blob: 768a278179e1412c91838a2984e1aa568436b026 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
|
==============================================
F5Networks F5_Modules Collection Release Notes
==============================================
.. contents:: Topics
v1.7.0
============
Major Changes
-------------
- Added async_timeout parameter to bigip_ucs_fetch module to allow customization of module wait for async interface
- Changed bigip_ucs_fetch module to use asynchronous interface when generating UCS files
Minor Changes
-------------
- Add better error handling for TEEM telemetry connection
- Changed apm_policy_fetch module to use standard download function
Bugfixes
--------
- Fix AFM firewall address list error
- Fix GTM virtual server depenedncy where path to Iapp resources were incorrectly stripped.
- Fix apm policy existence checks in bigip_apm_policy_fetch module
- Fix asm policy existence checks in bigip_asm_policy_fetch module
- Fix bigip_management_route module not idempotent
- Fix host_begins_with_any, host_is_any, server_name_is_any and host_is_not_any parameters of the bigip_policy_rule module to enforce list as the required parameter type. Change was required since in Ansible a string conversion is applied when the provided argument type is not matching the expected one causing undesired side effects.
- Fix idempotency issue with gateway_address and route domain in bigip_static_route module
- Fix issue with bigip_asm_policy_fetch where existing file would break the module run
- Fix issue with bigip_asm_policy_fetch where similiar policy names would cause wrong policy to be fetched
- Fix issue with bigip_asm_policy_manage where similiar policy names would cause wrong policy id to be selected
- Fix iteration bug in bigiq_device_info module
v1.6.0
======
Major Changes
-------------
- Add phone home Teem integration into all modules, functionality can be disabled by setting up F5_TEEM environment variable or no_f5_teem provider parameter
Minor Changes
-------------
- Add AS3 declaration information to the bigip_device_info module
- Add AS3, TS, CFE, and DO information to the bigip_device_info module
- Add CFE declaration information to the bigip_device_info module
- Add DO declaration information to the bigip_device_info module
- Add TS declaration information to the bigip_device_info module
- Add access policy information to the bigip_device_info module
- Add access profile information to the bigip_device_info module
- Add meaningful error message for the wait_for parameter in the bigip_command module
- Add parent_policies and policies_pending_changes information parameters to obtain when gathering asm-policy-stats
- Add remote_syslog information to the bigip_device_info module.
- Add renewal option to the bigip_device_license module
- Add reuse_objects parameter to the bigip_apm_policy_import module
- Add sync-status information to the bigip_device_info module
- Add the ability to import API Protection policies to the bigip_apm_policy_import module
- Added apply information parameter to indicate if an ASM policy has pending changes that need to be applied.
- Changed the meaning of policies_active and policies_inactive stat information due to changes in TMOS 13.x
- New bigip_ssl_key_cert module to manage SSL certificates and keys with the transaction interface
Removed Features (previously deprecated)
----------------------------------------
- Removed arp_state parameter from the bigip_virtual_address module
Bugfixes
--------
- Changed unicast_failover element type to dictionary
- Fix force parameter set to yes causing list index out of range error
- Fix invalid parameter name in the bigip_config_sync action module
- Fix issue where ASM file download needs to be chunked for larger files.
- Fix issue with retaining package files in the bigip_lx_package module
- Fix key error in list comprehension in the AsmPolicyStatsParameters class
- Fix missing ssh-keyfile parameter causing key error in the bigip action plugin
New Modules
-----------
- bigip_ssl_key_cert - Import/Delete SSL keys and certs from BIG-IP
v1.5.0
======
Bugfixes
--------
- Fix issue with control characters in pool_id in bigiq_regkey_license_assignment module
- Fix the download of an APM policy in bigip_apm_policy_fetch module
v1.4.0
======
Major Changes
-------------
- Remove redundant parameters in f5_provider to fix disparity between documentation and module parameters
Minor Changes
-------------
- Add SSH connection type capability to bigip_wait module
- Add apply option to bigip_asm_policy_manage module
- Add retain_package_file option to bigip_lx_package module
- New bigip_asm_advanced_settings module to manage ASM settings
- New bigip_gtm_dns_listener module to manage DNS listener configuration
Bugfixes
--------
- Fix ASM policy import issue by users with web-application-security-administrator role
- Fix idempotency when using true_names parameter in bigip_profile_client_ssl module
New Modules
-----------
- bigip_asm_advanced_settings - Manages BIG-IP system ASM advanced settings.
