Adding upstream version 2.10.7+merged+base+2.10.8+dfsg.upstream/2.10.7+merged+base+2.10.8+dfsgupstream

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

36 files changed, 2906 insertions, 0 deletions

diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/.travis.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/.travis.yml
new file mode 100644
index 00000000..36bbf620
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/.travis.yml
@@ -0,0 +1,29 @@
+---
+language: python
+python: "2.7"
+
+# Use the new container infrastructure
+sudo: false
+
+# Install ansible
+addons:
+  apt:
+    packages:
+    - python-pip
+
+install:
+  # Install ansible
+  - pip install ansible
+
+  # Check ansible version
+  - ansible --version
+
+  # Create ansible.cfg with correct roles_path
+  - printf '[defaults]\nroles_path=../' >ansible.cfg
+
+script:
+  # Basic role syntax check
+  - ansible-playbook tests/test.yml -i tests/inventory --syntax-check
+
+notifications:
+  webhooks: https://galaxy.ansible.com/api/v1/notifications/
\ No newline at end of file
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/README.md b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/README.md
new file mode 100644
index 00000000..84b0efc6
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/README.md
@@ -0,0 +1,138 @@
+nar_santricity_common
+=====================
+    Discover NetApp E-Series storage systems and configures SANtricity Web Services Proxy.
+
+    The following variables with be added to the runtime host inventory.
+        current_eseries_api_url:            # Web Services REST API URL
+        current_eseries_api_username:       # Web Services REST API username
+        current_eseries_api_password:       # Web Services REST API password
+        current_eseries_ssid:               # Arbitrary string for the proxy to represent the storage system.
+        current_eseries_validate_certs:     # Indicates whether SSL certificates should be verified.
+        current_eseries_api_is_proxy:       # Indicates whether Web Services REST API is running on a proxy.
+
+
+Requirements
+------------
+    - Ansible 2.9 or later
+    - NetApp E-Series E2800 platform or newer or NetApp E-Series SANtricity Web Services Proxy configured for older E-Series storage systems.
+
+
+Example Playbook
+----------------
+    - hosts: eseries_storage_systems
+      gather_facts: false
+      collection:
+        - netapp_eseries.santricity
+      tasks:
+        - name: Configure SANtricity Web Services and discover storage systems 
+          import_role:
+            name: nar_santricity_common
+
+
+Example Inventory Host file using discovery with proxy
+------------------------------------------------------
+    eseries_proxy_api_url: https://192.168.1.100:8443/devmgr/v2/
+    eseries_proxy_api_password: admin_password
+    eseries_subnet: 192.168.1.0/24   # This should only be defined at the group level once when utilizing Web Services Proxy and should be broad enough to include all systems being added to proxy instance.
+    eseries_system_serial: "012345678901"   # Be sure to quote if the serial is all numbers and begins with zero.
+    eseries_system_password: admin_password
+    eseries_validate_certs: false
+    (...)
+
+
+Example Inventory Host file using discovery without proxy
+---------------------------------------------------------
+**Note that while eseries_management_interfaces or eseries_system_api_url are optional, including at least one of them will prevent the discovery mechanism from being used when the system can be reached from their information.
+    eseries_subnet: 192.168.1.0/24
+    eseries_system_serial: "012345678901"   # Be sure to quote if the serial is all numbers and begins with zero.
+    eseries_system_password: admin_password
+    eseries_validate_certs: false
+    (...)
+
+
+Example Inventory Host file without using discovery (Embedded Web Services)
+---------------------------------------------------------------------------
+    eseries_system_api_url: https://192.168.1.200:8443/devmgr/v2/
+    eseries_system_password: admin_password
+    eseries_validate_certs: false
+    (...)
+
+
+Example Inventory Host file without using discovery (Proxy Web Services - system must have already been added to the proxy)
+------------------------------------------------------------------------
+    eseries_proxy_ssid: storage_ssid
+    eseries_proxy_api_url: https://192.168.2.200:8443/devmgr/v2/
+    eseries_proxy_api_password: admin_password
+    (...)
+
+
+Notes
+-----
+Use SANtricity Web Services Proxy to avoid the need to discover the storage systems each time nar_santricity_common is executed. The first time nar_santricity_common is executed will add the storage systems the proxy so that they can be recalled without the need to search the subnet each subsequent execution.
+The na_santricity_proxy_systems module is used to add storage systems to the proxy but required a complete list of desired systems since it will ensure that only the systems provided will remain on the proxy. As a result any system that is not included will be removed from the proxy.
+
+Role Variables
+--------------
+    eseries_subnet:                   # Network subnet to search for the storage system specified in CIDR form. Example: 192.168.1.0/24
+                                      #   Note: eseries_subnet should only be defined once at the group level when utilizing the Web Services Proxy.
+    eseries_template_api_url:         # Template for the web services api url. Default: https://0.0.0.0:8443/devmgr/v2/
+    eseries_prefer_embedded: false    # Overrides the default behavior of using Web Services Proxy when eseries_proxy_api_url is defined. This will only effect storage systems that have Embedded Web Services.
+    eseries_validate_certs: true      # Indicates Whether SSL certificates should be verified. Used for both embedded and proxy. Choices: true, false
+
+    # Storage system specific variables
+    eseries_proxy_ssid:               # Arbitrary string for the proxy to represent the storage system. eseries_system_serial will be used when not defined.
+    eseries_system_serial:            # Storage system serial number. Be sure to quote if the serial is all numbers and begins with zero. (This is located on a label at the top-left towards the front on the device)
+    eseries_system_addresses:         # Storage system management IP addresses. Only required when eseries_system_serial or eseries_system_api_url are not defined. When not specified, addresses will be populated with eseries_management_interfaces controller addresses.
+    eseries_system_api_url:           # Url for the storage system's for embedded web services rest api. Example: https://192.168.10.100/devmgr/v2
+    eseries_system_username: admin    # Username for the storage system's for embedded web services rest api
+    eseries_system_password:          # Password for the storage system's for embedded web services rest api and when the admin password has not been set eseries_system_password will be used to set it.
+    eseries_system_tags:              # Meta tags to associate with storage system when added to the proxy.
+
+    # Storage system management interface information
+        Note: eseries_management_interfaces will be used when eseries_system_serial, eseries_system_api_url, or eseries_system_addresses are not defined.
+    eseries_management_interfaces:    # Subset of the eseries_management_interface variable found in the nar_santricity_management role
+      controller_a:
+        - address:    # Controller A port 1's IP address
+        - address:    # Controller A port 2's IP address
+      controller_b:
+        - address:    # Controller B port 1's IP address
+        - address:    # Controller B port 2's IP address
+
+    # Web Services Proxy specific variable
+        Note: eseries_proxy_* variables are required to discover storage systems prior to SANtricity OS version 11.60.2.
+    eseries_proxy_api_url:                  # Url for the storage system's for proxy web services rest api. Example: https://192.168.10.100/devmgr/v2
+    eseries_proxy_api_username:             # Username for the storage system's for proxy web services rest api.
+    eseries_proxy_api_password:             # Password for the storage system's for proxy web services rest api and when the admin password has not been set eseries_proxy_api_password will be used to set it.
+    eseries_proxy_monitor_password:         # Proxy password for the monitor username
+    eseries_proxy_security_password:        # Proxy password for the security username
+    eseries_proxy_storage_password:         # Proxy password for the monitor username
+    eseries_proxy_support_password:         # Proxy password for the support username
+    eseries_proxy_accept_certifications:    # Force automatic acceptance of all storage system's certificate
+    eseries_proxy_default_system_tags:      # Default meta tags to associate with all storage systems
+    eseries_proxy_default_password:         # Default password to associate with all storage systems. This is overridden by eseries_system_password.
+
+    # LDAP configuration defaults
+    eseries_proxy_ldap_state:             # Whether LDAP should be configured for the proxy`
+    eseries_proxy_ldap_identifier:        # The user attributes that should be considered for the group to role mapping
+    eseries_proxy_ldap_user_attribute:    # Attribute used to the provided username during authentication.
+    eseries_proxy_ldap_bind_username:     # User account that will be used for querying the LDAP server.
+    eseries_proxy_ldap_bind_password:     # Password for the bind user account
+    eseries_proxy_ldap_server:            # LDAP server URL.
+    eseries_proxy_ldap_search_base:       # Search base used for find user's group membership
+    eseries_proxy_ldap_role_mappings:     # Dictionary of user groups, each containing the list of access roles.
+                                          #     Role choices: storage.admin - allows users full read/writes access to storage objects and operations.
+                                          #                   storage.monitor - allows users read-only access to storage objects and operations.
+                                          #                   storage.admin - allows users access to hardware, diagnostic information, major event logs,
+                                          #                       and other critical support-related functionality, but not the sorage configuration.
+                                          #                   security.admin - allows users access to authentication/authorization configuration, as
+                                          #                       well as the audit log configuration, adn certification management.
+
+
+License
+-------
+    BSD-3-Clause
+
+
+Author Information
+------------------
+    Nathan Swartz (@ndswartz)
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/defaults/main.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/defaults/main.yml
new file mode 100644
index 00000000..42dfdc84
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/defaults/main.yml
@@ -0,0 +1,44 @@
+---
+#eseries_subnet:                       # Network subnet to search for the storage system specified in CIDR form. Example: 192.168.1.0/24
+eseries_template_api_url: https://0.0.0.0:8443/devmgr/v2/   # Template for the web services api url. Default: https://0.0.0.0:8443/devmgr/v2/
+#eseries_validate_certs:               # Whether SSL certificates should be verified. Used for both embedded and proxy. Choices: true, false
+eseries_prefer_embedded: false         # Overrides the default behavior of using Web Services Proxy when eseries_proxy_api_url is defined. This will only
+                                       #    effect storage systems that have Embedded Web Services.
+
+# Storage system specific variables
+# ---------------------------------
+#eseries_proxy_ssid:                   # Arbitrary string for the proxy to represent the storage system. eseries_system_serial will be used when not defined.
+#eseries_system_serial:                # Storage system serial number (This is located on a label at the top-left towards the front on the device)
+#eseries_system_addresses:             # Storage system management IP addresses. Only required when eseries_system_serial or eseries_system_api_url are not
+                                       #   defined. When not specified, addresses will be populated with eseries_management_interfaces controller addresses
+#eseries_system_api_url:               # Url for the storage system's for embedded web services rest api. Example: https://192.168.10.100/devmgr/v2
+eseries_system_username: admin         # Username for the storage system's for embedded web services rest api
+#eseries_system_password:              # Password for the storage system's for embedded web services rest api and when the admin password has not been set
+                                       #   eseries_system_password will be used to set it.
+#eseries_system_tags:                  # Meta tags to associate with storage system when added to the proxy.
+
+# Storage system management interface information
+# -----------------------------------------------
+# Note: eseries_management_interfaces will be used when eseries_system_serial, eseries_system_api_url, or eseries_system_addresses are not defined.
+#eseries_management_interfaces:        # Subset of the eseries_management_interface variable found in the nar_santricity_management role
+#  controller_a:
+#    - address:                        # Controller A port 1's IP address
+#    - address:                        # Controller A port 2's IP address
+#  controller_b:
+#    - address:                        # Controller B port 1's IP address
+#    - address:                        # Controller B port 2's IP address
+
+# Web Services Proxy specific variable
+# ------------------------------------
+# Note: eseries_proxy_* variables are required to discover storage systems prior to SANtricity OS version 11.60.2.
+#eseries_proxy_api_url:                # Url for the storage system's for proxy web services rest api. Example: https://192.168.10.100/devmgr/v2
+eseries_proxy_api_username: admin      # Username for the storage system's for proxy web services rest api.
+#eseries_proxy_api_password:           # Password for the storage system's for proxy web services rest api and when the admin password has not been set
+                                       #   eseries_proxy_api_password will be used to set it.
+#eseries_proxy_monitor_password:       # Proxy password for the monitor username
+#eseries_proxy_security_password:      # Proxy password for the security username
+#eseries_proxy_storage_password:       # Proxy password for the monitor username
+#eseries_proxy_support_password:       # Proxy password for the support username
+#eseries_proxy_accept_certifications:  # Force automatic acceptance of all storage system's certificate
+#eseries_proxy_default_system_tags:    # Default meta tags to associate with all storage systems
+#eseries_proxy_default_password:       # Default password to associate with all storage systems. This is overridden by eseries_system_password.
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/meta/main.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/meta/main.yml
new file mode 100644
index 00000000..40e4f11f
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/meta/main.yml
@@ -0,0 +1,13 @@
+galaxy_info:
+  author: Nathan Swartz (@ndswartz)
+  description: Discover NetApp E-Series storage systems and configures SANtricity Web Services Proxy.
+  company: NetApp, Inc
+  license: BSD-3-Clause
+  platforms: []
+  min_ansible_version: 2.9
+  galaxy_tags:
+    - netapp
+    - eseries
+    - storage
+
+dependencies: []
\ No newline at end of file
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/build_info.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/build_info.yml
new file mode 100644
index 00000000..aeefe758
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/build_info.yml
@@ -0,0 +1,37 @@
+- name: Collect storage system facts
+  uri:
+    url: |-
+      {%- if eseries_prefer_embedded == True -%}
+        {{- eseries_system_api_url | default(eseries_proxy_api_url) | regex_replace('v2[\/]?$', 'utils/about') -}}
+      {%- else -%}
+        {{- eseries_proxy_api_url | default(eseries_system_api_url) | regex_replace('v2[\/]?$', 'utils/about') -}}
+      {%- endif -%}
+    headers:
+      Content-Type: "application/json"
+      Accept: "application/json"
+    validate_certs: false
+  register: about
+  failed_when: false
+  when: eseries_proxy_api_url is defined or eseries_system_api_url is defined
+  tags: always
+
+- name: Determine whether SANtricity Web Services REST API is proxy and information
+  set_fact:
+    current_eseries_api_is_proxy: "{{ about['json']['runningAsProxy'] | default(False) }}"
+  tags: always
+
+- name: Collect Web Services information from either proxy or embedded with a preference for embedded.
+  include_tasks: collect_facts/prefer_embedded.yml
+  when: (current_eseries_api_is_proxy == True and eseries_prefer_embedded == True) or current_eseries_api_is_proxy == False
+  tags: always
+
+- name: Collect Web Services information from proxy.
+  include_tasks: collect_facts/prefer_proxy.yml
+  when: current_eseries_api_is_proxy == True and current_eseries_api_url is not defined
+  tags: always
+
+- name: Check whether current_eseries_api_url is defined
+  fail:
+    msg: "Could not determine or discover storage system contact information!"
+  when: current_eseries_api_url is not defined or current_eseries_ssid is not defined
+  tags: always
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/collect_facts/discovery.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/collect_facts/discovery.yml
new file mode 100644
index 00000000..f9abe1f8
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/collect_facts/discovery.yml
@@ -0,0 +1,41 @@
+- name: Discover storage systems from all subnet ranges
+  na_santricity_discover:
+    proxy_url: "{{ item['value']['proxy_url'] }}"
+    proxy_username: "{{ item['value']['proxy_username'] }}"
+    proxy_password: "{{ item['value']['proxy_password'] }}"
+    proxy_validate_certs: "{{ item['value']['proxy_validate_certs'] }}"
+    subnet_mask: "{{ item['key'] }}"
+    prefer_embedded: "{{ item['value']['prefer_embedded'] }}"
+  run_once: true
+#  no_log: true
+  register: discovered_systems
+  loop: "{{ subnets | dict2items }}"
+  tags: always
+  vars:
+    subnets: |-
+      {#- Build a dictionary subnet searches and any proxies should they be available #}
+      {%- set systems = {} %}
+      {%- for array in ansible_play_hosts_all %}
+        {%- if "eseries_subnet" in hostvars[array] %}
+
+          {%- if "eseries_proxy_api_url" in (hostvars[array].keys() | list) -%}
+            {%- if systems.update({hostvars[array]["eseries_subnet"]: {
+              "proxy_url": hostvars[array]["eseries_proxy_api_url"] | default(omit),
+              "proxy_username": hostvars[array]["eseries_proxy_api_username"] | default("admin"),
+              "proxy_password": hostvars[array]["eseries_proxy_api_password"] | default(omit),
+              "prefer_embedded": hostvars[array]["eseries_prefer_embedded"] | default(omit),
+              "proxy_validate_certs": hostvars[array]["eseries_validate_certs"] | default(omit)}}) %}
+            {%- endif %}
+          {%- else -%}
+            {%- if systems.update({hostvars[array]["eseries_subnet"]: {
+              "proxy_url": hostvars[array]["eseries_proxy_api_url"] | default(omit),
+              "proxy_username": hostvars[array]["eseries_proxy_api_username"] | default(omit),
+              "proxy_password": hostvars[array]["eseries_proxy_api_password"] | default(omit),
+              "prefer_embedded": hostvars[array]["eseries_prefer_embedded"] | default(omit),
+              "proxy_validate_certs": hostvars[array]["eseries_validate_certs"] | default(omit)}}) %}
+            {%- endif %}
+          {%- endif -%}
+
+        {%- endif %}
+      {%- endfor %}
+      {{ systems }}
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/collect_facts/prefer_embedded.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/collect_facts/prefer_embedded.yml
new file mode 100644
index 00000000..ca733164
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/collect_facts/prefer_embedded.yml
@@ -0,0 +1,183 @@
+# Test whether eseries_system_api_url is a valid storage system web services api.
+- name: Validate the storage system embedded Web Services REST API supplied in eseries_system_api_url.
+  block:
+    - name: Determine management url based on eseries_system_api_url.
+      set_fact:
+        eseries_api_url_list: "{{ [eseries_system_api_url] }}"
+
+    - name: Check for valid storage system Web Services API url.
+      include_tasks: collect_facts/validate_system_api_url.yml
+
+    - name: Set Web Services REST API credentials.Set Web Services REST API credentials.
+      set_fact:
+        current_eseries_api_is_proxy: False
+        current_eseries_ssid: "{{ current_eseries_ssid | default('1') }}"
+        current_eseries_api_username: "{{ eseries_system_username | default('admin') }}"
+        current_eseries_api_password: "{{ eseries_system_password }}"
+        current_eseries_validate_certs: "{{ eseries_validate_certs | default(omit) }}"
+      when: current_eseries_api_url is defined
+      no_log: true
+  when: (current_eseries_api_url is not defined or current_eseries_ssid is not defined) and eseries_system_api_url is defined
+  tags: always
+
+
+# Test when a valid storage system web services api can be extrapolated from eseries_management_interfaces
+- name: Validate the storage system embedded Web Services REST API derived from eseries_management_interfaces.
+  block:
+    - name: Determine management interface IP addresses
+      set_fact:
+        eseries_api_url_list: |-
+          {%- set addresses = [] -%}
+          {%- set url_info = eseries_template_api_url | urlsplit %}
+          {%- for address in [eseries_management_interfaces["controller_a"][0]["address"] | default(""),
+                              eseries_management_interfaces["controller_a"][1]["address"] | default(""),
+                              eseries_management_interfaces["controller_b"][0]["address"] | default(""),
+                              eseries_management_interfaces["controller_b"][1]["address"] | default("")] -%}
+            {%- if address != "" and addresses.append([url_info["scheme"], "://", address, ":", url_info["port"], url_info["path"]] | join("")) %}{%- endif -%}
+          {%- endfor %}
+          {{ addresses }}
+
+    - name: Check for valid storage system Web Services API url.
+      include_tasks: collect_facts/validate_system_api_url.yml
+
+    - name: Set Web Services REST API credentials.
+      set_fact:
+        current_eseries_api_is_proxy: False
+        current_eseries_ssid: "{{ current_eseries_ssid | default('1') }}"
+        current_eseries_api_username: "{{ eseries_system_username | default('admin') }}"
+        current_eseries_api_password: "{{ eseries_system_password }}"
+        current_eseries_validate_certs: "{{ eseries_validate_certs | default(omit) }}"
+      when: current_eseries_api_url is defined
+      no_log: true
+  when: (current_eseries_api_url is not defined or current_eseries_ssid is not defined) and eseries_management_interfaces is defined
+  tags: always
+
+
+# If proxy is available get information from there and avoid the discovery process.
+- name: Attempt to retrieve the storage system from Web Services Proxy.
+  block:
+    - name: Determine existing storage systems in Web Services Proxy.
+      uri:
+        url: "{{ eseries_proxy_api_url | regex_replace('v2[\/]?$', 'v2/storage-systems') }}"
+        headers:
+          Content-Type: "application/json"
+          Accept: "application/json"
+        url_username: "{{ eseries_proxy_api_username | default('admin') }}"
+        url_password: "{{ eseries_proxy_api_password }}"
+        validate_certs: false
+      register: proxy_systems
+    - name: Determine associated management interface IP addresses.
+      set_fact:
+        eseries_system_addresses: |-
+          {%- set addresses = [] %}
+          {%- set url_info = eseries_template_api_url | urlsplit %}
+          {%- for address in [eseries_management_interfaces["controller_a"][0]["address"] | default(""),
+                              eseries_management_interfaces["controller_a"][1]["address"] | default(""),
+                              eseries_management_interfaces["controller_b"][0]["address"] | default(""),
+                              eseries_management_interfaces["controller_b"][1]["address"] | default("")] %}
+            {%- if address != "" and addresses.append(address) -%}{%- endif %}
+          {%- endfor %}
+          {{ addresses }}
+      when: eseries_management_interfaces is defined
+
+    - name: Determine storage system SSID based on storage system serial number or associated IP addresses.
