typekro 0.10.1 → 0.12.0

package/dist/factories/ory/compositions/ory-identity-stack.d.ts

@@ -0,0 +1,2073 @@
+/**
+ * Production Ory identity stack composition.
+ *
+ * Creates the target namespace, official Ory Helm repository, Hydra/Kratos/Keto/Oathkeeper
+ * HelmReleases, optional starter Maester resources, and status fields used by direct and KRO modes.
+ */
+export declare const oryIdentityStack: import("../../../index.js").CallableComposition<{
+    name: string;
+    namespace?: string;
+    version?: string;
+    dependencySources?: {
+        hydra?: {
+            database?: {
+                dsn: {
+                    mode: "external";
+                    value?: {
+                        value: string;
+                    } | {
+                        secretRef: {
+                            name: string;
+                            key: string;
+                        };
+                    };
+                    url?: string;
+                    resourceName?: string;
+                } | {
+                    mode: "managed";
+                    resourceName?: string;
+                    url?: string;
+                    namespace?: string;
+                    secretName?: string;
+                    secretKey?: string;
+                };
+                databaseName?: string;
+            };
+            systemSecret?: {
+                mode: "external";
+                value?: {
+                    value: string;
+                } | {
+                    secretRef: {
+                        name: string;
+                        key: string;
+                    };
+                };
+                url?: string;
+                resourceName?: string;
+            } | {
+                mode: "managed";
+                resourceName?: string;
+                url?: string;
+                namespace?: string;
+                secretName?: string;
+                secretKey?: string;
+            };
+            issuerUrl?: {
+                url: {
+                    mode: "external";
+                    value?: {
+                        value: string;
+                    } | {
+                        secretRef: {
+                            name: string;
+                            key: string;
+                        };
+                    };
+                    url?: string;
+                    resourceName?: string;
+                } | {
+                    mode: "managed";
+                    resourceName?: string;
+                    url?: string;
+                    namespace?: string;
+                    secretName?: string;
+                    secretKey?: string;
+                };
+            };
+            loginUrl?: {
+                url: {
+                    mode: "external";
+                    value?: {
+                        value: string;
+                    } | {
+                        secretRef: {
+                            name: string;
+                            key: string;
+                        };
+                    };
+                    url?: string;
+                    resourceName?: string;
+                } | {
+                    mode: "managed";
+                    resourceName?: string;
+                    url?: string;
+                    namespace?: string;
+                    secretName?: string;
+                    secretKey?: string;
+                };
+            };
+            consentUrl?: {
+                url: {
+                    mode: "external";
+                    value?: {
+                        value: string;
+                    } | {
+                        secretRef: {
+                            name: string;
+                            key: string;
+                        };
+                    };
+                    url?: string;
+                    resourceName?: string;
+                } | {
+                    mode: "managed";
+                    resourceName?: string;
+                    url?: string;
+                    namespace?: string;
+                    secretName?: string;
+                    secretKey?: string;
+                };
+            };
+            logoutUrl?: {
+                url: {
+                    mode: "external";
+                    value?: {
+                        value: string;
+                    } | {
+                        secretRef: {
+                            name: string;
+                            key: string;
+                        };
+                    };
+                    url?: string;
+                    resourceName?: string;
+                } | {
+                    mode: "managed";
+                    resourceName?: string;
+                    url?: string;
+                    namespace?: string;
+                    secretName?: string;
+                    secretKey?: string;
+                };
+            };
+        };
+        kratos?: {
+            database?: {
+                dsn: {
+                    mode: "external";
+                    value?: {
+                        value: string;
+                    } | {
+                        secretRef: {
+                            name: string;
+                            key: string;
+                        };
+                    };
+                    url?: string;
+                    resourceName?: string;
+                } | {
+                    mode: "managed";
+                    resourceName?: string;
+                    url?: string;
+                    namespace?: string;
+                    secretName?: string;
+                    secretKey?: string;
+                };
+                databaseName?: string;
+            };
+            publicBaseUrl?: {
+                url: {
+                    mode: "external";
+                    value?: {
+                        value: string;
+                    } | {
+                        secretRef: {
+                            name: string;
+                            key: string;
+                        };
+                    };
+                    url?: string;
+                    resourceName?: string;
+                } | {
+                    mode: "managed";
+                    resourceName?: string;
+                    url?: string;
+                    namespace?: string;
+                    secretName?: string;
+                    secretKey?: string;
+                };
+            };
+            browserBaseUrl?: {
+                url: {
+                    mode: "external";
+                    value?: {
+                        value: string;
+                    } | {
+                        secretRef: {
+                            name: string;
+                            key: string;
+                        };
+                    };
+                    url?: string;
+                    resourceName?: string;
+                } | {
+                    mode: "managed";
+                    resourceName?: string;
+                    url?: string;
+                    namespace?: string;
+                    secretName?: string;
+                    secretKey?: string;
+                };
+            };
+            secrets?: Record<string, unknown>;
+            courier?: {
+                mode: "external";
+                value?: {
+                    value: string;
+                } | {
+                    secretRef: {
+                        name: string;
+                        key: string;
+                    };
+                };
+                url?: string;
+                resourceName?: string;
+            } | {
+                mode: "managed";
+                resourceName?: string;
+                url?: string;
+                namespace?: string;
+                secretName?: string;
+                secretKey?: string;
+            };
+        };
+        keto?: {
+            database?: {
+                dsn: {
+                    mode: "external";
+                    value?: {
+                        value: string;
+                    } | {
+                        secretRef: {
+                            name: string;
+                            key: string;
+                        };
+                    };
+                    url?: string;
+                    resourceName?: string;
+                } | {
+                    mode: "managed";
+                    resourceName?: string;
+                    url?: string;
+                    namespace?: string;
+                    secretName?: string;
+                    secretKey?: string;
+                };
+                databaseName?: string;
+            };
+        };
+        oathkeeper?: {
+            proxyRoute?: {
+                url: {
+                    mode: "external";
+                    value?: {
+                        value: string;
+                    } | {
+                        secretRef: {
+                            name: string;
+                            key: string;
+                        };
+                    };
+                    url?: string;
+                    resourceName?: string;
