diff --git a/geant/gap_ansible/playbooks/update_pe_sdp_mesh.yaml b/geant/gap_ansible/playbooks/update_pe_sdp_mesh.yaml
index a895eecec53508de7de90073063f54fb891cad3a..48010d54f287a8d8cc27fe31aaf4352fe4dfb3d9 100644
--- a/geant/gap_ansible/playbooks/update_pe_sdp_mesh.yaml
+++ b/geant/gap_ansible/playbooks/update_pe_sdp_mesh.yaml
@@ -2,4 +2,5 @@
hosts: all
gather_facts: false
roles:
- - ../roles/promote_p_to_pe
+ # - ../roles/promote_p_to_pe
+ - ../roles/sdp
diff --git a/geant/gap_ansible/roles/sdp/README.md b/geant/gap_ansible/roles/sdp/README.md
new file mode 100644
index 0000000000000000000000000000000000000000..5beb3179d79f7f2fd6b8ffdbe022c156224f113a
--- /dev/null
+++ b/geant/gap_ansible/roles/sdp/README.md
@@ -0,0 +1,29 @@
+# Role Name
+
+Role to manage l2circuits/epipes in multivendor network.
+
+## Requirements
+
+GEANT custom netconf module with Nokia "commit_comment" and "config_mode" features.
+
+## Role Variables
+
+- vars/main.yaml
+- external inventory (group_vars)
+- orchestrator (GSO)
+
+## Dependencies
+
+n/a
+
+## Example Playbook
+
+Role is supposed to be driven by GSO.
+
+## License
+
+MIT
+
+## Author Information
+
+A. Kurbatov. GEANT Orchestration and Automation Team (GOAT).
diff --git a/geant/gap_ansible/roles/sdp/defaults/main.yml b/geant/gap_ansible/roles/sdp/defaults/main.yml
new file mode 100644
index 0000000000000000000000000000000000000000..c237689481280060bc7df9817c6c322ece073342
--- /dev/null
+++ b/geant/gap_ansible/roles/sdp/defaults/main.yml
@@ -0,0 +1,2 @@
+---
+# defaults file for sdp
diff --git a/geant/gap_ansible/roles/sdp/handlers/main.yml b/geant/gap_ansible/roles/sdp/handlers/main.yml
new file mode 100644
index 0000000000000000000000000000000000000000..790d04dfab1d908950f3eaea0707dfc45a95124f
--- /dev/null
+++ b/geant/gap_ansible/roles/sdp/handlers/main.yml
@@ -0,0 +1,2 @@
+---
+# handlers file for sdp
diff --git a/geant/gap_ansible/roles/sdp/meta/main.yml b/geant/gap_ansible/roles/sdp/meta/main.yml
new file mode 100644
index 0000000000000000000000000000000000000000..8e604b5cb0805547e07ac3a9a3da3eaf8d89d0f8
--- /dev/null
+++ b/geant/gap_ansible/roles/sdp/meta/main.yml
@@ -0,0 +1,36 @@
+galaxy_info:
+ author: A. Kurbatov
+ description: GEANT Orchestration and Automation Team
+ company: GEANT
+
+ # If the issue tracker for your role is not on github, uncomment the
+ # next line and provide a value
+ # issue_tracker_url: http://example.com/issue/tracker
+
+ # Choose a valid license ID from https://spdx.org - some suggested licenses:
+ # - BSD-3-Clause (default)
+ # - MIT
+ # - GPL-2.0-or-later
+ # - GPL-3.0-only
+ # - Apache-2.0
+ # - CC-BY-4.0
+ license: MIT
+
+ min_ansible_version: "2.10"
+
+ # If this a Container Enabled role, provide the minimum Ansible Container version.
+ # min_ansible_container_version:
+
+ galaxy_tags:
+ - network
+ # List tags for your role here, one per line. A tag is a keyword that describes
+ # and categorizes the role. Users find roles by searching for tags. Be sure to
+ # remove the '[]' above, if you add tags to this list.
+ #
+ # NOTE: A tag is limited to a single word comprised of alphanumeric characters.
