Terraform Intersight - Policies Module

A Terraform module to configure Intersight Infrastructure Policies.

NOTE: THIS MODULE IS DESIGNED TO BE CONSUMED USING "EASY IMM"

A comprehensive example using this module is available below:

Easy IMM

Requirements

Name	Version
terraform	>=1.3.0
intersight	>=1.0.64

Providers

Name	Version
intersight	1.0.64

Inputs

Name	Description	Type	Default	Required
global_settings	YAML to HCL Data - global_settings.	any	n/a	yes
model	YAML to HCL Data - model.	any	n/a	yes
orgs	Intersight Organizations Moid Data.	any	n/a	yes
pools	Pools - Module Output.	any	n/a	yes
policies_sensitive	Note: Sensitive Variables cannot be added to a for_each loop so these are added seperately. certificate_management: * certificate: The IMC or Root CA (KMIP) Certificate in PEM Format. * private_key: The IMC Private Key in PEM Format. drive_security: * current_security_key_passphrase: Drive Security -> Manual Key/Remote Key Management -> Current Security Key Passphrase. * new_security_key_passphrase: Drive Security -> Manual Key -> New Security Key Passphrase. * password: Drive Security -> Remote Key Management -> Enable Authentication: Password. * server_public_root_ca_certificate: The root certificate from the KMIP server. firmware: * cco_password: The User Password with Permissions to download the Software from cisco.com. * cco_user: The User with Permissions to download the Software from cisco.com. ipmi_over_lan: * encrypt_key: Encryption Key to use for IPMI Communication. It should have an even number of hexadecimal characters and not exceed 40 characters. iscsi_boot: * password: Map of iSCSI Boot Password(s) if utilizing Authentication to the Storage Array. ldap: * password: Map of Binding Parameters Password(s). It can be any string that adheres to the following constraints: - It can have character except spaces, tabs, line breaks. - It cannot be more than 254 characters. local_user: * password: Map of Local User Password(s). mac_sec: * fallback_key_chain: Fallback Key Chain(s). * primary_key_chain: Fallback Key Chain(s). persistent_memory: * password: Secure passphrase to be applied on the Persistent Memory Modules on the server. The allowed characters are: - a-z, A-Z, 0-9 and special characters: \u0021, &, #, $, %, +, ^, @, _, *, -. snmp: * access_community_string: The default SNMPv1, SNMPv2c community name or SNMPv3 username to include on any trap messages sent to the SNMP host. The name can be 18 characters long. * auth_password: Authorization password for the user. * privacy_password: Privacy password for the user. * trap_community_string: SNMP community group used for sending SNMP trap to other devices. Valid only for SNMPv2c users. virtual_media: * password: Map of vMedia Passwords when Needed for Server Authentication.	object({ certificate_management = object({ certificate = map(string) private_key = map(string) }) drive_security = object({ current_security_key_passphrase = map(string) new_security_key_passphrase = map(string) password = map(string) server_public_root_ca_certificate = map(string) }) firmware = object({ cco_password = map(string) cco_user = map(string) }) ipmi_over_lan = object({ encryption_key = map(string) }) iscsi_boot = object({ password = map(string) }) ldap = object({ password = map(string) }) local_user = object({ password = map(string) }) mac_sec = object({ fallback_key_chain = map(string) primary_key_chain = map(string) }) persistent_memory = object({ passphrase = map(string) }) snmp = object({ access_community_string = map(string) auth_password = map(string) privacy_password = map(string) trap_community_string = map(string) }) virtual_media = object({ password = map(string) }) })	{ "certificate_management": { "certificate": {}, "private_key": {} }, "drive_security": { "current_security_key_passphrase": {}, "new_security_key_passphrase": {}, "password": {}, "server_public_root_ca_certificate": {} }, "firmware": { "cco_password": {}, "cco_user": {} }, "ipmi_over_lan": { "encryption_key": {} }, "iscsi_boot": { "password": {} }, "ldap": { "password": {} }, "local_user": { "password": {} }, "mac_sec": { "fallback_key_chain": {}, "primary_key_chain": {} }, "persistent_memory": { "passphrase": {} }, "snmp": { "access_community_string": {}, "auth_password": {}, "privacy_password": {}, "trap_community_string": {} }, "switch_control": { "aes_primary_key": {} }, "virtual_media": { "password": {} } }	no

