import { z } from "zod";
/**
 * CiliumNetworkPolicy is a Kubernetes third-party resource with an extended version of NetworkPolicy.
 */
export declare const ICiliumNetworkPolicySchema: z.ZodObject<{
    apiVersion: z.ZodLiteral<"cilium.io/v2">;
    kind: z.ZodLiteral<"CiliumNetworkPolicy">;
    metadata: z.ZodObject<{
        annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
        creationTimestamp: z.ZodOptional<z.ZodNullable<z.ZodString>>;
        deletionGracePeriodSeconds: z.ZodOptional<z.ZodNumber>;
        deletionTimestamp: z.ZodOptional<z.ZodNullable<z.ZodString>>;
        finalizers: z.ZodOptional<z.ZodArray<z.ZodString>>;
        generateName: z.ZodOptional<z.ZodString>;
        generation: z.ZodOptional<z.ZodNumber>;
        labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
        managedFields: z.ZodOptional<z.ZodArray<z.ZodObject<{
            apiVersion: z.ZodOptional<z.ZodString>;
            fieldsType: z.ZodOptional<z.ZodString>;
            fieldsV1: z.ZodOptional<z.ZodObject<{}, z.core.$strip>>;
            manager: z.ZodOptional<z.ZodString>;
            operation: z.ZodOptional<z.ZodString>;
            subresource: z.ZodOptional<z.ZodString>;
            time: z.ZodOptional<z.ZodNullable<z.ZodString>>;
        }, z.core.$strip>>>;
        name: z.ZodOptional<z.ZodString>;
        namespace: z.ZodOptional<z.ZodString>;
        ownerReferences: z.ZodOptional<z.ZodArray<z.ZodObject<{
            apiVersion: z.ZodString;
            blockOwnerDeletion: z.ZodOptional<z.ZodBoolean>;
            controller: z.ZodOptional<z.ZodBoolean>;
            kind: z.ZodString;
            name: z.ZodString;
            uid: z.ZodString;
        }, z.core.$strip>>>;
        resourceVersion: z.ZodOptional<z.ZodString>;
        selfLink: z.ZodOptional<z.ZodString>;
        uid: z.ZodOptional<z.ZodString>;
    }, z.core.$strip>;
    spec: z.ZodOptional<z.ZodIntersection<z.ZodObject<{
        description: z.ZodOptional<z.ZodString>;
        egress: z.ZodOptional<z.ZodArray<z.ZodObject<{
            authentication: z.ZodOptional<z.ZodObject<{
                mode: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodLiteral<"required">, z.ZodLiteral<"test-always-fail">]>;
            }, z.core.$strip>>;
            icmps: z.ZodOptional<z.ZodArray<z.ZodObject<{
                fields: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    family: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"IPv4">, z.ZodLiteral<"IPv6">]>>>;
                    type: z.ZodNumber;
                }, z.core.$strip>>>;
            }, z.core.$strip>>>;
            toCIDR: z.ZodOptional<z.ZodArray<z.ZodString>>;
            toCIDRSet: z.ZodOptional<z.ZodArray<z.ZodIntersection<z.ZodObject<{
                cidr: z.ZodOptional<z.ZodString>;
                cidrGroupRef: z.ZodOptional<z.ZodString>;
                except: z.ZodOptional<z.ZodArray<z.ZodString>>;
            }, z.core.$strip>, z.ZodUnion<readonly [z.ZodObject<{
                cidr: z.ZodAny;
            }, z.core.$strip>, z.ZodObject<{
                cidrGroupRef: z.ZodAny;
            }, z.core.$strip>]>>>>;
            toEndpoints: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    key: z.ZodString;
                    operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                    values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>>;
                matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            }, z.core.$strip>>>;
            toEntities: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodLiteral<"world">, z.ZodLiteral<"cluster">, z.ZodLiteral<"host">, z.ZodLiteral<"init">, z.ZodLiteral<"ingress">, z.ZodLiteral<"unmanaged">, z.ZodLiteral<"remote-node">, z.ZodLiteral<"health">, z.ZodLiteral<"none">, z.ZodLiteral<"kube-apiserver">]>>>;
            toFQDNs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchName: z.ZodOptional<z.ZodString>;
                matchPattern: z.ZodOptional<z.ZodString>;
            }, z.core.$strip>>>;
            toGroups: z.ZodOptional<z.ZodArray<z.ZodObject<{
                aws: z.ZodOptional<z.ZodObject<{
                    labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
                    region: z.ZodOptional<z.ZodString>;
                    securityGroupsIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    securityGroupsNames: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>;
            }, z.core.$strip>>>;
            toPorts: z.ZodOptional<z.ZodArray<z.ZodObject<{
                listener: z.ZodOptional<z.ZodObject<{
                    envoyConfig: z.ZodObject<{
                        kind: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"CiliumEnvoyConfig">, z.ZodLiteral<"CiliumClusterwideEnvoyConfig">]>>;
                        name: z.ZodString;
                    }, z.core.$strip>;
                    name: z.ZodString;
                }, z.core.$strip>>;
                originatingTLS: z.ZodOptional<z.ZodObject<{
                    certificate: z.ZodOptional<z.ZodString>;
                    privateKey: z.ZodOptional<z.ZodString>;
                    secret: z.ZodObject<{
                        name: z.ZodString;
                        namespace: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>;
                    trustedCA: z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
                ports: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    port: z.ZodString;
                    protocol: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"TCP">, z.ZodLiteral<"UDP">, z.ZodLiteral<"SCTP">, z.ZodLiteral<"ANY">]>>;
