---
- debug: msg="START cli/sublevel_strict.yaml on connection={{ ansible_connection }}"

- name: setup
  ios_config:
    lines:
      - permit ip host 1.1.1.1 any log
      - permit ip host 2.2.2.2 any log
      - permit ip host 3.3.3.3 any log
      - permit ip host 4.4.4.4 any log
      - permit ip host 5.5.5.5 any log
    parents: ip access-list extended test
    before: no ip access-list extended test
    match: none
    authorize: yes

- name: configure sub level command using strict match
  ios_config:
    lines:
      - permit ip host 1.1.1.1 any log
      - permit ip host 2.2.2.2 any log
      - permit ip host 3.3.3.3 any log
      - permit ip host 4.4.4.4 any log
    parents: ip access-list extended test
    match: strict
    authorize: yes
  register: result

- assert:
    that:
      - "result.changed == false"

- name: check sub level command using strict match
  ios_config:
    lines:
      - permit ip host 1.1.1.1 any log
      - permit ip host 3.3.3.3 any log
      - permit ip host 2.2.2.2 any log
    parents: ip access-list extended test
    after: exit
    match: strict
    authorize: yes
  register: result

- assert:
    that:
      - "result.changed == true"
      - "'ip access-list extended test' in result.updates"
      - "'permit ip host 1.1.1.1 any log' not in result.updates"
      - "'permit ip host 2.2.2.2 any log' in result.updates"
      - "'permit ip host 3.3.3.3 any log' in result.updates"
      - "'permit ip host 4.4.4.4 any log' not in result.updates"
      - "'permit ip host 5.5.5.5 any log' not in result.updates"

- name: teardown
  ios_config:
    lines: no ip access-list extended test
    match: none
    authorize: yes

- debug: msg="END cli/sublevel_strict.yaml on connection={{ ansible_connection }}"