+ # Maximum 20 tags per role.
+
+dependencies:
+ []
+ # List your role dependencies here, one per line. Be sure to remove the '[]' above,
+ # if you add dependencies to this list.
diff --git a/geant/gap_ansible/roles/sdp/tasks/compile.yaml b/geant/gap_ansible/roles/sdp/tasks/compile.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..8e1281163e67790903a49fc69a537e0810a14cb4
--- /dev/null
+++ b/geant/gap_ansible/roles/sdp/tasks/compile.yaml
@@ -0,0 +1,14 @@
+---
+- name: Set ansible host to localhost to compile template
+ ansible.builtin.set_fact:
+ ansible_host: "localhost"
+ ansible_connection: local
+
+- name: Print the template in "/var/tmp/ansible_run_{{ opid }}/SDP.conf"
+ ansible.builtin.template:
+ src: "routers/nokia/{{ verb }}/sdp.j2"
+ dest: "/var/tmp/ansible_run_{{ opid }}/SDP.conf"
+ lstrip_blocks: true
+ trim_blocks: true
+ mode: "0755"
+ delegate_to: localhost
diff --git a/geant/gap_ansible/roles/sdp/tasks/connection_tasks.yaml b/geant/gap_ansible/roles/sdp/tasks/connection_tasks.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..da9016ea834f7c0e1d3907c6fa552cb7bdf83570
--- /dev/null
+++ b/geant/gap_ansible/roles/sdp/tasks/connection_tasks.yaml
@@ -0,0 +1,29 @@
+---
+# Connection tasks for SDP role
+#
+- name: Set ansible_host to terminal server when router is offline
+ when: subscription.router.router_access_via_ts | ansible.builtin.bool and
+ inventory_hostname == subscription.router.router_fqdn
+ ansible.builtin.set_fact:
+ ansible_host: "{{ subscription.router.router_site.site_ts_address }}"
+ ansible_port: "{{ subscription.router.router_ts_port }}"
+
+- name: Load netconf connection config for subscription router
+ when: inventory_hostname == subscription.router.router_fqdn
+ ansible.builtin.set_fact:
+ ansible_connection: "{{ netconf_access[subscription.router.vendor].ansible_connection }}"
+ ansible_network_os: "{{ netconf_access[subscription.router.vendor].ansible_network_os }}"
+
+# - name: Debug hostvars
+# ansible.builtin.debug:
+# var: hostvars[inventory_hostname].vendor
+
+- name: Set ansible_host back to the {{ inventory_hostname }}
+ ansible.builtin.set_fact:
+ ansible_host: "{{ inventory_hostname }}"
+
+- name: Load netconf connection config for mesh routers
+ when: inventory_hostname != subscription.router.router_fqdn
+ ansible.builtin.set_fact:
+ ansible_connection: "{{ netconf_access[hostvars[inventory_hostname].vendor].ansible_connection }}"
+ ansible_network_os: "{{ netconf_access[hostvars[inventory_hostname].vendor].ansible_network_os }}"
diff --git a/geant/gap_ansible/roles/sdp/tasks/main.yml b/geant/gap_ansible/roles/sdp/tasks/main.yml
new file mode 100644
index 0000000000000000000000000000000000000000..356a4abd942d0e77e8a9daae199953741ab35a35
--- /dev/null
+++ b/geant/gap_ansible/roles/sdp/tasks/main.yml
@@ -0,0 +1,34 @@
+---
+# main tasks for SDP
+#
+- name: Print the usage
+ when: (verb is not defined) or (verb not in verbs)
+ ansible.builtin.debug:
+ msg:
+ - "'verb' keyword is mandatory. Usage: -e verb=$verb"
+
+- name: Print defined verbs
+ when: (verb is not defined) or (verb not in verbs)
+ ansible.builtin.debug:
+ msg:
