main.tf

terraform {
  required_version = ">= 1.2"

  required_providers {
    vcd = {
      source  = "vmware/vcd"
      version = ">= 3.8.2"
    }
  }
}

# Create the Datacenter Group data source
data "vcd_vdc_group" "dcgroup" {
  org       = var.vdc_org_name
  name      = var.vdc_group_name
}

# Create the NSX-T Edge Gateway data source
data "vcd_nsxt_edgegateway" "t1" {
  org       = var.vdc_org_name
  owner_id  = data.vcd_vdc_group.dcgroup.id
  name      = var.vdc_edge_name
}

# Create the vcd_nsxt_nat_rule resource block using for_each to loop through the nat_rules list
resource "vcd_nsxt_nat_rule" "nat_rules" {
  for_each                  = var.nat_rules
  org                       = var.vdc_org_name
  edge_gateway_id           = data.vcd_nsxt_edgegateway.t1.id
  name                      = each.value.name
  description               = each.value.description != null ? each.value.description : null
  enabled                   = var.enabled
  rule_type                 = each.value.rule_type
  external_address          = each.value.external_address != null ? each.value.external_address : null
  internal_address          = each.value.internal_address != null ? each.value.internal_address : null
  snat_destination_address  = each.value.rule_type == "SNAT" && each.value.snat_destination_address != null ? each.value.snat_destination_address : null
  dnat_external_port        = each.value.rule_type == "DNAT" && each.value.dnat_external_port != null ? each.value.dnat_external_port : null
  app_port_profile_id       = each.value.app_port_profile_id != null ? each.value.app_port_profile_id : null
  logging                   = each.value.logging != null ? each.value.logging : null
  firewall_match            = each.value.firewall_match != null ? each.value.firewall_match : null
  priority                  = each.value.priority != null ? each.value.priority : null
}