hyperfluid 0.1.0__py3-none-any.whl

hyperfluid/models/org_workload_scan_settings_response.py

@@ -0,0 +1,17 @@
+# this file is @generated
+from __future__ import annotations
+
+import dataclasses
+
+from ..serialization import BaseModel
+
+
+@dataclasses.dataclass(kw_only=True)
+class OrgWorkloadScanSettingsResponse(BaseModel):
+    """The `OrgWorkloadScanSettingsResponse` object."""
+
+    effective_hours: int
+
+    platform_effective_hours: int
+
+    org_override_hours: int | None = None

hyperfluid/models/organization_invitation.py

@@ -0,0 +1,37 @@
+# this file is @generated
+from __future__ import annotations
+
+import dataclasses
+from datetime import datetime
+from uuid import UUID
+
+from ..serialization import BaseModel
+
+
+@dataclasses.dataclass(kw_only=True)
+class OrganizationInvitation(BaseModel):
+    """An invitation row as returned to API callers.
+
+    The token itself is deliberately absent: only its SHA-256 hash is persisted
+    (`token_hash`), and the raw token is delivered to the invitee by email. This
+    keeps the org-viewer-gated list endpoint from ever exposing a usable token."""
+
+    created_at: datetime
+
+    email: str
+
+    expires_at: datetime
+
+    id: UUID
+
+    organization_id: UUID
+
+    status: str
+
+    invited_by: UUID | None = None
+    """`None` for owner-bootstrap invitations sent by the platform cockpit,
+    whose admins are not console users."""
+
+    responded_at: datetime | None = None
+
+    role_id: UUID | None = None

hyperfluid/models/organization_overview_response.py

@@ -0,0 +1,48 @@
+# this file is @generated
+from __future__ import annotations
+
+import dataclasses
+import typing as t
+
+from ..serialization import BaseModel
+
+if t.TYPE_CHECKING:
+    from .resource_overview_response import ResourceOverviewResponse
+
+
+@dataclasses.dataclass(kw_only=True)
+class OrganizationOverviewResponse(BaseModel):
+    """Per-service resource overview for an organization's home page.
+
+    One indexed `COUNT(*)` (plus the distinct harbor slugs) per service in a
+    single query, plus a K8s list for model servings (no DB table), so the home
+    page loads its deployed-services grid in one request. Each card links into a
+    harbor that actually holds the resource (see [`ResourceOverviewResponse`])."""
+
+    ai_agents: ResourceOverviewResponse
+
+    app_instances: ResourceOverviewResponse
+
+    catalogs: ResourceOverviewResponse
+
+    container_apps: ResourceOverviewResponse
+
+    dashboards: ResourceOverviewResponse
+
+    databases: ResourceOverviewResponse
+
+    dev_workstations: ResourceOverviewResponse
+
+    key_value_caches: ResourceOverviewResponse
+
+    message_queues: ResourceOverviewResponse
+
+    model_servings: ResourceOverviewResponse
+
+    nextflow: ResourceOverviewResponse
+
+    pipelines: ResourceOverviewResponse
+
+    registry_projects: ResourceOverviewResponse
+
+    sql_clusters: ResourceOverviewResponse

hyperfluid/models/organization_policy.py

@@ -0,0 +1,42 @@
+# this file is @generated
+from __future__ import annotations
+
+import dataclasses
+import typing as t
+from uuid import UUID
+
+from ..serialization import BaseModel
+
+if t.TYPE_CHECKING:
+    from .condition import Condition
+
+
+@dataclasses.dataclass(kw_only=True)
+class OrganizationPolicy(BaseModel):
+    """An org-global authorization guardrail (the restrictive counterpart to a
+    per-principal [`Grant`]). For any request matching `(action, resource)`,
+    access is denied unless every requirement holds — evaluated for *all*
+    principals, ANDed into the decision after the identity allow/deny pass."""
+
+    action: str
+    """Action pattern: exact (`secret:read`) or `<type>:*` wildcard (`secret:*`)."""
+
+    id: UUID
+
+    organization_id: UUID
+
+    requirements: list[Condition]
+    """All must hold for access; otherwise the guardrail denies."""
+
+    resource_id: str
+    """Resource id pattern within `resource_type` (exact / ancestor folder /
+    `*`-suffixed wildcard, e.g. `prod/asia/*`)."""
+
+    resource_type: str
+
+    description: str | None = None
+
+    resource_uuid: UUID | None = None
+    """Two-tier key — see `Grant::resource_uuid`. `Some` = attached (the
+    bucket-policy analogue, immune to slug-reuse snap-back); `None` = the
+    org-global SCP pattern."""

