qontract-reconcile 0.10.1rc753__py3-none-any.whl → 0.10.1rc754__py3-none-any.whl

{qontract_reconcile-0.10.1rc753.dist-info → qontract_reconcile-0.10.1rc754.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: qontract-reconcile
-Version: 0.10.1rc753
+Version: 0.10.1rc754
 Summary: Collection of tools to reconcile services with their desired state as defined in the app-interface DB.
 Home-page: https://github.com/app-sre/qontract-reconcile
 Author: Red Hat App-SRE Team

{qontract_reconcile-0.10.1rc753.dist-info → qontract_reconcile-0.10.1rc754.dist-info}/RECORD

@@ -10,7 +10,7 @@ reconcile/aws_iam_password_reset.py,sha256=NwErtrqgBiXr7eGCAHdtGGOx0S7-4JnSc29Ie
 reconcile/aws_support_cases_sos.py,sha256=Jk6_XjDeJSYxgRGqcEAOcynt9qJF2r5HPIPcSKmoBv8,2974
 reconcile/blackbox_exporter_endpoint_monitoring.py,sha256=W_VJagnsJR1v5oqjlI3RJJE0_nhtJ0m81RS8zWA5u5c,3538
 reconcile/checkpoint.py,sha256=R2WFXUXLTB4sWMi4GeA4eegsuf_1-Q4vH8M0Toh3Ij4,5036
-reconcile/cli.py,sha256=Vw8P6w0nPOGkMRvxpn4lR75jUeRoXLJ4R-WspWNX6Cg,98702
+reconcile/cli.py,sha256=knLmE8YaI61Vg6tbcl5YW8HXIthq91yQknVtnXygCgY,99475
 reconcile/closedbox_endpoint_monitoring_base.py,sha256=SMhkcQqprWvThrIJa3U_3uh5w1h-alleW1QnCJFY4Qw,4909
 reconcile/cluster_deployment_mapper.py,sha256=2Ah-nu-Mdig0pjuiZl_XLrmVAjYzFjORR3dMlCgkmw0,2352
 reconcile/dashdotdb_base.py,sha256=a5aPLVxyqPSbjdB0Ty-uliOtxwvEbbEljHJKxdK3-Zk,4813
@@ -250,6 +250,10 @@ reconcile/gql_definitions/dashdotdb_slo/__init__.py,sha256=47DEQpj8HBSa-_TImW-5J
 reconcile/gql_definitions/dashdotdb_slo/slo_documents_query.py,sha256=zUa-CmpOwiymVmOV6KwDHH5mMl06p000320FcOas6hU,4315
 reconcile/gql_definitions/dynatrace_token_provider/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 reconcile/gql_definitions/dynatrace_token_provider/dynatrace_bootstrap_tokens.py,sha256=38b9JR7gFTdID3EJO9zeqrCT1adbLrurOLYIGAKPxtA,2045
+reconcile/gql_definitions/external_resources/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
+reconcile/gql_definitions/external_resources/external_resources_modules.py,sha256=2VIb3hC2MRNhYDZ1al4PvudT2oSfd3fPGpzv4CEJNiw,2341
+reconcile/gql_definitions/external_resources/external_resources_namespaces.py,sha256=UyOAUY1rROenjTz6y-uSEFjrEwhh-lPsIQPbi6EQLFg,40915
+reconcile/gql_definitions/external_resources/external_resources_settings.py,sha256=O6zPVHjQX4RY6lcLx5uNiExfx3nO3aoyucmKxhXsL60,2342
 reconcile/gql_definitions/fragments/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 reconcile/gql_definitions/fragments/aus_organization.py,sha256=ARI87YAbC0VjFri9eVGYrRPBc4s0kWsa25RR8FFoq7E,4433
 reconcile/gql_definitions/fragments/aws_account_common.py,sha256=d_FwpS_dY8o8DCLa3NERs93FVxQLiDUIPm5tGNac-iw,2320
@@ -560,6 +564,7 @@ reconcile/typed_queries/clusters.py,sha256=tptLP2Ov1lNqtDGuPKBOVvpDtREm5CQFDDVyp
 reconcile/typed_queries/clusters_minimal.py,sha256=flvs4oXVR4b971h-zMTK3C2GL3bjMnvZgrAeI3XgBQQ,517
 reconcile/typed_queries/clusters_with_dms.py,sha256=hyNPaHBgUIhnAeuOSY5SG46U1zDp9KytUXEobkZdRlQ,551
 reconcile/typed_queries/clusters_with_peering.py,sha256=lIai7SJJD0bqIJbe7virgrbYRqjLouSL2OpJD0itpAY,330
+reconcile/typed_queries/external_resources.py,sha256=vQEQwedYx_zoo94qdTSI4TMEg-rgmOOVoy19cKBlvN8,1540
 reconcile/typed_queries/get_state_aws_account.py,sha256=CSJjVPWsUZ2rkGIt8ehoQt7hokFqrUDgG9HFlg2lVD8,492
 reconcile/typed_queries/github_orgs.py,sha256=UZhoPl8qvA_tcO7CZlN8GuMKckt3ywd47Suu61rgHsc,258
 reconcile/typed_queries/gitlab_instances.py,sha256=ZVQHy2W9xIp53f5qYkjKLHLHgOVtQpxTfcmM1C2046g,291
@@ -778,8 +783,8 @@ tools/test/test_app_interface_metrics_exporter.py,sha256=SX7qL3D1SIRKFo95FoQztvf
 tools/test/test_qontract_cli.py,sha256=w2l4BHB09k1d-BGJ1jBUNCqDv7zkqYrMHojQXg-21kQ,4155
 tools/test/test_sd_app_sre_alert_report.py,sha256=v363r9zM7__0kR5K6mvJoGFcM9BvE33fWAayrqkpojA,2116
 tools/test/test_sre_checkpoints.py,sha256=SKqPPTl9ua0RFdSSofnoQX-JZE6dFLO3LRhfQzqtfh8,2607
-qontract_reconcile-0.10.1rc753.dist-info/METADATA,sha256=XxOXxeAxSQyr7D4Nr7l5sIcfOoFqaHHIUydTxR7CrEQ,2382
-qontract_reconcile-0.10.1rc753.dist-info/WHEEL,sha256=GJ7t_kWBFywbagK5eo9IoUwLW6oyOeTKmQ-9iHFVNxQ,92
-qontract_reconcile-0.10.1rc753.dist-info/entry_points.txt,sha256=rIxI5zWtHNlfpDeq1a7pZXAPoqf7HG32KMTN3MeWK_8,429
-qontract_reconcile-0.10.1rc753.dist-info/top_level.txt,sha256=l5ISPoXzt0SdR4jVdkfa7RPSKNc8zAHYWAnR-Dw8Ey8,24