                }, z.core.$strip>>>;
                rules: z.ZodOptional<z.ZodObject<{
                    dns: z.ZodOptional<z.ZodArray<z.ZodObject<{
                        matchName: z.ZodOptional<z.ZodString>;
                        matchPattern: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>>;
                    http: z.ZodOptional<z.ZodArray<z.ZodObject<{
                        headerMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
                            mismatch: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"LOG">, z.ZodLiteral<"ADD">, z.ZodLiteral<"DELETE">, z.ZodLiteral<"REPLACE">]>>;
                            name: z.ZodString;
                            secret: z.ZodOptional<z.ZodObject<{
                                name: z.ZodString;
                                namespace: z.ZodOptional<z.ZodString>;
                            }, z.core.$strip>>;
                            value: z.ZodOptional<z.ZodString>;
                        }, z.core.$strip>>>;
                        headers: z.ZodOptional<z.ZodArray<z.ZodString>>;
                        host: z.ZodOptional<z.ZodString>;
                        method: z.ZodOptional<z.ZodString>;
                        path: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>>;
                    kafka: z.ZodOptional<z.ZodArray<z.ZodObject<{
                        apiKey: z.ZodOptional<z.ZodString>;
                        apiVersion: z.ZodOptional<z.ZodString>;
                        clientID: z.ZodOptional<z.ZodString>;
                        role: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"produce">, z.ZodLiteral<"consume">]>>;
                        topic: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>>;
                    l7: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodString>>>;
                    l7proto: z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
                serverNames: z.ZodOptional<z.ZodArray<z.ZodString>>;
                terminatingTLS: z.ZodOptional<z.ZodObject<{
                    certificate: z.ZodOptional<z.ZodString>;
                    privateKey: z.ZodOptional<z.ZodString>;
                    secret: z.ZodObject<{
                        name: z.ZodString;
                        namespace: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>;
                    trustedCA: z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
            }, z.core.$strip>>>;
            toRequires: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    key: z.ZodString;
                    operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                    values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>>;
                matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            }, z.core.$strip>>>;
            toServices: z.ZodOptional<z.ZodArray<z.ZodObject<{
                k8sService: z.ZodOptional<z.ZodObject<{
                    namespace: z.ZodOptional<z.ZodString>;
                    serviceName: z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
                k8sServiceSelector: z.ZodOptional<z.ZodObject<{
                    namespace: z.ZodOptional<z.ZodString>;
                    selector: z.ZodObject<{
                        matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                            key: z.ZodString;
                            operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                            values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                        }, z.core.$strip>>>;
                        matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
                    }, z.core.$strip>;
                }, z.core.$strip>>;
            }, z.core.$strip>>>;
        }, z.core.$strip>>>;
        egressDeny: z.ZodOptional<z.ZodArray<z.ZodObject<{
            icmps: z.ZodOptional<z.ZodArray<z.ZodObject<{
                fields: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    family: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"IPv4">, z.ZodLiteral<"IPv6">]>>>;
                    type: z.ZodNumber;
                }, z.core.$strip>>>;
            }, z.core.$strip>>>;
            toCIDR: z.ZodOptional<z.ZodArray<z.ZodString>>;
            toCIDRSet: z.ZodOptional<z.ZodArray<z.ZodIntersection<z.ZodObject<{
                cidr: z.ZodOptional<z.ZodString>;
                cidrGroupRef: z.ZodOptional<z.ZodString>;
                except: z.ZodOptional<z.ZodArray<z.ZodString>>;
            }, z.core.$strip>, z.ZodUnion<readonly [z.ZodObject<{
                cidr: z.ZodAny;
            }, z.core.$strip>, z.ZodObject<{
                cidrGroupRef: z.ZodAny;
            }, z.core.$strip>]>>>>;
            toEndpoints: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    key: z.ZodString;
                    operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                    values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>>;
                matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            }, z.core.$strip>>>;
            toEntities: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodLiteral<"world">, z.ZodLiteral<"cluster">, z.ZodLiteral<"host">, z.ZodLiteral<"init">, z.ZodLiteral<"ingress">, z.ZodLiteral<"unmanaged">, z.ZodLiteral<"remote-node">, z.ZodLiteral<"health">, z.ZodLiteral<"none">, z.ZodLiteral<"kube-apiserver">]>>>;
            toGroups: z.ZodOptional<z.ZodArray<z.ZodObject<{
                aws: z.ZodOptional<z.ZodObject<{