hyperfluid/models/organization_quota_response.py

@@ -0,0 +1,23 @@
+# this file is @generated
+from __future__ import annotations
+
+import dataclasses
+import typing as t
+
+from ..serialization import BaseModel
+
+if t.TYPE_CHECKING:
+    from .capacity_usage_item_response import CapacityUsageItemResponse
+    from .quota_profile_response import QuotaProfileResponse
+    from .quota_usage_item_response import QuotaUsageItemResponse
+
+
+@dataclasses.dataclass(kw_only=True)
+class OrganizationQuotaResponse(BaseModel):
+    """The `OrganizationQuotaResponse` object."""
+
+    capacity: list[CapacityUsageItemResponse]
+
+    profile: QuotaProfileResponse
+
+    usage: list[QuotaUsageItemResponse]

hyperfluid/models/organization_workload_view.py

@@ -0,0 +1,40 @@
+# this file is @generated
+from __future__ import annotations
+
+import dataclasses
+import typing as t
+
+from ..serialization import BaseModel
+
+if t.TYPE_CHECKING:
+    from .harbor_posture import HarborPosture
+    from .image_posture import ImagePosture
+    from .org_posture import OrgPosture
+    from .scan_pipeline_health import ScanPipelineHealth
+    from .workload_row import WorkloadRow
+
+
+@dataclasses.dataclass(kw_only=True)
+class OrganizationWorkloadView(BaseModel):
+    """The `OrganizationWorkloadView` object."""
+
+    harbors: list[HarborPosture]
+    """Per-harbor rollup within this view, so a console harbor page doesn't
+    need a second round trip — computed from `workloads` above, not a
+    separate query."""
+
+    pipeline: ScanPipelineHealth
+
+    posture: OrgPosture
+
+    scanned_within_schedule_pct: float
+    """Org/bucket-scoped: `%` of THIS view's own distinct digests currently
+    `Fresh` under the org's effective interval (mirrors the platform-wide
+    `WorkloadSecurityTiles::scanned_within_schedule_pct`, narrowed to this
+    view)."""
+
+    stale: list[ImagePosture]
+    """This view's own stale images (narrowed from the platform-wide
+    `WorkloadSecurityOverview.stale`), worst-first."""
+
+    workloads: list[WorkloadRow]

hyperfluid/models/panel_kind.py

@@ -0,0 +1,15 @@
+# this file is @generated
+import typing as t
+
+from ..serialization import StrEnum
+
+
+class PanelKind(StrEnum):
+    """The values of `PanelKind`; others are kept as received."""
+
+    TIMESERIES = "timeseries"
+    STAT = "stat"
+
+
+PanelKindLiteral: t.TypeAlias = t.Literal["timeseries", "stat"]
+"""The values of :class:`PanelKind`, which arguments take as plain strings too."""

hyperfluid/models/partition_input.py

@@ -0,0 +1,35 @@
+# this file is @generated
+from __future__ import annotations
+
+import dataclasses
+
+from ..serialization import UNSET, BaseModel, Unset
+
+
+@dataclasses.dataclass(kw_only=True)
+class PartitionInput(BaseModel):
+    """A compute partition (one Slinky NodeSet + Slurm partition)."""
+
+    name: str
+    """Partition name (DNS-1123 label, unique within the dock)."""
+
+    cpu: str | None = None
+    """CPU per compute node (e.g. `"2"`)."""
+
+    default: bool | None = None
+    """Whether this is the cluster's default partition."""
+
+    gpu: int | None | Unset = UNSET
+    """GPUs per compute node. Omit for CPU-only partitions."""
+
+    memory: str | None = None
+    """Memory per compute node (e.g. `"4Gi"`)."""
+
+    node_max: int | None = None
+    """Maximum compute nodes (also the partition `MaxNodes` cap)."""
+
+    node_min: int | None = None
+    """Minimum running compute nodes (`0` = scale-to-zero)."""
+
+    walltime_max: str | None | Unset = UNSET
+    """Maximum wall-clock time for a job (Slurm `MaxTime`, e.g. `"04:00:00"`)."""

