v1alpha1

type AdvancedConfigObservation struct {

	// Policy path to IP address pool
	AddressPoolPath *string `json:"addressPoolPath,omitempty" tf:"address_pool_path,omitempty"`

	// Connectivity configuration to manually connect (ON) or disconnect (OFF)
	Connectivity *string `json:"connectivity,omitempty" tf:"connectivity,omitempty"`

	// Flag to identify a hybrid logical switch
	Hybrid *bool `json:"hybrid,omitempty" tf:"hybrid,omitempty"`

	// Flag to enable local egress
	LocalEgress *bool `json:"localEgress,omitempty" tf:"local_egress,omitempty"`

	// The name of the switching uplink teaming policy for the bridge endpoint
	UplinkTeamingPolicy *string `json:"uplinkTeamingPolicy,omitempty" tf:"uplink_teaming_policy,omitempty"`

	// This URPF mode is applied to the downlink logical router port created while attaching this segment to gateway
	UrpfMode *string `json:"urpfMode,omitempty" tf:"urpf_mode,omitempty"`
}

type AdvancedConfigParameters struct {

	// Policy path to IP address pool
	// +kubebuilder:validation:Optional
	AddressPoolPath *string `json:"addressPoolPath,omitempty" tf:"address_pool_path,omitempty"`

	// Connectivity configuration to manually connect (ON) or disconnect (OFF)
	// +kubebuilder:validation:Optional
	Connectivity *string `json:"connectivity,omitempty" tf:"connectivity,omitempty"`

	// Flag to identify a hybrid logical switch
	// +kubebuilder:validation:Optional
	Hybrid *bool `json:"hybrid,omitempty" tf:"hybrid,omitempty"`

	// Flag to enable local egress
	// +kubebuilder:validation:Optional
	LocalEgress *bool `json:"localEgress,omitempty" tf:"local_egress,omitempty"`

	// The name of the switching uplink teaming policy for the bridge endpoint
	// +kubebuilder:validation:Optional
	UplinkTeamingPolicy *string `json:"uplinkTeamingPolicy,omitempty" tf:"uplink_teaming_policy,omitempty"`

	// This URPF mode is applied to the downlink logical router port created while attaching this segment to gateway
	// +kubebuilder:validation:Optional
	UrpfMode *string `json:"urpfMode,omitempty" tf:"urpf_mode,omitempty"`
}

type BridgeConfigObservation struct {

	// profile path
	ProfilePath *string `json:"profilePath,omitempty" tf:"profile_path,omitempty"`

	// vlan transport zone path
	TransportZonePath *string `json:"transportZonePath,omitempty" tf:"transport_zone_path,omitempty"`

	UplinkTeamingPolicy *string `json:"uplinkTeamingPolicy,omitempty" tf:"uplink_teaming_policy,omitempty"`

	// VLAN specification for bridge endpoint
	VlanIds []*string `json:"vlanIds,omitempty" tf:"vlan_ids,omitempty"`
}

type BridgeConfigParameters struct {

	// profile path
	// +kubebuilder:validation:Required
	ProfilePath *string `json:"profilePath" tf:"profile_path,omitempty"`

	// vlan transport zone path
	// +kubebuilder:validation:Required
	TransportZonePath *string `json:"transportZonePath" tf:"transport_zone_path,omitempty"`

	// +kubebuilder:validation:Optional
	UplinkTeamingPolicy *string `json:"uplinkTeamingPolicy,omitempty" tf:"uplink_teaming_policy,omitempty"`

	// VLAN specification for bridge endpoint
	// +kubebuilder:validation:Required
	VlanIds []*string `json:"vlanIds" tf:"vlan_ids,omitempty"`
}

type ContextObservation struct {

	// Id of the project which the resource belongs to.
	ProjectID *string `json:"projectId,omitempty" tf:"project_id,omitempty"`
}

type ContextParameters struct {

	// Id of the project which the resource belongs to.
	// +kubebuilder:validation:Required
	ProjectID *string `json:"projectId" tf:"project_id,omitempty"`
}

type DHCPGenericOptionObservation struct {

	// DHCP option code, [0-255]
	Code *float64 `json:"code,omitempty" tf:"code,omitempty"`

	// DHCP option values
	Values []*string `json:"values,omitempty" tf:"values,omitempty"`
}

type DHCPGenericOptionParameters struct {

	// DHCP option code, [0-255]
	// +kubebuilder:validation:Required
	Code *float64 `json:"code" tf:"code,omitempty"`

	// DHCP option values
	// +kubebuilder:validation:Required
	Values []*string `json:"values" tf:"values,omitempty"`
}

type DHCPOption121Observation struct {

	// Destination in cidr
	Network *string `json:"network,omitempty" tf:"network,omitempty"`

	// Next hop IP
	NextHop *string `json:"nextHop,omitempty" tf:"next_hop,omitempty"`
}

type DHCPOption121Parameters struct {

	// Destination in cidr
	// +kubebuilder:validation:Required
	Network *string `json:"network" tf:"network,omitempty"`

	// Next hop IP
	// +kubebuilder:validation:Required
	NextHop *string `json:"nextHop" tf:"next_hop,omitempty"`
}

type DHCPV4ConfigDHCPGenericOptionObservation struct {

	// DHCP option code, [0-255]
	Code *float64 `json:"code,omitempty" tf:"code,omitempty"`

	// DHCP option values
	Values []*string `json:"values,omitempty" tf:"values,omitempty"`
}

type DHCPV4ConfigDHCPGenericOptionParameters struct {

	// DHCP option code, [0-255]
	// +kubebuilder:validation:Required
	Code *float64 `json:"code" tf:"code,omitempty"`

	// DHCP option values
	// +kubebuilder:validation:Required
	Values []*string `json:"values" tf:"values,omitempty"`
}

type DHCPV4ConfigDHCPOption121Observation struct {

	// Destination in cidr
	Network *string `json:"network,omitempty" tf:"network,omitempty"`

	// Next hop IP
	NextHop *string `json:"nextHop,omitempty" tf:"next_hop,omitempty"`
}

type DHCPV4ConfigDHCPOption121Parameters struct {

	// Destination in cidr
	// +kubebuilder:validation:Required
	Network *string `json:"network" tf:"network,omitempty"`

	// Next hop IP
	// +kubebuilder:validation:Required
	NextHop *string `json:"nextHop" tf:"next_hop,omitempty"`
}

type DHCPV4ConfigObservation struct {

	// Generic DHCP options
	DHCPGenericOption []DHCPGenericOptionObservation `json:"dhcpGenericOption,omitempty" tf:"dhcp_generic_option,omitempty"`

	// DHCP classless static routes
	DHCPOption121 []DHCPOption121Observation `json:"dhcpOption121,omitempty" tf:"dhcp_option_121,omitempty"`

	// IP addresses of DNS servers for subnet
	DNSServers []*string `json:"dnsServers,omitempty" tf:"dns_servers,omitempty"`

	// DHCP lease time in seconds
	LeaseTime *float64 `json:"leaseTime,omitempty" tf:"lease_time,omitempty"`

	// IP address of the DHCP server in CIDR format
	ServerAddress *string `json:"serverAddress,omitempty" tf:"server_address,omitempty"`
}

type DHCPV4ConfigParameters struct {

	// Generic DHCP options
	// +kubebuilder:validation:Optional
	DHCPGenericOption []DHCPGenericOptionParameters `json:"dhcpGenericOption,omitempty" tf:"dhcp_generic_option,omitempty"`

	// DHCP classless static routes
	// +kubebuilder:validation:Optional
	DHCPOption121 []DHCPOption121Parameters `json:"dhcpOption121,omitempty" tf:"dhcp_option_121,omitempty"`

	// IP addresses of DNS servers for subnet
	// +kubebuilder:validation:Optional
	DNSServers []*string `json:"dnsServers,omitempty" tf:"dns_servers,omitempty"`

	// DHCP lease time in seconds
	// +kubebuilder:validation:Optional
	LeaseTime *float64 `json:"leaseTime,omitempty" tf:"lease_time,omitempty"`

	// IP address of the DHCP server in CIDR format
	// +kubebuilder:validation:Optional
	ServerAddress *string `json:"serverAddress,omitempty" tf:"server_address,omitempty"`
}

type DHCPV6ConfigExcludedRangeObservation struct {

	// The end IP Address for the range
	End *string `json:"end,omitempty" tf:"end,omitempty"`

	// The start IP Address for the range
	Start *string `json:"start,omitempty" tf:"start,omitempty"`
}

type DHCPV6ConfigExcludedRangeParameters struct {

	// The end IP Address for the range
	// +kubebuilder:validation:Required
	End *string `json:"end" tf:"end,omitempty"`

	// The start IP Address for the range
	// +kubebuilder:validation:Required
	Start *string `json:"start" tf:"start,omitempty"`
}

type DHCPV6ConfigObservation struct {

	// IP addresses of DNS servers for subnet
	DNSServers []*string `json:"dnsServers,omitempty" tf:"dns_servers,omitempty"`

	// Domain names
	DomainNames []*string `json:"domainNames,omitempty" tf:"domain_names,omitempty"`

	// Excluded addresses to define dynamic ip allocation ranges
	ExcludedRange []ExcludedRangeObservation `json:"excludedRange,omitempty" tf:"excluded_range,omitempty"`

	// DHCP lease time in seconds
	LeaseTime *float64 `json:"leaseTime,omitempty" tf:"lease_time,omitempty"`

	// The time interval in seconds, in which the prefix is advertised as preferred
	PreferredTime *float64 `json:"preferredTime,omitempty" tf:"preferred_time,omitempty"`

	// IP address of the DHCP server in CIDR format
	ServerAddress *string `json:"serverAddress,omitempty" tf:"server_address,omitempty"`

	// IPv6 address of SNTP servers for subnet
	SntpServers []*string `json:"sntpServers,omitempty" tf:"sntp_servers,omitempty"`
}

type DHCPV6ConfigParameters struct {

	// IP addresses of DNS servers for subnet
	// +kubebuilder:validation:Optional
	DNSServers []*string `json:"dnsServers,omitempty" tf:"dns_servers,omitempty"`

	// Domain names
	// +kubebuilder:validation:Optional
	DomainNames []*string `json:"domainNames,omitempty" tf:"domain_names,omitempty"`

	// Excluded addresses to define dynamic ip allocation ranges
	// +kubebuilder:validation:Optional
	ExcludedRange []ExcludedRangeParameters `json:"excludedRange,omitempty" tf:"excluded_range,omitempty"`

	// DHCP lease time in seconds
	// +kubebuilder:validation:Optional
	LeaseTime *float64 `json:"leaseTime,omitempty" tf:"lease_time,omitempty"`

	// The time interval in seconds, in which the prefix is advertised as preferred
	// +kubebuilder:validation:Optional
	PreferredTime *float64 `json:"preferredTime,omitempty" tf:"preferred_time,omitempty"`

	// IP address of the DHCP server in CIDR format
	// +kubebuilder:validation:Optional
	ServerAddress *string `json:"serverAddress,omitempty" tf:"server_address,omitempty"`

	// IPv6 address of SNTP servers for subnet
	// +kubebuilder:validation:Optional
	SntpServers []*string `json:"sntpServers,omitempty" tf:"sntp_servers,omitempty"`
}

type DiscoveryProfileObservation struct {

	// Policy path of profile binding map
	BindingMapPath *string `json:"bindingMapPath,omitempty" tf:"binding_map_path,omitempty"`

	// Policy path of associated IP Discovery Profile
	IPDiscoveryProfilePath *string `json:"ipDiscoveryProfilePath,omitempty" tf:"ip_discovery_profile_path,omitempty"`

	// Policy path of associated Mac Discovery Profile
	MacDiscoveryProfilePath *string `json:"macDiscoveryProfilePath,omitempty" tf:"mac_discovery_profile_path,omitempty"`

	// The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected
	Revision *float64 `json:"revision,omitempty" tf:"revision,omitempty"`
}

type DiscoveryProfileParameters struct {

	// Policy path of profile binding map
	// +kubebuilder:validation:Optional
	BindingMapPath *string `json:"bindingMapPath,omitempty" tf:"binding_map_path,omitempty"`

	// Policy path of associated IP Discovery Profile
	// +kubebuilder:validation:Optional
	IPDiscoveryProfilePath *string `json:"ipDiscoveryProfilePath,omitempty" tf:"ip_discovery_profile_path,omitempty"`

