2020.1.18 Maintenance Release [2021-12-07]

Changelog Overview

• 4 Improvements
• 48 Bug Fixes
• 2 Security Fixes
• 4 Chores
• 2 Tests
• 60 Total Tickets

Improvements

• app-workflow_builder:5.10.4-2020.1.79 [10-29-2021] - Updated the error message that is displayed when no matching transformation is found for a transformation task to now include the missing id of the transformation.
• app-workflow_engine:7.14.4-2020.1.235 [10-26-2021] - Prevent task worker activation during shutdown.
• pronghorn-core:10.19.4-2020.1.191 [11-01-2021] - IAP now waits to process events until every service is ready. IAP also stops listening to events on shutdown.
• search:1.1.6-2020.1.4 [11-02-2021] - Added a pagination feature to the Global Search to view an unlimited number of search results.

Bug Fixes

• adapter-automation_gateway:4.0.0-2020.1.12 [11-04-2021] - Fixed IAG adapter health check error message format.
• adapter-azure_aaa:1.1.2-2020.1.4 [11-05-2021] - Group synchronization now has a minimum interval of 60 seconds.
• app-admin_essentials:1.0.0-2020.1.40 [11-04-2021] - Fixed a bug the prevented editing of artifact/pre-built content that includes a transformation.
• app-automation_catalog:2.6.6-2020.1.43 [11-22-2021] - Fixed invalid permissions assigned to a 'readonly' role in Automation Catalog.
• app-automation_catalog:2.6.6-2020.1.42 [11-22-2021] - Fixed a bug that caused focus loss when editing the description field in the create automation dialogue.
• app-automation_studio:2.0.14-2020.1.49 [11-18-2021] - Fixed issue with searching special characters in the side navigation bar and card list.
• app-automation_studio:2.0.14-2020.1.48 [11-11-2021] - Fixed user role permissions.
• app-configuration_manager:3.43.14-2020.1.68 [11-29-2021] - Corrected a bug in the createDeviceGroup API call that caused Configuration Manager to crash when invalid input data was passed. Input parameters for the API are now validated as a comma separated string.
• app-configuration_manager:3.43.14-2020.1.67 [11-22-2021] - Modified the DevicePicker component to resolve an issue with selecting/deselecting managed devices from the AvailableDevices list and removing devices from the SelectedDevices list.
• app-form_builder:4.2.23-2020.1.29 [11-16-2021] - Transformations can now be searched by ID in Form Builder.
• app-jst:1.0.0-2020.1.30 [11-19-2021] - Opening a transformation that does not exist in the database now displays an error toast.
• app-jst:1.0.0-2020.1.29 [11-17-2021] - Updating a transformation that was previously missing a created or lastUpdated property no longer errors.
• app-jst:1.0.0-2020.1.28 [11-16-2021] - Updated the migration logic for the update transformation endpoint so that it will remove the migrated property and update the version property.
• app-jst:1.0.0-2020.1.27 [11-10-2021] - Updated the updateTransformation endpoint to prevent duplicate names when importing.
• app-mop:6.3.24-2020.1.33 [11-22-2021] - Fixed a bug that caused search results to display incorrectly in the templates section of the side navigation bar.
• app-mop:6.3.24-2020.1.32 [11-18-2021] - Transformations can now be searched by ID in app-mop.
• app-service_management:2.23.7-2020.1.18 [11-02-2021] - Fixed invalid rendering of device modifications dialog window.
• app-template_builder:2.4.4-2020.1.17 [10-26-2021] - Fixed a Template Builder error that occurred when running in Python 2. This fix resolves parsing errors in Jinja2 templates with integer data types.
• app-workflow_builder:5.10.4-2020.1.88 [11-30-2021] - Rolled back an update which could cause an error decoding workflows with white spaces.
• app-workflow_builder:5.10.4-2020.1.87 [11-29-2021] - Fixed a bug that allowed an XSS threat when listing tasks in the sidebar.
• app-workflow_builder:5.10.4-2020.1.86 [11-23-2021] - Fixed cross site scripting (XSS) vulnerability when editing child job task.
• app-workflow_builder:5.10.4-2020.1.85 [11-22-2021] - Made changes to payload validation when renaming a Gen 2 workflow.
