2020.1.12 Maintenance Release [2021-05-04]

Changelog Overview

• 30 Bug Fixes
• 7 Security Fixes
• 14 Chores
• 51 Total Tickets

Bug Fixes

• adapter-ldap:2.12.10-2020.1.5 [03-30-2021] - Improved handling of LDAP connectivity errors.
• adapter-nso:6.29.3-2020.1.53 [04-22-2021] - Fixed issue where the incorrect config in loadConfig would crash the platform.
• adapter-nso:6.29.3-2020.1.52 [04-16-2021] - Fixed getConfig and setConfig to allow Junos config remediation.
• adapter-nso:6.29.3-2020.1.51 [04-07-2021] - Fixed undefined errors when parsing error response and parsing Yang models.
• app-automation_catalog:2.6.6-2020.1.26 [04-28-2021] - Creation of an automation with an empty name via the HTTP endpoint is rejected.
• app-configuration_manager:3.43.14-2020.1.56 [04-05-2021] - Corrected the issue with interface IP address validation causing the /undefined display error.
• app-form_builder:4.2.23-2020.1.21 [04-26-2021] - Changed schema for the /forms/export endpoint to improve incoming request content validation.
• app-workflow_builder:5.10.4-2020.1.55 [04-22-2021] - Fixed a bug that caused a login error when closing the workflow settings dialog.
• app-workflow_builder:5.10.4-2020.1.54 [04-21-2021] - Input variables for merge and deepmerge tasks will no longer reset when reference tasks are removed from the canvas.
• app-workflow_builder:5.10.4-2020.1.53 [04-21-2021] - Improved validation check for referenced tasks when editing a workflow.
• app-workflow_builder:5.10.4-2020.1.52 [04-19-2021] - Added text wrapping to task names and descriptions to fix visibility. This will allow long task names in WFB to be easily read by the user.
• app-workflow_engine:7.14.4-2020.1.175 [04-28-2021] - Fixed a bug that caused incorrect filtering of fields in a searched job.
• app-workflow_engine:7.14.4-2020.1.173 [04-22-2021] - Fixed issue where invalid parameters from getJobFromTaskQuery or getAssociatedJobs would crash Workflow Engine.
• app-workflow_engine:7.14.4-2020.1.172 [04-20-2021] - Added a maximum limit to the getJobFromTaskQuery and getAssociatedJobs APIs to remove memory errors.
• app-workflow_engine:7.14.4-2020.1.171 [04-14-2021] - Reduced number of jobs retrieved by handleCrashedTasks to decrease time until task worker is activated upon startup.
• automation-gateway:2.74.12-2020.1.28 [03-31-2021] - Updated the default naming of Automation Gateway scripts for automation platform consumption.
• itential_tools:1.23.18.2020.1.14 [04-16-2021] - Fixed JunosCleaner to correctly parse the input config and allow config remediation. .
• itential_tools:1.23.18.2020.1.13 [04-16-2021] - Added JSON string escaping as required by the JSON RPC standard to support multi-line banners.
• pronghorn-core:10.19.4-2020.1.124 [04-28-2021] - Fixed an issue where a service was not restarted correctly when a dead process was detected.
• pronghorn-core:10.19.4-2020.1.123 [04-26-2021] - Added timeout to guarantee the getStatus API responds when Mongo goes down. Updated session-manager to allow unauthenticated users to access public APIs when Mongo goes down.
• pronghorn-core:10.19.4-2020.1.122 [04-25-2021] - Updated network dependency to fix bug where ConnBlockedError did not exist.
• pronghorn-core:10.19.4-2020.1.121 [04-20-2021] - Increased version of dependent library. This will allow for a faster failure on MongoDB authentication when it silently hangs on startup.
• pronghorn-core:10.19.4-2020.1.120 [04-15-2021] - Removed SSLv2/v3 protocol versions not supported by node binary from express server configuration.
• pronghorn-core:10.19.4-2020.1.119 [04-15-2021] - Improved error message to end-user when IAP service is unavailable.
• pronghorn-core:10.19.4-2020.1.118 [04-15-2021] - Removed unnecessary logging messages when application profiling is off and not active.
• pronghorn-core:10.19.4-2020.1.117 [04-09-2021] - Updated Service module dependency to remove unnecessary debug message.
• pronghorn-core:10.19.4-2020.1.116 [04-09-2021] - Validation added to the authenticate parameters in the AAA broker to remove a NO-SQL injection attack vulnerability.
• pronghorn-core:10.19.4-2020.1.115 [04-08-2021] - Fixed a bug that triggered an incorrect warning in the logs related to the parent jade file when accessing the Help menu.
• pronghorn-core:10.19.4-2020.1.113 [04-06-2021] - Added metrics properties to loggerProps schema for service configs.
• tags:2.2.12-2020.1.5 [04-20-2021] - Improved error handling when adding new tags to a database; messages are written to debug logs instead of error and warning logs.

