Need assistance in Regex

Archives Ansible Project
1

I’m trying to add new IP address (10.97.6.12) in firewall, Before adding, I’m validating whether the new IP already exists in firewall or not.

Task:

  • set_fact:
    existing: “{{ result | json_query(‘objects[*].value’) | select(‘match’,( intip )) | list }}”

output:

TASK [set_fact] **************************************************************************************************************************************************************task path: /home/palo-test/json.yml:32
ok: [192.168.0.40] => {

“ansible_facts”: {
“existing”: [
“10.96.6.120”,
“10.96.6.125”
]
},
“changed”: false
}

Regex in set_fact is considering existing Ip objects 10.96.6.120 and 10.96.6.125 as 10.96.6.12. Need help to matching the exact IP.

2

Without knowing what your 'result' data structure looks like, doing
string matching with IP addressing is almost certainly going to be
problematic.
I assume you don't want to have problems.
So, what does your 'result' data look like?

3

Thank you for you response. Here is the result data.

{
“objects”: [
{
“description”: null,
“name”: “OUTSIDE”,
“tag”: null,
“type”: “ip-netmask”,
“value”: “10.97.7.37/27”
},
{
“description”: null,
“name”: “INSIDE”,
“tag”: null,
“type”: “ip-netmask”,
“value”: “10.97.7.133/27”
},
{
“description”: null,
“name”: “INTERNET”,
“tag”: null,
“type”: “ip-netmask”,
“value”: “10.97.6.36/27”
},
{
“description”: null,
“name”: “Default”,
“tag”: null,
“type”: “ip-netmask”,
“value”: “0.0.0.0/0”
},
{
“description”: null,
“name”: “Dummy_server”,
“tag”: null,
“type”: “ip-netmask”,
“value”: “10.96.15.254”
},
{
“description”: null,
“name”: “VPN_Subnet”,
“tag”: null,
“type”: “ip-netmask”,
“value”: “10.16.24.0/22”
},
{
“description”: null,
“name”: “Internal”,
“tag”: null,
“type”: “ip-netmask”,
“value”: “10.97.12.120”
},
{
“description”: null,
“name”: “test”,
“tag”: null,
“type”: “ip-netmask”,
“value”: “10.96.6.120”
},
{
“description”: null,
“name”: “test1”,
“tag”: null,
“type”: “ip-netmask”,
“value”: “10.96.6.125”
}
]
}

Regards,
Sri

4

If you want 'existing' to be a boolean, then you can simple check if
the IP is in the list.
Assuming 'intip' is the IP for which you want to test this:

   - set_fact:
        existing: "{{ intip in result|json_query('objects.value') }}"

The 'result' structure has some subnets as well, I'm not sure if it
would be a problem when you try to add an IP address that is inside
one of those subnets (I guess so). For instance, 10.97.7.55 would be
part of 10.97.7.37/27, but 'existing' would still return false.
If you want that to be covered, you'd have to glue some ipaddr login in between:

https://docs.ansible.com/ansible/latest/user_guide/playbooks_filters_ipaddr.html