schema.graphql

"""
Directs the executor to defer this fragment when the `if` argument is true or undefined.
"""
directive @defer(
"""
Deferred when true or undefined.
"""
	if: Boolean
"""
Unique name
"""
	label: String
) on FRAGMENT_SPREAD | INLINE_FRAGMENT

"""
Marks an element of a GraphQL schema as no longer supported.
"""
directive @deprecated(
"""
Explains why this element was deprecated, usually also including a suggestion for how to access supported similar data. Formatted using the Markdown syntax, as specified by [CommonMark](https://commonmark.org/).
"""
	reason: String
) on FIELD_DEFINITION | ARGUMENT_DEFINITION | INPUT_FIELD_DEFINITION | ENUM_VALUE

"""
Directs the executor to include this field or fragment only when the `if` argument is true.
"""
directive @include(
"""
Included when true.
"""
	if: Boolean!
) on FIELD | FRAGMENT_SPREAD | INLINE_FRAGMENT

"""
Indicates exactly one field must be supplied and this field must not be `null`.
"""
directive @oneOf on INPUT_OBJECT

"""
Directs the executor to skip this field or fragment when the `if` argument is true.
"""
directive @skip(
"""
Skipped when true.
"""
	if: Boolean!
) on FIELD | FRAGMENT_SPREAD | INLINE_FRAGMENT

"""
Exposes a URL that specifies the behavior of this scalar.
"""
directive @specifiedBy(
"""
The URL that specifies the behavior of this scalar.
"""
	url: String!
) on SCALAR

enum ActivityLogActivityType {
"""
An application was deleted.
"""
	APPLICATION_DELETED
"""
An application was restarted.
"""
	APPLICATION_RESTARTED
"""
An application was scaled.
"""
	APPLICATION_SCALED
"""
An application was updated.
"""
	APPLICATION_UPDATED
"""
A generic kubernetes resource was created via apply.
"""
	GENERIC_KUBERNETES_RESOURCE_CREATED
"""
All activity log entries related to direct cluster changes.
"""
	CLUSTER_AUDIT
"""
Config was created.
"""
	CONFIG_CREATED
"""
Config was updated.
"""
	CONFIG_UPDATED
"""
Config was deleted.
"""
	CONFIG_DELETED
"""
Activity log entry for deployment activity.
"""
	DEPLOYMENT
"""
Activity log entry for team deploy key updates.
"""
	TEAM_DEPLOY_KEY_UPDATED
"""
Activity log entries related to job deletion.
"""
	JOB_DELETED
"""
Activity log entries related to job run deletion.
"""
	JOB_RUN_DELETED
"""
Activity log entries related to job triggering.
"""
	JOB_TRIGGERED
"""
Activity log entries related to job updates.
"""
	JOB_UPDATED
"""
Filter for Kafka credential creation events.
"""
	KAFKA_CREDENTIALS_CREATED
"""
Filter for Kafka topic update events.
"""
	KAFKA_TOPIC_UPDATED
"""
OpenSearch was created.
"""
	OPENSEARCH_CREATED
"""
OpenSearch was updated.
"""
	OPENSEARCH_UPDATED
"""
OpenSearch was deleted.
"""
	OPENSEARCH_DELETED
"""
Started service maintenance on OpenSearch instance.
"""
	OPENSEARCH_MAINTENANCE_STARTED
"""
Filter for credential creation events.
"""
	OPENSEARCH_CREDENTIALS_CREATED
"""
A user was granted access to a Postgres cluster
"""
	POSTGRES_GRANT_ACCESS
	"A personal Postgres access was created through the API broker"
	POSTGRES_PERSONAL_ACCESS_CREATED
	"Personal Postgres connection materials were retrieved"
	POSTGRES_PERSONAL_ACCESS_CONNECTION
	"A Postgres branch was deleted"
	POSTGRES_DELETED
"""
Reconciler enabled activity log entry.
"""
	RECONCILER_ENABLED
"""
Reconciler disabled activity log entry.
"""
	RECONCILER_DISABLED
"""
Reconciler configured activity log entry.
"""
	RECONCILER_CONFIGURED
"""
Repository was added to a team.
"""
	REPOSITORY_ADDED
"""
Repository was removed from a team.
"""
	REPOSITORY_REMOVED
"""
Secret was created.
"""
	SECRET_CREATED
"""
Secret was updated.
"""
	SECRET_UPDATED
"""
Secret value was added.
"""
	SECRET_VALUE_ADDED
"""
Secret value was updated.
"""
	SECRET_VALUE_UPDATED
"""
Secret value was removed.
"""
	SECRET_VALUE_REMOVED
"""
Secret was deleted.
"""
	SECRET_DELETED
"""
Secret values were viewed.
"""
	SECRET_VALUES_VIEWED
"""
A workload binding was added to a service account.
"""
	SERVICE_ACCOUNT_WORKLOAD_BINDING_ADDED
"""
A workload binding was removed from a service account.
"""
	SERVICE_ACCOUNT_WORKLOAD_BINDING_REMOVED
"""
Service account was created.
"""
	SERVICE_ACCOUNT_CREATED
"""
Service account was updated.
"""
	SERVICE_ACCOUNT_UPDATED
"""
Service account was deleted.
"""
	SERVICE_ACCOUNT_DELETED
"""
Role was assigned to a service account.
"""
	SERVICE_ACCOUNT_ROLE_ASSIGNED
"""
Role was revoked from a service account.
"""
	SERVICE_ACCOUNT_ROLE_REVOKED
"""
Service account token was created.
"""
	SERVICE_ACCOUNT_TOKEN_CREATED
"""
Service account token was updated.
"""
	SERVICE_ACCOUNT_TOKEN_UPDATED
"""
Service account token was deleted.
"""
	SERVICE_ACCOUNT_TOKEN_DELETED
"""
Team was created.
"""
	TEAM_CREATED
"""
Team was updated.
"""
	TEAM_UPDATED
"""
Team delete key was created.
"""
	TEAM_CREATE_DELETE_KEY
"""
Team delete key was confirmed.
"""
	TEAM_CONFIRM_DELETE_KEY
"""
Team member was added.
"""
	TEAM_MEMBER_ADDED
"""
Team member was removed.
"""
	TEAM_MEMBER_REMOVED
"""
Team member role was set.
"""
	TEAM_MEMBER_SET_ROLE
"""
Team environment was updated.
"""
	TEAM_ENVIRONMENT_UPDATED
"""
Tunnel was created.
"""
	TUNNEL_CREATED
"""
Tunnel was deleted.
"""
	TUNNEL_DELETED
"""
Unleash instance was created.
"""
	UNLEASH_INSTANCE_CREATED
"""
Unleash instance was updated.
"""
	UNLEASH_INSTANCE_UPDATED
"""
Unleash instance was deleted.
"""
	UNLEASH_INSTANCE_DELETED
"""
Valkey was created.
"""
	VALKEY_CREATED
"""
Valkey was updated.
"""
	VALKEY_UPDATED
"""
Valkey was deleted.
"""
	VALKEY_DELETED
"""
Started service maintenance on Valkey instance.
"""
	VALKEY_MAINTENANCE_STARTED
"""
Filter for credential creation events.
"""
	VALKEY_CREDENTIALS_CREATED
"""
Activity log entry for when a vulnerability is updated.
"""
	VULNERABILITY_UPDATED
}

"""
A single facet item for activity types.
"""
type ActivityLogActivityTypeFacetItem {
"""
The activity type enum value, usable in the ActivityLogFilter.
"""
	activityType: ActivityLogActivityType!
"""
Number of matching entries.
"""
	count: Int!
}

"""
Interface for activity log entries.
"""
interface ActivityLogEntry {
"""
Interface for activity log entries.
"""
	id: ID!
"""
Interface for activity log entries.
"""
	actor: String!
"""
Interface for activity log entries.
"""
	createdAt: Time!
"""
Interface for activity log entries.
"""
	message: String!
"""
Interface for activity log entries.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Interface for activity log entries.
"""
	resourceName: String!
"""
Interface for activity log entries.
"""
	teamSlug: Slug
"""
Interface for activity log entries.
"""
	environmentName: String
}

"""
Activity log connection.
"""
type ActivityLogEntryConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [ActivityLogEntry!]!
"""
List of edges.
"""
	edges: [ActivityLogEntryEdge!]!
"""
Facets for the activity log entries. Provides distribution counts to help narrow down results.
Facet counts are computed over the full result set (ignoring pagination) but respect the current filter.
"""
	facets: ActivityLogFacets
}

"""
Activity log edge.
"""
type ActivityLogEntryEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The log entry.
"""
	node: ActivityLogEntry!
}

"""
The type of the resource that was affected by the activity.
"""
enum ActivityLogEntryResourceType {
"""
Unknown type.
"""
	UNKNOWN
"""
All activity log entries related to applications will use this resource type.
"""
	APP
"""
All activity log entries related to direct cluster changes.
"""
	CLUSTER_AUDIT
"""
All activity log entries related to configs will use this resource type.
"""
	CONFIG
"""
All activity log entries related to deploy keys will use this resource type.
"""
	DEPLOY_KEY
"""
All activity log entries related to jobs will use this resource type.
"""
	JOB
"""
All activity log entries related to Kafka topics will use this resource type.
"""
	KAFKA_TOPIC
"""
All activity log entries related to OpenSearches will use this resource type.
"""
	OPENSEARCH
"""
All activity log entries related to Postgres clusters will use this resource type.
"""
	POSTGRES
"""
All activity log entries related to reconcilers will use this resource type.
"""
	RECONCILER
"""
All activity log entries related to repositories will use this resource type.
"""
	REPOSITORY
"""
All activity log entries related to secrets will use this resource type.
"""
	SECRET
	SERVICE_ACCOUNT
"""
All activity log entries related to teams will use this resource type.
"""
	TEAM
"""
All activity log entries related to Tunnels will use this resource type.
"""
	TUNNEL
"""
All activity log entries related to unleash will use this resource type.
"""
	UNLEASH
"""
All activity log entries related to Valkeys will use this resource type.
"""
	VALKEY
"""
All activity log entries related to vulnerabilities will use this resource type.
"""
	VULNERABILITY
}

"""
Facets for activity log entries, providing distribution counts across different dimensions.
"""
type ActivityLogFacets {
"""
Distribution of entries by activity type. These values can be used with the ActivityLogFilter.
"""
	activityTypes: [ActivityLogActivityTypeFacetItem!]!
"""
Distribution of entries by resource type.
"""
	resourceTypes: [ActivityLogResourceTypeFacetItem!]!
"""
Distribution of entries by environment.
"""
	environments: [StringFacetItem!]!
}

input ActivityLogFilter {
	activityTypes: [ActivityLogActivityType!]
	resourceTypes: [ActivityLogEntryResourceType!]
	environments: [String!]
	from: Time
	to: Time
}

"""
A single facet item for resource types.
"""
type ActivityLogResourceTypeFacetItem {
"""
The resource type.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Number of matching entries.
"""
	count: Int!
}

interface ActivityLogger {
	activityLog(
		first: Int
		after: Cursor
		last: Int
		before: Cursor
		filter: ActivityLogFilter
	): ActivityLogEntryConnection!
}

input AddConfigValueInput {
	name: String!
	environmentName: String!
	teamSlug: Slug!
	value: ConfigValueInput!
}

type AddConfigValuePayload {
"""
The updated config.
"""
	config: Config
}

input AddRepositoryToTeamInput {
	teamSlug: Slug!
	repositoryName: String!
}

type AddRepositoryToTeamPayload {
"""
Repository that was added to the team.
"""
	repository: Repository
}

input AddSecretValueInput {
	name: String!
	environment: String!
	team: Slug!
	value: SecretValueInput!
}

type AddSecretValuePayload {
"""
The updated secret.
"""
	secret: Secret
}

input AddTeamMemberInput {
	teamSlug: Slug!
	userEmail: String!
	role: TeamMemberRole!
}

type AddTeamMemberPayload {
"""
The added team member.
"""
	member: TeamMember
}

input AddWorkloadToServiceAccountInput {
	serviceAccountID: ID!
	environment: String!
	teamSlug: Slug!
	workloadName: String!
}

type AddWorkloadToServiceAccountPayload {
"""
The service account that the workload was bound to.
"""
	serviceAccount: ServiceAccount
"""
The created binding.
"""
	binding: ServiceAccountWorkloadBinding
}

"""
Alert interface.
"""
interface Alert {
"""
Alert interface.
"""
	id: ID!
"""
Alert interface.
"""
	name: String!
"""
Alert interface.
"""
	team: Team!
"""
Alert interface.
"""
	teamEnvironment: TeamEnvironment!
"""
Alert interface.
"""
	state: AlertState!
"""
Alert interface.
"""
	query: String!
"""
Alert interface.
"""
	duration: Float!
}

"""
AlertConnection connection.
"""
type AlertConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [Alert!]!
"""
List of edges.
"""
	edges: [AlertEdge!]!
"""
Facets for alerts. Provides distribution counts to help narrow down results.
Facet counts are computed over the full result set (ignoring pagination) but respect the current filter.
"""
	facets: AlertFacets
}

"""
Alert edge.
"""
type AlertEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The Alert.
"""
	node: Alert!
}

"""
Facets for alerts, providing distribution counts across different dimensions.
"""
type AlertFacets {
"""
Distribution of alerts by environment.
"""
	environments: [StringFacetItem!]!
"""
Distribution of alerts by state.
"""
	states: [AlertStateFacetItem!]!
}

"""
Ordering options when fetching alerts.
"""
input AlertOrder {
"""
Ordering options when fetching alerts.
"""
	field: AlertOrderField!
"""
Ordering options when fetching alerts.
"""
	direction: OrderDirection!
}

"""
Fields to order alerts in an environment by.
"""
enum AlertOrderField {
"""
Order by name.
"""
	NAME
"""
Order by state.
"""
	STATE
"""
ENVIRONMENT
"""
	ENVIRONMENT
}

enum AlertState {
"""
Only return alerts that are firing.
"""
	FIRING
"""
Only return alerts that are inactive.
"""
	INACTIVE
"""
Only return alerts that are pending.
"""
	PENDING
}

"""
A single facet item for alert states.
"""
type AlertStateFacetItem {
"""
The alert state.
"""
	state: AlertState!
"""
Number of matching alerts.
"""
	count: Int!
}

input AllowTeamAccessToUnleashInput {
	teamSlug: Slug!
	allowedTeamSlug: Slug!
}

type AllowTeamAccessToUnleashPayload {
	unleash: UnleashInstance
}

"""
An application lets you run one or more instances of a container image on the [Nais platform](https://nais.io/).

Learn more about how to create and configure your applications in the [Nais documentation](https://docs.nais.io/workloads/application/).
"""
type Application implements Node & Workload & ActivityLogger{
"""
The globally unique ID of the application.
"""
	id: ID!
"""
The name of the application.
"""
	name: String!
"""
The team that owns the application.
"""
	team: Team!
"""
The team environment for the application.
"""
	teamEnvironment: TeamEnvironment!
"""
The container image of the application.
"""
	image: ContainerImage!
"""
Resources for the application.
"""
	resources: ApplicationResources!
"""
List of ingresses for the application.
"""
	ingresses: [Ingress!]!
"""
List of authentication and authorization for the application.
"""
	authIntegrations: [ApplicationAuthIntegrations!]!
"""
User-defined labels attached to this application.
"""
	labels: [ResourceLabel!]!
"""
The application manifest.
"""
	manifest: ApplicationManifest!
"""
The application instances.
"""
	instances(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): ApplicationInstanceConnection!
"""
If set, when the application was marked for deletion.
"""
	deletionStartedAt: Time
"""
Activity log associated with the application.
"""
	activityLog(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Filter items.
"""
		filter: ActivityLogFilter
	): ActivityLogEntryConnection!
"""
The application state.
"""
	state: ApplicationState!
"""
Issues that affect the application.
"""
	issues(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: IssueOrder
"""
Filtering options for items returned from the connection.
"""
		filter: ResourceIssueFilter
	): IssueConnection!
"""
History of previous releases of this application, ordered by most recent first.
"""
	history: [ApplicationHistory!]!
"""
BigQuery datasets referenced by the application. This does not currently support pagination, but will return all available datasets.
"""
	bigQueryDatasets(
"""
Ordering options for items returned from the connection.
"""
		orderBy: BigQueryDatasetOrder
	): BigQueryDatasetConnection!
"""
Google Cloud Storage referenced by the application. This does not currently support pagination, but will return all available buckets.
"""
	buckets(
"""
Ordering options for items returned from the connection.
"""
		orderBy: BucketOrder
	): BucketConnection!
"""
Configs used by the application.
"""
	configs(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): ConfigConnection!
"""
The cost for the application.
"""
	cost: WorkloadCost!
"""
List of deployments for the application.
"""
	deployments(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): DeploymentConnection!
"""
Instance groups for the application. An instance group represents a set of identical instances.
All instances in a group share the same configuration.
"""
	instanceGroups: [InstanceGroup!]!
"""
Kafka topics the application has access to. This does not currently support pagination, but will return all available Kafka topics.
"""
	kafkaTopicAcls(
"""
Ordering options for items returned from the connection.
"""
		orderBy: KafkaTopicAclOrder
	): KafkaTopicAclConnection!
"""
List of log destinations for the application.
"""
	logDestinations: [LogDestination!]!
"""
Network policies for the application.
"""
	networkPolicy: NetworkPolicy!
"""
OpenSearch instance referenced by the workload.
"""
	openSearch: OpenSearch
"Active PostgresBranches for all Postgres entries in uses.postgres."
	postgresBranches(
"""
Ordering options for items returned from the connection.
"""
		orderBy: PostgresBranchOrder
	): PostgresBranchConnection!
"""
Secrets used by the application.
"""
	secrets(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): SecretConnection!
"""
The Nais service account this application is bound to, if any. Authenticating using the application's
Workload Token will then act as this Nais service account.
"""
	serviceAccount: ServiceAccount
"""
SQL instances referenced by the application. This does not currently support pagination, but will return all available SQL instances.
"""
	sqlInstances(
"""
Ordering options for items returned from the connection.
"""
		orderBy: SqlInstanceOrder
	): SqlInstanceConnection!
	utilization: WorkloadUtilization!
"""
Valkey instances referenced by the application. This does not currently support pagination, but will return all available Valkey instances.
"""
	valkeys(
"""
Ordering options for items returned from the connection.
"""
		orderBy: ValkeyOrder
	): ValkeyConnection!
"""
Get the vulnerability summary history for application.
"""
	imageVulnerabilityHistory(
"""
Get vulnerability summary from given date until today.
"""
		from: Date!
	): ImageVulnerabilityHistory!
"""
Get the mean time to fix history for an application.
"""
	vulnerabilityFixHistory(
		from: Date!
	): VulnerabilityFixHistory!
}

"""
Authentication integrations for the application.
"""
union ApplicationAuthIntegrations =EntraIDAuthIntegration | IDPortenAuthIntegration | MaskinportenAuthIntegration | TokenXAuthIntegration

"""
Application connection.
"""
type ApplicationConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [Application!]!
"""
List of edges.
"""
	edges: [ApplicationEdge!]!
"""
Facets for the applications. Provides distribution counts to help narrow down results.
Facet counts are computed over the full result set (ignoring pagination) but respect the current filter.
"""
	facets: ApplicationFacets
}

type ApplicationCreatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the creation.
"""
	data: GenericKubernetesResourceActivityLogEntryData!
}

type ApplicationDeletedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

"""
Application edge.
"""
type ApplicationEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The application.
"""
	node: Application!
}

"""
Facets for applications, providing distribution counts across different dimensions.
"""
type ApplicationFacets {
"""
Distribution of applications by environment.
"""
	environments: [StringFacetItem!]!
"""
Distribution of applications by state.
"""
	states: [ApplicationStateFacetItem!]!
"""
Distribution of applications by user-defined labels.
"""
	labels: [LabelFacetItem!]!
}

"""
A historical release entry for an application.
"""
type ApplicationHistory {
"""
The full container image reference including tag.
"""
	image: String!
"""
When this image was deployed.
"""
	deployedAt: Time!
}

type ApplicationInstance implements Node{
	id: ID!
	name: String!
	image: ContainerImage!
	restarts: Int!
	created: Time!
	status: ApplicationInstanceStatus!
	instanceUtilization(
		resourceType: UtilizationResourceType!
	): ApplicationInstanceUtilization!
}

type ApplicationInstanceConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [ApplicationInstance!]!
"""
List of edges.
"""
	edges: [ApplicationInstanceEdge!]!
}

type ApplicationInstanceEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The instance.
"""
	node: ApplicationInstance!
}

enum ApplicationInstanceState {
	RUNNING
	STARTING
	FAILING
	TERMINATED
	UNKNOWN
}

type ApplicationInstanceStatus {
	state: ApplicationInstanceState!
"""
A user-friendly description of the current state.
"""
	message: String!
"""
Whether the container is passing its readiness check and can receive traffic.
"""
	ready: Boolean!
"""
The reason the container last terminated, if applicable.
This is populated even when the instance is currently running, to help debug restart loops.
Example values: "OOMKilled", "Error", "Completed".
"""
	lastExitReason: String
"""
The exit code from the last container termination, if applicable.
"""
	lastExitCode: Int
"""
The timestamp of the last container termination, if applicable.
This is populated even when the instance is currently running, to help debug restart loops.
"""
	lastExitTimestamp: Time
}

type ApplicationInstanceUtilization {
"""
Get the current usage for the requested resource type.
"""
	current: Float!
}

"""
The manifest that describes the application.
"""
type ApplicationManifest implements WorkloadManifest{
"""
The manifest content, serialized as a YAML document.
"""
	content: String!
}

"""
Ordering options when fetching applications.
"""
input ApplicationOrder {
"""
Ordering options when fetching applications.
"""
	field: ApplicationOrderField!
"""
Ordering options when fetching applications.
"""
	direction: OrderDirection!
}

"""
Fields to order applications by.
"""
enum ApplicationOrderField {
"""
Order applications by name.
"""
	NAME
"""
Order applications by the name of the environment.
"""
	ENVIRONMENT
"""
Order applications by state.
"""
	STATE
"""
Order applications by the deployment time.
"""
	DEPLOYMENT_TIME
"""
Order applications by issue severity
"""
	ISSUES
}

type ApplicationResources implements WorkloadResources{
"""
Instances using resources above this threshold will be killed.
"""
	limits: WorkloadResourceQuantity!
"""
How many resources are allocated to each instance.
"""
	requests: WorkloadResourceQuantity!
"""
Scaling strategies for the application.
"""
	scaling: ApplicationScaling!
}

"""
An issue raised when an application keeps restarting repeatedly.
"""
type ApplicationRestartLoopIssue implements Issue & Node{
"""
Unique identifier for this issue.
"""
	id: ID!
"""
The team environment where the issue was detected.
"""
	teamEnvironment: TeamEnvironment!
"""
The severity of the issue.
"""
	severity: Severity!
"""
A human-readable description of the issue.
"""
	message: String!
"""
The workload that is stuck in a restart loop.
"""
	workload: Workload!
"""
The number of container restarts.
"""
	restartCount: Int!
"""
The reason for the last container exit.
"""
	lastExitReason: String!
"""
The timestamp of the last container exit.
"""
	lastExitTimestamp: Time!
}

type ApplicationRestartedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type ApplicationScaledActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the update.
"""
	data: ApplicationScaledActivityLogEntryData!
}

type ApplicationScaledActivityLogEntryData {
	newSize: Int!
	direction: ScalingDirection!
}

"""
The scaling configuration of an application.
"""
type ApplicationScaling {
"""
The minimum number of application instances.
"""
	minInstances: Int!
"""
The maximum number of application instances.
"""
	maxInstances: Int!
"""
Scaling strategies for the application.
"""
	strategies: [ScalingStrategy!]!
}

enum ApplicationState {
"""
The application is running.
"""
	RUNNING
"""
The application is not running.
"""
	NOT_RUNNING
"""
The application state is unknown.
"""
	UNKNOWN
}

"""
A single facet item for application states.
"""
type ApplicationStateFacetItem {
"""
The application state.
"""
	state: ApplicationState!
"""
Number of matching applications.
"""
	count: Int!
}

"""
Activity log entry for when an application is updated.
"""
type ApplicationUpdatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the update.
"""
	data: ApplicationUpdatedActivityLogEntryData!
}

"""
Data associated with an application update activity log entry.
"""
type ApplicationUpdatedActivityLogEntryData {
"""
The fields that changed during the update.
"""
	changedFields: [ResourceChangedField!]!
"""
GitHub Actions OIDC token claims at the time of the apply. Only present when the request was authenticated via a GitHub token.
"""
	gitHubActorClaims: GitHubActorClaims
}

input AssignRoleToServiceAccountInput {
	serviceAccountID: ID!
	roleName: String!
}

type AssignRoleToServiceAccountPayload {
"""
The service account that had a role assigned.
"""
	serviceAccount: ServiceAccount
}

type AuditLog {
"""
Link to the audit log for this SQL instance.
"""
	logUrl: String!
}

"""
Interface for authentication and authorization integrations.

Read more about this topic in the [Nais documentation](https://docs.nais.io/auth/).
"""
interface AuthIntegration {
"""
Interface for authentication and authorization integrations.

