VCD NSX-T Dynamic Security Group Terraform Module

This Terraform module manages NSX-T Dynamic Security Groups in VMware Cloud Director (VCD) environments using the vmware/vcd provider.

Requirements

Name	Version
terraform	~> 1.2
vcd	~> 3.8

Resources

Name	Type
vcd_vdc_group	data source
vcd_nsxt_dynamic_security_group	resource

Inputs

Name	Description	Type	Default	Required
vdc_org_name	The name of the Data Center Group Organization in VCD	string	"Organization Name Format: <Account_Number>-<Region>-<Account_Name>"	yes
vdc_group_name	The name of the Data Center Group in VCD	string	"Data Center Group Name Format: <Account_Number>-<Region>-<Account_Name> <datacenter group>"	yes
dynamic_security_groups	A map of dynamic security groups to create in NSX-T. Each element of the map should contain a description field and a criteria list field, where each item in the criteria list should be a map containing type, operator, and value fields.	map(object({ description = string, criteria = list(any) }))	N/A	yes

Outputs

Name	Description
dynamic_security_groups	Information about the created NSX-T dynamic security groups. The output is a map where the keys are the names of the dynamic security groups and the values are maps with the following fields: id, name, description, and member_vms.

Example Usage

This is an example of a main.tf file that uses the "github.com/global-vmware/vcd_nsxt_dynamic_security_group" Module source to create NSX-T dynamic security groups in a VMware Cloud Director environment:

module "vcd_nsxt_dynamic_security_group" {
  source            = "github.com/global-vmware/vcd_nsxt_dynamic_security_group.git?ref=v1.2.0"

  vdc_org_name      = "<VDC-ORG-NAME>"
  vdc_group_name    = "<VDC-GROUP-NAME>"

  dynamic_security_groups = {
    Web-Servers_Dynamic-SG = {
      description = "Web Servers Dynamic Security Group"
      criteria    = [
        {
          type     = "VM_TAG"
          operator = "EQUALS"
          value    = "web"
        }
      ]
    },
    Database-Servers_Dynamic-SG = {
      description = "Database Servers Dynamic Security Group"
      criteria    = [
        {
          type     = "VM_TAG"
          operator = "EQUALS"
          value    = "db"
        }
      ]
    }
  }
}

Authors

This module is maintained by the Global VMware Cloud Automation Services Team.