-qontract_reconcile-0.10.1rc753.dist-info/RECORD,,
+qontract_reconcile-0.10.1rc754.dist-info/METADATA,sha256=OD3FoCxX0CTq2h4QAdvIIjPG_kpBIaUZmsRyAbRSduU,2382
+qontract_reconcile-0.10.1rc754.dist-info/WHEEL,sha256=GJ7t_kWBFywbagK5eo9IoUwLW6oyOeTKmQ-9iHFVNxQ,92
+qontract_reconcile-0.10.1rc754.dist-info/entry_points.txt,sha256=rIxI5zWtHNlfpDeq1a7pZXAPoqf7HG32KMTN3MeWK_8,429
+qontract_reconcile-0.10.1rc754.dist-info/top_level.txt,sha256=l5ISPoXzt0SdR4jVdkfa7RPSKNc8zAHYWAnR-Dw8Ey8,24
+qontract_reconcile-0.10.1rc754.dist-info/RECORD,,

reconcile/cli.py

@@ -3512,6 +3512,33 @@ def deadmanssnitch(ctx):
     )
 
 
+@integration.command(short_help="Manages External Resources")
+@click.pass_context
+@threaded(default=5)
+@click.option("--cluster", help="Cluster where the Jobs will be created", default=None)
+@click.option(
+    "--namespace", help="Namespace where the Jobs will be created", default=None
+)
+@click.option(
+    "--dry-run-job-suffix",
+    help="Suffix jons run in pr_checks. e.g: gitlab merge request id",
+    default="",
+)
+def external_resources(
+    ctx, cluster: str, namespace: str, dry_run_job_suffix: str, thread_pool_size: int
+):
+    import reconcile.external_resources.integration
+
+    run_integration(
+        reconcile.external_resources.integration,
+        ctx.obj,
+        cluster,
+        namespace,
+        dry_run_job_suffix,
+        thread_pool_size,
+    )
+
+
 def get_integration_cli_meta() -> dict[str, IntegrationMeta]:
     """
     returns all integrations known to cli.py via click introspection

reconcile/gql_definitions/external_resources/external_resources_modules.py

@@ -0,0 +1,72 @@
+"""
+Generated by qenerate plugin=pydantic_v1. DO NOT MODIFY MANUALLY!
+"""
+from collections.abc import Callable  # noqa: F401 # pylint: disable=W0611
+from datetime import datetime  # noqa: F401 # pylint: disable=W0611
+from enum import Enum  # noqa: F401 # pylint: disable=W0611
+from typing import (  # noqa: F401 # pylint: disable=W0611
+    Any,
+    Optional,
+    Union,
+)
+
+from pydantic import (  # noqa: F401 # pylint: disable=W0611
+    BaseModel,
+    Extra,
+    Field,
+    Json,
+)
+
+
+DEFINITION = """
+query ExternalResourcesModules {
+    modules: external_resources_modules_v1 {
+        provision_provider
+        provider
+        module_type
+        image
+        default_version
+        reconcile_drift_interval_minutes
+        reconcile_timeout_minutes
+    }
+}
+"""
+
+
+class ConfiguredBaseModel(BaseModel):
+    class Config:
+        smart_union=True
+        extra=Extra.forbid
+
+
+class ExternalResourcesModuleV1(ConfiguredBaseModel):
+    provision_provider: str = Field(..., alias="provision_provider")
+    provider: str = Field(..., alias="provider")
+    module_type: str = Field(..., alias="module_type")
+    image: str = Field(..., alias="image")
+    default_version: str = Field(..., alias="default_version")
+    reconcile_drift_interval_minutes: str = Field(..., alias="reconcile_drift_interval_minutes")
+    reconcile_timeout_minutes: str = Field(..., alias="reconcile_timeout_minutes")
+
+
+class ExternalResourcesModulesQueryData(ConfiguredBaseModel):
+    modules: Optional[list[ExternalResourcesModuleV1]] = Field(..., alias="modules")
+
+
+def query(query_func: Callable, **kwargs: Any) -> ExternalResourcesModulesQueryData:
+    """
+    This is a convenience function which queries and parses the data into
+    concrete types. It should be compatible with most GQL clients.
+    You do not have to use it to consume the generated data classes.
+    Alternatively, you can also mime and alternate the behavior
+    of this function in the caller.
+
+    Parameters:
+        query_func (Callable): Function which queries your GQL Server
+        kwargs: optional arguments that will be passed to the query function
+
+    Returns:
+        ExternalResourcesModulesQueryData: queried data parsed into generated classes
+    """
+    raw_data: dict[Any, Any] = query_func(DEFINITION, **kwargs)
+    return ExternalResourcesModulesQueryData(**raw_data)

reconcile/gql_definitions/external_resources/external_resources_namespaces.py

@@ -0,0 +1,1043 @@
+"""
+Generated by qenerate plugin=pydantic_v1. DO NOT MODIFY MANUALLY!
