task05-aci_create_environment.yaml

# Copyright (c) 2025 Cisco and/or its affiliates.
# 
# This software is licensed to you under the terms of the Cisco Sample
# Code License, Version 1.1 (the "License"). You may obtain a copy of the
# License at
# 
#                https://developer.cisco.com/docs/licenses
# 
# All use of the material herein must be in accordance with the terms of
# the License. All rights not expressly granted by the License are
# reserved. Unless required by applicable law or agreed to separately in
# writing, software distributed under the License is distributed on an "AS
# IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
# or implied.

---
- name: Task05 - Create Student Environment
  hosts: dcuapic
  gather_facts: no

  vars:
    student_id: '00'
    tenant_name: "student{{ student_id }}"
    vrf_name: "{{ tenant_name }}_VRF"
    ap_name: "{{ tenant_name }}_AP"
    bd_name: "{{ tenant_name }}_BD"
    subnet_address: "10.2.255.1/24"

  tasks:
    - set_fact:
        aci_login: &aci_login
          host: "{{ inventory_hostname }}"
          username: "{{ ansible_user }}"
          password: "{{ ansible_password }}"
          use_ssl: yes
          validate_certs: no

######### Tenant Config ##########

    - name: Set {{ tenant_name }} Tenant
      cisco.aci.aci_tenant:
        <<: *aci_login
        tenant: "{{ tenant_name }}"
        state: present
      register: qResult 
      delegate_to: localhost

    - name: Add a new VRF to {{ tenant_name }}
      cisco.aci.aci_vrf:
        <<: *aci_login
        vrf: "{{ vrf_name }}"
        tenant: "{{ tenant_name }}"
        policy_control_preference: enforced
        policy_control_direction: ingress
        state: present
      delegate_to: localhost

    - name: Add AP
      cisco.aci.aci_ap:
        <<: *aci_login
        tenant: "{{ tenant_name }}"
        ap: "{{ ap_name }}"
        state: present
      delegate_to: localhost

    - name: Add Bridge Domain
      cisco.aci.aci_bd:
        <<: *aci_login
        tenant: "{{ tenant_name }}"
        bd: "{{ bd_name }}"
        vrf: "{{ vrf_name }}"
        state: present
      delegate_to: localhost

    - debug: 
        var: subnet_address

    - name: Create a subnet
      cisco.aci.aci_bd_subnet:
        <<: *aci_login
        tenant: "{{ tenant_name }}"
        bd: "{{ bd_name }}"
        scope: [public,shared]
        gateway: "{{ subnet_address }}"
        mask: 24
        state: present
      delegate_to: localhost

##########Check for missing loops variables etc - BEGIN

    - name: Add EPGs
      cisco.aci.aci_epg:
        <<: *aci_login
        tenant: "{{ tenant_name }}"
        ap: "{{ ap_name }}"
        epg: proxy_EPG
        bd: "{{ bd_name }}"
        preferred_group: yes
        state: present
      delegate_to: localhost

    - name: Add a new physical domain to EPG binding
      cisco.aci.aci_epg_to_domain:
        <<: *aci_login
        tenant: "{{ tenant_name }}"
        ap: "{{ ap_name }}"
        epg: proxy_EPG
        domain: bm_DOM
        domain_type: phys
        state: present
      delegate_to: localhost

    - name: Deploy Static Path binding for given EPG
      cisco.aci.aci_static_binding_to_epg:
        <<: *aci_login
        tenant: "{{ tenant_name }}"
        ap: "{{ ap_name }}"
        epg: proxy_EPG
        encap_id: 3399
        deploy_immediacy: immediate
        interface_mode: trunk
        interface_type: switch_port
        pod_id: 1
        leafs: '311'
        interface: '1/1'
        state: present
      delegate_to: localhost

    - name: Deploy Static Path binding for given EPG
      cisco.aci.aci_static_binding_to_epg:
        <<: *aci_login
        tenant: "{{ tenant_name }}"
        ap: "{{ ap_name }}"
        epg: webserver_EPG
        encap_id: 3499
        deploy_immediacy: immediate
        interface_mode: trunk
        interface_type: switch_port
        pod_id: 1
        leafs: '311'
        interface: '1/1'
        state: present
      delegate_to: localhost
      ignore_errors: true

##########Check for missing loops variables etc - End

    - name: Add common contract to EPG
      cisco.aci.aci_rest:
        <<: *aci_login
        path: /api/mo/uni/tn-{{ tenant_name }}/ap-{{ ap_name }}/epg-proxy_EPG.json
        method: post
        content:
          {
            "fvRsCons": {
              "attributes":{
                "tnVzBrCPName":"internet_CTR",
                "status":"created,modified"
              }
            }
          }
      delegate_to: localhost

    - name: Add common contract to EPG
      cisco.aci.aci_rest:
        <<: *aci_login
        path: /api/mo/uni/tn-{{ tenant_name }}/ap-{{ ap_name }}/epg-proxy_EPG.json
        method: post
        content:
          {
            "fvRsCons": {
              "attributes":{
                "tnVzBrCPName":"dcu_CTR",
                "status":"created,modified"
              }
            }
          }
      delegate_to: localhost

    - name: Add common contract to EPG
      cisco.aci.aci_rest:
        <<: *aci_login
        path: /api/mo/uni/tn-{{ tenant_name }}/ap-{{ ap_name }}/epg-webserver_EPG.json
        method: post
        content:
          {
            "fvRsProv": {
              "attributes":{
                "tnVzBrCPName":"dcu_CTR",
                "status":"created,modified"
              }
            }
          }
      delegate_to: localhost
      ignore_errors: true

...