                    labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
                    region: z.ZodOptional<z.ZodString>;
                    securityGroupsIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    securityGroupsNames: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>;
            }, z.core.$strip>>>;
            toPorts: z.ZodOptional<z.ZodArray<z.ZodObject<{
                ports: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    port: z.ZodString;
                    protocol: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"TCP">, z.ZodLiteral<"UDP">, z.ZodLiteral<"SCTP">, z.ZodLiteral<"ANY">]>>;
                }, z.core.$strip>>>;
            }, z.core.$strip>>>;
            toRequires: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    key: z.ZodString;
                    operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                    values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>>;
                matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            }, z.core.$strip>>>;
            toServices: z.ZodOptional<z.ZodArray<z.ZodObject<{
                k8sService: z.ZodOptional<z.ZodObject<{
                    namespace: z.ZodOptional<z.ZodString>;
                    serviceName: z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
                k8sServiceSelector: z.ZodOptional<z.ZodObject<{
                    namespace: z.ZodOptional<z.ZodString>;
                    selector: z.ZodObject<{
                        matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                            key: z.ZodString;
                            operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                            values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                        }, z.core.$strip>>>;
                        matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
                    }, z.core.$strip>;
                }, z.core.$strip>>;
            }, z.core.$strip>>>;
        }, z.core.$strip>>>;
        endpointSelector: z.ZodOptional<z.ZodObject<{
            matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                key: z.ZodString;
                operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                values: z.ZodOptional<z.ZodArray<z.ZodString>>;
            }, z.core.$strip>>>;
            matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
        }, z.core.$strip>>;
        ingress: z.ZodOptional<z.ZodArray<z.ZodObject<{
            authentication: z.ZodOptional<z.ZodObject<{
                mode: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodLiteral<"required">, z.ZodLiteral<"test-always-fail">]>;
            }, z.core.$strip>>;
            fromCIDR: z.ZodOptional<z.ZodArray<z.ZodString>>;
            fromCIDRSet: z.ZodOptional<z.ZodArray<z.ZodIntersection<z.ZodObject<{
                cidr: z.ZodOptional<z.ZodString>;
                cidrGroupRef: z.ZodOptional<z.ZodString>;
                except: z.ZodOptional<z.ZodArray<z.ZodString>>;
            }, z.core.$strip>, z.ZodUnion<readonly [z.ZodObject<{
                cidr: z.ZodAny;
            }, z.core.$strip>, z.ZodObject<{
                cidrGroupRef: z.ZodAny;
            }, z.core.$strip>]>>>>;
            fromEndpoints: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    key: z.ZodString;
                    operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                    values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>>;
                matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            }, z.core.$strip>>>;
            fromEntities: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodLiteral<"world">, z.ZodLiteral<"cluster">, z.ZodLiteral<"host">, z.ZodLiteral<"init">, z.ZodLiteral<"ingress">, z.ZodLiteral<"unmanaged">, z.ZodLiteral<"remote-node">, z.ZodLiteral<"health">, z.ZodLiteral<"none">, z.ZodLiteral<"kube-apiserver">]>>>;
            fromRequires: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    key: z.ZodString;
                    operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                    values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>>;
                matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            }, z.core.$strip>>>;
            icmps: z.ZodOptional<z.ZodArray<z.ZodObject<{
                fields: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    family: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"IPv4">, z.ZodLiteral<"IPv6">]>>>;
                    type: z.ZodNumber;
                }, z.core.$strip>>>;
            }, z.core.$strip>>>;
            toPorts: z.ZodOptional<z.ZodArray<z.ZodObject<{
                listener: z.ZodOptional<z.ZodObject<{
                    envoyConfig: z.ZodObject<{
                        kind: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"CiliumEnvoyConfig">, z.ZodLiteral<"CiliumClusterwideEnvoyConfig">]>>;
                        name: z.ZodString;
                    }, z.core.$strip>;
                    name: z.ZodString;
                }, z.core.$strip>>;
                originatingTLS: z.ZodOptional<z.ZodObject<{
                    certificate: z.ZodOptional<z.ZodString>;
                    privateKey: z.ZodOptional<z.ZodString>;
                    secret: z.ZodObject<{
                        name: z.ZodString;
                        namespace: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>;
                    trustedCA: z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
