topic Re: Anisble support for simple cluster and SIC in Ansible

Anisble support for simple cluster and SIC

RMM — Tue, 05 Dec 2023 14:37:45 GMT

I am using check_point.mgmt.cp_mgmt_simple_cluster module to create a cluster with two members.

When I create the resource the first time Ansible creates the cluster, the members and establishes the SIC using the one_time_password. If i make any changes to the existing resource using Ansible the resource is changes as desired, but the module also breaks the trust relationship (SIC).

So, the module can only be used once to create a cluster with trusted members, but cannot be used to maintain the config of these members.

It can be reproduces to use the simple cluster task and create the resource and members (with one_time_password per member specified). Then make a change e.g. the cluster color and re-run the playbook. After applying the change the SIC is broken.

Re: Anisble support for simple cluster and SIC

PhoneBoy — Tue, 05 Dec 2023 19:37:00 GMT

What version/JHF of gateways and management?
What version of the Ansible collection?

Re: Anisble support for simple cluster and SIC

RMM — Wed, 06 Dec 2023 10:20:05 GMT

Hi @PhoneBoy ,

The versions used are:

management: R81.10

gateways: R81.10

Anisble collection: 5.1.1

Re: Anisble support for simple cluster and SIC

PhoneBoy — Wed, 06 Dec 2023 14:25:41 GMT

What JHF?
In any care, this will most likely require TAC assistance: https://help.checkpoint.com

Re: Anisble support for simple cluster and SIC

RMM — Wed, 06 Dec 2023 15:18:56 GMT

R81.10 jumbo hotfix Take 95

Re: Anisble support for simple cluster and SIC

Erik_Lagzdins — Mon, 18 Dec 2023 17:09:56 GMT

I believe there's an issue with the module and I will report it internally.

I was able to replicate the problem with an R81.20 JHF14 MDS and the latest Mgmt modules (5.1.3). I can confirm I was not able to replicate the problem with the cp_mgmt_simple_gateway module, only the cp_mgmt_simple_cluster module.

Re: Anisble support for simple cluster and SIC

RMM — Tue, 19 Dec 2023 07:51:52 GMT

Thanks a lot Erik.

A bit offtopic, but it seems a similar problem exists in the Terraform provider as well for simple cluster.