Network Automation For Beginners | CI CD Pipeline

This is the 3rd video covering my first CI/CD network automation pipeline. In the first two videos we covered what is network automation and CI/CD pipelines, configured Docker, Drone servers, GitHub OAuth integration, python scripts for Cisco network automation, yaml configuration files, python format checking, Batfish networking config checks and other CI/CD topics. In today's video, we are building on all that an implementing two additional config checks and configuration steps with Nornir. The coolest part is we're doing so in a way that allows us to use GitHub as a configuration source control with an approval component.
If you missed Part 1, check it out here: kzbin.info/www/bejne/eHazZaRmeNOib5o
If you missed Part 2, check it out here: kzbin.info/www/bejne/mpfXcqqNh6drgac
My pipeline is based off of this blog by JulioPDX. This is an amazing blog series he did and he was super helpful in answering my questions as I worked (aka fumbled) my way through learning about these technologies:
juliopdx.com/2021/10/20/building-a-network-ci/cd-pipeline-part-1/
My GitHub repo for this pipeline can be found here:
github.com/JohnBreth/CICD
Music provided by: mccoybeats.com/
00:00 - Intro
01:33 - Part 2 Recap
04:47 - Nornir Python Script
11:03 - Nornir YAML files
13:59 - Drone YAML Config File Updates
17:37 - Clone Repo and Make Network Config Changes
20:15 - Network Admin GitHub Pull Request and Approval
23:16 - Removing Interface via Network Automation
28:45 - Wrap Up
#cicd #devops #networkautomation
**Below you'll find what are known as affiliate links. These are links to things that I actually use and recommend. If you buy them, I will receive a super small kickback that helps support this channel and the giveaways I do on social media. Thanks!!**
(KZbin Gear, IT Devices, Books, Pre-workout I use...STUFF I 100% RECOMMEND)
Here is the Comptia Pentest+ training book bundle I used to pass the new PenTest+.
(Affiliate Link) - amzn.to/3A9X8Hx
Network+ Study Guide that I co-authored: amzn.to/2vTODU2
ECAMM Live Recording Software : www.ecamm.com/mac/ecammlive/?fp_ref=john57
Amazon Affiliate Store: www.amazon.com/shop/jbizzle703
----------------------------------------------------------------------------------------------------------------------------------------
Subscribe to our monthly newsletter and blog notifications
👍 mailchi.mp/e7b56addb7fc/cybersightblog
C-----Y-----B-----E-----R-----I-----N-----S-----I-----G-----H-----T
J.B.C.'s Site ▶️www.jbcsec.com/insights
Swag Store ▶️ www.teepublic.com/user/jbc
Twitter ▶️ JBC_SEC
Author ▶️ JBizzle703
----------------------------------------------------------------------------------------------------------------------------------------

[@CYBERINSIGHT]

00:00 - Intro 01:33 - Part 2 Recap 4:47 - Nornir Python Script 11:03 - Nornir YAML files 13:59 - Drone YAML Config File Updates 17:37 - Clone Repo and Make Network Config Changes 20:15 - Network Admin GitHub Pull Request and Approval 23:16 - Removing Interface via Network Automation 28:45 - Wrap Up

[@stephenaustin1118]

Well done for making these!

[@user-tb4hk5nq5c]

Is it possible in Ansible\Nornir to create a candidate config (after previusly check running-config on devices) for verification in Batfish? For example, Ansible\Nornir connects to devices, gets current configs, generates candidate-config within task (change ALC, for ex) based on current config and sends it for Batfish for verification and only after Batfish's exam Ansible\Nornir deploy candidate-config on devices. Edit the configuration manually in "snapshots/configs/" is great in the laboratory, but even the task of adding a description to a port on hundreds of devices becomes unrealistic. On the other side, I also don’t want to make test in production, collecting configs after deployment for Batfish.

[@nikhilpatel4278]

Thanks For this Video Tutorial! Excellent! I have just one question - the target devices in the series of video were switches - but I could not see them anywhere in the video - is it mocked with server by any chance ??

[@CYBERINSIGHT]

I think I briefly show them in Cisco CML in vid 2 in the "Show IP Int Bri chapter". So, they are virtual switches and not real ones.

[@Syntaxstic]

Can this be implemented into gitlab?

[@CYBERINSIGHT]

I haven't done it, you would just need to see the specifics behind GitLab to Drone API communication.