MakerFLOSS_Mikrotik/roles/makerfloss.mikrotik_switch/tasks/firmware.yml

---
# Opt-in RouterOS + RouterBOOT upgrade to switch_firmware_target.
# Disabled by default (switch_firmware_enabled: false). Upgrades REBOOT the switch,
# so run deliberately with a recovery channel open. Naturally a no-op when the device
# is already at or above the target version (the version guard skips every step).

- name: Assert a firmware target is set
  ansible.builtin.assert:
    that:
      - switch_firmware_target | length > 0
    fail_msg: >-
      switch_firmware_target must be set in host_vars to run firmware upgrades.

- name: Gather RouterOS facts (current version)
  community.routeros.facts:

- name: Upgrade RouterOS to the target and reboot
  when: ansible_net_version is version(switch_firmware_target, '<')
  block:
    - name: Install the target RouterOS package from the stable channel
      community.routeros.command:
        commands:
          - /system/package/update/set channel=stable
          - /system/package/update/install
      changed_when: true

    - name: Wait for the switch to reboot and come back
      ansible.builtin.wait_for_connection:
        delay: 30
        timeout: 300

    - name: Upgrade RouterBOOT to match the installed RouterOS
      community.routeros.command:
        commands:
          - /system/routerboard/upgrade
      changed_when: true

    - name: Reboot to apply the RouterBOOT upgrade
      community.routeros.command:
        commands:
          - /system/reboot
      changed_when: true
      ignore_unreachable: true   # connection drops on reboot; expected

    - name: Wait for the switch to come back after the RouterBOOT reboot
      ansible.builtin.wait_for_connection:
        delay: 30
        timeout: 300