2019.3.9 Maintenance Release [2020-10-06]

Changelog Overview

• 3 New Features
• 6 Improvements
• 37 Bug Fixes
• 3 Security Fixes
• 3 Chores
• 52 Total Tickets

New Features

• app-workflow_engine:6.7.10-2019.3.87 [10-05-2020] - Added support for user error warnings during workflow validation.
• itential-utils:2.4.0 [09-29-2020] - Added functionality to generate a pronghorn.json file from multiple pronghorn files.
• itential-utils:2.3.0 [09-25-2020] - Added RegExp and helper validation method for enforcing Itential naming conventions for method parameters, method return values, and job variable names.

Improvements

• app-workflow_builder:5.5.9-2019.3.40 [10-05-2020] - Added a warning modal to alert users when input validation error occurs.
• app-workflow_engine:6.7.10-2019.3.86 [10-01-2020] - Updated functionality to use itential-utils to generate pronghorn.json API documentation.
• app-workflow_engine:6.7.10-2019.3.85 [10-06-2020] - Removed call to migrateWorkflows.js when using npm run migrate.
• app-workflow_engine:6.7.10-2019.3.83 [09-27-2020] - Refactored DB indexing scripts to call the EnsureIndexes functionality from the dependent itential-utils module and reduce code duplication in app.
• pronghorn-core:10.12.21-2019.3.83 [10-02-2020] - Updated audit-trail module.
• pronghorn-core:10.12.21-2019.3.79 [09-28-2020] - Added support for unique sessions in Authentication; logout functionality will remove an old session when a new session is established.

