2020.1.9 Maintenance Release [2021-02-02]

Changelog Overview

• 1 Improvements
• 36 Bug Fixes
• 2 Security Fixes
• 4 Chores
• 1 Deprecations
• 44 Total Tickets

Improvements

• pronghorn-core:10.19.4-2020.1.82 [01-26-2021] - Users can now enable or disable YANG validation constraints in forms.

Bug Fixes

• adapter-email:3.1.10-2020.1.6 [01-25-2021] - Removed method roles not listed in the root level roles array (these roles were not being created, nor were they shown in the auth config page).
• adapter-ldap:2.12.10-2020.1.4 [01-14-2021] - Added filter escaping to resolve login issue when the user has a common name attribute that contains special characters.
• adapter-nso:6.29.3-2020.1.42 [01-25-2021] - Fixed undefined iterate error when doing NETCONF queries.
• adapter-nso:6.29.3-2020.1.41 [01-19-2021] - Improved service models request time when an NSO adapter is down. Service Management page will now load with minimal delay.
• adapter-nso:6.29.3-2020.1.40 [01-05-2021] - Added detailed error message for checkSyncDevices.
• app-admin_essentials:1.0.0-2020.1.25 [01-20-2021] - Fixed an issue that prevented a Prebuilt from being removed when a JST component of that Prebuilt had a name duplication with another JST in the database.
• app-admin_essentials:1.0.0-2020.1.24 [01-18-2021] - Admin Essential home page link now navigates to the correct location.
• app-admin_essentials:1.0.0-2020.1.23 [01-15-2021] - Fixed issue in Pre-Built search when name includes a space.
• app-configuration_manager:3.43.14-2020.1.45 [01-07-2021] - Resolved issue where the manual remediation task dialog displayed blank results.
• app-mop:6.3.24-2020.1.19 [01-07-2021] - Fixed Cisco IOS/IOS-XR NED recognition when executing Ping task.
• app-mop:6.3.24-2020.1.18 [01-06-2021] - Fixed a bug where commands that run on devices through Ansible could produce different results from those that run through NSO.
• app-service_catalog:3.10.4-2020.1.11 [01-26-2021] - Updated schema to reflect correct return type for invokeServiceOrder method.
• app-service_catalog:3.10.4-2020.1.10 [01-08-2021] - Updated app-service_catalog peer dependencies.
• app-service_management:2.23.7-2020.1.16 [01-14-2021] - Removed duplicate call for service models.
• app-service_management:2.23.7-2020.1.15 [01-08-2021] - Updated app-service_management peer dependencies.
• app-service_management:2.23.7-2020.1.12 [01-05-2021] - Fixed filtering of instance items in service model list table when backspacing characters.
• app-workflow_builder:5.10.4-2020.1.45 [01-27-2021] - Removed method role not listed in top level roles.
• app-workflow_builder:5.10.4-2020.1.44 [01-08-2021] - Fixed an issue where workflow builder canvas search on job variables was not working on JST tasks.
• app-workflow_engine:7.14.4-2020.1.138 [01-27-2021] - Fixed regression in startJobWithOptions to correctly set up task execution and prevent early task executions in certain parallel cases.
• app-workflow_engine:7.14.4-2020.1.137 [01-27-2021] - Added default location to ensure application tasks run when no location property is defined on the task.
• app-workflow_engine:7.14.4-2020.1.136 [01-26-2021] - Fixed a bug that led to incorrect parsing of template variables in the task's input.
• app-workflow_engine:7.14.4-2020.1.135 [01-25-2021] - Improved performance of automation validation.
• app-workflow_engine:7.14.4-2020.1.134 [01-22-2021] - Modified error handling of crashed tasks in Workflow Engine start up to prevent heap memory build up.
• app-workflow_engine:7.14.4-2020.1.133 [01-22-2021] - Fixed a dependency bug in the generator for the upgrade level-of-effort (LoE) estimator script.
• app-workflow_engine:7.14.4-2020.1.132 [01-22-2021] - The ViewData task can parse incoming data of type number.
• app-workflow_engine:7.14.4-2020.1.131 [01-21-2021] - Workflow Engine views from legacy app-tools are now delegated for migration.
• app-workflow_engine:7.14.4-2020.1.130 [01-19-2021] - Changed the active tasks page to no longer redirect to the job details visualization view; this fixes an issue where completed task data was not showing and eliminates the need to manage a duplicate view.
• app-workflow_engine:7.14.4-2020.1.129 [01-18-2021] - Optimized auto-updates to the Active Tasks view to make it dependent on database current load.
• app-workflow_engine:7.14.4-2020.1.128 [01-14-2021] - Added error handling for callback invocation of tasks in worker index.
• itential-utils:2.6.3 [01-26-2021] - Added support for a template file in the generatePronghornJSON script.
• itential-utils:2.6.1 [01-19-2021] - Improved error message when failing to connect to Vault.
• pronghorn-core:10.19.4-2020.1.83 [01-27-2021] - Updated the audit-trail and service modules to fix crashed applications not correctly appearing on the System page and to expire redis keys at five (5) minutes.
• pronghorn-core:10.19.4-2020.1.81 [01-22-2021] - Fixed compatibility issues in Internet Explorer 11.
• pronghorn-core:10.19.4-2020.1.80 [01-21-2021] - Fixed a memory consumption error on the Profile and Service Config pages.
• pronghorn-core:10.19.4-2020.1.79 [01-18-2021] - Fixed an issue where adding groups to an adapter configuration that uses the device broker causes the devices to not be visible regardless of the user's group access.
• pronghorn-core:10.19.4-2020.1.78 [01-11-2021] - Updated CSP (Content Security Policy) to allow for Gitlab images in README files.

