Skip to content

[ansible] Consider tacacs when deploying fanout #7778

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Blueve merged 5 commits into from
Mar 20, 2023
Merged

[ansible] Consider tacacs when deploying fanout #7778

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
a40eb2f
consider tacacs with deploying fanout
Xichen96 Mar 17, 2023
5b32d60
consider tacacs in deploying fanout
Xichen96 Mar 17, 2023
60f33bc
fix bug
Xichen96 Mar 17, 2023
6479d0c
add comment
Xichen96 Mar 17, 2023
17f766a
fix bug
Xichen96 Mar 17, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions ansible/group_vars/fanout/secrets.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,3 +14,6 @@ fanout_network_password: netpassword
# Credential for accessing the Linux shell
fanout_shell_user: shelladmin
fanout_shell_password: shellpassword

#fanout_tacacs_sonic_user: admin
#fanout_tacacs_sonic_password: password
11 changes: 10 additions & 1 deletion ansible/roles/fanout/tasks/fanout_eos.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,14 @@
- name: set login to tacacs if tacacs is defined
set_fact: ansible_ssh_user={{ fanout_tacacs_eos_user }} ansible_ssh_password={{ fanout_tacacs_eos_password }}
when: >
fanout_tacacs_user is not defined and fanout_tacacs_user is not defined and
fanout_tacacs_eos_user is defined and fanout_tacacs_eos_password is defined

- name: prepare fanout switch admin login info
set_fact: ansible_ssh_user={{ fanout_admin_user }} ansible_ssh_pass={{ fanout_admin_password }}
set_fact: ansible_ssh_user={{ fanout_admin_user }} ansible_ssh_password={{ fanout_admin_password }}
when: >
fanout_tacacs_user is not defined and fanout_tacacs_user is not defined and
fanout_tacacs_eos_user is not defined and fanout_tacacs_eos_password is not defined

- name: create persistent shell login
file: path=/mnt/flash/rc.eos state=touch
Expand Down
16 changes: 15 additions & 1 deletion ansible/roles/fanout/tasks/fanout_mlnx.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,22 @@
### specified in this playbook, you would need to come up with your own fanout switch deployment
### playbook
################################################################################################
- name: set login to tacacs if tacacs is defined
set_fact: ansible_ssh_user={{ fanout_tacacs_mlnx_user }} ansible_ssh_password={{ fanout_tacacs_mlnx_password }}
when: >
fanout_tacacs_user is not defined and fanout_tacacs_user is not defined and
fanout_tacacs_mlnx_user is defined and fanout_tacacs_mlnx_password is defined
tags: always

- name: prepare fanout switch admin login info
set_fact: ansible_ssh_user={{ fanout_mlnx_user }} ansible_ssh_pass={{ fanout_mlnx_password }} peer_hwsku={{device_info[inventory_hostname]['HwSku']}}
set_fact: ansible_ssh_user={{ fanout_mlnx_user }} ansible_ssh_pass={{ fanout_mlnx_password }}
when: >
fanout_tacacs_user is not defined and fanout_tacacs_user is not defined and
fanout_tacacs_mlnx_user is not defined and fanout_tacacs_mlnx_password is not defined
tags: always

- name: prepare peer hwsku
set_fact: peer_hwsku={{ device_info[inventory_hostname]['HwSku'] }}
tags: always

##########################################
Expand Down
9 changes: 9 additions & 0 deletions ansible/roles/fanout/tasks/fanout_sonic.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,16 @@
- debug: msg="{{ device_info[inventory_hostname] }}"

- name: set login to tacacs if tacacs is defined
set_fact: ansible_ssh_user={{ fanout_tacacs_sonic_user }} ansible_ssh_password={{ fanout_tacacs_sonic_password }}
when: >
fanout_tacacs_user is not defined and fanout_tacacs_user is not defined and
fanout_tacacs_sonic_user is defined and fanout_tacacs_sonic_password is defined

- name: prepare fanout switch admin login info
set_fact: ansible_ssh_user={{ fanout_sonic_user }} ansible_ssh_password={{ fanout_sonic_password }}
when: >
fanout_tacacs_user is not defined and fanout_tacacs_user is not defined and
fanout_tacacs_sonic_user is not defined and fanout_tacacs_sonic_password is not defined

- name: retrieve SONiC version
shell: cat /etc/sonic/sonic_version.yml | grep ":"
Expand Down
7 changes: 7 additions & 0 deletions ansible/roles/fanout/tasks/main.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,13 @@

- set_fact: sw_type="{{ device_info[inventory_hostname]['Type'] }}"

# fanout_tacacs_user can override fanout_tacacs_sonic_user,
# fanout_tacacs_sonic_user can override fanout_sonic_user
- name: set login info if fanout_tacacs_user and fanout_tacacs_password is defined
set_fact: ansible_ssh_user={{ fanout_tacacs_user }} ansible_ssh_password={{ fanout_tacacs_password }}
when: fanout_tacacs_user is defined and fanout_tacacs_password is defined
tags: always

- set_fact: os='eos'
when: os is not defined
tags: always
Expand Down