+"""
+from collections.abc import Callable  # noqa: F401 # pylint: disable=W0611
+from datetime import datetime  # noqa: F401 # pylint: disable=W0611
+from enum import Enum  # noqa: F401 # pylint: disable=W0611
+from typing import (  # noqa: F401 # pylint: disable=W0611
+    Any,
+    Optional,
+    Union,
+)
+
+from pydantic import (  # noqa: F401 # pylint: disable=W0611
+    BaseModel,
+    Extra,
+    Field,
+    Json,
+)
+
+from reconcile.gql_definitions.fragments.aws_vpc import AWSVPC
+from reconcile.gql_definitions.fragments.jumphost_common_fields import CommonJumphostFields
+from reconcile.gql_definitions.fragments.vault_secret import VaultSecret
+
+
+DEFINITION = """
+fragment AWSVPC on AWSVPC_v1 {
+  name
+  description
+  account {
+    name
+    uid
+    terraformUsername
+    automationToken {
+      ... VaultSecret
+    }
+  }
+  region
+  vpc_id
+  cidr_block
+  subnets {
+    id
+  }
+}
+
+fragment CommonJumphostFields on ClusterJumpHost_v1 {
+  hostname
+  knownHosts
+  user
+  port
+  remotePort
+  identity {
+    ... VaultSecret
+  }
+}
+
+fragment VaultSecret on VaultSecret_v1 {
+    path
+    field
+    version
+    format
+}
+
+query ExternalResourcesNamespaces {
+  namespaces: namespaces_v1 {
+    name
+    delete
+    clusterAdmin
+    managedExternalResources
+    externalResources {
+      provider
+      ... on NamespaceTerraformProviderResourceAWS_v1 {
+        provisioner {
+            name
+            resourcesDefaultRegion
+            supportedDeploymentRegions
+        }
+        resources {
+            output_format {
+            provider
+            ... on NamespaceTerraformResourceGenericSecretOutputFormat_v1 {
+                data
+            }
+            }
+            provider
+            ... on NamespaceTerraformResourceRDS_v1 {
+                region
+                identifier
+                defaults
+                availability_zone
+                parameter_group
+                old_parameter_group
+                overrides
+                output_resource_name
+                enhanced_monitoring
+                replica_source
+                output_resource_db_name
+                reset_password
+                ca_cert {
+                    ... VaultSecret
+                }
+                annotations
+                event_notifications {
+                    destination
+                    source_type
+                    event_categories
+                }
+                data_classification {
+                    loss_impact
+                }
+                managed_by_erv2
+            }
+            ... on NamespaceTerraformResourceS3_v1 {
+                region
+                identifier
+                defaults
+                overrides
+                sqs_identifier
+                s3_events
+                event_notifications {
+                    destination_type
+                    destination
+                    event_type
+                    filter_prefix
+                    filter_suffix
+                }
+                bucket_policy
+                output_resource_name
+                storage_class
+                annotations
+            }
+            ... on NamespaceTerraformResourceElastiCache_v1 {
+                identifier
+                defaults
+                parameter_group
+                region
+                overrides
+                output_resource_name
+                annotations
+            }
+            ... on NamespaceTerraformResourceServiceAccount_v1 {
+                identifier
+                variables
+                policies
+                user_policy
+                output_resource_name
+                annotations
+                aws_infrastructure_access {
+                    cluster {
+                        name
+                    }
+                    access_level
+                    assume_role
+                }
+            }
+            ... on NamespaceTerraformResourceSecretsManagerServiceAccount_v1 {
+                identifier
+                secrets_prefix
+                output_resource_name
+                annotations
+            }
+            ... on NamespaceTerraformResourceRole_v1 {
+                identifier
+                assume_role {
+                    AWS
+                    Service
+                    Federated
+                }
+                assume_condition
+                assume_action
+                inline_policy
+                output_resource_name
+                annotations
+                managed_by_erv2
+            }
+            ... on NamespaceTerraformResourceSQS_v1 {
+                region
+                identifier
+                output_resource_name
+                annotations
+                specs {
+                    defaults
+                    queues {
+                        key
+                        value
+                    }
+                }
+            }
+            ... on NamespaceTerraformResourceSNSTopic_v1 {
+                defaults
+                region
+                identifier
+                output_resource_name
+                fifo_topic
+                inline_policy
+                annotations
+                subscriptions
+                {
+                    protocol
+                    endpoint
+                }
+            }
+            ... on NamespaceTerraformResourceDynamoDB_v1 {
+                region
+                identifier
+                output_resource_name
+                annotations
+                specs {
+                    defaults
+                    tables {
+                        key
+                        value
+                    }
+                }
+            }
+            ... on NamespaceTerraformResourceECR_v1 {
+                identifier
+                region
+                output_resource_name
+                public
+                annotations
+            }
+            ... on NamespaceTerraformResourceS3CloudFront_v1 {
+                region
+                identifier
+                defaults
+                output_resource_name
+                storage_class
+                annotations
+            }
+            ... on NamespaceTerraformResourceS3SQS_v1 {
+                region
+                identifier
+                defaults
+                kms_encryption
+                output_resource_name
+                storage_class
+                annotations
+            }
+            ... on NamespaceTerraformResourceCloudWatch_v1 {
+                region
+                identifier
+                defaults
+                es_identifier
+                filter_pattern
+                output_resource_name
+                annotations
+            }
+            ... on NamespaceTerraformResourceKMS_v1 {
+                region
+                identifier
+                defaults
+                overrides
+                output_resource_name
+                annotations
+            }
+            ... on NamespaceTerraformResourceElasticSearch_v1 {
+                region
+                identifier
+                defaults
+                output_resource_name
+                annotations
+                publish_log_types
+            }
+            ... on NamespaceTerraformResourceACM_v1 {
+                region
+                identifier
+                secret {
+                    ... VaultSecret
+                }
