Releases: F5Networks/f5-declarative-onboarding
v1.11.0
Updated the repository for Declarative Onboarding v1.11.0. This release contains the following changes. See the Document revision history for more information and links.
- Added support for provisioning SSL Orchestrator (SSLO)
- Added support for using IP addresses for Device Group members and owner
Issues Resolved:
- Route Configuration can conflict with DHCP (GitHub issue 100)
- Setting ConfigSync does not handle device name / hostname mismatch (GitHub Issue 104)
- Attempting to modify ConfigSync on non-existing device - device not resolving properly (GitHub Issue 113)
- Requiring a reboot causes task to never complete
- Relicensing BIG-IP can be interrupted by service restart
v1.10.0
Updated the repository for Declarative Onboarding v1.10.0. This release contains the following changes. See the Document revision history for more information and links.
- Added the System class to the Composing a Standalone declaration page
- Added support for disabling autoPhonehome in the System class
- Added support for provisioning CGNAT in TMOS version 15.0 and later
Issues Resolved:
- On BIG-IP 14 and later, revoke license from BIG-IQ did not work
- DO now makes sure config is saved before issuing revoke command
- Fixed issue when existing Radius servers were present and none were the primary
v1.9.0
Updated the repository for Declarative Onboarding v1.9.0. This release contains the following changes. See the Document revision history for more information and links.
- Added a new query parameter for GET requests for HTTP status codes
- Added a link to the AskF5 article for DO and BIG-IQ compatibility
Issues Resolved:
- DO was unable to set hostname in AWS environment (K45728203)
- Changes to the network property for ManagementRoute and Route would not actually update the config (Issue 75)
- The /example endpoint was not working.
v1.8.0
Updated the repository for Declarative Onboarding v1.8.0. This release contains the following changes. See the Document revision history for more information and links.
- Added support for SSHD
- Added support for HTTPD
- Added a System class which includes cliInactivityTimeout, consoleInactivityTimeout, and hostname
- Added a note about DO collecting non-identifiable usage data
- Added a troubleshooting entry and other notes about DO performing hostname resolution, and failing if the hostname resolution fails
- Added a troubleshooting entry and other notes about the /dist directory going away on GitHub, and the DO RPM being available as a release Asset
Issues Resolved:
- DO was unable to use management network for SnmpTrapDestination
- DO creates incomplete RADIUS authentication configuration
- DO was unable to remove Radius System Auth configuration
- DO does not remove secondary Radius server when it is absent in declaration
v1.7.0
Updated the repository for Declarative Onboarding v1.7.0. This release contains the following changes. See the Document revision history for more information and links.
- Added the /inspect endpoint for GET requests to retrieve the current device configuration as a DO declaration
- Added support for LDAP, RADIUS, and TACACS authentication in a declaration
- Added support for Remote Roles in authentication
- Added support for configuring SNMP
- Added support for configuring global Traffic Control properties
- Added support for configuring syslog destinations
- Added support for using cmp-hash in the VLAN class
- Added support for DAG Globals
- Added support for the Trunk class
- Added a Schema Reference Appendix
- Added a note to Device Group class stating as of DO 1.7.0, owner is required.
- Improved masking of nested secrets
- Improved handling of route domains
Issues Resolved:
- The values of schemaCurrent and schemaMinium do not always return correct values
- Management Route class does not work
- DO sets task status to ERROR right away while it is still rolling back
- DO unable to create new VLAN(s) when no Route Domain(s) specified in declaration. Now DO will add new VLAN(s) to Route Domain with ID 0 unless otherwise specified.
- Device Group owner is now required
- configsyncIp now allows none as valid value
- When targetSshKey is used DO now tries bash shell to modify targetUsername password if tmsh shell fails
- DO now handles the automatic update of the root password when the admin password changes on BIG-IP version 14.0+.
v1.6.0
Updated the repository for Declarative Onboarding v1.6.0. This release contains the following changes. See the Document revision history for more information and links.
- Added support for creating route domains in a declaration
- Added support for specifying a management route
- Added a note to the tag row of the VLAN class table stating if you set the tag in DO, the VLAN defaults the tagged parameter to true.
- Added support for specifying a webhook URL for response information .
Issues Resolved:
- Updated Composing a declaration for licensing BIG-IP with a BIG-IQ and the example declarations to change references to ELA/subscription licensing to utility licensing.
- Removed targetSshKey when filling in targetPassphrase.
v1.5.0
Updated the repository for Declarative Onboarding v1.5.0. This release contains the following changes. See the Document revision history for more information and links.
- Support for creating an Analytics profile.
- Added support for using Authorized Keys in declarations.
- Added a new page for Adding or removing members of a Device Group.
- Added a note to the Prerequisites and Requirements stating that due to changes in TMOS v13.1.1.5, the Declarative Onboarding Extension is not compatible with that specific TMOS version.
- Added the schema files from previous releases to the GitHub repository.
- Updated Validating a declaration to clarify the schema URL to use.
- Updated the documentation theme and indexes.
Issues Resolved:
- Declarative Onboarding now disables DHCP for DNS/NTP if DO is configuring them (see the note in DNS class and NTP class)
- License keys no longer appear in the log
- Radius server secrets no longer appears in the log
- LicensePool now respects custom management access port of the BIG-IP that is being licensed
- When a 400 is received from restjavad, DO now tries relicensing
- Fixed an issue in which initial clustering failure would prevent clustering from working on subsequent attempts due to using the wrong device name.
v1.4.0
Updated the repository for Declarative Onboarding v1.4.0. This release contains the following changes. See the Document revision history for more information and links.
-
Using the Declarative Onboarding Container now allows you to send declarations to multiple BIG-IPs without waiting for previous declarations to finish onboarding.
-
taskId is now returned from POST onboard requests (see Note in POST documentation)
-
New /task endpoint to retrieve status by task (see Note in GET documentation)
Released on 5/8/19
v1.3.0
Declarative Onboarding v1.3.0 contains the following changes:
- Added support for revoking a license from a BIG-IP with BIG-IQ, as well as relicensing and overwriting a license
- Added instructions for validating a declaration using Microsoft Visual Studio Code
- Added support for modifying a Self IP address.
Issues Resolved:
- Corrected an issue in which all Self IPs would be updated if there was a change to any of them.
- Corrected an issue in which clustering was not working if ASM was provisioned.
See the Document revision history for more information and links.
v1.2.0
Declarative Onboarding v1.2.0 contains the following changes:
- Added support using Declarative Onboarding in a container
- Added a new section on using JSON Pointers in Declarative Onboarding declarations
- Added a note and link about the Declarative Onboarding Postman Collection available on GitHub
- Added notes about the BIG-IP v14.0 and later Secure Password Policy
- Added new example declarations
Issues Resolved:
- Corrected an issue which would reject a CIDR of 1x on a Self IP address.
- Corrected an issue in which DB vars were not rolled back in the event of an error.
See the Document revision history for more information and links):