nd_interface_port_channel_access module

[allenrobel]

Related Issue(s)

(none)

Proposed Changes

Adds nd_interface_port_channel_access for managing accessPoHost port-channel interfaces on ND 4.2 fabrics. The PC policy is the single source of truth for members (the ports list); ND propagates access-mode configuration to member interfaces — users do not pre-configure members.

• PortChannelAccessInterfaceModel — Pydantic policy/payload model targeting accessPoHost, composite identifier (switch_ip, interface_name), all access-mode policy fields plus port-channel specifics (ports, copy_description, port_channel_mode, lacp_rate, lacp_port_priority, lacp_suspend).
• PortChannelBaseOrchestrator — shared CRUD base extending NDBaseInterfaceOrchestrator. Uses EpManageInterfacesRemove for delete (PCs are virtual/deletable like loopbacks). Filters query_all by interfaceType="portChannel" and per-subclass policy-type set.
• PortChannelAccessInterfaceOrchestrator — concrete subclass binding model_class and the accessPoHost policy-type filter.
• plugins/module_utils/models/interfaces/enums.py — first introduction on this branch; contains AccessPoHostPolicyTypeEnum, PortChannelModeEnum, LacpRateEnum, plus access-mode enums that will be shared with future trunk-host work (BpduFilter, BpduGuard, DuplexMode, Mtu, Speed, StormControlAction).

Branch base: stacked on nd_interface_loopback for the base interface infrastructure (NDBaseInterfaceOrchestrator, FabricContext, manage_interfaces endpoints, base interface models).

Test Notes

Unit tests

Adapted from the ethernet_trunk_host unit-test trio:

• tests/unit/module_utils/models/test_port_channel_access_interface.py — 114 cases covering policy/network_os/config_data/interface model defaults, alias population, normalize_policy_type, normalize_ports, range/enum validation, AsciiDescription, serializer modes, to_payload / to_config / from_response / from_config round-trips, composite identifier, get_diff, merge, and get_argument_spec.
• tests/unit/module_utils/orchestrators/test_port_channel_access_interface.py — 8 cases covering model_class, bulk-support flags, _managed_policy_types == {"accessPoHost"}, and PortChannelBaseOrchestrator.query_all filtering by interfaceType and policyType, plus fabric-not-found and per-switch 404 paths.
• tests/unit/module_utils/fixtures/fixture_data/test_port_channel_access_interface.json — fabric summary, deploymentFreeze, switches, and per-switch interfaces fixtures for the orchestrator tests.

To run:

python -m pytest tests/unit/module_utils/models/test_port_channel_access_interface.py tests/unit/module_utils/orchestrators/test_port_channel_access_interface.py

122/122 pass. Full unit suite (558 tests) green; black/isort clean.

Integration tests

Cover: create / multi-create across switches, idempotency, update access_vlan and description, add member to PC, remove member from PC, state: replaced, state: overridden (incl. interfaceType filter check), state: deleted with member-revert path, deploy: false staging, and non-existent delete no-op.

Tests passed end-to-end on a 9000v testbed against ND 4.2 (192.168.7.8 / fabric_1 / leaf at 192.168.12.151).

The test target uses module_defaults: { cisco.nd.nd_interface_port_channel_access: { timeout: 300 } } to scope a 300s timeout to PC tests — port-channel deploys (build bundle, pull members, apply LACP) routinely exceed the default 30s on slower testbeds. Scoped at the test target level so we don't touch shared nd_argument_spec defaults.

To run:

ansible-test network-integration nd_interface_port_channel_access -v

Required [nd:vars] entries (in tests/integration/inventory.networking):

nd_test_fabric_name=<fabric>
nd_test_switch_ip=<switch IP>
nd_test_pc_member_a=Ethernet1/10
nd_test_pc_member_b=Ethernet1/11
nd_test_pc_member_c=Ethernet1/12
nd_test_pc_member_d=Ethernet1/13

The four member ethernets must exist on the target switch and not currently belong to any other port-channel (the SETUP cleanup at the start of each state file resets them).

Cisco Nexus Dashboard Version

4.2

Related ND API Resource Category

• analyze
• infra
• manage
• onemanage
• other

Checklist

• Latest commit is rebased from base branch with merge conflicts resolved
• New or updates to documentation has been made accordingly
• Assigned the proper reviewers

🤖 Generated with Claude Code