	// Policy path of associated Mac Discovery Profile
	// +kubebuilder:validation:Optional
	MacDiscoveryProfilePath *string `json:"macDiscoveryProfilePath,omitempty" tf:"mac_discovery_profile_path,omitempty"`
}

type EgressRateShaperObservation struct {

	// Average Bandwidth in mbps
	AverageBwMbps *float64 `json:"averageBwMbps,omitempty" tf:"average_bw_mbps,omitempty"`

	// Burst size in bytes
	BurstSize *float64 `json:"burstSize,omitempty" tf:"burst_size,omitempty"`

	// Whether this rate shaper is enabled
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// Peak Bandwidth in mbps
	PeakBwMbps *float64 `json:"peakBwMbps,omitempty" tf:"peak_bw_mbps,omitempty"`
}

type EgressRateShaperParameters struct {

	// Average Bandwidth in mbps
	// +kubebuilder:validation:Optional
	AverageBwMbps *float64 `json:"averageBwMbps,omitempty" tf:"average_bw_mbps,omitempty"`

	// Burst size in bytes
	// +kubebuilder:validation:Optional
	BurstSize *float64 `json:"burstSize,omitempty" tf:"burst_size,omitempty"`

	// Whether this rate shaper is enabled
	// +kubebuilder:validation:Optional
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// Peak Bandwidth in mbps
	// +kubebuilder:validation:Optional
	PeakBwMbps *float64 `json:"peakBwMbps,omitempty" tf:"peak_bw_mbps,omitempty"`
}

type ExcludedRangeObservation struct {

	// The end IP Address for the range
	End *string `json:"end,omitempty" tf:"end,omitempty"`

	// The start IP Address for the range
	Start *string `json:"start,omitempty" tf:"start,omitempty"`
}

type ExcludedRangeParameters struct {

	// The end IP Address for the range
	// +kubebuilder:validation:Required
	End *string `json:"end" tf:"end,omitempty"`

	// The start IP Address for the range
	// +kubebuilder:validation:Required
	Start *string `json:"start" tf:"start,omitempty"`
}

type IngressBroadcastRateShaperObservation struct {

	// Average Bandwidth in kbps
	AverageBwKbps *float64 `json:"averageBwKbps,omitempty" tf:"average_bw_kbps,omitempty"`

	// Burst size in bytes
	BurstSize *float64 `json:"burstSize,omitempty" tf:"burst_size,omitempty"`

	// Whether this rate shaper is enabled
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// Peak Bandwidth in kbps
	PeakBwKbps *float64 `json:"peakBwKbps,omitempty" tf:"peak_bw_kbps,omitempty"`
}

type IngressBroadcastRateShaperParameters struct {

	// Average Bandwidth in kbps
	// +kubebuilder:validation:Optional
	AverageBwKbps *float64 `json:"averageBwKbps,omitempty" tf:"average_bw_kbps,omitempty"`

	// Burst size in bytes
	// +kubebuilder:validation:Optional
	BurstSize *float64 `json:"burstSize,omitempty" tf:"burst_size,omitempty"`

	// Whether this rate shaper is enabled
	// +kubebuilder:validation:Optional
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// Peak Bandwidth in kbps
	// +kubebuilder:validation:Optional
	PeakBwKbps *float64 `json:"peakBwKbps,omitempty" tf:"peak_bw_kbps,omitempty"`
}

type IngressRateShaperObservation struct {

	// Average Bandwidth in mbps
	AverageBwMbps *float64 `json:"averageBwMbps,omitempty" tf:"average_bw_mbps,omitempty"`

	// Burst size in bytes
	BurstSize *float64 `json:"burstSize,omitempty" tf:"burst_size,omitempty"`

	// Whether this rate shaper is enabled
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// Peak Bandwidth in mbps
	PeakBwMbps *float64 `json:"peakBwMbps,omitempty" tf:"peak_bw_mbps,omitempty"`
}

type IngressRateShaperParameters struct {

	// Average Bandwidth in mbps
	// +kubebuilder:validation:Optional
	AverageBwMbps *float64 `json:"averageBwMbps,omitempty" tf:"average_bw_mbps,omitempty"`

	// Burst size in bytes
	// +kubebuilder:validation:Optional
	BurstSize *float64 `json:"burstSize,omitempty" tf:"burst_size,omitempty"`

	// Whether this rate shaper is enabled
	// +kubebuilder:validation:Optional
	Enabled *bool `json:"enabled,omitempty" tf:"enabled,omitempty"`

	// Peak Bandwidth in mbps
	// +kubebuilder:validation:Optional
	PeakBwMbps *float64 `json:"peakBwMbps,omitempty" tf:"peak_bw_mbps,omitempty"`
}

type L2ExtensionObservation struct {

	// Policy paths of associated L2 VPN sessions
	L2VpnPaths []*string `json:"l2vpnPaths,omitempty" tf:"l2vpn_paths,omitempty"`

	// Tunnel ID
	TunnelID *float64 `json:"tunnelId,omitempty" tf:"tunnel_id,omitempty"`
}

type L2ExtensionParameters struct {

	// Policy paths of associated L2 VPN sessions
	// +kubebuilder:validation:Optional
	L2VpnPaths []*string `json:"l2vpnPaths,omitempty" tf:"l2vpn_paths,omitempty"`

	// Tunnel ID
	// +kubebuilder:validation:Optional
	TunnelID *float64 `json:"tunnelId,omitempty" tf:"tunnel_id,omitempty"`
}

type PolicyFixedSegment struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.connectivityPath)",message="connectivityPath is a required parameter"
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.displayName)",message="displayName is a required parameter"
	Spec   PolicyFixedSegmentSpec   `json:"spec"`
	Status PolicyFixedSegmentStatus `json:"status,omitempty"`
}

type PolicyFixedSegmentList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PolicyFixedSegment `json:"items"`
}

type PolicyFixedSegmentObservation struct {

	// Advanced segment configuration
	AdvancedConfig []AdvancedConfigObservation `json:"advancedConfig,omitempty" tf:"advanced_config,omitempty"`

	// Bridge configuration
	BridgeConfig []BridgeConfigObservation `json:"bridgeConfig,omitempty" tf:"bridge_config,omitempty"`

	// Policy path to the connecting Tier-0 or Tier-1
	ConnectivityPath *string `json:"connectivityPath,omitempty" tf:"connectivity_path,omitempty"`

	// Resource context
	Context []ContextObservation `json:"context,omitempty" tf:"context,omitempty"`

	// Policy path to DHCP server or relay configuration to use for subnets configured on this segment
	DHCPConfigPath *string `json:"dhcpConfigPath,omitempty" tf:"dhcp_config_path,omitempty"`

	// Description for this resource
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// Display name for this resource
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// DNS domain names
	DomainName *string `json:"domainName,omitempty" tf:"domain_name,omitempty"`

	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// Configuration for extending Segment through L2 VPN
	L2Extension []L2ExtensionObservation `json:"l2Extension,omitempty" tf:"l2_extension,omitempty"`

	// NSX ID for this resource
	NsxID *string `json:"nsxId,omitempty" tf:"nsx_id,omitempty"`

	// Overlay connectivity ID for this Segment
	OverlayID *float64 `json:"overlayId,omitempty" tf:"overlay_id,omitempty"`

	// Policy path for this resource
	Path *string `json:"path,omitempty" tf:"path,omitempty"`

	// Replication mode - MTEP or SOURCE
	ReplicationMode *string `json:"replicationMode,omitempty" tf:"replication_mode,omitempty"`

	// The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected
	Revision *float64 `json:"revision,omitempty" tf:"revision,omitempty"`

	// Subnet configuration with at most 1 IPv4 CIDR and multiple IPv6 CIDRs
	Subnet []SubnetObservation `json:"subnet,omitempty" tf:"subnet,omitempty"`

	// Set of opaque identifiers meaningful to the user
	Tag []TagObservation `json:"tag,omitempty" tf:"tag,omitempty"`

	// Policy path to the transport zone
	TransportZonePath *string `json:"transportZonePath,omitempty" tf:"transport_zone_path,omitempty"`

	// VLAN IDs for VLAN backed Segment
	VlanIds []*string `json:"vlanIds,omitempty" tf:"vlan_ids,omitempty"`
}

type PolicyFixedSegmentParameters struct {

	// Advanced segment configuration
	// +kubebuilder:validation:Optional
	AdvancedConfig []AdvancedConfigParameters `json:"advancedConfig,omitempty" tf:"advanced_config,omitempty"`

	// Bridge configuration
	// +kubebuilder:validation:Optional
	BridgeConfig []BridgeConfigParameters `json:"bridgeConfig,omitempty" tf:"bridge_config,omitempty"`

	// Policy path to the connecting Tier-0 or Tier-1
	// +kubebuilder:validation:Optional
	ConnectivityPath *string `json:"connectivityPath,omitempty" tf:"connectivity_path,omitempty"`

	// Resource context
	// +kubebuilder:validation:Optional
	Context []ContextParameters `json:"context,omitempty" tf:"context,omitempty"`

	// Policy path to DHCP server or relay configuration to use for subnets configured on this segment
	// +kubebuilder:validation:Optional
	DHCPConfigPath *string `json:"dhcpConfigPath,omitempty" tf:"dhcp_config_path,omitempty"`

	// Description for this resource
	// +kubebuilder:validation:Optional
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// Display name for this resource
	// +kubebuilder:validation:Optional
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// DNS domain names
	// +kubebuilder:validation:Optional
	DomainName *string `json:"domainName,omitempty" tf:"domain_name,omitempty"`

	// Configuration for extending Segment through L2 VPN
	// +kubebuilder:validation:Optional
	L2Extension []L2ExtensionParameters `json:"l2Extension,omitempty" tf:"l2_extension,omitempty"`

	// NSX ID for this resource
	// +kubebuilder:validation:Optional
	NsxID *string `json:"nsxId,omitempty" tf:"nsx_id,omitempty"`

	// Overlay connectivity ID for this Segment
	// +kubebuilder:validation:Optional
	OverlayID *float64 `json:"overlayId,omitempty" tf:"overlay_id,omitempty"`

	// Replication mode - MTEP or SOURCE
	// +kubebuilder:validation:Optional
	ReplicationMode *string `json:"replicationMode,omitempty" tf:"replication_mode,omitempty"`

	// Subnet configuration with at most 1 IPv4 CIDR and multiple IPv6 CIDRs
	// +kubebuilder:validation:Optional
	Subnet []SubnetParameters `json:"subnet,omitempty" tf:"subnet,omitempty"`

	// Set of opaque identifiers meaningful to the user
	// +kubebuilder:validation:Optional
	Tag []TagParameters `json:"tag,omitempty" tf:"tag,omitempty"`

	// Policy path to the transport zone
	// +kubebuilder:validation:Optional
	TransportZonePath *string `json:"transportZonePath,omitempty" tf:"transport_zone_path,omitempty"`

	// VLAN IDs for VLAN backed Segment
	// +kubebuilder:validation:Optional
	VlanIds []*string `json:"vlanIds,omitempty" tf:"vlan_ids,omitempty"`
}

type PolicyFixedSegmentSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     PolicyFixedSegmentParameters `json:"forProvider"`
}

type PolicyFixedSegmentStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        PolicyFixedSegmentObservation `json:"atProvider,omitempty"`
}

type PolicyIpDiscoveryProfile struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.displayName)",message="displayName is a required parameter"
	Spec   PolicyIpDiscoveryProfileSpec   `json:"spec"`
	Status PolicyIpDiscoveryProfileStatus `json:"status,omitempty"`
}

type PolicyIpDiscoveryProfileContextObservation struct {

	// Id of the project which the resource belongs to.
	ProjectID *string `json:"projectId,omitempty" tf:"project_id,omitempty"`
}

type PolicyIpDiscoveryProfileContextParameters struct {

	// Id of the project which the resource belongs to.
	// +kubebuilder:validation:Required
	ProjectID *string `json:"projectId" tf:"project_id,omitempty"`
}

type PolicyIpDiscoveryProfileList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PolicyIpDiscoveryProfile `json:"items"`
}

type PolicyIpDiscoveryProfileObservation struct {

	// Maximum number of ARP bindings
	ArpBindingLimit *float64 `json:"arpBindingLimit,omitempty" tf:"arp_binding_limit,omitempty"`