Read more about this topic in the [Nais documentation](https://docs.nais.io/auth/).
"""
	name: String!
}

"""
Authenticated user type.
"""
union AuthenticatedUser =User | ServiceAccount

type BigQueryDataset implements Persistence & Node{
	id: ID!
	name: String!
	team: Team!
	teamEnvironment: TeamEnvironment!
	cascadingDelete: Boolean!
	description: String
	access(
		first: Int
		after: Cursor
		last: Int
		before: Cursor
		orderBy: BigQueryDatasetAccessOrder
	): BigQueryDatasetAccessConnection!
	status: BigQueryDatasetStatus!
	workload: Workload
"""
User-defined labels attached to this BigQuery dataset.
"""
	labels: [ResourceLabel!]!
	cost: BigQueryDatasetCost!
}

type BigQueryDatasetAccess {
	role: String!
	email: String!
}

type BigQueryDatasetAccessConnection {
	pageInfo: PageInfo!
	nodes: [BigQueryDatasetAccess!]!
	edges: [BigQueryDatasetAccessEdge!]!
}

type BigQueryDatasetAccessEdge {
	cursor: Cursor!
	node: BigQueryDatasetAccess!
}

input BigQueryDatasetAccessOrder {
	field: BigQueryDatasetAccessOrderField!
	direction: OrderDirection!
}

enum BigQueryDatasetAccessOrderField {
	ROLE
	EMAIL
}

type BigQueryDatasetConnection {
	pageInfo: PageInfo!
	nodes: [BigQueryDataset!]!
	edges: [BigQueryDatasetEdge!]!
"""
Facets for BigQuery datasets. Provides distribution counts to help narrow down results.
Facet counts are computed over the full result set (ignoring pagination) but respect the current filter.
"""
	facets: BigQueryDatasetFacets
}

type BigQueryDatasetCost {
	sum: Float!
}

type BigQueryDatasetEdge {
	cursor: Cursor!
	node: BigQueryDataset!
}

"""
Facets for BigQuery datasets, providing distribution counts across different dimensions.
"""
type BigQueryDatasetFacets {
"""
Distribution of datasets by environment.
"""
	environments: [StringFacetItem!]!
"""
Distribution of datasets by user-defined labels.
"""
	labels: [LabelFacetItem!]!
}

"""
Input for filtering BigQuery datasets.
"""
input BigQueryDatasetFilter {
"""
Input for filtering BigQuery datasets.
"""
	name: String
"""
Input for filtering BigQuery datasets.
"""
	environments: [String!]
"""
Input for filtering BigQuery datasets.
"""
	labels: [LabelFilter!]
}

input BigQueryDatasetOrder {
	field: BigQueryDatasetOrderField!
	direction: OrderDirection!
}

enum BigQueryDatasetOrderField {
	NAME
	ENVIRONMENT
}

type BigQueryDatasetStatus {
	creationTime: Time!
	lastModifiedTime: Time
}

"""
The `Boolean` scalar type represents `true` or `false`.
"""
scalar Boolean

"""
A shared facet item representing a boolean distribution (e.g., in-use, high availability).
"""
type BooleanFacetItem {
"""
The boolean value.
"""
	value: Boolean!
"""
Number of matching resources.
"""
	count: Int!
}

type Bucket implements Persistence & Node{
	id: ID!
	name: String!
	team: Team!
	teamEnvironment: TeamEnvironment!
	cascadingDelete: Boolean!
	publicAccessPrevention: String!
	uniformBucketLevelAccess: Boolean!
	workload: Workload
"""
User-defined labels attached to this bucket.
"""
	labels: [ResourceLabel!]!
}

type BucketConnection {
	pageInfo: PageInfo!
	nodes: [Bucket!]!
	edges: [BucketEdge!]!
"""
Facets for buckets. Provides distribution counts to help narrow down results.
Facet counts are computed over the full result set (ignoring pagination) but respect the current filter.
"""
	facets: BucketFacets
}

type BucketEdge {
	cursor: Cursor!
	node: Bucket!
}

"""
Facets for buckets, providing distribution counts across different dimensions.
"""
type BucketFacets {
"""
Distribution of buckets by environment.
"""
	environments: [StringFacetItem!]!
"""
Distribution of buckets by user-defined labels.
"""
	labels: [LabelFacetItem!]!
}

"""
Input for filtering buckets.
"""
input BucketFilter {
"""
Input for filtering buckets.
"""
	name: String
"""
Input for filtering buckets.
"""
	environments: [String!]
"""
Input for filtering buckets.
"""
	labels: [LabelFilter!]
}

input BucketOrder {
	field: BucketOrderField!
	direction: OrderDirection!
}

enum BucketOrderField {
	NAME
	ENVIRONMENT
}

"""
A scaling strategy based on CPU usage

Read more: https://docs.nais.io/workloads/application/reference/automatic-scaling/#cpu-based-scaling
"""
type CPUScalingStrategy {
"""
The threshold that must be met for the scaling to trigger.
"""
	threshold: Int!
}

type CVE implements Node{
"""
The globally unique ID of the CVE.
"""
	id: ID!
"""
The unique identifier of the CVE. E.g. CVE-****-****.
"""
	identifier: String!
"""
Severity of the CVE.
"""
	severity: ImageVulnerabilitySeverity!
"""
Title of the CVE
"""
	title: String!
"""
Description of the CVE.
"""
	description: String!
"""
Link to the CVE details.
"""
	detailsLink: String!
"""
CVSS score of the CVE.
"""
	cvssScore: Float
"""
Priority of the CVE based on threat intelligence signals.
"""
	priority: CVEPriority!
"""
EPSS score of the CVE (probability of exploitation).
"""
	epssScore: Float
"""
EPSS percentile of the CVE.
"""
	epssPercentile: Float
"""
Whether the CVE has a Known Exploited Vulnerability (KEV) entry.
"""
	hasKevEntry: Boolean!
"""
Whether the CVE is known to be used in ransomware attacks.
"""
	knownRansomwareUse: Boolean!
"""
Affected workloads
"""
	workloads(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Filter workloads. When teamSlugs is set only workloads belonging to those teams are returned.
"""
		filter: CVEWorkloadsFilter
	): WorkloadWithVulnerabilityConnection!
}

type CVEConnection {
"""
Information to aid in pagination.
"""
	pageInfo: PageInfo!
"""
List of edges.
"""
	edges: [CVEEdge!]!
"""
List of nodes.
"""
	nodes: [CVE!]!
}

type CVEEdge {
"""
A cursor for use in pagination.
"""
	cursor: Cursor!
"""
The CVE.
"""
	node: CVE!
}

"""
Ordering options when fetching CVEs.
"""
input CVEOrder {
"""
Ordering options when fetching CVEs.
"""
	field: CVEOrderField!
"""
Ordering options when fetching CVEs.
"""
	direction: OrderDirection!
}

enum CVEOrderField {
"""
Order by CVE identifier.
"""
	IDENTIFIER
"""
Order by CVE severity.
"""
	SEVERITY
"""
Order by CVSS score.
"""
	CVSS_SCORE
"""
Order by number of affected workloads.
"""
	AFFECTED_WORKLOADS_COUNT
"""
Order by CVE priority derived from threat intelligence signals.
"""
	PRIORITY
}

"""
Operational priority levels for vulnerabilities and CVEs.
"""
enum CVEPriority {
"""
Vulnerability is known to be actively exploited and requires immediate action.
"""
	URGENT
"""
Vulnerability is associated with ransomware or has a high EPSS percentile.
"""
	HIGH
"""
Vulnerability has a critical or high severity and elevated EPSS percentile.
"""
	ELEVATED
"""
Vulnerability requires monitoring but no immediate action.
"""
	MONITOR
}

"""
Filter for workloads affected by a CVE. When teamSlugs is provided only workloads belonging to those teams are returned.
"""
input CVEWorkloadsFilter {
"""
Filter for workloads affected by a CVE. When teamSlugs is provided only workloads belonging to those teams are returned.
"""
	teamSlugs: [Slug!]
}

input ChangeDeploymentKeyInput {
	teamSlug: Slug!
}

type ChangeDeploymentKeyPayload {
"""
The updated deploy key.
"""
	deploymentKey: DeploymentKey
}

type ClusterAuditActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: ClusterAuditActivityLogEntryData!
}

type ClusterAuditActivityLogEntryData {
"""
The action that was performed.
"""
	action: String!
"""
The kind of resource that was affected by the action.
"""
	resourceKind: String!
}

"""
A config is a collection of key-value pairs.
"""
type Config implements Node & ActivityLogger{
"""
The globally unique ID of the config.
"""
	id: ID!
"""
The name of the config.
"""
	name: String!
"""
The environment the config exists in.
"""
	teamEnvironment: TeamEnvironment!
"""
The team that owns the config.
"""
	team: Team!
"""
The values stored in the config.
"""
	values: [ConfigValue!]!
"""
User-defined labels attached to the config.
"""
	labels: [ResourceLabel!]!
"""
Applications that use the config.
"""
	applications(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): ApplicationConnection!
"""
Jobs that use the config.
"""
	jobs(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): JobConnection!
"""
Workloads that use the config.
"""
	workloads(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): WorkloadConnection!
"""
Last time the config was modified.
"""
	lastModifiedAt: Time
"""
User who last modified the config.
"""
	lastModifiedBy: User
"""
Activity log associated with the config.
"""
	activityLog(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Filter items.
"""
		filter: ActivityLogFilter
	): ActivityLogEntryConnection!
}

type ConfigConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [Config!]!
"""
List of edges.
"""
	edges: [ConfigEdge!]!
"""
Facets for configs. Provides distribution counts to help narrow down results.
Facet counts are computed over the full result set (ignoring pagination) but respect the current filter.
"""
	facets: ConfigFacets
}

type ConfigCreatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type ConfigDeletedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type ConfigEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The Config.
"""
	node: Config!
}

"""
Facets for configs, providing distribution counts across different dimensions.
"""
type ConfigFacets {
"""
Distribution of configs by environment.
"""
	environments: [StringFacetItem!]!
"""
Distribution of configs by whether they are in use by any workload.
"""
	inUse: [BooleanFacetItem!]!
"""
Distribution of configs by user-defined labels.
"""
	labels: [LabelFacetItem!]!
}

"""
Input for filtering the configs of a team.
"""
input ConfigFilter {
"""
Input for filtering the configs of a team.
"""
	name: String
"""
Input for filtering the configs of a team.
"""
	inUse: Boolean
"""
Input for filtering the configs of a team.
"""
	environments: [String!]
"""
Input for filtering the configs of a team.
"""
	labels: [LabelFilter!]
}

input ConfigOrder {
	field: ConfigOrderField!
	direction: OrderDirection!
}

enum ConfigOrderField {
"""
Order configs by name.
"""
	NAME
"""
Order configs by the name of the environment.
"""
	ENVIRONMENT
"""
Order configs by the last time it was modified.
"""
	LAST_MODIFIED_AT
}

type ConfigUpdatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: ConfigUpdatedActivityLogEntryData!
}

type ConfigUpdatedActivityLogEntryData {
"""
The fields that were updated.
"""
	updatedFields: [ConfigUpdatedActivityLogEntryDataUpdatedField!]!
}

type ConfigUpdatedActivityLogEntryDataUpdatedField {
"""
The name of the field that was updated.
"""
	field: String!
"""
The old value of the field.
"""
	oldValue: String
"""
The new value of the field.
"""
	newValue: String
}

type ConfigValue {
"""
The name of the config value.
"""
	name: String!
"""
The config value itself.
"""
	value: String!
"""
The encoding of the value. PLAIN_TEXT for UTF-8 text, BASE64 for binary data.
"""
	encoding: ValueEncoding!
}

input ConfigValueInput {
	name: String!
	value: String!
	encoding: ValueEncoding
}

input ConfigureReconcilerInput {
	name: String!
	config: [ReconcilerConfigInput!]!
}

input ConfirmTeamDeletionInput {
	slug: Slug!
	key: String!
}

type ConfirmTeamDeletionPayload {
"""
Whether or not the asynchronous deletion process was started.
"""
	deletionStarted: Boolean
}

"""
Container image.
"""
type ContainerImage implements Node & ActivityLogger{
"""
The globally unique ID of the container image node.
"""
	id: ID!
"""
Name of the container image.
"""
	name: String!
"""
Tag of the container image. Empty when the image reference has no explicit tag,
for example when it is referenced by digest only.
"""
	tag: String!
"""
Digest of the container image, if present.
"""
	digest: String
"""
Activity log associated with the container image.
"""
	activityLog(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Filter items.
"""
		filter: ActivityLogFilter
	): ActivityLogEntryConnection!
"""
SBOM pipeline status and processing information for this image.
"""
	sbom: ContainerImageSBOM!
"""
Whether the image has a software bill of materials (SBOM) attached to it.
"""
	hasSBOM: Boolean! @deprecated(reason: "Use sbom { status } == READY to check if an SBOM is attached.")
"""
Get the vulnerabilities of the image.
"""
	vulnerabilities(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Filter the vulnerabilities.
"""
		filter: ImageVulnerabilityFilter
"""
Ordering options for items returned from the connection.
"""
		orderBy: ImageVulnerabilityOrder
	): ImageVulnerabilityConnection!
"""
Get the summary of the vulnerabilities of the image.
"""
	vulnerabilitySummary: ImageVulnerabilitySummary
"""
Workloads using this container image.
"""
	workloadReferences(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): ContainerImageWorkloadReferenceConnection!
}

"""
SBOM metadata for a container image, including pipeline status and processing
information. This type is accessed through ContainerImage.sbom.
"""
type ContainerImageSBOM implements Node{
"""
The globally unique ID of the container image SBOM node.
"""
	id: ID!
"""
The SBOM pipeline status.
"""
	status: SBOMStatus!
"""
The timestamp when SBOM processing started for this image.
Useful as a progress indicator when status is PROCESSING.
"""
	processingStartedAt: Time
}

type ContainerImageWorkloadReference {
"""
The workload using the container image.
"""
	workload: Workload!
}

type ContainerImageWorkloadReferenceConnection {
"""
Information to aid in pagination.
"""
	pageInfo: PageInfo!
"""
List of edges.
"""
	edges: [ContainerImageWorkloadReferenceEdge!]!
"""
List of nodes.
"""
	nodes: [ContainerImageWorkloadReference!]!
}

type ContainerImageWorkloadReferenceEdge {
"""
A cursor for use in pagination.
"""
	cursor: Cursor!
"""
The workload reference.
"""
	node: ContainerImageWorkloadReference!
}

type CostMonthlySummary {
"""
The cost series.
"""
	series: [ServiceCostSeries!]!
}

input CreateConfigInput {
	name: String!
	environmentName: String!
	teamSlug: Slug!
	labels: [ResourceLabelInput!]
	values: [ConfigValueInput!]
}

type CreateConfigPayload {
"""
The created config.
"""
	config: Config
}

input CreateKafkaCredentialsInput {
	teamSlug: Slug!
	environmentName: String!
	ttl: String!
}

type CreateKafkaCredentialsPayload {
"""
The generated credentials.
"""
	credentials: KafkaCredentials!
}

input CreateOpenSearchCredentialsInput {
	teamSlug: Slug!
	environmentName: String!
	instanceName: String!
	permission: OpenSearchPermission!
	ttl: String!
}

type CreateOpenSearchCredentialsPayload {
"""
The generated credentials.
"""
	credentials: OpenSearchCredentials!
}

input CreateOpenSearchInput {
	name: String!
	environmentName: String!
	teamSlug: Slug!
	tier: OpenSearchTier!
	memory: OpenSearchMemory!
	version: OpenSearchMajorVersion!
	storageGB: Int!
	shardIndexingPressureEnabled: Boolean
	shardIndexingPressureEnforced: Boolean
	indicesQueryBoolMaxClauseCount: Int
	httpMaxContentLength: String
}

type CreateOpenSearchPayload {
"""
OpenSearch instance that was created.
"""
	openSearch: OpenSearch!
}

input CreateSecretInput {
	name: String!
	environment: String!
	team: Slug!
}

type CreateSecretPayload {
"""
The created secret.
"""
	secret: Secret
}

input CreateServiceAccountInput {
	name: String!
	description: String!
	teamSlug: Slug
}

type CreateServiceAccountPayload {
"""
The created service account.
"""
	serviceAccount: ServiceAccount
}

input CreateServiceAccountTokenInput {
	serviceAccountID: ID!
	name: String!
	description: String!
	expiresAt: Date
}

type CreateServiceAccountTokenPayload {
"""
The service account that the token belongs to.
"""
	serviceAccount: ServiceAccount
"""
The created service account token.
"""
	serviceAccountToken: ServiceAccountToken
"""
The secret of the service account token.

This value is only returned once, and can not be retrieved at a later stage. If the secret is lost, a new token must be created.

Once obtained, the secret can be used to authenticate as the service account using the HTTP `Authorization` request header:

```
Authorization: Bearer <secret>
```
"""
	secret: String
}

input CreateTeamInput {
	slug: Slug!
	purpose: String!
	slackChannel: String!
}

type CreateTeamPayload {
"""
The newly created team.
"""
	team: Team
}

input CreateTunnelInput {
	teamSlug: Slug!
	environmentName: String!
	targetHost: String!
	targetPort: Int!
	clientPublicKey: String!
}

type CreateTunnelPayload {
"""
The newly created tunnel.
"""
	tunnel: Tunnel!
}

input CreateUnleashForTeamInput {
	teamSlug: Slug!
	releaseChannel: String
}

type CreateUnleashForTeamPayload {
	unleash: UnleashInstance
}

input CreateValkeyCredentialsInput {
	teamSlug: Slug!
	environmentName: String!
	instanceName: String!
	permission: ValkeyPermission!
	ttl: String!
}

type CreateValkeyCredentialsPayload {
"""
The generated credentials.
"""
	credentials: ValkeyCredentials!
}

input CreateValkeyInput {
	name: String!
	environmentName: String!
	teamSlug: Slug!
	tier: ValkeyTier!
	memory: ValkeyMemory!
	maxMemoryPolicy: ValkeyMaxMemoryPolicy
	notifyKeyspaceEvents: String
	databases: Int
	persistenceDisabled: Boolean
}

type CreateValkeyPayload {
"""
Valkey instance that was created.
"""
	valkey: Valkey!
}

"""
Get current unit prices.
"""
type CurrentUnitPrices {
"""
Current price for one CPU hour.
"""
	cpu: Price!
"""
Current price for one GB hour of memory.
"""
	memory: Price!
}

"""
A cursor for use in pagination

Cursors are opaque strings that are returned by the server for paginated results, and used when performing backwards / forwards pagination.
"""
scalar Cursor

"""
Date type in YYYY-MM-DD format.
"""
scalar Date

input DeleteApplicationInput {
	name: String!
	teamSlug: Slug!
	environmentName: String!
}

type DeleteApplicationPayload {
"""
The team that owned the deleted application.
"""
	team: Team
"""
Whether or not the application was deleted.
"""
	success: Boolean
}

input DeleteConfigInput {
	name: String!
	environmentName: String!
	teamSlug: Slug!
}

type DeleteConfigPayload {
"""
The deleted config.
"""
	configDeleted: Boolean
}

input DeleteJobInput {
	name: String!
	teamSlug: Slug!
	environmentName: String!
}

type DeleteJobPayload {
"""
The team that owned the deleted job.
"""
	team: Team
"""
Whether or not the job was deleted.
"""
	success: Boolean
}

input DeleteJobRunInput {
	teamSlug: Slug!
	environmentName: String!
	runName: String!
}

type DeleteJobRunPayload {
"""
The job that the run belonged to.
"""
	job: Job
"""
Whether or not the run was deleted.
"""
	success: Boolean!
}

input DeleteOpenSearchInput {
	name: String!
	environmentName: String!
	teamSlug: Slug!
}

type DeleteOpenSearchPayload {
"""
Whether or not the OpenSearch instance was deleted.
"""
	openSearchDeleted: Boolean
}

"Result of creating a personal Postgres access."
type CreatePostgresAccessPayload {
	"Name of the newly created PostgresAccess resource."
	name: String!
	"Server-controlled expiry for this personal access."
	expiresAt: Time!
}

"Input for creating a time-limited personal Postgres access."
input CreatePostgresAccessInput {
	"Name of the Postgres containing the branch."
	postgres: String!
	"Local name of the branch to access."
	branch: String!
	"Team that owns the Postgres branch."
	teamSlug: Slug!
	"Environment containing the Postgres branch."
	environmentName: String!
	"Privileges requested for the personal database role."
	accessLevel: PostgresAccessLevel!
	"Reason for personal database access. Must be at least 10 characters."
	reason: String!
	"Requested access lifetime (for example '30m' or '1h'). Defaults to '1h' and cannot exceed '1h'."
	ttl: String
}

"Privilege level granted to a personal Postgres database role."
enum PostgresAccessLevel {
	"Read data without modifying it."
	READ
	"Read and modify existing data."
	READWRITE
	"Read, modify, and create database objects where supported."
	READWRITECREATE
}

input DeletePostgresBranchInput {
	"Name of the Postgres containing the branch."
	postgres: String!
	"Local name of the branch to delete."
	branch: String!
	"The environment containing the PostgresBranch."
	environmentName: String!
	"The team that owns the PostgresBranch."
	teamSlug: Slug!
}

type DeletePostgresBranchPayload {
"Whether the PostgresBranch was deleted."
	postgresBranchDeleted: Boolean
}

input DeleteSecretInput {
	name: String!
	environment: String!
	team: Slug!
}

type DeleteSecretPayload {
"""
The deleted secret.
"""
	secretDeleted: Boolean
}

input DeleteServiceAccountInput {
	serviceAccountID: ID!
}

type DeleteServiceAccountPayload {
"""
Whether or not the service account was deleted.
"""
	serviceAccountDeleted: Boolean
}

input DeleteServiceAccountTokenInput {
	serviceAccountTokenID: ID!
}

type DeleteServiceAccountTokenPayload {
"""
The service account that the token belonged to.
"""
	serviceAccount: ServiceAccount
"""
Whether or not the service account token was deleted.
"""
	serviceAccountTokenDeleted: Boolean
}

input DeleteTunnelInput {
	teamSlug: Slug!
	environmentName: String!
	tunnelName: String!
}

type DeleteTunnelPayload {
"""
Whether the tunnel was successfully deleted.
"""
	success: Boolean!
}

input DeleteUnleashInstanceInput {
	teamSlug: Slug!
}

type DeleteUnleashInstancePayload {
"""
Whether the Unleash instance was successfully deleted.
"""
	unleashDeleted: Boolean
}

input DeleteValkeyInput {
	name: String!
	environmentName: String!
	teamSlug: Slug!
}

type DeleteValkeyPayload {
"""
Whether or not the job was deleted.
"""
	valkeyDeleted: Boolean
}

"""
Description of a deployment.
"""
type Deployment implements Node{
"""
ID of the deployment.
"""
	id: ID!
"""
Creation timestamp of the deployment.
"""
	createdAt: Time!
"""
Team slug that the deployment belongs to.
"""
	teamSlug: Slug!
"""
Name of the environment that the deployment belongs to.
"""
	environmentName: String!
"""
The repository that triggered the deployment.
"""
	repository: String
"""
Username of the actor who initiated the deployment.
"""
	deployerUsername: String
"""
The git commit SHA that was deployed.
"""
	commitSha: String
"""
The URL of the workflow that triggered the deployment.
"""
	triggerUrl: String
"""
Resources that were deployed.
"""
	resources(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): DeploymentResourceConnection!
"""
Statuses of the deployment.
"""
	statuses(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): DeploymentStatusConnection!
}

type DeploymentActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the update.
"""
	data: DeploymentActivityLogEntryData!
}

type DeploymentActivityLogEntryData {
	triggerURL: String
}

type DeploymentConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [Deployment!]!
"""
List of edges.
"""
	edges: [DeploymentEdge!]!
}

type DeploymentEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The deployment.
"""
	node: Deployment!
}

input DeploymentFilter {
	from: Time
	environments: [String!]
}

"""
Deployment key type.
"""
type DeploymentKey implements Node{
"""
The unique identifier of the deployment key.
"""
	id: ID!
"""
The actual key.
"""
	key: String!
"""
The date the deployment key was created.
"""
	created: Time!
"""
The date the deployment key expires.
"""
	expires: Time!
}

input DeploymentOrder {
	field: DeploymentOrderField!
	direction: OrderDirection!
}

"""
Possible fields to order deployments by.
"""
enum DeploymentOrderField {
"""
The time the deployment was created at.
"""
	CREATED_AT
}

"""
Resource connected to a deployment.
"""
type DeploymentResource implements Node{
"""
Globally unique ID of the deployment resource.
"""
	id: ID!
"""
Deployment resource kind.
"""
	kind: String!
"""
The name of the resource.
"""
	name: String!
}

type DeploymentResourceConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [DeploymentResource!]!
"""
List of edges.
"""
	edges: [DeploymentResourceEdge!]!
}

type DeploymentResourceEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The deployment resource.
"""
	node: DeploymentResource!
}

"""
Resource connected to a deployment.
"""
type DeploymentStatus implements Node{
"""
Globally unique ID of the deployment resource.
"""
	id: ID!
"""
Creation timestamp of the deployment status.
"""
	createdAt: Time!
"""
State of the deployment.
"""
	state: DeploymentStatusState!
"""
Message describing the deployment status.
"""
	message: String!
}

type DeploymentStatusConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [DeploymentStatus!]!
"""
List of edges.
"""
	edges: [DeploymentStatusEdge!]!
}

type DeploymentStatusEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The deployment status.
"""
	node: DeploymentStatus!
}

"""
Possible states of a deployment status.
"""
enum DeploymentStatusState {
	SUCCESS
	ERROR
	FAILURE
	INACTIVE
	IN_PROGRESS
	QUEUED
	PENDING
}

type DeprecatedIngressIssue implements Issue & Node{
	id: ID!
	teamEnvironment: TeamEnvironment!
	severity: Severity!
	message: String!
	ingresses: [String!]!
	application: Application!
}

type DeprecatedRegistryIssue implements Issue & Node{
	id: ID!
	teamEnvironment: TeamEnvironment!
	severity: Severity!
	message: String!
	workload: Workload!
}

input DisableReconcilerInput {
	name: String!
}

input EnableReconcilerInput {
	name: String!
}

"""
Entra ID (f.k.a. Azure AD) authentication.

Read more: https://docs.nais.io/auth/entra-id/
"""
type EntraIDAuthIntegration implements AuthIntegration{
"""
The name of the integration.
"""
	name: String!
}

"""
An environment represents a runtime environment for workloads.

