client

type AKSSKUTier string

type AKSSupportPolicy string

type AWSEnv struct {
	// A globally-unique environment identifier.
	Name string `json:"name"`
	// Environment spec.
	Spec *AWSEnvSpec `json:"spec"`
	// Spec revision (monotonically-increasing).
	SpecRevision int64 `json:"specRevision"`
	// Environment status.
	Status *AWSEnvStatus `json:"status"`
}

type AWSEnvBackupsCustomBucketSpec struct {
	// S3 bucket name.
	Name string `json:"name"`
	// S3 bucket region.
	Region string `json:"region"`
	// IAM role to assume for bucket access.
	RoleArn string `json:"roleARN"`
}

type AWSEnvBackupsCustomBucketSpecInput struct {
	// S3 bucket name.
	Name string `json:"name"`
	// S3 bucket region.
	Region string `json:"region"`
	// IAM role to assume for bucket access.
	RoleArn string `json:"roleARN"`
}

type AWSEnvBackupsSpec struct {
	// Custom S3 bucket.
	CustomBucket *AWSEnvBackupsCustomBucketSpec `json:"customBucket,omitempty"`
}

type AWSEnvBackupsSpecInput struct {
	// Custom S3 bucket.
	CustomBucket *AWSEnvBackupsCustomBucketSpecInput `json:"customBucket,omitempty"`
}

type AWSEnvEndpointSpec struct {
	// VPC endpoint service name in $endpoint_service_id.$region.vpce.amazonaws.com format.
	ServiceName string `json:"serviceName"`
	// By default, VPC endpoints get assigned $endpoint_service_id.$env_name.altinity.cloud DNS record.
	// Alias allows to override DNS record name to $alias.$env_name.altinity.cloud.
	Alias *string `json:"alias,omitempty"`
	// True indicates that Private DNS for this endpoint is enabled, false otherwise.
	PrivateDNS bool `json:"privateDNS"`
}

type AWSEnvEndpointSpecInput struct {
	// VPC endpoint service name (in $endpoint_service_id.$region.vpce.amazonaws.com format).
	ServiceName string `json:"serviceName"`
	// By default, VPC endpoints get assigned $endpoint_service_id.$env_name.altinity.cloud DNS record.
	// Alias allows to override DNS record name to $alias.$env_name.altinity.cloud.
	Alias *string `json:"alias,omitempty"`
	// Set to true to enable Private DNS for this endpoint. False by default.
	PrivateDNS *bool `json:"privateDNS,omitempty"`
}

type AWSEnvExternalBucketSpec struct {
	// External bucket name.
	Name string `json:"name"`
	// Optional ARN of a customer-managed KMS key used to encrypt this bucket.
	//
	// When set, the ClickHouse IRSA role is granted KMS decrypt/encrypt permissions
	// on the key so SSE-KMS-encrypted objects in the bucket can be read and written
	// (e.g. when the bucket backs a ClickHouse external disk). The key is owned by
	// the customer; bucket-level encryption is not managed by Altinity.
	//
	// The env-region constraint that applies to the env-level KMS key does not
	// apply here — the key may be in any region from the env's perspective.
	// S3 still requires the key to be in the bucket's region (or to be a KMS
	// multi-region key with a replica in the bucket's region); that is the
	// customer's responsibility and is not validated here.
	KmsKeyArn *string `json:"kmsKeyARN,omitempty"`
}

type AWSEnvExternalBucketSpecInput struct {
	// External bucket name.
	Name string `json:"name"`
	// ARN of a customer-managed KMS key used to encrypt this bucket.
	//
	// When set, grants the ClickHouse IRSA role KMS decrypt/encrypt permissions
	// on the key. The env-region constraint that applies to the env-level KMS
	// key does not apply here; S3's own bucket-region:key-region rule still
	// applies and is the customer's responsibility.
	KmsKeyArn *string `json:"kmsKeyARN,omitempty"`
}

type AWSEnvFilter struct {
	// Names of the environments to return.
	// Names that don't match any of the existing environments are ignored.
	Names []string `json:"names,omitempty"`
}

type AWSEnvHosted struct {
	// A globally-unique environment identifier.
	Name string `json:"name"`
	// Environment spec.
	Spec *AWSEnvHostedSpec `json:"spec"`
	// Spec revision (monotonically-increasing).
	SpecRevision int64 `json:"specRevision"`
	// Environment status.
	Status *AWSEnvHostedStatus `json:"status"`
}

type AWSEnvHostedBackupsCustomBucketSpec struct {
	// S3 bucket name.
	Name string `json:"name"`
	// S3 bucket region.
	Region string `json:"region"`
	// IAM role to assume for bucket access.
	RoleArn string `json:"roleARN"`
}

type AWSEnvHostedBackupsCustomBucketSpecInput struct {
	// S3 bucket name.
	Name string `json:"name"`
	// S3 bucket region.
	Region string `json:"region"`
	// IAM role to assume for bucket access.
	RoleArn string `json:"roleARN"`
}

type AWSEnvHostedBackupsSpec struct {
	// Custom S3 bucket.
	CustomBucket *AWSEnvHostedBackupsCustomBucketSpec `json:"customBucket,omitempty"`
}

type AWSEnvHostedBackupsSpecInput struct {
	// Custom S3 bucket.
	CustomBucket *AWSEnvHostedBackupsCustomBucketSpecInput `json:"customBucket,omitempty"`
}

type AWSEnvHostedEndpointSpec struct {
	// VPC endpoint service name in $endpoint_service_id.$region.vpce.amazonaws.com format.
	ServiceName string `json:"serviceName"`
	// By default, VPC endpoints get assigned $endpoint_service_id.$env_name.altinity.cloud DNS record.
	// Alias allows to override DNS record name to $alias.$env_name.altinity.cloud.
	Alias *string `json:"alias,omitempty"`
}