hyperfluid/models/patch_airflow_connection_request.py

@@ -0,0 +1,36 @@
+# this file is @generated
+from __future__ import annotations
+
+import dataclasses
+import typing as t
+from uuid import UUID
+
+from ..serialization import UNSET, BaseModel, Unset
+
+if t.TYPE_CHECKING:
+    from .permission_level import PermissionLevel
+
+
+@dataclasses.dataclass(kw_only=True)
+class PatchAirflowConnectionRequest(BaseModel):
+    """The `PatchAirflowConnectionRequest` object."""
+
+    bucket_ref: str | None | Unset = UNSET
+
+    catalog: str | None | Unset = UNSET
+    """Travels with `trino_ref`, never alone: a target edit replaces the whole
+    payload (see the `PATCH` handler), so changing the catalog of a Trino
+    connection names its dock again in the same request. The console form
+    reads both back from the projection, so it always has them to send.
+
+    Same charset as the create body's, and checked for the same reason."""
+
+    managed_postgresql_ref: str | None | Unset = UNSET
+
+    permission_level: PermissionLevel | None | Unset = UNSET
+
+    takeover_challenge: UUID | None | Unset = UNSET
+    """A collision challenge copied from the current safe projection. The
+    controller consumes it once after its own final observation."""
+
+    trino_ref: str | None | Unset = UNSET

hyperfluid/models/patch_airflow_crd_request_body.py

@@ -0,0 +1,44 @@
+# this file is @generated
+from __future__ import annotations
+
+import dataclasses
+import typing as t
+
+from ..serialization import UNSET, BaseModel, Unset
+
+if t.TYPE_CHECKING:
+    from .airflow_egress_request import AirflowEgressRequest
+    from .airflow_node_tier import AirflowNodeTier
+
+
+@dataclasses.dataclass(kw_only=True)
+class PatchAirflowCrdRequestBody(BaseModel):
+    """The `PatchAirflowCrdRequestBody` object."""
+
+    config: dict[str, str] | None | Unset = UNSET
+    """Replace the `airflow.cfg` overrides. Omitted = unchanged; an empty map
+    clears them. Platform-owned keys are refused with a 400 listing them."""
+
+    description: str | None | Unset = UNSET
+    """Optional description (DB-only, not stored in the CRD)."""
+
+    egress: AirflowEgressRequest | None | Unset = UNSET
+
+    node_tier: AirflowNodeTier | None | Unset = UNSET
+
+    runtime_image: str | None | Unset = UNSET
+    """Override the platform Airflow runtime image. Omitted = unchanged;
+    `null` (or an empty string) clears the pin back to the platform default."""
+
+    sleep_mode: bool | None | Unset = UNSET
+    """Sleep mode: scale all components to 0."""
+
+    tags: list[str] | None | Unset = UNSET
+    """User-defined tags (DB-only, not stored in the CRD)."""
+
+    task_quota_max_pods: int | None | Unset = UNSET
+    """Replace the task namespace's `count/pods` ceiling. Omitted = unchanged;
+    `0` clears it back to the platform default."""
+
+    triggerer_enabled: bool | None | Unset = UNSET
+    """Deferrable-operator (triggerer) support."""

hyperfluid/models/patch_app_instance_request_body.py

@@ -0,0 +1,18 @@
+# this file is @generated
+from __future__ import annotations
+
+import dataclasses
+
+from ..serialization import UNSET, BaseModel, Unset
+
+
+@dataclasses.dataclass(kw_only=True)
+class PatchAppInstanceRequestBody(BaseModel):
+    """PATCH body for updating an app instance's DB-only metadata. Does NOT touch
+    the CRD — use `PATCH .../crd` for spec changes (parameters)."""
+
+    description: str | None | Unset = UNSET
+    """Optional free-text description. Pass `null` to clear an existing description."""
+
+    tags: list[str] | None | Unset = UNSET
+    """Replacement tag list. Pass an empty array to clear all tags."""