Outputs

Name	Description
data_policies	Moid's of the Policies that were not defined locally.
data_pools	Moid's of the Pools that were not defined locally.
adapter_configuration	Moid's of the Adapter Configuration Policies.
bios	Moid's of the BIOS Policies.
boot_order	Moid's of the Boot Order Policies.
certificate_management	Moid's of the Certificate Management Policies.
device_connector	Moid's of the Device Connector Policies.
drive_security	Moid's of the Drive Security Policies.
ethernet_adapter	Moid's of the Ethernet Adapter Policies.
ethernet_network	Moid's of the Ethernet Network Policies.
ethernet_network_control	Moid's of the Ethernet Network Control Policies.
ethernet_network_group	Moid's of the Ethernet Network Group Policies.
ethernet_qos	Moid's of the Ethernet QoS Policies.
fc_zone	Moid's of the FC Zone Policies.
fibre_channel_adapter	Moid's of the Fibre Channel Adapter Policies.
fibre_channel_network	Moid's of the Fibre Channel Network Policies.
fibre_channel_qos	Moid's of the Fibre Channel QoS Policies.
flow_control	Moid's of the Flow Control Policies.
firmware	Moid's of the Firmware Policies.
imc_access	Moid's of the IMC Access Policies.
ipmi_over_lan	Moid's of the IPMI over LAN Policies.
iscsi_adapter	Moid's of the iSCSI Adapter Policies.
iscsi_boot	Moid's of the iSCSI Boot Policies.
iscsi_static_target	Moid's of the iSCSI Static Target Policies.
lan_connectivity	Moid's of the LAN Connectivity Policies.
lan_connectivity_vnics	Moid's of the LAN Connectivity - VNICs Policies.
link_aggregation	Moid's of the Link Control Policies.
link_control	Moid's of the Link Control Policies.
ldap	Moid's of the LDAP Policies.
local_user	Moid's of the Local User Policies.
mac_sec	Moid's of the MacSec Policies.
memory	Moid's of the Memory Policies.
multicast	Moid's of the Multicast Policies.
network_connectivity	Moid's of the Network Connectivity Policies.
ntp	Moid's of the NTP Policies.
persistent_memory	Moid's of the Persistent Memory Policies.
port	Moid's of the Port Policies.
ports	Moid's of the Port Child Policies.
power	Moid's of the Power Policies.
san_connectivity	Moid's of the SAN Connectivity Policies.
san_connectivity_vhbas	Moid's of the SAN Connectivity - VHBAs Policies.
scrub	Moid's of the Scrub Policies.
sd_card	Moid's of the SD Card Policies.
serial_over_lan	Moid's of the Serial over LAN Policies.
smtp	Moid's of the SMTP Policies.
snmp	Moid's of the SNMP Policies.
ssh	Moid's of the SSH Policies.
storage	Moid's of the Storage Policies.
switch_control	Moid's of the Switch Control Policies.
syslog	Moid's of the Syslog Policies.
system_qos	Moid's of the System QoS Policies.
thermal	Moid's of the Thermal Policies.
vhba_template	Moid's of the vHBA Templates.
virtual_kvm	Moid's of the Virtual KVM Policies.
virtual_media	Moid's of the Virtual Media Policies.
vlan	Moid's of the VLAN Policies.
vnic_template	Moid's of the vNIC Templates.
vsan	Moid's of the VSAN Policies.