+                domain {
+                    domain_name
+                    alternate_names
+                }
+                output_resource_name
+                annotations
+            }
+            ... on NamespaceTerraformResourceKinesis_v1 {
+                region
+                identifier
+                defaults
+                es_identifier
+                output_resource_name
+                annotations
+            }
+            ... on NamespaceTerraformResourceS3CloudFrontPublicKey_v1 {
+                region
+                identifier
+                secret {
+                    ... VaultSecret
+                }
+                output_resource_name
+                annotations
+            }
+            ... on NamespaceTerraformResourceALB_v1 {
+                region
+                identifier
+                vpc {
+                    ... AWSVPC
+                }
+                certificate_arn
+                ingress_cidr_blocks
+                idle_timeout
+                enable_http2
+                ip_address_type
+                access_logs
+                targets {
+                    name
+                    default
+                    ips
+                    openshift_service
+                    protocol
+                    protocol_version
+                }
+                rules {
+                    condition {
+                        type
+                        ... on NamespaceTerraformResourceALBConditionHostHeader_v1 {
+                            host_header
+                        }
+                        ... on NamespaceTerraformResourceALBConditionHTTPRequestMethod_v1 {
+                            http_request_method
+                        }
+                        ... on NamespaceTerraformResourceALBConditionPathPattern_v1 {
+                            path_pattern
+                        }
+                        ... on NamespaceTerraformResourceALBConditionSourceIP_v1 {
+                            source_ip
+                        }
+                    }
+                    action {
+                        type
+                        ... on NamespaceTerraformResourceALBActionForward_v1 {
+                            forward {
+                                target_group {
+                                    target
+                                    weight
+                                }
+                            }
+                        }
+                        ... on NamespaceTerraformResourceALBActionFixedResponse_v1 {
+                            fixed_response {
+                                content_type
+                                message_body
+                                status_code
+                            }
+                        }
+                    }
+                }
+                output_resource_name
+                annotations
+            }
+            ... on NamespaceTerraformResourceSecretsManager_v1 {
+                region
+                identifier
+                secret {
+                    ... VaultSecret
+                }
+                output_resource_name
+                annotations
+            }
+            ... on NamespaceTerraformResourceASG_v1 {
+                region
+                identifier
+                defaults
+                cloudinit_configs {
+                    filename
+                    content_type
+                    content
+                }
+                variables
+                overrides
+                extra_tags
+                image {
+                    provider
+                    ... on ASGImageGit_v1 {
+                    tag_name
+                    url
+                    ref
+                    upstream {
+                        instance {
+                            name
+                            token {
+                                ... VaultSecret
+                            }
+                        }
+                        name
+                    }
+                    }
+                    ... on ASGImageStatic_v1 {
+                        tag_name
+                        value
+                    }
+                }
+                output_resource_name
+                annotations
+            }
+            ... on NamespaceTerraformResourceRoute53Zone_v1 {
+                region
+                identifier
+                name
+                output_resource_name
+                annotations
+                records {
+                    name
+                    type
+                    ttl
+                    alias {
+                        name
+                        zone_id
+                        evaluate_target_health
+                    }
+                    weighted_routing_policy {
+                        weight
+                    }
+                    geolocation_routing_policy {
+                        continent
+                        country
+                        subdivision
+                    }
+                    set_identifier
+                    records
+                }
+            }
+            ... on NamespaceTerraformResourceRosaAuthenticator_V1 {
+                region
+                identifier
+                api_proxy_uri
+                cognito_callback_bucket_name
+                certificate_arn
+                domain_name
+                network_interface_ids
+                openshift_ingress_load_balancer_arn
+                insights_callback_urls
+                output_resource_name
+                annotations
+                vpc_id
+                subnet_ids
+                vpce_id
+                defaults
+            }
+            ... on NamespaceTerraformResourceRosaAuthenticatorVPCE_V1 {
+                region
+                identifier
+                subnet_ids,
+                vpc_id,
+                output_resource_name
+                annotations
+                defaults
+            }
+            ... on NamespaceTerraformResourceMsk_v1 {
+                region
+                identifier
+                output_resource_name
+                defaults
+                annotations
+                users {
+                  name
+                  secret {
+                    ...VaultSecret
+                  }
+                }
+            }
+        }
+      }
+    }
+    environment {
+      name
+    }
+    app {
+      name
+    }
+    cluster {
+      name
+      serverUrl
+      insecureSkipTLSVerify
+      jumpHost {
+        ... CommonJumphostFields
+      }
+      automationToken {
+        ... VaultSecret
+      }
+      clusterAdminAutomationToken {
+        ... VaultSecret
+      }
+      spec {
+        region
+      }
+      internal
+      disable {
+        integrations
+      }
+    }
+  }
+}
+"""
+
+
+class ConfiguredBaseModel(BaseModel):
+    class Config:
+        smart_union=True
+        extra=Extra.forbid
+
+
+class NamespaceExternalResourceV1(ConfiguredBaseModel):
+    provider: str = Field(..., alias="provider")
+
+
+class AWSAccountV1(ConfiguredBaseModel):
+    name: str = Field(..., alias="name")
+    resources_default_region: str = Field(..., alias="resourcesDefaultRegion")
+    supported_deployment_regions: Optional[list[str]] = Field(..., alias="supportedDeploymentRegions")
+
+
+class NamespaceTerraformResourceOutputFormatV1(ConfiguredBaseModel):
+    provider: str = Field(..., alias="provider")