	// ARP and ND cache timeout (in minutes)
	ArpNdBindingTimeout *float64 `json:"arpNdBindingTimeout,omitempty" tf:"arp_nd_binding_timeout,omitempty"`

	// Is ARP snooping enabled or not
	ArpSnoopingEnabled *bool `json:"arpSnoopingEnabled,omitempty" tf:"arp_snooping_enabled,omitempty"`

	// Resource context
	Context []PolicyIpDiscoveryProfileContextObservation `json:"context,omitempty" tf:"context,omitempty"`

	// Is DHCP snooping enabled or not
	DHCPSnoopingEnabled *bool `json:"dhcpSnoopingEnabled,omitempty" tf:"dhcp_snooping_enabled,omitempty"`

	// Is DHCP snoping v6 enabled or not
	DHCPSnoopingV6Enabled *bool `json:"dhcpSnoopingV6Enabled,omitempty" tf:"dhcp_snooping_v6_enabled,omitempty"`

	// Description for this resource
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// Display name for this resource
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// Duplicate IP detection
	DuplicateIPDetectionEnabled *bool `json:"duplicateIpDetectionEnabled,omitempty" tf:"duplicate_ip_detection_enabled,omitempty"`

	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// Is ND snooping enabled or not
	NdSnoopingEnabled *bool `json:"ndSnoopingEnabled,omitempty" tf:"nd_snooping_enabled,omitempty"`

	// Maximum number of ND (Neighbor Discovery Protocol) bindings
	NdSnoopingLimit *float64 `json:"ndSnoopingLimit,omitempty" tf:"nd_snooping_limit,omitempty"`

	// NSX ID for this resource
	NsxID *string `json:"nsxId,omitempty" tf:"nsx_id,omitempty"`

	// Policy path for this resource
	Path *string `json:"path,omitempty" tf:"path,omitempty"`

	// The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected
	Revision *float64 `json:"revision,omitempty" tf:"revision,omitempty"`

	// Set of opaque identifiers meaningful to the user
	Tag []PolicyIpDiscoveryProfileTagObservation `json:"tag,omitempty" tf:"tag,omitempty"`

	// Is TOFU enabled or not
	TofuEnabled *bool `json:"tofuEnabled,omitempty" tf:"tofu_enabled,omitempty"`

	// Is VM tools enabled or not
	VmtoolsEnabled *bool `json:"vmtoolsEnabled,omitempty" tf:"vmtools_enabled,omitempty"`

	// Is VM tools enabled or not
	VmtoolsV6Enabled *bool `json:"vmtoolsV6Enabled,omitempty" tf:"vmtools_v6_enabled,omitempty"`
}

type PolicyIpDiscoveryProfileParameters struct {

	// Maximum number of ARP bindings
	// +kubebuilder:validation:Optional
	ArpBindingLimit *float64 `json:"arpBindingLimit,omitempty" tf:"arp_binding_limit,omitempty"`

	// ARP and ND cache timeout (in minutes)
	// +kubebuilder:validation:Optional
	ArpNdBindingTimeout *float64 `json:"arpNdBindingTimeout,omitempty" tf:"arp_nd_binding_timeout,omitempty"`

	// Is ARP snooping enabled or not
	// +kubebuilder:validation:Optional
	ArpSnoopingEnabled *bool `json:"arpSnoopingEnabled,omitempty" tf:"arp_snooping_enabled,omitempty"`

	// Resource context
	// +kubebuilder:validation:Optional
	Context []PolicyIpDiscoveryProfileContextParameters `json:"context,omitempty" tf:"context,omitempty"`

	// Is DHCP snooping enabled or not
	// +kubebuilder:validation:Optional
	DHCPSnoopingEnabled *bool `json:"dhcpSnoopingEnabled,omitempty" tf:"dhcp_snooping_enabled,omitempty"`

	// Is DHCP snoping v6 enabled or not
	// +kubebuilder:validation:Optional
	DHCPSnoopingV6Enabled *bool `json:"dhcpSnoopingV6Enabled,omitempty" tf:"dhcp_snooping_v6_enabled,omitempty"`

	// Description for this resource
	// +kubebuilder:validation:Optional
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// Display name for this resource
	// +kubebuilder:validation:Optional
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// Duplicate IP detection
	// +kubebuilder:validation:Optional
	DuplicateIPDetectionEnabled *bool `json:"duplicateIpDetectionEnabled,omitempty" tf:"duplicate_ip_detection_enabled,omitempty"`

	// Is ND snooping enabled or not
	// +kubebuilder:validation:Optional
	NdSnoopingEnabled *bool `json:"ndSnoopingEnabled,omitempty" tf:"nd_snooping_enabled,omitempty"`

	// Maximum number of ND (Neighbor Discovery Protocol) bindings
	// +kubebuilder:validation:Optional
	NdSnoopingLimit *float64 `json:"ndSnoopingLimit,omitempty" tf:"nd_snooping_limit,omitempty"`

	// NSX ID for this resource
	// +kubebuilder:validation:Optional
	NsxID *string `json:"nsxId,omitempty" tf:"nsx_id,omitempty"`

	// Set of opaque identifiers meaningful to the user
	// +kubebuilder:validation:Optional
	Tag []PolicyIpDiscoveryProfileTagParameters `json:"tag,omitempty" tf:"tag,omitempty"`

	// Is TOFU enabled or not
	// +kubebuilder:validation:Optional
	TofuEnabled *bool `json:"tofuEnabled,omitempty" tf:"tofu_enabled,omitempty"`

	// Is VM tools enabled or not
	// +kubebuilder:validation:Optional
	VmtoolsEnabled *bool `json:"vmtoolsEnabled,omitempty" tf:"vmtools_enabled,omitempty"`

	// Is VM tools enabled or not
	// +kubebuilder:validation:Optional
	VmtoolsV6Enabled *bool `json:"vmtoolsV6Enabled,omitempty" tf:"vmtools_v6_enabled,omitempty"`
}

type PolicyIpDiscoveryProfileSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     PolicyIpDiscoveryProfileParameters `json:"forProvider"`
}

type PolicyIpDiscoveryProfileStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        PolicyIpDiscoveryProfileObservation `json:"atProvider,omitempty"`
}

type PolicyIpDiscoveryProfileTagObservation struct {
	Scope *string `json:"scope,omitempty" tf:"scope,omitempty"`

	Tag *string `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicyIpDiscoveryProfileTagParameters struct {

	// +kubebuilder:validation:Optional
	Scope *string `json:"scope,omitempty" tf:"scope,omitempty"`

	// +kubebuilder:validation:Optional
	Tag *string `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicyMacDiscoveryProfile struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.displayName)",message="displayName is a required parameter"
	Spec   PolicyMacDiscoveryProfileSpec   `json:"spec"`
	Status PolicyMacDiscoveryProfileStatus `json:"status,omitempty"`
}

type PolicyMacDiscoveryProfileContextObservation struct {

	// Id of the project which the resource belongs to.
	ProjectID *string `json:"projectId,omitempty" tf:"project_id,omitempty"`
}

type PolicyMacDiscoveryProfileContextParameters struct {

	// Id of the project which the resource belongs to.
	// +kubebuilder:validation:Required
	ProjectID *string `json:"projectId" tf:"project_id,omitempty"`
}

type PolicyMacDiscoveryProfileList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PolicyMacDiscoveryProfile `json:"items"`
}

type PolicyMacDiscoveryProfileObservation struct {

	// Resource context
	Context []PolicyMacDiscoveryProfileContextObservation `json:"context,omitempty" tf:"context,omitempty"`

	// Description for this resource
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// Display name for this resource
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	MacChangeEnabled *bool `json:"macChangeEnabled,omitempty" tf:"mac_change_enabled,omitempty"`

	MacLearningEnabled *bool `json:"macLearningEnabled,omitempty" tf:"mac_learning_enabled,omitempty"`

	MacLimit *float64 `json:"macLimit,omitempty" tf:"mac_limit,omitempty"`

	MacLimitPolicy *string `json:"macLimitPolicy,omitempty" tf:"mac_limit_policy,omitempty"`

	// NSX ID for this resource
	NsxID *string `json:"nsxId,omitempty" tf:"nsx_id,omitempty"`

	// Policy path for this resource
	Path *string `json:"path,omitempty" tf:"path,omitempty"`

	RemoteOverlayMacLimit *float64 `json:"remoteOverlayMacLimit,omitempty" tf:"remote_overlay_mac_limit,omitempty"`

	// The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected
	Revision *float64 `json:"revision,omitempty" tf:"revision,omitempty"`

	// Set of opaque identifiers meaningful to the user
	Tag []PolicyMacDiscoveryProfileTagObservation `json:"tag,omitempty" tf:"tag,omitempty"`

	UnknownUnicastFloodingEnabled *bool `json:"unknownUnicastFloodingEnabled,omitempty" tf:"unknown_unicast_flooding_enabled,omitempty"`
}

type PolicyMacDiscoveryProfileParameters struct {

	// Resource context
	// +kubebuilder:validation:Optional
	Context []PolicyMacDiscoveryProfileContextParameters `json:"context,omitempty" tf:"context,omitempty"`

	// Description for this resource
	// +kubebuilder:validation:Optional
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// Display name for this resource
	// +kubebuilder:validation:Optional
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// +kubebuilder:validation:Optional
	MacChangeEnabled *bool `json:"macChangeEnabled,omitempty" tf:"mac_change_enabled,omitempty"`

	// +kubebuilder:validation:Optional
	MacLearningEnabled *bool `json:"macLearningEnabled,omitempty" tf:"mac_learning_enabled,omitempty"`

	// +kubebuilder:validation:Optional
	MacLimit *float64 `json:"macLimit,omitempty" tf:"mac_limit,omitempty"`

	// +kubebuilder:validation:Optional
	MacLimitPolicy *string `json:"macLimitPolicy,omitempty" tf:"mac_limit_policy,omitempty"`

	// NSX ID for this resource
	// +kubebuilder:validation:Optional
	NsxID *string `json:"nsxId,omitempty" tf:"nsx_id,omitempty"`

	// +kubebuilder:validation:Optional
	RemoteOverlayMacLimit *float64 `json:"remoteOverlayMacLimit,omitempty" tf:"remote_overlay_mac_limit,omitempty"`

	// Set of opaque identifiers meaningful to the user
	// +kubebuilder:validation:Optional
	Tag []PolicyMacDiscoveryProfileTagParameters `json:"tag,omitempty" tf:"tag,omitempty"`

	// +kubebuilder:validation:Optional
	UnknownUnicastFloodingEnabled *bool `json:"unknownUnicastFloodingEnabled,omitempty" tf:"unknown_unicast_flooding_enabled,omitempty"`
}

type PolicyMacDiscoveryProfileSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     PolicyMacDiscoveryProfileParameters `json:"forProvider"`
}

type PolicyMacDiscoveryProfileStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        PolicyMacDiscoveryProfileObservation `json:"atProvider,omitempty"`
}

type PolicyMacDiscoveryProfileTagObservation struct {
	Scope *string `json:"scope,omitempty" tf:"scope,omitempty"`

	Tag *string `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicyMacDiscoveryProfileTagParameters struct {

	// +kubebuilder:validation:Optional
	Scope *string `json:"scope,omitempty" tf:"scope,omitempty"`

	// +kubebuilder:validation:Optional
	Tag *string `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicyQosProfile struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.displayName)",message="displayName is a required parameter"
	Spec   PolicyQosProfileSpec   `json:"spec"`
	Status PolicyQosProfileStatus `json:"status,omitempty"`
}

type PolicyQosProfileContextObservation struct {

	// Id of the project which the resource belongs to.
	ProjectID *string `json:"projectId,omitempty" tf:"project_id,omitempty"`
}

type PolicyQosProfileContextParameters struct {

	// Id of the project which the resource belongs to.
	// +kubebuilder:validation:Required
	ProjectID *string `json:"projectId" tf:"project_id,omitempty"`
}

type PolicyQosProfileList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PolicyQosProfile `json:"items"`
}

type PolicyQosProfileObservation struct {

	// Class of service
	ClassOfService *float64 `json:"classOfService,omitempty" tf:"class_of_service,omitempty"`

