import { ApiObject, ApiObjectMetadata, GroupVersionKind } from 'cdk8s';
import { Construct } from 'constructs';
/**
 * Bucket is the Schema for the buckets API.
 *
 * @schema Bucket
 */
export declare class Bucket extends ApiObject {
    /**
     * Returns the apiVersion and kind for "Bucket"
     */
    static readonly GVK: GroupVersionKind;
    /**
     * Renders a Kubernetes manifest for "Bucket".
     *
     * This can be used to inline resource manifests inside other objects (e.g. as templates).
     *
     * @param props initialization props
     */
    static manifest(props?: BucketProps): any;
    /**
     * Defines a "Bucket" API object
     * @param scope the scope in which to define this object
     * @param id a scope-local name for the object
     * @param props initialization props
     */
    constructor(scope: Construct, id: string, props?: BucketProps);
    /**
     * Renders the object to Kubernetes JSON.
     */
    toJson(): any;
}
/**
 * Bucket is the Schema for the buckets API.
 *
 * @schema Bucket
 */
export interface BucketProps {
    /**
     * @schema Bucket#metadata
     */
    readonly metadata?: ApiObjectMetadata;
    /**
     * BucketSpec specifies the required configuration to produce an Artifact for
     * an object storage bucket.
     *
     * @schema Bucket#spec
     */
    readonly spec?: BucketSpec;
}
/**
 * Converts an object of type 'BucketProps' to JSON representation.
 */
export declare function toJson_BucketProps(obj: BucketProps | undefined): Record<string, any> | undefined;
/**
 * BucketSpec specifies the required configuration to produce an Artifact for
 * an object storage bucket.
 *
 * @schema BucketSpec
 */
export interface BucketSpec {
    /**
     * BucketName is the name of the object storage bucket.
     *
     * @schema BucketSpec#bucketName
     */
    readonly bucketName: string;
    /**
     * CertSecretRef can be given the name of a Secret containing
     * either or both of
     *
     * - a PEM-encoded client certificate (`tls.crt`) and private
     * key (`tls.key`);
     * - a PEM-encoded CA certificate (`ca.crt`)
     *
     * and whichever are supplied, will be used for connecting to the
     * bucket. The client cert and key are useful if you are
     * authenticating with a certificate; the CA cert is useful if
     * you are using a self-signed server certificate. The Secret must
     * be of type `Opaque` or `kubernetes.io/tls`.
     *
     * This field is only supported for the `generic` provider.
     *
     * @schema BucketSpec#certSecretRef
     */
    readonly certSecretRef?: BucketSpecCertSecretRef;
    /**
     * Endpoint is the object storage address the BucketName is located at.
     *
     * @schema BucketSpec#endpoint
     */
    readonly endpoint: string;
    /**
     * Ignore overrides the set of excluded patterns in the .sourceignore format
     * (which is the same as .gitignore). If not provided, a default will be used,
     * consult the documentation for your version to find out what those are.
     *
     * @schema BucketSpec#ignore
     */
    readonly ignore?: string;
    /**
     * Insecure allows connecting to a non-TLS HTTP Endpoint.
     *
     * @schema BucketSpec#insecure
     */
    readonly insecure?: boolean;
    /**
     * Interval at which the Bucket Endpoint is checked for updates.
     * This interval is approximate and may be subject to jitter to ensure
     * efficient use of resources.
     *
     * @schema BucketSpec#interval
     */
    readonly interval: string;
    /**
     * Prefix to use for server-side filtering of files in the Bucket.
     *
     * @schema BucketSpec#prefix
     */
    readonly prefix?: string;
    /**
     * Provider of the object storage bucket.
     * Defaults to 'generic', which expects an S3 (API) compatible object
     * storage.
     *
     * @default generic', which expects an S3 (API) compatible object
     * @schema BucketSpec#provider
     */
    readonly provider?: BucketSpecProvider;
    /**
     * ProxySecretRef specifies the Secret containing the proxy configuration
     * to use while communicating with the Bucket server.
     *
     * @schema BucketSpec#proxySecretRef
     */
    readonly proxySecretRef?: BucketSpecProxySecretRef;
    /**
     * Region of the Endpoint where the BucketName is located in.
     *
     * @schema BucketSpec#region
     */
    readonly region?: string;
    /**
     * SecretRef specifies the Secret containing authentication credentials
     * for the Bucket.
     *
     * @schema BucketSpec#secretRef
     */
    readonly secretRef?: BucketSpecSecretRef;
    /**
     * STS specifies the required configuration to use a Security Token
     * Service for fetching temporary credentials to authenticate in a
     * Bucket provider.
     *
     * This field is only supported for the `aws` and `generic` providers.
     *
     * @schema BucketSpec#sts
     */
    readonly sts?: BucketSpecSts;
    /**
     * Suspend tells the controller to suspend the reconciliation of this
     * Bucket.
     *
     * @schema BucketSpec#suspend
     */
    readonly suspend?: boolean;
    /**
     * Timeout for fetch operations, defaults to 60s.
     *
     * @schema BucketSpec#timeout
     */
    readonly timeout?: string;
}
/**
 * Converts an object of type 'BucketSpec' to JSON representation.
 */
export declare function toJson_BucketSpec(obj: BucketSpec | undefined): Record<string, any> | undefined;
/**
 * CertSecretRef can be given the name of a Secret containing
 * either or both of
 *
 * - a PEM-encoded client certificate (`tls.crt`) and private
 * key (`tls.key`);
 * - a PEM-encoded CA certificate (`ca.crt`)
 *
 * and whichever are supplied, will be used for connecting to the
 * bucket. The client cert and key are useful if you are
 * authenticating with a certificate; the CA cert is useful if
 * you are using a self-signed server certificate. The Secret must
 * be of type `Opaque` or `kubernetes.io/tls`.
 *
 * This field is only supported for the `generic` provider.
 *
 * @schema BucketSpecCertSecretRef
 */
export interface BucketSpecCertSecretRef {
    /**
     * Name of the referent.
     *
     * @schema BucketSpecCertSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'BucketSpecCertSecretRef' to JSON representation.
 */
export declare function toJson_BucketSpecCertSecretRef(obj: BucketSpecCertSecretRef | undefined): Record<string, any> | undefined;
/**
 * Provider of the object storage bucket.
 * Defaults to 'generic', which expects an S3 (API) compatible object
 * storage.
 *
 * @default generic', which expects an S3 (API) compatible object
 * @schema BucketSpecProvider
 */
export declare enum BucketSpecProvider {
    /** generic */
    GENERIC = "generic",
    /** aws */
    AWS = "aws",
    /** gcp */
    GCP = "gcp",
    /** azure */
    AZURE = "azure"
}
/**
 * ProxySecretRef specifies the Secret containing the proxy configuration
 * to use while communicating with the Bucket server.
 *
 * @schema BucketSpecProxySecretRef
 */
export interface BucketSpecProxySecretRef {
    /**
     * Name of the referent.
     *
     * @schema BucketSpecProxySecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'BucketSpecProxySecretRef' to JSON representation.
 */
export declare function toJson_BucketSpecProxySecretRef(obj: BucketSpecProxySecretRef | undefined): Record<string, any> | undefined;
/**
 * SecretRef specifies the Secret containing authentication credentials
 * for the Bucket.
 *
 * @schema BucketSpecSecretRef
 */
export interface BucketSpecSecretRef {
    /**
     * Name of the referent.
     *
     * @schema BucketSpecSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'BucketSpecSecretRef' to JSON representation.
 */
export declare function toJson_BucketSpecSecretRef(obj: BucketSpecSecretRef | undefined): Record<string, any> | undefined;
/**
 * STS specifies the required configuration to use a Security Token
 * Service for fetching temporary credentials to authenticate in a
 * Bucket provider.
 *
 * This field is only supported for the `aws` and `generic` providers.
 *
 * @schema BucketSpecSts
 */
export interface BucketSpecSts {
    /**
     * CertSecretRef can be given the name of a Secret containing
     * either or both of
     *
     * - a PEM-encoded client certificate (`tls.crt`) and private
     * key (`tls.key`);
     * - a PEM-encoded CA certificate (`ca.crt`)
     *
     * and whichever are supplied, will be used for connecting to the
     * STS endpoint. The client cert and key are useful if you are
     * authenticating with a certificate; the CA cert is useful if
     * you are using a self-signed server certificate. The Secret must
     * be of type `Opaque` or `kubernetes.io/tls`.
     *
     * This field is only supported for the `ldap` provider.
     *
     * @schema BucketSpecSts#certSecretRef
     */
    readonly certSecretRef?: BucketSpecStsCertSecretRef;
    /**
     * Endpoint is the HTTP/S endpoint of the Security Token Service from
     * where temporary credentials will be fetched.
     *
     * @schema BucketSpecSts#endpoint
     */
    readonly endpoint: string;
    /**
     * Provider of the Security Token Service.
     *
     * @schema BucketSpecSts#provider
     */
    readonly provider: BucketSpecStsProvider;
    /**
     * SecretRef specifies the Secret containing authentication credentials
     * for the STS endpoint. This Secret must contain the fields `username`
     * and `password` and is supported only for the `ldap` provider.
     *
     * @schema BucketSpecSts#secretRef
     */
    readonly secretRef?: BucketSpecStsSecretRef;
}
/**
 * Converts an object of type 'BucketSpecSts' to JSON representation.
 */
export declare function toJson_BucketSpecSts(obj: BucketSpecSts | undefined): Record<string, any> | undefined;
/**
 * CertSecretRef can be given the name of a Secret containing
 * either or both of
 *
 * - a PEM-encoded client certificate (`tls.crt`) and private
 * key (`tls.key`);
 * - a PEM-encoded CA certificate (`ca.crt`)
 *
 * and whichever are supplied, will be used for connecting to the
 * STS endpoint. The client cert and key are useful if you are
 * authenticating with a certificate; the CA cert is useful if
 * you are using a self-signed server certificate. The Secret must
 * be of type `Opaque` or `kubernetes.io/tls`.
 *
 * This field is only supported for the `ldap` provider.
 *
 * @schema BucketSpecStsCertSecretRef
 */
export interface BucketSpecStsCertSecretRef {
    /**
     * Name of the referent.
     *
     * @schema BucketSpecStsCertSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'BucketSpecStsCertSecretRef' to JSON representation.
 */
export declare function toJson_BucketSpecStsCertSecretRef(obj: BucketSpecStsCertSecretRef | undefined): Record<string, any> | undefined;
/**
 * Provider of the Security Token Service.
 *
 * @schema BucketSpecStsProvider
 */
export declare enum BucketSpecStsProvider {
    /** aws */
    AWS = "aws",
    /** ldap */
    LDAP = "ldap"
}
/**
 * SecretRef specifies the Secret containing authentication credentials
 * for the STS endpoint. This Secret must contain the fields `username`
 * and `password` and is supported only for the `ldap` provider.
 *
 * @schema BucketSpecStsSecretRef
 */
export interface BucketSpecStsSecretRef {
    /**
     * Name of the referent.
     *
     * @schema BucketSpecStsSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'BucketSpecStsSecretRef' to JSON representation.
 */
export declare function toJson_BucketSpecStsSecretRef(obj: BucketSpecStsSecretRef | undefined): Record<string, any> | undefined;
/**
 * Bucket is the Schema for the buckets API
 *
 * @schema BucketV1Beta1
 */
export declare class BucketV1Beta1 extends ApiObject {
    /**
     * Returns the apiVersion and kind for "BucketV1Beta1"
     */
    static readonly GVK: GroupVersionKind;
    /**
     * Renders a Kubernetes manifest for "BucketV1Beta1".
     *
     * This can be used to inline resource manifests inside other objects (e.g. as templates).
     *
     * @param props initialization props
     */
    static manifest(props?: BucketV1Beta1Props): any;
    /**
     * Defines a "BucketV1Beta1" API object
     * @param scope the scope in which to define this object
     * @param id a scope-local name for the object
     * @param props initialization props
     */
    constructor(scope: Construct, id: string, props?: BucketV1Beta1Props);
    /**
     * Renders the object to Kubernetes JSON.
     */
    toJson(): any;
}
/**
 * Bucket is the Schema for the buckets API
 *
 * @schema BucketV1Beta1
 */
export interface BucketV1Beta1Props {
    /**
     * @schema BucketV1Beta1#metadata
     */
    readonly metadata?: ApiObjectMetadata;
    /**
     * BucketSpec defines the desired state of an S3 compatible bucket
     *
     * @schema BucketV1Beta1#spec
     */
    readonly spec?: BucketV1Beta1Spec;
}
/**
 * Converts an object of type 'BucketV1Beta1Props' to JSON representation.
 */
export declare function toJson_BucketV1Beta1Props(obj: BucketV1Beta1Props | undefined): Record<string, any> | undefined;
/**
 * BucketSpec defines the desired state of an S3 compatible bucket
 *
 * @schema BucketV1Beta1Spec
 */
export interface BucketV1Beta1Spec {
    /**
     * AccessFrom defines an Access Control List for allowing cross-namespace references to this object.
     *
     * @schema BucketV1Beta1Spec#accessFrom
     */
    readonly accessFrom?: BucketV1Beta1SpecAccessFrom;
    /**
     * The bucket name.
     *
     * @schema BucketV1Beta1Spec#bucketName
     */
    readonly bucketName: string;
    /**
     * The bucket endpoint address.
     *
     * @schema BucketV1Beta1Spec#endpoint
     */
    readonly endpoint: string;
    /**
     * Ignore overrides the set of excluded patterns in the .sourceignore format
     * (which is the same as .gitignore). If not provided, a default will be used,
     * consult the documentation for your version to find out what those are.
     *
     * @schema BucketV1Beta1Spec#ignore
     */
    readonly ignore?: string;
    /**
     * Insecure allows connecting to a non-TLS S3 HTTP endpoint.
     *
     * @schema BucketV1Beta1Spec#insecure
     */
    readonly insecure?: boolean;
    /**
     * The interval at which to check for bucket updates.
     *
     * @schema BucketV1Beta1Spec#interval
     */
    readonly interval: string;
    /**
     * The S3 compatible storage provider name, default ('generic').
     *
     * @schema BucketV1Beta1Spec#provider
     */
    readonly provider?: BucketV1Beta1SpecProvider;
    /**
     * The bucket region.
     *
     * @schema BucketV1Beta1Spec#region
     */
    readonly region?: string;
    /**
     * The name of the secret containing authentication credentials
     * for the Bucket.
     *
     * @schema BucketV1Beta1Spec#secretRef
     */
    readonly secretRef?: BucketV1Beta1SpecSecretRef;
    /**
     * This flag tells the controller to suspend the reconciliation of this source.
     *
     * @schema BucketV1Beta1Spec#suspend
     */
    readonly suspend?: boolean;
    /**
     * The timeout for download operations, defaults to 60s.
     *
     * @schema BucketV1Beta1Spec#timeout
     */
    readonly timeout?: string;
}
/**
 * Converts an object of type 'BucketV1Beta1Spec' to JSON representation.
 */
export declare function toJson_BucketV1Beta1Spec(obj: BucketV1Beta1Spec | undefined): Record<string, any> | undefined;
/**
 * AccessFrom defines an Access Control List for allowing cross-namespace references to this object.
 *
 * @schema BucketV1Beta1SpecAccessFrom
 */
export interface BucketV1Beta1SpecAccessFrom {
    /**
     * NamespaceSelectors is the list of namespace selectors to which this ACL applies.
     * Items in this list are evaluated using a logical OR operation.
     *
     * @schema BucketV1Beta1SpecAccessFrom#namespaceSelectors
     */
    readonly namespaceSelectors: BucketV1Beta1SpecAccessFromNamespaceSelectors[];
}
/**
 * Converts an object of type 'BucketV1Beta1SpecAccessFrom' to JSON representation.
 */
export declare function toJson_BucketV1Beta1SpecAccessFrom(obj: BucketV1Beta1SpecAccessFrom | undefined): Record<string, any> | undefined;
/**
 * The S3 compatible storage provider name, default ('generic').
 *
 * @schema BucketV1Beta1SpecProvider
 */
export declare enum BucketV1Beta1SpecProvider {
    /** generic */
    GENERIC = "generic",
    /** aws */
    AWS = "aws",
    /** gcp */
    GCP = "gcp"
}
/**
 * The name of the secret containing authentication credentials
 * for the Bucket.
 *
 * @schema BucketV1Beta1SpecSecretRef
 */
export interface BucketV1Beta1SpecSecretRef {
    /**
     * Name of the referent.
     *
     * @schema BucketV1Beta1SpecSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'BucketV1Beta1SpecSecretRef' to JSON representation.
 */
export declare function toJson_BucketV1Beta1SpecSecretRef(obj: BucketV1Beta1SpecSecretRef | undefined): Record<string, any> | undefined;
/**
 * NamespaceSelector selects the namespaces to which this ACL applies.
 * An empty map of MatchLabels matches all namespaces in a cluster.
 *
 * @schema BucketV1Beta1SpecAccessFromNamespaceSelectors
 */
export interface BucketV1Beta1SpecAccessFromNamespaceSelectors {
    /**
     * MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
     * map is equivalent to an element of matchExpressions, whose key field is "key", the
     * operator is "In", and the values array contains only "value". The requirements are ANDed.
     *
     * @schema BucketV1Beta1SpecAccessFromNamespaceSelectors#matchLabels
     */
    readonly matchLabels?: {
        [key: string]: string;
    };
}
/**
 * Converts an object of type 'BucketV1Beta1SpecAccessFromNamespaceSelectors' to JSON representation.
 */
export declare function toJson_BucketV1Beta1SpecAccessFromNamespaceSelectors(obj: BucketV1Beta1SpecAccessFromNamespaceSelectors | undefined): Record<string, any> | undefined;
/**
 * Bucket is the Schema for the buckets API.
