Ansible module collection for Check Point host facts and Deployment Agent

[Duane_Toler]

This is an Ansible module collection for additional tasks on Check Point hosts:

https://github.com/Webfargo/ansible-collection-check_point/

webfargo.check_point.da_command:       Run arbitrary da_cli commands 
webfargo.check_point.da_package:       Manage Check Point packages via the Deployment Agent 
webfargo.check_point.da_package_info:  Query Check Point Deployment Agent package information 
webfargo.check_point.da_status:        Get Check Point Deployment Agent status 
webfargo.check_point.gather_facts:     Gather Check Point Gaia OS specific facts

Install from Ansible Galaxy:

ansible-galaxy collection install webfargo.check_point

Direct install from GitHub with ansible-galaxy:

ansible-galaxy collection install git+https://github.com/Webfargo/ansible-collection-check_point.git

The gather_facts module includes these Check Point host facts:

• Check Point version (R81.20, R82, R82.10, etc.)
• Installed hotfix versions (for all installed products)
• Host type (gateway/management/standalone)
• OS code name and build number
• Deployment Agent build number
• SIC certificate info
• Hardware platform
• VSX status
• Cluster/HA status
• Check Point SNMP daemon status
• Firewall policy status (if gateway)

The Deployment Agent modules include:

• Verify, Install, Uninstall packages
• Blink and clean-install/upgrade packages
• Import packages from local disk
• Update package repository
• Query package repository
• Check Deployment Agent status
• Run arbitrary Deployment Agent commands

Package install/uninstall operations will poll the Deployment Agent task continuously to monitor the progress. When the host reboots, the status is monitored to return a successful status rather than dropping the connection. The Ansible module wait_for_connection can be used to monitor the host's reboot operation.

For Blink package upgrades, the multi-stage reboot is monitored by the da_package module to check the stage 2 operation rather than dropping the SSH connection.

Packages can be copied with the Ansible module ansible.builtin.copy and imported to the package repository.

Although R82 has introduced package management with the management API,  there may be times when direct package management may be necessary on the remote host.  For those without R82 yet, this could help you get there! 

[Duane_Toler]

v0.7.0 has been release, fixing some bugs, install and upgrade state oddities encountered recently:

https://github.com/Webfargo/ansible-collection-check_point/tree/v0.7.0

Change Log included, too: https://github.com/Webfargo/ansible-collection-check_point/blob/v0.7.0/CHANGELOG.md