hyperfluid/models/patch_backup_target_crd_request_body.py

@@ -0,0 +1,26 @@
+# this file is @generated
+from __future__ import annotations
+
+import dataclasses
+
+from ..serialization import UNSET, BaseModel, Unset
+
+
+@dataclasses.dataclass(kw_only=True)
+class PatchBackupTargetCrdRequestBody(BaseModel):
+    """The `PatchBackupTargetCrdRequestBody` object."""
+
+    access_key_secret_name: str | None | Unset = UNSET
+
+    description: str | None | Unset = UNSET
+
+    destination_path: str | None | Unset = UNSET
+
+    endpoint_url: str | None | Unset = UNSET
+
+    retention_days: int | None | Unset = UNSET
+    """Days of backups and WAL archives to keep before expiring them, 1..=35."""
+
+    secret_access_key_secret_name: str | None | Unset = UNSET
+
+    tags: list[str] | None | Unset = UNSET

hyperfluid/models/patch_compute_dock_crd_request_body.py

@@ -0,0 +1,43 @@
+# this file is @generated
+from __future__ import annotations
+
+import dataclasses
+import typing as t
+
+from ..serialization import UNSET, BaseModel, Unset
+
+if t.TYPE_CHECKING:
+    from .auto_suspend_input import AutoSuspendInput
+    from .partition_input import PartitionInput
+
+
+@dataclasses.dataclass(kw_only=True)
+class PatchComputeDockCrdRequestBody(BaseModel):
+    """The `PatchComputeDockCrdRequestBody` object."""
+
+    auto_suspend: AutoSuspendInput | None | Unset = UNSET
+
+    description: str | None | Unset = UNSET
+    """Optional description (DB-only, not stored in CRD)."""
+
+    enabled: bool | None | Unset = UNSET
+    """Suspend (`false`) or resume (`true`) the cluster. `None` leaves it as-is."""
+
+    home_size: str | None | Unset = UNSET
+    """Replace the shared `/home` size (K8s `Quantity`). `None` leaves it as-is."""
+
+    partitions: list[PartitionInput] | None | Unset = UNSET
+    """Replace the partition set (full replace). `None` leaves it as-is; an
+    empty array is rejected — a dock must keep at least one partition.
+
+    Note: dropping a name does NOT delete its NodeSet — the compute nodes
+    keep running (and billing) until the operator prunes the now-
+    unreferenced NodeSet on its own schedule. The response's
+    `orphaned_partitions` lists every name this call dropped so the caller
+    never mistakes "removed from spec" for "torn down"."""
+
+    tags: list[str] | None | Unset = UNSET
+    """User-defined tags (DB-only, not stored in CRD)."""
+
+    version: str | None | Unset = UNSET
+    """Replace the Slinky image tag. `None` leaves it as-is."""

hyperfluid/models/patch_compute_dock_crd_response.py

@@ -0,0 +1,21 @@
+# this file is @generated
+from __future__ import annotations
+
+import dataclasses
+
+from ..serialization import BaseModel
+
+
+@dataclasses.dataclass(kw_only=True)
+class PatchComputeDockCrdResponse(BaseModel):
+    """The `PatchComputeDockCrdResponse` object."""
+
+    orphaned_partitions: list[str]
+    """Partition names this patch dropped from `spec.slurm.partitions` that
+    are STILL RUNNING nodes (and still billing): a `partitions` full
+    replace only stops the operator from referencing a name going
+    forward, it does not delete the NodeSet. The operator prunes the
+    orphaned NodeSet on its own reconcile schedule; a name here stops
+    appearing once that teardown lands (a subsequent `GET` also drops it
+    from the live `partitions` status). Always empty when this patch left
+    `partitions` untouched."""

