v3.6.1

Release 3.6.1 (2024-05-02T17:45:07Z)

Changelog

• 82f09b7 Prepare for 3.6.1 release
• a80a94f Fix a crash in security policy
• 04aaeab Various documentation fixes
• 1258f9c Consistent naming in TN data source
• 03cc87b Fix SNI paths assignment in LB virtual server
• 1a18756 Use search API for pulling VM on latest nsx
• 2c9f162 Add visibility attr to policy IP block (#1195)
• f54e7a2 order realized VM results by external_id
• 103ba6d Bump golang.org/x/net from 0.17.0 to 0.23.0
• 0615ad5 Remove port validation from edge syslog config
• a18ef84 Several fixes for vm tags resource

v3.6.0

Release 3.6.0 (2024-04-16T19:53:46Z)

Changelog

• 419511a Remove hard-coded maxint default in flood profile
• 176ed70 Support revision in flood protection binding
• 2a04cd0 CHANGELOG for 3.6.0 release
• 624d70a Change input of TNC realization from id to path
• 681feda [MdProxy] Read secret attribute
• 0f39794 [DOC] Remove garbage text in lb_http_response_rewrite_rule.html.markdown
• 9f1ad03 Increase sleep time before checking deletion
• 6616108 Clarify NAT rule docs with regards to ANY network
• 2262a09 Add policy sub cluster resource
• 5c42c7b Add inter VRF routing resource
• 19bfa6a Switch sub-config with no IP assignment bug
• 45d9438 Documentation fix
• 752aa5b Add FloodProtectionProfile support (#1025)
• af269b1 Wait for subnet realization in ip_allocation test
• bf1b116 Refactor fabric realization data sources
• 07e006f Split edge RTEP config into separate resource
• 5eb431e Remove "id" property from edge_transport_node
• e5ed90b Return an error message for Ipv6 assignment in TNP
• aa79d0f Set sub-config in transport_node_profile resource
• cb5f961 Split edge RTEP config into separate resource
• 737a0ad Improve error messaging on connection test
• 8cf9c98 Grammatical fix
• ca02ae7 Revise nsxt_management_cluster datasource
• 85e116d Add host_switch_name attribute to transport node
• b3670ba Documentation slightly more in line with existing documentation
• 001c8db Made the default documentation more clear and added NSX 4.0+ version support
• 50a0c45 Added documentation of the default value and specify only the relevant NAT types
• 8f28132 Set edge HostId to null when host_id isn't specified
• 9670e9c Added computed to schema
• df7149e Fix static_ip handling for ip_assignment
• 014dd61 Implement md proxy and use in segment resources
• 4798865 Fix edge transport node state func
• 2cffde7 Fix http_ssl condition in LB Virtual Server rule
• 282c38a Remove SDK model from policygen input
• 7574ffa Avoid returning nil object in StateRefreshFunc
• 0e1ad04 Ensure policy based vpn mode can only be used in nsx 4.0 and use its own tests
• 718b3f5 Removing punctuation from the end of the error string
• 2fb9b40 Correction to variable name
• d385022 Based on the action, should include policy_based_vpn_mode in the resource for the test
• c814770 Stall delete operation until deletion is complete
• 8c8d4b3 Implement global manager resource
• 02e46b0 Bump google.golang.org/protobuf from 1.31.0 to 1.33.0
• 290e8fb Formatting files
• 1d06c0e Removed default value of policy_based_vpn_mode and create error messenge on using wrong action
• 5b27bb4 Removed policy_based_vpn_mode from all non DNAT and NO_DNAT tests
• e1f6214 Read discovered id in host transport node resource
• 0458fdc Documentation fix
• 9cf7eee Added NO_DNAT to the description
• 724077c Removed from SNAT test, since it's not applicable for this value
• 578f00d Datasource for transport node collection and state (#1105)
• 4cbf619 Added policy_based_vpn_mode to NAT resource
• 9ecd334 Support testing of non-clustered ESXi nodes.
• 40c1373 Add cpu_config attribute to host_transport_node
• 4d8e0df Fix empty QoS profile issue in segment
• a3198dd Fix incorrect state update following NSX error
• 712ee51 Add state argument to discovered node data source
• 9334f06 Implement policy site resource
• e2f0964 Add debug capabilities to main.go
• 0457ff9 Align linter versions in CI and releaser
• d749167 Implement VTEP HA resource and data source
• 6745e1c Fix node user password misbehavior

v3.5.0

Release 3.5.0 (2024-02-26T22:20:14Z)