+                } | {
+                    mode: "managed";
+                    resourceName?: string;
+                    url?: string;
+                    namespace?: string;
+                    secretName?: string;
+                    secretKey?: string;
+                };
+            };
+            apiRoute?: {
+                url: {
+                    mode: "external";
+                    value?: {
+                        value: string;
+                    } | {
+                        secretRef: {
+                            name: string;
+                            key: string;
+                        };
+                    };
+                    url?: string;
+                    resourceName?: string;
+                } | {
+                    mode: "managed";
+                    resourceName?: string;
+                    url?: string;
+                    namespace?: string;
+                    secretName?: string;
+                    secretKey?: string;
+                };
+            };
+            upstream?: {
+                url: {
+                    mode: "external";
+                    value?: {
+                        value: string;
+                    } | {
+                        secretRef: {
+                            name: string;
+                            key: string;
+                        };
+                    };
+                    url?: string;
+                    resourceName?: string;
+                } | {
+                    mode: "managed";
+                    resourceName?: string;
+                    url?: string;
+                    namespace?: string;
+                    secretName?: string;
+                    secretKey?: string;
+                };
+            };
+            mutatorIdTokenJwks?: {
+                mode: "external";
+                value?: {
+                    value: string;
+                } | {
+                    secretRef: {
+                        name: string;
+                        key: string;
+                    };
+                };
+                url?: string;
+                resourceName?: string;
+            } | {
+                mode: "managed";
+                resourceName?: string;
+                url?: string;
+                namespace?: string;
+                secretName?: string;
+                secretKey?: string;
+            };
+        };
+        courier?: {
+            mode: "external";
+            value?: {
+                value: string;
+            } | {
+                secretRef: {
+                    name: string;
+                    key: string;
+                };
+            };
+            url?: string;
+            resourceName?: string;
+        } | {
+            mode: "managed";
+            resourceName?: string;
+            url?: string;
+            namespace?: string;
+            secretName?: string;
+            secretKey?: string;
+        };
+    };
+    shared?: boolean;
+    global?: {
+        imageRegistry?: string;
+        imagePullSecrets?: string[];
+    };
+    hydra?: {
+        dsn?: {
+            value: string;
+        } | {
+            secretRef: {
+                name: string;
+                key: string;
+            };
+        };
+        issuerUrl?: string;
+        loginUrl?: string;
+        consentUrl?: string;
+        logoutUrl?: string;
+        systemSecret?: {
+            value: string;
+        } | {
+            secretRef: {
+                name: string;
+                key: string;
+            };
+        };
+        replicaCount?: number;
+        resources?: {
+            requests?: {
+                cpu?: string;
+                memory?: string;
+            };
+            limits?: {
+                cpu?: string;
+                memory?: string;
+            };
+        };
+        serviceMonitor?: {
+            enabled?: boolean;
+        };
+        values?: {
+            global?: {
+                imageRegistry?: string;
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+            };
+            replicaCount?: number;
+            image?: {
+                registry?: string;
+                repository?: string;
+                tag?: string;
+                pullPolicy?: "Always" | "IfNotPresent" | "Never";
+            };
+            imagePullSecrets?: object[];
+            nameOverride?: string;
+            fullnameOverride?: string;
+            priorityClassName?: string;
+            service?: {
+                public?: {
+                    enabled?: boolean;
+                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
+                    clusterIP?: string;
+                    loadBalancerIP?: string;
+                    nodePort?: string | number;
+                    port?: number;
+                    containerPort?: number;
+                    name?: string;
+                    annotations?: Record<string, string>;
+                    labels?: Record<string, string>;
+                    metricsPath?: string;
+                    appProtocol?: string;
+                    externalTrafficPolicy?: string;
+                    internalTrafficPolicy?: string;
+                    headless?: {
+                        enabled?: boolean;
+                    };
+                };
+                admin?: {
+                    enabled?: boolean;
+                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
+                    clusterIP?: string;
+                    loadBalancerIP?: string;
+                    nodePort?: string | number;
+                    port?: number;
+                    containerPort?: number;
+                    name?: string;
+                    annotations?: Record<string, string>;
+                    labels?: Record<string, string>;
+                    metricsPath?: string;
+                    appProtocol?: string;
+                    externalTrafficPolicy?: string;
+                    internalTrafficPolicy?: string;
+                    headless?: {
+                        enabled?: boolean;
+                    };
+                };
+            };
+            secret?: {
+                enabled?: boolean;
+                nameOverride?: string;
+                enableDefaultAnnotations?: boolean;
+                secretAnnotations?: Record<string, string>;
+                extraAnnotations?: Record<string, string>;
+                hashSumEnabled?: boolean;
+                mountPath?: string;
+                filename?: string;
+            };
+            ingress?: {
+                public?: {
+                    enabled?: boolean;
+                    className?: string;
+                    annotations?: Record<string, string>;
+                    hosts?: {
+                        host?: string;
+                        paths?: {
+                            path?: string;
+                            pathType?: "Prefix" | "Exact" | "ImplementationSpecific";
+                        }[];
+                    }[];
+                    tls?: {
+                        secretName?: string;
+                        hosts?: string[];
+                    }[];
+                    defaultBackend?: object;
+                };
+                admin?: {
+                    enabled?: boolean;
+                    className?: string;
+                    annotations?: Record<string, string>;
+                    hosts?: {
+                        host?: string;
+                        paths?: {
+                            path?: string;
+                            pathType?: "Prefix" | "Exact" | "ImplementationSpecific";
+                        }[];
+                    }[];
+                    tls?: {
+                        secretName?: string;
+                        hosts?: string[];
+                    }[];
+                    defaultBackend?: object;
+                };
+            };
+            hydra?: {
+                command?: string[];
+                customArgs?: string[];
+                config?: object;
+                automigration?: {
+                    enabled?: boolean;
+                    type?: "job" | "initContainer";
+                    customCommand?: string[];
+                    customArgs?: string[];
+                    resources?: {
+                        limits?: object;
+                        requests?: object;
+                    };
+                    extraEnv?: object[];
+                };
+                customMigrations?: {
+                    jobs?: object;
+                };
+                dev?: boolean;
+            };
+            deployment?: {
+                strategy?: {
+                    type?: string;
+                    rollingUpdate?: {
+                        maxSurge?: string | number;
+                        maxUnavailable?: string | number;
+                    };
+                };
+                initContainerSecurityContext?: object;
+                lifecycle?: object;
+                labels?: Record<string, string>;
+                annotations?: Record<string, string>;
+                extraEnv?: object[];
