Page MenuHomeVyOS Platform

evgmol (Evgeny Molotkov)
Operations

User Details

User Since
Oct 25 2024, 9:10 PM (85 w, 4 d)

Recent Activity

Sun, Jun 14

evgmol closed T8348: Add interface option to VRRP address attribute as Resolved.
Sun, Jun 14, 8:29 PM · VyOS Ansible Collection
evgmol added a comment to T8348: Add interface option to VRRP address attribute.

This task is covered by https://github.com/vyos/vyos.vyos/pull/438

Sun, Jun 14, 8:28 PM · VyOS Ansible Collection
evgmol updated subscribers of T8516: Add unit tests for vyos_l3_interfaces module.
Sun, Jun 14, 7:32 PM · VyOS Ansible Collection
evgmol created T8989: Ansible collection for managing VyOS via REST API.
Sun, Jun 14, 10:01 AM · VyOS Rolling

Thu, Jun 11

evgmol changed the status of T8983: vyos.vyos.vyos_logging_global incompatibility with VyOS1.5 LTS from Open to In progress.
Thu, Jun 11, 7:48 PM · VyOS Rolling
evgmol created T8983: vyos.vyos.vyos_logging_global incompatibility with VyOS1.5 LTS.
Thu, Jun 11, 7:42 PM · VyOS Rolling

Apr 13 2026

evgmol closed T7621: Running a "delete" in ansible will prevent subsequent "set" from being applied as Resolved.
Apr 13 2026, 7:29 PM · VyOS Ansible Collection
evgmol closed T8104: Static_routes combination for address and interface in next-hop as Resolved.
Apr 13 2026, 7:28 PM · VyOS Ansible Collection

Apr 10 2026

evgmol claimed T6826: Implement gather facts as action plugin.
Apr 10 2026, 11:21 PM · VyOS Ansible Collection
evgmol claimed T8040: vyos.vyos.vyos_config can't use templates anymore with ansible 2.19 and 2.20.
Apr 10 2026, 11:20 PM · VyOS Ansible Collection
evgmol changed the status of T8040: vyos.vyos.vyos_config can't use templates anymore with ansible 2.19 and 2.20 from Blocked to Needs testing.
Apr 10 2026, 11:20 PM · VyOS Ansible Collection
evgmol added a comment to T8040: vyos.vyos.vyos_config can't use templates anymore with ansible 2.19 and 2.20.

@GideonKuijt @gaige
Netcommon v8.4.0 seems to be free of this issue - kindly check for yourself and advise

Apr 10 2026, 11:19 PM · VyOS Ansible Collection

Apr 6 2026

evgmol closed T8205: user_module fails to recognize values when using aggregate as Resolved.
Apr 6 2026, 7:23 PM · VyOS Ansible Collection

Mar 20 2026

evgmol changed the status of T6820: Ansible module for High Availability configuration (VRRP) from Open to Needs testing.
Mar 20 2026, 10:33 AM · VyOS Ansible Collection
evgmol closed T6836: Add VRF support to VyOS Ansible Collection as Resolved.
Mar 20 2026, 10:32 AM · VyOS Ansible Collection
evgmol closed T8220: VyOS Ansible module that implements Firewall Zone Policy as Resolved.
Mar 20 2026, 10:32 AM · VyOS Ansible Collection

Mar 7 2026

evgmol added a comment to T8349: Add VRF support to vyos.vyos.vyos_interface module.

https://github.com/vyos/vyos.vyos/pull/449

Mar 7 2026, 10:12 PM · VyOS Ansible Collection
evgmol renamed T8349: Add VRF support to vyos.vyos.vyos_interface module from Add VRF support to vyos.vyos.vyos_l3_interface module to Add VRF support to vyos.vyos.vyos_interface module.
Mar 7 2026, 10:12 PM · VyOS Ansible Collection

Mar 6 2026

evgmol added a comment to T8349: Add VRF support to vyos.vyos.vyos_interface module.

