Use nsxt_compute_manager to enable "trust" and enable "create service account"

[martinrohrbach]

Description

We're using the nsxt_compute_manager resource for a vanilla vCenter / NSX-T deployment currently and in the process also need to enable Lifecycle Manager.

As per the docs (https://techdocs.broadcom.com/us/en/vmware-cis/nsx/vmware-nsx/4-2/installation-guide/vsphere-lifecycle-manager-with-nsx/enable-vsphere-lifecycle-manager-on-an-nsx-cluster.html) we also need to enable "Trust" and enable "Create Service Account", however, we found no way to do this with the terraform provider so we had to do this step manually afterwards.

We'd like to to be able to perform this step with the provider as well.

Use Case(s)

Set-up NSX-T with lifecycle manager as per the docs (https://techdocs.broadcom.com/us/en/vmware-cis/nsx/vmware-nsx/4-2/installation-guide/vsphere-lifecycle-manager-with-nsx/enable-vsphere-lifecycle-manager-on-an-nsx-cluster.html).

Potential Configuration

resource "nsxt_compute_manager" "test" {
  description  = "Terraform provisioned Compute Manager"
  display_name = "test"

  server = "192.168.244.144"

  credential {
    username_password_login {
      username = "user"
      password = "pass"
    }
  }

  origin_type = "vCenter"

  enable_trust = true
  enable_create_service_account = true
}

References

No response

[ksamoray]

Hi Martin, I believe that the following will address your need:
create_service_account
set_as_oidc_provider
access_level_for_oidc

You basically enable the trust with set_as_oidc_provider and set the access_level_for_oidc to FULL.
I guess the naming is confusing, we followed the API naming convention instead of using the UI's.

LMK if these address your needs.

[martinrohrbach]

That would be ... a bit embarrassing. I honestly though we tried all sorts of options and it didn't work. We also enabled the option manually and ran a plan which then said "no changes" so we thought we're on to something here ...

Either way, good thing I asked, we will recheck, thanks!