import type * as gax from 'google-gax';
import type { Callback, CallOptions, Descriptors, ClientOptions, PaginationCallback } from 'google-gax';
import { Transform } from 'stream';
import * as protos from '../../protos/protos';
/**
 *  APIs for Identity-Aware Proxy Admin configurations.
 * @class
 * @memberof v1
 */
export declare class IdentityAwareProxyAdminServiceClient {
    private _terminated;
    private _opts;
    private _providedCustomServicePath;
    private _gaxModule;
    private _gaxGrpc;
    private _protos;
    private _defaults;
    private _universeDomain;
    private _servicePath;
    private _log;
    auth: gax.GoogleAuth;
    descriptors: Descriptors;
    warn: (code: string, message: string, warnType?: string) => void;
    innerApiCalls: {
        [name: string]: Function;
    };
    pathTemplates: {
        [name: string]: gax.PathTemplate;
    };
    identityAwareProxyAdminServiceStub?: Promise<{
        [name: string]: Function;
    }>;
    /**
     * Construct an instance of IdentityAwareProxyAdminServiceClient.
     *
     * @param {object} [options] - The configuration object.
     * The options accepted by the constructor are described in detail
     * in [this document](https://github.com/googleapis/gax-nodejs/blob/main/client-libraries.md#creating-the-client-instance).
     * The common options are:
     * @param {object} [options.credentials] - Credentials object.
     * @param {string} [options.credentials.client_email]
     * @param {string} [options.credentials.private_key]
     * @param {string} [options.email] - Account email address. Required when
     *     using a .pem or .p12 keyFilename.
     * @param {string} [options.keyFilename] - Full path to the a .json, .pem, or
     *     .p12 key downloaded from the Google Developers Console. If you provide
     *     a path to a JSON file, the projectId option below is not necessary.
     *     NOTE: .pem and .p12 require you to specify options.email as well.
     * @param {number} [options.port] - The port on which to connect to
     *     the remote host.
     * @param {string} [options.projectId] - The project ID from the Google
     *     Developer's Console, e.g. 'grape-spaceship-123'. We will also check
     *     the environment variable GCLOUD_PROJECT for your project ID. If your
     *     app is running in an environment which supports
     *     {@link https://cloud.google.com/docs/authentication/application-default-credentials Application Default Credentials},
     *     your project ID will be detected automatically.
     * @param {string} [options.apiEndpoint] - The domain name of the
     *     API remote host.
     * @param {gax.ClientConfig} [options.clientConfig] - Client configuration override.
     *     Follows the structure of {@link gapicConfig}.
     * @param {boolean} [options.fallback] - Use HTTP/1.1 REST mode.
     *     For more information, please check the
     *     {@link https://github.com/googleapis/gax-nodejs/blob/main/client-libraries.md#http11-rest-api-mode documentation}.
     * @param {gax} [gaxInstance]: loaded instance of `google-gax`. Useful if you
     *     need to avoid loading the default gRPC version and want to use the fallback
     *     HTTP implementation. Load only fallback version and pass it to the constructor:
     *     ```
     *     const gax = require('google-gax/build/src/fallback'); // avoids loading google-gax with gRPC
     *     const client = new IdentityAwareProxyAdminServiceClient({fallback: true}, gax);
     *     ```
     */
    constructor(opts?: ClientOptions, gaxInstance?: typeof gax | typeof gax.fallback);
    /**
     * Initialize the client.
     * Performs asynchronous operations (such as authentication) and prepares the client.
     * This function will be called automatically when any class method is called for the
     * first time, but if you need to initialize it before calling an actual method,
     * feel free to call initialize() directly.
     *
     * You can await on this method if you want to make sure the client is initialized.
     *
     * @returns {Promise} A promise that resolves to an authenticated service stub.
     */
    initialize(): Promise<{
        [name: string]: Function;
    }>;
    /**
     * The DNS address for this API service.
     * @deprecated Use the apiEndpoint method of the client instance.
     * @returns {string} The DNS address for this service.
     */
    static get servicePath(): string;
    /**
     * The DNS address for this API service - same as servicePath.
     * @deprecated Use the apiEndpoint method of the client instance.
     * @returns {string} The DNS address for this service.
     */
    static get apiEndpoint(): string;
    /**
     * The DNS address for this API service.
     * @returns {string} The DNS address for this service.
     */
    get apiEndpoint(): string;
    get universeDomain(): string;
    /**
     * The port for this API service.
     * @returns {number} The default port for this service.