	// Resource context
	Context []PolicyQosProfileContextObservation `json:"context,omitempty" tf:"context,omitempty"`

	// Description for this resource
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// Display name for this resource
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// DSCP Priority
	DscpPriority *float64 `json:"dscpPriority,omitempty" tf:"dscp_priority,omitempty"`

	// Trust mode for DSCP
	DscpTrusted *bool `json:"dscpTrusted,omitempty" tf:"dscp_trusted,omitempty"`

	EgressRateShaper []EgressRateShaperObservation `json:"egressRateShaper,omitempty" tf:"egress_rate_shaper,omitempty"`

	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	IngressBroadcastRateShaper []IngressBroadcastRateShaperObservation `json:"ingressBroadcastRateShaper,omitempty" tf:"ingress_broadcast_rate_shaper,omitempty"`

	IngressRateShaper []IngressRateShaperObservation `json:"ingressRateShaper,omitempty" tf:"ingress_rate_shaper,omitempty"`

	// NSX ID for this resource
	NsxID *string `json:"nsxId,omitempty" tf:"nsx_id,omitempty"`

	// Policy path for this resource
	Path *string `json:"path,omitempty" tf:"path,omitempty"`

	// The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected
	Revision *float64 `json:"revision,omitempty" tf:"revision,omitempty"`

	// Set of opaque identifiers meaningful to the user
	Tag []PolicyQosProfileTagObservation `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicyQosProfileParameters struct {

	// Class of service
	// +kubebuilder:validation:Optional
	ClassOfService *float64 `json:"classOfService,omitempty" tf:"class_of_service,omitempty"`

	// Resource context
	// +kubebuilder:validation:Optional
	Context []PolicyQosProfileContextParameters `json:"context,omitempty" tf:"context,omitempty"`

	// Description for this resource
	// +kubebuilder:validation:Optional
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// Display name for this resource
	// +kubebuilder:validation:Optional
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// DSCP Priority
	// +kubebuilder:validation:Optional
	DscpPriority *float64 `json:"dscpPriority,omitempty" tf:"dscp_priority,omitempty"`

	// Trust mode for DSCP
	// +kubebuilder:validation:Optional
	DscpTrusted *bool `json:"dscpTrusted,omitempty" tf:"dscp_trusted,omitempty"`

	// +kubebuilder:validation:Optional
	EgressRateShaper []EgressRateShaperParameters `json:"egressRateShaper,omitempty" tf:"egress_rate_shaper,omitempty"`

	// +kubebuilder:validation:Optional
	IngressBroadcastRateShaper []IngressBroadcastRateShaperParameters `json:"ingressBroadcastRateShaper,omitempty" tf:"ingress_broadcast_rate_shaper,omitempty"`

	// +kubebuilder:validation:Optional
	IngressRateShaper []IngressRateShaperParameters `json:"ingressRateShaper,omitempty" tf:"ingress_rate_shaper,omitempty"`

	// NSX ID for this resource
	// +kubebuilder:validation:Optional
	NsxID *string `json:"nsxId,omitempty" tf:"nsx_id,omitempty"`

	// Set of opaque identifiers meaningful to the user
	// +kubebuilder:validation:Optional
	Tag []PolicyQosProfileTagParameters `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicyQosProfileSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     PolicyQosProfileParameters `json:"forProvider"`
}

type PolicyQosProfileStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        PolicyQosProfileObservation `json:"atProvider,omitempty"`
}

type PolicyQosProfileTagObservation struct {
	Scope *string `json:"scope,omitempty" tf:"scope,omitempty"`

	Tag *string `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicyQosProfileTagParameters struct {

	// +kubebuilder:validation:Optional
	Scope *string `json:"scope,omitempty" tf:"scope,omitempty"`

	// +kubebuilder:validation:Optional
	Tag *string `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicySegment struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.displayName)",message="displayName is a required parameter"
	Spec   PolicySegmentSpec   `json:"spec"`
	Status PolicySegmentStatus `json:"status,omitempty"`
}

type PolicySegmentAdvancedConfigObservation struct {

	// Policy path to IP address pool
	AddressPoolPath *string `json:"addressPoolPath,omitempty" tf:"address_pool_path,omitempty"`

	// Connectivity configuration to manually connect (ON) or disconnect (OFF)
	Connectivity *string `json:"connectivity,omitempty" tf:"connectivity,omitempty"`

	// Flag to identify a hybrid logical switch
	Hybrid *bool `json:"hybrid,omitempty" tf:"hybrid,omitempty"`

	// Flag to enable local egress
	LocalEgress *bool `json:"localEgress,omitempty" tf:"local_egress,omitempty"`

	// The name of the switching uplink teaming policy for the bridge endpoint
	UplinkTeamingPolicy *string `json:"uplinkTeamingPolicy,omitempty" tf:"uplink_teaming_policy,omitempty"`

	// This URPF mode is applied to the downlink logical router port created while attaching this segment to gateway
	UrpfMode *string `json:"urpfMode,omitempty" tf:"urpf_mode,omitempty"`
}

type PolicySegmentAdvancedConfigParameters struct {

	// Policy path to IP address pool
	// +kubebuilder:validation:Optional
	AddressPoolPath *string `json:"addressPoolPath,omitempty" tf:"address_pool_path,omitempty"`

	// Connectivity configuration to manually connect (ON) or disconnect (OFF)
	// +kubebuilder:validation:Optional
	Connectivity *string `json:"connectivity,omitempty" tf:"connectivity,omitempty"`

	// Flag to identify a hybrid logical switch
	// +kubebuilder:validation:Optional
	Hybrid *bool `json:"hybrid,omitempty" tf:"hybrid,omitempty"`

	// Flag to enable local egress
	// +kubebuilder:validation:Optional
	LocalEgress *bool `json:"localEgress,omitempty" tf:"local_egress,omitempty"`

	// The name of the switching uplink teaming policy for the bridge endpoint
	// +kubebuilder:validation:Optional
	UplinkTeamingPolicy *string `json:"uplinkTeamingPolicy,omitempty" tf:"uplink_teaming_policy,omitempty"`

	// This URPF mode is applied to the downlink logical router port created while attaching this segment to gateway
	// +kubebuilder:validation:Optional
	UrpfMode *string `json:"urpfMode,omitempty" tf:"urpf_mode,omitempty"`
}

type PolicySegmentBridgeConfigObservation struct {

	// profile path
	ProfilePath *string `json:"profilePath,omitempty" tf:"profile_path,omitempty"`

	// vlan transport zone path
	TransportZonePath *string `json:"transportZonePath,omitempty" tf:"transport_zone_path,omitempty"`

	UplinkTeamingPolicy *string `json:"uplinkTeamingPolicy,omitempty" tf:"uplink_teaming_policy,omitempty"`

	// VLAN specification for bridge endpoint
	VlanIds []*string `json:"vlanIds,omitempty" tf:"vlan_ids,omitempty"`
}

type PolicySegmentBridgeConfigParameters struct {

	// profile path
	// +kubebuilder:validation:Required
	ProfilePath *string `json:"profilePath" tf:"profile_path,omitempty"`

	// vlan transport zone path
	// +kubebuilder:validation:Required
	TransportZonePath *string `json:"transportZonePath" tf:"transport_zone_path,omitempty"`

	// +kubebuilder:validation:Optional
	UplinkTeamingPolicy *string `json:"uplinkTeamingPolicy,omitempty" tf:"uplink_teaming_policy,omitempty"`

	// VLAN specification for bridge endpoint
	// +kubebuilder:validation:Required
	VlanIds []*string `json:"vlanIds" tf:"vlan_ids,omitempty"`
}

type PolicySegmentContextObservation struct {

	// Id of the project which the resource belongs to.
	ProjectID *string `json:"projectId,omitempty" tf:"project_id,omitempty"`
}

type PolicySegmentContextParameters struct {

	// Id of the project which the resource belongs to.
	// +kubebuilder:validation:Required
	ProjectID *string `json:"projectId" tf:"project_id,omitempty"`
}

type PolicySegmentL2ExtensionObservation struct {

	// Policy paths of associated L2 VPN sessions
	L2VpnPaths []*string `json:"l2vpnPaths,omitempty" tf:"l2vpn_paths,omitempty"`

	// Tunnel ID
	TunnelID *float64 `json:"tunnelId,omitempty" tf:"tunnel_id,omitempty"`
}

type PolicySegmentL2ExtensionParameters struct {

	// Policy paths of associated L2 VPN sessions
	// +kubebuilder:validation:Optional
	L2VpnPaths []*string `json:"l2vpnPaths,omitempty" tf:"l2vpn_paths,omitempty"`

	// Tunnel ID
	// +kubebuilder:validation:Optional
	TunnelID *float64 `json:"tunnelId,omitempty" tf:"tunnel_id,omitempty"`
}

type PolicySegmentList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PolicySegment `json:"items"`
}

type PolicySegmentObservation struct {

	// Advanced segment configuration
	AdvancedConfig []PolicySegmentAdvancedConfigObservation `json:"advancedConfig,omitempty" tf:"advanced_config,omitempty"`

	// Bridge configuration
	BridgeConfig []PolicySegmentBridgeConfigObservation `json:"bridgeConfig,omitempty" tf:"bridge_config,omitempty"`

	// Policy path to the connecting Tier-0 or Tier-1
	ConnectivityPath *string `json:"connectivityPath,omitempty" tf:"connectivity_path,omitempty"`

	// Resource context
	Context []PolicySegmentContextObservation `json:"context,omitempty" tf:"context,omitempty"`

	// Policy path to DHCP server or relay configuration to use for subnets configured on this segment
	DHCPConfigPath *string `json:"dhcpConfigPath,omitempty" tf:"dhcp_config_path,omitempty"`

	// Description for this resource
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// IP and MAC discovery profiles for this segment
	DiscoveryProfile []DiscoveryProfileObservation `json:"discoveryProfile,omitempty" tf:"discovery_profile,omitempty"`

	// Display name for this resource
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// DNS domain names
	DomainName *string `json:"domainName,omitempty" tf:"domain_name,omitempty"`

	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// Configuration for extending Segment through L2 VPN
	L2Extension []PolicySegmentL2ExtensionObservation `json:"l2Extension,omitempty" tf:"l2_extension,omitempty"`

	// NSX ID for this resource
	NsxID *string `json:"nsxId,omitempty" tf:"nsx_id,omitempty"`

	// Overlay connectivity ID for this Segment
	OverlayID *float64 `json:"overlayId,omitempty" tf:"overlay_id,omitempty"`

	// Policy path for this resource
	Path *string `json:"path,omitempty" tf:"path,omitempty"`

	// QoS profiles for this segment
	QosProfile []QosProfileObservation `json:"qosProfile,omitempty" tf:"qos_profile,omitempty"`

	// Replication mode - MTEP or SOURCE
	ReplicationMode *string `json:"replicationMode,omitempty" tf:"replication_mode,omitempty"`

	// The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected
	Revision *float64 `json:"revision,omitempty" tf:"revision,omitempty"`

	// Security profiles for this segment
	SecurityProfile []SecurityProfileObservation `json:"securityProfile,omitempty" tf:"security_profile,omitempty"`

	// Subnet configuration with at most 1 IPv4 CIDR and multiple IPv6 CIDRs
	Subnet []PolicySegmentSubnetObservation `json:"subnet,omitempty" tf:"subnet,omitempty"`

	// Set of opaque identifiers meaningful to the user
	Tag []PolicySegmentTagObservation `json:"tag,omitempty" tf:"tag,omitempty"`

	// Policy path to the transport zone
	TransportZonePath *string `json:"transportZonePath,omitempty" tf:"transport_zone_path,omitempty"`

	// VLAN IDs for VLAN backed Segment
	VlanIds []*string `json:"vlanIds,omitempty" tf:"vlan_ids,omitempty"`
}

type PolicySegmentParameters struct {

	// Advanced segment configuration
	// +kubebuilder:validation:Optional
	AdvancedConfig []PolicySegmentAdvancedConfigParameters `json:"advancedConfig,omitempty" tf:"advanced_config,omitempty"`

	// Bridge configuration
	// +kubebuilder:validation:Optional
	BridgeConfig []PolicySegmentBridgeConfigParameters `json:"bridgeConfig,omitempty" tf:"bridge_config,omitempty"`

