ansible / ansible.builtin / v2.9.0 / module / aci_epg Manage End Point Groups (EPG) objects (fv:AEPg) | "added in version" 2.4 of ansible.builtin" Authors: Swetha Chunduri (@schunduri) preview | supported by certifiedansible.builtin.aci_epg (v2.9.0) — module
pip
Install with pip install ansible==2.9.0
Manage End Point Groups (EPG) on Cisco ACI fabrics.
- name: Add a new EPG aci_epg: host: apic username: admin password: SomeSecretPassword tenant: production ap: intranet epg: web_epg description: Web Intranet EPG bd: prod_bd preferred_group: yes state: present delegate_to: localhost
- aci_epg: host: apic username: admin password: SomeSecretPassword tenant: production ap: ticketing epg: "{{ item.epg }}" description: Ticketing EPG bd: "{{ item.bd }}" priority: unspecified intra_epg_isolation: unenforced state: present delegate_to: localhost with_items: - epg: web bd: web_bd - epg: database bd: database_bd
- name: Remove an EPG aci_epg: host: apic username: admin password: SomeSecretPassword validate_certs: no tenant: production app_profile: intranet epg: web_epg state: absent delegate_to: localhost
- name: Query an EPG aci_epg: host: apic username: admin password: SomeSecretPassword tenant: production ap: ticketing epg: web_epg state: query delegate_to: localhost register: query_result
- name: Query all EPGs aci_epg: host: apic username: admin password: SomeSecretPassword state: query delegate_to: localhost register: query_result
- name: Query all EPGs with a Specific Name aci_epg: host: apic username: admin password: SomeSecretPassword validate_certs: no epg: web_epg state: query delegate_to: localhost register: query_result
- name: Query all EPGs of an App Profile aci_epg: host: apic username: admin password: SomeSecretPassword validate_certs: no ap: ticketing state: query delegate_to: localhost register: query_result
ap: aliases: - app_profile - app_profile_name description: - Name of an existing application network profile, that will contain the EPGs. required: true type: str bd: aliases: - bd_name - bridge_domain description: - Name of the bridge domain being associated with the EPG. type: str epg: aliases: - epg_name - name description: - Name of the end point group. required: true type: str host: aliases: - hostname description: - IP Address or hostname of APIC resolvable by Ansible control host. required: true type: str port: description: - Port number to be used for REST connection. - The default value depends on parameter C(use_ssl). type: int state: choices: - absent - present - query default: present description: - Use C(present) or C(absent) for adding or removing. - Use C(query) for listing an object or multiple objects. type: str tenant: aliases: - tenant_name description: - Name of an existing tenant. type: str timeout: default: 30 description: - The socket level timeout in seconds. type: int use_ssl: default: true description: - If C(no), an HTTP connection will be used instead of the default HTTPS connection. type: bool password: description: - The password to use for authentication. - This option is mutual exclusive with C(private_key). If C(private_key) is provided too, it will be used instead. required: true type: str priority: choices: - level1 - level2 - level3 - unspecified description: - The QoS class. - The APIC defaults to C(unspecified) when unset during creation. type: str username: aliases: - user default: admin description: - The username to use for authentication. type: str use_proxy: default: true description: - If C(no), it will not use a proxy, even if one is defined in an environment variable on the target hosts. type: bool description: aliases: - descr description: - Description for the EPG. type: str fwd_control: choices: - none - proxy-arp description: - The forwarding control used by the EPG. - The APIC defaults to C(none) when unset during creation. type: str private_key: aliases: - cert_key description: - Either a PEM-formatted private key file or the private key content used for signature-based authentication. - This value also influences the default C(certificate_name) that is used. - This option is mutual exclusive with C(password). If C(password) is provided too, it will be ignored. required: true type: str output_level: choices: - debug - info - normal default: normal description: - Influence the output of this ACI module. - C(normal) means the standard output, incl. C(current) dict - C(info) adds informational output, incl. C(previous), C(proposed) and C(sent) dicts - C(debug) adds debugging output, incl. C(filter_string), C(method), C(response), C(status) and C(url) information type: str validate_certs: default: true description: - If C(no), SSL certificates will not be validated. - This should only set to C(no) when used on personally controlled sites using self-signed certificates. type: bool preferred_group: description: - Whether ot not the EPG is part of the Preferred Group and can communicate without contracts. - This is very convenient for migration scenarios, or when ACI is used for network automation but not for policy. - The APIC defaults to C(no) when unset during creation. type: bool version_added: '2.5' version_added_collection: ansible.builtin certificate_name: aliases: - cert_name description: - The X.509 certificate name attached to the APIC AAA user used for signature-based authentication. - If a C(private_key) filename was provided, this defaults to the C(private_key) basename, without extension. - If PEM-formatted content was provided for C(private_key), this defaults to the C(username) value. type: str intra_epg_isolation: choices: - enforced - unenforced description: - The Intra EPG Isolation. - The APIC defaults to C(unenforced) when unset during creation. type: str
current: description: The existing configuration from the APIC after the module has finished returned: success sample: - fvTenant: attributes: descr: Production environment dn: uni/tn-production name: production nameAlias: '' ownerKey: '' ownerTag: '' type: list error: description: The error information as returned from the APIC returned: failure sample: code: '122' text: unknown managed object class foo type: dict filter_string: description: The filter string used for the request returned: failure or debug sample: ?rsp-prop-include=config-only type: str method: description: The HTTP method used for the request to the APIC returned: failure or debug sample: POST type: str previous: description: The original configuration from the APIC before the module has started returned: info sample: - fvTenant: attributes: descr: Production dn: uni/tn-production name: production nameAlias: '' ownerKey: '' ownerTag: '' type: list proposed: description: The assembled configuration from the user-provided parameters returned: info sample: fvTenant: attributes: descr: Production environment name: production type: dict raw: description: The raw output returned by the APIC REST API (xml or json) returned: parse error sample: <?xml version="1.0" encoding="UTF-8"?><imdata totalCount="1"><error code="122" text="unknown managed object class foo"/></imdata> type: str response: description: The HTTP response from the APIC returned: failure or debug sample: OK (30 bytes) type: str sent: description: The actual/minimal configuration pushed to the APIC returned: info sample: fvTenant: attributes: descr: Production environment type: list status: description: The HTTP status from the APIC returned: failure or debug sample: 200 type: int url: description: The HTTP url used for the request to the APIC returned: failure or debug sample: https://10.11.12.13/api/mo/uni/tn-production.json type: str