                ports: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    port: z.ZodString;
                    protocol: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"TCP">, z.ZodLiteral<"UDP">, z.ZodLiteral<"SCTP">, z.ZodLiteral<"ANY">]>>;
                }, z.core.$strip>>>;
                rules: z.ZodOptional<z.ZodObject<{
                    dns: z.ZodOptional<z.ZodArray<z.ZodObject<{
                        matchName: z.ZodOptional<z.ZodString>;
                        matchPattern: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>>;
                    http: z.ZodOptional<z.ZodArray<z.ZodObject<{
                        headerMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
                            mismatch: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"LOG">, z.ZodLiteral<"ADD">, z.ZodLiteral<"DELETE">, z.ZodLiteral<"REPLACE">]>>;
                            name: z.ZodString;
                            secret: z.ZodOptional<z.ZodObject<{
                                name: z.ZodString;
                                namespace: z.ZodOptional<z.ZodString>;
                            }, z.core.$strip>>;
                            value: z.ZodOptional<z.ZodString>;
                        }, z.core.$strip>>>;
                        headers: z.ZodOptional<z.ZodArray<z.ZodString>>;
                        host: z.ZodOptional<z.ZodString>;
                        method: z.ZodOptional<z.ZodString>;
                        path: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>>;
                    kafka: z.ZodOptional<z.ZodArray<z.ZodObject<{
                        apiKey: z.ZodOptional<z.ZodString>;
                        apiVersion: z.ZodOptional<z.ZodString>;
                        clientID: z.ZodOptional<z.ZodString>;
                        role: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"produce">, z.ZodLiteral<"consume">]>>;
                        topic: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>>;
                    l7: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodString>>>;
                    l7proto: z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
                serverNames: z.ZodOptional<z.ZodArray<z.ZodString>>;
                terminatingTLS: z.ZodOptional<z.ZodObject<{
                    certificate: z.ZodOptional<z.ZodString>;
                    privateKey: z.ZodOptional<z.ZodString>;
                    secret: z.ZodObject<{
                        name: z.ZodString;
                        namespace: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>;
                    trustedCA: z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
            }, z.core.$strip>>>;
        }, z.core.$strip>>>;
        ingressDeny: z.ZodOptional<z.ZodArray<z.ZodObject<{
            fromCIDR: z.ZodOptional<z.ZodArray<z.ZodString>>;
            fromCIDRSet: z.ZodOptional<z.ZodArray<z.ZodIntersection<z.ZodObject<{
                cidr: z.ZodOptional<z.ZodString>;
                cidrGroupRef: z.ZodOptional<z.ZodString>;
                except: z.ZodOptional<z.ZodArray<z.ZodString>>;
            }, z.core.$strip>, z.ZodUnion<readonly [z.ZodObject<{
                cidr: z.ZodAny;
            }, z.core.$strip>, z.ZodObject<{
                cidrGroupRef: z.ZodAny;
            }, z.core.$strip>]>>>>;
            fromEndpoints: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    key: z.ZodString;
                    operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                    values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>>;
                matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            }, z.core.$strip>>>;
            fromEntities: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodLiteral<"world">, z.ZodLiteral<"cluster">, z.ZodLiteral<"host">, z.ZodLiteral<"init">, z.ZodLiteral<"ingress">, z.ZodLiteral<"unmanaged">, z.ZodLiteral<"remote-node">, z.ZodLiteral<"health">, z.ZodLiteral<"none">, z.ZodLiteral<"kube-apiserver">]>>>;
            fromRequires: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    key: z.ZodString;
                    operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                    values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>>;
                matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            }, z.core.$strip>>>;
            icmps: z.ZodOptional<z.ZodArray<z.ZodObject<{
                fields: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    family: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"IPv4">, z.ZodLiteral<"IPv6">]>>>;
                    type: z.ZodNumber;
                }, z.core.$strip>>>;
            }, z.core.$strip>>>;
            toPorts: z.ZodOptional<z.ZodArray<z.ZodObject<{
                ports: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    port: z.ZodString;
                    protocol: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"TCP">, z.ZodLiteral<"UDP">, z.ZodLiteral<"SCTP">, z.ZodLiteral<"ANY">]>>;
                }, z.core.$strip>>>;
            }, z.core.$strip>>>;
        }, z.core.$strip>>>;
        labels: z.ZodOptional<z.ZodArray<z.ZodObject<{
            key: z.ZodString;
            source: z.ZodOptional<z.ZodString>;
            value: z.ZodOptional<z.ZodString>;
        }, z.core.$strip>>>;
        nodeSelector: z.ZodOptional<z.ZodObject<{
            matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                key: z.ZodString;
                operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                values: z.ZodOptional<z.ZodArray<z.ZodString>>;
