpec['podSelector'], ports?: Array<{
-        port?: number | string;
-        protocol?: 'TCP' | 'UDP' | 'SCTP';
-    }>, labels?: Record<string, string>, annotations?: Record<string, string>): ApiObject;
-    /**
-     * Creates a NetworkPolicy that allows traffic from specific namespaces
-     * @param name - Policy name
-     * @param podSelector - Pod selector to apply policy to
-     * @param fromNamespaceSelector - Namespace selector for allowed source namespaces
-     * @param ports - Optional ports to allow
-     * @param labels - Optional labels
-     * @param annotations - Optional annotations
-     * @returns Created NetworkPolicy ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAllowFromNamespaceNetworkPolicy(
-     *   'allow-from-monitoring',
-     *   { matchLabels: { app: 'web' } },
-     *   { matchLabels: { name: 'monitoring' } },
-     *   [{ port: 9090, protocol: 'TCP' }]
-     * );
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addAllowFromNamespaceNetworkPolicy(name: string, podSelector: NetworkPolicySpec['podSelector'], fromNamespaceSelector: NetworkPolicySpec['podSelector'], ports?: Array<{
-        port?: number | string;
-        protocol?: 'TCP' | 'UDP' | 'SCTP';
-    }>, labels?: Record<string, string>, annotations?: Record<string, string>): ApiObject;
-    /**
-     * Creates an Ingress resource with optional TLS validation
-     * @param spec - Ingress specification
-     * @returns Created Ingress ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addIngress({
-     *   name: 'web-ingress',
-     *   rules: [{
-     *     host: 'example.com',
-     *     http: {
-     *       paths: [{
-     *         path: '/',
-     *         pathType: 'Prefix',
-     *         backend: {
-     *           service: { name: 'web-service', port: { number: 80 } }
-     *         }
-     *       }]
-     *     }
-     *   }]
-     * });
-     * ```
-     *
-     * @deprecated Use addSecureIngress for enhanced security validation
-     * @since 2.7.0
-     */
-    /**
-     * Creates an Ingress resource for external access to services
-     * @param spec - Ingress specification
-     * @returns Created Ingress ApiObject
-     * @deprecated Use addSecureIngress for enhanced security validation
-     * @since 2.7.0
-     */
-    addIngress(spec: IngressSpec): ApiObject;
-    /**
-     * Creates a simple Ingress resource with optional TLS
-     * @param name - Resource name
-     * @param host - Domain host
-     * @param serviceName - Backend service name
-     * @param servicePort - Backend service port
-     * @param options - Optional configuration
-     * @returns Created Ingress ApiObject
-     * @since 2.8.1
-     */
-    addIngress(name: string, host: string, serviceName: string, servicePort: number, options?: {
-        tls?: boolean | string;
-        className?: string;
-        annotations?: Record<string, string>;
-        path?: string;
-        pathType?: 'Exact' | 'Prefix' | 'ImplementationSpecific';
-        sslRedirect?: boolean;
-        certManager?: string;
-    }): ApiObject;
-    /**
-     * Creates a simple Ingress with enhanced options
-     * @private
-     */
-    private createSimpleIngress;
-    /**
-     * Builds annotations for Ingress based on options
-     * @private
-     */
-    private buildIngressAnnotations;
-    /**
-     * Adds SSL redirect annotation based on class and options
-     * @private
-     */
-    private addSSLRedirectAnnotation;
-    /**
-     * Adds cert-manager annotation if specified
-     * @private
-     */
-    private addCertManagerAnnotation;
-    /**
-     * Adds NGINX-specific annotations
-     * @private
-     */
-    private addNginxAnnotations;
-    /**
-     * Creates a secure Ingress resource with TLS validation and environment-aware security defaults
-     * @param spec - Enhanced Ingress specification with security options
-     * @returns Created Ingress ApiObject
-     *
-     * @example
-     * ```typescript
-     * // Production Ingress with mandatory TLS
-     * rutter.addSecureIngress({
-     *   name: 'secure-web-ingress',
-     *   environment: 'production',
-     *   tls: [{
-     *     hosts: ['secure.example.com'],
-     *     secretName: 'secure-example-tls'
-     *   }],
-     *   forceSSLRedirect: true,
-     *   rules: [{
-     *     host: 'secure.example.com',
-     *     http: {
-     *       paths: [{
-     *         path: '/',
-     *         pathType: 'Prefix',
-     *         backend: {
-     *           service: { name: 'web-service', port: { number: 80 } }
-     *         }
-     *       }]
-     *     }
-     *   }]
-     * });
-     * ```
-     *
-     * @since 2.8.0
-     */
-    addSecureIngress(spec: IngressSpec): ApiObject;
-    /**
-     * Creates a ServiceAccount with ECR access annotations
-     * @param spec - ECR ServiceAccount specification
-     * @returns Created ServiceAccount ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addAWSECRServiceAccount({
-     *   name: 'ecr-service-account',
-     *   roleArn: 'arn:aws:iam::123456789012:role/ECRAccessRole'
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addAWSECRServiceAccount(spec: AWSECRServiceAccountSpec): ApiObject;
-    /**
-     * Creates a Horizontal Pod Autoscaler (HPA) resource
-     * @param spec - HPA specification
-     * @returns Created HPA ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addHorizontalPodAutoscaler({
-     *   name: 'web-hpa',