• app-workflow_builder:5.10.4-2020.1.84 [11-19-2021] - Transformation task options in Gen 1 workflows are now consistent with Gen 2 workflows; they are now hidden by default instead of disabled.
• app-workflow_builder:5.10.4-2020.1.83 [11-17-2021] - Fixed a bug that resulted in an XSS threat when the user inserted HTML code in a global search field.
• app-workflow_builder:5.10.4-2020.1.82 [11-17-2021] - Added graceful handling of scenario when user has no group permissions to edit a given automation.
• app-workflow_builder:5.10.4-2020.1.81 [11-11-2021] - Fixed a bug that caused missing tooltip info for task's input variables during edit.
• app-workflow_builder:5.10.4-2020.1.80 [11-09-2021] - Importing a transformation from the transformation task now updates any matching transformations.
• app-workflow_engine:7.14.4-2020.1.253 [11-29-2021] - Modified the code logic in Workflow Engine Scheduler to address all possible window time range scenarios.
• app-workflow_engine:7.14.4-2020.1.252 [11-29-2021] - Updated job details page layout.
• app-workflow_engine:7.14.4-2020.1.251 [11-19-2021] - Fixed bug where invalid input to the searchTasks API could crash Workflow Engine.
• app-workflow_engine:7.14.4-2020.1.249 [11-18-2021] - Added GBAC from a parent job to all subsequent child jobs.
• app-workflow_engine:7.14.4-2020.1.248 [11-16-2021] - Fixed a bug that allowed cancellation of a completed job.
• app-workflow_engine:7.14.4-2020.1.247 [11-15-2021] - Added error handling when reverting a task of a non-existing job_id.
• app-workflow_engine:7.14.4-2020.1.246 [11-15-2021] - Improved error handling of getManualTaskController API. Fixed issue where Workflow Engine would crash if an invalid taskId is passed.
• app-workflow_engine:7.14.4-2020.1.245 [11-14-2021] - Improved error handling to fix a bug where an invalid filter passed into the getAssociatedJobs API could crash Workflow Engine.
• app-workflow_engine:7.14.4-2020.1.244 [11-13-2021] - Fixed a MongoDB error in the createJobGroupEntry API which caused it to fail.
• app-workflow_engine:7.14.4-2020.1.243 [11-13-2021] - Fixed an issue where jobs were hanging due to an internal call on an undefined property.
• app-workflow_engine:7.14.4-2020.1.242 [11-09-2021] - Modified the activate API to only create new RabbitMQ connections on the first activation.
• app-workflow_engine:7.14.4-2020.1.241 [11-09-2021] - Fixed an issue where some job watchers were created as a string and not as an ObjectId.
• app-workflow_engine:7.14.4-2020.1.240 [11-07-2021] - Fixed a bug that prevented a workflow from saving when using the merge and deepmerge tasks. Added a validation check to ensure the data_to_merge input variable is an Array and not an empty string.
• app-workflow_engine:7.14.4-2020.1.239 [11-03-2021] - Fixed incorrect sorting of active jobs on the Active Jobs page. Users can now sort by start date and percentage of jobs done.
• app-workflow_engine:7.14.4-2020.1.238 [11-02-2021] - Error toast message now displays when a user is not allowed to cancel a job.
• app-workflow_engine:7.14.4-2020.1.237 [10-30-2021] - Fixed a bug that prevented the Child Jobs from displaying when moving back and forth between Collapse/Expand Child Job View.
• itential-utils:2.7.3 [11-08-2021] - Added PATCH method handling to resolve errors that occurred when generating the pronghorn.json config file.
• pronghorn-core:10.19.4-2020.1.196 [11-18-2021] - Removed unnecessary log.warn message from the getAuthGroupsShortList API.
• pronghorn-core:10.19.4-2020.1.195 [11-16-2021] - Added a restriction that prevents service configuration of the log directory without write permissions.
• pronghorn-core:10.19.4-2020.1.193 [11-09-2021] - Fixed a bug that resulted in an XSS threat when the user inserted HTML code in a global search field.
• pronghorn-core:10.19.4-2020.1.190 [10-29-2021] - Set the /version endpoint to public for the non-pronghorn.admin user experience.