Security Fixes

• adapter-email:3.1.10-2020.1.5 [01-09-2021] - Updated nodemailer version to fix security vulnerability.
• app-service_management:2.23.7-2020.1.14 [01-05-2021] - Updated dependencies.

Chores

• app-configuration_manager:3.43.14-2020.1.46 [01-14-2021] - Updated MongoDB driver to fix the arbiter bug.
• app-service_catalog:3.10.4-2020.1.9 [01-05-2021] - Updated pronghorn.json schema.
• app-service_management:2.23.7-2020.1.13 [01-05-2021] - Updated pronghorn.json schema.
• app-template_builder:2.4.4-2020.1.6 [01-25-2021] - Updated database dependency for the MongoDB driver.

Deprecations

• itential-utils:2.6.2 [01-22-2021] - Deprecated DbIndexUtils and the ensureIndexes method. The DbUtils module and ensureCollectionIndexes method will be used instead.

2020.1.9 Release Versions

Automation Platform Versions

component	version
@itential/adapter-automation_gateway	4.0.0-2020.1.7
@itential/adapter-azure_aaa	1.1.2-2020.1.2
@itential/adapter-email	3.1.10-2020.1.6
@itential/adapter-ldap	2.12.10-2020.1.4
@itential/adapter-local_aaa	3.0.6-2020.1.3
@itential/adapter-mongo	2.9.4-2020.1.1
@itential/adapter-nso	6.29.3-2020.1.42
@itential/adapter-policy_engine	1.0.11-2020.1.0
@itential/adapter-prospector	1.6.16-2020.1.2
@itential/adapter-radius	2.0.6-2020.1.3
@itential/adapter-redis	2.0.10-2020.1.2
@itential/app-admin_essentials	1.0.0-2020.1.25
@itential/app-ag_manager	1.1.1-2020.1.15
@itential/app-automation_catalog	2.6.6-2020.1.24
@itential/app-automation_studio	2.0.14-2020.1.19
@itential/app-configuration_manager	3.43.14-2020.1.46
@itential/app-form_builder	4.2.23-2020.1.15
@itential/app-golden_config	5.18.3-2020.1.9
@itential/app-golden_services	1.5.2-2020.1.1
@itential/app-json_forms	1.14.10-2020.1.22
@itential/app-mop	6.3.24-2020.1.19
@itential/app-nso_manager	2.20.1-2020.1.8
@itential/app-policy_manager	3.44.1-2020.1.8
@itential/app-service_catalog	3.10.4-2020.1.11
@itential/app-service_management	2.23.7-2020.1.16
@itential/app-smart_template	1.9.4-2020.1.4
@itential/app-task_worker	3.1.4-2020.1.1
@itential/app-template_builder	2.4.4-2020.1.6
@itential/app-workflow_builder	5.10.4-2020.1.45
@itential/app-workflow_engine	7.14.4-2020.1.138
@itential/pronghorn-core	10.19.4-2020.1.83
@itential/search	1.1.6-2020.1.2
@itential/tags	2.2.12-2020.1.2
@itential/itential-utils	2.6.3