Security Fixes

• app-configuration_manager:3.43.14-2020.1.57 [04-23-2021] - Fixed Axios security vulnerability.
• app-template_builder:2.4.4-2020.1.8 [05-06-2021] - Added support for secure execution of Jinja2 templates.
• app-workflow_engine:7.14.4-2020.1.174 [04-27-2021] - Improved error message to alert user that $where in various APIs will not work.
• app-workflow_engine:7.14.4-2020.1.170 [04-13-2021] - Removed MongoDB DOS (Denial of Service) vulnerability from various APIs.
• app-workflow_engine:7.14.4-2020.1.169 [04-11-2021] - Updated diff2html dependency to remove security vulnerability.
• app-workflow_engine:7.14.4-2020.1.168 [04-05-2021] - Updated Lodash dependency to remove security vulnerability.
• pronghorn-core:10.19.4-2020.1.114 [04-06-2021] - Updated licensing dependency to remove security vulnerability from Axios.

Chores

• adapter-automation_gateway:4.0.0-2020.1.8 [03-31-2021] - Moved project to master pipeline.
• adapter-ldap:2.12.10-2020.1.6 [04-05-2021] - Moved project to master pipeline.
• adapter-local_aaa:3.0.6-2020.1.5 [04-06-2021] - Moved project to master pipeline.
• adapter-nso:6.29.3-2020.1.50 [04-06-2021] - Moved project to master pipeline.
• adapter-redis:2.0.10-2020.1.3 [04-06-2021] - Moved project to master pipeline.
• app-automation_catalog:2.6.6-2020.1.25 [03-31-2021] - Moved project to master pipeline.
• app-mop:6.3.24-2020.1.22 [03-30-2021] - Moved project to the master pipeline.
• app-nso_manager:2.20.1-2020.1.11 [04-07-2021] - Moved project to master pipeline.
• app-template_builder:2.4.4-2020.1.7 [03-30-2021] - Moved project to the master pipeline.
• app-workflow_builder:5.10.4-2020.1.51 [03-30-2021] - Updated configuration to ignore the ci directory that is generated by the CI system.
• app-workflow_builder:5.10.4-2020.1.50 [03-30-2021] - Moved project to master pipeline.
• itential-utils:2.6.5 [03-30-2021] - Moved project to the master pipeline.
• search:1.1.6-2020.1.3 [04-06-2021] - Moved project to master pipeline.
• tags:2.2.12-2020.1.4 [04-06-2021] - Moved project to master pipeline.

2020.1.12 Release Versions

Automation Platform Versions

component	version
@itential/adapter-automation_gateway	4.0.0-2020.1.8
@itential/adapter-azure_aaa	1.1.2-2020.1.3
@itential/adapter-email	3.1.10-2020.1.7
@itential/adapter-ldap	2.12.10-2020.1.6
@itential/adapter-local_aaa	3.0.6-2020.1.5
@itential/adapter-mongo	2.9.4-2020.1.1
@itential/adapter-nso	6.29.3-2020.1.53
@itential/adapter-policy_engine	1.0.11-2020.1.0
@itential/adapter-prospector	1.6.16-2020.1.3
@itential/adapter-radius	2.0.6-2020.1.3
@itential/adapter-redis	2.0.10-2020.1.3
@itential/app-admin_essentials	1.0.0-2020.1.28
@itential/app-ag_manager	1.1.1-2020.1.16
@itential/app-automation_catalog	2.6.6-2020.1.26
@itential/app-automation_studio	2.0.14-2020.1.21
@itential/app-configuration_manager	3.43.14-2020.1.57
@itential/app-form_builder	4.2.23-2020.1.21
@itential/app-golden_config	5.18.3-2020.1.12
@itential/app-golden_services	1.5.2-2020.1.1
@itential/app-json_forms	1.14.10-2020.1.27
@itential/app-mop	6.3.24-2020.1.22
@itential/app-nso_manager	2.20.1-2020.1.11
@itential/app-policy_manager	3.44.1-2020.1.8
@itential/app-service_catalog	3.10.4-2020.1.11
@itential/app-service_management	2.23.7-2020.1.16
@itential/app-smart_template	1.9.4-2020.1.4
@itential/app-task_worker	3.1.4-2020.1.1
@itential/app-template_builder	2.4.4-2020.1.8
@itential/app-workflow_builder	5.10.4-2020.1.55
@itential/app-workflow_engine	7.14.4-2020.1.175
@itential/pronghorn-core	10.19.4-2020.1.124
@itential/search	1.1.6-2020.1.3
@itential/tags	2.2.12-2020.1.5
@itential/itential-utils	2.6.5