It is likely extension to vyos.vyos.vyos_l3_interface module

Mar 6 2026, 10:44 AM · VyOS Ansible Collection
evgmol created T8349: Add VRF support to vyos.vyos.vyos_interface module.
Mar 6 2026, 10:44 AM · VyOS Ansible Collection
evgmol renamed T8348: Add interface option to VRRP address attribute from Add interface option to VRRP address attribure to Add interface option to VRRP address attribute.
Mar 6 2026, 10:41 AM · VyOS Ansible Collection
evgmol created T8348: Add interface option to VRRP address attribute.
Mar 6 2026, 10:37 AM · VyOS Ansible Collection

Mar 3 2026

evgmol added a comment to T8321: Add VPN IPSec support to VyOS Ansible Collection.

@SrividyaA hi!

Mar 3 2026, 8:18 PM · VyOS Ansible Collection

Mar 2 2026

evgmol added a comment to T7284: Delete firewall description not possible.

Hi @RubenNL
Do you plan to work on this one or you are OK to delegate / re-assign?
You mentioned a PR - can you please advise the number

Mar 2 2026, 6:57 PM · VyOS Ansible Collection
evgmol closed T7320: Ansible module not 100% compatible with Paramiko (fallback ssh client) as Resolved.
Mar 2 2026, 6:55 PM · VyOS Ansible Collection
evgmol added a comment to T7320: Ansible module not 100% compatible with Paramiko (fallback ssh client).

https://github.com/vyos/vyos.vyos/pull/409 merged - closing this off

Mar 2 2026, 6:54 PM · VyOS Ansible Collection
evgmol added a comment to T7496: Can't disable `ipv6-src-route` after enabling it .

I see you created this ticket and self-assigned to.
Do you plan to work on the bugfix or you are OK to delegate?

Mar 2 2026, 6:53 PM · VyOS Ansible Collection

Mar 1 2026

evgmol claimed T8104: Static_routes combination for address and interface in next-hop.
Mar 1 2026, 5:38 AM · VyOS Ansible Collection
evgmol claimed T8321: Add VPN IPSec support to VyOS Ansible Collection.
Mar 1 2026, 5:37 AM · VyOS Ansible Collection
evgmol claimed T8323: Add NAT support to VyOS Ansible Collection.
Mar 1 2026, 5:37 AM · VyOS Ansible Collection

Feb 26 2026

evgmol added a comment to T8205: user_module fails to recognize values when using aggregate.

https://github.com/vyos/vyos.vyos/pull/445

Feb 26 2026, 7:36 PM · VyOS Ansible Collection
evgmol added a comment to T6836: Add VRF support to VyOS Ansible Collection.

https://github.com/vyos/vyos.vyos/pull/408

Feb 26 2026, 7:30 PM · VyOS Ansible Collection

Feb 15 2026

evgmol changed the status of T8040: vyos.vyos.vyos_config can't use templates anymore with ansible 2.19 and 2.20 from Open to Blocked.
Feb 15 2026, 7:30 PM · VyOS Ansible Collection
evgmol claimed T8205: user_module fails to recognize values when using aggregate.
Feb 15 2026, 7:29 PM · VyOS Ansible Collection

Feb 7 2026

evgmol changed the status of T6836: Add VRF support to VyOS Ansible Collection from Open to Needs testing.
Feb 7 2026, 12:05 PM · VyOS Ansible Collection

Jan 30 2026

evgmol added a comment to T8220: VyOS Ansible module that implements Firewall Zone Policy.

Created https://internal.jira.vyos.com/browse/VD-2822

Jan 30 2026, 3:02 AM · VyOS Ansible Collection
evgmol changed the status of T8220: VyOS Ansible module that implements Firewall Zone Policy from Open to Confirmed.
Jan 30 2026, 2:55 AM · VyOS Ansible Collection
evgmol removed projects from T8220: VyOS Ansible module that implements Firewall Zone Policy: VyOS 1.4 Sagitta (1.4.4), VyOS Rolling.
Jan 30 2026, 2:54 AM · VyOS Ansible Collection
evgmol added a project to T8220: VyOS Ansible module that implements Firewall Zone Policy: VyOS Ansible Collection.
Jan 30 2026, 2:52 AM · VyOS Ansible Collection

Jan 24 2026

evgmol added a comment to T6820: Ansible module for High Availability configuration (VRRP).