Learn more in the [official Nais documentation](https://docs.nais.io/workloads/explanations/environment/).
"""
type Environment implements Node{
"""
The globally unique ID of the team.
"""
	id: ID!
"""
Unique name of the environment.
"""
	name: String!
"""
The OIDC issuer URL for workload identity tokens in the environment. Null for environments that do not support workload identity.
"""
	oidcIssuerURL: String
"""
Query Prometheus metrics directly using PromQL for this environment.
This allows for flexible metric queries within the specific environment.
Supports both instant queries and range queries.
"""
	metrics(
		input: MetricsQueryInput!
	): MetricsQueryResult!
"""
Nais workloads in the environment.
"""
	workloads(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: EnvironmentWorkloadOrder
	): WorkloadConnection!
}

"""
Environment connection.
"""
type EnvironmentConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [Environment!]!
"""
List of edges.
"""
	edges: [EnvironmentEdge!]!
}

"""
Environment edge.
"""
type EnvironmentEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The Environment.
"""
	node: Environment!
}

"""
Ordering options when fetching environments.
"""
input EnvironmentOrder {
"""
Ordering options when fetching environments.
"""
	field: EnvironmentOrderField!
"""
Ordering options when fetching environments.
"""
	direction: OrderDirection!
}

"""
Fields to order environments by.
"""
enum EnvironmentOrderField {
"""
Order by name.
"""
	NAME
}

"""
Ordering options when fetching workloads in an environment.
"""
input EnvironmentWorkloadOrder {
"""
Ordering options when fetching workloads in an environment.
"""
	field: EnvironmentWorkloadOrderField!
"""
Ordering options when fetching workloads in an environment.
"""
	direction: OrderDirection!
}

"""
Fields to order workloads in an environment by.
"""
enum EnvironmentWorkloadOrderField {
"""
Order by name.
"""
	NAME
"""
Order by team slug.
"""
	TEAM_SLUG
"""
Order by the deployment time.
"""
	DEPLOYMENT_TIME
}

"""
Deprecated: use ExternalIngressUrgentVulnerabilityIssue.
"""
type ExternalIngressCriticalVulnerabilityIssue implements Issue & Node{
"""
The globally unique identifier for this issue.
"""
	id: ID! @deprecated(reason: "Use ExternalIngressUrgentVulnerabilityIssue instead.")
"""
The team environment where the affected workload is deployed.
"""
	teamEnvironment: TeamEnvironment! @deprecated(reason: "Use ExternalIngressUrgentVulnerabilityIssue instead.")
"""
The severity assigned to this issue.
"""
	severity: Severity! @deprecated(reason: "Use ExternalIngressUrgentVulnerabilityIssue instead.")
"""
A human-readable description of the issue.
"""
	message: String! @deprecated(reason: "Use ExternalIngressUrgentVulnerabilityIssue instead.")
"""
The workload with critical vulnerabilities and external ingresses.
"""
	workload: Workload! @deprecated(reason: "Use ExternalIngressUrgentVulnerabilityIssue instead.")
"""
The highest CVSS score among vulnerabilities relevant to this issue.
"""
	cvssScore: Float! @deprecated(reason: "Use ExternalIngressUrgentVulnerabilityIssue instead.")
"""
External ingress URLs that expose the workload.
"""
	ingresses: [String!]! @deprecated(reason: "Use ExternalIngressUrgentVulnerabilityIssue instead.")
}

"""
Raised when a workload with external ingresses has one or more urgent vulnerability-priority findings.
"""
type ExternalIngressUrgentVulnerabilityIssue implements Issue & Node{
"""
The globally unique identifier for this issue.
"""
	id: ID!
"""
The team environment where the affected workload is deployed.
"""
	teamEnvironment: TeamEnvironment!
"""
The severity assigned to this issue.
"""
	severity: Severity!
"""
A human-readable description of the issue.
"""
	message: String!
"""
The workload with urgent vulnerabilities and external ingresses.
"""
	workload: Workload!
"""
Number of urgent vulnerabilities on the workload.
"""
	priorityUrgent: Int!
"""
External ingress URLs that expose the workload.
"""
	ingresses: [String!]!
}

type ExternalNetworkPolicyHost implements ExternalNetworkPolicyTarget{
	target: String!
	ports: [Int!]!
}

type ExternalNetworkPolicyIpv4 implements ExternalNetworkPolicyTarget{
	target: String!
	ports: [Int!]!
}

interface ExternalNetworkPolicyTarget {
	target: String!
	ports: [Int!]!
}

"""
Deprecated: superseded by WorkloadProblemIssue. No longer produced; retained for backwards compatibility.
"""
type FailedSynchronizationIssue implements Issue & Node{
	id: ID! @deprecated(reason: "Use WorkloadProblemIssue instead.")
	teamEnvironment: TeamEnvironment! @deprecated(reason: "Use WorkloadProblemIssue instead.")
	severity: Severity! @deprecated(reason: "Use WorkloadProblemIssue instead.")
	message: String! @deprecated(reason: "Use WorkloadProblemIssue instead.")
	workload: Workload! @deprecated(reason: "Use WorkloadProblemIssue instead.")
}

type FeatureKafka implements Node{
"""
Unique identifier for the feature.
"""
	id: ID!
"""
Wether Kafka is enabled or not.
"""
	enabled: Boolean!
}

type FeatureOpenSearch implements Node{
"""
Unique identifier for the feature.
"""
	id: ID!
"""
Wether OpenSearch is enabled or not.
"""
	enabled: Boolean!
}

type FeatureUnleash implements Node{
"""
Unique identifier for the feature.
"""
	id: ID!
"""
Wether Unleash is enabled or not.
"""
	enabled: Boolean!
}

type FeatureValkey implements Node{
"""
Unique identifier for the feature.
"""
	id: ID!
"""
Wether Valkey is enabled or not.
"""
	enabled: Boolean!
}

type Features implements Node{
"""
Unique identifier for the feature container.
"""
	id: ID!
"""
Information about Unleash feature.
"""
	unleash: FeatureUnleash!
"""
Information about Valkey feature.
"""
	valkey: FeatureValkey!
"""
Information about Kafka feature.
"""
	kafka: FeatureKafka!
"""
Information about OpenSearch feature.
"""
	openSearch: FeatureOpenSearch!
}

"""
The `Float` scalar type represents signed double-precision fractional values as specified by [IEEE 754](http://en.wikipedia.org/wiki/IEEE_floating_point).
"""
scalar Float

"""
Activity log entry for a resource kind that is not modelled in the GraphQL API.
The resource type will be the uppercase Kubernetes kind, e.g. 'NAISJOB'.
"""
type GenericKubernetesResourceActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the apply operation.
"""
	data: GenericKubernetesResourceActivityLogEntryData!
}

"""
Additional data associated with a resource created or updated via apply.
"""
type GenericKubernetesResourceActivityLogEntryData {
"""
The apiVersion of the applied resource.
"""
	apiVersion: String!
"""
The kind of the applied resource.
"""
	kind: String!
"""
The fields that changed during the apply. Only populated for updates.
"""
	changedFields: [ResourceChangedField!]!
"""
GitHub Actions OIDC token claims at the time of the apply. Only present when the request was authenticated via a GitHub token.
"""
	gitHubActorClaims: GitHubActorClaims
}

"""
GitHub Actions OIDC token claims captured at the time of an apply operation.
"""
type GitHubActorClaims {
"""
The git ref that triggered the workflow, e.g. 'refs/heads/main'.
"""
	ref: String!
"""
The repository name that triggered the workflow, e.g. 'org/repo'.
"""
	repository: String!
"""
The immutable numeric GitHub repository ID.
"""
	repositoryID: String!
"""
The unique identifier of the Actions workflow run. Links to https://github.com/<repo>/actions/runs/<runId>.
"""
	runID: String!
"""
The attempt number of the workflow run (1-indexed).
"""
	runAttempt: String!
"""
The GitHub username that triggered the workflow.
"""
	actor: String!
"""
The path to the workflow file, e.g. '.github/workflows/deploy.yaml'.
"""
	workflow: String!
"""
The event that triggered the workflow, e.g. 'push' or 'workflow_dispatch'.
"""
	eventName: String!
"""
The GitHub deployment environment name, if the job targets one.
"""
	environment: String!
"""
The ref of the reusable workflow called by this job, if any. E.g. 'org/repo/.github/workflows/deploy.yaml@refs/heads/main'.
"""
	jobWorkflowRef: String!
}

input GrantPostgresAccessInput {
	clusterName: String!
	teamSlug: Slug!
	environmentName: String!
	grantee: String!
	duration: String!
}

type GrantPostgresAccessPayload {
	error: String
}

"""
The `ID` scalar type represents a unique identifier, often used to refetch an object or as key for a cache. The ID type appears in a JSON response as a String; however, it is not intended to be human-readable. When expected as an input type, any string (such as "4") or integer (such as 4) input value will be accepted as an ID.
"""
scalar ID

"""
ID-porten authentication.

Read more: https://docs.nais.io/auth/idporten/
"""
type IDPortenAuthIntegration implements AuthIntegration{
"""
The name of the integration.
"""
	name: String!
}

type ImageVulnerability implements Node{
"""
The globally unique ID of the image vulnerability node.
"""
	id: ID!
"""
The unique identifier of the vulnerability. E.g. CVE-****-****.
"""
	identifier: String!
"""
Severity of the vulnerability.
"""
	severity: ImageVulnerabilitySeverity!
"""
Priority of the vulnerability based on threat intelligence signals.
"""
	priority: CVEPriority!
"""
Description of the vulnerability.
"""
	description: String!
"""
Package name of the vulnerability.
"""
	package: String!
"""
First known package version that contains a fix.
"""
	fixVersion: String
	suppression: ImageVulnerabilitySuppression
"""
Timestamp of when the vulnerability got its current severity.
"""
	severitySince: Time
"""
Link to the vulnerability details.
"""
	vulnerabilityDetailsLink: String!
"""
CVSS score of the vulnerability.
"""
	cvssScore: Float
"""
EPSS score of the vulnerability.
"""
	epssScore: Float
"""
EPSS percentile of the vulnerability (0-1).
"""
	epssPercentile: Float
"""
Whether the vulnerability has a CISA KEV entry.
"""
	hasKevEntry: Boolean!
"""
Whether the vulnerability has known ransomware use.
"""
	knownRansomwareUse: Boolean!
}

type ImageVulnerabilityConnection {
"""
Information to aid in pagination.
"""
	pageInfo: PageInfo!
"""
List of edges.
"""
	edges: [ImageVulnerabilityEdge!]!
"""
List of nodes.
"""
	nodes: [ImageVulnerability!]!
}

type ImageVulnerabilityEdge {
"""
A cursor for use in pagination.
"""
	cursor: Cursor!
"""
The image vulnerability.
"""
	node: ImageVulnerability!
}

"""
Input for filtering image vulnerabilities.
"""
input ImageVulnerabilityFilter {
"""
Input for filtering image vulnerabilities.
"""
	severity: ImageVulnerabilitySeverity
"""
Input for filtering image vulnerabilities.
"""
	severitySince: Time
}

type ImageVulnerabilityHistory {
"""
Vulnerability summary samples.
"""
	samples: [ImageVulnerabilitySample!]!
}

"""
Ordering options when fetching teams.
"""
input ImageVulnerabilityOrder {
"""
Ordering options when fetching teams.
"""
	field: ImageVulnerabilityOrderField!
"""
Ordering options when fetching teams.
"""
	direction: OrderDirection!
}

enum ImageVulnerabilityOrderField {
"""
Order by vulnerability identifier.
"""
	IDENTIFIER
"""
Order by vulnerability severity.
"""
	SEVERITY
"""
Order by when the vulnerability received its current severity.
"""
	SEVERITY_SINCE
"""
Order by affected package name.
"""
	PACKAGE
"""
Order by suppression state.
"""
	STATE
"""
Order by whether the vulnerability is suppressed.
"""
	SUPPRESSED
"""
Order by vulnerability priority derived from threat intelligence signals.
"""
	PRIORITY
}

type ImageVulnerabilitySample {
"""
The historic image vulnerability summary
"""
	summary: ImageVulnerabilitySummary!
"""
Timestamp of the vulnerability summary.
"""
	date: Time!
}

enum ImageVulnerabilitySeverity {
	LOW
	MEDIUM
	HIGH
	CRITICAL
	UNASSIGNED
}

type ImageVulnerabilitySummary {
"""
Total number of vulnerabilities.
"""
	total: Int!
"""
Risk score of the image.
"""
	riskScore: Int!
"""
Vulnerability counts grouped by severity.
"""
	countsBySeverity: ImageVulnerabilitySummaryCountsBySeverity!
"""
Vulnerability counts grouped by operational priority.
"""
	countsByPriority: ImageVulnerabilitySummaryCountsByPriority!
"""
Number of vulnerabilities with severity LOW.
"""
	low: Int! @deprecated(reason: "Use countsBySeverity.low instead.")
"""
Number of vulnerabilities with severity MEDIUM.
"""
	medium: Int! @deprecated(reason: "Use countsBySeverity.medium instead.")
"""
Number of vulnerabilities with severity HIGH.
"""
	high: Int! @deprecated(reason: "Use countsBySeverity.high instead.")
"""
Number of vulnerabilities with severity CRITICAL.
"""
	critical: Int! @deprecated(reason: "Use countsBySeverity.critical instead.")
"""
Number of vulnerabilities with severity UNASSIGNED.
"""
	unassigned: Int! @deprecated(reason: "Use countsBySeverity.unassigned instead.")
"""
Timestamp of the last update of the vulnerability summary.
"""
	lastUpdated: Time
"""
When set, the vulnerability counts are sourced from this older image tag because
no summary exists yet for the requested tag (e.g. a newly deployed image that is
still being scanned). The value is the tag the stale data originates from.
"""
	staleImageTag: String
}

"""
Vulnerability counts grouped by operational priority.
"""
type ImageVulnerabilitySummaryCountsByPriority {
"""
Known-exploited vulnerabilities that require immediate action.
"""
	urgent: Int!
"""
Vulnerabilities with strong exploitation indicators.
"""
	highRisk: Int!
"""
Vulnerabilities with elevated exploitation risk.
"""
	elevatedRisk: Int!
"""
Vulnerabilities that should be monitored.
"""
	monitor: Int!
}

"""
Vulnerability counts grouped by severity.
"""
type ImageVulnerabilitySummaryCountsBySeverity {
"""
Number of vulnerabilities with severity CRITICAL.
"""
	critical: Int!
"""
Number of vulnerabilities with severity HIGH.
"""
	high: Int!
"""
Number of vulnerabilities with severity MEDIUM.
"""
	medium: Int!
"""
Number of vulnerabilities with severity LOW.
"""
	low: Int!
"""
Number of vulnerabilities with severity UNASSIGNED.
"""
	unassigned: Int!
}

type ImageVulnerabilitySuppression {
"""
Suppression state of the vulnerability.
"""
	state: ImageVulnerabilitySuppressionState!
"""
The reason for the suppression of the vulnerability.
"""
	reason: String!
}

enum ImageVulnerabilitySuppressionState {
"""
Vulnerability is in triage.
"""
	IN_TRIAGE
"""
Vulnerability is resolved.
"""
	RESOLVED
"""
Vulnerability is marked as false positive.
"""
	FALSE_POSITIVE
"""
Vulnerability is marked as not affected.
"""
	NOT_AFFECTED
}

type InboundNetworkPolicy {
	rules: [NetworkPolicyRule!]!
}

type Ingress {
"""
URL for the ingress.
"""
	url: String!
"""
Type of ingress.
"""
	type: IngressType!
}

enum IngressType {
	UNKNOWN
	EXTERNAL
	INTERNAL
	AUTHENTICATED
}

"""
An instance group represents a set of identical instances.
All instances in the group share the same configuration (environment variables, mounted files, image).
"""
type InstanceGroup implements Node{
"""
The globally unique ID of the instance group.
"""
	id: ID!
"""
The name of the instance group.
"""
	name: String!
"""
The container image used by instances in this group.
"""
	image: ContainerImage!
"""
When the instance group was created.
"""
	created: Time!
"""
The number of instances that are ready.
"""
	readyInstances: Int!
"""
The desired number of instances.
"""
	desiredInstances: Int!
"""
Environment variables configured for instances in this group.
Variables from Secrets require elevation to view their values.
"""
	environmentVariables: [InstanceGroupEnvironmentVariable!]!
"""
Files mounted into instances in this group from Secrets or Configs.
"""
	mountedFiles: [InstanceGroupMountedFile!]!
"""
The application instances belonging to this instance group.
"""
	instances: [ApplicationInstance!]!
}

"""
An environment variable configured for an instance group.
"""
type InstanceGroupEnvironmentVariable implements Node{
"""
The globally unique ID of the environment variable.
"""
	id: ID!
"""
The name of the environment variable.
"""
	name: String!
"""
The value of the environment variable. Null if the value comes from a Secret (requires elevation to view).
"""
	value: String
"""
The source of the environment variable value.
"""
	source: InstanceGroupValueSource!
}

"""
A file mounted into an instance group from a Secret or Config.
"""
type InstanceGroupMountedFile {
"""
The file path inside the instance.
"""
	path: String!
"""
The source of the mounted file.
"""
	source: InstanceGroupValueSource!
"""
The file content. Null for files from Secrets (requires elevation to view)
or when the source could not be resolved (check the error field).
"""
	content: String
"""
The encoding of the content.
PLAIN_TEXT means the content can be displayed as-is.
BASE64 means the content is base64-encoded binary data that should be downloaded rather than displayed.
"""
	encoding: ValueEncoding!
"""
Error message when the source could not be resolved.
When set, the file entry represents a failed mount rather than an actual file.
"""
	error: String
}

"""
Describes the source of a value (environment variable or mounted file).
"""
type InstanceGroupValueSource {
"""
The kind of source.
"""
	kind: InstanceGroupValueSourceKind!
"""
The name of the source resource.
"""
	name: String!
}

"""
The kind of source for an environment variable or mounted file.
"""
enum InstanceGroupValueSourceKind {
"""
The value comes from a Secret.
"""
	SECRET
"""
The value comes from a Config.
"""
	CONFIG
"""
The value is defined inline in the workload's application manifest (user-defined).
"""
	SPEC
"""
The value was injected by the Nais platform (naiserator), not defined by the user.
"""
	NAIS
}

"""
The `Int` scalar type represents non-fractional signed whole numeric values. Int can represent values between -(2^31) and 2^31 - 1.
"""
scalar Int

"""
Deprecated: superseded by WorkloadProblemIssue. No longer produced; retained for backwards compatibility.
"""
type InvalidSpecIssue implements Issue & Node{
	id: ID! @deprecated(reason: "Use WorkloadProblemIssue instead.")
	teamEnvironment: TeamEnvironment! @deprecated(reason: "Use WorkloadProblemIssue instead.")
	severity: Severity! @deprecated(reason: "Use WorkloadProblemIssue instead.")
	message: String! @deprecated(reason: "Use WorkloadProblemIssue instead.")
	workload: Workload! @deprecated(reason: "Use WorkloadProblemIssue instead.")
}

interface Issue {
	id: ID!
	teamEnvironment: TeamEnvironment!
	severity: Severity!
	message: String!
}

type IssueConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [Issue!]!
"""
List of edges.
"""
	edges: [IssueEdge!]!
"""
Facets for the issues. Provides distribution counts to help narrow down results.
Facet counts are computed over the full result set (ignoring pagination) but respect the current filter.
"""
	facets: IssueFacets
}

type IssueEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The Issue.
"""
	node: Issue!
}

"""
Facets for issues, providing distribution counts across different dimensions.
"""
type IssueFacets {
"""
Distribution of issues by environment.
"""
	environments: [StringFacetItem!]!
"""
Distribution of issues by severity.
"""
	severities: [IssueSeverityFacetItem!]!
"""
Distribution of issues by resource type.
"""
	resourceTypes: [IssueResourceTypeFacetItem!]!
"""
Distribution of issues by issue type.
"""
	issueTypes: [IssueTypeFacetItem!]!
}

input IssueFilter {
	resourceName: String
	resourceType: ResourceType
	environments: [String!]
	severity: Severity
	issueType: IssueType
}

input IssueOrder {
	field: IssueOrderField!
	direction: OrderDirection!
}

enum IssueOrderField {
"""
Order by resource name.
"""
	RESOURCE_NAME
"""
Order by severity.
"""
	SEVERITY
"""
Order by environment.
"""
	ENVIRONMENT
"""
Order by resource type.
"""
	RESOURCE_TYPE
"""
Order by issue type.
"""
	ISSUE_TYPE
}

"""
A single facet item for resource types.
"""
type IssueResourceTypeFacetItem {
"""
The resource type.
"""
	resourceType: ResourceType!
"""
Number of matching issues.
"""
	count: Int!
}

"""
A single facet item for issue severities.
"""
type IssueSeverityFacetItem {
"""
The severity.
"""
	severity: Severity!
"""
Number of matching issues.
"""
	count: Int!
}

enum IssueType {
	OPENSEARCH
	VALKEY
	SQLINSTANCE_STATE
	SQLINSTANCE_VERSION
	DEPRECATED_INGRESS
	DEPRECATED_REGISTRY
	NO_RUNNING_INSTANCES
	LAST_RUN_FAILED
"""
Raised when the platform reports a problem in a workload, such as an invalid spec, a failed synchronization or a deprecation.
"""
	WORKLOAD_PROBLEM
	FAILED_SYNCHRONIZATION @deprecated(reason: "Use WORKLOAD_PROBLEM instead.")
	INVALID_SPEC @deprecated(reason: "Use WORKLOAD_PROBLEM instead.")
	MISSING_SBOM
	VULNERABLE_IMAGE
	EXTERNAL_INGRESS_CRITICAL_VULNERABILITY @deprecated(reason: "Use EXTERNAL_INGRESS_URGENT_VULNERABILITY.")
"""
Raised when a workload has external ingress exposure and urgent vulnerabilities.
"""
	EXTERNAL_INGRESS_URGENT_VULNERABILITY
	UNLEASH_RELEASE_CHANNEL
"""
Raised when an application is stuck in a restart loop.
"""
	APPLICATION_RESTART_LOOP
}

"""
A single facet item for issue types.
"""
type IssueTypeFacetItem {
"""
The issue type.
"""
	issueType: IssueType!
"""
Number of matching issues.
"""
	count: Int!
}

type Job implements Node & Workload & ActivityLogger{
"""
The globally unique ID of the job.
"""
	id: ID!
"""
The name of the job.
"""
	name: String!
"""
The team that owns the job.
"""
	team: Team!
"""
The team environment for the job.
"""
	teamEnvironment: TeamEnvironment!
"""
The container image of the job.
"""
	image: ContainerImage!
"""
Resources for the job.
"""
	resources: JobResources!
"""
List of authentication and authorization for the job.
"""
	authIntegrations: [JobAuthIntegrations!]!
"""
User-defined labels attached to this job.
"""
	labels: [ResourceLabel!]!
"""
Optional schedule for the job. Jobs with no schedule are run once.
"""
	schedule: JobSchedule
"""
The job runs.
"""
	runs(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): JobRunConnection!
"""
The job manifest.
"""
	manifest: JobManifest!
"""
If set, when the job was marked for deletion.
"""
	deletionStartedAt: Time
"""
Activity log associated with the job.
"""
	activityLog(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Filter items.
"""
		filter: ActivityLogFilter
	): ActivityLogEntryConnection!
"""
The state of the Job
"""
	state: JobState!
"""
Issues that affect the job.
"""
	issues(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: IssueOrder
"""
Filtering options for items returned from the connection.
"""
		filter: ResourceIssueFilter
	): IssueConnection!
"""
BigQuery datasets referenced by the job. This does not currently support pagination, but will return all available datasets.
"""
	bigQueryDatasets(
"""
Ordering options for items returned from the connection.
"""
		orderBy: BigQueryDatasetOrder
	): BigQueryDatasetConnection!
"""
Google Cloud Storage referenced by the job. This does not currently support pagination, but will return all available buckets.
"""
	buckets(
"""
Ordering options for items returned from the connection.
"""
		orderBy: BucketOrder
	): BucketConnection!
"""
Configs used by the job.
"""
	configs(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): ConfigConnection!
"""
The cost for the job.
"""
	cost: WorkloadCost!
"""
List of deployments for the job.
"""
	deployments(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): DeploymentConnection!
"""
Kafka topics the job has access to. This does not currently support pagination, but will return all available Kafka topics.
"""
	kafkaTopicAcls(
"""
Ordering options for items returned from the connection.
"""
		orderBy: KafkaTopicAclOrder
	): KafkaTopicAclConnection!
"""
List of log destinations for the job.
"""
	logDestinations: [LogDestination!]!
"""
Network policies for the job.
"""
	networkPolicy: NetworkPolicy!
"""
OpenSearch instance referenced by the workload.
"""
	openSearch: OpenSearch
"Active PostgresBranches for all Postgres entries in uses.postgres."
	postgresBranches(
"""
Ordering options for items returned from the connection.
"""
		orderBy: PostgresBranchOrder
	): PostgresBranchConnection!
"""
Secrets used by the job.
"""
	secrets(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): SecretConnection!
"""
The Nais service account this job is bound to, if any. Authenticating using the job's Workload Token
will then act as this Nais service account.
"""
	serviceAccount: ServiceAccount
"""
SQL instances referenced by the job. This does not currently support pagination, but will return all available SQL instances.
"""
	sqlInstances(
"""
Ordering options for items returned from the connection.
"""
		orderBy: SqlInstanceOrder
	): SqlInstanceConnection!
"""
Valkey instances referenced by the job. This does not currently support pagination, but will return all available Valkey instances.
"""
	valkeys(
"""
Ordering options for items returned from the connection.
"""
		orderBy: ValkeyOrder
	): ValkeyConnection!
"""
Get the vulnerability summary history for job.
"""
	imageVulnerabilityHistory(
"""
Get vulnerability summary from given date until today.
"""
		from: Date!
	): ImageVulnerabilityHistory!
"""
Get the mean time to fix history for a job.
"""
	vulnerabilityFixHistory(
		from: Date!
	): VulnerabilityFixHistory!
}

union JobAuthIntegrations =EntraIDAuthIntegration | MaskinportenAuthIntegration

type JobConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [Job!]!
"""
List of edges.
"""
	edges: [JobEdge!]!
"""
Facets for the jobs. Provides distribution counts to help narrow down results.
Facet counts are computed over the full result set (ignoring pagination) but respect the current filter.
"""
	facets: JobFacets
}

type JobCreatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the creation.
"""
	data: GenericKubernetesResourceActivityLogEntryData!
}

type JobDeletedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type JobEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The job.
"""
	node: Job!
}

"""
Facets for jobs, providing distribution counts across different dimensions.
"""
type JobFacets {
"""
Distribution of jobs by environment.
"""
	environments: [StringFacetItem!]!
"""
Distribution of jobs by state.
"""
	states: [JobStateFacetItem!]!
"""
Distribution of jobs by user-defined labels.
"""
	labels: [LabelFacetItem!]!
}

type JobManifest implements WorkloadManifest{
"""
The manifest content, serialized as a YAML document.
"""
	content: String!
}

input JobOrder {
	field: JobOrderField!
	direction: OrderDirection!
}

enum JobOrderField {
"""
Order jobs by name.
"""
	NAME
"""
Order jobs by the name of the environment.
"""
	ENVIRONMENT
"""
Order by state.
"""
	STATE
"""
Order jobs by next scheduled run time. Jobs without a next run (no schedule or invalid cron) are always sorted last.
"""
	NEXT_RUN
"""
Order jobs by the deployment time.
"""
	DEPLOYMENT_TIME
"""
Order jobs by issue severity
"""
	ISSUES
}

type JobResources implements WorkloadResources{
	limits: WorkloadResourceQuantity!
	requests: WorkloadResourceQuantity!
}

type JobRun implements Node{
"""
The globally unique ID of the job run.
"""
	id: ID!
"""
The name of the job run.
"""
	name: String!
"""
The start time of the job.
"""
	startTime: Time
"""
The completion time of the job.
"""
	completionTime: Time
"""
The status of the job run.
"""
	status: JobRunStatus!
"""
The container image of the job run.
"""
	image: ContainerImage!
"""
Duration of the job in seconds.
"""
	duration: Int!
"""
Job run instances.
"""
	instances(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): JobRunInstanceConnection!
	trigger: JobRunTrigger!
}

type JobRunConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [JobRun!]!
"""
List of edges.
"""
	edges: [JobRunEdge!]!
}

type JobRunDeletedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: JobRunDeletedActivityLogEntryData
}

type JobRunDeletedActivityLogEntryData {
"""
The name of the deleted job run.
"""
	runName: String!
}

type JobRunEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The job run.
"""
	node: JobRun!
}

type JobRunInstance implements Node{
"""
The globally unique ID of the job run instance.
"""
	id: ID!
"""
The name of the job run instance.
"""
	name: String!
}

type JobRunInstanceConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [JobRunInstance!]!
"""
List of edges.
"""
	edges: [JobRunInstanceEdge!]!
}

type JobRunInstanceEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The instance.
"""
	node: JobRunInstance!
}

enum JobRunState {
"""
Job run is pending.
"""
	PENDING
"""
Job run is running.
"""
	RUNNING
"""
Job run is succeeded.
"""
	SUCCEEDED
"""
Job run is failed.
"""
	FAILED
"""
Job run is unknown.
"""
	UNKNOWN
}

type JobRunStatus {
"""
The state of the job run.
"""
	state: JobRunState!
"""
Human readable job run status.
"""
	message: String!
}

type JobRunTrigger {
"""
The type of trigger that started the job.
"""
	type: JobRunTriggerType!
"""
The actor/user who triggered the job run manually, if applicable.
"""
	actor: String
}

enum JobRunTriggerType {
	AUTOMATIC
	MANUAL
}

type JobSchedule {
"""
The cron expression for the job.
"""
	expression: String!
"""
The time zone for the job. Defaults to UTC.
"""
	timeZone: String!
"""
The next scheduled run time. Null if the cron expression is invalid.
"""
	nextRun: Time
}

enum JobState {
	COMPLETED
	RUNNING
	FAILED
	UNKNOWN
}

"""
A single facet item for job states.
"""
type JobStateFacetItem {
"""
The job state.
"""
	state: JobState!
"""
Number of matching jobs.
"""
	count: Int!
}

type JobTriggeredActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

"""
Activity log entry for when a job is updated.
"""
type JobUpdatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the update.
"""
	data: JobUpdatedActivityLogEntryData!
}

