2019.2

Release Notes

On this page:

2019.2.3 Maintenance Release

2019.2.3 Maintenance Release [2019-11-05]

Changelog Overview

  • 22 Improvements
  • 60 Bug Fixes
  • 2 Security Fixes
  • 10 Chores
  • 1 Deprecations
  • 85 Total Tickets

Improvements

  • adapter-nso:6.22.0-2019.2.13 [10-30-2019] - Improved NSO adapter logging and exception handling for permission denied cases.
  • adapter-nso:6.22.0-2019.2.12 [10-29-2019] - The "runAction” method has been optimized to avoid triggering NSO failures.
  • app-configuration_manager:3.22.20-2019.2.7 [09-26-2019] - Added 'ID' as an outbound parameter for successful device backups.
  • app-configuration_manager:3.22.20-2019.2.6 [09-26-2019] - Improved the updateDeviceGroups API description and duplicate name checking.
  • app-policy_manager:3.0.29-2019.2.37 [10-14-2019] - Added support for TCP control flag options in service models.
  • app-policy_manager:3.0.29-2019.2.36 [10-15-2019] - Updated the Admin page to support multiple import templates.
  • app-policy_manager:3.0.29-2019.2.35 [10-11-2019] - Added support for IP fragment options in the service model.
  • app-policy_manager:3.0.29-2019.2.34 [10-11-2019] - Added support for ICMP and ICMPv6 type codes on services.
  • app-policy_manager:3.0.29-2019.2.33 [10-09-2019] - Moved code for service record structure into a helper file.
  • app-policy_manager:3.0.29-2019.2.32 [10-16-2019] - Modified device push process to move all device specific handling to the integration layer.
  • app-policy_manager:3.0.29-2019.2.31 [10-10-2019] - Added the ability to search additional fields other than name.
  • app-policy_manager:3.0.29-2019.2.30 [10-07-2019] - Added a developer script to import templates into Template Builder.
  • app-policy_manager:3.0.29-2019.2.28 [10-06-2019] - Added cancel button to undo changes on Service Details view.
  • app-policy_manager:3.0.29-2019.2.26 [10-02-2019] - Added source ports to the service data model. Support also added for asynchronous module initialization.
  • app-policy_manager:3.0.29-2019.2.25 [09-30-2019] - Import process will now accept multiple templates for targets and policies to support different IP and IPv6 commands. Moved all device-specific logic into a device-specific mapper script.
  • app-policy_manager:3.0.29-2019.2.24 [10-06-2019] - Improved error handling for a failed dryrun.
  • app-policy_manager:3.0.29-2019.2.23 [09-25-2019] - Implemented a TextFSM template to import Cisco IOS IPv6 target interfaces.
  • app-policy_manager:3.0.29-2019.2.22 [09-25-2019] - Implemented TextFSM template to import Cisco IOS IPv6 ACLs.
  • app-policy_manager:3.0.29-2019.2.21 [10-01-2019] - Added the ability to validate IPv6 network addresses.
  • app-policy_manager:3.0.29-2019.2.20 [10-06-2019] - Added the ability to unlink multiple policies and targets.
  • app-policy_manager:3.0.29-2019.2.19 [09-25-2019] - Added pagination to networks and service mini-pickers in rules edit modal.
  • automation-gateway:1.67.2-2019.2.9 [10-16-2019] - Adding UI decoration for feedback on scripts AG.

