typekro 0.43.0 → 0.44.0

package/dist/factories/ory/compositions/ory-identity-stack.d.ts

@@ -1,3 +1,5 @@
+import type { CallableComposition } from '../../../core/types/deployment.js';
+import { OryIdentityStackConfigSchema, OryIdentityStackStatusSchema } from '../types.js';
 /**
  * KRO cannot vary a post-renderer environment entry between `value` and
  * `valueFrom` from a runtime schema branch. Keep the admission boundary
@@ -15,2071 +17,5 @@ export declare const oryKroLiteralSecretSchemaFieldValidations: Readonly<{
  * Creates the target namespace, official Ory Helm repository, Hydra/Kratos/Keto/Oathkeeper
  * HelmReleases, optional starter Maester resources, and status fields used by direct and KRO modes.
  */
-export declare const oryIdentityStack: import("../../../index.js").CallableComposition<{
-    name: string;
-    namespace?: string;
-    namespaceOwnership?: "external" | "owned";
-    version?: string;
-    dependencySources?: {
-        hydra?: {
-            database?: {
-                dsn: {
-                    mode: "external";
-                    value?: {
-                        value: string;
-                    } | {
-                        secretRef: {
-                            name: string;
-                            key: string;
-                        };
-                    };
-                    url?: string;
-                    resourceName?: string;
-                } | {
-                    mode: "managed";
-                    resourceName?: string;
-                    url?: string;
-                    namespace?: string;
-                    secretName?: string;
-                    secretKey?: string;
-                };
-                databaseName?: string;
-            };
-            systemSecret?: {
-                mode: "external";
-                value?: {
-                    value: string;
-                } | {
-                    secretRef: {
-                        name: string;
-                        key: string;
-                    };
-                };
-                url?: string;
-                resourceName?: string;
-            } | {
-                mode: "managed";
-                resourceName?: string;
-                url?: string;
-                namespace?: string;
-                secretName?: string;
-                secretKey?: string;
-            };
-            issuerUrl?: {
-                url: {
-                    mode: "external";
-                    value?: {
-                        value: string;
-                    } | {
-                        secretRef: {
-                            name: string;
-                            key: string;
-                        };
-                    };
-                    url?: string;
-                    resourceName?: string;
-                } | {
-                    mode: "managed";
-                    resourceName?: string;
-                    url?: string;
-                    namespace?: string;
-                    secretName?: string;
-                    secretKey?: string;
-                };
-            };
-            loginUrl?: {
-                url: {
-                    mode: "external";
-                    value?: {
-                        value: string;
-                    } | {
-                        secretRef: {
-                            name: string;
-                            key: string;
-                        };
-                    };
-                    url?: string;
-                    resourceName?: string;
-                } | {
-                    mode: "managed";
-                    resourceName?: string;
-                    url?: string;
-                    namespace?: string;
-                    secretName?: string;
-                    secretKey?: string;
-                };
-            };
-            consentUrl?: {
-                url: {
-                    mode: "external";
-                    value?: {
-                        value: string;
-                    } | {
-                        secretRef: {
-                            name: string;
-                            key: string;
-                        };
-                    };
-                    url?: string;
-                    resourceName?: string;
-                } | {
-                    mode: "managed";
-                    resourceName?: string;
-                    url?: string;
-                    namespace?: string;
-                    secretName?: string;
-                    secretKey?: string;
-                };
-            };
-            logoutUrl?: {
-                url: {
-                    mode: "external";
-                    value?: {
-                        value: string;
-                    } | {
-                        secretRef: {
-                            name: string;
-                            key: string;
-                        };
-                    };
-                    url?: string;
-                    resourceName?: string;
-                } | {
-                    mode: "managed";
-                    resourceName?: string;
-                    url?: string;
-                    namespace?: string;
-                    secretName?: string;
-                    secretKey?: string;
-                };
-            };
-        };
-        kratos?: {
-            database?: {
-                dsn: {
-                    mode: "external";
-                    value?: {
-                        value: string;
-                    } | {
-                        secretRef: {
-                            name: string;
-                            key: string;
-                        };
-                    };
-                    url?: string;
-                    resourceName?: string;
-                } | {
-                    mode: "managed";
-                    resourceName?: string;
-                    url?: string;
-                    namespace?: string;
-                    secretName?: string;
-                    secretKey?: string;
-                };
-                databaseName?: string;
-            };
-            publicBaseUrl?: {
-                url: {
-                    mode: "external";
-                    value?: {
-                        value: string;
-                    } | {
-                        secretRef: {
-                            name: string;
-                            key: string;
-                        };
-                    };
-                    url?: string;
-                    resourceName?: string;
-                } | {
-                    mode: "managed";
-                    resourceName?: string;
-                    url?: string;
-                    namespace?: string;
-                    secretName?: string;
-                    secretKey?: string;
-                };
-            };
-            browserBaseUrl?: {
-                url: {
-                    mode: "external";
-                    value?: {
-                        value: string;
-                    } | {
-                        secretRef: {
-                            name: string;
-                            key: string;
-                        };
-                    };
-                    url?: string;
-                    resourceName?: string;
-                } | {
-                    mode: "managed";
-                    resourceName?: string;
-                    url?: string;
-                    namespace?: string;
-                    secretName?: string;
-                    secretKey?: string;
-                };
-            };
-            secrets?: Record<string, unknown>;
-            courier?: {
-                mode: "external";
-                value?: {
-                    value: string;
-                } | {
-                    secretRef: {
-                        name: string;
-                        key: string;
-                    };
-                };
-                url?: string;
-                resourceName?: string;
-            } | {
-                mode: "managed";
-                resourceName?: string;
-                url?: string;
-                namespace?: string;
-                secretName?: string;
-                secretKey?: string;
-            };
-        };
-        keto?: {
-            database?: {
-                dsn: {
-                    mode: "external";
-                    value?: {
-                        value: string;
-                    } | {
-                        secretRef: {
-                            name: string;
-                            key: string;
-                        };
-                    };
-                    url?: string;
-                    resourceName?: string;
-                } | {
-                    mode: "managed";
-                    resourceName?: string;
-                    url?: string;
-                    namespace?: string;
-                    secretName?: string;
-                    secretKey?: string;
-                };
-                databaseName?: string;
-            };
-        };
-        oathkeeper?: {
-            proxyRoute?: {
-                url: {
-                    mode: "external";