     */
    static get port(): number;
    /**
     * The scopes needed to make gRPC calls for every method defined
     * in this service.
     * @returns {string[]} List of default scopes.
     */
    static get scopes(): string[];
    getProjectId(): Promise<string>;
    getProjectId(callback: Callback<string, undefined, undefined>): void;
    /**
     * Sets the access control policy for an Identity-Aware Proxy protected
     * resource. Replaces any existing policy.
     * More information about managing access via IAP can be found at:
     * https://cloud.google.com/iap/docs/managing-access#managing_access_via_the_api
     *
     * @param {Object} request
     *   The request object that will be sent.
     * @param {string} request.resource
     *   REQUIRED: The resource for which the policy is being specified.
     *   See the operation documentation for the appropriate value for this field.
     * @param {google.iam.v1.Policy} request.policy
     *   REQUIRED: The complete policy to be applied to the `resource`. The size of
     *   the policy is limited to a few 10s of KB. An empty policy is a
     *   valid policy but certain Cloud Platform services (such as Projects)
     *   might reject them.
     * @param {google.protobuf.FieldMask} request.updateMask
     *   OPTIONAL: A FieldMask specifying which fields of the policy to modify. Only
     *   the fields in the mask will be modified. If no mask is provided, the
     *   following default mask is used:
     *
     *   `paths: "bindings, etag"`
     * @param {object} [options]
     *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
     * @returns {Promise} - The promise which resolves to an array.
     *   The first element of the array is an object representing {@link protos.google.iam.v1.Policy|Policy}.
     *   Please see the {@link https://github.com/googleapis/gax-nodejs/blob/master/client-libraries.md#regular-methods | documentation }
     *   for more details and examples.
     * @example <caption>include:samples/generated/v1/identity_aware_proxy_admin_service.set_iam_policy.js</caption>
     * region_tag:iap_v1_generated_IdentityAwareProxyAdminService_SetIamPolicy_async
     */
    setIamPolicy(request?: protos.google.iam.v1.ISetIamPolicyRequest, options?: CallOptions): Promise<[
        protos.google.iam.v1.IPolicy,
        protos.google.iam.v1.ISetIamPolicyRequest | undefined,
        {} | undefined
    ]>;
    setIamPolicy(request: protos.google.iam.v1.ISetIamPolicyRequest, options: CallOptions, callback: Callback<protos.google.iam.v1.IPolicy, protos.google.iam.v1.ISetIamPolicyRequest | null | undefined, {} | null | undefined>): void;
    setIamPolicy(request: protos.google.iam.v1.ISetIamPolicyRequest, callback: Callback<protos.google.iam.v1.IPolicy, protos.google.iam.v1.ISetIamPolicyRequest | null | undefined, {} | null | undefined>): void;
    /**
     * Gets the access control policy for an Identity-Aware Proxy protected
     * resource.
     * More information about managing access via IAP can be found at:
     * https://cloud.google.com/iap/docs/managing-access#managing_access_via_the_api
     *
     * @param {Object} request
     *   The request object that will be sent.
     * @param {string} request.resource
     *   REQUIRED: The resource for which the policy is being requested.
     *   See the operation documentation for the appropriate value for this field.
     * @param {google.iam.v1.GetPolicyOptions} request.options
     *   OPTIONAL: A `GetPolicyOptions` object for specifying options to
     *   `GetIamPolicy`.
     * @param {object} [options]
     *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
     * @returns {Promise} - The promise which resolves to an array.
     *   The first element of the array is an object representing {@link protos.google.iam.v1.Policy|Policy}.
     *   Please see the {@link https://github.com/googleapis/gax-nodejs/blob/master/client-libraries.md#regular-methods | documentation }
     *   for more details and examples.
     * @example <caption>include:samples/generated/v1/identity_aware_proxy_admin_service.get_iam_policy.js</caption>
     * region_tag:iap_v1_generated_IdentityAwareProxyAdminService_GetIamPolicy_async
     */
    getIamPolicy(request?: protos.google.iam.v1.IGetIamPolicyRequest, options?: CallOptions): Promise<[
        protos.google.iam.v1.IPolicy,
        protos.google.iam.v1.IGetIamPolicyRequest | undefined,
        {} | undefined
    ]>;
    getIamPolicy(request: protos.google.iam.v1.IGetIamPolicyRequest, options: CallOptions, callback: Callback<protos.google.iam.v1.IPolicy, protos.google.iam.v1.IGetIamPolicyRequest | null | undefined, {} | null | undefined>): void;
    getIamPolicy(request: protos.google.iam.v1.IGetIamPolicyRequest, callback: Callback<protos.google.iam.v1.IPolicy, protos.google.iam.v1.IGetIamPolicyRequest | null | undefined, {} | null | undefined>): void;
    /**
     * Returns permissions that a caller has on the Identity-Aware Proxy protected
     * resource.
