Network as Code. NaC model. GitLab CI/CD.

Показать описание

The video was created for the student project.

The GitHub repository:

Timestamps:

0:00:00 - 0:02:16 (demonstration of virtual network devices from different environments)

Devices which are in the TEST and DEV environments have only a basic configuration.

0:02:16 - 0:03:36 (creating an 'issue' (push_config_test_prod) in GitLab, moving to a new branch)

0:03:36 - 0:11:26 (generating configurations using Ansible/NAPALM for TEST environment)

0:11:26 - 0:17:00 (generating configurations using Ansible/NAPALM for PROD environment)

0:17:00 - 0:19:00 (git push to GitLab and create merge request, run pipeline)

0:19:00 - 0:27:25 (GitLab CI/CD pipeline stages, [validate, deploy_to_test])

0:27:25 - 0:30:00 (GitLab CI/CD stage - [deploy_to_test] - troubleshoot # 1)

ISP - just needed to restart the stage
vSRX-BR2-FW1 - timeout of commit configuration (restart of the stage is helped)
(Juniper commits the configuration so long)
HQ-FW1 (Cisco ASAv) - was an old SSH key in know_hosts

0:30:00 - 0:31:00 (Checking the applied configuration on HQ-FW1)

The configuration for HQ-FW1 was applied using the python script.

0:31:00 - 0:34:30 (GitLab CI/CD stage - [verify_deploy_to_test_Task1])

At this step, automatic testing is performed using the PyATS/Robot frameworks.

0:34:30 - 0:50:55 (GitLab CI/CD stage - [verify_deploy_to_test_Task1] - troubleshoot # 2)

Automatic testing failed, error correction.
VLAN interfaces were disabled on switches (HQ-DIS1, HQ-DIS1, HQ-ACX)
Re-run generation of configurations for TEST and PROD.

0:50:55 - 0:58:33 (Git push and re-run GitLab CI/CD)

0:58:33 - 1:00:30 (GitLab CI/CD stage - [verify_deploy_to_test_Task1] - troubleshoot # 3)

Viewing artifacts (logs) after testing
PyATS/Robot fixing the test (connectivity_check)

1:00:30 - 1:05:00 (Git push and re-run GitLab CI/CD)

Successfully completion of tests on the stage [verify_deploy_to_test_Task1]
Viewing logs

1:05:47 - 1:11:00 (Running GitLab stages for PROD environment)

1:11:00 - 1:13:00 (GitLab CI/CD stage - [verify_deploy_to_prod_Task1] - troubleshoot # 1)

Viewing logs
False alarm on the first lost packet (timeout)
Also, ping from BR1-C1 to HQ-S1 - failed (clear isakmp, IPsec sa on HQ-FW1)

1:13:00 - 1:14:14 (restart the stage - [verify_deploy_to_prod_Task1])

1:14:14 - 1:15:07 (Successfully accomplishment of the entire GitLab CI/CD pipeline, merge the branch to the master)