diff --git a/kubernetes/ambassador/AuthService/Type.dhall b/kubernetes/ambassador/AuthService/Type.dhall
new file mode 100644
index 0000000..884cc92
--- /dev/null
+++ b/kubernetes/ambassador/AuthService/Type.dhall
@@ -0,0 +1,17 @@
+{-
+  Ambassador AuthService
+  https://www.getambassador.io/reference/services/auth-service/
+-}
+
+let k8s =
+        ../../k8s/package.dhall sha256:4c9c40f1762e95578c86c3efbccb87ce74ff67c5111a4c92c4393c6d163bb51b
+      ? ../../k8s/package.dhall
+
+in  { apiVersion :
+        Text
+    , kind : Text
+    , metadata : k8s.types.ObjectMeta
+    , spec :
+          ../AuthServiceSpec/Type.dhall sha256:0088513c5510633ccf632eb63d54fffb7a8236294258f8b50167a0b52d007181
+        ? ../AuthServiceSpec/Type.dhall
+    }
diff --git a/kubernetes/ambassador/AuthService/default.dhall b/kubernetes/ambassador/AuthService/default.dhall
new file mode 100644
index 0000000..d9e5acf
--- /dev/null
+++ b/kubernetes/ambassador/AuthService/default.dhall
@@ -0,0 +1 @@
+{ apiVersion = "getambassador.io/v1", kind = "AuthService" }
diff --git a/kubernetes/ambassador/AuthService/package.dhall b/kubernetes/ambassador/AuthService/package.dhall
new file mode 100644
index 0000000..3386fc7
--- /dev/null
+++ b/kubernetes/ambassador/AuthService/package.dhall
@@ -0,0 +1,7 @@
+{ Type =
+      ./Type.dhall sha256:fd1a70a84023f29f98bb225902be3442d92302a9205a1ffc9b913c03d8b60a03
+    ? ./Type.dhall
+, default =
+      ./default.dhall sha256:1ba6e19e9efe37479e887485fd948f45ab988a42ef1edb4a393d8b22ba2eca87
+    ? ./default.dhall
+}
diff --git a/kubernetes/ambassador/AuthServiceIncludeBody/Type.dhall b/kubernetes/ambassador/AuthServiceIncludeBody/Type.dhall
new file mode 100644
index 0000000..4977453
--- /dev/null
+++ b/kubernetes/ambassador/AuthServiceIncludeBody/Type.dhall
@@ -0,0 +1 @@
+{ max_bytes : Optional Natural, allow_partial : Optional Bool }
diff --git a/kubernetes/ambassador/AuthServiceIncludeBody/default.dhall b/kubernetes/ambassador/AuthServiceIncludeBody/default.dhall
new file mode 100644
index 0000000..8f1ca5c
--- /dev/null
+++ b/kubernetes/ambassador/AuthServiceIncludeBody/default.dhall
@@ -0,0 +1 @@
+{ max_bytes = None Natural, allow_partial = None Bool }
diff --git a/kubernetes/ambassador/AuthServiceIncludeBody/package.dhall b/kubernetes/ambassador/AuthServiceIncludeBody/package.dhall
new file mode 100644
index 0000000..fc85634
--- /dev/null
+++ b/kubernetes/ambassador/AuthServiceIncludeBody/package.dhall
@@ -0,0 +1,7 @@
+{ Type =
+      ./Type.dhall sha256:9807c28aaaafd3a2770b27f4785f5d03ed7b38cfebbe9326a87e5e9fbd3bfa77
+    ? ./Type.dhall
+, default =
+      ./default.dhall sha256:3b703cdd029f72e12a702d76544e3dec52f04a6cb95bd7253149c85d8804f961
+    ? ./default.dhall
+}
diff --git a/kubernetes/ambassador/AuthServiceProtocol/Type.dhall b/kubernetes/ambassador/AuthServiceProtocol/Type.dhall
new file mode 100644
index 0000000..ef28506
--- /dev/null
+++ b/kubernetes/ambassador/AuthServiceProtocol/Type.dhall
@@ -0,0 +1 @@
+< http | grpc >
diff --git a/kubernetes/ambassador/AuthServiceSpec/Type.dhall b/kubernetes/ambassador/AuthServiceSpec/Type.dhall
