Terraform ServiceNow Service Catalog Integration Developer Reference

The Terraform ServiceNow integration can be customized by ServiceNow developers using the information found in this document.

Terraform Variables and ServiceNow Variable Sets

ServiceNow has the concept of a Variable Set which is a collection of ServiceNow Variables that can be referenced in a Flow from a Service Catalog item. The Terraform Integration codebase can create Terraform Variables and Terraform Environment Variables via the API using the tf_variable.createVariablesFromSet() function.

This function looks for variables following these conventions:

ServiceNow Variable Name	Terraform Cloud Variable
`tf_var_VARIABLE_NAME`	Terraform Variable: `VARIABLE_NAME`
`tf_env_ENV_NAME`	Environment Variable: `ENV_NAME`
`sensitive_tf_var_VARIABLE_NAME`	Sensitive Terraform Variable (Write Only): `VARIABLE_NAME`
`sensitive_tf_env_ENV_NAME`	Sensitive Environment Variable (Write Only): `ENV_NAME`

This function takes the ServiceNow Variable Set and Terraform Cloud workspace ID. It will loop through the given variable set collection and create any necessary Terraform variables or environment variables in the workspace.

Customizing with ServiceNow "Script Includes" Libraries

The Terraform/ServiceNow Integration codebase includes ServiceNow Script Includes Classes that are used to interface with Terraform Cloud. The codebase also includes example catalog items and flows that implement the interface to the Terraform Cloud API.

These classes and examples can be used to help create ServiceNow Catalog Items customized to your specific ServiceNow instance and requirements.

Script Include Classes

The ServiceNow Script Include Classes can be found in the ServiceNow Studio > Server Development > Script Include.

Class Name	Description
`tf_config`	Helper to pull values from the SN Terraform Configs Table
`tf_http`	ServiceNow HTTP REST Wrapper for requests to Terraform API
`tf_run`	Resources for Terraform Run API Requests
`tf_terraform_record`	Manage ServiceNow Terraform Table Records
`tf_util`	Miscellaneous helper functions
`tf_variable`	Resources for Terraform Variable API Requests
`tf_vcs_record`	Manage ServiceNow Terraform VCS Repositories Table Records
`tf_workspace`	Resources for Terraform Workspace API Requests

Example Service Catalog Flows and Actions

The ServiceNow Example Flows can be found in the ServiceNow Studio > Flows. By default, the flows execute upon submitting an order request for the various catalog items. Admins can modify the flows and Actions to wait on an approval action, include approval rules, and specify approver groups.

Flow Name	Description
Create Workspace	Creates a new Terraform Cloud workspace from VCS repository.
Create Workspace with Vars	Creates a new Terraform Cloud workspace from VCS repository and creates any variables provided.
Create Run	Creates/queues a new run on the Terraform Cloud workspace.
Apply Run	Applies a run on the Terraform Cloud workspace.
Provision Resources	Creates a Terraform Cloud workspace (with auto-apply), creates/queues a run, applies the run when ready.
Provision Resources with Vars	Creates a Terraform Cloud workspace (with auto-apply), creates any variables, creates/queues a run, applies the run when ready.
Delete Workspace	Creates a destroy run plan.
Worker Poll Run State	Polls the Terraform Cloud API for the current run state of a workspace.
Worker Poll Apply Run	Polls the Terraform Cloud API and applies any pending Terraform runs.
Worker Poll Destroy Workspace	Queries ServiceNow Terraform Records for resources marked `is_destroyable`, applies the destroy run to destroy resources, and deletes the corresponding Terraform workspace.

ServiceNow ACLs

Access control lists (ACLs) restrict user access to objects and operations based on permissions granted. This integration includes the following roles that can be used to manage various components.

Access Control Roles	Description
`x_terraform.config_user`	Can manage the connection from the ServiceNow application to your Terraform Cloud organization.
`x_terraform.terraform_user`	Can manage all of the Terraform resources created in ServiceNow.
`x_terraform.vcs_repositories_user`	Can manage the VCS repositories available for catalog items to be ordered by end-users.

For users who only need to order from the Terraform Catalog, we recommend creating another role with read-only permissions for x_terraform_vcs_repositories to view the available repositories for ordering infrastructure. Install the Terraform ServiceNow Service Catalog integration by following the installation guide.