type AWSEnvHostedEndpointSpecInput struct {
	// VPC endpoint service name (in $endpoint_service_id.$region.vpce.amazonaws.com format).
	ServiceName string `json:"serviceName"`
	// By default, VPC endpoints get assigned $endpoint_service_id.$env_name.altinity.cloud DNS record.
	// Alias allows to override DNS record name to $alias.$env_name.altinity.cloud.
	Alias *string `json:"alias,omitempty"`
}

type AWSEnvHostedExternalBucketSpec struct {
	// External bucket name.
	Name string `json:"name"`
	// Optional ARN of a customer-managed KMS key used to encrypt this bucket.
	//
	// When set, the ClickHouse IRSA role is granted KMS decrypt/encrypt permissions
	// on the key so SSE-KMS-encrypted objects in the bucket can be read and written
	// (e.g. when the bucket backs a ClickHouse external disk). The key is owned by
	// the customer; bucket-level encryption is not managed by Altinity.
	//
	// The env-region constraint that applies to the env-level KMS key does not
	// apply here — the key may be in any region from the env's perspective.
	// S3 still requires the key to be in the bucket's region (or to be a KMS
	// multi-region key with a replica in the bucket's region); that is the
	// customer's responsibility and is not validated here.
	KmsKeyArn *string `json:"kmsKeyARN,omitempty"`
}

type AWSEnvHostedExternalBucketSpecInput struct {
	// External bucket name.
	Name string `json:"name"`
	// ARN of a customer-managed KMS key used to encrypt this bucket.
	//
	// When set, grants the ClickHouse IRSA role KMS decrypt/encrypt permissions
	// on the key. The env-region constraint that applies to the env-level KMS
	// key does not apply here; S3's own bucket-region:key-region rule still
	// applies and is the customer's responsibility.
	KmsKeyArn *string `json:"kmsKeyARN,omitempty"`
}

type AWSEnvHostedFilter struct {
	// Names of the environments to return.
	// Names that don't match any of the existing environments are ignored.
	Names []string `json:"names,omitempty"`
}

type AWSEnvHostedIcebergCatalogInputSpec struct {
	// Catalog name.
	// Empty name represents the default catalog.
	Name *string `json:"name,omitempty"`
	// Catalog type.
	Type AWSEnvHostedIcebergCatalogTypeSpec `json:"type"`
	// Custom S3 bucket name.
	CustomS3Bucket *string `json:"customS3Bucket,omitempty"`
	// Path within the custom S3 bucket.
	CustomS3BucketPath *string `json:"customS3BucketPath,omitempty"`
	// ARN of the S3 Tables bucket.
	CustomS3TableBucketArn *string `json:"customS3TableBucketARN,omitempty"`
	// AWS region for the catalog.
	Region *string `json:"region,omitempty"`
	// Whether anonymous access is enabled.
	AnonymousAccessEnabled *bool `json:"anonymousAccessEnabled,omitempty"`
	// Maintenance configuration.
	Maintenance *AWSEnvHostedIcebergCatalogMaintenanceInputSpec `json:"maintenance,omitempty"`
	// Table watch configurations.
	Watches []*AWSEnvHostedIcebergCatalogWatchInputSpec `json:"watches,omitempty"`
}

type AWSEnvHostedIcebergCatalogMaintenanceInputSpec struct {
	// Whether maintenance is enabled.
	Enabled bool `json:"enabled"`
}

type AWSEnvHostedIcebergCatalogMaintenanceSpec struct {
	// Whether maintenance is enabled.
	Enabled bool `json:"enabled"`
}

type AWSEnvHostedIcebergCatalogSpec struct {
	// Catalog name.
	// Empty name represents the default catalog.
	Name *string `json:"name,omitempty"`
	// Catalog type.
	Type AWSEnvHostedIcebergCatalogTypeSpec `json:"type"`
	// Custom S3 bucket name.
	CustomS3Bucket *string `json:"customS3Bucket,omitempty"`
	// Path within the custom S3 bucket.
	CustomS3BucketPath *string `json:"customS3BucketPath,omitempty"`
	// ARN of the S3 Tables bucket.
	CustomS3TableBucketArn *string `json:"customS3TableBucketARN,omitempty"`
	// AWS region for the catalog.
	Region *string `json:"region,omitempty"`
	// Whether anonymous access is enabled.
	AnonymousAccessEnabled *bool `json:"anonymousAccessEnabled,omitempty"`
	// Maintenance configuration.
	Maintenance *AWSEnvHostedIcebergCatalogMaintenanceSpec `json:"maintenance"`
	// Table watch configurations.
	Watches []*AWSEnvHostedIcebergCatalogWatchSpec `json:"watches"`
}

type AWSEnvHostedIcebergCatalogTypeSpec string

type AWSEnvHostedIcebergCatalogWatchInputSpec struct {
	// Table name to watch.
	Table string `json:"table"`
	// Paths relative to table location to watch.
	PathsRelativeToTableLocation []string `json:"pathsRelativeToTableLocation,omitempty"`
}

type AWSEnvHostedIcebergCatalogWatchSpec struct {
	// Table name to watch.
	Table string `json:"table"`
	// Paths relative to table location to watch.
	PathsRelativeToTableLocation []string `json:"pathsRelativeToTableLocation"`
}

type AWSEnvHostedIcebergInputSpec struct {
	// List of Iceberg catalogs.
	Catalogs []*AWSEnvHostedIcebergCatalogInputSpec `json:"catalogs,omitempty"`
}

type AWSEnvHostedIcebergSpec struct {
	// List of Iceberg catalogs.
	Catalogs []*AWSEnvHostedIcebergCatalogSpec `json:"catalogs"`
}

type AWSEnvHostedIcebergUpdateInputSpec struct {
	// List of Iceberg catalogs to create or update.
	Catalogs []*AWSEnvHostedIcebergCatalogInputSpec `json:"catalogs,omitempty"`
	// List of catalog names to delete.
	CatalogsToDelete []string `json:"catalogsToDelete,omitempty"`
}

