import { IComGithubCiliumCiliumPkgPolicyApiIngressCommonRule } from "./IngressCommonRule.js";
import { IComGithubCiliumCiliumPkgPolicyApiICMPRules } from "./ICMPRules.js";
import { IComGithubCiliumCiliumPkgPolicyApiPortDenyRules } from "./PortDenyRules.js";
import { IComGithubCiliumCiliumPkgPolicyApiCIDRSlice } from "./CIDRSlice.js";
import { IComGithubCiliumCiliumPkgPolicyApiCIDRRuleSlice } from "./CIDRRuleSlice.js";
import { IComGithubCiliumCiliumPkgPolicyApiEndpointSelector } from "./EndpointSelector.js";
import { IComGithubCiliumCiliumPkgPolicyApiEntitySlice } from "./EntitySlice.js";
import { IComGithubCiliumCiliumPkgPolicyApiGroups } from "./Groups.js";
import { ModelData, Model } from "@kubernetes-models/base";
/**
 * IngressDenyRule contains all rule types which can be applied at ingress,
 * i.e. network traffic that originates outside of the endpoint and
 * is entering the endpoint selected by the endpointSelector.
 *
 *   - All members of this structure are optional. If omitted or empty, the
 *     member will have no effect on the rule.
 *
 *   - If multiple members are set, all of them need to match in order for
 *     the rule to take effect.
 *
 *   - FromEndpoints, FromCIDR, FromCIDRSet, FromGroups and FromEntities are mutually
 *     exclusive. Only one of these members may be present within an individual
 *     rule.
 */
export interface IIngressDenyRule extends IComGithubCiliumCiliumPkgPolicyApiIngressCommonRule {
    /**
     * ICMPs is a list of ICMP rule identified by type number
     * which the endpoint subject to the rule is not allowed to
     * receive connections on.
     *
     * Example:
     * Any endpoint with the label "app=httpd" can not accept incoming
     * type 8 ICMP connections.
     */
    "icmps"?: IComGithubCiliumCiliumPkgPolicyApiICMPRules;
    /**
     * ToPorts is a list of destination ports identified by port number and
     * protocol which the endpoint subject to the rule is not allowed to
     * receive connections on.
     *
     * Example:
     * Any endpoint with the label "app=httpd" can not accept incoming
     * connections on port 80/tcp.
     */
    "toPorts"?: IComGithubCiliumCiliumPkgPolicyApiPortDenyRules;
}
/**
 * IngressDenyRule contains all rule types which can be applied at ingress,
 * i.e. network traffic that originates outside of the endpoint and
 * is entering the endpoint selected by the endpointSelector.
 *
 *   - All members of this structure are optional. If omitted or empty, the
 *     member will have no effect on the rule.
 *
 *   - If multiple members are set, all of them need to match in order for
 *     the rule to take effect.
 *
 *   - FromEndpoints, FromCIDR, FromCIDRSet, FromGroups and FromEntities are mutually
 *     exclusive. Only one of these members may be present within an individual
 *     rule.
 */
export declare class IngressDenyRule extends Model<IIngressDenyRule> implements IIngressDenyRule {
    "fromCIDR"?: IComGithubCiliumCiliumPkgPolicyApiCIDRSlice;
    "fromCIDRSet"?: IComGithubCiliumCiliumPkgPolicyApiCIDRRuleSlice;
    "fromEndpoints"?: Array<IComGithubCiliumCiliumPkgPolicyApiEndpointSelector>;
    "fromEntities"?: IComGithubCiliumCiliumPkgPolicyApiEntitySlice;
    "fromGroups"?: Array<IComGithubCiliumCiliumPkgPolicyApiGroups>;
    "fromNodes"?: Array<IComGithubCiliumCiliumPkgPolicyApiEndpointSelector>;
    "fromRequires"?: Array<string>;
    "icmps"?: IComGithubCiliumCiliumPkgPolicyApiICMPRules;
    "toPorts"?: IComGithubCiliumCiliumPkgPolicyApiPortDenyRules;
    constructor(data?: ModelData<IIngressDenyRule>);
}
export type { IIngressDenyRule as IComGithubCiliumCiliumPkgPolicyApiIngressDenyRule, IngressDenyRule as ComGithubCiliumCiliumPkgPolicyApiIngressDenyRule };