Automation Gateway Versions

component	version
automation_gateway	2.74.12-2020.1.28

NSO Manager Versions

component	version
itential-tools	1.23.18.2020.1.14
prospector	1.10.4-2020.1.1

Engine Versions

component	version
policy-engine	1.10.4-2020.1.0

Dependencies

Automation Platform Server

package	supported	recommended
nodejs	12.x	12.22.1
npm	6.x	6.14.13
python	2.x or 3.x	3.9.4

pip	supported	recommended
pip	any version	20.2.4
textfsm	1.x	1.1.0
Jinja2	2.x	2.11.3

The gcc-c++ and make packages should be installed from your OS distribution.

Mongo Server

package	supported	recommended
mongodb	3.6.x or 4.2.x	4.2.13

RabbitMQ Server

package	supported	recommended
rabbitmq	3.8.x	3.8.14
erlang	21.3+ or 22.x	22.3.1
elixir	1.10.x	1.10.4
dedup	0.5.x	0.5.0

Redis Server

package	supported	recommended
redis	5.x	5.0.12

The gcc-c++ and make packages should be installed from your OS distribution.

Automation Gateway

package	supported	recommended
python	3.6	3.6.13
openssl	1.x	1.1.1k
haproxy	2.x	2.2.13

The gcc-c++ and make packages should be installed from your OS distribution.

The following development packages are required to install automation gateway: libffi-dev, openssl-dev, python-dev, sqlite-dev.

pip package	supported	recommended
pip	any version	20.2.4
ansible	2.7, 2.8 or 2.9	2.9.20
terraform	0.12.x	0.12.30

One or more of the following packages may be required by the specific ansible modules you're using: psutil, pycrypto, paramiko, ncclient, lxml, nitrosdk-python, jxmlease.

Check the ansible documentation for the roles you're planning to use for additional package requirements.

Prospector

package	supported	recommended
java	1.7 or 1.8	1.8.275.01

NSO/Itential Tools

package	supported	recommended
java	1.7 or 1.8	1.8.275.01

The ant package should be installed from your OS distribution.

IAP Compatibility

Device Configuration

Device Configuration compatibility describes which devices are expected to work with the basic features of the Configuration Manager application across various southbound systems.

Ansible:

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO:

Refer to the NSO Versions and NED Versions tables below for a list of tested devices.

Device Compliance

Device Compliance compatibility describes which devices are expected to work with Golden Configurations.

Ansible:

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO (Configuration Manager app):

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO (Golden Config app):

* a10-acos
* adtran-aos
* alu-sr
* arista-dcs
* cisco-ios
* cisco-iosxr
* cisco-nx
* cisco-staros
* f5-bigip
* huawei-vrp
* juniper-junos

Device Maintenance

Device Maintenance compatibility describes which devices Itential can perform maintenance activities on (e.g., reboots and firmware upgrades).

Ansible:

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Juniper Junos

NSO:

* cisco-ios
* cisco-iosxr
* juniper-junos

Device Health Checks

Device Health Checks compatibility describes which devices Itential can execute read-only show commands to use the method broker and Command Templates application.

Ansible:

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO:

* a10-acos
* alu-sr
* arista-dcs
* cienacli-acos
* cisco-aireos
* cisco-asa
* cisco-gss
* cisco-ios
* cisco-iosxr
* cisco-nx
* cisco-qps
* cisco-staros
* ericsson-sgsnmme
* f5-bigip
* huawei-vrp
* juniper-junos

Note: Some of the devices in the health checks category are tested against netsim devices.