type AWSEnvHostedLoadBalancerInternalSpec struct {
	// True if load balancer is enabled,
	// false otherwise.
	Enabled bool `json:"enabled"`
	// IP addresses/blocks to allow traffic from.
	//
	// 0.0.0.0/0 by default.
	SourceIPRanges []string `json:"sourceIPRanges"`
	// ARNs for AWS principals that are allowed to create VPC endpoints.
	//
	// Examples:
	// - arn:aws:iam::$account_id:root
	EndpointServiceAllowedPrincipals []string `json:"endpointServiceAllowedPrincipals"`
	// List of supported regions for VPC endpoints.
	//
	// Example: ["us-east-1", "us-west-2"]
	EndpointServiceSupportedRegions []string `json:"endpointServiceSupportedRegions"`
}

type AWSEnvHostedLoadBalancerInternalSpecInput struct {
	// True if load balancer is enabled,
	// false otherwise.
	//
	// False by default.
	Enabled *bool `json:"enabled,omitempty"`
	// IP addresses/blocks to allow traffic from.
	//
	// 0.0.0.0/0 by default.
	SourceIPRanges []string `json:"sourceIPRanges,omitempty"`
	// ARNs for AWS principals that are allowed to create VPC endpoints.
	//
	// Examples:
	// - arn:aws:iam::$account_id:root
	EndpointServiceAllowedPrincipals []string `json:"endpointServiceAllowedPrincipals,omitempty"`
	// List of supported regions for VPC endpoints.
	//
	// Example: ["us-east-1", "us-west-2"]
	EndpointServiceSupportedRegions []string `json:"endpointServiceSupportedRegions,omitempty"`
}

type AWSEnvHostedLoadBalancerInternalStatus struct {
	// VPC endpoint service name in $endpoint_service_id.$region.vpce.amazonaws.com format (if any).
	EndpointServiceName *string `json:"endpointServiceName,omitempty"`
}

type AWSEnvHostedLoadBalancerPublicSpec struct {
	// True if load balancer is enabled,
	// false otherwise.
	Enabled bool `json:"enabled"`
	// IP addresses/blocks to allow traffic from.
	//
	// 0.0.0.0/0 by default.
	SourceIPRanges []string `json:"sourceIPRanges"`
}

type AWSEnvHostedLoadBalancerPublicSpecInput struct {
	// True if load balancer is enabled,
	// false otherwise.
	//
	// False by default.
	Enabled *bool `json:"enabled,omitempty"`
	// IP addresses/blocks to allow traffic from.
	//
	// 0.0.0.0/0 by default.
	SourceIPRanges []string `json:"sourceIPRanges,omitempty"`
}

type AWSEnvHostedLoadBalancersSpec struct {
	// Public load balancer configuration.
	//
	// Accessible via *.$env_name.altinity.cloud.
	Public *AWSEnvHostedLoadBalancerPublicSpec `json:"public"`
	// Internal load balancer configuration.
	//
	// Accessible via *.internal.$env_name.altinity.cloud.
	Internal *AWSEnvHostedLoadBalancerInternalSpec `json:"internal"`
}

type AWSEnvHostedLoadBalancersSpecInput struct {
	// Public load balancer configuration.
	//
	// Accessible via *.$env_name.altinity.cloud.
	Public *AWSEnvHostedLoadBalancerPublicSpecInput `json:"public,omitempty"`
	// Internal load balancer configuration.
	//
	// Accessible via *.internal.$env_name.altinity.cloud.
	Internal *AWSEnvHostedLoadBalancerInternalSpecInput `json:"internal,omitempty"`
}

type AWSEnvHostedLoadBalancersStatus struct {
	// Status of internal load balancer.
	Internal *AWSEnvHostedLoadBalancerInternalStatus `json:"internal"`
}

type AWSEnvHostedNodeGroupSpec struct {
	// Unique (among environment node groups) node group identifier.
	Name string `json:"name"`
	// Instance type (https://aws.amazon.com/ec2/instance-types/).
	//
	// Example: "t4g.large"
	NodeType string `json:"nodeType"`
	// Availability zone ids.
	ZoneIDs []string `json:"zoneIDs"`
	// Maximum number of instances per availability zone.
	CapacityPerZone int64 `json:"capacityPerZone"`
	// Types of workload that are allowed to be scheduled onto the nodes that belong to this group.
	Reservations []NodeReservation `json:"reservations"`
}

type AWSEnvHostedNodeGroupSpecInput struct {
	// Unique (among environment node groups) node group identifier.
	//
	// Defaults to $nodeType.
	Name *string `json:"name,omitempty"`
	// Instance type (https://aws.amazon.com/ec2/instance-types/).
	NodeType string `json:"nodeType"`
	// Availability zone ids.
	//
	// Defaults to environment zones.
	ZoneIDs []string `json:"zoneIDs,omitempty"`
	// Maximum number of instances per availability zone.
	CapacityPerZone int64 `json:"capacityPerZone"`
	// Types of workloads this group is reserved for.
	// Defaults to all.
	Reservations []NodeReservation `json:"reservations,omitempty"`
}