- bigip_gtm_dns_listener - Configures the BIG-IP DNS system to answer TCP or UDP DNS requests.
v1.3.0
======
Major Changes
-------------
- Broke apart bigip_device_auth_radius to implement radius server configuration in bigip_device_auth_server module. Refer to module documentation for usage details
Minor Changes
-------------
- Add SSL certificate subject_alternative_name information to bigip_device_info module
- Add ability to install software images on vCMP guests with the bigip_software_install module
- Add cipher_list parameter to bigip_monitor_https
- Add hw_syn_cookie parameter to bigip_vlan module
- Add option to bypass all module validation for bigip_virtual_server
- Add pool order option to bigip_gtm_wide_ip module
- Add pva_acceleration parameter to bigip_profile_fastl4 module
- Add set_variable type to bigip_policy_rule module
- Add time_wait_timeout parameter to bigip_profile_tcp module
- Add use_for_auth parameter to bigip_device_auth_ldap module to allow setting up LDAP as the authentication source
- New bigip_device_auth_radius server module to manage radius server configuration
- New bigip_monitor_mysql module to manage mySQL monitor configuration
- New bigip_monitor_oracle module to manage oracle monitor configuration
- New bigip_ssl_csr_module to create CSR files
Removed Features (previously deprecated)
----------------------------------------
- Remove bigip_appsvcs_extension module
Bugfixes
--------
- Fix invalid data type of partition_access parameter in the bigip_user module
New Modules
-----------
- bigip_device_auth_radius - Manages RADIUS auth configuration on a BIG-IP.
- bigip_device_auth_radius_server - Manages the RADIUS server configuration on a BIG-IP.
- bigip_monitor_mysql - Manages BIG-IP MySQL monitors.
- bigip_monitor_oracle - Manages BIG-IP Oracle monitors.
- bigip_ssl_csr - Creates SSL CSR files on the BIG-IP.
v1.2.0
======
Minor Changes
-------------
- Add ImishConfig class to add duplicate records handling capability
- Add additional dos vectors to bigip_firewall_dos_vector_module
- Add addon_keys parameter to bigip_device_license module
- Add aliases for address and port to bigip_monitor_tcp module
- Add allow_duplicates parameter to bigip_imish_config module
- Add check_profiles parameter to bypass profile verification ability in bigip_virtual_server module
- Add cipher_group parameter to bigip_profile_client_ssl module
- Add dns-oversize DNS protocol security vector to bigip_firewall_doc_vector
- Add forward_node option to bigip_policy_rule module
- Add ipv6-ext-hdr-frames security vector to bigip_firewall_doc_vector
- Add management routes information to bigip_device_info module
- Add support for BIG-IQ 7.0 and above to bigiq_device_info module
- Add virtual server policies information to bigip_device_info
- New bigip_device_auth_radius module to manage RADIUS auth configuration
Bugfixes
--------
- Change bigip_data_group module's records parameter type to 'raw'
- Fix '?' character handling in value for bigip_data_group module
- Fix a bug with using the true_name parameter in the bigip_profile_client_ssl module
- Fix an issue with /32 IPV6 subnets being saved as host rather than a network in bigip_data_group module
- Fix attribute error in bigip_software_install module
- Fix check_profiles boolean parameter conversion in bigip_virtual_server
- Fix handling of duplicate records by the bigip_imish_config module
v1.1.0
======
Minor Changes
-------------
- Add accounting parameter for tacacs type to bigip_device_auth module
- Add fw_enforcement_policy parameter to bigip_selfip module
- Add persist cookie option to bigip_policy_rule module
- Add phase1_lifetime parameter to bigip_ike_peer module
- Add self allow option to bigip_network_globals module
- Add true_names support to bigip_profile_client_ssl modules allowing specifying true filenames of the certificates
- New FTP monitor module for configuring and managing FTP monitors
- New ICMP monitor module for configuring and managing ICMP monitors
- New SMTP monitor module for configuring and managing SMTP monitors
- New universal persistence profile module for configuring and managing universal persistence profiles
Deprecated Features
-------------------
- Deprecated bigip_appsvcs_extension module
- Deprecated bigip_device_facts module name
- Deprecated bigiq_device_facts module name
Removed Features (previously deprecated)
----------------------------------------
- Remove _bigip_iapplx_package alias
- Remove _bigip_security_address_list alias
- Remove _bigip_security_port_list alias
- Remove _bigip_traffic_group alias
- Remove bigip_asm_policy module
Bugfixes
--------
- Fix IPv6 netmask for self IPs in bigip_device_info
- Fix allowing authenticated not authorized users using modules to modify a resource
- Fix save_when parameter not saving the configuration as expected in bigip_imish_config module
New Modules
-----------
- bigip_monitor_ftp - Manages FTP monitors on a BIG-IP.