Changelog

• 263e5ec Fix linter errors
• 8e08a9f Prepare for 3.5.0 release
• e9161e7 Rename GW interface realization info data source
• 01a346f Resource to prepare for NSXT cluster upgrade
• 1923365 Add Upgrade Run Resource (#1085)
• 3f3044f Handle edge node with no host switch spec
• 845ac32 Mark site_path as Computed in project resource
• 4792f9f Validate project_id can not be whitespace string
• 4f82a23 Fix edge_transport_node import issue
• 422339f Update documentation for nsxt_policy_user_management_role_binding
• 328154c Add ForceNew to nested role bindings spec
• 730330d Improve docs around segments and fixed segments
• 4f31cce Expose extended attribute in realization info data source (#1089)
• 24c9424 Handle password change in update
• 32353e3 Fix port validation in compute manager
• ab4121b Handle deletion of host_transport_node properly
• 26db40d Set member index when matching display name
• d2f66fa Add the option to remove NSX during deletion
• 8de26d1 Make domain name unique to address test failures
• aeefb43 Add missing scope attribute to ids policy doc
• 247d896 Add validators to transport node resource
• a766045 host_transport_node_profile update bug
• d2ed922 Use gateway path in IPSec VPN service
• fa112e4 Doc fixes for host transport node resources
• ad00bd2 Fix compute manager documentation data source
• efccd32 Handle edge_node import failures
• e3068cb Handle errors on manager_cluster resource properly
• 4841af7 Add NSX version check to cluster IP resource
• b21761c GRE tunnel resource implementation
• c17cac1 Fix error handling in discovery node data source
• 31fd543 Implement multitenancy support for IDS/IPS objects
• 798e498 Add upgradeGroup data source (#1076)
• 39eadc9 BGP config: support local_as_num and tags for VRFs.
• 4bba5cc Fix multitenancy tests to pass with tenant user
• 263a9b4 Set edge_node data source member_index attribute
• b402a60 Handle IPv6 paths correctly with multitenancy
• 5c2bb56 Fix issue with ClusterVirtualIP resource
• 04739ef Upgrade NSX Golang SDK
• f1e5494 Add VMC Oauth app support (#1080)
• 1c61486 Add discover node data source (#1084)
• 3cb7622 Fix HostTN doc issue (#1082)
• 1283a16 Support revision in compute manager resource
• 9ec0d7e Clarify and enhance docs for IDS Profile
• ebf4f92 Add Gateway DNS forwarder datasource
• b11f7a0 Implement policy resources for lb monitor profile
• 488d7ac Add pagination to certificate data source (#1075)
• ad7230e Fix connection initialization flow for joined node
• 0b3772f Rename 'principle' to 'principal' around the code
• 6723e76 Allow to configure timeout for ip allocation
• c011271 Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7
• 2f963e8 Implement DFW settings Exclusion list
• b8b33d1 Separate security policy and rule (#1056)
• 62622dd Lower role binding and PI requirement to 4.0.0
• 92e8200 Node user tests should run for v4.1 and above
• 98fc90a Bump golang.org/x/crypto from 0.14.0 to 0.17.0
• 5d5289d Revise transport_node host_transport_node
• 6033a1d Add support of overwriting role binding of local user (#1063)
• 6308a17 [CI Fix] Specify display_name of LBAppProfile data source in test case
• 60dd14b Fixes to documentation
• c780664 Verify that project_id contains a value
• 7792d00 Implement Policy resource for LB Http Application Profile
• 53ca4e9 Allow to configure nsx_id for locale service
• 99b29ee Remove context block from non-mutitenancy example
• 7efe862 Add missing context in T1 GW interface tests
• c1e2949 Replace panic(err) with t.Error(err)
• 89edf37 Policy LB pool: introduce active_monitor_paths attribute (#845)
• c007fca Remove outdated limitation from redistribution doc
• 17f5e05 Readme: Add NSX 4.1.x to supported versions (#1047)
• e455950 Update nsxt_policy_project to NSX v4.1.1 behavior
• f23daa0 Fix yTier0Gateway redistribution for NSX v4.1.1
• 698597d Change password for BGP neighbor only on demand
• 251ea91 Impelemnt policy_lb_client_ssl_profile resource
• 5023870 Implement nsxt_edge_transport_node data source
• cbedf79 Handle T1 ha_mode properly.
• 6252d33 Implement host transport node profile data source
• bff29de Add vrf_transit_subnets to nsxt_policy_tier0_gateway (#1002)
• 4a97230 Implement nsxt_manager_cluster_node data source
• 71440eb Some doc fixes in transport node profile
• 58788db Escape slash special character in data search
• dcb04f8 Add Principle Identity resource (#1021)
• 18e6e5a Add LDAP identity source resource (#1010)
• 0c743b3 Support transport node API of various versions
• d5220db Allow multiple switches per node
• 05103db Support realized_id in ip pool data source
• 3a8a9e3 Implement policy_host_transport_node data source
• 562ad37 Bump google.golang.org/grpc from 1.57.0 to 1.57.1
• 3d01c3c Bump TF SDK to v2.29
• f9524f5 Bump google.golang.org/grpc from 1.45.0 to 1.56.3
• 9c23fed Update release.yml

