Sample content — LAB-0.1 (PAv1)¶

# Catalog metadata. CPA reads this when the Lablet is synced.
# Derived from RCUv1/mosaic_meta.json.
apiVersion: pav1
kind: LabletDefinition
metadata:
  name: LAB-0.1                       # form-qualified name (catalog key)
  title: "Sample Network Automation Lablet"
  track: "350-901 AUTOCOR"
  exam: "350-901"
  language: ENU
  content_version: "1"
spec:
  pod_type: CML_ON_AWS                # CML_ON_AWS | ROC_RADKIT  (others: future)
  summary: >
    Minimal reference lab: two routers, two switches and a candidate workstation.
    Demonstrates the full lifecycle — post_init desktop seeding + control-node
    isolation, then the Collect -> Evaluate -> Report grading flow.

# Orchestration only: CPA owns the phase ORDER; SE owns each job BODY (in jobs/).
# Canonical shape (ADR-057 §2.6): phases[].{ native_steps_by_pod_type, jobs[] };
# every job references a JobDefinition by `definition: name@version`.
apiVersion: pav1
kind: Lifecycle
metadata:
  lablet: LAB-0.1
spec:
  phases:
    - name: instantiate
      native_steps_by_pod_type:
        cml_on_aws: [worker_lab_resolve, pod_locator, ports_alloc, lds_register]
      jobs:
        - definition: cml.lab_start@v1          # resolve + start the CML lab

    - name: post_init
      # Seed the candidate desktop, gate on the package, bounce switches, isolate Internet.
      jobs:
        - definition: post_init@v1              # -> jobs/post_init.yaml
          process_type: Initialization

    - name: ready
      native_steps_by_pod_type:
        cml_on_aws: [mark_ready]
      jobs:
        - definition: readiness_check@v1
          process_type: Initialization

    - name: grade
      # setup (was sb_pre_collect.xml) + collect + evaluate + report, all in one job.
      jobs:
        - definition: grade@v1                  # -> jobs/grade.yaml
          process_type: Grading
          rubric: rubric                        # -> grading/rubric.yaml   (evaluate stage)
          report: score_report                  # -> reports/score_report.yaml

    - name: teardown
      native_steps_by_pod_type:
        cml_on_aws: [archive]
      jobs:
        - definition: cml.wipe@v1
          process_type: Archive

apiVersion: pav1
kind: ConnectorModel
metadata:
  name: LAB-0.1
spec:
  connectors:
    - name: rtr01
      class: cisco_common
      transport: telnet
      timeout: 3
      prompt: "${ runtime_env.devices.rtr01.prompt }"                   # was rtr01#
      enable_password: "${ runtime_env.devices.rtr01.enable_password }" # was cisco
      port: "${ runtime_env.devices.rtr01.serial_port }"               # was 5045
    # … rtr02 / sw01 / sw02 follow the same shape …

    # Workstation reached two ways:
    #   *_22     — UnixSSH via the PAT port (post_init desktop seed)
    #   *_serial — serial console (grade runs candidate solutions)
    - name: workstation_22
      class: unix
      transport: ssh
      timeout: 5
      via_port: "${ runtime_env.devices.workstation.pat_port }"        # was port=5052 -> 22
      username: "${ runtime_env.devices.workstation.username }"
      password: "${ runtime_env.devices.workstation.password }"
      prompt: "#goodmorningstartshine#"
    - name: workstation_serial
      class: unix
      transport: telnet
      timeout: 5
      port: "${ runtime_env.devices.workstation.serial_port }"         # was 5050
      username: "${ runtime_env.devices.workstation.username }"
      password: "${ runtime_env.devices.workstation.password }"
      prompt: "#goodmorningstartshine#"

    # Control node — used only implicitly by cml.* primitives (never targeted directly).
    - name: control_node
      class: control
      transport: telnet
      timeout: 5
      port: "${ runtime_env.control_node.serial_port }"               # was 5047

apiVersion: pav1
kind: JobDefinition
metadata:
  name: post_init
  version: v1
spec:
  process_type: Initialization
  steps:
    - id: settle                       # tPause id=1
      uses: pause@v1
      with: { seconds: 30 }