+      set_fact:
+        eseries_api_url_list: |-
+          {#- Determine any system that either has the expected serial number or a management ip address -#}
+          {%- set ssids = [] -%}
+          {%- set addresses = [] -%}
+
+          {#- Search discovered storage systems -#}
+          {%- set url_info = eseries_template_api_url | urlsplit %}
+          {%- for system in proxy_systems["json"] -%}
+
+            {#- Check for serial number match -#}
+            {%- if eseries_system_serial is defined and system["chassisSerialNumber"] == eseries_system_serial -%}
+              {%- if ssids.append(system["id"]) -%}{%- endif -%}
+                {%- for address in system["managementPaths"] -%}
+                  {%- if addresses.append([url_info["scheme"], "://", address, ":", url_info["port"], url_info["path"]] | join("")) %}{%- endif -%}
+                {%- endfor -%}
+
+            {%- elif eseries_proxy_ssid is defined and eseries_proxy_ssid == system["id"] -%}
+              {%- if ssids.append(system["id"]) -%}{%- endif -%}
+                {%- for address in system["managementPaths"] -%}
+                  {%- if addresses.append([url_info["scheme"], "://", address, ":", url_info["port"], url_info["path"]] | join("")) %}{%- endif -%}
+                {%- endfor -%}
+
+            {%- elif eseries_system_addresses is defined and eseries_system_addresses | length > 0 -%}
+              {%- for address in eseries_system_addresses -%}
+                {%- if address in system["managementPaths"] -%}
+                  {%- if ssids.append(system["id"]) -%}{%- endif -%}
+                  {%- for address in system["managementPaths"] -%}
+                    {%- if addresses.append([url_info["scheme"], "://", address, ":", url_info["port"], url_info["path"]] | join("")) %}{%- endif -%}
+                  {%- endfor -%}
+                {%- endif -%}
+              {%- endfor -%}
+            {%- endif -%}
+          {%- endfor -%}
+
+          {%- if ssids | unique | length == 1 -%}
+            {{- addresses -}}
+          {%- else -%}[]{%- endif -%}
+
+    - name: Check for valid storage system Web Services API url.
+      include_tasks: collect_facts/validate_system_api_url.yml
+
+    - name: Determine Web Services Embedded REST API information.
+      set_fact:
+        current_eseries_api_is_proxy: False
+        current_eseries_ssid: "{{ current_eseries_ssid | default('1') }}"
+        current_eseries_api_username: "{{ eseries_system_username | default('admin') }}"
+        current_eseries_api_password: "{{ eseries_system_password }}"
+        current_eseries_validate_certs: "{{ eseries_validate_certs | default(omit) }}"
+      when: current_eseries_api_url is defined
+  when: current_eseries_api_is_proxy == True and (current_eseries_api_url is not defined or current_eseries_ssid is not defined)
+  tags: always
+
+# Try discovering eseries_system_api_url if known eseries_system_api_url is not valid
+- name: Attempt to discover storage system.
+  block:
+    - name: Search subnet for storage system.
+      include_tasks: collect_facts/discovery.yml
+      when: discovered_systems is not defined
+
+    - name: Check whether eseries_system_serial and eseries_subnet are defined.
+      fail:
+        msg: "eseries_system_serial and eseries_subnet must be defined in order to search for storage system."
+      when: eseries_system_serial is not defined or eseries_subnet is not defined
+
+    - name: Determine storage system Web Services information
+      set_fact:
+        current_eseries_api_info: |-
+          {% set info = {} %}
+          {%- for result in discovered_systems["results"] -%}
+            {%- for serial in (result["systems_found"].keys() | list) if eseries_system_serial and serial == eseries_system_serial -%}
+               {%- if info.update(result["systems_found"][serial]) %}{%- endif -%}
+            {%- endfor %}
+          {%- endfor %}
+          {{ info }}
+#      no_log: true
+
+    - name: Check whether storage system was discovered.
+      fail:
+        msg: "Storage system failed to be discovered! Serial [{{ eseries_system_serial }}]. Subnet [{{ eseries_subnet }}]."
+      when: current_eseries_api_info == {}
+
+    - name: Set storage systems Web Services URL information
+      set_fact:
+        current_eseries_api_is_proxy: "{{ current_eseries_api_info['proxy_required'] }}"
+        current_eseries_api_url: "{{ current_eseries_api_info['api_urls'][0] }}"
+        current_eseries_ssid: |-
+          {%- if current_eseries_api_info["proxy_required"] == False -%}
+          1
+          {%- elif current_eseries_api_info["proxy_required"] == True and current_eseries_api_info['proxy_ssid'] != "" -%}
+            {{- current_eseries_api_info['proxy_ssid'] -}}
+          {%- else -%}
+            {{- eseries_system_serial -}}
+          {%- endif -%}
+        current_eseries_api_username: "{% if current_eseries_api_info['proxy_required'] %}{{ eseries_proxy_api_username | default('admin') }}{% else %}{{ eseries_system_username | default('admin') }}{% endif %}"
+        current_eseries_api_password: "{% if current_eseries_api_info['proxy_required'] %}{{ eseries_proxy_api_password }}{% else %}{{ eseries_system_password }}{% endif %}"
+        current_eseries_validate_certs: "{{ eseries_validate_certs | default(omit) }}"
+      no_log: true
+  when: current_eseries_api_url is not defined or current_eseries_ssid is not defined
+  tags: always
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/collect_facts/prefer_proxy.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/collect_facts/prefer_proxy.yml
new file mode 100644
index 00000000..35838ab1
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/collect_facts/prefer_proxy.yml
@@ -0,0 +1,106 @@
+- name: Determine existing storage systems in Web Services Proxy.
+  uri:
+    url: "{{ eseries_proxy_api_url | regex_replace('v2[\/]?$', 'v2/storage-systems') }}"
+    headers:
+      Content-Type: "application/json"
+      Accept: "application/json"
+    url_username: "{{ eseries_proxy_api_username | default('admin') }}"
+    url_password: "{{ eseries_proxy_api_password }}"
+    validate_certs: false
+  register: proxy_systems
+  tags: always
+
+- name: Determine associated management interface IP addresses.
+  set_fact:
+    eseries_system_addresses: |-
+      {%- set addresses = [] %}
+      {%- set url_info = eseries_template_api_url | urlsplit %}
+      {%- for address in [eseries_management_interfaces["controller_a"][0]["address"] | default(""),
+                          eseries_management_interfaces["controller_a"][1]["address"] | default(""),
+                          eseries_management_interfaces["controller_b"][0]["address"] | default(""),
+                          eseries_management_interfaces["controller_b"][1]["address"] | default("")] %}
+        {%- if address != "" and addresses.append(address) -%}{%- endif %}
+      {%- endfor %}
+      {{ addresses }}
+  when: eseries_management_interfaces is defined
+  tags: always
+
+- name: Determine storage system SSID based on storage system serial number or associated IP addresses.
+  set_fact:
+    eseries_ssid_list: |-
+      {#- Determine any system that either has the expected serial number or a management ip address -#}
+      {%- set ssids = [] -%}
+
+      {#- Search discovered storage systems -#}
+      {%- for system in proxy_systems["json"] -%}
+
+        {#- Check for serial number match -#}
+        {%- if eseries_system_serial is defined and system["chassisSerialNumber"] == eseries_system_serial -%}
+          {%- if ssids.append(system["id"]) -%}{%- endif -%}
+
+        {%- elif eseries_proxy_ssid is defined and eseries_proxy_ssid == system["id"] -%}
+          {%- if ssids.append(system["id"]) -%}{%- endif -%}
+
+        {%- elif eseries_system_addresses is defined and eseries_system_addresses | length > 0 -%}
+          {%- for address in eseries_system_addresses -%}
+            {%- if address in system["managementPaths"] -%}
+              {%- if ssids.append(system["id"]) -%}{%- endif -%}
+            {%- endif -%}
+          {%- endfor -%}
+        {%- endif -%}
+      {%- endfor -%}
+      {{- ssids | unique -}}
+  tags: always
+
+- name: Use the Web Services Proxy REST API
+  set_fact:
+    current_eseries_api_url: "{{ eseries_proxy_api_url }}"
+    current_eseries_ssid: "{{ eseries_ssid_list[0] }}"
+    current_eseries_api_username: "{{ eseries_proxy_api_username | default('admin') }}"
+    current_eseries_api_password: "{{ eseries_proxy_api_password }}"
+    current_eseries_validate_certs: "{{ eseries_validate_certs | default(omit) }}"
+#  no_log: true
+  when: eseries_ssid_list | length == 1 and (eseries_proxy_ssid is not defined or eseries_proxy_ssid == eseries_ssid_list[0])
+  tags: always
+
+- name: Search subnet for storage system.
+  block:
+    - name: Search subnet for storage system.
+      include_tasks: collect_facts/discovery.yml
+      when: discovered_systems is not defined
+
+    - name: Check whether eseries_system_serial and eseries_subnet are defined.
+      fail:
+        msg: "eseries_system_serial and eseries_subnet must be defined in order to search for storage system."
+      when: eseries_system_serial is not defined or eseries_subnet is not defined
+
+    - name: Determine storage system Web Services information
+      set_fact:
+        current_eseries_api_info: |-
+          {% set info = {} %}
+          {%- for result in discovered_systems["results"] -%}
+            {%- for serial in (result["systems_found"].keys() | list) if eseries_system_serial and serial == eseries_system_serial -%}
+               {%- if info.update(result["systems_found"][serial]) %}{%- endif -%}
+            {%- endfor %}
+          {%- endfor %}
+          {{ info }}
+#      no_log: true
+
+    - name: Set storage systems Web Services URL information
+      set_fact:
+        current_eseries_api_is_proxy: "{{ current_eseries_api_info['proxy_required'] }}"
+        current_eseries_api_url: "{{ current_eseries_api_info['api_urls'][0] }}"
+        current_eseries_ssid: |-
+          {%- if eseries_proxy_ssid is defined -%}
+            {{- eseries_proxy_ssid -}}
+          {%- elif current_eseries_api_info["proxy_ssid"] != "" -%}
+            {{- current_eseries_api_info["proxy_ssid"] -}}
+          {%- else -%}
+            {{- eseries_system_serial -}}
+          {%- endif -%}
+        current_eseries_api_username: "{{ eseries_proxy_api_username | default('admin') }}"
+        current_eseries_api_password: "{{ eseries_proxy_api_password }}"
+        current_eseries_validate_certs: "{{ eseries_validate_certs | default(omit) }}"
+#        no_log: true
+  when: current_eseries_api_url is not defined or current_eseries_ssid is not defined
+  tags: always
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/collect_facts/validate_system_api_url.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/collect_facts/validate_system_api_url.yml
new file mode 100644
index 00000000..6717d596
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/collect_facts/validate_system_api_url.yml
@@ -0,0 +1,23 @@
+- name: Validate storage system urls.
+  block:
+    - name: Collect storage system facts.
+      uri:
+        url: "{{ item | regex_replace('v2[\/]?$', 'utils/about') }}"
+        headers:
+          Content-Type: "application/json"
+          Accept: "application/json"
+        validate_certs: false
+      ignore_errors: true
+      register: about_results
+      loop: "{{ lookup('list', eseries_api_url_list) }}"
+
+    - name: Determine the first successful Web Services REST API url.
+      set_fact:
+        current_eseries_api_url: |-
+          {%- set valid_urls = [] %}
+          {%- for result in about_results["results"] if not result["failed"] -%}
+            {%- if valid_urls.append(result['item']) %}{%- endif %}
+          {%- endfor %}
+          {{ valid_urls[0] | default(omit) }}
+  when: eseries_api_url_list is defined and eseries_api_url_list | length > 0
+  tags: always
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/main.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/main.yml
new file mode 100644
index 00000000..fe5afded
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/main.yml
@@ -0,0 +1,17 @@
+- name: Configure SANtricity Web Services Proxy's passwords
+  import_tasks: proxy_security.yml
+  delegate_to: localhost
+  run_once: true
+
+- name: Build information for Web Services
+  import_tasks: build_info.yml
+  delegate_to: localhost
+  tags:
+    - always
+
+- name: Configure SANtricity WebServices Proxy
+  import_tasks: proxy.yml
+  delegate_to: localhost
+  run_once: true
+  tags:
+    - always
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/proxy.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/proxy.yml
new file mode 100644
index 00000000..fe64e0e3
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/proxy.yml
@@ -0,0 +1,48 @@
+- name: Add storage systems to SANtricity Web Services Proxy
+  netapp_eseries.santricity.na_santricity_proxy_systems:
+    api_url: "{{ item['key'] }}"
+    api_username: "{{ item['value']['proxy_username'] }}"
+    api_password: "{{ item['value']['proxy_password'] }}"
+    validate_certs: "{{ item['value']['proxy_validate_certs'] | default(omit) }}"
+    accept_certificate: "{{ item['value']['proxy_accept_certifications'] | default(omit) }}"
+    subnet_mask: "{{ item['value']['proxy_subnet'] }}"
+    password: "{{ item['value']['proxy_default_password'] | default(omit) }}"
+    tags: "{{ item['value']['proxy_default_system_tags'] | default(omit) }}"
+    systems: "{{ item['value']['proxy_systems'] }}"
+  loop: "{{ lookup('dict', proxy_systems_info, wantlist=True) }}"
+#  no_log: true
+  vars:
+    proxy_systems_info: |-
+      {#- Build a dictionary of all inventoried proxies keyed by their api url #}
+      {%- set systems = {} %}
+      {%- for array in ansible_play_hosts_all %}
+        {%- if hostvars[array]["current_eseries_api_is_proxy"]  %}
+          {%- set array_info = {} %}
+          {%- if "eseries_system_serial" in hostvars[array] or "eseries_system_addresses" in hostvars[array] %}
+            {%- if array_info.update({
+              "ssid": hostvars[array]["current_eseries_ssid"] | default(omit),
+              "password": hostvars[array]["eseries_system_password"] | default(omit),
+              "serial": hostvars[array]["eseries_system_serial"] | default(omit),
+              "addresses": hostvars[array]["eseries_system_addresses"] | default(omit),
+              "tags": hostvars[array]["eseries_system_tags"] | default(omit)}) %}
+            {%- endif %}
+          {%- endif %}
+          {%- if "eseries_proxy_api_url" in hostvars[array] and "eseries_proxy_api_password" in hostvars[array] %}
+            {%- if hostvars[array]["eseries_proxy_api_url"] in systems %}
+              {%- if systems[hostvars[array]["eseries_proxy_api_url"]]["proxy_systems"].append(array_info) %}{%- endif %}
+            {%- else %}
+              {%- if systems.update({hostvars[array]["eseries_proxy_api_url"]: {
+                "proxy_username": hostvars[array]["eseries_proxy_api_username"] | default("admin"),
+                "proxy_password": hostvars[array]["eseries_proxy_api_password"] | default(omit),
+                "proxy_subnet": hostvars[array]["eseries_subnet"] | default(omit),
+                "proxy_systems": [array_info],
+                "proxy_validate_certs": hostvars[array]["eseries_validate_certs"] | default(omit),
+                "proxy_accept_certifications": hostvars[array]["eseries_proxy_accept_certifications"] | default(omit),
+                "proxy_default_system_tags": hostvars[array]["eseries_proxy_default_system_tags"] | default(omit),
+                "proxy_default_password": hostvars[array]["eseries_proxy_default_password"] | default(omit)}}) %}
+              {%- endif %}
+            {%- endif %}
+          {%- endif %}
+        {%- endif %}
+      {%- endfor %}
+      {{ systems }}
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/proxy_security.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/proxy_security.yml
new file mode 100644
index 00000000..6cf4a594
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_common/tasks/proxy_security.yml
@@ -0,0 +1,128 @@
+- name: Ensure proxy admin password has been set
+  na_santricity_auth:
+    ssid: proxy
+    api_url: "{{ item['key'] }}"
+    api_username: "{{ item['value']['proxy_username'] }}"
+    api_password: "{{ item['value']['current_password'] | default(item['value']['proxy_password']) }}"
+    validate_certs: "{{ item['value']['proxy_validate_certs'] }}"
+    minimum_password_length: "{{ item['value']['proxy_minimum_password_length'] }}"
+    user: admin
+    password: "{{ item['value']['proxy_password'] }}"
+  loop: "{{ lookup('dict', proxy_admin, wantlist=True) }}"
+  no_log: true
+  vars:
+    proxy_admin: |-
+      {#- Build a dictionary of all inventoried proxies keyed by their api url #}
+      {%- set systems = {} %}
+      {%- for array in ansible_play_hosts_all %}
+        {%- if "eseries_proxy_api_url" in hostvars[array] and "eseries_proxy_api_password" in hostvars[array] %}
+          {%- if systems.update({hostvars[array]["eseries_proxy_api_url"]: {
+            "proxy_username": hostvars[array]["eseries_proxy_api_username"] | default('admin'),
+            "proxy_password": hostvars[array]["eseries_proxy_api_password"],
+            "current_proxy_password": hostvars[array]["eseries_proxy_current_api_password"] | default(omit),
+            "proxy_validate_certs": hostvars[array]["eseries_validate_certs"] | default(omit),
+            "proxy_minimum_password_length": hostvars[array]["eseries_proxy_minimum_password_length"] | default(omit)}}) %}
+          {%- endif %}
+        {%- endif %}
+      {%- endfor %}
+      {{ systems }}
+  tags:
+    - always
+
+- name: Ensure proxy non-admin passwords have been set
+  na_santricity_auth:
+    ssid: proxy
+    api_url: "{{ item['value']['proxy_url'] }}"
+    api_username: "{{ item['value']['proxy_url_username'] }}"
+    api_password: "{{ item['value']['proxy_url_password'] }}"
+    validate_certs: "{{ eseries_validate_certs | default(omit) }}"
+    user: "{{ item['value']['proxy_username'] }}"
+    password: "{{ item['value']['proxy_password'] }}"
+  loop: "{{ lookup('dict', proxy_non_admin, wantlist=True) }}"
+  no_log: true
+  vars:
+    proxy_non_admin: |-
+      {#- Build a dictionary of all inventoried proxies keyed by their api url containing non-admin usernames/passwords #}
+      {%- set systems = {} %}
+      {%- for array in ansible_play_hosts_all %}
+        {%- if "eseries_proxy_api_url" in hostvars[array] and "eseries_proxy_api_password" in hostvars[array] and
+               (("eseries_proxy_monitor_password" in hostvars[array] and hostvars[array]["eseries_proxy_monitor_password"]) or
+                ("eseries_proxy_security_password" in hostvars[array] and hostvars[array]["eseries_proxy_security_password"]) or
+                ("eseries_proxy_storage_password" in hostvars[array] and hostvars[array]["eseries_proxy_storage_password"]) or
+                ("eseries_proxy_support_password" in hostvars[array] and hostvars[array]["eseries_proxy_support_password"])) %}
+          {%- if "eseries_proxy_monitor_password" in hostvars[array] and hostvars[array]["eseries_proxy_monitor_password"] and
+                 systems.update({[hostvars[array]["eseries_proxy_api_url"], 'monitor'] | join("-"): {
+            "proxy_url": hostvars[array]["eseries_proxy_api_url"],
+            "proxy_url_username": hostvars[array]["eseries_proxy_api_username"] | default('admin'),
+            "proxy_url_password": hostvars[array]["eseries_proxy_api_password"],
+            "proxy_username": 'monitor',
+            "proxy_password": hostvars[array]["eseries_proxy_monitor_password"]}}) %}
+          {%- endif %}
+          {%- if "eseries_proxy_security_password" in hostvars[array] and hostvars[array]["eseries_proxy_security_password"] and
+                 systems.update({[hostvars[array]["eseries_proxy_api_url"], 'security'] | join("-"): {
+            "proxy_url": hostvars[array]["eseries_proxy_api_url"],
+            "proxy_url_username": hostvars[array]["eseries_proxy_api_username"] | default('admin'),
+            "proxy_url_password": hostvars[array]["eseries_proxy_api_password"],
+            "proxy_username": 'security',
+            "proxy_password": hostvars[array]["eseries_proxy_security_password"]}}) %}
+          {%- endif %}
+          {%- if "eseries_proxy_storage_password" in hostvars[array] and hostvars[array]["eseries_proxy_storage_password"] and
+                 systems.update({[hostvars[array]["eseries_proxy_api_url"], 'storage'] | join("-"): {
+            "proxy_url": hostvars[array]["eseries_proxy_api_url"],
+            "proxy_url_username": hostvars[array]["eseries_proxy_api_username"] | default('admin'),
+            "proxy_url_password": hostvars[array]["eseries_proxy_api_password"],
+            "proxy_username": 'storage',
+            "proxy_password": hostvars[array]["eseries_proxy_storage_password"]}}) %}
+          {%- endif %}
+          {%- if "eseries_proxy_support_password" in hostvars[array] and hostvars[array]["eseries_proxy_support_password"] and
+                 systems.update({[hostvars[array]["eseries_proxy_api_url"], 'support'] | join("-"): {
+            "proxy_url": hostvars[array]["eseries_proxy_api_url"],
+            "proxy_url_username": hostvars[array]["eseries_proxy_api_username"] | default('admin'),
+            "proxy_url_password": hostvars[array]["eseries_proxy_api_password"],
+            "proxy_username": 'support',
+            "proxy_password": hostvars[array]["eseries_proxy_support_password"]}}) %}
+          {%- endif %}
+        {%- endif %}
+      {%- endfor %}
+      {{ systems }}
+
+- name: Ensure proxy LDAP have been configured
+  na_santricity_ldap:
+    ssid: proxy
+    api_url: "{{ item['key'] }}"
+    api_username: "{{ item['value']['proxy_username'] }}"
+    api_password: "{{ item['value']['current_password'] | default(item['value']['proxy_password']) }}"
+    validate_certs: "{{ item['value']['proxy_validate_certs'] }}"
+    state: "{{ item['value']['ldap_state'] }}"
+    identifier: "{{ item['value']['ldap_identifier'] | default(omit) }}"
+    server_url: "{{ item['value']['ldap_server'] | default(omit) }}"
+    bind_user: "{{ item['value']['ldap_bind_username'] | default(omit) }}"
+    bind_password: "{{ item['value']['ldap_bind_password'] | default(omit) }}"
+    search_base: "{{ item['value']['ldap_search_base'] | default(omit) }}"
+    user_attribute: "{{ item['value']['ldap_user_attribute'] | default(omit) }}"
+    role_mappings: "{{ item['value']['ldap_role_mappings'] | default(omit) }}"
+  ignore_errors: true
+  loop: "{{ lookup('dict', proxy_admin, wantlist=True) }}"
+  vars:
+    proxy_admin: |-
+      {#- Build a dictionary of all inventoried proxies keyed by their api url #}
+      {%- set systems = {} %}
+      {%- for array in ansible_play_hosts_all %}
+        {%- if "eseries_proxy_api_url" in hostvars[array] and "eseries_proxy_api_password" in hostvars[array] and "eseries_proxy_ldap_state" in hostvars[array] %}
+          {%- if systems.update({hostvars[array]["eseries_proxy_api_url"]: {
+            "proxy_username": hostvars[array]["eseries_proxy_api_username"] | default('admin'),
+            "proxy_password": hostvars[array]["eseries_proxy_api_password"],
+            "current_proxy_password": hostvars[array]["eseries_proxy_current_api_password"] | default(omit),
+            "proxy_validate_certs": hostvars[array]["eseries_validate_certs"] | default(omit),
+            "ldap_state": hostvars[array]["eseries_proxy_ldap_state"],
+            "ldap_identifier": hostvars[array]["eseries_proxy_ldap_identifier"] | default(omit),
+            "ldap_server": hostvars[array]["eseries_proxy_ldap_server"] | default(omit),
+            "ldap_bind_username": hostvars[array]["eseries_proxy_ldap_bind_username"] | default(omit),
+            "ldap_bind_password": hostvars[array]["eseries_proxy_ldap_bind_password"] | default(omit),
+            "ldap_search_base": hostvars[array]["eseries_proxy_ldap_search_base"] | default(omit),
+            "ldap_user_attribute": hostvars[array]["eseries_proxy_ldap_user_attribute"] | default(omit),
+            "ldap_role_mappings": hostvars[array]["eseries_proxy_ldap_role_mappings"] | default(omit)}}) %}
+          {%- endif %}
+        {%- endif %}
+      {%- endfor %}
+      {{ systems }}
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/README.md b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/README.md
new file mode 100644
index 00000000..0041e8d8
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/README.md
@@ -0,0 +1,339 @@
+nar_santricity_host
+=========
+    Configures storage pools, volumes, hosts, host groups, and port interfaces for NetApp E-Series storage arrays
+    using iSCSI, FC, SAS, IB, NVMe protocols.
