Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure HTTP-based ARP information fetching from Palo Alto PIO-OS firewalls using management profiles #3147

Open
wants to merge 5 commits into
base: master
Choose a base branch
from

Commits on Nov 8, 2024

  1. Configuration menu
    Copy the full SHA
    d9a5f9c View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    548900c View commit details
    Browse the repository at this point in the history
  3. Update PaloaltoArp ipdevpoll plugin to use ManagementProfiles

    Prior to this commit, the netboxes handled by the PaloaltoArp
    ipdevpoll plugin used to be configured in the `ipdevpoll.conf`
    configuration file, but since the netboxes the plugin wants to
    handle (i.e. collect Arp information from) already should reside in
    the NAV database, this configuration is now instead done through the
    SeedDB tool by assigning a HTTP_API ManagementProfile (with `service`
    set `Palo Alto ARP` and api_key set to some secret API key) to the
    netboxes to be handled.
    
    The prior way to configure the netboxes handled by the PaloAltoArp
    plugin implicitly only allowed one API key per netbox (both enforced
    in code but also by the configuration syntax). With
    ManagementProfiles, it is perfectly possible to assign multiple
    profiles (e.g. configurations) of the same type but with different
    parameters (e.g. API keys) to the same netbox. Hence the new way to
    configure the netboxes allow many API keys per netbox. Thus the
    semantics of the plugin must change a little: For any given netbox,
    the plugin now assumes there may be multiple API keys, and uses the
    ARP results of first API key for which the _do_request method returns
    a successful response.
    
    IMPORTANT:
    This commit removes the ability to configure the netboxes
    handled by the PaloaltoArp plugin the NAV version 5.10 - 5.11 way
    through the `[paloaltoarp]` section in the `ipdevpoll.conf`
    configuration file.
    jorund1 committed Nov 8, 2024
    Configuration menu
    Copy the full SHA
    4b9d204 View commit details
    Browse the repository at this point in the history
  4. Configuration menu
    Copy the full SHA
    8503acf View commit details
    Browse the repository at this point in the history

Commits on Nov 14, 2024

  1. Configuration menu
    Copy the full SHA
    fe3a967 View commit details
    Browse the repository at this point in the history