+                automigration?: {
+                    extraEnv?: object[];
+                };
+                serviceAccount?: {
+                    create?: boolean;
+                    annotations?: Record<string, string>;
+                    name?: string;
+                    automountServiceAccountToken?: boolean;
+                };
+                extraVolumes?: object[];
+                extraVolumeMounts?: object[];
+                autoscaling?: {
+                    enabled?: boolean;
+                    minReplicas?: number;
+                    maxReplicas?: number;
+                    targetCPU?: object;
+                    targetMemory?: object;
+                    behavior?: object;
+                    extraMetrics?: object[];
+                };
+                readinessProbe?: {
+                    initialDelaySeconds?: number;
+                    periodSeconds?: number;
+                    failureThreshold?: number;
+                    successThreshold?: number;
+                    timeoutSeconds?: number;
+                };
+                startupProbe?: {
+                    initialDelaySeconds?: number;
+                    periodSeconds?: number;
+                    failureThreshold?: number;
+                    successThreshold?: number;
+                    timeoutSeconds?: number;
+                };
+                extraInitContainers?: string;
+                extraContainers?: string;
+                customLivenessProbe?: object;
+                customReadinessProbe?: object;
+                customStartupProbe?: object;
+                revisionHistoryLimit?: number;
+                resources?: {
+                    limits?: object;
+                    requests?: object;
+                };
+                podSecurityContext?: object;
+                securityContext?: object;
+                nodeSelector?: Record<string, string>;
+                tolerations?: object[];
+                affinity?: object;
+                topologySpreadConstraints?: object[];
+                dnsConfig?: object;
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+                automountServiceAccountToken?: boolean;
+                terminationGracePeriodSeconds?: number;
+            };
+            job?: {
+                annotations?: Record<string, string>;
+                labels?: Record<string, string>;
+                extraContainers?: string | object[];
+                extraEnv?: object[];
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+                extraInitContainers?: string;
+                nodeSelector?: Record<string, string>;
+                resources?: {
+                    limits?: object;
+                    requests?: object;
+                };
+                tolerations?: object[];
+                lifecycle?: string | object;
+                automountServiceAccountToken?: boolean;
+                shareProcessNamespace?: boolean;
+                serviceAccount?: {
+                    create?: boolean;
+                    annotations?: Record<string, string>;
+                    name?: string;
+                    automountServiceAccountToken?: boolean;
+                };
+                spec?: {
+                    backoffLimit?: number;
+                };
+            };
+            affinity?: object;
+            maester?: {
+                enabled?: boolean;
+            };
+            'hydra-maester'?: {
+                adminService?: {
+                    name?: string;
+                    port?: number;
+                };
+            };
+            watcher?: {
+                enabled?: boolean;
+                image?: string;
+                mountFile?: string;
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+                watchLabelKey?: string;
+                revisionHistoryLimit?: number;
+                automountServiceAccountToken?: boolean;
+                podSecurityContext?: object;
+                securityContext?: object;
+                resources?: {
+                    limits?: object;
+                    requests?: object;
+                };
+            };
+            janitor?: {
+                enabled?: boolean;
+                cleanupGrants?: boolean;
+                cleanupRequests?: boolean;
+                cleanupTokens?: boolean;
+                batchSize?: number;
+                limit?: number;
+            };
+            cronjob?: {
+                janitor?: {
+                    annotations?: Record<string, string>;
+                    labels?: Record<string, string>;
+                    extraContainers?: string | object[];
+                    extraEnv?: object[];
+                    podMetadata?: {
+                        labels?: Record<string, string>;
+                        annotations?: Record<string, string>;
+                    };
+                    extraInitContainers?: string;
+                    nodeSelector?: Record<string, string>;
+                    resources?: {
+                        limits?: object;
+                        requests?: object;
+                    };
+                    tolerations?: object[];
+                    lifecycle?: string | object;
+                    automountServiceAccountToken?: boolean;
+                    shareProcessNamespace?: boolean;
+                    serviceAccount?: {
+                        create?: boolean;
+                        annotations?: Record<string, string>;
+                        name?: string;
+                        automountServiceAccountToken?: boolean;
+                    };
+                    spec?: {
+                        backoffLimit?: number;
+                    };
+                };
+            };
+            pdb?: {
+                enabled?: boolean;
+                spec?: {
+                    minAvailable?: string | number;
+                    maxUnavailable?: string | number;
+                };
+            };
+            serviceMonitor?: {
+                enabled?: boolean;
+                scheme?: string;
+                scrapeInterval?: string;
+                scrapeTimeout?: string;
+                relabelings?: object[];
+                metricRelabelings?: object[];
+                labels?: Record<string, string>;
+                tlsConfig?: object;
+                targetLabels?: string[];
+            };
+            configmap?: {
+                hashSumEnabled?: boolean;
+                annotations?: Record<string, string>;
+            };
+            test?: {
+                labels?: Record<string, string>;
+                busybox?: {
+                    registry?: string;
+                    repository?: string;
+                    tag?: string;
+                };
+            };
+        };
+    };
+    kratos?: {
+        dsn?: {
+            value: string;
+        } | {
+            secretRef: {
+                name: string;
+                key: string;
+            };
+        };
+        publicBaseUrl?: string;
+        browserBaseUrl?: string;
+        identitySchema?: string;
+        courier?: object;
+        secrets?: Record<string, unknown>;
+        replicaCount?: number;
+        resources?: {
+            requests?: {
+                cpu?: string;
+                memory?: string;
+            };
+            limits?: {
+                cpu?: string;
+                memory?: string;
+            };
+        };
+        serviceMonitor?: {
+            enabled?: boolean;
+        };
+        values?: {
+            global?: {
+                imageRegistry?: string;
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+            };
+            replicaCount?: number;
+            strategy?: {
+                type?: string;
+                rollingUpdate?: {
+                    maxSurge?: string | number;
+                    maxUnavailable?: string | number;
+                };
+            };
+            image?: {
+                registry?: string;
+                repository?: string;
+                tag?: string;
+                pullPolicy?: "Always" | "IfNotPresent" | "Never";
+            };
+            imagePullSecrets?: object[];
+            nameOverride?: string;
+            fullnameOverride?: string;
+            service?: {
+                admin?: {
+                    enabled?: boolean;
+                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
+                    clusterIP?: string;
+                    loadBalancerIP?: string;
+                    nodePort?: string | number;
+                    port?: number;
+                    containerPort?: number;
+                    name?: string;
+                    annotations?: Record<string, string>;
+                    labels?: Record<string, string>;
+                    metricsPath?: string;
+                    appProtocol?: string;
+                    externalTrafficPolicy?: string;
+                    internalTrafficPolicy?: string;
+                    headless?: {
+                        enabled?: boolean;
+                    };
+                };
+                public?: {
+                    enabled?: boolean;