+
+Requirements
+------------
+    - Ansible 2.9 or later
+    - NetApp E-Series E2800 platform or newer or NetApp E-Series SANtricity Web Services Proxy configured for older E-Series Storage arrays.
+
+Example Playbook
+----------------
+    - hosts: eseries_storage_systems
+      gather_facts: false
+      collection:
+        - netapp_eseries.santricity
+      tasks:
+      - name: Ensure NetApp E-Series storage system is properly configured
+        import_role:
+          name: nar_santricity_host
+
+Example Storage System Inventory File (Discover storage system with proxy)
+-------------------------------------
+    eseries_system_serial: "012345678901"   # Be sure to quote if the serial is all numbers and begins with zero.
+    eseries_system_password: admin_password
+    eseries_proxy_api_url: https://192.168.1.100:8443/devmgr/v2/
+    eseries_proxy_api_password: admin_password
+    eseries_subnet: 192.168.1.0/24
+    eseries_prefer_embedded: true
+    eseries_validate_certs: false
+
+    eseries_initiator_protocol: iscsi
+
+    # Controller port definitions
+    eseries_controller_port_config_method: static
+    eseries_controller_port_subnet_mask: 255.255.255.0
+    eseries_controller_port:
+      controller_a:
+        ports:
+          - address: 192.168.2.100
+          - address: 192.168.2.110
+      controller_b:
+        ports:
+          - address: 192.168.3.100
+          - address: 192.168.3.110
+
+    # Storage pool and volume configuration
+    eseries_storage_pool_configuration:
+      - name: pool[1-2]
+        raid_level: raid6
+        criteria_drive_count: 10
+        volumes:
+          - name: "[pool]_volume[A-C]"
+            host: server_group
+            size: 4096
+
+Example Storage System Inventory File (Without storage system discovery)
+-------------------------------------
+    eseries_system_api_url: https://192.168.1.200:8443/devmgr/v2/
+    eseries_system_password: admin_password
+    eseries_validate_certs: false
+
+    (...)   # Same as the previous example
+
+Role Variables
+--------------
+**Note that when values are specified below, they indicate the default value.**
+
+    # Web Services Embedded information
+    eseries_subnet:                   # Network subnet to search for the storage system specified in CIDR form. Example: 192.168.1.0/24
+    eseries_system_serial:            # Storage system serial number. Be sure to quote if the serial is all numbers and begins with zero. (This is located
+                                      #     on a label at the top-left towards the front on the device)
+    eseries_system_addresses:         # Storage system management IP addresses. Only required when eseries_system_serial or eseries_system_api_url are not
+                                      #     defined. When not specified, addresses will be populated with eseries_management_interfaces controller addresses.
+    eseries_system_api_url:           # Url for the storage system's for embedded web services rest api. Example: https://192.168.10.100/devmgr/v2
+    eseries_system_username: admin    # Username for the storage system's for embedded web services rest api
+    eseries_system_password:          # Password for the storage system's for embedded web services rest api and when the admin password has not been set
+                                      #     eseries_system_password will be used to set it.
+    eseries_proxy_ssid:               # Arbitrary string for the proxy to represent the storage system. eseries_system_serial will be used when not defined.
+    eseries_template_api_url:         # Template for the web services api url. Default: https://0.0.0.0:8443/devmgr/v2/
+    eseries_prefer_embedded: false    # Overrides the default behavior of using Web Services Proxy when eseries_proxy_api_url is defined. This will only effect storage systems that have Embedded Web Services.
+    eseries_validate_certs: true      # Indicates Whether SSL certificates should be verified. Used for both embedded and proxy. Choices: true, false
+
+    # Web Services Proxy information
+        Note: eseries_proxy_* variables are required to discover storage systems prior to SANtricity OS version 11.60.2.
+    eseries_proxy_api_url:         # Url for the storage system's for proxy web services rest api. Example: https://192.168.10.100/devmgr/v2
+    eseries_proxy_api_username:    # Username for the storage system's for proxy web services rest api.
+    eseries_proxy_api_password:    # Password for the storage system's for proxy web services rest api and when the admin password has not been set
+                                   #     eseries_proxy_api_password will be used to set it.
+
+    # Controller iSCSI Interface Port Default Policy Specifications
+    eseries_controller_iscsi_port_state: enabled         # Generally specifies whether a controller port definition should be applied Choices: enabled, disabled
+    eseries_controller_iscsi_port_config_method: dhcp    # General port configuration method definition for both controllers. Choices: static, dhcp
+    eseries_controller_iscsi_port_gateway:               # General port IPv4 gateway for both controllers.
+    eseries_controller_iscsi_port_subnet_mask:           # General port IPv4 subnet mask for both controllers.
+    eseries_controller_iscsi_port_mtu: 9000              # General port maximum transfer units (MTU) for both controllers. Any value greater than 1500 (bytes).
+    eseries_controller_iscsi_port:
+      controller_a:         # Ordered list of controller A channel definition.
+        - state:            # Whether the port should be enabled. Choices: enabled, disabled
+          config_method:    # Port configuration method Choices: static, dhcp
+          address:          # Port IPv4 address
+          gateway:          # Port IPv4 gateway
+          subnet_mask:      # Port IPv4 subnet_mask
+          mtu:              # Port IPv4 mtu
+      controller_b:         # Ordered list of controller B channel definition.
+        - (...)             # Same as controller A but for controller B
+
+    # Controller InfiniBand iSER Interface Channel
+    eseries_controller_ib_iser_port:
+      controller_a:    # Ordered list of controller A channel address definition.
+        -              # Port IPv4 address for channel 1
+        - (...)        # So on and so forth
+      controller_b:    # Ordered list of controller B channel address definition.
+
+    # Controller NVMe over InfiniBand Interface Channel
+    eseries_controller_nvme_ib_port:
+      controller_a:    # Ordered list of controller A channel address definition.
+        -              # Port IPv4 address for channel 1
+        - (...)        # So on and so forth
+      controller_b:    # Ordered list of controller B channel address definition.
+
+    # Controller NVMe RoCE Interface Port Default Policy Specifications
+    eseries_controller_nvme_roce_port_state: enabled         # Generally specifies whether a controller port definition should be applied Choices: enabled, disabled
+    eseries_controller_nvme_roce_port_config_method: dhcp    # General port configuration method definition for both controllers. Choices: static, dhcp
+    eseries_controller_nvme_roce_port_gateway:               # General port IPv4 gateway for both controllers.
+    eseries_controller_nvme_roce_port_subnet_mask:           # General port IPv4 subnet mask for both controllers.
+    eseries_controller_nvme_roce_port_mtu: 9000              # General port maximum transfer units (MTU). Any value greater than 1500 (bytes).
+    eseries_controller_nvme_roce_port_speed: auto            # General interface speed. Value must be a supported speed or auto for automatically negotiating the speed with the port.
+    eseries_controller_nvme_roce_port:
+      controller_a:         # Ordered list of controller A channel definition.
+        - state:            # Whether the port should be enabled.
+          config_method:    # Port configuration method Choices: static, dhcp
+          address:          # Port IPv4 address
+          subnet_mask:      # Port IPv4 subnet_mask
+          gateway:          # Port IPv4 gateway
+          mtu:              # Port IPv4 mtu
+          speed:            # Port IPv4 speed
+      controller_b:         # Ordered list of controller B channel definition.
+        - (...)             # Same as controller A but for controller B
+
+    # Target discovery specifications
+        Note: add the following to ansible-playbook command to update the chap secret: --extra-vars "eseries_target_chap_secret_update=True
+    eseries_target_name:                        # iSCSI target name that will be seen by the initiator
+    eseries_target_ping: True                   # Enables ICMP ping response from the configured iSCSI ports (boolean)
+    eseries_target_unnamed_discovery: True      # Whether the iSCSI target iqn should be returned when an initiator performs a discovery session.
+    eseries_target_chap_secret:                 # iSCSI chap secret. When left blank, the chap secret will be removed from the storage system.
+    eseries_target_chap_secret_update: False    # DO NOT REMOVE! Since na_santricity_iscsi_target cannot compare the chap secret with the current and chooses to always
+                                                #     return changed=True, this flag is used to force the module to update the chap secret. It is preferable to
+                                                #     leave this value False and to add the --extra-vars "eseries_target_chap_secret_update=True".
+
+    # Storage Pool Default Policy Specifications
+    eseries_storage_pool_state: present                   # Default storage pool state. Choices: present, absent
+    eseries_storage_pool_raid_level: raidDiskPool         # Default volume raid level. Choices: raid0, raid1, raid5, raid6, raidDiskPool
+    eseries_storage_pool_secure_pool: false               # Default for storage pool drive security. This flag will enable the security at rest feature. There
+                                                          #    must be sufficient FDE or FIPS security capable drives. Choices: true, false
+    eseries_storage_pool_criteria_drive_count:            # Default storage pool drive count.
+    eseries_storage_pool_reserve_drive_count:             # Default reserve drive count for drive reconstruction for storage pools using dynamic disk pool and
+                                                          #    the raid level must be set for raidDiskPool.
+    eseries_storage_pool_criteria_min_usable_capacity:    # Default minimum required capacity for storage pools.
+    eseries_storage_pool_criteria_drive_type:             # Default drive type for storage pools. Choices: hdd, ssd
+    eseries_storage_pool_criteria_size_unit: gb           # Default unit size for all storage pool related sizing.
+                                                          #    Choices: bytes, b, kb, mb, gb, tb, pb, eb, zb, yb
+    eseries_storage_pool_criteria_drive_min_size:         # Default minimum drive size for storage pools.
+    eseries_storage_pool_criteria_drive_require_da:       # Default for whether storage pools are required to have data assurance (DA) compatible drives.
+                                                          #    Choices: true, false
+    eseries_storage_pool_criteria_drive_require_fde:      # Default for whether storage pools are required to have drive security compatible drives.
+                                                          #    Choices: true, false
+    eseries_storage_pool_remove_volumes:                  # Default policy for deleting volumes prior to removing storage pools.
+    eseries_storage_pool_erase_secured_drives:            # Default policy for erasing the content drives during create and delete storage pool operations.
+                                                          #    Choices: true, false
+
+    # Volume Default Policy Specifications
+    eseries_volume_state: present                         # Default volume state. Choices: present, absent
+    eseries_volume_size_unit: gb                          # Default unit size for all volume sizing options.
+    eseries_volume_size:                                  # Default volume size or the presented size for thinly provisioned volumes.
+    eseries_volume_data_assurance_enabled:                # Default for whether data assurance(DA) is required to be enabled.
+    eseries_volume_segment_size_kb:                       # Default segment size measured in kib.
+    eseries_volume_read_cache_enable:                     # Default for read caching which will cache all read requests.
+    eseries_volume_read_ahead_enable:                     # Default for read ahead caching; this is good for sequential workloads to cache subsequent blocks.
+    eseries_volume_write_cache_enable:                    # Default for write caching which will cache all writes.
+    eseries_volume_cache_without_batteries:               # Default for allowing caching when batteries are not present.
+    eseries_volume_thin_provision:                        # Default for whether volumes should be thinly provisioned.
+    eseries_volume_thin_volume_repo_size:                 # Default for actually allocated space for thinly provisioned volumes.
+    eseries_volume_thin_volume_max_repo_size:             # Default for the maximum allocated space allowed for thinly provisioned volumes.
+    eseries_volume_thin_volume_expansion_policy:          # Default thin volume expansion policy. Choices: automatic, manual
+    eseries_volume_thin_volume_growth_alert_threshold:    # Default thin volume growth alert threshold; this is the threshold for when the thin volume expansion
+                                                          #    policy will be enacted. Allowable values are between and including 10% and 99%
+    eseries_volume_ssd_cache_enabled:                     # Default for ssd cache which will enable the volume to use an existing SSD cache on the storage array.
+    eseries_volume_host:                                  # Default host for all volumes; the value can be any host from the Ansible inventory. Any initiator may be
+                                                          #    used whether connected or not since the storage array does not require connectivity in order to create
+                                                          #    host objects.
+    eseries_volume_workload_name:                         # Default workload tag name
+    eseries_volume_workload_metadata:                     # Default workload metadata
+    eseries_volume_volume_metadata:                       # Default volume_metadata
+    eseries_volume_owning_controller                      # Default preferred owning controller
+    eseries_volume_wait_for_initialization: false         # Default for whether volume creation with wait for initialization to complete
+
+    # Storage Pool-Volume Mapping Default Policy Specifications
+    # ---------------------------------------------------------
+    eseries_lun_mapping_state: present    # Generally specifies whether a LUN mapping should be present. This is useful when adding a default host for all
+                                          #    volumes. Choices: present, absent
+    eseries_lun_mapping_host:             # Default host for all volumes not specifically give a host either in common_volume_configuration or in
+                                          #    eseries_storage_pool_configuration.
+
+    # Storage Pool-Volume Default Policy Specifications
+       Name schemes: Storage pool and volume names can be used to specify a naming scheme to produce a list of storage pools and volumes. The scheme are defined by
+                     brackets and can be used to specify a range of lowercase letters, uppercase letters, range of single digit numbers, any top-level inventory
+                     variables, and the current defined storage pool (volume only).
+    eseries_storage_pool_configuration:
+      - name:                                      # Name or name scheme (see above) for the storage pool.
+        state:                                     # Specifies whether the storage pool should exist (present, absent). When removing an existing storage array all of the
+                                                   #    volumes must be defined with state=absent.
+        raid_level                                 # Volume group raid level. Choices: raid0, raid1, raid5, raid6, raidDiskPool (Default: raidDiskPool)
+        secure_pool:                               # Default for storage pool drive security. This flag will enable the security at rest feature. There must be sufficient FDE
+                                                   #    or FIPS security capable drives. Choices: true, false
+        criteria_drive_count:                      # Default storage pool drive count.
+        reserve_drive_count:                       # Default reserve drive count for drive reconstruction for storage pools using dynamic disk pool and the raid level must be
+                                                   #    set for raidDiskPool.
+        criteria_min_usable_capacity:              # Default minimum required capacity for storage pools.
+        criteria_drive_type:                       # Default drive type for storage pools. Choices: hdd, ssd
+        criteria_size_unit:                        # Default unit size for all storage pool related sizing. Choices: bytes, b, kb, mb, gb, tb, pb, eb, zb, yb
+        criteria_drive_min_size:                   # Default minimum drive size for storage pools.
+        criteria_drive_require_da:                 # Default for whether storage pools are required to have data assurance (DA) compatible drives. Choices: true, false
+        criteria_drive_require_fde:                # Default for whether storage pools are required to have drive security compatible drives. Choices: true, false
+        remove_volumes:                            # Default policy for deleting volumes prior to removing storage pools.
+        erase_secured_drives:                      # Default policy for erasing the content drives during create and delete storage pool operations. Choices: true, false
+        common_volume_configuration:               # Any option that can be specified at the volume level can be generalized here at the storage pool level. This is useful when
+                                                   #    all volumes share common configuration definitions.
+        volumes:                                   # List of volumes associated the storage pool.
+          - state:                                 # Specifies whether the volume should exist (present, absent)
+            name:                                  # (required) Name or name scheme (see above) for the volume(s) to be created in the storage pool(s)
+            host:                                  # host or host group for the volume should be mapped to.
+            host_type:                             # Only required when using something other than Linux kernel 3.10 or later with DM-MP (Linux DM-MP),
+                                                   #     non-clustered Windows (Windows), or the storage system default host type is incorrect. Common definitions below:
+                                                   #     - AIX MPIO: The Advanced Interactive Executive (AIX) OS and the native MPIO driver
+                                                   #     - AVT 4M: Silicon Graphics, Inc. (SGI) proprietary multipath driver; refer to the SGI installation documentation for more information
+                                                   #     - HP-UX: The HP-UX OS with native multipath driver
+                                                   #     - Linux ATTO: The Linux OS and the ATTO Technology, Inc. driver (must use ATTO FC HBAs)
+                                                   #     - Linux DM-MP: The Linux OS and the native DM-MP driver
+                                                   #     - Linux Pathmanager: The Linux OS and the SGI proprietary multipath driver; refer to the SGI installation documentation for more information
+                                                   #     - Mac: The Mac OS and the ATTO Technology, Inc. driver
+                                                   #     - ONTAP: FlexArray
+                                                   #     - Solaris 11 or later: The Solaris 11 or later OS and the native MPxIO driver
+                                                   #     - Solaris 10 or earlier: The Solaris 10 or earlier OS and the native MPxIO driver
+                                                   #     - SVC: IBM SAN Volume Controller
+                                                   #     - VMware: ESXi OS
+                                                   #     - Windows: Windows Server OS and Windows MPIO with a DSM driver
+                                                   #     - Windows Clustered: Clustered Windows Server OS and Windows MPIO with a DSM driver
+                                                   #     - Windows ATTO: Windows OS and the ATTO Technology, Inc. driver
+            size:                                  # Size of the volume or presented size of the thinly provisioned volume.
+            size_unit:                             # Unit size for the size, thin_volume_repo_size, and thin_volume_max_repo_size
+                                                   #    Choices: bytes, b, kb, mb, gb, tb, pb, eb, zb, yb
+            segment_size_kb:                       # Indicates the amount of data stored on a drive before moving on to the next drive in the volume group. Does not apply to pool volumes.
+            thin_provision:                        # Whether volumes should be thinly provisioned.
+            thin_volume_repo_size:                 # Actually allocated space for thinly provisioned volumes.
+            thin_volume_max_repo_size:             # Maximum allocated space allowed for thinly provisioned volumes.
+            thin_volume_expansion_policy:          # Thin volume expansion policy. Choices: automatic, manual
+            thin_volume_growth_alert_threshold:    # Thin volume growth alert threshold; this is the threshold for when the thin volume expansion
+                                                   #    policy will be enacted. Allowable values are between and including 10% and 99%
+            ssd_cache_enabled:                     # Enables ssd cache which will enable the volume to use an existing SSD cache on the storage array.
+            data_assurance_enabled:                # Enables whether data assurance(DA) is required to be enabled.
+            read_cache_enable:                     # Enables read caching which will cache all read requests.
+            read_ahead_enable:                     # Enables read ahead caching; this is good for sequential workloads to cache subsequent blocks.
+            write_cache_enable:                    # Enables write caching which will cache all writes.
+            workload_name:                         # Name of the volume's workload. This can be defined using the metadata option or, if already defined, specify one already
+                                                   #    created on the storage array.
+            workload_metadata:                     # Dictionary containing arbitrary entries normally used for defining the volume(s) workload.
+            volume_metadata                        # Dictionary containing arbitrary entries used to define information about the volume itself.
+                                                   #    Note: format_type, format_options[0-9]?, mount_directory, mount_options[0-9]? are used by netapp_eseries.host.mount role to format and mount volumes.
+            wait_for_initialization:               # Whether volume creation with wait for initialization to complete
+
+    # Initiator-Target Protocol Variable Defaults
+        Note that the following commands need to produce a unique list of IQNs or WWNs of the interfaces used, line separated. Overwrite as necessary.
+    eseries_initiator_protocol: fc     # This variable defines which protocol the storage array will use. Choices: fc, iscsi, sas, ib_iser, ib_srp, nvme_ib, nvme_roce
+    eseries_initiator_command:
+      fc:
+        linux: "systool -c fc_host -v | grep port_name | cut -d '\"' -f 2 | cut -d 'x' -f 2 | sort | uniq"
+        windows: "(Get-InitiatorPort | Where-Object -P ConnectionType -EQ 'Fibre Channel' | Select-Object -Property PortAddress |
+                   Format-Table -AutoSize -HideTableHeaders | Out-String).trim()"
+      iscsi:
+        linux: "grep -o iqn.* /etc/iscsi/initiatorname.iscsi"
+        windows: "(get-initiatorPort | select-object -property nodeaddress | sort-object | get-unique | ft -autoSize | out-string -stream |
+                   select-string iqn | out-string).trim()"
+      sas:
+        # NetApp IMT for SAS attached E-Series SAN hosts recommends adding all possible SAS addresses with the base address
+        # starting at 0, and the last address ending in 3 for single port HBAs, or 7 for dual port HBAs. Since determining
+        # single vs . dual port HBAs adds complexity, we always add all 8 possible permutations of the SAS address.
