hyperfluid 0.1.0__py3-none-any.whl

hyperfluid/api/container_apps_crd.py

@@ -0,0 +1,763 @@
+# this file is @generated
+"""Container apps crd API."""
+
+from __future__ import annotations
+
+import typing as t
+from uuid import UUID
+
+from .. import models as _models
+from ..models import (
+    AutoscalingSpec,
+    ContainerAppCrdSpecResponse,
+    ContainerAppMetrics,
+    ContainerAppPortInput,
+    CreateContainerAppCrdRequestBody,
+    CustomDomainInput,
+    CustomResourceInput,
+    EnvVarInput,
+    FileMountInput,
+    ImageSource,
+    InitContainerInput,
+    PatchContainerAppCrdRequestBody,
+    PersistenceInput,
+    ResourceMode,
+    ResourceModeLiteral,
+    ResourceTier,
+    ResourceTierLiteral,
+    SecretRefInput,
+)
+from ..serialization import UNSET, Unset, to_json_value
+from ._response import async_to_raw_response_wrapper, to_raw_response_wrapper
+from .common import (
+    ApiBaseAsync,
+    ApiBaseSync,
+    ApiRequest,
+    Timeout,
+    decode_response,
+    encode_path_param,
+)
+
+
+class AsyncContainerAppsCrd(ApiBaseAsync):
+    """Container apps crd API, for asyncio."""
+
+    @property
+    def with_raw_response(self) -> AsyncContainerAppsCrdWithRawResponse:
+        """These methods, returning an :class:`APIResponse` with the status and headers."""
+        return AsyncContainerAppsCrdWithRawResponse(self)
+
+    async def retrieve(
+        self,
+        organization_id: UUID,
+        app_id: UUID,
+        *,
+        extra_headers: t.Mapping[str, str] | None = None,
+        extra_query: t.Mapping[str, object] | None = None,
+        extra_body: t.Mapping[str, object] | None = None,
+        timeout: Timeout | Unset = UNSET,
+        max_retries: int | None = None,
+    ) -> ContainerAppCrdSpecResponse:
+        """`GET /api/v1/organizations/{organization_id}/container-apps/{app_id}/crd`."""
+        response = await self._request(
+            ApiRequest(
+                method="get",
+                path="/api/v1/organizations/{organization_id}/container-apps/{app_id}/crd",
+                path_params={
+                    "organization_id": encode_path_param(
+                        "organization_id", organization_id, "simple", False
+                    ),
+                    "app_id": encode_path_param("app_id", app_id, "simple", False),
+                },
+                error_types={
+                    "default": _models.ApiErrorBody,
+                },
+                extra_headers=extra_headers,
+                extra_query=extra_query,
+                extra_body=extra_body,
+                timeout=timeout,
+                max_retries=max_retries,
+            )
+        )
+        return decode_response(response, ContainerAppCrdSpecResponse)
+
+    async def delete(
+        self,
+        organization_id: UUID,
+        app_id: UUID,
+        *,
+        extra_headers: t.Mapping[str, str] | None = None,
+        extra_query: t.Mapping[str, object] | None = None,
+        extra_body: t.Mapping[str, object] | None = None,
+        timeout: Timeout | Unset = UNSET,
+        max_retries: int | None = None,
+    ) -> None:
+        """`DELETE /api/v1/organizations/{organization_id}/container-apps/{app_id}/crd`."""
+        await self._request(
+            ApiRequest(
+                method="delete",
+                path="/api/v1/organizations/{organization_id}/container-apps/{app_id}/crd",
+                path_params={
+                    "organization_id": encode_path_param(
+                        "organization_id", organization_id, "simple", False
+                    ),
+                    "app_id": encode_path_param("app_id", app_id, "simple", False),
+                },
+                error_types={
+                    "default": _models.ApiErrorBody,
+                },
+                extra_headers=extra_headers,
+                extra_query=extra_query,
+                extra_body=extra_body,
+                timeout=timeout,
+                max_retries=max_retries,
+            )
+        )
+
+    async def update(
+        self,
+        organization_id: UUID,
+        app_id: UUID,
+        *,
+        alert_on_sync_failure: bool | None | Unset = UNSET,
+        args: list[str] | None | Unset = UNSET,
+        autoscaling: AutoscalingSpec | None | Unset = UNSET,
+        clear_autoscaling: bool | None | Unset = UNSET,
+        clear_health_check: bool | None | Unset = UNSET,
+        clear_metrics: bool | None | Unset = UNSET,
+        command: list[str] | None | Unset = UNSET,
+        confirm_volume_deletion: bool | None | Unset = UNSET,
+        custom_domains: list[CustomDomainInput] | None | Unset = UNSET,
+        custom_resources: CustomResourceInput | None | Unset = UNSET,
+        enabled: bool | None | Unset = UNSET,
+        env: list[EnvVarInput] | None | Unset = UNSET,
+        expose_to_internet: bool | None | Unset = UNSET,
+        file_mounts: list[FileMountInput] | None | Unset = UNSET,
+        health_check_path: str | None | Unset = UNSET,
+        health_check_port: int | None | Unset = UNSET,
+        image_pull_secrets: list[str] | None | Unset = UNSET,
+        image_repository: str | None | Unset = UNSET,
+        image_source: ImageSource | None | Unset = UNSET,
+        image_tag: str | None | Unset = UNSET,
+        init_containers: list[InitContainerInput] | None | Unset = UNSET,
+        metrics: ContainerAppMetrics | None | Unset = UNSET,
+        persistence: list[PersistenceInput] | None | Unset = UNSET,
+        port: int | None | Unset = UNSET,
+        ports: list[ContainerAppPortInput] | None | Unset = UNSET,
+        replicas: int | None | Unset = UNSET,
+        resource_mode: ResourceMode | ResourceModeLiteral | None | Unset = UNSET,
+        resource_tier: ResourceTier | ResourceTierLiteral | None | Unset = UNSET,
+        resource_version: str | None | Unset = UNSET,
+        secret_refs: list[SecretRefInput] | None | Unset = UNSET,
+        extra_headers: t.Mapping[str, str] | None = None,
+        extra_query: t.Mapping[str, object] | None = None,
+        extra_body: t.Mapping[str, object] | None = None,
+        timeout: Timeout | Unset = UNSET,
+        max_retries: int | None = None,
+    ) -> None:
+        """`PATCH /api/v1/organizations/{organization_id}/container-apps/{app_id}/crd`.