new file mode 100644
index 0000000..56ec64e
--- /dev/null
+++ b/kubernetes/ambassador/AuthServiceSpec/Type.dhall
@@ -0,0 +1,23 @@
+{ auth_service : Text
+, path_prefix : Optional Text
+, proto :
+    Optional
+      (   ../AuthServiceProtocol/Type.dhall sha256:313bceb2e0eb1eaabdeeb91adc6d6690eb9cd21941ddbf20a22012b188330a2d
+        ? ../AuthServiceProtocol/Type.dhall
+      )
+, allowed_request_headers : Optional (List Text)
+, allowed_authorization_headers : Optional (List Text)
+, include_body :
+    Optional
+      (   ../AuthServiceIncludeBody/Type.dhall sha256:9807c28aaaafd3a2770b27f4785f5d03ed7b38cfebbe9326a87e5e9fbd3bfa77
+        ? ../AuthServiceIncludeBody/Type.dhall
+      )
+, status_on_error :
+    Optional
+      (   ../AuthServiceStatusOnError/Type.dhall sha256:78720ba016495db5ff0f6220de0d5e617f342b33788be00a7289e446797a3a74
+        ? ../AuthServiceStatusOnError/Type.dhall
+      )
+, failure_mode_allow : Optional Bool
+, add_linkerd_headers : Optional Bool
+, cluster_idle_timeout_ms : Optional Bool
+}
diff --git a/kubernetes/ambassador/AuthServiceSpec/default.dhall b/kubernetes/ambassador/AuthServiceSpec/default.dhall
new file mode 100644
index 0000000..7df3c00
--- /dev/null
+++ b/kubernetes/ambassador/AuthServiceSpec/default.dhall
@@ -0,0 +1,22 @@
+{ path_prefix = None Text
+, proto =
+    None
+      (   ../AuthServiceProtocol/Type.dhall sha256:313bceb2e0eb1eaabdeeb91adc6d6690eb9cd21941ddbf20a22012b188330a2d
+        ? ../AuthServiceProtocol/Type.dhall
+      )
+, allowed_request_headers = None (List Text)
+, allowed_authorization_headers = None (List Text)
+, include_body =
+    None
+      (   ../AuthServiceIncludeBody/Type.dhall sha256:9807c28aaaafd3a2770b27f4785f5d03ed7b38cfebbe9326a87e5e9fbd3bfa77
+        ? ../AuthServiceIncludeBody/Type.dhall
+      )
+, status_on_error =
+    None
+      (   ../AuthServiceStatusOnError/Type.dhall sha256:78720ba016495db5ff0f6220de0d5e617f342b33788be00a7289e446797a3a74
+        ? ../AuthServiceStatusOnError/Type.dhall
+      )
+, failure_mode_allow = None Bool
+, add_linkerd_headers = None Bool
+, cluster_idle_timeout_ms = None Bool
+}
diff --git a/kubernetes/ambassador/AuthServiceSpec/package.dhall b/kubernetes/ambassador/AuthServiceSpec/package.dhall
new file mode 100644
index 0000000..1368ea2
--- /dev/null
+++ b/kubernetes/ambassador/AuthServiceSpec/package.dhall
@@ -0,0 +1,7 @@
+{ Type =
+      ./Type.dhall sha256:0088513c5510633ccf632eb63d54fffb7a8236294258f8b50167a0b52d007181
+    ? ./Type.dhall
+, default =
+      ./default.dhall sha256:8edc39e75f2cb4b371202122d930a8e3e0821868cadaa50150493e5fb81e6a1f
+    ? ./default.dhall
+}
diff --git a/kubernetes/ambassador/AuthServiceStatusOnError/Type.dhall b/kubernetes/ambassador/AuthServiceStatusOnError/Type.dhall
new file mode 100644
index 0000000..68a060d
--- /dev/null
+++ b/kubernetes/ambassador/AuthServiceStatusOnError/Type.dhall
@@ -0,0 +1 @@
+{ code : Natural }
diff --git a/kubernetes/ambassador/AuthServiceStatusOnError/default.dhall b/kubernetes/ambassador/AuthServiceStatusOnError/default.dhall