v3.4.0

Release 3.4.0 (2023-10-27T17:15:25Z)

Changelog

• 1d52e28 Fix linter error
• 00e97e8 Prepare for 3.4.0 release
• 934a7ba Support tenant user creds in T0 and edge cluster
• 29766b9 Rename nsxt_uplink_host_switch_profile
• a547d46 Enhance multitenancy guide
• 1c6a26a Fix release header template (#1004)
• b4d9171 Clarify documentation on sequence number in rules
• eab9f72 Validate rule sequence numbers on create only
• bb50a2c Avoid applying lisence on every init
• c6e10b4 Probe NSX API endpoint in manager cluster
• 80feaa8 Failure Domain in Edge Cluster (#958)
• bd8407c Resolve dependabot detected vulnerabilities
• f1e6000 Fix login credential type identifier parsing
• e777aa7 On read, extract sensitive data from state
• 3f2187d Some documentation fixes
• bd0d7ce Add User Management Resources (#983)
• 7b23d00 Refactor manager cluster resource
• 23f2b83 Change test to suit older version NSX (#986)
• 0d814f5 Fix searching by special chars in data sources
• 7b1ff98 Implemnt host transport node collection resource
• fd709be Implement edge high availability profile resource
• 18c820f Rename NSXT_TEST_MP environment var
• 03176ff Rename uplink host switch profile for consistency
• c1eab7e Address comments
• 7781222 Implement Host Transport Node
• 22957bd Wrap necessary test with NSX version check (#975)
• 20add69 Documentation fix - ip_mac_pair was misplaced
• 955fad9 Rename testAccTestMP() to testAccTestDeprecated()
• e84eaf2 Implement Compute Manager realization datasource
• d7733b9 Improve Compute Manager data source

v3.3.2

Release {{ .Version }} ({{ .Date }})