-                    value?: {
-                        value: string;
-                    } | {
-                        secretRef: {
-                            name: string;
-                            key: string;
-                        };
-                    };
-                    url?: string;
-                    resourceName?: string;
-                } | {
-                    mode: "managed";
-                    resourceName?: string;
-                    url?: string;
-                    namespace?: string;
-                    secretName?: string;
-                    secretKey?: string;
-                };
-            };
-            apiRoute?: {
-                url: {
-                    mode: "external";
-                    value?: {
-                        value: string;
-                    } | {
-                        secretRef: {
-                            name: string;
-                            key: string;
-                        };
-                    };
-                    url?: string;
-                    resourceName?: string;
-                } | {
-                    mode: "managed";
-                    resourceName?: string;
-                    url?: string;
-                    namespace?: string;
-                    secretName?: string;
-                    secretKey?: string;
-                };
-            };
-            upstream?: {
-                url: {
-                    mode: "external";
-                    value?: {
-                        value: string;
-                    } | {
-                        secretRef: {
-                            name: string;
-                            key: string;
-                        };
-                    };
-                    url?: string;
-                    resourceName?: string;
-                } | {
-                    mode: "managed";
-                    resourceName?: string;
-                    url?: string;
-                    namespace?: string;
-                    secretName?: string;
-                    secretKey?: string;
-                };
-            };
-            mutatorIdTokenJwks?: {
-                mode: "external";
-                value?: {
-                    value: string;
-                } | {
-                    secretRef: {
-                        name: string;
-                        key: string;
-                    };
-                };
-                url?: string;
-                resourceName?: string;
-            } | {
-                mode: "managed";
-                resourceName?: string;
-                url?: string;
-                namespace?: string;
-                secretName?: string;
-                secretKey?: string;
-            };
-        };
-        courier?: {
-            mode: "external";
-            value?: {
-                value: string;
-            } | {
-                secretRef: {
-                    name: string;
-                    key: string;
-                };
-            };
-            url?: string;
-            resourceName?: string;
-        } | {
-            mode: "managed";
-            resourceName?: string;
-            url?: string;
-            namespace?: string;
-            secretName?: string;
-            secretKey?: string;
-        };
-    };
-    shared?: boolean;
-    global?: {
-        imageRegistry?: string;
-        imagePullSecrets?: string[];
-    };
-    hydra?: {
-        dsn?: {
-            value: string;
-        } | {
-            secretRef: {
-                name: string;
-                key: string;
-            };
-        };
-        issuerUrl?: string;
-        loginUrl?: string;
-        consentUrl?: string;
-        logoutUrl?: string;
-        systemSecret?: {
-            value: string;
-        } | {
-            secretRef: {
-                name: string;
-                key: string;
-            };
-        };
-        replicaCount?: number;
-        resources?: {
-            requests?: {
-                cpu?: string;
-                memory?: string;
-            };
-            limits?: {
-                cpu?: string;
-                memory?: string;
-            };
-        };
-        serviceMonitor?: {
-            enabled?: boolean;
-        };
-        values?: {
-            global?: {
-                imageRegistry?: string;
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-            };
-            replicaCount?: number;
-            image?: {
-                registry?: string;
-                repository?: string;
-                tag?: string;
-                pullPolicy?: "Always" | "IfNotPresent" | "Never";
-            };
-            imagePullSecrets?: object[];
-            nameOverride?: string;
-            fullnameOverride?: string;
-            priorityClassName?: string;
-            service?: {
-                public?: {
-                    enabled?: boolean;
-                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
-                    clusterIP?: string;
-                    loadBalancerIP?: string;
-                    nodePort?: string | number;
-                    port?: number;
-                    containerPort?: number;
-                    name?: string;
-                    annotations?: Record<string, string>;
-                    labels?: Record<string, string>;
-                    metricsPath?: string;
-                    appProtocol?: string;
-                    externalTrafficPolicy?: string;
-                    internalTrafficPolicy?: string;
-                    headless?: {
-                        enabled?: boolean;
-                    };
-                };
-                admin?: {
-                    enabled?: boolean;
-                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
-                    clusterIP?: string;
-                    loadBalancerIP?: string;
-                    nodePort?: string | number;
-                    port?: number;
-                    containerPort?: number;
-                    name?: string;
-                    annotations?: Record<string, string>;
-                    labels?: Record<string, string>;
-                    metricsPath?: string;
-                    appProtocol?: string;
-                    externalTrafficPolicy?: string;
-                    internalTrafficPolicy?: string;
-                    headless?: {
-                        enabled?: boolean;
-                    };
-                };
-            };
-            secret?: {
-                enabled?: boolean;
-                nameOverride?: string;
-                enableDefaultAnnotations?: boolean;
-                secretAnnotations?: Record<string, string>;
-                extraAnnotations?: Record<string, string>;
-                hashSumEnabled?: boolean;
-                mountPath?: string;
-                filename?: string;
-            };
-            ingress?: {
-                public?: {
-                    enabled?: boolean;
-                    className?: string;
-                    annotations?: Record<string, string>;
-                    hosts?: {
-                        host?: string;
-                        paths?: {
-                            path?: string;
-                            pathType?: "Exact" | "Prefix" | "ImplementationSpecific";
-                        }[];
-                    }[];
-                    tls?: {
-                        secretName?: string;
-                        hosts?: string[];
-                    }[];
-                    defaultBackend?: object;
-                };
-                admin?: {
-                    enabled?: boolean;
-                    className?: string;
-                    annotations?: Record<string, string>;
-                    hosts?: {
-                        host?: string;
-                        paths?: {
-                            path?: string;
-                            pathType?: "Exact" | "Prefix" | "ImplementationSpecific";
-                        }[];
-                    }[];
-                    tls?: {
-                        secretName?: string;
-                        hosts?: string[];
-                    }[];
-                    defaultBackend?: object;
-                };
-            };
-            hydra?: {
-                command?: string[];
-                customArgs?: string[];
-                config?: object;
-                automigration?: {
-                    enabled?: boolean;
-                    type?: "job" | "initContainer";
-                    customCommand?: string[];
-                    customArgs?: string[];
-                    resources?: {
-                        limits?: object;
-                        requests?: object;
-                    };
-                    extraEnv?: object[];
-                };
-                customMigrations?: {
-                    jobs?: object;
-                };
-                dev?: boolean;
-            };
-            deployment?: {
-                strategy?: {
-                    type?: string;
-                    rollingUpdate?: {
-                        maxSurge?: string | number;
-                        maxUnavailable?: string | number;
-                    };