+ - "Allowed verb: {{ item }}"
+ loop: "{{ verbs }}"
+
+- name: Stop if arguments are incorrect
+ when: (verb is not defined) or (verb not in verbs)
+ ansible.builtin.meta: end_play
+
+- name: Include standard tasks
+ ansible.builtin.include_tasks: standard_tasks.yaml
+
+- name: Include merge vars tasks
+ ansible.builtin.include_tasks: merge_vars.yaml
+
+- name: Include config compilation tasks
+ ansible.builtin.include_tasks: compile.yaml
+
+- name: Include connection tasks
+ ansible.builtin.include_tasks: connection_tasks.yaml
+
+- name: Include config deployment tasks
+ ansible.builtin.include_tasks: push_config.yaml
diff --git a/geant/gap_ansible/roles/sdp/tasks/merge_vars.yaml b/geant/gap_ansible/roles/sdp/tasks/merge_vars.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..fe6c16fecf0707a3a971ade31e11152e46bd1ce0
--- /dev/null
+++ b/geant/gap_ansible/roles/sdp/tasks/merge_vars.yaml
@@ -0,0 +1,13 @@
+---
+# merge vars for SDP
+- name: Import variables from 'all'
+ ansible.builtin.include_vars:
+ dir: /opt/ansible_inventory/group_vars/all
+
+- name: Import routers variables
+ ansible.builtin.include_vars:
+ dir: /opt/ansible_inventory/group_vars/routers
+
+- name: Select SDP params for l2ciruit-type
+ ansible.builtin.set_fact:
+ sdp_type: "{{ (sdp_types | selectattr('id', 'equalto', '1'))[0] }}"
diff --git a/geant/gap_ansible/roles/sdp/tasks/push_config.yaml b/geant/gap_ansible/roles/sdp/tasks/push_config.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..8ac1c0e9a8037fc185bd0ef1d5934e40dd5df92c
--- /dev/null
+++ b/geant/gap_ansible/roles/sdp/tasks/push_config.yaml
@@ -0,0 +1,36 @@
+---
+- name: Config deploy [CHECK ONLY][NOKIA]
+ when: >
+ dry_run | ansible.builtin.bool
+ geant.gap_ansible.nokia_netconf_config:
+ format: xml
+ default_operation: merge
+ content: "{{ lookup('ansible.builtin.file', '/var/tmp/ansible_run_{{ opid }}/SDP.conf') }}"
+ commit: true
+ validate: true
+ config_mode: private
+ diff: true
+ register: output
+ check_mode: true
+
+- name: Fail if config diff is detected
+ when: >
+ output.changed | ansible.builtin.bool
+ and
+ is_verification_workflow | ansible.builtin.bool
+ ansible.builtin.fail:
+ msg: >
+ The config for {{ subscription.description }} has drifted!
+
+- name: Config deploy [REAL][NOKIA]
+ when: >
+ not dry_run | ansible.builtin.bool
+ geant.gap_ansible.nokia_netconf_config:
+ format: xml
+ default_operation: merge
+ content: "{{ lookup('ansible.builtin.file', '/var/tmp/ansible_run_{{ opid }}/SDP.conf') }}"
+ commit: true
+ commit_comment: "{{ commit_comment }}"
+ config_mode: private
+ diff: true
+ register: output
diff --git a/geant/gap_ansible/roles/sdp/tasks/standard_tasks.yaml b/geant/gap_ansible/roles/sdp/tasks/standard_tasks.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..4772e5bba9ad6a0f39f7a8cc6bd4b019e4cf568d
--- /dev/null
+++ b/geant/gap_ansible/roles/sdp/tasks/standard_tasks.yaml
@@ -0,0 +1,15 @@
+---
+- name: Generate an ID for this run
+ ansible.builtin.set_fact:
+ opid: "{{ lookup('community.general.random_string', length=18, special=false) }}"
+
+- name: Print the ID
+ ansible.builtin.debug:
+ msg: "{{ opid }}"
+