    - id: mkdir_tmp                     # tExecute id=3
      uses: exec@v1
      target: workstation_22
      with: { command: "mkdir -p /home/cisco/Desktop/tmp/" }
      capture: { ok: cmd0_ok }

    - id: push_package                 # tScp id=5
      uses: copy@v1
      target: workstation_22
      with:
        source: "${ content.files.desktop_package }"   # was ${config.core.paths.lab_root}/desktop_package.tgz
        dest: "/home/cisco/Desktop/tmp/desktop_package.tgz"
        via_port: "${ runtime_env.devices.workstation.pat_port }"  # was port=5052
      capture: { ok: scp_ok }

    - id: list_tmp                     # tExecute id=10, out="files"
      uses: exec@v1
      target: workstation_22
      with: { command: "ls -la /home/cisco/Desktop/tmp/" }
      capture: { stdout: files, ok: cmd1_ok }

    - id: verify_package               # tVerify id=30 (if=CMD1.OK) — the GATE
      uses: evaluate.regex@v1
      when: "${ vars.cmd1_ok }"
      with:
        source: "${ vars.files }"                      # was string="{files}"
        regex: "desktop_package\\.tgz"
        mode: positive
      capture: { passed: file_ok }     # was set="file.OK"

    - id: unpack                       # tExecute id=40 (if=file.OK)
      uses: exec@v1
      target: workstation_22
      when: "${ vars.file_ok }"        # gated on the verify above
      with: { command: "tar -v -C /home/cisco/Desktop/tasks/ -xzf /home/cisco/Desktop/tmp/desktop_package.tgz" }
      timeout: 10

    - id: cleanup_tmp                  # tExecute id=45
      uses: exec@v1
      target: workstation_22
      with: { command: "rm -rf /home/cisco/Desktop/tmp/" }
      timeout: 10

    - id: bounce_sw01                  # tExecute id=50 (bounce_interface on control node)
      uses: cml.bounce_interface@v1
      with: { device: sw01, interface: Vl99, serial_port: "${ runtime_env.devices.sw01.serial_port }" }
      timeout: 15
    - id: bounce_sw02                  # tExecute id=51
      uses: cml.bounce_interface@v1
      with: { device: sw02, interface: Vl99, serial_port: "${ runtime_env.devices.sw02.serial_port }" }
      timeout: 15

    - id: isolate_internet             # tExecute id=70 (cmlctl --action stop ext-conn-0)
      uses: cml.power@v1
      with: { node: ext-conn-0, action: stop }   # cml_password resolved from runtime_env.*
      timeout: 15

apiVersion: pav1
kind: JobDefinition
metadata:
  name: grade
  version: v1
spec:
  process_type: Grading
  steps:
    # ---- setup stage (was sb_pre_collect.xml) ----
    - id: wipe_devices                 # id=10 — wipe candidate devices (~50s)
      uses: cml.wipe@v1
      stage: setup
      with: { devices: [rtr01, rtr02, sw01, sw02] }
      timeout: 120
    - id: bounce_sw01                  # id=20
      uses: cml.bounce_interface@v1
      stage: setup
      with: { device: sw01, interface: Vl99, serial_port: "${ runtime_env.devices.sw01.serial_port }" }
      timeout: 30
    - id: bounce_sw02                  # id=21
      uses: cml.bounce_interface@v1
      stage: setup
      with: { device: sw02, interface: Vl99, serial_port: "${ runtime_env.devices.sw02.serial_port }" }
      timeout: 30
    - id: candidate_py_deploy          # id=30 — candidate solution, serial console
      uses: exec@v1
      stage: setup
      target: workstation_serial
      with:
        script: |
          cd /home/cisco/Desktop/tasks/
          source venv/bin/activate
          python ./scripts/py_deploy.py -i ./scripts/py_inventory.yaml
          deactivate
      timeout: 15
      on_error: { action: continue }   # legacy only logged 30.error.msg
    - id: candidate_ansible            # id=31
      uses: exec@v1
      stage: setup
      target: workstation_serial
      with:
        script: |
          cd /home/cisco/Desktop/tasks/
          source venv/bin/activate
          ./ansible/run-playbook.sh
          deactivate
      timeout: 15
      on_error: { action: continue }

