Unable to connect vSphereVM to NSX-T Segment in Terraform

Thu, 17 Apr 2025 08:30:00 +0000

Hi,

Recently while rebuilding the lab, I came across what seems to be a bug between the hashicorp/vsphere and the vmware/nsxt terraform providers.

For example, here's a snippet from code that should work, but doesn't:

 1resource "nsxt_policy_segment" "testinglinuxlab1" {
 2 display_name = "testinglinuxlab1"
 3 transport_zone_path = data.nsxt_policy_transport_zone.overlay_tz.path
 4 connectivity_path = data.nsxt_policy_tier1_gateway.T1Main.path
 5
 6 subnet {
 7 cidr = "10.183.94.1/24"
 8 }
 9}
10
11resource "vsphere_virtual_machine" "testinglinuxlab101" {
12 name = "testing-linuxlab1-01"
13 resource_pool_id = data.vsphere_compute_cluster.AVA.resource_pool_id
14 datastore_id = data.vsphere_datastore.ssd.id
15
16 num_cpus = 2
17 memory = 2048 # in MB
18 guest_id = data.vsphere_virtual_machine.debian12-template.guest_id
19
20 network_interface {
21 network_id = resource.nsxt_policy_segment.testinglinuxlab1.id
22 adapter_type = data.vsphere_virtual_machine.debian12-template.network_interface_types[0]
23 }
24
25 disk {
26 label = "disk0"
27 size = "50" # In GB
28 eagerly_scrub = false
29 thin_provisioned = true
30 }
31
32 clone {
33 template_uuid = data.vsphere_virtual_machine.debian12-template.id
34
35 customize {
36 linux_options {
37 host_name = "testing-test01"
38 domain = "ava.michellegoossens.com"
39 }
40
41 network_interface {
42 ipv4_address = "10.183.94.10"
43 ipv4_netmask = 24
44 dns_server_list = [ "192.168.74.112" ]
45 }
46
47 ipv4_gateway = "10.183.94.1"
48 }
49 }
50 lifecycle {
51 ignore_changes = [
52 clone[0].template_uuid
53 ]
54 }
55}

This is because the vSphere provider wants a dvPortgroup ID, but the NSX-T provider doesn't give that nor has an option (from what I could find) to give this.

Terraform on MichelleWayZ | Michelle Goossens | Blog

Unable to connect vSphereVM to NSX-T Segment in Terraform