Security Fixes

• app-configuration_manager:3.43.14-2020.1.66 [11-09-2021] - Updated the Axios dependency to resolve security concerns.
• pronghorn-core:10.19.4-2020.1.194 [11-13-2021] - Updated Ajv dependency versions to remove a security vulnerability.

Chores

• app-admin_essentials:1.0.0-2020.1.41 [11-16-2021] - Updated package.json dependencies to latest version.
• app-jst:1.0.0-2020.1.31 [11-22-2021] - Updated jst-designer dependency to latest version.
• app-jst:1.0.0-2020.1.26 [10-29-2021] - Updated JST Designer dependency to latest version.
• pronghorn-core:10.19.4-2020.1.192 [11-02-2021] - Updated the .prettierrc.js file to have 'arrowParens' set to 'avoid'.

Tests

• app-workflow_engine:7.14.4-2020.1.250 [11-19-2021] - Completed the API test refactor for API Test Refactor:[2020.1] workflowsVariables.get.js.
• app-workflow_engine:7.14.4-2020.1.236 [10-29-2021] - Moved getEntireJob.get.js file to the proper location. Also edited the test workflow by removing additionalProperties schema violations.

2020.1.18 Release Versions

Automation Platform Versions

component	version
@itential/adapter-automation_gateway	4.0.0-2020.1.12
@itential/adapter-azure_aaa	1.1.2-2020.1.4
@itential/adapter-email	3.1.10-2020.1.8
@itential/adapter-ldap	2.12.10-2020.1.8
@itential/adapter-local_aaa	3.0.6-2020.1.7
@itential/adapter-mongo	2.9.4-2020.1.1
@itential/adapter-nso	6.29.3-2020.1.62
@itential/adapter-prospector	1.6.16-2020.1.3
@itential/adapter-radius	2.0.6-2020.1.4
@itential/adapter-redis	2.0.10-2020.1.3
@itential/app-admin_essentials	1.0.0-2020.1.41
@itential/app-ag_manager	1.1.1-2020.1.17
@itential/app-automation_catalog	2.6.6-2020.1.43
@itential/app-automation_studio	2.0.14-2020.1.49
@itential/app-configuration_manager	3.43.14-2020.1.68
@itential/app-form_builder	4.2.23-2020.1.29
@itential/app-golden_config	5.18.3-2020.1.13
@itential/app-golden_services	1.5.2-2020.1.1
@itential/app-json_forms	1.14.10-2020.1.35
@itential/app-jst	1.0.0-2020.1.31
@itential/app-mop	6.3.24-2020.1.33
@itential/app-nso_manager	2.20.1-2020.1.12
@itential/app-service_catalog	3.10.4-2020.1.12
@itential/app-service_management	2.23.7-2020.1.18
@itential/app-smart_template	1.9.4-2020.1.4
@itential/app-task_worker	3.1.4-2020.1.2
@itential/app-template_builder	2.4.4-2020.1.17
@itential/app-workflow_builder	5.10.4-2020.1.88
@itential/app-workflow_engine	7.14.4-2020.1.253
@itential/pronghorn-core	10.19.4-2020.1.196
@itential/search	1.1.6-2020.1.4
@itential/tags	2.2.12-2020.1.6
@itential/itential-utils	2.7.3

