ios_config: ansible 2.5.2 idempotency issue/bug?

[sk1988]

ISSUE TYPE

• Bug Report

COMPONENT NAME

ios_config

ANSIBLE VERSION

ansible 2.5.2
  config file = /etc/ansible/ansible.cfg
  configured module search path = [u'/root/.ansible/plugins/modules', u'/usr/share/ansible/plugins/modules']
  ansible python module location = /usr/lib/python2.7/site-packages/ansible
  executable location = /usr/bin/ansible
  python version = 2.7.5 (default, Aug 18 2016, 15:58:25) [GCC 4.8.5 20150623 (Red Hat 4.8.5-4)]

CONFIGURATION

DEFAULT_FORKS(/etc/ansible/ansible.cfg) = 10
DEFAULT_HOST_LIST(/etc/ansible/ansible.cfg) = [u'/etc/ansible/inventory']
DEFAULT_ROLES_PATH(/etc/ansible/ansible.cfg) = [u'/etc/ansible/roles']
HOST_KEY_CHECKING(/etc/ansible/ansible.cfg) = False
PARAMIKO_HOST_KEY_AUTO_ADD(/etc/ansible/ansible.cfg) = True
PERSISTENT_CONNECT_TIMEOUT(/etc/ansible/ansible.cfg) = 30

OS / ENVIRONMENT

Running Ansible from Centos 7.2 and testing ios_config module on a Cisco IOS device running version:

15.2(2)E3

SUMMARY

I am testing Ansible version 2.5.2 to push snmp changes to a Cisco IOS network device. I am only doing a simple command "snmp-server community Test1ng RW" and running the playbook. Despite Ansible pushing the change successfully and the device having it in running-config, Ansible still tries to change configuration again. When doing changes with large configuration files, this is causing a confusion as I don't really know if something got changed in my ansible configuration.

I don't see this issue in Ansible version 2.4.2.0.

STEPS TO REPRODUCE

My playbook configuration is as simple as below:

      - name: DEPLOY SNMP COMMANDS WITHIN PB
        delegate_to: localhost
        ios_config:
           provider: "{{ provider }}"
           commands:
             - snmp-server community Test1ng RW

EXPECTED RESULTS

Ansible should make the change only for the first time and should not change end device anymore.

ACTUAL RESULTS

[root@vm08 ansible]# ansible-playbook cisco-test-1.yml --limit c205wz01

PLAY [Checking running cisco config] *********************************************************************************************************************************************************************************************************

TASK [configure provider] ********************************************************************************************************************************************************************************************************************
ok: [c205wz01]

TASK [DEPLOY SNMP COMMANDS WITHIN PB] ********************************************************************************************************************************************************************************************************
changed: [c205wz01 -> localhost]

PLAY RECAP ***********************************************************************************************************************************************************************************************************************************
c205wz01               : ok=2    **changed=1**    unreachable=0    failed=0

[root@vm08 ansible]#

If I run the playbook again (the playbook output is showing "changed" everytime I run the playbook (even though the end device has the desired configuration). I logged into the device and noticed that Ansible is trying to push the command every single time.

[root@vm08 ansible]# ansible-playbook cisco-test-1.yml --limit c205wz01

PLAY [Checking running cisco config] *********************************************************************************************************************************************************************************************************

TASK [configure provider] ********************************************************************************************************************************************************************************************************************
ok: [c205wz01]

TASK [DEPLOY SNMP COMMANDS WITHIN PB] ********************************************************************************************************************************************************************************************************
changed: [c205wz01 -> localhost]

PLAY RECAP ***********************************************************************************************************************************************************************************************************************************
c205wz01               : ok=2    **changed=1**    unreachable=0    failed=0

[root@vm08 ansible]#

On Network device:

c205wz01#sh run | i Tes
snmp-server community Test1ng RW
c205wz01#

[ansibot]

Files identified in the description:

• lib/ansible/modules/network/ios/ios_config.py

If these files are inaccurate, please update the component name section of the description or use the !component bot command.

click here for bot help

[ansibot]

cc @privateip @rcarrillocruz
click here for bot help

[akira6592]

It looks like the same cause as #37550 .
and It will be fixed in 2.5.3.

[sk1988]

Thank you. I have upgraded to Ansible version 2.5.3 and confirm that this issue doesn't appear anymore. I am closing this now.