+
+        :param alert_on_sync_failure: Enable or disable the default "Git sync failed" alert rule of an app with a Git source. Omit to leave it unchanged.
+        :param args: Main container arguments. PATCH semantics: `null` (omit) leaves the current value alone; an empty array clears it back to the image's CMD; a non-empty array replaces it.
+        :param clear_autoscaling: When `true`, removes the autoscaling: the app runs `replicas` again. Mutually exclusive with `autoscaling`.
+        :param clear_health_check: When `true`, removes any existing health check from the spec. Mutually exclusive with `health_check_path` / `health_check_port`: sending both returns a 400 Bad Request.
+        :param clear_metrics: When `true`, removes the metrics declaration. Mutually exclusive with `metrics`.
+        :param command: Main container entrypoint. PATCH semantics: `null` (omit) leaves the current value alone; an empty array clears it back to the image's ENTRYPOINT; a non-empty array replaces it.
+        :param confirm_volume_deletion: Must be `true` to lower the replica reservation (`replicas`, or `autoscaling.maxReplicas` for an autoscaled app) of an app with a `perReplica` volume: the volumes of the replicas above the new reservation are deleted once those replicas are gone, with their data. Without it such a patch is refused with 400. Stopping the app (`enabled: false`) keeps every volume and needs no confirmation.
+        :param custom_domains: Custom domains to expose the app on. PATCH semantics: `null` (omit) leaves existing entries alone; an empty array clears them; a non-empty array replaces the full list.
+        :param enabled: Stop (`false`) or start (`true`) the application. `false` scales the workload to zero while keeping `replicas` in the spec; `true` runs that count again. Starting an app whose `replicas` is 0 (scaled down by hand) restores one replica unless `replicas` is set in the same call. Omit to leave the current value unchanged.
+        :param expose_to_internet: When set, flips internet exposure on or off. `false` removes the platform host route and all custom-domain routes while keeping the ClusterIP Service. `true` restores them. Omit to leave the current value unchanged.
+        :param file_mounts: Files to mount into the container. PATCH semantics: `null` (omit) leaves existing entries alone; an empty array clears them; a non-empty array replaces the full list. Subject to the same per-file and total inline size caps as `POST`.
+        :param image_pull_secrets: Names of secrets from the secret store to use as image pull secrets. Replaces existing pull secrets when set.
+        :param image_repository: Refused with 409 while a Git source is attached: Git owns the image.
+        :param image_tag: Refused with 409 while a Git source is attached: Git owns the image.
+        :param init_containers: Init containers. PATCH semantics: `null` (omit) leaves existing entries alone, which is what protects a template-provisioned init container (e.g. Forgejo's `bootstrap-oidc`) from an unrelated edit; an empty array clears every entry; a non-empty array replaces the full list.
+        :param persistence: Persistent volumes attached to the container. PATCH semantics: `null` (omit) leaves existing entries alone; an empty array removes every entry from the spec; a non-empty array replaces the full list.  Note: removing an entry does NOT delete the underlying PVC. The operator surfaces `PersistenceReady=False` (`OrphanPersistenceVolumes`) listing the now-unreferenced PVCs and leaves them intact so data is never lost by accident. The only way to release the volumes is to delete the `ContainerApp` itself, at which point owner-reference GC releases the underlying PVs per the StorageClass `reclaimPolicy`.  `size` and `storageClass` are immutable per entry — the operator surfaces `PersistenceReady=False` (`ImmutablePersistenceChanged`) and refuses to apply the workload until the change is reverted. Adding or removing entries is allowed (subject to the orphan behavior above).
+        :param port: **Deprecated — use `ports`.** Ignored by the operator once the spec carries a non-empty `ports`.