	// Policy path to the connecting Tier-0 or Tier-1
	// +kubebuilder:validation:Optional
	ConnectivityPath *string `json:"connectivityPath,omitempty" tf:"connectivity_path,omitempty"`

	// Resource context
	// +kubebuilder:validation:Optional
	Context []PolicySegmentContextParameters `json:"context,omitempty" tf:"context,omitempty"`

	// Policy path to DHCP server or relay configuration to use for subnets configured on this segment
	// +kubebuilder:validation:Optional
	DHCPConfigPath *string `json:"dhcpConfigPath,omitempty" tf:"dhcp_config_path,omitempty"`

	// Description for this resource
	// +kubebuilder:validation:Optional
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// IP and MAC discovery profiles for this segment
	// +kubebuilder:validation:Optional
	DiscoveryProfile []DiscoveryProfileParameters `json:"discoveryProfile,omitempty" tf:"discovery_profile,omitempty"`

	// Display name for this resource
	// +kubebuilder:validation:Optional
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// DNS domain names
	// +kubebuilder:validation:Optional
	DomainName *string `json:"domainName,omitempty" tf:"domain_name,omitempty"`

	// Configuration for extending Segment through L2 VPN
	// +kubebuilder:validation:Optional
	L2Extension []PolicySegmentL2ExtensionParameters `json:"l2Extension,omitempty" tf:"l2_extension,omitempty"`

	// NSX ID for this resource
	// +kubebuilder:validation:Optional
	NsxID *string `json:"nsxId,omitempty" tf:"nsx_id,omitempty"`

	// Overlay connectivity ID for this Segment
	// +kubebuilder:validation:Optional
	OverlayID *float64 `json:"overlayId,omitempty" tf:"overlay_id,omitempty"`

	// QoS profiles for this segment
	// +kubebuilder:validation:Optional
	QosProfile []QosProfileParameters `json:"qosProfile,omitempty" tf:"qos_profile,omitempty"`

	// Replication mode - MTEP or SOURCE
	// +kubebuilder:validation:Optional
	ReplicationMode *string `json:"replicationMode,omitempty" tf:"replication_mode,omitempty"`

	// Security profiles for this segment
	// +kubebuilder:validation:Optional
	SecurityProfile []SecurityProfileParameters `json:"securityProfile,omitempty" tf:"security_profile,omitempty"`

	// Subnet configuration with at most 1 IPv4 CIDR and multiple IPv6 CIDRs
	// +kubebuilder:validation:Optional
	Subnet []PolicySegmentSubnetParameters `json:"subnet,omitempty" tf:"subnet,omitempty"`

	// Set of opaque identifiers meaningful to the user
	// +kubebuilder:validation:Optional
	Tag []PolicySegmentTagParameters `json:"tag,omitempty" tf:"tag,omitempty"`

	// Policy path to the transport zone
	// +kubebuilder:validation:Optional
	TransportZonePath *string `json:"transportZonePath,omitempty" tf:"transport_zone_path,omitempty"`

	// VLAN IDs for VLAN backed Segment
	// +kubebuilder:validation:Optional
	VlanIds []*string `json:"vlanIds,omitempty" tf:"vlan_ids,omitempty"`
}

type PolicySegmentSecurityProfile struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.displayName)",message="displayName is a required parameter"
	Spec   PolicySegmentSecurityProfileSpec   `json:"spec"`
	Status PolicySegmentSecurityProfileStatus `json:"status,omitempty"`
}

type PolicySegmentSecurityProfileContextObservation struct {

	// Id of the project which the resource belongs to.
	ProjectID *string `json:"projectId,omitempty" tf:"project_id,omitempty"`
}

type PolicySegmentSecurityProfileContextParameters struct {

	// Id of the project which the resource belongs to.
	// +kubebuilder:validation:Required
	ProjectID *string `json:"projectId" tf:"project_id,omitempty"`
}

type PolicySegmentSecurityProfileList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PolicySegmentSecurityProfile `json:"items"`
}

type PolicySegmentSecurityProfileObservation struct {
	BpduFilterAllow []*string `json:"bpduFilterAllow,omitempty" tf:"bpdu_filter_allow,omitempty"`

	BpduFilterEnable *bool `json:"bpduFilterEnable,omitempty" tf:"bpdu_filter_enable,omitempty"`

	// Resource context
	Context []PolicySegmentSecurityProfileContextObservation `json:"context,omitempty" tf:"context,omitempty"`

	DHCPClientBlockEnabled *bool `json:"dhcpClientBlockEnabled,omitempty" tf:"dhcp_client_block_enabled,omitempty"`

	DHCPClientBlockV6Enabled *bool `json:"dhcpClientBlockV6Enabled,omitempty" tf:"dhcp_client_block_v6_enabled,omitempty"`

	DHCPServerBlockEnabled *bool `json:"dhcpServerBlockEnabled,omitempty" tf:"dhcp_server_block_enabled,omitempty"`

	DHCPServerBlockV6Enabled *bool `json:"dhcpServerBlockV6Enabled,omitempty" tf:"dhcp_server_block_v6_enabled,omitempty"`

	// Description for this resource
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// Display name for this resource
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	NonIPTrafficBlockEnabled *bool `json:"nonIpTrafficBlockEnabled,omitempty" tf:"non_ip_traffic_block_enabled,omitempty"`

	// NSX ID for this resource
	NsxID *string `json:"nsxId,omitempty" tf:"nsx_id,omitempty"`

	// Policy path for this resource
	Path *string `json:"path,omitempty" tf:"path,omitempty"`

	RaGuardEnabled *bool `json:"raGuardEnabled,omitempty" tf:"ra_guard_enabled,omitempty"`

	RateLimit []RateLimitObservation `json:"rateLimit,omitempty" tf:"rate_limit,omitempty"`

	RateLimitsEnabled *bool `json:"rateLimitsEnabled,omitempty" tf:"rate_limits_enabled,omitempty"`

	// The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected
	Revision *float64 `json:"revision,omitempty" tf:"revision,omitempty"`

	// Set of opaque identifiers meaningful to the user
	Tag []PolicySegmentSecurityProfileTagObservation `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicySegmentSecurityProfileParameters struct {

	// +kubebuilder:validation:Optional
	BpduFilterAllow []*string `json:"bpduFilterAllow,omitempty" tf:"bpdu_filter_allow,omitempty"`

	// +kubebuilder:validation:Optional
	BpduFilterEnable *bool `json:"bpduFilterEnable,omitempty" tf:"bpdu_filter_enable,omitempty"`

	// Resource context
	// +kubebuilder:validation:Optional
	Context []PolicySegmentSecurityProfileContextParameters `json:"context,omitempty" tf:"context,omitempty"`

	// +kubebuilder:validation:Optional
	DHCPClientBlockEnabled *bool `json:"dhcpClientBlockEnabled,omitempty" tf:"dhcp_client_block_enabled,omitempty"`

	// +kubebuilder:validation:Optional
	DHCPClientBlockV6Enabled *bool `json:"dhcpClientBlockV6Enabled,omitempty" tf:"dhcp_client_block_v6_enabled,omitempty"`

	// +kubebuilder:validation:Optional
	DHCPServerBlockEnabled *bool `json:"dhcpServerBlockEnabled,omitempty" tf:"dhcp_server_block_enabled,omitempty"`

	// +kubebuilder:validation:Optional
	DHCPServerBlockV6Enabled *bool `json:"dhcpServerBlockV6Enabled,omitempty" tf:"dhcp_server_block_v6_enabled,omitempty"`

	// Description for this resource
	// +kubebuilder:validation:Optional
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// Display name for this resource
	// +kubebuilder:validation:Optional
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// +kubebuilder:validation:Optional
	NonIPTrafficBlockEnabled *bool `json:"nonIpTrafficBlockEnabled,omitempty" tf:"non_ip_traffic_block_enabled,omitempty"`

	// NSX ID for this resource
	// +kubebuilder:validation:Optional
	NsxID *string `json:"nsxId,omitempty" tf:"nsx_id,omitempty"`

	// +kubebuilder:validation:Optional
	RaGuardEnabled *bool `json:"raGuardEnabled,omitempty" tf:"ra_guard_enabled,omitempty"`

	// +kubebuilder:validation:Optional
	RateLimit []RateLimitParameters `json:"rateLimit,omitempty" tf:"rate_limit,omitempty"`

	// +kubebuilder:validation:Optional
	RateLimitsEnabled *bool `json:"rateLimitsEnabled,omitempty" tf:"rate_limits_enabled,omitempty"`

	// Set of opaque identifiers meaningful to the user
	// +kubebuilder:validation:Optional
	Tag []PolicySegmentSecurityProfileTagParameters `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicySegmentSecurityProfileSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     PolicySegmentSecurityProfileParameters `json:"forProvider"`
}

type PolicySegmentSecurityProfileStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        PolicySegmentSecurityProfileObservation `json:"atProvider,omitempty"`
}

type PolicySegmentSecurityProfileTagObservation struct {
	Scope *string `json:"scope,omitempty" tf:"scope,omitempty"`

	Tag *string `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicySegmentSecurityProfileTagParameters struct {

	// +kubebuilder:validation:Optional
	Scope *string `json:"scope,omitempty" tf:"scope,omitempty"`

	// +kubebuilder:validation:Optional
	Tag *string `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicySegmentSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     PolicySegmentParameters `json:"forProvider"`
}

type PolicySegmentStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        PolicySegmentObservation `json:"atProvider,omitempty"`
}

type PolicySegmentSubnetObservation struct {

	// Gateway IP address in CIDR format
	Cidr *string `json:"cidr,omitempty" tf:"cidr,omitempty"`

	// DHCP address ranges for dynamic IP allocation
	DHCPRanges []*string `json:"dhcpRanges,omitempty" tf:"dhcp_ranges,omitempty"`

	DHCPV4Config []SubnetDHCPV4ConfigObservation `json:"dhcpV4Config,omitempty" tf:"dhcp_v4_config,omitempty"`

	DHCPV6Config []SubnetDHCPV6ConfigObservation `json:"dhcpV6Config,omitempty" tf:"dhcp_v6_config,omitempty"`

	// Network CIDR for subnet
	Network *string `json:"network,omitempty" tf:"network,omitempty"`
}

type PolicySegmentSubnetParameters struct {

	// Gateway IP address in CIDR format
	// +kubebuilder:validation:Optional
	Cidr *string `json:"cidr,omitempty" tf:"cidr,omitempty"`

	// DHCP address ranges for dynamic IP allocation
	// +kubebuilder:validation:Optional
	DHCPRanges []*string `json:"dhcpRanges,omitempty" tf:"dhcp_ranges,omitempty"`

	// +kubebuilder:validation:Optional
	DHCPV4Config []SubnetDHCPV4ConfigParameters `json:"dhcpV4Config,omitempty" tf:"dhcp_v4_config,omitempty"`

	// +kubebuilder:validation:Optional
	DHCPV6Config []SubnetDHCPV6ConfigParameters `json:"dhcpV6Config,omitempty" tf:"dhcp_v6_config,omitempty"`
}

type PolicySegmentTagObservation struct {
	Scope *string `json:"scope,omitempty" tf:"scope,omitempty"`

	Tag *string `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicySegmentTagParameters struct {

	// +kubebuilder:validation:Optional
	Scope *string `json:"scope,omitempty" tf:"scope,omitempty"`

	// +kubebuilder:validation:Optional
	Tag *string `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicySpoofGuardProfile struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.displayName)",message="displayName is a required parameter"
	Spec   PolicySpoofGuardProfileSpec   `json:"spec"`
	Status PolicySpoofGuardProfileStatus `json:"status,omitempty"`
}

type PolicySpoofGuardProfileContextObservation struct {

	// Id of the project which the resource belongs to.
	ProjectID *string `json:"projectId,omitempty" tf:"project_id,omitempty"`
}

type PolicySpoofGuardProfileContextParameters struct {

	// Id of the project which the resource belongs to.
	// +kubebuilder:validation:Required
	ProjectID *string `json:"projectId" tf:"project_id,omitempty"`
}

type PolicySpoofGuardProfileList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PolicySpoofGuardProfile `json:"items"`
}

type PolicySpoofGuardProfileObservation struct {
	AddressBindingAllowlist *bool `json:"addressBindingAllowlist,omitempty" tf:"address_binding_allowlist,omitempty"`