 *
 * @schema BucketV1Beta2
 */
export declare class BucketV1Beta2 extends ApiObject {
    /**
     * Returns the apiVersion and kind for "BucketV1Beta2"
     */
    static readonly GVK: GroupVersionKind;
    /**
     * Renders a Kubernetes manifest for "BucketV1Beta2".
     *
     * This can be used to inline resource manifests inside other objects (e.g. as templates).
     *
     * @param props initialization props
     */
    static manifest(props?: BucketV1Beta2Props): any;
    /**
     * Defines a "BucketV1Beta2" API object
     * @param scope the scope in which to define this object
     * @param id a scope-local name for the object
     * @param props initialization props
     */
    constructor(scope: Construct, id: string, props?: BucketV1Beta2Props);
    /**
     * Renders the object to Kubernetes JSON.
     */
    toJson(): any;
}
/**
 * Bucket is the Schema for the buckets API.
 *
 * @schema BucketV1Beta2
 */
export interface BucketV1Beta2Props {
    /**
     * @schema BucketV1Beta2#metadata
     */
    readonly metadata?: ApiObjectMetadata;
    /**
     * BucketSpec specifies the required configuration to produce an Artifact for
     * an object storage bucket.
     *
     * @schema BucketV1Beta2#spec
     */
    readonly spec?: BucketV1Beta2Spec;
}
/**
 * Converts an object of type 'BucketV1Beta2Props' to JSON representation.
 */
export declare function toJson_BucketV1Beta2Props(obj: BucketV1Beta2Props | undefined): Record<string, any> | undefined;
/**
 * BucketSpec specifies the required configuration to produce an Artifact for
 * an object storage bucket.
 *
 * @schema BucketV1Beta2Spec
 */
export interface BucketV1Beta2Spec {
    /**
     * AccessFrom specifies an Access Control List for allowing cross-namespace
     * references to this object.
     * NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
     *
     * @schema BucketV1Beta2Spec#accessFrom
     */
    readonly accessFrom?: BucketV1Beta2SpecAccessFrom;
    /**
     * BucketName is the name of the object storage bucket.
     *
     * @schema BucketV1Beta2Spec#bucketName
     */
    readonly bucketName: string;
    /**
     * CertSecretRef can be given the name of a Secret containing
     * either or both of
     *
     * - a PEM-encoded client certificate (`tls.crt`) and private
     * key (`tls.key`);
     * - a PEM-encoded CA certificate (`ca.crt`)
     *
     * and whichever are supplied, will be used for connecting to the
     * bucket. The client cert and key are useful if you are
     * authenticating with a certificate; the CA cert is useful if
     * you are using a self-signed server certificate. The Secret must
     * be of type `Opaque` or `kubernetes.io/tls`.
     *
     * This field is only supported for the `generic` provider.
     *
     * @schema BucketV1Beta2Spec#certSecretRef
     */
    readonly certSecretRef?: BucketV1Beta2SpecCertSecretRef;
    /**
     * Endpoint is the object storage address the BucketName is located at.
     *
     * @schema BucketV1Beta2Spec#endpoint
     */
    readonly endpoint: string;
    /**
     * Ignore overrides the set of excluded patterns in the .sourceignore format
     * (which is the same as .gitignore). If not provided, a default will be used,
     * consult the documentation for your version to find out what those are.
     *
     * @schema BucketV1Beta2Spec#ignore
     */
    readonly ignore?: string;
    /**
     * Insecure allows connecting to a non-TLS HTTP Endpoint.
     *
     * @schema BucketV1Beta2Spec#insecure
     */
    readonly insecure?: boolean;
    /**
     * Interval at which the Bucket Endpoint is checked for updates.
     * This interval is approximate and may be subject to jitter to ensure
     * efficient use of resources.
     *
     * @schema BucketV1Beta2Spec#interval
     */
    readonly interval: string;
    /**
     * Prefix to use for server-side filtering of files in the Bucket.
     *
     * @schema BucketV1Beta2Spec#prefix
     */
    readonly prefix?: string;
    /**
     * Provider of the object storage bucket.
     * Defaults to 'generic', which expects an S3 (API) compatible object
     * storage.
     *
     * @default generic', which expects an S3 (API) compatible object
     * @schema BucketV1Beta2Spec#provider
     */
    readonly provider?: BucketV1Beta2SpecProvider;
    /**
     * ProxySecretRef specifies the Secret containing the proxy configuration
     * to use while communicating with the Bucket server.
     *
     * @schema BucketV1Beta2Spec#proxySecretRef
     */
    readonly proxySecretRef?: BucketV1Beta2SpecProxySecretRef;
    /**
     * Region of the Endpoint where the BucketName is located in.
     *
     * @schema BucketV1Beta2Spec#region
     */
    readonly region?: string;
    /**
     * SecretRef specifies the Secret containing authentication credentials
     * for the Bucket.
     *
     * @schema BucketV1Beta2Spec#secretRef
     */
    readonly secretRef?: BucketV1Beta2SpecSecretRef;
    /**
     * STS specifies the required configuration to use a Security Token
     * Service for fetching temporary credentials to authenticate in a
     * Bucket provider.
     *
     * This field is only supported for the `aws` and `generic` providers.
     *
     * @schema BucketV1Beta2Spec#sts
     */
    readonly sts?: BucketV1Beta2SpecSts;
    /**
     * Suspend tells the controller to suspend the reconciliation of this
     * Bucket.
     *
     * @schema BucketV1Beta2Spec#suspend
     */
    readonly suspend?: boolean;
    /**
     * Timeout for fetch operations, defaults to 60s.
     *
     * @schema BucketV1Beta2Spec#timeout
     */
    readonly timeout?: string;
}
/**
 * Converts an object of type 'BucketV1Beta2Spec' to JSON representation.
 */
export declare function toJson_BucketV1Beta2Spec(obj: BucketV1Beta2Spec | undefined): Record<string, any> | undefined;
/**
 * AccessFrom specifies an Access Control List for allowing cross-namespace
 * references to this object.
 * NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
 *
 * @schema BucketV1Beta2SpecAccessFrom
 */
export interface BucketV1Beta2SpecAccessFrom {
    /**
     * NamespaceSelectors is the list of namespace selectors to which this ACL applies.
     * Items in this list are evaluated using a logical OR operation.
     *
     * @schema BucketV1Beta2SpecAccessFrom#namespaceSelectors
     */
    readonly namespaceSelectors: BucketV1Beta2SpecAccessFromNamespaceSelectors[];
}
/**
 * Converts an object of type 'BucketV1Beta2SpecAccessFrom' to JSON representation.
 */
export declare function toJson_BucketV1Beta2SpecAccessFrom(obj: BucketV1Beta2SpecAccessFrom | undefined): Record<string, any> | undefined;
/**
 * CertSecretRef can be given the name of a Secret containing
 * either or both of
 *
 * - a PEM-encoded client certificate (`tls.crt`) and private
 * key (`tls.key`);
 * - a PEM-encoded CA certificate (`ca.crt`)
 *
 * and whichever are supplied, will be used for connecting to the
 * bucket. The client cert and key are useful if you are
 * authenticating with a certificate; the CA cert is useful if
 * you are using a self-signed server certificate. The Secret must
 * be of type `Opaque` or `kubernetes.io/tls`.
 *
 * This field is only supported for the `generic` provider.
 *
 * @schema BucketV1Beta2SpecCertSecretRef
 */
export interface BucketV1Beta2SpecCertSecretRef {
    /**
     * Name of the referent.
     *
     * @schema BucketV1Beta2SpecCertSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'BucketV1Beta2SpecCertSecretRef' to JSON representation.
 */
export declare function toJson_BucketV1Beta2SpecCertSecretRef(obj: BucketV1Beta2SpecCertSecretRef | undefined): Record<string, any> | undefined;
/**
 * Provider of the object storage bucket.
 * Defaults to 'generic', which expects an S3 (API) compatible object
 * storage.
 *
 * @default generic', which expects an S3 (API) compatible object
 * @schema BucketV1Beta2SpecProvider
 */
export declare enum BucketV1Beta2SpecProvider {
    /** generic */
    GENERIC = "generic",
    /** aws */
    AWS = "aws",
    /** gcp */
    GCP = "gcp",
    /** azure */
    AZURE = "azure"
}
/**
 * ProxySecretRef specifies the Secret containing the proxy configuration
 * to use while communicating with the Bucket server.
 *
 * @schema BucketV1Beta2SpecProxySecretRef
 */
export interface BucketV1Beta2SpecProxySecretRef {
    /**
     * Name of the referent.
     *
     * @schema BucketV1Beta2SpecProxySecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'BucketV1Beta2SpecProxySecretRef' to JSON representation.
 */
export declare function toJson_BucketV1Beta2SpecProxySecretRef(obj: BucketV1Beta2SpecProxySecretRef | undefined): Record<string, any> | undefined;
/**
 * SecretRef specifies the Secret containing authentication credentials
 * for the Bucket.
 *
 * @schema BucketV1Beta2SpecSecretRef
 */
export interface BucketV1Beta2SpecSecretRef {
    /**
     * Name of the referent.
     *
     * @schema BucketV1Beta2SpecSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'BucketV1Beta2SpecSecretRef' to JSON representation.
 */
export declare function toJson_BucketV1Beta2SpecSecretRef(obj: BucketV1Beta2SpecSecretRef | undefined): Record<string, any> | undefined;
/**
 * STS specifies the required configuration to use a Security Token
 * Service for fetching temporary credentials to authenticate in a
 * Bucket provider.
 *
 * This field is only supported for the `aws` and `generic` providers.
 *
 * @schema BucketV1Beta2SpecSts
 */
export interface BucketV1Beta2SpecSts {
    /**
     * CertSecretRef can be given the name of a Secret containing
     * either or both of
     *
     * - a PEM-encoded client certificate (`tls.crt`) and private
     * key (`tls.key`);
     * - a PEM-encoded CA certificate (`ca.crt`)
     *
     * and whichever are supplied, will be used for connecting to the
     * STS endpoint. The client cert and key are useful if you are
     * authenticating with a certificate; the CA cert is useful if
     * you are using a self-signed server certificate. The Secret must
     * be of type `Opaque` or `kubernetes.io/tls`.
     *
     * This field is only supported for the `ldap` provider.
     *
     * @schema BucketV1Beta2SpecSts#certSecretRef
     */
    readonly certSecretRef?: BucketV1Beta2SpecStsCertSecretRef;
    /**
     * Endpoint is the HTTP/S endpoint of the Security Token Service from
     * where temporary credentials will be fetched.
     *
     * @schema BucketV1Beta2SpecSts#endpoint
     */
    readonly endpoint: string;
    /**
     * Provider of the Security Token Service.
     *
     * @schema BucketV1Beta2SpecSts#provider
     */
    readonly provider: BucketV1Beta2SpecStsProvider;
    /**
     * SecretRef specifies the Secret containing authentication credentials
     * for the STS endpoint. This Secret must contain the fields `username`
     * and `password` and is supported only for the `ldap` provider.
     *
     * @schema BucketV1Beta2SpecSts#secretRef
     */
    readonly secretRef?: BucketV1Beta2SpecStsSecretRef;
}
/**
 * Converts an object of type 'BucketV1Beta2SpecSts' to JSON representation.
 */
export declare function toJson_BucketV1Beta2SpecSts(obj: BucketV1Beta2SpecSts | undefined): Record<string, any> | undefined;
/**
 * NamespaceSelector selects the namespaces to which this ACL applies.
 * An empty map of MatchLabels matches all namespaces in a cluster.
 *
 * @schema BucketV1Beta2SpecAccessFromNamespaceSelectors
 */
export interface BucketV1Beta2SpecAccessFromNamespaceSelectors {
    /**
     * MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
     * map is equivalent to an element of matchExpressions, whose key field is "key", the
     * operator is "In", and the values array contains only "value". The requirements are ANDed.
     *
     * @schema BucketV1Beta2SpecAccessFromNamespaceSelectors#matchLabels
     */
    readonly matchLabels?: {
        [key: string]: string;
    };
}
/**
 * Converts an object of type 'BucketV1Beta2SpecAccessFromNamespaceSelectors' to JSON representation.
 */
export declare function toJson_BucketV1Beta2SpecAccessFromNamespaceSelectors(obj: BucketV1Beta2SpecAccessFromNamespaceSelectors | undefined): Record<string, any> | undefined;
/**
 * CertSecretRef can be given the name of a Secret containing
 * either or both of
 *
 * - a PEM-encoded client certificate (`tls.crt`) and private
 * key (`tls.key`);
 * - a PEM-encoded CA certificate (`ca.crt`)
 *
 * and whichever are supplied, will be used for connecting to the
 * STS endpoint. The client cert and key are useful if you are
 * authenticating with a certificate; the CA cert is useful if
 * you are using a self-signed server certificate. The Secret must
 * be of type `Opaque` or `kubernetes.io/tls`.
 *
 * This field is only supported for the `ldap` provider.
 *
 * @schema BucketV1Beta2SpecStsCertSecretRef
 */
export interface BucketV1Beta2SpecStsCertSecretRef {
    /**
     * Name of the referent.
     *
     * @schema BucketV1Beta2SpecStsCertSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'BucketV1Beta2SpecStsCertSecretRef' to JSON representation.
 */
export declare function toJson_BucketV1Beta2SpecStsCertSecretRef(obj: BucketV1Beta2SpecStsCertSecretRef | undefined): Record<string, any> | undefined;
/**
 * Provider of the Security Token Service.
 *
 * @schema BucketV1Beta2SpecStsProvider
 */
export declare enum BucketV1Beta2SpecStsProvider {
    /** aws */
    AWS = "aws",
    /** ldap */
    LDAP = "ldap"
}
/**
 * SecretRef specifies the Secret containing authentication credentials
 * for the STS endpoint. This Secret must contain the fields `username`
 * and `password` and is supported only for the `ldap` provider.
 *
 * @schema BucketV1Beta2SpecStsSecretRef
 */
export interface BucketV1Beta2SpecStsSecretRef {
    /**
     * Name of the referent.
     *
     * @schema BucketV1Beta2SpecStsSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'BucketV1Beta2SpecStsSecretRef' to JSON representation.
 */
export declare function toJson_BucketV1Beta2SpecStsSecretRef(obj: BucketV1Beta2SpecStsSecretRef | undefined): Record<string, any> | undefined;
/**
 * GitRepository is the Schema for the gitrepositories API.
 *
 * @schema GitRepository
 */
export declare class GitRepository extends ApiObject {
    /**
     * Returns the apiVersion and kind for "GitRepository"
     */
    static readonly GVK: GroupVersionKind;
    /**
     * Renders a Kubernetes manifest for "GitRepository".
     *
     * This can be used to inline resource manifests inside other objects (e.g. as templates).
     *
     * @param props initialization props
     */
    static manifest(props?: GitRepositoryProps): any;
    /**
     * Defines a "GitRepository" API object
     * @param scope the scope in which to define this object
     * @param id a scope-local name for the object
     * @param props initialization props
     */
    constructor(scope: Construct, id: string, props?: GitRepositoryProps);
    /**
     * Renders the object to Kubernetes JSON.
     */
    toJson(): any;
}
/**
 * GitRepository is the Schema for the gitrepositories API.
 *
 * @schema GitRepository
 */
export interface GitRepositoryProps {
    /**
     * @schema GitRepository#metadata
     */
    readonly metadata?: ApiObjectMetadata;
    /**
     * GitRepositorySpec specifies the required configuration to produce an
     * Artifact for a Git repository.
     *
     * @schema GitRepository#spec
     */
    readonly spec?: GitRepositorySpec;
}
/**
 * Converts an object of type 'GitRepositoryProps' to JSON representation.
 */
export declare function toJson_GitRepositoryProps(obj: GitRepositoryProps | undefined): Record<string, any> | undefined;
/**
 * GitRepositorySpec specifies the required configuration to produce an
 * Artifact for a Git repository.
 *
 * @schema GitRepositorySpec
 */
export interface GitRepositorySpec {
    /**
     * Ignore overrides the set of excluded patterns in the .sourceignore format
     * (which is the same as .gitignore). If not provided, a default will be used,
     * consult the documentation for your version to find out what those are.
     *
     * @schema GitRepositorySpec#ignore
     */
    readonly ignore?: string;
    /**
     * Include specifies a list of GitRepository resources which Artifacts
     * should be included in the Artifact produced for this GitRepository.
     *
     * @schema GitRepositorySpec#include
     */
    readonly include?: GitRepositorySpecInclude[];
    /**
     * Interval at which the GitRepository URL is checked for updates.
     * This interval is approximate and may be subject to jitter to ensure
     * efficient use of resources.
     *
     * @schema GitRepositorySpec#interval
     */
    readonly interval: string;
    /**
     * Provider used for authentication, can be 'azure', 'github', 'generic'.
     * When not specified, defaults to 'generic'.
     *
     * @schema GitRepositorySpec#provider
     */
    readonly provider?: GitRepositorySpecProvider;
    /**
     * ProxySecretRef specifies the Secret containing the proxy configuration
     * to use while communicating with the Git server.
     *
     * @schema GitRepositorySpec#proxySecretRef
     */
    readonly proxySecretRef?: GitRepositorySpecProxySecretRef;
    /**
     * RecurseSubmodules enables the initialization of all submodules within
     * the GitRepository as cloned from the URL, using their default settings.
     *
     * @schema GitRepositorySpec#recurseSubmodules
     */
    readonly recurseSubmodules?: boolean;
    /**
     * Reference specifies the Git reference to resolve and monitor for
     * changes, defaults to the 'master' branch.
