Merge branch '1.37.0'

CHANGELOG.md

@@ -1,6 +1,16 @@
 # Changelog
 Changes to this project are documented in this file. More detail and links can be found in the Declarative Onboarding [Document Revision History](https://clouddocs.f5.com/products/extensions/f5-declarative-onboarding/latest/revision-history.html).
 
+## 1.37.0
+### Added
+- AUTOTOOL-3495: ([Github Issue 304](https://github.com/F5Networks/f5-declarative-onboarding/issues/304)): Support Security Reporting Settings
+
+### Fixed
+
+### Changed
+
+### Removed
+
 ## 1.36.1
 ### Added
 
@@ -89,7 +99,7 @@ Changes to this project are documented in this file. More detail and links can b
 
 ### Fixed
 - AUTOTOOL-3156: Declaration can fail while waiting for unprovisioned service to run
-- AUTOTOOL-2850: ([GitHub Issue 279](https://github.com/F5Networks/f5-declarative-onboarding/issues/279)): Management firewall policy does not work without AFM module for version 15.1.2.1
+- AUTOTOOL-2850: ([GitHub Issue 279](https://github.com/F5Networks/f5-declarative-onboarding/issues/279)): Management firewall policy does not work without AFM module
 - AUTOTOOL-3012: ([GitHub Issue 292](https://github.com/F5Networks/f5-declarative-onboarding/issues/292)): DO unable to change hostname correctly in Google Cloud
 
 ### Changed

README.md

@@ -1,6 +1,5 @@
 # F5 BIG-IP Declarative Onboarding
 
-[![Slack Status](https://f5cloudsolutions.herokuapp.com/badge.svg)](https://f5cloudsolutions.herokuapp.com)
 [![Releases](https://img.shields.io/github/release/F5Networks/f5-declarative-onboarding.svg)](https://github.com/F5Networks/f5-declarative-onboarding/releases)
 [![Issues](https://img.shields.io/github/issues/F5Networks/f5-declarative-onboarding.svg)](https://github.com/F5Networks/f5-declarative-onboarding/issues)
 

SUPPORT.md

@@ -13,10 +13,10 @@ Currently supported versions:
 
 | Software Version | Release Type  | First Customer Ship | End of Support  |
 |------------------|---------------|---------------------|-----------------|
-| DO 1.34.0        | Feature       | 15-Nov-2022         | 15-Feb-2023     |
 | DO 1.35.0        | Feature       | 12-Jan-2023         | 12-Apr-2023     |
 | DO 1.36.0        | Feature       | 09-Feb-2023         | 09-May-2023     |
 | DO 1.36.1        | LTS           | 09-Mar-2023         | 09-Mar-2024     |
+| DO 1.37.0        | Feature       | 27-Mar-2022         | 27-Jun-2023     |
 
 
 \* Fix for Allowed schema version
@@ -63,6 +63,7 @@ Versions no longer supported:
 | DO 1.32.0        | Feature       | 23-Aug-2022         | 23-Nov-2022     |
 | DO 1.33.0        | Feature       | 04-Oct-2022         | 04-Jan-2023     |
 | DO 1.27.1        | LTS           | 08-Mar-2022         | 08-Mar-2023     |
+| DO 1.34.0        | Feature       | 15-Nov-2022         | 15-Feb-2023     |
 
 \* Fix for updated Docker Container packaging only
 

contributing/process_release.md

@@ -57,8 +57,8 @@
   * The name of the tag should be the LTS version with a 'v' at the front (e.g. v1.36.1).
   * Update the `createFrom` to point at the LTS branch.
   * Set the message to: `LTS release v<LTS version>` (e.g. "LTS release v1.36.1")
-* Merge the release branch (without updating the package version) into develop and create an MR for this.
-* Merge the release branch (without updating the package version) into master and create an MR for this.
+* Merge the LTS branch (without updating the package version) into develop and create an MR for this.
+* Merge the LTS branch (only update package version if LTS is latest) into master and create an MR for this.
 
 ## Process for release
 ### Begin process release at the very beginning of the first sprint of a new release, by performing the following actions:

docs/composing-a-declaration.rst

@@ -560,7 +560,7 @@ For more information, see |ntpclass| in the Schema Reference.
 
     "external-self": {
         "class": "SelfIp",
-        "address": "1.2.3.4/24",
+        "address": "192.0.2.4/24",
         "vlan": "external",
         "allowService": "none",
         "trafficGroup": "traffic-group-local-only"
@@ -649,8 +649,8 @@ For more information, see |mgmtrouteclass| in the Schema Reference.
 