Automation Gateway Versions

component	version
automation_gateway	2.74.12-2020.1.35

NSO Manager Versions

component	version
itential-tools	1.23.18.2020.1.18
prospector	1.10.4-2020.1.1

Engine Versions

component	version
policy-engine	1.10.4+2020.1.0

Dependencies

Automation Platform Server

package	supported	recommended
nodejs	12.x	12.22.3
npm	6.x	6.14.15
python	2.x or 3.x	3.9.8

pip	supported	recommended
pip	any version	20.3.4
textfsm	1.x	1.1.2
Jinja2	2.x	2.11.3

The gcc-c++ and make packages should be installed from your OS distribution.

Mongo Server

package	supported	recommended
mongodb	3.6.x or 4.2.x	4.2.13

RabbitMQ Server

package	supported	recommended
rabbitmq	3.8.x	3.8.14
erlang	21.3+ or 22.x	22.3.1
elixir	1.10.x	1.10.4
dedup	0.5.x	0.5.0

Redis Server

package	supported	recommended
redis	5.x	5.0.12

The gcc-c++ and make packages should be installed from your OS distribution.

Automation Gateway

package	supported	recommended
python	3.6	3.6.15
openssl	1.x	1.1.1l
haproxy	2.x	2.2.13

The gcc-c++ and make packages should be installed from your OS distribution.

The following development packages are required to install automation gateway: libffi-dev, openssl-dev, python-dev, sqlite-dev.

pip package	supported	recommended
pip	any version	20.2.4
ansible	2.7, 2.8 or 2.9	2.9.27
terraform	0.12.x	0.12.31

One or more of the following packages may be required by the specific ansible modules you're using: psutil, pycrypto, paramiko, ncclient, lxml, nitrosdk-python, jxmlease.

Check the ansible documentation for the roles you're planning to use for additional package requirements.

Prospector

package	supported	recommended
java	1.7 or 1.8	1.8.275.01

NSO/Itential Tools

package	supported	recommended
java	1.7 or 1.8	1.8.275.01

The ant package should be installed from your OS distribution.

IAP Compatibility

Device Configuration

Device Configuration compatibility describes which devices are expected to work with the basic features of the Configuration Manager application across various southbound systems.

Ansible:

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO:

Refer to the NSO Versions and NED Versions tables below for a list of tested devices.

Device Compliance

Device Compliance compatibility describes which devices are expected to work with Golden Configurations.

Ansible:

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO (Configuration Manager app):

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO (Golden Config app):

* a10-acos
* adtran-aos
* alu-sr
* arista-dcs
* cisco-ios
* cisco-iosxr
* cisco-nx
* cisco-staros
* f5-bigip
* huawei-vrp
* juniper-junos

Device Maintenance

Device Maintenance compatibility describes which devices Itential can perform maintenance activities on (e.g., reboots and firmware upgrades).

Ansible:

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Juniper Junos

NSO:

* cisco-ios
* cisco-iosxr
* juniper-junos

Device Health Checks

Device Health Checks compatibility describes which devices Itential can execute read-only show commands to use the method broker and Command Templates application.

Ansible:

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO:

* a10-acos
* alu-sr
* arista-dcs
* cienacli-acos
* cisco-aireos
* cisco-asa
* cisco-gss
* cisco-ios
* cisco-iosxr
* cisco-nx
* cisco-qps
* cisco-staros
* ericsson-sgsnmme
* f5-bigip
* huawei-vrp
* juniper-junos

Note: Some of the devices in the health checks category are tested against netsim devices.

Forms

Ansible:

IAP can render most ansible networking modules as forms. Support for specific modules may vary. If you encounter issues with any particular modules, reach out to the Itential Customer Success Team for assistance.

NSO:

IAP can render most service models advertised by NSO as forms. Support for specific yang features may vary. If you encounter issues with your service models, reach out to the Itential Customer Success Team for assistance.

