final.yml

---
-  hosts: apic
   any_errors_fatal: true
   gather_facts: no

   vars:
     ansible_connection: local
     ansible_python_interpreter: /usr/bin/python3
     l3out_name: 'L3_Out_Device'
     epg_4: 'External_EPG'
     L3_domain: 'ISR3945'

   vars_prompt:
     - name: "apic_ip"
       prompt: "Enter APIC IP"
       default: '10.10.20.14'
       private: no

     - name: "user"
       prompt: "Enter your APIC Username"
       default: 'admin'
       unsafe: yes

     - name: "pass"
       prompt: "Enter your APIC Password"
       default: 'C1sco12345'
       private: yes
       unsafe: yes

   vars_files:
     - coding_challenge_ansible.yml

   tasks:
   
   - name: Set Credentials
     set_fact:
       cred: &cred
         host: "{{ inventory_hostname }}"
         username: "{{ user }}"
         password: "{{ pass }}"
         validate_certs: false
     
   - name: Create a tenant
     tags: always
     aci_tenant:
       tenant: "{{ item.name }}"
       description: "{{ item.description }}"
       <<: *cred
     with_items:
       - "{{ tenants }}"


   - name: Create ap
     tags: ap
     aci_ap:
       tenant: "{{ item.0.name  }}"
       name: "{{ item.1.name }}"
       description: "{{ item.1.description }}"
       <<: *cred
     with_subelements: 
       - "{{ tenants }}"
       - "application_profiles"

   - name: create VRF
     tags: vrf
     aci_vrf:
       vrf: "{{ item.1.name }}"
       tenant: "{{ item.0.name }}"
       <<: *cred
     with_subelements: 
       - "{{ tenants }}"
       - "vrfs"


   - name: Create three Bridge-Domains
     tags: bd
     aci_bd:
       tenant: "{{ item.0.name }}"
       bd: "{{ item.1.name }}"
       vrf: "{{ item.1.vrf }}"
       <<: *cred  
     with_subelements: 
       - "{{ tenants }}"
       - "bridge_domains"



   - name: Create three Subnets
     tags: subs
     aci_bd_subnet:
       tenant: "{{ item.0.name }}"
       name: "{{ item.1.subnets.0.name }}"
       bd: "{{ item.1.name }}"
       gateway_ip: "{{ item.1.subnets.0.name }}"
       subnet_mask: "{{ item.1.subnets.0.mask }}"
       scope: "{{ item.1.subnets.0.scope }}"   
       <<: *cred 
     with_subelements: 
       - "{{ tenants }}"
       - "bridge_domains"


   - name: Create EPG_Web_Server
     tags: epg
     aci_epg:
       tenant: "{{ item.0.name }}"
       ap: "{{ item.1.name }}"
       epg: "{{ item.1.epgs.0.name }}"
       bd: "{{ item.1.epgs.0.bd }}"
       <<: *cred
     with_subelements: 
       - "{{ tenants }}"
       - "application_profiles"



   - name: Create EPG_App_Server
     tags: epg
     aci_epg:
       tenant: "{{ item.0.name }}"
       ap: "{{ item.1.name }}"
       epg: "{{ item.1.epgs.1.name }}"
       bd: "{{ item.1.epgs.1.bd }}"
       <<: *cred
     with_subelements: 
       - "{{ tenants }}"
       - "application_profiles"


   - name: Create EPG_Data_Base
     tags: epg
     aci_epg:
       tenant: "{{ item.0.name }}"
       ap: "{{ item.1.name }}"
       epg: "{{ item.1.epgs.2.name }}"
       bd: "{{ item.1.epgs.2.bd }}"
       <<: *cred
     with_subelements: 
       - "{{ tenants }}"
       - "application_profiles"


   - name: Create three Contracts 
     tags: cont
     aci_contract:
       tenant: "{{ item.0.name }}"     
       contract: "{{ item.1.name }}"
       scope: "{{ item.1.scope }}"
       <<: *cred
     with_subelements: 
       - "{{ tenants }}"
       - "contracts"



   - name: Configure Contracts' Subjetcs
     tags: subj
     aci_contract_subject:
       tenant: "{{ item.0.name }}"
       contract: "{{ item.1.name }}"
       subject: "{{ item.1.subject.0.name }}"
       <<: *cred
     with_subelements: 
       - "{{ tenants }}"
       - "contracts"