- bigip_monitor_icmp - Manages F5 BIG-IP LTM ICMP monitors.
- bigip_monitor_smtp - Manages SMTP monitors on a BIG-IP.
- bigip_profile_persistence_universal - Manages universal persistence profiles.
v1.0.0
======
New Plugins
-----------
Lookup
~~~~~~
- bigiq_license - Returns a random license from the list.
- license_hopper - Returns a random license from the list.
New Modules
-----------
- bigip_apm_acl - Manages user-defined APM ACLs.
- bigip_apm_network_access - Manages the APM Network Access resource.
- bigip_apm_policy_fetch - Exports the APM policy or APM access profile from remote nodes.
- bigip_apm_policy_import - Manages BIG-IP APM policy or APM access profile imports.
- bigip_asm_dos_application - Manages application settings for DOS profiles.
- bigip_asm_policy_fetch - Exports the ASM policy from remote nodes.
- bigip_asm_policy_import - Manages BIG-IP ASM policy imports.
- bigip_asm_policy_manage - Manages BIG-IP ASM policies
- bigip_asm_policy_server_technology - Manages the Server Technology on an ASM policy.
- bigip_asm_policy_signature_set - Manages Signature Sets on an ASM policy.
- bigip_cgnat_lsn_pool - Manages CGNAT LSN Pools.
- bigip_cli_alias - Manages CLI aliases on a BIG-IP.
- bigip_cli_script - Manages CLI scripts on a BIG-IP.
- bigip_command - Runs TMSH and BASH commands on F5 devices.
- bigip_config - Manages BIG-IP configuration sections.
- bigip_configsync_action - Performs actions related to configuration synchronization (ConfigSync).
- bigip_data_group - Manages data groups on a BIG-IP.
- bigip_device_auth - Manages system authentication on a BIG-IP.
- bigip_device_auth_ldap - Manages LDAP device authentication settings on BIG-IP.
- bigip_device_certificate - Manages self-signed device certificates.
- bigip_device_connectivity - Manages device IP configuration settings for HA on a BIG-IP.
- bigip_device_dns - Manages BIG-IP device DNS settings.
- bigip_device_group - Manages device groups on a BIG-IP.
- bigip_device_group_member - Manages members in a device group.
- bigip_device_ha_group - Manages HA group settings on a BIG-IP system.
- bigip_device_httpd - Manages HTTPD related settings on BIG-IP.
- bigip_device_info - Collects information from F5 BIG-IP devices.
- bigip_device_license - Manages license installation and activation on BIG-IP devices.
- bigip_device_ntp - Manages NTP servers on a BIG-IP.
- bigip_device_sshd - Manages the SSHD settings of a BIG-IP.
- bigip_device_syslog - Manages system-level syslog settings on BIG-IP.
- bigip_device_traffic_group - Manages traffic groups on BIG-IP.
- bigip_device_trust - Manages the trust relationships between BIG-IPs.
- bigip_dns_cache_resolver - Manages DNS resolver cache configurations on BIG-IP.
- bigip_dns_nameserver - Manages LTM DNS nameservers on a BIG-IP.
- bigip_dns_resolver - Manages DNS resolvers on a BIG-IP.
- bigip_dns_zone - Manages DNS zones on BIG-IP.
- bigip_file_copy - Manages files in datastores on a BIG-IP.
- bigip_firewall_address_list - Manages address lists on BIG-IP AFM.
- bigip_firewall_dos_profile - Manages AFM DoS profiles on a BIG-IP.
- bigip_firewall_dos_vector - Manages the attack vector configuration in an AFM DoS profile.
- bigip_firewall_global_rules - Manages AFM global rule settings on a BIG-IP.
- bigip_firewall_log_profile - Manages AFM logging profiles configured in the system.
- bigip_firewall_log_profile_network - Configures Network Firewall related settings of the log profile.
- bigip_firewall_policy - Manages AFM security firewall policies on a BIG-IP.
- bigip_firewall_port_list - Manages port lists on BIG-IP AFM.
- bigip_firewall_rule - Manages AFM Firewall rules.
- bigip_firewall_rule_list - Manages AFM security firewall policies on a BIG-IP.
- bigip_firewall_schedule - Manages BIG-IP AFM schedule configurations.
- bigip_gtm_datacenter - Manages the Datacenter configuration on a BIG-IP.
