f5-bigip_as3_declaration

This Ansible script writes AS3 Declaration json file into F5 BIG-IP devices via REST. The script uses the official f5networks.f5_bigip Ansible modules on https://galaxy.ansible.com/ui/repo/published/f5networks/f5_modules/

The inventory yaml format is simple as below.

---
all:
  children:
    all_f5:
      hosts:
        bigip1:
          inventory_network_os: f5.bigip
          inventory_host: 192.168.1.245
          inventory_port: 443
          inventory_user: admin
          inventory_pass: password
        bigip2:
          inventory_network_os: f5.bigip
          inventory_host: 192.168.1.246
          inventory_port: 443
          inventory_user: admin
          inventory_pass: password
        bigip11:
          inventory_network_os: f5.bigip
          inventory_host: 192.168.1.231
          inventory_port: 443
          inventory_user: admin
          inventory_pass: password

Prerequisite

F5 Ansible Declarative Modules must be installed before running the script.

ansible-galaxy collection install f5networks.f5_bigip==3.2.2

Usage:

ANSIBLE_HOST_KEY_CHECKING=False ansible-playbook -vvvv --vault-password-file vault_pass.yaml -i inventory-vault.yaml bigip11_as3_basics.yaml --extra-vars="bigip=bigip11"

Files

• bigip11_as3_basics.yaml >> Ansible script file
• declarations/bigip11_as3.json >> AS3 Declaration File
• vault_pass.yaml >> Inventory vault password information
• inventory-vault.yaml >> Inventory vault file encrypted by "Inventory vault password"

Variables

• bigip variable shows which F5 device will be connected.The value can be "bigip1", "bigip11" or "all_f5" as per the example inventory file above.

Deploying AS3 Changes in bigip11_as3_basics.yaml

• name: 01-Deploy AS3 Virtual Servers >> this task loads declarations/bigip11_as3.json file and create Partition, Folder, Virtual Servers, Pools and nodes etc.

---
- name: PLAY - AS3
  hosts: "{{ bigip }}"
  connection: httpapi
  vars:
    ansible_host: "{{ inventory_host }}"
    ansible_httpapi_port: "{{ inventory_port }}"
    ansible_user: "{{ inventory_user }}"
    ansible_httpapi_password: "{{ inventory_pass }}"
    ansible_network_os: f5networks.f5_bigip.bigip
    ansible_httpapi_use_ssl: yes
    ansible_httpapi_validate_certs: no
    ansible_command_timeout: 1800
    ansible_httpapi_use_proxy: false
    f5_telemetry: false      
  gather_facts: false
  tasks:
    - name: 01-Deploy AS3 Virtual Servers
      f5networks.f5_bigip.bigip_as3_deploy:
        content: "{{ lookup('file', 'declarations/bigip11_as3.json') }}"
        #tenant: "Partition-1"
        state: present
        timeout: 300

Removing AS3 Changes in bigip11_as3_basics.yaml

If you want to remove the declaration from the F5, change the task as below and run it again. This time all configurations related with this AS3 will be deleted.

  tasks:
    - name: 01-Deploy AS3 Virtual Servers
      f5networks.f5_bigip.bigip_as3_deploy:
        content: "{{ lookup('file', 'declarations/bigip11_as3.json') }}"
        tenant: "Partition-1"
        state: absent
        timeout: 300