            }, z.core.$strip>>>;
            matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
        }, z.core.$strip>>;
    }, z.core.$strip>, z.ZodUnion<readonly [z.ZodObject<{
        endpointSelector: z.ZodAny;
    }, z.core.$strip>, z.ZodObject<{
        nodeSelector: z.ZodAny;
    }, z.core.$strip>]>>>;
    specs: z.ZodOptional<z.ZodArray<z.ZodIntersection<z.ZodObject<{
        description: z.ZodOptional<z.ZodString>;
        egress: z.ZodOptional<z.ZodArray<z.ZodObject<{
            authentication: z.ZodOptional<z.ZodObject<{
                mode: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodLiteral<"required">, z.ZodLiteral<"test-always-fail">]>;
            }, z.core.$strip>>;
            icmps: z.ZodOptional<z.ZodArray<z.ZodObject<{
                fields: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    family: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"IPv4">, z.ZodLiteral<"IPv6">]>>>;
                    type: z.ZodNumber;
                }, z.core.$strip>>>;
            }, z.core.$strip>>>;
            toCIDR: z.ZodOptional<z.ZodArray<z.ZodString>>;
            toCIDRSet: z.ZodOptional<z.ZodArray<z.ZodIntersection<z.ZodObject<{
                cidr: z.ZodOptional<z.ZodString>;
                cidrGroupRef: z.ZodOptional<z.ZodString>;
                except: z.ZodOptional<z.ZodArray<z.ZodString>>;
            }, z.core.$strip>, z.ZodUnion<readonly [z.ZodObject<{
                cidr: z.ZodAny;
            }, z.core.$strip>, z.ZodObject<{
                cidrGroupRef: z.ZodAny;
            }, z.core.$strip>]>>>>;
            toEndpoints: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    key: z.ZodString;
                    operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                    values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>>;
                matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            }, z.core.$strip>>>;
            toEntities: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodLiteral<"world">, z.ZodLiteral<"cluster">, z.ZodLiteral<"host">, z.ZodLiteral<"init">, z.ZodLiteral<"ingress">, z.ZodLiteral<"unmanaged">, z.ZodLiteral<"remote-node">, z.ZodLiteral<"health">, z.ZodLiteral<"none">, z.ZodLiteral<"kube-apiserver">]>>>;
            toFQDNs: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchName: z.ZodOptional<z.ZodString>;
                matchPattern: z.ZodOptional<z.ZodString>;
            }, z.core.$strip>>>;
            toGroups: z.ZodOptional<z.ZodArray<z.ZodObject<{
                aws: z.ZodOptional<z.ZodObject<{
                    labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
                    region: z.ZodOptional<z.ZodString>;
                    securityGroupsIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    securityGroupsNames: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>;
            }, z.core.$strip>>>;
            toPorts: z.ZodOptional<z.ZodArray<z.ZodObject<{
                listener: z.ZodOptional<z.ZodObject<{
                    envoyConfig: z.ZodObject<{
                        kind: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"CiliumEnvoyConfig">, z.ZodLiteral<"CiliumClusterwideEnvoyConfig">]>>;
                        name: z.ZodString;
                    }, z.core.$strip>;
                    name: z.ZodString;
                }, z.core.$strip>>;
                originatingTLS: z.ZodOptional<z.ZodObject<{
                    certificate: z.ZodOptional<z.ZodString>;
                    privateKey: z.ZodOptional<z.ZodString>;
                    secret: z.ZodObject<{
                        name: z.ZodString;
                        namespace: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>;
                    trustedCA: z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
                ports: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    port: z.ZodString;
                    protocol: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"TCP">, z.ZodLiteral<"UDP">, z.ZodLiteral<"SCTP">, z.ZodLiteral<"ANY">]>>;
                }, z.core.$strip>>>;
                rules: z.ZodOptional<z.ZodObject<{
                    dns: z.ZodOptional<z.ZodArray<z.ZodObject<{
                        matchName: z.ZodOptional<z.ZodString>;
                        matchPattern: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>>;
                    http: z.ZodOptional<z.ZodArray<z.ZodObject<{
                        headerMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
                            mismatch: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"LOG">, z.ZodLiteral<"ADD">, z.ZodLiteral<"DELETE">, z.ZodLiteral<"REPLACE">]>>;
                            name: z.ZodString;
                            secret: z.ZodOptional<z.ZodObject<{
                                name: z.ZodString;
                                namespace: z.ZodOptional<z.ZodString>;
                            }, z.core.$strip>>;
                            value: z.ZodOptional<z.ZodString>;
                        }, z.core.$strip>>>;
                        headers: z.ZodOptional<z.ZodArray<z.ZodString>>;
                        host: z.ZodOptional<z.ZodString>;
                        method: z.ZodOptional<z.ZodString>;
                        path: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>>;
                    kafka: z.ZodOptional<z.ZodArray<z.ZodObject<{
                        apiKey: z.ZodOptional<z.ZodString>;
                        apiVersion: z.ZodOptional<z.ZodString>;