	// Resource context
	Context []PolicySpoofGuardProfileContextObservation `json:"context,omitempty" tf:"context,omitempty"`

	// Description for this resource
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// Display name for this resource
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// NSX ID for this resource
	NsxID *string `json:"nsxId,omitempty" tf:"nsx_id,omitempty"`

	// Policy path for this resource
	Path *string `json:"path,omitempty" tf:"path,omitempty"`

	// The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected
	Revision *float64 `json:"revision,omitempty" tf:"revision,omitempty"`

	// Set of opaque identifiers meaningful to the user
	Tag []PolicySpoofGuardProfileTagObservation `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicySpoofGuardProfileParameters struct {

	// +kubebuilder:validation:Optional
	AddressBindingAllowlist *bool `json:"addressBindingAllowlist,omitempty" tf:"address_binding_allowlist,omitempty"`

	// Resource context
	// +kubebuilder:validation:Optional
	Context []PolicySpoofGuardProfileContextParameters `json:"context,omitempty" tf:"context,omitempty"`

	// Description for this resource
	// +kubebuilder:validation:Optional
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// Display name for this resource
	// +kubebuilder:validation:Optional
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// NSX ID for this resource
	// +kubebuilder:validation:Optional
	NsxID *string `json:"nsxId,omitempty" tf:"nsx_id,omitempty"`

	// Set of opaque identifiers meaningful to the user
	// +kubebuilder:validation:Optional
	Tag []PolicySpoofGuardProfileTagParameters `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicySpoofGuardProfileSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     PolicySpoofGuardProfileParameters `json:"forProvider"`
}

type PolicySpoofGuardProfileStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        PolicySpoofGuardProfileObservation `json:"atProvider,omitempty"`
}

type PolicySpoofGuardProfileTagObservation struct {
	Scope *string `json:"scope,omitempty" tf:"scope,omitempty"`

	Tag *string `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicySpoofGuardProfileTagParameters struct {

	// +kubebuilder:validation:Optional
	Scope *string `json:"scope,omitempty" tf:"scope,omitempty"`

	// +kubebuilder:validation:Optional
	Tag *string `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicyVlanSegment struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.displayName)",message="displayName is a required parameter"
	// +kubebuilder:validation:XValidation:rule="self.managementPolicy == 'ObserveOnly' || has(self.forProvider.vlanIds)",message="vlanIds is a required parameter"
	Spec   PolicyVlanSegmentSpec   `json:"spec"`
	Status PolicyVlanSegmentStatus `json:"status,omitempty"`
}

type PolicyVlanSegmentAdvancedConfigObservation struct {

	// Policy path to IP address pool
	AddressPoolPath *string `json:"addressPoolPath,omitempty" tf:"address_pool_path,omitempty"`

	// Connectivity configuration to manually connect (ON) or disconnect (OFF)
	Connectivity *string `json:"connectivity,omitempty" tf:"connectivity,omitempty"`

	// Flag to identify a hybrid logical switch
	Hybrid *bool `json:"hybrid,omitempty" tf:"hybrid,omitempty"`

	// Flag to enable local egress
	LocalEgress *bool `json:"localEgress,omitempty" tf:"local_egress,omitempty"`

	// The name of the switching uplink teaming policy for the bridge endpoint
	UplinkTeamingPolicy *string `json:"uplinkTeamingPolicy,omitempty" tf:"uplink_teaming_policy,omitempty"`

	// This URPF mode is applied to the downlink logical router port created while attaching this segment to gateway
	UrpfMode *string `json:"urpfMode,omitempty" tf:"urpf_mode,omitempty"`
}

type PolicyVlanSegmentAdvancedConfigParameters struct {

	// Policy path to IP address pool
	// +kubebuilder:validation:Optional
	AddressPoolPath *string `json:"addressPoolPath,omitempty" tf:"address_pool_path,omitempty"`

	// Connectivity configuration to manually connect (ON) or disconnect (OFF)
	// +kubebuilder:validation:Optional
	Connectivity *string `json:"connectivity,omitempty" tf:"connectivity,omitempty"`

	// Flag to identify a hybrid logical switch
	// +kubebuilder:validation:Optional
	Hybrid *bool `json:"hybrid,omitempty" tf:"hybrid,omitempty"`

	// Flag to enable local egress
	// +kubebuilder:validation:Optional
	LocalEgress *bool `json:"localEgress,omitempty" tf:"local_egress,omitempty"`

	// The name of the switching uplink teaming policy for the bridge endpoint
	// +kubebuilder:validation:Optional
	UplinkTeamingPolicy *string `json:"uplinkTeamingPolicy,omitempty" tf:"uplink_teaming_policy,omitempty"`

	// This URPF mode is applied to the downlink logical router port created while attaching this segment to gateway
	// +kubebuilder:validation:Optional
	UrpfMode *string `json:"urpfMode,omitempty" tf:"urpf_mode,omitempty"`
}

type PolicyVlanSegmentBridgeConfigObservation struct {

	// profile path
	ProfilePath *string `json:"profilePath,omitempty" tf:"profile_path,omitempty"`

	// vlan transport zone path
	TransportZonePath *string `json:"transportZonePath,omitempty" tf:"transport_zone_path,omitempty"`

	UplinkTeamingPolicy *string `json:"uplinkTeamingPolicy,omitempty" tf:"uplink_teaming_policy,omitempty"`

	// VLAN specification for bridge endpoint
	VlanIds []*string `json:"vlanIds,omitempty" tf:"vlan_ids,omitempty"`
}

type PolicyVlanSegmentBridgeConfigParameters struct {

	// profile path
	// +kubebuilder:validation:Required
	ProfilePath *string `json:"profilePath" tf:"profile_path,omitempty"`

	// vlan transport zone path
	// +kubebuilder:validation:Required
	TransportZonePath *string `json:"transportZonePath" tf:"transport_zone_path,omitempty"`

	// +kubebuilder:validation:Optional
	UplinkTeamingPolicy *string `json:"uplinkTeamingPolicy,omitempty" tf:"uplink_teaming_policy,omitempty"`

	// VLAN specification for bridge endpoint
	// +kubebuilder:validation:Required
	VlanIds []*string `json:"vlanIds" tf:"vlan_ids,omitempty"`
}

type PolicyVlanSegmentContextObservation struct {

	// Id of the project which the resource belongs to.
	ProjectID *string `json:"projectId,omitempty" tf:"project_id,omitempty"`
}

type PolicyVlanSegmentContextParameters struct {

	// Id of the project which the resource belongs to.
	// +kubebuilder:validation:Required
	ProjectID *string `json:"projectId" tf:"project_id,omitempty"`
}

type PolicyVlanSegmentDiscoveryProfileObservation struct {

	// Policy path of profile binding map
	BindingMapPath *string `json:"bindingMapPath,omitempty" tf:"binding_map_path,omitempty"`

	// Policy path of associated IP Discovery Profile
	IPDiscoveryProfilePath *string `json:"ipDiscoveryProfilePath,omitempty" tf:"ip_discovery_profile_path,omitempty"`

	// Policy path of associated Mac Discovery Profile
	MacDiscoveryProfilePath *string `json:"macDiscoveryProfilePath,omitempty" tf:"mac_discovery_profile_path,omitempty"`

	// The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected
	Revision *float64 `json:"revision,omitempty" tf:"revision,omitempty"`
}

type PolicyVlanSegmentDiscoveryProfileParameters struct {

	// Policy path of profile binding map
	// +kubebuilder:validation:Optional
	BindingMapPath *string `json:"bindingMapPath,omitempty" tf:"binding_map_path,omitempty"`

	// Policy path of associated IP Discovery Profile
	// +kubebuilder:validation:Optional
	IPDiscoveryProfilePath *string `json:"ipDiscoveryProfilePath,omitempty" tf:"ip_discovery_profile_path,omitempty"`

	// Policy path of associated Mac Discovery Profile
	// +kubebuilder:validation:Optional
	MacDiscoveryProfilePath *string `json:"macDiscoveryProfilePath,omitempty" tf:"mac_discovery_profile_path,omitempty"`
}

type PolicyVlanSegmentL2ExtensionObservation struct {

	// Policy paths of associated L2 VPN sessions
	L2VpnPaths []*string `json:"l2vpnPaths,omitempty" tf:"l2vpn_paths,omitempty"`

	// Tunnel ID
	TunnelID *float64 `json:"tunnelId,omitempty" tf:"tunnel_id,omitempty"`
}

type PolicyVlanSegmentL2ExtensionParameters struct {

	// Policy paths of associated L2 VPN sessions
	// +kubebuilder:validation:Optional
	L2VpnPaths []*string `json:"l2vpnPaths,omitempty" tf:"l2vpn_paths,omitempty"`

	// Tunnel ID
	// +kubebuilder:validation:Optional
	TunnelID *float64 `json:"tunnelId,omitempty" tf:"tunnel_id,omitempty"`
}

type PolicyVlanSegmentList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []PolicyVlanSegment `json:"items"`
}

type PolicyVlanSegmentObservation struct {

	// Advanced segment configuration
	AdvancedConfig []PolicyVlanSegmentAdvancedConfigObservation `json:"advancedConfig,omitempty" tf:"advanced_config,omitempty"`

	// Bridge configuration
	BridgeConfig []PolicyVlanSegmentBridgeConfigObservation `json:"bridgeConfig,omitempty" tf:"bridge_config,omitempty"`

	// Resource context
	Context []PolicyVlanSegmentContextObservation `json:"context,omitempty" tf:"context,omitempty"`

	// Policy path to DHCP server or relay configuration to use for subnets configured on this segment
	DHCPConfigPath *string `json:"dhcpConfigPath,omitempty" tf:"dhcp_config_path,omitempty"`

	// Description for this resource
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// IP and MAC discovery profiles for this segment
	DiscoveryProfile []PolicyVlanSegmentDiscoveryProfileObservation `json:"discoveryProfile,omitempty" tf:"discovery_profile,omitempty"`

	// Display name for this resource
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// DNS domain names
	DomainName *string `json:"domainName,omitempty" tf:"domain_name,omitempty"`

	ID *string `json:"id,omitempty" tf:"id,omitempty"`

	// Configuration for extending Segment through L2 VPN
	L2Extension []PolicyVlanSegmentL2ExtensionObservation `json:"l2Extension,omitempty" tf:"l2_extension,omitempty"`

	// NSX ID for this resource
	NsxID *string `json:"nsxId,omitempty" tf:"nsx_id,omitempty"`

	// Policy path for this resource
	Path *string `json:"path,omitempty" tf:"path,omitempty"`

	// QoS profiles for this segment
	QosProfile []PolicyVlanSegmentQosProfileObservation `json:"qosProfile,omitempty" tf:"qos_profile,omitempty"`

	// Replication mode - MTEP or SOURCE
	ReplicationMode *string `json:"replicationMode,omitempty" tf:"replication_mode,omitempty"`

	// The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected
	Revision *float64 `json:"revision,omitempty" tf:"revision,omitempty"`

	// Security profiles for this segment
	SecurityProfile []PolicyVlanSegmentSecurityProfileObservation `json:"securityProfile,omitempty" tf:"security_profile,omitempty"`

	// Subnet configuration with at most 1 IPv4 CIDR and multiple IPv6 CIDRs
	Subnet []PolicyVlanSegmentSubnetObservation `json:"subnet,omitempty" tf:"subnet,omitempty"`

	// Set of opaque identifiers meaningful to the user
	Tag []PolicyVlanSegmentTagObservation `json:"tag,omitempty" tf:"tag,omitempty"`

	// Policy path to the transport zone
	TransportZonePath *string `json:"transportZonePath,omitempty" tf:"transport_zone_path,omitempty"`

	// VLAN IDs for VLAN backed Segment
	VlanIds []*string `json:"vlanIds,omitempty" tf:"vlan_ids,omitempty"`
}

type PolicyVlanSegmentParameters struct {

	// Advanced segment configuration
	// +kubebuilder:validation:Optional
	AdvancedConfig []PolicyVlanSegmentAdvancedConfigParameters `json:"advancedConfig,omitempty" tf:"advanced_config,omitempty"`

	// Bridge configuration
	// +kubebuilder:validation:Optional
	BridgeConfig []PolicyVlanSegmentBridgeConfigParameters `json:"bridgeConfig,omitempty" tf:"bridge_config,omitempty"`