Bug Fixes

  • adapter-ansible_manager:2.3.0-2019.2.9 [11-07-2019] - Added a description property for each task in the pronghorn.json file.
  • adapter-ansible_manager:2.3.0-2019.2.8 [11-07-2019] - Resolved visibility issue for user defined and certified roles, modules and playbooks.
  • adapter-ansible_manager:2.3.0-2019.2.7 [10-28-2019] - Adapter-anible_manager was overriding the input schema translation for the createDevice method. This is a backport for the ticket PH-43377.
  • adapter-ansible_manager:2.3.0-2019.2.7 [10-21-2019] - Adapter-Ansible_Manager now handles payload sizes greater than 5 MB, returned by the Automation Gateway (previously ansible_manager) as a response to the getConfig method invoked by Configuration Manager.
  • adapter-ansible_manager:2.3.0-2019.2.6 [10-11-2019] - Resolved issue with large module payloads. Error message provided if unable to run a command on a device.
  • adapter-azure_aaa:1.0.4-2019.2.2 [10-19-2019] - Added the Azure AAA adapter login page (sample sso.html file) to repository.
  • adapter-nso:6.22.0-2019.2.11 [10-24-2019] - Revised logging message for when a specific device is not found on multiple adapters. In a 'device not found' scenario, a different message will be reported.
  • adapter-nso:6.22.0-2019.2.10 [10-24-2019] - Added new feature: unecrypted TCP connection to NSO server.
  • adapter-nso:6.22.0-2019.2.9 [09-26-2019] - Added requirement to pass at least one device into the SyncFromDevices task.
  • app-automation_catalog:2.1.0-2019.2.5 [10-23-2019] - Replaced migration script with an automatic live update check.
  • app-automation_catalog:2.1.0-2019.2.4 [09-30-2019] - Disabled the 'manually run' option when no workflow is assigned.
  • app-automation_catalog:2.1.0-2019.2.3 [09-26-2019] - Improved exporting of automations.
  • app-automation_catalog:2.1.0-2019.2.2 [09-25-2019] - Data-binding now available when manually running automations.
  • app-automation_catalog:2.1.0-2019.2.1 [09-24-2019] - RunAutomation will now infer the assigned workflow instead of requiring a manual entry.
  • app-configuration_manager:3.22.20-2019.2.18 [11-04-2019] - Improved capability to edit device groups. Changed Name and Description to field values.
  • app-configuration_manager:3.22.20-2019.2.17 [11-06-2019] - Resolved conflict in jQWidgetry to fix issue with PHDialogs causing Navbar and Sidebar to crash.
  • app-configuration_manager:3.22.20-2019.2.16 [10-31-2019] - Arista OS Type changed from 'arista01' to 'arista-eos' in Golden Configuration.
  • app-configuration_manager:3.22.20-2019.2.15 [10-23-2019] - Fixed Check-Sync, Sync-From and Sync-To operations for devices.
  • app-configuration_manager:3.22.20-2019.2.14 [10-23-2019] - Fixed the 'nodePath' parameter to be compliant with the path shown in Golden Config.
  • app-configuration_manager:3.22.20-2019.2.9 [10-07-2019] - Improved error logging for methods.
  • app-configuration_manager:3.22.20-2019.2.5 [09-26-2019] - The runComplianceForDevice task correctly generates a compliance report that contains device data.
  • app-form_builder:3.16.13-2019.2.1 [10-01-2019] - Toast error message displays when unauthorized user attempts to delete a Form Builder entry.
  • app-golden_config:5.16.10-2019.2.6 [10-29-2019] - Fixed display of NED type name inside tree node; lengthy name will now fit.
  • app-golden_config:5.16.10-2019.2.5 [10-28-2019] - Fixed date display problem due to unsupported timezone format. Date strings are now interpreted and converted to appropriate format using a time zone specifier.
  • app-golden_config:5.16.10-2019.2.4 [09-26-2019] - Fixed issue with deletion of keys in remediation workflow for golden_config.
  • app-json_forms:1.11.0-2019.2.10 [09-25-2019] - Improved error handling when searching for an individual form.
  • app-mop:5.15.2-2019.2.2 [10-09-2019] - Mop does not allow creating a template with illegal name.
  • app-mop:5.15.2-2019.2.1 [10-08-2019] - Analytic template device search button is vertically centered.
  • app-policy_manager:3.0.29-2019.2.29 [10-07-2019] - Fixed ACL templates to allow commas in addresses with wildcard bits modifiers.