"""
Data associated with a job update activity log entry.
"""
type JobUpdatedActivityLogEntryData {
"""
The fields that changed during the update.
"""
	changedFields: [ResourceChangedField!]!
"""
GitHub Actions OIDC token claims at the time of the apply. Only present when the request was authenticated via a GitHub token.
"""
	gitHubActorClaims: GitHubActorClaims
}

type KafkaCredentials {
"""
Username for the Kafka broker.
"""
	username: String!
"""
Client certificate in PEM format.
"""
	accessCert: String!
"""
Client private key in PEM format.
"""
	accessKey: String!
"""
CA certificate in PEM format.
"""
	caCert: String!
"""
Comma-separated list of broker addresses.
"""
	brokers: String!
"""
Schema registry URL.
"""
	schemaRegistry: String!
}

type KafkaCredentialsCreatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the credential creation.
"""
	data: KafkaCredentialsCreatedActivityLogEntryData!
}

type KafkaCredentialsCreatedActivityLogEntryData {
"""
The TTL that was requested for the credentials.
"""
	ttl: String!
}

type KafkaLagScalingStrategy {
"""
The threshold that must be met for the scaling to trigger.
"""
	threshold: Int!
"""
The consumer group of the topic.
"""
	consumerGroup: String!
"""
The name of the Kafka topic.
"""
	topicName: String!
}

type KafkaTopic implements Persistence & Node{
	id: ID!
	name: String!
	team: Team!
	teamEnvironment: TeamEnvironment!
	acl(
		first: Int
		after: Cursor
		last: Int
		before: Cursor
		filter: KafkaTopicAclFilter
		orderBy: KafkaTopicAclOrder
	): KafkaTopicAclConnection!
	configuration: KafkaTopicConfiguration
	pool: String!
"""
User-defined labels attached to this Kafka topic.
"""
	labels: [ResourceLabel!]!
}

type KafkaTopicAcl {
	access: KafkaTopicGrantAccess!
	workloadName: String!
	teamName: String!
	team: Team
	workload: Workload
	topic: KafkaTopic!
}

type KafkaTopicAclConnection {
	pageInfo: PageInfo!
	nodes: [KafkaTopicAcl!]!
	edges: [KafkaTopicAclEdge!]!
}

type KafkaTopicAclEdge {
	cursor: Cursor!
	node: KafkaTopicAcl!
}

input KafkaTopicAclFilter {
	team: Slug
	workload: String
	validWorkloads: Boolean
}

input KafkaTopicAclOrder {
	field: KafkaTopicAclOrderField!
	direction: OrderDirection!
}

enum KafkaTopicAclOrderField {
	TOPIC_NAME
	TEAM_SLUG
	CONSUMER
	ACCESS
}

type KafkaTopicConfiguration {
	cleanupPolicy: String
	maxMessageBytes: Int
	minimumInSyncReplicas: Int
	partitions: Int
	replication: Int
	retentionBytes: Int
	retentionHours: Int
	segmentHours: Int
}

type KafkaTopicConnection {
	pageInfo: PageInfo!
	nodes: [KafkaTopic!]!
	edges: [KafkaTopicEdge!]!
"""
Facets for Kafka topics. Provides distribution counts to help narrow down results.
Facet counts are computed over the full result set (ignoring pagination) but respect the current filter.
"""
	facets: KafkaTopicFacets
}

type KafkaTopicEdge {
	cursor: Cursor!
	node: KafkaTopic!
}

"""
Facets for Kafka topics, providing distribution counts across different dimensions.
"""
type KafkaTopicFacets {
"""
Distribution of topics by environment.
"""
	environments: [StringFacetItem!]!
"""
Distribution of topics by Kafka pool.
"""
	pools: [StringFacetItem!]!
"""
Distribution of topics by user-defined labels.
"""
	labels: [LabelFacetItem!]!
}

"""
Input for filtering Kafka topics.
"""
input KafkaTopicFilter {
"""
Input for filtering Kafka topics.
"""
	name: String
"""
Input for filtering Kafka topics.
"""
	environments: [String!]
"""
Input for filtering Kafka topics.
"""
	pools: [String!]
"""
Input for filtering Kafka topics.
"""
	labels: [LabelFilter!]
}

"""
Valid access levels for Kafka Topic grants.
"""
enum KafkaTopicGrantAccess {
"""
Read access to the Kafka Topic.
"""
	READ
"""
Write access to the Kafka Topic.
"""
	WRITE
"""
Read and write access to the Kafka Topic.
"""
	READWRITE
}

"""
Input for adding a grant to a Kafka Topic.
"""
input KafkaTopicGrantInput {
"""
Input for adding a grant to a Kafka Topic.
"""
	subject: String!
"""
Input for adding a grant to a Kafka Topic.
"""
	teamName: String!
"""
Input for adding a grant to a Kafka Topic.
"""
	access: KafkaTopicGrantAccess!
}

input KafkaTopicOrder {
	field: KafkaTopicOrderField!
	direction: OrderDirection!
}

enum KafkaTopicOrderField {
	NAME
	ENVIRONMENT
}

type KafkaTopicUpdatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the update.
"""
	data: KafkaTopicUpdatedActivityLogEntryData!
}

type KafkaTopicUpdatedActivityLogEntryData {
"""
Grants added to the Kafka topic.
"""
	addedGrants: [KafkaTopicUpdatedActivityLogEntryDataGrant!]!
"""
Grants revoked from the Kafka topic.
"""
	revokedGrants: [KafkaTopicUpdatedActivityLogEntryDataGrant!]!
}

type KafkaTopicUpdatedActivityLogEntryDataGrant {
"""
Subject affected by the grant.
"""
	subject: String!
"""
Team affected by the grant.
"""
	teamName: String!
"""
Access level affected by the grant.
"""
	access: KafkaTopicGrantAccess!
}

"""
A shared facet item representing a label value distribution (key-value pairs).
"""
type LabelFacetItem {
"""
The label key.
"""
	key: String!
"""
The label value.
"""
	value: String!
"""
Number of matching resources.
"""
	count: Int!
}

"""
Filter resources by a user-defined label.
"""
input LabelFilter {
"""
Filter resources by a user-defined label.
"""
	key: String!
"""
Filter resources by a user-defined label.
"""
	value: String
}

type LastRunFailedIssue implements Issue & Node{
	id: ID!
	teamEnvironment: TeamEnvironment!
	severity: Severity!
	message: String!
	job: Job!
}

interface LogDestination {
	id: ID!
}

type LogDestinationGeneric implements LogDestination & Node{
"""
The globally unique ID of the log destination.
"""
	id: ID!
"""
Name defined in the manifest
"""
	name: String!
}

type LogDestinationLoki implements LogDestination & Node{
"""
The globally unique ID of the log destination.
"""
	id: ID!
"""
Grafana URL to view the logs.
"""
	grafanaURL: String!
}

type LogDestinationSecureLogs implements LogDestination & Node{
"""
The globally unique ID of the log destination.
"""
	id: ID!
}

type LogLine {
"""
Timestamp of the log line.
"""
	time: Time!
"""
The log line message.
"""
	message: String!
"""
Labels attached to the log line.
"""
	labels: [LogLineLabel!]!
}

type LogLineLabel {
"""
The key of the label.
"""
	key: String!
"""
The value of the label.
"""
	value: String!
}

input LogSubscriptionFilter {
	environmentName: String!
	query: String!
	initialBatch: LogSubscriptionInitialBatch
}

input LogSubscriptionInitialBatch {
	start: Time
	limit: Int
}

type MaintenanceWindow {
"""
Day of the week when the maintenance is scheduled.
"""
	dayOfWeek: Weekday!
"""
Time of day when the maintenance is scheduled.
"""
	timeOfDay: TimeOfDay!
}

"""
Maskinporten authentication.

Read more: https://docs.nais.io/auth/maskinporten/
"""
type MaskinportenAuthIntegration implements AuthIntegration{
"""
The name of the integration.
"""
	name: String!
}

"""
A key-value pair representing a Prometheus label.
"""
type MetricLabel {
"""
The label name.
"""
	name: String!
"""
The label value.
"""
	value: String!
}

"""
A time series with its labels and data points.
"""
type MetricSeries {
"""
The metric labels as key-value pairs.
"""
	labels: [MetricLabel!]!
"""
The data points for this time series.
Instant queries will have a single value.
Range queries will have multiple values over time.
"""
	values: [MetricValue!]!
}

"""
A single data point in a time series.
"""
type MetricValue {
"""
The timestamp of the data point.
"""
	timestamp: Time!
"""
The value at the given timestamp.
"""
	value: Float!
}

"""
Input for querying Prometheus metrics.
"""
input MetricsQueryInput {
"""
Input for querying Prometheus metrics.
"""
	query: String!
"""
Input for querying Prometheus metrics.
"""
	time: Time
"""
Input for querying Prometheus metrics.
"""
	range: MetricsRangeInput
}

"""
Result from a Prometheus metrics query.
"""
type MetricsQueryResult {
"""
Time series data from the query.
For instant queries, each series contains a single value.
For range queries, each series contains multiple values over time.
"""
	series: [MetricSeries!]!
"""
Warnings returned by Prometheus, if any.
"""
	warnings: [String!]!
}

"""
Input for Prometheus range queries.

To prevent excessive memory usage, queries are subject to limits:
- Step must be at least 10 seconds
- Time range (end - start) cannot exceed 30 days
- Total data points cannot exceed 11,000
"""
input MetricsRangeInput {
"""
Input for Prometheus range queries.

To prevent excessive memory usage, queries are subject to limits:
- Step must be at least 10 seconds
- Time range (end - start) cannot exceed 30 days
- Total data points cannot exceed 11,000
"""
	start: Time!
"""
Input for Prometheus range queries.

To prevent excessive memory usage, queries are subject to limits:
- Step must be at least 10 seconds
- Time range (end - start) cannot exceed 30 days
- Total data points cannot exceed 11,000
"""
	end: Time!
"""
Input for Prometheus range queries.

To prevent excessive memory usage, queries are subject to limits:
- Step must be at least 10 seconds
- Time range (end - start) cannot exceed 30 days
- Total data points cannot exceed 11,000
"""
	step: Int!
}

type MissingSbomIssue implements Issue & Node{
	id: ID!
	teamEnvironment: TeamEnvironment!
	severity: Severity!
	message: String!
	workload: Workload!
}

"""
The mutation root for the Nais GraphQL API.
"""
type Mutation {
"""
Delete an application.
"""
	deleteApplication(
"""
Input for deleting an application.
"""
		input: DeleteApplicationInput!
	): DeleteApplicationPayload!
"""
Restart an application.
"""
	restartApplication(
"""
Input for restarting an application.
"""
		input: RestartApplicationInput!
	): RestartApplicationPayload!
"""
Update specific fields on an application. Only provided fields are applied.
Changes are temporary and will be overwritten on next deploy.
"""
	updateApplication(
"""
Input for updating an application.
"""
		input: UpdateApplicationInput!
	): UpdateApplicationPayload!
"""
Create a new config.
"""
	createConfig(
		input: CreateConfigInput!
	): CreateConfigPayload!
"""
Update the user-defined labels of a config.
"""
	updateConfig(
		input: UpdateConfigInput!
	): UpdateConfigPayload!
"""
Add a value to a config.
"""
	addConfigValue(
		input: AddConfigValueInput!
	): AddConfigValuePayload!
"""
Update a value within a config.
"""
	updateConfigValue(
		input: UpdateConfigValueInput!
	): UpdateConfigValuePayload!
"""
Remove a value from a config.
"""
	removeConfigValue(
		input: RemoveConfigValueInput!
	): RemoveConfigValuePayload!
"""
Delete a config, and the values it contains.
"""
	deleteConfig(
		input: DeleteConfigInput!
	): DeleteConfigPayload!
"""
Update the deploy key of a team. Returns the updated deploy key.
"""
	changeDeploymentKey(
		input: ChangeDeploymentKeyInput!
	): ChangeDeploymentKeyPayload!
"""
Delete a job.
"""
	deleteJob(
		input: DeleteJobInput!
	): DeleteJobPayload!
"""
Delete a job run.
"""
	deleteJobRun(
		input: DeleteJobRunInput!
	): DeleteJobRunPayload!
"""
Trigger a job
"""
	triggerJob(
		input: TriggerJobInput!
	): TriggerJobPayload!
"""
Update specific fields on a job. Only provided fields are applied.
Changes are temporary and will be overwritten on next deploy.
"""
	updateJob(
"""
Input for updating a job.
"""
		input: UpdateJobInput!
	): UpdateJobPayload!
"""
Create temporary credentials for Kafka.
"""
	createKafkaCredentials(
		input: CreateKafkaCredentialsInput!
	): CreateKafkaCredentialsPayload!
"""
Update a Kafka Topic.
"""
	updateKafkaTopic(
		input: UpdateKafkaTopicInput!
	): UpdateKafkaTopicPayload!
"""
Create a new OpenSearch instance.
"""
	createOpenSearch(
		input: CreateOpenSearchInput!
	): CreateOpenSearchPayload!
"""
Update an existing OpenSearch instance.
"""
	updateOpenSearch(
		input: UpdateOpenSearchInput!
	): UpdateOpenSearchPayload!
"""
Delete an existing OpenSearch instance.
"""
	deleteOpenSearch(
		input: DeleteOpenSearchInput!
	): DeleteOpenSearchPayload!
"""
Create temporary credentials for an OpenSearch instance.
"""
	createOpenSearchCredentials(
		input: CreateOpenSearchCredentialsInput!
	): CreateOpenSearchCredentialsPayload!
"""
Grant temporary access to a Postgres cluster.
"""
	grantPostgresAccess(
		input: GrantPostgresAccessInput!
	): GrantPostgresAccessPayload!
	"""
	EXPERIMENTAL: DO NOT USE
	Create time-limited personal access to a NAIS Postgres branch through the brokered PostgresAccess and relay flow.
	When the access is ready, retrieve its connection materials through PostgresAccess.connection.
	"""
	createPostgresAccess(input: CreatePostgresAccessInput!): CreatePostgresAccessPayload!
"Delete a PostgresBranch that is not active on its Postgres."
	deletePostgresBranch(
		input: DeletePostgresBranchInput!
	): DeletePostgresBranchPayload!
"""
Enable a reconciler

A reconciler must be fully configured before it can be enabled.
"""
	enableReconciler(
		input: EnableReconcilerInput!
	): Reconciler!
"""
Disable a reconciler

The reconciler configuration will be left intact.
"""
	disableReconciler(
		input: DisableReconcilerInput!
	): Reconciler!
"""
Configure a reconciler.
"""
	configureReconciler(
		input: ConfigureReconcilerInput!
	): Reconciler!
"""
Add a team repository.
"""
	addRepositoryToTeam(
		input: AddRepositoryToTeamInput!
	): AddRepositoryToTeamPayload!
"""
Remove a team repository.
"""
	removeRepositoryFromTeam(
		input: RemoveRepositoryFromTeamInput!
	): RemoveRepositoryFromTeamPayload!
"""
Create a new secret.
"""
	createSecret(
		input: CreateSecretInput!
	): CreateSecretPayload!
"""
Update the user-defined labels of a secret.
"""
	updateSecret(
		input: UpdateSecretInput!
	): UpdateSecretPayload!
"""
Add a secret value to a secret.
"""
	addSecretValue(
		input: AddSecretValueInput!
	): AddSecretValuePayload!
"""
Update a secret value within a secret.
"""
	updateSecretValue(
		input: UpdateSecretValueInput!
	): UpdateSecretValuePayload!
"""
Remove a secret value from a secret.
"""
	removeSecretValue(
		input: RemoveSecretValueInput!
	): RemoveSecretValuePayload!
"""
Delete a secret, and the values it contains.
"""
	deleteSecret(
		input: DeleteSecretInput!
	): DeleteSecretPayload!
"""
View the values of a secret. Requires team membership and a reason for access.
This creates a temporary elevation and logs the access for auditing purposes.
"""
	viewSecretValues(
		input: ViewSecretValuesInput!
	): ViewSecretValuesPayload!
"""
Bind a workload to a service account, allowing the workload to authenticate against the
Nais API as the service account using its Workload Token.
"""
	addWorkloadToServiceAccount(
		input: AddWorkloadToServiceAccountInput!
	): AddWorkloadToServiceAccountPayload!
"""
Remove a workload binding from a service account.
"""
	removeWorkloadFromServiceAccount(
		input: RemoveWorkloadFromServiceAccountInput!
	): RemoveWorkloadFromServiceAccountPayload!
"""
Create a service account.
"""
	createServiceAccount(
		input: CreateServiceAccountInput!
	): CreateServiceAccountPayload!
"""
Update a service account.
"""
	updateServiceAccount(
		input: UpdateServiceAccountInput!
	): UpdateServiceAccountPayload!
"""
Delete a service account.
"""
	deleteServiceAccount(
		input: DeleteServiceAccountInput!
	): DeleteServiceAccountPayload!
"""
Assign a role to a service account.
"""
	assignRoleToServiceAccount(
		input: AssignRoleToServiceAccountInput!
	): AssignRoleToServiceAccountPayload!
"""
Revoke a role from a service account.
"""
	revokeRoleFromServiceAccount(
		input: RevokeRoleFromServiceAccountInput!
	): RevokeRoleFromServiceAccountPayload!
"""
Create a service account token.

The secret is automatically generated, and is returned as a part of the payload for this mutation. The secret can
not be retrieved at a later stage.

A service account can have multiple active tokens at the same time.
"""
	createServiceAccountToken(
		input: CreateServiceAccountTokenInput!
	): CreateServiceAccountTokenPayload!
"""
Update a service account token.

Note that the secret itself can not be updated, only the metadata.
"""
	updateServiceAccountToken(
		input: UpdateServiceAccountTokenInput!
	): UpdateServiceAccountTokenPayload!
"""
Delete a service account token.
"""
	deleteServiceAccountToken(
		input: DeleteServiceAccountTokenInput!
	): DeleteServiceAccountTokenPayload!
"""
Start maintenance updates for a Valkey instance.
"""
	startValkeyMaintenance(
		input: StartValkeyMaintenanceInput!
	): StartValkeyMaintenancePayload
"""
Start maintenance updates for an OpenSearch instance.
"""
	startOpenSearchMaintenance(
		input: StartOpenSearchMaintenanceInput!
	): StartOpenSearchMaintenancePayload
"""
Create a new Nais team

The user creating the team will be granted team ownership, unless the user is a service account, in which case the
team will not get an initial owner. To add one or more owners to the team, refer to the `addTeamOwners` mutation.

Creation of a team will also create external resources for the team, which will be managed by the Nais API
reconcilers. This will be done asynchronously.

Refer to the [official Nais documentation](https://docs.nais.io/explanations/team/) for more information regarding
Nais teams.
"""
	createTeam(
		input: CreateTeamInput!
	): CreateTeamPayload!
"""
Update an existing Nais team

This mutation can be used to update the team purpose and the main Slack channel. It is not possible to update the
team slug.
"""
	updateTeam(
		input: UpdateTeamInput!
	): UpdateTeamPayload!
"""
Update an environment for a team
"""
	updateTeamEnvironment(
		input: UpdateTeamEnvironmentInput!
	): UpdateTeamEnvironmentPayload!
"""
Request a key that can be used to trigger a team deletion process

Deleting a team is a two step process. First an owner of the team (or an admin) must request a team deletion key,
and then a second owner of the team (or an admin) must confirm the deletion using the confirmTeamDeletion mutation.

The returned delete key is valid for an hour, and can only be used once.

Note: Service accounts are not allowed to request team delete keys.
"""
	requestTeamDeletion(
		input: RequestTeamDeletionInput!
	): RequestTeamDeletionPayload!
"""
Confirm a team deletion

This will start the actual team deletion process, which will be done in an asynchronous manner. All external
entities controlled by Nais will also be deleted.

WARNING: There is no going back after starting this process.

Note: Service accounts are not allowed to confirm a team deletion.
"""
	confirmTeamDeletion(
		input: ConfirmTeamDeletionInput!
	): ConfirmTeamDeletionPayload!
"""
Add a team member

If the user is already a member or an owner of the team, the mutation will result in an error.
"""
	addTeamMember(
		input: AddTeamMemberInput!
	): AddTeamMemberPayload!
"""
Remove a team member

If the user is not already a member or an owner of the team, the mutation will result in an error.
"""
	removeTeamMember(
		input: RemoveTeamMemberInput!
	): RemoveTeamMemberPayload!
"""
Assign a role to a team member

The user must already be a member of the team for this mutation to succeed.
"""
	setTeamMemberRole(
		input: SetTeamMemberRoleInput!
	): SetTeamMemberRolePayload!
"""
Create a WireGuard tunnel to a target host and port.
"""
	createTunnel(
		input: CreateTunnelInput!
	): CreateTunnelPayload!
"""
Delete a WireGuard tunnel and clean up the gateway pod.
"""
	deleteTunnel(
		input: DeleteTunnelInput!
	): DeleteTunnelPayload!
"""
Create a new Unleash instance.

This mutation will create a new Unleash instance for the given team. The team
will be set as owner of the Unleash instance and will be able to manage it.

By default, instances are created with the default version.
Optionally specify a releaseChannel to subscribe to automatic version updates.
"""
	createUnleashForTeam(
		input: CreateUnleashForTeamInput!
	): CreateUnleashForTeamPayload!
"""
Update an Unleash instance's release channel.

Use this mutation to change to a different release channel.
"""
	updateUnleashInstance(
		input: UpdateUnleashInstanceInput!
	): UpdateUnleashInstancePayload!
"""
Add team to the list of teams that can access the Unleash instance.
"""
	allowTeamAccessToUnleash(
		input: AllowTeamAccessToUnleashInput!
	): AllowTeamAccessToUnleashPayload!
"""
Remove team from the list of teams that can access the Unleash instance.
"""
	revokeTeamAccessToUnleash(
		input: RevokeTeamAccessToUnleashInput!
	): RevokeTeamAccessToUnleashPayload!
"""
Delete an Unleash instance.

The Unleash instance can only be deleted if no other teams have access to it.
Revoke access for all other teams before deleting the instance.
"""
	deleteUnleashInstance(
		input: DeleteUnleashInstanceInput!
	): DeleteUnleashInstancePayload!
"""
Create a new Valkey instance.
"""
	createValkey(
		input: CreateValkeyInput!
	): CreateValkeyPayload!
"""
Update an existing Valkey instance.
"""
	updateValkey(
		input: UpdateValkeyInput!
	): UpdateValkeyPayload!
"""
Delete an existing Valkey instance.
"""
	deleteValkey(
		input: DeleteValkeyInput!
	): DeleteValkeyPayload!
"""
Create temporary credentials for a Valkey instance.
"""
	createValkeyCredentials(
		input: CreateValkeyCredentialsInput!
	): CreateValkeyCredentialsPayload!
"""
Updates a vulnerability
This mutation is currently unstable and may change in the future.
"""
	updateImageVulnerability(
		input: UpdateImageVulnerabilityInput!
	): UpdateImageVulnerabilityPayload!
}

type NetworkPolicy {
	inbound: InboundNetworkPolicy!
	outbound: OutboundNetworkPolicy!
}

type NetworkPolicyRule {
	targetWorkloadName: String!
	targetWorkload: Workload
	targetTeamSlug: Slug!
	targetTeam: Team
	mutual: Boolean!
}

type NoRunningInstancesIssue implements Issue & Node{
	id: ID!
	teamEnvironment: TeamEnvironment!
	severity: Severity!
	message: String!
	workload: Workload!
}

"""
This interface is implemented by types that supports the [Global Object Identification specification](https://graphql.org/learn/global-object-identification/).
"""
interface Node {
"""
This interface is implemented by types that supports the [Global Object Identification specification](https://graphql.org/learn/global-object-identification/).
"""
	id: ID!
}

type OpenSearch implements Persistence & Node & ActivityLogger{
	id: ID!
	name: String!
	team: Team!
	teamEnvironment: TeamEnvironment!
	terminationProtection: Boolean!
	state: OpenSearchState!
	workload: Workload @deprecated(reason: "OpenSearch does not have a owner, so this field will always be null.")
	access(
		first: Int
		after: Cursor
		last: Int
		before: Cursor
		orderBy: OpenSearchAccessOrder
	): OpenSearchAccessConnection!
"""
Fetch version for the OpenSearch instance.
"""
	version: OpenSearchVersion!
"""
Availability tier for the OpenSearch instance.
"""
	tier: OpenSearchTier!
"""
Available memory for the OpenSearch instance.
"""
	memory: OpenSearchMemory!
"""
Available storage in GB.
"""
	storageGB: Int!
"""
User-defined labels attached to the instance.
"""
	labels: [ResourceLabel!]!
"""
Whether shard indexing back pressure is enabled.
"""
	shardIndexingPressureEnabled: Boolean!
"""
Whether shard indexing back pressure runs in enforced mode. In enforced mode requests that may degrade cluster performance are rejected; in shadow mode (enforced false) metrics are tracked but no requests are rejected.
"""
	shardIndexingPressureEnforced: Boolean!
"""
Maximum number of clauses a Lucene BooleanQuery can contain. When not set, the instance uses the default of 1024. Increasing this value may cause performance issues.
"""
	indicesQueryBoolMaxClauseCount: Int
"""
Maximum content length, in a human-readable quantity (e.g. "100Mi", "1Gi"), for requests to the OpenSearch HTTP API. When not set, the instance uses the default of 100Mi.
"""
	httpMaxContentLength: String
"""
Issues that affects the instance.
"""
	issues(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: IssueOrder
"""
Filtering options for items returned from the connection.
"""
		filter: ResourceIssueFilter
	): IssueConnection!
"""
Activity log associated with the reconciler.
"""
	activityLog(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Filter items.
"""
		filter: ActivityLogFilter
	): ActivityLogEntryConnection!
	cost: OpenSearchCost!
"""
Fetch maintenances updates for the OpenSearch instance.
"""
	maintenance: OpenSearchMaintenance!
}

type OpenSearchAccess {
	workload: Workload!
	access: String!
}

type OpenSearchAccessConnection {
	pageInfo: PageInfo!
	nodes: [OpenSearchAccess!]!
	edges: [OpenSearchAccessEdge!]!
}

type OpenSearchAccessEdge {
	cursor: Cursor!
	node: OpenSearchAccess!
}

input OpenSearchAccessOrder {
	field: OpenSearchAccessOrderField!
	direction: OrderDirection!
}

enum OpenSearchAccessOrderField {
	ACCESS
	WORKLOAD
}

type OpenSearchConnection {
	pageInfo: PageInfo!
	nodes: [OpenSearch!]!
	edges: [OpenSearchEdge!]!
"""
Facets for OpenSearch instances. Provides distribution counts to help narrow down results.
Facet counts are computed over the full result set (ignoring pagination) but respect the current filter.
"""
	facets: OpenSearchFacets
}

type OpenSearchCost {
	sum: Float!
}

type OpenSearchCreatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type OpenSearchCredentials {
"""
Username for the OpenSearch instance.
"""
	username: String!
"""
Password for the OpenSearch instance.
"""
	password: String!
"""
Hostname of the OpenSearch instance.
"""
	host: String!
"""
Port of the OpenSearch instance.
"""
	port: Int!
"""
Full connection URI for the OpenSearch instance.
"""
	uri: String!
}

type OpenSearchCredentialsCreatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the credential creation.
"""
	data: OpenSearchCredentialsCreatedActivityLogEntryData!
}

type OpenSearchCredentialsCreatedActivityLogEntryData {
"""
The permission level, if applicable.
"""
	permission: String
"""
The TTL that was requested for the credentials.
"""
	ttl: String!
}

type OpenSearchDeletedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type OpenSearchEdge {
	cursor: Cursor!
	node: OpenSearch!
}

