@pulumi/juniper-mist 0.0.18 → 0.0.20

package/types/output.d.ts

@@ -674,12 +674,16 @@ export declare namespace device {
          * by default, we'll re-advertise all learned BGP routers toward overlay
          */
         noReadvertiseToOverlay: boolean;
+        /**
+         * if `type`==`tunnel`
+         */
+        tunnelName?: string;
         /**
          * enum: `external`, `internal`
          */
         type?: string;
         /**
-         * network name. enum: `lan`, `vpn`, `wan`
+         * network name. enum: `lan`, `tunnel`, `vpn`, `wan`
          */
         via: string;
         vpnName?: string;
@@ -1443,9 +1447,9 @@ export declare namespace device {
     }
     interface GatewayServicePolicy {
         /**
-         * enum: `allow`, `deny`
+         * Required when `servicepolicyId` is not defined, optional otherwise (override the servicepolicy action). enum: `allow`, `deny`
          */
-        action: string;
+        action?: string;
         /**
          * For SRX Only
          */
@@ -1455,7 +1459,10 @@ export declare namespace device {
         /**
          * access within the same VRF
          */
-        localRouting: boolean;
+        localRouting?: boolean;
+        /**
+         * Required when `servicepolicyId` is not defined, optional otherwise (override the servicepolicy name)
+         */
         name?: string;
         /**
          * by default, we derive all paths available and use them
@@ -1466,7 +1473,13 @@ export declare namespace device {
          * used to link servicepolicy defined at org level and overwrite some attributes
          */
         servicepolicyId?: string;
+        /**
+         * Required when `servicepolicyId` is not defined. List of Applications / Desctinations
+         */
         services: string[];
+        /**
+         * Required when `servicepolicyId` is not defined. List of Networks / Users
+         */
         tenants: string[];
     }
     interface GatewayServicePolicyAppqoe {
@@ -1529,7 +1542,7 @@ export declare namespace device {
         /**
          * networks reachable via this tunnel
          */
-        networks?: string[];
+        networks: string[];
         primary?: outputs.device.GatewayTunnelConfigsPrimary;
         /**
          * Only if `provider`== `custom-ipsec`
@@ -1560,10 +1573,6 @@ export declare namespace device {
         enable?: boolean;
         latlng?: outputs.device.GatewayTunnelConfigsAutoProvisionLatlng;
         primary?: outputs.device.GatewayTunnelConfigsAutoProvisionPrimary;
-        /**
-         * enum: `APAC`, `Americas`, `EMEA`, `auto`
-         */
-        region: string;
         secondary?: outputs.device.GatewayTunnelConfigsAutoProvisionSecondary;
     }
     interface GatewayTunnelConfigsAutoProvisionLatlng {
@@ -3230,7 +3239,7 @@ export declare namespace device {
         /**
          * enum: `allow`, `deny`
          */
-        action: string;
+        action?: string;
         dstTag: string;
     }
     interface SwitchAclTags {
@@ -3321,11 +3330,11 @@ export declare namespace device {
         /**
          * if `type`==`local` - optional, if not defined, system one will be used
          */
-        dnsServers?: string[];
+        dnsServers: string[];
         /**
          * if `type`==`local` - optional, if not defined, system one will be used
          */
-        dnsSuffixes?: string[];
+        dnsSuffixes: string[];
         /**
          * Property key is the MAC Address. Format is `[0-9a-f]{12}` (e.g "5684dae9ac8b")