+                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
+                    clusterIP?: string;
+                    loadBalancerIP?: string;
+                    nodePort?: string | number;
+                    port?: number;
+                    containerPort?: number;
+                    name?: string;
+                    annotations?: Record<string, string>;
+                    labels?: Record<string, string>;
+                    metricsPath?: string;
+                    appProtocol?: string;
+                    externalTrafficPolicy?: string;
+                    internalTrafficPolicy?: string;
+                    headless?: {
+                        enabled?: boolean;
+                    };
+                };
+                courier?: {
+                    enabled?: boolean;
+                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
+                    clusterIP?: string;
+                    loadBalancerIP?: string;
+                    nodePort?: string | number;
+                    port?: number;
+                    containerPort?: number;
+                    name?: string;
+                    annotations?: Record<string, string>;
+                    labels?: Record<string, string>;
+                    metricsPath?: string;
+                    appProtocol?: string;
+                    externalTrafficPolicy?: string;
+                    internalTrafficPolicy?: string;
+                    headless?: {
+                        enabled?: boolean;
+                    };
+                };
+            };
+            secret?: {
+                enabled?: boolean;
+                nameOverride?: string;
+                enableDefaultAnnotations?: boolean;
+                secretAnnotations?: Record<string, string>;
+                extraAnnotations?: Record<string, string>;
+                hashSumEnabled?: boolean;
+                mountPath?: string;
+                filename?: string;
+            };
+            ingress?: {
+                admin?: {
+                    enabled?: boolean;
+                    className?: string;
+                    annotations?: Record<string, string>;
+                    hosts?: {
+                        host?: string;
+                        paths?: {
+                            path?: string;
+                            pathType?: "Prefix" | "Exact" | "ImplementationSpecific";
+                        }[];
+                    }[];
+                    tls?: {
+                        secretName?: string;
+                        hosts?: string[];
+                    }[];
+                    defaultBackend?: object;
+                };
+                public?: {
+                    enabled?: boolean;
+                    className?: string;
+                    annotations?: Record<string, string>;
+                    hosts?: {
+                        host?: string;
+                        paths?: {
+                            path?: string;
+                            pathType?: "Prefix" | "Exact" | "ImplementationSpecific";
+                        }[];
+                    }[];
+                    tls?: {
+                        secretName?: string;
+                        hosts?: string[];
+                    }[];
+                    defaultBackend?: object;
+                };
+            };
+            kratos?: {
+                development?: boolean;
+                automigration?: {
+                    enabled?: boolean;
+                    type?: "job" | "initContainer";
+                    customCommand?: string[];
+                    customArgs?: string[];
+                    resources?: {
+                        limits?: object;
+                        requests?: object;
+                    };
+                    extraEnv?: object[];
+                };
+                identitySchemas?: Record<string, string>;
+                emailTemplates?: object;
+                config?: object;
+                customMigrations?: {
+                    jobs?: object;
+                };
+            };
+            deployment?: {
+                lifecycle?: object;
+                readinessProbe?: {
+                    initialDelaySeconds?: number;
+                    periodSeconds?: number;
+                    failureThreshold?: number;
+                    successThreshold?: number;
+                    timeoutSeconds?: number;
+                };
+                startupProbe?: {
+                    initialDelaySeconds?: number;
+                    periodSeconds?: number;
+                    failureThreshold?: number;
+                    successThreshold?: number;
+                    timeoutSeconds?: number;
+                };
+                customLivenessProbe?: object;
+                customReadinessProbe?: object;
+                customStartupProbe?: object;
+                extraArgs?: string[];
+                extraEnv?: object[];
+                extraVolumes?: object[];
+                extraVolumeMounts?: object[];
+                extraInitContainers?: string;
+                extraContainers?: string;
+                priorityClassName?: string;
+                labels?: Record<string, string>;
+                annotations?: Record<string, string>;
+                environmentSecretsName?: string;
+                serviceAccount?: {
+                    create?: boolean;
+                    annotations?: Record<string, string>;
+                    name?: string;
+                    automountServiceAccountToken?: boolean;
+                };
+                automigration?: {
+                    extraEnv?: object[];
+                };
+                revisionHistoryLimit?: number;
+                resources?: {
+                    limits?: object;
+                    requests?: object;
+                };
+                podSecurityContext?: object;
+                securityContext?: object;
+                nodeSelector?: Record<string, string>;
+                tolerations?: object[];
+                affinity?: object;
+                topologySpreadConstraints?: object[];
+                dnsConfig?: object;
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+                automountServiceAccountToken?: boolean;
+                terminationGracePeriodSeconds?: number;
+            };
+            statefulSet?: {
+                resources?: {
+                    limits?: object;
+                    requests?: object;
+                };
+                extraArgs?: string[];
+                extraEnv?: object[];
+                extraVolumes?: object[];
+                extraVolumeMounts?: object[];
+                extraInitContainers?: string;
+                extraContainers?: string;
+                annotations?: Record<string, string>;
+                environmentSecretsName?: string;
+                labels?: Record<string, string>;
+                priorityClassName?: string;
+                log?: {
+                    format?: string;
+                    level?: string;
+                };
+                revisionHistoryLimit?: number;
+                podSecurityContext?: object;
+                securityContext?: object;
+                nodeSelector?: Record<string, string>;
+                tolerations?: object[];
+                affinity?: object;
+                topologySpreadConstraints?: object[];
+                dnsConfig?: object;
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+                automountServiceAccountToken?: boolean;
+                terminationGracePeriodSeconds?: number;
+            };
+            securityContext?: object;
+            autoscaling?: {
+                enabled?: boolean;
+                minReplicas?: number;
+                maxReplicas?: number;
+                targetCPU?: object;
+                targetMemory?: object;
+                behavior?: object;
+                extraMetrics?: object[];
+            };
+            job?: {
+                annotations?: Record<string, string>;
+                labels?: Record<string, string>;
+                extraContainers?: string | object[];
+                extraEnv?: object[];
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+                extraInitContainers?: string;
+                nodeSelector?: Record<string, string>;
+                resources?: {
+                    limits?: object;
+                    requests?: object;
+                };
+                tolerations?: object[];
+                lifecycle?: string | object;
+                automountServiceAccountToken?: boolean;
+                shareProcessNamespace?: boolean;
+                serviceAccount?: {
+                    create?: boolean;
+                    annotations?: Record<string, string>;
+                    name?: string;
+                    automountServiceAccountToken?: boolean;
+                };
+                spec?: {
+                    backoffLimit?: number;
+                };
+            };
+            courier?: {
+                enabled?: boolean;
+            };
+            watcher?: {
+                enabled?: boolean;