	// Resource context
	// +kubebuilder:validation:Optional
	Context []PolicyVlanSegmentContextParameters `json:"context,omitempty" tf:"context,omitempty"`

	// Policy path to DHCP server or relay configuration to use for subnets configured on this segment
	// +kubebuilder:validation:Optional
	DHCPConfigPath *string `json:"dhcpConfigPath,omitempty" tf:"dhcp_config_path,omitempty"`

	// Description for this resource
	// +kubebuilder:validation:Optional
	Description *string `json:"description,omitempty" tf:"description,omitempty"`

	// IP and MAC discovery profiles for this segment
	// +kubebuilder:validation:Optional
	DiscoveryProfile []PolicyVlanSegmentDiscoveryProfileParameters `json:"discoveryProfile,omitempty" tf:"discovery_profile,omitempty"`

	// Display name for this resource
	// +kubebuilder:validation:Optional
	DisplayName *string `json:"displayName,omitempty" tf:"display_name,omitempty"`

	// DNS domain names
	// +kubebuilder:validation:Optional
	DomainName *string `json:"domainName,omitempty" tf:"domain_name,omitempty"`

	// Configuration for extending Segment through L2 VPN
	// +kubebuilder:validation:Optional
	L2Extension []PolicyVlanSegmentL2ExtensionParameters `json:"l2Extension,omitempty" tf:"l2_extension,omitempty"`

	// NSX ID for this resource
	// +kubebuilder:validation:Optional
	NsxID *string `json:"nsxId,omitempty" tf:"nsx_id,omitempty"`

	// QoS profiles for this segment
	// +kubebuilder:validation:Optional
	QosProfile []PolicyVlanSegmentQosProfileParameters `json:"qosProfile,omitempty" tf:"qos_profile,omitempty"`

	// Replication mode - MTEP or SOURCE
	// +kubebuilder:validation:Optional
	ReplicationMode *string `json:"replicationMode,omitempty" tf:"replication_mode,omitempty"`

	// Security profiles for this segment
	// +kubebuilder:validation:Optional
	SecurityProfile []PolicyVlanSegmentSecurityProfileParameters `json:"securityProfile,omitempty" tf:"security_profile,omitempty"`

	// Subnet configuration with at most 1 IPv4 CIDR and multiple IPv6 CIDRs
	// +kubebuilder:validation:Optional
	Subnet []PolicyVlanSegmentSubnetParameters `json:"subnet,omitempty" tf:"subnet,omitempty"`

	// Set of opaque identifiers meaningful to the user
	// +kubebuilder:validation:Optional
	Tag []PolicyVlanSegmentTagParameters `json:"tag,omitempty" tf:"tag,omitempty"`

	// Policy path to the transport zone
	// +kubebuilder:validation:Optional
	TransportZonePath *string `json:"transportZonePath,omitempty" tf:"transport_zone_path,omitempty"`

	// VLAN IDs for VLAN backed Segment
	// +kubebuilder:validation:Optional
	VlanIds []*string `json:"vlanIds,omitempty" tf:"vlan_ids,omitempty"`
}

type PolicyVlanSegmentQosProfileObservation struct {

	// Policy path of profile binding map
	BindingMapPath *string `json:"bindingMapPath,omitempty" tf:"binding_map_path,omitempty"`

	// Policy path of associated QoS Profile
	QosProfilePath *string `json:"qosProfilePath,omitempty" tf:"qos_profile_path,omitempty"`

	// The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected
	Revision *float64 `json:"revision,omitempty" tf:"revision,omitempty"`
}

type PolicyVlanSegmentQosProfileParameters struct {

	// Policy path of profile binding map
	// +kubebuilder:validation:Optional
	BindingMapPath *string `json:"bindingMapPath,omitempty" tf:"binding_map_path,omitempty"`

	// Policy path of associated QoS Profile
	// +kubebuilder:validation:Required
	QosProfilePath *string `json:"qosProfilePath" tf:"qos_profile_path,omitempty"`
}

type PolicyVlanSegmentSecurityProfileObservation struct {

	// Policy path of profile binding map
	BindingMapPath *string `json:"bindingMapPath,omitempty" tf:"binding_map_path,omitempty"`

	// The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected
	Revision *float64 `json:"revision,omitempty" tf:"revision,omitempty"`

	// Policy path of associated Segment Security Profile
	SecurityProfilePath *string `json:"securityProfilePath,omitempty" tf:"security_profile_path,omitempty"`

	// Policy path of associated Spoofguard Profile
	SpoofguardProfilePath *string `json:"spoofguardProfilePath,omitempty" tf:"spoofguard_profile_path,omitempty"`
}

type PolicyVlanSegmentSecurityProfileParameters struct {

	// Policy path of profile binding map
	// +kubebuilder:validation:Optional
	BindingMapPath *string `json:"bindingMapPath,omitempty" tf:"binding_map_path,omitempty"`

	// Policy path of associated Segment Security Profile
	// +kubebuilder:validation:Optional
	SecurityProfilePath *string `json:"securityProfilePath,omitempty" tf:"security_profile_path,omitempty"`

	// Policy path of associated Spoofguard Profile
	// +kubebuilder:validation:Optional
	SpoofguardProfilePath *string `json:"spoofguardProfilePath,omitempty" tf:"spoofguard_profile_path,omitempty"`
}

type PolicyVlanSegmentSpec struct {
	v1.ResourceSpec `json:",inline"`
	ForProvider     PolicyVlanSegmentParameters `json:"forProvider"`
}

type PolicyVlanSegmentStatus struct {
	v1.ResourceStatus `json:",inline"`
	AtProvider        PolicyVlanSegmentObservation `json:"atProvider,omitempty"`
}

type PolicyVlanSegmentSubnetDHCPV4ConfigObservation struct {

	// Generic DHCP options
	DHCPGenericOption []SubnetDHCPV4ConfigDHCPGenericOptionObservation `json:"dhcpGenericOption,omitempty" tf:"dhcp_generic_option,omitempty"`

	// DHCP classless static routes
	DHCPOption121 []SubnetDHCPV4ConfigDHCPOption121Observation `json:"dhcpOption121,omitempty" tf:"dhcp_option_121,omitempty"`

	// IP addresses of DNS servers for subnet
	DNSServers []*string `json:"dnsServers,omitempty" tf:"dns_servers,omitempty"`

	// DHCP lease time in seconds
	LeaseTime *float64 `json:"leaseTime,omitempty" tf:"lease_time,omitempty"`

	// IP address of the DHCP server in CIDR format
	ServerAddress *string `json:"serverAddress,omitempty" tf:"server_address,omitempty"`
}

type PolicyVlanSegmentSubnetDHCPV4ConfigParameters struct {

	// Generic DHCP options
	// +kubebuilder:validation:Optional
	DHCPGenericOption []SubnetDHCPV4ConfigDHCPGenericOptionParameters `json:"dhcpGenericOption,omitempty" tf:"dhcp_generic_option,omitempty"`

	// DHCP classless static routes
	// +kubebuilder:validation:Optional
	DHCPOption121 []SubnetDHCPV4ConfigDHCPOption121Parameters `json:"dhcpOption121,omitempty" tf:"dhcp_option_121,omitempty"`

	// IP addresses of DNS servers for subnet
	// +kubebuilder:validation:Optional
	DNSServers []*string `json:"dnsServers,omitempty" tf:"dns_servers,omitempty"`

	// DHCP lease time in seconds
	// +kubebuilder:validation:Optional
	LeaseTime *float64 `json:"leaseTime,omitempty" tf:"lease_time,omitempty"`

	// IP address of the DHCP server in CIDR format
	// +kubebuilder:validation:Optional
	ServerAddress *string `json:"serverAddress,omitempty" tf:"server_address,omitempty"`
}

type PolicyVlanSegmentSubnetDHCPV6ConfigObservation struct {

	// IP addresses of DNS servers for subnet
	DNSServers []*string `json:"dnsServers,omitempty" tf:"dns_servers,omitempty"`

	// Domain names
	DomainNames []*string `json:"domainNames,omitempty" tf:"domain_names,omitempty"`

	// Excluded addresses to define dynamic ip allocation ranges
	ExcludedRange []SubnetDHCPV6ConfigExcludedRangeObservation `json:"excludedRange,omitempty" tf:"excluded_range,omitempty"`

	// DHCP lease time in seconds
	LeaseTime *float64 `json:"leaseTime,omitempty" tf:"lease_time,omitempty"`

	// The time interval in seconds, in which the prefix is advertised as preferred
	PreferredTime *float64 `json:"preferredTime,omitempty" tf:"preferred_time,omitempty"`

	// IP address of the DHCP server in CIDR format
	ServerAddress *string `json:"serverAddress,omitempty" tf:"server_address,omitempty"`

	// IPv6 address of SNTP servers for subnet
	SntpServers []*string `json:"sntpServers,omitempty" tf:"sntp_servers,omitempty"`
}

type PolicyVlanSegmentSubnetDHCPV6ConfigParameters struct {

	// IP addresses of DNS servers for subnet
	// +kubebuilder:validation:Optional
	DNSServers []*string `json:"dnsServers,omitempty" tf:"dns_servers,omitempty"`

	// Domain names
	// +kubebuilder:validation:Optional
	DomainNames []*string `json:"domainNames,omitempty" tf:"domain_names,omitempty"`

	// Excluded addresses to define dynamic ip allocation ranges
	// +kubebuilder:validation:Optional
	ExcludedRange []SubnetDHCPV6ConfigExcludedRangeParameters `json:"excludedRange,omitempty" tf:"excluded_range,omitempty"`

	// DHCP lease time in seconds
	// +kubebuilder:validation:Optional
	LeaseTime *float64 `json:"leaseTime,omitempty" tf:"lease_time,omitempty"`

	// The time interval in seconds, in which the prefix is advertised as preferred
	// +kubebuilder:validation:Optional
	PreferredTime *float64 `json:"preferredTime,omitempty" tf:"preferred_time,omitempty"`

	// IP address of the DHCP server in CIDR format
	// +kubebuilder:validation:Optional
	ServerAddress *string `json:"serverAddress,omitempty" tf:"server_address,omitempty"`

	// IPv6 address of SNTP servers for subnet
	// +kubebuilder:validation:Optional
	SntpServers []*string `json:"sntpServers,omitempty" tf:"sntp_servers,omitempty"`
}

type PolicyVlanSegmentSubnetObservation struct {

	// Gateway IP address in CIDR format
	Cidr *string `json:"cidr,omitempty" tf:"cidr,omitempty"`

	// DHCP address ranges for dynamic IP allocation
	DHCPRanges []*string `json:"dhcpRanges,omitempty" tf:"dhcp_ranges,omitempty"`

	DHCPV4Config []PolicyVlanSegmentSubnetDHCPV4ConfigObservation `json:"dhcpV4Config,omitempty" tf:"dhcp_v4_config,omitempty"`

	DHCPV6Config []PolicyVlanSegmentSubnetDHCPV6ConfigObservation `json:"dhcpV6Config,omitempty" tf:"dhcp_v6_config,omitempty"`

	// Network CIDR for subnet
	Network *string `json:"network,omitempty" tf:"network,omitempty"`
}

type PolicyVlanSegmentSubnetParameters struct {

	// Gateway IP address in CIDR format
	// +kubebuilder:validation:Optional
	Cidr *string `json:"cidr,omitempty" tf:"cidr,omitempty"`

	// DHCP address ranges for dynamic IP allocation
	// +kubebuilder:validation:Optional
	DHCPRanges []*string `json:"dhcpRanges,omitempty" tf:"dhcp_ranges,omitempty"`

	// +kubebuilder:validation:Optional
	DHCPV4Config []PolicyVlanSegmentSubnetDHCPV4ConfigParameters `json:"dhcpV4Config,omitempty" tf:"dhcp_v4_config,omitempty"`

	// +kubebuilder:validation:Optional
	DHCPV6Config []PolicyVlanSegmentSubnetDHCPV6ConfigParameters `json:"dhcpV6Config,omitempty" tf:"dhcp_v6_config,omitempty"`
}

type PolicyVlanSegmentTagObservation struct {
	Scope *string `json:"scope,omitempty" tf:"scope,omitempty"`