     *
     * @schema GitRepositorySpec#ref
     */
    readonly ref?: GitRepositorySpecRef;
    /**
     * SecretRef specifies the Secret containing authentication credentials for
     * the GitRepository.
     * For HTTPS repositories the Secret must contain 'username' and 'password'
     * fields for basic auth or 'bearerToken' field for token auth.
     * For SSH repositories the Secret must contain 'identity'
     * and 'known_hosts' fields.
     *
     * @schema GitRepositorySpec#secretRef
     */
    readonly secretRef?: GitRepositorySpecSecretRef;
    /**
     * Suspend tells the controller to suspend the reconciliation of this
     * GitRepository.
     *
     * @schema GitRepositorySpec#suspend
     */
    readonly suspend?: boolean;
    /**
     * Timeout for Git operations like cloning, defaults to 60s.
     *
     * @schema GitRepositorySpec#timeout
     */
    readonly timeout?: string;
    /**
     * URL specifies the Git repository URL, it can be an HTTP/S or SSH address.
     *
     * @schema GitRepositorySpec#url
     */
    readonly url: string;
    /**
     * Verification specifies the configuration to verify the Git commit
     * signature(s).
     *
     * @schema GitRepositorySpec#verify
     */
    readonly verify?: GitRepositorySpecVerify;
}
/**
 * Converts an object of type 'GitRepositorySpec' to JSON representation.
 */
export declare function toJson_GitRepositorySpec(obj: GitRepositorySpec | undefined): Record<string, any> | undefined;
/**
 * GitRepositoryInclude specifies a local reference to a GitRepository which
 * Artifact (sub-)contents must be included, and where they should be placed.
 *
 * @schema GitRepositorySpecInclude
 */
export interface GitRepositorySpecInclude {
    /**
     * FromPath specifies the path to copy contents from, defaults to the root
     * of the Artifact.
     *
     * @schema GitRepositorySpecInclude#fromPath
     */
    readonly fromPath?: string;
    /**
     * GitRepositoryRef specifies the GitRepository which Artifact contents
     * must be included.
     *
     * @schema GitRepositorySpecInclude#repository
     */
    readonly repository: GitRepositorySpecIncludeRepository;
    /**
     * ToPath specifies the path to copy contents to, defaults to the name of
     * the GitRepositoryRef.
     *
     * @schema GitRepositorySpecInclude#toPath
     */
    readonly toPath?: string;
}
/**
 * Converts an object of type 'GitRepositorySpecInclude' to JSON representation.
 */
export declare function toJson_GitRepositorySpecInclude(obj: GitRepositorySpecInclude | undefined): Record<string, any> | undefined;
/**
 * Provider used for authentication, can be 'azure', 'github', 'generic'.
 * When not specified, defaults to 'generic'.
 *
 * @schema GitRepositorySpecProvider
 */
export declare enum GitRepositorySpecProvider {
    /** generic */
    GENERIC = "generic",
    /** azure */
    AZURE = "azure",
    /** github */
    GITHUB = "github"
}
/**
 * ProxySecretRef specifies the Secret containing the proxy configuration
 * to use while communicating with the Git server.
 *
 * @schema GitRepositorySpecProxySecretRef
 */
export interface GitRepositorySpecProxySecretRef {
    /**
     * Name of the referent.
     *
     * @schema GitRepositorySpecProxySecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'GitRepositorySpecProxySecretRef' to JSON representation.
 */
export declare function toJson_GitRepositorySpecProxySecretRef(obj: GitRepositorySpecProxySecretRef | undefined): Record<string, any> | undefined;
/**
 * Reference specifies the Git reference to resolve and monitor for
 * changes, defaults to the 'master' branch.
 *
 * @schema GitRepositorySpecRef
 */
export interface GitRepositorySpecRef {
    /**
     * Branch to check out, defaults to 'master' if no other field is defined.
     *
     * @schema GitRepositorySpecRef#branch
     */
    readonly branch?: string;
    /**
     * Commit SHA to check out, takes precedence over all reference fields.
     *
     * This can be combined with Branch to shallow clone the branch, in which
     * the commit is expected to exist.
     *
     * @schema GitRepositorySpecRef#commit
     */
    readonly commit?: string;
    /**
     * Name of the reference to check out; takes precedence over Branch, Tag and SemVer.
     *
     * It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description
     * Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head"
     *
     * @schema GitRepositorySpecRef#name
     */
    readonly name?: string;
    /**
     * SemVer tag expression to check out, takes precedence over Tag.
     *
     * @schema GitRepositorySpecRef#semver
     */
    readonly semver?: string;
    /**
     * Tag to check out, takes precedence over Branch.
     *
     * @schema GitRepositorySpecRef#tag
     */
    readonly tag?: string;
}
/**
 * Converts an object of type 'GitRepositorySpecRef' to JSON representation.
 */
export declare function toJson_GitRepositorySpecRef(obj: GitRepositorySpecRef | undefined): Record<string, any> | undefined;
/**
 * SecretRef specifies the Secret containing authentication credentials for
 * the GitRepository.
 * For HTTPS repositories the Secret must contain 'username' and 'password'
 * fields for basic auth or 'bearerToken' field for token auth.
 * For SSH repositories the Secret must contain 'identity'
 * and 'known_hosts' fields.
 *
 * @schema GitRepositorySpecSecretRef
 */
export interface GitRepositorySpecSecretRef {
    /**
     * Name of the referent.
     *
     * @schema GitRepositorySpecSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'GitRepositorySpecSecretRef' to JSON representation.
 */
export declare function toJson_GitRepositorySpecSecretRef(obj: GitRepositorySpecSecretRef | undefined): Record<string, any> | undefined;
/**
 * Verification specifies the configuration to verify the Git commit
 * signature(s).
 *
 * @schema GitRepositorySpecVerify
 */
export interface GitRepositorySpecVerify {
    /**
     * Mode specifies which Git object(s) should be verified.
     *
     * The variants "head" and "HEAD" both imply the same thing, i.e. verify
     * the commit that the HEAD of the Git repository points to. The variant
     * "head" solely exists to ensure backwards compatibility.
     *
     * @schema GitRepositorySpecVerify#mode
     */
    readonly mode?: GitRepositorySpecVerifyMode;
    /**
     * SecretRef specifies the Secret containing the public keys of trusted Git
     * authors.
     *
     * @schema GitRepositorySpecVerify#secretRef
     */
    readonly secretRef: GitRepositorySpecVerifySecretRef;
}
/**
 * Converts an object of type 'GitRepositorySpecVerify' to JSON representation.
 */
export declare function toJson_GitRepositorySpecVerify(obj: GitRepositorySpecVerify | undefined): Record<string, any> | undefined;
/**
 * GitRepositoryRef specifies the GitRepository which Artifact contents
 * must be included.
 *
 * @schema GitRepositorySpecIncludeRepository
 */
export interface GitRepositorySpecIncludeRepository {
    /**
     * Name of the referent.
     *
     * @schema GitRepositorySpecIncludeRepository#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'GitRepositorySpecIncludeRepository' to JSON representation.
 */
export declare function toJson_GitRepositorySpecIncludeRepository(obj: GitRepositorySpecIncludeRepository | undefined): Record<string, any> | undefined;
/**
 * Mode specifies which Git object(s) should be verified.
 *
 * The variants "head" and "HEAD" both imply the same thing, i.e. verify
 * the commit that the HEAD of the Git repository points to. The variant
 * "head" solely exists to ensure backwards compatibility.
 *
 * @schema GitRepositorySpecVerifyMode
 */
export declare enum GitRepositorySpecVerifyMode {
    /** head */
    HEAD = "head",
    /** Tag */
    TAG = "Tag",
    /** TagAndHEAD */
    TAG_AND_HEAD = "TagAndHEAD"
}
/**
 * SecretRef specifies the Secret containing the public keys of trusted Git
 * authors.
 *
 * @schema GitRepositorySpecVerifySecretRef
 */
export interface GitRepositorySpecVerifySecretRef {
    /**
     * Name of the referent.
     *
     * @schema GitRepositorySpecVerifySecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'GitRepositorySpecVerifySecretRef' to JSON representation.
 */
export declare function toJson_GitRepositorySpecVerifySecretRef(obj: GitRepositorySpecVerifySecretRef | undefined): Record<string, any> | undefined;
/**
 * GitRepository is the Schema for the gitrepositories API
 *
 * @schema GitRepositoryV1Beta1
 */
export declare class GitRepositoryV1Beta1 extends ApiObject {
    /**
     * Returns the apiVersion and kind for "GitRepositoryV1Beta1"
     */
    static readonly GVK: GroupVersionKind;
    /**
     * Renders a Kubernetes manifest for "GitRepositoryV1Beta1".
     *
     * This can be used to inline resource manifests inside other objects (e.g. as templates).
     *
     * @param props initialization props
     */
    static manifest(props?: GitRepositoryV1Beta1Props): any;
    /**
     * Defines a "GitRepositoryV1Beta1" API object
     * @param scope the scope in which to define this object
     * @param id a scope-local name for the object
     * @param props initialization props
     */
    constructor(scope: Construct, id: string, props?: GitRepositoryV1Beta1Props);
    /**
     * Renders the object to Kubernetes JSON.
     */
    toJson(): any;
}
/**
 * GitRepository is the Schema for the gitrepositories API
 *
 * @schema GitRepositoryV1Beta1
 */
export interface GitRepositoryV1Beta1Props {
    /**
     * @schema GitRepositoryV1Beta1#metadata
     */
    readonly metadata?: ApiObjectMetadata;
    /**
     * GitRepositorySpec defines the desired state of a Git repository.
     *
     * @schema GitRepositoryV1Beta1#spec
     */
    readonly spec?: GitRepositoryV1Beta1Spec;
}
/**
 * Converts an object of type 'GitRepositoryV1Beta1Props' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta1Props(obj: GitRepositoryV1Beta1Props | undefined): Record<string, any> | undefined;
/**
 * GitRepositorySpec defines the desired state of a Git repository.
 *
 * @schema GitRepositoryV1Beta1Spec
 */
export interface GitRepositoryV1Beta1Spec {
    /**
     * AccessFrom defines an Access Control List for allowing cross-namespace references to this object.
     *
     * @schema GitRepositoryV1Beta1Spec#accessFrom
     */
    readonly accessFrom?: GitRepositoryV1Beta1SpecAccessFrom;
    /**
     * Determines which git client library to use.
     * Defaults to go-git, valid values are ('go-git', 'libgit2').
     *
     * @default go-git, valid values are ('go-git', 'libgit2').
     * @schema GitRepositoryV1Beta1Spec#gitImplementation
     */
    readonly gitImplementation?: GitRepositoryV1Beta1SpecGitImplementation;
    /**
     * Ignore overrides the set of excluded patterns in the .sourceignore format
     * (which is the same as .gitignore). If not provided, a default will be used,
     * consult the documentation for your version to find out what those are.
     *
     * @schema GitRepositoryV1Beta1Spec#ignore
     */
    readonly ignore?: string;
    /**
     * Extra git repositories to map into the repository
     *
     * @schema GitRepositoryV1Beta1Spec#include
     */
    readonly include?: GitRepositoryV1Beta1SpecInclude[];
    /**
     * The interval at which to check for repository updates.
     *
     * @schema GitRepositoryV1Beta1Spec#interval
     */
    readonly interval: string;
    /**
     * When enabled, after the clone is created, initializes all submodules within,
     * using their default settings.
     * This option is available only when using the 'go-git' GitImplementation.
     *
     * @schema GitRepositoryV1Beta1Spec#recurseSubmodules
     */
    readonly recurseSubmodules?: boolean;
    /**
     * The Git reference to checkout and monitor for changes, defaults to
     * master branch.
     *
     * @schema GitRepositoryV1Beta1Spec#ref
     */
    readonly ref?: GitRepositoryV1Beta1SpecRef;
    /**
     * The secret name containing the Git credentials.
     * For HTTPS repositories the secret must contain username and password
     * fields.
     * For SSH repositories the secret must contain identity and known_hosts
     * fields.
     *
     * @schema GitRepositoryV1Beta1Spec#secretRef
     */
    readonly secretRef?: GitRepositoryV1Beta1SpecSecretRef;
    /**
     * This flag tells the controller to suspend the reconciliation of this source.
     *
     * @schema GitRepositoryV1Beta1Spec#suspend
     */
    readonly suspend?: boolean;
    /**
     * The timeout for remote Git operations like cloning, defaults to 60s.
     *
     * @schema GitRepositoryV1Beta1Spec#timeout
     */
    readonly timeout?: string;
    /**
     * The repository URL, can be a HTTP/S or SSH address.
     *
     * @schema GitRepositoryV1Beta1Spec#url
     */
    readonly url: string;
    /**
     * Verify OpenPGP signature for the Git commit HEAD points to.
     *
     * @schema GitRepositoryV1Beta1Spec#verify
     */
    readonly verify?: GitRepositoryV1Beta1SpecVerify;
}
/**
 * Converts an object of type 'GitRepositoryV1Beta1Spec' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta1Spec(obj: GitRepositoryV1Beta1Spec | undefined): Record<string, any> | undefined;
/**
 * AccessFrom defines an Access Control List for allowing cross-namespace references to this object.
 *
 * @schema GitRepositoryV1Beta1SpecAccessFrom
 */
export interface GitRepositoryV1Beta1SpecAccessFrom {
    /**
     * NamespaceSelectors is the list of namespace selectors to which this ACL applies.
     * Items in this list are evaluated using a logical OR operation.
     *
     * @schema GitRepositoryV1Beta1SpecAccessFrom#namespaceSelectors
     */
    readonly namespaceSelectors: GitRepositoryV1Beta1SpecAccessFromNamespaceSelectors[];
}
/**
 * Converts an object of type 'GitRepositoryV1Beta1SpecAccessFrom' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta1SpecAccessFrom(obj: GitRepositoryV1Beta1SpecAccessFrom | undefined): Record<string, any> | undefined;
/**
 * Determines which git client library to use.
 * Defaults to go-git, valid values are ('go-git', 'libgit2').
 *
 * @default go-git, valid values are ('go-git', 'libgit2').
 * @schema GitRepositoryV1Beta1SpecGitImplementation
 */
export declare enum GitRepositoryV1Beta1SpecGitImplementation {
    /** go-git */
    GO_HYPHEN_GIT = "go-git",
    /** libgit2 */
    LIBGIT2 = "libgit2"
}
/**
 * GitRepositoryInclude defines a source with a from and to path.
 *
 * @schema GitRepositoryV1Beta1SpecInclude
 */
export interface GitRepositoryV1Beta1SpecInclude {
    /**
     * The path to copy contents from, defaults to the root directory.
     *
     * @schema GitRepositoryV1Beta1SpecInclude#fromPath
     */
    readonly fromPath?: string;
    /**
     * Reference to a GitRepository to include.
     *
     * @schema GitRepositoryV1Beta1SpecInclude#repository
     */
    readonly repository: GitRepositoryV1Beta1SpecIncludeRepository;
    /**
     * The path to copy contents to, defaults to the name of the source ref.
     *
     * @schema GitRepositoryV1Beta1SpecInclude#toPath
     */
    readonly toPath?: string;
}
/**
 * Converts an object of type 'GitRepositoryV1Beta1SpecInclude' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta1SpecInclude(obj: GitRepositoryV1Beta1SpecInclude | undefined): Record<string, any> | undefined;
/**
 * The Git reference to checkout and monitor for changes, defaults to
 * master branch.
 *
 * @schema GitRepositoryV1Beta1SpecRef
 */
export interface GitRepositoryV1Beta1SpecRef {
    /**
     * The Git branch to checkout, defaults to master.
     *
     * @schema GitRepositoryV1Beta1SpecRef#branch
     */
    readonly branch?: string;
    /**
     * The Git commit SHA to checkout, if specified Tag filters will be ignored.
     *
     * @schema GitRepositoryV1Beta1SpecRef#commit
     */
    readonly commit?: string;
    /**
     * The Git tag semver expression, takes precedence over Tag.
     *
     * @schema GitRepositoryV1Beta1SpecRef#semver
     */
    readonly semver?: string;
    /**
     * The Git tag to checkout, takes precedence over Branch.
     *
     * @schema GitRepositoryV1Beta1SpecRef#tag
     */
    readonly tag?: string;
}
/**
 * Converts an object of type 'GitRepositoryV1Beta1SpecRef' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta1SpecRef(obj: GitRepositoryV1Beta1SpecRef | undefined): Record<string, any> | undefined;
/**
 * The secret name containing the Git credentials.
 * For HTTPS repositories the secret must contain username and password
 * fields.
 * For SSH repositories the secret must contain identity and known_hosts
 * fields.
 *
 * @schema GitRepositoryV1Beta1SpecSecretRef
 */
export interface GitRepositoryV1Beta1SpecSecretRef {
    /**
     * Name of the referent.
     *
     * @schema GitRepositoryV1Beta1SpecSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'GitRepositoryV1Beta1SpecSecretRef' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta1SpecSecretRef(obj: GitRepositoryV1Beta1SpecSecretRef | undefined): Record<string, any> | undefined;
/**
 * Verify OpenPGP signature for the Git commit HEAD points to.
 *
 * @schema GitRepositoryV1Beta1SpecVerify
 */
export interface GitRepositoryV1Beta1SpecVerify {
    /**
     * Mode describes what git object should be verified, currently ('head').
     *
     * @schema GitRepositoryV1Beta1SpecVerify#mode
     */
    readonly mode: GitRepositoryV1Beta1SpecVerifyMode;
    /**
     * The secret name containing the public keys of all trusted Git authors.