"""
Facets for OpenSearch instances, providing distribution counts across different dimensions.
"""
type OpenSearchFacets {
"""
Distribution of instances by environment.
"""
	environments: [StringFacetItem!]!
"""
Distribution of instances by tier.
"""
	tiers: [OpenSearchTierFacetItem!]!
"""
Distribution of instances by user-defined labels.
"""
	labels: [LabelFacetItem!]!
}

"""
Input for filtering OpenSearch instances.
"""
input OpenSearchFilter {
"""
Input for filtering OpenSearch instances.
"""
	name: String
"""
Input for filtering OpenSearch instances.
"""
	environments: [String!]
"""
Input for filtering OpenSearch instances.
"""
	tiers: [OpenSearchTier!]
"""
Input for filtering OpenSearch instances.
"""
	labels: [LabelFilter!]
}

type OpenSearchIssue implements Issue & Node{
	id: ID!
	teamEnvironment: TeamEnvironment!
	severity: Severity!
	message: String!
	openSearch: OpenSearch!
	event: String!
}

type OpenSearchMaintenance {
"""
The day and time of the week when the maintenance will be scheduled.
"""
	window: MaintenanceWindow
	updates(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): OpenSearchMaintenanceUpdateConnection!
}

type OpenSearchMaintenanceUpdate implements ServiceMaintenanceUpdate{
"""
Title of the maintenance.
"""
	title: String!
"""
Description of the maintenance.
"""
	description: String!
"""
Deadline for installing the maintenance. If set, maintenance is mandatory and will be forcibly applied.
"""
	deadline: Time
"""
The time when the update will be automatically applied. If set, maintenance is mandatory and will be forcibly applied.
"""
	startAt: Time
}

type OpenSearchMaintenanceUpdateConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [OpenSearchMaintenanceUpdate!]!
"""
List of edges.
"""
	edges: [OpenSearchMaintenanceUpdateEdge!]!
}

type OpenSearchMaintenanceUpdateEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The OpenSearchMaintenanceUpdate.
"""
	node: OpenSearchMaintenanceUpdate!
}

enum OpenSearchMajorVersion {
"""
OpenSearch Version 3.6.x
"""
	V3_6
"""
OpenSearch Version 3.3.x
"""
	V3_3
"""
OpenSearch Version 2.19.x
"""
	V2_19
"""
OpenSearch Version 2.17.x
"""
	V2
"""
OpenSearch Version 1.3.x
"""
	V1
}

enum OpenSearchMemory {
	GB_2
	GB_4
	GB_8
	GB_16
	GB_32
	GB_64
}

input OpenSearchOrder {
	field: OpenSearchOrderField!
	direction: OrderDirection!
}

enum OpenSearchOrderField {
	NAME
	ENVIRONMENT
	STATE
"""
Order OpenSearches by issue severity
"""
	ISSUES
}

"""
Permission level for OpenSearch credentials.
"""
enum OpenSearchPermission {
"""
Read-only access.
"""
	READ
"""
Write-only access.
"""
	WRITE
"""
Read and write access.
"""
	READWRITE
"""
Administrative access.
"""
	ADMIN
}

enum OpenSearchState {
	POWEROFF
	REBALANCING
	REBUILDING
	RUNNING
	UNKNOWN
}

enum OpenSearchTier {
	SINGLE_NODE
	HIGH_AVAILABILITY
}

"""
A single facet item for OpenSearch tiers.
"""
type OpenSearchTierFacetItem {
"""
The OpenSearch tier.
"""
	tier: OpenSearchTier!
"""
Number of matching instances.
"""
	count: Int!
}

type OpenSearchUpdatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: OpenSearchUpdatedActivityLogEntryData!
}

type OpenSearchUpdatedActivityLogEntryData {
	updatedFields: [OpenSearchUpdatedActivityLogEntryDataUpdatedField!]!
}

type OpenSearchUpdatedActivityLogEntryDataUpdatedField {
"""
The name of the field.
"""
	field: String!
"""
The old value of the field.
"""
	oldValue: String
"""
The new value of the field.
"""
	newValue: String
}

type OpenSearchVersion {
"""
The full version string of the OpenSearch instance. This will be available after the instance is created.
"""
	actual: String
"""
The desired major version of the OpenSearch instance.
"""
	desiredMajor: OpenSearchMajorVersion!
}

"""
Possible directions in which to order a list of items.
"""
enum OrderDirection {
"""
Ascending sort order.
"""
	ASC
"""
Descending sort order.
"""
	DESC
}

type OutboundNetworkPolicy {
	rules: [NetworkPolicyRule!]!
	external: [ExternalNetworkPolicyTarget!]!
}

"""
This type is used for paginating the connection

Learn more about how we have implemented pagination in the [GraphQL Best Practices documentation](https://graphql.org/learn/pagination/).
"""
type PageInfo {
"""
Whether or not there exists a next page in the connection.
"""
	hasNextPage: Boolean!
"""
The cursor for the last item in the edges. This cursor is used when paginating forwards.
"""
	endCursor: Cursor
"""
Whether or not there exists a previous page in the connection.
"""
	hasPreviousPage: Boolean!
"""
The cursor for the first item in the edges. This cursor is used when paginating backwards.
"""
	startCursor: Cursor
"""
The total amount of items in the connection.
"""
	totalCount: Int!
"""
The offset of the first item in the connection.
"""
	pageStart: Int!
"""
The offset of the last item in the connection.
"""
	pageEnd: Int!
}

interface Persistence {
	id: ID!
	name: String!
	team: Team!
	teamEnvironment: TeamEnvironment!
	labels: [ResourceLabel!]!
}

type PostgresDeletedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
	"GitHub Actions OIDC claims when authenticated by a GitHub repository."
	gitHubActorClaims: GitHubActorClaims
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type PostgresGrantAccessActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
	"GitHub Actions OIDC claims when authenticated by a GitHub repository."
	gitHubActorClaims: GitHubActorClaims
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the update.
"""
	data: PostgresGrantAccessActivityLogEntryData!
}

type PostgresGrantAccessActivityLogEntryData {
	grantee: String!
	until: Time!
}

"An audit-log entry for personal Postgres access created through the API broker."
type PostgresPersonalAccessCreatedActivityLogEntry implements ActivityLogEntry & Node {
	"ID of the entry."
	id: ID!
	"The identity of the actor who created the personal access."
	actor: String!
	"GitHub Actions OIDC claims when authenticated by a GitHub repository."
	gitHubActorClaims: GitHubActorClaims
	"Creation time of the entry."
	createdAt: Time!
	"Message that summarizes the entry."
	message: String!
	"Type of the affected resource."
	resourceType: ActivityLogEntryResourceType!
	"Name of the affected Postgres branch."
	resourceName: String!
	"The team slug that the entry belongs to."
	teamSlug: Slug!
	"The environment name that the entry belongs to."
	environmentName: String
	"Personal-access specific audit data."
	data: PostgresPersonalAccessCreatedActivityLogEntryData!
}

"Personal-access-specific audit data."
type PostgresPersonalAccessCreatedActivityLogEntryData {
	"Identity that owns the new personal access."
	username: String!
	"Requested privilege level; null for events recorded before this field was added."
	accessLevel: PostgresAccessLevel
	"Server-controlled expiry of the access."
	expiresAt: Time!
	"Caller-provided audit reason."
	reason: String!
}

"An audit-log entry for retrieval of personal Postgres connection materials."
type PostgresPersonalAccessConnectionActivityLogEntry implements ActivityLogEntry & Node {
	"ID of the entry."
	id: ID!
	"Identity that retrieved the connection materials."
	actor: String!
	"GitHub Actions OIDC claims when authenticated by a GitHub repository."
	gitHubActorClaims: GitHubActorClaims
	"Creation time of the entry."
	createdAt: Time!
	"Message that summarizes the entry."
	message: String!
	"Type of the affected resource."
	resourceType: ActivityLogEntryResourceType!
	"Name of the affected PostgresAccess resource."
	resourceName: String!
	"Team slug that the entry belongs to."
	teamSlug: Slug!
	"Environment name that the entry belongs to."
	environmentName: String
}

"A named PostgresBranch belonging to a Postgres."
type PostgresBranch implements Persistence & Node{
	id: ID!
	"Local name of this branch within its Postgres."
	name: String!
	team: Team!
	teamEnvironment: TeamEnvironment!
	"Postgres owning this PostgresBranch."
	postgres: Postgres!
	"Workloads using this branch while it is active."
	workloads(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): WorkloadConnection!
"Current observed state of the branch."
	state: PostgresBranchState!
	"User-defined labels on this branch."
	labels: [ResourceLabel!]!
}

"A Postgres whose active branch can change."
type Postgres implements Node {
	"Opaque identifier for this Postgres."
	id: ID!
	"Name of this Postgres."
	name: String!
	"Configured PostgreSQL major version."
	majorVersion: String!
	"Whether high availability is configured."
	highAvailability: Boolean!
	"Requested CPU, memory and disk size, when present on this Postgres."
	resources: PostgresResources!
	"Currently active branch, if selected."
	activeBranch: PostgresBranch
	"Branch with this local name in this Postgres."
	branch(name: String!): PostgresBranch!
	"Branches belonging to this Postgres."
	branches(first: Int, after: Cursor, last: Int, before: Cursor, orderBy: PostgresBranchOrder): PostgresBranchConnection!
	"User-defined labels on this Postgres."
	labels: [ResourceLabel!]!
}

"Resource requests configured on Postgres. Omitted requests are null."
type PostgresResources {
	"Requested CPU."
	cpu: String
	"Requested memory."
	memory: String
	"Requested disk size."
	diskSize: String
}

"A time-limited personal access request for a Postgres branch."
type PostgresAccess implements Node {
	"Opaque ID for this PostgresAccess resource."
	id: ID!
	"Name of the PostgresAccess resource."
	name: String!
	"Team that owns the access."
	team: Team!
	"Environment for the access."
	teamEnvironment: TeamEnvironment!
	"PostgresBranch selected by this access."
	postgresBranch: PostgresBranch!
	"Requested access level."
	accessLevel: PostgresAccessLevel!
	"Server-controlled expiry for this personal access."
	expiresAt: Time!
	"High-level state of the access."
	state: PostgresAccessState!
	"Human-readable message for the current state."
	message: String
	"Name of the controller-owned relay mapping, once created. Contains no credential."
	relayAccess: String
	"""
	EXPERIMENTAL: DO NOT USE
	Get connection materials for this ready access. Only its owner can read them.
	"""
	connection: PostgresAccessConnectionDetails
}

"High-level reconciliation state of a personal Postgres access."
enum PostgresAccessState {
	"The controller has not finished provisioning the access."
	PENDING
	"The access and its connection materials are ready."
	READY
	"The controller cannot provision the requested access."
	FAILED
	"The server-controlled expiry time has passed."
	EXPIRED
}

"Sensitive connection materials for a ready personal Postgres access."
type PostgresAccessConnectionDetails {
	"Database username for the caller's personal role."
	username: String!
	"Short-lived password for the caller's database role."
	password: String!
	"CA certificate required to verify the PostgreSQL server certificate."
	caCertificate: String!
	"PostgreSQL server name used for TLS verification."
	serverName: String!
	"Public HTTP/3 relay endpoint."
	relayEndpoint: String!
	"Relay-Access header value (namespace/name)."
	relayAccess: String!
	"Owner-only bearer token for this access; never log it."
	relayToken: String!
}

type PostgresBranchConnection {
	pageInfo: PageInfo!
	nodes: [PostgresBranch!]!
	edges: [PostgresBranchEdge!]!
"""
Facets for Postgres branches. Provides distribution counts to help narrow down results.
Facet counts are computed over the full result set (ignoring pagination) but respect the current filter.
"""
	facets: PostgresBranchFacets
}

type PostgresBranchEdge {
	cursor: Cursor!
	node: PostgresBranch!
}

"""
Facets for Postgres branches, providing distribution counts across different dimensions.
"""
type PostgresBranchFacets {
	"Distribution of branches by environment."
	environments: [StringFacetItem!]!
	"Distribution of branches by state."
	states: [PostgresBranchStateFacetItem!]!
	"Distribution of branches by user-defined labels."
	labels: [LabelFacetItem!]!
}

"Input for filtering Postgres branches."
input PostgresBranchFilter {
	"Filter by the name of the branch."
	name: String
	"Filter by environments."
	environments: [String!]
	"Filter by branch state."
	states: [PostgresBranchState!]
	"Filter by user-defined labels. All listed labels must match."
	labels: [LabelFilter!]
}

input PostgresBranchOrder {
	field: PostgresBranchOrderField!
	direction: OrderDirection!
}

enum PostgresBranchOrderField {
	NAME
	ENVIRONMENT
}

"Reconciliation and observed health of a PostgresBranch."
enum PostgresBranchState {
	"The branch is healthy and ready."
	AVAILABLE
	"The branch is provisioning or its state has not been observed yet."
	PROGRESSING
	"The branch has reported a failure."
	DEGRADED
}

"A single facet item for Postgres branch states."
type PostgresBranchStateFacetItem {
	"The Postgres branch state."
	state: PostgresBranchState!
	"Number of matching branches."
	count: Int!
}

type Price {
	value: Float!
}

type PrometheusAlarm {
"""
The action to take when the alert fires.
"""
	action: String!
"""
The consequence of the alert firing.
"""
	consequence: String!
"""
A summary of the alert.
"""
	summary: String!
"""
The state of the alert.
"""
	state: AlertState!
"""
The current value of the metric that triggered the alert.
"""
	value: Float!
"""
The time when the alert started firing.
"""
	since: Time!
}

"""
PrometheusAlert type
"""
type PrometheusAlert implements Node & Alert{
"""
The unique identifier for the alert.
"""
	id: ID!
"""
The name of the alert.
"""
	name: String!
"""
The team that owns the alert.
"""
	team: Team!
"""
The team environment for the alert.
"""
	teamEnvironment: TeamEnvironment!
"""
The state of the alert.
"""
	state: AlertState!
"""
The query for the alert.
"""
	query: String!
"""
The duration for the alert.
"""
	duration: Float!
"""
The prometheus rule group for the alert.
"""
	ruleGroup: String!
"""
The alarms of the alert available if state is firing.
"""
	alarms: [PrometheusAlarm!]!
}

"""
The query root for the Nais GraphQL API.
"""
type Query {
"""
Fetch an object using its globally unique ID.
"""
	node(
"""
The ID of the object to fetch.
"""
		id: ID!
	): Node
"""
Activity log across all teams in the tenant.
"""
	activityLog(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Filter items.
"""
		filter: ActivityLogFilter
	): ActivityLogEntryConnection!
	roles(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Optional filter to filter the roles by.
"""
		filter: RoleFilter
	): RoleConnection!
"""
Get the monthly cost summary for a tenant.
"""
	costMonthlySummary(
"""
Start month of the period, inclusive.
"""
		from: Date!
"""
End month of the period, inclusive.
"""
		to: Date!
	): CostMonthlySummary!
"""
Get a list of deployments.
"""
	deployments(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: DeploymentOrder
"""
Filter options for the deployments returned from the connection.
"""
		filter: DeploymentFilter
	): DeploymentConnection!
"""
Get a list of environments.
"""
	environments(
"""
Ordering options for environments.
"""
		orderBy: EnvironmentOrder
	): EnvironmentConnection!
"""
Get a single environment.
"""
	environment(
"""
The name of the environment to get.
"""
		name: String!
	): Environment!
"""
Feature flags.
"""
	features: Features!
"""
Get current prices for resources.
"""
	currentUnitPrices: CurrentUnitPrices!
"""
Get a collection of reconcilers.
"""
	reconcilers(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): ReconcilerConnection!
"""
Search for entities.
"""
	search(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Filter the search results.
"""
		filter: SearchFilter!
	): SearchNodeConnection!
"""
Get a list of service accounts.
"""
	serviceAccounts(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): ServiceAccountConnection!
"""
Returns a service account by its ID.
"""
	serviceAccount(
"""
ID of the service account.
"""
		id: ID!
	): ServiceAccount!
"""
Get a list of teams.
"""
	teams(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: TeamOrder
"""
Filter options for the teams returned from the connection.
"""
		filter: TeamFilter
	): TeamConnection!
"""
Get a team by its slug.
"""
	team(
		slug: Slug!
	): Team!
"""
Get a list of available release channels for Unleash instances.
Release channels provide automatic version updates based on the channel's update policy.
"""
	unleashReleaseChannels: [UnleashReleaseChannel!]!
"""
Get a list of users.
"""
	users(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: UserOrder
	): UserConnection!
"""
Get a user by an identifier.
"""
	user(
		email: String
	): User!
"""
The currently authenticated user.
"""
	me: AuthenticatedUser!
"""
Log entries from the user sync process.
"""
	userSyncLog(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): UserSyncLogEntryConnection!
	teamsUtilization(
		resourceType: UtilizationResourceType!
	): [TeamUtilizationData!]!
"""
Get the vulnerability summary history for all teams.
"""
	imageVulnerabilityHistory(
"""
Get vulnerability summary from given date until today.
"""
		from: Date!
	): ImageVulnerabilityHistory!
"""
Get the vulnerability summary for the tenant.
"""
	vulnerabilitySummary: TenantVulnerabilitySummary!
"""
Get the mean time to fix history for all teams.
"""
	vulnerabilityFixHistory(
		from: Date!
	): VulnerabilityFixHistory!
"""
Get a specific CVE by its identifier.
"""
	cve(
		identifier: String!
	): CVE!
"""
List active CVEs for workloads in all environments.
"""
	cves(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: CVEOrder
	): CVEConnection!
}

"""
Reconciler type.
"""
type Reconciler implements Node & ActivityLogger{
"""
Unique identifier for the reconciler.
"""
	id: ID!
"""
The name of the reconciler.
"""
	name: String!
"""
The human-friendly name of the reconciler.
"""
	displayName: String!
"""
Description of what the reconciler is responsible for.
"""
	description: String!
"""
Whether or not the reconciler is enabled.
"""
	enabled: Boolean!
"""
Reconciler configuration keys and descriptions.
"""
	config: [ReconcilerConfig!]!
"""
Whether or not the reconciler is fully configured and ready to be enabled.
"""
	configured: Boolean!
"""
Potential errors that have occurred during the reconciler's operation.
"""
	errors(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): ReconcilerErrorConnection!
"""
Activity log associated with the reconciler.
"""
	activityLog(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Filter items.
"""
		filter: ActivityLogFilter
	): ActivityLogEntryConnection!
}

"""
Reconciler configuration type.
"""
type ReconcilerConfig {
"""
Configuration key.
"""
	key: String!
"""
The human-friendly name of the configuration key.
"""
	displayName: String!
"""
Configuration description.
"""
	description: String!
"""
Whether or not the configuration key has a value.
"""
	configured: Boolean!
"""
Whether or not the configuration value is considered a secret. Secret values will not be exposed through the API.
"""
	secret: Boolean!
"""
Configuration value. This will be set to null if the value is considered a secret.
"""
	value: String
}

"""
Reconciler configuration input.
"""
input ReconcilerConfigInput {
"""
Reconciler configuration input.
"""
	key: String!
"""
Reconciler configuration input.
"""
	value: String!
}

type ReconcilerConfiguredActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the update.
"""
	data: ReconcilerConfiguredActivityLogEntryData!
}

type ReconcilerConfiguredActivityLogEntryData {
"""
Keys that were updated.
"""
	updatedKeys: [String!]!
}

type ReconcilerConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [Reconciler!]!
"""
List of edges.
"""
	edges: [ReconcilerEdge!]!
}

type ReconcilerDisabledActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type ReconcilerEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The reconciler.
"""
	node: Reconciler!
}

type ReconcilerEnabledActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type ReconcilerError implements Node{
"""
Unique identifier for the reconciler error.
"""
	id: ID!
"""
The correlation ID for the reconciler error.
"""
	correlationID: String!
"""
Creation timestamp of the reconciler error.
"""
	createdAt: Time!
"""
The error message itself.
"""
	message: String!
"""
The team that the error belongs to.
"""
	team: Team!
}

type ReconcilerErrorConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [ReconcilerError!]!
"""
List of edges.
"""
	edges: [ReconcilerErrorEdge!]!
}

type ReconcilerErrorEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The reconcilerError.
"""
	node: ReconcilerError!
}

input RemoveConfigValueInput {
	configName: String!
	environmentName: String!
	teamSlug: Slug!
	valueName: String!
}

type RemoveConfigValuePayload {
"""
The updated config.
"""
	config: Config
}

input RemoveRepositoryFromTeamInput {
	teamSlug: Slug!
	repositoryName: String!
}

type RemoveRepositoryFromTeamPayload {
"""
Whether or not the repository was removed from the team.
"""
	success: Boolean
}

input RemoveSecretValueInput {
	secretName: String!
	environment: String!
	team: Slug!
	valueName: String!
}

type RemoveSecretValuePayload {
"""
The updated secret.
"""
	secret: Secret
}

input RemoveTeamMemberInput {
	teamSlug: Slug!
	userEmail: String!
}

type RemoveTeamMemberPayload {
"""
The user that was removed from the team.
"""
	user: User
"""
The team that the member was removed from.
"""
	team: Team
}

input RemoveWorkloadFromServiceAccountInput {
	bindingID: ID!
}

type RemoveWorkloadFromServiceAccountPayload {
"""
The service account the binding was associated with.
"""
	serviceAccount: ServiceAccount
"""
True if the binding was removed.
"""
	bindingDeleted: Boolean
}

type Repository implements Node{
"""
ID of the repository.
"""
	id: ID!
"""
Name of the repository, with the organization prefix.
"""
	name: String!
"""
Team this repository is connected to.
"""
	team: Team!
}

type RepositoryAddedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type RepositoryConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [Repository!]!
"""
List of edges.
"""
	edges: [RepositoryEdge!]!
}

type RepositoryEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The GitHub repository.
"""
	node: Repository!
}

"""
Ordering options when fetching repositories.
"""
input RepositoryOrder {
"""
Ordering options when fetching repositories.
"""
	field: RepositoryOrderField!
"""
Ordering options when fetching repositories.
"""
	direction: OrderDirection!
}

enum RepositoryOrderField {
"""
Order repositories by name.
"""
	NAME
}

type RepositoryRemovedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

input RequestTeamDeletionInput {
	slug: Slug!
}

type RequestTeamDeletionPayload {
"""
The delete key for the team. This can be used to confirm the deletion of the team.
"""
	key: TeamDeleteKey
}

"""
A single field that changed.
"""
type ResourceChangedField {
"""
The dot-separated path to the changed field, e.g. 'spec.replicas'.
"""
	field: String!
"""
The value before the change. Null if the field was added.
"""
	oldValue: String
"""
The value after the change. Null if the field was removed.
"""
	newValue: String
}

input ResourceIssueFilter {
	severity: Severity
	issueType: IssueType
}

"""
A user-defined label attached to a resource.