     * More information about managing access via IAP can be found at:
     * https://cloud.google.com/iap/docs/managing-access#managing_access_via_the_api
     *
     * @param {Object} request
     *   The request object that will be sent.
     * @param {string} request.resource
     *   REQUIRED: The resource for which the policy detail is being requested.
     *   See the operation documentation for the appropriate value for this field.
     * @param {string[]} request.permissions
     *   The set of permissions to check for the `resource`. Permissions with
     *   wildcards (such as '*' or 'storage.*') are not allowed. For more
     *   information see
     *   [IAM Overview](https://cloud.google.com/iam/docs/overview#permissions).
     * @param {object} [options]
     *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
     * @returns {Promise} - The promise which resolves to an array.
     *   The first element of the array is an object representing {@link protos.google.iam.v1.TestIamPermissionsResponse|TestIamPermissionsResponse}.
     *   Please see the {@link https://github.com/googleapis/gax-nodejs/blob/master/client-libraries.md#regular-methods | documentation }
     *   for more details and examples.
     * @example <caption>include:samples/generated/v1/identity_aware_proxy_admin_service.test_iam_permissions.js</caption>
     * region_tag:iap_v1_generated_IdentityAwareProxyAdminService_TestIamPermissions_async
     */
    testIamPermissions(request?: protos.google.iam.v1.ITestIamPermissionsRequest, options?: CallOptions): Promise<[
        protos.google.iam.v1.ITestIamPermissionsResponse,
        protos.google.iam.v1.ITestIamPermissionsRequest | undefined,
        {} | undefined
    ]>;
    testIamPermissions(request: protos.google.iam.v1.ITestIamPermissionsRequest, options: CallOptions, callback: Callback<protos.google.iam.v1.ITestIamPermissionsResponse, protos.google.iam.v1.ITestIamPermissionsRequest | null | undefined, {} | null | undefined>): void;
    testIamPermissions(request: protos.google.iam.v1.ITestIamPermissionsRequest, callback: Callback<protos.google.iam.v1.ITestIamPermissionsResponse, protos.google.iam.v1.ITestIamPermissionsRequest | null | undefined, {} | null | undefined>): void;
    /**
     * Gets the IAP settings on a particular IAP protected resource.
     *
     * @param {Object} request
     *   The request object that will be sent.
     * @param {string} request.name
     *   Required. The resource name for which to retrieve the settings.
     *   Authorization: Requires the `getSettings` permission for the associated
     *   resource.
     * @param {object} [options]
     *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
     * @returns {Promise} - The promise which resolves to an array.
     *   The first element of the array is an object representing {@link protos.google.cloud.iap.v1.IapSettings|IapSettings}.
     *   Please see the {@link https://github.com/googleapis/gax-nodejs/blob/master/client-libraries.md#regular-methods | documentation }
     *   for more details and examples.
     * @example <caption>include:samples/generated/v1/identity_aware_proxy_admin_service.get_iap_settings.js</caption>
     * region_tag:iap_v1_generated_IdentityAwareProxyAdminService_GetIapSettings_async
     */
    getIapSettings(request?: protos.google.cloud.iap.v1.IGetIapSettingsRequest, options?: CallOptions): Promise<[
        protos.google.cloud.iap.v1.IIapSettings,
        protos.google.cloud.iap.v1.IGetIapSettingsRequest | undefined,
        {} | undefined
    ]>;
    getIapSettings(request: protos.google.cloud.iap.v1.IGetIapSettingsRequest, options: CallOptions, callback: Callback<protos.google.cloud.iap.v1.IIapSettings, protos.google.cloud.iap.v1.IGetIapSettingsRequest | null | undefined, {} | null | undefined>): void;
    getIapSettings(request: protos.google.cloud.iap.v1.IGetIapSettingsRequest, callback: Callback<protos.google.cloud.iap.v1.IIapSettings, protos.google.cloud.iap.v1.IGetIapSettingsRequest | null | undefined, {} | null | undefined>): void;
    /**
     * Updates the IAP settings on a particular IAP protected resource. It
     * replaces all fields unless the `update_mask` is set.
     *
     * @param {Object} request
     *   The request object that will be sent.
