---
- debug: msg="START nxapi/sublevel_exact.yaml"

- name: setup
  nxos_config:
    lines:
      - 10 permit ip 192.0.2.1/32 any log
      - 20 permit ip 192.0.2.2/32 any log
      - 30 permit ip 192.0.2.3/32 any log
      - 40 permit ip 192.0.2.4/32 any log
      - 50 permit ip 192.0.2.5/32 any log
    parents: ip access-list test
    match: none
  ignore_errors: yes

- name: configure sub level command using exact match
  nxos_config:
    lines:
      - 10 permit ip 192.0.2.1/32 any log
      - 20 permit ip 192.0.2.2/32 any log
      - 30 permit ip 192.0.2.3/32 any log
      - 40 permit ip 192.0.2.4/32 any log
    parents: ip access-list test
    before: no ip access-list test
    match: exact
    replace: block
  register: result

- assert:
    that:
      - "result.changed == true"
      - "'ip access-list test' in result.updates"
      - "'10 permit ip 192.0.2.1/32 any log' in result.updates"
      - "'20 permit ip 192.0.2.2/32 any log' in result.updates"
      - "'30 permit ip 192.0.2.3/32 any log' in result.updates"
      - "'40 permit ip 192.0.2.4/32 any log' in result.updates"
      - "'50 permit ip 192.0.2.5/32 any log' not in result.updates"

- name: check sub level command using exact match
  nxos_config:
    lines:
      - 10 permit ip 192.0.2.1/32 any log
      - 20 permit ip 192.0.2.2/32 any log
      - 30 permit ip 192.0.2.3/32 any log
      - 40 permit ip 192.0.2.4/32 any log
    parents: ip access-list test
    match: exact
  register: result

- assert:
    that:
      - "result.changed == false"

- name: teardown
  nxos_config:
    lines: no ip access-list test
    match: none

- debug: msg="END nxapi/sublevel_exact.yaml"