type AWSEnvHostedSpec struct {
	// VPC CIDR block.
	//
	// Immutable.
	Cidr string `json:"cidr"`
	// AWS region (https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html#Concepts.RegionsAndAvailabilityZones.Regions).
	//
	// Example: "us-east-1"
	//
	// Immutable.
	Region string `json:"region"`
	// Explicit list of AWS availability zone ids (https://docs.aws.amazon.com/global-infrastructure/latest/regions/az-ids.html).
	// At least 2 required.
	//
	// Example: ["usw2-az1", "usw2-az2"]
	ZoneIDs []string `json:"zoneIDs"`
	// Load balancers configuration.
	LoadBalancers *AWSEnvHostedLoadBalancersSpec `json:"loadBalancers"`
	// List of node groups.
	// At least one required.
	NodeGroups []*AWSEnvHostedNodeGroupSpec `json:"nodeGroups"`
	// List of maintenance windows during which automatic maintenance is permitted.
	// By default updates are applied as soon as they are available.
	MaintenanceWindows []*MaintenanceWindowSpec `json:"maintenanceWindows"`
	// Custom domains for TLS certificates.
	//
	// Order is preserved.
	//
	// Examples:
	// - ["example.com"]
	// - ["example.com", "foo.bar.com"]
	//
	// Before specifying custom domains, create the following DNS CNAME records
	// (replace example.com with your domain):
	//
	// Required:
	// - _acme-challenge.example.com. → $env_name.altinity.cloud.
	//
	// Public load balancer (if used):
	// - example.com.                        → _.$env_name.altinity.cloud.
	// - *.example.com.                      → _.$env_name.altinity.cloud.
	//
	// Internal load balancer (if used):
	// - _acme-challenge.internal.example.com. → internal.$env_name.altinity.cloud.
	// - internal.example.com.                 → _.internal.$env_name.altinity.cloud.
	// - *.internal.example.com.               → _.internal.$env_name.altinity.cloud.
	//
	// VPC endpoint (if used):
	// - _acme-challenge.vpce.example.com.   → vpce.$env_name.altinity.cloud.
	// - vpce.example.com.                   → _.vpce.$env_name.altinity.cloud.
	// - *.vpce.example.com.                 → _.vpce.$env_name.altinity.cloud.
	CustomDomains []string `json:"customDomains"`
	// VPC endpoints configuration.
	Endpoints []*AWSEnvHostedEndpointSpec `json:"endpoints"`
	// Prefix for AWS resources created by this environment.
	ResourcePrefix string `json:"resourcePrefix"`
	// List of external S3 buckets to allow access to.
	ExternalBuckets []*AWSEnvHostedExternalBucketSpec `json:"externalBuckets"`
	// Backups configuration.
	Backups *AWSEnvHostedBackupsSpec `json:"backups,omitempty"`
	// Iceberg configuration.
	Iceberg *AWSEnvHostedIcebergSpec `json:"iceberg,omitempty"`
	// Metrics endpoint configuration.
	MetricsEndpoint *MetricsEndpointSpec `json:"metricsEndpoint"`
	// Datadog agent configuration.
	Datadog *DatadogSpec `json:"datadog"`
	// ARN of the customer's KMS key for encrypting Altinity-provisioned data buckets
	// and EBS volumes.
	KmsKeyArn *string `json:"kmsKeyARN,omitempty"`
	// ClickHouse clusters.
	ClickHouseClusters []*ClickHouseClusterSpec `json:"clickHouseClusters"`
	// ClickHouse Keepers.
	ClickHouseKeepers []*ClickHouseKeeperSpec `json:"clickHouseKeepers"`
}

type AWSEnvHostedSpecFragment struct {
	Region             string                                         "json:\"region\" graphql:\"region\""
	Cidr               string                                         "json:\"cidr\" graphql:\"cidr\""
	ZoneIDs            []string                                       "json:\"zoneIDs\" graphql:\"zoneIDs\""
	ResourcePrefix     string                                         "json:\"resourcePrefix\" graphql:\"resourcePrefix\""
	KmsKeyArn          *string                                        "json:\"kmsKeyARN,omitempty\" graphql:\"kmsKeyARN\""
	CustomDomains      []string                                       "json:\"customDomains\" graphql:\"customDomains\""
	LoadBalancers      AWSEnvHostedSpecFragment_LoadBalancers         "json:\"loadBalancers\" graphql:\"loadBalancers\""
	NodeGroups         []*AWSEnvHostedSpecFragment_NodeGroups         "json:\"nodeGroups\" graphql:\"nodeGroups\""
	MaintenanceWindows []*AWSEnvHostedSpecFragment_MaintenanceWindows "json:\"maintenanceWindows\" graphql:\"maintenanceWindows\""
	Endpoints          []*AWSEnvHostedSpecFragment_Endpoints          "json:\"endpoints\" graphql:\"endpoints\""
	ExternalBuckets    []*AWSEnvHostedSpecFragment_ExternalBuckets    "json:\"externalBuckets\" graphql:\"externalBuckets\""
	Backups            *AWSEnvHostedSpecFragment_Backups              "json:\"backups,omitempty\" graphql:\"backups\""
	Iceberg            *AWSEnvHostedSpecFragment_Iceberg              "json:\"iceberg,omitempty\" graphql:\"iceberg\""
	MetricsEndpoint    AWSEnvHostedSpecFragment_MetricsEndpoint       "json:\"metricsEndpoint\" graphql:\"metricsEndpoint\""
	Datadog            AWSEnvHostedSpecFragment_Datadog               "json:\"datadog\" graphql:\"datadog\""
}

type AWSEnvHostedSpecFragment_Backups struct {
	CustomBucket *AWSEnvHostedSpecFragment_Backups_CustomBucket "json:\"customBucket,omitempty\" graphql:\"customBucket\""
}

type AWSEnvHostedSpecFragment_Backups_CustomBucket struct {
	Name    string "json:\"name\" graphql:\"name\""
	Region  string "json:\"region\" graphql:\"region\""
	RoleArn string "json:\"roleARN\" graphql:\"roleARN\""
}

type AWSEnvHostedSpecFragment_Datadog struct {
	Domain         string "json:\"domain\" graphql:\"domain\""
	Enabled        bool   "json:\"enabled\" graphql:\"enabled\""
	LogsEnabled    bool   "json:\"logsEnabled\" graphql:\"logsEnabled\""
	MetricsEnabled bool   "json:\"metricsEnabled\" graphql:\"metricsEnabled\""
}