Dev work is under https://github.com/vyos/vyos.vyos/pull/438

Jan 24 2026, 4:50 AM · VyOS Ansible Collection

Jan 21 2026

evgmol added a comment to T8040: vyos.vyos.vyos_config can't use templates anymore with ansible 2.19 and 2.20.

That's awesome - thanks

Jan 21 2026, 8:41 PM · VyOS Ansible Collection

Jan 19 2026

evgmol added a comment to T8152: Re-instate (vyos.vyos.vyos_command) module parameter support for answer, prompt.

New Playbook

Jan 19 2026, 8:26 PM · VyOS Ansible Collection

Jan 17 2026

evgmol updated subscribers of T8152: Re-instate (vyos.vyos.vyos_command) module parameter support for answer, prompt.

@nicolas Fort @Srividya Anantapatnaikuni here is the solution

Jan 17 2026, 12:05 AM · VyOS Ansible Collection

Jan 10 2026

evgmol closed T8152: Re-instate (vyos.vyos.vyos_command) module parameter support for answer, prompt as Resolved.
Jan 10 2026, 10:00 PM · VyOS Ansible Collection

Jan 5 2026

evgmol added a comment to T8152: Re-instate (vyos.vyos.vyos_command) module parameter support for answer, prompt.

This does not look like a bug but rather as the module mis-use:

Jan 5 2026, 9:06 PM · VyOS Ansible Collection
evgmol claimed T8152: Re-instate (vyos.vyos.vyos_command) module parameter support for answer, prompt.
Jan 5 2026, 7:51 PM · VyOS Ansible Collection
evgmol created T8152: Re-instate (vyos.vyos.vyos_command) module parameter support for answer, prompt.
Jan 5 2026, 7:51 PM · VyOS Ansible Collection

Dec 19 2025

evgmol changed the status of T8104: Static_routes combination for address and interface in next-hop from In progress to Needs testing.
Dec 19 2025, 11:18 AM · VyOS Ansible Collection
evgmol added a comment to T8104: Static_routes combination for address and interface in next-hop.

https://github.com/vyos/vyos.vyos/pull/444

Dec 19 2025, 11:17 AM · VyOS Ansible Collection

Dec 17 2025

evgmol changed the status of T8104: Static_routes combination for address and interface in next-hop from Open to In progress.
Dec 17 2025, 7:59 PM · VyOS Ansible Collection
evgmol created T8104: Static_routes combination for address and interface in next-hop.
Dec 17 2025, 7:59 PM · VyOS Ansible Collection

Nov 30 2025

evgmol added a comment to T6821: Long config entries cause incorrect reading of device config .

@Apachez , @gaige Hello Guys!
How do we want to continue here, please?

Nov 30 2025, 7:19 PM · Bugs, VyOS Ansible Collection
evgmol added a comment to T7320: Ansible module not 100% compatible with Paramiko (fallback ssh client).

Are you able to update the status of this Mafifest, add a link to a new PR or other doc please?
Thank you

Nov 30 2025, 7:12 PM · VyOS Ansible Collection
evgmol added a comment to T7964: Edge case in T7260 fix.

Are you able to update the status of this Mafifest, add a link to PR or other doc please?
Thank you

Nov 30 2025, 7:11 PM · VyOS Ansible Collection
evgmol closed T7856: Firewall groups with same name as a zone gets confused by Ansible as Resolved.
Nov 30 2025, 7:11 PM · VyOS Ansible Collection
evgmol added a comment to T7284: Delete firewall description not possible.