+                image?: string;
+                mountFile?: string;
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+                watchLabelKey?: string;
+                revisionHistoryLimit?: number;
+                automountServiceAccountToken?: boolean;
+                podSecurityContext?: object;
+                securityContext?: object;
+                resources?: {
+                    limits?: object;
+                    requests?: object;
+                };
+            };
+            cleanup?: {
+                enabled?: boolean;
+                batchSize?: number;
+                sleepTables?: string;
+                keepLast?: string;
+            };
+            cronjob?: {
+                cleanup?: {
+                    annotations?: Record<string, string>;
+                    labels?: Record<string, string>;
+                    extraContainers?: string | object[];
+                    extraEnv?: object[];
+                    podMetadata?: {
+                        labels?: Record<string, string>;
+                        annotations?: Record<string, string>;
+                    };
+                    extraInitContainers?: string;
+                    nodeSelector?: Record<string, string>;
+                    resources?: {
+                        limits?: object;
+                        requests?: object;
+                    };
+                    tolerations?: object[];
+                    lifecycle?: string | object;
+                    automountServiceAccountToken?: boolean;
+                    shareProcessNamespace?: boolean;
+                    serviceAccount?: {
+                        create?: boolean;
+                        annotations?: Record<string, string>;
+                        name?: string;
+                        automountServiceAccountToken?: boolean;
+                    };
+                    spec?: {
+                        backoffLimit?: number;
+                    };
+                };
+            };
+            pdb?: {
+                enabled?: boolean;
+                spec?: {
+                    minAvailable?: string | number;
+                    maxUnavailable?: string | number;
+                };
+            };
+            serviceMonitor?: {
+                enabled?: boolean;
+                scheme?: string;
+                scrapeInterval?: string;
+                scrapeTimeout?: string;
+                relabelings?: object[];
+                metricRelabelings?: object[];
+                labels?: Record<string, string>;
+                tlsConfig?: object;
+                targetLabels?: string[];
+            };
+            configmap?: {
+                hashSumEnabled?: boolean;
+                annotations?: Record<string, string>;
+            };
+            test?: {
+                labels?: Record<string, string>;
+                busybox?: {
+                    registry?: string;
+                    repository?: string;
+                    tag?: string;
+                };
+            };
+        };
+    };
+    keto?: {
+        dsn?: {
+            value: string;
+        } | {
+            secretRef: {
+                name: string;
+                key: string;
+            };
+        };
+        namespaces?: {
+            id: number;
+            name: string;
+        }[];
+        replicaCount?: number;
+        resources?: {
+            requests?: {
+                cpu?: string;
+                memory?: string;
+            };
+            limits?: {
+                cpu?: string;
+                memory?: string;
+            };
+        };
+        serviceMonitor?: {
+            enabled?: boolean;
+        };
+        values?: {
+            global?: {
+                imageRegistry?: string;
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+            };
+            replicaCount?: number;
+            image?: {
+                registry?: string;
+                repository?: string;
+                tag?: string;
+                pullPolicy?: "Always" | "IfNotPresent" | "Never";
+            };
+            imagePullSecrets?: object[];
+            nameOverride?: string;
+            fullnameOverride?: string;
+            priorityClassName?: string;
+            serviceAccount?: {
+                create?: boolean;
+                annotations?: Record<string, string>;
+                name?: string;
+                automountServiceAccountToken?: boolean;
+            };
+            podSecurityContext?: object;
+            securityContext?: object;
+            job?: {
+                annotations?: Record<string, string>;
+                labels?: Record<string, string>;
+                extraContainers?: string | object[];
+                extraEnv?: object[];
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+                extraInitContainers?: string;
+                nodeSelector?: Record<string, string>;
+                resources?: {
+                    limits?: object;
+                    requests?: object;
+                };
+                tolerations?: object[];
+                lifecycle?: string | object;
+                automountServiceAccountToken?: boolean;
+                shareProcessNamespace?: boolean;
+                serviceAccount?: {
+                    create?: boolean;
+                    annotations?: Record<string, string>;
+                    name?: string;
+                    automountServiceAccountToken?: boolean;
+                };
+                spec?: {
+                    backoffLimit?: number;
+                };
+            };
+            ingress?: {
+                read?: {
+                    enabled?: boolean;
+                    className?: string;
+                    annotations?: Record<string, string>;
+                    hosts?: {
+                        host?: string;
+                        paths?: {
+                            path?: string;
+                            pathType?: "Prefix" | "Exact" | "ImplementationSpecific";
+                        }[];
+                    }[];
+                    tls?: {
+                        secretName?: string;
+                        hosts?: string[];
+                    }[];
+                    defaultBackend?: object;
+                };
+                write?: {
+                    enabled?: boolean;
+                    className?: string;
+                    annotations?: Record<string, string>;
+                    hosts?: {
+                        host?: string;
+                        paths?: {
+                            path?: string;
+                            pathType?: "Prefix" | "Exact" | "ImplementationSpecific";
+                        }[];
+                    }[];
+                    tls?: {
+                        secretName?: string;
+                        hosts?: string[];
+                    }[];
+                    defaultBackend?: object;
+                };
+            };
+            service?: {
+                read?: {
+                    enabled?: boolean;
+                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
+                    clusterIP?: string;
+                    loadBalancerIP?: string;
+                    nodePort?: string | number;
+                    port?: number;
+                    containerPort?: number;
+                    name?: string;
+                    annotations?: Record<string, string>;
+                    labels?: Record<string, string>;
+                    metricsPath?: string;
+                    appProtocol?: string;
+                    externalTrafficPolicy?: string;
+                    internalTrafficPolicy?: string;
+                    headless?: {
+                        enabled?: boolean;
+                    };
+                };
+                write?: {
+                    enabled?: boolean;
+                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
+                    clusterIP?: string;
+                    loadBalancerIP?: string;
+                    nodePort?: string | number;
+                    port?: number;
+                    containerPort?: number;
+                    name?: string;
+                    annotations?: Record<string, string>;
+                    labels?: Record<string, string>;
+                    metricsPath?: string;
+                    appProtocol?: string;
+                    externalTrafficPolicy?: string;
+                    internalTrafficPolicy?: string;
+                    headless?: {
+                        enabled?: boolean;
+                    };
+                };
+                metrics?: {
+                    enabled?: boolean;
+                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
+                    clusterIP?: string;
+                    loadBalancerIP?: string;
+                    nodePort?: string | number;
+                    port?: number;
+                    containerPort?: number;
+                    name?: string;
+                    annotations?: Record<string, string>;
+                    labels?: Record<string, string>;