+        :param ports: Ports the container listens on. PATCH semantics: `null` (omit) leaves existing entries alone; an empty array clears them, falling back to the deprecated single `port`; a non-empty array replaces the full list.
+        :param resource_version: If set, the patch will be rejected with 409 Conflict when the live object's resourceVersion differs. Recommended for any UI-driven edit to prevent silent last-write-wins on concurrent modifications."""
+        await self._request(
+            ApiRequest(
+                method="patch",
+                path="/api/v1/organizations/{organization_id}/container-apps/{app_id}/crd",
+                path_params={
+                    "organization_id": encode_path_param(
+                        "organization_id", organization_id, "simple", False
+                    ),
+                    "app_id": encode_path_param("app_id", app_id, "simple", False),
+                },
+                json_body=to_json_value(
+                    PatchContainerAppCrdRequestBody(
+                        alert_on_sync_failure=alert_on_sync_failure,
+                        args=args,
+                        autoscaling=autoscaling,
+                        clear_autoscaling=clear_autoscaling,
+                        clear_health_check=clear_health_check,
+                        clear_metrics=clear_metrics,
+                        command=command,
+                        confirm_volume_deletion=confirm_volume_deletion,
+                        custom_domains=custom_domains,
+                        custom_resources=custom_resources,
+                        enabled=enabled,
+                        env=env,
+                        expose_to_internet=expose_to_internet,
+                        file_mounts=file_mounts,
+                        health_check_path=health_check_path,
+                        health_check_port=health_check_port,
+                        image_pull_secrets=image_pull_secrets,
+                        image_repository=image_repository,
+                        image_source=image_source,
+                        image_tag=image_tag,
+                        init_containers=init_containers,
+                        metrics=metrics,
+                        persistence=persistence,
+                        port=port,
+                        ports=ports,
+                        replicas=replicas,
+                        resource_mode=t.cast(
+                            "ResourceMode | None | Unset", resource_mode
+                        ),
+                        resource_tier=t.cast(
+                            "ResourceTier | None | Unset", resource_tier
+                        ),
+                        resource_version=resource_version,
+                        secret_refs=secret_refs,
+                    ),
+                    PatchContainerAppCrdRequestBody,
+                ),
+                error_types={
+                    "default": _models.ApiErrorBody,
+                },
+                extra_headers=extra_headers,
+                extra_query=extra_query,
+                extra_body=extra_body,
+                timeout=timeout,
+                max_retries=max_retries,
+            )
+        )
+
+    async def restart(
+        self,
+        organization_id: UUID,
+        app_id: UUID,
+        *,
+        extra_headers: t.Mapping[str, str] | None = None,
+        extra_query: t.Mapping[str, object] | None = None,
+        extra_body: t.Mapping[str, object] | None = None,
+        timeout: Timeout | Unset = UNSET,
+        max_retries: int | None = None,
+    ) -> None:
+        """`POST /api/v1/organizations/{organization_id}/container-apps/{app_id}/crd/restart`."""
+        await self._request(
+            ApiRequest(
+                method="post",
+                path="/api/v1/organizations/{organization_id}/container-apps/{app_id}/crd/restart",
+                path_params={
+                    "organization_id": encode_path_param(
+                        "organization_id", organization_id, "simple", False
+                    ),
+                    "app_id": encode_path_param("app_id", app_id, "simple", False),
+                },
+                error_types={
+                    "default": _models.ApiErrorBody,
+                },
+                extra_headers=extra_headers,
+                extra_query=extra_query,
+                extra_body=extra_body,
+                timeout=timeout,
+                max_retries=max_retries,
+            )
+        )
+
+    async def create(
+        self,
+        organization_id: UUID,
+        harbor_id: UUID,
+        *,
+        enabled: bool,
+        name: str,
+        alert_on_sync_failure: bool | None | Unset = UNSET,
+        args: list[str] | None = None,
+        autoscaling: AutoscalingSpec | None | Unset = UNSET,
+        command: list[str] | None = None,
+        custom_domains: list[CustomDomainInput] | None = None,
+        custom_resources: CustomResourceInput | None | Unset = UNSET,
+        description: str | None | Unset = UNSET,
+        env: list[EnvVarInput] | None = None,
+        expose_to_internet: bool | None = None,
+        file_mounts: list[FileMountInput] | None = None,
+        health_check_path: str | None | Unset = UNSET,
+        health_check_port: int | None | Unset = UNSET,
+        image_pull_secrets: list[str] | None = None,
+        image_repository: str | None = None,
+        image_source: ImageSource | None | Unset = UNSET,
+        image_tag: str | None = None,
+        init_containers: list[InitContainerInput] | None = None,
+        metrics: ContainerAppMetrics | None | Unset = UNSET,
+        persistence: list[PersistenceInput] | None = None,
+        port: int | None | Unset = UNSET,
+        ports: list[ContainerAppPortInput] | None = None,
+        replicas: int | None = None,
+        resource_mode: ResourceMode | ResourceModeLiteral | None | Unset = UNSET,
+        resource_tier: ResourceTier | ResourceTierLiteral | None | Unset = UNSET,
+        secret_refs: list[SecretRefInput] | None = None,
+        slug: str | None | Unset = UNSET,
+        tags: list[str] | None = None,
+        extra_headers: t.Mapping[str, str] | None = None,
+        extra_query: t.Mapping[str, object] | None = None,
+        extra_body: t.Mapping[str, object] | None = None,
+        timeout: Timeout | Unset = UNSET,
+        max_retries: int | None = None,
+    ) -> None:
+        """`POST /api/v1/organizations/{organization_id}/harbors/{harbor_id}/container-apps/crd`.