  • app-service_management:2.20.1-2019.2.1 [10-09-2019] - Added the ability to handle paging to the grid for service models and instances.
  • app-task_worker:3.0.4-2019.2.5 [11-07-2019] - Fix a memory leak in task worker.
  • app-task_worker:3.0.4-2019.2.4 [10-18-2019] - Restored ability to add/edit properties in TaskWorker. Moved taskWorkerProps from pronghornProps to service_config.
  • app-task_worker:3.0.4-2019.2.3 [10-06-2019] - Restored task data in metrics by updating config variable to use package.json for app id and version info.
  • app-workflow_builder:4.5.3-2019.2.7 [10-08-2019] - Workflow Builder does not allow saving workflows with illegal names.
  • app-workflow_builder:4.5.3-2019.2.6 [10-05-2019] - Improved error handling when trying to update an invalid workflow.
  • app-workflow_builder:4.5.3-2019.2.5 [10-02-2019] - Fixed redirection on session expiration when starting a job from inside a workflow.
  • app-workflow_engine:5.3.1-2019.2.9 [11-06-2019] - Fixed issue with workflows hanging in certain scenarios.
  • app-workflow_engine:5.3.1-2019.2.8 [10-09-2019] - Resolved multiple iterations of tasks outside of loop. This fix prevents reverting to a task that was created due to empty iterations on incomplete tasks.
  • app-workflow_engine:5.3.1-2019.2.7 [10-01-2019] - Fixed error causing Auto-Work Tasks label to no longer appear. Modified width of the html span element.
  • automation-gateway:1.67.2-2019.2.8 [10-04-2019] - Reverted update in Rodeo UI to a previous stable version.
  • pronghorn-core:10.8.18-2019.2.29 [11-08-2019] - Fixed issue where an offline adapter prevented the 'running' event from being broadcast.
  • pronghorn-core:10.8.18-2019.2.28 [10-31-2019] - Added corral_id to each process handle to prevent impact to other systems when one system crashes/stops.
  • pronghorn-core:10.8.18-2019.2.27 [10-31-2019] - Open callbacks are now fulfilled as soon as a service stops (restarts).
  • pronghorn-core:10.8.18-2019.2.26 [10-25-2019] - Removed npm install step from new service installation on startup.
  • pronghorn-core:10.8.18-2019.2.25 [10-24-2019] - Service properties screen will now display errors in a multi-line box.
  • pronghorn-core:10.8.18-2019.2.24 [10-24-2019] - JSON export object is consistent when external tables are used. All objects in a form/table use the field name/key.
  • pronghorn-core:10.8.18-2019.2.23 [10-22-2019] - Improved Redis memory usage on startup.
  • pronghorn-core:10.8.18-2019.2.22 [10-18-2019] - New services will install on startup without need for a migration script.
  • pronghorn-core:10.8.18-2019.2.21 [10-18-2019] - Correct role appears in edit form after clicking the item in the left navigation bar on the Settings->Authorization page.
  • pronghorn-core:10.8.18-2019.2.19 [10-14-2019] - Core migration script now migrates custom services.
  • pronghorn-core:10.8.18-2019.2.18 [10-04-2019] - Resolved inconsistent key identity in table. Added gray font style for disabled input.
  • pronghorn-core:10.8.18-2019.2.17 [10-01-2019] - Fixed an issue with connection timeout on start-up when multiple services (60+) are configured.
  • pronghorn-core:10.8.18-2019.2.16 [10-01-2019] - Updated Access-Control-Allow-Methods header (for CORS) in the web server to support API calls with HTTP verbs GET, HEAD, POST, PUT, DELETE, CONNECT, OPTIONS, TRACE, and PATCH.
  • pronghorn-core:10.8.18-2019.2.15 [09-26-2019] - Resolved display issue; lengthy services names will not wrap.
  • pronghorn-core:10.8.18-2019.2.14 [09-26-2019] - Dash sign removed from service config when no service is selected.
  • pronghorn-core:10.8.18-2019.2.13 [10-09-2019] - Language unification added for error messages on all IP input fields. Added ip-address validation.
  • pronghorn-core:10.8.18-2019.2.12 [09-26-2019] - Event subscriptions in custom apps are no longer persistent.
  • pronghorn-core:10.8.18-2019.2.11 [09-25-2019] - IAP no longer crashes upon service removal.
  • pronghorn-core:10.8.18-2019.2.10 [09-24-2019] - External and inherited user group are visible during edit mode but are not editable.
  • pronghorn-core:10.8.18-2019.2.9 [10-09-2019] - Redesigned message banner to be consistent across Profiles page.