Resources

Name	Type
intersight_access_policy.map	resource
intersight_adapter_config_policy.map	resource
intersight_bios_policy.map	resource
intersight_boot_precision_policy.map	resource
intersight_certificatemanagement_policy.map	resource
intersight_compute_scrub_policy.map	resource
intersight_deviceconnector_policy.map	resource
intersight_fabric_appliance_pc_role.map	resource
intersight_fabric_appliance_role.map	resource
intersight_fabric_eth_network_control_policy.map	resource
intersight_fabric_eth_network_group_policy.map	resource
intersight_fabric_eth_network_policy.map	resource
intersight_fabric_fc_network_policy.map	resource
intersight_fabric_fc_storage_role.map	resource
intersight_fabric_fc_uplink_pc_role.map	resource
intersight_fabric_fc_uplink_role.map	resource
intersight_fabric_fc_zone_policy.map	resource
intersight_fabric_fcoe_uplink_pc_role.map	resource
intersight_fabric_fcoe_uplink_role.map	resource
intersight_fabric_flow_control_policy.map	resource
intersight_fabric_lan_pin_group.map	resource
intersight_fabric_link_aggregation_policy.map	resource
intersight_fabric_link_control_policy.map	resource
intersight_fabric_mac_sec_policy.map	resource
intersight_fabric_multicast_policy.map	resource
intersight_fabric_port_mode.map	resource
intersight_fabric_port_policy.map	resource
intersight_fabric_san_pin_group.map	resource
intersight_fabric_server_role.map	resource
intersight_fabric_switch_control_policy.map	resource
intersight_fabric_system_qos_policy.map	resource
intersight_fabric_uplink_pc_role.map	resource
intersight_fabric_uplink_role.map	resource
intersight_fabric_vlan.map	resource
intersight_fabric_vsan.map	resource
intersight_firmware_policy.map	resource
intersight_iam_end_point_user.map	resource
intersight_iam_end_point_user_policy.map	resource
intersight_iam_end_point_user_role.map	resource
intersight_iam_ldap_group.map	resource
intersight_iam_ldap_policy.map	resource
intersight_iam_ldap_provider.map	resource
intersight_ipmioverlan_policy.map	resource
intersight_kvm_policy.map	resource
intersight_memory_persistent_memory_policy.map	resource
intersight_memory_policy.map	resource
intersight_networkconfig_policy.map	resource
intersight_ntp_policy.map	resource
intersight_power_policy.map	resource
intersight_sdcard_policy.map	resource
intersight_smtp_policy.map	resource
intersight_snmp_policy.map	resource
intersight_softwarerepository_authorization.map	resource
intersight_sol_policy.map	resource
intersight_ssh_policy.map	resource
intersight_storage_drive_group.map	resource
intersight_storage_drive_security_policy.map	resource
intersight_storage_storage_policy.map	resource
intersight_syslog_policy.map	resource
intersight_thermal_policy.map	resource
intersight_vmedia_policy.map	resource
intersight_vnic_eth_adapter_policy.map	resource
intersight_vnic_eth_if.from_template	resource
intersight_vnic_eth_if.map	resource
intersight_vnic_eth_network_policy.map	resource
intersight_vnic_eth_qos_policy.map	resource
intersight_vnic_fc_adapter_policy.map	resource
intersight_vnic_fc_if.from_template	resource
intersight_vnic_fc_if.map	resource
intersight_vnic_fc_network_policy.map	resource
intersight_vnic_fc_qos_policy.map	resource
intersight_vnic_iscsi_adapter_policy.map	resource
intersight_vnic_iscsi_boot_policy.map	resource
intersight_vnic_iscsi_static_target_policy.map	resource
intersight_vnic_lan_connectivity_policy.map	resource
intersight_vnic_san_connectivity_policy.map	resource
intersight_vnic_vhba_template.map	resource
intersight_vnic_vnic_template.map	resource
intersight_iam_account.account	data source
intersight_iam_end_point_role.map	data source
intersight_search_search_item.policies	data source
intersight_search_search_item.pools	data source
intersight_vnic_vhba_template.map	data source
intersight_vnic_vnic_template.map	data source