     * @param {google.cloud.iap.v1.IapSettings} request.iapSettings
     *   Required. The new values for the IAP settings to be updated.
     *   Authorization: Requires the `updateSettings` permission for the associated
     *   resource.
     * @param {google.protobuf.FieldMask} request.updateMask
     *   The field mask specifying which IAP settings should be updated.
     *   If omitted, then all of the settings are updated. See
     *   https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask.
     *
     *   Note: All IAP reauth settings must always be set together, using the
     *   field mask: `iapSettings.accessSettings.reauthSettings`.
     * @param {object} [options]
     *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
     * @returns {Promise} - The promise which resolves to an array.
     *   The first element of the array is an object representing {@link protos.google.cloud.iap.v1.IapSettings|IapSettings}.
     *   Please see the {@link https://github.com/googleapis/gax-nodejs/blob/master/client-libraries.md#regular-methods | documentation }
     *   for more details and examples.
     * @example <caption>include:samples/generated/v1/identity_aware_proxy_admin_service.update_iap_settings.js</caption>
     * region_tag:iap_v1_generated_IdentityAwareProxyAdminService_UpdateIapSettings_async
     */
    updateIapSettings(request?: protos.google.cloud.iap.v1.IUpdateIapSettingsRequest, options?: CallOptions): Promise<[
        protos.google.cloud.iap.v1.IIapSettings,
        protos.google.cloud.iap.v1.IUpdateIapSettingsRequest | undefined,
        {} | undefined
    ]>;
    updateIapSettings(request: protos.google.cloud.iap.v1.IUpdateIapSettingsRequest, options: CallOptions, callback: Callback<protos.google.cloud.iap.v1.IIapSettings, protos.google.cloud.iap.v1.IUpdateIapSettingsRequest | null | undefined, {} | null | undefined>): void;
    updateIapSettings(request: protos.google.cloud.iap.v1.IUpdateIapSettingsRequest, callback: Callback<protos.google.cloud.iap.v1.IIapSettings, protos.google.cloud.iap.v1.IUpdateIapSettingsRequest | null | undefined, {} | null | undefined>): void;
    /**
     * Validates that a given CEL expression conforms to IAP restrictions.
     *
     * @param {Object} request
     *   The request object that will be sent.
     * @param {string} request.name
     *   Required. The resource name of the IAP protected resource.
     * @param {string} request.expression
     *   Required. User input string expression. Should be of the form
     *   `attributes.saml_attributes.filter(attribute, attribute.name in
     *   ['{attribute_name}', '{attribute_name}'])`
     * @param {object} [options]
     *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
     * @returns {Promise} - The promise which resolves to an array.
     *   The first element of the array is an object representing {@link protos.google.cloud.iap.v1.ValidateIapAttributeExpressionResponse|ValidateIapAttributeExpressionResponse}.
     *   Please see the {@link https://github.com/googleapis/gax-nodejs/blob/master/client-libraries.md#regular-methods | documentation }
     *   for more details and examples.
     * @example <caption>include:samples/generated/v1/identity_aware_proxy_admin_service.validate_iap_attribute_expression.js</caption>
     * region_tag:iap_v1_generated_IdentityAwareProxyAdminService_ValidateIapAttributeExpression_async
     */
    validateIapAttributeExpression(request?: protos.google.cloud.iap.v1.IValidateIapAttributeExpressionRequest, options?: CallOptions): Promise<[
        protos.google.cloud.iap.v1.IValidateIapAttributeExpressionResponse,
        protos.google.cloud.iap.v1.IValidateIapAttributeExpressionRequest | undefined,
        {} | undefined
    ]>;
    validateIapAttributeExpression(request: protos.google.cloud.iap.v1.IValidateIapAttributeExpressionRequest, options: CallOptions, callback: Callback<protos.google.cloud.iap.v1.IValidateIapAttributeExpressionResponse, protos.google.cloud.iap.v1.IValidateIapAttributeExpressionRequest | null | undefined, {} | null | undefined>): void;
    validateIapAttributeExpression(request: protos.google.cloud.iap.v1.IValidateIapAttributeExpressionRequest, callback: Callback<protos.google.cloud.iap.v1.IValidateIapAttributeExpressionResponse, protos.google.cloud.iap.v1.IValidateIapAttributeExpressionRequest | null | undefined, {} | null | undefined>): void;
    /**
     * Creates a new TunnelDestGroup.
     *
     * @param {Object} request
     *   The request object that will be sent.