type AWSEnvHostedSpecFragment_Endpoints struct {
	Alias       *string "json:\"alias,omitempty\" graphql:\"alias\""
	ServiceName string  "json:\"serviceName\" graphql:\"serviceName\""
}

type AWSEnvHostedSpecFragment_ExternalBuckets struct {
	KmsKeyArn *string "json:\"kmsKeyARN,omitempty\" graphql:\"kmsKeyARN\""
	Name      string  "json:\"name\" graphql:\"name\""
}

type AWSEnvHostedSpecFragment_Iceberg struct {
	Catalogs []*AWSEnvHostedSpecFragment_Iceberg_Catalogs "json:\"catalogs\" graphql:\"catalogs\""
}

type AWSEnvHostedSpecFragment_Iceberg_Catalogs struct {
	AnonymousAccessEnabled *bool                                                 "json:\"anonymousAccessEnabled,omitempty\" graphql:\"anonymousAccessEnabled\""
	CustomS3Bucket         *string                                               "json:\"customS3Bucket,omitempty\" graphql:\"customS3Bucket\""
	CustomS3BucketPath     *string                                               "json:\"customS3BucketPath,omitempty\" graphql:\"customS3BucketPath\""
	CustomS3TableBucketArn *string                                               "json:\"customS3TableBucketARN,omitempty\" graphql:\"customS3TableBucketARN\""
	Maintenance            AWSEnvHostedSpecFragment_Iceberg_Catalogs_Maintenance "json:\"maintenance\" graphql:\"maintenance\""
	Name                   *string                                               "json:\"name,omitempty\" graphql:\"name\""
	Region                 *string                                               "json:\"region,omitempty\" graphql:\"region\""
	Type                   AWSEnvHostedIcebergCatalogTypeSpec                    "json:\"type\" graphql:\"type\""
	Watches                []*AWSEnvHostedSpecFragment_Iceberg_Catalogs_Watches  "json:\"watches\" graphql:\"watches\""
}

type AWSEnvHostedSpecFragment_Iceberg_Catalogs_Maintenance struct {
	Enabled bool "json:\"enabled\" graphql:\"enabled\""
}

type AWSEnvHostedSpecFragment_Iceberg_Catalogs_Watches struct {
	PathsRelativeToTableLocation []string "json:\"pathsRelativeToTableLocation\" graphql:\"pathsRelativeToTableLocation\""
	Table                        string   "json:\"table\" graphql:\"table\""
}

type AWSEnvHostedSpecFragment_LoadBalancers struct {
	Internal AWSEnvHostedSpecFragment_LoadBalancers_Internal "json:\"internal\" graphql:\"internal\""
	Public   AWSEnvHostedSpecFragment_LoadBalancers_Public   "json:\"public\" graphql:\"public\""
}

type AWSEnvHostedSpecFragment_LoadBalancers_Internal struct {
	Enabled                          bool     "json:\"enabled\" graphql:\"enabled\""
	EndpointServiceAllowedPrincipals []string "json:\"endpointServiceAllowedPrincipals\" graphql:\"endpointServiceAllowedPrincipals\""
	EndpointServiceSupportedRegions  []string "json:\"endpointServiceSupportedRegions\" graphql:\"endpointServiceSupportedRegions\""
	SourceIPRanges                   []string "json:\"sourceIPRanges\" graphql:\"sourceIPRanges\""
}

type AWSEnvHostedSpecFragment_LoadBalancers_Public struct {
	Enabled        bool     "json:\"enabled\" graphql:\"enabled\""
	SourceIPRanges []string "json:\"sourceIPRanges\" graphql:\"sourceIPRanges\""
}

type AWSEnvHostedSpecFragment_MaintenanceWindows struct {
	Days          []Day  "json:\"days\" graphql:\"days\""
	Enabled       bool   "json:\"enabled\" graphql:\"enabled\""
	Hour          int64  "json:\"hour\" graphql:\"hour\""
	LengthInHours int64  "json:\"lengthInHours\" graphql:\"lengthInHours\""
	Name          string "json:\"name\" graphql:\"name\""
}

type AWSEnvHostedSpecFragment_MetricsEndpoint struct {
	Enabled        bool     "json:\"enabled\" graphql:\"enabled\""
	SourceIPRanges []string "json:\"sourceIPRanges\" graphql:\"sourceIPRanges\""
}

type AWSEnvHostedSpecFragment_NodeGroups struct {
	CapacityPerZone int64             "json:\"capacityPerZone\" graphql:\"capacityPerZone\""
	Name            string            "json:\"name\" graphql:\"name\""
	NodeType        string            "json:\"nodeType\" graphql:\"nodeType\""
	Reservations    []NodeReservation "json:\"reservations\" graphql:\"reservations\""
	ZoneIDs         []string          "json:\"zoneIDs\" graphql:\"zoneIDs\""
}

type AWSEnvHostedStatus struct {
	// Applied spec revision (monotonically-increasing).
	AppliedSpecRevision int64 `json:"appliedSpecRevision"`
	// Status of load balancers.
	LoadBalancers *AWSEnvHostedLoadBalancersStatus `json:"loadBalancers"`
	// True indicates that environment is pending deletion.
	PendingDelete bool `json:"pendingDelete"`
	// Status errors.
	Errors []*EnvStatusError `json:"errors"`
}