         "managementRoute": {
             "class": "ManagementRoute",
-            "gw": "1.2.3.4",
-            "network": "4.3.2.1",
+            "gw": "192.0.2.4",
+            "network": "192.0.2.1",
             "mtu": 1000,
             "type": "interface"
         },

docs/conf.py

@@ -85,7 +85,7 @@
 # The short X.Y version.
 version = u''
 # The full version, including alpha/beta/rc tags.
-release = u'1.36.1'
+release = u'1.37.0'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.

docs/declarations/trace-response.json

@@ -143,7 +143,7 @@
                    "contact": "Customer Name <[email protected]>",
                    "location": "Network Closet 1",
                    "allowList": [
-                         "127.0.0.0/8"
+                         "192.0.2.0/8"
                    ]
                 },
                 "SnmpTrapEvents": {
@@ -448,7 +448,7 @@
                    "contact": "Customer Name <[email protected]>",
                    "location": "Network Closet 1",
                    "allowList": [
-                         "127.0.0.0/8"
+                         "192.0.2.1/8"
                    ]
                 },
                 "SnmpUser": {},

docs/json-pointers.rst

@@ -58,7 +58,7 @@ For example, you have the following lines in your declaration.
 
     "external-self": {
             "class": "SelfIp",
-            "address": "1.2.3.4/24",
+            "address": "192.0.2.4/24",
             "vlan": "external",
             "allowService": "default",
             "trafficGroup": "traffic-group-1"

docs/prereqs.rst

@@ -58,6 +58,10 @@ Notes and tips
 
    <br />
 
+.. |p| raw:: html
+
+   v13.1.1.5
+
 .. |as3| raw:: html
 
    <a href="https://clouddocs.f5.com/products/extensions/f5-appsvcs-extension/3/" target="_blank">Application Services 3 (AS3)</a>

docs/revision-history.rst

@@ -40,11 +40,11 @@ Document Revision History
         - 7-15-22
 
       * - 1.30
-        - Updated the documentation for BIG-IP Declarative Onboarding v1.30.0.  This release contains the following changes: |br| * Added support for validating declarations with either Device or BIG-IP DO class using do.schema.json (see :ref:`Validating a declaration<validate>`) |br| |br| Issues Resolved: |br| * Declaration can fail while waiting for unprovisioned service to run |br| * Management firewall policy does not work without AFM module for version 15.1.2.1, `GitHub Issue 279 <https://github.com/F5Networks/f5-declarative-onboarding/issues/279>`_ |br| * BIG-IP DO unable to change hostname correctly in Google Cloud, `GitHub Issue 292 <https://github.com/F5Networks/f5-declarative-onboarding/issues/292>`_
+        - Updated the documentation for BIG-IP Declarative Onboarding v1.30.0.  This release contains the following changes: |br| * Added support for validating declarations with either Device or BIG-IP DO class using do.schema.json (see :ref:`Validating a declaration<validate>`) |br| |br| Issues Resolved: |br| * Declaration can fail while waiting for unprovisioned service to run |br| * Management firewall policy does not work without AFM module, `GitHub Issue 279 <https://github.com/F5Networks/f5-declarative-onboarding/issues/279>`_ |br| * BIG-IP DO unable to change hostname correctly in Google Cloud, `GitHub Issue 292 <https://github.com/F5Networks/f5-declarative-onboarding/issues/292>`_
         - 5-31-22
 
       * - 1.29
-        - Updated the documentation for BIG-IP Declarative Onboarding v1.29.0.  This release contains the following issues resolved: |br| * SelfIp with RouteDomain cannot reach directly connected network |br| *  Licensing can fail if restnoded restarts during processing |br| * SelfIp allowService property does not accept a mix of service:port and default, `GitHub Issue 276 <https://github.com/F5Networks/f5-declarative-onboarding/issues/276>`_ |br| *  Security level is not automatically set in the SnmpUser class, `GitHub Issue 282 <https://github.com/F5Networks/f5-declarative-onboarding/issues/282>`_ |br| * Management firewall policy does not work without AFM module for version 15.1.2.1, `GitHub Issue 279 <https://github.com/F5Networks/f5-declarative-onboarding/issues/279>`_ 
+        - Updated the documentation for BIG-IP Declarative Onboarding v1.29.0.  This release contains the following issues resolved: |br| * SelfIp with RouteDomain cannot reach directly connected network |br| *  Licensing can fail if restnoded restarts during processing |br| * SelfIp allowService property does not accept a mix of service:port and default, `GitHub Issue 276 <https://github.com/F5Networks/f5-declarative-onboarding/issues/276>`_ |br| *  Security level is not automatically set in the SnmpUser class, `GitHub Issue 282 <https://github.com/F5Networks/f5-declarative-onboarding/issues/282>`_ |br| * Management firewall policy does not work without AFM module, `GitHub Issue 279 <https://github.com/F5Networks/f5-declarative-onboarding/issues/279>`_
         - 4-19-22
 