    # ---- collect stage (was grade.xml verify subject='commandOutput') ----
    - { id: c_sw01_vlan,  uses: collect@v1, stage: collect, target: sw01,  with: { command: "show vlan brief" },          capture: { output: sw01.show_vlan_brief } }
    - { id: c_rtr01_acl,  uses: collect@v1, stage: collect, target: rtr01, with: { command: "show access-list" },         capture: { output: rtr01.show_access_list } }
    - { id: c_rtr01_ospf, uses: collect@v1, stage: collect, target: rtr01, with: { command: "show ip ospf neighbor" },    capture: { output: rtr01.show_ip_ospf_nei } }
    # … one collect@v1 per show command (full list in the file) …

    # ---- evaluate + report stage ----
    - id: evaluate
      uses: evaluate.regex@v1          # ruleset-driven: one evaluate.regex per rubric check
      stage: evaluate
      with: { ruleset: rubric }        # -> grading/rubric.yaml
      capture: { items: graded_items }
    - id: report
      uses: report.score@v1
      stage: report
      with:
        items: "${ vars.graded_items }"
        report_class: ScoreReport      # legacy reportClass='Reports::LabletReport'
      capture: { report_ref: report_ref }

# Evaluate spec. Each item runs regex checks against captured output and awards points.
# Direct translation of RCUv1/grade.xml section 1 "Content" (10 points).
apiVersion: pav1
kind: EvaluationRuleset
metadata:
  name: rubric
spec:
  domain: "1.0 Network Automation"
  max_points: 10
  items:
    - id: 1
      points: 1
      description: "sw01 must have VLAN 80"
      checks:
        - source: sw01.show_vlan_brief
          regex: '^80\s+LAB80'
    - id: 2
      points: 1
      description: "sw02 must have VLAN 80"
      checks:
        - source: sw02.show_vlan_brief
          regex: '^80\s+LAB80'
    - id: 3
      points: 1
      description: "rtr01 must have an access-list MGMTOPS configured"
      checks:
        - source: rtr01.show_access_list
          regex: 'MGMTOPS'
          on_fail: "MGMTOPS ACL not found"
    - id: 4
      points: 1
      description: "rtr02 must have an access-list MGMTOPS configured"
      checks:
        - source: rtr02.show_access_list
          regex: 'MGMTOPS'
          on_fail: "MGMTOPS ACL not found"
    - id: 5
      points: 1
      description: "Interface descriptions present (rtr01<->rtr02)"
      checks:
        - source: rtr01.show_int_gi01
          regex: 'Description: to-rtr02'
        - source: rtr02.show_int_gi01
          regex: 'Description: to-rtr01'
    - id: 6
      points: 1
      description: "rtr01 Loopback0 ip address"
      checks:
        - source: rtr01.show_int_loop0
          regex: 'Loopback0 is up, line protocol is up'
        - source: rtr01.show_int_loop0
          regex: 'Internet address is 10\.255\.81\.1/32'
    - id: 7
      points: 1
      description: "rtr02 Loopback0 ip address"
      checks:
        - source: rtr02.show_int_loop0
          regex: 'Loopback0 is up, line protocol is up'
        - source: rtr02.show_int_loop0
          regex: 'Internet address is 10\.255\.81\.2/32'
    - id: 8
      points: 2
      description: "rtr01 has one OSPF neighbor in FULL state"
      checks:
        - source: rtr01.show_ip_ospf_nei
          regex: 'FULL.*GigabitEthernet0/1'
          flags: [multiline, ignorecase]
          on_fail: "OSPF neighbor in state FULL not found"
    - id: 9
      points: 1
      description: "rtr01 and rtr02 must have NTP server 192.168.10.254"
      checks:
        - source: rtr01.show_ntp_assoc
          regex: '192\.168\.10\.254'
        - source: rtr02.show_ntp_assoc
          regex: '192\.168\.10\.254'

# Report spec. SE emits a ScoreReport with one result per rubric item.
apiVersion: pav1
kind: ProcessReportSpec
metadata:
  name: score_report
spec:
  process_type: Grading
  report_class: ScoreReport            # legacy: Reports::LabletReport
  include:
    - per_item: [id, description, points_awarded, points_max, passed, issues]
    - totals: [points_awarded, points_max, percentage]