          */
@@ -3370,17 +3379,17 @@ export declare namespace device {
         /**
          * if `type`==`relay`
          */
-        servers?: string[];
+        servers: string[];
         /**
          * if `type6`==`relay`
          */
-        servers6s?: string[];
+        servers6s: string[];
         /**
-         * enum: `local` (DHCP Server), `none`, `relay` (DHCP Relay)
+         * enum: `none`, `relay` (DHCP Relay), `server` (DHCP Server)
          */
-        type: string;
+        type?: string;
         /**
-         * enum: `local` (DHCP Server), `none`, `relay` (DHCP Relay)
+         * enum: `none`, `relay` (DHCP Relay), `server` (DHCP Server)
          */
         type6: string;
         /**
@@ -3458,6 +3467,9 @@ export declare namespace device {
         preference?: number;
     }
     interface SwitchIpConfig {
+        /**
+         * Required when `type`==`static`
+         */
         dns: string[];
         dnsSuffixes: string[];
         gateway?: string;
@@ -3516,27 +3528,49 @@ export declare namespace device {
          */
         useMgmtVrfForHostOut: boolean;
     }
-    interface SwitchOspfConfig {
+    interface SwitchOspfAreas {
+        includeLoopback: boolean;
+        networks: {
+            [key: string]: outputs.device.SwitchOspfAreasNetworks;
+        };
+        /**
+         * OSPF type. enum: `default`, `nssa`, `stub`
+         */
+        type: string;
+    }
+    interface SwitchOspfAreasNetworks {
         /**
-         * OSPF areas to run on this device and the corresponding per-area-specific configs. Property key is the area
+         * Required if `authType`==`md5`. Property key is the key number
          */
-        areas?: {
-            [key: string]: outputs.device.SwitchOspfConfigAreas;
+        authKeys: {
+            [key: string]: string;
         };
         /**
-         * whether to rung OSPF on this device
+         * Required if `authType`==`password`, the password, max length is 8
          */
-        enabled?: boolean;
+        authPassword?: string;
         /**
-         * Bandwidth for calculating metric defaults (9600..4000000000000)
+         * auth type. enum: `md5`, `none`, `password`
          */
-        referenceBandwidth: string;
-    }
-    interface SwitchOspfConfigAreas {
+        authType: string;
+        bfdMinimumInterval?: number;
+        deadInterval?: number;
+        exportPolicy?: string;
+        helloInterval?: number;
+        importPolicy?: string;
+        /**
+         * interface type (nbma = non-broadcast multi-access). enum: `broadcast`, `nbma`, `p2mp`, `p2p`
+         */
+        interfaceType: string;
+        metric?: number;
         /**
-         * for a stub/nssa area, where to avoid forwarding type-3 LSA to this area
+         * by default, we'll re-advertise all learned OSPF routes toward overlay
          */
-        noSummary?: boolean;
+        noReadvertiseToOverlay: boolean;
+        /**
+         * whether to send OSPF-Hello
+         */
+        passive: boolean;
     }
     interface SwitchOtherIpConfigs {
         /**
@@ -3706,6 +3740,10 @@ export declare namespace device {
          * Only if `mode`!=`dynamic` and `enableMacAuth`==`true`
          */
         macAuthOnly?: boolean;
+        /**
+         * Only if `mode`!=`dynamic` + `enableMacAuth`==`true` + `macAuthOnly`==`false`, dot1x will be given priority then mac_auth. Enable this to prefer macAuth over dot1x.