       * - 1.28

examples/authMethods.json

@@ -18,7 +18,7 @@
                 "serviceType": "call-check",
                 "servers": {
                     "primary": {
-                        "server": "1.2.3.4",
+                        "server": "192.0.2.60",
                         "port": 1811,
                         "secret": "mySecret"
                     },
@@ -49,7 +49,7 @@
                 "searchTimeout": 687,
                 "servers": [
                     "my.host.com",
-                    "1.2.3.4",
+                    "192.0.2.60",
                     "FE80:0000:0000:0000:0202:B3FF:FE1E:8329"
                 ],
                 "ssl": "enabled",
@@ -76,7 +76,7 @@
                 "secret": "aSecret1",
                 "servers": [
                     "my.host.com",
-                    "1.2.3.4",
+                    "192.0.2.60",
                     "FE80:0000:0000:0000:0202:B3FF:FE1E:8329"
                 ],
                 "service": "ppp"

examples/bgp.json

@@ -61,7 +61,7 @@
                 {
                     "name": 30,
                     "action": "deny",
-                    "prefix": "198.51.100.0/24",
+                    "prefix": "192.0.2.0/24",
                     "prefixLengthRange": 25
                 }
             ]
@@ -129,12 +129,12 @@
             "keepAlive": 10,
             "neighbors": [
                 {
-                    "address": "203.0.113.1",
+                    "address": "192.0.2.1",
                     "ebgpMultihop": 2,
                     "peerGroup": "Neighbor"
                 },
                 {
-                    "address": "203.0.113.2",
+                    "address": "192.0.2.2",
                     "ebgpMultihop": 3,
                     "peerGroup": "Neighbor"
                 }
@@ -156,7 +156,7 @@
                 }
             ],
             "routeDomain": "exampleRouteDomain",
-            "routerId": "203.0.113.4"
+            "routerId": "192.0.2.4"
         }
     }
 }

examples/firewallPolicy.json

@@ -24,13 +24,13 @@
         },
         "selfTwo": {
             "class": "SelfIp",
-            "address": "192.0.3.20/24",
+            "address": "192.0.2.20/24",
             "vlan": "/Common/newVlan",
             "stagedFirewallPolicy": "/Common/firewallPolicy"
         },
         "firewallAddressList1": {
             "class": "FirewallAddressList",
-            "addresses": ["192.0.2.10", "192.1.2.0/24"]
+            "addresses": ["192.0.2.10", "192.0.2.0/24"]
         },
         "firewallPortList1": {
             "class": "FirewallPortList",

examples/gslbMonitor.json

@@ -19,7 +19,7 @@
             "class": "GSLBServer",
             "devices": [
                 {
-                    "address": "10.10.10.10",
+                    "address": "192.0.2.10",
                     "addressTranslation": "192.0.2.12",
                     "remark": "GSLB server device description"
                 }
@@ -37,7 +37,7 @@
             "class": "GSLBMonitor",
             "remark": "description",
             "monitorType": "http",
-            "target": "1.1.1.1:80",
+            "target": "192.0.2.1:80",
             "interval": 100,
             "timeout": 1000,
             "probeTimeout": 110,
@@ -51,7 +51,7 @@
             "class": "GSLBMonitor",
             "remark": "description",
             "monitorType": "https",
-            "target": "2.2.2.2:80",
+            "target": "192.0.2.2:80",
             "interval": 100,
             "timeout": 1000,
             "probeTimeout": 110,
@@ -67,7 +67,7 @@
             "class": "GSLBMonitor",
             "remark": "description",
             "monitorType": "gateway-icmp",
-            "target": "3.3.3.3:80",
+            "target": "192.0.2.3:80",
             "interval": 100,
             "timeout": 1000,
             "probeTimeout": 110,
@@ -80,7 +80,7 @@
             "class": "GSLBMonitor",
             "remark": "description",
             "monitorType": "tcp",
-            "target": "4.4.4.4:80",
+            "target": "192.0.2.4:80",
             "interval": 100,
             "timeout": 1000,
             "probeTimeout": 110,
@@ -94,7 +94,7 @@
             "class": "GSLBMonitor",
             "remark": "description",
             "monitorType": "udp",
-            "target": "5.5.5.5:80",
+            "target": "192.0.2.55:80",
             "interval": 100,
             "timeout": 1000,
             "probeTimeout": 110,