+                    metricsPath?: string;
+                    appProtocol?: string;
+                    externalTrafficPolicy?: string;
+                    internalTrafficPolicy?: string;
+                    headless?: {
+                        enabled?: boolean;
+                    };
+                };
+            };
+            extraServices?: object;
+            secret?: {
+                enabled?: boolean;
+                nameOverride?: string;
+                enableDefaultAnnotations?: boolean;
+                secretAnnotations?: Record<string, string>;
+                extraAnnotations?: Record<string, string>;
+                hashSumEnabled?: boolean;
+                mountPath?: string;
+                filename?: string;
+            };
+            keto?: {
+                command?: string[];
+                customArgs?: string[];
+                automigration?: {
+                    enabled?: boolean;
+                    type?: "job" | "initContainer";
+                    customCommand?: string[];
+                    customArgs?: string[];
+                    resources?: {
+                        limits?: object;
+                        requests?: object;
+                    };
+                    extraEnv?: object[];
+                };
+                config?: object;
+                customMigrations?: {
+                    jobs?: object;
+                };
+            };
+            deployment?: {
+                strategy?: {
+                    type?: string;
+                    rollingUpdate?: {
+                        maxSurge?: string | number;
+                        maxUnavailable?: string | number;
+                    };
+                };
+                minReadySeconds?: number;
+                podAnnotations?: Record<string, string>;
+                lifecycle?: object;
+                readinessProbe?: {
+                    initialDelaySeconds?: number;
+                    periodSeconds?: number;
+                    failureThreshold?: number;
+                    successThreshold?: number;
+                    timeoutSeconds?: number;
+                };
+                startupProbe?: {
+                    initialDelaySeconds?: number;
+                    periodSeconds?: number;
+                    failureThreshold?: number;
+                    successThreshold?: number;
+                    timeoutSeconds?: number;
+                };
+                customLivenessProbe?: object;
+                customReadinessProbe?: object;
+                customStartupProbe?: object;
+                annotations?: Record<string, string>;
+                autoscaling?: {
+                    enabled?: boolean;
+                    minReplicas?: number;
+                    maxReplicas?: number;
+                    targetCPU?: object;
+                    targetMemory?: object;
+                    behavior?: object;
+                    extraMetrics?: object[];
+                };
+                extraContainers?: string;
+                extraEnv?: object[];
+                extraVolumes?: object[];
+                extraVolumeMounts?: object[];
+                extraInitContainers?: string | object;
+                extraLabels?: Record<string, string>;
+                extraPorts?: object[];
+                automigration?: {
+                    extraEnv?: object[];
+                };
+                revisionHistoryLimit?: number;
+                resources?: {
+                    limits?: object;
+                    requests?: object;
+                };
+                podSecurityContext?: object;
+                securityContext?: object;
+                nodeSelector?: Record<string, string>;
+                tolerations?: object[];
+                affinity?: object;
+                topologySpreadConstraints?: object[];
+                dnsConfig?: object;
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+                automountServiceAccountToken?: boolean;
+                terminationGracePeriodSeconds?: number;
+            };
+            watcher?: {
+                enabled?: boolean;
+                image?: string;
+                mountFile?: string;
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+                watchLabelKey?: string;
+                revisionHistoryLimit?: number;
+                automountServiceAccountToken?: boolean;
+                podSecurityContext?: object;
+                securityContext?: object;
+                resources?: {
+                    limits?: object;
+                    requests?: object;
+                };
+            };
+            pdb?: {
+                enabled?: boolean;
+                spec?: {
+                    minAvailable?: string | number;
+                    maxUnavailable?: string | number;
+                };
+            };
+            serviceMonitor?: {
+                enabled?: boolean;
+                scheme?: string;
+                scrapeInterval?: string;
+                scrapeTimeout?: string;
+                relabelings?: object[];
+                metricRelabelings?: object[];
+                labels?: Record<string, string>;
+                tlsConfig?: object;
+                targetLabels?: string[];
+            };
+            configmap?: {
+                hashSumEnabled?: boolean;
+                annotations?: Record<string, string>;
+            };
+            test?: {
+                labels?: Record<string, string>;
+                busybox?: {
+                    registry?: string;
+                    repository?: string;
+                    tag?: string;
+                };
+            };
+        };
+    };
+    oathkeeper?: {
+        managedAccessRules?: boolean;
+        mutatorIdTokenJwks?: {
+            value: string;
+        } | {
+            secretRef: {
+                name: string;
+                key: string;
+            };
+        };
+        replicaCount?: number;
+        resources?: {
+            requests?: {
+                cpu?: string;
+                memory?: string;
+            };
+            limits?: {
+                cpu?: string;
+                memory?: string;
+            };
+        };
+        serviceMonitor?: {
+            enabled?: boolean;
+        };
+        values?: {
+            global?: {
+                imageRegistry?: string;
+                ory?: object;
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+            };
+            replicaCount?: number;
+            revisionHistoryLimit?: number;
+            image?: {
+                registry?: string;
+                repository?: string;
+                tag?: string;
+                pullPolicy?: "Always" | "IfNotPresent" | "Never";
+                initContainer?: {
+                    repository?: string;
+                    tag?: string;
+                };
+            };
+            sidecar?: {
+                image?: {
+                    repository?: string;
+                    tag?: string;
+                };
+                envs?: object;
+            };
+            priorityClassName?: string;
+            imagePullSecrets?: object[];
+            nameOverride?: string;
+            fullnameOverride?: string;
+            securityContext?: object;
+            podSecurityContext?: object;
+            demo?: boolean;
+            service?: {
+                proxy?: {
+                    enabled?: boolean;
+                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
+                    clusterIP?: string;
+                    loadBalancerIP?: string;
+                    nodePort?: string | number;
+                    port?: number;
+                    containerPort?: number;
+                    name?: string;
+                    annotations?: Record<string, string>;
+                    labels?: Record<string, string>;
+                    metricsPath?: string;
+                    appProtocol?: string;
+                    externalTrafficPolicy?: string;
+                    internalTrafficPolicy?: string;
+                    headless?: {
+                        enabled?: boolean;
+                    };
+                };
+                api?: {
+                    enabled?: boolean;
+                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
+                    clusterIP?: string;
+                    loadBalancerIP?: string;
+                    nodePort?: string | number;
+                    port?: number;
+                    containerPort?: number;
+                    name?: string;
+                    annotations?: Record<string, string>;
+                    labels?: Record<string, string>;
+                    metricsPath?: string;
+                    appProtocol?: string;
+                    externalTrafficPolicy?: string;
+                    internalTrafficPolicy?: string;
+                    headless?: {
+                        enabled?: boolean;
+                    };
+                };
+                metrics?: {
+                    enabled?: boolean;
+                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
+                    clusterIP?: string;
