topic Re: Ansible support for "simple cluster" API in Ansible

Ansible support for "simple cluster" API

Harald_Hansen — Mon, 18 Oct 2021 08:54:10 GMT

Looking at the Check Point Ansible Mgmt Collection Github I cannot find any traces of the simple-cluster implementation in the API.

I know we can create plays directly the webservice API, though this requires the play to validate idempotency. I'd prefer if CP could do this validation, as you know the inner workings.

Re: Ansible support for "simple cluster" API

PhoneBoy — Wed, 20 Oct 2021 17:40:15 GMT

I suspect the reason it's not in the official module yet is precisely because the relevant operations aren't idempotent yet (something Ansible requires).

Re: Ansible support for "simple cluster" API

Harald_Hansen — Mon, 25 Oct 2021 12:09:16 GMT

We rely on Check Point providing fully supported feature sets to keep up with the competition. Is there any way to fast track basic feature parity with Azure Firewall and others in the automation realm?

Re: Ansible support for "simple cluster" API

PhoneBoy — Mon, 25 Oct 2021 21:37:40 GMT

I know we're working on this stuff, but I don't know the precise timelines.
If this is a requirement for you, I highly recommend reaching out to your local Check Point office.

Re: Ansible support for "simple cluster" API

Jim_Oqvist — Tue, 26 Oct 2021 09:44:34 GMT

Hi Harald,

R&D are always looking to receive feedback on which modules to add into the Ansible collection. I suggest you open a issue at: https://github.com/CheckPointSW/CheckPointAnsibleMgmtCollection/issues and request to have this module developed.

Kind Regards
Jim

Re: Ansible support for "simple cluster" API

Harald_Hansen — Tue, 26 Oct 2021 20:41:39 GMT

I really do expect CP to evolve their automation offerings with the slow expansion of API features.

Why should we prompt, create issues and end up on the back foot in projects where a basic feature set is expected?

Compare yourself to the competition, don't expect your customers to be the ones to raise issues, since that is a sign you're too late with the development.