aci-change-deploy

Automates ACI policy change workflows by coordinating ServiceNow records with APIC deployments.

Updated Feb 28, 2026
One-click install
npx skills add https://github.com/dgethings/netclaw --skill aci-change-deploy-dgethings
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aci-change-deploy
Source: https://github.com/dgethings/netclaw/tree/main/workspace/skills/aci-change-deploy
Command: npx skills add https://github.com/dgethings/netclaw --skill aci-change-deploy-dgethings

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Safely deploying ACI policy changes requires governance, fault baselines, and rollback protection to minimize risk during upgrades and tenant changes.

Core Features & Use Cases

  • Change lifecycle orchestration: integrates ServiceNow with APIC for controlled change implementation, approvals, and rollback protection.
  • Pre- and post-change baselines: captures fault and health baselines to detect regression.
  • Deterministic APIC policy deployment: applies Tenant/VRF/BD/EPG changes with verification and rollback safeguards.
  • GAIT audit trail: records full change session for compliance and traceability.

Quick Start

Create a ServiceNow change record, obtain approval, capture baselines, apply ACI policy changes in dependency order, verify results, and close the change.

Frequently Asked Questions about aci-change-deploy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate ACI policy changes with ServiceNow change management?

Automating ACI policy changes with ServiceNow involves coordinating change record approvals with APIC deployments. This process applies Tenant, VRF, BD, App Profile, and EPG policies in dependency order while recording pre-change baselines and generating a GAIT audit trail for compliance.

What is the safest way to rollback ACI APIC deployments during a failed change window?

Safely rolling back ACI APIC deployments requires capturing pre-change fault and health baselines before applying policies. If post-change verification detects regression, the system uses the recorded baseline and rollback plan to revert APIC configurations within the controlled window.

Can I use Python MCP scripts to manage Cisco APIC tenant and EPG lifecycle?

Yes, you can use Python MCP scripts to manage the Cisco APIC tenant and EPG lifecycle. The scripts integrate with APIC through environment variables to apply deterministic policy changes and verify results while coordinating governance with ServiceNow change records.

Does deploying ACI policy changes require a specific dependency order for Tenant, VRF, and EPG objects?

Deploying ACI policy changes requires a strict dependency order: Tenant, then VRF, followed by BD, App Profile, and finally EPG. Applying changes in this sequence ensures the APIC infrastructure objects exist before deploying the endpoint policies attached to them.

How do I capture fault and health baselines before applying an APIC policy change?

Capturing fault and health baselines before an APIC policy change involves querying the APIC state before deployment. The workflow records this pre-change baseline to compare against post-change verification results, ensuring any new faults or health regressions are immediately detected.

What is a GAIT audit trail in the context of ACI change management?

A GAIT audit trail in ACI change management is a compliance record of the full change session. It captures the end-to-end workflow of applying APIC policy changes, verifying results, and executing rollbacks, ensuring traceability and governance for network infrastructure modifications.