Automation Gateway Versions

component	version
automation_gateway	2.74.12-2020.1.20

NSO Manager Versions

component	version
itential-tools	1.23.18.2020.1.8
prospector	1.10.4-2020.1.1

Engine Versions

component	version
policy-engine	1.10.4-2020.1.0

Dependencies

Automation Platform Server

package	supported	recommended
nodejs	12.x	12.20.1
npm	6.x	6.14.8
python	2.x or 3.x	3.9.1

pip	supported	recommended
pip	any version	20.2.4
textfsm	1.x	1.1.0
Jinja2	2.x	2.11.2

The gcc-c++ and make packages should be installed from your OS distribution.

Mongo Server

package	supported	recommended
mongodb	3.6.x	3.6.20

RabbitMQ Server

package	supported	recommended
rabbitmq	3.8.x	3.8.9
erlang	21.3+ or 22.x	22.3.0
elixir	1.10.x	1.10.4
dedup	0.5.x	0.5.0

Redis Server

package	supported	recommended
redis	5.x	5.0.10

The gcc-c++ and make packages should be installed from your OS distribution.

Automation Gateway

package	supported	recommended
python	3.6	3.6.12
openssl	1.x	1.1.1i
haproxy	2.x	2.1.10

The gcc-c++ and make packages should be installed from your OS distribution.

The following development packages are required to install automation gateway: libffi-dev, openssl-dev, python-dev, sqlite-dev.

pip package	supported	recommended
pip	any version	20.2.4
ansible	2.7, 2.8 or 2.9	2.9.16

One or more of the following packages may be required by the specific ansible modules you're using: psutil, pycrypto, paramiko, ncclient, lxml, nitrosdk-python, jxmlease.

Check the ansible documentation for the roles you're planning to use for additional package requirements.

Prospector

package	supported	recommended
java	1.7 or 1.8	1.8.252.09

NSO/Itential Tools

package	supported	recommended
java	1.7 or 1.8	1.8.252.09

The ant package should be installed from your OS distribution.

IAP Compatibility

Device Configuration

Device Configuration compatibility describes which devices are expected to work with the basic features of the Configuration Manager application across various southbound systems.

Ansible:

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO:

Refer to the NSO Versions and NED Versions tables below for a list of tested devices.

Device Compliance

Device Compliance compatibility describes which devices are expected to work with Golden Configurations.

Ansible:

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO (Configuration Manager app):

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO (Golden Config app):

* a10-acos
* adtran-aos
* alu-sr
* arista-dcs
* cisco-ios
* cisco-iosxr
* cisco-nx
* cisco-staros
* f5-bigip
* huawei-vrp
* juniper-junos

Device Maintenance

Device Maintenance compatibility describes which devices Itential can perform maintenance activities on (e.g., reboots and firmware upgrades).

Ansible:

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Juniper Junos

NSO:

* cisco-ios
* cisco-iosxr
* juniper-junos

Device Health Checks

Device Health Checks compatibility describes which devices Itential can execute read-only show commands to use the method broker and Command Templates application.

Ansible:

* Arista EOS
* Cisco IOS
* Cisco IOSXR
* Cisco NX
* Juniper Junos

NSO:

* a10-acos
* alu-sr
* arista-dcs
* cienacli-acos
* cisco-aireos
* cisco-asa
* cisco-gss
* cisco-ios
* cisco-iosxr
* cisco-nx
* cisco-qps
* cisco-staros
* ericsson-sgsnmme
* f5-bigip
* huawei-vrp
* juniper-junos

Note: Some of the devices in the health checks category are tested against netsim devices.

Forms

Ansible:

IAP can render most ansible networking modules as forms. Support for specific modules may vary. If you encounter issues with any particular modules, reach out to the Itential Product Support Team for assistance.