                        clientID: z.ZodOptional<z.ZodString>;
                        role: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"produce">, z.ZodLiteral<"consume">]>>;
                        topic: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>>;
                    l7: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodString>>>;
                    l7proto: z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
                serverNames: z.ZodOptional<z.ZodArray<z.ZodString>>;
                terminatingTLS: z.ZodOptional<z.ZodObject<{
                    certificate: z.ZodOptional<z.ZodString>;
                    privateKey: z.ZodOptional<z.ZodString>;
                    secret: z.ZodObject<{
                        name: z.ZodString;
                        namespace: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>;
                    trustedCA: z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
            }, z.core.$strip>>>;
            toRequires: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    key: z.ZodString;
                    operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                    values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>>;
                matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            }, z.core.$strip>>>;
            toServices: z.ZodOptional<z.ZodArray<z.ZodObject<{
                k8sService: z.ZodOptional<z.ZodObject<{
                    namespace: z.ZodOptional<z.ZodString>;
                    serviceName: z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
                k8sServiceSelector: z.ZodOptional<z.ZodObject<{
                    namespace: z.ZodOptional<z.ZodString>;
                    selector: z.ZodObject<{
                        matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                            key: z.ZodString;
                            operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                            values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                        }, z.core.$strip>>>;
                        matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
                    }, z.core.$strip>;
                }, z.core.$strip>>;
            }, z.core.$strip>>>;
        }, z.core.$strip>>>;
        egressDeny: z.ZodOptional<z.ZodArray<z.ZodObject<{
            icmps: z.ZodOptional<z.ZodArray<z.ZodObject<{
                fields: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    family: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"IPv4">, z.ZodLiteral<"IPv6">]>>>;
                    type: z.ZodNumber;
                }, z.core.$strip>>>;
            }, z.core.$strip>>>;
            toCIDR: z.ZodOptional<z.ZodArray<z.ZodString>>;
            toCIDRSet: z.ZodOptional<z.ZodArray<z.ZodIntersection<z.ZodObject<{
                cidr: z.ZodOptional<z.ZodString>;
                cidrGroupRef: z.ZodOptional<z.ZodString>;
                except: z.ZodOptional<z.ZodArray<z.ZodString>>;
            }, z.core.$strip>, z.ZodUnion<readonly [z.ZodObject<{
                cidr: z.ZodAny;
            }, z.core.$strip>, z.ZodObject<{
                cidrGroupRef: z.ZodAny;
            }, z.core.$strip>]>>>>;
            toEndpoints: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    key: z.ZodString;
                    operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                    values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>>;
                matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            }, z.core.$strip>>>;
            toEntities: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodLiteral<"world">, z.ZodLiteral<"cluster">, z.ZodLiteral<"host">, z.ZodLiteral<"init">, z.ZodLiteral<"ingress">, z.ZodLiteral<"unmanaged">, z.ZodLiteral<"remote-node">, z.ZodLiteral<"health">, z.ZodLiteral<"none">, z.ZodLiteral<"kube-apiserver">]>>>;
            toGroups: z.ZodOptional<z.ZodArray<z.ZodObject<{
                aws: z.ZodOptional<z.ZodObject<{
                    labels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
                    region: z.ZodOptional<z.ZodString>;
                    securityGroupsIds: z.ZodOptional<z.ZodArray<z.ZodString>>;
                    securityGroupsNames: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>;
            }, z.core.$strip>>>;
            toPorts: z.ZodOptional<z.ZodArray<z.ZodObject<{
                ports: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    port: z.ZodString;
                    protocol: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"TCP">, z.ZodLiteral<"UDP">, z.ZodLiteral<"SCTP">, z.ZodLiteral<"ANY">]>>;
                }, z.core.$strip>>>;
            }, z.core.$strip>>>;
            toRequires: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    key: z.ZodString;
                    operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                    values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>>;
                matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            }, z.core.$strip>>>;
            toServices: z.ZodOptional<z.ZodArray<z.ZodObject<{
                k8sService: z.ZodOptional<z.ZodObject<{
                    namespace: z.ZodOptional<z.ZodString>;
                    serviceName: z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
                k8sServiceSelector: z.ZodOptional<z.ZodObject<{
                    namespace: z.ZodOptional<z.ZodString>;
                    selector: z.ZodObject<{
