You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/operator-nexus/concepts-network-fabric-resource-update-commit.md
+10-10Lines changed: 10 additions & 10 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -10,9 +10,9 @@ ms.date: 04/03/2024
10
10
#CustomerIntent: As a <type of user>, I want <what?> so that <why?>.
11
11
---
12
12
13
-
# Network Fabric resource update and commit scenarios
13
+
# Network Fabric resource update and commit operations
14
14
15
-
Currently, Nexus Network Fabric resources don't support dynamic updates and the operator needs to disable a parent resource (for example, L3Isolation domain) and reput the parent or child resource with updated values and execute the administrative post action to enable and configure the devices. Network Fabric's new resource update flow allows you to batch and update a set of Network Fabric resources via a `commitConfiguration` POST action when resources are enabled. There's no change if the user chooses the current workflow of disabling L3 Isolation domain, making changes and the enabling L3 Isolation domain.
15
+
Currently, Nexus Network Fabric resources require that you disable a parent resource (such as an L3Isolation domain) and reput the parent or child resource with updated values and execute the administrative post action to enable and configure the devices. Network Fabric's new resource update flow allows you to batch and update a set of Network Fabric resources via a `commitConfiguration` POST action when resources are enabled. There's no change if the user chooses the current workflow of disabling L3 Isolation domain, making changes and the enabling L3 Isolation domain.
16
16
17
17
## Network Fabric resource update overview
18
18
@@ -71,27 +71,27 @@ To successfully execute update resources, fabric must be in provisioned state. T
71
71
| **External Network** | Child (of L3 ISD) | Update to properties <br>- Addition/Update of IPv4/IPv6 RoutePolicy <br>- Option A properties MTU, Addition/Update of Ingress and Egress ACLs, <br>- Option A properties – BFD Configuration <br>- Option B properties – Route Targets <br> Addition/Update of tags | - *Re-PUT* of resource. <br>- Creating a new external network <br>- Deleting an External network when parent Layer 3 Isolation domain is enabled. | To delete the resource, the parent resource must be disabled.<br><br> NOTE: Only one external network is supported per ISD. |
72
72
| **Route Policy** | Parent | - Update entire statement including seq number, condition, action. <br>- Addition/update tags | - *Re-PUT* of resource. <br>- Update to Route Policy linked to a Network-to-Network Interconnect resource. | To delete the resource, the `connectedResource` (`IsolationDomain` or N-to-N Interconnect) shouldn't hold any reference. |
73
73
| **IPCommunity** | Parent | Update entire ipCommunity rule including seq number, action, community members, well known communities. | *Re-PUT* of resource | To delete the resource, the connected `RoutePolicy` Resource shouldn't hold any reference. |
74
-
| **IPPrefixes** | Parent | - Update the entire IPPrefix rule including seq number, networkPrefix, condition, subnetMask Length. <br>- Addition/update tags | *Re-PUT* of resource | To delete the resource, the connected `RoutePolicy` Resource should not hold any reference. |
75
-
| **IPExtendedCommunity** | Parent | - Update entire IPExtended community rule including seq number, action, route targets. <br>- Addition/update tags | *Re-PUT* of resource | To delete the resource, the connected `RoutePolicy` Resource should not hold any reference.|
74
+
| **IPPrefixes** | Parent | - Update the entire IPPrefix rule including seq number, networkPrefix, condition, subnetMask Length. <br>- Addition/update tags | *Re-PUT* of resource | To delete the resource, the connected `RoutePolicy` Resource shouldn't hold any reference. |
75
+
| **IPExtendedCommunity** | Parent | - Update entire IPExtended community rule including seq number, action, route targets. <br>- Addition/update tags | *Re-PUT* of resource | To delete the resource, the connected `RoutePolicy` Resource shouldn't hold any reference.|
76
76
| **ACLs** | Parent | - Addition/Update to match configurations and dynamic match configurations. <br>- Update to configuration type <br>- Addition/updating ACLs URL <br>- Addition/update tags | - *Re-PUT* of resource. <br>- Update to ACLs linked to a Network-to-Network Interconnect resource. | To delete the resource, the `connectedResource` (like `IsolationDomain` or N-to-N Interconnect) shouldn't hold any reference. |
77
77
78
78
## Behavior notes and constraints
79
79
80
80
- The Nexus Network Fabric update flow is disabled by default and requires you raise a support ticket to enable the feature.