+        linux: "systool -c scsi_host -v | grep host_sas_address | cut -d '\"' -f 2 | cut -d 'x' -f 2 | sort | uniq"
+        windows: "(Get-InitiatorPort | Where-Object -P ConnectionType -EQ 'SAS' | Select-Object -Property PortAddress |
+                   Format-Table -AutoSize -HideTableHeaders | Out-String).trim()"
+      ib_iser:
+        linux: "grep -o iqn.* /etc/iscsi/initiatorname.iscsi"
+        windows: ""   # add windows command for determining host iqn address(es)
+      ib_srp:
+        linux: "ibstat -p"
+        windows: ""     # Add Windows command for determining host guid
+      nvme_ib:
+        linux: ""       # Add Linux command for determining host nqn address(es)
+        windows: ""     # Add Windows command for determining host nqn address(es)
+      nvme_roce:
+        linux: ""       # Add Linux command for determining host nqn address(es)
+        windows: ""     # Add Windows command for determining host nqn address(es)
+
+    # Manual host definitions, Linux and Windows systems can be automatically populated based on host mappings found in eseries_storage_pool_configuration
+    eseries_host_force_port: true                 # Default for whether ports are to be allowed to be re-assigned (boolean)
+    eseries_host_remove_unused_hostgroup: true    # Forces any unused groups to be removed
+    eseries_host_object:
+      - name:         # Host label as referenced by the storage array.
+        state:        # Specifies whether host definition should be exist. Choices: present, absent
+        ports:        # List of port definitions
+          - type:     # Port protocol definition (iscsi, fc, sas, ib, nvme). Note that you should use 'iscsi' prior to Santricity version 11.60 for IB iSER.
+            label:    # Arbitrary port label
+            port:     # Port initiator (iqn, wwn, etc)
+        group:        # Host's host group
+        host_type:    # Only required when using something other than Linux kernel 3.10 or later with DM-MP (Linux DM-MP),
+                      #     non-clustered Windows (Windows), or the storage system default host type is incorrect. Common definitions below:
+                      #     - AIX MPIO: The Advanced Interactive Executive (AIX) OS and the native MPIO driver
+                      #     - AVT 4M: Silicon Graphics, Inc. (SGI) proprietary multipath driver; refer to the SGI installation documentation for more information
+                      #     - HP-UX: The HP-UX OS with native multipath driver
+                      #     - Linux ATTO: The Linux OS and the ATTO Technology, Inc. driver (must use ATTO FC HBAs)
+                      #     - Linux DM-MP: The Linux OS and the native DM-MP driver
+                      #     - Linux Pathmanager: The Linux OS and the SGI proprietary multipath driver; refer to the SGI installation documentation for more information
+                      #     - Mac: The Mac OS and the ATTO Technology, Inc. driver
+                      #     - ONTAP: FlexArray
+                      #     - Solaris 11 or later: The Solaris 11 or later OS and the native MPxIO driver
+                      #     - Solaris 10 or earlier: The Solaris 10 or earlier OS and the native MPxIO driver
+                      #     - SVC: IBM SAN Volume Controller
+                      #     - VMware: ESXi OS
+                      #     - Windows: Windows Server OS and Windows MPIO with a DSM driver
+                      #     - Windows Clustered: Clustered Windows Server OS and Windows MPIO with a DSM driver
+                      #     - Windows ATTO: Windows OS and the ATTO Technology, Inc. driver
+
+License
+-------
+    BSD-3-Clause
+
+Author Information
+------------------
+    Nathan Swartz (@ndswartz)
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/defaults/main.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/defaults/main.yml
new file mode 100644
index 00000000..5dd8cbcc
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/defaults/main.yml
@@ -0,0 +1,294 @@
+# Web Services Embedded information
+#eseries_subnet:                         # Network subnet to search for the storage system specified in CIDR form. Example: 192.168.1.0/24
+#eseries_system_serial:                  # Storage system serial number. Be sure to quote if the serial is all numbers and begins with zero. (This is located
+                                         #     on a label at the top-left towards the front on the device)
+#eseries_system_addresses:               # Storage system management IP addresses. Only required when eseries_system_serial or eseries_system_api_url are not
+                                         #     defined. When not specified, addresses will be populated with eseries_management_interfaces controller addresses.
+#eseries_system_api_url:                 # Url for the storage system's for embedded web services rest api. Example: https://192.168.10.100/devmgr/v2
+#eseries_system_username:                # Username for the storage system's for embedded web services rest api
+#eseries_system_password:                # Password for the storage system's for embedded web services rest api and when the admin password has not been set
+                                         #     eseries_system_password will be used to set it.
+#eseries_proxy_ssid:                     # Arbitrary string for the proxy to represent the storage system. eseries_system_serial will be used when not defined.
+#eseries_template_api_url:               # Template for the web services api url. Default: https://0.0.0.0:8443/devmgr/v2/
+#eseries_validate_certs:                 # Indicates Whether SSL certificates should be verified. Used for both embedded and proxy. Choices: true, false
+
+# Web Services Proxy information
+#   Note: eseries_proxy_* variables are required to discover storage systems prior to SANtricity OS version 11.60.2.
+#eseries_proxy_api_url:                  # Url for the storage system's for proxy web services rest api. Example: https://192.168.10.100/devmgr/v2
+#eseries_proxy_api_username:             # Username for the storage system's for proxy web services rest api.
+#eseries_proxy_api_password:             # Password for the storage system's for proxy web services rest api and when the admin password has not been set
+                                         #     eseries_proxy_api_password will be used to set it.
+
+
+# Storage Pool Default Policy Specifications
+# ------------------------------------------
+eseries_storage_pool_state: present                      # Default storage pool state. Choices: present, absent
+eseries_storage_pool_raid_level: raidDiskPool            # Default volume raid level. Choices: raid0, raid1, raid5, raid6, raidDiskPool
+eseries_storage_pool_secure_pool: false                  # Default for storage pool drive security. This flag will enable the security at rest feature. There
+                                                         #    must be sufficient FDE or FIPS security capable drives. Type: boolean
+#eseries_storage_pool_criteria_drive_count:              # Default storage pool drive count.
+#eseries_storage_pool_reserve_drive_count:               # Default reserve drive count for drive reconstruction for storage pools using dynamic disk pool and
+                                                         #    the raid level must be set for raidDiskPool.
+#eseries_storage_pool_criteria_min_usable_capacity:      # Default minimum required capacity for storage pools.
+#eseries_storage_pool_criteria_drive_type:               # Default drive type for storage pools. Choices: hdd, ssd
+eseries_storage_pool_criteria_size_unit: gb              # Default unit size for all storage pool related sizing.
+                                                         #    Choices: bytes, b, kb, mb, gb, tb, pb, eb, zb, yb
+#eseries_storage_pool_criteria_drive_min_size:           # Default minimum drive size for storage pools.
+#eseries_storage_pool_criteria_drive_require_da:         # Default for whether storage pools are required to have data assurance (DA) compatible drives.
+                                                         #    Type: boolean
+#eseries_storage_pool_criteria_drive_require_fde:        # Default for whether storage pools are required to have drive security compatible drives.
+                                                         #    Type: boolean
+eseries_storage_pool_remove_volumes: True                # Default policy for deleting volumes prior to removing storage pools.
+#eseries_storage_pool_erase_secured_drives:              # Default policy for erasing the content drives during create and delete storage pool operations.
+                                                         #    Type: boolean
+
+# Volume Default Policy Specifications
+# ------------------------------------
+eseries_volume_state: present                        # Default volume state. Choices: present, absent
+eseries_volume_size_unit: gb                         # Default unit size for all volume sizing options.
+#eseries_volume_size:                                # Default volume size or the presented size for thinly provisioned volumes.
+#eseries_volume_data_assurance_enabled:              # Default for whether data assurance(DA) is required to be enabled.
+#eseries_volume_segment_size_kb:                     # Default segment size measured in kib.
+#eseries_volume_read_cache_enable:                   # Default for read caching which will cache all read requests.
+#eseries_volume_read_ahead_enable:                   # Default for read ahead caching; this is good for sequential workloads to cache subsequent blocks.
+#eseries_volume_write_cache_enable:                  # Default for write caching which will cache all writes.
+#eseries_volume_cache_without_batteries:             # Default for allowing caching when batteries are not present.
+#eseries_volume_thin_provision:                      # Default for whether volumes should be thinly provisioned.
+#eseries_volume_thin_volume_repo_size:               # Default for actually allocated space for thinly provisioned volumes.
+#eseries_volume_thin_volume_max_repo_size:           # Default for the maximum allocated space allowed for thinly provisioned volumes.
+#eseries_volume_thin_volume_expansion_policy:        # Default thin volume expansion policy. Choices: automatic, manual
+#eseries_volume_thin_volume_growth_alert_threshold:  # Default thin volume growth alert threshold; this is the threshold for when the thin volume expansion
+                                                     #    policy will be enacted. Allowable values are between and including 10% and 99%
+#eseries_volume_ssd_cache_enabled:                   # Default for ssd cache which will enable the volume to use an existing SSD cache on the storage array.
+#eseries_volume_host:                                # Default host for all volumes; the value can be any host from the Ansible inventory. Any initiator may be
+                                                     #    used whether connected or not since the storage array does not require connectivity in order to create
+                                                     #    host objects.
+#eseries_volume_workload_name:                       # Default workload tag name
+#eseries_volume_metadata:                            # Default metadata
+#eseries_volume_owning_controller                    # Default preferred owning controller
+eseries_volume_wait_for_initialization: false        # Default for whether volume creation with wait for initialization to complete
+
+
+# Storage Pool-Volume Mapping Default Policy Specifications
+# ---------------------------------------------------------
+eseries_lun_mapping_state: present       # Generally specifies whether a LUN mapping should be present. This is useful when adding a default host for all
+                                         #    volumes. Choices: present, absent
+#eseries_lun_mapping_host:               # Default host for all volumes not specifically give a host either in common_volume_configuration or in
+                                         #    eseries_storage_pool_configuration.
+
+
+# Controller iSCSI Interface Port Default Policy Specifications
+# -------------------------------------------------------
+eseries_controller_iscsi_port_state: enabled              # Generally specifies whether a controller port definition should be applied Choices: enabled, disabled
+eseries_controller_iscsi_port_config_method: dhcp         # General port configuration method definition for both controllers. Choices: static, dhcp
+#eseries_controller_iscsi_port_gateway:                   # General port IPv4 gateway for both controllers.
+#eseries_controller_iscsi_port_subnet_mask:               # General port IPv4 subnet mask for both controllers.
+eseries_controller_iscsi_port_mtu: 9000                   # General port maximum transfer units (MTU) for both controllers. Any value greater than 1500 (bytes).
+#eseries_controller_iscsi_port:
+#  controller_a:                                    # Controller A port definition.
+#    state:                                         # General definitions for all ports on controller A. Any option specified in the ports definition can be
+                                                    #     specified here to generalize for all controller A ports. Choices: enabled, disabled
+#    config_method:                                 # Port configuration method Choices: static, dhcp
+#    address:                                       # Port IPv4 address
+#    gateway:                                       # Port IPv4 gateway
+#    subnet_mask:                                   # Port IPv4 subnet_mask
+#    mtu:                                           # Port IPv4 mtu
+#    ports:                                         # List containing ports definitions
+#      - state:                                     # Whether the port should be enabled. Choices: enabled, disabled
+#        config_method:                             # Port configuration method Choices: static, dhcp
+#        address:                                   # Port IPv4 address
+#        gateway:                                   # Port IPv4 gateway
+#        subnet_mask:                               # Port IPv4 subnet_mask
+#  controller_b:                                    # Controller B port definition.
+#    (...)                                          # Same as controller A but for controller B
+
+
+
+# Controller InfiniBand iSER Interface Channel
+# --------------------------------------------
+#eseries_controller_ib_iser_port:
+#  controller_a:                                     # Ordered list of controller A channel address definition.
+#      -                                             # Port IPv4 address for channel 1
+#      - (...)                                       # So on and so forth
+#  controller_b:                                     # Ordered list of controller B channel address definition.
+
+# Controller NVMe over InfiniBand Interface Channel
+# -------------------------------------------------
+#eseries_controller_nvme_ib_port:
+#  controller_a:                                     # Ordered list of controller A channel address definition.
+#      -                                             # Port IPv4 address for channel 1
+#      - (...)                                       # So on and so forth
+#  controller_b:                                     # Ordered list of controller B channel address definition.
+
+# Controller NVMe RoCE Interface Port Default Policy Specifications
+# -------------------------------------------------------
+eseries_controller_nvme_roce_port_state: enabled              # Generally specifies whether a controller port definition should be applied Choices: enabled, disabled
+eseries_controller_nvme_roce_port_config_method: dhcp         # General port configuration method definition for both controllers. Choices: static, dhcp
+#eseries_controller_nvme_roce_port_gateway:                   # General port IPv4 gateway for both controllers.
+#eseries_controller_nvme_roce_port_subnet_mask:               # General port IPv4 subnet mask for both controllers.
+eseries_controller_nvme_roce_port_mtu: 9000                  # General port maximum transfer units (MTU). Any value greater than 1500 (bytes).
+eseries_controller_nvme_roce_port_speed: auto                # General interface speed. Value must be a supported speed or auto for automatically negotiating the speed with the port.
+#eseries_controller_nvme_roce_port:
+#  controller_a:                                    # Controller A port definition.
+#    state:                                         # General definitions for all ports on controller A. Any option specified in the ports definition can be
+                                                    #     specified here to generalize for all controller A ports.
+#    config_method:                                 # Port configuration method Choices: static, dhcp
+#    address:                                       # Port IPv4 address
+#    gateway:                                       # Port IPv4 gateway
+#    subnet_mask:                                   # Port IPv4 subnet_mask
+#    mtu:                                           # Port IPv4 mtu
+#    speed:                                         # Port IPv4 speed
+#    ports:                                         # List containing ports definitions
+#      - channel:                                   # Channel of the port to modify. This will be a numerical value that represents the port; typically read
+                                                    #     left to right on the HIC.
+#        state:                                     # Whether the port should be enabled.
+#        config_method:                             # Port configuration method Choices: static, dhcp
+#        address:                                   # Port IPv4 address
+#        gateway:                                   # Port IPv4 gateway
+#        subnet_mask:                               # Port IPv4 subnet_mask
+#  controller_b:                                    # Controller B port definition.
+#    state:                                         # General definitions for all ports on controller B. Any option specified in the ports definition can be
+                                                    #     specified here to generalize for all controller A ports.
+#    config_method:                                 # Port configuration method Choices: static, dhcp
+#    address:                                       # Port IPv4 address
+#    gateway:                                       # Port IPv4 gateway
+#    subnet_mask:                                   # Port IPv4 subnet_mask
+#    mtu:                                           # Port IPv4 mtu
+#    speed:                                         # Port IPv4 speed
+#    ports:                                         # List containing ports definitions
+#      - channel:                                   # Channel of the port to modify. This will be a numerical value that represents the port; typically read
+                                                    #     left to right on the HIC.
+#        state:                                     # Whether the port should be enabled.
+#        config_method:                             # Port configuration method Choices: static, dhcp
+#        address:                                   # Port IPv4 address
+#        gateway:                                   # Port IPv4 gateway
+#        subnet_mask:                               # Port IPv4 subnet_mask
+
+
+# Target Discovery Default Policy Specifications
+# ----------------------------------------------
+#eseries_target_name:                         # iSCSI target name
+eseries_target_ping: True                     # Enables ICMP ping response from the configured iSCSI ports (boolean)
+eseries_target_unnamed_discovery: True        # Whether the iSCSI target iqn should be returned when an initiator performs a discovery session.
+eseries_target_chap_secret:                   # iSCSI chap secret. When left blank, the chap secret will be removed from the storage system.
+eseries_target_chap_secret_update: False      # DO NOT REMOVE! Since netapp_e_iscsi_target cannot compare the chap secret with the current and chooses to always
+                                              #     return changed=True, this flag is used to force the module to update the chap secret. It is preferable to
+                                              #     leave this value False and to add the --extra-vars "eseries_target_chap_secret_update=True".
+
+# Host Default Policy Specifications
+# ----------------------------------
+eseries_host_force_port: True                 # Default for whether ports are to be allowed to be re-assigned (boolean)
+eseries_host_remove_unused_hostgroup: True    # Forces any unused groups to be removed
+#eseries_host_object:
+#  - name:                                    # Host label as referenced by the storage array.
+#    state:
+#    host_type:                               # Windows (non-clustering) 1, Windows (clustering) 6, Vmware 10, Linux (using kernal 3.10 and later) 28
+#    group:                                   # Host's host group
+#    ports:                                   # List of port definitions
+#      - type:                                # Port protocol definition (iscsi, fc, sas, ib, nvme)
+#        label:                               # Arbitrary port label
+#        port:                                # Port initiator (iqn, wwn, etc)
+
+
+# Storage Pool-Volume Default Policy Specifications
+# -------------------------------------------------
+#   Name schemes: Storage pool and volume names can be used to specify a naming scheme to produce a list of storage pools and volumes. The scheme are defined by
+#                 brackets and can be used to specify a range of lowercase letters, uppercase letters, range of single digit numbers, any top-level inventory
+#                 variables, and the current defined storage pool (volume only).
+
+#eseries_storage_pool_configuration:
+#  - name:                                    # Name or name scheme (see above) for the storage pool.
+#    state:                                   # Specifies whether the storage pool should exist (present, absent). When removing an existing storage array all of the
+                                              #    volumes must be defined with state=absent.
+#    raid_level                               # Volume group raid level. Choices: raid0, raid1, raid5, raid6, raidDiskPool (Default: raidDiskPool)
+#    secure_pool: no                          # Default for storage pool drive security. This flag will enable the security at rest feature. There must be sufficient FDE
+                                              #    or FIPS security capable drives. Type: boolean
+#    criteria_drive_count:                    # Default storage pool drive count.
+#    reserve_drive_count:                     # Default reserve drive count for drive reconstruction for storage pools using dynamic disk pool and the raid level must be
+                                              #    set for raidDiskPool.
+#    criteria_min_usable_capacity:            # Default minimum required capacity for storage pools.
+#    criteria_drive_type:                     # Default drive type for storage pools. Choices: hdd, ssd
+#    criteria_size_unit: gb                   # Default unit size for all storage pool related sizing. Choices: bytes, b, kb, mb, gb, tb, pb, eb, zb, yb
+#    criteria_drive_min_size:                 # Default minimum drive size for storage pools.
+#    criteria_drive_require_da:               # Default for whether storage pools are required to have data assurance (DA) compatible drives. Type: boolean
+#    criteria_drive_require_fde:              # Default for whether storage pools are required to have drive security compatible drives. Type: boolean
+#    remove_volumes:                          # Default policy for deleting volumes prior to removing storage pools.
+#    erase_secured_drives:                    # Default policy for erasing the content drives during create and delete storage pool operations. Type: boolean
+#    common_volume_configuration:             # Any option that can be specified at the volume level can be generalized here at the storage pool level. This is useful when
+                                              #    all volumes share common configuration definitions.
+#    volumes:                                 # List of volumes associated the storage pool.
+#      - state:                               # Specifies whether the volume should exist (present, absent)
+#        name:                                # (required) Name or name scheme (see above) for the volume(s) to be created in the storage pool(s)
+#        host:                                # host or host group for the volume should be mapped to.
+#        host_type:                           # Only required when using something other than Linux kernel 3.10 or later with DM-MP (Linux DM-MP),
+                                              #     non-clustered Windows (Windows), or the storage system default host type is incorrect. Common definitions below:
+                                              #     - AIX MPIO: The Advanced Interactive Executive (AIX) OS and the native MPIO driver
+                                              #     - AVT 4M: Silicon Graphics, Inc. (SGI) proprietary multipath driver; refer to the SGI installation documentation for more information
+                                              #     - HP-UX: The HP-UX OS with native multipath driver
+                                              #     - Linux ATTO: The Linux OS and the ATTO Technology, Inc. driver (must use ATTO FC HBAs)
+                                              #     - Linux DM-MP: The Linux OS and the native DM-MP driver
+                                              #     - Linux Pathmanager: The Linux OS and the SGI proprietary multipath driver; refer to the SGI installation documentation for more information
+                                              #     - Mac: The Mac OS and the ATTO Technology, Inc. driver
+                                              #     - ONTAP: FlexArray
+                                              #     - Solaris 11 or later: The Solaris 11 or later OS and the native MPxIO driver
+                                              #     - Solaris 10 or earlier: The Solaris 10 or earlier OS and the native MPxIO driver
+                                              #     - SVC: IBM SAN Volume Controller
+                                              #     - VMware: ESXi OS
+                                              #     - Windows: Windows Server OS and Windows MPIO with a DSM driver
+                                              #     - Windows Clustered: Clustered Windows Server OS and Windows MPIO with a DSM driver
+                                              #     - Windows ATTO: Windows OS and the ATTO Technology, Inc. driver
+#        size:                                # Size of the volume or presented size of the thinly provisioned volume.
+#        size_unit:                           # Unit size for the size, thin_volume_repo_size, and thin_volume_max_repo_size
+                                              #    Choices: bytes, b, kb, mb, gb, tb, pb, eb, zb, yb
+#        segment_size_kb:                     # Indicates the amount of data stored on a drive before moving on to the next drive in the volume group. Does not apply to pool volumes.
+#        thin_provision:                      # Whether volumes should be thinly provisioned.