Bug Fixes

• adapter-nso:6.27.4-2019.3.31 [10-09-2020] - Fixed live status support for Ciena-ACOS NED Command Template.
• adapter-redis:2.0.7-2019.3.1 [09-28-2020] - Fixed a crash that occurred when calling the fetchAll function.
• app-automation_studio:1.0.0-2019.3.20 [09-23-2020] - Added the ability to handle webpack errors when there are lazy loading resources with expired tokens.
• app-automation_studio:1.0.0-2019.3.20 [09-23-2020] - Fixed lint errors that were blocking the release pipeline.
• app-configuration_manager:3.28.19-2019.3.52 [10-05-2020] - Added banner support for Cisco IOS devices.
• app-configuration_manager:3.28.19-2019.3.51 [09-14-2020] - Added the ability to handle webpack errors when lazy loading resources with expired tokens.
• app-configuration_manager:3.28.19-2019.3.50 [08-07-2020] - Added a validation script to validate database collections relating to Configuration Manager.
• app-form_builder:4.2.9-2019.3.16 [09-01-2020] - Users now have the ability to expand/collapse the accordion list in the left panel.
• app-json_forms:1.13.0-2019.3.29 [09-25-2020] - Resolved lint errors.
• app-json_forms:1.13.0-2019.3.29 [09-01-2020] - Added support for width, height and maxHeight in the Rodeo PHJsonForm component.
• app-json_forms:1.13.0-2019.3.29 [08-28-2020] - Made import available for duplicate forms.
• app-mop:6.3.6-2019.3.26 [09-29-2020] - Sandboxed evaluation of customer supplied regular expressions to mitigate ReDoS vulnerability.
• app-mop:6.3.6-2019.3.25 [09-25-2020] - Fixed bug in rules handling. App now prompts user to provide second value for #comparison rule.
• app-mop:6.3.6-2019.3.23 [09-01-2020] - The accordion list on the left panel is now collapsible.
• app-mop:6.3.6-2019.3.22 [09-01-2020] - Corrected button labels from "form" to "template."
• app-nso_manager:2.18.0-2019.3.9 [09-24-2020] - Added feedback to Commit Queue Manager and NED Validator to indicate when NSO is not connected.
• app-nso_manager:2.18.0-2019.3.8 [09-03-2020] - Fixed typo in pronghorn.json.
• app-workflow_builder:5.5.9-2019.3.39 [10-02-2020] - Improved visuals and accessibility when navigating sidebars.
• app-workflow_engine:6.7.10-2019.3.88 [10-07-2020] - Ensured that the null variables input in the makeData task does not cause an uncaught exception.
• app-workflow_engine:6.7.10-2019.3.86 [10-01-2020] - Removed unnecessary files from release builds.
• app-workflow_engine:6.7.10-2019.3.84 [10-01-2020] - A Scheduled Task will now redirect to the workflow view when clicking the eyeball icon.
• app-workflow_engine:6.7.10-2019.3.82 [09-23-2020] - The WorkFlowEngine.admin role is no longer required to see the Visualize tab on the Job Details page.
• app-workflow_engine:6.7.10-2019.3.81 [09-23-2020] - Default tab view in Active Jobs and Jobs Manager is now set to "All Active" when FireFox is manually refreshed.
• app-workflow_engine:6.7.10-2019.3.80 [09-22-2020] - Resolved UI issue with pagination. Task Manager shows up to 1000 hanging tasks at a time.
• app-workflow_engine:6.7.10-2019.3.79 [09-17-2020] - Improved error handling in validate to prevent crashes.
• app-workflow_engine:6.7.10-2019.3.78 [09-16-2020] - Updated cellRenderer operations. Tasks in JobManager and JobDetails now show date/time in a proper locale format.
• app-workflow_engine:6.7.10-2019.3.77 [09-11-2020] - Modified the migration script to handle all task references affected by the arrayToString to objectToString migration.
• app-workflow_engine:6.7.10-2019.3.76 [09-10-2020] - Added a check to validate static input variables for application tasks; also added a check to ensure validation does not occur for task definitions with null incoming variables.
• app-workflow_engine:6.7.10-2019.3.75 [09-04-2020] - Prevented _id and initiator from showing in the child job task modal as being required variables to start the job.
• app-workflow_engine:6.7.10-2019.3.74 [09-04-2020] - Updated variable information for the ViewData task.
• pronghorn-core:10.12.21-2019.3.85 [10-06-2020] - Clone profile options now display after user clicks to clone a profile.
• pronghorn-core:10.12.21-2019.3.84 [09-30-2020] - Added support for composite keys in form tables.
• pronghorn-core:10.12.21-2019.3.81 [10-05-2020] - Reconfigured the getAllGroups endpoint to improve Active Tasks view responsiveness. Groups/list requests will no longer force a remote AAA re-sync.
• pronghorn-core:10.12.21-2019.3.80 [09-29-2020] - Resolved schema inconsistency in broker[AAA].
• pronghorn-core:10.12.21-2019.3.78 [09-27-2020] - Added functionality to remove UI components and prevent React workflow tasks from breaking when application is restarted.
• pronghorn-core:10.12.21-2019.3.75 [09-07-2020] - ProngPromise is now handling errors inside 'then' block.
• pronghorn-core:10.12.21-2019.3.74 [09-06-2020] - Automated the ability to add/remove pronghorn_admin group for a newly created or deleted authentication adapter.

Security Fixes

• app-golden_config:5.18.0-2019.3.5 [09-25-2020] - Fixed XSS vulnerabilities.
• app-mop:6.3.6-2019.3.24 [08-31-2020] - Mitigated client-side XSS vulnerabilities.
• pronghorn-core:10.12.21-2019.3.76 [09-07-2020] - Updated swagger-ui package to v3.30.2.

Chores

• app-workflow_engine:6.7.10-2019.3.86 [10-01-2020] - Fixed lint errors.
• pronghorn-core:10.12.21-2019.3.82 [09-30-2020] - Updated the service and network dependencies to resolve a memory leak that was occurring for all publishBroadcast calls.
• pronghorn-core:10.12.21-2019.3.77 [09-09-2020] - Updated logger dependency to allow syslog message larger than 65kB.