-     *   scaleTargetRef: {
-     *     apiVersion: 'apps/v1',
-     *     kind: 'Deployment',
-     *     name: 'web-app'
-     *   },
-     *   minReplicas: 2,
-     *   maxReplicas: 10,
-     *   metrics: [{
-     *     type: 'Resource',
-     *     resource: {
-     *       name: 'cpu',
-     *       target: { type: 'Utilization', averageUtilization: 70 }
-     *     }
-     *   }]
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addHorizontalPodAutoscaler(spec: HorizontalPodAutoscalerSpec): ApiObject;
-    /**
-     * Creates a Vertical Pod Autoscaler (VPA) resource
-     * @param spec - VPA specification
-     * @returns Created VPA ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addVerticalPodAutoscaler({
-     *   name: 'web-vpa',
-     *   targetRef: {
-     *     apiVersion: 'apps/v1',
-     *     kind: 'Deployment',
-     *     name: 'web-app'
-     *   },
-     *   updatePolicy: { updateMode: 'Auto' }
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addVerticalPodAutoscaler(spec: VerticalPodAutoscalerSpec): ApiObject;
-    /**
-     * Creates a CronJob resource
-     * @param spec - CronJob specification
-     * @returns Created CronJob ApiObject
-     *
-     * @example
-     * ```typescript
-     * rutter.addCronJob({
-     *   name: 'backup-job',
-     *   schedule: '0 2 * * *',
-     *   jobTemplate: {
-     *     spec: {
-     *       template: {
-     *         spec: {
-     *           containers: [{
-     *             name: 'backup',
-     *             image: 'backup:latest',
-     *             command: ['backup.sh']
-     *           }],
-     *           restartPolicy: 'OnFailure'
-     *         }
-     *       }
-     *     }
-     *   }
-     * });
-     * ```
-     *
-     * @since 2.7.0
-     */
-    addCronJob(spec: CronJobSpec): ApiObject;
-    /**
-     * Adds a custom resource definition (CRD) YAML or object
-     * @param yamlOrObject - CRD YAML content string or object
-     * @param id - Unique identifier for the CRD
-     *
-     * @example
-     * ```typescript
-     * // Using YAML string
-     * rutter.addCrd(`
-     * apiVersion: apiextensions.k8s.io/v1
-     * kind: CustomResourceDefinition
-     * metadata:
-     *   name: example.com
-     * spec:
-     *   group: example.com
-     *   versions: []
-     * `);
-     *
-     * // Using object
-     * rutter.addCrd({
-     *   apiVersion: 'apiextensions.k8s.io/v1',
-     *   kind: 'CustomResourceDefinition',
-     *   metadata: { name: 'example.com' },
-     *   spec: { group: 'example.com', versions: [] }
-     * });
-     * ```
-     *
-     * @since 1.0.0
-     */
-    addCrd(yamlOrObject: string | Record<string, unknown>, id?: string): void;
-    /**
-     * Validates CRD structure according to Kubernetes specification
-     * @param crd - CRD object to validate
-     * @private
-     * @since 2.5.0
-     */
-    private validateCrdStructure;
-    /**
-     * Gets chart metadata
-     * @returns Chart metadata
-     *
-     * @since 1.0.0
-     */
-    getMeta(): ChartMetadata;
-    /**
-     * Gets default values
-     * @returns Default values object
-     *
-     * @since 1.0.0
-     */
-    getDefaultValues(): Record<string, unknown>;
-    /**
-     * Gets environment-specific values
-     * @returns Environment values object
-     *
-     * @since 1.0.0
-     */
-    getEnvValues(): Record<string, Record<string, unknown>>;
-    /**
-     * Gets all assets (CRDs, etc.)
-     * @returns Array of assets
-     *
-     * @since 1.0.0
-     */
-    getAssets(): Array<{
-        id: string;
-        yaml: string;
-        target: string;
-    }>;
-    /**
-     * Converts the chart to SynthAsset array for HelmChartWriter
-     * @returns Array of synthesized assets
-     *
-     * @since 2.4.0
-     */
-    private toSynthArray;
-    /**
-     * Writes the Helm chart to the specified output directory
-     * @param outDir - Output directory path
-     *
-     * @since 1.0.0
-     */
-    write(outDir: string): void;
-}
-export interface ChartMetadata {
-    name: string;
-    version: string;
-    description?: string;
-    keywords?: string[];
-    home?: string;
-    sources?: string[];
-    maintainers?: Array<{
-        name: string;
-        email?: string;
-        url?: string;
-    }>;
-}
-export interface RutterProps {
-    scope?: Construct;
-    meta: ChartMetadata;
-    defaultValues?: Record<string, unknown>;
-    envValues?: Record<string, Record<string, unknown>>;
-    namespace?: string;
-    chartProps?: ChartProps;
-    /** Custom Helm helpers content or definitions */
-    helpersTpl?: string | HelperDefinition[];
-    /** Cloud provider for default helpers */
-    cloudProvider?: 'aws' | 'azure' | 'gcp';
-    /** Manifest file naming strategy */
-    namingStrategy?: NamingStrategy;
-    /** Custom prefix for manifest files */
-    manifestPrefix?: string;
-    /** Combine all resources into single manifest file */
-    singleManifestFile?: boolean;
-}
-export type { DeploymentSpec, ServiceSpec, ConfigMapSpec, SecretSpec, ServiceAccountSpec, } from './resources/core/coreResources.js';
-export type { PersistentVolumeSpec, PersistentVolumeClaimSpec, StorageClassSpec, } from './resources/core/storageResources.js';
-export type { AWSEBSStorageClassSpec, AWSEFSStorageClassSpec, AWSIRSAServiceAccountSpec, AWSALBIngressSpec, } from './resources/cloud/aws/awsResources.js';
-//# sourceMappingURL=rutter.d.ts.map