scotttyso / terraform-easy-aci

Terraform ACI Infrastructure as Code Module

ACI Module - Easy ACI

Use Cases

• Deploy New ACI Fabrics using Terraform

Access Policies - modules/access

• Domains

• Access Domains
• l3Out Domains
• Physical Domains

• Global Polices

• Attachable Access Entity (AEP) Policies

• Interface Policies

  • CDP Interface Policies
  • Fibre-Channel Interface Policies
  • Layer2 Interface Policies
  • LACP (Port-Channel) Interface Policies
  • Link Level Policies
  • LLDP Interface Policies
  • MisCabling Protocol (MCP) Interface Policies
  • Port Security Policies
  • Spanning Tree Interface Policies

• Leaf

  • Fabric Membership
  • Interface Profiles
  • Interface Selectors
  • Switch Profiles
  • Switch Policy Groups

• Spine

  • Fabric Membership
  • Interface Profiles
  • Interface Selectors
  • Switch Profiles
  • Switch Policy Groups

• VLAN Pools

Admin Policies - modules/admin

• Maintenance Groups

Fabric Policies - modules/fabric

• bgp_asn

Tenants - module/tenants

• Bridge Domains

Pre-requisites and Guidelines

1. Run the Intial Configuration wizard on the APICs.

2. Sign up for a TFCB (Terraform for Cloud Business) at https://app.terraform.io/. Log in and generate the User API Key. You will need this when you create the TF Cloud Target in Intersight. If not a paid version, you will need to enable the trial account.

3. Clone this repository to your own VCS Repository for the VCS Integration with Terraform Cloud.

4. Integrate your VCS Repository into the TFCB Orgnization following these instructions: https://www.terraform.io/docs/cloud/vcs/index.html. Be sure to copy the OAth Token which you will use later on for Workspace provisioning.

VERY IMPORTANT NOTE: The Terraform Cloud provider stores terraform state in plain text. Do not remove the .gitignore that is protecting you from uploading the state files to a public repository in this base directory. The rest of the modules don't have this same risk

Obtain tokens and keys

Terraform Cloud Variables

• terraform_cloud_token

  instructions: https://www.terraform.io/docs/cloud/users-teams-organizations/api-tokens.html

• tfc_oath_token

  instructions: https://www.terraform.io/docs/cloud/vcs/index.html

• tfc_organization (TFCB Organization Name)

• tfc_email (Must be an Email Assigned to the TFCB Account)

• agent_pool (The Name of the Agent Pool in the TFCB Account)

• vcs_repo (The Name of your Version Control Repository. i.e. CiscoDevNet/intersight-tfb-iks)

APIC Variables

For Certificate based Authentication

• apicUser - Must be a local user.
• privateKey
• certName

For User Based Authentication

• apicUser
• apicPass

Note: for authentication with non-Local Credentials use the following format for the user: "apic:{login_domain}\\{user}"

Import the Variables into your Environment before Running the Terraform Cloud Provider module(s) in this directory

Modify the terraform.tfvars file to the unique attributes of your environment for your domain and server profiles and policies.

Once finished with the modification commit the changes to your repository.

The Following examples are for a Linux based Operating System. Note that the TF_VAR_ prefix is used as a notification to the terraform engine that the environment variable will be consumed by terraform.

• Terraform Cloud Variables - Linux

export TF_VAR_terraform_cloud_token="your_cloud_token"

• Terraform Cloud Variables - Windows

$env:TF_VAR_terraform_cloud_token="your_cloud_token"

APIC/MSO Credentials

• Certificate Based Authentication - Linux

export TF_VAR_apicUser="{apic_username}"
export TF_VAR_certName="{name_of_certificate_associated_to_the_user}"
export TF_VAR_privateKey=`~/Downloads/apic_private_key.txt`

• Certificate Based Authentication - Windows

$env:TF_VAR_apicUser="{apic_username}"
$env:TF_VAR_certName="{name_of_certificate_associated_to_the_user}"
$env:TF_VAR_privateKey="$HOME\Downloads\apic_private_key.txt"

• User Based Authentication - Linux

export TF_VAR_apicUser="{apic_username}"
export TF_VAR_apicPass="{user_password}"
export TF_VAR_ndoUser="{ndo_username}"
export TF_VAR_ndoPass="{user_password}"

• User Based Authentication - Windows

$env:TF_VAR_apicUser="{apic_username}"
$env:TF_VAR_apicPass="{user_password}"
$env:TF_VAR_ndoUser="{ndo_username}"
$env:TF_VAR_ndoPass="{user_password}"

Execute the Terraform Plan

Terraform Cloud

When running in Terraform Cloud with VCS Integration the first Plan will need to be run from the UI but subsiqent runs should trigger automatically

Terraform CLI

• Execute the Plan - Linux

# First time execution requires initialization.  Not needed on subsequent runs.
# terraform init
terraform plan -out="main.plan"
terraform apply "main.plan"

• Execute the Plan - Windows

# First time execution requires initialization.  Not needed on subsequent runs.
# terraform.exe init
terraform.exe plan -out="main.plan"
terraform.exe apply "main.plan"

When run, this module will Create the Terraform Cloud Workspace(s) and Assign the Variables to the workspace(s).