NSO:

IAP can render most service models advertised by NSO as forms. Support for specific yang features may vary. If you encounter issues with your service models, reach out to the Itential Product Support Team for assistance.

Service Provisioning

NSO:

IAP can provision most service models advertised by NSO. Support for specific yang features may vary. If you encounter issues with your service models, reach out to the Itential Product Support Team for assistance.

Devices/Services Compatibility

The Itential Automation Platform is tested against the following component versions.

Ansible Versions:

* 2.7.18
* 2.8.18
* 2.9.16

Ansible Modules:

* eos_facts
* eos_command
* eos_config
* ios_facts
* ios_command
* ios_config
* iosxr_facts
* iosxr_command
* iosxr_config
* nx_facts
* nx_command
* nx_config
* junos_facts
* junos_command
* junos_config

NSO Versions:

* 5.3.3
* 5.2.4
* 4.7.8
* 4.6.5

NSO NED Versions:

ned	4.6.5	4.7.8	5.2.4	5.3.3
a10-acos	3.15.3	3.18	3.18	3.18
adtran-aos	4.0.5	4.0.6	4.0.5	4.0.5
alu-sr	8.3	8.13.3	8.13.3 8.13.2	8.13.3 8.13.2
arista-dcs	5.7	5.19	5.19 5.18.6	5.19 5.18.6
checkpoint-gaiaos_rest	1.3.8	1.10.6	1.10.6 1.10.5	1.10.6 1.10.5
ciena-acos	6.1.5	6.2.4	6.2.4 6.2.3	6.2.4 6.2.3
cisco-aireos	3.3.20	3.7.1	3.7.1 3.7	3.7.1 3.7
cisco-asa	6.7.7	6.12.4	6.12.4 6.12.3	6.12.4 6.12.3
cisco-gss	2.1.1	2.0	2.1.1	2.1.1
cisco-ios	6.42.2	6.67.12	6.67.12 6.67.11	6.67.12 6.67.11
cisco-iosxr	7.18.2	7.32.4	7.32.4 7.32.3	7.32.4 7.32.3
cisco-nx	5.1.3	5.20.7	5.20.7 5.20.6	5.20.7 5.20.6
cisco-qps	5.1.2	5.1.0	5.1.2	5.1.2
cisco-staros	5.22.1	5.34.5	5.34.5 5.34.4	5.34.5 5.34.4
ericsson-sgsnmme	1.0.7	1.0.3	1.0.7	1.0.7
f5-bigip	3.7.13	3.16	3.16 3.15.5	3.16 3.15.5
fortinet-fortios	5.4	5.4.21	5.4.21 5.4.20	5.4.21 5.4.20
huawei-usn	1.2.1	1.1	1.2.1	1.2.1
huawei-vrp	6.1	6.16.3	6.16.3 6.16.2	6.16.3 6.16.2
juniper-junos	4.5.17	4.6.16	4.6.16 4.6.15	4.6.16 4.6.15
paloalto-panos_cli	4.3.1	4.8	4.8 4.2.9.4	4.8 4.2.9.4
radware-alteonos	2.4	2.1.1	2.3	2.4
unix-bind	2.0.17	2.0.10	2.0.16	2.0.17

VTS Versions:

* 2.6.2

VTS NED Versions:

ned	2.6.2
cisco-iosxr	6.6
cisco-ncs5500	1.0
cisco-nx	5.1.4

Virtual Devices:

* A10 vThunder 4.1.4 GR1
* Arista EOS-4.23.0FX
* Checkpoint R80.30-273.583
* Cisco ASAv 9.13.1.7
* Cisco CSR 17.02.01r
* Cisco NX 9.3.2, 9.3.1
* Cisco StarOS 21.15.29
* Cisco XR6.3.1
* F5 BIGIP 15.1.0.2-0.0.9
* Fortigate 6.4.0
* Juniper VMX 18.4R1
* Juniper VSRX 19.1R2
* PanOS 9.1.2
* Radware 32.6.0.0

IAP Browser Compatibility

This maintenance release was tested against the following browser versions:

* Firefox 80.0.1
* Chrome 85.0.4183.121
* Edge 85.0.564.63
* Internet Explorer 11