Are you able to update the status of this Mafifest, add a link to PR or other doc please?
Thank you

Nov 30 2025, 7:10 PM · VyOS Ansible Collection
evgmol closed T7260: Firewall global - groups - Deleting last member not working as Resolved.
Nov 30 2025, 7:09 PM · VyOS Ansible Collection
evgmol closed T7236: Fix comparing of firewall rules as Resolved.
Nov 30 2025, 7:07 PM · VyOS Ansible Collection
evgmol closed T6823: Add option to configure autoconf (slaac) for ipv6 interfaces as Resolved.
Nov 30 2025, 7:07 PM · VyOS Ansible Collection
evgmol added a comment to T8040: vyos.vyos.vyos_config can't use templates anymore with ansible 2.19 and 2.20.

Thank you for the question.
The latest supported Ansible core version for this collection is 2.18.2
2.19+ unfortunately has a lot of changes that require the code rework, most notably, the community collections we use alongside with ours are not compatible as well (e.g. ansible.netcommon).
There is an issue https://github.com/vyos/vyos.vyos/issues/417 lodged to embrace 2.19+ at some point, but right now we have to wait for the adoption of this version by wider user base.

Nov 30 2025, 7:04 PM · VyOS Ansible Collection
evgmol closed T7933: got: offload found in config -> rule_sets -> rules' as Resolved.
Nov 30 2025, 6:58 PM · VyOS Ansible Collection

Nov 17 2025

evgmol added a comment to T7474: vrrp route tracking.

@Viacheslav @badger42 hi Guys! Why is this in the Ansible FR section?

Nov 17 2025, 7:34 PM

Nov 10 2025

evgmol closed T7698: Potential facts issue in 6.0.0 collection for VyOS 1.4.3 as Resolved.
Nov 10 2025, 7:43 PM · VyOS Ansible Collection

Oct 31 2025

evgmol changed the status of T7933: got: offload found in config -> rule_sets -> rules' from Open to In progress.
Oct 31 2025, 2:42 AM · VyOS Ansible Collection

Oct 30 2025

evgmol added a comment to T7933: got: offload found in config -> rule_sets -> rules'.

@lingfish hi!
Sorry for taking so long

Oct 30 2025, 9:58 PM · VyOS Ansible Collection

Oct 28 2025

evgmol claimed T7933: got: offload found in config -> rule_sets -> rules'.
Oct 28 2025, 10:45 AM · VyOS Ansible Collection

Oct 26 2025

evgmol closed T7943: Ansible dev build moved to 2.21, breaking sanity checks as Resolved.
Oct 26 2025, 11:18 AM · VyOS Ansible Collection

Oct 19 2025

evgmol claimed T7943: Ansible dev build moved to 2.21, breaking sanity checks.
Oct 19 2025, 11:56 AM · VyOS Ansible Collection

Oct 18 2025

evgmol added a comment to T7933: got: offload found in config -> rule_sets -> rules'.

@lingfish Hi!
Which module are you using?

Oct 18 2025, 8:03 PM · VyOS Ansible Collection

Aug 28 2025

evgmol added a comment to T6823: Add option to configure autoconf (slaac) for ipv6 interfaces.

Work is here https://github.com/vyos/vyos.vyos/pull/433

Aug 28 2025, 10:00 AM · VyOS Ansible Collection

Aug 25 2025

evgmol changed Issue type from feature to bug on T6823: Add option to configure autoconf (slaac) for ipv6 interfaces.
Aug 25 2025, 11:02 AM · VyOS Ansible Collection
evgmol changed the status of T6823: Add option to configure autoconf (slaac) for ipv6 interfaces from Open to In progress.
Aug 25 2025, 10:45 AM · VyOS Ansible Collection
evgmol added a comment to T6823: Add option to configure autoconf (slaac) for ipv6 interfaces.

The feature is really missing - I raised a PR to work on it https://github.com/vyos/vyos.vyos/pull/433

Aug 25 2025, 10:45 AM · VyOS Ansible Collection

Aug 24 2025

evgmol added a comment to T6823: Add option to configure autoconf (slaac) for ipv6 interfaces.