new file mode 100644
index 0000000..339130f
--- /dev/null
+++ b/kubernetes/ambassador/AuthServiceStatusOnError/default.dhall
@@ -0,0 +1 @@
+{=}
diff --git a/kubernetes/ambassador/AuthServiceStatusOnError/package.dhall b/kubernetes/ambassador/AuthServiceStatusOnError/package.dhall
new file mode 100644
index 0000000..c532d2e
--- /dev/null
+++ b/kubernetes/ambassador/AuthServiceStatusOnError/package.dhall
@@ -0,0 +1,7 @@
+{ Type =
+      ./Type.dhall sha256:78720ba016495db5ff0f6220de0d5e617f342b33788be00a7289e446797a3a74
+    ? ./Type.dhall
+, default =
+      ./default.dhall sha256:9bb9dcb5bf6f795291686f59383bcd01c8e79b87fc3fb63351d46dea100ac51b
+    ? ./default.dhall
+}
diff --git a/kubernetes/ambassador/package.dhall b/kubernetes/ambassador/package.dhall
index f666c0e..ca1dd9b 100644
--- a/kubernetes/ambassador/package.dhall
+++ b/kubernetes/ambassador/package.dhall
@@ -1,4 +1,19 @@
-{ CircuitBreaker =
+{ AuthService =
+      ./AuthService/package.dhall sha256:38aba5d9403f93dfc41da40bc78950872a8ec03c60b37fb903a110506094be79
+    ? ./AuthService/package.dhall
+, AuthServiceIncludeBody =
+      ./AuthServiceIncludeBody/package.dhall sha256:4f65364e68fd4e6059f72a338fc50c92c519839c6e9f452dbc0befdc46e0b75f
+    ? ./AuthServiceIncludeBody/package.dhall
+, AuthServiceProtocol =
+      ./AuthServiceProtocol/Type.dhall sha256:313bceb2e0eb1eaabdeeb91adc6d6690eb9cd21941ddbf20a22012b188330a2d
+    ? ./AuthServiceProtocol/Type.dhall
+, AuthServiceSpec =
+      ./AuthServiceSpec/package.dhall sha256:697637fccf454839dc0683172b39a60d654ce4265b382d4c987b8136dcb85d52
+    ? ./AuthServiceSpec/package.dhall
+, AuthServiceStatusOnError =
+      ./AuthServiceStatusOnError/package.dhall sha256:afaec6d7f1067f9885c725ed4b0286a58a7285380a76d58276c3150d8efc6900
+    ? ./AuthServiceStatusOnError/package.dhall
+, CircuitBreaker =
       ./CircuitBreaker/package.dhall sha256:9aa003224971ea5f5c8dde34750a6122dbbf9949bdb7a4d2495f12cbdb23ca14
     ? ./CircuitBreaker/package.dhall
 , Cors =
diff --git a/kubernetes/package.dhall b/kubernetes/package.dhall
index d5ebafb..0acc108 100644
--- a/kubernetes/package.dhall
+++ b/kubernetes/package.dhall
@@ -14,6 +14,6 @@
       ./argo/schemas.dhall sha256:3dd2e0a8f264968fccb2358b799afacd493f205234501820cf5b3e2134ef1704
     ? ./argo/schemas.dhall
 , ambassador =
-      ./ambassador/package.dhall sha256:dacfb56527a99120fcd1c7951ca18a451451432e8655222e25af6b4336469cb7
+      ./ambassador/package.dhall sha256:7c482aa11b7c7d4679e0a8914b89f4c4e07c5b6b70ce961a87082f63f3833c75
     ? ./ambassador/package.dhall
 }
diff --git a/package.dhall b/package.dhall
index 281ccf2..46a5d4c 100644
--- a/package.dhall
+++ b/package.dhall
@@ -1,5 +1,5 @@
 { kubernetes =
-      ./kubernetes/package.dhall sha256:87306b756dc3be267aeb894254381f80fe6b499d43fc96204912df3aff68a936
+      ./kubernetes/package.dhall sha256:c90dd618cf536182a0df307c7adce3cf3e9c7598a4a32e85818893a1259d1b96
     ? ./kubernetes/package.dhall
 , Prelude =
       https://prelude.dhall-lang.org/v11.1.0/package.dhall sha256:99462c205117931c0919f155a6046aec140c70fb8876d208c7c77027ab19c2fa