Transit CI pipelines must push NSX-T groups and firewall policy wit…

Question

Transit CI pipelines must push NSX-T groups and firewall policy without an operator clicking hundreds of rules. Which mechanism should they use?

Accepted Answer

Call the NSX Policy API or an IaC provider such as Terraform against that API — Pipelines do not click through 200 rules like a clerk stamping permits by hand. They call the NSX Policy API—or Terraform on top of it—and the groups land as code.

Answer

Screenshot the NSX UI and attach it to a change ticket

Answer

Ask each hypervisor admin to paste iptables on ESXi

Answer

Enable Guest Introspection as a substitute for group definitions

Transit CI pipelines must push NSX-T groups and firewall policy without an operator clicking hundreds of rules. Which mechanism should they use?

Short Explanation

Full Explanation