+
+        :param alert_on_sync_failure: With `image_source`: whether to create the default "Git sync failed" alert rule. Absent means yes.
+        :param args: Arguments passed to the main container's entrypoint. Empty (or omitted) keeps the image's CMD.
+        :param command: Entrypoint of the main container. Empty (or omitted) keeps the image's ENTRYPOINT.
+        :param custom_domains: Bring-your-own custom domains. Each FQDN's apex must have a `Verified` `DomainVerification` for the operator to provision a route + cert; otherwise the per-domain status sits in `PendingVerification` until the user completes ownership verification.
+        :param description: Free-text description, at most 1000 characters. A blank value is the same as leaving it out.
+        :param expose_to_internet: Whether to create internet-facing routes (platform host route and custom-domain routes) for this app. Defaults to `false` — new apps are private by default. When `false`, the operator keeps the ClusterIP Service so the app is still reachable in-cluster. Set to `true` to opt into a public endpoint explicitly.
+        :param file_mounts: Files to mount into the container at startup. Each entry is either an inline literal or a reference to a platform secret. Inline content is hard-capped at 8 KiB per file and 32 KiB total across all entries — file mounts are for small configs, not data.
+        :param image_pull_secrets: Names of secrets from the secret store to use as image pull secrets.
+        :param image_repository: Required unless `image_source` is set, and refused with it.
+        :param image_tag: Required unless `image_source` is set, and refused with it.
+        :param init_containers: Init containers, run to completion (in order) before the main container starts. Each inherits the app's resolved env and persistent volumes by default. Capped at 4 entries.
+        :param name: Display name shown in the console, at most 255 characters. Several apps may share one; only `slug` is unique.
+        :param persistence: Persistent volumes attached to the container. Each entry is reconciled into a `PersistentVolumeClaim` owned by the `ContainerApp`. Capped at 8 entries. PVCs are always `ReadWriteOnce`; `size` and `storageClass` are immutable after creation in v1 — volume expansion is not yet supported.
+        :param port: **Deprecated — use `ports`.** Written to the CR only when supplied, so a request that omits it leaves the field off the spec entirely.
+        :param ports: Ports the container listens on. When non-empty this replaces `port`. Only the primary port gets a public route; the others are reachable in-cluster through the app's Service.
+        :param slug: The app's identifier, unique in its environment, used in its URL and Kubernetes resource names; it cannot change later. Lowercase letters, digits and single hyphens, not starting or ending with a hyphen, at most 49 characters. Derived from `name` when omitted, so a `name` that is already a valid slug is used as is.
+        :param tags: Tags shown on the app: at most 20, none blank, each at most 64 characters."""
+        await self._request(
+            ApiRequest(
+                method="post",
+                path="/api/v1/organizations/{organization_id}/harbors/{harbor_id}/container-apps/crd",
+                path_params={
+                    "organization_id": encode_path_param(
+                        "organization_id", organization_id, "simple", False
+                    ),
+                    "harbor_id": encode_path_param(
+                        "harbor_id", harbor_id, "simple", False
+                    ),
+                },
+                json_body=to_json_value(
+                    CreateContainerAppCrdRequestBody(
+                        alert_on_sync_failure=alert_on_sync_failure,
+                        args=args,
+                        autoscaling=autoscaling,
+                        command=command,
+                        custom_domains=custom_domains,
+                        custom_resources=custom_resources,
+                        description=description,
+                        enabled=enabled,
+                        env=env,
+                        expose_to_internet=expose_to_internet,
+                        file_mounts=file_mounts,
+                        health_check_path=health_check_path,
+                        health_check_port=health_check_port,
+                        image_pull_secrets=image_pull_secrets,
+                        image_repository=image_repository,
+                        image_source=image_source,
+                        image_tag=image_tag,
+                        init_containers=init_containers,
+                        metrics=metrics,
+                        name=name,
+                        persistence=persistence,
+                        port=port,
+                        ports=ports,
+                        replicas=replicas,
+                        resource_mode=t.cast(
+                            "ResourceMode | None | Unset", resource_mode
+                        ),
+                        resource_tier=t.cast(
+                            "ResourceTier | None | Unset", resource_tier
+                        ),
+                        secret_refs=secret_refs,
+                        slug=slug,
+                        tags=tags,
+                    ),
+                    CreateContainerAppCrdRequestBody,
+                ),
+                error_types={
+                    "default": _models.ApiErrorBody,
+                },
+                extra_headers=extra_headers,
+                extra_query=extra_query,
+                extra_body=extra_body,
+                timeout=timeout,
+                max_retries=max_retries,
+            )
+        )
+
+
+class AsyncContainerAppsCrdWithRawResponse:
+    """The methods of :class:`AsyncContainerAppsCrd`, returning an :class:`APIResponse`."""