Labels are key-value pairs that teams can use to organize and filter their
resources. Both the key and the value may contain letters, numbers, hyphens,
underscores and dots, and may be at most 63 characters long.
"""
type ResourceLabel {
"""
The label key.
"""
	key: String!
"""
The label value.
"""
	value: String!
}

"""
A user-defined label to set on a resource.
"""
input ResourceLabelInput {
"""
A user-defined label to set on a resource.
"""
	key: String!
"""
A user-defined label to set on a resource.
"""
	value: String!
}

enum ResourceType {
	OPENSEARCH
	VALKEY
	SQLINSTANCE
	APPLICATION
	JOB
	UNLEASH
}

input RestartApplicationInput {
	name: String!
	teamSlug: Slug!
	environmentName: String!
}

type RestartApplicationPayload {
"""
The application that was restarted.
"""
	application: Application
}

input RevokeRoleFromServiceAccountInput {
	serviceAccountID: ID!
	roleName: String!
}

type RevokeRoleFromServiceAccountPayload {
"""
The service account that had a role revoked.
"""
	serviceAccount: ServiceAccount
}

input RevokeTeamAccessToUnleashInput {
	teamSlug: Slug!
	revokedTeamSlug: Slug!
}

type RevokeTeamAccessToUnleashPayload {
	unleash: UnleashInstance
}

type Role implements Node{
"""
The globally unique ID of the role.
"""
	id: ID!
"""
Name of the role.
"""
	name: String!
"""
Description of the role.
"""
	description: String!
}

type RoleAssignedToServiceAccountActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: RoleAssignedToServiceAccountActivityLogEntryData!
}

type RoleAssignedToServiceAccountActivityLogEntryData {
"""
The added role.
"""
	roleName: String!
}

"""
Assigned role to user log entry.
"""
type RoleAssignedUserSyncLogEntry implements UserSyncLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the log entry.
"""
	message: String!
"""
The ID of the user that was assigned a role.
"""
	userID: ID!
"""
The name of the user that was assigned a role.
"""
	userName: String!
"""
The email address of the user that was assigned a role.
"""
	userEmail: String!
"""
The name of the assigned role.
"""
	roleName: String!
}

type RoleConnection {
"""
A list of roles.
"""
	nodes: [Role!]!
"""
A list of role edges.
"""
	edges: [RoleEdge!]!
"""
Information to aid in pagination.
"""
	pageInfo: PageInfo!
}

type RoleEdge {
"""
The role.
"""
	node: Role!
"""
A cursor for use in pagination.
"""
	cursor: Cursor!
}

input RoleFilter {
	excludeGlobalRoles: Boolean
}

type RoleRevokedFromServiceAccountActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: RoleRevokedFromServiceAccountActivityLogEntryData!
}

type RoleRevokedFromServiceAccountActivityLogEntryData {
"""
The removed role.
"""
	roleName: String!
}

"""
Revoked role from user log entry.
"""
type RoleRevokedUserSyncLogEntry implements UserSyncLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the log entry.
"""
	message: String!
"""
The ID of the user that got a role revoked.
"""
	userID: ID!
"""
The name of the user that got a role revoked.
"""
	userName: String!
"""
The email address of the user that got a role revoked.
"""
	userEmail: String!
"""
The name of the revoked role.
"""
	roleName: String!
}

"""
The SBOM pipeline status for an image or workload.
"""
enum SBOMStatus {
"""
SBOM generation is in progress.
"""
	PROCESSING
"""
SBOM data is available.
"""
	READY
"""
No SBOM is available for this image or workload.
"""
	NO_SBOM
"""
SBOM generation failed.
"""
	FAILED
}

enum ScalingDirection {
"""
The scaling direction is up.
"""
	UP
"""
The scaling direction is down.
"""
	DOWN
}

"""
Types of scaling strategies.
"""
union ScalingStrategy =CPUScalingStrategy | KafkaLagScalingStrategy

"""
Search filter for filtering search results.
"""
input SearchFilter {
"""
Search filter for filtering search results.
"""
	query: String!
"""
Search filter for filtering search results.
"""
	types: [SearchType!]
"""
Search filter for filtering search results.
"""
	teams: [Slug!]
}

"""
Types that can be searched for.
"""
union SearchNode =Team | Application | BigQueryDataset | Bucket | Job | KafkaTopic | OpenSearch | PostgresBranch | SqlInstance | Valkey

"""
Search node connection.
"""
type SearchNodeConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [SearchNode!]!
"""
List of edges.
"""
	edges: [SearchNodeEdge!]!
}

"""
Search node edge.
"""
type SearchNodeEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The SearchNode.
"""
	node: SearchNode!
}

"""
A list of possible search types.
"""
enum SearchType {
"""
Search for teams.
"""
	TEAM
"""
Search for applications.
"""
	APPLICATION
	BIGQUERY_DATASET
	BUCKET
	JOB
	KAFKA_TOPIC
	OPENSEARCH
	POSTGRES_BRANCH
	SQL_INSTANCE
	VALKEY
}

"""
A secret is a collection of secret values.
"""
type Secret implements Node & ActivityLogger{
"""
The globally unique ID of the secret.
"""
	id: ID!
"""
The name of the secret.
"""
	name: String!
"""
The environment the secret exists in.
"""
	teamEnvironment: TeamEnvironment!
"""
The team that owns the secret.
"""
	team: Team!
"""
The names of the keys in the secret. This does not require elevation to access.
"""
	keys: [String!]!
"""
User-defined labels attached to the secret.
"""
	labels: [ResourceLabel!]!
"""
Applications that use the secret.
"""
	applications(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): ApplicationConnection!
"""
Jobs that use the secret.
"""
	jobs(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): JobConnection!
"""
Workloads that use the secret.
"""
	workloads(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): WorkloadConnection!
"""
Last time the secret was modified.
"""
	lastModifiedAt: Time
"""
User who last modified the secret.
"""
	lastModifiedBy: User
"""
Activity log associated with the secret.
"""
	activityLog(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Filter items.
"""
		filter: ActivityLogFilter
	): ActivityLogEntryConnection!
}

type SecretConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [Secret!]!
"""
List of edges.
"""
	edges: [SecretEdge!]!
"""
Facets for secrets. Provides distribution counts to help narrow down results.
Facet counts are computed over the full result set (ignoring pagination) but respect the current filter.
"""
	facets: SecretFacets
}

type SecretCreatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type SecretDeletedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type SecretEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The Secret.
"""
	node: Secret!
}

"""
Facets for secrets, providing distribution counts across different dimensions.
"""
type SecretFacets {
"""
Distribution of secrets by environment.
"""
	environments: [StringFacetItem!]!
"""
Distribution of secrets by whether they are in use by any workload.
"""
	inUse: [BooleanFacetItem!]!
"""
Distribution of secrets by user-defined labels.
"""
	labels: [LabelFacetItem!]!
}

"""
Input for filtering the secrets of a team.
"""
input SecretFilter {
"""
Input for filtering the secrets of a team.
"""
	name: String
"""
Input for filtering the secrets of a team.
"""
	inUse: Boolean
"""
Input for filtering the secrets of a team.
"""
	environments: [String!]
"""
Input for filtering the secrets of a team.
"""
	labels: [LabelFilter!]
}

input SecretOrder {
	field: SecretOrderField!
	direction: OrderDirection!
}

enum SecretOrderField {
"""
Order secrets by name.
"""
	NAME
"""
Order secrets by the name of the environment.
"""
	ENVIRONMENT
"""
Order secrets by the last time it was modified.
"""
	LAST_MODIFIED_AT
}

type SecretUpdatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: SecretUpdatedActivityLogEntryData!
}

type SecretUpdatedActivityLogEntryData {
"""
The fields that were updated.
"""
	updatedFields: [SecretUpdatedActivityLogEntryDataUpdatedField!]!
}

type SecretUpdatedActivityLogEntryDataUpdatedField {
"""
The name of the field that was updated.
"""
	field: String!
"""
The old value of the field.
"""
	oldValue: String
"""
The new value of the field.
"""
	newValue: String
}

type SecretValue {
"""
The name of the secret value.
"""
	name: String!
"""
The secret value itself. When encoding is BASE64, the value is Base64-encoded binary data.
"""
	value: String!
"""
Encoding of the value. PLAIN_TEXT for UTF-8 text, BASE64 for binary data.
"""
	encoding: ValueEncoding!
}

type SecretValueAddedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: SecretValueAddedActivityLogEntryData!
}

type SecretValueAddedActivityLogEntryData {
"""
The name of the added value.
"""
	valueName: String!
}

input SecretValueInput {
	name: String!
	value: String!
	encoding: ValueEncoding
}

type SecretValueRemovedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: SecretValueRemovedActivityLogEntryData!
}

type SecretValueRemovedActivityLogEntryData {
"""
The name of the removed value.
"""
	valueName: String!
}

type SecretValueUpdatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: SecretValueUpdatedActivityLogEntryData!
}

type SecretValueUpdatedActivityLogEntryData {
"""
The name of the updated value.
"""
	valueName: String!
}

"""
Activity log entry for viewing secret values.
"""
type SecretValuesViewedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: SecretValuesViewedActivityLogEntryData!
}

"""
Data associated with a secret values viewed activity log entry.
"""
type SecretValuesViewedActivityLogEntryData {
"""
The reason provided for viewing the secret values.
"""
	reason: String!
}

"""
The service account type represents machine-users of the Nais API.

These types of users can be used to automate certain parts of the API, for instance team creation and managing team members.

Service accounts are created using the `createServiceAccount` mutation, and authenticate using tokens generated by the `createServiceAccountToken` mutation.
"""
type ServiceAccount implements Node & ActivityLogger{
"""
The globally unique ID of the service account.
"""
	id: ID!
"""
The name of the service account.
"""
	name: String!
"""
The description of the service account.
"""
	description: String!
"""
Creation time of the service account.
"""
	createdAt: Time!
"""
When the service account was last updated.
"""
	updatedAt: Time!
"""
When the service account was last used for authentication.
"""
	lastUsedAt: Time
"""
The team that the service account belongs to.
"""
	team: Team
"""
The roles that are assigned to the service account.
"""
	roles(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): RoleConnection!
"""
The service account tokens.
"""
	tokens(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): ServiceAccountTokenConnection!
"""
Activity log associated with the service account.
"""
	activityLog(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Filter items.
"""
		filter: ActivityLogFilter
	): ActivityLogEntryConnection!
"""
The workloads bound to this service account.
"""
	workloadBindings(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): ServiceAccountWorkloadBindingConnection!
}

type ServiceAccountConnection {
"""
A list of service accounts.
"""
	nodes: [ServiceAccount!]!
"""
A list of edges.
"""
	edges: [ServiceAccountEdge!]!
"""
Information to aid in pagination.
"""
	pageInfo: PageInfo!
}

type ServiceAccountCreatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type ServiceAccountDeletedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type ServiceAccountEdge {
"""
The service account.
"""
	node: ServiceAccount!
"""
A cursor for use in pagination.
"""
	cursor: Cursor!
}

type ServiceAccountToken implements Node{
"""
The globally unique ID of the service account token.
"""
	id: ID!
"""
The name of the service account token.
"""
	name: String!
"""
The description of the service account token.
"""
	description: String!
"""
When the service account token was created.
"""
	createdAt: Time!
"""
When the service account token was last updated.
"""
	updatedAt: Time!
"""
When the service account token was last used for authentication.
"""
	lastUsedAt: Time
"""
Expiry date of the token. If this value is empty the token never expires.
"""
	expiresAt: Date
}

type ServiceAccountTokenConnection {
"""
A list of service accounts tokens.
"""
	nodes: [ServiceAccountToken!]!
"""
A list of edges.
"""
	edges: [ServiceAccountTokenEdge!]!
"""
Information to aid in pagination.
"""
	pageInfo: PageInfo!
}

type ServiceAccountTokenCreatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: ServiceAccountTokenCreatedActivityLogEntryData!
}

type ServiceAccountTokenCreatedActivityLogEntryData {
"""
The name of the service account token.
"""
	tokenName: String!
}

type ServiceAccountTokenDeletedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: ServiceAccountTokenDeletedActivityLogEntryData!
}

type ServiceAccountTokenDeletedActivityLogEntryData {
"""
The name of the service account token.
"""
	tokenName: String!
}

type ServiceAccountTokenEdge {
"""
The service account token.
"""
	node: ServiceAccountToken!
"""
A cursor for use in pagination.
"""
	cursor: Cursor!
}

type ServiceAccountTokenUpdatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: ServiceAccountTokenUpdatedActivityLogEntryData!
}

type ServiceAccountTokenUpdatedActivityLogEntryData {
"""
The name of the service account token that was updated. Null if the entry predates this field being recorded.
"""
	tokenName: String
"""
Fields that were updated.
"""
	updatedFields: [ServiceAccountTokenUpdatedActivityLogEntryDataUpdatedField!]!
}

type ServiceAccountTokenUpdatedActivityLogEntryDataUpdatedField {
"""
The name of the field.
"""
	field: String!
"""
The old value of the field.
"""
	oldValue: String
"""
The new value of the field.
"""
	newValue: String
}

type ServiceAccountUpdatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: ServiceAccountUpdatedActivityLogEntryData!
}

type ServiceAccountUpdatedActivityLogEntryData {
"""
Fields that were updated.
"""
	updatedFields: [ServiceAccountUpdatedActivityLogEntryDataUpdatedField!]!
}

type ServiceAccountUpdatedActivityLogEntryDataUpdatedField {
"""
The name of the field.
"""
	field: String!
"""
The old value of the field.
"""
	oldValue: String
"""
The new value of the field.
"""
	newValue: String
}

"""
A binding between a Nais service account and a Nais workload (application or job). When the workload presents its
Workload Token to the API, the API will authenticate the request as the bound service account.
"""
type ServiceAccountWorkloadBinding implements Node{
"""
The globally unique ID of the binding.
"""
	id: ID!
"""
The service account this binding belongs to.
"""
	serviceAccount: ServiceAccount!
"""
The currently-resolved workload, or null if it can no longer be found (for instance because it has been deleted).
"""
	workload: Workload
"""
The environment the bound workload is deployed in.
"""
	environment: String!
"""
The team slug owning the bound workload.
"""
	teamSlug: Slug!
"""
The name of the bound workload.
"""
	workloadName: String!
"""
True if the binding is broken, i.e. when the workload no longer exists.
"""
	isBroken: Boolean!
"""
When the binding was created.
"""
	createdAt: Time!
"""
When the binding was last used to authenticate against the API. Updates are throttled to at most once per
minute.
"""
	lastUsedAt: Time
}

type ServiceAccountWorkloadBindingAddedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug
"""
The environment the bound workload was deployed in at the time of the binding.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: ServiceAccountWorkloadBindingAddedActivityLogEntryData!
}

type ServiceAccountWorkloadBindingAddedActivityLogEntryData {
"""
The team slug of the workload.
"""
	teamSlug: Slug!
"""
The name of the workload.
"""
	workloadName: String!
"""
The type of the workload at the time of the binding. Null if the workload type could not be determined (e.g. workload was not yet deployed).
"""
	workloadType: WorkloadType
}

type ServiceAccountWorkloadBindingConnection {
"""
A list of bindings.
"""
	nodes: [ServiceAccountWorkloadBinding!]!
"""
A list of edges.
"""
	edges: [ServiceAccountWorkloadBindingEdge!]!
"""
Information to aid in pagination.
"""
	pageInfo: PageInfo!
}

type ServiceAccountWorkloadBindingEdge {
"""
The binding.
"""
	node: ServiceAccountWorkloadBinding!
"""
A cursor for use in pagination.
"""
	cursor: Cursor!
}

type ServiceAccountWorkloadBindingRemovedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug
"""
The environment the bound workload was deployed in at the time of removal.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: ServiceAccountWorkloadBindingRemovedActivityLogEntryData!
}

type ServiceAccountWorkloadBindingRemovedActivityLogEntryData {
"""
The team slug of the workload.
"""
	teamSlug: Slug!
"""
The name of the workload.
"""
	workloadName: String!
"""
The type of the workload at the time of removal. Null if the workload type could not be determined (e.g. workload was not yet deployed).
"""
	workloadType: WorkloadType
}

type ServiceCostSample {
"""
The name of the service.
"""
	service: String!
"""
The cost in euros.
"""
	cost: Float!
}

type ServiceCostSeries {
"""
The date for the cost. When calculating the cost for a monthly period, the date will be the last day of the month that has cost data.
"""
	date: Date!
"""
The sum of the cost across all services.
"""
	sum: Float!
"""
The cost for the services used by the workload.
"""
	services: [ServiceCostSample!]!
}

type ServiceMaintenanceActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

interface ServiceMaintenanceUpdate {
	title: String!
	description: String
}

input SetTeamMemberRoleInput {
	teamSlug: Slug!
	userEmail: String!
	role: TeamMemberRole!
}

type SetTeamMemberRolePayload {
"""
The updated team member.
"""
	member: TeamMember
}

enum Severity {
	CRITICAL
	WARNING
	TODO
}

"""
The slug must:

- contain only lowercase alphanumeric characters or hyphens
- contain at least 3 characters and at most 30 characters
- start with an alphabetic character
- end with an alphanumeric character
- not contain two hyphens in a row

Examples of valid slugs:

- `some-value`
- `someothervalue`
- `my-team-123`
"""
scalar Slug

type SqlDatabase implements Persistence & Node{
	id: ID!
	name: String!
	team: Team!
	teamEnvironment: TeamEnvironment!
	charset: String
	collation: String
	deletionPolicy: String
	healthy: Boolean!
"""
User-defined labels attached to this database.
"""
	labels: [ResourceLabel!]!
}

type SqlInstance implements Persistence & Node{
	id: ID!
	name: String!
	team: Team!
	teamEnvironment: TeamEnvironment!
	workload: Workload
	cascadingDelete: Boolean!
	connectionName: String
	diskAutoresize: Boolean
	diskAutoresizeLimit: Int
	highAvailability: Boolean!
	healthy: Boolean!
	maintenanceVersion: String
	maintenanceWindow: SqlInstanceMaintenanceWindow
	backupConfiguration: SqlInstanceBackupConfiguration
	projectID: String!
	tier: String!
	version: String
	status: SqlInstanceStatus!
"""
User-defined labels attached to this instance.
"""
	labels: [ResourceLabel!]!
	database: SqlDatabase
	flags(
		first: Int
		after: Cursor
		last: Int
		before: Cursor
	): SqlInstanceFlagConnection!
	users(
		first: Int
		after: Cursor
		last: Int
		before: Cursor
		orderBy: SqlInstanceUserOrder
	): SqlInstanceUserConnection!
	metrics: SqlInstanceMetrics!
	state: SqlInstanceState!
"""
Issues that affects the instance.
"""
	issues(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: IssueOrder
"""
Filtering options for items returned from the connection.
"""
		filter: ResourceIssueFilter
	): IssueConnection!
"""
Indicates whether audit logging is enabled for this SQL instance and provides a link to the logs if set.
"""
	auditLog: AuditLog
	cost: SqlInstanceCost!
}

type SqlInstanceBackupConfiguration {
	enabled: Boolean
	startTime: String
	retainedBackups: Int
	pointInTimeRecovery: Boolean
	transactionLogRetentionDays: Int
}

type SqlInstanceConnection {
	pageInfo: PageInfo!
	nodes: [SqlInstance!]!
	edges: [SqlInstanceEdge!]!
}

type SqlInstanceCost {
	sum: Float!
}

type SqlInstanceCpu {
	cores: Float!
	utilization: Float!
}

type SqlInstanceDisk {
	quotaBytes: Int!
	utilization: Float!
}

type SqlInstanceEdge {
	cursor: Cursor!
	node: SqlInstance!
}

input SqlInstanceFilter {
	labels: [LabelFilter!]
}

type SqlInstanceFlag {
	name: String!
	value: String!
}

type SqlInstanceFlagConnection {
	pageInfo: PageInfo!
	nodes: [SqlInstanceFlag!]!
	edges: [SqlInstanceFlagEdge!]!
}

type SqlInstanceFlagEdge {
	cursor: Cursor!
	node: SqlInstanceFlag!
}

type SqlInstanceMaintenanceWindow {
	day: Int!
	hour: Int!
}

type SqlInstanceMemory {
	quotaBytes: Int!
	utilization: Float!
}

type SqlInstanceMetrics {
	cpu: SqlInstanceCpu!
	memory: SqlInstanceMemory!
	disk: SqlInstanceDisk!
}

input SqlInstanceOrder {
	field: SqlInstanceOrderField!
	direction: OrderDirection!
}

enum SqlInstanceOrderField {
	NAME
	VERSION
	ENVIRONMENT
	COST
	CPU_UTILIZATION
	MEMORY_UTILIZATION
	DISK_UTILIZATION
	STATE
"""
Order SqlInstances by issue severity
"""
	ISSUES
}

enum SqlInstanceState {
	UNSPECIFIED
	STOPPED
	RUNNABLE
	SUSPENDED
	PENDING_DELETE
	PENDING_CREATE
	MAINTENANCE
	FAILED
}

type SqlInstanceStateIssue implements Issue & Node{
	id: ID!
	teamEnvironment: TeamEnvironment!
	severity: Severity!
	message: String!
	state: SqlInstanceState!
	sqlInstance: SqlInstance!
}

type SqlInstanceStatus {
	publicIpAddress: String
	privateIpAddress: String
}

type SqlInstanceUser {
	name: String!
	authentication: String!
}

type SqlInstanceUserConnection {
	pageInfo: PageInfo!
	nodes: [SqlInstanceUser!]!
	edges: [SqlInstanceUserEdge!]!
}

type SqlInstanceUserEdge {
	cursor: Cursor!
	node: SqlInstanceUser!
}

input SqlInstanceUserOrder {
	field: SqlInstanceUserOrderField!
	direction: OrderDirection!
}

enum SqlInstanceUserOrderField {
	NAME
	AUTHENTICATION
}

type SqlInstanceVersionIssue implements Issue & Node{
	id: ID!
	teamEnvironment: TeamEnvironment!
	severity: Severity!
	message: String!
	sqlInstance: SqlInstance!
}

input StartOpenSearchMaintenanceInput {
	serviceName: String!
	teamSlug: Slug!
	environmentName: String!
}

type StartOpenSearchMaintenancePayload {
	error: String
}

input StartValkeyMaintenanceInput {
	serviceName: String!
	teamSlug: Slug!
	environmentName: String!
}

type StartValkeyMaintenancePayload {
	error: String
}

"""
The `String`scalar type represents textual data, represented as UTF-8 character sequences. The String type is most often used by GraphQL to represent free-form human-readable text.
"""
scalar String

"""
A shared facet item representing a string value distribution (e.g., pool name, version).
"""
type StringFacetItem {
"""
The string value.
"""
	value: String!
"""
Number of matching resources.
"""
	count: Int!
}

"""
The subscription root for the Nais GraphQL API.
"""
type Subscription {
"""
Subscribe to log lines

This subscription is used to stream log lines.
"""
	log(
		filter: LogSubscriptionFilter!
	): LogLine!
"""
Subscribe to workload logs

This subscription is used to stream logs from a specific workload. When filtering logs you must either specify an
application or a job owned by a team that is running in a specific environment. You can also filter logs on instance
name(s).
"""
	workloadLog(
		filter: WorkloadLogSubscriptionFilter!
	): WorkloadLogLine!
}

"""
The team type represents a team on the [Nais platform](https://nais.io/).

Learn more about what Nais teams are and what they can be used for in the [official Nais documentation](https://docs.nais.io/explanations/team/).

External resources (e.g. entraIDGroupID, gitHubTeamSlug) are managed by [Nais API reconcilers](https://github.com/nais/api-reconcilers).
"""
type Team implements Node & ActivityLogger{
"""
The globally unique ID of the team.
"""
	id: ID!
"""
Unique slug of the team.
"""
	slug: Slug!
"""
Main Slack channel for the team.
"""
	slackChannel: String!
"""
Purpose of the team.
"""
	purpose: String!
"""
External resources for the team.
"""
	externalResources: TeamExternalResources!
"""
Get a specific member of the team.
"""
	member(
		email: String!
	): TeamMember!
"""
Team members.
"""
	members(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: TeamMemberOrder
	): TeamMemberConnection!
"""
Timestamp of the last successful synchronization of the team.
"""
	lastSuccessfulSync: Time
"""
Whether or not the team is currently being deleted.
"""
	deletionInProgress: Boolean!
"""
Whether or not the viewer is an owner of the team.
"""
	viewerIsOwner: Boolean!
"""
Whether or not the viewer is a member of the team.
"""
	viewerIsMember: Boolean!
"""
Environments for the team.
"""
	environments: [TeamEnvironment!]!
"""
Get a specific environment for the team.
"""
	environment(
		name: String!
	): TeamEnvironment!
"""
Get a delete key for the team.
"""
	deleteKey(
		key: String!
	): TeamDeleteKey!
"""
Overall inventory of resources for the team.
"""
	inventoryCounts: TeamInventoryCounts!
"""
Activity log associated with the team.
"""
	activityLog(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Filter items.
"""
		filter: ActivityLogFilter
	): ActivityLogEntryConnection!
"""
EXPERIMENTAL: DO NOT USE
"""
	alerts(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: AlertOrder
"""
Filter the returned objects
"""
		filter: TeamAlertsFilter
	): AlertConnection!
"""
Nais applications owned by the team.
"""
	applications(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: ApplicationOrder
"""
Filtering options for items returned from the connection.
"""
		filter: TeamApplicationsFilter
	): ApplicationConnection!
"""
BigQuery datasets owned by the team.
"""
	bigQueryDatasets(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: BigQueryDatasetOrder
"""
Filtering options for items returned from the connection.
"""
		filter: BigQueryDatasetFilter
	): BigQueryDatasetConnection!
"""
Google Cloud Storage buckets owned by the team.
"""
	buckets(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: BucketOrder
"""
Filtering options for items returned from the connection.
"""
		filter: BucketFilter
	): BucketConnection!
"""
Configs owned by the team.
"""
	configs(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: ConfigOrder
"""
Filtering options for items returned from the connection.
"""
		filter: ConfigFilter
	): ConfigConnection!
"""
The cost for the team.
"""
	cost: TeamCost!
"""
Deployment key for the team.
"""
	deploymentKey: DeploymentKey
"""
List deployments for a team.
"""
	deployments(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): DeploymentConnection!
"""
Issues that affects the team.
"""
	issues(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
		orderBy: IssueOrder
		filter: IssueFilter
	): IssueConnection!
"""
Nais jobs owned by the team.
"""
	jobs(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: JobOrder
"""
Filtering options for items returned from the connection.
"""
		filter: TeamJobsFilter
	): JobConnection!
"""
Kafka topics owned by the team.
"""
	kafkaTopics(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: KafkaTopicOrder
"""
Filtering options for items returned from the connection.
"""
		filter: KafkaTopicFilter
	): KafkaTopicConnection!
"""
OpenSearch instances owned by the team.
"""
	openSearches(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: OpenSearchOrder
"""
Filtering options for items returned from the connection.
"""
		filter: OpenSearchFilter
	): OpenSearchConnection!
"Postgres branches owned by the team."
	postgresBranches(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: PostgresBranchOrder
"""
Filtering options for items returned from the connection.
"""
		filter: PostgresBranchFilter
	): PostgresBranchConnection!
	repositories(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: RepositoryOrder
		filter: TeamRepositoryFilter
	): RepositoryConnection!
"""
Secrets owned by the team.
"""
	secrets(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: SecretOrder
"""
Filtering options for items returned from the connection.
"""
		filter: SecretFilter
	): SecretConnection!
"""
Nais service accounts owned by the team.
"""
	serviceAccounts(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): ServiceAccountConnection!
"""
SQL instances owned by the team.
"""
	sqlInstances(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: SqlInstanceOrder
"""
Filtering options for items returned from the connection.
"""
		filter: SqlInstanceFilter
	): SqlInstanceConnection!
	unleash: UnleashInstance
	workloadUtilization(
		resourceType: UtilizationResourceType!
	): [WorkloadUtilizationData]!
	serviceUtilization: TeamServiceUtilization!
"""
Valkey instances owned by the team.
"""
	valkeys(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: ValkeyOrder
"""
Filtering options for items returned from the connection.
"""
		filter: ValkeyFilter
	): ValkeyConnection!
"""
Get the vulnerability summary history for team.
"""
	imageVulnerabilityHistory(
"""
Get vulnerability summary from given date until today.
"""
		from: Date!
	): ImageVulnerabilityHistory!
"""
Get the mean time to fix history for a team.
"""
	vulnerabilityFixHistory(
		from: Date!
	): VulnerabilityFixHistory!
	vulnerabilitySummary(
		filter: TeamVulnerabilitySummaryFilter
	): TeamVulnerabilitySummary!
"""
Fetch vulnerability summaries for workloads in the team.
"""
	vulnerabilitySummaries(
"""
Filter vulnerability summaries by environment.
"""
		filter: TeamVulnerabilitySummaryFilter
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: VulnerabilitySummaryOrder
	): WorkloadVulnerabilitySummaryConnection!
"""
Nais workloads owned by the team.
"""
	workloads(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: WorkloadOrder
"""
Filter the returned objects
"""
		filter: TeamWorkloadsFilter
	): WorkloadConnection!
}

"""
Input for filtering alerts.
"""
input TeamAlertsFilter {
"""
Input for filtering alerts.
"""
	name: String
"""
Input for filtering alerts.
"""
	environments: [String!]
"""
Input for filtering alerts.
"""
	states: [AlertState!]
}