+                    loadBalancerIP?: string;
+                    nodePort?: string | number;
+                    port?: number;
+                    containerPort?: number;
+                    name?: string;
+                    annotations?: Record<string, string>;
+                    labels?: Record<string, string>;
+                    metricsPath?: string;
+                    appProtocol?: string;
+                    externalTrafficPolicy?: string;
+                    internalTrafficPolicy?: string;
+                    headless?: {
+                        enabled?: boolean;
+                    };
+                };
+            };
+            ingress?: {
+                proxy?: {
+                    enabled?: boolean;
+                    className?: string;
+                    annotations?: Record<string, string>;
+                    hosts?: {
+                        host?: string;
+                        paths?: {
+                            path?: string;
+                            pathType?: "Prefix" | "Exact" | "ImplementationSpecific";
+                        }[];
+                    }[];
+                    tls?: {
+                        secretName?: string;
+                        hosts?: string[];
+                    }[];
+                    defaultBackend?: object;
+                };
+                api?: {
+                    enabled?: boolean;
+                    className?: string;
+                    annotations?: Record<string, string>;
+                    hosts?: {
+                        host?: string;
+                        paths?: {
+                            path?: string;
+                            pathType?: "Prefix" | "Exact" | "ImplementationSpecific";
+                        }[];
+                    }[];
+                    tls?: {
+                        secretName?: string;
+                        hosts?: string[];
+                    }[];
+                    defaultBackend?: object;
+                };
+            };
+            oathkeeper?: {
+                helmTemplatedConfigEnabled?: boolean;
+                configFileOverride?: {
+                    enabled?: boolean;
+                    nameOverride?: string;
+                };
+                config?: object;
+                mutatorIdTokenJWKs?: string;
+                accessRulesOverride?: {
+                    nameOverride?: string;
+                };
+                accessRules?: string;
+                managedAccessRules?: boolean;
+            };
+            secret?: {
+                enabled?: boolean;
+                nameOverride?: string;
+                enableDefaultAnnotations?: boolean;
+                secretAnnotations?: Record<string, string>;
+                extraAnnotations?: Record<string, string>;
+                hashSumEnabled?: boolean;
+                mountPath?: string;
+                filename?: string;
+            };
+            deployment?: {
+                strategy?: {
+                    type?: string;
+                    rollingUpdate?: {
+                        maxSurge?: string | number;
+                        maxUnavailable?: string | number;
+                    };
+                };
+                lifecycle?: object;
+                readinessProbe?: {
+                    initialDelaySeconds?: number;
+                    periodSeconds?: number;
+                    failureThreshold?: number;
+                    successThreshold?: number;
+                    timeoutSeconds?: number;
+                };
+                startupProbe?: {
+                    initialDelaySeconds?: number;
+                    periodSeconds?: number;
+                    failureThreshold?: number;
+                    successThreshold?: number;
+                    timeoutSeconds?: number;
+                };
+                customLivenessProbe?: object;
+                customReadinessProbe?: object;
+                customStartupProbe?: object;
+                serviceAccount?: {
+                    create?: boolean;
+                    annotations?: Record<string, string>;
+                    name?: string;
+                    automountServiceAccountToken?: boolean;
+                };
+                extraEnv?: object[];
+                extraArgs?: string[];
+                extraVolumes?: object[];
+                extraVolumeMounts?: object[];
+                extraContainers?: string;
+                extraInitContainers?: string;
+                labels?: Record<string, string>;
+                annotations?: Record<string, string>;
+                autoscaling?: {
+                    enabled?: boolean;
+                    minReplicas?: number;
+                    maxReplicas?: number;
+                    targetCPU?: object;
+                    targetMemory?: object;
+                    behavior?: object;
+                    extraMetrics?: object[];
+                };
+                resources?: {
+                    limits?: object;
+                    requests?: object;
+                };
+                podSecurityContext?: object;
+                securityContext?: object;
+                nodeSelector?: Record<string, string>;
+                tolerations?: object[];
+                affinity?: object;
+                topologySpreadConstraints?: object[];
+                dnsConfig?: object;
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+                automountServiceAccountToken?: boolean;
+                terminationGracePeriodSeconds?: number;
+            };
+            affinity?: object;
+            maester?: {
+                enabled?: boolean;
+            };
+            pdb?: {
+                enabled?: boolean;
+                spec?: {
+                    minAvailable?: string | number;
+                    maxUnavailable?: string | number;
+                };
+            };
+            serviceMonitor?: {
+                enabled?: boolean;
+                scheme?: string;
+                scrapeInterval?: string;
+                scrapeTimeout?: string;
+                relabelings?: object[];
+                metricRelabelings?: object[];
+                labels?: Record<string, string>;
+                tlsConfig?: object;
+                targetLabels?: string[];
+            };
+            configmap?: {
+                hashSumEnabled?: boolean;
+                annotations?: Record<string, string>;
+            };
+            test?: {
+                labels?: Record<string, string>;
+                busybox?: {
+                    registry?: string;
+                    repository?: string;
+                    tag?: string;
+                };
+            };
+        };
+    };
+    maester?: {
+        hydra?: {
+            enabled?: boolean;
+            singleNamespaceMode?: boolean;
+            enabledNamespaces?: string[];
+            serviceMonitor?: {
+                enabled?: boolean;
+            };
+        };
+        oathkeeper?: {
+            enabled?: boolean;
+            singleNamespaceMode?: boolean;
+            rulesConfigmapNamespace?: string;
+            rulesFileName?: string;
+        };
+        hydraValues?: {
+            global?: {
+                imageRegistry?: string;
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+            };
+            replicaCount?: number;
+            revisionHistoryLimit?: number;
+            enabledNamespaces?: string[];
+            singleNamespaceMode?: boolean;
+            image?: {
+                registry?: string;
+                repository?: string;
+                tag?: string;
+                pullPolicy?: "Always" | "IfNotPresent" | "Never";
+            };
+            imagePullSecrets?: object[];
+            priorityClassName?: string;
+            adminService?: {
+                name?: string;
+                port?: number;
+                endpoint?: string;
+                scheme?: string;
+                tlsTrustStorePath?: string;
+                insecureSkipVerify?: boolean;
+            };
+            forwardedProto?: string;
+            deployment?: {
+                args?: {
+                    syncPeriod?: string;
+                };
+                extraEnv?: object[];
+                extraVolumes?: object[];
+                extraVolumeMounts?: object[];
+                serviceAccount?: {
+                    create?: boolean;
+                    annotations?: Record<string, string>;
+                    name?: string;
+                    automountServiceAccountToken?: boolean;
+                };
+                resources?: {
+                    limits?: object;
+                    requests?: object;
+                };
+                podSecurityContext?: object;
+                securityContext?: object;
+                nodeSelector?: Record<string, string>;
+                tolerations?: object[];
+                affinity?: object;
+                topologySpreadConstraints?: object[];
+                dnsConfig?: object;
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+                automountServiceAccountToken?: boolean;