Security Fixes

  • app-policy_manager:3.0.29-2019.2.18 [09-24-2019] - Fixed security vulnerability in react-scripts and nyc.
  • pronghorn-core:10.8.18-2019.2.20 [10-24-2019] - Updated swagger-ui-dist package to stable version 3.22.0 and downgraded swagger to V2.0.

Chores

  • adapter-azure_aaa:1.0.4-2019.2.1 [10-11-2019] - Updated the propertiesSchema.json definitions for each property.
  • adapter-nso:6.22.0-2019.2.8 [09-26-2019] - Updated repository and homepage url.
  • app-configuration_manager:3.22.20-2019.2.13 [10-18-2019] - Disabled tags creation for maintenance builds.
  • app-configuration_manager:3.22.20-2019.2.12 [10-18-2019] - Improved version handling for automated maintenance builds.
  • app-configuration_manager:3.22.20-2019.2.11 [10-14-2019] - Added git tag prefix to avoid tag conflict in maintenance builds.
  • app-configuration_manager:3.22.20-2019.2.8 [10-07-2019] - Fixed file paths in the maintenance script to support better directory search.
  • app-form_builder:3.16.13-2019.2.2 [10-30-2019] - Updated pronghorn.json with additional documentation (summaries and descriptions) for the manual tasks ShowFormByName, ShowFormPreserveData, and ProviderForm.
  • app-mop:5.15.2-2019.2.3 [10-11-2019] - Added REST API tools and tests.
  • app-service_management:2.20.1-2019.2.2 [10-29-2019] - Updated the "testInstances" method within the app-service_management pronghorn.json file. Incorporated schema changes and more descriptive summaries and descriptions.
  • app-task_worker:3.0.4-2019.2.2 [10-05-2019] - Fixed references to outdated repositories and updated required node version.

Deprecations

  • app-configuration_manager:3.22.20-2019.2.10 [10-14-2019] - Deprecated the getDeviceConfigFormat API.

2019.2.3 Release Versions

Automation Platform Versions

component version
\@itential/adapter-ansible_manager 2.3.0-2019.2.9
\@itential/adapter-azure_aaa 1.0.4-2019.2.2
\@itential/adapter-email 3.1.4-2019.2.0
\@itential/adapter-ldap 2.12.2-2019.2.1
\@itential/adapter-local_aaa 3.0.1-2019.2.0
\@itential/adapter-mongo 2.8.10-2019.2.2
\@itential/adapter-nso 6.22.0-2019.2.13
\@itential/adapter-policy_engine 1.0.4-2019.2.1
\@itential/adapter-prospector 1.6.11-2019.2.0
\@itential/adapter-radius 2.0.2-2019.2.0
\@itential/adapter-redis 2.0.6-2019.2.0
\@itential/app-array 1.3.5-2019.2.0
\@itential/app-automation_catalog 2.1.0-2019.2.5
\@itential/app-configuration_manager 3.22.20-2019.2.18
\@itential/app-form_builder 3.16.13-2019.2.2
\@itential/app-golden_config 5.16.10-2019.2.6
\@itential/app-golden_services 1.3.1-2019.2.3
\@itential/app-json 1.1.4-2019.2.0
\@itential/app-json_forms 1.11.0-2019.2.10
\@itential/app-mop 5.15.2-2019.2.3
\@itential/app-nso_manager 2.17.0-2019.2.4
\@itential/app-number 2.0.2-2019.2.0
\@itential/app-object 1.2.4-2019.2.1
\@itential/app-policy_manager 3.0.29-2019.2.37
\@itential/app-service_catalog 3.9.3-2019.2.0
\@itential/app-service_management 2.20.1-2019.2.2
\@itential/app-smart_template 1.7.4-2019.2.2
\@itential/app-string 1.1.4-2019.2.0
\@itential/app-task_worker 3.0.4-2019.2.5
\@itential/app-template_builder 1.5.8-2019.2.6
\@itential/app-tools 1.2.2-2019.2.0
\@itential/app-workflow_builder 4.5.3-2019.2.7
\@itential/app-workflow_engine 5.3.1-2019.2.9
\@itential/pronghorn-core 10.8.18-2019.2.29
\@itential/search 1.1.1-2019.2.2
\@itential/tags 2.0.4-2019.2.0
\@itential/itential-utils 2.2.12