	Tag *string `json:"tag,omitempty" tf:"tag,omitempty"`
}

type PolicyVlanSegmentTagParameters struct {

	// +kubebuilder:validation:Optional
	Scope *string `json:"scope,omitempty" tf:"scope,omitempty"`

	// +kubebuilder:validation:Optional
	Tag *string `json:"tag,omitempty" tf:"tag,omitempty"`
}

type QosProfileObservation struct {

	// Policy path of profile binding map
	BindingMapPath *string `json:"bindingMapPath,omitempty" tf:"binding_map_path,omitempty"`

	// Policy path of associated QoS Profile
	QosProfilePath *string `json:"qosProfilePath,omitempty" tf:"qos_profile_path,omitempty"`

	// The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected
	Revision *float64 `json:"revision,omitempty" tf:"revision,omitempty"`
}

type QosProfileParameters struct {

	// Policy path of profile binding map
	// +kubebuilder:validation:Optional
	BindingMapPath *string `json:"bindingMapPath,omitempty" tf:"binding_map_path,omitempty"`

	// Policy path of associated QoS Profile
	// +kubebuilder:validation:Required
	QosProfilePath *string `json:"qosProfilePath" tf:"qos_profile_path,omitempty"`
}

type RateLimitObservation struct {
	RxBroadcast *float64 `json:"rxBroadcast,omitempty" tf:"rx_broadcast,omitempty"`

	RxMulticast *float64 `json:"rxMulticast,omitempty" tf:"rx_multicast,omitempty"`

	TxBroadcast *float64 `json:"txBroadcast,omitempty" tf:"tx_broadcast,omitempty"`

	TxMulticast *float64 `json:"txMulticast,omitempty" tf:"tx_multicast,omitempty"`
}

type RateLimitParameters struct {

	// +kubebuilder:validation:Optional
	RxBroadcast *float64 `json:"rxBroadcast,omitempty" tf:"rx_broadcast,omitempty"`

	// +kubebuilder:validation:Optional
	RxMulticast *float64 `json:"rxMulticast,omitempty" tf:"rx_multicast,omitempty"`

	// +kubebuilder:validation:Optional
	TxBroadcast *float64 `json:"txBroadcast,omitempty" tf:"tx_broadcast,omitempty"`

	// +kubebuilder:validation:Optional
	TxMulticast *float64 `json:"txMulticast,omitempty" tf:"tx_multicast,omitempty"`
}

type SecurityProfileObservation struct {

	// Policy path of profile binding map
	BindingMapPath *string `json:"bindingMapPath,omitempty" tf:"binding_map_path,omitempty"`

	// The _revision property describes the current revision of the resource. To prevent clients from overwriting each other's changes, PUT operations must include the current _revision of the resource, which clients should obtain by issuing a GET operation. If the _revision provided in a PUT request is missing or stale, the operation will be rejected
	Revision *float64 `json:"revision,omitempty" tf:"revision,omitempty"`

	// Policy path of associated Segment Security Profile
	SecurityProfilePath *string `json:"securityProfilePath,omitempty" tf:"security_profile_path,omitempty"`

	// Policy path of associated Spoofguard Profile
	SpoofguardProfilePath *string `json:"spoofguardProfilePath,omitempty" tf:"spoofguard_profile_path,omitempty"`
}

type SecurityProfileParameters struct {

	// Policy path of profile binding map
	// +kubebuilder:validation:Optional
	BindingMapPath *string `json:"bindingMapPath,omitempty" tf:"binding_map_path,omitempty"`

	// Policy path of associated Segment Security Profile
	// +kubebuilder:validation:Optional
	SecurityProfilePath *string `json:"securityProfilePath,omitempty" tf:"security_profile_path,omitempty"`

	// Policy path of associated Spoofguard Profile
	// +kubebuilder:validation:Optional
	SpoofguardProfilePath *string `json:"spoofguardProfilePath,omitempty" tf:"spoofguard_profile_path,omitempty"`
}

type SubnetDHCPV4ConfigDHCPGenericOptionObservation struct {

	// DHCP option code, [0-255]
	Code *float64 `json:"code,omitempty" tf:"code,omitempty"`

	// DHCP option values
	Values []*string `json:"values,omitempty" tf:"values,omitempty"`
}

type SubnetDHCPV4ConfigDHCPGenericOptionParameters struct {

	// DHCP option code, [0-255]
	// +kubebuilder:validation:Required
	Code *float64 `json:"code" tf:"code,omitempty"`

	// DHCP option values
	// +kubebuilder:validation:Required
	Values []*string `json:"values" tf:"values,omitempty"`
}

type SubnetDHCPV4ConfigDHCPOption121Observation struct {

	// Destination in cidr
	Network *string `json:"network,omitempty" tf:"network,omitempty"`

	// Next hop IP
	NextHop *string `json:"nextHop,omitempty" tf:"next_hop,omitempty"`
}

type SubnetDHCPV4ConfigDHCPOption121Parameters struct {

	// Destination in cidr
	// +kubebuilder:validation:Required
	Network *string `json:"network" tf:"network,omitempty"`

	// Next hop IP
	// +kubebuilder:validation:Required
	NextHop *string `json:"nextHop" tf:"next_hop,omitempty"`
}

type SubnetDHCPV4ConfigObservation struct {

	// Generic DHCP options
	DHCPGenericOption []DHCPV4ConfigDHCPGenericOptionObservation `json:"dhcpGenericOption,omitempty" tf:"dhcp_generic_option,omitempty"`

	// DHCP classless static routes
	DHCPOption121 []DHCPV4ConfigDHCPOption121Observation `json:"dhcpOption121,omitempty" tf:"dhcp_option_121,omitempty"`

	// IP addresses of DNS servers for subnet
	DNSServers []*string `json:"dnsServers,omitempty" tf:"dns_servers,omitempty"`

	// DHCP lease time in seconds
	LeaseTime *float64 `json:"leaseTime,omitempty" tf:"lease_time,omitempty"`

	// IP address of the DHCP server in CIDR format
	ServerAddress *string `json:"serverAddress,omitempty" tf:"server_address,omitempty"`
}

type SubnetDHCPV4ConfigParameters struct {

	// Generic DHCP options
	// +kubebuilder:validation:Optional
	DHCPGenericOption []DHCPV4ConfigDHCPGenericOptionParameters `json:"dhcpGenericOption,omitempty" tf:"dhcp_generic_option,omitempty"`

	// DHCP classless static routes
	// +kubebuilder:validation:Optional
	DHCPOption121 []DHCPV4ConfigDHCPOption121Parameters `json:"dhcpOption121,omitempty" tf:"dhcp_option_121,omitempty"`

	// IP addresses of DNS servers for subnet
	// +kubebuilder:validation:Optional
	DNSServers []*string `json:"dnsServers,omitempty" tf:"dns_servers,omitempty"`

	// DHCP lease time in seconds
	// +kubebuilder:validation:Optional
	LeaseTime *float64 `json:"leaseTime,omitempty" tf:"lease_time,omitempty"`

	// IP address of the DHCP server in CIDR format
	// +kubebuilder:validation:Optional
	ServerAddress *string `json:"serverAddress,omitempty" tf:"server_address,omitempty"`
}

type SubnetDHCPV6ConfigExcludedRangeObservation struct {

	// The end IP Address for the range
	End *string `json:"end,omitempty" tf:"end,omitempty"`

	// The start IP Address for the range
	Start *string `json:"start,omitempty" tf:"start,omitempty"`
}

type SubnetDHCPV6ConfigExcludedRangeParameters struct {

	// The end IP Address for the range
	// +kubebuilder:validation:Required
	End *string `json:"end" tf:"end,omitempty"`

	// The start IP Address for the range
	// +kubebuilder:validation:Required
	Start *string `json:"start" tf:"start,omitempty"`
}

type SubnetDHCPV6ConfigObservation struct {

	// IP addresses of DNS servers for subnet
	DNSServers []*string `json:"dnsServers,omitempty" tf:"dns_servers,omitempty"`

	// Domain names
	DomainNames []*string `json:"domainNames,omitempty" tf:"domain_names,omitempty"`

	// Excluded addresses to define dynamic ip allocation ranges
	ExcludedRange []DHCPV6ConfigExcludedRangeObservation `json:"excludedRange,omitempty" tf:"excluded_range,omitempty"`

	// DHCP lease time in seconds
	LeaseTime *float64 `json:"leaseTime,omitempty" tf:"lease_time,omitempty"`

	// The time interval in seconds, in which the prefix is advertised as preferred
	PreferredTime *float64 `json:"preferredTime,omitempty" tf:"preferred_time,omitempty"`

	// IP address of the DHCP server in CIDR format
	ServerAddress *string `json:"serverAddress,omitempty" tf:"server_address,omitempty"`

	// IPv6 address of SNTP servers for subnet
	SntpServers []*string `json:"sntpServers,omitempty" tf:"sntp_servers,omitempty"`
}

type SubnetDHCPV6ConfigParameters struct {

	// IP addresses of DNS servers for subnet
	// +kubebuilder:validation:Optional
	DNSServers []*string `json:"dnsServers,omitempty" tf:"dns_servers,omitempty"`

	// Domain names
	// +kubebuilder:validation:Optional
	DomainNames []*string `json:"domainNames,omitempty" tf:"domain_names,omitempty"`

	// Excluded addresses to define dynamic ip allocation ranges
	// +kubebuilder:validation:Optional
	ExcludedRange []DHCPV6ConfigExcludedRangeParameters `json:"excludedRange,omitempty" tf:"excluded_range,omitempty"`

	// DHCP lease time in seconds
	// +kubebuilder:validation:Optional
	LeaseTime *float64 `json:"leaseTime,omitempty" tf:"lease_time,omitempty"`

	// The time interval in seconds, in which the prefix is advertised as preferred
	// +kubebuilder:validation:Optional
	PreferredTime *float64 `json:"preferredTime,omitempty" tf:"preferred_time,omitempty"`

	// IP address of the DHCP server in CIDR format
	// +kubebuilder:validation:Optional
	ServerAddress *string `json:"serverAddress,omitempty" tf:"server_address,omitempty"`

	// IPv6 address of SNTP servers for subnet
	// +kubebuilder:validation:Optional
	SntpServers []*string `json:"sntpServers,omitempty" tf:"sntp_servers,omitempty"`
}

type SubnetObservation struct {

	// Gateway IP address in CIDR format
	Cidr *string `json:"cidr,omitempty" tf:"cidr,omitempty"`

	// DHCP address ranges for dynamic IP allocation
	DHCPRanges []*string `json:"dhcpRanges,omitempty" tf:"dhcp_ranges,omitempty"`

	DHCPV4Config []DHCPV4ConfigObservation `json:"dhcpV4Config,omitempty" tf:"dhcp_v4_config,omitempty"`

	DHCPV6Config []DHCPV6ConfigObservation `json:"dhcpV6Config,omitempty" tf:"dhcp_v6_config,omitempty"`

	// Network CIDR for subnet
	Network *string `json:"network,omitempty" tf:"network,omitempty"`
}

type SubnetParameters struct {

	// Gateway IP address in CIDR format
	// +kubebuilder:validation:Optional
	Cidr *string `json:"cidr,omitempty" tf:"cidr,omitempty"`

	// DHCP address ranges for dynamic IP allocation
	// +kubebuilder:validation:Optional
	DHCPRanges []*string `json:"dhcpRanges,omitempty" tf:"dhcp_ranges,omitempty"`

	// +kubebuilder:validation:Optional
	DHCPV4Config []DHCPV4ConfigParameters `json:"dhcpV4Config,omitempty" tf:"dhcp_v4_config,omitempty"`

	// +kubebuilder:validation:Optional
	DHCPV6Config []DHCPV6ConfigParameters `json:"dhcpV6Config,omitempty" tf:"dhcp_v6_config,omitempty"`
}

type TagObservation struct {
	Scope *string `json:"scope,omitempty" tf:"scope,omitempty"`

	Tag *string `json:"tag,omitempty" tf:"tag,omitempty"`
}

type TagParameters struct {

	// +kubebuilder:validation:Optional
	Scope *string `json:"scope,omitempty" tf:"scope,omitempty"`

	// +kubebuilder:validation:Optional
	Tag *string `json:"tag,omitempty" tf:"tag,omitempty"`
}