main.yml

# Copyright (c) 2024 Cisco Systems, Inc. and its affiliates
#
# Permission is hereby granted, free of charge, to any person obtaining a copy of
# this software and associated documentation files (the "Software"), to deal in
# the Software without restriction, including without limitation the rights to
# use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
# the Software, and to permit persons to whom the Software is furnished to do so,
# subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in all
# copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
# FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
# COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
# IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
#
# SPDX-License-Identifier: MIT

---

- name: Verify Connection to Nexus Dashboard
  ansible.builtin.import_tasks: verify_ndfc_connectivity.yml
  tags: "{{ nac_tags.connectivity_check }}" # Tags defined in roles/common_global/vars/main.yml

- name: Verify Authorization to Nexus Dashboard
  ansible.builtin.import_tasks: verify_ndfc_authorization.yml
  tags: "{{ nac_tags.connectivity_check }}" # Tags defined in roles/common_global/vars/main.yml

- name: Get Cisco Nexus Dashboard Version
  ansible.builtin.uri:
    url: "https://{{ ansible_host }}:{{ ansible_httpapi_port | default(443) }}/version.json"
    method: GET
    status_code:
      - 200
    validate_certs: false
    timeout: 30
  register: nd_version_response
  delegate_to: localhost
  tags: "{{ nac_tags.connectivity_check }}" # Tags defined in roles/common_global/vars/main.yml

- name: Set Cisco Nexus Dashboard Version Var
  ansible.builtin.set_fact:
    nd_version: "{{ nd_major }}.{{ nd_minor }}.{{ nd_maintenance }}{{ nd_patch }}"
  vars:
    nd_major: "{{ nd_version_response.json.major }}"
    nd_minor: "{{ nd_version_response.json.minor }}"
    nd_maintenance: "{{ nd_version_response.json.maintenance }}"
    nd_patch: "{{ nd_version_response.json.patch }}"
  tags: "{{ nac_tags.connectivity_check }}" # Tags defined in roles/common_global/vars/main.yml

- name: Get Cisco Nexus Dashboard Fabric Controller Version
  cisco.dcnm.dcnm_rest:
    method: GET
    path: /appcenter/cisco/ndfc/api/about/version
  register: ndfc_version
  tags: "{{ nac_tags.connectivity_check }}" # Tags defined in roles/common_global/vars/main.yml

- name: Set Cisco Nexus Dashboard Fabric Controller Version Var
  ansible.builtin.set_fact:
    ndfc_version: "{{ ndfc_version.response.DATA.version }}"
  tags: "{{ nac_tags.connectivity_check }}" # Tags defined in roles/common_global/vars/main.yml

# Single source of truth for the NDFC 'preInterfaceConfig{Spine,Leaf,Tor}' feature
# (config emitted before interface config, used to carry *_pre_interface_freeform).
# Consumed by the fabric freeform templates and the create-role guard so the
# version gate lives in exactly one place.
- name: Set preInterfaceConfig Support Flag From NDFC/ND Version
  ansible.builtin.set_fact:
    preinterface_config_supported: >-
      {{ ((ndfc_version | default('') | cisco.nac_dc_vxlan.version_compare('12.2.2', '>='))
          and (nd_version | default('') | regex_replace('^(\d+\.\d+\.\d+).*', '\1')
               | cisco.nac_dc_vxlan.version_compare('3.2.1', '>'))) | bool }}
  when:
    - nd_version | default('') | length > 0
    - ndfc_version | default('') | length > 0
  tags: "{{ nac_tags.connectivity_check }}" # Tags defined in roles/common_global/vars/main.yml

# # ── Phase 2: Centralized Controller State Discovery (Recommendation #3) ──────
# # Queries fabric switches, multisite associations, and fabric existence once.
# # Sets facts consumed by common, create, and remove roles downstream.
# - name: Centralized Controller State Discovery
#   ansible.builtin.import_tasks: controller_discovery.yml
#   tags: "{{ nac_tags.connectivity_check }}"
#   when: data_model_extended is defined and data_model_extended.vxlan.fabric.name is defined