+         */
+        macAuthPreferred?: boolean;
         /**
          * Only if `mode`!=`dynamic` and `enableMacAuth` ==`true`. This type is ignored if mistNac is enabled. enum: `eap-md5`, `eap-peap`, `pap`
          */
@@ -3746,10 +3784,6 @@ export declare namespace device {
          * Only if `mode`!=`dynamic` and `portAuth`=`dot1x` reauthentication interval range
          */
         reauthInterval: number;
-        /**
-         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` when radius server reject / fails
-         */
-        rejectedNetwork?: string;
         /**
          * Only if `mode`==`dynamic` Control when the DPC port should be changed to the default port usage. enum: `linkDown`, `none` (let the DPC port keep at the current port usage)
          */
@@ -3758,6 +3792,14 @@ export declare namespace device {
          * Only if `mode`==`dynamic`
          */
         rules?: outputs.device.SwitchPortUsagesRule[];
+        /**
+         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` sets server fail fallback vlan
+         */
+        serverFailNetwork?: string;
+        /**
+         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` when radius server reject / fails
+         */
+        serverRejectNetwork?: string;
         /**
          * Only if `mode`!=`dynamic` speed, default is auto to automatically negotiate speed
          */
@@ -3885,6 +3927,10 @@ export declare namespace device {
          * Auth port of RADIUS server
          */
         port: number;
+        /**
+         * whether to require Message-Authenticator in requests
+         */
+        requireMessageAuthenticator: boolean;
         /**
          * secret of RADIUS server
          */
@@ -4197,9 +4243,9 @@ export declare namespace device {
     }
     interface SwitchStpConfig {
         /**
-         * enum: `rstp`, `vstp`
+         * ignored for switches participating in EVPN
          */
-        type: string;
+        vstpEnabled: boolean;
     }
     interface SwitchSwitchMgmt {
         /**
@@ -4222,6 +4268,7 @@ export declare namespace device {
          * Enable to provide the FQDN with DHCP option 81
          */
         dhcpOptionFqdn: boolean;
+        disableOobDownAlarm?: boolean;
         /**
          * Property key is the user name. For Local user authentication
          */
@@ -4883,12 +4930,16 @@ export declare namespace org {
          * by default, we'll re-advertise all learned BGP routers toward overlay
          */
         noReadvertiseToOverlay: boolean;
+        /**
+         * if `type`==`tunnel`
+         */
+        tunnelName?: string;
         /**
          * enum: `external`, `internal`
          */
         type?: string;
         /**
-         * network name. enum: `lan`, `vpn`, `wan`
+         * network name. enum: `lan`, `tunnel`, `vpn`, `wan`
          */
         via: string;
         vpnName?: string;
@@ -5629,9 +5680,9 @@ export declare namespace org {
     }
     interface DeviceprofileGatewayServicePolicy {
         /**
-         * enum: `allow`, `deny`
+         * Required when `servicepolicyId` is not defined, optional otherwise (override the servicepolicy action). enum: `allow`, `deny`
          */
-        action: string;
+        action?: string;
         /**
          * For SRX Only
          */
@@ -5641,7 +5692,10 @@ export declare namespace org {
         /**
          * access within the same VRF
          */
-        localRouting: boolean;
+        localRouting?: boolean;
+        /**
+         * Required when `servicepolicyId` is not defined, optional otherwise (override the servicepolicy name)
+         */
         name?: string;
         /**
          * by default, we derive all paths available and use them
@@ -5652,7 +5706,13 @@ export declare namespace org {
          * used to link servicepolicy defined at org level and overwrite some attributes
          */
         servicepolicyId?: string;
+        /**
+         * Required when `servicepolicyId` is not defined. List of Applications / Desctinations
+         */
         services: string[];
+        /**