type AWSEnvHostedUpdateSpecInput struct {
	// Number of AWS availability zones.
	// At least 2 required (if specified).
	NumberOfZones *int64 `json:"numberOfZones,omitempty"`
	// Explicit list of AWS availability zone ids (https://docs.aws.amazon.com/global-infrastructure/latest/regions/az-ids.html).
	// At least 2 required (if specified).
	//
	// Example: ["usw2-az1", "usw2-az2"]
	ZoneIDs []string `json:"zoneIDs,omitempty"`
	// Load balancers configuration.
	LoadBalancers *AWSEnvHostedLoadBalancersSpecInput `json:"loadBalancers,omitempty"`
	// List of node groups.
	NodeGroups []*AWSEnvHostedNodeGroupSpecInput `json:"nodeGroups,omitempty"`
	// List of maintenance windows during which automatic maintenance is permitted.
	// By default updates are applied as soon as they are available.
	MaintenanceWindows []*MaintenanceWindowSpecInput `json:"maintenanceWindows,omitempty"`
	// Custom domains for TLS certificates.
	//
	// Order is preserved.
	//
	// Examples:
	// - ["example.com"]
	// - ["example.com", "foo.bar.com"]
	//
	// Before specifying custom domains, create the following DNS CNAME records
	// (replace example.com with your domain):
	//
	// Required:
	// - _acme-challenge.example.com. → $env_name.altinity.cloud.
	//
	// Public load balancer (if used):
	// - example.com.                        → _.$env_name.altinity.cloud.
	// - *.example.com.                      → _.$env_name.altinity.cloud.
	//
	// Internal load balancer (if used):
	// - _acme-challenge.internal.example.com. → internal.$env_name.altinity.cloud.
	// - internal.example.com.                 → _.internal.$env_name.altinity.cloud.
	// - *.internal.example.com.               → _.internal.$env_name.altinity.cloud.
	//
	// VPC endpoint (if used):
	// - _acme-challenge.vpce.example.com.   → vpce.$env_name.altinity.cloud.
	// - vpce.example.com.                   → _.vpce.$env_name.altinity.cloud.
	// - *.vpce.example.com.                 → _.vpce.$env_name.altinity.cloud.
	CustomDomains []string `json:"customDomains,omitempty"`
	// VPC endpoints configuration.
	Endpoints []*AWSEnvHostedEndpointSpecInput `json:"endpoints,omitempty"`
	// List of external S3 buckets to allow access to.
	ExternalBuckets []*AWSEnvHostedExternalBucketSpecInput `json:"externalBuckets,omitempty"`
	// Backups configuration.
	Backups *AWSEnvHostedBackupsSpecInput `json:"backups,omitempty"`
	// Iceberg configuration.
	Iceberg *AWSEnvHostedIcebergUpdateInputSpec `json:"iceberg,omitempty"`
	// Metrics endpoint configuration.
	MetricsEndpoint *MetricsEndpointSpecInput `json:"metricsEndpoint,omitempty"`
	// Datadog monitoring agent configuration.
	Datadog *DatadogSpecInput `json:"datadog,omitempty"`
	// ClickHouse clusters to create or patch, matched by name.
	ClickHouseClusters []*ClickHouseClusterUpdateSpecInput `json:"clickHouseClusters,omitempty"`
	// Names of ClickHouse clusters to delete. Naming a cluster that does not exist is an error.
	ClickHouseClustersToDelete []string `json:"clickHouseClustersToDelete,omitempty"`
	// ClickHouse Keepers to create or patch, matched by name.
	ClickHouseKeepers []*ClickHouseKeeperUpdateSpecInput `json:"clickHouseKeepers,omitempty"`
	// Names of ClickHouse Keepers to delete. Naming a Keeper that does not exist is an error.
	ClickHouseKeepersToDelete []string `json:"clickHouseKeepersToDelete,omitempty"`
}

type AWSEnvLoadBalancerInternalSpec struct {
	// True if load balancer is enabled,
	// false otherwise.
	Enabled bool `json:"enabled"`
	// IP addresses/blocks to allow traffic from.
	//
	// 0.0.0.0/0 by default.
	SourceIPRanges []string `json:"sourceIPRanges"`
	// True indicates that traffic should be distributed across all specified availability zones,
	// false otherwise.
	//
	// True by default.
	CrossZone bool `json:"crossZone"`
	// ARNs for AWS principals that are allowed to create VPC endpoints.
	//
	// Examples:
	// - arn:aws:iam::$account_id:root
	EndpointServiceAllowedPrincipals []string `json:"endpointServiceAllowedPrincipals"`
	// List of supported regions for VPC endpoints.
	//
	// Example: ["us-east-1", "us-west-2"]
	EndpointServiceSupportedRegions []string `json:"endpointServiceSupportedRegions"`
}

type AWSEnvLoadBalancerInternalSpecInput struct {
	// True if load balancer is enabled,
	// false otherwise.
	//
	// False by default.
	Enabled *bool `json:"enabled,omitempty"`
	// IP addresses/blocks to allow traffic from.
	//
	// 0.0.0.0/0 by default.
	SourceIPRanges []string `json:"sourceIPRanges,omitempty"`
	// True indicates that traffic should be distributed across all specified availability zones,
	// false otherwise.
	//
	// True by default.
	CrossZone *bool `json:"crossZone,omitempty"`
	// ARNs for AWS principals that are allowed to create VPC endpoints.
	//
	// Examples:
	// - arn:aws:iam::$account_id:root
	EndpointServiceAllowedPrincipals []string `json:"endpointServiceAllowedPrincipals,omitempty"`
	// List of supported regions for VPC endpoints.
	//
	// Example: ["us-east-1", "us-west-2"]
	EndpointServiceSupportedRegions []string `json:"endpointServiceSupportedRegions,omitempty"`
}

type AWSEnvLoadBalancerInternalStatus struct {
	// VPC endpoint service name in $endpoint_service_id.$region.vpce.amazonaws.com format (if any).
	EndpointServiceName *string `json:"endpointServiceName,omitempty"`
}

type AWSEnvLoadBalancerPublicSpec struct {
	// True if load balancer is enabled,
	// false otherwise.
	Enabled bool `json:"enabled"`
	// IP addresses/blocks to allow traffic from.
	//
	// 0.0.0.0/0 by default.
	SourceIPRanges []string `json:"sourceIPRanges"`
	// True indicates that traffic should be distributed across all specified availability zones,
	// false otherwise.
	//
	// True by default.
	CrossZone bool `json:"crossZone"`
}