+
+    def __init__(self, resource: AsyncContainerAppsCrd) -> None:
+        self.retrieve = async_to_raw_response_wrapper(resource.retrieve)
+        self.delete = async_to_raw_response_wrapper(resource.delete)
+        self.update = async_to_raw_response_wrapper(resource.update)
+        self.restart = async_to_raw_response_wrapper(resource.restart)
+        self.create = async_to_raw_response_wrapper(resource.create)
+
+
+class ContainerAppsCrd(ApiBaseSync):
+    """Container apps crd API."""
+
+    @property
+    def with_raw_response(self) -> ContainerAppsCrdWithRawResponse:
+        """These methods, returning an :class:`APIResponse` with the status and headers."""
+        return ContainerAppsCrdWithRawResponse(self)
+
+    def retrieve(
+        self,
+        organization_id: UUID,
+        app_id: UUID,
+        *,
+        extra_headers: t.Mapping[str, str] | None = None,
+        extra_query: t.Mapping[str, object] | None = None,
+        extra_body: t.Mapping[str, object] | None = None,
+        timeout: Timeout | Unset = UNSET,
+        max_retries: int | None = None,
+    ) -> ContainerAppCrdSpecResponse:
+        """`GET /api/v1/organizations/{organization_id}/container-apps/{app_id}/crd`."""
+        response = self._request(
+            ApiRequest(
+                method="get",
+                path="/api/v1/organizations/{organization_id}/container-apps/{app_id}/crd",
+                path_params={
+                    "organization_id": encode_path_param(
+                        "organization_id", organization_id, "simple", False
+                    ),
+                    "app_id": encode_path_param("app_id", app_id, "simple", False),
+                },
+                error_types={
+                    "default": _models.ApiErrorBody,
+                },
+                extra_headers=extra_headers,
+                extra_query=extra_query,
+                extra_body=extra_body,
+                timeout=timeout,
+                max_retries=max_retries,
+            )
+        )
+        return decode_response(response, ContainerAppCrdSpecResponse)
+
+    def delete(
+        self,
+        organization_id: UUID,
+        app_id: UUID,
+        *,
+        extra_headers: t.Mapping[str, str] | None = None,
+        extra_query: t.Mapping[str, object] | None = None,
+        extra_body: t.Mapping[str, object] | None = None,
+        timeout: Timeout | Unset = UNSET,
+        max_retries: int | None = None,
+    ) -> None:
+        """`DELETE /api/v1/organizations/{organization_id}/container-apps/{app_id}/crd`."""
+        self._request(
+            ApiRequest(
+                method="delete",
+                path="/api/v1/organizations/{organization_id}/container-apps/{app_id}/crd",
+                path_params={
+                    "organization_id": encode_path_param(
+                        "organization_id", organization_id, "simple", False
+                    ),
+                    "app_id": encode_path_param("app_id", app_id, "simple", False),
+                },
+                error_types={
+                    "default": _models.ApiErrorBody,
+                },
+                extra_headers=extra_headers,
+                extra_query=extra_query,
+                extra_body=extra_body,
+                timeout=timeout,
+                max_retries=max_retries,
+            )
+        )
+
+    def update(
+        self,
+        organization_id: UUID,
+        app_id: UUID,
+        *,
+        alert_on_sync_failure: bool | None | Unset = UNSET,
+        args: list[str] | None | Unset = UNSET,
+        autoscaling: AutoscalingSpec | None | Unset = UNSET,
+        clear_autoscaling: bool | None | Unset = UNSET,
+        clear_health_check: bool | None | Unset = UNSET,
+        clear_metrics: bool | None | Unset = UNSET,
+        command: list[str] | None | Unset = UNSET,
+        confirm_volume_deletion: bool | None | Unset = UNSET,
+        custom_domains: list[CustomDomainInput] | None | Unset = UNSET,
+        custom_resources: CustomResourceInput | None | Unset = UNSET,
+        enabled: bool | None | Unset = UNSET,
+        env: list[EnvVarInput] | None | Unset = UNSET,
+        expose_to_internet: bool | None | Unset = UNSET,
+        file_mounts: list[FileMountInput] | None | Unset = UNSET,
+        health_check_path: str | None | Unset = UNSET,
+        health_check_port: int | None | Unset = UNSET,
+        image_pull_secrets: list[str] | None | Unset = UNSET,
+        image_repository: str | None | Unset = UNSET,
+        image_source: ImageSource | None | Unset = UNSET,
+        image_tag: str | None | Unset = UNSET,
+        init_containers: list[InitContainerInput] | None | Unset = UNSET,
+        metrics: ContainerAppMetrics | None | Unset = UNSET,
+        persistence: list[PersistenceInput] | None | Unset = UNSET,
+        port: int | None | Unset = UNSET,
+        ports: list[ContainerAppPortInput] | None | Unset = UNSET,
+        replicas: int | None | Unset = UNSET,
+        resource_mode: ResourceMode | ResourceModeLiteral | None | Unset = UNSET,
+        resource_tier: ResourceTier | ResourceTierLiteral | None | Unset = UNSET,
+        resource_version: str | None | Unset = UNSET,
+        secret_refs: list[SecretRefInput] | None | Unset = UNSET,
+        extra_headers: t.Mapping[str, str] | None = None,
+        extra_query: t.Mapping[str, object] | None = None,
+        extra_body: t.Mapping[str, object] | None = None,
+        timeout: Timeout | Unset = UNSET,
+        max_retries: int | None = None,
+    ) -> None:
+        """`PATCH /api/v1/organizations/{organization_id}/container-apps/{app_id}/crd`.