+         * Required when `servicepolicyId` is not defined. List of Networks / Users
+         */
         tenants: string[];
     }
     interface DeviceprofileGatewayServicePolicyAppqoe {
@@ -5715,7 +5775,7 @@ export declare namespace org {
         /**
          * networks reachable via this tunnel
          */
-        networks?: string[];
+        networks: string[];
         primary?: outputs.org.DeviceprofileGatewayTunnelConfigsPrimary;
         /**
          * Only if `provider`== `custom-ipsec`
@@ -5746,10 +5806,6 @@ export declare namespace org {
         enable?: boolean;
         latlng?: outputs.org.DeviceprofileGatewayTunnelConfigsAutoProvisionLatlng;
         primary?: outputs.org.DeviceprofileGatewayTunnelConfigsAutoProvisionPrimary;
-        /**
-         * enum: `APAC`, `Americas`, `EMEA`, `auto`
-         */
-        region: string;
         secondary?: outputs.org.DeviceprofileGatewayTunnelConfigsAutoProvisionSecondary;
     }
     interface DeviceprofileGatewayTunnelConfigsAutoProvisionLatlng {
@@ -6008,12 +6064,16 @@ export declare namespace org {
          * by default, we'll re-advertise all learned BGP routers toward overlay
          */
         noReadvertiseToOverlay: boolean;
+        /**
+         * if `type`==`tunnel`
+         */
+        tunnelName?: string;
         /**
          * enum: `external`, `internal`
          */
         type?: string;
         /**
-         * network name. enum: `lan`, `vpn`, `wan`
+         * network name. enum: `lan`, `tunnel`, `vpn`, `wan`
          */
         via: string;
         vpnName?: string;
@@ -6754,9 +6814,9 @@ export declare namespace org {
     }
     interface GatewaytemplateServicePolicy {
         /**
-         * enum: `allow`, `deny`
+         * Required when `servicepolicyId` is not defined, optional otherwise (override the servicepolicy action). enum: `allow`, `deny`
          */
-        action: string;
+        action?: string;
         /**
          * For SRX Only
          */
@@ -6766,7 +6826,10 @@ export declare namespace org {
         /**
          * access within the same VRF
          */
-        localRouting: boolean;
+        localRouting?: boolean;
+        /**
+         * Required when `servicepolicyId` is not defined, optional otherwise (override the servicepolicy name)
+         */
         name?: string;
         /**
          * by default, we derive all paths available and use them
@@ -6777,7 +6840,13 @@ export declare namespace org {
          * used to link servicepolicy defined at org level and overwrite some attributes
          */
         servicepolicyId?: string;
+        /**
+         * Required when `servicepolicyId` is not defined. List of Applications / Desctinations
+         */
         services: string[];
+        /**
+         * Required when `servicepolicyId` is not defined. List of Networks / Users
+         */
         tenants: string[];
     }
     interface GatewaytemplateServicePolicyAppqoe {
@@ -6840,7 +6909,7 @@ export declare namespace org {
         /**
          * networks reachable via this tunnel
          */
-        networks?: string[];
+        networks: string[];
         primary?: outputs.org.GatewaytemplateTunnelConfigsPrimary;
         /**
          * Only if `provider`== `custom-ipsec`
@@ -6871,10 +6940,6 @@ export declare namespace org {
         enable?: boolean;
         latlng?: outputs.org.GatewaytemplateTunnelConfigsAutoProvisionLatlng;
         primary?: outputs.org.GatewaytemplateTunnelConfigsAutoProvisionPrimary;
-        /**
-         * enum: `APAC`, `Americas`, `EMEA`, `auto`
-         */
-        region: string;
         secondary?: outputs.org.GatewaytemplateTunnelConfigsAutoProvisionSecondary;
     }
     interface GatewaytemplateTunnelConfigsAutoProvisionLatlng {
@@ -7753,7 +7818,7 @@ export declare namespace org {
         /**
          * enum: `allow`, `deny`
          */
-        action: string;
+        action?: string;
         dstTag: string;
     }
     interface NetworktemplateAclTags {
@@ -7885,6 +7950,50 @@ export declare namespace org {
         subnet?: string;
         vlanId: string;
     }