+#        thin_volume_repo_size:               # Actually allocated space for thinly provisioned volumes.
+#        thin_volume_max_repo_size:           # Maximum allocated space allowed for thinly provisioned volumes.
+#        thin_volume_expansion_policy:        # Thin volume expansion policy. Choices: automatic, manual
+#        thin_volume_growth_alert_threshold:  # Thin volume growth alert threshold; this is the threshold for when the thin volume expansion
+                                              #    policy will be enacted. Allowable values are between and including 10% and 99%
+#        ssd_cache_enabled:                   # Enables ssd cache which will enable the volume to use an existing SSD cache on the storage array.
+#        data_assurance_enabled:              # Enables whether data assurance(DA) is required to be enabled.
+#        read_cache_enable:                   # Enables read caching which will cache all read requests.
+#        read_ahead_enable:                   # Enables read ahead caching; this is good for sequential workloads to cache subsequent blocks.
+#        write_cache_enable:                  # Enables write caching which will cache all writes.
+#        workload_name:                       # Name of the volume's workload. This can be defined using the metadata option or, if already defined, specify one already
+                                              #    created on the storage array.
+#        metadata:                            # Dictionary containing arbitrary entries normally used for defining the volume(s) workload.
+#        wait_for_initialization:             # Whether volume creation with wait for initialization to complete
+
+
+# Initiator-Target Protocol Variable Defaults
+# -------------------------------------------
+#   Note that the following commands produce a unique list of IQNs or WWNs of the interfaces used, line separated.
+eseries_initiator_protocol:     # This variable defines which protocol the storage array will use. Choices: iscsi, fc, sas, ib_iser, ib_srp, nvme_ib, nvme_roce
+eseries_initiator_command:
+  fc:
+    linux: "systool -c fc_host -v | grep port_name | cut -d '\"' -f 2 | cut -d 'x' -f 2 | sort | uniq"
+    windows: "(Get-InitiatorPort | Where-Object -P ConnectionType -EQ 'Fibre Channel' | Select-Object -Property PortAddress |
+               Format-Table -AutoSize -HideTableHeaders | Out-String).trim()"
+  iscsi:
+    linux: "grep -o iqn.* /etc/iscsi/initiatorname.iscsi"
+    windows: "(get-initiatorPort | select-object -property nodeaddress | sort-object | get-unique | ft -autoSize | out-string -stream |
+               select-string iqn | out-string).trim()"
+  sas:
+    # NetApp IMT for SAS attached E-Series SAN hosts recommends adding all possible SAS addresses with the base address
+    # starting at 0, and the last address ending in 3 for single port HBAs, or 7 for dual port HBAs. Since determining
+    # single vs . dual port HBAs adds complexity, we always add all 8 possible permutations of the SAS address.
+    linux: "systool -c scsi_host -v | grep host_sas_address | cut -d '\"' -f 2 | cut -d 'x' -f 2 | sort | uniq"
+    windows: "(Get-InitiatorPort | Where-Object -P ConnectionType -EQ 'SAS' | Select-Object -Property PortAddress |
+               Format-Table -AutoSize -HideTableHeaders | Out-String).trim()"
+  ib_iser:
+    linux: "grep -o iqn.* /etc/iscsi/initiatorname.iscsi"
+    windows: ""   # add windows command for determining host iqn address(es)
+  ib_srp:
+    linux: "ibstat -p"
+    windows: ""   # add windows command for determining host guid
+  nvme_ib:
+    linux: "cat /etc/nvme/hostnqn"
+    windows: ""   # add windows command for determining host nqn address(es)
+  nvme_roce:
+    linux: "cat /etc/nvme/hostnqn"
+    windows: ""   # add windows command for determining host nqn address(es)
+
+eseries_remove_all_configuration: False   # WARNING!!! This flag will force any storage pool, volume, host, hostgroup and mapping to be absent. Choices: True, False
\ No newline at end of file
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/meta/main.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/meta/main.yml
new file mode 100644
index 00000000..78685845
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/meta/main.yml
@@ -0,0 +1,19 @@
+galaxy_info:
+  author: Nathan Swartz (@ndswartz)
+  description: Manages NetApp E-Series storage system's interfaces, storage pools, volumes, hosts, hostgroups, and volume mappings.
+  company: NetApp, Inc
+  license: BSD-3 Clause
+  platforms:
+  min_ansible_version: 2.9
+  galaxy_tags:
+    - netapp
+    - eseries
+    - storage
+    - iscsi
+    - sas
+    - fc
+    - infiniband
+    - ib
+    - nvme
+
+dependencies: []
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/initiator.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/initiator.yml
new file mode 100644
index 00000000..7bd3e4d7
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/initiator.yml
@@ -0,0 +1,109 @@
+---
+# netapp_eseries_iscsi/tasks/initiator.yml
+
+- name: Collect facts on the storage array
+  na_santricity_facts:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+  register: storage_array_facts
+  when: eseries_host_object is defined
+
+- name: Organize current and expected hostgroups
+  set_fact:
+    current_storage_array_hostgroups: |-
+      {%- set current_hostgroup={} %}
+      {%- for group in storage_array_facts["storage_array_facts"]["netapp_host_groups"] %}
+        {%- if current_hostgroup.update( {group["name"]: []} ) %}{%- endif %}
+        {%- for host in storage_array_facts["storage_array_facts"]["netapp_hosts"] %}
+          {%- if group["id"] == host["group_id"] and current_hostgroup[group["name"]].append(host["name"]) %}{%- endif %}
+        {%- endfor %}
+      {%- endfor %}
+      {{ current_hostgroup }}
+    hostgroups: |-
+      {%- set hostgroups=[] %}
+      {%- for host in eseries_host_object %}
+        {%- if "group" in (host.keys()|list) and host["group"] not in hostgroups and
+               ("state" not in (host.keys()|list) or host["state"] == "present") and hostgroups.append(host["group"]) %}
+        {%- endif %}
+      {%- endfor %}
+      {{ hostgroups }}
+  when: eseries_host_object is defined
+
+- name: Configure inventory-defined hostgroup definitions
+  na_santricity_hostgroup:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    state: "{{ eseries_remove_all_configuration_state | default('present') }}"
+    name: "{{ item }}"
+    hosts: "{{ current_storage_array_hostgroups[item] | default(omit) }}"
+  loop: "{{ lookup('list', hostgroups) }}"
+  when: eseries_host_object is defined and (hostgroups | length > 0)
+
+- name: Configure inventory-defined host definitions
+  na_santricity_host:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    state: "{{ eseries_remove_all_configuration_state | default(item['state'] | default(omit)) }}"
+    name: "{{ item['name'] }}"
+    ports: "{{ item['ports'] | default(omit) }}"
+    force_port: "{{ item['force_port'] | default(eseries_host_force_port | default(omit)) }}"
+    group: "{{ item['group'] | default(eseries_host_group | default(omit)) }}"
+    host_type: "{{ item['host_type_index'] | default(item['host_type'] | default(eseries_host_type_index | default(omit))) }}"
+  loop: "{{ lookup('list', eseries_host_object) }}"
+  when: eseries_host_object is defined
+
+- name: Collect facts on the storage array
+  na_santricity_facts:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+  register: storage_array_facts
+  when: eseries_host_object is defined
+
+- name: Update the current storage array hostgroups
+  set_fact:
+    current_storage_array_hostgroups: |-
+      {%- set current_hostgroup={} %}
+      {%- for group in storage_array_facts["storage_array_facts"]["netapp_host_groups"] %}
+        {%- if current_hostgroup.update( {group["name"]: []} ) %}{%- endif %}
+        {%- for host in storage_array_facts["storage_array_facts"]["netapp_hosts"] %}
+          {%- if group["id"] == host["group_id"] and current_hostgroup[group["name"]].append(host["name"]) %}{%- endif %}
+        {%- endfor %}
+      {%- endfor %}
+      {{ current_hostgroup }}
+  when: eseries_host_object is defined
+
+- name: Create list of unused hostgroups
+  set_fact:
+    unused_hostgroups: |-
+      {%- set unused_hostgroup = [] %}
+      {%- for current_host_name in (current_storage_array_hostgroups.keys()|list) %}
+        {%- if (current_storage_array_hostgroups[current_host_name]|length==0) and unused_hostgroup.append(current_host_name) %}{%- endif %}
+      {%- endfor %}
+      {{ unused_hostgroup }}
+  when: eseries_host_object is defined
+
+- name: Configure inventory-defined hostgroup definitions
+  na_santricity_hostgroup:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    state: absent
+    name: "{{ item }}"
+    hosts: "{{ current_storage_array_hostgroups[item] | default(omit) }}"
+  loop: "{{ lookup('list', unused_hostgroups) }}"
+  when: "eseries_host_object is defined and (unused_hostgroups|length>0) and eseries_host_remove_unused_hostgroup is
+         defined and eseries_host_remove_unused_hostgroup"
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/interface.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/interface.yml
new file mode 100644
index 00000000..9139e6ff
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/interface.yml
@@ -0,0 +1,27 @@
+- name: Configure controllers iSCSI interface ports
+  import_tasks: interface/iscsi.yml
+  delegate_to: localhost
+  when: eseries_initiator_protocol == "iscsi"
+  tags:
+    - iscsi
+
+- name: Configure controllers InfiniBand iSER interface ports
+  import_tasks: interface/ib_iser.yml
+  delegate_to: localhost
+  when: eseries_initiator_protocol == "ib_iser"
+  tags:
+    - ib_iser
+
+- name: Configure controllers NVMe interface ports over InfiniBand
+  import_tasks: interface/nvme_ib.yml
+  delegate_to: localhost
+  when: eseries_initiator_protocol == "nvme_ib"
+  tags:
+    - nvme_ib
+
+- name: Configure controllers NVMe interface ports on RoCE
+  import_tasks: interface/nvme_roce.yml
+  delegate_to: localhost
+  when: eseries_initiator_protocol == "nvme_roce"
+  tags:
+    - nvme_roce
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/interface/ib_iser.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/interface/ib_iser.yml
new file mode 100644
index 00000000..eece8972
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/interface/ib_iser.yml
@@ -0,0 +1,29 @@
+- name: Configure controller A inventory-defined controller port definitions for InfiniBand iSER
+  na_santricity_ib_iser_interface:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    controller: A
+    channel: "{{ channel + 1 }}"
+    address: "{{ item }}"
+  loop: "{{ lookup('list', eseries_controller_ib_iser_port['controller_a']) }}"
+  loop_control:
+    index_var: channel
+  when: eseries_controller_ib_iser_port is defined and eseries_controller_ib_iser_port['controller_a'] is defined
+
+- name: Configure controller B inventory-defined controller port definitions for InfiniBand iSER
+  na_santricity_ib_iser_interface:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    controller: B
+    channel: "{{ channel + 1 }}"
+    address: "{{ item }}"
+  loop: "{{ lookup('list', eseries_controller_ib_iser_port['controller_b']) }}"
+  loop_control:
+    index_var: channel
+  when: eseries_controller_ib_iser_port is defined and eseries_controller_ib_iser_port['controller_b'] is defined
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/interface/iscsi.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/interface/iscsi.yml
new file mode 100644
index 00000000..733dfcba
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/interface/iscsi.yml
@@ -0,0 +1,54 @@
+- name: Configure controller A inventory-defined controller port definitions for iSCSI
+  na_santricity_iscsi_interface:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    state: "{{ item['state'] | default(eseries_controller_iscsi_port_state | default(omit)) }}"
+    port: "{{ port + 1 }}"
+    controller: A
+    config_method: "{{ item['config_method'] | default(eseries_controller_iscsi_port_config_method | default(omit)) }}"
+    address: "{{ item['address'] | default(omit) }}"
+    gateway: "{{ item['gateway'] | default(eseries_controller_iscsi_port_gateway | default(omit)) }}"
+    subnet_mask: "{{ item['subnet_mask'] | default(eseries_controller_iscsi_port_subnet_mask | default(omit)) }}"
+    mtu: "{{ item['mtu'] | default(eseries_controller_iscsi_port_mtu | default(omit)) }}"
+  loop: "{{ lookup('list', eseries_controller_iscsi_port['controller_a']) }}"
+  loop_control:
+    index_var: port
+  when: eseries_controller_iscsi_port is defined and eseries_controller_iscsi_port['controller_a'] is defined
+
+- name: Configure controller B inventory-defined controller port definitions for iSCSI
+  na_santricity_iscsi_interface:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    state: "{{ item['state'] | default(eseries_controller_iscsi_port_state | default(omit)) }}"
+    port: "{{ port + 1 }}"
+    controller: B
+    config_method: "{{ item['config_method'] | default(eseries_controller_iscsi_port_config_method | default(omit)) }}"
+    address: "{{ item['address'] | default(omit) }}"
+    gateway: "{{ item['gateway'] | default(eseries_controller_iscsi_port_gateway | default(omit)) }}"
+    subnet_mask: "{{ item['subnet_mask'] | default(eseries_controller_iscsi_port_subnet_mask | default(omit)) }}"
+    mtu: "{{ item['mtu'] | default(eseries_controller_iscsi_port_mtu | default(omit)) }}"
+  loop: "{{ lookup('list', eseries_controller_iscsi_port['controller_b']) }}"
+  loop_control:
+    index_var: port
+  when: eseries_controller_iscsi_port is defined and eseries_controller_iscsi_port['controller_b'] is defined
+
+- name: Configure iSCSI discovery parameters
+  na_santricity_iscsi_target:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    name: "{{ eseries_iscsi_target_name | default(omit) }}"
+    chap_secret: "{%- if eseries_iscsi_target_chap_secret_update %}{{ eseries_iscsi_target_chap_secret }}{%- endif %}"
+    ping: "{{ eseries_iscsi_target_ping | default(omit) }}"
+    unnamed_discovery: "{{ eseries_iscsi_target_unnamed_discovery | default(omit) }}"
+  when: ((eseries_iscsi_target_chap_secret is defined and eseries_iscsi_target_chap_secret_update) or
+         eseries_iscsi_target_name is defined or eseries_iscsi_target_ping is defined or
+         eseries_iscsi_target_unnamed_discovery is defined)
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/interface/nvme_ib.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/interface/nvme_ib.yml
new file mode 100644
index 00000000..d1f33afa
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/interface/nvme_ib.yml
@@ -0,0 +1,29 @@
+- name: Configure controller A inventory-defined controller port definitions for NVMe interface ports over InfiniBand
+  na_santricity_nvme_interface:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    controller: A
+    channel: "{{ channel + 1 }}"
+    address: "{{ item }}"
+  loop: "{{ lookup('list', eseries_controller_nvme_ib_port['controller_a']) }}"
+  loop_control:
+    index_var: channel
+  when: eseries_controller_nvme_ib_port is defined and eseries_controller_nvme_ib_port['controller_a'] is defined
+
+- name: Configure controller B inventory-defined controller port definitions for NVMe interface ports over InfiniBand
+  na_santricity_nvme_interface:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    controller: B
+    channel: "{{ channel + 1 }}"
+    address: "{{ item }}"
+  loop: "{{ lookup('list', eseries_controller_nvme_ib_port['controller_b']) }}"
+  loop_control:
+    index_var: channel
+  when: eseries_controller_nvme_ib_port is defined and eseries_controller_nvme_ib_port['controller_b'] is defined
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/interface/nvme_roce.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/interface/nvme_roce.yml
new file mode 100644
index 00000000..8dd711fe
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/interface/nvme_roce.yml
@@ -0,0 +1,41 @@
+- name: Configure controller A inventory-defined controller port definitions for NVMe interface ports on RoCE
+  na_santricity_nvme_interface:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    state: "{{ item['state'] | default(eseries_controller_nvme_roce_port_state | default(omit)) }}"
+    controller: A
+    channel: "{{ channel + 1 }}"
+    config_method: "{{ item['config_method'] | default(eseries_controller_nvme_roce_port_config_method | default(omit)) }}"
+    address: "{{ item['address'] | default(omit) }}"
+    gateway: "{{ item['gateway'] | default(eseries_controller_nvme_roce_port_gateway | default(omit)) }}"
+    subnet_mask: "{{ item['subnet_mask'] | default(eseries_controller_nvme_roce_port_subnet_mask | default(omit)) }}"
+    mtu: "{{ item['mtu'] | default(eseries_controller_nvme_roce_port_mtu | default(omit)) }}"
+    speed: "{{ item['speed'] | default(eseries_controller_nvme_roce_port_speed | default(omit)) }}"
+  loop: "{{ lookup('list', eseries_controller_nvme_roce_port['controller_a']) }}"
+  loop_control:
+    index_var: channel
+  when: eseries_controller_nvme_roce_port is defined and eseries_controller_nvme_roce_port['controller_a'] is defined
+
+- name: Configure controller B inventory-defined controller port definitions for NVMe interface ports on RoCE
+  na_santricity_nvme_interface:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    state: "{{ item['state'] | default(eseries_controller_nvme_roce_port_state | default(omit)) }}"
+    controller: B
+    channel: "{{ channel + 1 }}"
+    config_method: "{{ item['config_method'] | default(eseries_controller_nvme_roce_port_config_method | default(omit)) }}"
+    address: "{{ item['address'] | default(omit) }}"
+    gateway: "{{ item['gateway'] | default(eseries_controller_nvme_roce_port_gateway | default(omit)) }}"
+    subnet_mask: "{{ item['subnet_mask'] | default(eseries_controller_nvme_roce_port_subnet_mask | default(omit)) }}"
+    mtu: "{{ item['mtu'] | default(eseries_controller_nvme_roce_port_mtu | default(omit)) }}"
+    speed: "{{ item['speed'] | default(eseries_controller_nvme_roce_port_speed | default(omit)) }}"
+  loop: "{{ lookup('list', eseries_controller_nvme_roce_port['controller_b']) }}"
+  loop_control:
+    index_var: channel
+  when: eseries_controller_nvme_roce_port is defined and eseries_controller_nvme_roce_port['controller_b'] is defined
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/lun_mapping.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/lun_mapping.yml
new file mode 100644
index 00000000..9db1c05b
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/lun_mapping.yml
@@ -0,0 +1,119 @@
+- name: Collect facts on the storage array
+  na_santricity_facts:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+  register: storage_array_facts
+
+- name: Collect volume host and host group list
+  set_fact:
+    hosts: "{{ lookup('netapp_eseries.santricity.santricity_host', hostvars[inventory_hostname]) }}"
+
+- name: Retrieve required details and map luns
+  block:
+    - name: Collect host/host group networking information
+      setup:
+        gather_subset: min
+      register: hosts_info
+      delegate_to: "{{ item }}"
+      delegate_facts: True
+      loop: "{{ lookup('list', (hosts['expected_hosts'].keys() | list)) }}"
+
+    - name: Collect Ansible defined host and host group interface information
+      set_fact:
+        host_interface_ansible: |-
+          {%- set host_interfaces = [] -%}
+          {%- for host in (hosts['expected_hosts'].keys() | list) -%}
+            {%- if "eseries_iscsi_iqn" in (hostvars[host].keys() | list) -%}
+              {%- if host_interfaces.append({"item": host, "stdout_lines": [hostvars[host]["eseries_iscsi_iqn"]]}) -%}{%- endif -%}
+            {%- endif -%}
+          {%- endfor -%}
+          {{ host_interfaces }}
+
+    - name: Collect host and host group interface information for Linux
+      shell: "{{ eseries_initiator_command[eseries_initiator_protocol]['linux'] }}"
+      register: host_interface_linux
+      delegate_to: "{{ item }}"
+      become: True
+      changed_when: False
+      failed_when: "host_interface_linux.rc != 0"
+      when: 'eseries_initiator_protocol in ["iscsi", "ib_iser"] and "eseries_iscsi_iqn" not in (hostvars[item].keys() | list) and hostvars[item]["ansible_facts"]["system"] == "Linux"'
+      loop: "{{ lookup('list', (hosts['expected_hosts'].keys() | list)) }}"
+
+    - name: Collect host and host group interface information for Windows
+      win_shell: "{{ eseries_initiator_command[eseries_initiator_protocol]['windows'] }}"
+      register: host_interface_windows
+      delegate_to: "{{ item }}"
+      changed_when: False
+      failed_when: "host_interface_windows.rc != 0"
+      when: 'eseries_initiator_protocol in ["iscsi", "ib_iser"] and "eseries_iscsi_iqn" not in (hostvars[item].keys() | list) and hostvars[item]["ansible_facts"]["os_family"] == "Windows"'
+      loop: "{{ lookup('list', (hosts['expected_hosts'].keys() | list)) }}"
+
+    - name: Aggregate host/host group interface information
+      set_fact:
+        host_interface: |-
+          {%- set host_interfaces = [] -%}
+          {%- for interface in host_interface_ansible + host_interface_linux['results'] + host_interface_windows['results'] -%}
+            {%- if "skipped" not in (interface.keys() | list) or interface["skipped"] == False -%}
+              {%- if host_interfaces.append(interface) -%}{%- endif -%}
+            {%- endif -%}
+          {%- endfor -%}
+          {{- host_interfaces -}}
+
+    - name: Organize host/host group interface information and update hosts variable
+      set_fact:
+        hosts: "{{ lookup('netapp_eseries.santricity.santricity_host_detail',
+                           hosts, hosts_info=hosts_info['results'], host_interface_ports=host_interface, protocol=eseries_initiator_protocol) }}"
+
+    - name: Create all hosts objects on the storage array
+      na_santricity_host:
+        ssid: "{{ current_eseries_ssid }}"
+        api_url: "{{ current_eseries_api_url }}"
+        api_username: "{{ current_eseries_api_username }}"
+        api_password: "{{ current_eseries_api_password }}"
+        validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+        state: "{{ eseries_remove_all_configuration_state | default(hosts['expected_hosts'][item]['state'] | default(omit)) }}"
+        name: "{{ hosts['expected_hosts'][item]['sanitized_hostname'] }}"
+        ports: "{{ hosts['expected_hosts'][item]['ports'] }}"
+        force_port: "{{ eseries_host_force_port | default(omit) }}"
+        host_type: "{{ hosts['expected_hosts'][item]['host_type'] | default(omit) }}"
+      loop: "{{ lookup('list', (hosts['expected_hosts'].keys()|list)) }}"
+
+    - name: Create all required host groups on the storage array
+      na_santricity_hostgroup:
+        ssid: "{{ current_eseries_ssid }}"
+        api_url: "{{ current_eseries_api_url }}"
+        api_username: "{{ current_eseries_api_username }}"
+        api_password: "{{ current_eseries_api_password }}"
+        validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+        state: "{{ eseries_remove_all_configuration_state | default('present') }}"
+        name: "{{ item }}"
+        hosts: "{{ hosts['host_groups'][item] | default(omit) }}"
+      loop: "{{ lookup('list', (hosts['host_groups'].keys()|list)) }}"
+
+    - name: Update facts on the storage array
+      na_santricity_facts:
+        ssid: "{{ current_eseries_ssid }}"
+        api_url: "{{ current_eseries_api_url }}"
+        api_username: "{{ current_eseries_api_username }}"
+        api_password: "{{ current_eseries_api_password }}"
+        validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+      register: storage_array_facts
+      when: eseries_remove_all_configuration_state is not defined or eseries_remove_all_configuration_state == False
+
+    - name: Map hosts to there respective volume
+      na_santricity_lun_mapping:
+        ssid: "{{ current_eseries_ssid }}"
+        api_url: "{{ current_eseries_api_url }}"
+        api_username: "{{ current_eseries_api_username }}"
+        api_password: "{{ current_eseries_api_password }}"
+        validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+        state: present
+        volume: "{{ item['volume'] }}"
+        target: "{{ item['target'] | default(eseries_lun_mapping_host) }}"
+        lun: "{{ item['lun'] }}"
+      loop: "{{ lookup('netapp_eseries.santricity.santricity_lun_mapping', storage_array_facts,
+                       volumes=lookup('netapp_eseries.santricity.santricity_volume', hostvars[inventory_hostname]), wantlist=True) }}"
+  when: hosts != []
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/main.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/main.yml
new file mode 100644
index 00000000..bea64768
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/main.yml
@@ -0,0 +1,50 @@
+- name: Set current storage system credentials
+  include_role:
+    name: netapp_eseries.santricity.nar_santricity_common
+    tasks_from: build_info.yml
+  when: current_eseries_api_url is not defined
+  tags:
+    - always
+
+- name: Override all inventory configuration states.