Automation Gateway Versions

component version
ansible_manager 1.67.2-2019.2.9

NSO Manager Versions

component version
itential_tools 1.23.9-2019.2.0
prospector 1.10.1-2019.2.0

Engine Versions

component version
policy-engine 1.0.6-2019.2.1

Dependencies

Automation Platform Server

yum package version
nodejs 10.16.0
erlang 21.3.8.6
rabbitmq 3.7.15
redis 5.0.5
gcc-c++ *
make *

Template Builder

yum package version
python 2.7.5
pip package version
pip *
textfsm 0.4.1
Jinja2 2.10.1

Mongo Server

yum package version
mongodb 3.6

Redis Server

yum package version
redis 5.0.5
gcc-c++ *
make *

Automation Gateway

yum package version
python36u *
python36u-libs *
python36u-devel *
python36u-pip *
gcc-c++ *
make *
openssl *
python-libs *
python-devel *
python-pip *
yaml-cpp *
yaml-cpp-devel *
libyaml *
libyaml-devel *
epel-release *
haproxy *
pip package version
ansible 2.7.10
psutil 1.2.0
pycrypto *
paramiko *
ncclient *
lxml *
nitrosdk-python *
jxmlease *

NOTE: The pip packages above are to support ansible and various ansible modules that require them. These packages should be installed using the same PIP that Ansible uses (either pip2 or pip3), depending on your environment. Additional pip packages might be needed depending on ansible module usage.

Prospector

yum package version
java 1.7.x or 1.8.x

NSO/Itential Tools

yum package version
java 1.7.x or 1.8.x
ant *

IAP Compatibility

Device Configuration

Device Configuration compatibility describes which devices are expected to work with the basic features of the Configuration Manager application across various southbound systems.

Ansible: 

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO:

Refer to the NSO Versions and NED Versions tables below for a list of tested devices.

Device Compliance

Device Compliance compatibility describes which devices are expected to work with Golden Configurations.

Ansible: 

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO (Configuration Manager app): 

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO (Golden Config app): 

* a10-acos
* adtran-aos
* alu-sr
* arista-dcs
* cisco-ios
* cisco-iosxr
* cisco-nx
* cisco-staros
* f5-bigip
* huawei-vrp
* juniper-junos

Device Maintenance

Device Maintenance compatibility describes which devices Itential can perform maintenance activities on (e.g., reboots and firmware upgrades).

Ansible: 

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Juniper Junos

NSO: 

* cisco-ios
* cisco-iosxr
* juniper-junos

Device Health Checks

Device Health Checks compatibility describes which devices Itential can execute read-only show commands to use the method broker and Command Templates application.

Ansible: 

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO: 

* a10-acos
* alu-sr
* arista-dcs
* cienacli-acos
* cisco-aireos
* cisco-asa
* cisco-gss
* cisco-ios
* cisco-iosxr
* cisco-nx
* cisco-qps
* cisco-staros
* ericsson-sgsnmme
* f5-bigip
* huawei-vrp
* juniper-junos

Note: Some of the devices in the health checks category are tested against netsim devices.

Forms

Ansible:

IAP can render most ansible networking modules as forms. Support for specific modules may vary. If you encounter issues with any particular modules, reach out to the Itential Customer Success Team for assistance.

