Deny by default security policy

[jstoja]

Hello guys,

Thanks for the amazing work.
I'm wondering how you're handing the case of deny by default and them add security policies to allow traffic between groups.
Right now, I only manage to do this by creating a security policy by hand that would deny "any to any" between groups.

It seems that it's not doable because of the format of the nsx_security_policy_rule that requires a serviceids that doesn't handle the "any" value.

Do you have an idea of how to handle this? How do you handle this case @sky-uk ?

Cheers!

[jstoja]

My bad. it seems that any the serviceids does match the "any" if it's the first element of the array (https://github.com/sky-uk/gonsx/blob/master/api/securitypolicy/securitypolicy_types_functions.go#L159).

[jstoja]

This could probably be added in the wiki here: https://github.com/sky-uk/terraform-provider-nsx/wiki/NSX-Security-Policy-Resource#nsx_security_policy_rule-resource cc @craig-duffin