Hi,
I have currently deployed an R82 Check Point Management Server and R82 Security Gateway via Terraform in our on-premise VMware environment. We use Jenkins pipelines to deploy the Terraform code that is stored in GitHub Enterprise.
The code works well to provision the Virtual Machines, and run all day one tasks, such as running the first time configuration wizard and adding the gateway into the Management server with the provided SIC one-time password.
I am now looking at how to perform "day 2" tasks for the ongoing management of the security gateway now it has been deployed. One specific scenario is looking at how to add a static route onto the gateway. I have been looking at the "checkpoint_management_gaia_api" terraform command to connect to the Check Point Management server and run the gaia_api command on the gateway to add the static route. Link to Terraform resource below:
checkpoint_management_gaia_api | Resources | CheckPointSW/checkpoint | Terraform | Terraform Registr...
Monitoring the /var/log/gaia_api_server.log file on the Gateway I can see that the Management Server successfully logs into the gateway api and tries to POST the "set-static-route" api call to the gateway. It fails with the error:
"ERROR: Failed to handle request, reason: 'address is required, mask-length is required, type is required'"
The Terraform code I am using is below (X.X.X.X and Y.Y.Y.Y has been used to hide the real IP addresses):
resource "checkpoint_management_command_gaia_api" "add_static_route" {
target = checkpoint_management_simple_gateway.cpgw01.name
command_name = "set-static-route"
other_parameter = <<EOT
'{
"address" : "X.X.X.X",
"mask-length" : "22",
"next-hop" : {
"gateway" : "Y.Y.Y.Y",
"priority" : "2"
},
"rank" : "25",
"type" : "gateway",
"comment" : "Added via Terraform"
}'
EOT
}
Does anyone have any suggestions on how to get this working? Is there a different Terraform resource that could be used to perform changes on the gateways after it has been deployed?
Thanks in advance for your help,
Andy