"""
Input for filtering the applications of a team.
"""
input TeamApplicationsFilter {
"""
Input for filtering the applications of a team.
"""
	name: String
"""
Input for filtering the applications of a team.
"""
	environments: [String!]
"""
Input for filtering the applications of a team.
"""
	states: [ApplicationState!]
"""
Input for filtering the applications of a team.
"""
	labels: [LabelFilter!]
}

type TeamCDN {
"""
The CDN bucket for the team.
"""
	bucket: String!
}

type TeamConfirmDeleteKeyActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type TeamConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [Team!]!
"""
List of edges.
"""
	edges: [TeamEdge!]!
}

type TeamCost {
	daily(
"""
Start date of the period, inclusive.
"""
		from: Date!
"""
End date of the period, inclusive.
"""
		to: Date!
"""
Filter the results.
"""
		filter: TeamCostDailyFilter
	): TeamCostPeriod!
	monthlySummary: TeamCostMonthlySummary!
}

input TeamCostDailyFilter {
	services: [String!]
}

type TeamCostMonthlySample {
"""
The last date with cost data in the month.
"""
	date: Date!
"""
The total cost for the month.
"""
	cost: Float!
}

type TeamCostMonthlySummary {
"""
The total cost for the last 12 months.
"""
	sum: Float!
"""
The cost series.
"""
	series: [TeamCostMonthlySample!]!
}

type TeamCostPeriod {
"""
The total cost for the period.
"""
	sum: Float!
"""
The cost series.
"""
	series: [ServiceCostSeries!]!
}

type TeamCreateDeleteKeyActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type TeamCreatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type TeamDeleteKey {
"""
The unique key used to confirm the deletion of a team.
"""
	key: String!
"""
The creation timestamp of the key.
"""
	createdAt: Time!
"""
Expiration timestamp of the key.
"""
	expires: Time!
"""
The user who created the key.
"""
	createdBy: User!
"""
The team the delete key is for.
"""
	team: Team!
}

type TeamDeployKeyUpdatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type TeamEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The team.
"""
	node: Team!
}

type TeamEntraIDGroup {
"""
The ID of the Entra ID (f.k.a. Azure AD) group for the team.
"""
	groupID: String!
}

type TeamEnvironment implements Node{
"""
The globally unique ID of the team environment.
"""
	id: ID!
"""
Name of the team environment.
"""
	name: String! @deprecated(reason: "Use the `environment` field to get the environment name.")
"""
The GCP project ID for the team environment.
"""
	gcpProjectID: String
"""
The Slack alerts channel for the team environment.
"""
	slackAlertsChannel: String!
"""
The connected team.
"""
	team: Team!
"""
EXPERIMENTAL: DO NOT USE
"""
	alerts(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: AlertOrder
"""
Filter the returned objects
"""
		filter: TeamAlertsFilter
	): AlertConnection!
"""
Nais application in the team environment.
"""
	application(
"""
The name of the application.
"""
		name: String!
	): Application!
"""
BigQuery datasets in the team environment.
"""
	bigQueryDataset(
		name: String!
	): BigQueryDataset!
"""
Storage bucket in the team environment.
"""
	bucket(
		name: String!
	): Bucket!
"""
Get a config by name.
"""
	config(
		name: String!
	): Config!
"""
The cost for the team environment.
"""
	cost: TeamEnvironmentCost!
"""
Get the environment.
"""
	environment: Environment!
"""
Nais job in the team environment.
"""
	job(
		name: String!
	): Job!
"""
Kafka topic in the team environment.
"""
	kafkaTopic(
		name: String!
	): KafkaTopic!
"""
OpenSearch instance in the team environment.
"""
	openSearch(
		name: String!
	): OpenSearch!
"""
Postgres in the team environment.
"""
	postgres(
		"Name of the Postgres in this team environment."
		name: String!
	): Postgres!
	"""
	EXPERIMENTAL: DO NOT USE
	Get a PostgresAccess and its state. Available to authorized team members.
	"""
	postgresAccess(
		"Name of the PostgresAccess in this team environment."
		name: String!
	): PostgresAccess!
"""
Get a secret by name.
"""
	secret(
		name: String!
	): Secret!
"""
SQL instance in the team environment.
"""
	sqlInstance(
		name: String!
	): SqlInstance!
"""
Get a specific tunnel by name.
"""
	tunnel(
		name: String!
	): Tunnel
"""
Valkey instance in the team environment.
"""
	valkey(
		name: String!
	): Valkey!
"""
Workload in the team environment.
"""
	workload(
"""
The name of the workload to get.
"""
		name: String!
	): Workload!
}

type TeamEnvironmentCost {
	daily(
"""
Start date of the period, inclusive.
"""
		from: Date!
"""
End date of the period, inclusive.
"""
		to: Date!
	): TeamEnvironmentCostPeriod!
}

type TeamEnvironmentCostPeriod {
"""
The total cost for the period.
"""
	sum: Float!
"""
The cost series.
"""
	series: [WorkloadCostSeries!]!
}

type TeamEnvironmentUpdatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the action.
"""
	data: TeamEnvironmentUpdatedActivityLogEntryData!
}

type TeamEnvironmentUpdatedActivityLogEntryData {
"""
Fields that were updated.
"""
	updatedFields: [TeamEnvironmentUpdatedActivityLogEntryDataUpdatedField!]!
}

type TeamEnvironmentUpdatedActivityLogEntryDataUpdatedField {
"""
The name of the field.
"""
	field: String!
"""
The old value of the field.
"""
	oldValue: String
"""
The new value of the field.
"""
	newValue: String
}

type TeamExternalResources {
"""
The Entra ID (f.k.a. Azure AD) group for the team.
"""
	entraIDGroup: TeamEntraIDGroup
"""
The teams GitHub team.
"""
	gitHubTeam: TeamGitHubTeam
"""
The Google group for the team.
"""
	googleGroup: TeamGoogleGroup
"""
Google Artifact Registry.
"""
	googleArtifactRegistry: TeamGoogleArtifactRegistry
"""
CDN bucket.
"""
	cdn: TeamCDN
}

"""
Input for filtering teams.
"""
input TeamFilter {
"""
Input for filtering teams.
"""
	hasWorkloads: Boolean
}

type TeamGitHubTeam {
"""
The slug of the GitHub team.
"""
	slug: String!
}

type TeamGoogleArtifactRegistry {
"""
The Google Artifact Registry for the team.
"""
	repository: String!
}

type TeamGoogleGroup {
"""
The email address of the Google Workspace group for the team.
"""
	email: String!
}

"""
Application inventory count for a team.
"""
type TeamInventoryCountApplications {
"""
Total number of applications.
"""
	total: Int!
"""
Number of applications in a running state.
"""
	running: Int!
"""
Number of applications in a not running state.
"""
	notRunning: Int!
"""
Number of applications in an unknown state.
"""
	unknown: Int!
}

type TeamInventoryCountBigQueryDatasets {
"""
Total number of BigQuery datasets.
"""
	total: Int!
}

type TeamInventoryCountBuckets {
"""
Total number of Google Cloud Storage buckets.
"""
	total: Int!
}

"""
Config inventory count for a team.
"""
type TeamInventoryCountConfigs {
"""
Total number of configs.
"""
	total: Int!
}

type TeamInventoryCountJobs {
"""
Total number of jobs.
"""
	total: Int!
"""
Number of jobs in a running state.
"""
	running: Int!
"""
Number of jobs in a completed state.
"""
	completed: Int!
"""
Number of jobs in a failed state.
"""
	failed: Int!
"""
Number of jobs in an unknown state.
"""
	unknown: Int!
}

type TeamInventoryCountKafkaTopics {
"""
Total number of Kafka topics.
"""
	total: Int!
}

type TeamInventoryCountOpenSearches {
"""
Total number of OpenSearch instances.
"""
	total: Int!
}

type TeamInventoryCountPostgresBranches {
"""
Total number of Postgres branches.
"""
	total: Int!
}

"""
Secret inventory count for a team.
"""
type TeamInventoryCountSecrets {
"""
Total number of secrets.
"""
	total: Int!
}

type TeamInventoryCountSqlInstances {
"""
Total number of SQL instances.
"""
	total: Int!
}

type TeamInventoryCountValkeys {
"""
Total number of Valkey instances.
"""
	total: Int!
}

type TeamInventoryCounts {
"""
Application inventory count for a team.
"""
	applications: TeamInventoryCountApplications!
	bigQueryDatasets: TeamInventoryCountBigQueryDatasets!
	buckets: TeamInventoryCountBuckets!
"""
Config inventory count for a team.
"""
	configs: TeamInventoryCountConfigs!
	jobs: TeamInventoryCountJobs!
	kafkaTopics: TeamInventoryCountKafkaTopics!
	openSearches: TeamInventoryCountOpenSearches!
	postgresBranches: TeamInventoryCountPostgresBranches!
"""
Secret inventory count for a team.
"""
	secrets: TeamInventoryCountSecrets!
	sqlInstances: TeamInventoryCountSqlInstances!
	valkeys: TeamInventoryCountValkeys!
}

input TeamJobsFilter {
	name: String!
	environments: [String!]
	states: [JobState!]
	labels: [LabelFilter!]
}

type TeamMember {
"""
Team instance.
"""
	team: Team!
"""
User instance.
"""
	user: User!
"""
The role that the user has in the team.
"""
	role: TeamMemberRole!
}

type TeamMemberAddedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the action.
"""
	data: TeamMemberAddedActivityLogEntryData!
}

type TeamMemberAddedActivityLogEntryData {
"""
The role that the user was added with.
"""
	role: TeamMemberRole!
"""
The ID of the user that was added.
"""
	userID: ID!
"""
The email address of the user that was added.
"""
	userEmail: String!
}

type TeamMemberConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [TeamMember!]!
"""
List of edges.
"""
	edges: [TeamMemberEdge!]!
}

type TeamMemberEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The team member.
"""
	node: TeamMember!
}

"""
Ordering options for team members.
"""
input TeamMemberOrder {
"""
Ordering options for team members.
"""
	field: TeamMemberOrderField!
"""
Ordering options for team members.
"""
	direction: OrderDirection!
}

"""
Possible fields to order team members by.
"""
enum TeamMemberOrderField {
"""
The name of user.
"""
	NAME
"""
The email address of the user.
"""
	EMAIL
"""
The role the user has in the team.
"""
	ROLE
}

type TeamMemberRemovedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the action.
"""
	data: TeamMemberRemovedActivityLogEntryData!
}

type TeamMemberRemovedActivityLogEntryData {
"""
The ID of the user that was removed.
"""
	userID: ID!
"""
The email address of the user that was removed.
"""
	userEmail: String!
}

"""
Team member roles.
"""
enum TeamMemberRole {
"""
Member, full access including elevation.
"""
	MEMBER
"""
Team owner, full access to the team including member management.
"""
	OWNER
}

type TeamMemberSetRoleActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the action.
"""
	data: TeamMemberSetRoleActivityLogEntryData!
}

type TeamMemberSetRoleActivityLogEntryData {
"""
The role that the user was assigned.
"""
	role: TeamMemberRole!
"""
The ID of the user that was added.
"""
	userID: ID!
"""
The email address of the user that was added.
"""
	userEmail: String!
}

"""
Ordering options when fetching teams.
"""
input TeamOrder {
"""
Ordering options when fetching teams.
"""
	field: TeamOrderField!
"""
Ordering options when fetching teams.
"""
	direction: OrderDirection!
}

"""
Possible fields to order teams by.
"""
enum TeamOrderField {
"""
The unique slug of the team.
"""
	SLUG
"""
The team's accumulated cost over the last 12 months
"""
	ACCUMULATED_COST
"""
The accumulated risk score of the teams workloads.
"""
	RISK_SCORE
"""
The accumulated number of critical vulnerabilities of the teams workloads.
"""
	CRITICAL_VULNERABILITIES
"""
The accumulated number of high vulnerabilities of the teams workloads.
"""
	HIGH_VULNERABILITIES
"""
The accumulated number of medium vulnerabilities of the teams workloads.
"""
	MEDIUM_VULNERABILITIES
"""
The accumulated number of low vulnerabilities of the teams workloads.
"""
	LOW_VULNERABILITIES
"""
The accumulated number of unassigned vulnerabilities of the teams workloads.
"""
	UNASSIGNED_VULNERABILITIES
"""
The team's software bill of materials (SBOM) coverage.
"""
	SBOM_COVERAGE
}

input TeamRepositoryFilter {
	name: String
}

type TeamServiceUtilization {
	sqlInstances: TeamServiceUtilizationSqlInstances!
}

type TeamServiceUtilizationSqlInstances {
	cpu: TeamServiceUtilizationSqlInstancesCPU!
	memory: TeamServiceUtilizationSqlInstancesMemory!
	disk: TeamServiceUtilizationSqlInstancesDisk!
}

type TeamServiceUtilizationSqlInstancesCPU {
	used: Float!
	requested: Float!
	utilization: Float!
}

type TeamServiceUtilizationSqlInstancesDisk {
	used: Int!
	requested: Int!
	utilization: Float!
}

type TeamServiceUtilizationSqlInstancesMemory {
	used: Int!
	requested: Int!
	utilization: Float!
}

type TeamUpdatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the update.
"""
	data: TeamUpdatedActivityLogEntryData!
}

type TeamUpdatedActivityLogEntryData {
"""
Fields that were updated.
"""
	updatedFields: [TeamUpdatedActivityLogEntryDataUpdatedField!]!
}

type TeamUpdatedActivityLogEntryDataUpdatedField {
"""
The name of the field.
"""
	field: String!
"""
The old value of the field.
"""
	oldValue: String
"""
The new value of the field.
"""
	newValue: String
}

type TeamUtilizationData {
"""
The team.
"""
	team: Team!
"""
The requested amount of resources
"""
	requested: Float!
"""
The current resource usage.
"""
	used: Float!
"""
The environment for the utilization data.
"""
	teamEnvironment: TeamEnvironment!
}

enum TeamVulnerabilityRiskScoreTrend {
"""
Risk score is increasing.
"""
	UP
"""
Risk score is decreasing.
"""
	DOWN
"""
Risk score is not changing.
"""
	FLAT
}

type TeamVulnerabilitySummary {
"""
Risk score of the team.
"""
	riskScore: Int!
"""
Vulnerability counts grouped by severity.
"""
	countsBySeverity: ImageVulnerabilitySummaryCountsBySeverity!
"""
Vulnerability counts grouped by operational priority.
"""
	countsByPriority: ImageVulnerabilitySummaryCountsByPriority!
"""
Number of vulnerabilities with severity CRITICAL.
"""
	critical: Int! @deprecated(reason: "Use countsBySeverity.critical instead.")
"""
Number of vulnerabilities with severity HIGH.
"""
	high: Int! @deprecated(reason: "Use countsBySeverity.high instead.")
"""
Number of vulnerabilities with severity MEDIUM.
"""
	medium: Int! @deprecated(reason: "Use countsBySeverity.medium instead.")
"""
Number of vulnerabilities with severity LOW.
"""
	low: Int! @deprecated(reason: "Use countsBySeverity.low instead.")
"""
Number of vulnerabilities with severity UNASSIGNED.
"""
	unassigned: Int! @deprecated(reason: "Use countsBySeverity.unassigned instead.")
"""
Number of workloads with a software bill of materials (SBOM) attached.
"""
	sbomCount: Int!
"""
Coverage of the team.
"""
	coverage: Float!
"""
Timestamp of the last update of the vulnerability summary.
"""
	lastUpdated: Time
"""
Trend of vulnerability status for the team.
"""
	riskScoreTrend: TeamVulnerabilityRiskScoreTrend!
}

"""
Input for filtering team vulnerability summaries.
"""
input TeamVulnerabilitySummaryFilter {
"""
Input for filtering team vulnerability summaries.
"""
	environmentName: String
"""
Input for filtering team vulnerability summaries.
"""
	priority: CVEPriority
}

"""
Input for filtering team workloads.
"""
input TeamWorkloadsFilter {
"""
Input for filtering team workloads.
"""
	environments: [String!]
"""
Input for filtering team workloads.
"""
	labels: [LabelFilter!]
}

type TenantVulnerabilitySummary {
"""
Risk score of the tenant.
"""
	riskScore: Int!
"""
Vulnerability counts grouped by severity.
"""
	countsBySeverity: ImageVulnerabilitySummaryCountsBySeverity!
"""
Vulnerability counts grouped by operational priority.
"""
	countsByPriority: ImageVulnerabilitySummaryCountsByPriority!
"""
Number of vulnerabilities with severity CRITICAL.
"""
	critical: Int! @deprecated(reason: "Use countsBySeverity.critical instead.")
"""
Number of vulnerabilities with severity HIGH.
"""
	high: Int! @deprecated(reason: "Use countsBySeverity.high instead.")
"""
Number of vulnerabilities with severity MEDIUM.
"""
	medium: Int! @deprecated(reason: "Use countsBySeverity.medium instead.")
"""
Number of vulnerabilities with severity LOW.
"""
	low: Int! @deprecated(reason: "Use countsBySeverity.low instead.")
"""
Number of vulnerabilities with severity UNASSIGNED.
"""
	unassigned: Int! @deprecated(reason: "Use countsBySeverity.unassigned instead.")
"""
Number of workloads with a software bill of materials (SBOM) attached.
"""
	sbomCount: Int!
"""
SBOM Coverage of the tenant.
"""
	coverage: Float!
"""
Timestamp of the last update of the vulnerability summary.
"""
	lastUpdated: Time
}

"""
Time is a string in [RFC 3339](https://rfc-editor.org/rfc/rfc3339.html) format, with sub-second precision added if present.
"""
scalar Time

"""
TimeOfDay is the time of day, represented as a string in the format HH:MM:SS.
"""
scalar TimeOfDay

"""
TokenX authentication.

Read more: https://docs.nais.io/auth/tokenx/
"""
type TokenXAuthIntegration implements AuthIntegration{
"""
The name of the integration.
"""
	name: String!
}

input TriggerJobInput {
	name: String!
	teamSlug: Slug!
	environmentName: String!
	runName: String!
}

type TriggerJobPayload {
"""
The job that was triggered.
"""
	job: Job
"""
The new job run.
"""
	jobRun: JobRun
}

"""
A WireGuard tunnel between the CLI and an in-cluster gateway.
"""
type Tunnel implements Node{
"""
Globally unique ID of the tunnel.
"""
	id: ID!
"""
The name of the tunnel.
"""
	name: String!
"""
The current phase of the tunnel.
"""
	phase: TunnelPhase!
"""
The WireGuard public key of the gateway.
"""
	gatewayPublicKey: String!
"""
The forwarder endpoint used by the client to reach the gateway.
"""
	forwarderEndpoint: String!
"""
The target destination (host and port) for the tunnel.
"""
	target: TunnelTarget!
"""
Status message describing the tunnel state.
"""
	message: String!
"""
Creation time of the tunnel.
"""
	createdAt: Time!
}

type TunnelCreatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the update.
"""
	data: TunnelCreatedActivityLogEntryData!
}

type TunnelCreatedActivityLogEntryData {
"""
The name of the tunnel that was created.
"""
	tunnelName: String!
"""
The target host of the tunnel.
"""
	targetHost: String!
}

type TunnelDeletedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the update.
"""
	data: TunnelDeletedActivityLogEntryData!
}

type TunnelDeletedActivityLogEntryData {
"""
The name of the tunnel that was deleted.
"""
	tunnelName: String!
}

"""
The lifecycle phase of a Tunnel.
"""
enum TunnelPhase {
	PENDING
	PROVISIONING
	READY
	CONNECTED
	FAILED
	TERMINATED
}

"""
The target destination for a WireGuard tunnel.
"""
type TunnelTarget {
	host: String!
	port: Int!
}

type UnleashInstance implements Node{
	id: ID!
	name: String!
	version: String!
	allowedTeams(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): TeamConnection!
	webIngress: String!
	apiIngress: String!
	metrics: UnleashInstanceMetrics!
	ready: Boolean!
"""
Release channel name for automatic version updates.
"""
	releaseChannelName: String!
"""
Release channel details.
Returns the full release channel object with current version and update policy.
"""
	releaseChannel: UnleashReleaseChannel
}

type UnleashInstanceCreatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type UnleashInstanceDeletedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type UnleashInstanceMetrics {
	toggles: Int!
	apiTokens: Int!
	cpuUtilization: Float!
	cpuRequests: Float!
	memoryUtilization: Float!
	memoryRequests: Float!
}

type UnleashInstanceUpdatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the update.
"""
	data: UnleashInstanceUpdatedActivityLogEntryData!
}

type UnleashInstanceUpdatedActivityLogEntryData {
"""
Revoked team slug.
"""
	revokedTeamSlug: Slug
"""
Allowed team slug.
"""
	allowedTeamSlug: Slug
"""
Updated release channel.
"""
	updatedReleaseChannel: String
}

"""
UnleashReleaseChannel represents an available release channel for Unleash instances.
Release channels provide automatic version updates based on the channel's update policy.
"""
type UnleashReleaseChannel {
"""
Unique name of the release channel (e.g., 'stable', 'rapid', 'regular').
"""
	name: String!
"""
Current Unleash version on this channel.
"""
	currentVersion: String!
"""
Rollout strategy type for version updates:
- 'sequential': Updates instances one-by-one in order
- 'canary': Gradual rollout with canary deployment
- 'parallel': Updates multiple instances simultaneously
"""
	type: String!
"""
When the channel version was last updated.
"""
	lastUpdated: Time
}

type UnleashReleaseChannelIssue implements Issue & Node{
	id: ID!
	teamEnvironment: TeamEnvironment!
	severity: Severity!
	message: String!
	unleash: UnleashInstance!
"""
The name of the release channel the instance is on.
"""
	channelName: String!
"""
The major version of Unleash the instance is running.
"""
	majorVersion: Int!
"""
The current major version of Unleash available.
"""
	currentMajorVersion: Int!
}

"""
Input for updating an application.
"""
input UpdateApplicationInput {
"""
Input for updating an application.
"""
	name: String!
"""
Input for updating an application.
"""
	teamSlug: Slug!
"""
Input for updating an application.
"""
	environmentName: String!
"""
Input for updating an application.
"""
	environmentVariables: [UpdateWorkloadEnvironmentVariableInput!]
"""
Input for updating an application.
"""
	replicas: UpdateApplicationReplicasInput
"""
Input for updating an application.
"""
	image: String
}

"""
Payload for updating an application.
"""
type UpdateApplicationPayload {
"""
The updated application.
"""
	application: Application
}

"""
Input for updating the replica configuration of an application.
"""
input UpdateApplicationReplicasInput {
"""
Input for updating the replica configuration of an application.
"""
	min: Int!
"""
Input for updating the replica configuration of an application.
"""
	max: Int!
}

input UpdateConfigInput {
	name: String!
	environmentName: String!
	teamSlug: Slug!
	labels: [ResourceLabelInput!]
	values: [ConfigValueInput!]
}

type UpdateConfigPayload {
"""
The updated config.
"""
	config: Config
}

input UpdateConfigValueInput {
	name: String!
	environmentName: String!
	teamSlug: Slug!
	value: ConfigValueInput!
}

type UpdateConfigValuePayload {
"""
The updated config.
"""
	config: Config
}

input UpdateImageVulnerabilityInput {
	vulnerabilityID: ID!
	reason: String!
	suppress: Boolean!
	state: ImageVulnerabilitySuppressionState
}

type UpdateImageVulnerabilityPayload {
"""
The vulnerability updated.
"""
	vulnerability: ImageVulnerability
}

input UpdateJobInput {
	name: String!
	teamSlug: Slug!
	environmentName: String!
	environmentVariables: [UpdateWorkloadEnvironmentVariableInput!]
}

"""
Payload for updating a job.
"""
type UpdateJobPayload {
"""
The updated job.
"""
	job: Job
}

"""
Input for the updateKafkaTopic mutation.
"""
input UpdateKafkaTopicInput {
"""
Input for the updateKafkaTopic mutation.
"""
	name: String!
"""
Input for the updateKafkaTopic mutation.
"""
	teamSlug: Slug!
"""
Input for the updateKafkaTopic mutation.
"""
	environmentName: String!
"""
Input for the updateKafkaTopic mutation.
"""
	addGrants: [KafkaTopicGrantInput!]
"""
Input for the updateKafkaTopic mutation.
"""
	revokeGrants: [KafkaTopicGrantInput!]
}

"""
Payload of the updateKafkaTopic mutation.
"""
type UpdateKafkaTopicPayload {
"""
Updated Kafka topic.
"""
	kafkaTopic: KafkaTopic!
}

input UpdateOpenSearchInput {
	name: String!
	environmentName: String!
	teamSlug: Slug!
	tier: OpenSearchTier!
	memory: OpenSearchMemory!
	version: OpenSearchMajorVersion!
	storageGB: Int!
	labels: [ResourceLabelInput!]
	shardIndexingPressureEnabled: Boolean
	shardIndexingPressureEnforced: Boolean
	indicesQueryBoolMaxClauseCount: Int
	httpMaxContentLength: String
}

type UpdateOpenSearchPayload {
"""
OpenSearch instance that was updated.
"""
	openSearch: OpenSearch!
}

input UpdateSecretInput {
	name: String!
	environmentName: String!
	teamSlug: Slug!
	labels: [ResourceLabelInput!]!
}

type UpdateSecretPayload {
"""
The updated secret.
"""
	secret: Secret
}

input UpdateSecretValueInput {
	name: String!
	environment: String!
	team: Slug!
	value: SecretValueInput!
}

type UpdateSecretValuePayload {
"""
The updated secret.
"""
	secret: Secret
}

input UpdateServiceAccountInput {
	serviceAccountID: ID!
	description: String
}

type UpdateServiceAccountPayload {
"""
The updated service account.
"""
	serviceAccount: ServiceAccount
}

input UpdateServiceAccountTokenInput {
	serviceAccountTokenID: ID!
	name: String
	description: String
}

type UpdateServiceAccountTokenPayload {
"""
The service account that the token belongs to.
"""
	serviceAccount: ServiceAccount
"""
The updated service account token.
"""
	serviceAccountToken: ServiceAccountToken
}

input UpdateTeamEnvironmentInput {
	slug: Slug!
	environmentName: String!
	slackAlertsChannel: String
}

type UpdateTeamEnvironmentPayload {
"""
The updated team environment.
"""
	environment: TeamEnvironment @deprecated(reason: "Use the `teamEnvironment` field instead.")
"""
The updated team environment.
"""
	teamEnvironment: TeamEnvironment
}

input UpdateTeamInput {
	slug: Slug!
	purpose: String
	slackChannel: String
}

type UpdateTeamPayload {
"""
The updated team.
"""
	team: Team
}

input UpdateUnleashInstanceInput {
	teamSlug: Slug!
	releaseChannel: String
}

type UpdateUnleashInstancePayload {
	unleash: UnleashInstance
}

input UpdateValkeyInput {
	name: String!
	environmentName: String!
	teamSlug: Slug!
	tier: ValkeyTier!
	memory: ValkeyMemory!
	maxMemoryPolicy: ValkeyMaxMemoryPolicy
	notifyKeyspaceEvents: String
	databases: Int
	labels: [ResourceLabelInput!]
	persistenceDisabled: Boolean
}

type UpdateValkeyPayload {
"""
Valkey instance that was updated.
"""
	valkey: Valkey!
}

"""
Input for setting an environment variable on a workload. To remove a variable, set value to null.
"""
input UpdateWorkloadEnvironmentVariableInput {
"""
Input for setting an environment variable on a workload. To remove a variable, set value to null.
"""
	name: String!
"""
Input for setting an environment variable on a workload. To remove a variable, set value to null.
"""
	value: String
}

"""
The user type represents a user of the Nais platform and the Nais GraphQL API.
"""
type User implements Node{
"""
The globally unique ID of the user.
"""
	id: ID!
"""
The email address of the user.
"""
	email: String!
"""
The full name of the user.
"""
	name: String!
"""
The external ID of the user. This value is managed by the Nais API user synchronization.
"""
	externalID: String!
"""
List of teams the user is connected to.
"""
	teams(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: UserTeamOrder
	): TeamMemberConnection!
"""
True if the user is global admin.
"""
	isAdmin: Boolean!
}

"""
User connection.
"""
type UserConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [User!]!
"""
List of edges.
"""
	edges: [UserEdge!]!
}

"""
User created log entry.
"""
type UserCreatedUserSyncLogEntry implements UserSyncLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the log entry.
"""
	message: String!
"""
The ID of the created user.
"""
	userID: ID!
"""
The name of the created user.
"""
	userName: String!
"""
The email address of the created user.
"""
	userEmail: String!
}

"""
User deleted log entry.
"""
type UserDeletedUserSyncLogEntry implements UserSyncLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the log entry.
"""
	message: String!
"""
The ID of the deleted user.
"""
	userID: ID!
"""
The name of the deleted user.
"""
	userName: String!
"""
The email address of the deleted user.
"""
	userEmail: String!
}

"""
User edge.
"""
type UserEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The user.
"""
	node: User!
}