                        matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                            key: z.ZodString;
                            operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                            values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                        }, z.core.$strip>>>;
                        matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
                    }, z.core.$strip>;
                }, z.core.$strip>>;
            }, z.core.$strip>>>;
        }, z.core.$strip>>>;
        endpointSelector: z.ZodOptional<z.ZodObject<{
            matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                key: z.ZodString;
                operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                values: z.ZodOptional<z.ZodArray<z.ZodString>>;
            }, z.core.$strip>>>;
            matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
        }, z.core.$strip>>;
        ingress: z.ZodOptional<z.ZodArray<z.ZodObject<{
            authentication: z.ZodOptional<z.ZodObject<{
                mode: z.ZodUnion<readonly [z.ZodLiteral<"disabled">, z.ZodLiteral<"required">, z.ZodLiteral<"test-always-fail">]>;
            }, z.core.$strip>>;
            fromCIDR: z.ZodOptional<z.ZodArray<z.ZodString>>;
            fromCIDRSet: z.ZodOptional<z.ZodArray<z.ZodIntersection<z.ZodObject<{
                cidr: z.ZodOptional<z.ZodString>;
                cidrGroupRef: z.ZodOptional<z.ZodString>;
                except: z.ZodOptional<z.ZodArray<z.ZodString>>;
            }, z.core.$strip>, z.ZodUnion<readonly [z.ZodObject<{
                cidr: z.ZodAny;
            }, z.core.$strip>, z.ZodObject<{
                cidrGroupRef: z.ZodAny;
            }, z.core.$strip>]>>>>;
            fromEndpoints: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    key: z.ZodString;
                    operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                    values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>>;
                matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            }, z.core.$strip>>>;
            fromEntities: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodLiteral<"world">, z.ZodLiteral<"cluster">, z.ZodLiteral<"host">, z.ZodLiteral<"init">, z.ZodLiteral<"ingress">, z.ZodLiteral<"unmanaged">, z.ZodLiteral<"remote-node">, z.ZodLiteral<"health">, z.ZodLiteral<"none">, z.ZodLiteral<"kube-apiserver">]>>>;
            fromRequires: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    key: z.ZodString;
                    operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                    values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>>;
                matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            }, z.core.$strip>>>;
            icmps: z.ZodOptional<z.ZodArray<z.ZodObject<{
                fields: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    family: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"IPv4">, z.ZodLiteral<"IPv6">]>>>;
                    type: z.ZodNumber;
                }, z.core.$strip>>>;
            }, z.core.$strip>>>;
            toPorts: z.ZodOptional<z.ZodArray<z.ZodObject<{
                listener: z.ZodOptional<z.ZodObject<{
                    envoyConfig: z.ZodObject<{
                        kind: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"CiliumEnvoyConfig">, z.ZodLiteral<"CiliumClusterwideEnvoyConfig">]>>;
                        name: z.ZodString;
                    }, z.core.$strip>;
                    name: z.ZodString;
                }, z.core.$strip>>;
                originatingTLS: z.ZodOptional<z.ZodObject<{
                    certificate: z.ZodOptional<z.ZodString>;
                    privateKey: z.ZodOptional<z.ZodString>;
                    secret: z.ZodObject<{
                        name: z.ZodString;
                        namespace: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>;
                    trustedCA: z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
                ports: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    port: z.ZodString;
                    protocol: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"TCP">, z.ZodLiteral<"UDP">, z.ZodLiteral<"SCTP">, z.ZodLiteral<"ANY">]>>;
                }, z.core.$strip>>>;
                rules: z.ZodOptional<z.ZodObject<{
                    dns: z.ZodOptional<z.ZodArray<z.ZodObject<{
                        matchName: z.ZodOptional<z.ZodString>;
                        matchPattern: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>>;
                    http: z.ZodOptional<z.ZodArray<z.ZodObject<{
                        headerMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
                            mismatch: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"LOG">, z.ZodLiteral<"ADD">, z.ZodLiteral<"DELETE">, z.ZodLiteral<"REPLACE">]>>;
                            name: z.ZodString;
                            secret: z.ZodOptional<z.ZodObject<{
                                name: z.ZodString;
                                namespace: z.ZodOptional<z.ZodString>;
                            }, z.core.$strip>>;
                            value: z.ZodOptional<z.ZodString>;
                        }, z.core.$strip>>>;
                        headers: z.ZodOptional<z.ZodArray<z.ZodString>>;
                        host: z.ZodOptional<z.ZodString>;
                        method: z.ZodOptional<z.ZodString>;
                        path: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>>;
