Ansible and ACI

These are some ansible playbooks to do basic configuration on Cisco ACI using ansible.
Information taken from here:

https://github.com/CiscoDevNet/aci_ansible_learning_labs_code_samples/

"inventory" should look like this:

[apic:vars]

username=admin
password=<removed>
ansible_python_interpreter="/home/username/ansible/aci_ansible_learning_labs_code_samples/venv/bin/python"

[apic]

sandboxapicdc.cisco.com

1. Create Tenant:

---

- name: ENSURE APPLICATION CONFIGURATION EXISTS

  hosts: apic

  connection: local

  gather_facts: False

  vars_prompt:

    - name: "tenant"

      prompt: "What would you like to name your Tenant?"

      private: no

  tasks:

    - name: ENSURE APPLICATIONS TENANT EXISTS

      aci_tenant:

        host: "{{ ansible_host }}"

        username: "{{ username }}"

        password: "{{ password }}"

        state: "present"

        validate_certs: False

        tenant: "{{ tenant }}"

        description: "Tenant Created Using Ansible"

ansible-playbook -i inventory 01_aci_tenant_pb.yml

What would you like to name your Tenant?: test-tenant

PLAY [ENSURE APPLICATION CONFIGURATION EXISTS] *********************************************************************

TASK [ENSURE APPLICATIONS TENANT EXISTS] ***************************************************************************

changed: [sandboxapicdc.cisco.com]

PLAY RECAP *********************************************************************************************************

sandboxapicdc.cisco.com    : ok=1    changed=1    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0  

2. Create Tenant, VRF and Bridge Domain:

! This is a modified version of the playbook which assumes that the tenant does not exists and prompts for both the tenant and VRF name to be created.

---

- name: ENSURE APPLICATION CONFIGURATION EXISTS

  hosts: apic

  connection: local

  gather_facts: False

  vars_prompt:

    - name: "tenant"

      prompt: "What would you like to name your Tenant?"

      private: no

    - name: "vrf"

      prompt: "What would you like to name your VRF?"

      private: no

  tasks:

    - name: ENSURE APPLICATIONS TENANT EXISTS

      aci_tenant:

        host: "{{ ansible_host }}"

        username: "{{ username }}"

        password: "{{ password }}"

        state: "present"

        validate_certs: False

        tenant: "{{ tenant }}"

        description: "Tenant Created Using Ansible"

    - name: ENSURE TENANT VRF EXISTS

      aci_vrf:

        host: "{{ ansible_host }}"

        username: "{{ username }}"

        password: "{{ password }}"

        state: "present"

        validate_certs: False

        tenant: "{{ tenant }}"

        vrf: "{{ vrf }}"

        description: "VRF Created Using Ansible"

    - name: ENSURE TENANT BRIDGE DOMAIN EXISTS

      aci_bd:

        host: "{{ ansible_host }}"

        username: "{{ username }}"

        password: "{{ password }}"

        state: "present"

        validate_certs: False

        tenant: "{{ tenant }}"

        bd: "{{ bd | default('prod_bd') }}"

        vrf: "{{ vrf }}"

        description: "BD Created Using Ansible"

    - name: ENSURE BRIDGE DOMAIN SUBNET EXISTS

      aci_bd_subnet:

        host: "{{ ansible_host }}"

        username: "{{ username }}"

        password: "{{ password }}"

        state: "present"

        validate_certs: False

        tenant: "{{ tenant }}"

        bd: "{{ bd | default('prod_bd') }}"

        gateway: "10.10.101.1"

        mask: 24

        description: "Subnet Created Using Ansible"

ansible-playbook 02_aci_tenant_network_pb.yml -i inventory

What would you like to name your Tenant?: test-tenant

What would you like to name your VRF?: test-VRF

PLAY [ENSURE APPLICATION CONFIGURATION EXISTS] *******************************************************************************

TASK [ENSURE APPLICATIONS TENANT EXISTS] *************************************************************************************

changed: [sandboxapicdc.cisco.com]

TASK [ENSURE TENANT VRF EXISTS] **********************************************************************************************

changed: [sandboxapicdc.cisco.com]

TASK [ENSURE TENANT BRIDGE DOMAIN EXISTS] ************************************************************************************

changed: [sandboxapicdc.cisco.com]

TASK [ENSURE BRIDGE DOMAIN SUBNET EXISTS] ************************************************************************************

changed: [sandboxapicdc.cisco.com]

PLAY RECAP *******************************************************************************************************************

sandboxapicdc.cisco.com    : ok=4    changed=4    unreachable=0    failed=0    skipped=0    rescued=0    ignored=0