- bigip_gtm_global - Manages global GTM settings.
- bigip_gtm_monitor_bigip - Manages F5 BIG-IP GTM BIG-IP monitors.
- bigip_gtm_monitor_external - Manages external GTM monitors on a BIG-IP.
- bigip_gtm_monitor_firepass - Manages F5 BIG-IP GTM FirePass monitors.
- bigip_gtm_monitor_http - Manages F5 BIG-IP GTM HTTP monitors.
- bigip_gtm_monitor_https - Manages F5 BIG-IP GTM HTTPS monitors.
- bigip_gtm_monitor_tcp - Manages F5 BIG-IP GTM TCP monitors.
- bigip_gtm_monitor_tcp_half_open - Manages F5 BIG-IP GTM TCP half-open monitors.
- bigip_gtm_pool - Manages F5 BIG-IP GTM pools.
- bigip_gtm_pool_member - Manages GTM pool member settings.
- bigip_gtm_server - Manages F5 BIG-IP GTM servers.
- bigip_gtm_topology_record - Manages GTM Topology Records.
- bigip_gtm_topology_region - Manages GTM Topology Regions.
- bigip_gtm_virtual_server - Manages F5 BIG-IP GTM virtual servers.
- bigip_gtm_wide_ip - Manages F5 BIG-IP GTM wide IPs.
- bigip_hostname - Manages the hostname of a BIG-IP.
- bigip_iapp_service - Manages TCL iApp services on a BIG-IP.
- bigip_iapp_template - Manages TCL iApp templates on a BIG-IP.
- bigip_ike_peer - Manages IPSec IKE Peer configuration on a BIG-IP.
- bigip_imish_config - Manages the BIG-IP advanced routing configuration sections.
- bigip_interface - Manages BIG-IP physical interfaces.
- bigip_ipsec_policy - Manages IPSec policies on a BIG-IP.
- bigip_irule - Manages iRules across different modules on a BIG-IP.
- bigip_log_destination - Manages log destinations on a BIG-IP.
- bigip_log_publisher - Manages log publishers on a BIG-IP.
- bigip_lx_package - Manages Javascript LX packages on a BIG-IP.
- bigip_management_route - Manages system management routes on a BIG-IP.
- bigip_message_routing_peer - Manages peers for routing generic message protocol messages.
- bigip_message_routing_protocol - Manages generic message parser profiles.
- bigip_message_routing_route - Manages static routes for routing message protocol messages.
- bigip_message_routing_router - Manages router profiles for message-routing protocols.
- bigip_message_routing_transport_config - Manages the configuration for an outgoing connection.
- bigip_monitor_dns - Manages DNS monitors on a BIG-IP.
- bigip_monitor_external - Manages external LTM monitors on a BIG-IP.
- bigip_monitor_gateway_icmp - Manages F5 BIG-IP LTM gateway ICMP monitors.
- bigip_monitor_http - Manages F5 BIG-IP LTM HTTP monitors
- bigip_monitor_https - Manages F5 BIG-IP LTM HTTPS monitors
- bigip_monitor_ldap - Manages BIG-IP LDAP monitors.
- bigip_monitor_snmp_dca - Manages BIG-IP SNMP data collecting agent (DCA) monitors.
- bigip_monitor_tcp_echo - Manages F5 BIG-IP LTM TCP echo monitors.
- bigip_monitor_tcp_half_open - Manages F5 BIG-IP LTM TCP half-open monitors.
- bigip_monitor_udp - Manages F5 BIG-IP LTM UDP monitors.
- bigip_network_globals - Manages network global settings on a BIG-IP.
- bigip_node - Manages F5 BIG-IP LTM nodes.
- bigip_partition - Manages BIG-IP partitions.
- bigip_password_policy - Manages the authentication password policy on a BIG-IP.
- bigip_policy - Manages the general policy configuration on a BIG-IP.
- bigip_policy_rule - Manages LTM policy rules on a BIG-IP.
- bigip_pool_member - Manages F5 BIG-IP LTM pool members.
- bigip_profile_analytics - Manages HTTP analytics profiles on a BIG-IP.
- bigip_profile_client_ssl - Manages client SSL profiles on a BIG-IP.
- bigip_profile_dns - Manages DNS profiles on a BIG-IP.
- bigip_profile_fastl4 - Manages Fast L4 profiles on a BIG-IP.
- bigip_profile_ftp - Manages FTP profiles on a BIG-IP.
- bigip_profile_http - Manages HTTP profiles on a BIG-IP.
