Some checks failed
Code Quality & Security Scan / TFLint (push) Successful in 17s
Code Quality & Security Scan / Terraform Destroy (push) Has been skipped
Code Quality & Security Scan / Tfsec Security Scan (push) Successful in 33s
Code Quality & Security Scan / Checkov Security Scan (push) Successful in 31s
Code Quality & Security Scan / Terraform Tests (push) Failing after 1m29s
Code Quality & Security Scan / SonarQube Trigger (push) Has been skipped
Code Quality & Security Scan / Terraform Init (push) Has been skipped
Code Quality & Security Scan / Terraform Apply (push) Has been skipped
- Changed from mock credentials to actual Vault AppRole secrets - Added VAULT_ADDR environment variable for Vault connection - Uses same credentials as terraform-init job (read-only access) - Fixes: Vault authentication failures in test execution
Terraform vSphere Resource Groups Module
This Terraform module manages vSphere resource pools (resource groups) with CPU/memory allocation controls and integrated tagging for organization and management.
Purpose
Creates and manages vSphere resource pools with configurable resource allocation policies, reservations, limits, and shares. Includes automated tagging for environment and resource group classification.
What It Does
- Creates resource pools under vSphere cluster
- Configures CPU reservations, limits, and shares
- Configures memory reservations, limits, and shares
- Creates tag categories for Environment and ResourceGroupType
- Applies tags to resource pools for organization
Usage
module "vsphere_resource_groups" {
source = "./terraform-vsphere-resourcegroups"
datacenter = "DC1"
cluster_name = "Cluster01"
environment = "prod"
role_id = var.vault_role_id
secret_id = var.vault_secret_id
resource_groups = {
kubernetes = {
name = "Kubernetes"
cpu_reservation = 4000
cpu_shares = "high"
memory_reservation = 8192
memory_shares = "high"
}
docker = {
name = "Docker"
cpu_shares = "normal"
memory_shares = "normal"
}
infra = {
name = "Infrastructure"
cpu_shares = "low"
memory_shares = "low"
}
}
}
Key Features
- Resource Allocation: CPU and memory reservations, limits, shares
- Shares Mapping: Automatic conversion of low/normal/high to vSphere values (500/1000/2000)
- Tagging System: Environment and resource group type tags
- Flexible Configuration: Optional parameters with sensible defaults
- Expandable Resources: Allow resources to grow beyond reservations
Default Resource Groups
- Kubernetes: For Kubernetes infrastructure
- Docker: For Docker containers
- Infra: For infrastructure services
Prerequisites
- VMware vSphere with compute cluster
- Vault with vSphere credentials
- Terraform >= 1.6.0 (required for testing framework)
Testing
This module includes comprehensive Terraform tests to ensure code quality and correctness. Tests cover:
- Default resource group creation
- Custom configuration scenarios
- Variable validation and edge cases
- Tag management
- Output generation
Running Tests Locally
# Run all tests
terraform test
# Run tests with verbose output
terraform test -verbose
# Run specific test file
terraform test -filter=tests/resource_groups.tftest.hcl
For detailed testing documentation, see TESTING.md.
CI/CD Integration
Tests are automatically executed in the CI/CD pipeline:
- Code formatting validation (
terraform fmt -check) - Test execution with verbose output
- Test report generation and artifact upload
The test job runs after security scanning and before infrastructure deployment.
Description
Terraform module for managing vSphere resource pools (resource groups) with CPU/memory resource allocation controls and tagging
Languages
HCL
100%