2019.3.9 Release Versions

Automation Platform Versions

component	version
@itential/adapter-automation_gateway	2.12.0-2019.3.9
@itential/adapter-azure_aaa	1.0.8-2019.3.1
@itential/adapter-email	3.1.5-2019.3.1
@itential/adapter-ldap	2.12.6-2019.3.1
@itential/adapter-local_aaa	3.0.3-2019.3.0
@itential/adapter-mongo	2.9.0-2019.3.1
@itential/adapter-nso	6.27.4-2019.3.31
@itential/adapter-policy_engine	1.0.7-2019.3.1
@itential/adapter-prospector	1.6.11-2019.3.4
@itential/adapter-radius	2.0.3-2019.3.0
@itential/adapter-redis	2.0.7-2019.3.1
@itential/app-automation_catalog	2.4.2-2019.3.18
@itential/app-automation_studio	1.0.0-2019.3.20
@itential/app-configuration_manager	3.28.19-2019.3.52
@itential/app-form_builder	4.2.9-2019.3.16
@itential/app-golden_config	5.18.0-2019.3.5
@itential/app-golden_services	1.3.6-2019.3.2
@itential/app-json_forms	1.13.0-2019.3.29
@itential/app-mop	6.3.6-2019.3.26
@itential/app-nso_manager	2.18.0-2019.3.9
@itential/app-service_catalog	3.9.8-2019.3.4
@itential/app-service_management	2.23.3-2019.3.3
@itential/app-smart_template	1.8.0-2019.3.9
@itential/app-task_worker	3.0.11-2019.3.5
@itential/app-template_builder	2.3.6-2019.3.6
@itential/app-workflow_builder	5.5.9-2019.3.40
@itential/app-workflow_engine	6.7.10-2019.3.88
@itential/pronghorn-core	10.12.21-2019.3.85
@itential/search	1.1.3-2019.3.0
@itential/tags	2.2.3-2019.3.5
@itential/itential-utils	2.4.0

Automation Gateway Versions

component	version
automation_gateway	2.36.3-2019.3.32

NSO Manager Versions

component	version
itential-tools	1.23.11.2019.3.6
prospector	1.10.4-2019.3.0

Engine Versions

component	version
policy-engine	1.9.2-2019.3.0

Dependencies

Automation Platform Server

package	supported	recommended
nodejs	10.x	10.22.1
npm	6.x	6.14.8

The gcc-c++ and make packages should be installed from your OS distribution.

Template Builder

package	supported	recommended
python	2.x or 3.x	3.8.6

pip	supported	recommended
pip	any version	20.2.3
textfsm	1.x	1.1.0
Jinja2	2.x	2.11.2

Mongo Server

package	supported	recommended
mongodb	3.6.x	3.6.20

RabbitMQ Server

package	supported	recommended
rabbitmq	3.8.x	3.8.9
erlang	21.3+ or 22.x	22.3.0

Redis Server

package	supported	recommended
redis	5.x	5.0.9

The gcc-c++ and make packages should be installed from your OS distribution.

Automation Gateway

package	supported	recommended
python	3.6	3.6.12
openssl	1.x	1.1.1g
haproxy	2.x	2.1.8

The gcc-c++ and make packages should be installed from your OS distribution.

The following development packages are required to install automation gateway: libffi-dev, openssl-dev, python-dev, sqlite-dev.

pip package	supported	recommended
pip	any version	20.2.3
ansible	2.7, 2.8 or 2.9	2.9.13

One or more of the following packages may be required by the specific ansible modules you're using: psutil, pycrypto, paramiko, ncclient, lxml, nitrosdk-python, jxmlease.

Check the ansible documentation for the roles you're planning to use for additional package requirements.

Prospector

package	supported	recommended
java	1.7 or 1.8	1.8.252.09

NSO/Itential Tools

package	supported	recommended
java	1.7 or 1.8	1.8.252.09

The ant package should be installed from your OS distribution.

IAP Compatibility

Device Configuration

Device Configuration compatibility describes which devices are expected to work with the basic features of the Configuration Manager application across various southbound systems.

Ansible:

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO:

Refer to the NSO Versions and NED Versions tables below for a list of tested devices.

Device Compliance

Device Compliance compatibility describes which devices are expected to work with Golden Configurations.

Ansible:

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO (Configuration Manager app):

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO (Golden Config app):

* a10-acos
* adtran-aos
* alu-sr
* arista-dcs
* cisco-ios
* cisco-iosxr
* cisco-nx
* cisco-staros
* f5-bigip
* huawei-vrp
* juniper-junos

Device Maintenance

Device Maintenance compatibility describes which devices Itential can perform maintenance activities on (e.g., reboots and firmware upgrades).

Ansible:

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Juniper Junos

NSO:

* cisco-ios
* cisco-iosxr
* juniper-junos

Device Health Checks

Device Health Checks compatibility describes which devices Itential can execute read-only show commands to use the method broker and Command Templates application.