+
+
+class NamespaceTerraformResourceGenericSecretOutputFormatV1(NamespaceTerraformResourceOutputFormatV1):
+    data: Optional[str] = Field(..., alias="data")
+
+
+class NamespaceTerraformResourceAWSV1(ConfiguredBaseModel):
+    output_format: Optional[Union[NamespaceTerraformResourceGenericSecretOutputFormatV1, NamespaceTerraformResourceOutputFormatV1]] = Field(..., alias="output_format")
+    provider: str = Field(..., alias="provider")
+
+
+class AWSRDSEventNotificationV1(ConfiguredBaseModel):
+    destination: str = Field(..., alias="destination")
+    source_type: Optional[str] = Field(..., alias="source_type")
+    event_categories: Optional[list[str]] = Field(..., alias="event_categories")
+
+
+class AWSRDSDataClassificationV1(ConfiguredBaseModel):
+    loss_impact: Optional[str] = Field(..., alias="loss_impact")
+
+
+class NamespaceTerraformResourceRDSV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    defaults: str = Field(..., alias="defaults")
+    availability_zone: Optional[str] = Field(..., alias="availability_zone")
+    parameter_group: Optional[str] = Field(..., alias="parameter_group")
+    old_parameter_group: Optional[str] = Field(..., alias="old_parameter_group")
+    overrides: Optional[str] = Field(..., alias="overrides")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    enhanced_monitoring: Optional[bool] = Field(..., alias="enhanced_monitoring")
+    replica_source: Optional[str] = Field(..., alias="replica_source")
+    output_resource_db_name: Optional[str] = Field(..., alias="output_resource_db_name")
+    reset_password: Optional[str] = Field(..., alias="reset_password")
+    ca_cert: Optional[VaultSecret] = Field(..., alias="ca_cert")
+    annotations: Optional[str] = Field(..., alias="annotations")
+    event_notifications: Optional[list[AWSRDSEventNotificationV1]] = Field(..., alias="event_notifications")
+    data_classification: Optional[AWSRDSDataClassificationV1] = Field(..., alias="data_classification")
+    managed_by_erv2: Optional[bool] = Field(..., alias="managed_by_erv2")
+
+
+class AWSS3EventNotificationV1(ConfiguredBaseModel):
+    destination_type: str = Field(..., alias="destination_type")
+    destination: str = Field(..., alias="destination")
+    event_type: list[str] = Field(..., alias="event_type")
+    filter_prefix: Optional[str] = Field(..., alias="filter_prefix")
+    filter_suffix: Optional[str] = Field(..., alias="filter_suffix")
+
+
+class NamespaceTerraformResourceS3V1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    defaults: str = Field(..., alias="defaults")
+    overrides: Optional[str] = Field(..., alias="overrides")
+    sqs_identifier: Optional[str] = Field(..., alias="sqs_identifier")
+    s3_events: Optional[list[str]] = Field(..., alias="s3_events")
+    event_notifications: Optional[list[AWSS3EventNotificationV1]] = Field(..., alias="event_notifications")
+    bucket_policy: Optional[str] = Field(..., alias="bucket_policy")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    storage_class: Optional[str] = Field(..., alias="storage_class")
+    annotations: Optional[str] = Field(..., alias="annotations")
+
+
+class NamespaceTerraformResourceElastiCacheV1(NamespaceTerraformResourceAWSV1):
+    identifier: str = Field(..., alias="identifier")
+    defaults: str = Field(..., alias="defaults")
+    parameter_group: Optional[str] = Field(..., alias="parameter_group")
+    region: Optional[str] = Field(..., alias="region")
+    overrides: Optional[str] = Field(..., alias="overrides")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+
+
+class ClusterV1(ConfiguredBaseModel):
+    name: str = Field(..., alias="name")
+
+
+class NamespaceTerraformResourceServiceAccountAWSInfrastructureAccessV1(ConfiguredBaseModel):
+    cluster: Optional[ClusterV1] = Field(..., alias="cluster")
+    access_level: Optional[str] = Field(..., alias="access_level")
+    assume_role: Optional[str] = Field(..., alias="assume_role")
+
+
+class NamespaceTerraformResourceServiceAccountV1(NamespaceTerraformResourceAWSV1):
+    identifier: str = Field(..., alias="identifier")
+    variables: Optional[str] = Field(..., alias="variables")
+    policies: Optional[list[str]] = Field(..., alias="policies")
+    user_policy: Optional[str] = Field(..., alias="user_policy")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+    aws_infrastructure_access: Optional[NamespaceTerraformResourceServiceAccountAWSInfrastructureAccessV1] = Field(..., alias="aws_infrastructure_access")
+
+
+class NamespaceTerraformResourceSecretsManagerServiceAccountV1(NamespaceTerraformResourceAWSV1):
+    identifier: str = Field(..., alias="identifier")
+    secrets_prefix: str = Field(..., alias="secrets_prefix")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+
+
+class AssumeRoleV1(ConfiguredBaseModel):
+    aws: Optional[list[str]] = Field(..., alias="AWS")
+    service: Optional[list[str]] = Field(..., alias="Service")
+    federated: Optional[str] = Field(..., alias="Federated")
+
+
+class NamespaceTerraformResourceRoleV1(NamespaceTerraformResourceAWSV1):
+    identifier: str = Field(..., alias="identifier")
+    assume_role: AssumeRoleV1 = Field(..., alias="assume_role")
+    assume_condition: Optional[str] = Field(..., alias="assume_condition")
+    assume_action: Optional[str] = Field(..., alias="assume_action")
+    inline_policy: Optional[str] = Field(..., alias="inline_policy")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+    managed_by_erv2: Optional[bool] = Field(..., alias="managed_by_erv2")
+
+
+class KeyValueV1(ConfiguredBaseModel):
+    key: str = Field(..., alias="key")
+    value: str = Field(..., alias="value")
+
+
+class SQSQueuesSpecsV1(ConfiguredBaseModel):
+    defaults: str = Field(..., alias="defaults")
+    queues: list[KeyValueV1] = Field(..., alias="queues")
+
+
+class NamespaceTerraformResourceSQSV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+    specs: list[SQSQueuesSpecsV1] = Field(..., alias="specs")
+
+
+class NamespaceTerraformResourceSNSSubscriptionV1(ConfiguredBaseModel):
+    protocol: str = Field(..., alias="protocol")
+    endpoint: str = Field(..., alias="endpoint")
+
+
+class NamespaceTerraformResourceSNSTopicV1(NamespaceTerraformResourceAWSV1):
+    defaults: str = Field(..., alias="defaults")
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    fifo_topic: Optional[bool] = Field(..., alias="fifo_topic")
+    inline_policy: Optional[str] = Field(..., alias="inline_policy")
+    annotations: Optional[str] = Field(..., alias="annotations")
+    subscriptions: Optional[list[NamespaceTerraformResourceSNSSubscriptionV1]] = Field(..., alias="subscriptions")
+
+
+class DynamoDBTableSpecsV1_KeyValueV1(ConfiguredBaseModel):
+    key: str = Field(..., alias="key")
+    value: str = Field(..., alias="value")
+
+
+class DynamoDBTableSpecsV1(ConfiguredBaseModel):
+    defaults: str = Field(..., alias="defaults")
+    tables: list[DynamoDBTableSpecsV1_KeyValueV1] = Field(..., alias="tables")
+
+
+class NamespaceTerraformResourceDynamoDBV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+    specs: list[DynamoDBTableSpecsV1] = Field(..., alias="specs")
+
+
+class NamespaceTerraformResourceECRV1(NamespaceTerraformResourceAWSV1):
+    identifier: str = Field(..., alias="identifier")
+    region: Optional[str] = Field(..., alias="region")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    public: Optional[bool] = Field(..., alias="public")