type AWSEnvLoadBalancerPublicSpecInput struct {
	// True if load balancer is enabled,
	// false otherwise.
	//
	// False by default.
	Enabled *bool `json:"enabled,omitempty"`
	// IP addresses/blocks to allow traffic from.
	//
	// 0.0.0.0/0 by default.
	SourceIPRanges []string `json:"sourceIPRanges,omitempty"`
	// True indicates that traffic should be distributed across all specified availability zones,
	// false otherwise.
	//
	// True by default.
	CrossZone *bool `json:"crossZone,omitempty"`
}

type AWSEnvLoadBalancersSpec struct {
	// Public load balancer configuration.
	//
	// Accessible via *.$env_name.altinity.cloud.
	Public *AWSEnvLoadBalancerPublicSpec `json:"public"`
	// Internal load balancer configuration.
	//
	// Accessible via *.internal.$env_name.altinity.cloud.
	Internal *AWSEnvLoadBalancerInternalSpec `json:"internal"`
}

type AWSEnvLoadBalancersSpecInput struct {
	// Public load balancer configuration.
	//
	// Accessible via *.$env_name.altinity.cloud.
	Public *AWSEnvLoadBalancerPublicSpecInput `json:"public,omitempty"`
	// Internal load balancer configuration.
	//
	// Accessible via *.internal.$env_name.altinity.cloud.
	Internal *AWSEnvLoadBalancerInternalSpecInput `json:"internal,omitempty"`
}

type AWSEnvLoadBalancersStatus struct {
	// Status of internal load balancer.
	Internal *AWSEnvLoadBalancerInternalStatus `json:"internal"`
}

type AWSEnvNodeGroupSpec struct {
	// Unique (among environment node groups) node group identifier.
	Name string `json:"name"`
	// Instance type (https://aws.amazon.com/ec2/instance-types/).
	//
	// Example: "t4g.large"
	NodeType string `json:"nodeType"`
	// Availability zones.
	Zones []string `json:"zones"`
	// Maximum number of instances per availability zone.
	CapacityPerZone int64 `json:"capacityPerZone"`
	// Types of workload that are allowed to be scheduled onto the nodes that belong to this group.
	Reservations []NodeReservation `json:"reservations"`
}

type AWSEnvNodeGroupSpecInput struct {
	// Unique (among environment node groups) node group identifier.
	//
	// Defaults to $nodeType.
	Name *string `json:"name,omitempty"`
	// Instance type (https://aws.amazon.com/ec2/instance-types/).
	NodeType string `json:"nodeType"`
	// Availability zones.
	//
	// Defaults to environment zones.
	Zones []string `json:"zones,omitempty"`
	// Maximum number of instances per availability zone.
	CapacityPerZone int64 `json:"capacityPerZone"`
	// Types of workloads this group is reserved for.
	// Defaults to all.
	Reservations []NodeReservation `json:"reservations,omitempty"`
}

type AWSEnvPeeringConnectionSpec struct {
	// Target VPC ID.
	VpcID string `json:"vpcID"`
	// Target VPC region.
	//
	// Defaults to environment region.
	VpcRegion *string `json:"vpcRegion,omitempty"`
	// Target VPC AWS account ID.
	//
	// Defaults to environment AWS account ID.
	AWSAccountID *string `json:"awsAccountID,omitempty"`
}

type AWSEnvPeeringConnectionSpecInput struct {
	// Target VPC ID.
	VpcID string `json:"vpcID"`
	// Target VPC region.
	//
	// Defaults to environment region.
	VpcRegion *string `json:"vpcRegion,omitempty"`
	// Target VPC AWS account ID.
	//
	// Defaults to environment AWS account ID.
	AWSAccountID *string `json:"awsAccountID,omitempty"`
}

type AWSEnvPeeringConnectionStatus struct {
	// Connection ID.
	ID *string `json:"id,omitempty"`
	// Target VPC ID.
	VpcID string `json:"vpcID"`
}