     * @param {string} request.parent
     *   Required. Google Cloud Project ID and location.
     *   In the following format:
     *   `projects/{project_number/id}/iap_tunnel/locations/{location}`.
     * @param {google.cloud.iap.v1.TunnelDestGroup} request.tunnelDestGroup
     *   Required. The TunnelDestGroup to create.
     * @param {string} request.tunnelDestGroupId
     *   Required. The ID to use for the TunnelDestGroup, which becomes the final
     *   component of the resource name.
     *
     *   This value must be 4-63 characters, and valid characters
     *   are `[a-z]-`.
     * @param {object} [options]
     *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
     * @returns {Promise} - The promise which resolves to an array.
     *   The first element of the array is an object representing {@link protos.google.cloud.iap.v1.TunnelDestGroup|TunnelDestGroup}.
     *   Please see the {@link https://github.com/googleapis/gax-nodejs/blob/master/client-libraries.md#regular-methods | documentation }
     *   for more details and examples.
     * @example <caption>include:samples/generated/v1/identity_aware_proxy_admin_service.create_tunnel_dest_group.js</caption>
     * region_tag:iap_v1_generated_IdentityAwareProxyAdminService_CreateTunnelDestGroup_async
     */
    createTunnelDestGroup(request?: protos.google.cloud.iap.v1.ICreateTunnelDestGroupRequest, options?: CallOptions): Promise<[
        protos.google.cloud.iap.v1.ITunnelDestGroup,
        protos.google.cloud.iap.v1.ICreateTunnelDestGroupRequest | undefined,
        {} | undefined
    ]>;
    createTunnelDestGroup(request: protos.google.cloud.iap.v1.ICreateTunnelDestGroupRequest, options: CallOptions, callback: Callback<protos.google.cloud.iap.v1.ITunnelDestGroup, protos.google.cloud.iap.v1.ICreateTunnelDestGroupRequest | null | undefined, {} | null | undefined>): void;
    createTunnelDestGroup(request: protos.google.cloud.iap.v1.ICreateTunnelDestGroupRequest, callback: Callback<protos.google.cloud.iap.v1.ITunnelDestGroup, protos.google.cloud.iap.v1.ICreateTunnelDestGroupRequest | null | undefined, {} | null | undefined>): void;
    /**
     * Retrieves an existing TunnelDestGroup.
     *
     * @param {Object} request
     *   The request object that will be sent.
     * @param {string} request.name
     *   Required. Name of the TunnelDestGroup to be fetched.
     *   In the following format:
     *   `projects/{project_number/id}/iap_tunnel/locations/{location}/destGroups/{dest_group}`.
     * @param {object} [options]
     *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
     * @returns {Promise} - The promise which resolves to an array.
     *   The first element of the array is an object representing {@link protos.google.cloud.iap.v1.TunnelDestGroup|TunnelDestGroup}.
     *   Please see the {@link https://github.com/googleapis/gax-nodejs/blob/master/client-libraries.md#regular-methods | documentation }
     *   for more details and examples.
     * @example <caption>include:samples/generated/v1/identity_aware_proxy_admin_service.get_tunnel_dest_group.js</caption>
     * region_tag:iap_v1_generated_IdentityAwareProxyAdminService_GetTunnelDestGroup_async
     */
    getTunnelDestGroup(request?: protos.google.cloud.iap.v1.IGetTunnelDestGroupRequest, options?: CallOptions): Promise<[
        protos.google.cloud.iap.v1.ITunnelDestGroup,
        protos.google.cloud.iap.v1.IGetTunnelDestGroupRequest | undefined,
        {} | undefined
    ]>;
    getTunnelDestGroup(request: protos.google.cloud.iap.v1.IGetTunnelDestGroupRequest, options: CallOptions, callback: Callback<protos.google.cloud.iap.v1.ITunnelDestGroup, protos.google.cloud.iap.v1.IGetTunnelDestGroupRequest | null | undefined, {} | null | undefined>): void;
    getTunnelDestGroup(request: protos.google.cloud.iap.v1.IGetTunnelDestGroupRequest, callback: Callback<protos.google.cloud.iap.v1.ITunnelDestGroup, protos.google.cloud.iap.v1.IGetTunnelDestGroupRequest | null | undefined, {} | null | undefined>): void;
    /**
     * Deletes a TunnelDestGroup.
     *
     * @param {Object} request
     *   The request object that will be sent.
     * @param {string} request.name
     *   Required. Name of the TunnelDestGroup to delete.