+    annotations: Optional[str] = Field(..., alias="annotations")
+
+
+class NamespaceTerraformResourceS3CloudFrontV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    defaults: str = Field(..., alias="defaults")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    storage_class: Optional[str] = Field(..., alias="storage_class")
+    annotations: Optional[str] = Field(..., alias="annotations")
+
+
+class NamespaceTerraformResourceS3SQSV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    defaults: str = Field(..., alias="defaults")
+    kms_encryption: Optional[bool] = Field(..., alias="kms_encryption")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    storage_class: Optional[str] = Field(..., alias="storage_class")
+    annotations: Optional[str] = Field(..., alias="annotations")
+
+
+class NamespaceTerraformResourceCloudWatchV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    defaults: str = Field(..., alias="defaults")
+    es_identifier: Optional[str] = Field(..., alias="es_identifier")
+    filter_pattern: Optional[str] = Field(..., alias="filter_pattern")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+
+
+class NamespaceTerraformResourceKMSV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    defaults: str = Field(..., alias="defaults")
+    overrides: Optional[str] = Field(..., alias="overrides")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+
+
+class NamespaceTerraformResourceElasticSearchV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    defaults: str = Field(..., alias="defaults")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+    publish_log_types: Optional[list[str]] = Field(..., alias="publish_log_types")
+
+
+class ACMDomainV1(ConfiguredBaseModel):
+    domain_name: str = Field(..., alias="domain_name")
+    alternate_names: Optional[list[str]] = Field(..., alias="alternate_names")
+
+
+class NamespaceTerraformResourceACMV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    secret: Optional[VaultSecret] = Field(..., alias="secret")
+    domain: Optional[ACMDomainV1] = Field(..., alias="domain")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+
+
+class NamespaceTerraformResourceKinesisV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    defaults: str = Field(..., alias="defaults")
+    es_identifier: Optional[str] = Field(..., alias="es_identifier")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+
+
+class NamespaceTerraformResourceS3CloudFrontPublicKeyV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    secret: Optional[VaultSecret] = Field(..., alias="secret")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+
+
+class NamespaceTerraformResourceALBTargetsV1(ConfiguredBaseModel):
+    name: str = Field(..., alias="name")
+    default: bool = Field(..., alias="default")
+    ips: Optional[list[str]] = Field(..., alias="ips")
+    openshift_service: Optional[str] = Field(..., alias="openshift_service")
+    protocol: Optional[str] = Field(..., alias="protocol")
+    protocol_version: Optional[str] = Field(..., alias="protocol_version")
+
+
+class NamespaceTerraformResourceALBConditionV1(ConfiguredBaseModel):
+    q_type: str = Field(..., alias="type")
+
+
+class NamespaceTerraformResourceALBConditionHostHeaderV1(NamespaceTerraformResourceALBConditionV1):
+    host_header: list[str] = Field(..., alias="host_header")
+
+
+class NamespaceTerraformResourceALBConditionHTTPRequestMethodV1(NamespaceTerraformResourceALBConditionV1):
+    http_request_method: list[str] = Field(..., alias="http_request_method")
+
+
+class NamespaceTerraformResourceALBConditionPathPatternV1(NamespaceTerraformResourceALBConditionV1):
+    path_pattern: list[str] = Field(..., alias="path_pattern")
+
+
+class NamespaceTerraformResourceALBConditionSourceIPV1(NamespaceTerraformResourceALBConditionV1):
+    source_ip: list[str] = Field(..., alias="source_ip")
+
+
+class NamespaceTerraformResourceALBActionV1(ConfiguredBaseModel):
+    q_type: str = Field(..., alias="type")
+
+
+class NamespaceTerraformResourceALBTargetGroupV1(ConfiguredBaseModel):
+    target: str = Field(..., alias="target")
+    weight: int = Field(..., alias="weight")
+
+
+class NamespaceTerraformResourceALBActionForwardSettingsV1(ConfiguredBaseModel):
+    target_group: list[NamespaceTerraformResourceALBTargetGroupV1] = Field(..., alias="target_group")
+
+
+class NamespaceTerraformResourceALBActionForwardV1(NamespaceTerraformResourceALBActionV1):
+    forward: NamespaceTerraformResourceALBActionForwardSettingsV1 = Field(..., alias="forward")
+
+
+class NamespaceTerraformResourceALBActionFixedResponseSettingsV1(ConfiguredBaseModel):
+    content_type: str = Field(..., alias="content_type")
+    message_body: str = Field(..., alias="message_body")
+    status_code: str = Field(..., alias="status_code")
+
+
+class NamespaceTerraformResourceALBActionFixedResponseV1(NamespaceTerraformResourceALBActionV1):
+    fixed_response: NamespaceTerraformResourceALBActionFixedResponseSettingsV1 = Field(..., alias="fixed_response")
+
+
+class NamespaceTerraformResourceALBRulesV1(ConfiguredBaseModel):
+    condition: list[Union[NamespaceTerraformResourceALBConditionHostHeaderV1, NamespaceTerraformResourceALBConditionHTTPRequestMethodV1, NamespaceTerraformResourceALBConditionPathPatternV1, NamespaceTerraformResourceALBConditionSourceIPV1, NamespaceTerraformResourceALBConditionV1]] = Field(..., alias="condition")
+    action: Union[NamespaceTerraformResourceALBActionForwardV1, NamespaceTerraformResourceALBActionFixedResponseV1, NamespaceTerraformResourceALBActionV1] = Field(..., alias="action")
+
+
+class NamespaceTerraformResourceALBV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    vpc: AWSVPC = Field(..., alias="vpc")
+    certificate_arn: str = Field(..., alias="certificate_arn")
+    ingress_cidr_blocks: list[str] = Field(..., alias="ingress_cidr_blocks")
+    idle_timeout: Optional[int] = Field(..., alias="idle_timeout")
+    enable_http2: Optional[bool] = Field(..., alias="enable_http2")
+    ip_address_type: Optional[str] = Field(..., alias="ip_address_type")
+    access_logs: Optional[bool] = Field(..., alias="access_logs")
+    targets: list[NamespaceTerraformResourceALBTargetsV1] = Field(..., alias="targets")
+    rules: list[NamespaceTerraformResourceALBRulesV1] = Field(..., alias="rules")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+
+
+class NamespaceTerraformResourceSecretsManagerV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    secret: Optional[VaultSecret] = Field(..., alias="secret")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+
+
+class CloudinitConfigV1(ConfiguredBaseModel):
+    filename: Optional[str] = Field(..., alias="filename")
+    content_type: Optional[str] = Field(..., alias="content_type")
+    content: str = Field(..., alias="content")
+
+
+class ASGImageV1(ConfiguredBaseModel):
+    provider: str = Field(..., alias="provider")
+
+
+class JenkinsInstanceV1(ConfiguredBaseModel):
+    name: str = Field(..., alias="name")
+    token: VaultSecret = Field(..., alias="token")
+
+
+class SaasResourceTemplateTargetUpstreamV1(ConfiguredBaseModel):
+    instance: JenkinsInstanceV1 = Field(..., alias="instance")
+    name: str = Field(..., alias="name")
+
+
+class ASGImageGitV1(ASGImageV1):
+    tag_name: str = Field(..., alias="tag_name")
+    url: str = Field(..., alias="url")
+    ref: str = Field(..., alias="ref")
+    upstream: Optional[SaasResourceTemplateTargetUpstreamV1] = Field(..., alias="upstream")
+
+