-                };
-                initContainerSecurityContext?: object;
-                lifecycle?: object;
-                labels?: Record<string, string>;
-                annotations?: Record<string, string>;
-                extraEnv?: object[];
-                automigration?: {
-                    extraEnv?: object[];
-                };
-                serviceAccount?: {
-                    create?: boolean;
-                    annotations?: Record<string, string>;
-                    name?: string;
-                    automountServiceAccountToken?: boolean;
-                };
-                extraVolumes?: object[];
-                extraVolumeMounts?: object[];
-                autoscaling?: {
-                    enabled?: boolean;
-                    minReplicas?: number;
-                    maxReplicas?: number;
-                    targetCPU?: object;
-                    targetMemory?: object;
-                    behavior?: object;
-                    extraMetrics?: object[];
-                };
-                readinessProbe?: {
-                    initialDelaySeconds?: number;
-                    periodSeconds?: number;
-                    failureThreshold?: number;
-                    successThreshold?: number;
-                    timeoutSeconds?: number;
-                };
-                startupProbe?: {
-                    initialDelaySeconds?: number;
-                    periodSeconds?: number;
-                    failureThreshold?: number;
-                    successThreshold?: number;
-                    timeoutSeconds?: number;
-                };
-                extraInitContainers?: string;
-                extraContainers?: string;
-                customLivenessProbe?: object;
-                customReadinessProbe?: object;
-                customStartupProbe?: object;
-                revisionHistoryLimit?: number;
-                resources?: {
-                    limits?: object;
-                    requests?: object;
-                };
-                podSecurityContext?: object;
-                securityContext?: object;
-                nodeSelector?: Record<string, string>;
-                tolerations?: object[];
-                affinity?: object;
-                topologySpreadConstraints?: object[];
-                dnsConfig?: object;
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-                automountServiceAccountToken?: boolean;
-                terminationGracePeriodSeconds?: number;
-            };
-            job?: {
-                annotations?: Record<string, string>;
-                labels?: Record<string, string>;
-                extraContainers?: string | object[];
-                extraEnv?: object[];
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-                extraInitContainers?: string;
-                nodeSelector?: Record<string, string>;
-                resources?: {
-                    limits?: object;
-                    requests?: object;
-                };
-                tolerations?: object[];
-                lifecycle?: string | object;
-                automountServiceAccountToken?: boolean;
-                shareProcessNamespace?: boolean;
-                serviceAccount?: {
-                    create?: boolean;
-                    annotations?: Record<string, string>;
-                    name?: string;
-                    automountServiceAccountToken?: boolean;
-                };
-                spec?: {
-                    backoffLimit?: number;
-                };
-            };
-            affinity?: object;
-            maester?: {
-                enabled?: boolean;
-            };
-            'hydra-maester'?: {
-                adminService?: {
-                    name?: string;
-                    port?: number;
-                };
-            };
-            watcher?: {
-                enabled?: boolean;
-                image?: string;
-                mountFile?: string;
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-                watchLabelKey?: string;
-                revisionHistoryLimit?: number;
-                automountServiceAccountToken?: boolean;
-                podSecurityContext?: object;
-                securityContext?: object;
-                resources?: {
-                    limits?: object;
-                    requests?: object;
-                };
-            };
-            janitor?: {
-                enabled?: boolean;
-                cleanupGrants?: boolean;
-                cleanupRequests?: boolean;
-                cleanupTokens?: boolean;
-                batchSize?: number;
-                limit?: number;
-            };
-            cronjob?: {
-                janitor?: {
-                    annotations?: Record<string, string>;
-                    labels?: Record<string, string>;
-                    extraContainers?: string | object[];
-                    extraEnv?: object[];
-                    podMetadata?: {
-                        labels?: Record<string, string>;
-                        annotations?: Record<string, string>;
-                    };
-                    extraInitContainers?: string;
-                    nodeSelector?: Record<string, string>;
-                    resources?: {
-                        limits?: object;
-                        requests?: object;
-                    };
-                    tolerations?: object[];
-                    lifecycle?: string | object;
-                    automountServiceAccountToken?: boolean;
-                    shareProcessNamespace?: boolean;
-                    serviceAccount?: {
-                        create?: boolean;
-                        annotations?: Record<string, string>;
-                        name?: string;
-                        automountServiceAccountToken?: boolean;
-                    };
-                    spec?: {
-                        backoffLimit?: number;
-                    };
-                };
-            };
-            pdb?: {
-                enabled?: boolean;
-                spec?: {
-                    minAvailable?: string | number;
-                    maxUnavailable?: string | number;
-                };
-            };
-            serviceMonitor?: {
-                enabled?: boolean;
-                scheme?: string;
-                scrapeInterval?: string;
-                scrapeTimeout?: string;
-                relabelings?: object[];
-                metricRelabelings?: object[];
-                labels?: Record<string, string>;
-                tlsConfig?: object;
-                targetLabels?: string[];
-            };
-            configmap?: {
-                hashSumEnabled?: boolean;
-                annotations?: Record<string, string>;
-            };
-            test?: {
-                labels?: Record<string, string>;
-                busybox?: {
-                    registry?: string;
-                    repository?: string;
-                    tag?: string;
-                };
-            };
-        };
-    };
-    kratos?: {
-        dsn?: {
-            value: string;
-        } | {
-            secretRef: {
-                name: string;
-                key: string;
-            };
-        };
-        publicBaseUrl?: string;
-        browserBaseUrl?: string;
-        identitySchema?: string;
-        courier?: object;
-        secrets?: Record<string, unknown>;
-        replicaCount?: number;
-        resources?: {
-            requests?: {
-                cpu?: string;
-                memory?: string;
-            };
-            limits?: {
-                cpu?: string;
-                memory?: string;
-            };
-        };
-        serviceMonitor?: {
-            enabled?: boolean;
-        };
-        values?: {
-            global?: {
-                imageRegistry?: string;
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-            };
-            replicaCount?: number;
-            strategy?: {
-                type?: string;
-                rollingUpdate?: {
-                    maxSurge?: string | number;
-                    maxUnavailable?: string | number;
-                };
-            };
-            image?: {
-                registry?: string;
-                repository?: string;
-                tag?: string;
-                pullPolicy?: "Always" | "IfNotPresent" | "Never";
-            };
-            imagePullSecrets?: object[];
-            nameOverride?: string;
-            fullnameOverride?: string;
-            service?: {
-                admin?: {
-                    enabled?: boolean;
-                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
-                    clusterIP?: string;
-                    loadBalancerIP?: string;
-                    nodePort?: string | number;
-                    port?: number;
-                    containerPort?: number;
-                    name?: string;
-                    annotations?: Record<string, string>;
-                    labels?: Record<string, string>;
-                    metricsPath?: string;
-                    appProtocol?: string;
-                    externalTrafficPolicy?: string;
-                    internalTrafficPolicy?: string;
