import { type EksConnectionConfig, type EksProvisionConfig } from '@cat-factory/contracts';
import { KubernetesApiClient, KubernetesEnvironmentProvider } from '@cat-factory/integrations';
import type { EnvironmentManifest, KubernetesConnectionConfig, ProviderConfigField, SecretResolver } from '@cat-factory/kernel';
export declare class EksEnvironmentProvider extends KubernetesEnvironmentProvider {
    /**
     * The EKS SUPERSET of the base config, which is what the base class documents this seam for.
     *
     * Overriding it is load-bearing rather than tidy: the schemas the parse runs are valibot
     * objects, and those DROP entries they do not declare, so inheriting the Kubernetes parse
     * silently returns a config with no `region` / `clusterName` / `stsHost` at all. The failure is
     * a token presigned against `sts.undefined.amazonaws.com`, several layers from the cause.
     */
    protected parseConfig(manifest: EnvironmentManifest): EksProvisionConfig;
    /**
     * Reaching an EKS apiserver takes the AWS coordinates too, because the Bearer token is MINTED
     * against them rather than stored. So the reclaim path's narrow read is widened here by exactly
     * those fields, and no further: the base class's split (build needs the whole config, reclaim
     * needs the connection) survives inheritance instead of being re-collapsed here.
     */
    protected parseConnection(manifest: EnvironmentManifest): EksConnectionConfig;
    protected makeClient(config: KubernetesConnectionConfig, resolveSecret: SecretResolver): KubernetesApiClient;
    describeConfig(): ProviderConfigField[];
}
//# sourceMappingURL=EksEnvironmentProvider.d.ts.map