   - name: Configure EPG_Web_Server as provider in contract C_internet
     tags: cont
     aci_epg_to_contract:
       tenant: "{{ item.0.name  }}"
       ap: "{{ item.1.name }}"
       epg: "{{ item.1.epgs.0.name }}"
       contract:  "{{ item.1.epgs.0.contracts.0.name }}"
       contract_type: "{{ item.1.epgs.0.contracts.0.type }}"
       <<: *cred
     with_subelements: 
       - "{{ tenants }}"
       - "application_profiles"


   - name: Configure EPG_Web_Server as Consumer in contract C_appserver
     tags: cont
     aci_epg_to_contract:
       tenant: "{{ item.0.name  }}"
       ap: "{{ item.1.name }}"
       epg: "{{ item.1.epgs.0.name }}"
       contract:  "{{ item.1.epgs.0.contracts.1.name }}"
       contract_type: "{{ item.1.epgs.0.contracts.1.type }}"
       <<: *cred
     with_subelements: 
       - "{{ tenants }}"
       - "application_profiles"



   - name:  Configure EPG_appserver as provider in contract C_appserver
     tags: cont
     aci_epg_to_contract:
       tenant: "{{ item.0.name  }}"
       ap: "{{ item.1.name }}"
       epg: "{{ item.1.epgs.1.name }}"
       contract:  "{{ item.1.epgs.1.contracts.0.name }}"
       contract_type: "{{ item.1.epgs.1.contracts.0.type }}"
       <<: *cred
     with_subelements: 
       - "{{ tenants }}"
       - "application_profiles"




   - name:  Configure EPG_appserver as consumer in contract C_database
     tags: cont
     aci_epg_to_contract:
       tenant: "{{ item.0.name  }}"
       ap: "{{ item.1.name }}"
       epg: "{{ item.1.epgs.1.name }}"
       contract:  "{{ item.1.epgs.1.contracts.1.name }}"
       contract_type: "{{ item.1.epgs.1.contracts.1.type }}"
       <<: *cred
     with_subelements: 
       - "{{ tenants }}"
       - "application_profiles"




   - name:  Configure EPG_database as provider in contract C_database
     tags: cont
     aci_epg_to_contract:
       tenant: "{{ item.0.name  }}"
       ap: "{{ item.1.name }}"
       epg: "{{ item.1.epgs.2.name }}"
       contract:  "{{ item.1.epgs.2.contracts.0.name }}"
       contract_type: "{{ item.1.epgs.2.contracts.0.type }}"
       <<: *cred
     with_subelements: 
       - "{{ tenants }}"
       - "application_profiles"



   - name: Create L3-Out
     tags: L3
     aci_l3out:
       tenant: "{{ item.0.name  }}"
       l3out:  "{{ l3out_name  }}"
       description: L3_Out for Production tenant
       domain: "{{ L3_domain }}"
       vrf: "{{ item.1.name }}"
       l3protocol: ospf
       route_control: export
       <<: *cred
     with_subelements: 
       - "{{ tenants }}"
       - "vrfs"


   - name: Create External_EPG (EPG_4)
     tags: L3,extepg
     aci_l3out_extepg:
       extepg: "{{ epg_4 }}"
       tenant: "{{ item.name  }}"
       l3out: "{{ l3out_name }}" 
       description: External EPG which to be associated with the L3-out
       <<: *cred
     with_items:
       - "{{ tenants }}"


   - name: Configure external EPG_4 as consumer in contract C_internet
     tags: cont,L3,extepg
     cisco.aci.aci_l3out_extepg_to_contract:
       tenant: "{{ item.0.name  }}"
       extepg: "{{ epg_4 }}"
       l3out: "{{ l3out_name }}" 
       contract:  "{{ item.1.epgs.0.contracts.0.name }}"
       contract_type: consumer
       <<: *cred
     with_subelements: 
       - "{{ tenants }}"
       - "application_profiles"




# The below configuration will fail if the nodes are already pr-econfigured to be part of VPC group 
       
   - name: Add vPC Protection Group
     tags: vpc
     aci_switch_policy_vpc_protection_group:
       protection_group: vpc_group
       protection_group_id: 6
       switch_1_id: 101
       switch_2_id: 102
       # Switches 101 & 102 are already pre-discovered by APIC 
       <<: *cred