     *
     * @schema GitRepositoryV1Beta1SpecVerify#secretRef
     */
    readonly secretRef?: GitRepositoryV1Beta1SpecVerifySecretRef;
}
/**
 * Converts an object of type 'GitRepositoryV1Beta1SpecVerify' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta1SpecVerify(obj: GitRepositoryV1Beta1SpecVerify | undefined): Record<string, any> | undefined;
/**
 * NamespaceSelector selects the namespaces to which this ACL applies.
 * An empty map of MatchLabels matches all namespaces in a cluster.
 *
 * @schema GitRepositoryV1Beta1SpecAccessFromNamespaceSelectors
 */
export interface GitRepositoryV1Beta1SpecAccessFromNamespaceSelectors {
    /**
     * MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
     * map is equivalent to an element of matchExpressions, whose key field is "key", the
     * operator is "In", and the values array contains only "value". The requirements are ANDed.
     *
     * @schema GitRepositoryV1Beta1SpecAccessFromNamespaceSelectors#matchLabels
     */
    readonly matchLabels?: {
        [key: string]: string;
    };
}
/**
 * Converts an object of type 'GitRepositoryV1Beta1SpecAccessFromNamespaceSelectors' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta1SpecAccessFromNamespaceSelectors(obj: GitRepositoryV1Beta1SpecAccessFromNamespaceSelectors | undefined): Record<string, any> | undefined;
/**
 * Reference to a GitRepository to include.
 *
 * @schema GitRepositoryV1Beta1SpecIncludeRepository
 */
export interface GitRepositoryV1Beta1SpecIncludeRepository {
    /**
     * Name of the referent.
     *
     * @schema GitRepositoryV1Beta1SpecIncludeRepository#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'GitRepositoryV1Beta1SpecIncludeRepository' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta1SpecIncludeRepository(obj: GitRepositoryV1Beta1SpecIncludeRepository | undefined): Record<string, any> | undefined;
/**
 * Mode describes what git object should be verified, currently ('head').
 *
 * @schema GitRepositoryV1Beta1SpecVerifyMode
 */
export declare enum GitRepositoryV1Beta1SpecVerifyMode {
    /** head */
    HEAD = "head"
}
/**
 * The secret name containing the public keys of all trusted Git authors.
 *
 * @schema GitRepositoryV1Beta1SpecVerifySecretRef
 */
export interface GitRepositoryV1Beta1SpecVerifySecretRef {
    /**
     * Name of the referent.
     *
     * @schema GitRepositoryV1Beta1SpecVerifySecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'GitRepositoryV1Beta1SpecVerifySecretRef' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta1SpecVerifySecretRef(obj: GitRepositoryV1Beta1SpecVerifySecretRef | undefined): Record<string, any> | undefined;
/**
 * GitRepository is the Schema for the gitrepositories API.
 *
 * @schema GitRepositoryV1Beta2
 */
export declare class GitRepositoryV1Beta2 extends ApiObject {
    /**
     * Returns the apiVersion and kind for "GitRepositoryV1Beta2"
     */
    static readonly GVK: GroupVersionKind;
    /**
     * Renders a Kubernetes manifest for "GitRepositoryV1Beta2".
     *
     * This can be used to inline resource manifests inside other objects (e.g. as templates).
     *
     * @param props initialization props
     */
    static manifest(props?: GitRepositoryV1Beta2Props): any;
    /**
     * Defines a "GitRepositoryV1Beta2" API object
     * @param scope the scope in which to define this object
     * @param id a scope-local name for the object
     * @param props initialization props
     */
    constructor(scope: Construct, id: string, props?: GitRepositoryV1Beta2Props);
    /**
     * Renders the object to Kubernetes JSON.
     */
    toJson(): any;
}
/**
 * GitRepository is the Schema for the gitrepositories API.
 *
 * @schema GitRepositoryV1Beta2
 */
export interface GitRepositoryV1Beta2Props {
    /**
     * @schema GitRepositoryV1Beta2#metadata
     */
    readonly metadata?: ApiObjectMetadata;
    /**
     * GitRepositorySpec specifies the required configuration to produce an
     * Artifact for a Git repository.
     *
     * @schema GitRepositoryV1Beta2#spec
     */
    readonly spec?: GitRepositoryV1Beta2Spec;
}
/**
 * Converts an object of type 'GitRepositoryV1Beta2Props' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta2Props(obj: GitRepositoryV1Beta2Props | undefined): Record<string, any> | undefined;
/**
 * GitRepositorySpec specifies the required configuration to produce an
 * Artifact for a Git repository.
 *
 * @schema GitRepositoryV1Beta2Spec
 */
export interface GitRepositoryV1Beta2Spec {
    /**
     * AccessFrom specifies an Access Control List for allowing cross-namespace
     * references to this object.
     * NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
     *
     * @schema GitRepositoryV1Beta2Spec#accessFrom
     */
    readonly accessFrom?: GitRepositoryV1Beta2SpecAccessFrom;
    /**
     * GitImplementation specifies which Git client library implementation to
     * use. Defaults to 'go-git', valid values are ('go-git', 'libgit2').
     * Deprecated: gitImplementation is deprecated now that 'go-git' is the
     * only supported implementation.
     *
     * @default go-git', valid values are ('go-git', 'libgit2').
     * @schema GitRepositoryV1Beta2Spec#gitImplementation
     */
    readonly gitImplementation?: GitRepositoryV1Beta2SpecGitImplementation;
    /**
     * Ignore overrides the set of excluded patterns in the .sourceignore format
     * (which is the same as .gitignore). If not provided, a default will be used,
     * consult the documentation for your version to find out what those are.
     *
     * @schema GitRepositoryV1Beta2Spec#ignore
     */
    readonly ignore?: string;
    /**
     * Include specifies a list of GitRepository resources which Artifacts
     * should be included in the Artifact produced for this GitRepository.
     *
     * @schema GitRepositoryV1Beta2Spec#include
     */
    readonly include?: GitRepositoryV1Beta2SpecInclude[];
    /**
     * Interval at which to check the GitRepository for updates.
     *
     * @schema GitRepositoryV1Beta2Spec#interval
     */
    readonly interval: string;
    /**
     * RecurseSubmodules enables the initialization of all submodules within
     * the GitRepository as cloned from the URL, using their default settings.
     *
     * @schema GitRepositoryV1Beta2Spec#recurseSubmodules
     */
    readonly recurseSubmodules?: boolean;
    /**
     * Reference specifies the Git reference to resolve and monitor for
     * changes, defaults to the 'master' branch.
     *
     * @schema GitRepositoryV1Beta2Spec#ref
     */
    readonly ref?: GitRepositoryV1Beta2SpecRef;
    /**
     * SecretRef specifies the Secret containing authentication credentials for
     * the GitRepository.
     * For HTTPS repositories the Secret must contain 'username' and 'password'
     * fields for basic auth or 'bearerToken' field for token auth.
     * For SSH repositories the Secret must contain 'identity'
     * and 'known_hosts' fields.
     *
     * @schema GitRepositoryV1Beta2Spec#secretRef
     */
    readonly secretRef?: GitRepositoryV1Beta2SpecSecretRef;
    /**
     * Suspend tells the controller to suspend the reconciliation of this
     * GitRepository.
     *
     * @schema GitRepositoryV1Beta2Spec#suspend
     */
    readonly suspend?: boolean;
    /**
     * Timeout for Git operations like cloning, defaults to 60s.
     *
     * @schema GitRepositoryV1Beta2Spec#timeout
     */
    readonly timeout?: string;
    /**
     * URL specifies the Git repository URL, it can be an HTTP/S or SSH address.
     *
     * @schema GitRepositoryV1Beta2Spec#url
     */
    readonly url: string;
    /**
     * Verification specifies the configuration to verify the Git commit
     * signature(s).
     *
     * @schema GitRepositoryV1Beta2Spec#verify
     */
    readonly verify?: GitRepositoryV1Beta2SpecVerify;
}
/**
 * Converts an object of type 'GitRepositoryV1Beta2Spec' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta2Spec(obj: GitRepositoryV1Beta2Spec | undefined): Record<string, any> | undefined;
/**
 * AccessFrom specifies an Access Control List for allowing cross-namespace
 * references to this object.
 * NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
 *
 * @schema GitRepositoryV1Beta2SpecAccessFrom
 */
export interface GitRepositoryV1Beta2SpecAccessFrom {
    /**
     * NamespaceSelectors is the list of namespace selectors to which this ACL applies.
     * Items in this list are evaluated using a logical OR operation.
     *
     * @schema GitRepositoryV1Beta2SpecAccessFrom#namespaceSelectors
     */
    readonly namespaceSelectors: GitRepositoryV1Beta2SpecAccessFromNamespaceSelectors[];
}
/**
 * Converts an object of type 'GitRepositoryV1Beta2SpecAccessFrom' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta2SpecAccessFrom(obj: GitRepositoryV1Beta2SpecAccessFrom | undefined): Record<string, any> | undefined;
/**
 * GitImplementation specifies which Git client library implementation to
 * use. Defaults to 'go-git', valid values are ('go-git', 'libgit2').
 * Deprecated: gitImplementation is deprecated now that 'go-git' is the
 * only supported implementation.
 *
 * @default go-git', valid values are ('go-git', 'libgit2').
 * @schema GitRepositoryV1Beta2SpecGitImplementation
 */
export declare enum GitRepositoryV1Beta2SpecGitImplementation {
    /** go-git */
    GO_HYPHEN_GIT = "go-git",
    /** libgit2 */
    LIBGIT2 = "libgit2"
}
/**
 * GitRepositoryInclude specifies a local reference to a GitRepository which
 * Artifact (sub-)contents must be included, and where they should be placed.
 *
 * @schema GitRepositoryV1Beta2SpecInclude
 */
export interface GitRepositoryV1Beta2SpecInclude {
    /**
     * FromPath specifies the path to copy contents from, defaults to the root
     * of the Artifact.
     *
     * @schema GitRepositoryV1Beta2SpecInclude#fromPath
     */
    readonly fromPath?: string;
    /**
     * GitRepositoryRef specifies the GitRepository which Artifact contents
     * must be included.
     *
     * @schema GitRepositoryV1Beta2SpecInclude#repository
     */
    readonly repository: GitRepositoryV1Beta2SpecIncludeRepository;
    /**
     * ToPath specifies the path to copy contents to, defaults to the name of
     * the GitRepositoryRef.
     *
     * @schema GitRepositoryV1Beta2SpecInclude#toPath
     */
    readonly toPath?: string;
}
/**
 * Converts an object of type 'GitRepositoryV1Beta2SpecInclude' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta2SpecInclude(obj: GitRepositoryV1Beta2SpecInclude | undefined): Record<string, any> | undefined;
/**
 * Reference specifies the Git reference to resolve and monitor for
 * changes, defaults to the 'master' branch.
 *
 * @schema GitRepositoryV1Beta2SpecRef
 */
export interface GitRepositoryV1Beta2SpecRef {
    /**
     * Branch to check out, defaults to 'master' if no other field is defined.
     *
     * @schema GitRepositoryV1Beta2SpecRef#branch
     */
    readonly branch?: string;
    /**
     * Commit SHA to check out, takes precedence over all reference fields.
     *
     * This can be combined with Branch to shallow clone the branch, in which
     * the commit is expected to exist.
     *
     * @schema GitRepositoryV1Beta2SpecRef#commit
     */
    readonly commit?: string;
    /**
     * Name of the reference to check out; takes precedence over Branch, Tag and SemVer.
     *
     * It must be a valid Git reference: https://git-scm.com/docs/git-check-ref-format#_description
     * Examples: "refs/heads/main", "refs/tags/v0.1.0", "refs/pull/420/head", "refs/merge-requests/1/head"
     *
     * @schema GitRepositoryV1Beta2SpecRef#name
     */
    readonly name?: string;
    /**
     * SemVer tag expression to check out, takes precedence over Tag.
     *
     * @schema GitRepositoryV1Beta2SpecRef#semver
     */
    readonly semver?: string;
    /**
     * Tag to check out, takes precedence over Branch.
     *
     * @schema GitRepositoryV1Beta2SpecRef#tag
     */
    readonly tag?: string;
}
/**
 * Converts an object of type 'GitRepositoryV1Beta2SpecRef' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta2SpecRef(obj: GitRepositoryV1Beta2SpecRef | undefined): Record<string, any> | undefined;
/**
 * SecretRef specifies the Secret containing authentication credentials for
 * the GitRepository.
 * For HTTPS repositories the Secret must contain 'username' and 'password'
 * fields for basic auth or 'bearerToken' field for token auth.
 * For SSH repositories the Secret must contain 'identity'
 * and 'known_hosts' fields.
 *
 * @schema GitRepositoryV1Beta2SpecSecretRef
 */
export interface GitRepositoryV1Beta2SpecSecretRef {
    /**
     * Name of the referent.
     *
     * @schema GitRepositoryV1Beta2SpecSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'GitRepositoryV1Beta2SpecSecretRef' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta2SpecSecretRef(obj: GitRepositoryV1Beta2SpecSecretRef | undefined): Record<string, any> | undefined;
/**
 * Verification specifies the configuration to verify the Git commit
 * signature(s).
 *
 * @schema GitRepositoryV1Beta2SpecVerify
 */
export interface GitRepositoryV1Beta2SpecVerify {
    /**
     * Mode specifies what Git object should be verified, currently ('head').
     *
     * @schema GitRepositoryV1Beta2SpecVerify#mode
     */
    readonly mode: GitRepositoryV1Beta2SpecVerifyMode;
    /**
     * SecretRef specifies the Secret containing the public keys of trusted Git
     * authors.
     *
     * @schema GitRepositoryV1Beta2SpecVerify#secretRef
     */
    readonly secretRef: GitRepositoryV1Beta2SpecVerifySecretRef;
}
/**
 * Converts an object of type 'GitRepositoryV1Beta2SpecVerify' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta2SpecVerify(obj: GitRepositoryV1Beta2SpecVerify | undefined): Record<string, any> | undefined;
/**
 * NamespaceSelector selects the namespaces to which this ACL applies.
 * An empty map of MatchLabels matches all namespaces in a cluster.
 *
 * @schema GitRepositoryV1Beta2SpecAccessFromNamespaceSelectors
 */
export interface GitRepositoryV1Beta2SpecAccessFromNamespaceSelectors {
    /**
     * MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
     * map is equivalent to an element of matchExpressions, whose key field is "key", the
     * operator is "In", and the values array contains only "value". The requirements are ANDed.
     *
     * @schema GitRepositoryV1Beta2SpecAccessFromNamespaceSelectors#matchLabels
     */
    readonly matchLabels?: {
        [key: string]: string;
    };
}
/**
 * Converts an object of type 'GitRepositoryV1Beta2SpecAccessFromNamespaceSelectors' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta2SpecAccessFromNamespaceSelectors(obj: GitRepositoryV1Beta2SpecAccessFromNamespaceSelectors | undefined): Record<string, any> | undefined;
/**
 * GitRepositoryRef specifies the GitRepository which Artifact contents
 * must be included.
 *
 * @schema GitRepositoryV1Beta2SpecIncludeRepository
 */
export interface GitRepositoryV1Beta2SpecIncludeRepository {
    /**
     * Name of the referent.
     *
     * @schema GitRepositoryV1Beta2SpecIncludeRepository#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'GitRepositoryV1Beta2SpecIncludeRepository' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta2SpecIncludeRepository(obj: GitRepositoryV1Beta2SpecIncludeRepository | undefined): Record<string, any> | undefined;
/**
 * Mode specifies what Git object should be verified, currently ('head').
 *
 * @schema GitRepositoryV1Beta2SpecVerifyMode
 */
export declare enum GitRepositoryV1Beta2SpecVerifyMode {
    /** head */
    HEAD = "head"
}
/**
 * SecretRef specifies the Secret containing the public keys of trusted Git
 * authors.
 *
 * @schema GitRepositoryV1Beta2SpecVerifySecretRef
 */
export interface GitRepositoryV1Beta2SpecVerifySecretRef {
    /**
     * Name of the referent.
     *
     * @schema GitRepositoryV1Beta2SpecVerifySecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'GitRepositoryV1Beta2SpecVerifySecretRef' to JSON representation.
 */
export declare function toJson_GitRepositoryV1Beta2SpecVerifySecretRef(obj: GitRepositoryV1Beta2SpecVerifySecretRef | undefined): Record<string, any> | undefined;
/**
 * HelmChart is the Schema for the helmcharts API.
 *
 * @schema HelmChart
 */
export declare class HelmChart extends ApiObject {
    /**
     * Returns the apiVersion and kind for "HelmChart"
     */
    static readonly GVK: GroupVersionKind;
    /**
     * Renders a Kubernetes manifest for "HelmChart".
     *
     * This can be used to inline resource manifests inside other objects (e.g. as templates).
     *
     * @param props initialization props
     */
    static manifest(props?: HelmChartProps): any;
    /**
     * Defines a "HelmChart" API object
     * @param scope the scope in which to define this object
     * @param id a scope-local name for the object
     * @param props initialization props
     */
    constructor(scope: Construct, id: string, props?: HelmChartProps);
    /**
     * Renders the object to Kubernetes JSON.
     */
    toJson(): any;
}
/**
 * HelmChart is the Schema for the helmcharts API.
 *
 * @schema HelmChart
 */
export interface HelmChartProps {
    /**
     * @schema HelmChart#metadata
     */
    readonly metadata?: ApiObjectMetadata;
    /**
     * HelmChartSpec specifies the desired state of a Helm chart.
     *
     * @schema HelmChart#spec
     */
    readonly spec?: HelmChartSpec;
}
/**
 * Converts an object of type 'HelmChartProps' to JSON representation.
 */
export declare function toJson_HelmChartProps(obj: HelmChartProps | undefined): Record<string, any> | undefined;
/**
 * HelmChartSpec specifies the desired state of a Helm chart.