-                    headless?: {
-                        enabled?: boolean;
-                    };
-                };
-                public?: {
-                    enabled?: boolean;
-                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
-                    clusterIP?: string;
-                    loadBalancerIP?: string;
-                    nodePort?: string | number;
-                    port?: number;
-                    containerPort?: number;
-                    name?: string;
-                    annotations?: Record<string, string>;
-                    labels?: Record<string, string>;
-                    metricsPath?: string;
-                    appProtocol?: string;
-                    externalTrafficPolicy?: string;
-                    internalTrafficPolicy?: string;
-                    headless?: {
-                        enabled?: boolean;
-                    };
-                };
-                courier?: {
-                    enabled?: boolean;
-                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
-                    clusterIP?: string;
-                    loadBalancerIP?: string;
-                    nodePort?: string | number;
-                    port?: number;
-                    containerPort?: number;
-                    name?: string;
-                    annotations?: Record<string, string>;
-                    labels?: Record<string, string>;
-                    metricsPath?: string;
-                    appProtocol?: string;
-                    externalTrafficPolicy?: string;
-                    internalTrafficPolicy?: string;
-                    headless?: {
-                        enabled?: boolean;
-                    };
-                };
-            };
-            secret?: {
-                enabled?: boolean;
-                nameOverride?: string;
-                enableDefaultAnnotations?: boolean;
-                secretAnnotations?: Record<string, string>;
-                extraAnnotations?: Record<string, string>;
-                hashSumEnabled?: boolean;
-                mountPath?: string;
-                filename?: string;
-            };
-            ingress?: {
-                admin?: {
-                    enabled?: boolean;
-                    className?: string;
-                    annotations?: Record<string, string>;
-                    hosts?: {
-                        host?: string;
-                        paths?: {
-                            path?: string;
-                            pathType?: "Exact" | "Prefix" | "ImplementationSpecific";
-                        }[];
-                    }[];
-                    tls?: {
-                        secretName?: string;
-                        hosts?: string[];
-                    }[];
-                    defaultBackend?: object;
-                };
-                public?: {
-                    enabled?: boolean;
-                    className?: string;
-                    annotations?: Record<string, string>;
-                    hosts?: {
-                        host?: string;
-                        paths?: {
-                            path?: string;
-                            pathType?: "Exact" | "Prefix" | "ImplementationSpecific";
-                        }[];
-                    }[];
-                    tls?: {
-                        secretName?: string;
-                        hosts?: string[];
-                    }[];
-                    defaultBackend?: object;
-                };
-            };
-            kratos?: {
-                development?: boolean;
-                automigration?: {
-                    enabled?: boolean;
-                    type?: "job" | "initContainer";
-                    customCommand?: string[];
-                    customArgs?: string[];
-                    resources?: {
-                        limits?: object;
-                        requests?: object;
-                    };
-                    extraEnv?: object[];
-                };
-                identitySchemas?: Record<string, string>;
-                emailTemplates?: object;
-                config?: object;
-                customMigrations?: {
-                    jobs?: object;
-                };
-            };
-            deployment?: {
-                lifecycle?: object;
-                readinessProbe?: {
-                    initialDelaySeconds?: number;
-                    periodSeconds?: number;
-                    failureThreshold?: number;
-                    successThreshold?: number;
-                    timeoutSeconds?: number;
-                };
-                startupProbe?: {
-                    initialDelaySeconds?: number;
-                    periodSeconds?: number;
-                    failureThreshold?: number;
-                    successThreshold?: number;
-                    timeoutSeconds?: number;
-                };
-                customLivenessProbe?: object;
-                customReadinessProbe?: object;
-                customStartupProbe?: object;
-                extraArgs?: string[];
-                extraEnv?: object[];
-                extraVolumes?: object[];
-                extraVolumeMounts?: object[];
-                extraInitContainers?: string;
-                extraContainers?: string;
-                priorityClassName?: string;
-                labels?: Record<string, string>;
-                annotations?: Record<string, string>;
-                environmentSecretsName?: string;
-                serviceAccount?: {
-                    create?: boolean;
-                    annotations?: Record<string, string>;
-                    name?: string;
-                    automountServiceAccountToken?: boolean;
-                };
-                automigration?: {
-                    extraEnv?: object[];
-                };
-                revisionHistoryLimit?: number;
-                resources?: {
-                    limits?: object;
-                    requests?: object;
-                };
-                podSecurityContext?: object;
-                securityContext?: object;
-                nodeSelector?: Record<string, string>;
-                tolerations?: object[];
-                affinity?: object;
-                topologySpreadConstraints?: object[];
-                dnsConfig?: object;
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-                automountServiceAccountToken?: boolean;
-                terminationGracePeriodSeconds?: number;
-            };
-            statefulSet?: {
-                resources?: {
-                    limits?: object;
-                    requests?: object;
-                };
-                extraArgs?: string[];
-                extraEnv?: object[];
-                extraVolumes?: object[];
-                extraVolumeMounts?: object[];
-                extraInitContainers?: string;
-                extraContainers?: string;
-                annotations?: Record<string, string>;
-                environmentSecretsName?: string;
-                labels?: Record<string, string>;
-                priorityClassName?: string;
-                log?: {
-                    format?: string;
-                    level?: string;
-                };
-                revisionHistoryLimit?: number;
-                podSecurityContext?: object;
-                securityContext?: object;
-                nodeSelector?: Record<string, string>;
-                tolerations?: object[];
-                affinity?: object;
-                topologySpreadConstraints?: object[];
-                dnsConfig?: object;
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-                automountServiceAccountToken?: boolean;
-                terminationGracePeriodSeconds?: number;
-            };
-            securityContext?: object;
-            autoscaling?: {
-                enabled?: boolean;
-                minReplicas?: number;
-                maxReplicas?: number;
-                targetCPU?: object;
-                targetMemory?: object;
-                behavior?: object;
-                extraMetrics?: object[];
-            };
-            job?: {
-                annotations?: Record<string, string>;
-                labels?: Record<string, string>;
-                extraContainers?: string | object[];
-                extraEnv?: object[];
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-                extraInitContainers?: string;
-                nodeSelector?: Record<string, string>;
-                resources?: {
-                    limits?: object;
-                    requests?: object;
-                };
-                tolerations?: object[];
-                lifecycle?: string | object;
-                automountServiceAccountToken?: boolean;
-                shareProcessNamespace?: boolean;
-                serviceAccount?: {
-                    create?: boolean;
-                    annotations?: Record<string, string>;
-                    name?: string;
-                    automountServiceAccountToken?: boolean;
-                };
-                spec?: {
-                    backoffLimit?: number;
-                };
-            };