+class ASGImageStaticV1(ASGImageV1):
+    tag_name: str = Field(..., alias="tag_name")
+    value: str = Field(..., alias="value")
+
+
+class NamespaceTerraformResourceASGV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    defaults: str = Field(..., alias="defaults")
+    cloudinit_configs: Optional[list[CloudinitConfigV1]] = Field(..., alias="cloudinit_configs")
+    variables: Optional[str] = Field(..., alias="variables")
+    overrides: Optional[str] = Field(..., alias="overrides")
+    extra_tags: Optional[str] = Field(..., alias="extra_tags")
+    image: list[Union[ASGImageGitV1, ASGImageStaticV1, ASGImageV1]] = Field(..., alias="image")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+
+
+class DnsRecordAliasV1(ConfiguredBaseModel):
+    name: str = Field(..., alias="name")
+    zone_id: str = Field(..., alias="zone_id")
+    evaluate_target_health: bool = Field(..., alias="evaluate_target_health")
+
+
+class DnsRecordWeightedRoutingPolicyV1(ConfiguredBaseModel):
+    weight: Optional[int] = Field(..., alias="weight")
+
+
+class DnsRecordGeolocationRoutingPolicyV1(ConfiguredBaseModel):
+    continent: Optional[str] = Field(..., alias="continent")
+    country: Optional[str] = Field(..., alias="country")
+    subdivision: Optional[str] = Field(..., alias="subdivision")
+
+
+class DnsRecordV1(ConfiguredBaseModel):
+    name: str = Field(..., alias="name")
+    q_type: str = Field(..., alias="type")
+    ttl: Optional[int] = Field(..., alias="ttl")
+    alias: Optional[DnsRecordAliasV1] = Field(..., alias="alias")
+    weighted_routing_policy: Optional[DnsRecordWeightedRoutingPolicyV1] = Field(..., alias="weighted_routing_policy")
+    geolocation_routing_policy: Optional[DnsRecordGeolocationRoutingPolicyV1] = Field(..., alias="geolocation_routing_policy")
+    set_identifier: Optional[str] = Field(..., alias="set_identifier")
+    records: Optional[list[str]] = Field(..., alias="records")
+
+
+class NamespaceTerraformResourceRoute53ZoneV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    name: str = Field(..., alias="name")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+    records: Optional[list[DnsRecordV1]] = Field(..., alias="records")
+
+
+class NamespaceTerraformResourceRosaAuthenticatorV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    api_proxy_uri: str = Field(..., alias="api_proxy_uri")
+    cognito_callback_bucket_name: str = Field(..., alias="cognito_callback_bucket_name")
+    certificate_arn: str = Field(..., alias="certificate_arn")
+    domain_name: str = Field(..., alias="domain_name")
+    network_interface_ids: Optional[list[str]] = Field(..., alias="network_interface_ids")
+    openshift_ingress_load_balancer_arn: Optional[str] = Field(..., alias="openshift_ingress_load_balancer_arn")
+    insights_callback_urls: Optional[list[str]] = Field(..., alias="insights_callback_urls")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+    vpc_id: str = Field(..., alias="vpc_id")
+    subnet_ids: list[str] = Field(..., alias="subnet_ids")
+    vpce_id: Optional[str] = Field(..., alias="vpce_id")
+    defaults: str = Field(..., alias="defaults")
+
+
+class NamespaceTerraformResourceRosaAuthenticatorVPCEV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    subnet_ids: list[str] = Field(..., alias="subnet_ids")
+    vpc_id: str = Field(..., alias="vpc_id")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    annotations: Optional[str] = Field(..., alias="annotations")
+    defaults: str = Field(..., alias="defaults")
+
+
+class MskSecretParametersV1(ConfiguredBaseModel):
+    name: str = Field(..., alias="name")
+    secret: VaultSecret = Field(..., alias="secret")
+
+
+class NamespaceTerraformResourceMskV1(NamespaceTerraformResourceAWSV1):
+    region: Optional[str] = Field(..., alias="region")
+    identifier: str = Field(..., alias="identifier")
+    output_resource_name: Optional[str] = Field(..., alias="output_resource_name")
+    defaults: str = Field(..., alias="defaults")
+    annotations: Optional[str] = Field(..., alias="annotations")
+    users: Optional[list[MskSecretParametersV1]] = Field(..., alias="users")
+
+
+class NamespaceTerraformProviderResourceAWSV1(NamespaceExternalResourceV1):
+    provisioner: AWSAccountV1 = Field(..., alias="provisioner")
+    resources: list[Union[NamespaceTerraformResourceRDSV1, NamespaceTerraformResourceRosaAuthenticatorV1, NamespaceTerraformResourceALBV1, NamespaceTerraformResourceS3V1, NamespaceTerraformResourceASGV1, NamespaceTerraformResourceRoleV1, NamespaceTerraformResourceSNSTopicV1, NamespaceTerraformResourceElastiCacheV1, NamespaceTerraformResourceServiceAccountV1, NamespaceTerraformResourceS3SQSV1, NamespaceTerraformResourceCloudWatchV1, NamespaceTerraformResourceRosaAuthenticatorVPCEV1, NamespaceTerraformResourceS3CloudFrontV1, NamespaceTerraformResourceKMSV1, NamespaceTerraformResourceElasticSearchV1, NamespaceTerraformResourceACMV1, NamespaceTerraformResourceKinesisV1, NamespaceTerraformResourceRoute53ZoneV1, NamespaceTerraformResourceMskV1, NamespaceTerraformResourceSQSV1, NamespaceTerraformResourceDynamoDBV1, NamespaceTerraformResourceECRV1, NamespaceTerraformResourceS3CloudFrontPublicKeyV1, NamespaceTerraformResourceSecretsManagerV1, NamespaceTerraformResourceSecretsManagerServiceAccountV1, NamespaceTerraformResourceAWSV1]] = Field(..., alias="resources")
+
+
+class EnvironmentV1(ConfiguredBaseModel):
+    name: str = Field(..., alias="name")
+
+
+class AppV1(ConfiguredBaseModel):
+    name: str = Field(..., alias="name")
+
+
+class ClusterSpecV1(ConfiguredBaseModel):
+    region: str = Field(..., alias="region")
+
+
+class DisableClusterAutomationsV1(ConfiguredBaseModel):
+    integrations: Optional[list[str]] = Field(..., alias="integrations")
+
+
+class NamespaceV1_ClusterV1(ConfiguredBaseModel):
+    name: str = Field(..., alias="name")
+    server_url: str = Field(..., alias="serverUrl")
+    insecure_skip_tls_verify: Optional[bool] = Field(..., alias="insecureSkipTLSVerify")
+    jump_host: Optional[CommonJumphostFields] = Field(..., alias="jumpHost")
+    automation_token: Optional[VaultSecret] = Field(..., alias="automationToken")
+    cluster_admin_automation_token: Optional[VaultSecret] = Field(..., alias="clusterAdminAutomationToken")
+    spec: Optional[ClusterSpecV1] = Field(..., alias="spec")
+    internal: Optional[bool] = Field(..., alias="internal")
+    disable: Optional[DisableClusterAutomationsV1] = Field(..., alias="disable")
+
+
+class NamespaceV1(ConfiguredBaseModel):
+    name: str = Field(..., alias="name")
+    delete: Optional[bool] = Field(..., alias="delete")
+    cluster_admin: Optional[bool] = Field(..., alias="clusterAdmin")
+    managed_external_resources: Optional[bool] = Field(..., alias="managedExternalResources")
+    external_resources: Optional[list[Union[NamespaceTerraformProviderResourceAWSV1, NamespaceExternalResourceV1]]] = Field(..., alias="externalResources")
+    environment: EnvironmentV1 = Field(..., alias="environment")
+    app: AppV1 = Field(..., alias="app")
+    cluster: NamespaceV1_ClusterV1 = Field(..., alias="cluster")
+
+
+class ExternalResourcesNamespacesQueryData(ConfiguredBaseModel):
+    namespaces: Optional[list[NamespaceV1]] = Field(..., alias="namespaces")
+
+
+def query(query_func: Callable, **kwargs: Any) -> ExternalResourcesNamespacesQueryData:
+    """
+    This is a convenience function which queries and parses the data into
+    concrete types. It should be compatible with most GQL clients.