 *
 * @schema HelmChartSpec
 */
export interface HelmChartSpec {
    /**
     * Chart is the name or path the Helm chart is available at in the
     * SourceRef.
     *
     * @schema HelmChartSpec#chart
     */
    readonly chart: string;
    /**
     * IgnoreMissingValuesFiles controls whether to silently ignore missing values
     * files rather than failing.
     *
     * @schema HelmChartSpec#ignoreMissingValuesFiles
     */
    readonly ignoreMissingValuesFiles?: boolean;
    /**
     * Interval at which the HelmChart SourceRef is checked for updates.
     * This interval is approximate and may be subject to jitter to ensure
     * efficient use of resources.
     *
     * @schema HelmChartSpec#interval
     */
    readonly interval: string;
    /**
     * ReconcileStrategy determines what enables the creation of a new artifact.
     * Valid values are ('ChartVersion', 'Revision').
     * See the documentation of the values for an explanation on their behavior.
     * Defaults to ChartVersion when omitted.
     *
     * @default ChartVersion when omitted.
     * @schema HelmChartSpec#reconcileStrategy
     */
    readonly reconcileStrategy?: HelmChartSpecReconcileStrategy;
    /**
     * SourceRef is the reference to the Source the chart is available at.
     *
     * @schema HelmChartSpec#sourceRef
     */
    readonly sourceRef: HelmChartSpecSourceRef;
    /**
     * Suspend tells the controller to suspend the reconciliation of this
     * source.
     *
     * @schema HelmChartSpec#suspend
     */
    readonly suspend?: boolean;
    /**
     * ValuesFiles is an alternative list of values files to use as the chart
     * values (values.yaml is not included by default), expected to be a
     * relative path in the SourceRef.
     * Values files are merged in the order of this list with the last file
     * overriding the first. Ignored when omitted.
     *
     * @schema HelmChartSpec#valuesFiles
     */
    readonly valuesFiles?: string[];
    /**
     * Verify contains the secret name containing the trusted public keys
     * used to verify the signature and specifies which provider to use to check
     * whether OCI image is authentic.
     * This field is only supported when using HelmRepository source with spec.type 'oci'.
     * Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified.
     *
     * @schema HelmChartSpec#verify
     */
    readonly verify?: HelmChartSpecVerify;
    /**
     * Version is the chart version semver expression, ignored for charts from
     * GitRepository and Bucket sources. Defaults to latest when omitted.
     *
     * @default latest when omitted.
     * @schema HelmChartSpec#version
     */
    readonly version?: string;
}
/**
 * Converts an object of type 'HelmChartSpec' to JSON representation.
 */
export declare function toJson_HelmChartSpec(obj: HelmChartSpec | undefined): Record<string, any> | undefined;
/**
 * ReconcileStrategy determines what enables the creation of a new artifact.
 * Valid values are ('ChartVersion', 'Revision').
 * See the documentation of the values for an explanation on their behavior.
 * Defaults to ChartVersion when omitted.
 *
 * @default ChartVersion when omitted.
 * @schema HelmChartSpecReconcileStrategy
 */
export declare enum HelmChartSpecReconcileStrategy {
    /** ChartVersion */
    CHART_VERSION = "ChartVersion",
    /** Revision */
    REVISION = "Revision"
}
/**
 * SourceRef is the reference to the Source the chart is available at.
 *
 * @schema HelmChartSpecSourceRef
 */
export interface HelmChartSpecSourceRef {
    /**
     * APIVersion of the referent.
     *
     * @schema HelmChartSpecSourceRef#apiVersion
     */
    readonly apiVersion?: string;
    /**
     * Kind of the referent, valid values are ('HelmRepository', 'GitRepository',
     * 'Bucket').
     *
     * @schema HelmChartSpecSourceRef#kind
     */
    readonly kind: HelmChartSpecSourceRefKind;
    /**
     * Name of the referent.
     *
     * @schema HelmChartSpecSourceRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'HelmChartSpecSourceRef' to JSON representation.
 */
export declare function toJson_HelmChartSpecSourceRef(obj: HelmChartSpecSourceRef | undefined): Record<string, any> | undefined;
/**
 * Verify contains the secret name containing the trusted public keys
 * used to verify the signature and specifies which provider to use to check
 * whether OCI image is authentic.
 * This field is only supported when using HelmRepository source with spec.type 'oci'.
 * Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified.
 *
 * @schema HelmChartSpecVerify
 */
export interface HelmChartSpecVerify {
    /**
     * MatchOIDCIdentity specifies the identity matching criteria to use
     * while verifying an OCI artifact which was signed using Cosign keyless
     * signing. The artifact's identity is deemed to be verified if any of the
     * specified matchers match against the identity.
     *
     * @schema HelmChartSpecVerify#matchOIDCIdentity
     */
    readonly matchOidcIdentity?: HelmChartSpecVerifyMatchOidcIdentity[];
    /**
     * Provider specifies the technology used to sign the OCI Artifact.
     *
     * @schema HelmChartSpecVerify#provider
     */
    readonly provider: HelmChartSpecVerifyProvider;
    /**
     * SecretRef specifies the Kubernetes Secret containing the
     * trusted public keys.
     *
     * @schema HelmChartSpecVerify#secretRef
     */
    readonly secretRef?: HelmChartSpecVerifySecretRef;
}
/**
 * Converts an object of type 'HelmChartSpecVerify' to JSON representation.
 */
export declare function toJson_HelmChartSpecVerify(obj: HelmChartSpecVerify | undefined): Record<string, any> | undefined;
/**
 * Kind of the referent, valid values are ('HelmRepository', 'GitRepository',
 * 'Bucket').
 *
 * @schema HelmChartSpecSourceRefKind
 */
export declare enum HelmChartSpecSourceRefKind {
    /** HelmRepository */
    HELM_REPOSITORY = "HelmRepository",
    /** GitRepository */
    GIT_REPOSITORY = "GitRepository",
    /** Bucket */
    BUCKET = "Bucket"
}
/**
 * OIDCIdentityMatch specifies options for verifying the certificate identity,
 * i.e. the issuer and the subject of the certificate.
 *
 * @schema HelmChartSpecVerifyMatchOidcIdentity
 */
export interface HelmChartSpecVerifyMatchOidcIdentity {
    /**
     * Issuer specifies the regex pattern to match against to verify
     * the OIDC issuer in the Fulcio certificate. The pattern must be a
     * valid Go regular expression.
     *
     * @schema HelmChartSpecVerifyMatchOidcIdentity#issuer
     */
    readonly issuer: string;
    /**
     * Subject specifies the regex pattern to match against to verify
     * the identity subject in the Fulcio certificate. The pattern must
     * be a valid Go regular expression.
     *
     * @schema HelmChartSpecVerifyMatchOidcIdentity#subject
     */
    readonly subject: string;
}
/**
 * Converts an object of type 'HelmChartSpecVerifyMatchOidcIdentity' to JSON representation.
 */
export declare function toJson_HelmChartSpecVerifyMatchOidcIdentity(obj: HelmChartSpecVerifyMatchOidcIdentity | undefined): Record<string, any> | undefined;
/**
 * Provider specifies the technology used to sign the OCI Artifact.
 *
 * @schema HelmChartSpecVerifyProvider
 */
export declare enum HelmChartSpecVerifyProvider {
    /** cosign */
    COSIGN = "cosign",
    /** notation */
    NOTATION = "notation"
}
/**
 * SecretRef specifies the Kubernetes Secret containing the
 * trusted public keys.
 *
 * @schema HelmChartSpecVerifySecretRef
 */
export interface HelmChartSpecVerifySecretRef {
    /**
     * Name of the referent.
     *
     * @schema HelmChartSpecVerifySecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'HelmChartSpecVerifySecretRef' to JSON representation.
 */
export declare function toJson_HelmChartSpecVerifySecretRef(obj: HelmChartSpecVerifySecretRef | undefined): Record<string, any> | undefined;
/**
 * HelmChart is the Schema for the helmcharts API
 *
 * @schema HelmChartV1Beta1
 */
export declare class HelmChartV1Beta1 extends ApiObject {
    /**
     * Returns the apiVersion and kind for "HelmChartV1Beta1"
     */
    static readonly GVK: GroupVersionKind;
    /**
     * Renders a Kubernetes manifest for "HelmChartV1Beta1".
     *
     * This can be used to inline resource manifests inside other objects (e.g. as templates).
     *
     * @param props initialization props
     */
    static manifest(props?: HelmChartV1Beta1Props): any;
    /**
     * Defines a "HelmChartV1Beta1" API object
     * @param scope the scope in which to define this object
     * @param id a scope-local name for the object
     * @param props initialization props
     */
    constructor(scope: Construct, id: string, props?: HelmChartV1Beta1Props);
    /**
     * Renders the object to Kubernetes JSON.
     */
    toJson(): any;
}
/**
 * HelmChart is the Schema for the helmcharts API
 *
 * @schema HelmChartV1Beta1
 */
export interface HelmChartV1Beta1Props {
    /**
     * @schema HelmChartV1Beta1#metadata
     */
    readonly metadata?: ApiObjectMetadata;
    /**
     * HelmChartSpec defines the desired state of a Helm chart.
     *
     * @schema HelmChartV1Beta1#spec
     */
    readonly spec?: HelmChartV1Beta1Spec;
}
/**
 * Converts an object of type 'HelmChartV1Beta1Props' to JSON representation.
 */
export declare function toJson_HelmChartV1Beta1Props(obj: HelmChartV1Beta1Props | undefined): Record<string, any> | undefined;
/**
 * HelmChartSpec defines the desired state of a Helm chart.
 *
 * @schema HelmChartV1Beta1Spec
 */
export interface HelmChartV1Beta1Spec {
    /**
     * AccessFrom defines an Access Control List for allowing cross-namespace references to this object.
     *
     * @schema HelmChartV1Beta1Spec#accessFrom
     */
    readonly accessFrom?: HelmChartV1Beta1SpecAccessFrom;
    /**
     * The name or path the Helm chart is available at in the SourceRef.
     *
     * @schema HelmChartV1Beta1Spec#chart
     */
    readonly chart: string;
    /**
     * The interval at which to check the Source for updates.
     *
     * @schema HelmChartV1Beta1Spec#interval
     */
    readonly interval: string;
    /**
     * Determines what enables the creation of a new artifact. Valid values are
     * ('ChartVersion', 'Revision').
     * See the documentation of the values for an explanation on their behavior.
     * Defaults to ChartVersion when omitted.
     *
     * @default ChartVersion when omitted.
     * @schema HelmChartV1Beta1Spec#reconcileStrategy
     */
    readonly reconcileStrategy?: HelmChartV1Beta1SpecReconcileStrategy;
    /**
     * The reference to the Source the chart is available at.
     *
     * @schema HelmChartV1Beta1Spec#sourceRef
     */
    readonly sourceRef: HelmChartV1Beta1SpecSourceRef;
    /**
     * This flag tells the controller to suspend the reconciliation of this source.
     *
     * @schema HelmChartV1Beta1Spec#suspend
     */
    readonly suspend?: boolean;
    /**
     * Alternative values file to use as the default chart values, expected to
     * be a relative path in the SourceRef. Deprecated in favor of ValuesFiles,
     * for backwards compatibility the file defined here is merged before the
     * ValuesFiles items. Ignored when omitted.
     *
     * @schema HelmChartV1Beta1Spec#valuesFile
     */
    readonly valuesFile?: string;
    /**
     * Alternative list of values files to use as the chart values (values.yaml
     * is not included by default), expected to be a relative path in the SourceRef.
     * Values files are merged in the order of this list with the last file overriding
     * the first. Ignored when omitted.
     *
     * @schema HelmChartV1Beta1Spec#valuesFiles
     */
    readonly valuesFiles?: string[];
    /**
     * The chart version semver expression, ignored for charts from GitRepository
     * and Bucket sources. Defaults to latest when omitted.
     *
     * @default latest when omitted.
     * @schema HelmChartV1Beta1Spec#version
     */
    readonly version?: string;
}
/**
 * Converts an object of type 'HelmChartV1Beta1Spec' to JSON representation.
 */
export declare function toJson_HelmChartV1Beta1Spec(obj: HelmChartV1Beta1Spec | undefined): Record<string, any> | undefined;
/**
 * AccessFrom defines an Access Control List for allowing cross-namespace references to this object.
 *
 * @schema HelmChartV1Beta1SpecAccessFrom
 */
export interface HelmChartV1Beta1SpecAccessFrom {
    /**
     * NamespaceSelectors is the list of namespace selectors to which this ACL applies.
     * Items in this list are evaluated using a logical OR operation.
     *
     * @schema HelmChartV1Beta1SpecAccessFrom#namespaceSelectors
     */
    readonly namespaceSelectors: HelmChartV1Beta1SpecAccessFromNamespaceSelectors[];
}
/**
 * Converts an object of type 'HelmChartV1Beta1SpecAccessFrom' to JSON representation.
 */
export declare function toJson_HelmChartV1Beta1SpecAccessFrom(obj: HelmChartV1Beta1SpecAccessFrom | undefined): Record<string, any> | undefined;
/**
 * Determines what enables the creation of a new artifact. Valid values are
 * ('ChartVersion', 'Revision').
 * See the documentation of the values for an explanation on their behavior.
 * Defaults to ChartVersion when omitted.
 *
 * @default ChartVersion when omitted.
 * @schema HelmChartV1Beta1SpecReconcileStrategy
 */
export declare enum HelmChartV1Beta1SpecReconcileStrategy {
    /** ChartVersion */
    CHART_VERSION = "ChartVersion",
    /** Revision */
    REVISION = "Revision"
}
/**
 * The reference to the Source the chart is available at.
 *
 * @schema HelmChartV1Beta1SpecSourceRef
 */
export interface HelmChartV1Beta1SpecSourceRef {
    /**
     * APIVersion of the referent.
     *
     * @schema HelmChartV1Beta1SpecSourceRef#apiVersion
     */
    readonly apiVersion?: string;
    /**
     * Kind of the referent, valid values are ('HelmRepository', 'GitRepository',
     * 'Bucket').
     *
     * @schema HelmChartV1Beta1SpecSourceRef#kind
     */
    readonly kind: HelmChartV1Beta1SpecSourceRefKind;
    /**
     * Name of the referent.
     *
     * @schema HelmChartV1Beta1SpecSourceRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'HelmChartV1Beta1SpecSourceRef' to JSON representation.
 */
export declare function toJson_HelmChartV1Beta1SpecSourceRef(obj: HelmChartV1Beta1SpecSourceRef | undefined): Record<string, any> | undefined;
/**
 * NamespaceSelector selects the namespaces to which this ACL applies.
 * An empty map of MatchLabels matches all namespaces in a cluster.
 *
 * @schema HelmChartV1Beta1SpecAccessFromNamespaceSelectors
 */
export interface HelmChartV1Beta1SpecAccessFromNamespaceSelectors {
    /**
     * MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
     * map is equivalent to an element of matchExpressions, whose key field is "key", the
     * operator is "In", and the values array contains only "value". The requirements are ANDed.
     *
     * @schema HelmChartV1Beta1SpecAccessFromNamespaceSelectors#matchLabels
     */
    readonly matchLabels?: {
        [key: string]: string;
    };
}
/**
 * Converts an object of type 'HelmChartV1Beta1SpecAccessFromNamespaceSelectors' to JSON representation.
 */
export declare function toJson_HelmChartV1Beta1SpecAccessFromNamespaceSelectors(obj: HelmChartV1Beta1SpecAccessFromNamespaceSelectors | undefined): Record<string, any> | undefined;
/**
 * Kind of the referent, valid values are ('HelmRepository', 'GitRepository',
 * 'Bucket').
 *
 * @schema HelmChartV1Beta1SpecSourceRefKind
 */
export declare enum HelmChartV1Beta1SpecSourceRefKind {
    /** HelmRepository */
    HELM_REPOSITORY = "HelmRepository",
    /** GitRepository */
    GIT_REPOSITORY = "GitRepository",
    /** Bucket */
    BUCKET = "Bucket"
}
/**
 * HelmChart is the Schema for the helmcharts API.
 *
 * @schema HelmChartV1Beta2
 */
export declare class HelmChartV1Beta2 extends ApiObject {
    /**
     * Returns the apiVersion and kind for "HelmChartV1Beta2"
     */
    static readonly GVK: GroupVersionKind;
    /**
     * Renders a Kubernetes manifest for "HelmChartV1Beta2".
     *
     * This can be used to inline resource manifests inside other objects (e.g. as templates).
     *
     * @param props initialization props
     */
    static manifest(props?: HelmChartV1Beta2Props): any;
    /**
     * Defines a "HelmChartV1Beta2" API object
     * @param scope the scope in which to define this object
     * @param id a scope-local name for the object
     * @param props initialization props
     */
    constructor(scope: Construct, id: string, props?: HelmChartV1Beta2Props);
    /**
     * Renders the object to Kubernetes JSON.
     */
    toJson(): any;
}
/**
 * HelmChart is the Schema for the helmcharts API.
 *
 * @schema HelmChartV1Beta2
 */
export interface HelmChartV1Beta2Props {
    /**
     * @schema HelmChartV1Beta2#metadata
     */
    readonly metadata?: ApiObjectMetadata;
    /**
     * HelmChartSpec specifies the desired state of a Helm chart.
     *
     * @schema HelmChartV1Beta2#spec
     */
    readonly spec?: HelmChartV1Beta2Spec;
}
/**
 * Converts an object of type 'HelmChartV1Beta2Props' to JSON representation.
