[ansible-project] for loop in a playbook task

[Eric Marquez]

Is it possible to create a for loop in a task?  I have a switch Access-Control 
list I need to build.  In my host_vars file I have a YAML object that contains 
all the source and destination addresses in an array.  This way I can also 
control the sequence number without having to explicitly document an index 
number.   In Galaxy the OEM has a ACL module I can reference but it looks like 
I would need to breakdown all the items in the array within the task.yml file.  
 Is there a simpler way were I can call an for loop in the task to loop through 
all the LINE's I have in my variable file?
This would then allow me to generate the dellos_system seqlist without having 
to explicitly set every ACL entry.  I have a very large set of ACL's to build 
and using the Galaxy example would be very inefficient, and cause lots of 
maintenance if I needed to change my ACL setup or modify it in the future.   
I'm looking for a more modular way to do this.

Galaxy module: https://galaxy.ansible.com/Dell-Networking/dellos-acl/

Here's an example of a very small ACL.
---
ACL:
  "Stor_Clst1_IN":
    TYPE: VLAN
    ID: "107"
    DIRECTION: in
    LINE:
    - PERMIT: True
      DESC: Permit Stor_Clst1 to Stor_Clst1
      PROTOCOL: ip
      SOURCE:
        ADDRESS: "10.11.128.0"
        CIDR: "25"
        MASK: "255.255.255.128"
      DEST:
        ADDRESS: "10.11.128.0"
        CIDR: "25"
        MASK: "255.255.255.128"
    - PERMIT: False
      PROTOCOL: ip
      SOURCE:
        ADDRESS: any
        CIDR:
        MASK:
      DEST:
        ADDRESS: any
        CIDR:
        MASK:


Sample from Galaxy:
dellos_system:
  leaf1:
    - type: ipv4
      name: ssh-only
      description: ipv4acl
      isextended: true
      seqlist:
        - number: 5
          ispermit: true
          protocol: tcp
          source: any
          src_condition: ack
          destination: any
          dest_condition: eq 22
          state: present
      ingress_intf:
        - name: fortyGigE 1/28
          state: present
      egress_intf:
        - name: fortyGigE 1/28
          state: present
      lineterminal:
       - line: vty 1
          state: present
        - line: vty 2
          state: absent
      state: present


-- 
You received this message because you are subscribed to the Google Groups 
"Ansible Project" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to ansible-project+unsubscr...@googlegroups.com.
To post to this group, send email to ansible-project@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/ansible-project/BN6PR03MB2723FAD8739C45A791C0833EDD3F0%40BN6PR03MB2723.namprd03.prod.outlook.com.
For more options, visit https://groups.google.com/d/optout.

<<attachment: winmail.dat>>