-            courier?: {
-                enabled?: boolean;
-            };
-            watcher?: {
-                enabled?: boolean;
-                image?: string;
-                mountFile?: string;
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-                watchLabelKey?: string;
-                revisionHistoryLimit?: number;
-                automountServiceAccountToken?: boolean;
-                podSecurityContext?: object;
-                securityContext?: object;
-                resources?: {
-                    limits?: object;
-                    requests?: object;
-                };
-            };
-            cleanup?: {
-                enabled?: boolean;
-                batchSize?: number;
-                sleepTables?: string;
-                keepLast?: string;
-            };
-            cronjob?: {
-                cleanup?: {
-                    annotations?: Record<string, string>;
-                    labels?: Record<string, string>;
-                    extraContainers?: string | object[];
-                    extraEnv?: object[];
-                    podMetadata?: {
-                        labels?: Record<string, string>;
-                        annotations?: Record<string, string>;
-                    };
-                    extraInitContainers?: string;
-                    nodeSelector?: Record<string, string>;
-                    resources?: {
-                        limits?: object;
-                        requests?: object;
-                    };
-                    tolerations?: object[];
-                    lifecycle?: string | object;
-                    automountServiceAccountToken?: boolean;
-                    shareProcessNamespace?: boolean;
-                    serviceAccount?: {
-                        create?: boolean;
-                        annotations?: Record<string, string>;
-                        name?: string;
-                        automountServiceAccountToken?: boolean;
-                    };
-                    spec?: {
-                        backoffLimit?: number;
-                    };
-                };
-            };
-            pdb?: {
-                enabled?: boolean;
-                spec?: {
-                    minAvailable?: string | number;
-                    maxUnavailable?: string | number;
-                };
-            };
-            serviceMonitor?: {
-                enabled?: boolean;
-                scheme?: string;
-                scrapeInterval?: string;
-                scrapeTimeout?: string;
-                relabelings?: object[];
-                metricRelabelings?: object[];
-                labels?: Record<string, string>;
-                tlsConfig?: object;
-                targetLabels?: string[];
-            };
-            configmap?: {
-                hashSumEnabled?: boolean;
-                annotations?: Record<string, string>;
-            };
-            test?: {
-                labels?: Record<string, string>;
-                busybox?: {
-                    registry?: string;
-                    repository?: string;
-                    tag?: string;
-                };
-            };
-        };
-    };
-    keto?: {
-        dsn?: {
-            value: string;
-        } | {
-            secretRef: {
-                name: string;
-                key: string;
-            };
-        };
-        namespaces?: {
-            id: number;
-            name: string;
-        }[];
-        replicaCount?: number;
-        resources?: {
-            requests?: {
-                cpu?: string;
-                memory?: string;
-            };
-            limits?: {
-                cpu?: string;
-                memory?: string;
-            };
-        };
-        serviceMonitor?: {
-            enabled?: boolean;
-        };
-        values?: {
-            global?: {
-                imageRegistry?: string;
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-            };
-            replicaCount?: number;
-            image?: {
-                registry?: string;
-                repository?: string;
-                tag?: string;
-                pullPolicy?: "Always" | "IfNotPresent" | "Never";
-            };
-            imagePullSecrets?: object[];
-            nameOverride?: string;
-            fullnameOverride?: string;
-            priorityClassName?: string;
-            serviceAccount?: {
-                create?: boolean;
-                annotations?: Record<string, string>;
-                name?: string;
-                automountServiceAccountToken?: boolean;
-            };
-            podSecurityContext?: object;
-            securityContext?: object;
-            job?: {
-                annotations?: Record<string, string>;
-                labels?: Record<string, string>;
-                extraContainers?: string | object[];
-                extraEnv?: object[];
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-                extraInitContainers?: string;
-                nodeSelector?: Record<string, string>;
-                resources?: {
-                    limits?: object;
-                    requests?: object;
-                };
-                tolerations?: object[];
-                lifecycle?: string | object;
-                automountServiceAccountToken?: boolean;
-                shareProcessNamespace?: boolean;
-                serviceAccount?: {
-                    create?: boolean;
-                    annotations?: Record<string, string>;
-                    name?: string;
-                    automountServiceAccountToken?: boolean;
-                };
-                spec?: {
-                    backoffLimit?: number;
-                };
-            };
-            ingress?: {
-                read?: {
-                    enabled?: boolean;
-                    className?: string;
-                    annotations?: Record<string, string>;
-                    hosts?: {
-                        host?: string;
-                        paths?: {
-                            path?: string;
-                            pathType?: "Exact" | "Prefix" | "ImplementationSpecific";
-                        }[];
-                    }[];
-                    tls?: {
-                        secretName?: string;
-                        hosts?: string[];
-                    }[];
-                    defaultBackend?: object;
-                };
-                write?: {
-                    enabled?: boolean;
-                    className?: string;
-                    annotations?: Record<string, string>;
-                    hosts?: {
-                        host?: string;
-                        paths?: {
-                            path?: string;
-                            pathType?: "Exact" | "Prefix" | "ImplementationSpecific";
-                        }[];
-                    }[];
-                    tls?: {
-                        secretName?: string;
-                        hosts?: string[];
-                    }[];
-                    defaultBackend?: object;
-                };
-            };
-            service?: {
-                read?: {
-                    enabled?: boolean;
-                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
-                    clusterIP?: string;
-                    loadBalancerIP?: string;
-                    nodePort?: string | number;
-                    port?: number;
-                    containerPort?: number;
-                    name?: string;
-                    annotations?: Record<string, string>;
-                    labels?: Record<string, string>;
-                    metricsPath?: string;
-                    appProtocol?: string;
-                    externalTrafficPolicy?: string;
-                    internalTrafficPolicy?: string;
-                    headless?: {
-                        enabled?: boolean;
-                    };
-                };
-                write?: {
-                    enabled?: boolean;
-                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
-                    clusterIP?: string;
-                    loadBalancerIP?: string;
-                    nodePort?: string | number;
-                    port?: number;
-                    containerPort?: number;
-                    name?: string;
-                    annotations?: Record<string, string>;
-                    labels?: Record<string, string>;
-                    metricsPath?: string;
-                    appProtocol?: string;
-                    externalTrafficPolicy?: string;
-                    internalTrafficPolicy?: string;
-                    headless?: {
-                        enabled?: boolean;
-                    };
-                };
-                metrics?: {
-                    enabled?: boolean;
-                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
-                    clusterIP?: string;
-                    loadBalancerIP?: string;
-                    nodePort?: string | number;
-                    port?: number;
-                    containerPort?: number;
-                    name?: string;
-                    annotations?: Record<string, string>;