+    You do not have to use it to consume the generated data classes.
+    Alternatively, you can also mime and alternate the behavior
+    of this function in the caller.
+
+    Parameters:
+        query_func (Callable): Function which queries your GQL Server
+        kwargs: optional arguments that will be passed to the query function
+
+    Returns:
+        ExternalResourcesNamespacesQueryData: queried data parsed into generated classes
+    """
+    raw_data: dict[Any, Any] = query_func(DEFINITION, **kwargs)
+    return ExternalResourcesNamespacesQueryData(**raw_data)

reconcile/gql_definitions/external_resources/external_resources_settings.py

@@ -0,0 +1,70 @@
+"""
+Generated by qenerate plugin=pydantic_v1. DO NOT MODIFY MANUALLY!
+"""
+from collections.abc import Callable  # noqa: F401 # pylint: disable=W0611
+from datetime import datetime  # noqa: F401 # pylint: disable=W0611
+from enum import Enum  # noqa: F401 # pylint: disable=W0611
+from typing import (  # noqa: F401 # pylint: disable=W0611
+    Any,
+    Optional,
+    Union,
+)
+
+from pydantic import (  # noqa: F401 # pylint: disable=W0611
+    BaseModel,
+    Extra,
+    Field,
+    Json,
+)
+
+
+DEFINITION = """
+query ExternalResourcesSettings {
+    settings: external_resources_settings_v1 {
+        state_dynamodb_table
+        state_dynamodb_index
+        state_dynamodb_region
+        tf_state_bucket
+        tf_state_region
+        tf_state_dynamodb_table
+    }
+}
+"""
+
+
+class ConfiguredBaseModel(BaseModel):
+    class Config:
+        smart_union=True
+        extra=Extra.forbid
+
+
+class ExternalResourcesSettingsV1(ConfiguredBaseModel):
+    state_dynamodb_table: str = Field(..., alias="state_dynamodb_table")
+    state_dynamodb_index: str = Field(..., alias="state_dynamodb_index")
+    state_dynamodb_region: str = Field(..., alias="state_dynamodb_region")
+    tf_state_bucket: Optional[str] = Field(..., alias="tf_state_bucket")
+    tf_state_region: Optional[str] = Field(..., alias="tf_state_region")
+    tf_state_dynamodb_table: Optional[str] = Field(..., alias="tf_state_dynamodb_table")
+
+
+class ExternalResourcesSettingsQueryData(ConfiguredBaseModel):
+    settings: Optional[list[ExternalResourcesSettingsV1]] = Field(..., alias="settings")
+
+
+def query(query_func: Callable, **kwargs: Any) -> ExternalResourcesSettingsQueryData:
+    """
+    This is a convenience function which queries and parses the data into
+    concrete types. It should be compatible with most GQL clients.
+    You do not have to use it to consume the generated data classes.
+    Alternatively, you can also mime and alternate the behavior
+    of this function in the caller.
+
+    Parameters:
+        query_func (Callable): Function which queries your GQL Server
+        kwargs: optional arguments that will be passed to the query function
+
+    Returns:
+        ExternalResourcesSettingsQueryData: queried data parsed into generated classes
+    """
+    raw_data: dict[Any, Any] = query_func(DEFINITION, **kwargs)
+    return ExternalResourcesSettingsQueryData(**raw_data)

reconcile/typed_queries/external_resources.py

@@ -0,0 +1,47 @@
+from collections.abc import Callable
+from typing import Optional
+
+from reconcile.gql_definitions.external_resources.external_resources_modules import (
+    ExternalResourcesModuleV1,
+)
+from reconcile.gql_definitions.external_resources.external_resources_modules import (
+    query as query_modules,
+)
+from reconcile.gql_definitions.external_resources.external_resources_namespaces import (
+    NamespaceV1,
+)
+from reconcile.gql_definitions.external_resources.external_resources_namespaces import (
+    query as query_namespaces,
+)
+from reconcile.gql_definitions.external_resources.external_resources_settings import (
+    ExternalResourcesSettingsV1,
+)
+from reconcile.gql_definitions.external_resources.external_resources_settings import (
+    query as query_settings,
+)
+from reconcile.utils import gql
+
+
+def get_namespaces(query_func: Optional[Callable] = None) -> list[NamespaceV1]:
+    if not query_func:
+        query_func = gql.get_api().query
+    data = query_namespaces(query_func=query_func)
+    return list(data.namespaces or [])
+
+
+def get_settings(
+    query_func: Optional[Callable] = None,
+) -> list[ExternalResourcesSettingsV1]:
+    if not query_func:
+        query_func = gql.get_api().query
+    data = query_settings(query_func=query_func)
+    return list(data.settings or [])
+
+
+def get_modules(
+    query_func: Optional[Callable] = None,
+) -> list[ExternalResourcesModuleV1]:
+    if not query_func:
+        query_func = gql.get_api().query
+    data = query_modules(query_func=query_func)
+    return list(data.modules or [])