                    kafka: z.ZodOptional<z.ZodArray<z.ZodObject<{
                        apiKey: z.ZodOptional<z.ZodString>;
                        apiVersion: z.ZodOptional<z.ZodString>;
                        clientID: z.ZodOptional<z.ZodString>;
                        role: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"produce">, z.ZodLiteral<"consume">]>>;
                        topic: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>>>;
                    l7: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodString>>>;
                    l7proto: z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
                serverNames: z.ZodOptional<z.ZodArray<z.ZodString>>;
                terminatingTLS: z.ZodOptional<z.ZodObject<{
                    certificate: z.ZodOptional<z.ZodString>;
                    privateKey: z.ZodOptional<z.ZodString>;
                    secret: z.ZodObject<{
                        name: z.ZodString;
                        namespace: z.ZodOptional<z.ZodString>;
                    }, z.core.$strip>;
                    trustedCA: z.ZodOptional<z.ZodString>;
                }, z.core.$strip>>;
            }, z.core.$strip>>>;
        }, z.core.$strip>>>;
        ingressDeny: z.ZodOptional<z.ZodArray<z.ZodObject<{
            fromCIDR: z.ZodOptional<z.ZodArray<z.ZodString>>;
            fromCIDRSet: z.ZodOptional<z.ZodArray<z.ZodIntersection<z.ZodObject<{
                cidr: z.ZodOptional<z.ZodString>;
                cidrGroupRef: z.ZodOptional<z.ZodString>;
                except: z.ZodOptional<z.ZodArray<z.ZodString>>;
            }, z.core.$strip>, z.ZodUnion<readonly [z.ZodObject<{
                cidr: z.ZodAny;
            }, z.core.$strip>, z.ZodObject<{
                cidrGroupRef: z.ZodAny;
            }, z.core.$strip>]>>>>;
            fromEndpoints: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    key: z.ZodString;
                    operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                    values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>>;
                matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            }, z.core.$strip>>>;
            fromEntities: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodLiteral<"all">, z.ZodLiteral<"world">, z.ZodLiteral<"cluster">, z.ZodLiteral<"host">, z.ZodLiteral<"init">, z.ZodLiteral<"ingress">, z.ZodLiteral<"unmanaged">, z.ZodLiteral<"remote-node">, z.ZodLiteral<"health">, z.ZodLiteral<"none">, z.ZodLiteral<"kube-apiserver">]>>>;
            fromRequires: z.ZodOptional<z.ZodArray<z.ZodObject<{
                matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    key: z.ZodString;
                    operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                    values: z.ZodOptional<z.ZodArray<z.ZodString>>;
                }, z.core.$strip>>>;
                matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            }, z.core.$strip>>>;
            icmps: z.ZodOptional<z.ZodArray<z.ZodObject<{
                fields: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    family: z.ZodDefault<z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"IPv4">, z.ZodLiteral<"IPv6">]>>>;
                    type: z.ZodNumber;
                }, z.core.$strip>>>;
            }, z.core.$strip>>>;
            toPorts: z.ZodOptional<z.ZodArray<z.ZodObject<{
                ports: z.ZodOptional<z.ZodArray<z.ZodObject<{
                    port: z.ZodString;
                    protocol: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<"TCP">, z.ZodLiteral<"UDP">, z.ZodLiteral<"SCTP">, z.ZodLiteral<"ANY">]>>;
                }, z.core.$strip>>>;
            }, z.core.$strip>>>;
        }, z.core.$strip>>>;
        labels: z.ZodOptional<z.ZodArray<z.ZodObject<{
            key: z.ZodString;
            source: z.ZodOptional<z.ZodString>;
            value: z.ZodOptional<z.ZodString>;
        }, z.core.$strip>>>;
        nodeSelector: z.ZodOptional<z.ZodObject<{
            matchExpressions: z.ZodOptional<z.ZodArray<z.ZodObject<{
                key: z.ZodString;
                operator: z.ZodUnion<readonly [z.ZodLiteral<"In">, z.ZodLiteral<"NotIn">, z.ZodLiteral<"Exists">, z.ZodLiteral<"DoesNotExist">]>;
                values: z.ZodOptional<z.ZodArray<z.ZodString>>;
            }, z.core.$strip>>>;
            matchLabels: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
        }, z.core.$strip>>;
    }, z.core.$strip>, z.ZodUnion<readonly [z.ZodObject<{
        endpointSelector: z.ZodAny;
    }, z.core.$strip>, z.ZodObject<{
        nodeSelector: z.ZodAny;
    }, z.core.$strip>]>>>>;
    status: z.ZodOptional<z.ZodObject<{
        derivativePolicies: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            enforcing: z.ZodOptional<z.ZodBoolean>;
            error: z.ZodOptional<z.ZodString>;
            lastUpdated: z.ZodNullable<z.ZodOptional<z.ZodISODateTime>>;
            localPolicyRevision: z.ZodOptional<z.ZodNumber>;
            ok: z.ZodOptional<z.ZodBoolean>;
        }, z.core.$strip>>>;
        nodes: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
            annotations: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
            enforcing: z.ZodOptional<z.ZodBoolean>;
            error: z.ZodOptional<z.ZodString>;
            lastUpdated: z.ZodNullable<z.ZodOptional<z.ZodISODateTime>>;
            localPolicyRevision: z.ZodOptional<z.ZodNumber>;
            ok: z.ZodOptional<z.ZodBoolean>;
        }, z.core.$strip>>>;
    }, z.core.$strip>>;
}, z.core.$strip>;