 */
export declare function toJson_HelmChartV1Beta2Props(obj: HelmChartV1Beta2Props | undefined): Record<string, any> | undefined;
/**
 * HelmChartSpec specifies the desired state of a Helm chart.
 *
 * @schema HelmChartV1Beta2Spec
 */
export interface HelmChartV1Beta2Spec {
    /**
     * AccessFrom specifies an Access Control List for allowing cross-namespace
     * references to this object.
     * NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
     *
     * @schema HelmChartV1Beta2Spec#accessFrom
     */
    readonly accessFrom?: HelmChartV1Beta2SpecAccessFrom;
    /**
     * Chart is the name or path the Helm chart is available at in the
     * SourceRef.
     *
     * @schema HelmChartV1Beta2Spec#chart
     */
    readonly chart: string;
    /**
     * IgnoreMissingValuesFiles controls whether to silently ignore missing values
     * files rather than failing.
     *
     * @schema HelmChartV1Beta2Spec#ignoreMissingValuesFiles
     */
    readonly ignoreMissingValuesFiles?: boolean;
    /**
     * Interval at which the HelmChart SourceRef is checked for updates.
     * This interval is approximate and may be subject to jitter to ensure
     * efficient use of resources.
     *
     * @schema HelmChartV1Beta2Spec#interval
     */
    readonly interval: string;
    /**
     * ReconcileStrategy determines what enables the creation of a new artifact.
     * Valid values are ('ChartVersion', 'Revision').
     * See the documentation of the values for an explanation on their behavior.
     * Defaults to ChartVersion when omitted.
     *
     * @default ChartVersion when omitted.
     * @schema HelmChartV1Beta2Spec#reconcileStrategy
     */
    readonly reconcileStrategy?: HelmChartV1Beta2SpecReconcileStrategy;
    /**
     * SourceRef is the reference to the Source the chart is available at.
     *
     * @schema HelmChartV1Beta2Spec#sourceRef
     */
    readonly sourceRef: HelmChartV1Beta2SpecSourceRef;
    /**
     * Suspend tells the controller to suspend the reconciliation of this
     * source.
     *
     * @schema HelmChartV1Beta2Spec#suspend
     */
    readonly suspend?: boolean;
    /**
     * ValuesFile is an alternative values file to use as the default chart
     * values, expected to be a relative path in the SourceRef. Deprecated in
     * favor of ValuesFiles, for backwards compatibility the file specified here
     * is merged before the ValuesFiles items. Ignored when omitted.
     *
     * @schema HelmChartV1Beta2Spec#valuesFile
     */
    readonly valuesFile?: string;
    /**
     * ValuesFiles is an alternative list of values files to use as the chart
     * values (values.yaml is not included by default), expected to be a
     * relative path in the SourceRef.
     * Values files are merged in the order of this list with the last file
     * overriding the first. Ignored when omitted.
     *
     * @schema HelmChartV1Beta2Spec#valuesFiles
     */
    readonly valuesFiles?: string[];
    /**
     * Verify contains the secret name containing the trusted public keys
     * used to verify the signature and specifies which provider to use to check
     * whether OCI image is authentic.
     * This field is only supported when using HelmRepository source with spec.type 'oci'.
     * Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified.
     *
     * @schema HelmChartV1Beta2Spec#verify
     */
    readonly verify?: HelmChartV1Beta2SpecVerify;
    /**
     * Version is the chart version semver expression, ignored for charts from
     * GitRepository and Bucket sources. Defaults to latest when omitted.
     *
     * @default latest when omitted.
     * @schema HelmChartV1Beta2Spec#version
     */
    readonly version?: string;
}
/**
 * Converts an object of type 'HelmChartV1Beta2Spec' to JSON representation.
 */
export declare function toJson_HelmChartV1Beta2Spec(obj: HelmChartV1Beta2Spec | undefined): Record<string, any> | undefined;
/**
 * AccessFrom specifies an Access Control List for allowing cross-namespace
 * references to this object.
 * NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
 *
 * @schema HelmChartV1Beta2SpecAccessFrom
 */
export interface HelmChartV1Beta2SpecAccessFrom {
    /**
     * NamespaceSelectors is the list of namespace selectors to which this ACL applies.
     * Items in this list are evaluated using a logical OR operation.
     *
     * @schema HelmChartV1Beta2SpecAccessFrom#namespaceSelectors
     */
    readonly namespaceSelectors: HelmChartV1Beta2SpecAccessFromNamespaceSelectors[];
}
/**
 * Converts an object of type 'HelmChartV1Beta2SpecAccessFrom' to JSON representation.
 */
export declare function toJson_HelmChartV1Beta2SpecAccessFrom(obj: HelmChartV1Beta2SpecAccessFrom | undefined): Record<string, any> | undefined;
/**
 * ReconcileStrategy determines what enables the creation of a new artifact.
 * Valid values are ('ChartVersion', 'Revision').
 * See the documentation of the values for an explanation on their behavior.
 * Defaults to ChartVersion when omitted.
 *
 * @default ChartVersion when omitted.
 * @schema HelmChartV1Beta2SpecReconcileStrategy
 */
export declare enum HelmChartV1Beta2SpecReconcileStrategy {
    /** ChartVersion */
    CHART_VERSION = "ChartVersion",
    /** Revision */
    REVISION = "Revision"
}
/**
 * SourceRef is the reference to the Source the chart is available at.
 *
 * @schema HelmChartV1Beta2SpecSourceRef
 */
export interface HelmChartV1Beta2SpecSourceRef {
    /**
     * APIVersion of the referent.
     *
     * @schema HelmChartV1Beta2SpecSourceRef#apiVersion
     */
    readonly apiVersion?: string;
    /**
     * Kind of the referent, valid values are ('HelmRepository', 'GitRepository',
     * 'Bucket').
     *
     * @schema HelmChartV1Beta2SpecSourceRef#kind
     */
    readonly kind: HelmChartV1Beta2SpecSourceRefKind;
    /**
     * Name of the referent.
     *
     * @schema HelmChartV1Beta2SpecSourceRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'HelmChartV1Beta2SpecSourceRef' to JSON representation.
 */
export declare function toJson_HelmChartV1Beta2SpecSourceRef(obj: HelmChartV1Beta2SpecSourceRef | undefined): Record<string, any> | undefined;
/**
 * Verify contains the secret name containing the trusted public keys
 * used to verify the signature and specifies which provider to use to check
 * whether OCI image is authentic.
 * This field is only supported when using HelmRepository source with spec.type 'oci'.
 * Chart dependencies, which are not bundled in the umbrella chart artifact, are not verified.
 *
 * @schema HelmChartV1Beta2SpecVerify
 */
export interface HelmChartV1Beta2SpecVerify {
    /**
     * MatchOIDCIdentity specifies the identity matching criteria to use
     * while verifying an OCI artifact which was signed using Cosign keyless
     * signing. The artifact's identity is deemed to be verified if any of the
     * specified matchers match against the identity.
     *
     * @schema HelmChartV1Beta2SpecVerify#matchOIDCIdentity
     */
    readonly matchOidcIdentity?: HelmChartV1Beta2SpecVerifyMatchOidcIdentity[];
    /**
     * Provider specifies the technology used to sign the OCI Artifact.
     *
     * @schema HelmChartV1Beta2SpecVerify#provider
     */
    readonly provider: HelmChartV1Beta2SpecVerifyProvider;
    /**
     * SecretRef specifies the Kubernetes Secret containing the
     * trusted public keys.
     *
     * @schema HelmChartV1Beta2SpecVerify#secretRef
     */
    readonly secretRef?: HelmChartV1Beta2SpecVerifySecretRef;
}
/**
 * Converts an object of type 'HelmChartV1Beta2SpecVerify' to JSON representation.
 */
export declare function toJson_HelmChartV1Beta2SpecVerify(obj: HelmChartV1Beta2SpecVerify | undefined): Record<string, any> | undefined;
/**
 * NamespaceSelector selects the namespaces to which this ACL applies.
 * An empty map of MatchLabels matches all namespaces in a cluster.
 *
 * @schema HelmChartV1Beta2SpecAccessFromNamespaceSelectors
 */
export interface HelmChartV1Beta2SpecAccessFromNamespaceSelectors {
    /**
     * MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
     * map is equivalent to an element of matchExpressions, whose key field is "key", the
     * operator is "In", and the values array contains only "value". The requirements are ANDed.
     *
     * @schema HelmChartV1Beta2SpecAccessFromNamespaceSelectors#matchLabels
     */
    readonly matchLabels?: {
        [key: string]: string;
    };
}
/**
 * Converts an object of type 'HelmChartV1Beta2SpecAccessFromNamespaceSelectors' to JSON representation.
 */
export declare function toJson_HelmChartV1Beta2SpecAccessFromNamespaceSelectors(obj: HelmChartV1Beta2SpecAccessFromNamespaceSelectors | undefined): Record<string, any> | undefined;
/**
 * Kind of the referent, valid values are ('HelmRepository', 'GitRepository',
 * 'Bucket').
 *
 * @schema HelmChartV1Beta2SpecSourceRefKind
 */
export declare enum HelmChartV1Beta2SpecSourceRefKind {
    /** HelmRepository */
    HELM_REPOSITORY = "HelmRepository",
    /** GitRepository */
    GIT_REPOSITORY = "GitRepository",
    /** Bucket */
    BUCKET = "Bucket"
}
/**
 * OIDCIdentityMatch specifies options for verifying the certificate identity,
 * i.e. the issuer and the subject of the certificate.
 *
 * @schema HelmChartV1Beta2SpecVerifyMatchOidcIdentity
 */
export interface HelmChartV1Beta2SpecVerifyMatchOidcIdentity {
    /**
     * Issuer specifies the regex pattern to match against to verify
     * the OIDC issuer in the Fulcio certificate. The pattern must be a
     * valid Go regular expression.
     *
     * @schema HelmChartV1Beta2SpecVerifyMatchOidcIdentity#issuer
     */
    readonly issuer: string;
    /**
     * Subject specifies the regex pattern to match against to verify
     * the identity subject in the Fulcio certificate. The pattern must
     * be a valid Go regular expression.
     *
     * @schema HelmChartV1Beta2SpecVerifyMatchOidcIdentity#subject
     */
    readonly subject: string;
}
/**
 * Converts an object of type 'HelmChartV1Beta2SpecVerifyMatchOidcIdentity' to JSON representation.
 */
export declare function toJson_HelmChartV1Beta2SpecVerifyMatchOidcIdentity(obj: HelmChartV1Beta2SpecVerifyMatchOidcIdentity | undefined): Record<string, any> | undefined;
/**
 * Provider specifies the technology used to sign the OCI Artifact.
 *
 * @schema HelmChartV1Beta2SpecVerifyProvider
 */
export declare enum HelmChartV1Beta2SpecVerifyProvider {
    /** cosign */
    COSIGN = "cosign",
    /** notation */
    NOTATION = "notation"
}
/**
 * SecretRef specifies the Kubernetes Secret containing the
 * trusted public keys.
 *
 * @schema HelmChartV1Beta2SpecVerifySecretRef
 */
export interface HelmChartV1Beta2SpecVerifySecretRef {
    /**
     * Name of the referent.
     *
     * @schema HelmChartV1Beta2SpecVerifySecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'HelmChartV1Beta2SpecVerifySecretRef' to JSON representation.
 */
export declare function toJson_HelmChartV1Beta2SpecVerifySecretRef(obj: HelmChartV1Beta2SpecVerifySecretRef | undefined): Record<string, any> | undefined;
/**
 * HelmRepository is the Schema for the helmrepositories API.
 *
 * @schema HelmRepository
 */
export declare class HelmRepository extends ApiObject {
    /**
     * Returns the apiVersion and kind for "HelmRepository"
     */
    static readonly GVK: GroupVersionKind;
    /**
     * Renders a Kubernetes manifest for "HelmRepository".
     *
     * This can be used to inline resource manifests inside other objects (e.g. as templates).
     *
     * @param props initialization props
     */
    static manifest(props?: HelmRepositoryProps): any;
    /**
     * Defines a "HelmRepository" API object
     * @param scope the scope in which to define this object
     * @param id a scope-local name for the object
     * @param props initialization props
     */
    constructor(scope: Construct, id: string, props?: HelmRepositoryProps);
    /**
     * Renders the object to Kubernetes JSON.
     */
    toJson(): any;
}
/**
 * HelmRepository is the Schema for the helmrepositories API.
 *
 * @schema HelmRepository
 */
export interface HelmRepositoryProps {
    /**
     * @schema HelmRepository#metadata
     */
    readonly metadata?: ApiObjectMetadata;
    /**
     * HelmRepositorySpec specifies the required configuration to produce an
     * Artifact for a Helm repository index YAML.
     *
     * @schema HelmRepository#spec
     */
    readonly spec?: HelmRepositorySpec;
}
/**
 * Converts an object of type 'HelmRepositoryProps' to JSON representation.
 */
export declare function toJson_HelmRepositoryProps(obj: HelmRepositoryProps | undefined): Record<string, any> | undefined;
/**
 * HelmRepositorySpec specifies the required configuration to produce an
 * Artifact for a Helm repository index YAML.
 *
 * @schema HelmRepositorySpec
 */
export interface HelmRepositorySpec {
    /**
     * AccessFrom specifies an Access Control List for allowing cross-namespace
     * references to this object.
     * NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
     *
     * @schema HelmRepositorySpec#accessFrom
     */
    readonly accessFrom?: HelmRepositorySpecAccessFrom;
    /**
     * CertSecretRef can be given the name of a Secret containing
     * either or both of
     *
     * - a PEM-encoded client certificate (`tls.crt`) and private
     * key (`tls.key`);
     * - a PEM-encoded CA certificate (`ca.crt`)
     *
     * and whichever are supplied, will be used for connecting to the
     * registry. The client cert and key are useful if you are
     * authenticating with a certificate; the CA cert is useful if
     * you are using a self-signed server certificate. The Secret must
     * be of type `Opaque` or `kubernetes.io/tls`.
     *
     * It takes precedence over the values specified in the Secret referred
     * to by `.spec.secretRef`.
     *
     * @schema HelmRepositorySpec#certSecretRef
     */
    readonly certSecretRef?: HelmRepositorySpecCertSecretRef;
    /**
     * Insecure allows connecting to a non-TLS HTTP container registry.
     * This field is only taken into account if the .spec.type field is set to 'oci'.
     *
     * @schema HelmRepositorySpec#insecure
     */
    readonly insecure?: boolean;
    /**
     * Interval at which the HelmRepository URL is checked for updates.
     * This interval is approximate and may be subject to jitter to ensure
     * efficient use of resources.
     *
     * @schema HelmRepositorySpec#interval
     */
    readonly interval?: string;
    /**
     * PassCredentials allows the credentials from the SecretRef to be passed
     * on to a host that does not match the host as defined in URL.
     * This may be required if the host of the advertised chart URLs in the
     * index differ from the defined URL.
     * Enabling this should be done with caution, as it can potentially result
     * in credentials getting stolen in a MITM-attack.
     *
     * @schema HelmRepositorySpec#passCredentials
     */
    readonly passCredentials?: boolean;
    /**
     * Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'.
     * This field is optional, and only taken into account if the .spec.type field is set to 'oci'.
     * When not specified, defaults to 'generic'.
     *
     * @schema HelmRepositorySpec#provider
     */
    readonly provider?: HelmRepositorySpecProvider;
    /**
     * SecretRef specifies the Secret containing authentication credentials
     * for the HelmRepository.
     * For HTTP/S basic auth the secret must contain 'username' and 'password'
     * fields.
     * Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile'
     * keys is deprecated. Please use `.spec.certSecretRef` instead.
     *
     * @schema HelmRepositorySpec#secretRef
     */
    readonly secretRef?: HelmRepositorySpecSecretRef;
    /**
     * Suspend tells the controller to suspend the reconciliation of this
     * HelmRepository.
     *
     * @schema HelmRepositorySpec#suspend
     */
    readonly suspend?: boolean;
    /**
     * Timeout is used for the index fetch operation for an HTTPS helm repository,
     * and for remote OCI Repository operations like pulling for an OCI helm
     * chart by the associated HelmChart.
     * Its default value is 60s.
     *
     * @schema HelmRepositorySpec#timeout
     */
    readonly timeout?: string;
    /**
     * Type of the HelmRepository.
     * When this field is set to  "oci", the URL field value must be prefixed with "oci://".
     *
     * @schema HelmRepositorySpec#type
     */
    readonly type?: HelmRepositorySpecType;
    /**
     * URL of the Helm repository, a valid URL contains at least a protocol and
     * host.
     *
     * @schema HelmRepositorySpec#url
     */
    readonly url: string;
}
/**
 * Converts an object of type 'HelmRepositorySpec' to JSON representation.
 */
export declare function toJson_HelmRepositorySpec(obj: HelmRepositorySpec | undefined): Record<string, any> | undefined;
/**
 * AccessFrom specifies an Access Control List for allowing cross-namespace
 * references to this object.
 * NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
 *
 * @schema HelmRepositorySpecAccessFrom
 */
export interface HelmRepositorySpecAccessFrom {
    /**
     * NamespaceSelectors is the list of namespace selectors to which this ACL applies.
     * Items in this list are evaluated using a logical OR operation.
     *
     * @schema HelmRepositorySpecAccessFrom#namespaceSelectors
     */
    readonly namespaceSelectors: HelmRepositorySpecAccessFromNamespaceSelectors[];
}
/**
 * Converts an object of type 'HelmRepositorySpecAccessFrom' to JSON representation.