+  set_fact:
+    eseries_remove_all_configuration_state: absent
+  when: eseries_remove_all_configuration is defined and eseries_remove_all_configuration == True
+  tags:
+    - always
+
+- name: Configure NetApp E-Series storage system disk pool configuration
+  import_tasks: storage_pool_present.yml
+  delegate_to: localhost
+  tags:
+    - storage_pools
+
+- name: Configure NetApp E-Series storage system volume configuration
+  import_tasks: volume.yml
+  delegate_to: localhost
+  tags:
+    - volumes
+
+- name: Configure NetApp E-Series storage system disk pool configuration
+  import_tasks: storage_pool_absent.yml
+  delegate_to: localhost
+  tags:
+    - storage_pools
+
+- name: Configure storage system's hosts/hostgroups initiators
+  import_tasks: initiator.yml
+  delegate_to: localhost
+  tags:
+    - initiators
+
+- name: Map storage system's volumes to host objects
+  import_tasks: lun_mapping.yml
+  delegate_to: localhost
+  tags:
+    - lun_mappings
+
+- name: Configure controllers interfaces
+  import_tasks: interface.yml
+  delegate_to: localhost
+  tags:
+    - interface
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/storage_pool_absent.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/storage_pool_absent.yml
new file mode 100644
index 00000000..d20e5dfe
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/storage_pool_absent.yml
@@ -0,0 +1,22 @@
+- name: Configure NetApp E-Series storage system disk pool configuration
+  na_santricity_storagepool:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    state: "{{ item['state'] | default(eseries_storage_pool_state | default(omit)) }}"
+    name: "{{ item['name'] | default(omit) }}"
+    raid_level: "{{ item['raid_level'] | default(eseries_storage_pool_raid_level | default(omit)) }}"
+    secure_pool: "{{ item['secure_pool'] | default(eseries_storage_pool_secure_pool | default(omit)) }}"
+    criteria_drive_count:  "{{ item['criteria_drive_count'] | default(eseries_storage_pool_criteria_drive_count | default(omit)) }}"
+    reserve_drive_count:  "{{ item['reserve_drive_count'] | default(eseries_storage_pool_reserve_drive_count | default(omit)) }}"
+    criteria_min_usable_capacity:  "{{ item['criteria_min_usable_capacity'] | default(eseries_storage_pool_criteria_min_usable_capacity | default(omit)) }}"
+    criteria_drive_type:  "{{ item['criteria_drive_type'] | default(eseries_storage_pool_criteria_drive_type | default(omit)) }}"
+    criteria_size_unit:  "{{ item['criteria_size_unit'] | default(eseries_storage_pool_criteria_size_unit | default(omit)) }}"
+    criteria_drive_min_size:  "{{ item['criteria_drive_min_size'] | default(eseries_storage_pool_criteria_drive_min_size | default(omit)) }}"
+    criteria_drive_require_da:  "{{ item['criteria_drive_require_da'] | default(eseries_storage_pool_criteria_drive_require_da | default(omit)) }}"
+    criteria_drive_require_fde:  "{{ item['criteria_drive_require_fde'] | default(eseries_storage_pool_criteria_drive_require_fde | default(omit)) }}"
+    remove_volumes:  "{{ item['remove_volumes'] | default(eseries_storage_pool_remove_volumes | default(omit)) }}"
+    erase_secured_drives:  "{{ item['erase_secured_drives'] | default(eseries_storage_pool_erase_secured_drives | default(omit)) }}"
+  loop: "{{ query('netapp_eseries.santricity.santricity_storage_pool', hostvars[inventory_hostname], state='absent') }}"
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/storage_pool_present.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/storage_pool_present.yml
new file mode 100644
index 00000000..d51e147d
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/storage_pool_present.yml
@@ -0,0 +1,23 @@
+- name: Configure NetApp E-Series storage system disk pool configuration
+  na_santricity_storagepool:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    state: "{{ eseries_remove_all_configuration_state | default(item['state'] | default(eseries_storage_pool_state | default(omit))) }}"
+    name: "{{ item['name'] | default(omit) }}"
+    raid_level: "{{ item['raid_level'] | default(eseries_storage_pool_raid_level | default(omit)) }}"
+    secure_pool: "{{ item['secure_pool'] | default(eseries_storage_pool_secure_pool | default(omit)) }}"
+    criteria_drive_count:  "{{ item['criteria_drive_count'] | default(eseries_storage_pool_criteria_drive_count | default(omit)) }}"
+    reserve_drive_count:  "{{ item['reserve_drive_count'] | default(eseries_storage_pool_reserve_drive_count | default(omit)) }}"
+    criteria_min_usable_capacity:  "{{ item['criteria_min_usable_capacity'] | default(eseries_storage_pool_criteria_min_usable_capacity | default(omit)) }}"
+    criteria_drive_type:  "{{ item['criteria_drive_type'] | default(eseries_storage_pool_criteria_drive_type | default(omit)) }}"
+    criteria_size_unit:  "{{ item['criteria_size_unit'] | default(eseries_storage_pool_criteria_size_unit | default(omit)) }}"
+    criteria_drive_min_size:  "{{ item['criteria_drive_min_size'] | default(eseries_storage_pool_criteria_drive_min_size | default(omit)) }}"
+    criteria_drive_require_da:  "{{ item['criteria_drive_require_da'] | default(eseries_storage_pool_criteria_drive_require_da | default(omit)) }}"
+    criteria_drive_require_fde:  "{{ item['criteria_drive_require_fde'] | default(eseries_storage_pool_criteria_drive_require_fde | default(omit)) }}"
+    remove_volumes:  "{{ item['remove_volumes'] | default(eseries_storage_pool_remove_volumes | default(omit)) }}"
+    erase_secured_drives:  "{{ item['erase_secured_drives'] | default(eseries_storage_pool_erase_secured_drives | default(omit)) }}"
+  loop: "{{ query('netapp_eseries.santricity.santricity_storage_pool', hostvars[inventory_hostname], state='present') }}"
+  when: eseries_remove_all_configuration is not defined or eseries_remove_all_configuration == False
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/volume.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/volume.yml
new file mode 100644
index 00000000..ee6d79c1
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_host/tasks/volume.yml
@@ -0,0 +1,31 @@
+- name: Configure Netapp E-Series storage system disk pool volume configuration
+  na_santricity_volume:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    state: "{{ eseries_remove_all_configuration_state | default(item['state'] | default(eseries_volume_state | default('present'))) }}"
+    name: "{{ item['name'] }}"
+    storage_pool_name: "{{ item['storage_pool_name'] }}"
+    size: "{{ item['size'] | default(eseries_volume_size | default(omit)) }}"
+    size_unit: "{{ item['size_unit'] | default(eseries_volume_size_unit | default(omit)) }}"
+    segment_size_kb: "{{ item['segment_size_kb'] | default(eseries_volume_segment_size_kb | default(omit)) }}"
+    owning_controller: "{{ item['owning_controller'] | default(eseries_volume_owning_controller | default(omit)) }}"
+    thin_provision: "{{ item['thin_provision'] | default(eseries_volume_thin_provision | default(omit)) }}"
+    thin_volume_repo_size: "{{ item['thin_volume_repo_size'] | default(eseries_volume_thin_volume_repo_size | default(omit)) }}"
+    thin_volume_max_repo_size: "{{ item['thin_volume_max_repo_size'] | default(eseries_volume_thin_volume_max_repo_size | default(omit)) }}"
+    thin_volume_expansion_policy: "{{ item['thin_volume_expansion_policy'] | default(eseries_volume_thin_volume_expansion_policy | default(omit)) }}"
+    thin_volume_growth_alert_threshold: "{{ item['thin_volume_growth_alert_threshold'] | default(eseries_volume_thin_volume_growth_alert_threshold | default(omit)) }}"
+    ssd_cache_enabled: "{{ item['ssd_cache_enabled'] | default(eseries_volume_ssd_cache_enabled | default(omit)) }}"
+    data_assurance_enabled: "{{ item['data_assurance_enabled'] | default(eseries_volume_data_assurance_enabled | default(omit)) }}"
+    read_cache_enable: "{{ item['read_cache_enable'] | default(eseries_volume_read_cache_enable | default(omit)) }}"
+    read_ahead_enable: "{{ item['read_ahead_enable'] | default(eseries_volume_read_ahead_enable | default(omit)) }}"
+    write_cache_enable: "{{ item['write_cache_enable'] | default(eseries_volume_write_cache_enable | default(omit)) }}"
+    cache_without_batteries: "{{ item['cache_without_batteries'] | default(eseries_volume_cache_without_batteries | default(omit)) }}"
+    wait_for_initialization: "{{ item['wait_for_initialization'] | default(eseries_volume_wait_for_initialization | default(omit)) }}"
+    workload_name: "{{ item['workload_name'] | default(eseries_volume_workload_name | default(omit)) }}"
+    workload_metadata: "{{ item['workload_metadata'] | default(item['metadata'] | default(eseries_volume_workload_metadata | default(eseries_volume_metadata | default(omit)))) }}"
+    volume_metadata: "{{ item['volume_metadata'] | default(eseries_volume_volume_metadata | default(omit)) }}"
+  when: eseries_storage_pool_configuration is defined
+  loop: "{{ query('netapp_eseries.santricity.santricity_volume', hostvars[inventory_hostname]) }}"
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/.travis.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/.travis.yml
new file mode 100644
index 00000000..36bbf620
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/.travis.yml
@@ -0,0 +1,29 @@
+---
+language: python
+python: "2.7"
+
+# Use the new container infrastructure
+sudo: false
+
+# Install ansible
+addons:
+  apt:
+    packages:
+    - python-pip
+
+install:
+  # Install ansible
+  - pip install ansible
+
+  # Check ansible version
+  - ansible --version
+
+  # Create ansible.cfg with correct roles_path
+  - printf '[defaults]\nroles_path=../' >ansible.cfg
+
+script:
+  # Basic role syntax check
+  - ansible-playbook tests/test.yml -i tests/inventory --syntax-check
+
+notifications:
+  webhooks: https://galaxy.ansible.com/api/v1/notifications/
\ No newline at end of file
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/README.md b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/README.md
new file mode 100644
index 00000000..f54ae2ee
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/README.md
@@ -0,0 +1,273 @@
+nar_santricity_management
+=========
+    Manages NetApp E-Series storage system's name, passwords, management interfaces, alerts, syslog, auditlog, asup, ldap, certificates, drive firmware and controller firmware.
+
+Requirements
+------------
+    - Ansible 2.9 or later
+    - NetApp E-Series E2800 platform or newer or NetApp E-Series SANtricity Web Services Proxy configured for older E-Series storage systems.
+
+Example Playbook
+----------------
+    - hosts: eseries_storage_systems
+      gather_facts: false
+      collection:
+        - netapp_eseries.santricity
+      tasks:
+        - name: Ensure NetApp E-Series storage system is properly configured
+          import_role:
+            name: nar_santricity_management
+
+Example Storage System Inventory File (Discover storage system with proxy)
+-------------------------------------
+    eseries_system_serial: "012345678901"   # Be sure to quote if the serial is all numbers and begins with zero.
+    eseries_system_password: admin_password
+    eseries_proxy_api_url: https://192.168.1.100:8443/devmgr/v2/
+    eseries_proxy_api_password: admin_password
+    eseries_subnet: 192.168.1.0/24
+    eseries_prefer_embedded: false    # Overrides the default behavior of using Web Services Proxy when eseries_proxy_api_url is defined. This will only effect storage systems that have Embedded Web Services.
+    eseries_validate_certs: false
+
+    eseries_system_name: my_eseries_array
+    eseries_system_cache_block_size: 128
+    eseries_system_cache_flush_threshold: 90
+    eseries_system_autoload_balance: enabled
+    eseries_system_host_connectivity_reporting: enabled
+    eseries_system_default_host_type: Linux DM-MP
+
+    eseries_management_interfaces:
+      config_method: static
+      subnet_mask: 255.255.255.0
+      gateway: 192.168.1.1
+      dns_config_method: static
+      dns_address: 192.168.1.253
+      dns_address_backup:  192.168.1.254
+      ssh: true
+      ntp_config_method: static
+      ntp_address: 192.168.1.200
+      ntp_address_backup: 192.168.1.201
+      controller_a:
+        - address: 192.168.1.100
+        - address: 192.168.1.101
+      controller_b:
+        - address: 192.168.1.102
+        - address: 192.168.1.103
+
+    eseries_ldap_state: present
+    eseries_ldap_bind_username:
+    eseries_ldap_bind_password:
+    eseries_ldap_server:
+    eseries_ldap_search_base:
+    eseries_ldap_role_mappings:
+      ".*":
+        - storage.admin
+        - storage.monitor
+        - support.admin
+        - security.admin
+
+    eseries_client_certificate_certificates:
+      - /path/to/client_certificate.crt
+
+    eseries_firmware_firmware: "/path/to/firmware.dlp"
+    eseries_firmware_nvsram: "/path/to/nvsram.dlp"
+    eseries_drive_firmware_firmware_list:
+      - "/path/to/drive_firmware.dlp"
+
+    eseries_asup_state: enabled
+    eseries_asup_active: true
+    eseries_asup_days: [sunday, saturday]
+    eseries_asup_start: 17
+    eseries_asup_end: 24
+    eseries_asup_validate: false
+    eseries_asup_method: email
+    eseries_asup_email:
+      server: smtp.example.com
+      sender: noreply@example.com
+
+    eseries_syslog_state: present
+    eseries_syslog_address: 192.168.1.150
+    eseries_syslog_protocol: udp
+    eseries_syslog_port: 514
+    eseries_alert_syslog_servers:
+        - "address": 192.168.1.150
+          "port": 514
+
+Example Storage System Inventory File (Without storage system discovery)
+-------------------------------------
+    eseries_system_api_url: https://192.168.1.200:8443/devmgr/v2/
+    eseries_system_password: admin_password
+    eseries_validate_certs: false
+
+    (...)   # Same as the previous example
+
+Role Variables
+--------------
+**Note that when values are specified below, they indicate the default value.**
+
+    # Web Services Embedded information
+    eseries_subnet:                    # Network subnet to search for the storage system specified in CIDR form. Example: 192.168.1.0/24
+    eseries_system_serial:             # Storage system serial number. Be sure to quote if the serial is all numbers and begins with zero. (This is located on a label at the top-left towards the front on the device)
+    eseries_system_addresses:          # Storage system management IP addresses. Only required when eseries_system_serial or eseries_system_api_url are not defined. When not specified, addresses will be populated with eseries_management_interfaces controller addresses.
+    eseries_system_api_url:            # Url for the storage system's for embedded web services rest api. Example: https://192.168.10.100/devmgr/v2
+    eseries_system_username: admin     # Username for the storage system's for embedded web services rest api
+    eseries_system_password:           # Password for the storage system's for embedded web services rest api and when the admin password has not been set eseries_system_password will be used to set it.
+    eseries_proxy_ssid:                # Arbitrary string for the proxy to represent the storage system. eseries_system_serial will be used when not defined.
+    eseries_template_api_url:          # Template for the web services api url. Default: https://0.0.0.0:8443/devmgr/v2/
+    eseries_prefer_embedded: false     # Overrides the default behavior of using Web Services Proxy when eseries_proxy_api_url is defined. This will only effect storage systems that have Embedded Web Services.
+    eseries_validate_certs: true       # Indicates Whether SSL certificates should be verified. Used for both embedded and proxy. Choices: true, false
+
+    # Web Services Proxy information
+        Note: eseries_proxy_* variables are required to discover storage systems prior to SANtricity OS version 11.60.2.
+    eseries_proxy_api_url:         # Url for the storage system's for proxy web services rest api. Example: https://192.168.10.100/devmgr/v2
+    eseries_proxy_api_username:    # Username for the storage system's for proxy web services rest api.
+    eseries_proxy_api_password:    # Password for the storage system's for proxy web services rest api and when the admin password has not been set eseries_proxy_api_password will be used to set it.
+
+    # Global storage system information
+    eseries_system_name:                           # Name of the storage system.
+    eseries_system_cache_block_size:               # Cache block size
+    eseries_system_cache_flush_threshold:          # Unwritten data will be flushed when exceeds this threshold
+    eseries_system_autoload_balance:               # Whether automatic load balancing should be enabled. Choices: enabled, disabled
+    eseries_system_host_connectivity_reporting:    # Whether host connectivity reporting should be enabled. Choices: enabled, disabled
+    eseries_system_default_host_type:              # Only required when using something other than Linux kernel 3.10 or later with DM-MP (Linux DM-MP),
+                                                   #     non-clustered Windows (Windows), or the storage system default host type is incorrect. Common definitions below:
+                                                   #     - AIX MPIO: The Advanced Interactive Executive (AIX) OS and the native MPIO driver
+                                                   #     - AVT 4M: Silicon Graphics, Inc. (SGI) proprietary multipath driver; refer to the SGI installation documentation for more information
+                                                   #     - HP-UX: The HP-UX OS with native multipath driver
+                                                   #     - Linux ATTO: The Linux OS and the ATTO Technology, Inc. driver (must use ATTO FC HBAs)
+                                                   #     - Linux DM-MP: The Linux OS and the native DM-MP driver
+                                                   #     - Linux Pathmanager: The Linux OS and the SGI proprietary multipath driver; refer to the SGI installation documentation for more information
+                                                   #     - Mac: The Mac OS and the ATTO Technology, Inc. driver
+                                                   #     - ONTAP: FlexArray
+                                                   #     - Solaris 11 or later: The Solaris 11 or later OS and the native MPxIO driver
+                                                   #     - Solaris 10 or earlier: The Solaris 10 or earlier OS and the native MPxIO driver
+                                                   #     - SVC: IBM SAN Volume Controller
+                                                   #     - VMware: ESXi OS
+                                                   #     - Windows: Windows Server OS and Windows MPIO with a DSM driver
+                                                   #     - Windows Clustered: Clustered Windows Server OS and Windows MPIO with a DSM driver
+                                                   #     - Windows ATTO: Windows OS and the ATTO Technology, Inc. driver
+
+    # Role-based username passwords 
+    eseries_system_monitor_password:     # Storage system monitor username password
+    eseries_system_security_password:    # Storage system security username password
+    eseries_system_storage_password:     # Storage system storage username password
+    eseries_system_support_password:     # Storage system support username password
+
+    # Storage management interface defaults
+        Note:  eseries_management_* variables have the lowest priority and will be overwritten by those found in eseries_management_interfaces; use these to defined host group defaults.