81
81
82
-
- If a parent resource is in a **disabled** administrative state and there are changes made to either to the parent or the child resources, the `commitConfiguration` action isn't applicable. Enabling the resource would push the configuration. The commit path for such resources is triggered only when the parent resource is in the **enabled** administrative state.
82
+
- If a parent resource is in a **Disabled** administrative state and there are changes made to either to the parent or the child resources, the `commitConfiguration` action isn't applicable. Enabling the resource would push the configuration. The commit path for such resources is triggered only when the parent resource is in the **Enabled** administrative state.
83
83
84
-
- If `commitConfiguration` fails, then the fabric remains in the **accepted** in configuration state until the user addresses the issues and performs a successful `commitConfiguration`. Currently, only roll-forward mechanisms are provided when failure occurs.
84
+
- If `commitConfiguration` fails, then the fabric remains in the **Accepted** in configuration state until the user addresses the issues and performs a successful `commitConfiguration`. Currently, only roll-forward mechanisms are provided when failure occurs.
85
85
86
-
- If the Fabric configuration is in an **accepted** state and has updates to Azure Resource Manager resources yet to be committed, then no administrative action is allowed on the resources.
86
+
- If the Fabric configuration is in an **Accepted** state and has updates to Azure Resource Manager resources yet to be committed, then no administrative action is allowed on the resources.
87
87
88
-
- If the Fabric configuration is in an **accepted** state and has updates to Azure Resource Manager resources yet to be committed, then delete operation on supported resources can't be triggered.
88
+
- If the Fabric configuration is in an **Accepted** state and has updates to Azure Resource Manager resources yet to be committed, then delete operation on supported resources can't be triggered.
89
89
90
90
- Creation of parent resources is independent of `commitConfiguration` and the update flow. *Re-PUT* of resources isn't supported on any resource.
91
91
92
92
- Network Fabric resource update is supported for both Greenfield deployments and Brownfield deployments but with some constraints.
93
93
94
-
- In Greenfield scenario, the Fabric configuration state is **accepted** once there are any updates done Network Fabric resources. Once the `commitConfiguration` action is triggered, it moves to either **Provisioned** or **Accepted** state depending on success or failure of the action.
94
+
- In Greenfield scenario, the Fabric configuration state is **Accepted** once there are any updates done Network Fabric resources. Once the `commitConfiguration` action is triggered, it moves to either **Provisioned** or **Accepted** state depending on success or failure of the action.
95
95
96
96
- In Brownfield scenario, commitConfiguration action is supported but the supported Network Fabric resources (such as Isolation domains, Internal Networks, RoutePolicy & ACLs) must be created using GA version of the API (2023-06-15). This temporary restriction is relaxed following the migration of all resources to the latest GA version.
97
97
@@ -103,7 +103,7 @@ To successfully execute update resources, fabric must be in provisioned state. T
103
103
104
104
- Update of new Route policies and ACLs might cause traffic disruption depending on the rules applied.
105
105
106
-
- Use a list command on the specific resource type (list all resources of an internal network type) to verify the resources that are updated and are not committed to device. The resources that have an **accepted** or **rejected** configuration state can be filtered and identified as resources that are yet to be committed or where the commit to device fails.
106
+
- Use a list command on the specific resource type (list all resources of an internal network type) to verify the resources that are updated and aren't committed to device. The resources that have an **Accepted** or **Rejected** configuration state can be filtered and identified as resources that are yet to be committed or where the commit to device fails.
0 commit comments