     *   In the following format:
     *   `projects/{project_number/id}/iap_tunnel/locations/{location}/destGroups/{dest_group}`.
     * @param {object} [options]
     *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
     * @returns {Promise} - The promise which resolves to an array.
     *   The first element of the array is an object representing {@link protos.google.protobuf.Empty|Empty}.
     *   Please see the {@link https://github.com/googleapis/gax-nodejs/blob/master/client-libraries.md#regular-methods | documentation }
     *   for more details and examples.
     * @example <caption>include:samples/generated/v1/identity_aware_proxy_admin_service.delete_tunnel_dest_group.js</caption>
     * region_tag:iap_v1_generated_IdentityAwareProxyAdminService_DeleteTunnelDestGroup_async
     */
    deleteTunnelDestGroup(request?: protos.google.cloud.iap.v1.IDeleteTunnelDestGroupRequest, options?: CallOptions): Promise<[
        protos.google.protobuf.IEmpty,
        protos.google.cloud.iap.v1.IDeleteTunnelDestGroupRequest | undefined,
        {} | undefined
    ]>;
    deleteTunnelDestGroup(request: protos.google.cloud.iap.v1.IDeleteTunnelDestGroupRequest, options: CallOptions, callback: Callback<protos.google.protobuf.IEmpty, protos.google.cloud.iap.v1.IDeleteTunnelDestGroupRequest | null | undefined, {} | null | undefined>): void;
    deleteTunnelDestGroup(request: protos.google.cloud.iap.v1.IDeleteTunnelDestGroupRequest, callback: Callback<protos.google.protobuf.IEmpty, protos.google.cloud.iap.v1.IDeleteTunnelDestGroupRequest | null | undefined, {} | null | undefined>): void;
    /**
     * Updates a TunnelDestGroup.
     *
     * @param {Object} request
     *   The request object that will be sent.
     * @param {google.cloud.iap.v1.TunnelDestGroup} request.tunnelDestGroup
     *   Required. The new values for the TunnelDestGroup.
     * @param {google.protobuf.FieldMask} request.updateMask
     *   A field mask that specifies which IAP settings to update.
     *   If omitted, then all of the settings are updated. See
     *   https://developers.google.com/protocol-buffers/docs/reference/google.protobuf#fieldmask
     * @param {object} [options]
     *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
     * @returns {Promise} - The promise which resolves to an array.
     *   The first element of the array is an object representing {@link protos.google.cloud.iap.v1.TunnelDestGroup|TunnelDestGroup}.
     *   Please see the {@link https://github.com/googleapis/gax-nodejs/blob/master/client-libraries.md#regular-methods | documentation }
     *   for more details and examples.
     * @example <caption>include:samples/generated/v1/identity_aware_proxy_admin_service.update_tunnel_dest_group.js</caption>
     * region_tag:iap_v1_generated_IdentityAwareProxyAdminService_UpdateTunnelDestGroup_async
     */
    updateTunnelDestGroup(request?: protos.google.cloud.iap.v1.IUpdateTunnelDestGroupRequest, options?: CallOptions): Promise<[
        protos.google.cloud.iap.v1.ITunnelDestGroup,
        protos.google.cloud.iap.v1.IUpdateTunnelDestGroupRequest | undefined,
        {} | undefined
    ]>;
    updateTunnelDestGroup(request: protos.google.cloud.iap.v1.IUpdateTunnelDestGroupRequest, options: CallOptions, callback: Callback<protos.google.cloud.iap.v1.ITunnelDestGroup, protos.google.cloud.iap.v1.IUpdateTunnelDestGroupRequest | null | undefined, {} | null | undefined>): void;
    updateTunnelDestGroup(request: protos.google.cloud.iap.v1.IUpdateTunnelDestGroupRequest, callback: Callback<protos.google.cloud.iap.v1.ITunnelDestGroup, protos.google.cloud.iap.v1.IUpdateTunnelDestGroupRequest | null | undefined, {} | null | undefined>): void;
    /**
    * Lists the existing TunnelDestGroups. To group across all locations, use a
    * `-` as the location ID. For example:
    * `/v1/projects/123/iap_tunnel/locations/-/destGroups`
    *
    * @param {Object} request
    *   The request object that will be sent.
    * @param {string} request.parent
    *   Required. Google Cloud Project ID and location.
    *   In the following format:
    *   `projects/{project_number/id}/iap_tunnel/locations/{location}`.
    *   A `-` can be used for the location to group across all locations.