+    eseries_management_config_method:         # Default config method for all management interfaces. Choices: static, dhcp
+    eseries_management_subnet_mask:           # Default subnet mask for all management interfaces
+    eseries_management_gateway_mask:          # Default gateway for all management interfaces
+    eseries_management_dns_config_method:     # Default DNS config method for all management interfaces
+    eseries_management_dns_address:           # Default primary DNS address for all management interfaces
+    eseries_management_dns_address_backup:    # Default backup DNS address for all management interfaces
+    eseries_management_ntp_config_method:     # Default NTP config method for all management interfaces
+    eseries_management_ntp_address:           # Default primary NTP address for all management interfaces
+    eseries_management_ntp_address_backup:    # Default backup NTP address for all management interfaces
+    eseries_management_ssh:                   # Default SSH access for all management interfaces. Choices: true, false
+    eseries_management_interfaces:
+      config_method:             # Config method for all management interfaces. Choices: static, dhcp
+      subnet_mask:               # Subnet mask for all management interfaces
+      gateway_mask:              # Gateway for all management interfaces
+      dns_config_method:         # DNS config method for all management interfaces
+      dns_address:               # Primary DNS address for all management interfaces
+      dns_address_backup:        # Backup DNS address for all management interfaces
+      ntp_config_method:         # NTP config method for all management interfaces
+      ntp_address:               # Primary NTP address for all management interfaces
+      ntp_address_backup:        # Backup NTP address for all management interfaces
+      ssh:                       # SSH access for all management interfaces. Choices: true, false
+      controller_a:              # List of controller A ports
+        - address:               # IPv4 address for controller A
+          config_method:         # Config method for controller A. Choices: static, dhcp
+          subnet_mask:           # Subnet mask for controller A
+          gateway:               # Gateway for controller A
+          dns_config_method:     # DNS config method for controller A
+          dns_address:           # Primary DNS address for controller A
+          dns_address_backup:    # Backup DNS address for controller A
+          ntp_config_method:     # NTP config method for controller A
+          ntp_address:           # Primary NTP address for controller A
+          ntp_address_backup:    # Backup NTP address for controller A
+          ssh:                   # SSH access for controller A. Choices: true, false
+      controller_b:              # List of controller B ports
+        - (...)                  # Same as for controller A but for controller B.
+
+    # Alerts configuration defaults
+    eseries_alerts_state:               # Whether to enable storage system alerts. Choices: enabled, disabled
+    eseries_alerts_contact:             # This allows owner to specify free-form contact information such as email or phone number.
+    eseries_alerts_recipients:          # List containing e-mails that should be sent notifications when alerts are issued.
+    eseries_alerts_sender:              # Sender email. This does not necessarily need to be a valid e-mail.
+    eseries_alerts_server:              # Fully qualified domain name, IPv4 address, or IPv6 address of the mail server.
+    eseries_alerts_test: false          # When changes are made to the storage system alert configuration a test e-mail will be sent. Choices: true, false
+    eseries_alert_syslog_servers:       # List of dictionaries where each dictionary contains a syslog server entry. [{"address": <syslog_address>, "port": 514}]
+    eseries_alert_syslog_test: false    # When changes are made to the alerts syslog servers configuration a test message will be sent to them. Choices: true, false
+
+    # LDAP configuration defaults
+    eseries_ldap_state:             # Whether LDAP should be configured
+    eseries_ldap_identifier:        # The user attributes that should be considered for the group to role mapping
+    eseries_ldap_user_attribute:    # Attribute used to the provided username during authentication.
+    eseries_ldap_bind_username:     # User account that will be used for querying the LDAP server.
+    eseries_ldap_bind_password:     # Password for the bind user account
+    eseries_ldap_server:            # LDAP server URL.
+    eseries_ldap_search_base:       # Search base used for find user's group membership
+    eseries_ldap_role_mappings:     # Dictionary of user groups, each containing the list of access roles.
+                                    #     Role choices: storage.admin - allows users full read/writes access to storage objects and operations.
+                                    #                   storage.monitor - allows users read-only access to storage objects and operations.
+                                    #                   storage.admin - allows users access to hardware, diagnostic information, major event logs,
+                                    #                       and other critical support-related functionality, but not the sorage configuration.
+                                    #                   security.admin - allows users access to authentication/authorization configuration, as
+                                    #                       well as the audit log configuration, adn certification management.
+
+    # Drive firmware defaults
+    eseries_drive_firmware_firmware_list:                 # Local path list for drive firmware.
+    eseries_drive_firmware_wait_for_completion:           # Forces drive firmware upgrades to wait for all associated tasks to complete. Choices: true, false
+    eseries_drive_firmware_ignore_inaccessible_drives:    # Forces drive firmware upgrades to ignore any inaccessible drives. Choices: true, false
+    eseries_drive_firmware_upgrade_drives_online:         # Forces drive firmware upgrades to be performed while I/Os are accepted. Choices: true, false
+
+    # Controller firmware defaults
+    eseries_firmware_nvsram:                 # Local path for NVSRAM file.
+    eseries_firmware_firmware:               # Local path for controller firmware file.
+    eseries_firmware_wait_for_completion:    # Forces controller firmware upgrade to wait until upgrade has completed before continuing. Choices: true, false
+    eseries_firmware_clear_mel_events:       # Forces firmware upgrade to be attempted regardless of the health check results. Choices: true, false
+
+    # Auto-Support configuration defaults
+    eseries_asup_state:              # Whether auto support (ASUP) should be enabled. Choices: enabled, disabled
+    eseries_asup_active:             # Enables active monitoring which allows NetApp support personnel to request support data to resolve issues. Choices: true, false
+    eseries_asup_days:               # List of days of the week. Choices: monday, tuesday, wednesday, thursday, friday, saturday, sunday
+    eseries_asup_start:              # Hour of the day(s) to start ASUP bundle transmissions. Start time must be less than end time. Choices: 0-23
+    eseries_asup_end:                # Hour of the day(s) to end ASUP bundle transmissions. Start time must be less than end time. Choices: 1-24
+    eseries_asup_method:             # ASUP delivery method. Choices https, http, email (default: https)
+    eseries_asup_routing_type:       # ASUP delivery routing type for https or http. Choices: direct, proxy, script (default: direct)
+    eseries_asup_proxy:              # ASUP proxy delivery method information.
+      host:                          # ASUP proxy host IP address or FQDN. When eseries_asup_routing_type==proxy this must be specified.
+      port:                          # ASUP proxy host port. When eseries_asup_routing_type==proxy this must be specified.
+      script:                        # ASUP proxy host script.
+    eseries_asup_email:              # ASUP email delivery configuration information
+      server:                        # ASUP email server
+      sender:                        # ASUP email sender
+      test_recipient:                # ASUP configuration mail test recipient
+    eseries_maintenance_duration:    # Duration in hours (1-72) the ASUP maintenance mode will be active
+    eseries_maintenance_emails:      # List of email addresses for maintenance notifications
+    eseries_asup_validate:           # Verify ASUP configuration prior to applying changes
+
+    # Audit-log configuration defaults
+    eseries_auditlog_enforce_policy:    # Whether to make audit-log policy changes. Choices: true, false
+    eseries_auditlog_force:             # Forces audit-log to delete log messages when fullness threshold has been exceeded. Applicable when eseries_auditlog_full_policy=preventSystemAccess. Choices: true, false
+    eseries_auditlog_full_policy:       # Policy for what to do when record limit has been reached. Choices: overWrite, preventSystemAccess
+    eseries_auditlog_log_level:         # Filters logs based on the specified level. Choices: all, writeOnly
+    eseries_auditlog_max_records:       # Maximum number of audit-log messages retained. Choices: 100-50000.
+    eseries_auditlog_threshold:         # Memory full percentage threshold that audit-log will start issuing warning messages. Choices: 60-90
+
+    # Syslog configuration defaults
+    eseries_syslog_state:         # Whether syslog servers should be added or removed from storage system. Choices: present, absent
+    eseries_syslog_address:       # Syslog server IPv4 address or fully qualified hostname.
+    eseries_syslog_test:          # Whether a test messages should be sent to syslog server when added to the storage system. Choices: true, false
+    eseries_syslog_protocol:      # Protocol to be used when transmitting log messages to syslog server. Choices: udp, tc, tls
+    eseries_syslog_port:          # Port to be used when transmitting log messages to syslog server.
+    eseries_syslog_components:    # List of components log to syslog server. Choices: auditLog, (others may become available)
+
+License
+-------
+    BSD-3-Clause
+
+Author Information
+------------------
+    Nathan Swartz (@ndswartz)
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/defaults/main.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/defaults/main.yml
new file mode 100644
index 00000000..db9145af
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/defaults/main.yml
@@ -0,0 +1,195 @@
+# Storage system specific credentials
+# -----------------------------------
+eseries_system_username: admin                   # Storage system username. Default: admin
+#eseries_system_password:                        # Storage system admin password.
+#eseries_validate_certs:                         # Whether the SSL certificates should be verified. (boolean)
+#eseries_system_subnet:                          # IPv4 search range for discovering E-Series storage. Must be in CIDR form.
+#eseries_system_serial:                          # Storage system chassis serial number. This is used to automatically discover the system.
+#eseries_system_addresses:                       # (list) Controller address(es) for the storage system. Only applicable for proxy web services.
+#eseries_system_tags:                            # Meta tags to associate to the storage system. Only applicable for proxy web services.
+#eseries_system_password:                        # Required when adding storage systems to SANtricity Web Services Proxy.
+#eseries_system_minimum_password_length:         # Minimum required password length
+
+# SANtricity Web Services Proxy specific variables
+# ------------------------------------------------
+#eseries_proxy_ssid:                             # Storage array identifier. This value will be 1 when interacting with the embedded web services,
+#eseries_proxy_api_url:                          # Url for the web services proxy rest api. Example: https://192.168.10.100:8443/devmgr/v2
+#eseries_proxy_api_username:                     # Username for the web services proxy rest api.
+#eseries_proxy_api_password:                     # Password for the web services proxy rest api.
+#eseries_proxy_current_api_password:             # This is for changing the password for the proxy.
+#eseries_proxy_api_validate_certs:               # Whether the SSL certificates should be verified. (boolean)
+#eseries_proxy_minimum_password_length:          # Minimum required proxy password length
+
+#eseries_proxy_discovery_subnet:                 # IPv4 search range for discovering E-Series storage. Must be in CIDR form.
+#eseries_proxy_accept_certifications:            # Force automatic acceptance of all storage system's certificate
+#eseries_proxy_default_system_tags:              # Default meta tags to associate with all storage systems
+#eseries_proxy_default_password:                 # Default password to associate with all storage systems
+#eseries_proxy_systems:                          # List of storage system information which defines which systems should be added to proxy web services.
+                                                 #   Automatically populated from storage system's inventory when not defined.
+                                                 # See na_santricity_proxy_systems for more details.
+
+# Storage proxy non-admin passwords
+# ---------------------------------
+#eseries_proxy_monitor_password:              # Proxy monitor username password
+#eseries_proxy_security_password:             # Proxy security username password
+#eseries_proxy_storage_password:              # Proxy storage username password
+#eseries_proxy_support_password:              # Proxy support username password
+
+# Storage system non-admin passwords
+# ----------------------------------
+#eseries_system_monitor_password:             # Storage system monitor username password
+#eseries_system_security_password:            # Storage system security username password
+#eseries_system_storage_password:             # Storage system storage username password
+#eseries_system_support_password:             # Storage system support username password
+
+# Storage system defaults
+# -----------------------------
+#eseries_system_name:                         # Name of the storage system.
+#eseries_system_cache_block_size:             # Cache block size
+#eseries_system_cache_flush_threshold:        # Unwritten data will be flushed when exceeds this threshold
+#eseries_system_autoload_balance:             # Whether automatic load balancing should be enabled. Choices: enabled, disabled
+#eseries_system_host_connectivity_reporting:  # Whether host connectivity reporting should be enabled. Choices: enabled, disabled
+#eseries_system_default_host_type:            # Only required when using something other than Linux kernel 3.10 or later with DM-MP (Linux DM-MP),
+                                              #     non-clustered Windows (Windows), or the storage system default host type is incorrect. Common definitions below:
+                                              #     - AIX MPIO: The Advanced Interactive Executive (AIX) OS and the native MPIO driver
+                                              #     - AVT 4M: Silicon Graphics, Inc. (SGI) proprietary multipath driver; refer to the SGI installation documentation for more information
+                                              #     - HP-UX: The HP-UX OS with native multipath driver
+                                              #     - Linux ATTO: The Linux OS and the ATTO Technology, Inc. driver (must use ATTO FC HBAs)
+                                              #     - Linux DM-MP: The Linux OS and the native DM-MP driver
+                                              #     - Linux Pathmanager: The Linux OS and the SGI proprietary multipath driver; refer to the SGI installation documentation for more information
+                                              #     - Mac: The Mac OS and the ATTO Technology, Inc. driver
+                                              #     - ONTAP: FlexArray
+                                              #     - Solaris 11 or later: The Solaris 11 or later OS and the native MPxIO driver
+                                              #     - Solaris 10 or earlier: The Solaris 10 or earlier OS and the native MPxIO driver
+                                              #     - SVC: IBM SAN Volume Controller
+                                              #     - VMware: ESXi OS
+                                              #     - Windows: Windows Server OS and Windows MPIO with a DSM driver
+                                              #     - Windows Clustered: Clustered Windows Server OS and Windows MPIO with a DSM driver
+                                              #     - Windows ATTO: Windows OS and the ATTO Technology, Inc. driver
+
+# Storage system SSL certificates
+# -------------------------------
+#eseries_client_certificate_certificates                # Dictionary containing the SSL certificate file paths. The key will be used as the alias.
+#eseries_client_certificate_absent_certificates         # List of aliases to remove from the storage array's trust store.
+
+# Storage management interface defaults
+# -------------------------------------
+#eseries_management_config_method:
+#eseries_management_subnet_mask:
+#eseries_management_gateway_mask:
+#eseries_management_dns_config_method:
+#eseries_management_dns_address:
+#eseries_management_dns_address_backup:
+#eseries_management_ntp_config_method:
+#eseries_management_ntp_address:
+#eseries_management_ntp_address_backup:
+#eseries_management_ssh:
+#eseries_management_interfaces:
+#  config_method:
+#  subnet_mask:
+#  gateway_mask:
+#  dns_config_method:
+#  dns_address:
+#  dns_address_backup:
+#  ntp_config_method:
+#  ntp_address:
+#  ntp_address_backup:
+#  ssh
+#  controller_a:
+#      config_method:
+#      address:
+#      subnet_mask:
+#      gateway:
+#      dns_config_method:
+#      dns_address:
+#      dns_address_backup:
+#      ntp_config_method:
+#      ntp_address:
+#      ntp_address_backup:
+#      ssh:
+#    - (...)
+#  controller_b:
+#    - (...)
+#    - (...)
+
+# Alerts configuration defaults
+# -----------------------------
+#eseries_alerts_state:            # Whether to enable storage system alerts. Choices: enabled, disabled
+#eseries_alerts_contact:          # This allows owner to specify free-form contact information such as email or phone number.
+#eseries_alerts_recipients:       # List containing e-mails that should be sent notifications when alerts are issued.
+#eseries_alerts_sender:           # Sender email. This does not necessarily need to be a valid e-mail.
+#eseries_alerts_server:           # Fully qualified domain name, IPv4 address, or IPv6 address of the mail server.
+#eseries_alert_syslog_servers:    # List of dictionaries where each dictionary contains a syslog server entry. [{"address": <syslog_address>, "port": 514}]
+eseries_alerts_test: false        # When changes are made to the storage system alert configuration a test e-mail will be sent. Choices: true, false
+eseries_alert_syslog_test: false  # When changes are made to the alerts syslog servers configuration a test message will be sent to them. Choices: true, false
+
+# LDAP configuration defaults
+# ---------------------------
+#eseries_ldap_state:                          # Whether LDAP should be configured
+#eseries_ldap_identifier: memberOf             # The user attributes that should be considered for the group to role mapping
+#eseries_ldap_user_attribute: sAMAccountName   # Attribute used to the provided username during authentication.
+#eseries_ldap_bind_username:                   # User account that will be used for querying the LDAP server.
+#eseries_ldap_bind_password:                   # Password for the bind user account
+#eseries_ldap_server:                          # LDAP server URL.
+#eseries_ldap_search_base:                     # Search base used for find user's group membership
+#eseries_ldap_role_mappings:                   # Dictionary of user groups, each containing the list of access roles.
+                                              #     Role choices: storage.admin - allows users full read/writes access to storage objects and operations.
+                                              #                   storage.monitor - allows users read-only access to storage objects and operations.
+                                              #                   storage.admin - allows users access to hardware, diagnostic information, major event logs, and
+                                              #                       other critical support-related functionality, but not the sorage configuration.
+                                              #                   security.admin - allows users access to authentication/authorization configuration, as well as
+                                              #                       the audit log configuration, adn certification management.
+
+# Drive firmware defaults
+# -----------------------
+#eseries_drive_firmware_firmware_list:                    # Local path list for drive firmware.
+eseries_drive_firmware_wait_for_completion: true          # Forces drive firmware upgrades to wait for all associated tasks to complete. Choices: true, false
+eseries_drive_firmware_ignore_inaccessible_drives: false  # Forces drive firmware upgrades to ignore any inaccessible drives. Choices: true, false
+eseries_drive_firmware_upgrade_drives_online: true        # Forces drive firmware upgrades to be performed while I/Os are accepted. Choices: true, false
+
+# Controller firmware defaults
+# ----------------------------
+#eseries_firmware_nvsram:                     # Local path for NVSRAM file.
+#eseries_firmware_firmware:                   # Local path for controller firmware file.
+eseries_firmware_wait_for_completion: true    # Forces controller firmware upgrade to wait until upgrade has completed before continuing. Choices: true, false
+eseries_firmware_ignore_mel_events: false   # Forces firmware upgrade to be attempted regardless of the health check results. Choices: true, false
+
+# ASUP configuration defaults
+# ---------------------------
+#eseries_asup_state:              # Whether auto support (ASUP) should be enabled. Choices: enabled, disabled
+eseries_asup_active: true         # Enables active monitoring which allows NetApp support personnel to request support data to resolve issues. Choices: true, false
+#eseries_asup_days:               # List of days of the week. Choices: monday, tuesday, wednesday, thursday, friday, saturday, sunday
+eseries_asup_start: 0             # Hour of the day(s) to start ASUP bundle transmissions. Start time must be less than end time. Choices: 0-23
+eseries_asup_end: 24              # Hour of the day(s) to end ASUP bundle transmissions. Start time must be less than end time. Choices: 1-24
+#eseries_asup_method:             # ASUP delivery method. Choices https, http, email (default: https)
+#eseries_asup_routing_type:       # ASUP delivery routing type for https or http. Choices: direct, proxy, script (default: direct)
+#eseries_asup_proxy:              # ASUP proxy delivery method information.
+#  host:                          # ASUP proxy host IP address or FQDN. When eseries_asup_routing_type==proxy this must be specified.
+#  port:                          # ASUP proxy host port. When eseries_asup_routing_type==proxy this must be specified.
+#  script:                        # ASUP proxy host script.
+#eseries_asup_email:              # ASUP email delivery configuration information
+#  server:                        # ASUP email server
+#  sender:                        # ASUP email sender
+#  test_recipient:                # ASUP configuration mail test recipient
+#eseries_maintenance_duration:    # Duration in hours (1-72) the ASUP maintenance mode will be active
+#eseries_maintenance_emails:      # List of email addresses for maintenance notifications
+#eseries_asup_validate:           # Verify ASUP configuration prior to applying changes.
+
+# Audit-log configuration defaults
+# --------------------------------
+eseries_auditlog_enforce_policy: false    # Whether to make audit-log policy changes. Choices: true, false
+eseries_auditlog_force: false             # Forces audit-log to delete log messages when fullness threshold has been exceeded.
+                                          #     Applicable when eseries_auditlog_full_policy=preventSystemAccess. Choices: true, false
+eseries_auditlog_full_policy: overWrite   # Policy for what to do when record limit has been reached. Choices: overWrite, preventSystemAccess
+eseries_auditlog_log_level: writeOnly     # Filters logs based on the specified level. Choices: all, writeOnly
+eseries_auditlog_max_records: 50000       # Maximum number of audit-log messages retained. Choices: 100-50000.
+eseries_auditlog_threshold: 90            # Memory full percentage threshold that audit-log will start issuing warning messages. Choices: 60-90
+
+# Syslog configuration defaults
+# -----------------------------
+#eseries_syslog_state:                    # Whether syslog servers should be added or removed from storage system. Choices: present, absent
+#eseries_syslog_address:                  # Syslog server IPv4 address or fully qualified hostname.
+eseries_syslog_test: false                # Whether a test messages should be sent to syslog server when added to the storage system. Choices: true, false
+eseries_syslog_protocol: udp              # Protocol to be used when transmitting log messages to syslog server. Choices: udp, tc, tls
+eseries_syslog_port: 514                  # Port to be used when transmitting log messages to syslog server.
+eseries_syslog_components: ["auditLog"]   # List of components log to syslog server. Choices: auditLog, (others may be available)
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/meta/main.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/meta/main.yml
new file mode 100644
index 00000000..91437f9d
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/meta/main.yml
@@ -0,0 +1,13 @@
+galaxy_info:
+  author: Nathan Swartz (@ndswartz)
+  description: Manages NetApp E-Series storage system's firmware, management interfaces, security, system, and logging configuration.
+  company: NetApp, Inc
+  license: BSD-3 Clause
+  platforms: []
+  min_ansible_version: 2.9
+  galaxy_tags:
+    - netapp
+    - eseries
+    - storage
+
+dependencies: []
\ No newline at end of file
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/firmware.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/firmware.yml
new file mode 100644
index 00000000..99c7b6a5
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/firmware.yml
@@ -0,0 +1,78 @@
+- name: Upload required drive, nvsram, and firmware files to Web Services Proxy.