+                terminationGracePeriodSeconds?: number;
+            };
+            affinity?: object;
+            pdb?: {
+                enabled?: boolean;
+                spec?: {
+                    minAvailable?: string | number;
+                    maxUnavailable?: string | number;
+                };
+            };
+            service?: {
+                metrics?: {
+                    enabled?: boolean;
+                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
+                    clusterIP?: string;
+                    loadBalancerIP?: string;
+                    nodePort?: string | number;
+                    port?: number;
+                    containerPort?: number;
+                    name?: string;
+                    annotations?: Record<string, string>;
+                    labels?: Record<string, string>;
+                    metricsPath?: string;
+                    appProtocol?: string;
+                    externalTrafficPolicy?: string;
+                    internalTrafficPolicy?: string;
+                    headless?: {
+                        enabled?: boolean;
+                    };
+                };
+            };
+            serviceMonitor?: {
+                enabled?: boolean;
+                scheme?: string;
+                scrapeInterval?: string;
+                scrapeTimeout?: string;
+                relabelings?: object[];
+                metricRelabelings?: object[];
+                labels?: Record<string, string>;
+                tlsConfig?: object;
+                targetLabels?: string[];
+            };
+        };
+        oathkeeperValues?: {
+            global?: {
+                imageRegistry?: string;
+                ory?: object;
+                podMetadata?: {
+                    labels?: Record<string, string>;
+                    annotations?: Record<string, string>;
+                };
+            };
+            replicaCount?: number;
+            revisionHistoryLimit?: number;
+            singleNamespaceMode?: boolean;
+            rulesConfigmapNamespace?: string;
+            rulesFileName?: string;
+            image?: {
+                registry?: string;
+                repository?: string;
+                tag?: string;
+                pullPolicy?: "Always" | "IfNotPresent" | "Never";
+            };
+            imagePullSecrets?: object[];
+            securityContext?: object;
+            podSecurityContext?: object;
+            deployment?: {
+                envs?: object;
+                extraLabels?: Record<string, string>;
+                annotations?: Record<string, string>;
+            };
+            affinity?: object;
+            pdb?: {
+                enabled?: boolean;
+                spec?: {
+                    minAvailable?: string | number;
+                    maxUnavailable?: string | number;
+                };
+            };
+        };
+    };
+    resources?: {
+        oauth2Clients?: {
+            name: string;
+            spec: {
+                grantTypes: ("client_credentials" | "authorization_code" | "implicit" | "refresh_token")[];
+                secretName: string;
+                accessTokenStrategy?: "opaque" | "jwt";
+                allowedCorsOrigins?: string[];
+                audience?: string[];
+                backChannelLogoutSessionRequired?: boolean;
+                backChannelLogoutURI?: string;
+                clientName?: string;
+                clientSecretExpiresAt?: number;
+                clientUri?: string;
+                contacts?: string[];
+                deletionPolicy?: "delete" | "orphan";
+                frontChannelLogoutSessionRequired?: boolean;
+                frontChannelLogoutURI?: string;
+                hydraAdmin?: {
+                    endpoint?: string;
+                    forwardedProto?: string;
+                    port?: number;
+                    url?: string;
+                };
+                jwksUri?: string;
+                logoUri?: string;
+                metadata?: object;
+                policyUri?: string;
+                postLogoutRedirectUris?: string[];
+                redirectUris?: string[];
+                requestObjectSigningAlg?: string;
+                requestUris?: string[];
+                responseTypes?: ("code" | "token" | "id_token" | "code token" | "code id_token" | "id_token token" | "code id_token token")[];
+                scope?: string;
+                scopeArray?: string[];
+                sectorIdentifierUri?: string;
+                skipConsent?: boolean;
+                skipLogoutConsent?: boolean;
+                subjectType?: "public" | "pairwise";
+                tokenEndpointAuthMethod?: "none" | "client_secret_basic" | "client_secret_post" | "private_key_jwt";
+                tokenEndpointAuthSigningAlg?: string;
+                tokenLifespans?: {
+                    authorization_code_grant_access_token_lifespan?: string;
+                    authorization_code_grant_id_token_lifespan?: string;
+                    authorization_code_grant_refresh_token_lifespan?: string;
+                    client_credentials_grant_access_token_lifespan?: string;
+                    implicit_grant_access_token_lifespan?: string;
+                    implicit_grant_id_token_lifespan?: string;
+                    jwt_bearer_grant_access_token_lifespan?: string;
+                    refresh_token_grant_access_token_lifespan?: string;
+                    refresh_token_grant_id_token_lifespan?: string;
+                    refresh_token_grant_refresh_token_lifespan?: string;
+                };
+                tosUri?: string;
+                userinfoSignedResponseAlg?: string;
+            };
+            id?: string;
+            namespace?: string;
+        }[];
+        oathkeeperRules?: {
+            name: string;
+            spec: {
+                match: {
+                    methods: string[];
+                    url: string;
+                };
+                authenticators?: {
+                    handler: string;
+                    config?: object;
+                }[];
+                authorizer?: {
+                    handler: string;
+                    config?: object;
+                };
+                configMapName?: string;
+                errors?: {
+                    handler: string;
+                    config?: object;
+                }[];
+                mutators?: {
+                    handler: string;
+                    config?: object;
+                }[];
+                upstream?: {
+                    url: string;
+                    preserveHost?: boolean;
+                    stripPath?: string;
+                };
+            };
+            id?: string;
+            namespace?: string;
+        }[];
+    };
+}, {
+    ready: boolean;
+    phase: "Ready" | "Installing";
+    components: {
+        hydra: boolean;
+        kratos: boolean;
+        keto: boolean;
+        oathkeeper: boolean;
+    };
+    maester: {
+        hydra: boolean;
+        oathkeeper: boolean;
+    };
+    endpoints: {
+        hydraPublic: {
+            url: string;
+            scheme: string;
+            host: string;
+            clusterIP?: string;
+            port?: number;
+            serviceName?: string;
+            namespace?: string;
+        };
+        hydraAdmin: {
+            url: string;
+            scheme: string;
+            host: string;
+            clusterIP?: string;
+            port?: number;
+            serviceName?: string;
+            namespace?: string;
+        };
+        kratosPublic: {
+            url: string;
+            scheme: string;
+            host: string;
+            clusterIP?: string;
+            port?: number;
+            serviceName?: string;
+            namespace?: string;
+        };
+        kratosAdmin: {
+            url: string;
+            scheme: string;
+            host: string;
+            clusterIP?: string;
+            port?: number;
+            serviceName?: string;
+            namespace?: string;
+        };
+        ketoRead: {
+            url: string;
+            scheme: string;
+            host: string;
+            clusterIP?: string;
+            port?: number;
+            serviceName?: string;
+            namespace?: string;
+        };
+        ketoWrite: {
+            url: string;
+            scheme: string;
+            host: string;
+            clusterIP?: string;
+            port?: number;
+            serviceName?: string;
+            namespace?: string;
+        };
+        oathkeeperProxy: {
+            url: string;
+            scheme: string;
+            host: string;
+            clusterIP?: string;
+            port?: number;
+            serviceName?: string;
+            namespace?: string;
+        };
+        oathkeeperApi: {
+            url: string;
+            scheme: string;
+            host: string;
+            clusterIP?: string;
+            port?: number;
+            serviceName?: string;
+            namespace?: string;
+        };
+    };
+    version?: string;
+}>;
+//# sourceMappingURL=ory-identity-stack.d.ts.map