"""
Ordering options when fetching users.
"""
input UserOrder {
"""
Ordering options when fetching users.
"""
	field: UserOrderField!
"""
Ordering options when fetching users.
"""
	direction: OrderDirection!
}

"""
Possible fields to order users by.
"""
enum UserOrderField {
"""
The name of the user.
"""
	NAME
"""
The email address of the user.
"""
	EMAIL
}

"""
Interface for user sync log entries.
"""
interface UserSyncLogEntry {
"""
Interface for user sync log entries.
"""
	id: ID!
"""
Interface for user sync log entries.
"""
	createdAt: Time!
"""
Interface for user sync log entries.
"""
	message: String!
"""
Interface for user sync log entries.
"""
	userID: ID!
"""
Interface for user sync log entries.
"""
	userName: String!
"""
Interface for user sync log entries.
"""
	userEmail: String!
}

"""
User sync log entry connection.
"""
type UserSyncLogEntryConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [UserSyncLogEntry!]!
"""
List of edges.
"""
	edges: [UserSyncLogEntryEdge!]!
}

"""
User sync log edge.
"""
type UserSyncLogEntryEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The log entry.
"""
	node: UserSyncLogEntry!
}

"""
Ordering options when fetching the teams a user is connected to.
"""
input UserTeamOrder {
"""
Ordering options when fetching the teams a user is connected to.
"""
	field: UserTeamOrderField!
"""
Ordering options when fetching the teams a user is connected to.
"""
	direction: OrderDirection!
}

"""
Possible fields to order user teams by.
"""
enum UserTeamOrderField {
"""
The unique slug of the team.
"""
	TEAM_SLUG
}

"""
User updated log entry.
"""
type UserUpdatedUserSyncLogEntry implements UserSyncLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the log entry.
"""
	message: String!
"""
The ID of the updated user.
"""
	userID: ID!
"""
The name of the updated user.
"""
	userName: String!
"""
The email address of the updated user.
"""
	userEmail: String!
"""
The old name of the user.
"""
	oldUserName: String!
"""
The old email address of the user.
"""
	oldUserEmail: String!
}

"""
Resource type.
"""
enum UtilizationResourceType {
	CPU
	MEMORY
}

"""
Resource utilization type.
"""
type UtilizationSample {
"""
Timestamp of the value.
"""
	timestamp: Time!
"""
Value of the used resource at the given timestamp.
"""
	value: Float!
"""
The instance for the utilization data.
"""
	instance: String!
}

type Valkey implements Persistence & Node & ActivityLogger{
	id: ID!
	name: String!
	terminationProtection: Boolean!
	team: Team!
	teamEnvironment: TeamEnvironment!
"""
User-defined labels attached to the instance.
"""
	labels: [ResourceLabel!]!
	access(
		first: Int
		after: Cursor
		last: Int
		before: Cursor
		orderBy: ValkeyAccessOrder
	): ValkeyAccessConnection!
	workload: Workload @deprecated(reason: "Owners of valkeys have been removed, so this will always be null.")
	state: ValkeyState!
"""
Availability tier for the Valkey instance.
"""
	tier: ValkeyTier!
"""
Available memory for the Valkey instance.
"""
	memory: ValkeyMemory!
"""
Maximum memory policy for the Valkey instance.
"""
	maxMemoryPolicy: ValkeyMaxMemoryPolicy
"""
Keyspace notifications for the Valkey instance. See https://valkey.io/topics/notifications/ for details.
"""
	notifyKeyspaceEvents: String
"""
Number of databases the Valkey instance is configured with. Default is 16. Minimum 1, maximum 128. Changing this will cause a restart of the Valkey service.
"""
	databases: Int!
"""
Whether persistence (RDB dumps and backups) is disabled. If true, all data is lost if the instance is restarted for any reason.
"""
	persistenceDisabled: Boolean!
"""
Issues that affects the instance.
"""
	issues(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Ordering options for items returned from the connection.
"""
		orderBy: IssueOrder
"""
Filtering options for items returned from the connection.
"""
		filter: ResourceIssueFilter
	): IssueConnection!
"""
Activity log associated with the reconciler.
"""
	activityLog(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
"""
Filter items.
"""
		filter: ActivityLogFilter
	): ActivityLogEntryConnection!
	cost: ValkeyCost!
"""
Fetch maintenances updates for the Valkey instance.
"""
	maintenance: ValkeyMaintenance!
}

type ValkeyAccess {
	workload: Workload!
	access: String!
}

type ValkeyAccessConnection {
	pageInfo: PageInfo!
	nodes: [ValkeyAccess!]!
	edges: [ValkeyAccessEdge!]!
}

type ValkeyAccessEdge {
	cursor: Cursor!
	node: ValkeyAccess!
}

input ValkeyAccessOrder {
	field: ValkeyAccessOrderField!
	direction: OrderDirection!
}

enum ValkeyAccessOrderField {
	ACCESS
	WORKLOAD
}

type ValkeyConnection {
	pageInfo: PageInfo!
	nodes: [Valkey!]!
	edges: [ValkeyEdge!]!
"""
Facets for Valkey instances. Provides distribution counts to help narrow down results.
Facet counts are computed over the full result set (ignoring pagination) but respect the current filter.
"""
	facets: ValkeyFacets
}

type ValkeyCost {
	sum: Float!
}

type ValkeyCreatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type ValkeyCredentials {
"""
Username for the Valkey instance.
"""
	username: String!
"""
Password for the Valkey instance.
"""
	password: String!
"""
Hostname of the Valkey instance.
"""
	host: String!
"""
Port of the Valkey instance.
"""
	port: Int!
"""
Full connection URI for the Valkey instance.
"""
	uri: String!
}

type ValkeyCredentialsCreatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the credential creation.
"""
	data: ValkeyCredentialsCreatedActivityLogEntryData!
}

type ValkeyCredentialsCreatedActivityLogEntryData {
"""
The permission level, if applicable.
"""
	permission: String
"""
The TTL that was requested for the credentials.
"""
	ttl: String!
}

type ValkeyDeletedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
}

type ValkeyEdge {
	cursor: Cursor!
	node: Valkey!
}

"""
Facets for Valkey instances, providing distribution counts across different dimensions.
"""
type ValkeyFacets {
"""
Distribution of instances by environment.
"""
	environments: [StringFacetItem!]!
"""
Distribution of instances by tier.
"""
	tiers: [ValkeyTierFacetItem!]!
"""
Distribution of instances by user-defined labels.
"""
	labels: [LabelFacetItem!]!
}

"""
Input for filtering Valkey instances.
"""
input ValkeyFilter {
"""
Input for filtering Valkey instances.
"""
	name: String
"""
Input for filtering Valkey instances.
"""
	environments: [String!]
"""
Input for filtering Valkey instances.
"""
	tiers: [ValkeyTier!]
"""
Input for filtering Valkey instances.
"""
	labels: [LabelFilter!]
}

type ValkeyIssue implements Issue & Node{
	id: ID!
	teamEnvironment: TeamEnvironment!
	severity: Severity!
	message: String!
	valkey: Valkey!
	event: String!
}

type ValkeyMaintenance {
"""
The day and time of the week when the maintenance will be scheduled.
"""
	window: MaintenanceWindow
	updates(
"""
Get the first n items in the connection. This can be used in combination with the after parameter.
"""
		first: Int
"""
Get items after this cursor.
"""
		after: Cursor
"""
Get the last n items in the connection. This can be used in combination with the before parameter.
"""
		last: Int
"""
Get items before this cursor.
"""
		before: Cursor
	): ValkeyMaintenanceUpdateConnection!
}

type ValkeyMaintenanceUpdate implements ServiceMaintenanceUpdate{
"""
Title of the maintenance.
"""
	title: String!
"""
Description of the maintenance.
"""
	description: String!
"""
Deadline for installing the maintenance. If set, maintenance is mandatory and will be forcibly applied.
"""
	deadline: Time
"""
The time when the update will be automatically applied. If set, maintenance is mandatory and will be forcibly applied.
"""
	startAt: Time
}

type ValkeyMaintenanceUpdateConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [ValkeyMaintenanceUpdate!]!
"""
List of edges.
"""
	edges: [ValkeyMaintenanceUpdateEdge!]!
}

type ValkeyMaintenanceUpdateEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The ValkeyMaintenanceUpdate.
"""
	node: ValkeyMaintenanceUpdate!
}

enum ValkeyMaxMemoryPolicy {
"""
Keeps frequently used keys; removes least frequently used (LFU) keys
"""
	ALLKEYS_LFU
"""
Keeps most recently used keys; removes least recently used (LRU) keys
"""
	ALLKEYS_LRU
"""
Randomly removes keys to make space for the new data added.
"""
	ALLKEYS_RANDOM
"""
New values aren't saved when memory limit is reached. When a database uses replication, this applies to the primary database.
"""
	NO_EVICTION
"""
Removes least frequently used keys with a TTL set.
"""
	VOLATILE_LFU
"""
Removes least recently used keys with a time-to-live (TTL) set.
"""
	VOLATILE_LRU
"""
Randomly removes keys with a TTL set.
"""
	VOLATILE_RANDOM
"""
Removes keys with a TTL set, the keys with the shortest remaining time-to-live value first.
"""
	VOLATILE_TTL
}

enum ValkeyMemory {
	GB_1
	GB_4
	GB_8
	GB_14
	GB_28
	GB_56
	GB_112
	GB_200
}

input ValkeyOrder {
	field: ValkeyOrderField!
	direction: OrderDirection!
}

enum ValkeyOrderField {
	NAME
	ENVIRONMENT
	STATE
"""
Order Valkeys by issue severity
"""
	ISSUES
}

"""
Permission level for Valkey credentials.
"""
enum ValkeyPermission {
"""
Read-only access.
"""
	READ
"""
Write-only access.
"""
	WRITE
"""
Read and write access.
"""
	READWRITE
"""
Administrative access.
"""
	ADMIN
}

enum ValkeyState {
	POWEROFF
	REBALANCING
	REBUILDING
	RUNNING
	UNKNOWN
}

enum ValkeyTier {
	SINGLE_NODE
	HIGH_AVAILABILITY
}

"""
A single facet item for Valkey tiers.
"""
type ValkeyTierFacetItem {
"""
The Valkey tier.
"""
	tier: ValkeyTier!
"""
Number of matching instances.
"""
	count: Int!
}

type ValkeyUpdatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug!
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the entry.
"""
	data: ValkeyUpdatedActivityLogEntryData!
}

type ValkeyUpdatedActivityLogEntryData {
	updatedFields: [ValkeyUpdatedActivityLogEntryDataUpdatedField!]!
}

type ValkeyUpdatedActivityLogEntryDataUpdatedField {
"""
The name of the field.
"""
	field: String!
"""
The old value of the field.
"""
	oldValue: String
"""
The new value of the field.
"""
	newValue: String
}

"""
Encoding of a secret or config value.
"""
enum ValueEncoding {
"""
The value is plain text (UTF-8).
"""
	PLAIN_TEXT
"""
The value is Base64-encoded binary data.
"""
	BASE64
}

"""
Input for viewing secret values.
"""
input ViewSecretValuesInput {
"""
Input for viewing secret values.
"""
	name: String!
"""
Input for viewing secret values.
"""
	environment: String!
"""
Input for viewing secret values.
"""
	team: Slug!
"""
Input for viewing secret values.
"""
	reason: String!
}

"""
Payload returned when viewing secret values.
"""
type ViewSecretValuesPayload {
"""
The secret values.
"""
	values: [SecretValue!]!
}

type VulnerabilityActivityLogEntryData {
"""
The unique identifier of the vulnerability. E.g. CVE-****-****.
"""
	identifier: String!
"""
The severity of the vulnerability.
"""
	severity: ImageVulnerabilitySeverity!
"""
The package affected by the vulnerability.
"""
	package: String!
"""
The previous suppression state of the vulnerability.
"""
	previousSuppression: ImageVulnerabilitySuppression
"""
The new suppression state of the vulnerability.
"""
	newSuppression: ImageVulnerabilitySuppression
}

"""
Trend of mean time to fix vulnerabilities grouped by severity.
"""
type VulnerabilityFixHistory {
"""
Mean time to fix samples.
"""
	samples: [VulnerabilityFixSample!]!
}

"""
One MTTR sample for a severity at a point in time.
"""
type VulnerabilityFixSample {
"""
Severity of vulnerabilities in this sample.
"""
	severity: ImageVulnerabilitySeverity!
"""
Snapshot date of the sample.
"""
	date: Time!
"""
Mean time to fix in days.
"""
	days: Int!
"""
Number of vulnerabilities fixed in this sample.
"""
	fixedCount: Int!
"""
Earliest time a vulnerability was fixed in this sample.
"""
	firstFixedAt: Time
"""
Latest time a vulnerability was fixed in this sample.
"""
	lastFixedAt: Time
"""
Total number of workloads with this severity of vulnerabilities.
"""
	totalWorkloads: Int!
}

"""
Ordering options when fetching vulnerability summaries for workloads.
"""
input VulnerabilitySummaryOrder {
"""
Ordering options when fetching vulnerability summaries for workloads.
"""
	field: VulnerabilitySummaryOrderByField!
"""
Ordering options when fetching vulnerability summaries for workloads.
"""
	direction: OrderDirection!
}

enum VulnerabilitySummaryOrderByField {
"""
Order by name.
"""
	NAME
"""
Order by the name of the environment the workload is deployed in.
"""
	ENVIRONMENT
"""
Order by risk score.
"""
	VULNERABILITY_RISK_SCORE
"""
Order by vulnerability severity critical.
"""
	VULNERABILITY_SEVERITY_CRITICAL
"""
Order by vulnerability severity high.
"""
	VULNERABILITY_SEVERITY_HIGH
"""
Order by vulnerability severity medium.
"""
	VULNERABILITY_SEVERITY_MEDIUM
"""
Order by vulnerability severity low.
"""
	VULNERABILITY_SEVERITY_LOW
"""
Order by vulnerability severity unassigned.
"""
	VULNERABILITY_SEVERITY_UNASSIGNED
"""
Order by the number of urgent vulnerabilities.

Urgent vulnerabilities are known to be actively exploited and should be
prioritized for immediate action.
"""
	VULNERABILITY_PRIORITY_URGENT
"""
Order by the number of high-risk vulnerabilities.

High-risk vulnerabilities are not known exploited, but have strong
exploitation indicators such as known ransomware use or very high EPSS.
"""
	VULNERABILITY_PRIORITY_HIGH_RISK
"""
Order by the number of elevated-risk vulnerabilities.

Elevated-risk vulnerabilities are lower priority than high-risk, but still
have meaningful exploitation risk signals.
"""
	VULNERABILITY_PRIORITY_ELEVATED_RISK
"""
Order by the number of monitor vulnerabilities.

Monitor vulnerabilities should be tracked, but do not currently indicate the
same operational urgency as the higher priority buckets.
"""
	VULNERABILITY_PRIORITY_MONITOR
}

type VulnerabilityUpdatedActivityLogEntry implements ActivityLogEntry & Node{
"""
ID of the entry.
"""
	id: ID!
"""
The identity of the actor who performed the action. The value is either the name of a service account, or the email address of a user.
"""
	actor: String!
"""
Creation time of the entry.
"""
	createdAt: Time!
"""
Message that summarizes the entry.
"""
	message: String!
"""
Type of the resource that was affected by the action.
"""
	resourceType: ActivityLogEntryResourceType!
"""
Name of the resource that was affected by the action.
"""
	resourceName: String!
"""
The team slug that the entry belongs to.
"""
	teamSlug: Slug
"""
The environment name that the entry belongs to.
"""
	environmentName: String
"""
Data associated with the update.
"""
	data: VulnerabilityActivityLogEntryData!
}

type VulnerableImageIssue implements Issue & Node{
	id: ID!
	teamEnvironment: TeamEnvironment!
	severity: Severity!
	message: String!
	workload: Workload!
	riskScore: Int!
	critical: Int!
}

"""
The days of the week.
"""
enum Weekday {
"""
Monday
"""
	MONDAY
"""
Tuesday
"""
	TUESDAY
"""
Wednesday
"""
	WEDNESDAY
"""
Thursday
"""
	THURSDAY
"""
Friday
"""
	FRIDAY
"""
Saturday
"""
	SATURDAY
"""
Sunday
"""
	SUNDAY
}

"""
Interface for workloads.
"""
interface Workload {
"""
Interface for workloads.
"""
	id: ID!
"""
Interface for workloads.
"""
	name: String!
"""
Interface for workloads.
"""
	team: Team!
"""
Interface for workloads.
"""
	teamEnvironment: TeamEnvironment!
"""
Interface for workloads.
"""
	labels: [ResourceLabel!]!
"""
Interface for workloads.
"""
	image: ContainerImage!
"""
Interface for workloads.
"""
	resources: WorkloadResources!
"""
Interface for workloads.
"""
	manifest: WorkloadManifest!
"""
Interface for workloads.
"""
	deletionStartedAt: Time
"""
Interface for workloads.
"""
	activityLog(
		first: Int
		after: Cursor
		last: Int
		before: Cursor
		filter: ActivityLogFilter
	): ActivityLogEntryConnection!
"""
Interface for workloads.
"""
	issues(
		first: Int
		after: Cursor
		last: Int
		before: Cursor
		orderBy: IssueOrder
		filter: ResourceIssueFilter
	): IssueConnection!
"""
Interface for workloads.
"""
	bigQueryDatasets(
		orderBy: BigQueryDatasetOrder
	): BigQueryDatasetConnection!
"""
Interface for workloads.
"""
	buckets(
		orderBy: BucketOrder
	): BucketConnection!
"""
Interface for workloads.
"""
	configs(
		first: Int
		after: Cursor
		last: Int
		before: Cursor
	): ConfigConnection!
"""
Interface for workloads.
"""
	cost: WorkloadCost!
"""
Interface for workloads.
"""
	deployments(
		first: Int
		after: Cursor
		last: Int
		before: Cursor
	): DeploymentConnection!
"""
Interface for workloads.
"""
	kafkaTopicAcls(
		orderBy: KafkaTopicAclOrder
	): KafkaTopicAclConnection!
"""
Interface for workloads.
"""
	logDestinations: [LogDestination!]!
"""
Interface for workloads.
"""
	networkPolicy: NetworkPolicy!
"""
Interface for workloads.
"""
	openSearch: OpenSearch
"""
Interface for workloads.
"""
	postgresBranches(
		orderBy: PostgresBranchOrder
	): PostgresBranchConnection!
"""
Interface for workloads.
"""
	secrets(
		first: Int
		after: Cursor
		last: Int
		before: Cursor
	): SecretConnection!
"""
Interface for workloads.
"""
	serviceAccount: ServiceAccount
"""
Interface for workloads.
"""
	sqlInstances(
		orderBy: SqlInstanceOrder
	): SqlInstanceConnection!
"""
Interface for workloads.
"""
	valkeys(
		orderBy: ValkeyOrder
	): ValkeyConnection!
"""
Interface for workloads.
"""
	imageVulnerabilityHistory(
		from: Date!
	): ImageVulnerabilityHistory!
"""
Interface for workloads.
"""
	vulnerabilityFixHistory(
		from: Date!
	): VulnerabilityFixHistory!
}

"""
Workload connection.
"""
type WorkloadConnection {
"""
Pagination information.
"""
	pageInfo: PageInfo!
"""
List of nodes.
"""
	nodes: [Workload!]!
"""
List of edges.
"""
	edges: [WorkloadEdge!]!
}

type WorkloadCost {
"""
Get the cost for a workload within a time period.
"""
	daily(
"""
Start date of the period, inclusive.
"""
		from: Date!
"""
End date of the period, inclusive.
"""
		to: Date!
	): WorkloadCostPeriod!
"""
The cost for the last 12 months.
"""
	monthly: WorkloadCostPeriod!
}

type WorkloadCostPeriod {
"""
The total cost for the period.
"""
	sum: Float!
"""
The cost series.
"""
	series: [ServiceCostSeries!]!
}

type WorkloadCostSample {
"""
The workload.
"""
	workload: Workload
"""
The name of the workload.
"""
	workloadName: String!
"""
The cost in euros.
"""
	cost: Float!
}

type WorkloadCostSeries {
"""
The date for the cost. When calculating the cost for a monthly period, the date will be the last day of the month that has cost data.
"""
	date: Date!
"""
The sum of the cost across all workloads.
"""
	sum: Float!
"""
The cost for the workloads in the environment.
"""
	workloads: [WorkloadCostSample!]!
}

"""
Workload edge.
"""
type WorkloadEdge {
"""
Cursor for this edge that can be used for pagination.
"""
	cursor: Cursor!
"""
The Workload.
"""
	node: Workload!
}

type WorkloadLogLine {
"""
The timestamp of the log line.
"""
	time: Time!
"""
The log message.
"""
	message: String!
"""
The name of the instance that generated the log line.
"""
	instance: String!
}

input WorkloadLogSubscriptionFilter {
	team: Slug!
	environment: String!
	application: String
	job: String
	instances: [String!]
}

"""
Interface for workload manifests.
"""
interface WorkloadManifest {
"""
Interface for workload manifests.
"""
	content: String!
}

"""
Ordering options when fetching workloads.
"""
input WorkloadOrder {
"""
Ordering options when fetching workloads.
"""
	field: WorkloadOrderField!
"""
Ordering options when fetching workloads.
"""
	direction: OrderDirection!
}

"""
Fields to order workloads by.
"""
enum WorkloadOrderField {
"""
Order by name.
"""
	NAME
"""
Order by the name of the environment the workload is deployed in.
"""
	ENVIRONMENT
"""
Order by the deployment time.
"""
	DEPLOYMENT_TIME
"""
Order workloads by issue severity
"""
	ISSUES
"""
Order by risk score
"""
	VULNERABILITY_RISK_SCORE
"""
Order apps by vulnerability severity critical
"""
	VULNERABILITY_SEVERITY_CRITICAL
"""
Order apps by vulnerability severity high
"""
	VULNERABILITY_SEVERITY_HIGH
"""
Order apps by vulnerability severity medium
"""
	VULNERABILITY_SEVERITY_MEDIUM
"""
Order apps by vulnerability severity low
"""
	VULNERABILITY_SEVERITY_LOW
"""
Order apps by vulnerability severity unassigned
"""
	VULNERABILITY_SEVERITY_UNASSIGNED
"""
Order by whether the workload has a software bill of materials (SBOM)
"""
	HAS_SBOM
"""
Order by the last time the vulnerabilities were scanned.
"""
	VULNERABILITY_LAST_SCANNED
}

"""
An issue surfacing a problem reported by the platform in a workload's status.
"""
type WorkloadProblemIssue implements Issue & Node{
	id: ID!
	teamEnvironment: TeamEnvironment!
	severity: Severity!
	message: String!
	workload: Workload!
"""
The kind of problem as reported by the platform.
"""
	problemType: WorkloadProblemType!
"""
The workload manifest field path that triggered the problem (for example `image`), if known.
"""
	source: String
"""
For deprecations, the end-of-life date, if known.
"""
	endOfLife: Date
}

"""
The kind of a problem reported by the platform for a workload.
"""
enum WorkloadProblemType {
"""
A permanent error that prevents the workload from being deployed, e.g. an invalid spec or a failed synchronization.
"""
	ERROR
"""
A warning about something that might be wrongly configured.
"""
	WARNING
"""
A feature in use that will be changed or removed in the future.
"""
	DEPRECATION
}

"""
Resource quantities for a workload.
"""
type WorkloadResourceQuantity {
"""
The number of CPU cores.
"""
	cpu: Float
"""
The amount of memory in bytes.
"""
	memory: Int
}

"""
Interface for resources allocated to workloads.
"""
interface WorkloadResources {
"""
Interface for resources allocated to workloads.
"""
	limits: WorkloadResourceQuantity!
"""
Interface for resources allocated to workloads.
"""
	requests: WorkloadResourceQuantity!
}

"""
The type of a workload.
"""
enum WorkloadType {
"""
The workload is an application.
"""
	APPLICATION
"""
The workload is a job.
"""
	JOB
}

type WorkloadUtilization {
"""
Get the current usage for the requested resource type.
"""
	current(
		resourceType: UtilizationResourceType!
	): Float!
"""
Gets the requested amount of resources for the requested resource type.
"""
	requested(
		resourceType: UtilizationResourceType!
	): Float!
"""
Gets the requested amount of resources between start and end with step size for given resource type.
"""
	requestedSeries(
		input: WorkloadUtilizationSeriesInput!
	): [UtilizationSample!]!
"""
Gets the limit of the resources for the requested resource type.
"""
	limit(
		resourceType: UtilizationResourceType!
	): Float
"""
Gets the limit of the resources between start and end with step size for given resource type.
"""
	limitSeries(
		input: WorkloadUtilizationSeriesInput!
	): [UtilizationSample!]!
"""
Usage between start and end with step size for given resource type.
"""
	series(
		input: WorkloadUtilizationSeriesInput!
	): [UtilizationSample!]!
"""
Gets the recommended amount of resources for the workload.
"""
	recommendations: WorkloadUtilizationRecommendations!
}

type WorkloadUtilizationData {
"""
The workload.
"""
	workload: Workload!
"""
The requested amount of resources
"""
	requested: Float!
"""
The current resource usage.
"""
	used: Float!
}

type WorkloadUtilizationRecommendations {
	cpuRequestCores: Float!
	memoryRequestBytes: Int!
	memoryLimitBytes: Int!
}

input WorkloadUtilizationSeriesInput {
	start: Time!
	end: Time!
	resourceType: UtilizationResourceType!
}

type WorkloadVulnerabilitySummary implements Node{
"""
The globally unique ID of the workload vulnerability summary node.
"""
	id: ID!
"""
The workload
"""
	workload: Workload!
"""
True if the workload has a software bill of materials (SBOM) attached.
"""
	hasSBOM: Boolean! @deprecated(reason: "Use workload { image { sbom { status } } } to check SBOM status.")
"""
The vulnerability summary for the workload.
"""
	summary: ImageVulnerabilitySummary!
}

type WorkloadVulnerabilitySummaryConnection {
"""
Information to aid in pagination.
"""
	pageInfo: PageInfo!
"""
List of edges.
"""
	edges: [WorkloadVulnerabilitySummaryEdge!]!
"""
List of nodes.
"""
	nodes: [WorkloadVulnerabilitySummary!]!
}

type WorkloadVulnerabilitySummaryEdge {
"""
A cursor for use in pagination.
"""
	cursor: Cursor!
"""
The workload vulnerability summary.
"""
	node: WorkloadVulnerabilitySummary!
}

"""
A workload affected by a specific vulnerability.
"""
type WorkloadWithVulnerability implements Node{
"""
The globally unique ID of the workload vulnerability node.
"""
	id: ID!
"""
The vulnerability affecting the workload.
"""
	vulnerability: ImageVulnerability!
"""
The workload affected by the vulnerability.
"""
	workload: Workload!
}

type WorkloadWithVulnerabilityConnection {
"""
Information to aid in pagination.
"""
	pageInfo: PageInfo!
"""
List of edges.
"""
	edges: [WorkloadWithVulnerabilityEdge!]!
"""
List of nodes.
"""
	nodes: [WorkloadWithVulnerability!]!
}

type WorkloadWithVulnerabilityEdge {
"""
A cursor for use in pagination.
"""
	cursor: Cursor!
"""
The vulnerability.
"""
	node: WorkloadWithVulnerability!
}