Forms

Ansible:

IAP can render most ansible networking modules as forms. Support for specific modules may vary. If you encounter issues with any particular modules, reach out to the Itential Product Support Team for assistance.

NSO:

IAP can render most service models advertised by NSO as forms. Support for specific yang features may vary. If you encounter issues with your service models, reach out to the Itential Product Support Team for assistance.

Service Provisioning

NSO:

IAP can provision most service models advertised by NSO. Support for specific yang features may vary. If you encounter issues with your service models, reach out to the Itential Product Support Team for assistance.

Devices/Services Compatibility

The Itential Automation Platform is tested against the following component versions.

Ansible Versions:

* 2.9.20
* 2.8.20
* 2.7.18

Ansible Modules:

* eos_facts
* eos_command
* eos_config
* ios_facts
* ios_command
* ios_config
* iosxr_facts
* iosxr_command
* iosxr_config
* nx_facts
* nx_command
* nx_config
* junos_facts
* junos_command
* junos_config

NSO Versions:

* 5.3.3.1
* 5.2.5
* 4.7.9
* 4.6.5

NSO NED Versions:

ned	4.6.5	4.7.9	5.2.5	5.3.3.1
a10-acos	3.15.3	3.8	3.18	3.18
adtran-aos	4.0.5	4.0.2	4.0.6	4.0.6
alu-sr	8.3	7.10.1	8.13.4	8.13.4 8.13.3
arista-dcs	5.7	5.2.12	5.20.2	5.20.2 5.20
checkpoint-gaiaos_rest	1.3.8	1.3.10	n/a	1.10.7 1.10.6
ciena-acos	6.1.5	6.0.8	6.2.5	6.2.5 6.2.4
cisco-aireos	3.3.20	3.3.18	3.7.2 3.7.1	3.7.2 3.7.1
cisco-asa	6.7.7	6.2.2	6.12.4	6.12.4 6.12.3
cisco-gss	2.1.1	2.0	2.1.1	2.1.1
cisco-ios	6.42.2	6.69	6.69 6.68.2	6.69 6.68.2
cisco-iosxr	7.18.2	7.33	7.33	7.33 7.32.5
cisco-nx	5.1.3	5.7.1	5.21.1	5.21.1 5.21
cisco-qps	5.1.2	5.1.0	5.1.3	5.1.3
cisco-staros	5.22.1	5.5.1	5.34.6 5.34.5	5.34.6 5.34.5
ericsson-sgsnmme	1.0.7	1.0.3	1.0.7	n/a
f5-bigip	3.7.13	3.17	3.17 3.16	3.17 3.16
fortinet-fortios	5.4	5.1.2	5.4.21	5.4.21 5.4.20
huawei-usn	1.2.1	1.1	1.2.1	n/a
huawei-vrp	6.1	6.17.4	6.17.4 6.17.3	6.17.4 6.17.3
juniper-junos	4.5.17	4.6.19	4.6.19 4.6.17	4.6.19 4.6.17
paloalto-panos_cli	4.3.1	4.8.2	4.8.2 4.8.1	4.8.2 4.8.1
radware-alteonos	2.4	2.1.1	2.4.1	2.4.1 2.4
unix-bind	2.0.17	2.0.10	2.1.0	2.1.0

VTS Versions:

* 2.6.2

VTS NED Versions:

ned	2.6.2
cisco-iosxr	6.6
cisco-ncs5500	1.0
cisco-nx	5.1.4

Virtual Devices:

* A10 vThunder 4.1.4 GR1
* Arista EOS-4.23.0FX
* Checkpoint R80.30-273.583
* Cisco ASAv 9.13.1.7
* Cisco CSR 17.02.01r
* Cisco NX 9.3.2, 9.3.1
* Cisco StarOS 21.15.29
* Cisco XR6.3.1
* F5 BIGIP 15.1.0.2-0.0.9
* Fortigate 6.4.0
* Juniper VMX 18.4R1
* Juniper VSRX 19.1R2
* PanOS 9.1.2
* Radware 32.6.0.0

IAP Browser Compatibility

This maintenance release was tested against the following browser versions:

* Firefox 80.0.1
* Chrome 85.0.4183.121
* Edge 85.0.564.63
* Internet Explorer 11