+    interface NetworktemplateOspfAreas {
+        includeLoopback: boolean;
+        networks: {
+            [key: string]: outputs.org.NetworktemplateOspfAreasNetworks;
+        };
+        /**
+         * OSPF type. enum: `default`, `nssa`, `stub`
+         */
+        type: string;
+    }
+    interface NetworktemplateOspfAreasNetworks {
+        /**
+         * Required if `authType`==`md5`. Property key is the key number
+         */
+        authKeys: {
+            [key: string]: string;
+        };
+        /**
+         * Required if `authType`==`password`, the password, max length is 8
+         */
+        authPassword?: string;
+        /**
+         * auth type. enum: `md5`, `none`, `password`
+         */
+        authType: string;
+        bfdMinimumInterval?: number;
+        deadInterval?: number;
+        exportPolicy?: string;
+        helloInterval?: number;
+        importPolicy?: string;
+        /**
+         * interface type (nbma = non-broadcast multi-access). enum: `broadcast`, `nbma`, `p2mp`, `p2p`
+         */
+        interfaceType: string;
+        metric?: number;
+        /**
+         * by default, we'll re-advertise all learned OSPF routes toward overlay
+         */
+        noReadvertiseToOverlay: boolean;
+        /**
+         * whether to send OSPF-Hello
+         */
+        passive: boolean;
+    }
     interface NetworktemplatePortMirroring {
         /**
          * at least one of the `inputPortIdsIngress`, `inputPortIdsEgress` or `inputNetworksIngress ` should be specified
@@ -7971,6 +8080,10 @@ export declare namespace org {
          * Only if `mode`!=`dynamic` and `enableMacAuth`==`true`
          */
         macAuthOnly?: boolean;
+        /**
+         * Only if `mode`!=`dynamic` + `enableMacAuth`==`true` + `macAuthOnly`==`false`, dot1x will be given priority then mac_auth. Enable this to prefer macAuth over dot1x.
+         */
+        macAuthPreferred?: boolean;
         /**
          * Only if `mode`!=`dynamic` and `enableMacAuth` ==`true`. This type is ignored if mistNac is enabled. enum: `eap-md5`, `eap-peap`, `pap`
          */
@@ -8011,10 +8124,6 @@ export declare namespace org {
          * Only if `mode`!=`dynamic` and `portAuth`=`dot1x` reauthentication interval range
          */
         reauthInterval: number;
-        /**
-         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` when radius server reject / fails
-         */
-        rejectedNetwork?: string;
         /**
          * Only if `mode`==`dynamic` Control when the DPC port should be changed to the default port usage. enum: `linkDown`, `none` (let the DPC port keep at the current port usage)
          */
@@ -8023,6 +8132,14 @@ export declare namespace org {
          * Only if `mode`==`dynamic`
          */
         rules?: outputs.org.NetworktemplatePortUsagesRule[];
+        /**
+         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` sets server fail fallback vlan
+         */
+        serverFailNetwork?: string;
+        /**
+         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` when radius server reject / fails
+         */
+        serverRejectNetwork?: string;
         /**
          * Only if `mode`!=`dynamic` speed, default is auto to automatically negotiate speed
          */
@@ -8150,6 +8267,10 @@ export declare namespace org {
          * Auth port of RADIUS server
          */
         port: number;
+        /**
+         * whether to require Message-Authenticator in requests
+         */
+        requireMessageAuthenticator: boolean;
         /**
          * secret of RADIUS server
          */
@@ -8622,6 +8743,7 @@ export declare namespace org {
          * Enable to provide the FQDN with DHCP option 81
          */
         dhcpOptionFqdn: boolean;
+        disableOobDownAlarm?: boolean;
         /**
          * Property key is the user name. For Local user authentication
          */
@@ -9159,6 +9281,10 @@ export declare namespace org {
          * use this IDP when no explicit realm present in the incoming username/CN OR when no IDP is explicitly mapped to the incoming realm.