+
+        :param alert_on_sync_failure: Enable or disable the default "Git sync failed" alert rule of an app with a Git source. Omit to leave it unchanged.
+        :param args: Main container arguments. PATCH semantics: `null` (omit) leaves the current value alone; an empty array clears it back to the image's CMD; a non-empty array replaces it.
+        :param clear_autoscaling: When `true`, removes the autoscaling: the app runs `replicas` again. Mutually exclusive with `autoscaling`.
+        :param clear_health_check: When `true`, removes any existing health check from the spec. Mutually exclusive with `health_check_path` / `health_check_port`: sending both returns a 400 Bad Request.
+        :param clear_metrics: When `true`, removes the metrics declaration. Mutually exclusive with `metrics`.
+        :param command: Main container entrypoint. PATCH semantics: `null` (omit) leaves the current value alone; an empty array clears it back to the image's ENTRYPOINT; a non-empty array replaces it.
+        :param confirm_volume_deletion: Must be `true` to lower the replica reservation (`replicas`, or `autoscaling.maxReplicas` for an autoscaled app) of an app with a `perReplica` volume: the volumes of the replicas above the new reservation are deleted once those replicas are gone, with their data. Without it such a patch is refused with 400. Stopping the app (`enabled: false`) keeps every volume and needs no confirmation.
+        :param custom_domains: Custom domains to expose the app on. PATCH semantics: `null` (omit) leaves existing entries alone; an empty array clears them; a non-empty array replaces the full list.
+        :param enabled: Stop (`false`) or start (`true`) the application. `false` scales the workload to zero while keeping `replicas` in the spec; `true` runs that count again. Starting an app whose `replicas` is 0 (scaled down by hand) restores one replica unless `replicas` is set in the same call. Omit to leave the current value unchanged.
+        :param expose_to_internet: When set, flips internet exposure on or off. `false` removes the platform host route and all custom-domain routes while keeping the ClusterIP Service. `true` restores them. Omit to leave the current value unchanged.
+        :param file_mounts: Files to mount into the container. PATCH semantics: `null` (omit) leaves existing entries alone; an empty array clears them; a non-empty array replaces the full list. Subject to the same per-file and total inline size caps as `POST`.
+        :param image_pull_secrets: Names of secrets from the secret store to use as image pull secrets. Replaces existing pull secrets when set.
+        :param image_repository: Refused with 409 while a Git source is attached: Git owns the image.
+        :param image_tag: Refused with 409 while a Git source is attached: Git owns the image.
+        :param init_containers: Init containers. PATCH semantics: `null` (omit) leaves existing entries alone, which is what protects a template-provisioned init container (e.g. Forgejo's `bootstrap-oidc`) from an unrelated edit; an empty array clears every entry; a non-empty array replaces the full list.
+        :param persistence: Persistent volumes attached to the container. PATCH semantics: `null` (omit) leaves existing entries alone; an empty array removes every entry from the spec; a non-empty array replaces the full list.  Note: removing an entry does NOT delete the underlying PVC. The operator surfaces `PersistenceReady=False` (`OrphanPersistenceVolumes`) listing the now-unreferenced PVCs and leaves them intact so data is never lost by accident. The only way to release the volumes is to delete the `ContainerApp` itself, at which point owner-reference GC releases the underlying PVs per the StorageClass `reclaimPolicy`.  `size` and `storageClass` are immutable per entry — the operator surfaces `PersistenceReady=False` (`ImmutablePersistenceChanged`) and refuses to apply the workload until the change is reverted. Adding or removing entries is allowed (subject to the orphan behavior above).
+        :param port: **Deprecated — use `ports`.** Ignored by the operator once the spec carries a non-empty `ports`.
+        :param ports: Ports the container listens on. PATCH semantics: `null` (omit) leaves existing entries alone; an empty array clears them, falling back to the deprecated single `port`; a non-empty array replaces the full list.
+        :param resource_version: If set, the patch will be rejected with 409 Conflict when the live object's resourceVersion differs. Recommended for any UI-driven edit to prevent silent last-write-wins on concurrent modifications."""