    * @param {number} request.pageSize
    *   The maximum number of groups to return. The service might return fewer than
    *   this value.
    *   If unspecified, at most 100 groups are returned.
    *   The maximum value is 1000; values above 1000 are coerced to 1000.
    * @param {string} request.pageToken
    *   A page token, received from a previous `ListTunnelDestGroups`
    *   call. Provide this to retrieve the subsequent page.
    *
    *   When paginating, all other parameters provided to
    *   `ListTunnelDestGroups` must match the call that provided the page
    *   token.
    * @param {object} [options]
    *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
    * @returns {Promise} - The promise which resolves to an array.
    *   The first element of the array is Array of {@link protos.google.cloud.iap.v1.TunnelDestGroup|TunnelDestGroup}.
    *   The client library will perform auto-pagination by default: it will call the API as many
    *   times as needed and will merge results from all the pages into this array.
    *   Note that it can affect your quota.
    *   We recommend using `listTunnelDestGroupsAsync()`
    *   method described below for async iteration which you can stop as needed.
    *   Please see the {@link https://github.com/googleapis/gax-nodejs/blob/master/client-libraries.md#auto-pagination | documentation }
    *   for more details and examples.
    */
    listTunnelDestGroups(request?: protos.google.cloud.iap.v1.IListTunnelDestGroupsRequest, options?: CallOptions): Promise<[
        protos.google.cloud.iap.v1.ITunnelDestGroup[],
        protos.google.cloud.iap.v1.IListTunnelDestGroupsRequest | null,
        protos.google.cloud.iap.v1.IListTunnelDestGroupsResponse
    ]>;
    listTunnelDestGroups(request: protos.google.cloud.iap.v1.IListTunnelDestGroupsRequest, options: CallOptions, callback: PaginationCallback<protos.google.cloud.iap.v1.IListTunnelDestGroupsRequest, protos.google.cloud.iap.v1.IListTunnelDestGroupsResponse | null | undefined, protos.google.cloud.iap.v1.ITunnelDestGroup>): void;
    listTunnelDestGroups(request: protos.google.cloud.iap.v1.IListTunnelDestGroupsRequest, callback: PaginationCallback<protos.google.cloud.iap.v1.IListTunnelDestGroupsRequest, protos.google.cloud.iap.v1.IListTunnelDestGroupsResponse | null | undefined, protos.google.cloud.iap.v1.ITunnelDestGroup>): void;
    /**
     * Equivalent to `listTunnelDestGroups`, but returns a NodeJS Stream object.
     * @param {Object} request
     *   The request object that will be sent.
     * @param {string} request.parent
     *   Required. Google Cloud Project ID and location.
     *   In the following format:
     *   `projects/{project_number/id}/iap_tunnel/locations/{location}`.
     *   A `-` can be used for the location to group across all locations.
     * @param {number} request.pageSize
     *   The maximum number of groups to return. The service might return fewer than
     *   this value.
     *   If unspecified, at most 100 groups are returned.
     *   The maximum value is 1000; values above 1000 are coerced to 1000.
     * @param {string} request.pageToken
     *   A page token, received from a previous `ListTunnelDestGroups`
     *   call. Provide this to retrieve the subsequent page.
     *
     *   When paginating, all other parameters provided to
     *   `ListTunnelDestGroups` must match the call that provided the page
     *   token.
     * @param {object} [options]
     *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
     * @returns {Stream}
     *   An object stream which emits an object representing {@link protos.google.cloud.iap.v1.TunnelDestGroup|TunnelDestGroup} on 'data' event.
     *   The client library will perform auto-pagination by default: it will call the API as many
     *   times as needed. Note that it can affect your quota.
     *   We recommend using `listTunnelDestGroupsAsync()`
     *   method described below for async iteration which you can stop as needed.
     *   Please see the {@link https://github.com/googleapis/gax-nodejs/blob/master/client-libraries.md#auto-pagination | documentation }
     *   for more details and examples.
     */
    listTunnelDestGroupsStream(request?: protos.google.cloud.iap.v1.IListTunnelDestGroupsRequest, options?: CallOptions): Transform;
    /**
     * Equivalent to `listTunnelDestGroups`, but returns an iterable object.
     *
     * `for`-`await`-`of` syntax is used with the iterable to get response elements on-demand.
     * @param {Object} request
     *   The request object that will be sent.
     * @param {string} request.parent
     *   Required. Google Cloud Project ID and location.
     *   In the following format:
     *   `projects/{project_number/id}/iap_tunnel/locations/{location}`.