The feature is available in the latest Galaxy collection
https://galaxy.ansible.com/ui/repo/published/vyos/vyos/content/module/vyos_l3_interfaces/

Aug 24 2025, 11:40 PM · VyOS Ansible Collection
evgmol claimed T6823: Add option to configure autoconf (slaac) for ipv6 interfaces.
Aug 24 2025, 11:07 PM · VyOS Ansible Collection
evgmol changed the status of T6828: [vyos_config] Remove statements not in config from Needs testing to Needs reporter action.
Aug 24 2025, 8:11 PM · VyOS Ansible Collection

Aug 20 2025

evgmol changed the status of T7698: Potential facts issue in 6.0.0 collection for VyOS 1.4.3 from Open to In progress.
Aug 20 2025, 3:25 AM · VyOS Ansible Collection
evgmol added a comment to T7698: Potential facts issue in 6.0.0 collection for VyOS 1.4.3.

More in Slack https://vyos-community.slack.com/archives/C027BSYGHPT/p1754577533265449
In general:

Aug 20 2025, 3:25 AM · VyOS Ansible Collection
evgmol added a comment to T7621: Running a "delete" in ansible will prevent subsequent "set" from being applied.

@nicolasberens hi!

Aug 20 2025, 12:07 AM · VyOS Ansible Collection

Aug 16 2025

evgmol added a comment to T7621: Running a "delete" in ansible will prevent subsequent "set" from being applied.

I am working here on this use case https://github.com/vyos/vyos.vyos/pull/429

Aug 16 2025, 4:23 AM · VyOS Ansible Collection

Aug 15 2025

evgmol claimed T7698: Potential facts issue in 6.0.0 collection for VyOS 1.4.3.
Aug 15 2025, 10:10 AM · VyOS Ansible Collection

Aug 11 2025

evgmol added a comment to T7701: Ansible shows change when there is no change.

@nicolasberens Raising PR https://github.com/vyos/vyos.vyos/pull/430 to make vyos_config and cliconf less greedy

Aug 11 2025, 11:22 AM · VyOS Ansible Collection

Aug 10 2025

evgmol added a comment to T7701: Ansible shows change when there is no change.

Hi @nicolasberens
That is interesting - when I use rule 5 for example - there is also no change

Aug 10 2025, 6:50 AM · VyOS Ansible Collection
evgmol claimed T7701: Ansible shows change when there is no change.
Aug 10 2025, 6:39 AM · VyOS Ansible Collection

Aug 7 2025

evgmol added a comment to T7698: Potential facts issue in 6.0.0 collection for VyOS 1.4.3.

Additional details from Slack:
it is not only 1st run. He runs his playbook for 3 routers. Only one works without problems. He says that the configs are the same and the version is - 1.4.3.
Ansible verbose info

Aug 7 2025, 9:31 PM · VyOS Ansible Collection
evgmol updated subscribers of T7698: Potential facts issue in 6.0.0 collection for VyOS 1.4.3.

@a.apostoliuk hi!
Can we have:

Aug 7 2025, 9:30 PM · VyOS Ansible Collection
evgmol created T7698: Potential facts issue in 6.0.0 collection for VyOS 1.4.3.
Aug 7 2025, 9:26 PM · VyOS Ansible Collection

Aug 5 2025

evgmol closed T7620: Ansible Role is not idempotent when SSH key is rsa with 4096bits as Not Applicable.
Aug 5 2025, 11:30 PM · VyOS Ansible Collection
evgmol added a comment to T7620: Ansible Role is not idempotent when SSH key is rsa with 4096bits.