Changelog

• 784ffaa Prepare for 3.3.2 release
• 7261591 Hide sensitive info in HTTP logs
• 3bced7c Update assigned_by_dhcp documentation
• f370a0a Use general names for attributes of hostSwitch
• 58c871a Policy host transport node profile resource
• 8b54cba Fix crash in transport node resource
• b121470 Fix error handling for MP SDK resources
• 2508199 Implement nsxt_compute_collection data source
• 80c2ee6 Add support for configuring cluster virtual IP
• edf823b failure domain support (#957)
• bb57f5f Use version API for VMC
• a9436e8 Ignore vendor folder (#969)
• a9a7e8a Rename pnics to pnic
• ce3b6ef Fix rule order bug
• 6956e5b Log NSX responses while provider is in debug mode
• 06a1d44 Transport node realization data source
• 50cb705 Compute manager data source
• f1001aa MTU value can be set to nothing
• 77a1f46 Change forwarder zone list to Set
• 36e44e1 Log HTTP request before sending towards NSX
• f71f733 Remove vendor directory
• f76cc63 Add realized_id attribute to policy fabric objects
• 0c2987f Rewrite the license feature using new SDK
• 96432b1 Remove gateway path from uplink host switch profile (#956)
• 6968452 ransport node resource
• f7dff16 Update nsxt_nat_rule with firewall_match
• b2821dc Address comments
• 6cd04e0 Add doc for Transport Zone
• 3696f5b Add Acc test for policy TransportZone
• a1412b1 Use site path instead of id
• 986dc9c Address comments for TZ resource
• 48faaba Add PolicyTransportZone resource
• 60cc731 UplinkHostSwitchProfile support (#939)
• 9d1c77d Implement Nsxt Manager Cluster resource
• 792bdfc Support on-demand connection init in the provider
• a23c95c Stump linter version in tools
• ba02ab2 Fix boolean default type in policygen script
• 5dd0b1d Add Tier0 route map and prefix list data sources
• aa7c129 Support multitenancy for nsxt_policy_vms
• d8ab37f Set project_id to be (Required) in doc
• a96ecb6 Add EVPN VNI Pool resource (#925)
• 85d56a5 Support multitenancy for nsxt_policy_vm
• 7217b9e Validate order of rules is consistent with seq
• d3d4438 Handle path parsing errors in import funcs
• 5cf7143 Tag arguments as required or optional
• 90b14b7 Improve error handling in dhcp resources
• 3284736 Add IP allocation import support
• ac4a255 Implement license create/delete
• dd53510 Implement compute manager resource
• c39be23 Implement edge cluster resource
• 1e0f69e Fix dhcp v6 static binding resource
• dc11713 Mark transport zone as computed in segments
• aacf291 policy_segment_security_profile multitenancy import
• c7a8296 Error use of gateway DNS forwarder with T0
• 22900e8 Fix ip_allocation examples in doc
• 2c1ee80 fix NSX version initialization on VMC
• f0f4aaf Multitenancy documentation
• d73f1d9 DHCP static bindings multitenancy support
• 8b0ab6a Multitenancy doc - refer Project data source
• 6badd8f Use context in context_profile attribute retrieval
• 23fa227 Force new object creation when project_id changes
• e7a94a1 Use MP API /node/version to retrieve node version
• 46149df Add doc clarification for T1 route adv types
• 3238be3 Multitenancy import support
• 408a2ae Multitenancy tests
• 3a26861 Add project resource type
• e07032c Add multitenancy support using API wrappers
• 024ad7b Support type attribute on T1 for VMC
• 3940efe Update VMC Guide with up to date info
• ef8a6b0 ultitenancy project data source
• d03d254 Update policy_security_policy.html.markdown: fix typo for ip_version
• 83d7589 Add json spec input to policygen

v3.3.1

Release {{ .Version }} ({{ .Date }})

Changelog

• c4022cc Update release.yml
• 06af08c Update release.yml
• 9c76e80 Prepare for 3.3.1 release
• 0642f2c Documentation fixes
• 009adbb Fix potential segmentation fault for VMC
• 2c62460 Remove Policy prefix from categories in docs
• 833340c Fix issue when creating IPSecVpnSession with Compliance suite
• eb31c7b Avoid recreation of ip address allocation resource
• bd6e87b Add cache_size property to dns forwarder
• fec2a8d Cleanup golangci-lint config
• 99956ab Support enum delta in diffy tool
• 75c76e4 Support dhcp relay resource on Global Manager
• 41c6fd0 Update group enumerations with latest spec
• 97a7464 Support Gateway QoS resource
• 6281165 Fix linter errors
• 2ec8a79 Add segment security profile resource
• 30b406e Support sub-clauses in generator
• 515cf3e API Refactoring for VPN resources
• d484da0 Tool for detecting diff in NSX policy spec
• f738833 Add spoofguard profile resource
• 3f93a24 Fix double nesting issue in docs
• 3359b50 Add ha_mode attribute to T1 gateway
• be42079 Add custom_url_partial_match to context profile
• 3bf09db Add filtering options to vms data source
• 445189d Add group_type attribue to policy group
• 2aeaaec Support segment data source
• 1fdb93d Fix delete scenario in VPN tests
• 3743c11 Fix an issue in Policy-Based VPN session import
• b2c11e8 Upgrade vSphere SDK to latest version
• e630d74 Fix and polish documentation and comments
• 1c66f32 Disallow creating GW policy of Read-Only category
• 3d92539 Allow creation of Ethernet category rules
• 7463827 Some documentation clarifications and format fixes
• 21c4a2e Support session auth for policy resources
• 4da3dde Add custom attribute support to context profile
• 52f879b Revert "Support session auth for policy resources"
• ca1a03f Fix web linter and comment #4 Signed-off-by: Axel Francois axel.francois@tx.group
• 0f020b0 Support session auth for policy resources
• d40fd5e Fix mixup in condition to address lb rules
• 0af0086 Resolving comment #3 Signed-off-by: Axel Francois axel.francois@tx.group
• ff616c0 Upgrade dependencies to fix security issues
• 9a96959 Add FQDN or URL Custom support for context profile
• ab07065 Adding tests Signed-off-by: Axel Francois axel.francois@tx.group
• f9fbaaf Bugfix : wrong name is schema Signed-off-by: Axel Francois axel.francois@tx.group
• 808b08b Resolving comment #2 Signed-off-by: Axel Francois axel.francois@tx.group
• d7aff15 Resolving linter warning Signed-off-by: Axel Francois axel.francois@tx.group
• 1337ed2 Resolving comment #1 Signed-off-by: Axel Francois axel.francois@tx.group
• 8ecfdfe Fix VPN data sources for newer NSX version
• 0af5578 Removing forgotten comment Signed-off-by: Axel Francois axel.francois@tx.group
• 9cb33ee Adding support for Nested Services
• 195b3d1 Add tofu_enabled attr to ip_discovery_profile
• af36499 Ensure ordered list when preferred edges are set