- bigip_profile_http2 - Manages HTTP2 profiles on a BIG-IP.
- bigip_profile_http_compression - Manages HTTP compression profiles on a BIG-IP.
- bigip_profile_oneconnect - Manages OneConnect profiles on a BIG-IP.
- bigip_profile_persistence_cookie - Manages cookie persistence profiles on BIG-IP.
- bigip_profile_persistence_src_addr - Manages source address persistence profiles on a BIG-IP.
- bigip_profile_server_ssl - Manages server SSL profiles on a BIG-IP.
- bigip_profile_sip - Manages SIP profiles on a BIG-IP.
- bigip_profile_tcp - Manages TCP profiles on a BIG-IP.
- bigip_profile_udp - Manages UDP profiles on a BIG-IP.
- bigip_provision - Manages BIG-IP module provisioning.
- bigip_qkview - Manages qkviews on the device.
- bigip_remote_role - Manages remote roles on a BIG-IP.
- bigip_remote_syslog - Manipulates remote syslog settings on a BIG-IP.
- bigip_remote_user - Manages the default settings for remote user accounts on a BIG-IP.
- bigip_routedomain - Manages route domains on a BIG-IP.
- bigip_selfip - Manages Self IP addresses on a BIG-IP.
- bigip_service_policy - Manages service policies on a BIG-IP.
- bigip_smtp - Manages SMTP settings on the BIG-IP.
- bigip_snat_pool - Manages SNAT pools on a BIG-IP.
- bigip_snat_translation - Manages SNAT Translations on a BIG-IP.
- bigip_snmp - Manipulates general SNMP settings on a BIG-IP.
- bigip_snmp_community - Manages SNMP communities on a BIG-IP.
- bigip_snmp_trap - Manipulates SNMP trap information on a BIG-IP.
- bigip_software_image - Manages software images on a BIG-IP.
- bigip_software_install - Installs software images on a BIG-IP.
- bigip_software_update - Manages the software update settings of a BIG-IP.
- bigip_ssl_certificate - Imports/Deletes certificates from a BIG-IP.
- bigip_ssl_key - Imports/Deletes SSL keys from a BIG-IP.
- bigip_ssl_ocsp - Manages OCSP configurations on a BIG-IP.
- bigip_static_route - Manipulates static routes on a BIG-IP.
- bigip_sys_daemon_log_tmm - Manages BIG-IP tmm daemon log settings.
- bigip_sys_db - Manages BIG-IP system database variables.
- bigip_sys_global - Manages BIG-IP global settings.
- bigip_timer_policy - Manages timer policies on a BIG-IP.
- bigip_traffic_selector - Manages IPSec Traffic Selectors on a BIG-IP.
- bigip_trunk - Manages trunks on a BIG-IP.
- bigip_tunnel - Manages tunnels on a BIG-IP.
- bigip_ucs - Manages upload, installation, and removal of UCS files.
- bigip_ucs_fetch - Fetches a UCS file from remote nodes.
- bigip_user - Manages user accounts and user attributes on a BIG-IP.
- bigip_vcmp_guest - Manages vCMP guests on a BIG-IP.
- bigip_virtual_address - Manages LTM virtual addresses on a BIG-IP.
- bigip_virtual_server - Manages LTM virtual servers on a BIG-IP.
- bigip_vlan - Manages VLANs on a BIG-IP.
- bigip_wait - Manages the wait time for a BIG-IP condition before continuing.
- bigiq_application_fasthttp - Manages BIG-IQ FastHTTP applications.
- bigiq_application_fastl4_tcp - Manages BIG-IQ FastL4 TCP applications.
- bigiq_application_fastl4_udp - Manages BIG-IQ FastL4 UDP applications.
- bigiq_application_http - Manages BIG-IQ HTTP applications.
- bigiq_application_https_offload - Manages BIG-IQ HTTPS offload applications.
- bigiq_application_https_waf - Manages BIG-IQ HTTPS WAF applications.
- bigiq_device_discovery - Manages BIG-IP devices through BIG-IQ.
- bigiq_device_info - Collects information from F5 BIG-IQ devices.
- bigiq_regkey_license - Manages licenses in a BIG-IQ registration key pool.
- bigiq_regkey_license_assignment - Manages regkey license assignment on BIG-IPs from a BIG-IQ.
- bigiq_regkey_pool - Manages registration key pools on BIG-IQ.
- bigiq_utility_license - Manages utility licenses on a BIG-IQ.
- bigiq_utility_license_assignment - Manages utility license assignment on BIG-IPs from a BIG-IQ.
|