+        self._request(
+            ApiRequest(
+                method="patch",
+                path="/api/v1/organizations/{organization_id}/container-apps/{app_id}/crd",
+                path_params={
+                    "organization_id": encode_path_param(
+                        "organization_id", organization_id, "simple", False
+                    ),
+                    "app_id": encode_path_param("app_id", app_id, "simple", False),
+                },
+                json_body=to_json_value(
+                    PatchContainerAppCrdRequestBody(
+                        alert_on_sync_failure=alert_on_sync_failure,
+                        args=args,
+                        autoscaling=autoscaling,
+                        clear_autoscaling=clear_autoscaling,
+                        clear_health_check=clear_health_check,
+                        clear_metrics=clear_metrics,
+                        command=command,
+                        confirm_volume_deletion=confirm_volume_deletion,
+                        custom_domains=custom_domains,
+                        custom_resources=custom_resources,
+                        enabled=enabled,
+                        env=env,
+                        expose_to_internet=expose_to_internet,
+                        file_mounts=file_mounts,
+                        health_check_path=health_check_path,
+                        health_check_port=health_check_port,
+                        image_pull_secrets=image_pull_secrets,
+                        image_repository=image_repository,
+                        image_source=image_source,
+                        image_tag=image_tag,
+                        init_containers=init_containers,
+                        metrics=metrics,
+                        persistence=persistence,
+                        port=port,
+                        ports=ports,
+                        replicas=replicas,
+                        resource_mode=t.cast(
+                            "ResourceMode | None | Unset", resource_mode
+                        ),
+                        resource_tier=t.cast(
+                            "ResourceTier | None | Unset", resource_tier
+                        ),
+                        resource_version=resource_version,
+                        secret_refs=secret_refs,
+                    ),
+                    PatchContainerAppCrdRequestBody,
+                ),
+                error_types={
+                    "default": _models.ApiErrorBody,
+                },
+                extra_headers=extra_headers,
+                extra_query=extra_query,
+                extra_body=extra_body,
+                timeout=timeout,
+                max_retries=max_retries,
+            )
+        )
+
+    def restart(
+        self,
+        organization_id: UUID,
+        app_id: UUID,
+        *,
+        extra_headers: t.Mapping[str, str] | None = None,
+        extra_query: t.Mapping[str, object] | None = None,
+        extra_body: t.Mapping[str, object] | None = None,
+        timeout: Timeout | Unset = UNSET,
+        max_retries: int | None = None,
+    ) -> None:
+        """`POST /api/v1/organizations/{organization_id}/container-apps/{app_id}/crd/restart`."""
+        self._request(
+            ApiRequest(
+                method="post",
+                path="/api/v1/organizations/{organization_id}/container-apps/{app_id}/crd/restart",
+                path_params={
+                    "organization_id": encode_path_param(
+                        "organization_id", organization_id, "simple", False
+                    ),
+                    "app_id": encode_path_param("app_id", app_id, "simple", False),
+                },
+                error_types={
+                    "default": _models.ApiErrorBody,
+                },
+                extra_headers=extra_headers,
+                extra_query=extra_query,
+                extra_body=extra_body,
+                timeout=timeout,
+                max_retries=max_retries,
+            )
+        )
+
+    def create(
+        self,
+        organization_id: UUID,
+        harbor_id: UUID,
+        *,
+        enabled: bool,
+        name: str,
+        alert_on_sync_failure: bool | None | Unset = UNSET,
+        args: list[str] | None = None,
+        autoscaling: AutoscalingSpec | None | Unset = UNSET,
+        command: list[str] | None = None,
+        custom_domains: list[CustomDomainInput] | None = None,
+        custom_resources: CustomResourceInput | None | Unset = UNSET,
+        description: str | None | Unset = UNSET,
+        env: list[EnvVarInput] | None = None,
+        expose_to_internet: bool | None = None,
+        file_mounts: list[FileMountInput] | None = None,
+        health_check_path: str | None | Unset = UNSET,
+        health_check_port: int | None | Unset = UNSET,
+        image_pull_secrets: list[str] | None = None,
+        image_repository: str | None = None,
+        image_source: ImageSource | None | Unset = UNSET,
+        image_tag: str | None = None,
+        init_containers: list[InitContainerInput] | None = None,
+        metrics: ContainerAppMetrics | None | Unset = UNSET,
+        persistence: list[PersistenceInput] | None = None,
+        port: int | None | Unset = UNSET,
+        ports: list[ContainerAppPortInput] | None = None,
+        replicas: int | None = None,
+        resource_mode: ResourceMode | ResourceModeLiteral | None | Unset = UNSET,
+        resource_tier: ResourceTier | ResourceTierLiteral | None | Unset = UNSET,
+        secret_refs: list[SecretRefInput] | None = None,
+        slug: str | None | Unset = UNSET,
+        tags: list[str] | None = None,
+        extra_headers: t.Mapping[str, str] | None = None,
+        extra_query: t.Mapping[str, object] | None = None,
+        extra_body: t.Mapping[str, object] | None = None,
+        timeout: Timeout | Unset = UNSET,
+        max_retries: int | None = None,
+    ) -> None:
+        """`POST /api/v1/organizations/{organization_id}/harbors/{harbor_id}/container-apps/crd`.
+
+        :param alert_on_sync_failure: With `image_source`: whether to create the default "Git sync failed" alert rule. Absent means yes.