-                    labels?: Record<string, string>;
-                    metricsPath?: string;
-                    appProtocol?: string;
-                    externalTrafficPolicy?: string;
-                    internalTrafficPolicy?: string;
-                    headless?: {
-                        enabled?: boolean;
-                    };
-                };
-            };
-            extraServices?: object;
-            secret?: {
-                enabled?: boolean;
-                nameOverride?: string;
-                enableDefaultAnnotations?: boolean;
-                secretAnnotations?: Record<string, string>;
-                extraAnnotations?: Record<string, string>;
-                hashSumEnabled?: boolean;
-                mountPath?: string;
-                filename?: string;
-            };
-            keto?: {
-                command?: string[];
-                customArgs?: string[];
-                automigration?: {
-                    enabled?: boolean;
-                    type?: "job" | "initContainer";
-                    customCommand?: string[];
-                    customArgs?: string[];
-                    resources?: {
-                        limits?: object;
-                        requests?: object;
-                    };
-                    extraEnv?: object[];
-                };
-                config?: object;
-                customMigrations?: {
-                    jobs?: object;
-                };
-            };
-            deployment?: {
-                strategy?: {
-                    type?: string;
-                    rollingUpdate?: {
-                        maxSurge?: string | number;
-                        maxUnavailable?: string | number;
-                    };
-                };
-                minReadySeconds?: number;
-                podAnnotations?: Record<string, string>;
-                lifecycle?: object;
-                readinessProbe?: {
-                    initialDelaySeconds?: number;
-                    periodSeconds?: number;
-                    failureThreshold?: number;
-                    successThreshold?: number;
-                    timeoutSeconds?: number;
-                };
-                startupProbe?: {
-                    initialDelaySeconds?: number;
-                    periodSeconds?: number;
-                    failureThreshold?: number;
-                    successThreshold?: number;
-                    timeoutSeconds?: number;
-                };
-                customLivenessProbe?: object;
-                customReadinessProbe?: object;
-                customStartupProbe?: object;
-                annotations?: Record<string, string>;
-                autoscaling?: {
-                    enabled?: boolean;
-                    minReplicas?: number;
-                    maxReplicas?: number;
-                    targetCPU?: object;
-                    targetMemory?: object;
-                    behavior?: object;
-                    extraMetrics?: object[];
-                };
-                extraContainers?: string;
-                extraEnv?: object[];
-                extraVolumes?: object[];
-                extraVolumeMounts?: object[];
-                extraInitContainers?: string | object;
-                extraLabels?: Record<string, string>;
-                extraPorts?: object[];
-                automigration?: {
-                    extraEnv?: object[];
-                };
-                revisionHistoryLimit?: number;
-                resources?: {
-                    limits?: object;
-                    requests?: object;
-                };
-                podSecurityContext?: object;
-                securityContext?: object;
-                nodeSelector?: Record<string, string>;
-                tolerations?: object[];
-                affinity?: object;
-                topologySpreadConstraints?: object[];
-                dnsConfig?: object;
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-                automountServiceAccountToken?: boolean;
-                terminationGracePeriodSeconds?: number;
-            };
-            watcher?: {
-                enabled?: boolean;
-                image?: string;
-                mountFile?: string;
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-                watchLabelKey?: string;
-                revisionHistoryLimit?: number;
-                automountServiceAccountToken?: boolean;
-                podSecurityContext?: object;
-                securityContext?: object;
-                resources?: {
-                    limits?: object;
-                    requests?: object;
-                };
-            };
-            pdb?: {
-                enabled?: boolean;
-                spec?: {
-                    minAvailable?: string | number;
-                    maxUnavailable?: string | number;
-                };
-            };
-            serviceMonitor?: {
-                enabled?: boolean;
-                scheme?: string;
-                scrapeInterval?: string;
-                scrapeTimeout?: string;
-                relabelings?: object[];
-                metricRelabelings?: object[];
-                labels?: Record<string, string>;
-                tlsConfig?: object;
-                targetLabels?: string[];
-            };
-            configmap?: {
-                hashSumEnabled?: boolean;
-                annotations?: Record<string, string>;
-            };
-            test?: {
-                labels?: Record<string, string>;
-                busybox?: {
-                    registry?: string;
-                    repository?: string;
-                    tag?: string;
-                };
-            };
-        };
-    };
-    oathkeeper?: {
-        managedAccessRules?: boolean;
-        mutatorIdTokenJwks?: {
-            value: string;
-        } | {
-            secretRef: {
-                name: string;
-                key: string;
-            };
-        };
-        replicaCount?: number;
-        resources?: {
-            requests?: {
-                cpu?: string;
-                memory?: string;
-            };
-            limits?: {
-                cpu?: string;
-                memory?: string;
-            };
-        };
-        serviceMonitor?: {
-            enabled?: boolean;
-        };
-        values?: {
-            global?: {
-                imageRegistry?: string;
-                ory?: object;
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-            };
-            replicaCount?: number;
-            revisionHistoryLimit?: number;
-            image?: {
-                registry?: string;
-                repository?: string;
-                tag?: string;
-                pullPolicy?: "Always" | "IfNotPresent" | "Never";
-                initContainer?: {
-                    repository?: string;
-                    tag?: string;
-                };
-            };
-            sidecar?: {
-                image?: {
-                    repository?: string;
-                    tag?: string;
-                };
-                envs?: object;
-            };
-            priorityClassName?: string;
-            imagePullSecrets?: object[];
-            nameOverride?: string;
-            fullnameOverride?: string;
-            securityContext?: object;
-            podSecurityContext?: object;
-            demo?: boolean;
-            service?: {
-                proxy?: {
-                    enabled?: boolean;
-                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
-                    clusterIP?: string;
-                    loadBalancerIP?: string;
-                    nodePort?: string | number;
-                    port?: number;
-                    containerPort?: number;
-                    name?: string;
-                    annotations?: Record<string, string>;
-                    labels?: Record<string, string>;
-                    metricsPath?: string;
-                    appProtocol?: string;
-                    externalTrafficPolicy?: string;
-                    internalTrafficPolicy?: string;
-                    headless?: {
-                        enabled?: boolean;
-                    };
-                };
-                api?: {
-                    enabled?: boolean;
-                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
-                    clusterIP?: string;
-                    loadBalancerIP?: string;
-                    nodePort?: string | number;
-                    port?: number;
-                    containerPort?: number;
-                    name?: string;
-                    annotations?: Record<string, string>;
-                    labels?: Record<string, string>;
-                    metricsPath?: string;
-                    appProtocol?: string;
-                    externalTrafficPolicy?: string;
-                    internalTrafficPolicy?: string;
-                    headless?: {
-                        enabled?: boolean;
-                    };
-                };
-                metrics?: {
-                    enabled?: boolean;
-                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
-                    clusterIP?: string;