type AWSEnvSpec struct {
	// ID of the AWS account (https://docs.aws.amazon.com/IAM/latest/UserGuide/console-account-id.html#w5aac11c17b5)
	// in which to provision AWS resources.
	//
	// Immutable.
	AWSAccountID string `json:"awsAccountID"`
	// VPC CIDR block from the private IPv4 address ranges as specified in RFC 1918
	// (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16).
	//
	// At least /21 required.
	//
	// Examples: "10.136.0.0/21"
	//
	// Immutable.
	Cidr string `json:"cidr"`
	// AWS region (https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html#Concepts.RegionsAndAvailabilityZones.Regions).
	//
	// Example: "us-east-1"
	//
	// Immutable.
	Region string `json:"region"`
	// Explicit list of AWS availability zones.
	// At least 2 required.
	//
	// Example: ["us-east-1a", "us-east-1b"]
	Zones []string `json:"zones"`
	// Enable AWS NAT Gateway.
	//
	// Immutable.
	Nat bool `json:"NAT"`
	// Load balancers configuration.
	LoadBalancers *AWSEnvLoadBalancersSpec `json:"loadBalancers"`
	// Load balancing strategy.
	LoadBalancingStrategy LoadBalancingStrategy `json:"loadBalancingStrategy"`
	// List of node groups.
	// At least one required.
	NodeGroups []*AWSEnvNodeGroupSpec `json:"nodeGroups"`
	// List of maintenance windows during which automatic maintenance is permitted.
	// By default updates are applied as soon as they are available.
	MaintenanceWindows []*MaintenanceWindowSpec `json:"maintenanceWindows"`
	// Custom domain (deprecated, use customDomains instead).
	//
	// Returns customDomains[0] for backwards compatibility.
	CustomDomain *string `json:"customDomain,omitempty"`
	// Custom domains for TLS certificates.
	//
	// Order is preserved.
	//
	// Examples:
	// - ["example.com"]
	// - ["example.com", "foo.bar.com"]
	//
	// Before specifying custom domains, create the following DNS CNAME records
	// (replace example.com with your domain):
	//
	// Required:
	// - _acme-challenge.example.com. → $env_name.altinity.cloud.
	//
	// Public load balancer (if used):
	// - example.com.                        → _.$env_name.altinity.cloud.
	// - *.example.com.                      → _.$env_name.altinity.cloud.
	//
	// Internal load balancer (if used):
	// - _acme-challenge.internal.example.com. → internal.$env_name.altinity.cloud.
	// - internal.example.com.                 → _.internal.$env_name.altinity.cloud.
	// - *.internal.example.com.               → _.internal.$env_name.altinity.cloud.
	//
	// VPC endpoint (if used):
	// - _acme-challenge.vpce.example.com.   → vpce.$env_name.altinity.cloud.
	// - vpce.example.com.                   → _.vpce.$env_name.altinity.cloud.
	// - *.vpce.example.com.                 → _.vpce.$env_name.altinity.cloud.
	CustomDomains []string `json:"customDomains"`
	// VPC peering configuration.
	PeeringConnections []*AWSEnvPeeringConnectionSpec `json:"peeringConnections"`
	// VPC endpoints configuration.
	Endpoints []*AWSEnvEndpointSpec `json:"endpoints"`
	// Tags to apply to AWS resources.
	Tags []*KeyValue `json:"tags"`
	// True indicates that cloud resources are to be managed via altinity/cloud-connect.
	// False means direct management.
	CloudConnect bool `json:"cloudConnect"`
	// Permissions boundary policy ARN.
	PermissionsBoundaryPolicyArn *string `json:"permissionsBoundaryPolicyArn,omitempty"`
	// Prefix for AWS resources created by this environment.
	ResourcePrefix string `json:"resourcePrefix"`
	// List of external S3 buckets to allow access to.
	ExternalBuckets []*AWSEnvExternalBucketSpec `json:"externalBuckets"`
	// Backups configuration.
	Backups *AWSEnvBackupsSpec `json:"backups,omitempty"`
	// Iceberg configuration.
	Iceberg *IcebergSpec `json:"iceberg,omitempty"`
	// Enable/Disable EKS control plane logging to CloudWatch.
	EksLogging bool `json:"eksLogging"`
	// Metrics endpoint configuration.
	MetricsEndpoint *MetricsEndpointSpec `json:"metricsEndpoint"`
	// Datadog agent configuration.
	Datadog *DatadogSpec `json:"datadog"`
	// ARN of the customer's KMS key for encrypting Altinity-provisioned data buckets
	// and EBS volumes.
	KmsKeyArn *string `json:"kmsKeyARN,omitempty"`
	// ClickHouse clusters.
	ClickHouseClusters []*ClickHouseClusterSpec `json:"clickHouseClusters"`
	// ClickHouse Keepers.
	ClickHouseKeepers []*ClickHouseKeeperSpec `json:"clickHouseKeepers"`
}

type AWSEnvSpecFragment struct {
	LoadBalancers                AWSEnvSpecFragment_LoadBalancers         "json:\"loadBalancers\" graphql:\"loadBalancers\""
	LoadBalancingStrategy        LoadBalancingStrategy                    "json:\"loadBalancingStrategy\" graphql:\"loadBalancingStrategy\""
	CustomDomain                 *string                                  "json:\"customDomain,omitempty\" graphql:\"customDomain\""
	CustomDomains                []string                                 "json:\"customDomains\" graphql:\"customDomains\""
	NodeGroups                   []*AWSEnvSpecFragment_NodeGroups         "json:\"nodeGroups\" graphql:\"nodeGroups\""
	MaintenanceWindows           []*AWSEnvSpecFragment_MaintenanceWindows "json:\"maintenanceWindows\" graphql:\"maintenanceWindows\""
	Region                       string                                   "json:\"region\" graphql:\"region\""
	Nat                          bool                                     "json:\"NAT\" graphql:\"NAT\""
	Zones                        []string                                 "json:\"zones\" graphql:\"zones\""
	Cidr                         string                                   "json:\"cidr\" graphql:\"cidr\""
	AWSAccountID                 string                                   "json:\"awsAccountID\" graphql:\"awsAccountID\""
	PermissionsBoundaryPolicyArn *string                                  "json:\"permissionsBoundaryPolicyArn,omitempty\" graphql:\"permissionsBoundaryPolicyArn\""
	ResourcePrefix               string                                   "json:\"resourcePrefix\" graphql:\"resourcePrefix\""
	KmsKeyArn                    *string                                  "json:\"kmsKeyARN,omitempty\" graphql:\"kmsKeyARN\""
	PeeringConnections           []*AWSEnvSpecFragment_PeeringConnections "json:\"peeringConnections\" graphql:\"peeringConnections\""
	Endpoints                    []*AWSEnvSpecFragment_Endpoints          "json:\"endpoints\" graphql:\"endpoints\""
	Tags                         []*AWSEnvSpecFragment_Tags               "json:\"tags\" graphql:\"tags\""
	CloudConnect                 bool                                     "json:\"cloudConnect\" graphql:\"cloudConnect\""
	ExternalBuckets              []*AWSEnvSpecFragment_ExternalBuckets    "json:\"externalBuckets\" graphql:\"externalBuckets\""
	Backups                      *AWSEnvSpecFragment_Backups              "json:\"backups,omitempty\" graphql:\"backups\""
	Iceberg                      *AWSEnvSpecFragment_Iceberg              "json:\"iceberg,omitempty\" graphql:\"iceberg\""
	EksLogging                   bool                                     "json:\"eksLogging\" graphql:\"eksLogging\""
	MetricsEndpoint              AWSEnvSpecFragment_MetricsEndpoint       "json:\"metricsEndpoint\" graphql:\"metricsEndpoint\""
	Datadog                      AWSEnvSpecFragment_Datadog               "json:\"datadog\" graphql:\"datadog\""
}