Hello @nicolasberens
Apologies for this taking too long to respond.
I investigated further and found that community module function netcommon.CliConf inserts an extra space, thus breaking the long lines and causing diff to generate, which, in turns, impacts the idempotency of the VyOS modules.

image (5).png (360×1 px, 123 KB)

I raised an issue with the community https://github.com/ansible-collections/ansible.netcommon/issues/713

Aug 5 2025, 11:30 PM · VyOS Ansible Collection

Jul 17 2025

evgmol updated subscribers of T7621: Running a "delete" in ansible will prevent subsequent "set" from being applied.

So, I tried a few approaches here - in particular, I coded logic to preserve 'set' commands if they are in running config and there is a corresponding 'delete' clause, to we do see 'delete' and 'set' commands in the config to compare.
Despite this, the Ansible connnection.get_diff does not work with this well, as it tends to remove 'delete' from the resultant set as not making sense (it kind of being over-smart here)

Jul 17 2025, 12:52 AM · VyOS Ansible Collection

Jul 15 2025

evgmol added a comment to T7621: Running a "delete" in ansible will prevent subsequent "set" from being applied.

That is clear now, thanks @nicolasberens
(Sorry, I must have misspelled your username)

Jul 15 2025, 10:12 AM · VyOS Ansible Collection

Jul 14 2025

evgmol updated subscribers of T7621: Running a "delete" in ansible will prevent subsequent "set" from being applied.

@nicholaschaffeee Hi!
Are you able to describe your use case above?

Jul 14 2025, 12:46 AM · VyOS Ansible Collection

Jul 11 2025

evgmol added a comment to T7621: Running a "delete" in ansible will prevent subsequent "set" from being applied.

As an example (and the reason why i try to solve this issue the way i am doing it right now), the junos module (https://docs.ansible.com/ansible/latest/collections/junipernetworks/junos/junos_config_module.html#ansible-collections-junipernetworks-junos-junos-config-module) support this exact behaviour. So it was easy to adapt this for our vyos firewalls.

Jul 11 2025, 9:04 AM · VyOS Ansible Collection
evgmol added a comment to T7620: Ansible Role is not idempotent when SSH key is rsa with 4096bits.

It seems that community plugin netcommon network_cli breaks long lines resulting in diff. I tried ansible_terminal_width but no luck
I will be looking for some workarounds, unless there is already an open issue with Netcommon

Jul 11 2025, 9:02 AM · VyOS Ansible Collection

Jul 10 2025

evgmol added a comment to T7620: Ansible Role is not idempotent when SSH key is rsa with 4096bits.

I can see the community module we use (necommon/network_cli) actually returns the running config with a broken long strings - it inserts extra space

Jul 10 2025, 11:22 PM · VyOS Ansible Collection
evgmol added a comment to T7620: Ansible Role is not idempotent when SSH key is rsa with 4096bits.

Hi,
I am testing against 1.4.2, via pylibssh, - I see 4096-long one does break idempotency but I see no Exception
I will retest with vyos_user

Jul 10 2025, 8:06 PM · VyOS Ansible Collection
evgmol claimed T7620: Ansible Role is not idempotent when SSH key is rsa with 4096bits.
Jul 10 2025, 1:24 AM · VyOS Ansible Collection

Jul 9 2025

evgmol added a comment to T7621: Running a "delete" in ansible will prevent subsequent "set" from being applied.

Hi @nicolasberens!
I believe the module is configured to match line by line by default and only work out on deltas in the config.
So if in the active Ansible session, the module does not sense changes after 'delete' (because there are none as yet, since the command is not applied) - At start, the module retrieves the current configuration and process it, then issues a set of commands.
Either having two separate tasks to delete first, then to set works, or the example below also works.

Jul 9 2025, 8:38 PM · VyOS Ansible Collection
evgmol added a comment to T7621: Running a "delete" in ansible will prevent subsequent "set" from being applied.

Hi All,
Looking into this

Jul 9 2025, 7:33 PM · VyOS Ansible Collection
evgmol claimed T7621: Running a "delete" in ansible will prevent subsequent "set" from being applied.
Jul 9 2025, 7:33 PM · VyOS Ansible Collection