hyperfluid/models/patch_container_app_crd_request_body.py

@@ -0,0 +1,153 @@
+# this file is @generated
+from __future__ import annotations
+
+import dataclasses
+import typing as t
+
+from ..serialization import UNSET, BaseModel, Unset
+
+if t.TYPE_CHECKING:
+    from .autoscaling_spec import AutoscalingSpec
+    from .container_app_metrics import ContainerAppMetrics
+    from .container_app_port_input import ContainerAppPortInput
+    from .custom_domain_input import CustomDomainInput
+    from .custom_resource_input import CustomResourceInput
+    from .env_var_input import EnvVarInput
+    from .file_mount_input import FileMountInput
+    from .image_source import ImageSource
+    from .init_container_input import InitContainerInput
+    from .persistence_input import PersistenceInput
+    from .resource_mode import ResourceMode
+    from .resource_tier import ResourceTier
+    from .secret_ref_input import SecretRefInput
+
+
+@dataclasses.dataclass(kw_only=True)
+class PatchContainerAppCrdRequestBody(BaseModel):
+    """The `PatchContainerAppCrdRequestBody` object."""
+
+    alert_on_sync_failure: bool | None | Unset = UNSET
+    """Enable or disable the default "Git sync failed" alert rule of an app
+    with a Git source. Omit to leave it unchanged."""
+
+    args: list[str] | None | Unset = UNSET
+    """Main container arguments. PATCH semantics: `null` (omit) leaves the
+    current value alone; an empty array clears it back to the image's CMD;
+    a non-empty array replaces it."""
+
+    autoscaling: AutoscalingSpec | None | Unset = UNSET
+
+    clear_autoscaling: bool | None | Unset = UNSET
+    """When `true`, removes the autoscaling: the app runs `replicas` again.
+    Mutually exclusive with `autoscaling`."""
+
+    clear_health_check: bool | None | Unset = UNSET
+    """When `true`, removes any existing health check from the spec. Mutually
+    exclusive with `health_check_path` / `health_check_port`: sending both
+    returns a 400 Bad Request."""
+
+    clear_metrics: bool | None | Unset = UNSET
+    """When `true`, removes the metrics declaration. Mutually exclusive with
+    `metrics`."""
+
+    command: list[str] | None | Unset = UNSET
+    """Main container entrypoint. PATCH semantics: `null` (omit) leaves the
+    current value alone; an empty array clears it back to the image's
+    ENTRYPOINT; a non-empty array replaces it."""
+
+    confirm_volume_deletion: bool | None | Unset = UNSET
+    """Must be `true` to lower the replica reservation (`replicas`, or
+    `autoscaling.maxReplicas` for an autoscaled app) of an app with a
+    `perReplica` volume: the volumes of the replicas above the new
+    reservation are deleted once those replicas are gone, with their data.
+    Without it such a patch is refused with 400. Stopping the app
+    (`enabled: false`) keeps every volume and needs no confirmation."""
+
+    custom_domains: list[CustomDomainInput] | None | Unset = UNSET
+    """Custom domains to expose the app on. PATCH semantics: `null` (omit)
+    leaves existing entries alone; an empty array clears them; a non-empty
+    array replaces the full list."""
+
+    custom_resources: CustomResourceInput | None | Unset = UNSET
+
+    enabled: bool | None | Unset = UNSET
+    """Stop (`false`) or start (`true`) the application. `false` scales the
+    workload to zero while keeping `replicas` in the spec; `true` runs that
+    count again. Starting an app whose `replicas` is 0 (scaled down by hand)
+    restores one replica unless `replicas` is set in the same call. Omit to
+    leave the current value unchanged."""
+
+    env: list[EnvVarInput] | None | Unset = UNSET
+
+    expose_to_internet: bool | None | Unset = UNSET
+    """When set, flips internet exposure on or off. `false` removes the platform
+    host route and all custom-domain routes while keeping the ClusterIP Service.
+    `true` restores them. Omit to leave the current value unchanged."""
+
+    file_mounts: list[FileMountInput] | None | Unset = UNSET
+    """Files to mount into the container. PATCH semantics: `null` (omit) leaves
+    existing entries alone; an empty array clears them; a non-empty array
+    replaces the full list. Subject to the same per-file and total inline
+    size caps as `POST`."""
+
+    health_check_path: str | None | Unset = UNSET
+
+    health_check_port: int | None | Unset = UNSET
+
+    image_pull_secrets: list[str] | None | Unset = UNSET
+    """Names of secrets from the secret store to use as image pull secrets. Replaces existing pull secrets when set."""
+
+    image_repository: str | None | Unset = UNSET
+    """Refused with 409 while a Git source is attached: Git owns the image."""
+
+    image_source: ImageSource | None | Unset = UNSET
+
+    image_tag: str | None | Unset = UNSET
+    """Refused with 409 while a Git source is attached: Git owns the image."""
+
+    init_containers: list[InitContainerInput] | None | Unset = UNSET
+    """Init containers. PATCH semantics: `null` (omit) leaves existing entries
+    alone, which is what protects a template-provisioned init container
+    (e.g. Forgejo's `bootstrap-oidc`) from an unrelated edit; an empty
+    array clears every entry; a non-empty array replaces the full list."""
+
+    metrics: ContainerAppMetrics | None | Unset = UNSET
+
+    persistence: list[PersistenceInput] | None | Unset = UNSET
+    """Persistent volumes attached to the container. PATCH semantics: `null`
+    (omit) leaves existing entries alone; an empty array removes every
+    entry from the spec; a non-empty array replaces the full list.
+
+    Note: removing an entry does NOT delete the underlying PVC. The
+    operator surfaces `PersistenceReady=False` (`OrphanPersistenceVolumes`)
+    listing the now-unreferenced PVCs and leaves them intact so data is
+    never lost by accident. The only way to release the volumes is to
+    delete the `ContainerApp` itself, at which point owner-reference GC
+    releases the underlying PVs per the StorageClass `reclaimPolicy`.
+
+    `size` and `storageClass` are immutable per entry —
+    the operator surfaces `PersistenceReady=False` (`ImmutablePersistenceChanged`)
+    and refuses to apply the workload until the change is reverted. Adding
+    or removing entries is allowed (subject to the orphan behavior above)."""
+
+    port: int | None | Unset = UNSET
+    """**Deprecated — use `ports`.** Ignored by the operator once the spec
+    carries a non-empty `ports`."""
+
+    ports: list[ContainerAppPortInput] | None | Unset = UNSET
+    """Ports the container listens on. PATCH semantics: `null` (omit) leaves
+    existing entries alone; an empty array clears them, falling back to the
+    deprecated single `port`; a non-empty array replaces the full list."""
+
+    replicas: int | None | Unset = UNSET
+
+    resource_mode: ResourceMode | None | Unset = UNSET
+
+    resource_tier: ResourceTier | None | Unset = UNSET
+
+    resource_version: str | None | Unset = UNSET
+    """If set, the patch will be rejected with 409 Conflict when the live object's
+    resourceVersion differs. Recommended for any UI-driven edit to prevent
+    silent last-write-wins on concurrent modifications."""
+
+    secret_refs: list[SecretRefInput] | None | Unset = UNSET