v3.3.0

Release {{ .Version }} ({{ .Date }})

Changelog

• 86e8265 Update release.yml
• 6db75b4 Prepare for 3.3.0 release
• 8b10a92 Support gateway VPN for VMC use case
• 0117c51 Tier-1s support for VPN sessions Signed-off-by: Shizhao Liu lshizhao@vmware.com
• 775d202 Fix computed attributes in route map set clause
• 6673fbc Upgrade linter job
• 5835af6 Deprecate MP objects
• c67ffe8 Graduate VPN objects from beta in docs
• f9f9fc9 Add support for IP discovery profile resource
• 911bdb6 Doc fix for vpn session resources Signed-off-by: Shizhao Liu lshizhao@vmware.com

v3.2.9

Release {{ .Version }} ({{ .Date }})

Changelog

• edc1595 Clean up dependencies
• 9e9e2c5 Adjust tests to recent NSX versions
• 9fd0b99 Adjust tests to recent NSX versions
• 92bbb2b Prepare for 3.2.9 release
• 6221e93 Update CONTRIBUTING.md
• 48d9be6 Import support for VPN services
• 7abd708 Disallow setting nsx_id attribute in policy rules
• 0d38c8b Support import for VPN session resources
• 4e4924c Add website linter action
• 4583c49 Documentation fixes for VPN resources
• 8369930 Remove test for default GW policy data source
• 83c59ce Import support for BGP neighbor on GM
• 3a445bb Add support for VPN resources
• 6b74471 Make sure to path sequence id in FW rules
• e8bff0f Support bridge confguration on segment
• 9573932 Offer data source for Gateway Locale Service
• 8ac7ec2 Update FW policy rules only if needed
• 350f08f Support replication mode in Segment resources
• 7944835 Recommend to increase retry parameters for GM
• 0af4262 Upgrade nsx sdk to 3.2.1 baseline
• f93b625 Fix change detection in lb virtual server rules
• 915e2f7 Support VPN profiles
• 6216005 Update generation script

v3.2.8

Release {{ .Version }} ({{ .Date }})

Changelog

• 2af5ac5 Prepare for 3.2.8 bugfix release
• 976abe0 Support locale_service Gateway clause for LM
• 6d32ae8 Do not set AS number in BGP unless specified
• eb8c0f0 Fix some issues with NAT
• c8f8633 Clarify documention for Gateway HA VIP
• 719b449 Fix bgp config for VRF gateway
• a3d1889 Include object scope into policy search

v3.2.7

Release {{ .Version }} ({{ .Date }})

Changelog

• a6fc0e8 Prepare for 3.2.7 release
• 606aed1 Escape special charachers in policy ID search
• c99582d Fix test and docs for external id in policy group
• c79be70 Add External IDs Support for Group
• b2c0ab6 Upgrade terraform SDK
• 2e591f8 Fix potential sigsegv in policy retry mechanism
• b58316d Adjust HA VIP test to latest NSX release
• 6078b1f Fix import link in docs
• 1bb13bc Update CHANGELOG.md