This module is no longer maintained as it has been integrated into the nac-aci module.
Terraform ACI Endpoint Security Group Module
Description
Location in GUI:
Tenants
» XXX
» Application Profiles
» XXX
» Endpoint Security Groups
module "aci_endpoint_security_group" {
source = "netascode/endpoint-security-group/aci"
version = ">= 0.2.3"
name = "ESG1"
description = "My Description"
tenant = "ABC"
application_profile = "AP1"
vrf = "VRF1"
shutdown = false
intra_esg_isolation = true
preferred_group = true
contract_consumers = ["CON1"]
contract_providers = ["CON1"]
contract_imported_consumers = ["IMPORTED-CON1"]
contract_intra_esgs = ["CON1"]
esg_contract_masters = [
{
tenant = "TF"
application_profile = "AP1"
endpoint_security_group = "ESG_MASTER"
}
]
tag_selectors = [
{
key = "key1"
operator = "contains"
value = "value1"
},
{
key = "key2"
operator = "equals"
value = "value2"
},
{
key = "key3"
operator = "regex"
value = "value3"
},
{
key = "key4"
value = "value4"
}
]
epg_selectors = [
{
tenant = "TF"
application_profile = "AP1"
endpoint_group = "EPG1"
}
]
ip_subnet_selectors = [
{
value = "1.1.1.0/24"
},
{
value = "1.1.2.0/24"
},
{
value = "1.1.3.0/24"
},
{
value = "1.1.4.0/24"
description = "foo"
}
]
}
Name |
Version |
aci |
>= 2.0.0 |
Name |
Description |
Type |
Default |
Required |
name |
Endpoint security group name. |
string |
n/a |
yes |
tenant |
Tenant name. |
string |
n/a |
yes |
application_profile |
Application profile name. |
string |
n/a |
yes |
description |
Description. |
string |
"" |
no |
vrf |
VRF name. |
string |
n/a |
yes |
shutdown |
Shutdown. |
bool |
false |
no |
intra_esg_isolation |
Intra ESG isolation. |
bool |
false |
no |
preferred_group |
Preferred group membership. |
bool |
false |
no |
contract_consumers |
List of contract consumers. |
list(string) |
[] |
no |
contract_providers |
List of contract providers. |
list(string) |
[] |
no |
contract_imported_consumers |
List of imported contract consumers. |
list(string) |
[] |
no |
contract_intra_esgs |
List of intra-ESG contracts. |
list(string) |
[] |
no |
esg_contract_masters |
List of ESG contract masters. |
list(object({ tenant = string application_profile = string endpoint_security_group = string })) |
[] |
no |
tag_selectors |
List of tag selectors. Choices operator : contains , equals , regex . Default value operator : equals . |
list(object({ key = string operator = optional(string, "equals") value = string description = optional(string, "") })) |
[] |
no |
epg_selectors |
List of EPG selectors. |
list(object({ tenant = string application_profile = string endpoint_group = string description = optional(string, "") })) |
[] |
no |
ip_subnet_selectors |
List of IP subnet selectors. |
list(object({ value = string description = optional(string, "") })) |
[] |
no |
Name |
Description |
dn |
Distinguished name of fvESg object. |
name |
Endpoint security group name. |
tenant |
Tenant name. |
application_profile |
Application profile name. |
vrf |
VRF name. |