 */
export declare function toJson_HelmRepositorySpecAccessFrom(obj: HelmRepositorySpecAccessFrom | undefined): Record<string, any> | undefined;
/**
 * CertSecretRef can be given the name of a Secret containing
 * either or both of
 *
 * - a PEM-encoded client certificate (`tls.crt`) and private
 * key (`tls.key`);
 * - a PEM-encoded CA certificate (`ca.crt`)
 *
 * and whichever are supplied, will be used for connecting to the
 * registry. The client cert and key are useful if you are
 * authenticating with a certificate; the CA cert is useful if
 * you are using a self-signed server certificate. The Secret must
 * be of type `Opaque` or `kubernetes.io/tls`.
 *
 * It takes precedence over the values specified in the Secret referred
 * to by `.spec.secretRef`.
 *
 * @schema HelmRepositorySpecCertSecretRef
 */
export interface HelmRepositorySpecCertSecretRef {
    /**
     * Name of the referent.
     *
     * @schema HelmRepositorySpecCertSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'HelmRepositorySpecCertSecretRef' to JSON representation.
 */
export declare function toJson_HelmRepositorySpecCertSecretRef(obj: HelmRepositorySpecCertSecretRef | undefined): Record<string, any> | undefined;
/**
 * Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'.
 * This field is optional, and only taken into account if the .spec.type field is set to 'oci'.
 * When not specified, defaults to 'generic'.
 *
 * @schema HelmRepositorySpecProvider
 */
export declare enum HelmRepositorySpecProvider {
    /** generic */
    GENERIC = "generic",
    /** aws */
    AWS = "aws",
    /** azure */
    AZURE = "azure",
    /** gcp */
    GCP = "gcp"
}
/**
 * SecretRef specifies the Secret containing authentication credentials
 * for the HelmRepository.
 * For HTTP/S basic auth the secret must contain 'username' and 'password'
 * fields.
 * Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile'
 * keys is deprecated. Please use `.spec.certSecretRef` instead.
 *
 * @schema HelmRepositorySpecSecretRef
 */
export interface HelmRepositorySpecSecretRef {
    /**
     * Name of the referent.
     *
     * @schema HelmRepositorySpecSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'HelmRepositorySpecSecretRef' to JSON representation.
 */
export declare function toJson_HelmRepositorySpecSecretRef(obj: HelmRepositorySpecSecretRef | undefined): Record<string, any> | undefined;
/**
 * Type of the HelmRepository.
 * When this field is set to  "oci", the URL field value must be prefixed with "oci://".
 *
 * @schema HelmRepositorySpecType
 */
export declare enum HelmRepositorySpecType {
    /** default */
    DEFAULT = "default",
    /** oci */
    OCI = "oci"
}
/**
 * NamespaceSelector selects the namespaces to which this ACL applies.
 * An empty map of MatchLabels matches all namespaces in a cluster.
 *
 * @schema HelmRepositorySpecAccessFromNamespaceSelectors
 */
export interface HelmRepositorySpecAccessFromNamespaceSelectors {
    /**
     * MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
     * map is equivalent to an element of matchExpressions, whose key field is "key", the
     * operator is "In", and the values array contains only "value". The requirements are ANDed.
     *
     * @schema HelmRepositorySpecAccessFromNamespaceSelectors#matchLabels
     */
    readonly matchLabels?: {
        [key: string]: string;
    };
}
/**
 * Converts an object of type 'HelmRepositorySpecAccessFromNamespaceSelectors' to JSON representation.
 */
export declare function toJson_HelmRepositorySpecAccessFromNamespaceSelectors(obj: HelmRepositorySpecAccessFromNamespaceSelectors | undefined): Record<string, any> | undefined;
/**
 * HelmRepository is the Schema for the helmrepositories API
 *
 * @schema HelmRepositoryV1Beta1
 */
export declare class HelmRepositoryV1Beta1 extends ApiObject {
    /**
     * Returns the apiVersion and kind for "HelmRepositoryV1Beta1"
     */
    static readonly GVK: GroupVersionKind;
    /**
     * Renders a Kubernetes manifest for "HelmRepositoryV1Beta1".
     *
     * This can be used to inline resource manifests inside other objects (e.g. as templates).
     *
     * @param props initialization props
     */
    static manifest(props?: HelmRepositoryV1Beta1Props): any;
    /**
     * Defines a "HelmRepositoryV1Beta1" API object
     * @param scope the scope in which to define this object
     * @param id a scope-local name for the object
     * @param props initialization props
     */
    constructor(scope: Construct, id: string, props?: HelmRepositoryV1Beta1Props);
    /**
     * Renders the object to Kubernetes JSON.
     */
    toJson(): any;
}
/**
 * HelmRepository is the Schema for the helmrepositories API
 *
 * @schema HelmRepositoryV1Beta1
 */
export interface HelmRepositoryV1Beta1Props {
    /**
     * @schema HelmRepositoryV1Beta1#metadata
     */
    readonly metadata?: ApiObjectMetadata;
    /**
     * HelmRepositorySpec defines the reference to a Helm repository.
     *
     * @schema HelmRepositoryV1Beta1#spec
     */
    readonly spec?: HelmRepositoryV1Beta1Spec;
}
/**
 * Converts an object of type 'HelmRepositoryV1Beta1Props' to JSON representation.
 */
export declare function toJson_HelmRepositoryV1Beta1Props(obj: HelmRepositoryV1Beta1Props | undefined): Record<string, any> | undefined;
/**
 * HelmRepositorySpec defines the reference to a Helm repository.
 *
 * @schema HelmRepositoryV1Beta1Spec
 */
export interface HelmRepositoryV1Beta1Spec {
    /**
     * AccessFrom defines an Access Control List for allowing cross-namespace references to this object.
     *
     * @schema HelmRepositoryV1Beta1Spec#accessFrom
     */
    readonly accessFrom?: HelmRepositoryV1Beta1SpecAccessFrom;
    /**
     * The interval at which to check the upstream for updates.
     *
     * @schema HelmRepositoryV1Beta1Spec#interval
     */
    readonly interval: string;
    /**
     * PassCredentials allows the credentials from the SecretRef to be passed on to
     * a host that does not match the host as defined in URL.
     * This may be required if the host of the advertised chart URLs in the index
     * differ from the defined URL.
     * Enabling this should be done with caution, as it can potentially result in
     * credentials getting stolen in a MITM-attack.
     *
     * @schema HelmRepositoryV1Beta1Spec#passCredentials
     */
    readonly passCredentials?: boolean;
    /**
     * The name of the secret containing authentication credentials for the Helm
     * repository.
     * For HTTP/S basic auth the secret must contain username and
     * password fields.
     * For TLS the secret must contain a certFile and keyFile, and/or
     * caFile fields.
     *
     * @schema HelmRepositoryV1Beta1Spec#secretRef
     */
    readonly secretRef?: HelmRepositoryV1Beta1SpecSecretRef;
    /**
     * This flag tells the controller to suspend the reconciliation of this source.
     *
     * @schema HelmRepositoryV1Beta1Spec#suspend
     */
    readonly suspend?: boolean;
    /**
     * The timeout of index downloading, defaults to 60s.
     *
     * @schema HelmRepositoryV1Beta1Spec#timeout
     */
    readonly timeout?: string;
    /**
     * The Helm repository URL, a valid URL contains at least a protocol and host.
     *
     * @schema HelmRepositoryV1Beta1Spec#url
     */
    readonly url: string;
}
/**
 * Converts an object of type 'HelmRepositoryV1Beta1Spec' to JSON representation.
 */
export declare function toJson_HelmRepositoryV1Beta1Spec(obj: HelmRepositoryV1Beta1Spec | undefined): Record<string, any> | undefined;
/**
 * AccessFrom defines an Access Control List for allowing cross-namespace references to this object.
 *
 * @schema HelmRepositoryV1Beta1SpecAccessFrom
 */
export interface HelmRepositoryV1Beta1SpecAccessFrom {
    /**
     * NamespaceSelectors is the list of namespace selectors to which this ACL applies.
     * Items in this list are evaluated using a logical OR operation.
     *
     * @schema HelmRepositoryV1Beta1SpecAccessFrom#namespaceSelectors
     */
    readonly namespaceSelectors: HelmRepositoryV1Beta1SpecAccessFromNamespaceSelectors[];
}
/**
 * Converts an object of type 'HelmRepositoryV1Beta1SpecAccessFrom' to JSON representation.
 */
export declare function toJson_HelmRepositoryV1Beta1SpecAccessFrom(obj: HelmRepositoryV1Beta1SpecAccessFrom | undefined): Record<string, any> | undefined;
/**
 * The name of the secret containing authentication credentials for the Helm
 * repository.
 * For HTTP/S basic auth the secret must contain username and
 * password fields.
 * For TLS the secret must contain a certFile and keyFile, and/or
 * caFile fields.
 *
 * @schema HelmRepositoryV1Beta1SpecSecretRef
 */
export interface HelmRepositoryV1Beta1SpecSecretRef {
    /**
     * Name of the referent.
     *
     * @schema HelmRepositoryV1Beta1SpecSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'HelmRepositoryV1Beta1SpecSecretRef' to JSON representation.
 */
export declare function toJson_HelmRepositoryV1Beta1SpecSecretRef(obj: HelmRepositoryV1Beta1SpecSecretRef | undefined): Record<string, any> | undefined;
/**
 * NamespaceSelector selects the namespaces to which this ACL applies.
 * An empty map of MatchLabels matches all namespaces in a cluster.
 *
 * @schema HelmRepositoryV1Beta1SpecAccessFromNamespaceSelectors
 */
export interface HelmRepositoryV1Beta1SpecAccessFromNamespaceSelectors {
    /**
     * MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
     * map is equivalent to an element of matchExpressions, whose key field is "key", the
     * operator is "In", and the values array contains only "value". The requirements are ANDed.
     *
     * @schema HelmRepositoryV1Beta1SpecAccessFromNamespaceSelectors#matchLabels
     */
    readonly matchLabels?: {
        [key: string]: string;
    };
}
/**
 * Converts an object of type 'HelmRepositoryV1Beta1SpecAccessFromNamespaceSelectors' to JSON representation.
 */
export declare function toJson_HelmRepositoryV1Beta1SpecAccessFromNamespaceSelectors(obj: HelmRepositoryV1Beta1SpecAccessFromNamespaceSelectors | undefined): Record<string, any> | undefined;
/**
 * HelmRepository is the Schema for the helmrepositories API.
 *
 * @schema HelmRepositoryV1Beta2
 */
export declare class HelmRepositoryV1Beta2 extends ApiObject {
    /**
     * Returns the apiVersion and kind for "HelmRepositoryV1Beta2"
     */
    static readonly GVK: GroupVersionKind;
    /**
     * Renders a Kubernetes manifest for "HelmRepositoryV1Beta2".
     *
     * This can be used to inline resource manifests inside other objects (e.g. as templates).
     *
     * @param props initialization props
     */
    static manifest(props?: HelmRepositoryV1Beta2Props): any;
    /**
     * Defines a "HelmRepositoryV1Beta2" API object
     * @param scope the scope in which to define this object
     * @param id a scope-local name for the object
     * @param props initialization props
     */
    constructor(scope: Construct, id: string, props?: HelmRepositoryV1Beta2Props);
    /**
     * Renders the object to Kubernetes JSON.
     */
    toJson(): any;
}
/**
 * HelmRepository is the Schema for the helmrepositories API.
 *
 * @schema HelmRepositoryV1Beta2
 */
export interface HelmRepositoryV1Beta2Props {
    /**
     * @schema HelmRepositoryV1Beta2#metadata
     */
    readonly metadata?: ApiObjectMetadata;
    /**
     * HelmRepositorySpec specifies the required configuration to produce an
     * Artifact for a Helm repository index YAML.
     *
     * @schema HelmRepositoryV1Beta2#spec
     */
    readonly spec?: HelmRepositoryV1Beta2Spec;
}
/**
 * Converts an object of type 'HelmRepositoryV1Beta2Props' to JSON representation.
 */
export declare function toJson_HelmRepositoryV1Beta2Props(obj: HelmRepositoryV1Beta2Props | undefined): Record<string, any> | undefined;
/**
 * HelmRepositorySpec specifies the required configuration to produce an
 * Artifact for a Helm repository index YAML.
 *
 * @schema HelmRepositoryV1Beta2Spec
 */
export interface HelmRepositoryV1Beta2Spec {
    /**
     * AccessFrom specifies an Access Control List for allowing cross-namespace
     * references to this object.
     * NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
     *
     * @schema HelmRepositoryV1Beta2Spec#accessFrom
     */
    readonly accessFrom?: HelmRepositoryV1Beta2SpecAccessFrom;
    /**
     * CertSecretRef can be given the name of a Secret containing
     * either or both of
     *
     * - a PEM-encoded client certificate (`tls.crt`) and private
     * key (`tls.key`);
     * - a PEM-encoded CA certificate (`ca.crt`)
     *
     * and whichever are supplied, will be used for connecting to the
     * registry. The client cert and key are useful if you are
     * authenticating with a certificate; the CA cert is useful if
     * you are using a self-signed server certificate. The Secret must
     * be of type `Opaque` or `kubernetes.io/tls`.
     *
     * It takes precedence over the values specified in the Secret referred
     * to by `.spec.secretRef`.
     *
     * @schema HelmRepositoryV1Beta2Spec#certSecretRef
     */
    readonly certSecretRef?: HelmRepositoryV1Beta2SpecCertSecretRef;
    /**
     * Insecure allows connecting to a non-TLS HTTP container registry.
     * This field is only taken into account if the .spec.type field is set to 'oci'.
     *
     * @schema HelmRepositoryV1Beta2Spec#insecure
     */
    readonly insecure?: boolean;
    /**
     * Interval at which the HelmRepository URL is checked for updates.
     * This interval is approximate and may be subject to jitter to ensure
     * efficient use of resources.
     *
     * @schema HelmRepositoryV1Beta2Spec#interval
     */
    readonly interval?: string;
    /**
     * PassCredentials allows the credentials from the SecretRef to be passed
     * on to a host that does not match the host as defined in URL.
     * This may be required if the host of the advertised chart URLs in the
     * index differ from the defined URL.
     * Enabling this should be done with caution, as it can potentially result
     * in credentials getting stolen in a MITM-attack.
     *
     * @schema HelmRepositoryV1Beta2Spec#passCredentials
     */
    readonly passCredentials?: boolean;
    /**
     * Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'.
     * This field is optional, and only taken into account if the .spec.type field is set to 'oci'.
     * When not specified, defaults to 'generic'.
     *
     * @schema HelmRepositoryV1Beta2Spec#provider
     */
    readonly provider?: HelmRepositoryV1Beta2SpecProvider;
    /**
     * SecretRef specifies the Secret containing authentication credentials
     * for the HelmRepository.
     * For HTTP/S basic auth the secret must contain 'username' and 'password'
     * fields.
     * Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile'
     * keys is deprecated. Please use `.spec.certSecretRef` instead.
     *
     * @schema HelmRepositoryV1Beta2Spec#secretRef
     */
    readonly secretRef?: HelmRepositoryV1Beta2SpecSecretRef;
    /**
     * Suspend tells the controller to suspend the reconciliation of this
     * HelmRepository.
     *
     * @schema HelmRepositoryV1Beta2Spec#suspend
     */
    readonly suspend?: boolean;
    /**
     * Timeout is used for the index fetch operation for an HTTPS helm repository,
     * and for remote OCI Repository operations like pulling for an OCI helm
     * chart by the associated HelmChart.
     * Its default value is 60s.
     *
     * @schema HelmRepositoryV1Beta2Spec#timeout
     */
    readonly timeout?: string;
    /**
     * Type of the HelmRepository.
     * When this field is set to  "oci", the URL field value must be prefixed with "oci://".
     *
     * @schema HelmRepositoryV1Beta2Spec#type
     */
    readonly type?: HelmRepositoryV1Beta2SpecType;
    /**
     * URL of the Helm repository, a valid URL contains at least a protocol and
     * host.
     *
     * @schema HelmRepositoryV1Beta2Spec#url
     */
    readonly url: string;
}
/**
 * Converts an object of type 'HelmRepositoryV1Beta2Spec' to JSON representation.
 */
export declare function toJson_HelmRepositoryV1Beta2Spec(obj: HelmRepositoryV1Beta2Spec | undefined): Record<string, any> | undefined;
/**
 * AccessFrom specifies an Access Control List for allowing cross-namespace
 * references to this object.
 * NOTE: Not implemented, provisional as of https://github.com/fluxcd/flux2/pull/2092
 *
 * @schema HelmRepositoryV1Beta2SpecAccessFrom
 */
export interface HelmRepositoryV1Beta2SpecAccessFrom {
    /**
     * NamespaceSelectors is the list of namespace selectors to which this ACL applies.
     * Items in this list are evaluated using a logical OR operation.
     *
     * @schema HelmRepositoryV1Beta2SpecAccessFrom#namespaceSelectors
     */
    readonly namespaceSelectors: HelmRepositoryV1Beta2SpecAccessFromNamespaceSelectors[];
}
/**
 * Converts an object of type 'HelmRepositoryV1Beta2SpecAccessFrom' to JSON representation.
 */
export declare function toJson_HelmRepositoryV1Beta2SpecAccessFrom(obj: HelmRepositoryV1Beta2SpecAccessFrom | undefined): Record<string, any> | undefined;
/**
 * CertSecretRef can be given the name of a Secret containing
 * either or both of
 *
 * - a PEM-encoded client certificate (`tls.crt`) and private
 * key (`tls.key`);
 * - a PEM-encoded CA certificate (`ca.crt`)
 *
 * and whichever are supplied, will be used for connecting to the
 * registry. The client cert and key are useful if you are
 * authenticating with a certificate; the CA cert is useful if
 * you are using a self-signed server certificate. The Secret must
 * be of type `Opaque` or `kubernetes.io/tls`.
 *
 * It takes precedence over the values specified in the Secret referred
 * to by `.spec.secretRef`.