Ansible:

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO:

* a10-acos
* alu-sr
* arista-dcs
* cienacli-acos
* cisco-aireos
* cisco-asa
* cisco-gss
* cisco-ios
* cisco-iosxr
* cisco-nx
* cisco-qps
* cisco-staros
* ericsson-sgsnmme
* f5-bigip
* huawei-vrp
* juniper-junos

Note: Some of the devices in the health checks category are tested against netsim devices.

Forms

Ansible:

IAP can render most ansible networking modules as forms. Support for specific modules may vary. If you encounter issues with any particular modules, reach out to the Itential Product Support Team for assistance.

NSO:

IAP can render most service models advertised by NSO as forms. Support for specific yang features may vary. If you encounter issues with your service models, reach out to the Itential Product Support Team for assistance.

Service Provisioning

NSO:

IAP can provision most service models advertised by NSO. Support for specific yang features may vary. If you encounter issues with your service models, reach out to the Itential Product Support Team for assistance.

Devices/Services Compatibility

The Itential Automation Platform is tested against the following component versions.

Ansible Versions:

* 2.7.18
* 2.8.15
* 2.9.13

Ansible Modules:

* eos_facts
* eos_command
* eos_config
* ios_facts
* ios_command
* ios_config
* iosxr_facts
* iosxr_command
* iosxr_config
* nx_facts
* nx_command
* nx_config
* junos_facts
* junos_command
* junos_config

NSO Versions:

* 5.2.3.6
* 4.7.7.6
* 4.6.5

NSO NED Versions:

ned	4.6.5	4.7.7.6	5.2.3.6
a10-acos	3.15.3	3.17.4	3.17.4 3.17.3
adtran-aos	4.0.5	4.0.5	4.0.5
alu-sr	8.3	8.11	8.11 8.10.2
arista-dcs	5.7	5.16.5	5.16.5 5.16.4
checkpoint-gaiaos_rest	1.3.8	1.9.3	1.9.3 1.9.2
ciena-acos	6.1.5	6.2	6.2 6.1.5
cisco-aireos	3.3.20	3.4.1	3.4.1 3.4
cisco-asa	6.7.7	6.11	6.11 6.10.6
cisco-gss	2.1.1	2.1.1	2.1.1
cisco-ios	6.42.2	6.65	6.65 6.64.4
cisco-iosxr	7.18.2	7.29.9	7.29.9 7.29.8
cisco-nx	5.1.3	5.18.3	5.18.3 5.18.2
cisco-qps	5.1.2	n/a	5.1.3
cisco-staros	5.22.1	5.33	5.33 5.32
ericsson-sgsnmme	1.0.7	1.0.7	1.0.7
f5-bigip	3.7.13	3.12	3.13.5 3.13.4
fortinet-fortios	5.4	5.4.18	5.4.18 5.4.17
huawei-usn	1.2.1	1.2.1	1.2.1
huawei-vrp	6.1	6.12.9	6.12.9 6.12.8
juniper-junos	4.5.17	4.6.7	4.6.7 4.6.6
paloalto-panos_cli	4.3.1	4.7.3	4.7.3 4.7.2
radware-alteonos	2.4	2.4	2.4
unix-bind	2.0.17	2.1.0	2.1.0

VTS Versions:

* 2.6.2

VTS NED Versions:

ned	2.6.2
cisco-iosxr	6.6
cisco-ncs5500	1.0
cisco-nx	5.1.4

Virtual Devices:

* A10 vThunder 4.1.4 GR1
* Arista EOS-4.23.0FX
* Checkpoint R80.30-273.583
* Cisco ASAv 9.13.1.7
* Cisco CSR 17.02.01r
* Cisco NX 9.3.2, 9.3.1
* Cisco StarOS 21.15.29
* Cisco XR6.3.1
* F5 BIGIP 15.1.0.2-0.0.9
* Fortigate 6.4.0
* Juniper VMX 18.4R1
* Juniper VSRX 19.1R2
* PanOS 9.1.2
* Radware 32.6.0.0

IAP Browser Compatibility

* Firefox 80.0.1
* Chrome 85.0.4183.121
* Edge 85.0.564.63
* Internet Explorer 11