darrenqu.net

automation

Automation

Automating network operations: device access over SSH and RESTCONF, parsing CLI output, and pulling data out of vendor and cloud APIs.

Automation

Network IaC, Part 3: Deployment and Drift Detection

Deploying reviewed network changes from a separate repository whose runner is the only CI runner that can read the device credentials, with a removal guard, a convergence gate, and a scheduled job that tells drift apart from a change that simply hasn't been deployed yet. Including the bugs a review found in the first version.

5455 words 26 min

ansibleci

Automation

Network IaC, Part 2: CI a Team Can Trust

Putting the Ansible model from part 1 under Gitea Actions, twice: once for one person, then again for a team. What a clean checkout found, where the secrets were leaking, and how to compute a full change plan without ever handing CI a device password.

4341 words 21 min

ansibleci