     *   A `-` can be used for the location to group across all locations.
     * @param {number} request.pageSize
     *   The maximum number of groups to return. The service might return fewer than
     *   this value.
     *   If unspecified, at most 100 groups are returned.
     *   The maximum value is 1000; values above 1000 are coerced to 1000.
     * @param {string} request.pageToken
     *   A page token, received from a previous `ListTunnelDestGroups`
     *   call. Provide this to retrieve the subsequent page.
     *
     *   When paginating, all other parameters provided to
     *   `ListTunnelDestGroups` must match the call that provided the page
     *   token.
     * @param {object} [options]
     *   Call options. See {@link https://googleapis.dev/nodejs/google-gax/latest/interfaces/CallOptions.html|CallOptions} for more details.
     * @returns {Object}
     *   An iterable Object that allows {@link https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Iteration_protocols | async iteration }.
     *   When you iterate the returned iterable, each element will be an object representing
     *   {@link protos.google.cloud.iap.v1.TunnelDestGroup|TunnelDestGroup}. The API will be called under the hood as needed, once per the page,
     *   so you can stop the iteration when you don't need more results.
     *   Please see the {@link https://github.com/googleapis/gax-nodejs/blob/master/client-libraries.md#auto-pagination | documentation }
     *   for more details and examples.
     * @example <caption>include:samples/generated/v1/identity_aware_proxy_admin_service.list_tunnel_dest_groups.js</caption>
     * region_tag:iap_v1_generated_IdentityAwareProxyAdminService_ListTunnelDestGroups_async
     */
    listTunnelDestGroupsAsync(request?: protos.google.cloud.iap.v1.IListTunnelDestGroupsRequest, options?: CallOptions): AsyncIterable<protos.google.cloud.iap.v1.ITunnelDestGroup>;
    /**
     * Return a fully-qualified project resource name string.
     *
     * @param {string} project
     * @returns {string} Resource name string.
     */
    projectPath(project: string): string;
    /**
     * Parse the project from Project resource.
     *
     * @param {string} projectName
     *   A fully-qualified path representing Project resource.
     * @returns {string} A string representing the project.
     */
    matchProjectFromProjectName(projectName: string): string | number;
    /**
     * Return a fully-qualified tunnelDestGroup resource name string.
     *
     * @param {string} project
     * @param {string} location
     * @param {string} dest_group
     * @returns {string} Resource name string.
     */
    tunnelDestGroupPath(project: string, location: string, destGroup: string): string;
    /**
     * Parse the project from TunnelDestGroup resource.
     *
     * @param {string} tunnelDestGroupName
     *   A fully-qualified path representing TunnelDestGroup resource.
     * @returns {string} A string representing the project.
     */
    matchProjectFromTunnelDestGroupName(tunnelDestGroupName: string): string | number;
    /**
     * Parse the location from TunnelDestGroup resource.
     *
     * @param {string} tunnelDestGroupName
     *   A fully-qualified path representing TunnelDestGroup resource.
     * @returns {string} A string representing the location.
     */
    matchLocationFromTunnelDestGroupName(tunnelDestGroupName: string): string | number;
    /**
     * Parse the dest_group from TunnelDestGroup resource.
     *
     * @param {string} tunnelDestGroupName
     *   A fully-qualified path representing TunnelDestGroup resource.
     * @returns {string} A string representing the dest_group.
     */
    matchDestGroupFromTunnelDestGroupName(tunnelDestGroupName: string): string | number;
    /**
     * Return a fully-qualified tunnelLocation resource name string.
     *
     * @param {string} project
     * @param {string} location
     * @returns {string} Resource name string.
     */
    tunnelLocationPath(project: string, location: string): string;
    /**
     * Parse the project from TunnelLocation resource.
     *
     * @param {string} tunnelLocationName
     *   A fully-qualified path representing TunnelLocation resource.
     * @returns {string} A string representing the project.
     */
    matchProjectFromTunnelLocationName(tunnelLocationName: string): string | number;
    /**
     * Parse the location from TunnelLocation resource.
     *
     * @param {string} tunnelLocationName
     *   A fully-qualified path representing TunnelLocation resource.
     * @returns {string} A string representing the location.
     */
    matchLocationFromTunnelLocationName(tunnelLocationName: string): string | number;
    /**
     * Terminate the gRPC channel and close the client.
     *
     * The client will no longer be usable and all future behavior is undefined.
     * @returns {Promise} A promise that resolves when the client is closed.
     */
    close(): Promise<void>;
}