-                    loadBalancerIP?: string;
-                    nodePort?: string | number;
-                    port?: number;
-                    containerPort?: number;
-                    name?: string;
-                    annotations?: Record<string, string>;
-                    labels?: Record<string, string>;
-                    metricsPath?: string;
-                    appProtocol?: string;
-                    externalTrafficPolicy?: string;
-                    internalTrafficPolicy?: string;
-                    headless?: {
-                        enabled?: boolean;
-                    };
-                };
-            };
-            ingress?: {
-                proxy?: {
-                    enabled?: boolean;
-                    className?: string;
-                    annotations?: Record<string, string>;
-                    hosts?: {
-                        host?: string;
-                        paths?: {
-                            path?: string;
-                            pathType?: "Exact" | "Prefix" | "ImplementationSpecific";
-                        }[];
-                    }[];
-                    tls?: {
-                        secretName?: string;
-                        hosts?: string[];
-                    }[];
-                    defaultBackend?: object;
-                };
-                api?: {
-                    enabled?: boolean;
-                    className?: string;
-                    annotations?: Record<string, string>;
-                    hosts?: {
-                        host?: string;
-                        paths?: {
-                            path?: string;
-                            pathType?: "Exact" | "Prefix" | "ImplementationSpecific";
-                        }[];
-                    }[];
-                    tls?: {
-                        secretName?: string;
-                        hosts?: string[];
-                    }[];
-                    defaultBackend?: object;
-                };
-            };
-            oathkeeper?: {
-                helmTemplatedConfigEnabled?: boolean;
-                configFileOverride?: {
-                    enabled?: boolean;
-                    nameOverride?: string;
-                };
-                config?: object;
-                mutatorIdTokenJWKs?: string;
-                accessRulesOverride?: {
-                    nameOverride?: string;
-                };
-                accessRules?: string;
-                managedAccessRules?: boolean;
-            };
-            secret?: {
-                enabled?: boolean;
-                nameOverride?: string;
-                enableDefaultAnnotations?: boolean;
-                secretAnnotations?: Record<string, string>;
-                extraAnnotations?: Record<string, string>;
-                hashSumEnabled?: boolean;
-                mountPath?: string;
-                filename?: string;
-            };
-            deployment?: {
-                strategy?: {
-                    type?: string;
-                    rollingUpdate?: {
-                        maxSurge?: string | number;
-                        maxUnavailable?: string | number;
-                    };
-                };
-                lifecycle?: object;
-                readinessProbe?: {
-                    initialDelaySeconds?: number;
-                    periodSeconds?: number;
-                    failureThreshold?: number;
-                    successThreshold?: number;
-                    timeoutSeconds?: number;
-                };
-                startupProbe?: {
-                    initialDelaySeconds?: number;
-                    periodSeconds?: number;
-                    failureThreshold?: number;
-                    successThreshold?: number;
-                    timeoutSeconds?: number;
-                };
-                customLivenessProbe?: object;
-                customReadinessProbe?: object;
-                customStartupProbe?: object;
-                serviceAccount?: {
-                    create?: boolean;
-                    annotations?: Record<string, string>;
-                    name?: string;
-                    automountServiceAccountToken?: boolean;
-                };
-                extraEnv?: object[];
-                extraArgs?: string[];
-                extraVolumes?: object[];
-                extraVolumeMounts?: object[];
-                extraContainers?: string;
-                extraInitContainers?: string;
-                labels?: Record<string, string>;
-                annotations?: Record<string, string>;
-                autoscaling?: {
-                    enabled?: boolean;
-                    minReplicas?: number;
-                    maxReplicas?: number;
-                    targetCPU?: object;
-                    targetMemory?: object;
-                    behavior?: object;
-                    extraMetrics?: object[];
-                };
-                resources?: {
-                    limits?: object;
-                    requests?: object;
-                };
-                podSecurityContext?: object;
-                securityContext?: object;
-                nodeSelector?: Record<string, string>;
-                tolerations?: object[];
-                affinity?: object;
-                topologySpreadConstraints?: object[];
-                dnsConfig?: object;
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-                automountServiceAccountToken?: boolean;
-                terminationGracePeriodSeconds?: number;
-            };
-            affinity?: object;
-            maester?: {
-                enabled?: boolean;
-            };
-            pdb?: {
-                enabled?: boolean;
-                spec?: {
-                    minAvailable?: string | number;
-                    maxUnavailable?: string | number;
-                };
-            };
-            serviceMonitor?: {
-                enabled?: boolean;
-                scheme?: string;
-                scrapeInterval?: string;
-                scrapeTimeout?: string;
-                relabelings?: object[];
-                metricRelabelings?: object[];
-                labels?: Record<string, string>;
-                tlsConfig?: object;
-                targetLabels?: string[];
-            };
-            configmap?: {
-                hashSumEnabled?: boolean;
-                annotations?: Record<string, string>;
-            };
-            test?: {
-                labels?: Record<string, string>;
-                busybox?: {
-                    registry?: string;
-                    repository?: string;
-                    tag?: string;
-                };
-            };
-        };
-    };
-    maester?: {
-        hydra?: {
-            enabled?: boolean;
-            singleNamespaceMode?: boolean;
-            enabledNamespaces?: string[];
-            serviceMonitor?: {
-                enabled?: boolean;
-            };
-        };
-        oathkeeper?: {
-            enabled?: boolean;
-            singleNamespaceMode?: boolean;
-            rulesConfigmapNamespace?: string;
-            rulesFileName?: string;
-        };
-        hydraValues?: {
-            global?: {
-                imageRegistry?: string;
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-            };
-            replicaCount?: number;
-            revisionHistoryLimit?: number;
-            enabledNamespaces?: string[];
-            singleNamespaceMode?: boolean;
-            image?: {
-                registry?: string;
-                repository?: string;
-                tag?: string;
-                pullPolicy?: "Always" | "IfNotPresent" | "Never";
-            };
-            imagePullSecrets?: object[];
-            priorityClassName?: string;
-            adminService?: {
-                name?: string;
-                port?: number;
-                endpoint?: string;
-                scheme?: string;
-                tlsTrustStorePath?: string;
-                insecureSkipVerify?: boolean;
-            };
-            forwardedProto?: string;
-            deployment?: {
-                args?: {
-                    syncPeriod?: string;
-                };
-                extraEnv?: object[];
-                extraVolumes?: object[];
-                extraVolumeMounts?: object[];
-                serviceAccount?: {
-                    create?: boolean;
-                    annotations?: Record<string, string>;
-                    name?: string;
-                    automountServiceAccountToken?: boolean;
-                };
-                resources?: {
-                    limits?: object;
-                    requests?: object;
-                };
-                podSecurityContext?: object;
-                securityContext?: object;
-                nodeSelector?: Record<string, string>;
-                tolerations?: object[];
-                affinity?: object;
-                topologySpreadConstraints?: object[];
-                dnsConfig?: object;
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-                automountServiceAccountToken?: boolean;
-                terminationGracePeriodSeconds?: number;
-            };
-            affinity?: object;