NSO:

IAP can render most service models advertised by NSO as forms. Support for specific yang features may vary. If you encounter issues with your service models, reach out to the Itential Customer Success Team for assistance.

Service Provisioning

NSO:

IAP can provision most service models advertised by NSO. Support for specific yang features may vary. If you encounter issues with your service models, reach out to the Itential Customer Success Team for assistance.

Devices/Services Compatibility

The Itential Automation Platform is tested against the following component versions.

Ansible Versions:

* 2.7.10

Ansible Modules:

* eos_facts
* eos_command
* eos_config
* ios_facts
* ios_command
* ios_config
* iosxr_facts
* iosxr_command
* iosxr_config
* nx_facts
* nx_command
* nx_config
* junos_facts
* junos_command
* junos_config

NSO Versions:

* 5.2.0.3
* 4.7.4.1
* 4.6.3

NSO NED Versions:

ned 5.2.0.3 4.7.4.1 4.6.3
a10-acos 3.12 3.12 3.11
accedian-nid 4.0.7 4.0.7 4.0.6
adtran-aos 4.0.5 4.0.5 4.0.3
alu-sr 7.20 7.20 n/a
arista-dcs 5.3 5.3 5.2.7
arris-cmts 1.0.4 1.0.4 1.0.2
avi-vantage 1.4.8 1.4.8 1.4.6
brocade-nos 2.0.1 2.0.1 2.0
checkpoint-gaiaos_rest n/a 1.6.14 1.5.4
ciena-acos 6.1.4 6.1.4 6.1.2
cisco-aireos 3.3.16 3.3.16 3.3.11
cisco-asa 6.6.5 6.6.5 6.5.6
cisco-esa 1.3.9 1.3.9 1.3.8
cisco-fmc 1.2.5 1.2.5 1.2.3
cisco-gss 2.1.1 2.1.1 2.1
cisco-ios 6.23 6.23 6.14
cisco-iosxr 7.12 7.12 7.7.9
cisco-ncs2k n/a n/a 1.0.0
cisco-nx 5.9.3 5.9.3 5.7.8
cisco-qps 5.1.2 5.1.2 5.1.1
cisco-sma 1.3.4 1.3.4 1.3.3
cisco-staros 5.11 5.11 5.9.1
cisco-waas 2.0.2 2.0.2 2.0.1
cisco-wsa 3.8.2 3.8.2 3.8.1
citrix-netscaler 4.0.3 4.0.3 4.0.1
ericsson-sgsnmme 1.0.7 1.0.7 1.0.5
f5-bigip 3.6.9 3.6.9 3.6
fortinet-fortios 5.3.12 5.3.12 n/a
huawei-usn 1.2.1 1.2.1 1.2
huawei-vrp 5.12 5.12 5.5
juniper-junos 4.4 4.4 4.2.2
paloalto-panos_cli 4.2.7 4.2.7 4.0.5
radware-alteonos 2.2.4 2.2.4 2.1.3
unix-bind 2.0.16 2.0.16 2.0.13

VTS Versions:

* 2.6.2

VTS NED Versions:

ned 2.6.2
cisco-iosxr 6.6
cisco-ncs5500 1.0
cisco-nx 5.1.4

Virtual Devices:

* A10 vThunder 410-P9
* Arista EOS-4.21.0F
* Cisco ASAv 9.9.2.1
* Cisco CSR 16.9.1, 16.6.4, 16.3.7
* Cisco NX
* Cisco XR6.3.1
* F5 BIGIP 14.0.0.1-0.0.2, 13.1.0.7, 13.1.0
* Juniper VMX 18.1R1
* Juniper VSRX 18.3R1 15.1X49-D150.2, 15.1X49-D150, 15.X49-D123

IAP Browser Compatibility

This maintenance release was tested against the following browser versions:

* Firefox 69.0
* Chrome 76.3809.87
* Edge 44.18362.1.0
* IE11 11.678.17763