hyperfluid/models/patch_container_app_request_body.py

@@ -0,0 +1,25 @@
+# this file is @generated
+from __future__ import annotations
+
+import dataclasses
+
+from ..serialization import UNSET, BaseModel, Unset
+
+
+@dataclasses.dataclass(kw_only=True)
+class PatchContainerAppRequestBody(BaseModel):
+    """PATCH body for updating a container app's display metadata.
+
+    All fields are optional; omitting a field leaves the stored value unchanged.
+    To explicitly clear `description`, pass `"description": null`."""
+
+    description: str | None | Unset = UNSET
+    """Optional free-text description, at most 1000 characters. Pass `null` (or a
+    blank value) to clear an existing description."""
+
+    name: str | None | Unset = UNSET
+    """Human-readable display name. Must not be empty when provided; at most 255 characters."""
+
+    tags: list[str] | None | Unset = UNSET
+    """Replacement tag list: at most 20, none blank, each at most 64 characters.
+    Pass an empty array to clear all tags."""

hyperfluid/models/patch_harbor_storage_binding_request.py

@@ -0,0 +1,15 @@
+# this file is @generated
+from __future__ import annotations
+
+import dataclasses
+
+from ..serialization import UNSET, BaseModel, Unset
+
+
+@dataclasses.dataclass(kw_only=True)
+class PatchHarborStorageBindingRequest(BaseModel):
+    """The `PatchHarborStorageBindingRequest` object."""
+
+    quota_gb: int | None | Unset = UNSET
+    """New per-tenant storage quota in GB. Enforced by RGW on the tenant
+    owner. Omit to leave the quota unchanged."""