-            pdb?: {
-                enabled?: boolean;
-                spec?: {
-                    minAvailable?: string | number;
-                    maxUnavailable?: string | number;
-                };
-            };
-            service?: {
-                metrics?: {
-                    enabled?: boolean;
-                    type?: "ClusterIP" | "NodePort" | "LoadBalancer" | "ExternalName";
-                    clusterIP?: string;
-                    loadBalancerIP?: string;
-                    nodePort?: string | number;
-                    port?: number;
-                    containerPort?: number;
-                    name?: string;
-                    annotations?: Record<string, string>;
-                    labels?: Record<string, string>;
-                    metricsPath?: string;
-                    appProtocol?: string;
-                    externalTrafficPolicy?: string;
-                    internalTrafficPolicy?: string;
-                    headless?: {
-                        enabled?: boolean;
-                    };
-                };
-            };
-            serviceMonitor?: {
-                enabled?: boolean;
-                scheme?: string;
-                scrapeInterval?: string;
-                scrapeTimeout?: string;
-                relabelings?: object[];
-                metricRelabelings?: object[];
-                labels?: Record<string, string>;
-                tlsConfig?: object;
-                targetLabels?: string[];
-            };
-        };
-        oathkeeperValues?: {
-            global?: {
-                imageRegistry?: string;
-                ory?: object;
-                podMetadata?: {
-                    labels?: Record<string, string>;
-                    annotations?: Record<string, string>;
-                };
-            };
-            replicaCount?: number;
-            revisionHistoryLimit?: number;
-            singleNamespaceMode?: boolean;
-            rulesConfigmapNamespace?: string;
-            rulesFileName?: string;
-            image?: {
-                registry?: string;
-                repository?: string;
-                tag?: string;
-                pullPolicy?: "Always" | "IfNotPresent" | "Never";
-            };
-            imagePullSecrets?: object[];
-            securityContext?: object;
-            podSecurityContext?: object;
-            deployment?: {
-                envs?: object;
-                extraLabels?: Record<string, string>;
-                annotations?: Record<string, string>;
-            };
-            affinity?: object;
-            pdb?: {
-                enabled?: boolean;
-                spec?: {
-                    minAvailable?: string | number;
-                    maxUnavailable?: string | number;
-                };
-            };
-        };
-    };
-    resources?: {
-        oauth2Clients?: {
-            name: string;
-            spec: {
-                grantTypes: ("implicit" | "client_credentials" | "authorization_code" | "refresh_token")[];
-                secretName: string;
-                accessTokenStrategy?: "opaque" | "jwt";
-                allowedCorsOrigins?: string[];
-                audience?: string[];
-                backChannelLogoutSessionRequired?: boolean;
-                backChannelLogoutURI?: string;
-                clientName?: string;
-                clientSecretExpiresAt?: number;
-                clientUri?: string;
-                contacts?: string[];
-                deletionPolicy?: "delete" | "orphan";
-                frontChannelLogoutSessionRequired?: boolean;
-                frontChannelLogoutURI?: string;
-                hydraAdmin?: {
-                    endpoint?: string;
-                    forwardedProto?: string;
-                    port?: number;
-                    url?: string;
-                };
-                jwksUri?: string;
-                logoUri?: string;
-                metadata?: object;
-                policyUri?: string;
-                postLogoutRedirectUris?: string[];
-                redirectUris?: string[];
-                requestObjectSigningAlg?: string;
-                requestUris?: string[];
-                responseTypes?: ("code" | "token" | "id_token" | "code token" | "code id_token" | "id_token token" | "code id_token token")[];
-                scope?: string;
-                scopeArray?: string[];
-                sectorIdentifierUri?: string;
-                skipConsent?: boolean;
-                skipLogoutConsent?: boolean;
-                subjectType?: "public" | "pairwise";
-                tokenEndpointAuthMethod?: "none" | "client_secret_basic" | "client_secret_post" | "private_key_jwt";
-                tokenEndpointAuthSigningAlg?: string;
-                tokenLifespans?: {
-                    authorization_code_grant_access_token_lifespan?: string;
-                    authorization_code_grant_id_token_lifespan?: string;
-                    authorization_code_grant_refresh_token_lifespan?: string;
-                    client_credentials_grant_access_token_lifespan?: string;
-                    implicit_grant_access_token_lifespan?: string;
-                    implicit_grant_id_token_lifespan?: string;
-                    jwt_bearer_grant_access_token_lifespan?: string;
-                    refresh_token_grant_access_token_lifespan?: string;
-                    refresh_token_grant_id_token_lifespan?: string;
-                    refresh_token_grant_refresh_token_lifespan?: string;
-                };
-                tosUri?: string;
-                userinfoSignedResponseAlg?: string;
-            };
-            id?: string;
-            namespace?: string;
-        }[];
-        oathkeeperRules?: {
-            name: string;
-            spec: {
-                match: {
-                    methods: string[];
-                    url: string;
-                };
-                authenticators?: {
-                    handler: string;
-                    config?: object;
-                }[];
-                authorizer?: {
-                    handler: string;
-                    config?: object;
-                };
-                configMapName?: string;
-                errors?: {
-                    handler: string;
-                    config?: object;
-                }[];
-                mutators?: {
-                    handler: string;
-                    config?: object;
-                }[];
-                upstream?: {
-                    url: string;
-                    preserveHost?: boolean;
-                    stripPath?: string;
-                };
-            };
-            id?: string;
-            namespace?: string;
-        }[];
-    };
-}, {
-    ready: boolean;
-    phase: "Ready" | "Installing";
-    components: {
-        hydra: boolean;
-        kratos: boolean;
-        keto: boolean;
-        oathkeeper: boolean;
-    };
-    maester: {
-        hydra: boolean;
-        oathkeeper: boolean;
-    };
-    endpoints: {
-        hydraPublic: {
-            url: string;
-            scheme: string;
-            host: string;
-            clusterIP?: string;
-            port?: number;
-            serviceName?: string;
-            namespace?: string;
-        };
-        hydraAdmin: {
-            url: string;
-            scheme: string;
-            host: string;
-            clusterIP?: string;
-            port?: number;
-            serviceName?: string;
-            namespace?: string;
-        };
-        kratosPublic: {
-            url: string;
-            scheme: string;
-            host: string;
-            clusterIP?: string;
-            port?: number;
-            serviceName?: string;
-            namespace?: string;
-        };
-        kratosAdmin: {
-            url: string;
-            scheme: string;
-            host: string;
-            clusterIP?: string;
-            port?: number;
-            serviceName?: string;
-            namespace?: string;
-        };
-        ketoRead: {
-            url: string;
-            scheme: string;
-            host: string;
-            clusterIP?: string;
-            port?: number;
-            serviceName?: string;
-            namespace?: string;
-        };
-        ketoWrite: {
-            url: string;
-            scheme: string;
-            host: string;
-            clusterIP?: string;
-            port?: number;
-            serviceName?: string;
-            namespace?: string;
-        };
-        oathkeeperProxy: {
-            url: string;
-            scheme: string;
-            host: string;
-            clusterIP?: string;
-            port?: number;
-            serviceName?: string;
-            namespace?: string;
-        };
-        oathkeeperApi: {
-            url: string;
-            scheme: string;
-            host: string;
-            clusterIP?: string;
-            port?: number;
-            serviceName?: string;
-            namespace?: string;
-        };
-    };
-    version?: string;
-}>;
+export declare const oryIdentityStack: CallableComposition<typeof OryIdentityStackConfigSchema.infer, typeof OryIdentityStackStatusSchema.infer>;
 //# sourceMappingURL=ory-identity-stack.d.ts.map