 *
 * @schema HelmRepositoryV1Beta2SpecCertSecretRef
 */
export interface HelmRepositoryV1Beta2SpecCertSecretRef {
    /**
     * Name of the referent.
     *
     * @schema HelmRepositoryV1Beta2SpecCertSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'HelmRepositoryV1Beta2SpecCertSecretRef' to JSON representation.
 */
export declare function toJson_HelmRepositoryV1Beta2SpecCertSecretRef(obj: HelmRepositoryV1Beta2SpecCertSecretRef | undefined): Record<string, any> | undefined;
/**
 * Provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'.
 * This field is optional, and only taken into account if the .spec.type field is set to 'oci'.
 * When not specified, defaults to 'generic'.
 *
 * @schema HelmRepositoryV1Beta2SpecProvider
 */
export declare enum HelmRepositoryV1Beta2SpecProvider {
    /** generic */
    GENERIC = "generic",
    /** aws */
    AWS = "aws",
    /** azure */
    AZURE = "azure",
    /** gcp */
    GCP = "gcp"
}
/**
 * SecretRef specifies the Secret containing authentication credentials
 * for the HelmRepository.
 * For HTTP/S basic auth the secret must contain 'username' and 'password'
 * fields.
 * Support for TLS auth using the 'certFile' and 'keyFile', and/or 'caFile'
 * keys is deprecated. Please use `.spec.certSecretRef` instead.
 *
 * @schema HelmRepositoryV1Beta2SpecSecretRef
 */
export interface HelmRepositoryV1Beta2SpecSecretRef {
    /**
     * Name of the referent.
     *
     * @schema HelmRepositoryV1Beta2SpecSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'HelmRepositoryV1Beta2SpecSecretRef' to JSON representation.
 */
export declare function toJson_HelmRepositoryV1Beta2SpecSecretRef(obj: HelmRepositoryV1Beta2SpecSecretRef | undefined): Record<string, any> | undefined;
/**
 * Type of the HelmRepository.
 * When this field is set to  "oci", the URL field value must be prefixed with "oci://".
 *
 * @schema HelmRepositoryV1Beta2SpecType
 */
export declare enum HelmRepositoryV1Beta2SpecType {
    /** default */
    DEFAULT = "default",
    /** oci */
    OCI = "oci"
}
/**
 * NamespaceSelector selects the namespaces to which this ACL applies.
 * An empty map of MatchLabels matches all namespaces in a cluster.
 *
 * @schema HelmRepositoryV1Beta2SpecAccessFromNamespaceSelectors
 */
export interface HelmRepositoryV1Beta2SpecAccessFromNamespaceSelectors {
    /**
     * MatchLabels is a map of {key,value} pairs. A single {key,value} in the matchLabels
     * map is equivalent to an element of matchExpressions, whose key field is "key", the
     * operator is "In", and the values array contains only "value". The requirements are ANDed.
     *
     * @schema HelmRepositoryV1Beta2SpecAccessFromNamespaceSelectors#matchLabels
     */
    readonly matchLabels?: {
        [key: string]: string;
    };
}
/**
 * Converts an object of type 'HelmRepositoryV1Beta2SpecAccessFromNamespaceSelectors' to JSON representation.
 */
export declare function toJson_HelmRepositoryV1Beta2SpecAccessFromNamespaceSelectors(obj: HelmRepositoryV1Beta2SpecAccessFromNamespaceSelectors | undefined): Record<string, any> | undefined;
/**
 * OCIRepository is the Schema for the ocirepositories API
 *
 * @schema OCIRepository
 */
export declare class OciRepository extends ApiObject {
    /**
     * Returns the apiVersion and kind for "OCIRepository"
     */
    static readonly GVK: GroupVersionKind;
    /**
     * Renders a Kubernetes manifest for "OCIRepository".
     *
     * This can be used to inline resource manifests inside other objects (e.g. as templates).
     *
     * @param props initialization props
     */
    static manifest(props?: OciRepositoryProps): any;
    /**
     * Defines a "OCIRepository" API object
     * @param scope the scope in which to define this object
     * @param id a scope-local name for the object
     * @param props initialization props
     */
    constructor(scope: Construct, id: string, props?: OciRepositoryProps);
    /**
     * Renders the object to Kubernetes JSON.
     */
    toJson(): any;
}
/**
 * OCIRepository is the Schema for the ocirepositories API
 *
 * @schema OCIRepository
 */
export interface OciRepositoryProps {
    /**
     * @schema OCIRepository#metadata
     */
    readonly metadata?: ApiObjectMetadata;
    /**
     * OCIRepositorySpec defines the desired state of OCIRepository
     *
     * @schema OCIRepository#spec
     */
    readonly spec?: OciRepositorySpec;
}
/**
 * Converts an object of type 'OciRepositoryProps' to JSON representation.
 */
export declare function toJson_OciRepositoryProps(obj: OciRepositoryProps | undefined): Record<string, any> | undefined;
/**
 * OCIRepositorySpec defines the desired state of OCIRepository
 *
 * @schema OciRepositorySpec
 */
export interface OciRepositorySpec {
    /**
     * CertSecretRef can be given the name of a Secret containing
     * either or both of
     *
     * - a PEM-encoded client certificate (`tls.crt`) and private
     * key (`tls.key`);
     * - a PEM-encoded CA certificate (`ca.crt`)
     *
     * and whichever are supplied, will be used for connecting to the
     * registry. The client cert and key are useful if you are
     * authenticating with a certificate; the CA cert is useful if
     * you are using a self-signed server certificate. The Secret must
     * be of type `Opaque` or `kubernetes.io/tls`.
     *
     * Note: Support for the `caFile`, `certFile` and `keyFile` keys have
     * been deprecated.
     *
     * @schema OciRepositorySpec#certSecretRef
     */
    readonly certSecretRef?: OciRepositorySpecCertSecretRef;
    /**
     * Ignore overrides the set of excluded patterns in the .sourceignore format
     * (which is the same as .gitignore). If not provided, a default will be used,
     * consult the documentation for your version to find out what those are.
     *
     * @schema OciRepositorySpec#ignore
     */
    readonly ignore?: string;
    /**
     * Insecure allows connecting to a non-TLS HTTP container registry.
     *
     * @schema OciRepositorySpec#insecure
     */
    readonly insecure?: boolean;
    /**
     * Interval at which the OCIRepository URL is checked for updates.
     * This interval is approximate and may be subject to jitter to ensure
     * efficient use of resources.
     *
     * @schema OciRepositorySpec#interval
     */
    readonly interval: string;
    /**
     * LayerSelector specifies which layer should be extracted from the OCI artifact.
     * When not specified, the first layer found in the artifact is selected.
     *
     * @schema OciRepositorySpec#layerSelector
     */
    readonly layerSelector?: OciRepositorySpecLayerSelector;
    /**
     * The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'.
     * When not specified, defaults to 'generic'.
     *
     * @schema OciRepositorySpec#provider
     */
    readonly provider?: OciRepositorySpecProvider;
    /**
     * ProxySecretRef specifies the Secret containing the proxy configuration
     * to use while communicating with the container registry.
     *
     * @schema OciRepositorySpec#proxySecretRef
     */
    readonly proxySecretRef?: OciRepositorySpecProxySecretRef;
    /**
     * The OCI reference to pull and monitor for changes,
     * defaults to the latest tag.
     *
     * @schema OciRepositorySpec#ref
     */
    readonly ref?: OciRepositorySpecRef;
    /**
     * SecretRef contains the secret name containing the registry login
     * credentials to resolve image metadata.
     * The secret must be of type kubernetes.io/dockerconfigjson.
     *
     * @schema OciRepositorySpec#secretRef
     */
    readonly secretRef?: OciRepositorySpecSecretRef;
    /**
     * ServiceAccountName is the name of the Kubernetes ServiceAccount used to authenticate
     * the image pull if the service account has attached pull secrets. For more information:
     * https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/#add-imagepullsecrets-to-a-service-account
     *
     * @schema OciRepositorySpec#serviceAccountName
     */
    readonly serviceAccountName?: string;
    /**
     * This flag tells the controller to suspend the reconciliation of this source.
     *
     * @schema OciRepositorySpec#suspend
     */
    readonly suspend?: boolean;
    /**
     * The timeout for remote OCI Repository operations like pulling, defaults to 60s.
     *
     * @schema OciRepositorySpec#timeout
     */
    readonly timeout?: string;
    /**
     * URL is a reference to an OCI artifact repository hosted
     * on a remote container registry.
     *
     * @schema OciRepositorySpec#url
     */
    readonly url: string;
    /**
     * Verify contains the secret name containing the trusted public keys
     * used to verify the signature and specifies which provider to use to check
     * whether OCI image is authentic.
     *
     * @schema OciRepositorySpec#verify
     */
    readonly verify?: OciRepositorySpecVerify;
}
/**
 * Converts an object of type 'OciRepositorySpec' to JSON representation.
 */
export declare function toJson_OciRepositorySpec(obj: OciRepositorySpec | undefined): Record<string, any> | undefined;
/**
 * CertSecretRef can be given the name of a Secret containing
 * either or both of
 *
 * - a PEM-encoded client certificate (`tls.crt`) and private
 * key (`tls.key`);
 * - a PEM-encoded CA certificate (`ca.crt`)
 *
 * and whichever are supplied, will be used for connecting to the
 * registry. The client cert and key are useful if you are
 * authenticating with a certificate; the CA cert is useful if
 * you are using a self-signed server certificate. The Secret must
 * be of type `Opaque` or `kubernetes.io/tls`.
 *
 * Note: Support for the `caFile`, `certFile` and `keyFile` keys have
 * been deprecated.
 *
 * @schema OciRepositorySpecCertSecretRef
 */
export interface OciRepositorySpecCertSecretRef {
    /**
     * Name of the referent.
     *
     * @schema OciRepositorySpecCertSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'OciRepositorySpecCertSecretRef' to JSON representation.
 */
export declare function toJson_OciRepositorySpecCertSecretRef(obj: OciRepositorySpecCertSecretRef | undefined): Record<string, any> | undefined;
/**
 * LayerSelector specifies which layer should be extracted from the OCI artifact.
 * When not specified, the first layer found in the artifact is selected.
 *
 * @schema OciRepositorySpecLayerSelector
 */
export interface OciRepositorySpecLayerSelector {
    /**
     * MediaType specifies the OCI media type of the layer
     * which should be extracted from the OCI Artifact. The
     * first layer matching this type is selected.
     *
     * @schema OciRepositorySpecLayerSelector#mediaType
     */
    readonly mediaType?: string;
    /**
     * Operation specifies how the selected layer should be processed.
     * By default, the layer compressed content is extracted to storage.
     * When the operation is set to 'copy', the layer compressed content
     * is persisted to storage as it is.
     *
     * @schema OciRepositorySpecLayerSelector#operation
     */
    readonly operation?: OciRepositorySpecLayerSelectorOperation;
}
/**
 * Converts an object of type 'OciRepositorySpecLayerSelector' to JSON representation.
 */
export declare function toJson_OciRepositorySpecLayerSelector(obj: OciRepositorySpecLayerSelector | undefined): Record<string, any> | undefined;
/**
 * The provider used for authentication, can be 'aws', 'azure', 'gcp' or 'generic'.
 * When not specified, defaults to 'generic'.
 *
 * @schema OciRepositorySpecProvider
 */
export declare enum OciRepositorySpecProvider {
    /** generic */
    GENERIC = "generic",
    /** aws */
    AWS = "aws",
    /** azure */
    AZURE = "azure",
    /** gcp */
    GCP = "gcp"
}
/**
 * ProxySecretRef specifies the Secret containing the proxy configuration
 * to use while communicating with the container registry.
 *
 * @schema OciRepositorySpecProxySecretRef
 */
export interface OciRepositorySpecProxySecretRef {
    /**
     * Name of the referent.
     *
     * @schema OciRepositorySpecProxySecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'OciRepositorySpecProxySecretRef' to JSON representation.
 */
export declare function toJson_OciRepositorySpecProxySecretRef(obj: OciRepositorySpecProxySecretRef | undefined): Record<string, any> | undefined;
/**
 * The OCI reference to pull and monitor for changes,
 * defaults to the latest tag.
 *
 * @schema OciRepositorySpecRef
 */
export interface OciRepositorySpecRef {
    /**
     * Digest is the image digest to pull, takes precedence over SemVer.
     * The value should be in the format 'sha256:<HASH>'.
     *
     * @schema OciRepositorySpecRef#digest
     */
    readonly digest?: string;
    /**
     * SemVer is the range of tags to pull selecting the latest within
     * the range, takes precedence over Tag.
     *
     * @schema OciRepositorySpecRef#semver
     */
    readonly semver?: string;
    /**
     * SemverFilter is a regex pattern to filter the tags within the SemVer range.
     *
     * @schema OciRepositorySpecRef#semverFilter
     */
    readonly semverFilter?: string;
    /**
     * Tag is the image tag to pull, defaults to latest.
     *
     * @schema OciRepositorySpecRef#tag
     */
    readonly tag?: string;
}
/**
 * Converts an object of type 'OciRepositorySpecRef' to JSON representation.
 */
export declare function toJson_OciRepositorySpecRef(obj: OciRepositorySpecRef | undefined): Record<string, any> | undefined;
/**
 * SecretRef contains the secret name containing the registry login
 * credentials to resolve image metadata.
 * The secret must be of type kubernetes.io/dockerconfigjson.
 *
 * @schema OciRepositorySpecSecretRef
 */
export interface OciRepositorySpecSecretRef {
    /**
     * Name of the referent.
     *
     * @schema OciRepositorySpecSecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'OciRepositorySpecSecretRef' to JSON representation.
 */
export declare function toJson_OciRepositorySpecSecretRef(obj: OciRepositorySpecSecretRef | undefined): Record<string, any> | undefined;
/**
 * Verify contains the secret name containing the trusted public keys
 * used to verify the signature and specifies which provider to use to check
 * whether OCI image is authentic.
 *
 * @schema OciRepositorySpecVerify
 */
export interface OciRepositorySpecVerify {
    /**
     * MatchOIDCIdentity specifies the identity matching criteria to use
     * while verifying an OCI artifact which was signed using Cosign keyless
     * signing. The artifact's identity is deemed to be verified if any of the
     * specified matchers match against the identity.
     *
     * @schema OciRepositorySpecVerify#matchOIDCIdentity
     */
    readonly matchOidcIdentity?: OciRepositorySpecVerifyMatchOidcIdentity[];
    /**
     * Provider specifies the technology used to sign the OCI Artifact.
     *
     * @schema OciRepositorySpecVerify#provider
     */
    readonly provider: OciRepositorySpecVerifyProvider;
    /**
     * SecretRef specifies the Kubernetes Secret containing the
     * trusted public keys.
     *
     * @schema OciRepositorySpecVerify#secretRef
     */
    readonly secretRef?: OciRepositorySpecVerifySecretRef;
}
/**
 * Converts an object of type 'OciRepositorySpecVerify' to JSON representation.
 */
export declare function toJson_OciRepositorySpecVerify(obj: OciRepositorySpecVerify | undefined): Record<string, any> | undefined;
/**
 * Operation specifies how the selected layer should be processed.
 * By default, the layer compressed content is extracted to storage.
 * When the operation is set to 'copy', the layer compressed content
 * is persisted to storage as it is.
 *
 * @schema OciRepositorySpecLayerSelectorOperation
 */
export declare enum OciRepositorySpecLayerSelectorOperation {
    /** extract */
    EXTRACT = "extract",
    /** copy */
    COPY = "copy"
}
/**
 * OIDCIdentityMatch specifies options for verifying the certificate identity,
 * i.e. the issuer and the subject of the certificate.
 *
 * @schema OciRepositorySpecVerifyMatchOidcIdentity
 */
export interface OciRepositorySpecVerifyMatchOidcIdentity {
    /**
     * Issuer specifies the regex pattern to match against to verify
     * the OIDC issuer in the Fulcio certificate. The pattern must be a
     * valid Go regular expression.
     *
     * @schema OciRepositorySpecVerifyMatchOidcIdentity#issuer
     */
    readonly issuer: string;
    /**
     * Subject specifies the regex pattern to match against to verify
     * the identity subject in the Fulcio certificate. The pattern must
     * be a valid Go regular expression.
     *
     * @schema OciRepositorySpecVerifyMatchOidcIdentity#subject
     */
    readonly subject: string;
}
/**
 * Converts an object of type 'OciRepositorySpecVerifyMatchOidcIdentity' to JSON representation.
 */
export declare function toJson_OciRepositorySpecVerifyMatchOidcIdentity(obj: OciRepositorySpecVerifyMatchOidcIdentity | undefined): Record<string, any> | undefined;
/**
 * Provider specifies the technology used to sign the OCI Artifact.
 *
 * @schema OciRepositorySpecVerifyProvider
 */
export declare enum OciRepositorySpecVerifyProvider {
    /** cosign */
    COSIGN = "cosign",
    /** notation */
    NOTATION = "notation"
}
/**
 * SecretRef specifies the Kubernetes Secret containing the
 * trusted public keys.
 *
 * @schema OciRepositorySpecVerifySecretRef
 */
export interface OciRepositorySpecVerifySecretRef {
    /**
     * Name of the referent.
     *
     * @schema OciRepositorySpecVerifySecretRef#name
     */
    readonly name: string;
}
/**
 * Converts an object of type 'OciRepositorySpecVerifySecretRef' to JSON representation.
 */
export declare function toJson_OciRepositorySpecVerifySecretRef(obj: OciRepositorySpecVerifySecretRef | undefined): Record<string, any> | undefined;
//# sourceMappingURL=source.toolkit.fluxcd.io.d.ts.map