+  block:
+    - name: Collect expected firmware file lists
+      set_fact:
+        eseries_proxy_drive_firmware: |-
+          {%- set drive_firmware = [] %}
+          {%- for host in ansible_play_hosts_all %}
+            {%- if hostvars[host]["current_eseries_api_is_proxy"] and "eseries_drive_firmware_firmware_list" in hostvars[host] %}
+              {%- if drive_firmware.extend(hostvars[host]["eseries_drive_firmware_firmware_list"]) %}{%- endif %}
+            {%- endif %}
+          {%- endfor %}
+          {{ drive_firmware | list }}
+        eseries_proxy_nvsram: |-
+          {%- set nvsram = [] %}
+          {%- for host in ansible_play_hosts_all %}
+            {%- if hostvars[host]["current_eseries_api_is_proxy"] and "eseries_firmware_nvsram" in hostvars[host] %}
+              {%- if nvsram.append(hostvars[host]["eseries_firmware_nvsram"]) %}{%- endif %}
+            {%- endif %}
+          {%- endfor %}
+          {{ nvsram | list }}
+        eseries_proxy_firmware: |-
+          {%- set firmware = [] %}
+          {%- for host in ansible_play_hosts_all %}
+            {%- if hostvars[host]["current_eseries_api_is_proxy"] and "eseries_firmware_firmware" in hostvars[host] %}
+              {%- if firmware.append(hostvars[host]["eseries_firmware_firmware"]) %}{%- endif %}
+            {%- endif %}
+          {%- endfor %}
+          {{ firmware | list }}
+
+    - name: Ensure SANtricity Web Services Proxy has the expected drive firmware
+      na_santricity_proxy_drive_firmware_upload:
+        api_url: "{{ eseries_proxy_api_url }}"
+        api_username: "{{ eseries_proxy_api_username }}"
+        api_password: "{{ eseries_proxy_api_password }}"
+        validate_certs: "{{ eseries_validate_certs | default(omit) }}"
+        firmware: "{{ eseries_proxy_drive_firmware | default(omit) }}"
+      when: eseries_proxy_drive_firmware != []
+    - name: Ensure SANtricity Web Services Proxy has the expected controller firmware and NVSRAM
+      na_santricity_proxy_firmware_upload:
+        api_url: "{{ eseries_proxy_api_url }}"
+        api_username: "{{ eseries_proxy_api_username }}"
+        api_password: "{{ eseries_proxy_api_password }}"
+        validate_certs: "{{ eseries_validate_certs | default(omit) }}"
+        firmware: "{{ eseries_proxy_firmware | default(omit) + eseries_proxy_nvsram | default(omit)}}"
+      when: eseries_proxy_nvsram != [] or eseries_proxy_firmware != []
+  run_once: true
+
+- name: Ensure drive firmware is properly configured
+  na_santricity_drive_firmware:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    firmware: "{{ eseries_drive_firmware_firmware_list }}"
+    wait_for_completion: "{{ eseries_drive_firmware_wait_for_completion | default(true) }}"
+    ignore_inaccessible_drives: "{{ eseries_drive_firmware_ignore_inaccessible_drives | default(omit) }}"
+    upgrade_drives_online: "{{ eseries_drive_firmware_upgrade_drives_online | default(omit) }}"
+  when: eseries_drive_firmware_firmware_list is defined
+  tags:
+    - firmware
+    - drive_firmware
+
+- name: Ensure controller firmware is properly configured
+  na_santricity_firmware:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    nvsram: "{{ eseries_firmware_nvsram | default('') }}"
+    firmware: "{{ eseries_firmware_firmware | default('') }}"
+    wait_for_completion: "{{ eseries_firmware_wait_for_completion | default(true) }}"
+    clear_mel_events: "{{ eseries_firmware_ignore_mel_events | default(omit) }}"
+  when: eseries_firmware_nvsram is defined or eseries_firmware_firmware is defined
+  tags:
+    - firmware
+    - controller_firmware
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/interface.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/interface.yml
new file mode 100644
index 00000000..00335895
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/interface.yml
@@ -0,0 +1,117 @@
+- name: Determine individual management interface information.
+  set_fact:
+    interface_a1: "{{ eseries_management_interfaces['controller_a'][0] | default(omit) }}"
+    interface_a2: "{{ eseries_management_interfaces['controller_a'][1] | default(omit) }}"
+    interface_b1: "{{ eseries_management_interfaces['controller_b'][0] | default(omit) }}"
+    interface_b2: "{{ eseries_management_interfaces['controller_b'][1] | default(omit) }}"
+
+- name: Ensure the management interface (controller A, port 1) have been configure.
+  block:
+    - na_santricity_mgmt_interface:
+        ssid: "{{ current_eseries_ssid }}"
+        api_url: "{{ current_eseries_api_url }}"
+        api_username: "{{ current_eseries_api_username }}"
+        api_password: "{{ current_eseries_api_password }}"
+        validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+        controller: A
+        port: 1
+        address: "{{ interface_a1['address'] | default(omit) }}"
+        config_method: "{{ interface_a1['config_method'] | default(eseries_management_interfaces['config_method'] | default(eseries_management_config_method | default(omit))) }}"
+        subnet_mask: "{{ interface_a1['subnet_mask'] | default(eseries_management_interfaces['subnet_mask'] | default(eseries_management_subnet_mask | default(omit))) }}"
+        gateway: "{{ interface_a1['gateway'] | default(eseries_management_interfaces['gateway'] | default(eseries_management_gateway_mask | default(omit))) }}"
+        dns_config_method: "{{ interface_a1['dns_config_method'] | default(eseries_management_interfaces['dns_config_method'] | default(eseries_management_dns_config_method | default(omit))) }}"
+        dns_address: "{{ interface_a1['dns_address'] | default(eseries_management_interfaces['dns_address'] | default(eseries_management_dns_address | default(omit))) }}"
+        dns_address_backup: "{{ interface_a1['dns_address_backup'] | default(eseries_management_interfaces['dns_address_backup'] | default(eseries_management_dns_address_backup | default(omit))) }}"
+        ntp_config_method: "{{ interface_a1['ntp_config_method'] | default(eseries_management_interfaces['ntp_config_method'] | default(eseries_management_ntp_config_method | default(omit))) }}"
+        ntp_address: "{{ interface_a1['ntp_address'] | default(eseries_management_interfaces['ntp_address'] | default(eseries_management_ntp_address | default(omit))) }}"
+        ntp_address_backup: "{{ interface_a1['ntp_address_backup'] | default(eseries_management_interfaces['ntp_address_backup'] | default(eseries_management_ntp_address_backup | default(omit))) }}"
+        ssh: "{{ interface_a1['ssh'] | default(eseries_management_interfaces['ssh'] | default(eseries_management_ssh | default(omit))) }}"
+      register: current_management_urls_a1
+    - name: Update Web Services URL
+      set_fact:
+        current_eseries_api_url: "{{ current_management_urls_a1['available_embedded_api_urls'][0] | default(current_eseries_api_url) }}"
+  when: interface_a1 is defined and interface_a1
+
+- name: Ensure the management interface (controller A, port 2) have been configure.
+  block:
+    - name: Ensure the management interface (controller A, port 2) have been configure.
+      na_santricity_mgmt_interface:
+        ssid: "{{ current_eseries_ssid }}"
+        api_url: "{{ current_eseries_api_url }}"
+        api_username: "{{ current_eseries_api_username }}"
+        api_password: "{{ current_eseries_api_password }}"
+        validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+        controller: A
+        port: 2
+        address: "{{ interface_a2['address'] | default(omit) }}"
+        config_method: "{{ interface_a2['config_method'] | default(eseries_management_interfaces['config_method'] | default(eseries_management_config_method | default(omit))) }}"
+        subnet_mask: "{{ interface_a2['subnet_mask'] | default(eseries_management_interfaces['subnet_mask'] | default(eseries_management_subnet_mask | default(omit))) }}"
+        gateway: "{{ interface_a2['gateway'] | default(eseries_management_interfaces['gateway'] | default(eseries_management_gateway_mask | default(omit))) }}"
+        dns_config_method: "{{ interface_a2['dns_config_method'] | default(eseries_management_interfaces['dns_config_method'] | default(eseries_management_dns_config_method | default(omit))) }}"
+        dns_address: "{{ interface_a2['dns_address'] | default(eseries_management_interfaces['dns_address'] | default(eseries_management_dns_address | default(omit))) }}"
+        dns_address_backup: "{{ interface_a2['dns_address_backup'] | default(eseries_management_interfaces['dns_address_backup'] | default(eseries_management_dns_address_backup | default(omit))) }}"
+        ntp_config_method: "{{ interface_a2['ntp_config_method'] | default(eseries_management_interfaces['ntp_config_method'] | default(eseries_management_ntp_config_method | default(omit))) }}"
+        ntp_address: "{{ interface_a2['ntp_address'] | default(eseries_management_interfaces['ntp_address'] | default(eseries_management_ntp_address | default(omit))) }}"
+        ntp_address_backup: "{{ interface_a2['ntp_address_backup'] | default(eseries_management_interfaces['ntp_address_backup'] | default(eseries_management_ntp_address_backup | default(omit))) }}"
+        ssh: "{{ interface_a2['ssh'] | default(eseries_management_interfaces['ssh'] | default(eseries_management_ssh | default(omit))) }}"
+      register: current_management_urls_a2
+    - name: Try backup Web Services REST API url.
+      set_fact:
+        current_eseries_api_url: "{{ current_management_urls_a2['available_embedded_api_urls'][0] | default(current_eseries_api_url) }}"
+  when: interface_a2 is defined and interface_a2
+
+- name: Ensure the management interface (controller B, port 1) have been configure.
+  block:
+    - name: Ensure the management interface (controller B, port 1) have been configure.
+      na_santricity_mgmt_interface:
+        ssid: "{{ current_eseries_ssid }}"
+        api_url: "{{ current_eseries_api_url }}"
+        api_username: "{{ current_eseries_api_username }}"
+        api_password: "{{ current_eseries_api_password }}"
+        validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+        controller: B
+        port: 1
+        address: "{{ interface_b1['address'] | default(omit) }}"
+        config_method: "{{ interface_b1['config_method'] | default(eseries_management_interfaces['config_method'] | default(eseries_management_config_method | default(omit))) }}"
+        subnet_mask: "{{ interface_b1['subnet_mask'] | default(eseries_management_interfaces['subnet_mask'] | default(eseries_management_subnet_mask | default(omit))) }}"
+        gateway: "{{ interface_b1['gateway'] | default(eseries_management_interfaces['gateway'] | default(eseries_management_gateway_mask | default(omit))) }}"
+        dns_config_method: "{{ interface_b1['dns_config_method'] | default(eseries_management_interfaces['dns_config_method'] | default(eseries_management_dns_config_method | default(omit))) }}"
+        dns_address: "{{ interface_b1['dns_address'] | default(eseries_management_interfaces['dns_address'] | default(eseries_management_dns_address | default(omit))) }}"
+        dns_address_backup: "{{ interface_b1['dns_address_backup'] | default(eseries_management_interfaces['dns_address_backup'] | default(eseries_management_dns_address_backup | default(omit))) }}"
+        ntp_config_method: "{{ interface_b1['ntp_config_method'] | default(eseries_management_interfaces['ntp_config_method'] | default(eseries_management_ntp_config_method | default(omit))) }}"
+        ntp_address: "{{ interface_b1['ntp_address'] | default(eseries_management_interfaces['ntp_address'] | default(eseries_management_ntp_address | default(omit))) }}"
+        ntp_address_backup: "{{ interface_b1['ntp_address_backup'] | default(eseries_management_interfaces['ntp_address_backup'] | default(eseries_management_ntp_address_backup | default(omit))) }}"
+        ssh: "{{ interface_b1['ssh'] | default(eseries_management_interfaces['ssh'] | default(eseries_management_ssh | default(omit))) }}"
+      register: current_management_urls_b1
+    - name: Try backup Web Services REST API url.
+      set_fact:
+        current_eseries_api_url: "{{ current_management_urls_b1['available_embedded_api_urls'][0] | default(current_eseries_api_url) }}"
+  when: interface_b1 is defined and interface_b1
+
+- name: Ensure the management interface (controller B, port 2) have been configure.
+  block:
+    - name: Ensure the management interface (controller B, port 2) have been configure.
+      na_santricity_mgmt_interface:
+        ssid: "{{ current_eseries_ssid }}"
+        api_url: "{{ current_eseries_api_url }}"
+        api_username: "{{ current_eseries_api_username }}"
+        api_password: "{{ current_eseries_api_password }}"
+        validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+        controller: B
+        port: 2
+        address: "{{ interface_b2['address'] | default(omit) }}"
+        config_method: "{{ interface_b2['config_method'] | default(eseries_management_interfaces['config_method'] | default(eseries_management_config_method | default(omit))) }}"
+        subnet_mask: "{{ interface_b2['subnet_mask'] | default(eseries_management_interfaces['subnet_mask'] | default(eseries_management_subnet_mask | default(omit))) }}"
+        gateway: "{{ interface_b2['gateway'] | default(eseries_management_interfaces['gateway'] | default(eseries_management_gateway_mask | default(omit))) }}"
+        dns_config_method: "{{ interface_b2['dns_config_method'] | default(eseries_management_interfaces['dns_config_method'] | default(eseries_management_dns_config_method | default(omit))) }}"
+        dns_address: "{{ interface_b2['dns_address'] | default(eseries_management_interfaces['dns_address'] | default(eseries_management_dns_address | default(omit))) }}"
+        dns_address_backup: "{{ interface_b2['dns_address_backup'] | default(eseries_management_interfaces['dns_address_backup'] | default(eseries_management_dns_address_backup | default(omit))) }}"
+        ntp_config_method: "{{ interface_b2['ntp_config_method'] | default(eseries_management_interfaces['ntp_config_method'] | default(eseries_management_ntp_config_method | default(omit))) }}"
+        ntp_address: "{{ interface_b2['ntp_address'] | default(eseries_management_interfaces['ntp_address'] | default(eseries_management_ntp_address | default(omit))) }}"
+        ntp_address_backup: "{{ interface_b2['ntp_address_backup'] | default(eseries_management_interfaces['ntp_address_backup'] | default(eseries_management_ntp_address_backup | default(omit))) }}"
+        ssh: "{{ interface_b2['ssh'] | default(eseries_management_interfaces['ssh'] | default(eseries_management_ssh | default(omit))) }}"
+      register: current_management_urls_b2
+    - name: Try backup Web Services REST API url.
+      set_fact:
+        current_eseries_api_url: "{{ current_management_urls_b2['available_embedded_api_urls'][0] | default(current_eseries_api_url) }}"
+  when: interface_b2 is defined and interface_b2
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/logging.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/logging.yml
new file mode 100644
index 00000000..05f752e8
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/logging.yml
@@ -0,0 +1,90 @@
+- name: Ensure ASUP configuration
+  na_santricity_asup:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ eseries_validate_certs | default(omit) }}"
+    state: "{{ eseries_asup_state }}"
+    active: "{{ eseries_asup_active | default(omit)}}"
+    days: "{{ eseries_asup_days | default(omit) }}"
+    start: "{{ eseries_asup_start | default(omit) }}"
+    end: "{{ eseries_asup_end | default(omit) }}"
+    method: "{{ eseries_asup_method | default(omit) }}"
+    routing_type: "{{ eseries_asup_routing_type | default(omit) }}"
+    proxy: "{{ eseries_asup_proxy | default(omit) }}"
+    email: "{{ eseries_asup_email | default(omit) }}"
+    maintenance_duration: "{{ eseries_maintenance_duration | default(omit) }}"
+    maintenance_emails: "{{ eseries_maintenance_emails | default(omit) }}"
+    validate: "{{ eseries_asup_validate | default(omit) }}"
+  when: eseries_asup_state is defined
+  tags:
+    - logging
+    - asup
+
+- name: Ensure alerts have been configured
+  na_santricity_alerts:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ eseries_validate_certs | default(omit) }}"
+    state: "{{ eseries_alerts_state }}"
+    contact: "{{ eseries_alerts_contact | default(omit) }}"
+    recipients: "{{ eseries_alerts_recipients | default(omit) }}"
+    sender: "{{ eseries_alerts_sender| default(omit) }}"
+    server: "{{ eseries_alerts_server | default(omit) }}"
+    test: "{{ eseries_alerts_test | default(omit) }}"
+  when: eseries_alerts_state is defined
+  tags:
+    - logging
+    - alerts
+
+- name: Ensure auditLog configuration
+  na_santricity_auditlog:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ eseries_validate_certs | default(omit) }}"
+    force: "{{ eseries_auditlog_force | default(omit) }}"
+    full_policy: "{{ eseries_auditlog_full_policy | default(omit) }}"
+    log_level: "{{ eseries_auditlog_log_level | default(omit) }}"
+    max_records: "{{ eseries_auditlog_max_records | default(omit) }}"
+    threshold: "{{ eseries_auditlog_threshold | default(omit) }}"
+  when: eseries_auditlog_enforce_policy
+  tags:
+    - logging
+    - auditlog
+
+- name: Ensure components are configured to be sent to the approriate syslog servers
+  na_santricity_syslog:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ eseries_validate_certs | default(omit) }}"
+    state: "{{ eseries_syslog_state }}"
+    address: "{{ eseries_syslog_address }}"
+    test: "{{ eseries_syslog_test | default(omit) }}"
+    protocol: "{{ eseries_syslog_protocol | default(omit) }}"
+    port: "{{ eseries_syslog_port | default(omit) }}"
+    components: "{{ eseries_syslog_components | default(omit) }}"
+  when: eseries_syslog_state is defined and eseries_syslog_address is defined
+  tags:
+    - logging
+    - syslog
+
+- name: Ensure alerts are configured to be sent to the approriate syslog servers
+  na_santricity_alerts_syslog:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ eseries_validate_certs | default(omit) }}"
+    servers: "{{ eseries_alert_syslog_servers | default(omit) }}"
+    test: "{{ eseries_alert_syslog_test | default(omit) }}"
+  when: eseries_syslog_state is defined and eseries_syslog_address is defined
+  tags:
+    - logging
+    - syslog
\ No newline at end of file
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/main.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/main.yml
new file mode 100644
index 00000000..dedf7d90
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/main.yml
@@ -0,0 +1,36 @@
+- name: Set current storage system credentials
+  include_role:
+    name: netapp_eseries.santricity.nar_santricity_common
+    tasks_from: build_info.yml
+  when: current_eseries_api_url is not defined
+  tags:
+    - always
+
+- name: Ensure security settings are configured
+  import_tasks: security.yml
+  delegate_to: localhost
+  ignore_errors: true
+
+- name: Ensure management interfaces are configured
+  import_tasks: interface.yml
+  delegate_to: localhost
+  tags:
+    - interface
+    - ntp
+    - dns
+    - ssh
+
+- name: Ensure all global system settings are configured
+  import_tasks: system.yml
+  delegate_to: localhost
+  ignore_errors: true
+
+- name: Ensure event logging has been configured
+  import_tasks: logging.yml
+  delegate_to: localhost
+  ignore_errors: true
+
+- name: Ensure drive and controller firmware are correct
+  import_tasks: firmware.yml
+  delegate_to: localhost
+  ignore_errors: true
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/security.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/security.yml
new file mode 100644
index 00000000..e0adfa85
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/security.yml
@@ -0,0 +1,66 @@
+- name: Ensure admin password has been set
+  na_santricity_auth:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    current_admin_password: "{{ eseries_system_password }}"
+    user: admin
+    password: "{{ eseries_system_password }}"
+  when: eseries_system_password is defined
+  tags:
+    - always
+
+- name: Ensure non-admin passwords have been set
+  na_santricity_auth:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    current_admin_password: "{{ eseries_system_password }}"
+    user: "{{ item['key'] }}"
+    password: "{{ item['value'] }}"
+  loop: "{{ lookup('dict', non_admin_user_authentication, wantlist=True) }}"
+  vars:
+    non_admin_user_authentication: |-
+      {%- set non_admin_list = {} %}
+        {%- if eseries_system_monitor_password is defined and eseries_system_monitor_password and non_admin_list.update({"monitor": eseries_system_monitor_password})%}{%- endif %}
+        {%- if eseries_system_security_password is defined and eseries_system_security_password and non_admin_list.update({"security": eseries_system_security_password})%}{%- endif %}
+        {%- if eseries_system_storage_password is defined and eseries_system_storage_password and non_admin_list.update({"storage": eseries_system_storage_password})%}{%- endif %}
+        {%- if eseries_system_support_password is defined and eseries_system_support_password and non_admin_list.update({"support": eseries_system_support_password})%}{%- endif %}
+      {{ non_admin_list }}
+
+- name: Ensure client-side certificates are installed
+  na_santricity_client_certificate:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    certificates: "{{ eseries_client_certificate_certificates }}"
+  when: eseries_client_certificate_certificates is defined
+  tags:
+    - security
+    - certificates
+
+- name: Ensure LDAP has been configured
+  na_santricity_ldap:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    state: "{{ eseries_ldap_state }}"
+    identifier: "{{ eseries_ldap_identifier | default(omit) }}"
+    server_url: "{{ eseries_ldap_server | default(omit) }}"
+    bind_user: "{{ eseries_ldap_bind_username | default(omit) }}"
+    bind_password: "{{ eseries_ldap_bind_password | default(omit) }}"
+    search_base: "{{ eseries_ldap_search_base | default(omit) }}"
+    user_attribute: "{{ eseries_ldap_user_attribute | default(omit) }}"
+    role_mappings: "{{ eseries_ldap_role_mappings | default(omit) }}"
+  when: eseries_ldap_state is defined
+  tags:
+    - security
+    - ldap
\ No newline at end of file
diff --git a/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/system.yml b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/system.yml
new file mode 100644
index 00000000..920d94fd
--- /dev/null
+++ b/collections-debian-merged/ansible_collections/netapp_eseries/santricity/roles/nar_santricity_management/tasks/system.yml
@@ -0,0 +1,16 @@
+- name: Ensure storage array has the correct array globals
+  na_santricity_global:
+    ssid: "{{ current_eseries_ssid }}"
+    api_url: "{{ current_eseries_api_url }}"
+    api_username: "{{ current_eseries_api_username }}"
+    api_password: "{{ current_eseries_api_password }}"
+    validate_certs: "{{ current_eseries_validate_certs | default(omit) }}"
+    name: "{{ eseries_system_name | default(omit) }}"
+    cache_block_size: "{{ eseries_system_cache_block_size | default(omit) }}"
+    cache_flush_threshold: "{{ eseries_system_cache_flush_threshold | default(omit) }}"
+    automatic_load_balancing: "{{ eseries_system_autoload_balance | default(omit) }}"
+    host_connectivity_reporting: "{{ eseries_system_host_connectivity_reporting | default(omit) }}"
+    default_host_type: "{{ eseries_system_default_host_type | default(omit)}}"
+  when: eseries_system_name is defined
+  tags:
+    - system