Create Intersight Policies Module

This module simplifies the creation of basic server and domain policies in the specified Intersight organization. It takes a few inputs and creates more than 20 policies with common settings. It also creates a server profile template and UCS domain profile that use several of those policies. Objects are created with a consistent naming scheme and any tags specified.

This module is intended to give users a jump-start into creating their own policies but will not represent the exact policy that every user will want. The policies can be updated manually or just used a reference to create new policies.

Caution

This module creates policy, a server profile template, and a UCS domain profile. When attempting a terraform destroy, Terraform is unable to remove the policies that are used by two Fabric Interconnects in the UCS domain profile. You will have to edit the domain profile manually and detatch the following policies from from the fabric interconnects:

• VLAN policy
• VSAN policy
• Port policy

See examples for more details.

Requirements

Name	Version
intersight	>=1.0.28

Providers

Name	Version
intersight	>=1.0.28

Modules

No modules.

Resources

Name	Type
intersight_access_policy.access1	resource
intersight_boot_precision_policy.boot_precision1	resource
intersight_deviceconnector_policy.dc1	resource
intersight_fabric_eth_network_control_policy.fabric_eth_network_control_policy1	resource
intersight_fabric_eth_network_group_policy.fabric_eth_network_group_policy1	resource
intersight_fabric_eth_network_policy.fabric_eth_network_policy1	resource
intersight_fabric_multicast_policy.fabric_multicast_policy1	resource
intersight_fabric_port_mode.fabric_port_mode1	resource
intersight_fabric_port_policy.fabric_port_policy1	resource
intersight_fabric_server_role.fabric_server_role1	resource
intersight_fabric_system_qos_policy.qos1	resource
intersight_fabric_uplink_pc_role.fabric_uplink_pc_role1	resource
intersight_fabric_vlan.fabric_vlan1	resource
intersight_iam_end_point_user.iam_end_point_user1	resource
intersight_iam_end_point_user_policy.user_policy1	resource
intersight_iam_end_point_user_role.roleadmin	resource
intersight_iam_ldap_group.group1	resource
intersight_iam_ldap_group.group2	resource
intersight_iam_ldap_group.group3	resource
intersight_iam_ldap_policy.policy1	resource
intersight_iam_ldap_provider.provider1	resource
intersight_iam_ldap_provider.provider2	resource
intersight_ipmioverlan_policy.ipmi2	resource
intersight_kvm_policy.kvmpolicy1	resource
intersight_networkconfig_policy.connectivity1	resource
intersight_ntp_policy.ntp1	resource
intersight_power_policy.chassis	resource
intersight_power_policy.server	resource
intersight_sdcard_policy.sdcard1	resource
intersight_snmp_policy.snmp_disabled	resource
intersight_sol_policy.sol1	resource
intersight_sol_policy.sol2112	resource
intersight_storage_drive_group.group1	resource
intersight_storage_storage_policy.storage1	resource
intersight_thermal_policy.thermal1	resource
intersight_vmedia_policy.vmedia1	resource
intersight_vmedia_policy.vmedia2	resource
intersight_vnic_eth_adapter_policy.v_eth_adapter1	resource
intersight_vnic_eth_if.eth0	resource
intersight_vnic_eth_if.eth1	resource
intersight_vnic_eth_qos_policy.v_eth_qos1	resource
intersight_vnic_lan_connectivity_policy.vnic_lan1	resource
intersight_iam_end_point_role.admin_role	data source
intersight_iam_end_point_role.imc_admin	data source
intersight_iam_end_point_role.imc_readonly	data source
intersight_iam_end_point_role.imc_user	data source

Inputs

Name	Description	Type	Default	Required
description	description field for all policies	string	""	no
dns_alternate	IP address of secondary (alternate) DNS server	string	""	no
dns_preferred	IP address of primary (preferred) DNS server	string	n/a	yes
fc_port_count_6454	number of ports to assign to FC starting at port 1	number	0	no
imc_access_pool	moid of IP pool for IMC access	string	n/a	yes
imc_access_vlan	ID of VLAN for IMC access	number	n/a	yes
imc_admin_password	password for the local user policy for IMC	string	"Cha@ng3Me"	no
ntp_servers	list of NTP servers	list(string)	n/a	yes
ntp_timezone	valid timezone as documented at https://registry.terraform.io/providers/CiscoDevNet/intersight/latest/docs/resources/ntp_policy	string	"America/Chicago"	no
organization	moid for organization in which to create the policies	string	n/a	yes
policy_prefix	prefix for all policies created	string	"tf"	no
port_channel_6454	list of port numbers to be assigned to uplink port channel	set(string)	n/a	yes
server_ports_6454	list of port numbers to be assigned to server ports	set(string)	n/a	yes
tags	user tags to be applied to all policies	list(map(string))	[]	no
uplink_vlans_6454	map of vlan names and IDs to be used on FI uplinks	map(number)	n/a	yes
vnic_mac_pool	moid of MAC pool for use with vnics	string	n/a	yes
vnic_native_vlan	native VLAN for vnic profiles	number	1	no

Outputs

No outputs.