Service Provisioning

NSO:

IAP can provision most service models advertised by NSO. Support for specific yang features may vary. If you encounter issues with your service models, reach out to the Itential Customer Success Team for assistance.

Devices/Services Compatibility

The Itential Automation Platform is tested against the following component versions.

Ansible Versions:

* 2.9.27
* 2.8.20
* 2.7.18

Ansible Modules:

* eos_facts
* eos_command
* eos_config
* ios_facts
* ios_command
* ios_config
* iosxr_facts
* iosxr_command
* iosxr_config
* nx_facts
* nx_command
* nx_config
* junos_facts
* junos_command
* junos_config

NSO Versions:

* 5.3.3.1
* 5.2.5
* 4.7.9
* 4.6.5

NSO NED Versions:

ned	4.6.5	4.7.9	5.2.5	5.3.3.1
a10-acos	3.15.3	3.8	3.18	3.18
adtran-aos	4.0.5	4.0.2	4.0.6	4.0.6
alu-sr	8.3	7.10.1	8.13.4	8.13.4 8.13.3
arista-dcs	5.7	5.2.12	5.20.2	5.20.2 5.20
checkpoint-gaiaos_rest	1.3.8	1.3.10	n/a	1.10.7 1.10.6
ciena-acos	6.1.5	6.0.8	6.2.5	6.2.5 6.2.4
cisco-aireos	3.3.20	3.3.18	3.7.2 3.7.1	3.7.2 3.7.1
cisco-asa	6.7.7	6.2.2	6.12.4	6.12.4 6.12.3
cisco-gss	2.1.1	2.0	2.1.1	2.1.1
cisco-ios	6.42.2	6.69	6.69 6.68.2	6.69 6.68.2
cisco-iosxr	7.18.2	7.33	7.33	7.33 7.32.5
cisco-nx	5.1.3	5.7.1	5.21.1	5.21.1 5.21
cisco-qps	5.1.2	5.1.0	5.1.3	5.1.3
cisco-staros	5.22.1	5.5.1	5.34.6 5.34.5	5.34.6 5.34.5
ericsson-sgsnmme	1.0.7	1.0.3	1.0.7	n/a
f5-bigip	3.7.13	3.17	3.17 3.16	3.17 3.16
fortinet-fortios	5.4	5.1.2	5.4.21	5.4.21 5.4.20
huawei-usn	1.2.1	1.1	1.2.1	n/a
huawei-vrp	6.1	6.17.4	6.17.4 6.17.3	6.17.4 6.17.3
juniper-junos	4.5.17	4.6.19	4.6.19 4.6.17	4.6.19 4.6.17
paloalto-panos_cli	4.3.1	4.8.2	4.8.2 4.8.1	4.8.2 4.8.1
radware-alteonos	2.4	2.1.1	2.4.1	2.4.1 2.4
unix-bind	2.0.17	2.0.10	2.1.0	2.1.0

VTS Versions:

* 2.6.2

VTS NED Versions:

ned	2.6.2
cisco-iosxr	6.6
cisco-ncs5500	1.0
cisco-nx	5.1.4

Virtual Devices:

* A10 vThunder 4.1.4 GR1
* Arista EOS-4.23.0FX
* Checkpoint R80.30-273.583
* Cisco ASAv 9.13.1.7
* Cisco CSR 17.02.01r
* Cisco NX 9.3.2, 9.3.1
* Cisco StarOS 21.15.29
* Cisco XR6.3.1
* F5 BIGIP 15.1.0.2-0.0.9
* Fortigate 6.4.0
* Juniper VMX 18.4R1
* Juniper VSRX 19.1R2
* PanOS 9.1.2
* Radware 32.6.0.0

IAP Browser Compatibility

This maintenance release was tested against the following browser versions:

* Firefox 80.0.1
* Chrome 85.0.4183.121
* Edge 85.0.564.63
* Internet Explorer 11