+        :param args: Arguments passed to the main container's entrypoint. Empty (or omitted) keeps the image's CMD.
+        :param command: Entrypoint of the main container. Empty (or omitted) keeps the image's ENTRYPOINT.
+        :param custom_domains: Bring-your-own custom domains. Each FQDN's apex must have a `Verified` `DomainVerification` for the operator to provision a route + cert; otherwise the per-domain status sits in `PendingVerification` until the user completes ownership verification.
+        :param description: Free-text description, at most 1000 characters. A blank value is the same as leaving it out.
+        :param expose_to_internet: Whether to create internet-facing routes (platform host route and custom-domain routes) for this app. Defaults to `false` — new apps are private by default. When `false`, the operator keeps the ClusterIP Service so the app is still reachable in-cluster. Set to `true` to opt into a public endpoint explicitly.
+        :param file_mounts: Files to mount into the container at startup. Each entry is either an inline literal or a reference to a platform secret. Inline content is hard-capped at 8 KiB per file and 32 KiB total across all entries — file mounts are for small configs, not data.
+        :param image_pull_secrets: Names of secrets from the secret store to use as image pull secrets.
+        :param image_repository: Required unless `image_source` is set, and refused with it.
+        :param image_tag: Required unless `image_source` is set, and refused with it.
+        :param init_containers: Init containers, run to completion (in order) before the main container starts. Each inherits the app's resolved env and persistent volumes by default. Capped at 4 entries.
+        :param name: Display name shown in the console, at most 255 characters. Several apps may share one; only `slug` is unique.
+        :param persistence: Persistent volumes attached to the container. Each entry is reconciled into a `PersistentVolumeClaim` owned by the `ContainerApp`. Capped at 8 entries. PVCs are always `ReadWriteOnce`; `size` and `storageClass` are immutable after creation in v1 — volume expansion is not yet supported.
+        :param port: **Deprecated — use `ports`.** Written to the CR only when supplied, so a request that omits it leaves the field off the spec entirely.
+        :param ports: Ports the container listens on. When non-empty this replaces `port`. Only the primary port gets a public route; the others are reachable in-cluster through the app's Service.
+        :param slug: The app's identifier, unique in its environment, used in its URL and Kubernetes resource names; it cannot change later. Lowercase letters, digits and single hyphens, not starting or ending with a hyphen, at most 49 characters. Derived from `name` when omitted, so a `name` that is already a valid slug is used as is.
+        :param tags: Tags shown on the app: at most 20, none blank, each at most 64 characters."""
+        self._request(
+            ApiRequest(
+                method="post",
+                path="/api/v1/organizations/{organization_id}/harbors/{harbor_id}/container-apps/crd",
+                path_params={
+                    "organization_id": encode_path_param(
+                        "organization_id", organization_id, "simple", False
+                    ),
+                    "harbor_id": encode_path_param(
+                        "harbor_id", harbor_id, "simple", False
+                    ),
+                },
+                json_body=to_json_value(
+                    CreateContainerAppCrdRequestBody(
+                        alert_on_sync_failure=alert_on_sync_failure,
+                        args=args,
+                        autoscaling=autoscaling,
+                        command=command,
+                        custom_domains=custom_domains,
+                        custom_resources=custom_resources,
+                        description=description,
+                        enabled=enabled,
+                        env=env,
+                        expose_to_internet=expose_to_internet,
+                        file_mounts=file_mounts,
+                        health_check_path=health_check_path,
+                        health_check_port=health_check_port,
+                        image_pull_secrets=image_pull_secrets,
+                        image_repository=image_repository,
+                        image_source=image_source,
+                        image_tag=image_tag,
+                        init_containers=init_containers,
+                        metrics=metrics,
+                        name=name,
+                        persistence=persistence,
+                        port=port,
+                        ports=ports,
+                        replicas=replicas,
+                        resource_mode=t.cast(
+                            "ResourceMode | None | Unset", resource_mode
+                        ),
+                        resource_tier=t.cast(
+                            "ResourceTier | None | Unset", resource_tier
+                        ),
+                        secret_refs=secret_refs,
+                        slug=slug,
+                        tags=tags,
+                    ),
+                    CreateContainerAppCrdRequestBody,
+                ),
+                error_types={
+                    "default": _models.ApiErrorBody,
+                },
+                extra_headers=extra_headers,
+                extra_query=extra_query,
+                extra_body=extra_body,
+                timeout=timeout,
+                max_retries=max_retries,
+            )
+        )
+
+
+class ContainerAppsCrdWithRawResponse:
+    """The methods of :class:`ContainerAppsCrd`, returning an :class:`APIResponse`."""
+
+    def __init__(self, resource: ContainerAppsCrd) -> None:
+        self.retrieve = to_raw_response_wrapper(resource.retrieve)
+        self.delete = to_raw_response_wrapper(resource.delete)
+        self.update = to_raw_response_wrapper(resource.update)
+        self.restart = to_raw_response_wrapper(resource.restart)
+        self.create = to_raw_response_wrapper(resource.create)