+- name: Create a folder for all compiled output
+ ansible.builtin.file:
+ path: "/var/tmp/ansible_run_{{ opid }}"
+ state: directory
+ mode: "0755"
+ delegate_to: localhost
diff --git a/geant/gap_ansible/roles/sdp/templates/routers/nokia/add_pe_to_sdp_mesh/sdp.j2 b/geant/gap_ansible/roles/sdp/templates/routers/nokia/add_pe_to_sdp_mesh/sdp.j2
new file mode 100644
index 0000000000000000000000000000000000000000..97dee48bf7586b8b7b495dcf45ba78e8c1c575f9
--- /dev/null
+++ b/geant/gap_ansible/roles/sdp/templates/routers/nokia/add_pe_to_sdp_mesh/sdp.j2
@@ -0,0 +1,25 @@
+<config xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" xmlns:alu="urn:ietf:params:xml:ns:netconf:base:1.0">
+ <configure xmlns="urn:nokia.com:sros:ns:yang:sr:conf">
+ <service xmlns="urn:nokia.com:sros:ns:yang:sr:conf" xmlns:nc="urn:ietf:params:xml:ns:netconf:base:1.0" xmlns:nokia-attr="urn:nokia.com:sros:ns:yang:sr:attributes">
+ {% if pe_router_list|length != 0 %}
+ {% for pe_fqdn, pe_addr in pe_router_list.items() %}
+ {% set sdp_id = pe_addr.lo4 | replace(sdp_prefix_regex, '') | replace('.', '') + sdp_type.id %}
+ <sdp alu:operation="replace">
+ <sdp-id>{{ sdp_id }}</sdp-id>
+ <admin-state>enable</admin-state>
+ <description>{{ pe_fqdn }}</description>
+ <delivery-type>mpls</delivery-type>
+ <path-mtu>{{ sdp_type.path_mtu }}</path-mtu>
+ {% if sdp_type.signaling is defined %}
+ <signaling>{{ sdp_type.signaling}}</signaling>
+ {% endif %}
+ <sr-isis>{{ sdp_type.sr_isis | lower }}</sr-isis>
+ <far-end>
+ <ip-address>{{ pe_addr.lo4 }}</ip-address>
+ </far-end>
+ </sdp>
+ {% endfor %}
+ {% endif %}
+ </service>
+ </configure>
+</config>
diff --git a/geant/gap_ansible/roles/sdp/templates/routers/nokia/remove_pe_from_sdp_mesh/sdp.j2 b/geant/gap_ansible/roles/sdp/templates/routers/nokia/remove_pe_from_sdp_mesh/sdp.j2
new file mode 100644
index 0000000000000000000000000000000000000000..7101bbf9df2331cd141efb89ee8ac7142040ba6d
--- /dev/null
+++ b/geant/gap_ansible/roles/sdp/templates/routers/nokia/remove_pe_from_sdp_mesh/sdp.j2
@@ -0,0 +1,14 @@
+<config xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" xmlns:alu="urn:ietf:params:xml:ns:netconf:base:1.0">
+ <configure xmlns="urn:nokia.com:sros:ns:yang:sr:conf">
+ <service xmlns="urn:nokia.com:sros:ns:yang:sr:conf" xmlns:nc="urn:ietf:params:xml:ns:netconf:base:1.0" xmlns:nokia-attr="urn:nokia.com:sros:ns:yang:sr:attributes">
+ {% if pe_router_list|length != 0 %}
+ {% for pe_fqdn, pe_addr in pe_router_list.items() %}
+ {% set sdp_id = pe_addr.lo4 | replace(sdp_prefix_regex, '') | replace('.', '') + sdp_type.id %}
+ <sdp alu:operation="delete">
+ <sdp-id>{{ sdp_id }}</sdp-id>
+ </sdp>
+ {% endfor %}
+ {% endif %}
+ </service>
+ </configure>
+</config>
diff --git a/geant/gap_ansible/roles/sdp/vars/main.yml b/geant/gap_ansible/roles/sdp/vars/main.yml
new file mode 100644
index 0000000000000000000000000000000000000000..f82ca8806af8209772cf7cab340edda770acfd0e
--- /dev/null
+++ b/geant/gap_ansible/roles/sdp/vars/main.yml
@@ -0,0 +1,8 @@
+---
+# vars file for sdp
+dry_run: true
+is_verification_workflow: false
+
+verbs:
+ - add_pe_to_sdp_mesh
+ - remove_pe_from_sdp_mesh