          */
         defaultIdpId?: string;
+        /**
+         * to disable RSAE_PSS_SHA256, RSAE_PSS_SHA384, RSAE_PSS_SHA512 from server side. see https://www.openssl.org/docs/man3.0/man1/openssl-ciphers.html
+         */
+        disableRsaeAlgorithms: boolean;
         /**
          * eap ssl security level
          * see https://www.openssl.org/docs/man1.1.1/man3/SSL_CTX_set_security_level.html#DEFAULT-CALLBACK-BEHAVIOUR
@@ -9169,6 +9295,14 @@ export declare namespace org {
          * For strict GDPR compliancy NAC POD failover would only happen between the PODs located within the EU environment, and no authentication would take place outside of EU. This is an org setting that is applicable to WLANs, switch templates, mxedge clusters that have mistNac enabled
          */
         euOnly: boolean;
+        /**
+         * allow customer to choose the EAP-TLS client certificate's field to use for IDP Machine Groups lookup
+         */
+        idpMachineCertLookupField: string;
+        /**
+         * allow customer to choose the EAP-TLS client certificate's field to use for IDP User Groups lookup
+         */
+        idpUserCertLookupField: string;
         idps: outputs.org.SettingMistNacIdp[];
         /**
          * radius server cert to be presented in EAP TLS
@@ -9225,9 +9359,9 @@ export declare namespace org {
          */
         enabled: boolean;
         /**
-         * days, required if password policy is enabled
+         * password expiry in days
          */
-        freshness?: number;
+        expiryInDays?: number;
         /**
          * required password length
          */
@@ -9248,6 +9382,15 @@ export declare namespace org {
          */
         maxPktLen: number;
     }
+    interface SettingPortChannelization {
+        /**
+         * Property key is the interface name or range (e.g. `et-0/0/47`, `et-0/0/48-49`), Property value is the interface speed (e.g. `25g`, `50g`)
+         */
+        config?: {
+            [key: string]: string;
+        };
+        enabled: boolean;
+    }
     interface SettingSecurity {
         /**
          * whether to disable local SSH (by default, local SSH is enabled with allowMist in Org is enabled
@@ -10812,7 +10955,7 @@ export declare namespace site {
         /**
          * enum: `allow`, `deny`
          */
-        action: string;
+        action?: string;
         dstTag: string;
     }
     interface NetworktemplateAclTags {
@@ -10944,6 +11087,50 @@ export declare namespace site {
         subnet?: string;
         vlanId: string;
     }
+    interface NetworktemplateOspfAreas {
+        includeLoopback: boolean;
+        ospfNetworks: {
+            [key: string]: outputs.site.NetworktemplateOspfAreasOspfNetworks;
+        };
+        /**
+         * OSPF type. enum: `default`, `nssa`, `stub`
+         */
+        type: string;
+    }
+    interface NetworktemplateOspfAreasOspfNetworks {
+        /**
+         * Required if `authType`==`md5`. Property key is the key number
+         */
+        authKeys: {
+            [key: string]: string;
+        };
+        /**
+         * Required if `authType`==`password`, the password, max length is 8
+         */
+        authPassword?: string;
+        /**
+         * auth type. enum: `md5`, `none`, `password`
+         */
+        authType: string;
+        bfdMinimumInterval?: number;
+        deadInterval?: number;
+        exportPolicy?: string;
+        helloInterval?: number;
+        importPolicy?: string;
+        /**
+         * interface type (nbma = non-broadcast multi-access). enum: `broadcast`, `nbma`, `p2mp`, `p2p`
+         */
+        interfaceType: string;
+        metric?: number;
+        /**
+         * by default, we'll re-advertise all learned OSPF routes toward overlay
+         */
+        noReadvertiseToOverlay: boolean;
+        /**
+         * whether to send OSPF-Hello
+         */
+        passive: boolean;
+    }
     interface NetworktemplatePortMirroring {
         /**
          * at least one of the `inputPortIdsIngress`, `inputPortIdsEgress` or `inputNetworksIngress ` should be specified
@@ -11030,6 +11217,10 @@ export declare namespace site {
          * Only if `mode`!=`dynamic` and `enableMacAuth`==`true`
          */
         macAuthOnly?: boolean;
+        /**
+         * Only if `mode`!=`dynamic` + `enableMacAuth`==`true` + `macAuthOnly`==`false`, dot1x will be given priority then mac_auth. Enable this to prefer macAuth over dot1x.