examples/licenseViaBigIqReachableASG.json

@@ -1,7 +1,7 @@
 {
     "class": "DO",
-    "targetHost": "1.2.3.4",
-    "targetUsername": "/declaration/Credentials/1/username",
+    "targetHost": "192.0.2.4",
+    "targetUsername": "/declaration/Credentials/1/bigiqUsername",
     "targetPassphrase": "/declaration/Credentials/1/password",
     "declaration": {
         "schemaVersion": "1.0.0",
@@ -23,15 +23,15 @@
             "myLicense": {
                 "class": "License",
                 "licenseType": "licensePool",
-                "bigIqHost": "10.0.1.200",
-                "bigIqUsername": "/Credentials/0/username",
+                "bigIqHost": "192.0.2.200",
+                "bigIqUsername": "/Credentials/0/bigiqUsername",
                 "bigIqPassword": "/Credentials/0/password",
                 "licensePool": "myUtilityLicense",
                 "skuKeyword1": "key1",
                 "skuKeyword2": "key2",
                 "unitOfMeasure": "hourly",
                 "reachable": true,
-                "bigIpUsername": "/Credentials/1/username",
+                "bigIpUsername": "/Credentials/1/bigipUsername",
                 "bigIpPassword": "/Credentials/1/password"
             },
             "myDns": {

examples/managementIpFirewalWithAfmProvisioned.json

@@ -11,7 +11,7 @@
         },
         "firewallAddressList1": {
             "class": "FirewallAddressList",
-            "addresses": ["192.0.2.10", "192.1.2.0/24"]
+            "addresses": ["192.0.2.10", "233.252.0.0/24"]
         },
         "firewallPortList1": {
             "class": "FirewallPortList",

examples/managementIpFirewall.json

@@ -6,7 +6,7 @@
         "class": "Tenant",
         "netAddressList1": {
             "class": "NetAddressList",
-            "addresses": ["192.0.2.10", "192.1.2.0/24"]
+            "addresses": ["192.0.2.10", "233.252.0.0/24"]
         },
         "netPortList1": {
             "class": "NetPortList",

examples/onboard.json

@@ -121,8 +121,8 @@
         },
         "managementRoute": {
             "class": "ManagementRoute",
-            "gw": "1.2.3.4",
-            "network": "4.3.2.1",
+            "gw": "192.0.2.4",
+            "network": "192.0.2.1",
             "mtu": 1500
         },
         "myRouteDomain": {

examples/onboardViaBigIqAws.json

@@ -41,7 +41,7 @@
             }
         }
     },
-    "targetHost": "54.10.10.10",
+    "targetHost": "192.0.2.10",
     "targetUsername": "admin",
     "targetSshKey": {
         "path": "/var/ssh/restnoded/privatessh.key"

examples/preserveOrigDhcpRoutes.json

@@ -10,8 +10,8 @@
         },
         "newManagementRoute": {
             "class": "ManagementRoute",
-            "network": "1.2.3.4",
-            "gw": "4.3.2.1"
+            "network": "192.0.2.4",
+            "gw": "192.0.2.1"
         }
     }
 }

examples/routeMap.json

@@ -74,7 +74,7 @@
                 {
                     "name": 30,
                     "action": "deny",
-                    "prefix": "198.51.100.0/24",
+                    "prefix": "192.0.2.1/24",
                     "prefixLengthRange": 25
                 }
             ]

examples/routingAccessList.json

@@ -18,9 +18,9 @@
                 {
                     "name": "22",
                     "action": "deny",
-                    "destination": "198.51.100.10",
+                    "destination": "192.0.2.10",
                     "exactMatchEnabled": false,
-                    "source": "198.51.100.11"
+                    "source": "192.0.2.11"
                 }
             ]
         },

examples/routingPrefixList.json

@@ -34,7 +34,7 @@
                 {
                     "name": 30,
                     "action": "deny",
-                    "prefix": "198.51.100.0/24",
+                    "prefix": "192.0.2.1/24",
                     "prefixLengthRange": "25:27"
                 }
             ]