+         */
+        macAuthPreferred?: boolean;
         /**
          * Only if `mode`!=`dynamic` and `enableMacAuth` ==`true`. This type is ignored if mistNac is enabled. enum: `eap-md5`, `eap-peap`, `pap`
          */
@@ -11070,10 +11261,6 @@ export declare namespace site {
          * Only if `mode`!=`dynamic` and `portAuth`=`dot1x` reauthentication interval range
          */
         reauthInterval: number;
-        /**
-         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` when radius server reject / fails
-         */
-        rejectedNetwork?: string;
         /**
          * Only if `mode`==`dynamic` Control when the DPC port should be changed to the default port usage. enum: `linkDown`, `none` (let the DPC port keep at the current port usage)
          */
@@ -11082,6 +11269,14 @@ export declare namespace site {
          * Only if `mode`==`dynamic`
          */
         rules?: outputs.site.NetworktemplatePortUsagesRule[];
+        /**
+         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` sets server fail fallback vlan
+         */
+        serverFailNetwork?: string;
+        /**
+         * Only if `mode`!=`dynamic` and `portAuth`==`dot1x` when radius server reject / fails
+         */
+        serverRejectNetwork?: string;
         /**
          * Only if `mode`!=`dynamic` speed, default is auto to automatically negotiate speed
          */
@@ -11209,6 +11404,10 @@ export declare namespace site {
          * Auth port of RADIUS server
          */
         port: number;
+        /**
+         * whether to require Message-Authenticator in requests
+         */
+        requireMessageAuthenticator: boolean;
         /**
          * secret of RADIUS server
          */
@@ -11681,6 +11880,7 @@ export declare namespace site {
          * Enable to provide the FQDN with DHCP option 81
          */
         dhcpOptionFqdn: boolean;
+        disableOobDownAlarm?: boolean;
         /**
          * Property key is the user name. For Local user authentication
          */
@@ -11735,7 +11935,7 @@ export declare namespace site {
          * enum: `any`, `icmp`, `tcp`, `udp`
          */
         protocol: string;
-        subnets?: string[];
+        subnets: string[];
     }
     interface NetworktemplateSwitchMgmtTacacs {
         acctServers?: outputs.site.NetworktemplateSwitchMgmtTacacsAcctServer[];
@@ -11938,6 +12138,8 @@ export declare namespace site {
         enabled: boolean;
         /**
          * hours of operation filter, the available days (mon, tue, wed, thu, fri, sat, sun).
+         *
+         * **Note**: If the dow is not defined then it\u2019\ s treated as 00:00-23:59.
          */
         hours?: outputs.site.SettingConfigPushPolicyPushWindowHours;
     }
@@ -11966,6 +12168,8 @@ export declare namespace site {
         dwellTags?: outputs.site.SettingEngagementDwellTags;
         /**
          * hours of operation filter, the available days (mon, tue, wed, thu, fri, sat, sun).
+         *
+         * **Note**: If the dow is not defined then it\u2019\ s treated as 00:00-23:59.
          */
         hours?: outputs.site.SettingEngagementHours;
         /**
@@ -12038,25 +12242,22 @@ export declare namespace site {
         enabled?: boolean;
     }
     interface SettingGatewayMgmtAppProbingCustomApp {
-        /**
-         * if `protocol`==`icmp`
-         */
         address: string;
         appType?: string;
         /**
-         * if `protocol`==`http`
+         * Only 1 entry is allowed:
+         *     * if `protocol`==`http`: URL (e.g. `http://test.com` or `https://test.com`)
+         *     * if `protocol`==`icmp`: IP Address (e.g. `1.2.3.4`)
          */
         hostnames: string[];
-        name?: string;
+        key: string;
+        name: string;
         network?: string;
         /**
          * enum: `http`, `icmp`
          */
         protocol: string;
-        /**
-         * if `protocol`==`http`
-         */
-        url?: string;
+        url: string;
         vrf?: string;
     }
     interface SettingGatewayMgmtAutoSignatureUpdate {